Home

ZXR10 2920/2928/2952(V1.0) Access Switch User Manual (Volume I)

1. 2 40 42 14 r4 r m in p ae 7 Boop oi j Eo SAAFERSIBKSG Ay l b i vut duos Jun zuuk Junii Umm EY TX wx W ACT ESD wok EU zm zi aue e e eg FS LNK O Go soll iL eq d E c od 5 ge t ga ml A b 1 3 9 4 17 i 2 4 amp 8 10 12 14 186 18 24 i jp ip 1c i l l j Tt l A FEB S15KSC E DE I I H uH f LN gt IIN l Junk Jmm 2 Kus ls nu Kis dub A Mul Ai Al imma A x ty AG uw TUNE yj pm mm e mre mp zm jme zmmmp ge e mmm puu sys O d 13 rq ei a IGE oaa Gee ye SG eee fi CONSOLE m 25 TEEN VADER TES EATER EA ERA EAE AUS ERROR EUER RUE UE SONORA RS EA 7 ILL i JE MI l mmm RUN 2 O oma h Ji JE dh JC JU 6 A A Jb A It XO ai il X ll CONSOL 2H A 6 5 a 10 8 12n1 14 13 18 15 1817 20 19 22 21 RX TX NL a 1 Case 2 Pad Switch Installation onto a Cabinet Installation To install the switch into the 19 inch cabinet install a flange to Procedures each of the two sides of the switch shell
2. eee 174 Table 287 Clear Accounting Stop Command 174 Table 288 Show Radius Command ee eese eee 174 Table 289 Set QinQ Customer Port Command 179 Table 290 Set QinQ Uplink Port Command ees 179 Table 291 Set QinQ Tpid Command nnne 179 Table 292 Show QinQ Command eennm nnn 179 Table 293 Set SQinQ Session Command eene 181 Table 294 Qos Remark In SQinQ Command 181 Table 295 Clear Policy QOS Command enm 182 Table 296 Set Policy Policing Command 182 Table 297 Clear Policy Policing Command 182 Table 298 Set Policy Redirect Command eese 182 Table 299 Clear Policy Redirect Command 183 Table 300 Set Policy Statistics Command sese 183 Table 301 Clear Policy Statistics Command 183 Table 302 Set Port SQinQ Session Command 183 Table 303 Clear SQinQ Session Command s 184 Table 304 Show SQinQ Session Command s 184 Table 305 Syslog Information enn 185 Table 306 Set Syslog Command een 186 Table 307 Set Syslog Level Command eene 186 Table 308 Set Syslog Server Command eese 186 Table 309 S
3. enn nnn 120 Table 178 Set Stp Revision Command cccceeseeeeeeeeeeeeeees 120 Table 179 Set Stp Trunk Command een 120 Table 180 Set Stp Trunk Linktype Command 120 Table 181 Set Stp Trunk Packettype Command 121 Table 182 Show Stp Command eene 121 Table 183 Show Stp Instance Command se 121 Table 184 Show Stp Port Command nnn 121 Table 185 Show Stp Trunk Command eene 122 Table 186 Show Stp Relay Command eene 122 Table 187 ACL Description eee nnnm mnm 126 Table 188 ACL Basic Number Command 126 Table 189 Rule Command eeeeeeeeeee eere 126 Table 190 Config ACL Extend Command eese 127 Table 191 Rule Command eee 127 Table 192 Config ACL Link Command enn 128 Table 193 Rule Command eeeeeeeeeee eere 128 Table 194 Config ACL Hybrid Command eene 129 Table 195 Rule Command eere eere 129 Table 196 Config ACL Global Command eene 130 Table 197 Rule COMMANG ccc eee eee e ee eeeeeeeeeeanaas 130 Table 198 Set Time Range Command eene 131 Table 199 Port Commands ccena 132 Table 200 Set Qos Dscp Command enn 1
4. Table 396 Set Zdp Timer Command Table 397 Show Zdp Command Table 398 Show Zdp Neighbor Command Table 399 Set Ztp Command enne Table 400 Set Ztp Port Command Table 401 Set Ztp Trunk Command Table 402 Set ZTP Commands esee Table 403 Ztp Start Command eene Table 404 Show Start Command Table 405 Ztp Mac Command enne Table 406 Show Ztp Device Command Table 407 Set Group Candidate Command Table 408 Set Group Independent Command Table 409 Set Group Command eene Table 410 Set Group Add Mac Command Table 411 Set Group Add Mac Command Table 412 Set Group Add Device Command Table 413 Set Group Delete Member Command Table 414 Set Group Name Command Table 415 Set Group Handtime Command Table 416 Set Group Holdtime Command Table 417 Set Group Syslogsvr Command Table 418 Set Group Tftpsvr Command Table 419 Rlogin Member Command Table 420 Rlogin Commander Command Table 421 Tftp Commander Command Table 422 Save Member Command Table 423 Erase Me
5. Configuring Port Statistics Purpose This topic describes the configuration of port statistics Steps For the configuration of port statistics perform the following steps 1 Click the catalog tree in the left of the system main page Monitoring Port Statistics to open the port statistics information page as shown in Figure 66 282 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 9 Network Management FIGURE 66 STATISTICAL INFORMATION Ay ZTE switch Microsoft Internet Explorer UH 81 x XE MEDO BSW KRA TAD 8B Ea HAE gt Ol a Quer mx gue oi 2 wj sa Hitik D http 192 168 1 3 index htm UID 8001 12 sr vj ess ume ZXR10 5124 FI Configuration gt System Port gt Part State gt Port Parameter QS VLAN gt vlan Overview gt vlan Configure Q3 PVLAN gt Pvlan Overview ZIEPSM ZXR105124 Fl 120 Refresh Port Statistics Pvlan Configure PortNumber pots x is ReceivedBytes 103217 Lacp Port ReceivedFrames 853 P Lacp State ReceivedBroadcastFrames 84 DN Log ReceivedMulticastFrames 0 Port Statistics OversizeFrames 0 Running Config UndersizeF rames 0 ne CreError 0 Reboot SendBytes 333903 gt Upload SendFrames 1015 User Manager SendBroadcastFrames B SendMulticastFrames 76 Refresh Retum Logout All rights reserved ZTE Corporation AE EE EH Intranet 2 Cl
6. END OF STEPS Result Global ACL has been configured 130 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Purpose Steps Result Purpose Steps Chapter 7 Service Configuration Configuring Time Range This topic describes the configuration of time range For the configuration of time range perform the following step 1 To configure time range use command set time range time name range _ period absolute lt start time gt to lt end time gt daily day off day working monday tuesday wednesday thursday friday saturday sunday in global configuration mode This is shown in Table 198 TABLE 198 SET TIME RANGE COMMAND Format Mode Function set time range lt time name gt range period absolute lt start time gt to lt end time gt daily day off day working monday tuesday wednesday thursday friday saturday sunday This configures global config time range Result This configures time range gt Configuration of time range per day Specify the start time and end time per day Configuration of period range Specify the period as a date every week Configuration of date range Specify the start time and end time If not configuring range the date range refers from the effective date of the configuration to the maximum date of the system END OF STEPS Time range has been configured Configuring ACL to a Phy
7. Hihik D http 192 168 1 3 index htm UID 800112 matr mim wj era ume A3 ZXR10 5124 FI Configuration gt System ZTEPM ZXR105124 FI Si Port gt Port State gt Port Parameter 3 Le pole Sy VLAN gt Vlan Overview 120 Refresh gt vlan Configure W PVLAN Vlan Configuration gt Mirror S Lacp Vlanid 1 Monitoring 3 b Terminal Log VlanName Port Statistics enable b Running Config AdminStatus Enable Maintenance Tagged Ports Enable s gt Save Disable gt Reboot 2 4 B 8 10 12 14 16 18 20 22 24 gt Upload ROG SPI E E m E m m mj Nj m mj a m m m E m m m E m mj i a Sh EN E E a alte E a e Untagged Ports fi 24 20 4 E fe Mn 12 EY Glen 18 20 es 24 VMMM MM MM iv Select All iv iviviviviviviviviviv iv TEES US DOES T1 139159517919921523 Tagged Trunks Logout AE 2040 6 Seo 2 4s rights reserve ZTE Corporation Select All m w m wm mm mm Y ess ESI eu ZH Intranet 6 After configuring some attributes of the Vlan click Apply button to submit Result Vlan is configured Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 9 Network Management Note When configure port or trunk in the VLAN user can insert port or trunk number in the text column following it in the format such like 1 3 5 user can also select corresponding check boxes of the items wanted in the VLAN 7 Batch VLANs configuration page is shown
8. TABLE 212 SET Qos PoLicER PARAMETERS COMMAND Format Mode Function set bandwidth feport lt portlist gt l egress on rate global config TR ONO U ERE lt 64 1000000 gt egress session off Result This configures the egress session of flux monitor To configure the geport ingress session of the flux monitor use command set bandwidth geport lt portlist gt ingress on rate lt 2000 1000000 gt off yin global configuration mode This is shown in Table 203 Confidential and Proprietary Information of ZTE CORPORATION 137 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 213 SET QOS POLICER PARAMETERS COMMAND Format Mode Function set bandwidth geport lt portlist gt This configures the ingress on rate global config geport ingress lt 2000 1000000 gt session off Result This configures the geport ingress session of flux monitor 14 To configure the geport ingress session of the flux monitor use command set bandwidth geport lt portlist gt ingress on rate lt 2000 1000000 gt off in global configuration mode This is shown in Table 203 TABLE 214 SET QOS POLICER PARAMETERS COMMAND Format Mode Function set bandwidth geport lt portlist gt This configures the ingress on rate global config geport ingress lt 2000 1000000 gt session off Result This configures the geport ingress session of flux monitor 15 To configure the geport egr
9. TABLE 442 SET LOOP DETECT TRUNK PROTECT COMMAND Format Mode Function set loopdetect global config This enable disable trunk lt trunklist gt loop test protection protect function of a trunk enable disable Result This enable disable loop test protection function of a trunk To set time for blocking port with loop use command set loopdetect blockdelay lt 1 1080 gt in global config mode This is shown in Table 443 TABLE 443 SET LOOP DETECT BLOCK DELAY COMMAND Format Mode Function set loopdetect global config This set time for blockdelay lt 1 blocking port with 1080 gt loop Result This set time for blocking port with loop Note Time for blocking port with loop refers to time for blocking port when a loop is detected that is port protection time Protection takes effect only when loop test protection function of port is enabled To set interval time of sending loop test packet use command set loopdetect sendpktinterval 5 60 in global config mode This is shown in Table 444 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Result VCT Function Chapter 10 Maintenance TABLE 444 SET LooP DETECT SEND COMMAND Format Mode Function set loopdetect global config This sets interval sendpktinterval time of sending 5 60 loop test packet Result This sets interval time of sending loop test packet Note Loop test function send test packet in an interval time and judging whet
10. To add filter on Vlan multicast group use command set igmp filter add groupip lt A B C D vlan lt vlanlist gt in global configuration mode This is shown in Table 114 TABLE 114 SET IGMP FILTER ADD GROUPIP VLAN COMMAND Format Mode Function set igmp filter 2 er Global This adds filter on Vlan multicast D vlan song ee lt vlanlist gt Result This adds filter on Vian multicast group To delete source Ip of Vian from filter use command set igmp filter delete groupip lt A B Cc D gt vlan lt vianlist gt in global configuration mode This is shown in Table 115 TABLE 115 SET IGMP FILTER DELETE GROUPIP VLAN COMMAND Format Mode Function set igmp filter delete groupip Global This deletes source Ip of Vlan from A D confi filter D gt vlan g lt vlanlist gt Result This deletes source Ip of Vlan from filter To add the filter of multicast source address based on Vlan use command set igmp filter add sourceip lt A B C D gt vlan lt vlanlist gt in global configuration mode This is shown in Table 116 TABLE 116 SET IGMP FILTER ADD SOURCEIP VLAN COMMAND Format Mode Function set igmp filter add sourceip lt A B C D gt vlan lt vlanlist gt Global This adds the filter of multicast config source address based on Vlan Result This adds the filter of multicast source address based on Vlan Confidential and Proprietary Information of ZTE CORPORATION 97 ZXR10 2920 2928 2952 V1 0
11. la x X RRO BSW KAW TAD WB Ea CRR gt OAA OL quan One GIB G4 EaH BO HAHEI http 192 168 1 3 index htm UID 8001 12 phe ORB L M ZTEDH m ZXR10 5124 FI Configuration b System ZTEPM ZXR105124 FI Port gt Port State Port Parameter 3 3 5 VLAN Vian Overview 120 v Refresh gt vlan Configure W PVLAN Lacp Aggregator gt Pvlan Overview R Pylan Configure Select Trunk trunk 2 Mirror Sj Lacp Aggregator Mode Dynamic Lacp Port b Each xS Port Available Trunk Member Monitoring Terminal Log gt Port Statistics gt Running Config Maintenance gt Upload gt User Manager Apply Return Logout All rights reserved GZTE Corporation eset m for AH Intranet 8 To configure the attribute Aggretator Mode of selected assembling group in the page and to bind port to assembling group Select port in the optional port column gt gt and click gt button or free port from assembling group select port in the port column and click button END OF STEPS LACP management has been configured Only ports with same attributes can be binded to same assembling group Number of ports binded to assembling group is up to 8 Avoid binding port connected to network management host to assembling group Otherwise the network management will be interrupted Configuring Terminal Record This topic describ
12. vat psa O W PVLAN gt Pvlan Overview gt E uem Sure to save config Y Lacp gt Lacp Port em gt Lacp State Monitoring gt Terminal Log gt Port Statistics gt Running Config Maintenance Her mam F esa e Cancel gt Upload gt User Manager Logout All rights reserved GZTE Corporation 3E EE EH Intranet 2 Click OK to save the configuration or click Cancel to give up the saving END OF STEPS Result This saves the configuration Important Saving the configuration will cover the primary configuration files please be sure to cover the files before clicking OK Rebooting an Equipment Purpose This topic describes the rebooting of equipment Steps For the configuration of rebooting equipment perform the following steps 1 Click the catalog tree in the left of the system main page Maintenance Reboot to open the reboot page as shown in Figure 69 Confidential and Proprietary Information of ZTE CORPORATION 285 y ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDR FIGURE 69 REBOOT la x 3r RRO SEV KAW IAD BH e FAE gt OAA Que Geen gus JD 3 a HFA HAHO http 192 168 1 3 index htm UID 800112 zm v ese ee a ZXR10 5124 FI Configuration System ZTEPM ZXR10 5124 FI Port Port State Port Parameter Sy VLAN Console 3 1 3
13. 2 To set time that authentication system needs to wait before it can resend EAPOL data packet because it does not receive the response from the client use command dotlx tx period 1 655335 in nas config mode This is shown in Table 267 TABLE 267 DOT1X QUIET PERIOD COMMAND Format Mode Function dot1x quiet nas config This set time that period lt 0 65535 gt authentication system needs to wait before it can resend EAPOL data packet Result This set time that authentication system needs to wait before it can resend EAPOL data packet 3 To set timeout time for authentication system to receive data packets from authentication client system use command dotlx supplicant timeout 1 655535 in nas config mode This is shown in Table 268 TABLE 268 DOT1X SUPPLICANT TIMEOUT COMMAND Format Mode Function dotlx supplicant nas config This set timeout timeout 1 time for 65535 authentication system to receive data packets from authentication client system Result This set timeout time for authentication system to receive data packets from authentication client system 4 To set timeout time for authentication system to receive data packets from authentication server use command dotlx server timeout lt 1 65535 gt in nas config mode This is shown in Table 269 Confidential and Proprietary Information of ZTE CORPORATION 167 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I TABLE 269 DOT1X SERVE
14. 6 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH stage or up link Input strategy control supplies the bandwidth control with minimal increment by 64kbps It can satisfy the demand of discarding packets time delay and time dithering when network congestion occurs and supply the congestion avoiding function for the alignment Management Switch management is described with the following statement Supports SNMPv1 v2c v3 and RMON Supports ZXNMO1 uniform network management platform Supports CLI command lines including Console Telnet and SSH to access the switch GUI method supports Web network management Manage through ZGMP group Functions Store and ZXR10 2920 2928 2952 adopts Store and Forward mode and Forward Mode supports layer 2 switching at wire speed Full wire speed switching is implemented at all ports ZXR10 2920 2928 2952 has the following functions Megabit ports support port 10 100 1000M self adapting and MDI MDIX self adapting Kilomega ports support port 10 100 1000M self adapting and MDI MDIX self adapting Support 802 3x compliant flow control full duplex and back pressure flow control half duplex VCT function and faulty circuit test Support 802 1q compliant VLAN and private border VLAN Maximum number of VLANs can be up to 4094 Support VLAN stacks function and outer label is optional Support GVRP dynamic VLAN MAC addresses self learning capability
15. Topics Routine Maintenance Daily Routine Maintenance Monthly Maintenance Maintenance Period Single Loop Test Method Configuring Single Port Loop Test Virtual Circuit Test Common Troubleshooting Troubleshooting through Console Port Troubleshooting through Telnet Troubleshooting a Telnet Troubleshooting Troubleshooting the Switch through Web Troubleshooting the User Name Password common test Page No 292 292 292 293 294 294 297 298 298 299 299 300 300 301 Confidential and Proprietary Information of ZTE CORPORATION 291 292 Purpose Steps Purpose Prerequisites ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Routine Maintenance Routine maintenance generally refers to daily maintenance and monthly maintenance Daily Routine Maintenance This topic describes the daily routine maintenance of ZXR10 2920 2928 2952 For the configuration of routine maintenance perform the following steps 1 Query whether the background terminal interface can operate normally 2 Query whether the status of indicators of the switch is normal 3 Check whether the fan of the switch runs normally 4 Check whether the temperature of the switch is normal and whether there is any strange smell in the equipment room Check system alarm information Check the communication status between the switch and each connected device by logging into switch through a HyperTerminal or
16. nested replaced in global configuration mode This is shown in Table 217 TABLE 217 SET POLICY VLAN REMARK COMMAND Format Mode Function set policy vlan remark global config This remarks the in acl 1 349 rule VLAN 1 500 lt 1 4094 gt untagged tagged all nested replaced Result This remarks the VLAN To bind the rule of flux monitor use command set policy policing in acl 1 350 rule 1 500 policer lt 0 255 in global configuration mode This is shown in TABLE 218 SET POLICY POLICING IN ACL COMMAND Format Mode Function set policy policing global config This binds the rule in acl 1 350 of flux monitor rule 1 500 policer 0 255 Result This binds the rule of flux monitor Flow mirror is to copy the designated data flow to the monitor port use it to monitor the network and eliminate trouble To configure the mirror for the traffic use command set policy mirror in acl 1 350 rule 1 500 cpu analyze port in global configuration mode This is shown in Table 219 Confidential and Proprietary Information of ZTE CORPORATION 139 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 219 SET POLICY MIRROR COMMAND Format Mode Function set policy mirror global config This configures the in acl lt 1 350 gt mirror for the traffic rule 1 500 cpu analyze port Result This configures the mirror for the traffic 20 Flow redirection is to re
17. 5 255 in group config mode This is shown in Table 396 244 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Background Purpose Steps Chapter 9 Network Management TABLE 396 SET ZDP TIMER COMMAND Format Mode Function set zdp timer lt 5 group config This set time 255 interval for sending ZDP packets 6 To display ZDP configuration use command show zdp in group config mode This is shown in Table 397 TABLE 397 SHOW ZDP COMMAND Format Mode Function show zdp group config This displays ZDP configuration Result This displays ZDP configuration 7 To display neighbor device information table use command show zdp neighbour detail in group config mode This is shown in Table 398 TABLE 398 SHOW ZDP NEIGHBOR COMMAND Format Mode Function show zdp group config This displays neighbour neighbor device detail information table Result This displays neighbor device information table END OF STEPS ZDP has been configured Configuring ZTP Topology protocol ZTP is a protocol used to collect network topology information With neighbor device information table collected through ZDP ZTP sends and forwards ZTP topology collection packets through the relevant port in the specified VLAN to collect the topology information in the network hop count within a specific range and to create a topology information table which is used for knowing network topology status and m
18. Access Switch User Manual Volume I ZTEDH 8 To delete filter of multicast source address based on Vlan use command set igmp filter delete sourceip A B C D gt vlan lt vlanlist gt in global configuration mode This is shown in Table 117 TABLE 117 SET IGMP FILTER DELETE SOURCEIP VLAN COMMAND Format Mode Function set igmp filter delete sourceip A B C D vlan lt vianlist gt Global This deletes filter of multicast config source address based on Vlan Result This deletes filter of multicast source address based on Vlan 9 To display the configuration of IGMP snooping use command show tgmp snooping in global configuration mode This is shown in Table 118 TABLE 118 SHOW IGMP SNOOPING COMMAND Format Mode Function show igmp Global This displays the configuration of snooping config IGMP snooping Result This displays the configuration of IGMP snooping 10 To display the configuration of IGMP snooping result use command show igmp snooping vlan lt vlanname gt host router in global configuration mode This is shown in Table 119 TABLE 119 SHOW IGMP SNOOPING VLAN COMMAND Format Mode Function show igmp snooping vlan Global This displays the configuration of lt vlanname gt config IGMP snooping result host router Result This displays the configuration of IGMP snooping result 11 To displays the configuration of IGMP filter use command show igmp filter in global configuration mo
19. CAC This topic describes the configuration of CAC For the configuration of CAC perform the following steps 104 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 1 Chapter 7 Service Configuration To create rules of CAC use command create iptv cac rule rule id in nas config mode This is shown in Table 132 TABLE 132 CREATE IPTV CAC RULE COMMAND Format Mode Function create iptv cac Nas config mode This creates rules of rule rule id CAC Result This creates rules of CAC To set the name of CAC rule use command iptv cac rule lt rulelist gt name in nas config mode This is shown in Table 133 TABLE 133 IPTV CAC RULE COMMAND Format Mode Function iptv cac Nas config mode This sets the name rule lt rulelist gt of CAC rule name Result This sets the name of CAC rule To set maximum preview counts of rules use command iptv cac rule lt rulelist gt prvcount in nas config mode This is shown in Table 134 TABLE 134 IPTV CAC RULE PRVCOUNT COMMAND Format Mode Function iptv cac Nas config mode This sets maximum rule lt rulelist gt preview count of prvcount rules Result The sets maximum preview count of rules To set maximum preview time of rules use command iptv cac rule lt rulelist gt prvtime in nas config mode This is shown in Table 135 TABLE 135 IPTV CAC RULE PRVTIME COMMAND Format Mode Function iptv cac Nas config mode This sets max rule lt rulelist gt
20. Coe RowStatus Active zte cfg snmp show snmp host HostIpAddress Comm User Version type SecurityLevel WOR 40 SI 359 zteuser Ver 3 Imco Nce av Mier UE teal we zie eg snmp RMON Overview Remote Monitoring RMON defines standard network monitoring function and communication interface between management Confidential and Proprietary Information of ZTE CORPORATION 233 234 History Statistics Event Alarm Purpose Steps ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH console and remote monitor RMON offers an efficient and high availability method to monitor behaviors of subnets in case of reducing oad of other agents and management stations RMON specifications refers to the definition of RMON MIB ZXR10 2920 2928 2952 supports four groups of RMON MIB History records periodic statistics sample of information that can be obtained from statistics group Statistics maintains basic application and error statistics of each subnet that the agent monitors Event is a table related to all events generated by RMON agents Alarm allows operators of management console to set sampling interval and alarm threshold for any count or integer recorded by RMON agents All these groups store data collected by monitor and derived data and statistics Alarm group is based on implementation of event group These data can be obtained through MIB browser RMON control information can be
21. Confidential and Proprietary Information of ZTE CORPORATION 55 56 Result Introduction ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Result This command is used to back up a configuration file in the FLASH memory to the background TFTP Server Example The following shows the back up of a configuration file in the FLASH MEMORY to the background of TFTP Server ES eo EE IS ici EE ING ci ies hOZ m upload PUNAS GEC This command can also be used show running config toFile to write the configuration information into the config txt and then back up the file to the TFTP server For detailed method refer to Configuring Imports and Exports 2 Execute the following command to download the configuration file in background TFTP server to the FLASH memory zte cfg tifs ftftp 192 ISS 5 IM 102 download X D UUDVE DO CEC 3 Similar to the configuration file use command tftp to upload the foreground version file to the background TFTP server Example This example shows the upload of the foreground version file to the background TFTP server Tair Ce peto e IGS eS 102m upload kernel z 4 Version file recovery is used to retransmit the background backup version file to the foreground through TFTP Recovery is very important in the case of upgrading failure The version recovery operation is basically the same with the version upgrade procedure END OF STEPS File backup and recovery has bee
22. Global This displays stp trunk config information Result This displays stp trunk information V To display stp relay information use command show stp relay in global configuration mode This is shown in Table 186 TABLE 186 SHOW STP RELAY COMMAND Format Mode Function show stp relay Global This displays stp relay config information Result This displays stp relay information END OF STEPS Result STP has been configured Example The following is an example of MSTP configuration Create instance 1 set up mapping relations with VLANs 10 to 20 and set the name as zte The MST version is 10 zee Cio cb Seo dgsicemes Ib cc END ze cbq rset olp Mame Zhe zte cig set stp revision 10 zte cfg show stp The spanning_tree protocol is enabled The STP ForceVersion is MSTP Revision 10 Name zte Bod interval 100 Cisco key 0x13ac06a62e47fd51f95d2ba243cd0346 Cisco digest 0x00000000000000000000000000000000 Huawei key 0x13ac06a62e47fd51f95d2ba243cd0346 PU Cchicesc 2 050 9 0 190 19 0 190 19 0 1H0 19 0 10 0 10 0 10H0 10 0 19 0119 0 0H 01 0 iB Instance VlanMap O jc 21 4094 Ji 10 20 Zte cfg Set the bridge priority and port priority of the instance 122 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 7 Service Configuration Awe ene 1 cien vlan 10 add port 2 Untag zte ciogl rset stp Aanstamnce l bridgeprio 7 ce Cie See Seo ainseemes JJ j
23. Result This shows GVRP configuration information END OF STEPS GVRP has been configured In this example enable disable GARP and set GARP timer Configuration zs euo ues garp ema le zte efg ftset garp disable zbeWoEgq mseuc Gare timer hold 9 zte CIg set garp timer Join 200 zte cfg set garp timer leave 600 ZLe erg set garp timer leaveall 10000 In this example show GARP configuration status zte cfg show garp GARP is enabled GARP Timers Hold Timeout s100 millisecone Join Timeout s200 mMmiLiLLLSSCONC Leave Timeout s600 millisecone LeaveAll Timeout s 10000 millisecone In this example enable disable GVRP enable disable GVRP in port and configure type of registration in port Zee CE toee gvr p ema ile Zbe CkG roet Gvrp disable zte cfo tset GQvrp port 2 enable zte cig fset gvrp port 2 disable zee Cig tset Vrp POLL 2 iia Casiciac CINES zte cfg set gvrp port 2 registration forbidden Zico ene SCG IDEST M Nacido INE TI eiit In this example enable disable GVRP in trunk port and configure type of registration in trunk port Confidential and Proprietary Information of ZTE CORPORATION 193 DHCP Server and Client Strengthening 194 of Network ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH zi cuc se gvyrp irunk eimalolke ZL Cre PHSSE NOV re tirlinke 2 elab ete o le Mee ci gem cem ea IST scs qusc qoo Gl ec OUO scu eie o trunk 2 regiotrarion iene ox
24. Server checks whether this subscriber is available and whether password is correct according to subscriber configuration and returns different responses This authentication mode features poor security and username and password transferred may be easily stolen 160 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA CHAP Chapter 8 Access Service Process of using the PAP mode for identity authentication is shown in Figure 30 FIGURE 30 USING PAP MODE FOR IDENTITY AUTHENTICATION RADIUS server RADIUS User terminal system EAPOL EAPOL Start Connection setup EAP Request PAP Access Request PAP CHAP is an encrypted authentication mode and avoids transmission of user s real password upon the setup of connection NAS sends a randomly generated Challenge string to user User encrypts Challenge string by using own password and MD5 algorithm and returns username and encrypted Challenge string encrypted password Server uses user password it stores and MD5 algorithm to encrypt Challenge string It compares this Challenge string with encrypted password of the server and returns a response accordingly Process of using the CHAP mode for identity authentication is shown in Confidential and Proprietary Information of ZTE CORPORATION 161 ZTEDR ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Vol
25. TABLE 59 SET MIRROR COMMAND Format Mode Function set mirror add source port Global lt portlist gt config ingress egress This adds a mirroring port Result This adds a mirroring port 2 To delete mirroring port use command set mirror delete source port lt portlist gt ingress egress in global configuration mode This is shown in Table 60 TABLE 60 DELETE MiRRORING PoRT COMMAND Format Mode Function set mirror delete source port Global lt portlist gt config ingress egress This deletes mirroring port Result This deletes mirroring port 3 To set a monitoring port use command set mirror add dest port lt portname gt 41ingress egress in global configuration mode This is shown in Table 61 TABLE 61 SET MIRROR DEST PORT COMMAND Format Mode Function set mirror add dest port Global l Ee lt portname gt config This sets a monitoring port ingress egress Result This sets a monitoring port 4 To delete destination monitoring port use command set mirror delete dest port lt portname gt ingress egress in global configuration mode This is shown in Table 62 TABLE 62 SET MIRROR DELETE DEST PORT COMMAND Format Mode Function set mirror delete Global dest port lt portname gt This deletes destination config monitoring port 76 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 7 Service Configuration Format Mode Function ingress egress Result
26. Table 9 Descriptions of Power Cables enn nnn 25 Table 10 Straight Through Network Cable RJ45 Linear Ordering 27 Table 11 Crossover Cable RJ45J S Linear Ordering 28 Table 12 FIDer TYDES c isesexexks nakuxaesciubprbk edd d Kex Cada OE ea 28 Table 13 Topics In Chapter 5 cceeeeeennn nmm 35 Table 14 Create User Command eere 39 Table 15 User Password Command eere 39 Table 16 Admin Password eeeeeeeenn mnn 39 Table 17 Web COMMANGS sxvcsa tasca auk katini nikin Annai kREAA 40 Table 18 Invoking a Command een nnn 47 Table 19 F nctlohal IKCY S essc base pas t E ane Pus a etaed EE erdt p ida 48 Table 20 Topics In Chapter 6 ccccccesseeceuueeeeuceuveneueeueenes 49 Table 21 Config Tffs Command ceeeennm mnn 50 Table 22 md Command 1 cece cece eee eeeeeeeeeeeeeeeeeeneees 50 Table 23 Remove Command s asasssssssnssnnsansarsnrnnsnnnnnnnnans 50 Table 24 Rename Command ccc cccccccce cece cece eeeeeeeeeeeeeeeeeeees 51 Table 25 Cd COMmManNG ssccrcaticastacswencactaiaqussedseoaccesienesscsmugede 51 Table 26 ES COD WaniG sss cseascetatiaasoeeeseenmeancaatonecsocsseuseeenenass 51 Table 27 Tftp Command esseeeeenn mnn nnns 51 Table 28 Copy Command sees nnne 52 Table 29 Format Command eeeeeeeee
27. The size of the MAC address table is 8K Port MAC address bundling and address filtering Support port security and segregating Support the STP defined in the 802 1d RSTP defined in the 802 1w and MSTP defined in the 802 1s The maximum number of the example can be up to 16 Support ZESR technology Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 2 System Overview Support LACP port bundling defined in 802 3ad and port static bundling At most 15 port groups can be bundled and each group contains at most eight ports Support multi VLAN IGMP snooping amp MVS controllable group broadcast technology Support single port loop test Support 802 1x transparent transmission and authentication Port orientation support VBAS and DHCP OPTION82 Support DHCP snooping Support Broadcast storm suppression Port ingress and egress mirror and flow based mirror and Statistics Support ACL function of port and Trunk and can be set according to time segment Support IETF DiffServ and IEEE 802 1p standard the ports support 4 PRI queue Ingress supports CAR The queue attempering supports SP amp combination SP WRR attempering method Egress is based on the queue and discarding the toned tail Port based speed control includes input speed limit and output speed limit Input speed limit strategy includes unicast unknown unicast broadcast and groupcast Input
28. ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH 2 To add the IGMP Snooping function for the specified VLAN use command set igmp snooping add vlan lt vlanlist gt in global configuration mode This is shown in Table 98 TABLE 98 SET IGMP SNOOPING ADD VLAN COMMAND Format Mode Function set igmp snooping add vlan lt vlanlist gt Global This adds the IGMP Snooping config function for the specified VLAN Result This adds the IGMP Snooping function for the specified VLAN 3 To set crossvlan monitor use command set igmp snooping crossvian enable disable in global configuration mode This is shown in Table 100 TABLE 99 SET IGMP SNOOPING DELETE VLAN COMMAND Format Mode Function set igmp snooping Global This deletes the IGMP Snooping delete vlan config function for the specified VLAN vlanlist Result This sets crossvlan monitor 4 To delete the IGMP Snooping function for the specified VLAN use command set igmp snooping delete vlan lt vianlist gt in global configuration mode This is shown in Table 100 TABLE 100 SET IGMP SNOOPING DELETE VLAN COMMAND Format Mode Function set igmp snooping Global This deletes the IGMP Snooping delete vlan config function for the specified VLAN vlanlist Result This deletes the IGMP Snooping function for the specified VLAN 5 To Enable Disable the IGMP fastleave function use command set igmp snooping fastleave enable disable in global
29. add delete port lt portlist gt in global configuration mode This is shown in Table 331 TABLE 331 SET DHCP IP SOURCE GUARD COMMAND Format Mode Function set dhcp ip global config This enable disable source guard IP source guard add delete port function based on lt portlist gt port Result This enable disable IP source guard function based on port To display IP source guard configuration use command show dhcp ip source guard in global configuration mode This is shown in Table 332 TABLE 332 SHOW DHCP IP SOURCE GUARD COMMAND Format Mode Function show dhcp ip global config This displays IP source guard source guard configuration Result This displays IP source guard configuration END OF STEPS IP source guard has been configured on ZXR10 2920 2928 2952 Configuring DHCP Option82 This topic describes the Option82 configuration on ZXR10 2920 2928 2952 For the configuration of Option82 perform the following steps 1 To configure access node identifier use command set dhcp option82 ani lt string gt in global configuration mode This is shown in Table 333 TABLE 333 SET DHCP OPTION82 COMMAND Format Mode Function set dhcp option82 global config This configures ani string access node identifier Result This configures access node identifier To enable disable Option82 function based on port use command set dhcp option82 f add delete port Confidential and Proprietary Infor
30. config password string This configures admin password Result This configures admin password 4 To enable web function and to establish the monitor port use command set web enable and set web listen port Confidential and Proprietary Information of ZTE CORPORATION 39 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Result Overview Purpose 80 025 49151 gt in global configuration mode This is shown in Table 17 TABLE 17 WEB COMMANDS Format Mode Function set web enable This enables web function set web listen port config This establishes the monitor 80 025 49151 gt port Result This enables web function and establishes the monitor port Note By default username is admin password is zhongxing and http monitor port is 80 END OF STEPS Configuration of Web management is completed successfully Command Modes ZXR10 2920 2928 2952 allocates the commands to various modes based on the function In order to authorize the facilitation to user s configuration and management for the switch only one command can be executed in the special mode only ZXR10 2920 2928 2952 command modes include s User mode Global configuration mode SNMP configuration mode a Layer 3 configuration mode File system configuration mode a NAS configuration mode Cluster management configuration mode Basic ACL configuration mode Global ACL configuration mode s Extende
31. d DUIS SGiceliorcecls 5 Comerolsearuis valid ControlOwner zteNj Dara Our Ce coe le Se eg le 2A i pM Zr iis je 16 zig OBI SB Query configuration information about alarm 2 ces ne Sino fShow alarm 2 AlarmIndex ES SampleType absolute Interval a di Value SNR Threshold R 8 Startup rS aA lar MRES moc E ENS Status valid EventIndex R 2 Variable s ce 6 L 2e ilic Te Z 2a je on ze il EventlIndex F 2 Owner ZteNj zte co snmp Query configuration information about statistics 1 Zeck SUI s NoN Ste che dks tunes l StatsIndex 1 DropEvents O BEO CA CERTS SE Octets 0 M lticastEkts EO gl S 0 IRIS Sd OCucEs ig Fragments 0 PRUSODEPOLA2T70CUtets NO Jielelorene s 0 Pies azascez soOecrecs 8 Collisions 0 Ekes SC ron lene ico m CRCATignerrors 0 Eee ouo woo cu c NEN UndersizePkts 0 Ekes roO cu cH ES eC o cU OversizePkts 3 0 DakasOuree por UM 3 Ge d D IE ae De 1 dle 16 SHE GI US 2 cwedsel Owner zteNj Ree CkG Sump After above configuration when number of etherHistoryPkts of first bucket of port 16 rises over 8 or number falls below 15 event with index of 2 is triggered Event with index of 2 sends a trap to management station and creates a log simultaneously This log can be queried in logTable of event group 240 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Cluster Definition Command Switch I ndependent Switches Chapter 9 Network Management Cluster M
32. guard enable disable Result This sets port loop guard for STP instance 19 To set trunk cost of the instance use command set stp instance 0 15 trunk trunkname cost 1 200000000 in global configuration mode This is shown in Table 165 TABLE 165 SET STP INSTANCE TRUNK CosT COMMAND Format Mode Function set stp instance lt 0 Global This sets trunk cost of the 15 trunk config instance lt trunkname gt cost 1 200000000 116 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 20 21 22 23 Chapter 7 Service Configuration Result This sets trunk cost of the instance To set the trunk priority of the instance use command set stp instance 0 15 trunk lt trunkid gt priority lt 0 255 in global configuration mode This is shown in Table 166 TABLE 166 SET STP INSTANCE TRUNK PRIORITY COMMAND Format Mode Function set stp instance lt 0 Global This sets the port priority 15 gt trunk lt trunkid config of the instance gt priority lt 0 255 gt Result This sets the port priority of the instance To set trunk root guard of the instance use command set stp instance lt 0 15 gt trunk lt trunkname gt root guard enable disable in global configuration mode This is Shown in Table 167 TABLE 167 SET STP INSTANCE TRUNK ROOT GUARD COMMAND Format Mode Function set stp instance lt 0 Global This sets trunk root guard 15 trunk config of the i
33. instance shows DHCP Option82 configuration Confidential and Proprietary Information of ZTE CORPORATION 203 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH zte cfg show dhcp option82 DHCP option82 is enabled on the following port s portID portType Senven Client Client Client Client Client Client NM OO NSN DB BP W NN LR D Cascade zc ear o show elg Josh oxi oot 1 DA PROPETON In meraniaienhe Mm On Porr i circuit ID Enabled forma VORA iE ln remote ID Enabled Konma ESO subscriber ID Enabled value yuhuatai reserve sub option Disabled zte cfg VBAS Overview VBAS itself is not physical equipment is a standard protocol which is developed by Guangdong Institute of China Telecom VBAS is to solve the problem of wideband user identifier When BAS gets user identifier by inquiring correspondence relationship of users MAC dialing to the switch and port then sends user name password and identifier information to RADIUS it can realize the position of the user Layer 2 communication mode takes place between BAS and switches that is information query and response data packets of VBAS are encapsulated into Ethernet data frames in layer 2 directly and use protocol number 0x8200 to identify Note Only trust ports can receive VBAS packets for switches and VBAS response packets only can be sent from trust ports 204 Confidential and Proprietary Information of
34. lt 1 instances of 65535 owner history group string interval 1 3600 status valid underCreation createRequest invalid Result These create configure instances of history group The command line configuration of the history group is to configure the historyControlTable in the history group The configuration involves historyControlDataSource It is the ifIndex oid in rfc1213 interface group for example the oid of port 16 is 1 3 6 1 2 1 2 2 1 1 16 In command line configuration enter the port number 16 directly historyControlBucketsRequested By default it is 50 historyControlOwner historyControlinterval By default it is 1 800 seconds historyControlStatus It can be valid underCreation createRequest and invalid When it is set to invalid the instance is deleted The control status can be set to valid only when the data source is specified 3 To create configure instances of the statistics group use command set statistics lt 1 65535 gt datasource lt portname gt owner lt string gt status valid underCreation createRequest invalid in SNMP config mode This is shown in Table 388 TABLE 388 SET STATISTICS COMMAND Format Mode Function set statistics lt 1 65535 gt datasource SNMP This portname owner lt string gt status config create configure ivalid underCreation createRequest instances of the invalid Statistics group
35. multicast filtration group address 230 44 45 167 on Vlan 200 Enable IGMP Snooping and IGMP on filter function This is shown in Figure 26 zcuctgEbscbpE mag Ec oom RES EID zeit edes serene dp Si S J eal eu 2 00 zte cfg set vlan 200 enable zte cfg set igmp snooping enable zte Cig see aAlgmp snooping ada vlan 200 Ree Chg tSet iomp plilper enable BeS ece sec waemo isles ooo 230 44 45 Ley vlan 00 Display I GMP snooping and filter zte cfg show igmp snooping vlan Num Vlan Id Group Last_Report PortMember n 200 Aon 44 45 15 7 JO LES ale 1 ao EID EE edroprte elus ALCO a aL Ie Xe IGMP Filter enabled Index FilterIpAddress EIL BOCE Type 1 Zor 44 45 156 200 z Groupip Boa cre asluow salen xcablbeceoc ywilaia 200 Maximal group number 256 Current group number 0 The filter address list of this vlan Index FilterIpAddress Vlan Type IL 2 510 44 45 ee 2 Og Groupip Internet Protocol Television Introduction to Internet Protocol television IPTV is also called Interactive IPTV Network TV IPTV is a method of distributing television content over IP that enables a more customized and interactive user experience IPTV could allow people who were separated geographically to watch a movie together while chatting and exchanging files simultaneously IPTV uses a two way Confidential and Proprietary Information of ZTE CORPORATION 101 102 ZXR10 2920 2928 2952 V1 0 Access Switch Us
36. port Security Security enable on the port Speed Advertise Speed advertise on the port 3 For single port configuration click Config button in the port row in the port configuration information page list to open the configuration page of the port need to be configured as shown in Figure 50 268 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 4 Chapter 9 Network Management FIGURE 50 SINGLE PORT CONFIGURATION E ZTE switch Microsoft Internet Explorer E E la xl CHE dB SEW mA TAD SED El emRB Q 2aa gsx gre Quis GIB 5 w H gii t Hihk D http 192 168 1 2 index htm UID 800112 xm v ese ea LTEDH ZXR10 5124 FI Configuration gt System ZTEPM ZXR105124 FI Port gt Port State gt Port Parameter 3 oS ot WYLAN Q1 PVLAN 120 Refresh gt Mirror BLacp Port Configuration Monitoring gt Terminal Log Portld 4 Port Statistics b Running Config PortName se MediaType 1000Basex ave Reboot AdminStatus Enable gt Upload Copper z ato x gt User Manager WorkMode Copper Y AutoNeg Auto E PVID fi 1 4094 FlowControl Disable MultiF ilter Disable SpeedAdvertise MaxSpeed Security Disable MacLimit Off hd Logout All rights reserved ZTE Corporation exe BE EH Intranet In the page some attributes of the selected port can be configured After configuration click Apply
37. preview time of prvtime rules Result This sets maximum preview time of rules To set the least preview interval of rules use command iptv cac rule lt rulelist gt prvinterval in nas config mode This is shown in Table 136 Confidential and Proprietary Information of ZTE CORPORATION 105 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 136 IPTV CAC RULE PRVINTERVAL COMMAND Format Mode Function iptv cac rule Nas config mode This sets least lt rulelist gt preview interval of prvinterval rules Result This sets the least preview interval of rules 6 To set the right rule to channel use command iptv cac rule lt rulelist gt right in nas config mode This is shown in Table 137 TABLE 137 IPTV CAC RULE RIGHT COMMAND Format Mode Function iptv cac rule Nas config mode This sets the right lt rulelist gt right rule to channel Result This sets the right rule to channel 7 To delete rules use command clear iptv cac rule lt rulelist gt in nas config mode This is shown in Table 138 TABLE 138 CLEAR IPTV CAC RULE COMMAND Format Mode Function clear iptv cac rule Nas config mode This deletes the lt rulelist gt rules Result This deletes the rules END OF STEPS Result CAC has been configured Configuring Administrative Command of IPTV Users Purpose This topic describes the configuration of administrative command of IPTV users Steps For the configuration of admini
38. previous next GO 1 gt Reboot gt Upload Refresh Return gt User Manager T Logout All rights reserved ZTE Corporation gi He oO EE EH Intranet Table 430 defines parameters shown in Figure 52 TABLE 430 PARAMETERS DESCRIPTION Parameters Description Name of Vlan Enable Disable admin status Select ports which are to be tagged Select ports which are to be untagged Select ports which are to be tagged trunk Vian Name Admin Status Tagged Port Untagged Port Tagged Trunk Select ports which are to be untagged trunk Untagged Trunk To show specified VLAN information select the radio box Input in the VLAN information page then input the wanted VLAN number in text column such as 1 3 5 or select the radio box All Click Apply button to submit Result Vian information is displayed Important When there are more than 20 items it will show them page by page with the page number on the left of the bottom If there are more than one page use the previous or next button to switch or choose the page number directly in the Go column Click the catalog tree in the left of the system main page Configuration gt VLAN gt Vlan Configure to open VLAN number input pag
39. queue3 weight lt 1 32 gt in global configuration mode This is shown in Table 202 TABLE 202 SET QOS QUEUE SCHEDULE COMMAND Format Mode Function set qos queue global config This configures schedule queueO global queue weight lt 1 32 gt schedule profile queuel weight 1 32 queue2 weight 1 32 queue3 weight 1 32 Result This configures global queue schedule profile 4 To configure the parameters of the flux monitor use command set qos policer counter mode L1 L2 L3 in global configuration mode This is shown in Table 203 TABLE 203 SET Qos PoLicER PARAMETERS COMMAND Format Mode Function set qos policer This configures the counter mode L1 global config parameters of flux L2 L3 monitor Result This configures the parameters of flux monitor Note set counter mode of the qos policer By default it works in L2 mode 5 To configure the promise speed parameters of the flux monitor use command set qos policer lt 0 255 gt parameters lt 1 25165824 gt in global configuration mode This is shown in Table 203 TABLE 204 SET Qos POLICER PARAMETERS COMMAND Format Mode Function set qos policer This configures the counter mode L1 global config promise speed of L2 L3 flux monitor Result This configures the promise speed of flux monitor 134 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 6 Chapter 7 Service Configuration To configure the policer counte
40. speed limit is based on stream and output speed limit is based on queue The minimal is 64Kbps Provide detailed port flow statistics Support syslog Support NTP client end Configuration of NM static route Support ZGMP group manage SNMPv1 v2c v3 and RMON Support Console configuration Telnet remote login Support SSHv2 0 Support WEB function Support unified network management of ZXNMO1 Uploading and downloading of TFTP version Technical Features and Parameters ZXR10 2920 2928 2952 technical features and parameters are given in Table 6 Confidential and Proprietary Information of ZTE CORPORATION 7 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I 8 TABLE 6 TECHNICAL FEATURES AND PARAMETERS model ZXR10 tcm ZXR10 2920 2928 Dimensions 43 HxWxD 43 6x436x 200 6x436x mm 200 Weigh Fully x T equipped kg Maximum power 16 20 consumption W ZTEmA ZXR10 2952 43 6x442 x 280 27 AC power supply 100V 240V 48Hz 62Hz Power Wave shape distortion lt 5 supply DC power supply 57V to 40V Confidential and Proprietary Information of ZTE CORPORATION Chapter 3 Structure and Principle Overview Introduction This chapter introduces the working principle technical and hardware structural information on each of the ZXR10 2920 2928 2952 Contents This chapter includes the following topics TABLE 7 TOPICS IN CHAPTE
41. ssssssssrsnrsrsrrrrrrsrrrrnrnrerrnrnrne 4 Par Uor TUD Oes t o T 4 SCOUT EV CONOIS wesevsdonqus i a a a ER a 5 QoS Guara OG rreren DES DUM 5 Mango CINCO e TM Em 6 PUIG ONG C 6 Technical Features and Parar ie GE certe gp eoHA URP nns ERO TD PETER E ded 7 ChaDEtBl S ossusika CRERUIIAREEEENIEMER GU EERN RE DCUM SEI ERM UM MUMN 9 Structure and Principle senno xi dicar in Ocnoon d EC RC 9 e pl rr S 9 WOOF G PrINCIDI O ive ooo m 9 Hardware StruUctUre nu chincccanuteeetuivercahseenvendenntemescn matsecsumicausnake 10 ZR VD ZO iondtelocutescttudc ed eic a ede Leu Oe each era oU de ud Ld a 11 ZXRI0 2020 EHE 12 ZR UO 2952 ae cbr a ESA 13 ZXRIO 2920F Durias A RAIRE 14 POWer SUDbBIVJMOGHIG viniani AT EEA eA EA S 17 Chapter 4 sorna inde s Gre GONE 19 Installation and Debugging 19 QUVPLVIGVM sensato E tpa p ap E cerea dus 19 Eduipimenb Hiskallet OP veain e AEA EAR 19 Switch Installation on DesktOD svu vere voce HD OA M DEREN EE So UR 20 Switch Installation onto a Cabinet superi ied ert ve eipete real ke oem br 20 Capa soditenodtrisua eni ano ur E ton vun Cus oM M CE dh d ES 23 Power Cables Installationciussoocsesi e EAT a noL OU CE Pita Td ER 24 Console Gable InstallablOUlauciscesis us etewidbkb trs pw E Vei bue ea ded ben aai 25 Network Cable InstallatlOI csssepoocekxi oett tnb rest exei teo peo tpm pr Pee 26 OD ENCE Tr MDS I aeui i Sani s
42. state input zte to enter the BootManager state of the switch Input to display the command list for this state Confidential and Proprietary Information of ZTE CORPORATION 61 62 Confidential and Proprieta ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH ZxR10 Boot zte Load wbdEnd Begin VONT MACO3 10MB rull Duplex Bree oh 28168 Marvell nhas boeen LaLEeLALLZEC boot device wbdEnd unit number s 5 processor number 0 host name tiger file name S ro Wee s inet on ethernet e 10 Zn 89 106 host inet h s 10 AO S 9 78 gateway inet g MEET OR ATOR 89 78 EES ie O36 0 Atta mec sl eium e cocco v db Warning no netmask specified Attaching network interface o done p ert ano icon TEE Sy test flash passed perfectly Welcome to boot manager rype iow nelp BootManager ES cL Basi odio elas M edDUIe ds Sic Glabs exce Cie Liste Ls pwd 7 Daisolay elie gs e date eosolutdiom Tet ES devs wy Das Olle toe Fr A oH Eo Me O fie show GOD olay elie Sp ten type and mac address fe reboot fo Ie circ Wm eI pe format wy Rormat the ELASH 1 del file name sv puede clus eot abeo r3 e fas md dir name So Chae chic hM Sm s7 pe m f rile name Crearte a rile CCl absolue pathname Change the DIIS IS e Igi e o OL db ae ee E OE S pe iB dS dE o ip address file name Download pload aV er UON ial IS roaa In iS update file name wy UNouce
43. 1000BASE X interface s One console port is to realize the management and configuration of various services There are 48 indicators on the front panel of the ZXR10 2952 indicating the status of the 48 10 100 Base T ports Every interface has one indicators indicating LNK and ACT Four indicators show two 10 100 1000 BASE T port amp two indicators for each port showing LNK amp LNK ACT status two indicators indicate 2 1000Base X port each port with one indicator showing LNK ACT status of the port two system indicators show power indicator PWR amp running indicator RUN System indicators include power indicator PWR and running indicator RUN After the system is powered on PWR indicator is on and the RUN indicator is off gt BootROM starts to load the version If the version is unavailable the states of indicators do not change If the version is loaded normally the RUN indicator flashes at 1Hz If the power indicator PWR is flashing it indicates that the switch is the main or standby role of the stack system Flashing in the same frequency with RUN shows it is the main equipment Flashing in the half frequency with RUN shows it is the standby equipment 48 indicators respond to 48 10 100 Base T port Every port has 1 indicator indicating LNK ACT If the link indicator is on it indicates that the LINK is normal If the indicator is flashing it indicates that data sending or receiving is unde
44. 127 147 ZXR10 2920 2928 2952 ii ZXR10 5900 5200 ii 148 Confidential and Proprietary Information of ZTE CORPORATION 327
45. 2 Successed member Deleting member id 3 SUCCESS SS member Deleting member id 4 Successed member Deleting member id 5 SUCCESS SScl member Emea WAX Croup oee orou e eand dae y oO e scu c 4 LO toO LO LO LO Confidential and Proprietary Information of ZTE CORPORATION del del del del del 259 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Create a cluster on VLAN 4000 260 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 9 Network Management WYXX cfg group set ztp vlan 4000 seo earereene ODIO toc mmo cole eoimrsudeleus aereo eho S Olmmlag c 1698 E 1 24 mdra WIxXX cro group tztp stari Cimobe s WESOROX eus er epus eXDIO s SUDO eO Olewabee Last collection vlan 4000 Last collection time 176m Id MacAddress Hop ReuLe IP hehe Oa Ce 0 0F aor ec ier Gee 6c DES inelia ZXR1O 20 7 8 dE RO eu cu ipe Ose d6 IL a ARIE LSS Zeer dor OR fee Oe Cit 1 CaAinga XR IL Sb mE amp Ws aor do Po Quer fa 1 candi ZXR10 DING A 00 et dor ee ORS CS JL eengcl gL SNE Il 5 OO ego d ino Quee 3a 1 Galina ZI IL AS MSS Pres WYXX cfg group fset group add device 1 5 Adding device id 1 Successed to add member Adding device id 2 Successed to add member Adding device id 3 j s Successed to add member Adding device id 4 Successed to add member Adding device id 5 Successed to add member Cm
46. 3 configuration mode you can configure the Layer 3 port static router and ARP entities 2 To return to the global configuration mode from the Layer 3 configuration mode use command exit or press Ctrl Z END OF STEPS Layer 3 mode has been configured Configuring File System Mode This topic describes the file system configuration mode For the configuration of file system perform the following steps 42 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Purpose Steps Result Purpose Steps Chapter 5 Usage and Operation 1 In the global configuration mode execute the command config tffs to enter the file system configuration mode as shown below Zee CEJ CONCI EES aeo eE E c Note In the file system configuration mode switch file system can be operated including adding file directory deleting file or directory modifying file name displaying file or directory changing file directory uploading downloading files through TFTP copying files formatting Flash and so on 2 To return to the global configuration mode from the file system configuration mode use command exit or press Ctri Z END OF STEPS File system mode has been configured Configuring NAS Mode This topic describes the NAS configuration mode For the configuration of NAS mode perform the following steps 1 In the global configuration mode execute the command config nas to enter into NAS c
47. 65535 gt in global configuration mode This is shown in Table 178 TABLE 178 SET STP REVISION COMMAND Format Mode Function set stp revision lt 0 Global l 65535 gt config This sets the MST version Result This sets the MST version To enable disable STP trunk use command set stp trunk lt trunklist gt enable disable in global configuration mode This is shown in Table 179 TABLE 179 SET STP TRUNK COMMAND Format Mode Function set stp trunk lt trunklist gt enable disable Global This enable disable stp config trunk Result This enable disable STP trunk To set trunk s link type of the instance use command set stp trunk lt trunklist gt linktype point point shared in global configuration mode This is shown in Table 180 TABLE 180 SET STP TRUNK LINKTYPE COMMAND Format Mode Function set stp trunk trunklist linktype Global This sets trunk link type of point config the instance point shared Result This sets trunk link type of the instance To set trunk packet type of instance use command set stp trunk trunkid gt packettype I EEE CISCO HUAWEI HAMMER extend in global configuration mode This is shown in Table 181 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR 36 Chapter 7 Service Configuration TABLE 181 SET STP TRUNK PACKETTYPE COMMAND Format Mode Function set stp trunk trunkid packettype Global This sets trunk packet I EEE CISC
48. 7 9 gt vlan Overview 120 Refresh gt vlan Configure W PVLAN Reboot gt Pvlan Overview gt Pvlan Configure gt Mirror Sj Lacp Saving config before reboot may be advantageous If you are sure to reboot confirm by inputting admin password below gt Lacp Port i THREE p gt Lacp State Monitoring AdminPassword Terminal Log gt Port Statistics P Running Config I p Maintenance Ok E Cancel gt Upload gt User Manager Logout All rights reserved GZTE Corporation Ke sete EE EH Intranet 2 Input the password of admin in the text column then click OK to reboot the switch or click Cancel to give up rebooting END OF STEPS Result This reboots the switch Uploading a File Purpose This topic describes the uploading of file Steps For the configuration of file uploading perform the following steps 1 Click the catalog tree in the left of the system main page Maintenance Upload to open the file upload page as shown in Figure 70 286 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 9 Network Management FIGURE 70 FILE UPLOAD ZTE switch Microsoft Internet Explorer E I 218 x CHG RRO Sv KEA IAD ARN EI tAE gt 0AA QL wx gus GA 3 v Es AD Hitik D http j 192 168 1 3 index htm UID 800112 ZETA Configuration gt System Port gt Part State gt Port Parameter QS VLAN gt vlan Overview 120
49. 78 SET FDB ADD VLAN COMMAND Format Mode Function set fdb add xx XX XX XX XX xx vlan lt 1 Global This adds the static binding 4094 gt port config address to the address table portid trunk lt trunkid gt Result This adds the static binding address to the address table 2 To set the aging time of MAC address use command set fdb agingtime lt 40 1260 gt in global configuration mode This is shown in Table 79 TABLE 79 SET FDB AGINGTIME COMMAND Format Mode Function Sel bes Global This sets the aging time of MAC sano config address lt 40 1260 gt Result This sets the aging time of MAC address CN To delete a record in the table use command set fdb delete xx xx xx xx xx xx Vlan lt 1 4094 gt in global configuration mode This is shown in Table 80 TABLE 80 SET FbB DELETE COMMAND Format Mode Function 84 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 7 Service Configuration Format Mode Function set fdb delete XX XX XX Global This deletes a record in the table XX XX XX config vlan lt 1 4094 gt Result This deletes a record in the table To set the filter address of fdb use command set fdb filter xx XX XX XX XX xx vlan 1 4094 dest mac src mac bothj in global configuration mode This is shown in Table 81 TABLE 81 SET FDB FILTER COMMAND Format Mode Function set fdb filter xx xx xx XX Xx Xx gt vlan lt 1 4
50. 85 SHOW FDB PORT COMMAND Format Mode Function show fdb port lt portname gt detail Global This displays the port based fdb config information Result This displays the port based fdb information 9 To display Trunk fdb information use command show fdb trunk lt trunkname gt detail in global configuration mode This is shown in Table 86 TABLE 86 SHOW FDB TRUNK COMMAND Format Mode Function show fdb trunk Global trunkname This displays Trunk fdb information config detail Result This displays Trunk fdb information 10 To display the VLAN based fdb information use command show fdb vlan lt vlanname gt detail in global configuration mode This is shown in Table 87 TABLE 87 SHOW FDB VLAN COMMAND Format Mode Function show fdb vlan Global This displays VLAN based fdb vlanname detail config information Result This displays VLAN based fdb information END OF STEPS Result FDB is configured on the switch LACP Overview LACP Link Aggregation Control Protocol LACP follows IEEE 802 3ad standards 86 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Description Aggregate Link Purpose Steps Chapter 7 Service Configuration Link aggregation means that physical links with same transmission media and transmission rate are bound together making them look like one link logically This concept is also known as Trunking It allows parallel physical lin
51. 96 Table 113 Set Igmp Filter Command enn 97 Table 114 Set Igmp Filter Add Groupip Vlan Command 97 Table 115 Set Igmp Filter Delete Groupip Vlan Command 97 Table 116 Set Igmp Filter Add Sourceip Vlan Command 97 Table 117 Set Igmp Filter Delete Sourceip Vlan Command 98 Table 118 Show Igmp Snooping Command eee 98 Table 119 Show Igmp Snooping Vlan Command 98 Table 120 Show Igmp Filter command enn 98 Table 121 Show Igmp Filter Vian Command 99 Table 122 IPTV Control Log Time Command 102 Table 123 Iptv Control Prvcount Count Command 102 Table 124 Iptv Control Prvinterval Command 102 Table 125 Iptv Control Prvtime Command ese 103 Table 126 Iptv Control Prvcount Reset Period Command 103 Table 127 Iptv Control Command eene 103 Table 128 Create IPTV Channel Command 103 Table 129 IPTV Channel Command 104 Table 130 IPTV Channel Mvlan Command 104 Table 131 Clear IPTV Channel Command 104 Table 132 Create IPTV Cac Rule Command 105 Table 133 IPTV Cac Rule Command eee 105 Table 134 IPTV Cac Rule Prvcount Command 105 Table 135 IPTV Cac Rule Prvtime Co
52. By default port is no trusted 3 To enable disable cascade port VBAS function use command set vbas cascade port lt portlist gt enable disable in global configuration mode This is Shown in Table 344 TABLE 344 SET VBAS CASCADE PORT COMMAND Format Mode Function set vbas cascade global config This enable disable port lt portlist gt cascade port VBAS enable disable function Result This enable disable cascade port VBAS function 4 To display VBAS configuration use command show vbas in global configuration mode This is shown in Table 345 TABLE 345 SHOW VBAS COMMAND Format Mode Function show vbas global config This displays VBAS configuration Result This displays VBAS configuration END OF STEPS Result VBAS has been configured Example This example describes how to trust port of switch A is port 1 cascade port is port 2 and trust port of switch B is port 1 This is shown in Figure 35 Configuration of Switch A zte cfg set vbas enable zte cfg set vbas trust port 1 enable zte cfg set vbas cascade port 2 enable Configuration of Switch B zte cfg set vbas enable zee ene Sesso Eee Show Configuration of Switch A zte cfg show vbas vbas enable Cee POCE s1 CaseCade porum 206 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Description of sFlow Purpose Steps Chapter 8 Access Service Show Configuration of Switch B zte cfg show vbas vba
53. Command 166 Table 266 Dot1x Quiet Period Command nenee 167 Table 267 Dot1x Quiet Period Command nenne 167 Table 268 Dot1x Supplicant Timeout Command 167 Table 269 Dot1x Server Timeout Command 168 Table 270 Dot1x Max Request Command eene 168 Table 271 Show AAA Control Port Command 169 Table 272 Show Dotix Command eere eee 169 Table 273 Radius Isp Command eene 169 Table 274 Radius Isp Add Authentication Command 170 Table 275 Radius Isp Delete Authentication Command 170 Table 276 Radius Isp Add Accounting Command 171 Table 277 Radius Isp Delete Accounting Command 171 Table 278 Radius Isp Client Command eene 171 Table 279 Radius Isp sharedsecret eeeernnnne 172 Table 280 Default Isp Default Isp Command 172 320 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Tables Table 281 Radius Isp Fullaccount Command 172 Table 282 Radius Isp Description Command 173 Table 283 Radius Timeout Command ee 173 Table 284 Radius Retransmit Command 173 Table 285 Radius Nasname Command 173 Table 286 AAA Control Port Command
54. GZTE Corporation AE po EE AH Intranet 6 Click check boxes before the attributes to configure and click Apply button to submit END OF STEPS Result Batch Ports are accessible Configuring Vian Management This topic describes the configuration of Vian management For the configuration Vian management perform the following steps 1 Click the catalog tree in the left of system main page Configuration gt VLAN gt Vlan Overview to open VLAN information page This shows recent operated VLAN information If there is on operation on the VLAN it shows VLAN as default This is shown in Figure 52 270 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Chapter 9 Network Management FIGURE 52 VLAN INFORMATION ZTE switch Microsoft Internet Explorer E 81 xj XE HQ BSW KRA TAD BH Ea HAE gt OOA Qr ummx Gee GD Su4 Oe Hh AO Hitik D http 192 168 1 3 index htm UID 8001 12 xr esa sie ZXR10 5124 FI Configuration System ZTEPM ZXR105124 Fl Port gt Port State Port Parameter 3 3 5 Q1 VLAN vlan Overview 120 v Refresh gt vlan Configure PVLAN Actual state of the vlan Mirror SiLacp Mode C All Input 1 2 Monitoring x b Terminal Log Vlanid VlanName AdminStatus TagPorts UntagPorts TagTrunks UntagTrunks b Port Statistics 1 Enable 1 24 ii gt Running Config 2 Enable 3 Maintenance D Save 1n
55. Global This unbinds static multicast group config from a VLAN Result This unbinds static multicast group from a VLAN To add maximum multicast group numbers to Vlan use command set igmp snooping add maxnum lt 1 256 gt vlan lt vianlist gt in global configuration mode This is shown in Table 111 TABLE 111 SET IGMP SNOOPING ADD MAXNUM VLAN COMMAND Format Mode Function set igmp snooping add Global This adds maximum multicast maxnum lt 1 confi roup numbers to Vlan 256 gt vian a didis vlanlist Result This adds maximum multicast group numbers to Vlan To delete maximum multicast group number from Vlan use command set igmp snooping delete maxnum vlan lt vianlist gt in global configuration mode This is shown in Table 112 TABLE 112 SET IGMP SNOOPING DELETE MAXNUM VLAN COMMAND Format Mode Function set igmp p Global This deletes maximum multicast delete config group number from Vlan maxnum vlan lt vlanlist gt Result This deletes maximum multicast group number from Vian To Enable Disable the IGMP filter use command set igmp filter enable disable in global configuration mode This is shown in Table 113 96 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 7 Service Configuration TABLE 113 SET IGMP FILTER COMMAND Format Mode Function set igmp filter Global enable disable config This Enable Disable the IGMP filter Result This Enable Disable the IGMP filter
56. HL coo NI WO 43 0 WIN HL Brown Crossover RJ 45 cable Crossover RJ45J cable with two twisted pairs at both ends corresponding to each other in crossover mode The specific connection relationship is shown in Table 11 Confidential and Proprietary Information of ZTE CORPORATION 27 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTE TABLE 11 CROSSOVER CABLE RJ45J S LINEAR ORDERING End A Cable Color End B White orange Orange White green Green Blue White blue White brown oo nN WI RID WIN HL CON OW BRIN Lm oO Brown Optical Fiber Each optical interface of ZXR10 2920 2928 2952 has two fibers to send and receive data respectively Note Ensure proper connection to TX and RX marks on panel Classification There are two kinds of optical fibers single mode and multi mode optical fibers Six types of optical fibers are available for configuration as shown in Table 12 TABLE 12 FIBER TYPES Mode Type of Connector to Type of Connector Switch on the Peer End FC PC connector SC PC connector SC PC connector Single mode fiber square flat connector ST PC connector LC PC connector FC PC connector SC PC connector SC PC connector Multi mode fiber square flat connector ST PC connector LC PC connector Fiber For fiber cabinet layout of cabinet make sure to protect fibers protection against any damages with plastic corrugated protection tubes Fibers insid
57. IPTV CAC RULE COMMAND Format Mode Function show iptv cac privileged mode This displays CAC rule rule Result This displays CAC rule To display the CAC rule statistics use command show iptv cac rule statistics in privileged mode This is shown in Table 144 TABLE 144 SHOW IPTV CAC RULE STATISTICS COMMAND Format Mode Function show iptv cac privileged mode This displays CAC rule statistics rule statistics Result This displays CAC rule statistics To display online users of IPTV use command show iptv client in privileged mode This is shown in Table 145 TABLE 145 SHOW IPTV CLIENT COMMAND Format Mode Function show iptv client privileged mode This displays online users of IPV Result This displays online users of IPTV To display online users of IPTV statistics use command show iptv client statistics in privileged mode This is Shown in Table 145 TABLE 146 SHOW IPTV CLIENT COMMAND Format Mode Function show iptv client privileged mode This displays online statistics users of IPV Result This displays online users of IPTV statistics Confidential and Proprietary Information of ZTE CORPORATION 109 110 Result STP RSTP MSTP ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH END OF STEPS Maintenance and diagnosis of IPTV has been configured MSTP Mode Spanning Tree Protocol STP is applicable to a loop network It blocks some redundant paths with certain algori
58. Important Purpose Steps Considering the safe and application only three kinds of file are allowed to be uploaded running cfg config txt and I kernel z Be sure of the validity and usability of the uploaded files as the uploaded files will cover the primary files Errors due to improper operations will make the switch unable to work Curbstone workers should avoid using this function Configuring User Management This topic describes the configuration of user management For the configuration of user management perform the following steps 1 Click the catalog tree in the left of the system main page Maintenance User Manager to open the user management page as shown in Figure 72 FIGURE 72 USER MANAGEMENT ZTE switch Microsoft internet Explorer MN THO MHD SAM KRA IAD REH emEB 2 QJd dsr mar Que Jrad Argen HAHH http 192 168 1 3 index htm UID 800112 e scr mie m ese ee gt a ZTEPR ether ZXR10 5124 FI Configuration gt System ZTEPM ZXR105124 FI Y Port VLAN S PVLAN 3 3 5 Mirror Y Lacp 120 Refresh Monitoring Terminal Log User Manager Port Statistics b Running Config Modify Add Delete Maintenance gt Save Your admin password p gt Reboot gt Upload gt User Manager Modify user information of the switch User name admin User role admin Selectto modify M Login password Admin password New login
59. Operations MAC table operations include the configuration of MAC filter function static address binding function and MAC table aging time MAC filter function is to enable the switch to discard the received data packets whose source or destination MAC address is the specified MAC address There are 3 filter mode according to source mac address filter destination mac addressfilter amp both of them Static address binding function is to bind the specified MAC address with the switch port After the binding this MAC is kept away from the dynamic study Confidential and Proprietary Information of ZTE CORPORATION 83 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH MAC table MAC table aging time refers to the period from the latest update aging time of dynamic MAC address in the FDB table to the deletion of this address Configuration of the MAC filter function and static address binding function prevents illegal access to the network and fraudulent use of key MAC addresses and play an important role in ensuring the network security Configuring FDB Purpose This topic describes the configuration of FDB Steps For the configuration of FDB perform the following steps 1 To add the static binding address to the address table use command set fdb add xx xx xx xx xx xx vlan lt 1 4094 gt port lt portid gt trunk lt trunkid gt in global configuration mode This is shown in Table 78 TABLE
60. Pola SoCOmcleiey Port T7 ZESR Domain Control Vlan ZESR Domain protected vlan In the following instance enabled transit zte cfg show zesr domain ZESR domains 1 Node mode Port state Bome Eare 100 TEN ks Wie eine ic Forward Forward it shows the information of the 1 Ring state Down Domain enabled Yes e eey OE ec Secondary port 4 LES Demet Come rol Ves AESSR Domain Erorected gne Node mode POT vence IEXoncpo Sieehite 10 Confidential and Proprietary Information of ZTE CORPORATION I Tere rnb abe Forward Forward Chapter 9 Network Management Overview Introduction This chapter provides and overview of network management functions of the ZXR10 2920 2928 2952 such as Remote Access SSH SNMP RMON and cluster management Contents This chapter includes the following contents Topics Page No Remote Access Overview 219 Configuring Remote Access 219 Remote Access Configuration Examples 220 SSH Overview 221 Configuring SSH 222 Configuring SSH v2 O0 223 SNMP Overview 226 Configuring SNMP 227 RMON Overview 233 Configuring RMON 234 Cluster Management Overview 241 Configuring a ZDP 243 Configuring ZTP 245 Configuring Cluster 249 Configuring a Cluster Member 250 Configuring Cluster Parameters 251 Configuring Access and Control Cluster Members 253 Displaying Cluster Configuration 255 Web Management Overview 262 Logging On Using Web Management 262 Confidential and Propri
61. Process Control Block Pulse Code Modulation Protocol Data Unit Packet over SDH Point to Point Protocol Partial Sequence Num PDU Process Registry Table Quality of Service Reverse Address Resolution Protocol Remote Authentication Dial In User Service Request For Comments Routing Information Protocol Route lookup engine Remote Monitoring Router Operation System Resource Reservation Protocol Synchronous Digital Hierarchy Synchronous Data Link Control Security Main Processor Simple Mail Transfer Protocol Confidential and Proprietary Information of ZTE CORPORATION 307 308 Abbreviation SNMP SNP SPF TCP TFTP TOS TELNET TTL UDP VLSM VPN VRF VRRP WAN www ZXR10 2920 2928 2952 V1 00 Access Switch User Manual Volume I ZTEDH Full Name Simple Network Management Protocol Sequence Num PDU Shortest Path First Transmission Control Protocol Trivial File Transfer Protocol Type Of Service Telecommunication Network Protocol Time To Live User Datagram Protocol Variable Length Subnet Mask Virtual Private Network Virtual Routing Forwarding Virtual Router Redundancy Protocol Wide Area Network World Wide Web Confidential and Proprietary Information of ZTE CORPORATION 309 Figures Figure 1 ZXR10 2920 2928 2952FI Working Principle 10 Figure 2 Front Panel Of ZXR10 2920 ceeeeennm nnn 11 Figure 3 Front Panel Of ZXR10 2928 ceeeeeennn nnn 12 Figure 4 Front Pane
62. QuietPeriod 60 SuppTimeout 20 ServerTimeout S SNO ReAuthPeriod 3600 ReAuthenticate disabled MaxReq E zte cfg nas Enable re authentication function and set re authentication period to 3600 seconds Confidential and Proprietary Information of ZTE CORPORATION 175 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I TEX zte cfg nas dotlx re authenticate enable zte cfg nas dot1lx re authenticate period 3600 ZALe ckg nas show dorlx TxPeriod s 30 QuietPeriod 60 SuppTimeout 20 ServerTimeout uS ReAuthPeriod 3600 ReAuthenticate enabled MaxReq ENT zte cfg nas d Set the authentication control state of port 1 to auto and authentication mode to CHAP Enable multi subscriber access Maximum number of subscriber accessed is 5 zte cfg nas aaa control port port mode auto zte cfg nas aaa control port protocol chap zte cfg nas aaa control port multiple hosts enable PP RP E zte cfg nas aaa control port max hosts 5 zte cfg nas show aaa Control 1 Portel 1 ROT Cou IS e auto Dot ix enabled XB ele gne ication f icine eon ME COTES KeepAlive enabled KeepAlivePeriod SLT ACCOUNLING disabled MultipleHosts enabled MaxHosts 5 HistoryHostsTotal 7 OnlineHosts 0 Configure RADIUS domain 188 according to the following requirements Authentication server address and accounting server address 10 40 92 212and10 40 92 215 Share Password 123
63. Road Yuhuatai_District Nanjing CHINA montor create user admin ex loginpass B612AD6F2259089A79740AD7CB5A38BF WE um I Re adminpass 52BACSSSEE3A355C e ERA 0 nfic line vty timeout 10 aintenance Save gt Reboot e PX gt Upload set por work mode copper gt User Manager set port 2 work mode copper set port 3 work mode copper set port 3 pvid 2 set port 4 work mode copper set vlan 1 add port 1 14 17 20 untag set vlan 1 add trunk 1 16 untag set vlan 2 enable set vlan 2 add port 3 untag Logout All rights reserved GZTE Corporation DE END OF STEPS EE EH Intranet The page shows the configuration information of the switch saving Configuration This topic describes the configuration saving reminder page For the configuration of saving perform the following steps 1 Click the catalog tree in the left of the system main page Maintenance gt Save to open the configuration saving reminder page as shown in Figure 68 284 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 9 Network Management FIGURE 68 CONFIGURATION SAVING REMINDER 4 ZTE switch Microsoft Internet Explorer f 81 x THO ADO SEM UO TRO REH eRB 9 Q 2O Qss grax Gee SGA 3 u H dr a EB Hihk D f http 192 168 1 3 index htm UID 800112 ZTERR Configuration gt System ZTEPM ZXR105124 FI Port gt Port State Port Parameter Console 3 3 5 WYLAN P vlan Overview 120 Refresh
64. Tena Management WEB Network System Management Serial Port PERRET ee wy Hyper Terminal ZXR10 Configuration through Console Port Connection Console Port Configuration through console port connection is the main Connection configuration mode of the ZXR10 2920 2928 2952 The connection can be configured when the equipment is running 36 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Purpose Prerequisite Steps Chapter 5 Usage and Operation Configuring through Telnet This topic describes the configuration of ZXR10 2920 2928 2952 through Telnet Telnet mode is usually used when configuring the switch by telnet Configure the switch through the host connecting to the local Ethernet interface logs in the telnet switch Set username amp password on the switch amp make sure that local computer can ping the IP address of the layer 3 port in the switch Layer 3 port address configuration refers to section 7 13 Create a new user using command create user lt name gt admin guest Set login password using command set user local lt name gt login password lt string gt Note by default the username amp password is admin zhongxing To configure through telnet perform the following steps 1 Run the teln
65. Typeface Meaning Click Refers to clicking the primary mouse button usually the left mouse button once Double click Refers to quickly clicking the primary mouse button usually the left mouse button twice Right click Refers to clicking the secondary mouse button usually the right mouse button once Drag Refers to pressing and holding a mouse button and moving the mouse How to Get in Touch The following sections provide information on how to obtain Support for the documentation and the software If you have problems questions comments or suggestions regarding your product contact us by e mail at support zte com cn You can also call our customer support center at 86 755 26771900 and 86 800 9830 9830 ZTE welcomes your comments and suggestions on the quality and usefulness of this document For further questions comments or suggestions on the documentation you can contact us by e mail at doc zte com cn or you can fax your comments and suggestions to 86 755 26772236 You can also browse our website at http support zte com cn which contains various interesting subjects like documentation knowledge base forum and service request Confidential and Proprietary Information of ZTE CORPORATION iii This Page is intentionally blank iv Confidential and Proprietary Information of ZTE CORPORATION Introduction Contents Equipment Installation Local Safety Chapter 1 Safety Instruction Overv
66. ZESR domain Result This sets primary port in ZESR domain Confidential and Proprietary Information of ZTE CORPORATION 211 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I 212 ZTEDH 3 To set secondary port in ZESR domain use command set zesr domain Table 354 lt domainId gt lt portname gt in global configuration mode secondary port This is shown in TABLE 354 SET ZESR DOMAIN SECONDARY PORT COMMAND Format Mode set zesr domain lt domainId gt secondary port lt portname gt global config Function This sets secondary port in ZESR domain Result This sets secondary port in ZESR domain 4 To set primary trunk port in ZESR domain use command set zesr domain in Table 355 lt domainId gt lt trunkname gt in global configuration mode trunk This is shown primary TABLE 355 SET ZESR DOMAIN PRIMARY TRUNK COMMAND Format Mode set zesr domain domainId primary trunk lt trunkname gt global config Function This sets primary trunk port in ZESR domain Result This sets primary trunk port in ZESR domain Note Set trunk port as primary port on switches in ZESR domain 5 To set secondary trunk port in ZESR domain use command set zesr domain domainId secondary trunk lt trunkname gt in global configuration mode in Table 356 This is shown TABLE 356 SET ZESR DOMAIN SECONDARY TRUNK COMMAND Format Mode set zesr domain domain
67. add por i 5 untag zte cfol foet vlan 100 add port 24 tag ZC eiue Sc Sqinq session 2 customer vlan 201 4094 uplink vlan 200 zte Cio foec post 4 6 oa nng oe Sson Z einabile zte cfg set vlan 200 enable ZzLe crg set vlan 200 add port 4 6 untag zte cfg set vlan 200 add port 24 tag syslog Overview Syslog Syslog is a key part of Ethernet switch It is the information Information center of system software module Syslog manages and Center classify most output information so that the information can be filtered effectively to support network manager and developer monitoring network running circumstance and diagnosing network fault Syslog log system classifies log information to eight levels according to the Levels This is shown in Table 324 TABLE 305 SYSLOG INFORMATION Level Description Emergencies Very much emergent error Alerts Error needing to correct immediately Critical Critical error Error needing to note but not Errors ck critical Warnings Warnings maybe error exist Notifications Information that needs notification Informational Normal suggestion information Debugging Debugging information Confidential and Proprietary Information of ZTE CORPORATION 185 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Purpose Steps Configuring Syslog This topic describes the configuration of Syslog on ZXR10 2920 2928 2952 For the configuration of Syslog perform the following
68. allows for read only access while private indicates that the read write authority to the switch is permitted gt If community string created with this command already exists newly created string overwrites the original one 2 To create a view and specify whether the view contains a mib subtree use command create view in SNMP config mode This is shown in Table 373 TABLE 373 CREATE VIEW COMMAND Format Mode Function create view SNMP config This creates a view Result This creates a view and specifies whether the view contains a mib subtree Confidential and Proprietary Information of ZTE CORPORATION 227 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH gt A view is an object subset of the MIB Parameter lt mib oid gt specifies mib subtree If the excluded or included mib subtree is not specified it includes 1 3 6 1 by default gt When view created with this command already exists newly created view overwrites original one ce To set specific community name that view contains use command set community view in SNMP config mode This is shown in Table 374 TABLE 374 SET COMMUNITY VIEW COMMAND Format Mode Function set community SNMP config This sets specific view community name that view contains Result This sets specific community name that view contains gt Community and view must be created One community can only correspond to one view but one view can
69. and Proprietary Information of ZTE CORPORATION 207 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 347 SET SFLOW COLLECTOR ADDRESS COMMAND Format Mode Function set sflow global config This sets IP address collector address of sFlow collector lt A B C D Result This sets IP address of sFlow collector 3 To enable sample flow function on port use command in global configuration mode set sflow ingress egress port portlist on frequency 20000 100000000 off lt 20000 100000000 gt is the sample frequency of port with data packets as its unit This is shown in Table 348 TABLE 348 SET SFLOW PoRT COMMAND Format Mode Function set global config This enables sflow ingress egress por sample flow t portlist fon function on port frequency 20000 100000000 off lt 20000 100000000 Result This enables sample function on port 4 To set ingress sample mode of sFlow function use command set sflow ingress sample mode forward good in global configuration mode This is shown in Table 349 TABLE 349 SET SFLOW INGRESS COMMAND Format Mode Function set sflow ingress global config This sets ingress sample mode sample mode of forward good sFlow function Result This sets ingress sample mode of sFlow function 5 To set sample frequency reload mode on port of sFlow function use command set sflow ingress egress reload mode continuous cpu in gl
70. button to submit Result Configuration of selected port is accessible Note When security is enabling Mac Limit is not supported Important Ensure that changes made to a port is not web management terminal this can effect in terminating web management session For batch ports configuration select some ports in the port configuration information page list and at the same time user can choose Select All for all ports to be selected then click Apply button to open the batch ports configuration page as Shown in Figure 51 Confidential and Proprietary Information of ZTE CORPORATION 269 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Purpose Steps FIGURE 51 BATCH PORT CONFIGURATION la x X RRO SEV KAW TAD MBH e tAE gt 0AA Quer ukaz One JD 3d Hren HAHEI http 192 168 1 3 index htm UID 800112 xm v ORB mme ZTEDH Ey ZXR10 5124 FI Configuration System ZTEPSM ZXR105124 FI Port gt Port State gt Port Parameter 3 3195 VLAN eases W PVLAN 120 v Refresh gt Mirror S Lacp Port Configuration Monitoring gt Terminal Log PortlD 1 3 5 gt Port Statistics E OO Running Config vV AdminStatus Maintenance Iv WorkMode Fiber gt Save gt Reboot PVID gt Upload See FlowControl MultiFilter I SpeedAdvertise Security MacLimit Apply Return Logout All rights reserved
71. can be transmitted first to ensure the key applications Configuring QoS This topic describes the configuration of QoS including the data packet priority For the configuration of QoS perform the following steps i To set the mapping of the user priority to traffic class use command set qos priority map user priority lt 0 7 gt traffic class lt 0 3 gt in global configuration mode This is shown in Table 201 TABLE 200 SET Qos DscP COMMAND Format Mode Function set qos priority global config This sets the map user priority mapping of user lt 0 7 gt traffic priority to traffic class lt 0 3 gt class Result This sets the mapping of user priority to traffic class 2 To set the mapping of the DSCP to QoS profile use command set qos priority map ip priority lt 0 63 gt traffic class lt 0 3 gt in global configuration mode This is shown in Table 201 TABLE 201 SET Qos DscP COMMAND Format Mode Function set qos priority global config This sets the map ip priority mapping of the Confidential and Proprietary Information of ZTE CORPORATION 133 ZTEDR ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I Format Mode Function lt 0 63 gt traffic DSCP to QoS profile class lt 0 3 gt Result This sets the mapping of the DSCP to QoS profile 3 To configure global queue schedule profile use command set qos queue schedule queueO weight lt 1 32 queuel weight 1 32 queue2 weight lt 1 32 gt
72. catalog tree in the left of the system main page configuration gt mirror to open mirror information page as shown in Figure 58 Confidential and Proprietary Information of ZTE CORPORATION 275 y ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDR FIGURE 58 MIRRORING INFORMATION ia x TE SO SEM Uomo IAM 8 Bb H Ea CAR gt QO QRR weer ques E 3 wj g sr AD Hihik D http j 192 168 1 3 index htm UID 800112 s dur Bite v ses L akn ZTEDH ZXR10 5124 FI Configuration gt System ZTEPM ZXR10 5124 FI S Port gt Port State gt Port Parameter Console 3 1 Qi VLAN es gt vlan Overview 120 Refresh gt vlan Configure W PVLAN Mirror Information gt Pvlan Overview Pylan Configure Ingress Config gt Mirror Lacp Source port 11 13 Monitoring Destination port 1 gt Terminal Log Port Statistics Egress Config gt Running Config Maintenance gt Save Destination port none gt Reboot gt Upload gt User Manager Source port Refresh Logout All rights reserved ZTE Corporation ess EE EH Intranet The page shows the following information of port mirror including ingress and egress as shown in Table 432 TABLE 432 PORT MIRROR DETAIL De qe rmm Destination port Destination port of the mirror 2 Click Config link on the right of Ingress column to open the ingress port mirror configuration p
73. config This views qos 0 255 policer Result This view qos policer To view qos policy counter use command show qos counter 0 31 in global configuration mode This is shown in Table 234 Confidential and Proprietary Information of ZTE CORPORATION 143 ZTEDR ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I TABLE 234 SHOW QOS POLICY COUNTER COMMAND Format Mode Function show qos counter global config This views qos 0 31 policy counter Result This views qos policy counter 6 To view policy for traffic use command show policy mirror redirect qos remark vlan remark statistic policing 0 255 in global configuration mode This is shown in Table 235 TABLE 235 SHOW PoLiCY COMMAND Format Mode Function show policy global config This views policy for mirror redirect traffic qos remark vlan remark statistic policing O 255 Result This views policy for traffic END OF STEPS Result QoS including data packet priority has been configured Example This example shows overall situation of QoS profile Value is TC 5 DP 1 UP 5 DSCP 33 Mee CEC t Ser COs Prone TO o EO Sm eL 1b IDIOT SUMOLSIOTT oss zte erg tshow Gos proiile 66 ProfileIndex Be dp up dscp 66 5 ih E D To set up profile mapping is 5355 set dscpo profile mapping is 33266 zZte cfg set qos up to profile 5 55 zZte cfg set qos dscp to profile 33 66 zZte cfg show qos up
74. correspond to multiple communities 4 To set group name and its security level use command set group in SNMP config mode This is shown in Table 375 TABLE 375 SET GROUP COMMAND Format Mode Function set group SNMP config This sets group name and its security level Result This sets group name and its security level There are three levels of group no authentication and no encrypting authentication and no encrypting authentication and encrypting Group can be configured as three views reading writing and informing If it is not specified it will take zte View as the default view including reading writing and informing It is allowed to configure on switch with same group name and different security level 5 To set user name group it belonging to and its security attribute use command set user in SNMP config mode This is shown in Table 376 TABLE 376 SET USER COMMAND Format Mode Function set user SNMP config This sets user name group it 228 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 9 Network Management Format Mode Function belongs to and its security attribute Result This sets user name group it belongs to and its security attribute gt Security attribute of user includes authentication and cryptogram arithmetic of authentication and encrypting MD5NSHANDES Security level of user and group should be accordant To set engine identifier use c
75. creates a VLAN name string contig 78 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Chapter 7 Service Configuration Result This creates a VLAN name To set port PVID use command set port lt portlist gt pvid lt 1 4094 gt in global configuration mode This is shown in Table 66 TABLE 66 SET PORT PVID COMMAND Format Mode Function set port portlist pvid deis This sets port PVID config lt 1 4094 gt Result This sets port PVID To set trunk PVID use command set trunk lt trunklist gt pvid lt 1 4094 gt in global configuration mode This is shown in Table 67 TABLE 67 SET TRUNK PVID COMMAND Format Mode Function set trunk lt Global trunklist gt pvid This sets trunk PVID config lt 1 4094 gt Result This sets trunk PVID To Enable Disable the VLAN use command set vlan vlanlist enable disable in global configuration mode This is shown in Table 68 TABLE 68 SET VLAN COMMAND Format Mode Function set vian Global vlanlist This Enable Disable the VLAN enable disable Result This Enable Disable the VLAN To add a specified port to the VLAN use command set vlan vlanlist add port lt portlist gt tag untag in global configuration mode This is shown in Table 69 TABLE 69 SET VLAN ADD PoRT COMMAND Format Mode Function set vlan lt vianlist gt add Global This adds a specified port to the port portlist config VLAN ta
76. deceiving the server and sending spurious address so it can start protecting IP source and create a binding table for the IP address of the user MAC address ports and VLAN to prevent user deceiving or use IP address of other users The following are the equipment level security control CPU security control technology can resist DoS attack from CPU SSH SNMPv3 protocol supplies network management security Multilevel security of console can prevent unauthenticated users changing the switch configuration RADIUS authentication may carry on the common control to the switchboard The following are the network security control ACL based on port or Trunk makes it possible for users to apply security strategy to the ports of switches or Trunk Binding MAC address and the filtration based on source or destination supply effective control over the flux based on address Port MIRROR function is an effective tool for network management analyses QoS Guarantee Applications of QoS are shown below Standard 802 1p QoS and DSCP field sort label and sort again based on single group with source and destination IP address source and destination MAC address and TCP UDP port number Queue schedule arithmetic Strict Priority SP amp combination schedule Support CAR Committed Access Rate function Manage the asynchronous upward and downward data stream from end Confidential and Proprietary Information of ZTE CORPORATION 5
77. group name name in group config mode This is shown in Table 414 TABLE 414 SET GROUP NAME COMMAND Format Mode Function set group name group config This sets cluster Confidential and Proprietary Information of ZTE CORPORATION 251 252 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Format Mode Function lt name gt name Result This sets cluster name To set a time interval for handshake between command switch and member switch use command set group handtime lt 1 300 gt in group config mode This is shown in Table 415 TABLE 415 SET GROUP HANDTIME COMMAND Format Mode Function set group group config This sets a time handtime lt 1 interval for 300 handshake between command switch and member switch Result This sets a time interval for handshake between command switch and member switch To set effective holding time of information about switches in cluster use command set group holdtime lt 1 300 in group config mode This is shown in Table 416 TABLE 416 SET GROUP HOLDTIME COMMAND Format Mode Function set group group config This sets effective holdtime 1 300 holding time of information about switches in cluster Result This sets effective holding time of information about switches in cluster To set IP address of internal public SYSLOG Server of cluster use command set group syslogsvr A B C D in group config mode This is shown in Table 417 TA
78. gt to set the password for entering the global configuration mode to prevent the login of unauthorized users Result This sets the password for entering the global configuration mode To return to the user mode from the global configuration mode use the exit command END OF STEPS Global mode has been configured Confidential and Proprietary Information of ZTE CORPORATION 41 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Purpose Steps Result Purpose Steps Result Purpose Steps Configuring SNMP Mode This topic describes the configuration of SNMP mode For the configuration of SNMP mode perform the following steps 1 In the global configuration mode use the command config snmp to enter the SNMP configuration mode as shown below zte cfg config snmp Ate Chg s mmol Note In SNMP configuration mode SNMP and RMON parameters can be set 2 To return to the global configuration mode from the SNMP configuration mode use command exit or press Ctrli Z END OF STEPS SNMP mode has been configured Configuring Layer 3 Mode This topic describes the Layer 3 configuration mode For the configuration of Layer 3 mode perform the following steps 1 In the global configuration mode execute the command config router to enter the Layer 3 configuration mode as shown in the following example Zee CL a On L ote zte Ccfog router Note In the Layer
79. gt vlan Configure W PVLAN File Upload gt Pvlan Overview gt Pvlan Configure Mirror Select file Browse Lacp l P Lacp Port gt Lacp State Monitoring Terminal Log gt Port Statistics Ok Return gt Running Config Maintenance e ser mures wj esa use ZXR10 5124 FI ZTEPX ZXR105 Only files as follows can be uploaded kernel z config bt running cfg gt User Manager Logout All rights reserved ZTE Corporation ax OET Eana 0 2 Click Browse to browse and select the file need uploading as shown in Figure 71 then click OK to upload the file FIGURE 71 BROWSE AND SELECT FILE ZTE switch Microsoft Internet Explorer B THE RRO SSW KRA IAW SB emB 9 Q Z Qme mx Owe C ES 59 v 8 dr i AD HAED http 192 168 1 3 index htm UID 800112 A Configuration gt System 7 d t Tvp1nat 4 SETITI Ekim QD Cy sce 3 E ect E3 2 xl iu Browse nel z config bt running cfg Return ASW sees 7 TFE T GEL k X x ERA oooofgooo amp 8 Logout All rights reserved ZTE Corporation WIEM 00000000000 a trent END OF STEPS Result The file uploaded successfully Confidential and Proprietary Information of ZTE CORPORATION 287 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH NOTE
80. has been configured Example One host attempts to access switch through SSH Switch is configured with a layer 3 port IP address of the port is 192 222 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 9 Network Management 1 1 1 24 and the IP address of the host is 192 1 1 100 24 This is shown in FIGURE 37 SSH CONFIGURATION S witch 192 1 1 1 24 192 1 1 100 24 Specific configuration of the switch is as follows zte c fol rerea Uger zte gues zte Cioli logi npa sme zte cfg set ssh enable Configuring SSH v2 0 Purpose This topic describes the client using SSH v2 0 can configure free software Putty developed by Simon Tatham to access the switch Steps For the configuration of SSH v2 0O perform the following steps 1 Set the IP address and port number of SSH Server as shown in Figure 38 Setting IP Address And Port Number Of SSH Server Confidential and Proprietary Information of ZTE CORPORATION 223 y ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDR FIGURE 38 SETTING IP ADDRESS AND PORT NUMBER OF SSH SERVER SS PuTTY Configuration E E xl Category Session Basic options for your PuTTY session NE Logging Specify your connection by host name ar IP address H Terminal des Keyboard Hast Mame or IP address Fort Features Protocol E window C Baw Telnet Rlogn SSH P LA i
81. is called Customer port Port connected to ISP network is called Uplink port Edge access equipment of ISP network is called Provider Edge PE Confidential and Proprietary Information of ZTE CORPORATION 177 178 User Network Purpose Steps ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH FIGURE 33 QiINQ NETWORKING User network 1 CVLAN 1 100 SPVLAN 10 customer port User network 2 CVLAN 1 100 SPVLAN 10 customer port SPVLAN Service Provider VLAN CVLAN Customer VLAN User network is generally connected to PE through Trunk VLAN mode Internal Uplink ports of the ISP network are symmetrically connected through the Trunk VLAN mode When a packet is sent form user network 1 to customer port of switch A because PORTBASE VLAN based customer port does not identify the tag when receiving the packet customer port processes the packet as an untagged packet no matter whether this data packet is attached with VLAN tag or not Packet is forwarded by VLAN 10 which is determined by the PVID Uplink port of switch A inserts outer tag VLAN ID 10 when forwarding data packet received from customer port Tpid of this tag can be configured on switch Inside ISP network packet is broadcast along port of VLAN 10 until it reaches switch B Switch B finds out that port connected to user network 2 is a customer port Thus it removes outer tag in compliance with conventional 802 1Q protocol t
82. management of switch perform following steps 1 To use web management interface open a web browser and enter IP address of switch as shown in Figure 44 262 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 9 Network Management FIGURE 44 WEB USER LOGIN la x 3r RRO SEV KAW IAD WB e HRE gt QAAL Que aker Oe JD 3n E mit HBihE D http 192 168 1 3 Web user login Username Sa LoginPassword km UserRole adminUser x AdminPassword Login xm v esi ie gt po EE EH Intranet 2 Enter Username and login Password By default username is admin and password is zhongxing 3 Select User Role It could be Admin User or Normal User In Normal User there is no need of Admin Password Without Admin Password admin user is not accessible 4 Click Login button and log in the main system Result Ethernet switch is displayed as shown in Figure 45 Confidential and Proprietary Information of ZTE CORPORATION 263 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH FIGURE 45 SYSTEM INTERFACE ZTE switch Microsoft Internet Explorer O OOO 18 x THO SHD SAM aA IAD REH PRE gt OU d QLR grax queas SIS G4 Ou Hh AD Hih D http 192 168 1 3 index htm UID 800112 mr wj OB ume ZETA ZXR10 5124 FI Configuration gt System ZTEP ZXR10 5124 FI Port Sy VLAN em
83. max preview time of global use command iptv control prvtime in nas config mode This is shown in Table 125 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 7 Service Configuration TABLE 125 IPTV CONTROL PRVTIME COMMAND Format Mode Function nas iptv control eoo This sets the max preview time of prvtime dc global Result This sets the max preview time of global 5 To set the period of global reset preview counts use command iptv control prvcount reset period in nas config mode This is shown in Table 126 TABLE 126 IPTV CoNTROL PRVCOUNT RESET PERIOD COMMAND Format Mode Function pew contro Laas This sets the period of global reset prvcount config preview counts reset period mode Result This sets the period of global reset preview counts 6 To enable disable IPTV use command iptv control enable disable in nas config mode This is shown in Table 127 TABLE 127 IPTV CONTROL COMMAND Format Mode Function iptv control ne p config This enable disable IPTV enable disable mode Result This enable disable IPTV END OF STEPS Result IPTV has been configured Configuring IPTV Channels Purpose This topic describes the configuration of IPTV channels Steps For the configuration of IPTV channels perform the following steps 1 To create channels of IPTV use command create iptv channel lt channellist gt in nas config mode This is shown in Table 128 TABL
84. may be down Starting the single port loop test and disabling the port with loop can efficiently avoid the influence caused by port loop Working principle of single port loop test switch sends a test message on a port if the test message comes back on the port without any changes or just is added a tag it indicates that a loop exists on this port Principle of The switch sends a test packet through a port If this test Single Port packet is received through the port without any change or only Loop Test a tag is attached it indicates that a loop exists in this port The test packet sent by the switch includes the following three parameters Source MAC It indicates the MAC address of the switch The MAC address of address each switch is unique Port Number Port numbers correspond to the numbers of the ports on the switch one by one Discimination For each switch the digital signature of each port is different Field When three parameters in the test packet sent through port are same as those in the test packet received through the port a port loop absolutely exists Configuring Single Port Loop Test Purpose This topic describes the configuration of single port loop test Steps For the configuration of single port loop test perform the following steps 1 To enable disable loop test function of specified port use command set loopdetect port lt portlist gt enable disable in global config mode This is shown in T
85. mode This is shown in Table 56 TABLE 56 SHOW PORT STATISTICS TIME COMMAND Format Mode Function show port lt portlist gt This displays statistics ums Global statistics config information of the port in unit lmin unit 5min unit time Result This displays statistics information of the port in unit time 4 To display the QoS configuration data of the port use command show port lt portlist gt qos in global configuration mode This is shown in Table 57 TABLE 57 SHOW PoRT QoS COMMAND Format Mode Function Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Introduction Purpose Chapter 7 Service Configuration Format Mode Function show port Global This displays the QoS configuration lt portlist gt qos config data of the port Result This displays the QoS configuration data of the port 5 To display the bandwidth information of the port use command show port lt portlist gt bandwidth session 0 3 in global configuration mode This is shown in Table 58 TABLE 58 SHOW PORT BANDWIDTH COMMAND Format Mode Function show port lt portlist gt Global This displays the bandwidth bandwidth config information of the port session 0 3 Result This displays the bandwidth information of the port END OF STEPS Port information is displayed Port Mirroring Port mirroring is used to mirror data packets of the switch port ingress mirroring port to an ingress destin
86. of ZTE CORPORATION ZTEmR Result Example Network Time Protocol Chapter 8 Access Service TABLE 309 SET SYSLOG MODULE COMMAND Format Mode Function set syslog module global config This enable disable module of syslog Result This enable disable module of syslog S To display configuration of syslog use command show syslog status in global configuration mode This is shown in Table 310 TABLE 310 SHOW SYSLOG STATUS COMMAND Format Mode Function show syslog global config This displays status configuration of syslog Result This displays configuration of syslog END OF STEPS Syslog has been configured on ZXR10 2920 2928 2952 In this example syslog in switch is enabled level of information is informational and all functional modules are enabled IP address of server is 192 168 1 1 and name of server is Srv1 Configuration Zee Crg tset syslog VNevyel t omi ea zte cig set syslog add server 1 ipaddress 192 LOG i 1 name Srvl zte cfg set syslog module all enable zte cfg set syslog enable zte cfg show syslog status Syslog status enable Syslog alarm level informational Syslog enabled modules alarm cmdlog Syslog server IP Name 1 LOZ T68 e 1 ory zte cfg Configuring NTP NTP Network Time Protocol is used by Ethernet switches to synchronize time with other network devices ZXR10 2920 2928 2952 provides function of NTP client and synchronizes time with the NTP servers in ne
87. of ZTE CORPORATION 25 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH which connects to serial port on computer Other end is an RJA5 port which connects to Console port of ZXR10 2920 2928 2952 Console cable is shown in FIGURE 18 Linear ordering of serial port console cable is shown in TABLE 10 FIGURE 18 CONSOLE CABLE INSTALLATION Pedirection amplify TABLE 10 LINEAR ORDERING OF SERIAL PORT CONSOLE CABLE Side A Color Side B 2 White 3 3 Blue 6 White 4 5 Orange 5 4 White 7 6 Green 2 7 White 8 8 Brown 1 Network Cable Installation Both ends of network cable are crimped with RJ45 connectors as shown in FIGURE 19 Name of the cable connector 8P8C straight crimping cable connector Specification E5088 001023 Technical parameters Rated current 1 5A Rated voltage 125V gt Crimped with AWG24 28 round wire 26 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 4 Installation and Debugging FIGURE 19 NETWORK CABLE Direction A Connectors cables can be classified into two categories Straight straight through RJ45 network cable with pins at both ends in through RJ45 One to one correspondence Specific pin outs are shown in Table 10 TABLE 10 STRAIGHT THROUGH NETWORK CABLE RJ45 LINEAR ORDERING End A Cable Color End B White orange Orange White green Green Blue White blue White brown co NI WO 43 0 WIN
88. olo zie oor seu erunk seu SS cb OT normal In this example show GVRP configuration status zie erg SEOW SN GVRP is enabled Poe lel SEIS Registration Laser OIN 2 Enabled Fixed Qon 00 00 00 00 00 T2 Enabled Normal uo OOF Cor 00 OOF 00 DHCP Snooping Option82 DHCP Dynamic Host Configuration Protocol is a protocol that the network host sends request to server to get host configuration in dynamic mode As having no IP address DHCP servers interact in broadcasting way and course is transparent There is no authentication between DHCP server and client There may be DHCP servers that establish a private and illegal way which causes confusion to part of the hosts of their address distribution gateway and DNS parameters and make it impossible for the hosts to connect to the external network There will be IP deceiving MAC address deceiving and user ID deceiving from illegal client and exhaustion of DHCP server address DHCP Snooping and Option82 are designed to solve these safety problems DHCP Snooping namely DHCP packet filtering is to detect legality of DHCP packets based on some special rules and filter illegal packets Use Option82 technique to provide more additional information and then strengthen the network safety ability Typical applications of DHCP Snooping and Option82 are shown in Figure 34 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA DHCP Snooping Function DHCP Opt
89. rstp stp in global configuration mode This is shown in Table 154 TABLE 154 SET STP FORCEVERSION COMMAND Format Mode Function set stp Global config This sets the STP forceversion forced version mstp rstp stp Result This sets the STP forced version 9 To set the STP forwarding delay time use command set stp forwarddelay 4 30 in global configuration mode This is shown in Table 155 TABLE 155 SET STP FORWARD DELAY COMMAND Format Mode Function set stp forwarddelay Global This sets STP forwarding 4 30 config delay time Result This sets STP forwarding delay time 10 To set STP hello time use command set stp hellotime 1 10 in global configuration mode This is shown in Table 156 TABLE 156 SET STP HELLOTIME COMMAND Format Mode Function set stp hellotime lt 1 Global The sete helotiie 10 gt config 11 To set stp hmd5 digest use command set stp hmd5 digest CISCO HUAWEI 0 0x00 O Oxff f gt in global configuration mode This is shown in Table 157 TABLE 157 SET STP HMD5 DIGEST COMMAND Format Mode Function set stp hmd5 digest CI SCO HUAWEI 0 0x00 O Oxff f gt Global This sets stp hmd5 config digest Result This sets hmd5 digest 114 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR 12 5 18 15 16 Chapter 7 Service Configuration To set stp hmd5 key use command set stp hmd5 key CI SCO HUAWEI 0 0x00 O Ox
90. set zdp port group config This enable disable lt portlist gt port ZDP function enable disable Result This enable disable port ZDP function 3 To enable disable trunk ZDP function use command set zdp trunk lt trunklist gt enable disable in group config mode This is shown in Table 394 TABLE 394 SET ZDP TRUNK COMMAND Format Mode Function set zdp trunk group config This enable disable lt trunklist gt trunk ZDP function enable disable Result This enable disable trunk ZDP function Important By default ZDP functions of all ports trunks are enabled When ZDP function of a port trunk is disabled contents of neighbor device information table of port trunk are cleared and ZDP packets processing is suspended Note A port trunk can collect and send ZDP information normally only when both ZDP function of port trunk and system ZDP function are enabled 4 To set time interval for sending ZDP packets use command set zdp holdtime lt 10 255 gt in group config mode This is shown in Table 395 TABLE 395 SET ZDP HOLDTIME COMMAND Format Mode Function set zdp holdtime group config This set time 10 255 interval for sending ZDP packets Result This sets the time interval for sending ZDP packets Note ZDP holdtime value should be bigger than time value here give the advice that the holdtime value is three times of time value 5 To set time interval for sending ZDP packets use command set zdp timer
91. sets MST area name To enable disable STP port use command set stp port lt portlist gt enable disable in global configuration mode This is shown in Table 171 TABLE 171 SET STP PORT COMMAND Format Mode Function set stp port lt portlist gt enable disable Global This enable disable stp config port Result This enable disable STP port To set port s link type of the instance use command set stp port lt portlist gt linktype point point shared in global configuration mode This is shown in Table 172 TABLE 172 SET STP PORT LINKTYPE COMMAND Format Mode Function set stp port lt portlist gt linktype Global This sets port s link type of point config the instance point shared Result This sets port s link type of the instance To set port packet type of the instance use command set stp port lt portlist gt packettype I EEE CISCO HUAWEI HAMMER extend in global configuration mode This is shown in Table 173 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 28 29 30 31 Chapter 7 Service Configuration TABLE 173 SET STP PoRT PACKETTYPE COMMAND Format Mode Function set stp port lt portlist gt packettype Global This sets port packet I EEE CISCO HUAWEI config type of the instance HAMMER extend Result This sets port packet type of the instance To check STP port protocol type use command set stp port lt portlist gt pcheck in
92. steps 1 To enable disable syslog use command set syslog in global configuration mode This is shown in Table 306 TABLE 306 SET SYSLOG COMMAND Format Mode Function set syslog global config This enable disable syslog Result This enable disable syslog Note By default syslog is disabled Syslog is enabled when there is much log information the system performance will degrade To define syslog information level use command set syslog level in global configuration mode This is shown in Table 307 TABLE 307 SET SYSLOG LEVEL COMMAND Format Mode Function set syslog level global config This defines syslog information level Result This defines syslog information level Note Default level of syslog information is informational If level of syslog information is configured to emergencies the information will be sent firstly To setup syslog information receiving server use command set syslog add delete server in global configuration mode At most five IP addresses of syslog server can be configured This is shown in Table 308 TABLE 308 SET SYSLOG SERVER COMMAND Format Mode Function set syslog add global config This setups syslog delete server information receiving server Result This setups syslog information receiving server To enable disable module of syslog use command set syslog module in global configuration mode This is shown in Table 309 186 Confidential and Proprietary Information
93. the version configuration file such as D IMG The following dialog box will appear as shown in Figure 23 FIGURE 23 CONFIGURE DIALOG BOX Tftpd Settings Home Directory DIME Browse Number af Clients 7 Logging Desired Check to enable lagging Lag File Mame Browse Verbose Logging Check for verbose logging Cancel 3 Click OK in Figure 23 to finish the settings END OF STEPS Result Confidential and Proprietary Information of ZTE CORPORATION 53 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Background of TFTP server is implemented Start the TFTP server and run copy on the switch to backup restore files or import export configurations Configuring Imports and Exports Purpose This topic describes the import and export functions of configuration information of ZXR10 2920 2928 2952 Steps For the configuration of import and export functions perform the following steps 1 The command show running config toFile is used to export the execution result of show running config to a config txt and to save it in the FLASH memory Result This command exports and saves it in the FLASH memory Example This file can also be uploaded to the TFTP server to view a file Ace Cn ehec ioo JL 69 Le poa Config Coe In normal condition when rebooting the switch use command running cfg file to recover configurations When switch can not find running cfg file it will c
94. threshold lt 1 65535 eventindex lt 1 65535 gt rising falling owner string status valid underCreation createRequest invalid Result These create configure instances of the alarm group Command line configuration of alarm group is to configure alarmTable in the alarm group The configuration involves gt ZGSlarmiInterval gt alarmVariable It indicates the object identifier of a specific variable to be sampled in the local mib for example for sampling the etherHistoryBroadcastPkts the variable value shall be 1 3 6 1 2 1 16 2 2 1 7 x x where x x indicates the sampling bucket of an instance of the history group gt alarmSampleType The absolute indicates the absolute value and delta indicates the relative value gt alarmStartupAlarm It can be risingAlarm 1 fallingAlarm 2 and risingOrFallingAlarm 3 which indicate that after the instance becomes effective the first sampling starts when the rising sampling value exceeds the threshold the falling sampling value is lower than the threshold or both cases occur simultaneously gt alarmRisingThreshold gt alarmFallingThreshold gt alarmRisingEventIndex gt alarmFallingEventIndex gt alarmOwner gt alarmStatus It can be valid underCreation createRequest and invalid When it is set to invalid the alarm instance is deleted Alarm va
95. to profile 5 up ProfileIndex 5 35 Zte cfg show qos dscp to profile 33 dscp ProfileIndex 33 66 144 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Features of VLAN Promiscuous port Chapter 7 Service Configuration Config QoS Queue Profile Modify queue schedule profile 2 which has queue 4 5 6 7 and change this mode to sdwrri the weight respectively is 5 10 15 20 zte cfg set qos queue schedule 2 4 sdwrr 1 5 zte cfg set qos queue schedule 2 5 sdwrr 1 10 zte cfg set qos queue schedule 2 6 sdwrr 1 15 zte cfg set qos queue schedule 2 7 sdwrr 1 20 Zte cfg tshow qos queue profile 2 Queue schedule profile 2 QueueNumber Mode Weight 0 sdwrr 0 1 sdwrr 0 2 2 sdwrr 0 3 3 sdwrr 0 4 4 sdwrr l 5 5 sdwrr 1 10 6 sdwrr 1 15 7 sdwrr 1 20 Private Virtual LAN Overview Packets of different users are separated to improve network security A VLAN can be allocated to each user This has its limits Current IEEE 802 1Q standard supports up to 4094 VLANs which restrict the user capacity and network expansion Each VLAN corresponds to an IP subnet which leads to waste of IP address resources m Planning and management of enormous VLANs and IP subnets add complexity to network management There are two types of PVLAN ports s Promiscuous port Isolated port A promiscuous port communicates with all other PVLAN ports The promiscuous port is the port that commun
96. trunk is disabled To enable disable loop test function of a trunk on a designated vlan use command set loopdetect trunk lt trunklist gt vlan lt 1 4094 gt f enable disable in global config mode This is shown in TABLE 440 SET LOOP DETECT TRUNK VLAN COMMAND Format Mode Function set loopdetect global config This enable disable trunk lt trunklist gt loop test function of vian lt 1 4094 gt a trunk on a vlan enable disable Result This enable disable loop test function of a trunk ona vian Note By default loop test function of a trunk is disabled To enable disable loop test protection function of specified port use command Table 441 Confidential and Proprietary Information of ZTE CORPORATION 295 296 6 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 441 SET LOOP DETECT PORT PROTECT COMMAND Format Mode Function set loopdetect global config This enable disable port lt portlist gt loop test protection protect function of specified enable disable port Result This enable disable loop test protection function of specified port Note Loop test protection function means that port is automatically blocked when it detects a loop In this way influence caused by port loop is avoided To enable disable loop test protection function of a trunk use command set loopdetect trunk lt trunklist gt protect enable disable in global config mode This is shown in Table 442
97. vlan Configure x W PVLAN Aggregator Information gt Pylan Overview gt Pylan Configure GroupNum Attached Ports Active Ports GroupMode Config Mirror x Q Lacp 1 NULL NULL Dynamic config gt Lacp Port 2 21 24 NULL Dynamic config Gi Lacp State Monitoring 3 NULL NULL Dynamic config gt Terminal Log 4 NULL NULL Dynamic config Port Statistics Running Config 5 NULL NULL Dynamic config Maintenance 6 NULL NULL Dynamic config gt Save gt Reboot 7 NULL NULL Dynamic config gt Upload r User Manager 8 NULL NULL Dynamic config 9 NULL NULL Dynamic config 10 NULL NULL Dynamic config 11 NULL NULL Dynamic config 12 NULL NULL Dynamic config 13 NULL NULL Dynamic config 14 NULL NULL Dynamic config Logout 15 NULL NULL Dynamic config Il righ All rights rasered 16 NULL NULL Dynamic config ZTE Corporation 3E EE EH Intranet gt This page shows information of assembling group as shown in Table 435 TABLE 435 ASSEMBLING GROUP DETAIL Attached Ports Attached ports in the assembling group Active Ports Active ports in the assembling group GroupMode Assembling mode of the assembling group Click on Config button on the right to open the corresponding assembling group configuration page as shown in Figure 64 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Note I mportant Purpose Steps Chapter 9 Network Management FIGURE 64 ASSEMBLING GROUP INFORMATION
98. 094 gt dest_mac src_mac both Global This sets the filter config address of fdb Result This sets the filter address of fdb To display fdb information use command show fdb static dynamic filter detail in global configuration mode This is shown in Table 82 TABLE 82 SHOW FDB COMMAND Format Mode Function show fdb Global static dynamic filter This displays fdb information detail contig Result This displays fdb information To display the aging time of fdb address use command show fdb agingtime in global configuration mode This is shown in Table 83 TABLE 83 SHOW FDB AGINGTIME COMMAND Format Mode Function show fdb Global This displays the aging time of fdb agingtime config address Result This displays the aging time of fdb address To display the MAC based fdb information use command show fdb mac xx xx xx xx xx xx in global configuration mode This is shown in Table 84 Confidential and Proprietary Information of ZTE CORPORATION 85 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 84 SHOW FDB MAC COMMAND Format Mode Function show fdb mac Global This displays the MAC based fdb XX XX XX config information XX XX XX Result This displays the MAC based fdb information 8 To display the port based fdb information use command show fdb port lt portname gt detail in global configuration mode This is shown in Table 85 TABLE
99. 10 2928 provides the following types of access ports Twenty four 10 100BASE T Ethernet ports These ports support duplex semiduplex 10 100M amp MDI MDIX self adapter amp VCT automatically check Two fixed 10 100 1000BASE T ports s One expand slot It can expand double 1000M optical interface double 1000M electrical interfaces one optical amp one electrical interfaces s One console port is to realize the management and configuration of various services Indicators There are 48 indicators on the front panel of the ZXR10 2928 indicating the status of the 24 10 100 Base T ports Every interface has two indicators indicating half duplex full duplex and LNK ACT Four indicators indicate two 10 100 1000 Base T port Two system indicators indicate PWR amp RUN 12 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 3 Structure and Principle System indicators include power indicator PWR and running indicator RUN After the system is powered on PWR indicator is on and the RUN indicator is off gt BootROM starts to load the version If the version is unavailable the states of indicators do not change If the version is loaded normally the RUN indicator flashes at 1Hz If the power indicator PWR is flashing it indicates that the switch is the main or standby role of the stack system Flashing in the same frequency with RUN shows it is the main equipment Flashing in t
100. 28 2952 V1 0 Access Switch User Manual Volume I ZTEDH Hardware and Software Faults Purpose Prerequisites Steps Result Common Troubleshooting By type faults include software faults and hardware faults Hardware faults if accurately located usually can be cleared by replacing the hardware Software and configuration faults can be cleared through proper operations In troubleshooting check whether the device configuration is correct whether the cables are connected correctly and whether the required environment is satisfied according to the related description in the above sections Troubleshooting through Console Port This section describes the troubleshooting through console port To troubleshoot through console port meet the following requirements Check the configuration cable Check the serial port of the HyperTerminal Check console port of the switch For troubleshooting through console port perform the following steps 1 Use proper configuration cables For the connections of configuration cables see Console Cable 2 Check the settings of serial port attributes of the HyperTerminal The correct settings are shown in Table 446 TABLE 446 SERIAL PORT ATTRIBUTE Serial Port Attributes Description Bit s baud rate 9600 Date bit a Parity check none Stop bit 1 Data Stream control none 3 Check whether serial port of HyperTerminal is normal and replace configurat
101. 33 Table 201 Set Qos Dscp Command eene 133 Table 202 Set Qos Queue Schedule Command 134 Table 203 Set Qos Policer Parameters Command 134 Table 204 Set Qos Policer Parameters Command 134 Table 205 Set Qos Policer Parameters Command 135 Table 206 Set Qos Policer Parameters Command 135 Table 207 Set Qos Policer Parameters Command 135 Table 208 Set Qos Policer Parameters Command 136 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Tables Table 209 Set Qos Policer Parameters Command 136 Table 210 Set Qos Policer Parameters Command 137 Table 211 Set Qos Policer Parameters Command 137 Table 212 Set Qos Policer Parameters Command 137 Table 213 Set Qos Policer Parameters Command 138 Table 214 Set Qos Policer Parameters Command 138 Table 215 Set Qos Policer Parameters Command 138 Table 216 Set Qos Policer Parameters Command 139 Table 217 Set Policy Vian Remark Command 139 Table 218 Set Policy Policing In Acl Command 139 Table 219 Set Policy Mirror Command eee 140 Table 220 Set Policy Redirect Command eese 140 Table 221 Set Policy Qos Remark Command 140 Tab
102. 349 350 Each ACL has best 500 rules except that Global ACL has best 16 rules Configuring Basic ACL Purpose This topic describes the basic ACL configuration number Steps For basic ACL configuration perform the following steps 1 To enter into basic ACL configuration use command config acl basic number acl number in global configuration mode This is shown in Table 188 TABLE 188 ACL BASIC NUMBER COMMAND Format Mode Function config acl basic global config This enters into number lt acl basic ACL number gt configuration mode Result This enters into basic ACL configuration mode 2 To configure the rules of ACL use command rule lt rule id permit deny lt lt source ipaddr wildcard gt any fragment in ACL config mode This is shown in Table 189 TABLE 189 RULE COMMAND Format Mode Function rule lt rule id gt ACL config This configures ACL permit deny rules lt source ipaddr wildcard gt any fragment Result This configures ACL rules END OF STEPS Result Basic ACL has been configured 126 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Purpose Steps Result Chapter 7 Service Configuration Configuring Extended ACL This topic describes the configuration of extended ACL For the configuration of extended ACL perform the following steps To enter into extended ACL configuration use command config acl extend number lt acl number gt in global configurat
103. 40 39 42 41 44 48 48 45 48 47 50 49 RX X 1 Case 2 Flange 3 Screw Install two symmetrical brackets at both sides of the 19 inch cabinet to support the switch as shown in Figure 10 Confidential and Proprietary Information of ZTE CORPORATION ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH FIGURE 10 INSTALLING BRACKETS a 1 Holder 2 Cabinet 3 Screw After installation push switch along with bracket and fix flanges with screws onto cabinet as shown in Figure 11 22 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 4 Installation and Debugging FIGURE 11 FIXING THE SWITCH IAN 4 4 4 m x 2 zs 2 10 2 14 18 18 inp Ky ZEE ZARAO IC Eg g lu ma AN SAAFEB SiSKSC 2920 i i F oe j uw F atO TX LH omm gmp gmmp gm N u I TETTE AT CUTTS AN ENN E rn u d x E is d s d 1 IK Y sys O d oti c e 5 j o TJA e t EC We YH pONeore 3 5 7 9 11 43 45 2 F EN 2 4 D 8 10 12 oe 18 1
104. 45 System Interface idxu exa p Rey n ure RUra d ess cius 264 Figure 46 System Configuration cesse 265 Figure 47 Port State And Parameters eeeeeeee 266 Figure 48 Port State Information eeeeeeeee eene eee 267 Figure 49 Port Configuration Information eeee 268 Figure 50 Single Port Configuration eere 269 Figure 51 Batch Port Configuration eeeeee eee 270 Figure 52 Vlan Information eesseeseeeenn nnne 271 Figure 53 Vian Number Input eeeernnnn nnne 272 Figure 54 Single VIaL ssssnaxadka dmi A GE e ARAA 272 FIGURE 55 Baton VIS sincinduvne des dau ivi EN PN ILI UPC M Dd MR 273 Figure 56 PVLAN Information eeeeennn nnnm nne 274 Figure 57 PVLAN Confiruation ccccccccce cece ee eeeeeeeeeeaeanas 275 Figure 58 Mirroring Information eeeeeeee eere eee 276 Figure 59 Ingress Port Mirror eeeeereeennnnnnn 2 7 Figure 60 Egress Port MIMO c scsiuaasx Esa E pagare a EE E rRXS EE 2 7 Figure 61 LACP Basic Attribute sssseeseeeeeeennnnnnn 278 Figure 62 Batch Assembling Ports Configuration 279 Figure 63 Assembling Group Information ese 280 Figure 64 Assembling Group Information ese 281 Figure 65 Terminal Log Information e eee 282 Figure 66 Statistical Infor
105. 456 Client IP address 10 40 92 100 Use default domain 176 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA QinQ description Chapter 8 Access Service zte cfg nas radius isp 188 enable zte cfg nas radius isp 188 add authentication 10 40 92s 22 zte cfg nas radius isp 188 add authentication 10 40 S2 5 215 zte cfig nas radius isp 188 add accounting 10 40 2 2 15 zte cfg nas H radius isp 188 add accounting 10 40 9 2 zte cfg nas radius isp 188 sharedsecret 123456 zte cfg nas radius isp 188 client 10 40 22 100 zte cfg nas radius isp 188 defaultisp enable zte c o nao renown dms oo Client O 40 oie TOQ IspName les DefaultIsp Yes Description FullAccounts No Dared SSC eC 123456 Authentication servers Auth port TOS TOR Gee END tol 15928 Zh DM va Ake Ise Accounting servers NOTE SONIC Oe 40 VIVA Zales l9 Oe 40 OAM ZI ical S zte cfg nas QinQ Overview QinQ is IEEE 802 1Q tunneling protocol and is also called VLAN Stacking QinQ technology is the addition of one more VLAN tag outer tag to the original VLAN tag inner tag Outer tag can shield the inner tag QinQ does not need protocol support Simple Layer 2 Virtual Private Network L2VPN can be realized through QinQ QinQ is especially suitable for small size LAN that takes layer 3 switch as its backbone Figure 33 shows typical networking of the QinQ technology Port connected to user network
106. 5 SHOW SNMP COMMAND Format Mode Function show snmp SNMP config This views SNMP configuration Result This views SNMP configuration END OF STEPS SNMP has been configured This example describes basic configuration of SNMPv1 and SNMPv2c Suppose that IP address of network management server is 10 40 92 105 switch has a layer 3 port with IP address of 10 40 92 200 and switch is managed through network management server Create a community named zte with read write authority and view named vvv and then associate the community zte with view vvv Specify IP address of the host receiving traps as 10 40 92 105 and community as zte Confidential and Proprietary Information of ZTE CORPORATION 231 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Lc GEO UECONEMI NE ON T ici esorcmcbsru su ipport 10 ipaddress 10 40 DE ZOOM Asa Zon Zo ae 0 Zbe Chkg router Set apport O vlan 2 Bees euis eue use wooo 0 eimaole zte crog router texit zc ccu onisg snmp zo ES ed 9 Sup wereace CO wees I9xsaesaers zte cfg snmp create view vvv ACS LC Sie Sec COMMUNE V EXEC Vibe NOV zte cfg snmp set host 10 40 92 105 trap yvi zte zte cfg snmp show snmp community CommunityName Level ViewName zte cfg snmp show snmp view ViewName lcs Ihave Mi B signa VVV inelude i on 6 1 zte cfg snmp show snmp host HostIpAddress Comm User Version type SecurityLevel ROR 40
107. 6C OE oe ZXR10 Zi OILS TEE dos do EOR Olek d6 jac Z CE 22928 2 100 IDE d0 iB OS Git ir ean chi 24310 SIG FI SE do e c dice iue fa i cand 2xRi0 SG TOO dos dor Eor DS cls iG einelal ZK ILO ADU SS NIE 5 WO lO aor Eos 09 3a I cance 224310 20109 Emaar WYXX cfg group set group add device 1 5 Adding device id 1 Successed to add member Adding device id 2 s Successed to add member Adding device id 3 7 Successed to add member Adding device id 4 i E Successed to add member Adding device id 5 Successed to add member Cmdr WYXX cfg group show group member MbrId MacAddress IpAddress Status i OO Gl do EC Oe Gls eZ Eo S EF 24 24 Up Z QUI dor dor ee OS eit doe IGS ie 3 24 Up 3 I cl s d0 B OS fa Jb 9 RC Jes 2 24 Up 4 00 eU e e e EC 08 CIS e T62 i ee Up 258 Confidential and Pra 5 00 dO dO fc 09 3a 192 168 1 6 24 Up ZTEmA Chapter 9 Network Management Switch to each member switch and add all ports to VLAN 4000 taking member 4 as an example emani WYXX cfg set vlan 4000 enable Cmar WYXX cfg set vlan 4000 add port 1 16 tag Cmar WYXX cfg rlogin member 4 Trying Connecting Membr_4 zte gt enable Open Membr 4 zte cfg set vlan 4000 enable Membr_4 zee CEJ toee vlan 4000 add port l lc tag Delete cluster created on VLAN 1 Emeni WYXX cfg group fset group delete member 1 5 Deleting member id il Successed member Deleting member id
108. 8 20 22 24 26 S Rd Nas al marie Sepa spe cee tees GCecSea Sea tec Seca Le N aa A Fees 2028 I I I DE I E I E I I E I I1 I j JEN SAFE L j Hu T HL Hr T TL Ld H TL d T iugi i TX m 1 1 1 1d 1 1 1 t H RUN ITE NN i EE ot me IM aa N svs FEL f 6 545 626 626 Ba 6 64 26 65 66 5 2 gt CONSOLE 2 Fi oo0oo0o0o0o0o0 000 000000 00000000000 0000 o0000000000000000 T 7 p I i A pL eT p RE a5 5 ra ga uf I J LL JC J IL JJ C JE JC JE JC JL JC JC d LJ X EN N Xs CONSOLE 2H 4s 6 5 8 7 10 9 12 11 1443 185 18HT 20 18 22124 2423 26 25 28 27 30 9 32 91 34 33 36 35 38 37 40 39 42141 44 43 48 45 48 47 N N 3 MI 1 Cabinet 2 Box 3 Screw Cable Types ZXR10 2920 2928 2952 consists of Power cables Console cables Network cables Fiber optics Confidential and Proprietary Information of ZTE CORPORATION 23 KX E gI ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH AC power cable DC power socket DC power Cable Power Cables Installation Power cables are classified as per power supply module AC power cables DC power cables An AC power cable looks the same as standard printer power cable as shown in Figure 12 FIGURE 12 AC POWER CABLE One end of the AC power cable connects the AC power socket of the ZXR10 2920 2928 2952 power module and the other end connects the 220 VAC power socket Appearance and des
109. 9 RADIUS ISP SHAREDSECRET Format Mode radius isp nas config lt ispname gt sharedsecret lt string gt Result This sets shared password ZTEDH Function This sets shared password Note Shared password is used for data encryption between RADIUS client and RADIUS server Setting of shared password must be consistent on the client and server 8 To specify a default domain use command radius isp ispname defaultisp enable disable in nas config mode This is shown in Table 280 TABLE 280 DEFAULT ISP DEFAULT ISP COMMAND Format Mode radius isp nas config ispname defaultisp enable disable Result This specifies a default domain Function This specifies a default domain Note Only one domain can be specified as default domain in system System will send subscriber authentication requests without domain name authentication server in default domain 9 To set full account of domain specified on RADIUS use command radius isp ispname fullaccount enable disable in nas config mode This is shown in Table 281 TABLE 281 RADIUS ISP FULLACCOUNT COMMAND Format Mode radius isp nas config ispname fullaccount enable disable Result This sets full account of domain Function This sets full account of domain Note When it is specified to use full account RADIUS client uses username DomainName request authentication of RADIUS server subscriber
110. 98 Table 331 Set Dhcp Ip Source Guard Command 199 Table 332 Show Dhcp Ip Source Guard Command 199 Table 333 Set Dhcp Option82 Command eene 199 Table 334 Set Dhcp Option82 Command eene 200 Table 335 Set Dhcp Option82 Sub Option Command 200 Table 336 Set Dhcp Option82 Command eene 200 Table 337 Set Dhcp Option82 Sub Option Port Command 201 Table 338 Show Dhcp Option82 Command 201 Table 339 Show Dhcp Option82 Ani Command 201 Table 340 Show Dhcp Option82 Port Command 202 Table 341 Clear Dhcp Option82 Ani Command 202 Table 342 Set Vbas Command ssassasssrssrnnsnnssnnasrnsansnns 205 Table 343 Set Vbas Trust Port Command 205 Table 344 Set Vbas Cascade Port Command 206 Table 345 Show Vbas Command eseeeeeeeeeeeee 206 Table 346 Set sFlow Agent Address Command 207 Table 347 Set sFlow Collector Address Command 208 Table 348 Set Sflow Port Command esee 208 Table 349 Set sFlow Ingress Command eene 208 Table 350 Set sFlow Reload Mode Command 208 Table 351 Set sFlow Clear Config Command 209 Table 352 Set Zesr Domain Command 211 Confidentia
111. A B C D A B C D gt in router config mode This is shown in Table 243 Confidential and Proprietary Information of ZTE CORPORATION 151 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Result TABLE 243 SET IPPORT COMMAND Format Mode Function set ipport 0 63 router config This sets IP address ipaddress lt A and mask address B C D M gt lt A of layer 3 port B C D gt lt A B C D gt Result This sets IP address and mask address of layer 3 port To bind the Vlan for layer 3 port use command set ipport 0 63 vlan vlanname in router config mode This is shown in Table 244 TABLE 244 SET IPPORT VLAN COMMAND Format Mode Function set ipport 0 63 router config This binds the Vlan vlan vlanname for layer 3 port Result This binds the Vlan for layer 3 port To set the MAC address of layer 3 port use command set ipport 0 63 mac xx xx xx Xx xx xx in router config mode This is shown in Table 245 TABLE 245 SET IPPORT MAC COMMAND Format Mode Function set ipport 0 63 router config This sets the MAC mac xx XX Xx address of layer 3 XX XX XX port Result This sets the MAC address of layer 3 port To enable disable the layer 3 port use command set ipport 0 63 enable disable in router config mode This is shown in Table 246 TABLE 246 SET IPPORT ENABLE DISABLE COMMAND Format Mode Function set ipport 0 63 rout
112. A SA SIS ee enl password zte cfg Troubleshooting Password This topic describes how to troubleshoot the enable password To troubleshoot the enable password perform the following step 1 To trouble shoot to enable password is same as described in Troubleshooting the User Name Password END OF STEPS Password is enabled Troubleshooting a Device Connection This topic describes how to troubleshoot the interconnection of two devices so that they can be connected to two switch ports in a same VLAN To troubleshoot the interconnection of two devices in the same VLAN meet the following requirements PVID of the port is configured incorrectly Port is disabled VLAN is disabled IP address is not set on the equipment or IP address is not in same network segment To troubleshoot the interconnection of two devices in the same VLAN perform the following steps 1 Modify the PVID of the port to be consistent with the related VLAN ID 2 Enable all ports Confidential and Proprietary Information of ZTE CORPORATION 303 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH 3 Enable the VLAN 4 Add the port to the VLAN and select untag 5 Set correct IP address on equipment END OF STEPS Result Interconnect of two devices in same VLAN is configured 304 Confidential and Proprietary Information of ZTE CORPORATION Abbreviations Acronyms and Abbreviatio
113. AND WINDOW Format Mode Function Show Privileged This indicated software version flash version mode and image file present in directory Result This indicates new image file present in directory To delete the old version file in FLASH memory use command remove lt file name gt in file system configuration mode This is shown in Table 33 If the FLASH memory has sufficient space change the name of the old version file and keep it in FLASH memory TABLE 33 REMOVE COMMAND Format Mode Function remove lt file iM This deletes the old version file in name ip FLASH memory config Result This deletes the old version file in the FLASH memory Example The example of remove command is given below zte od eU eons e tifs Zce Crig trhas tremove karnel Z Use command tftp to upgrade the version The following shows how to download the version file from the TFTP server to the FLASH memory 58 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Result Note Purpose Prerequisite Steps Chapter 6 System Management pci sco 159 jns 1 012 ownload kernel Z L 979 157 bytes downloaded ztel ciog Uii S rs 4 Restart the switch After successful startup check the version under running and confirm whether the upgrading is successful END OF STEPS Version upgrade has been installed When updating the version there is configuration compatibility problem of old and new versions running cfg f
114. AY COMMAND Format Mode Function set 802 Ilxrelay global config This enable disable enable disable the 802 1x transparent transmission function Result This enable disable the 802 1x transparent transmission function 2 To display the configuration of 802 1x transparent transmission use command show 802 1xrelay in global configuration mode This is shown in Table 242 TABLE 242 SHOW 802 1X RELAY COMMAND Format Mode Function show 802 global config This displays the lxrelay configuration of 802 1x transparent transmission Result This displays the configuration of 802 1x transparent transmission END OF STEPS Result 802 1 x transparent transmissions in 2ZXR10 2920 2928 2952have been configured Layer 3 Configuration I ntroduction to ZXR10 2920 2928 2952 provides few layer 3 functions for the Layer 3 remote configuration and management To realize the remote access an IP port must be configured on the switch If the IP 150 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Purpose Steps Chapter 7 Service Configuration port of the remote configuration host and that of the switch are not in the same network segment it is also necessary to configure the static route Static route is a simple unicast route protocol The next hop address to a destination network segment is specified by user where next hop is also called bridge Static route involves destination addres
115. BLE 417 SET GROUP SYSLOGSVR COMMAND Format Mode Function set group group config This sets IP address syslogsvr A B of internal public C D SYSLOG Server of cluster Result This sets IP address of internal public SYSLOG Server of cluster To set IP address of internal public TFTP Server of cluster use command set group tftpsvr lt A B C D gt in group config mode This is shown in Table 418 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Note Purpose Steps Chapter 9 Network Management TABLE 418 SET GROUP TFTPSVR COMMAND Format Mode Function set group tftpsvr group config This sets IP address A B C D of internal public TFTP Server of cluster Result This sets IP address of internal public TFTP Server of cluster END OF STEPS Cluster parameters have been configured Above parameters can be configured for command switch only Effective holding time of cluster means that when command switch detects communication failure of a member switch or a member switch detects that of command switch and communication is recovered within effective holding time member status is normal if the communication is not recovered after effective holding time command switch displays that member is in DOWN state After communication is recovered member is added to cluster automatically and is displayed in UP status If IP address of TFTP Server of cluster is configured membe
116. Cig See Kemore access Speci rice zte cfo tset remote access ipaddress 10 AO a 92o zte cfg show remote access Whether check remote manage address YES Allowable remote manage address list nO 40 EZ IND 2 eroe VIS Zoe 25D zte cfg 217 Example3 Allow network management user to access switch from any IP address through Telnet zte cfg set remote access any zte cfg show remote access Whether check remote manage address NO Allowable remote manage address list none zte cfg SSH Overview SSH Purpose Secure shell SSH is a protocol created by Network Working Group of the IETF offers secure remote access and other secure network services over an insecure network Purpose of the SSH protocol is to solve the security problems in interconnected networks and to offer a securer substitute for Telnet and Rlogin Although the present development of the SSH protocol has far exceeded the remote access function scope therefore the SSH connection protocol shall support interactive session SSH is to encrypt all transmitted data even if these data is intercepted no useful information can be obtained Confidential and Proprietary Information of ZTE CORPORATION 221 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTE SSH Proctocol At present SSH protocol has two incompatible versions SSH v1 Versions x and SSH v2 x This switch only supports SSH v2 0 and uses the password authentic
117. Command switch Specified as a command switch Configuring a ZDP This topic describes ZDP configuration ZDP Discovery Protocol is a protocol used to discover the related information about direct neighbor node including adjacent device ID device type version and port information This protocol supports the refreshing and aging of neighbor device information table To configure cluster management function meet the following requirement m To configure cluster management function use command config group to enter into cluster management configuration mode For the configuration of ZDP perform the following steps 1 To enable disable ZDP function use command set zdp enable disable in group config mode This is shown in Table 392 TABLE 392 SET ZDP COMMAND Format Mode Function set zdp group config This enable disable enable disable ZDP function Result This enable disable ZDP function Note By default system ZDP function is enabled When system ZDP function is disabled contents of neighbor device information table are cleared and ZDP packets processing is Suspended Confidential and Proprietary Information of ZTE CORPORATION 243 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH 2 To enable disable port ZDP function use command set zdp port lt portlist gt fenable disable in group config mode This is shown in Table 393 TABLE 393 SET ZDP PORT COMMAND Format Mode Function
118. E Steps For the configuration of Global ACL perform the following steps 1 To enter into Global ACL configuration use command config acl global in global configuration mode This is shown in Table 196 TABLE 196 CONFIG ACL GLOBAL COMMAND Format Mode Function config acl global global config This enters into Global ACL configuration mode Result This enters into Global ACL configuration mode d To configure ACL rules use command rule lt rule id gt permit deny port lt port id gt any lt ip protocol gt ip tcp udp arp any lt lt source ipaddr wildcard gt any source port sourceport mask gt 4 destination ipaddr wildcard any dest port destport mask gt dscp fragment ether type lt proto number gt cos source vlanId source mac wildcard gt any lt destination mac wildcard gt any in ACL config mode This is shown in Table 197 TABLE 197 RULE COMMAND Format Mode Function rule lt rule id gt permit deny port lt port id gt any lt ip protocol ip tcp udp arp any lt source ipaddr wildcard any source port sourceport mask lt destination This configures ipaddr wildcard any ACL config ACL rules dest port destport mask dscp fragment ether type proto number cos lt source vianId gt source mac wildcard gt any destination mac wildcard any Result This configures ACL rules
119. E 128 CREATE IPTV CHANNEL COMMAND Format Mode Function create iptv Nas config mode This creates channel channels of IPTV Confidential and Proprietary Information of ZTE CORPORATION 103 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Result Purpose Steps Format Mode Function lt channellist gt Result This creates IPTV channels To set the name of a channel use command iptv channel lt channellist gt name in nas config mode This is shown in Table 129 TABLE 129 IPTV CHANNEL COMMAND Format Mode Function iptv channel Nas config mode This sets the name lt channellist gt of a channel name Result This sets the name of a channel To set a channel belonging to a multicast Vlan use command iptv channel lt channellist gt mvlan in nas config mode This is shown in Table 130 TABLE 130 IPTV CHANNEL MVLAN COMMAND Format Mode Function iptv channel Nas config mode This sets a channel lt channellist gt belonging to a mvlan multicast Vlan Result This sets a channel belonging to a multicast Vlan To delete a channel use command clear iptv channel lt channellist gt in nas config mode This is shown in Table 131 TABLE 131 CLEAR IPTV CHANNEL COMMAND Format Mode Function clear iptv channel Nas config mode This deletes a lt channellist gt channel Result This deletes a channel END OF STEPS IPTV channels have been configured Configuring Channel Access Control
120. E 56 PVLAN INFORMATION ZTE switch Microsoft Internet Explorer E ZTEPX 18 x RAH MHD SAM REA IAM EBD CAR gt 0AA QRR akez ques Q Es 5 wj ig qr i AD Hitik D http 192 168 1 3 index htm UID 800112 APL E ABRs ora L akn A3 Configuration gt System Port gt Port State gt Port Parameter Sy VLAN gt vlan Overview gt vlan Configure S PVLAN gt Pylan Configure gt Mirror Lacp Monitoring gt Terminal Log gt Port Statistics gt Running Config Maintenance gt Save gt Reboot gt Upload gt User Manager Logout All rights reserved ZTE Corporation ZTEPSM ZXR10 5124 Fl pvlan Session Promiscuous Port Isolated Port Isolated Trunk pvlan Session Promiscuous Port Isolated Port Isolated Trunk pvlan Session Promiscuous Port Isolated Port Isolated Trunk pvlan Session Promiscuous Port Isolated Port Isolated Trunk 120 1 Refresh PYLAN Information Refresh Return ZXR10 5124 FI GE Table 431 defines parameters shown in Figure 56 TABLE 431 PVLAN PARAMETERS DESCRIPTION E Hb Intranet Parameters Description PVlan Session Pvlan session Isolated Port Isolated port Isolated Trunk Isolated trunk 2 Click the catalog tree in the left of the system main page Configuration gt PVLAN gt Pvlan Configure to open the PVLAN configuration page as
121. Id secondary trunk lt trunkname gt global config Function This sets secondary trunk port in ZESR domain Result This sets secondary trunk port in ZESR domain Note Set trunk port as the secondary port on switches in ZESR domain 6 To add control VLAN in ZESR domain use command set zesr domain domainId add control vlan lt vlanname gt in global configuration mode Confidential and Proprietary Information of ZTE CORPORATION This is shown in Table 357 ZTEmA Chapter 8 Access Service TABLE 357 SET ZESR DOMAIN VLAN COMMAND Format Mode Function set zesr domain global config This adds VLAN in lt domainId gt add ZESR domain control vlan lt vlanname gt Result This adds VLAN in ZESR domain Note Add control VLAN in ZESR domain and ports configured in ring should be added into control VLAN and set as Tagged Control VLAN is opened by users ZESR function can not be enabled if control VLAN is not enabled To add protect VLAN in ZESR domain use command set zesr domain domainId add protect vlan lt vlanlist gt in global configuration mode This is shown in Table 358 TABLE 358 SET ZESR DOMAIN ADD PROTECT VLAN COMMAND Format Mode Function set zesr domain global config This add protect lt domainId gt add VLAN in ZESR protect_vian domain lt vlanlist gt Result This add protect VLAN in ZESR domain Note Add protect VLAN in ZESR domain Protect VLAN is the user data VLAN in th
122. Information of assembling port is shown in Table 434 278 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 9 Network Management TABLE 434 ASSEMBLING PORT INFORMATION Parameters Description Assembling group number that assembling port belongs to Assembling mode that assembling port belongs to Overtime of assembling port Active passive mode of assembling port Group Num Group Mode Lacp Time LacpActiv 2 To configure basic attributes AdminStatus and LacpPriority of LACP and attributes LacpTime and LacpActive of assembling port in the page 3 After configuration click Apply button to submit Result This configures basic attribute of LACP 4 To configure batch assembling port attributes select the check boxes of assembling ports Select All all ports are selected then click Set button to open batch assembling ports configuration page as shown in Figure 62 FIGURE 62 BATCH ASSEMBLING PORTS CONFIGURATION ZTE switch Microsoft Internet Explorer B 81 x CHO RRO SEW KAW TAD HAH El HAE gt OAA Qur gre gue 5 2 wj isa AO Hitik D http 192 168 1 3 index htm UID 800112 ZTEDH Configuration gt system ZTEPM ZXR105124 FI sU pr mmi mj era ee les gt Port State gt Port Parame
123. Iv config 5 1000Basex Enable Fiber Full 1000M 1 Disable Disable Disable Disable Mz f config 6 1000Basex Enable Fiber Ful 1000M 1 Disable Disable Disable Disable Mz O config 7 1000Basex Enable Fiber Full 1000M 1 Disable Disable Disable Disable Mz r config 8 1000Basex Enable Fiber Full 1000M 1 Disable Disable Disable Disable Mz O config 9 1000Basex Enable Fiber Full 1000M 1 Disable Disable Disable Disable Mz E config 10 1000Basex Enable Fiber Full 1000M 1 Disable Disable Disable Disable Mz O config 11 1000Basex Enable Fiber Full 1000M 1 Disable Disable Disable Disable Mz O config 12 1000Basex Enable Fiber Full 1000M 1 Disable Disable Disable Disable Mz m config 13 1000Basex Enable Fiber Full 1000M 1 Disable Disable Disable Disable Mz C config 14 1000Basex Enable Fiber Full 1000M 1 Disable Disable Disable Disable Mz O config 15 1000Basex Enable Fiber Full 1000M 1 Disable Disable Disable Disable Mz ogou DL config 16 1000Basex Enable Fiber Full 1000M 1 Disable Disable Disable Disable Mz All rights reserved GZTE Corporation r1 contin Lr 4annnRacay Enahla Fihar Fall NNNM 4 Nicahla Nicahla Nicahla Nicahla T gi se EE EH Intranet The page shows the following information of the port Auto Neg Work mode of the port that is work speed and duplex PVID VLAN ID is default on the port Flow Control Flow control enable on the port Multi Filter Multicast filtration enable on the port Mac Limit Limit the MAC address learning on the
124. ME COMMAND Format Mode Function radius nasname nas config This sets NAS lt nasname gt server name Result This sets NAS server name To Enable Disable billing function of port use command aaa control port lt portlist gt accounting enable disable in nas config mode This is shown in Table 286 Confidential and Proprietary Information of ZTE CORPORATION 173 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I Result Example 174 13 14 ZTEmA TABLE 286 AAA CoNTROL PoRT COMMAND Function This Enable Disable billing function of port Format Mode aaa control port lt portlist gt accounting enable disable nas config Result This Enable Disable billing function of port To delete accounting of packet use command clear accounting stop session id lt session id gt user name lt user name gt isp name lt isp name gt server ip A B C D gt in nas config mode This is shown in Table 287 TABLE 287 CLEAR ACCOUNTING STOP COMMAND Format Mode Function clear accounting nas config This deletes stop 1 session id accounting of lt session id gt packet user name lt user name gt isp name lt isp name gt server ip A B C D gt Result This deletes accounting of packet To display RADIUS configuration use command show radius ispName ispname accounting stop session id lt session id gt user name lt user name gt isp hame lt is
125. MNGistsctctetoseiateceontsaiochdercnedenusieieseus sabes 75 VEAN oi iatoteus pim DID u rimi E SE NOM LI ni iu oss DIM DIM a 77 Colinigurind VLAN scusa ot aa AA AAE A 78 Introducuon to FDB seua Wintec MS nta UOI Ne ubt 83 MAC Table Operati ONS ocsiicupsd pO favit xg abvEberteV a DIE ERI VPE pO Ra MR 83 CONNLA glo P P 84 LACP OVERVIEW ss pihixsunt estet gue Laon qu ania Guacksemmel Knee DEGREE op duin 86 Conftgurimng LACP ads occi einn tma E eadem A ma bad dd 87 IGMP SmoobIDG neron Perse enses rud edt Qut os Ue IEe Son ipae Le MEE 91 ConrmdqurimgoMPSSmoopIiti uerrini P UU Ema DodSyd dq ves 91 Internet Protocol Television sixverexuEkccusebebt ee tubae Orel a HERD 101 Configuring IPTV Global Parameters a eer rr er s 102 Conriguring IPTV Ghannels s22pxeds m DS REagouzdsh cu xd cn ons eed 103 Configuring Channel Access Control CAC eee 104 Configuring Administrative Command of IPTV Users 106 Maintenance and Diagnosis of IPTV ceeeeeee rre nnn 108 MSP MOG epe OR EE 110 CONTIGUIFING SiCP T r G n 112 ACi nts 124 Conftgurindg Basic AG c ota OE AR CERA Et v Ee ee i ud 126 Conaurimsg Extended ACL uciscumt CIL Dead Guvaaveememnertinane 127 Contqguting E2 AC ci orvurtoiigast E ts DARE ERE Rp RC a 128 Coplqurlg HybrigaaAG Ls ossis side uses ve Ra ptg nausea yaa DATE pe resa qs 128 GOnurmdg lO Dal Cl coa pma ta n en vae Grane miae aac RE RE 129 configuring MFIIGsi abit cu eaqui rtv e n
126. NI COMMAND Format Mode Function clear dhcp global config This clears Option82 ani configuration of DHCP Option82 access node identifier Result This clears configuration of DHCP Option82 access node identifier END OF STEPS Result J Option82 has been configured on ZXR10 2920 2928 2952 Example This example shows the following instance of DHCP global configuration Zzte otg mrset dhep enable Zee CE ecte dep port i server zte cfo foet dhep porti 24 cascade zte lorg toet dhcp diable The following instance shows DHCP Snooping configuration zte c ol rset dhcp snooping add pori 1 2 24 zee igl tset dhep shooping Cdellere pore S The following instance shows the configuration information of DHCP Snooping Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 8 Access Service zte cfg show dhcp snooping DHCP snooping is enabled on the following port s portID NM CO NN DB BP W Ta LR D zte cfg portTy Senven Client Client Client Client Client Client Cascad pe E The following instance shows zte cfdq s set zte cfg set zte cfg set zte cfg set china tel zte cfg set on yuhuatai The following information dhcp dhcp dhcp dhcp dhcp OPE LOND OPE Ono OP rono Eonar Pieikems DHCP Option82 configuration add port 1 8 24 delete port 5 ani nanjing68 Slo OPE ON OOGen se lniae Une IAD seem sub opcion OS S cu esMID
127. O HUAWEI config type of instance HAMMER extend Result This sets trunk packet type of instance To display stp related configuration i To display stp information use command show stp in global configuration mode This is shown in Table 182 TABLE 182 SHOW STP COMMAND Format Mode Function show stp Global This displays stp config information Result This displays stp information ii To display stp instance information use command show stp instance lt 0 15 gt in global configuration mode This is shown in Table 183 TABLE 183 SHOW STP INSTANCE COMMAND Format Mode Function show stp instance lt 0 Global This displays stp 15 gt config instance information Result This displays stp instance information iii To display stp port information use command show stp port portlist in global configuration mode This is shown in Table 184 TABLE 184 SHOW STP PoRT COMMAND Format Mode Function show stp port lt portlist gt Global This displays stp port config information Result This displays stp port information iV To display stp trunk information use command show stp trunk trunklist in global configuration mode This is shown in Table 185 Confidential and Proprietary Information of ZTE CORPORATION 121 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 185 SHOW STP TRUNK COMMAND Format Mode Function show stp trunk lt trunklist gt
128. PVLAN Console gt Mirror Si Lacp Monitoring gt Terminal Log gt Part Statistics P Running Config Maintenance gt Save gt Reboot gt Upload gt User Manager Logout All rights reserved ZTE Corporation ZH Intranet END OF STEPS Result Logging on using Web management is implemented Configuring a System Purpose This topic describes the structure of switch configuration Steps For system configuration perform the following steps 1 Click the catalog tree in the left of the system main page Configuration gt System to open system information page Result System configuration is displayed showing all the parameters as shown in Figure 46 264 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Purpose Steps Chapter 9 Network Management FIGURE 46 SYSTEM CONFIGURATION 2181 THO MD SAM A IAD REH SAE 0AA Qer grax Gee SGA 3 u H dr a EB Hitik D amp http 192 168 1 3 index htm UID 800112 MAPK mam wj OR ee es system ZTEPSM ZXR105124 FI oP 120 Re Monitoring Terminal Log System Configuration gt Port Statistics gt Running Config VersionNumber v1 1 temp Maintenance SwitchType ZXR10 5124 FI Save b Reboot VersionMakeTime 16 43 26 Jul 7 2006 gt Upload MacAddress 00 00 00 51 24 02 fresh gt User Manager HostName zte SysLocation N
129. Q or Ctrl C to stop the output Confidential and Proprietary Information of ZTE CORPORATION Introduction Contents Flash memory Chapter 6 System Management Overview This chapter introduces file system management FTP TFTP configuration file backup and restoration software version upgrade This chapter includes the following contents TABLE 20 TOPICS IN CHAPTER 6 Topics Page No File System Management File System 49 Operating File System 50 Configuring Imports and Exports 54 Setting File Backup and Recovery 55 Software Version Upgrade 56 Viewing System Information 57 Upgrading Version at Normality 57 Upgrading Version at Abnormality 59 File System In ZXR10 2920 2928 2952 Flash is the major storage device on the main control board Software version file and configuration file of the ZXR10 2920 2928 2952 are saved in the Flash memory Operations such as version upgrading and configuration saving should be conducted in the Flash memory There are three directories in Flash by default Confidential and Proprietary Information of ZTE CORPORATION 49 50 Introduction Purpose Prerequisite Steps ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH s The name of the version file is kernel z s The name of the configuration file is running cfg The name of the directory file is config txt Operating File System ZXR10 2920 2928 2952 provides many commands for fil
130. R 3 Topics Page No Working Principle 9 Hardware Structure 10 ZXR10 2920 11 ZXR10 2928 12 ZXR10 2952 13 ZXR10 2928 FI 14 Power Supply Module 17 Working Principle ZXR10 2920 2928 2952 series are important parts of ZXR10 Ethernet switches that are launched by ZTE They define a pure megabit L2 user Ethernet switch They are intended for gigabit upward access and used widely in large scale enterprise network and top grade industry This series of products features powerful functions and outstanding performance Switch consists of s Control module Switching module s Interface module 9 Confidential and Proprietary Information of ZTE CORPORATION ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Control Module Switch module Interface module Power Module Power supply module Control module consists of main processor and external functional chips to implement applications such as switching module control amp manage for the system It provides operational interfaces such as serial ports and Ethernet interfaces for data operation and maintenance Switching module has Ethernet switching processing chips Its primary function is simply switching traffic from multiple devices This chip is interlinked with data packet transceiver and can directly provide hundred megabit or gigabit service interface to the users Interface module is composed of interface boards to accomplish th
131. R TIMEOUT COMMAND Format Mode dotlx server timeout 1 65535 nas config ZTEmA Function This set timeout time for authentication system to receive data packets from authentication server Result This set timeout time for authentication system to receive data packets from authentication server Di To set maximum times of request resending when timer expires before authentication system receives Challenge response from client use command dotlx max request 1 10 in nas config mode TABLE 270 DoT1X MAX REQUEST COMMAND Format Mode dotlx max request lt 1 10 gt nas config This is shown in Table 270 Function This set maximum times of request resending when timer expires before authentication system receives Challenge response from client Result This set maximum time of request resending when timer expires before Challenge response from client Note 802 EAPOL data packets between authentication system receives 1x realizes the access control by exchanging client system and authentication system and RADIUS data packets between authentication system and authentication server the following parameters are exchange of data packets used for control purpose gt QuietPeriod refers to the period During before which authentication system will not receive authentication request from client system after first authentication failure This function can pr
132. Result This create configures instances of the statistics group Command line configuration of statistics group is to configure etherStatsTable in statistics group Configuration involves Confidential and Proprietary Information of ZTE CORPORATION 235 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH etherStatsDataSource It is the same as that of the history group When configuring the data source through the command line enter the port number directly gt etherStatsOwner gt etherStatsStatus It can be valid underCreation createRequest and invalid When it is set to invalid the instance is deleted Control status can be set to valid only when data source is specified 4 To create configure instances of the event group use command set event 1 655355 description lt string gt type none log snmptrap logandtrap owner lt string gt community lt string gt status valid underCreation createRequest invalid in SNMP config mode This is shown in Table 389 TABLE 389 SET EVENT COMMAND Format Mode Function set event lt 1 65535 gt SNMP config These description create configure string type instances of the none log snmptrap event group logandtrap owner string community string status valid underCreation createRequest invalid Result These create configure instances of the event group Command line configuration of even
133. Result This permits trunk on VLAN To displays VLAN information use command show vlan lt vlanlist gt in global configuration mode This is shown in Table 77 TABLE 77 SHOW VLAN COMMAND Format Mode Function show vlan Global lt vlanlist gt config This displays VLAN information Result This displays VLAN information END OF STEPS Confidential and Proprietary Information of ZTE CORPORATION 81 82 Result Example ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH VLAN is configured on ZXR10 2920 2928 2952 This example shows the configuration of VLAN 100 Add untagged ports 1 and 2 and tagged ports 7 and 8 The detailed configuration is as follows Note It is recommended to delete default VLAN before the configuration zte ciol tere vian OOC eiclel joie le 2 Y IDUBBE ei Zee cse E mM eiclol ooise 5 iS Ie zc cicuta EO MIRO Zce crg tset vlan 100 emabilie zte cfg show vlan 100 Ny Thea Ihe suco I 3 1 3 100 Pror ie We Ori veio E Eaa eiososel VlanName Tagged ports 3 7 8 Untagged ports aE zte cfg Configuration of VLAN transparent transmission This example describes how Switch A is connected to switch B through port 16 Port 1 of switch A and port 2 of switch B belong to VLAN2 and port 3 of switch A and port 4 of switch B belong to VLANS Members of the same VLAN can communicate with each other This is shown in Figure 24 FIGURE 24 VLAN TRANSPARENT TRANSMISSION
134. Se a zte Ver il Alae ene xi Ale OIL Salim ss This example describes basic configuration of SNMPv3 Suppose that IP address of network management server is 10 40 92 77 switch has a layer 3 port with IP address of 10 40 92 200 and switch is managed through network management server in user security model Create a user named zteuser belonging to group named ztegroup with security level of authentication and encrypting and reading writing and informing view are default Specify IP address of host receiving traps as 10 40 92 77 and user as zteuser 232 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Definition Chapter 9 Network Management zte cfg config router zte c og ro terirtset Dont 1 ipaddress 10 40 Ja TEA zte cfo ro uter tset appore l vlan l zee C rone e omnt T emainike zte cfg router texit zte Ck tcConfig snmp zee T SO f sus aro vale O ys joie dy zte c g snmp set user zZzteu ser z2tegroup vy md5 auth zte des56 priv zte zte cfo Simo set host 10 AOR 89 1 intom S zteuser priv zte cfg snmp show snmp group groupName ztegroup secModel v3 readView zteView secLevel AuthAndPriv writeView zteView rowStatus Active notifyView zteView zte cfg snmp show snmp user UserName ees EE GroupName ztegroup v3 EngineID 228 509 09 0 0210 519 0 0710 2 8 9 I6 2 AUTE AuthType Mas StorageType NonVolatile igre jor I foes Wes
135. Set Stp Hmd5 Digest Command 114 Table 158 Set Stp Hmd5 Key Port Command 115 Table 159 Set Stp Hopmax Command eene 115 Table 160 Set Stp Instance Bridge Priority Command 115 Table 161 Set Stp Instance Port cost Command 115 Table 162 Set Stp Instance Port Priority Command 116 Table 163 Set Stp Instance Port Loop Guard Command 116 Table 164 Set Stp Instance Port Loop Guard Command 116 Table 165 Set Stp Instance Trunk Cost Command 116 Table 166 Set Stp Instance Trunk Priority Command 117 Table 167 Set Stp Instance Trunk Root Guard Command 117 Table 168 Set Stp Instance Trunk Loop Guard Command 117 Table 169 Set Stp Instance Vlan Command 118 Table 170 Set Stp Name Command enne 118 Table 171 Set Stp Port Command een 118 Table 172 Set Stp Port Linktype Command 118 Confidential and Proprietary Information of ZTE CORPORATION 317 ZTEDR ZXR10 2920 2928 2952 V1 00 Access Switch User Manual Volume I 318 Table 173 Set Stp Port Packettype Command 119 Table 174 Set Stp Port Pcheck Command 119 Table 175 Set Stp Port Bpdu Guard Command 119 Table 176 Set Stp Bpdu Interval Command 119 Table 177 Set Stp Relay Command
136. Switch A Switch B BER EREREeS try ggg pl p3 pl6 p16 p2 p4 Switch A configuration Confidential and Proprietary Information of ZTE CORPORATION ZTEmA MAC Address Static address Table MAC filter function binding function Chapter 7 Service Configuration Zce Cng set vlan 2 add port 16 Lag zte cfo tset vlan 2 add port l untag zte CE fset vlan So add port l6 tag Me europe stehen vlan gt add port gt untag Bee o sec eue a 2 Zi e Ser n NV CS zte cig fset vlan 2 2 enable Switch B configuration zc gc vlan 2 add port 16 tag zte cfo tset vlan 2 add port 2 untag Zee eE oer V an a pore ING Eag zte Ccfo tset vlan 2 add port T untag ate cio eee port 2 pvid 2 ZLe erg set port 4 pvid 3 zte CE Set vlan 2 2 einaloike Introduction to FDB Media Access Control MAC address is the hardware identification of a network device based on which the switch forwards packets MAC address is unique ensuring accurate packet forwarding Each switch maintains a MAC address table called forwarding database FDB FDB records one to one mapping relationship between MAC addresses and switch ports Upon receiving a data frame the switch decides whether to drop it or forward it to the proper port based on this table The FDB is the basis and prerequisite for fast forwarding MAC Table
137. TE CORPORATION Chapter 5 Usage and Operation Overview Introduction This chapter provides an overview of configuration mode command mode and command line use Contents This chapter includes the following topics TABLE 13 TOPICS IN CHAPTER 5 Topics Page No Configuration Modes 36 Configuration through Console Port Connection 36 Configuring through Telnet 37 Simple Network Management Protocol SNMP 38 Configuring through WEB Connection 39 Command Modes 40 Configuring User Mode 40 Configuring Global Mode 41 Configuring SNMP Mode 42 Configuring Layer 3 Mode 42 Configuring File System Mode 42 Configuring NAS Mode 43 Configuring Cluster Management 43 Configuring Basic ACL 44 Configuring Extended ACL 44 Configuring L2 ACL Mode 45 Configuring Hybrid ACL Mode 45 Using Command Line 45 Command Abbreviations 47 Confidential and Proprietary Information of ZTE CORPORATION 35 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Topics Page No History Commands 47 Function Key 48 Configuration Modes ZXR10 2920 2928 2952 offers multiple configuration modes A user can select configuration mode based on the connected network as shown in Figure 19 Configuration through serial port connection Configuration through TELNET session Configuration through SNMP connection Configuration through WEB connection FIGURE 19 ZXR10 2920 2928 2952 CONFIGURATION MODES FTP TFTP Server SNMP Network
138. Telnet and then use the ping command to test different network segments and check the connectivity Result This checks the communication status between switch and the other device connected to Check whether the switch related services are normal Record the intraday operations and phenomenon Result This records the phenomenon status of the switch includes environment of the equipment room NOTE Intraday operations refer to the operations performed on that day END OF STEPS Result This checks the daily routine maintenance Monthly Maintenance This topic describes the monthly maintenance of ZXR10 2920 2928 2952 5116 FI 5124 FI For the monthly maintenance meet the following requirements Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Steps Result Chapter 10 Maintenance Summarize questions encountered in routine operations and please discuss with ZTE maintenance personnel if necessary Summarize and accumulate maintenance experiences in routine maintenance to conduct more efficient maintenance For the configuration of monthly maintenance perform the following steps 1 4 Pay attention to the cleanness of air conditioners and check the performance of the air conditioners at the same time Clean the cabling trough check whether the relevant lines are in poor contact and make adjustment in time Clean the switch Note Do not over wet the cleaning cloth Make sure tha
139. This deletes destination port 2 To display the port mirroring configuration use command show mirror in global configuration mode This is shown in Table 63 TABLE 63 SHOW MIRROR COMMAND Format Mode Function Global This displays port mirroring show mirror l config configuration Result This displays port mirroring configuration END OF STEPS Result Port mirroring is configured on ZXR10 2920 2928 2952 Example To mirror data packets received by port 1 and port 16 onto the monitoring port 10 configuration is as follows zee o see Mr ror a dde e pore nres zte c ogl Ser mirior add source port 1 16 ingress Use the command show mirror to view the port mirroring configuration zte cfg show mirror IS NAS Sey Wiens c altae ors ec db o source emu 1 16 dest porr 10 egress mirror infomation SOULE POOLE some dest port none zte cfg To mirror the data packets received by port 2 and port 3 onto the monitoring port 4 configuration is as follows Zz e o See mirror add d st port 4 egress ate cifolt set mirror add source Port 273 egress VLAN Confidential and Proprietary Information of ZTE CORPORATION 77 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Definition Virtual Local Area Network VLAN is a technology that divides a physical network into several logical virtual Local Area Networks LANs Each VLAN is identified by a VLAN ID VID Several VLANs share the switch a
140. Timeout Command eee 89 Table 94 Set Lacp Priority Command eee 89 Table 95 Show LACP Command cerises ener 89 Table 96 Show Lacp Aggregator Command eee 89 Table 97 Set Igmp Snooping Command eee 91 Table 98 Set Igmp Snooping Add Vlan Command 92 Table 99 Set Igmp Snooping Delete Vlan Command 92 Table 100 Set Igmp Snooping Delete Vlan Command 92 Table 101 Set Igmp Snooping Query Vlan Command 93 Confidential and Proprietary Information of ZTE CORPORATION 315 ZTEmA ZXR10 2920 2928 2952 V1 00 Access Switch User Manual Volume D 316 Table 102 Set Igmp Snooping Query Interval Command 93 Table 103 Set Igmp Snooping Response Interval Command 93 Table 104 Set Igmp Snooping Timeout Command 94 Table 105 Static Multicast Group To Ports Command 94 Table 106 Set Igmp Snooping Vlan Delete Command 94 Table 107 Static Multicast Group To Ports Command 95 Table 108 Set Igmp Snooping Vlan Delete Group Port Command 95 Table 109 Set Igmp Snooping Vlan Add Smr Port Command 95 Table 110 Set Igmp Snooping Vlan Delete Group Port Command C9 96 Table 111 Set Igmp Snooping Add Maxnum Vlan Command 96 Table 112 Set Igmp Snooping Delete Maxnum Vlan Command
141. X RRO SEV MA IAD BD EJ PRE gt QO a Qer sux Quas SS 59 v 8 dr Hh A El Hihk D http 192 168 1 3 index htm UID 800112 cb BARS ORB iE gt LTEDH ZXR10 5124 FI Configuration System ZTE ZXR105124 FI W Port Port State P Port Parameter 3 uE ui Re SY VLAN gt vlan Overview 120 Refresh gt vlan Configure W PVLAN Egress Mirror Configuration gt Pylan Overview Console gt Pvlan Configure Source port Mirror Lacp 2254 555 Ta Oa ae Be 20225 24 on mj mj m m m m m mj m mj mj u Terminal Log Select All Port Statistics m m m mj m m m m mj m m m Running Config 13 5 7 8 11 13 15 17 19 21 23 Maintenance gt Save Destination port none gt Reboot gt Upload gt User Manager Apply Return Logout All rights reserved GZTE Corporation A3ETZ EEEH Intranet Confidential and Proprietary Information of ZTE CORPORATION 277 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH 5 Configure destination and source port of egress port mirror then click Apply button to submit Result This configures destination and source port of egree port mirror END OF STEPS Result Mirroring management has been configured Configuring LACP Management Purpose This topic describes the configuration of LACP management Steps For the configuration of LACP management perform the following steps 1 Click catalog tree i
142. XR10 2920 2928 2952 This chapter provides an overview of installation and debugging processes of ZXR10 2920 2928 2952 This chapter provides an overview of configuration mode command mode and command line use This chapter introduces file system management FTP TFTP configuration file backup and restoration software version upgrade This chapter provides and overview of configuration methods for various services of ZXR10 2920 2928 2952 This chapter provides and overview of network management functions of the ZXR10 2920 2928 2952 such as Remote Access SSH SNMP RMON and cluster management This chapter provides routine maintenance common test methods and troubleshooting of ZXR10 2920 2928 2952 ZTE documents employ the following typographical conventions TABLE 2 TYPOGRAPHICAL CONVENTIONS Typeface Italics Quotes Bold Meaning References to other Manuals and documents Links on screens Menus menu options function names input fields radio button names check boxes drop down lists dialog box names window names CAPS Keys on the keyboard and buttons on screens and company name Constant width Text that you type program code files and directory names and function names Confidential and Proprietary Information of ZTE CORPORATION ZTEDH About This Manual Mouse Operation Conventions Customer Support Documentation Support TABLE 3 MOUSE OPERATION CONVENTIONS
143. ZTE CORPORATION ZTEDH Purpose Steps Chapter 8 Access Service Port connecting to user network is called cascade port and port connecting to BAS server is called trust port Typical network of VBAS is shown in FIGURE 35 TYPICAL NETWORK OF VBAS Trust port BAS SERVER cascade port Trust port uguugugggUUgUvt Switch B Configuring VBAS This topic describes the configuration of VBAS For the configuration of VBAS perform the following steps To enable disable global VBAS function use command set vbas fenable disable in global configuration mode This is shown in Table 342 TABLE 342 SET VBAS COMMAND Format Mode Function set vbas global config This enable disable enable disable global VBAS function Result This enable disable global VBAS function Note VBAS function is disabled by default This command is to enable disable VBAS globally To enable disable trust port VBAS function use command set vbas trust port lt portlist gt fenable disable in global configuration mode This is shown in Table 343 TABLE 343 SET VBAS TRUST PoRT COMMAND Format Mode Function set vbas trust global config This enable disable port lt portlist gt trust port VBAS enable disable function Result This enable disable trust port VBAS function Confidential and Proprietary Information of ZTE CORPORATION 205 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Note
144. ZTEDR ZXR10 2920 2928 2952 ZTE CORPORATION ZTE Plaza Keji Road South Hi Tech Industrial Park Nanshan District Shenzhen P R China 518057 Tel 86 755 26771900 800 9830 9830 Fax 86 755 26772236 URL http support zte com cn E mail doc zte com cn Access Switch User Manual Volume Version 1 0 LEGAL INFORMATION Copyright 2006 ZTE CORPORATION The contents of this document are protected by copyright laws and international treaties Any reproduction or distribution of this document or any portion of this document in any form by any means without the prior written consent of ZTE CORPORATION is prohibited Additionally the contents of this document are protected by contractual confidentiality obligations All company brand and product names are trade or service marks or registered trade or service marks of ZTE CORPORATION or of their respective owners This document is provided as is and all express implied or statutory warranties representations or conditions are disclaimed including without limitation any implied warranty of merchantability fitness for a particular purpose title or non infringement ZTE CORPORATION and its licensors shall not be liable for damages resulting from the use of or reliance on the information contained herein ZTE CORPORATION or its licensors may have current or pending intellectual property rights or applications covering the subject matter of this document Exc
145. able 437 TABLE 437 SET LOOP DETECT PORT COMMAND Format Mode Function set loopdetect global config This enable disable port lt portlist gt loop test function of enable disable specified port Result This enable disable loop test function of specified port Note By default port loop test function is disabled 294 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Chapter 10 Maintenance To enable disable loop test function of specified port in specified vlan use command set loopdetect port lt portlist gt vlan 1 4094 f enable disable in global config mode This is shown in TABLE 438 SET LOOP DETECT PORT VLAN COMMAND Format Mode Function set loopdetect global config This enable disable port lt portlist gt loop test function of vian lt 1 4094 gt specified port in enable disable specified vlan Result This enable disable loop test function of specified port in specified vlan Note By default port loop test function is disabled To enable disable loop test function of a trunk use command set loopdetect trunk lt trunklist gt enable disable in global config mode This is shown in Table 439 TABLE 439 SET LOOP DETECT TRUNK COMMAND Format Mode Function set loopdetect global config This enable disable trunk lt trunklist gt loop test function of enable disable a trunk Result This enable disable loop test function of a trunk Note By default loop test function of a
146. ache poot S rename file name newname x Rename the file J ZTEmA Result 6 In the BootManager state upgrade the version Chapter 6 System Management use the command tftp to The following shows how to download the version file from the TFTP server to the FLASH memory BootManager tftp 10 40 Loading done BootManager 1s snmpboots v3 SiC shige Gagne TXE IE OUP C GEC kernel Z BootManager 7 In the BootManager state to restart the switch by using the new version use the command version to Switch is started normally 89 78 kernel Z 25 d Sire ZAMS ie ino execute the command reboot If the check whether the new version is running in the memory When the switch is not started normally In this case version upgrade fails upgrade procedure END OF STEPS it indicates the repeat the above Software version upgrade has been completed Confidential and Proprietary Information of ZTE CORPORATION 63 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH This page is intentionally blank 64 Confidential and Proprietary Information of ZTE CORPORATION Chapter T Service Configuration Overview Introduction This chapter provides an overview of configuration methods for various services of ZXR10 2920 2928 2952 Contents This chapter includes the following contents Topics Page No Port Configuration Configuring Basic Port Par
147. age as shown in Figure 59 276 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 9 Network Management FIGURE 59 INGRESS PORT MIRROR ZTE switch Microsoft Internet Explorer 81 xl CHE AQ SEV ma IAD FEH Ea EAE gt OAA Que Geax gms GD Su4i Areh AD HithE D http 192 168 1 3 index htm UID 8001 12 Apr BAR ORB L e T LTEDH ZXR10 5124 FI Configuration gt System ZTE ZXR10 5124 FI Y Port gt Port State gt Port Parameter Console VLAN gt Vian Overview 120 Refresh gt vlan Configure W PVLAN Ingress Mirror Configuration gt Pvlan Overview gt Pylan Configure Source port 1 13 gt Mirror Lacp 2 A e A 10 12 14 16 18 20 22 24 Monitoring E m m m m 7 m m m E m Terminal Log Select All gt Port Statistics MBOOUOMMOODOOD Running Config 1595 reg Aste anol oa Maintenance gt Save Destination port port 1 gt Reboot gt Upload Sonata gt User Manager Bon ecco Logout All rights reserved GZTE Corporation EH Intranet 3 Configure destination and source port of ingress port mirror then click Apply button to submit Result This configures destination and source port of ingress port mirror 4 Click Config link on the right of Egress column to open the egress port mirror configuration page as shown in Figure 60 FiGURE 60 EGRESS PoRT MIRROR lax
148. am E CUR MEA d 28 BE sricrerre EET 29 Cable Lightning Protection Requirements ccccceeseuceueeeeuueneens 22 CDapter 5 sssscon tas exkEd e aa NES UN TWEEN ENIM ERE EINE 35 Usage and Operation ee eere nnne 35 OVELVIeVW te nd pente trata en nM aed uv era ME t MI LEM ONES 35 Conductor MORTES arunsa EA mie Rara ure Ren d n 36 Configuration through Console Port Connection 36 configuring through TelneE o uer taxes alta PEEREERUR IERI ITIS ENS Pd 37 Simple Network Management Protocol SNMP 38 Configuring through WEB Connection c visa c e E REN EORR 39 Command ModE eM TEEEER 40 Configuring User MOE oneri pudiera teo caa ad vitas a a paar deke es at qa 40 CONNGUEING elobal IMOGG Gu icin 5 tac caa weed nny pA d Aa uin usc 3 EQAG gre Dii rand 41 GOnaurndssNMPINIOSB avs sua amas save treaiuape ian Orbe es duh CE 42 Conriguring Layer 3 ModE nn xoxittprupu o aho RE ates eaten Evae ord Sis 42 Configuring File system Mode isc ei hace re Prec ere vu Eyeka epi E s 42 CODnHgurng NASIMOGG o Ease rE adiret fuat annus isdoe Ima uidi ad aen 43 Contidquring cl sterMatiagstriepEs vespa opm Rus Vea ao e EO eg jn 43 COMMGUTING Basie AG vivera Derek Ore oben pa te DPA i ec s ga Configuring Extended ACL iussis eas niania LU QU eR A Za Conmaguniid LACE MOGE eer p iub ubt vct van Mdb sa atat on Meta 45 C nngurino HyDrid ACL IMOGS siat the vale Scc pe era Pur e aces 45 USING comma
149. ameters 68 Displaying Port Information 74 Port Mirroring 75 Configuring Port Mirroring 75 VLAN 77 Configuring VLAN 78 Introduction to FDB 83 MAC Table Operations 83 Configuring FDB 84 LACP Overview 86 Configuring LACP 87 IGMP Snooping 91 Configuring IGMP Snooping 91 Internet Protocol Television 101 Configuring IPTV Global Parameters 102 Configuring IPTV Channels 103 Configuring Channel Access Control CAC 104 Configuring Administrative Command of IPTV 106 Users Maintenance and Diagnosis of IPTV 108 Confidential and Proprietary Information of ZTE CORPORATION 65 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDR Topics Page No MSTP Mode 110 Configuring STP 112 124 The following ports are active PortId 2 2 MSTI 00 PROCE LAS COSE 2552910 CONG Status Forward Role Designated EdgePort Disabled GuardType None LinkType P2P PacketType IEEE PortId 2 MSTI 01 Ine We dS ILLE COSI eZ OO OW Status Forward Role Designated EdgePort Disabled GuardType None LinkType P2P PacketType IEEE ACL Configuring Basic ACL 126 Configuring Extended ACL 127 Configuring L2 ACL 128 Configuring Hybrid ACL 128 Configuring Hybrid ACL 128 Configuring Global ACL 129 Configuring Time Range 131 Configuring ACL to a Physical Port 131 Quality of Service QoS 132 Configuring QoS 133 Private Virtual LAN Overview 145 Configuring PVLAN 146 802 1x Transparent Transmission 149 Configuring 802 1x Transparent Transmiss
150. an Delete Port Command 80 Table 72 Set Vian Delete Trunk Command 80 Table 73 Set Vlan Forbid Port Command 80 Table 74 Set Vian Permit Port Command s 81 Table 75 Set Vian Forbid Trunk Command 81 Table 76 Set Vlan Permit Trunk Command 81 Table 77 Show Vlan Command eeeeeeer mmm nme 81 Table 78 Set Fdb Add Vlan Command sees 84 Table 79 Set Fdb Agingtime Command eene 84 Table 80 Set Fdb Delete Command eene 84 Table 81 Set Fdb Filter Command eere 85 Table 82 Show Fab COMMOANG dicsessusistaxsncsceeasessdsustectacensetenn 85 Table 83 Show Fdb Agingtime Command enne 85 Table 84 Show Fdb Mac Command eene 86 Table 85 Show Fdb Port Command erre 86 Table 86 Show Fdb Trunk Command eere 86 Table 87 Show Fdb Vlan Command erre 86 Table 88 Set Lacp Command eeeeeen nnn 87 Table 89 Set Lacp Aggregator Command eene 87 Table 90 Set Lacp Aggregator Delete Command 88 Table 91 Set Lacp Aggregator Mode Command 88 Table 92 Set Lacp Port Mode Command eene 88 Table 93 Set Lacp Port
151. anagement Overview Cluster is a combination consisting of a set of switches in a specific broadcast domain This set of switches forms a unified management domain providing an external public network IP address and management interface as well as the ability to manage and access each member in the cluster Management switch which is configured with a public network IP address is called a command switch Other switches serve as member switches In normal cases a member switch is not configured with a public network IP address A private address is allocated to each member switch through the class DHCP function of the command switch The command switch and member switches form a cluster private network It is recommended to isolate broadcast domain between public network and private network on the command switch and shield direct access to private address Command switch provides an external management and maintenance channel to manage cluster in a centralized manner In general broadcast domain where a cluster is located consists of switches in these roles Command switch member switches candidate switches and independent switches One cluster has only one command switch Command switch can automatically collect device topology and set up a cluster After a cluster is set up the command switch provides a cluster management channel to manage member switches Member switches serve as candidate switches before they join the cluster Sw
152. anaging the cluster This topic describes the configuration of ZTP For the configuration of ZTP perform the following steps 1 To enable disable the system ZTP function use the following command set ztp enable disable in group config mode This is shown in Table 399 Confidential and Proprietary Information of ZTE CORPORATION 245 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I TABLE 399 SET ZTP COMMAND Format Mode set ztp group config enable disable ZTEDR Function This enable disable the system ZTP 246 function Result This enable disable the system ZTP function Note By default system ZTP function is enabled When system ZTP function is disabled contents of switch topology information table are cleared and ZTP packets processing is Suspended To enable disable port ZTP function use command set ztp port lt portlist gt enable disable in group config mode This is shown in Table 400 TABLE 400 SET ZTP PORT COMMAND Format Mode Function set ztp port group config This enable disable lt portlist gt port ZTP function enable disable Result This enable disable port ZTP function To enable disable trunk ZTP function use command set ztp trunk lt trunklist gt enable disable in group config mode This is shown in Table 401 TABLE 401 SET ZTP TRUNK COMMAND Format Mode Function set ztp trunk group config This enable disable lt trunklist gt trunk ZTP functio
153. and Speed are meaningless 2 Click catalog tree in the left of system main page Configuration gt Port gt Port Parameter to open the port configuration information page as shown in Figure 49 Confidential and Proprietary Information of ZTE CORPORATION 267 y ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDR FIGURE 49 PORT CONFIGURATION INFORMATION ZTE switch Microsoft Internet Explorer E 81 xj THO RRO SEV ima TAD BW Ea SAER gt OU Quer weer Qus Gy 5 E eu ABs ora L akn Hihk D http j 192 168 1 3 index htm UID 800112 ZTEDH ZXR10 5124 FI Configuration gt System ZTEPM ZXR10 5124 FI Port gt Part State gt Port Parameter Console 3 3 5 n S3 VLAN W PVLAN 120 Refresh 1 gt Mirror Lacp Port Configuration Monitoring Terminal Log Select Config Portld MediaType Name AdminStatus WorkMode AutoNeg PVID FlowControl Multifilter MacLimit Security Spee Port Statistics Iv config 1 1000BaseT Enable Copper Auto 1 Disable Disable Disable Disable Mz gt Running Config poe z 5 z MnBnancH Li config 2 1000BaseT Enable Copper Auto 1 Disable Disable Disable Disable Me Pine V config 3 1000BaseT Enable Copper Auto 2 Disable Disable Disable Disable Mz Reboot M Upload Iv config 4 1000BaseT Enable Copper Auto 1 Disable Disable Disable Disable Mz P User Manager
154. ars the STP instance trunkcost To clear the STP name use command clear stp name lt 0O 15 gt trunk lt trunkid gt cost in global configuration mode This is shown in Table 151 TABLE 150 SET STP COMMAND Format Mode Function clear stp name Global config This clear the STP 0 15 name Result This clears the STP name To Enable Disable the STP use command set stp enable disable in global configuration mode This is shown in Table 151 TABLE 151 SET STP COMMAND Format Mode Function set stp Global config This enable disable enable disable the STP Result This is used to enable disable the STP To set the STP aging time use command set stp agemax lt 6 40 gt in global configuration mode This is shown in Table 152 TABLE 152 SET STP AGEMAX COMMAND Format Mode Function set stp agemax lt 6 Global This sets the STP aging 40 gt config time Result This sets the STP aging time To set edge port use command set stp edge port add delete port lt portlist gt in global configuration mode This is shown in Table 153 Confidential and Proprietary Information of ZTE CORPORATION 113 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 153 SET STP EDGE PORT COMMAND Format Mode Function set stp edge port Global add delete port config This sets edge port lt portlist gt Result This sets edge port 8 To set the STP forced version use command set stp forceversion mstp
155. ate switches use command set group candidate in group config mode This is shown in Table 407 TABLE 407 SET GROUP CANDIDATE COMMAND Format Mode Function set group group config This sets candidate candidate switches Result This sets candidate switches 2 To set independent switches use command set group independent in group config mode This is shown in Table 408 TABLE 408 SET GROUP INDEPENDENT COMMAND Format Mode Function set group group config This sets independent independent switches Result This sets independent switches 3 To set a command switch specify a layer 3 port number for cluster management and set IP address pool for user cluster management use command set group commander ipport 0 63 ip pool lt A B C D M gt in group config mode This is shown in Table 409 TABLE 409 SET GROUP COMMAND Format Mode Function set group group config This sets a commander command switch ipport 0 63 ip pool lt A B C D M Result This sets a command switch specify a layer 3 number for cluster management and sets IP address pool for user cluster management After a candidate switch is added to the cluster by command switch and becomes a member switch Confidential and Proprietary Information of ZTE CORPORATION 249 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH member switch cannot change itself to a candidate switch or command switch In setting comman
156. ation mode SSH uses port 22 Configuring SSH Purpose This topic describes the configuration of SSH Steps For the configuration of SSH perform the following steps 1 To enable disable SSH use command set ssh enable disable in global configuration mode This is shown in Table 370 TABLE 370 SET SsH COMMAND Format Mode Function set ssh global config This enable disable enable disable SSH Result This enable disable SSH By default SSH function is disabled SSH configures remote access to the switch User name and password for login or remote RADIUS login mode shall be configured on the switch and the local host shall be able to ping the IP port address on the switch normally This switch only supports SSH login of a single user allowing for three login attempts After three login attempts connection with the user is automatically terminated After user login set ssh disable command is to terminate connection with user and prohibit user from logging in through SSH However if user is in Diffie Hellman key exchange state command is disabled 2 To display SSH configuration and user login status use command show ssh in global configuration mode This is shown in Table 371 TABLE 371 SHOW SsH COMMAND Format Mode Function show ssh global config This displays SSH configuration and user login status Result This displays SSH configuration and user login status END OF STEPS Result SSH
157. ation of IPTV maintenance and diagnosis perform the following steps 1 To display the global configuration information of IPTV use command show iptv control in privileged mode This is shown in Table 140 TABLE 140 SHOW IPTV CONTROL COMMAND Format Mode Function show iptv control privileged mode This displays the global configuration information of IPTV Result This displays the global configuration information of IPTV 2 To display the channel information of IPTV use command show iptv channel in privileged mode This is shown in Table 141 TABLE 141 SHOW IPTV CHANNEL COMMAND Format Mode Function show iptv channel privileged mode This displays the channel information of IPTV Result This displays the channel information of IPTV 3 To display specific channel number and channel statistics information use command show iptv channel id name in privileged mode This is shown in Table 142 TABLE 142 SHOW IPTV CHANNEL ID NAME COMMAND Format Mode Function 108 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 7 Service Configuration Format Mode Function show iptv channel privileged mode This displays id name specific channel number and channel statistics information Result This displays specific channel number and channel statistics information To display the CAC rule use command show iptv cac rule in privileged mode This is shown in Table 143 TABLE 143 SHOW
158. ation port ingress monitoring port or mirror the data packets of the switch port egress mirroring port to an egress destination port egress monitoring port Through mirroring data packets flowing in or out of a certain port can be monitored Port mirroring provides an effective tool for the maintenance and monitoring of the switch Switch can be configured with only one ingress monitoring port and one egress monitoring port Ingress monitoring port and egress monitoring port can be configured on same port Whereas multiple source ingress monitoring ports and source egress monitoring ports can be configured at the same time Note In default case switch does not have mirroring port The GOOD data packets received by ingress mirroring port are mirrored onto the monitoring ports but data packets directly discarded on the ingress port for example because of CRC errors are not mirrored The source mirror port amp the destination port must be in the same vlan Configuring Port Mirroring Confidential and Proprietary Information of ZTE CORPORATION 75 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH This topic describes the procedure of port mirroring configuration of ZXR10 2920 2928 2952 Steps To mirror the ports perform the following steps 1 To add a mirroring port use command set mirror add source port lt portlist gt ingress egress in global configuration mode This is shown in Table 59
159. ber lt 200 299 gt to enter into L2 ACL configuration mode as shown in Bee euo sexus ACI oss robos ZOU zte link acl group Note L2 ACL configuration mode includes configuring ACL parameters and moves ACL rule sequence id 2 To return to global configuration mode from the L2 ACL configuration mode use command exit or press Ctrl 4 Z END OF STEPS L2 ACL is configured Configuring Hybrid ACL Mode This topic describes the Hybrid ACL configuration mode For the configuration of Hybrid ACL perform the following steps 1 In the global configuration mode execute command config acl hybrid number 300 349 to enter into Hybrid ACL configuration mode as shown in zc qu t Contig sacle hybrmrd numoer S zte hybrid a l group Note Hybrid ACL configuration mode includes configuring ACL parameters and moves ACL rule sequence id 2 To return to global configuration mode from the Hybrid ACL configuration mode use command exit or press Ctrl Z Using Command Line In any command mode enter a question mark after DOS prompt of system a list of available commands in command mode is displayed With context sensitive help function keywords and parameter lists of any commands can be obtained This topic describes the configuration of online command help Confidential and Proprietary Information of ZTE CORPORATION 45 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Steps For the config
160. c policing in sqinq monitor session 1 256 Result This clears traffic monitor To redirect policy for traffic use command set policy redirect in sqinq session 1 256 port portname in global configuration mode This is shown in Table 298 TABLE 298 SET POLICY REDIRECT COMMAND Format Mode Function set policy redirect global config This redirects policy in sqing session for traffic 1 256 port portname gt Result This redirects policy for traffic 182 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR 10 Chapter 8 Access Service To clear redirect policy use command clear policy redirect in sqinq session 1 256 in global configuration mode This is shown in Table 299 TABLE 299 CLEAR POLICY REDIRECT COMMAND Format Mode Function clear policy global config This clears redirect redirect in sqing policy session lt 1 256 gt Result This clears redirect policy To set policy of statistics use command set policy statistics in sqinq session lt 1 256 gt counter lt 0 31 gt in global configuration mode This is shown in Table 300 TABLE 300 SET POLICY STATISTICS COMMAND Format Mode Function set policy global config This sets policy of Statistics in Statistics sginq session lt 1 256 counter lt 0 31 Result This sets policy of statistics To clear policy of statistics use command clear policy statistics in sqinq session 1 256 in global configurati
161. cading cable of switch B is uplink cable of switch C Rest of subscriber lines are 32 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 4 Installation and Debugging distributed inside the building and connected to subscriber terminals from bottom to top in the corridor Lightning protection bars must be added for the uplink downlink and cascading Ethernet ports that are outdoors Lightning protection bar must reach 6 KV or above and the current discharge capability must reach 5 KA Grounding cable of lightning protection bar must have a diameter of 16 mm2 and a length less than 30 cm It is recommended to use the optical port as uplink port for convergence switch in the building If the electrical port is used lightning protection bars must be added Convergence Cabling of a convergence switch is shown in Figure 18 switch cabling Uplink port is optical port and lightning protection bars are added for downlink or cascaded cables Lightning bars are connected to ground through shell Rest of subscriber lines are distributed inside building FIGURE 18 CABLING OF A CONVERGENCE SWITCH Ethernet switch A y y Shell ground LA Lightning Less than 30 cm J protection bar P F Uplink cable Ca Uplink cable or optical interface cascading cable Subscriber line Explanation Explanations are as follows Grounding system with good ground grid is preferred fo
162. ccess use command clear remote access ipaddress lt A B C D gt A B C D gt in global configuration mode This is shown in Table 368 TABLE 368 CLEAR REMOTE ACCESS IPADDRESS COMMAND Format Mode Function This deletes an IP address that allows remote access clear remote access ipaddress A B C D A B C D gt global config Result This deletes an IP address that allows remote access To display Remote Access configuration information use command show remote access in global configuration mode This is shown in Table 369 TABLE 369 SHOW REMOTE ACCESS COMMAND Format Mode Function show remote global config This displays access Remote Access configuration information Result This displays Remote Access configuration information END OF STEPS Remote Access has been configured Hemote Access Configuration Examples Only allows network management user to access the switch from 10 40 92 0 24 through Telnet Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 9 Network Management zte CIg tset remote access Specitic zte cfg set remote access ipaddress 10 40 295 Zo wm PROS 0 zte cfg show remote access Whether check remote manage address YES Allowable remote manage address list IG 40 EI Oy co Zot Zoos 0 zte cfg Jas 0 Example 2 Only allows network management user to access the switch from 10 40 92 212 through Telnet zte
163. ch User Manual Volume I ZTEDH 2 28 29 30 TABLE 226 CLEAR POLICY POLICING COMMAND Format Mode Function clear policy global config This deletes QoS policing in acl 1 policing for the 349 rule 1 traffic 100 Result This deletes QoS policing for the traffic To clear remark for the traffic use command clear policer remark in acl lt 1 349 gt rule lt 1 500 gt in global configuration mode This is shown in Table 227 TABLE 227 CLEAR POLICY QOS REMARK COMMAND Format Mode Function clear policer remark global config This clears remark in acl 1 349 for the traffic rule 1 500 Result This clears remark for the traffic To clear statistics for the traffic use command clear policy statistics in acl 1 349 rule 1 100 in global configuration mode This is shown in Table 228 TABLE 228 CLEAR POLICY STATISTICS COMMAND Format Mode Function clear policy global config This clears statistics statistics in acl for the traffic 1 349 rule 1 100 Result This clears statistics for the traffic To clear redirect for the traffic use command clear policy redirect in acl 1 349 rule 1 100 in global configuration mode This is shown in Table 229 TABLE 229 CLEAR POLICY REDIRECT COMMAND Format Mode Function clear policy global config This clears redirect redirect in acl lt 1 for the traffic 349 rule 1 100 Result This clears redirect for the traffic To vi
164. col When multiple different areas exist the main port is the minimal pathcost port point to the root s Designated the port transmits data to switch downward amp send STP protocol message to maintain the state of STP Backup the port receives the STP message To prove that there exits a loop route to the port itself Alternate the port receives excess STP protocol message 2 from other equipment But when the original link abnormally lost the port under this state can transfer to transmitting state amp maintain the network instead of the port lapsed Edged the port used to connect the terminal equipment such as PC The port set as the margin port do not participate in calculation when STP is turbulent amp the state can switch fast According to port role the state after the calculation being steady is shown in TABLE147 TABLE147 PORT ROLE amp PORT STATE Port role Port state Master Forward Root Forward Designated Forward Backup Discard Alternate Discard Edged Forward Spanning Tree Protocol STP is applicable to a loop network It blocks some redundant paths with certain algorithms so that the loop network is pruned into a tree network without any loop thus avoiding the hyperplasia and infinite loop of packets in the loop network BPDU protect function is a particular protection for margin port The margin port will not receive the protocol message If there exists vicious protocol attack or L
165. command set vlan lt vianlist gt forbid port lt portlist gt in global configuration mode This is shown in Table 73 TABLE 73 SET VLAN FoRBID PoRT COMMAND Format Mode Function set vlan lt vlanlist gt Global forbid port config This forbids port from VLAN lt portlist gt Result This forbids port from VLAN 80 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 11 12 Chapter 7 Service Configuration To permit port on VLAN use command set vlan vlanlist permit port lt portlist gt in global configuration mode This is shown in Table 74 TABLE 74 SET VLAN PERMIT PoRT COMMAND Format Mode Function set vlan vlaniist Global This permits port on VLAN permit port config lt portlist gt Result This permits port on VLAN To forbid trunk on VLAN use command set vlan lt vlanlist gt forbid trunk lt trunklist gt in global configuration mode This is shown in Table 75 TABLE 75 SET VLAN FORBID TRUNK COMMAND L5 14 Format Mode Function set vlan vlanlist Global forbid trunk config This forbids trunk on VLAN lt trunklist gt Result This forbids trunk on VLAN To permit trunk on VLAN use command set vlan lt vlanlist gt permit trunk lt trunklist gt in global configuration mode This is shown in Table 76 TABLE 76 SET VLAN PERMIT TRUNK COMMAND Format Mode Function set vlan vali EDI This permits trunk on VLAN permit trunk config lt trunklist gt
166. config This add lt ispname gt add authentication authentication server to domain lt A B C D 0 65535 Result This add authentication server to domain To delete the authentication server from domain use command radius isp ispname delete authentication A B C D in nas config mode This is shown in Table 275 TABLE 275 RADIUS ISP DELETE AUTHENTICATION COMMAND Format Mode Function radius isp nas config This deletes the lt ispname gt delete authentication authentication server from domain lt A B C D Result This deletes the authentication server form domain Note A domain can be configured with up to three authentication servers Priority of server is determined by configuration order First server configured enjoys highest priority and last server has lowest priority When a server is deleted priorities of related servers rise in sequence To add an accounting server to the domain use command radius isp ispname add accounting A B C D gt lt 0 65535 gt in nas config mode This is shown in Table 276 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 8 Access Service TABLE 276 RADIUS ISP ADD ACCOUNTING COMMAND Format Mode Function radius isp nas config This adds an lt ispname gt add accounting server accounting lt A to the domain B C D gt lt 0 65535 gt Result This adds an accounting server to the domain To delete an accoun
167. configuration mode This is shown in Table 101 92 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 7 Service Configuration TABLE 101 SET IGMP SNOOPING FASTLEAVE COMMAND Format Mode Function set igmp snooping Global This Enable Disable the IGMP fastleave config fastleave function enable disable Result This Enable Disable the IGMP fastleave function 6 To set the last member snooping interval use command set igmp snooping last member query lt 10 250 gt in global configuration mode Result This sets the last member snooping interval 7 To Enable Disable the IGMP snooping function for the specified VLAN use command set igmp snooping query vlan lt vlanlist gt enable disable in global configuration mode This is shown in Table 101 TABLE 101 SET IGMP SNOOPING QUERY VLAN COMMAND Format Mode Function set Igmp This Enable Disable the IGMP snooping query Global Snooping function for the vlan lt vlanlist gt config specified VLAN enable disable Result This Enable Disable the IGMP Snooping function for the specified VLAN To set the snooping interval use command set igmp snooping query interval lt 10 2147483647 gt in global configuration mode This is shown in Table 102 TABLE 102 SET IGMP SNOOPING QUERY INTERVAL COMMAND Format Mode Function set igmp snooping Global query interval fi This sets the snooping interval lt 10 config 2147483647 gt Res
168. configured through MIB browser and a HyperTerminal or remote Telnet command line RMON sampling information and statistics are obtained through MIB browser Configuring RMON This topic describes the configuration of RMON through a HyperTerminal or remote Telnet For the configuration of RMON perform the following steps 1 To enable disable RMON function use command set rmon enable disable in SNMP config mode This is shown in Table 386 TABLE 386 SET RMON COMMAND Format Mode Function set rmon SNMP config This enable disable enable disable RMON function Result This enable disable RMON function Note By default RMON function is disabled Sampling of etherStatsTable information in etherHistoryTable and Statistics groups in history group can be implemented only when RMON function is enabled During the sampling data sampling stops if the RMON function is disabled 2 To create configure instances of history group use command set history 1 655355 1datasource portname bucketRequested lt 1 65535 owner lt string gt interval lt 1 3600 gt status Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 9 Network Management valid underCreation createRequest invalid in SNMP config mode This is shown in Table 387 TABLE 387 SET HISTORY COMMAND Format Mode Function set history 1 655535 SNMP These datasource lt portname gt bu config create configure cketRequested
169. cription of 48V power socket on DC power Supply module of ZXR10 2920 2928 2952 is shown in Figure 13 FIGURE 13 48 POWER SOCKET 48VGND DC power cable is a 3 core power cable as shown in Figure 14 24 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Grounding Power Cable Serial port cable connections Chapter 4 Installation and Debugging FiGURE 14 DC POWER CABLE Detail description of two ends of power cable is given in Table 9 TABLE 9 DESCRIPTIONS OF POWER CABLES End A End B Power Signal 1 Brown 48VGND 2 Blue 48V 3 Yellow GNDP One end of the DC power cable is connected to the power socket on the DC power supply module of the ZXR10 2920 2928 2952 and the other end to the corresponding terminal of 48V DC power supply There is a grounding screw on the back of ZXR10 2920 2928 2952 figuring by e When connecting with kelly protect cable one end of the cable is connected to the grouding screw and the other end to the grouding protect of the cabinet of the ZXR10 2920 2928 2952 Grounding protect cable shape is shown in Figure 17 FIGURE 17 GROUNDING PROTECT CABLE Oo TO Console Cable Installation Serial port configuration cable is for configuration and routine maintenance of ZXR10 2920 2928 2952 switches ZXR10 2920 2928 2952 is delivered with serial port configuration cable One end of the cable is a DB9 serial port Confidential and Proprietary Information
170. ction set ging tpid global config This set tpid of the lt tpid gt outer tag Result This set tpid of the outer tag 4 To display QinQ configuration use command show qinq in global configuration mode This is shown in Table 292 TABLE 292 SHOW QINQ COMMAND Format Mode Function show ging global config This displays QinQ configuration Result This displays QinQ configuration END OF STEPS PVLAN has been configured on ZXR10 2920 2928 2952 When QinQ is configured customer port and uplink port of SPVLAN can be set as an untagged port or as a tagged port This example describes that suppost customer port of switch A is port 1 and uplink port is port 24 Customer port of switch B is port 1 and uplink port is port 24 This is shown in Figure 33 Confidential and Proprietary Information of ZTE CORPORATION 179 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH set vlan 10 enable set vlan 10 add port 1 24 AC eno joo Ll 24 jowale IG set ging customer port 1 enable set ging uplink port 24 enable Configuration of switch B is same as that of switch A SQinQ Overview SQinQ Selective QinQ is based on QinQ technology Selective QinQ configuration enables packets to be tagged with external tags according to tag they already carry SQinQ uses same terms as QinQ to describe its features Customer port port connected to Client Network Uplink port port con
171. d ACL configuration mode a L2 ACL configuration mode Hybrid ACL configuration mode Configuring User Mode This topic describes the configuration of user mode 40 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Steps Result Purpose Steps Result Chapter 5 Usage and Operation For the configuration of user mode perform the following steps 1 When using HyperTerminal mode to log on to system system enters into user mode automatically Result The prompt character in the user mode is the host name followed by gt as shown below pc Note By default host name is zte Modify the host name by using the command hostname In the user mode execute the command exit to exit the switch configuration In the user mode execute the command show to display the system configuration and operation information Note The command show can be executed in any mode END OF STEPS User mode has been configured Configuring Global Mode This topic describes the global configuration mode For the configuration of global mode perform the following steps i In user mode enter the enable command and the corresponding password to enter the global configuration mode as follows zte gt enable Password zte cfg In the global configuration mode various functions of the Switch can be configured Use command set user local radius lt name gt admin password lt string
172. d as Load save or delete a stored session Behaviour Translation Saved Sessions Selection S Colours Default Settings Load El Connection di Delete Close window an exit E Pugs Always C Never ie Only on clean exit Cancel 2 Set the SSH version number as shown in Figure 39 224 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Chapter 9 Network Management FIGURE 39 SETTING SSH VERSION NUMBER oe PuTTY Configuration E X Category Er session Options controlling SSH connections Logging Data to send to the server El Terminal a Keyboard Remote command E Frotacal options El Window Appearance Don t allocate a pseudo terminal H Behaviour Enable compression T Translation Preferred SSH protocol version Selection C 7 only La ele Encryption options E Connection Proxy Encryption cipher selection policy m AES 55H 2 only l Blowfish g 3DES Up warn below here D m DES E ce For the first time to log in user confirmation is needed as shown in Figure 40 FIGURE 40 PUTTY SECURITY ALERT PuTTY Security Alert X AN The server s host key is not cached in the registry You have no guarantee that the server is the computer you think it is The server s dss key fingerprint is ssh dss 1024 9b ad bc 18 7e 9c dd 4d 43 28 16 05 2b 9c 54 7a If you trust this host hit Yes to add t
173. d switch VLAN to which the layer 3 port is bound shall be the specified VLAN for collecting topology information Once a switch is configured to be a command switch specified VLAN for collecting topology information cannot be changed gt Command switch is allowed to be a candidate switch or independent switch only when the cluster has no member switch END OF STEPS Result Cluster management Unique ID of cluster has been configured Configuring a Cluster Member Purpose This topic describes the configuration of cluster member to add delete Steps For the configuration of cluster member perform the following steps 1 To add a member based on device MAC address use command set group add mac xx xX xx in group config mode This is shown in Table 410 TABLE 410 SET GROUP ADD MAC COMMAND Format Mode Function set group add group config This adds a mac xx xx member based on Xx device MAC address Result This adds a membe based on device MAC address 2 To add a member based on device MAC address and specify member ID use command set group add mac cxx XX XX 1 255 in group config mode This is shown in Table 411 TABLE 411 SET GROUP ADD MAC COMMAND Format Mode Function set group add group config This adds a mac xx Xx member based on Xx 1 255 device MAC address and specify member ID Result This adds a member based on device MAC address and specify member ID 250 Confident
174. d vu Pe ir REPE Ea Gal id qs 233 CONGUMING RMON EE 234 Cluster Management OVErVieW cccccessecssnneeeeeesseeusnntreeses 241 Conrgurtbide s DP suture handed y o o p Vue a ig 243 CONMGUPING CAD scc ET 245 Conrniaqurndg lgsEel airinn in aea A sores om qi rx EO f ds 249 Configuring a Cluster Mernbet x cuied ia eie oceano levies o Roi oho Rer 250 Configuring Cluster Parameters eee nnnm nnn 251 Configuring Access and Control Cluster Members 253 Displaying Cluster ConhGUralliOn tester soevvebkt tee xx era PRA YES E SEU 255 Web Management Overview iseeeeeeen nennen enhn nnn 262 Logging On Using Web ManagemMen cccccsecceuesseueeuenneueens 262 ConriduindeqswsbelTkssssvesiagbutuida estes etas tuse pa Rt d P Le 264 Configuring Port and Parameters ies e raro eder dope dr REDDE r 265 Configuring Vlan Management susce yt y xr pa ne er PR Pr 270 CONGUTING PV LAIN Em 273 Configuring Mirroring Management sun axe nx VESUS C um Ke 275 Configuring EACPMSmagsmellbuseeto eoa VEI SEE Ead eS NER 278 Configuring Terminal Record sss evsdus neta Ria VU RUERES SUE E E ras dis 261 CONMGUFIMG Fort SEAEISUICS odas samme vex Ane a 282 configuring Inforttiatloli esu abeut onte 906 Q2RT RE EMIS Ob 2Ddeuce dd testen 283 Savio COMMOUPALION xceiaassetesens taii debere erUtT pu Ra cbuvdpnr ot 284 REDOOUNG am EquIDEelb vsscibvsasexut xv Ra d ROM EE 285 Yodda ir WS TEN TOES 286 Configuring User Manageme itis e orxu
175. dability amp Clarity Technical Accuracy Content Good L Fair C Average LI Poor C Bad LIN A Please check the suggestions which you feel can improve this documentation Improve the overview introduction C Make it more concise brief Improve the Contents Add more step by step procedures tutorials Improve the organization Add more troubleshooting information Include more figures Make it less technical Your Add more examples Add more better quick reference aids suggestions for Add more detail Improve the index improvement of this Other suggestions documentation Please feel free to write any comments on an attached sheet This page is intentionally blank Contents About THIS Manual 5in nume snu usua Rx d xiu uu a a Ri ic a i i PUN DOSS MP eae Eade yi ae smi ei ge M rx i Prerequisite Skill and Knowledge sssssssnasnansnnnnnnnsnnnnnnasnannnnan i Whee TSn TMS mibi ertene aT TOE i COVE E ii ge TO Getin ere iii CDaDIBF Loose ere reece VOLVEREEYRRKELPERVRILNEEEEEEVEER VER i 1 Safety LS EN UCO mt 1 Sicil C nr 1 Sarety TRSEPHOCEIODIS eeraa a ox aida UncY MAU URS Bb d dM RA 1 CHAPE 2 uenenum CuE ERGO IV EO REUS EXNKN CE ER E QUEE T RM KE RUREIFIUE 3 System OVeFVIGW scenes axwus nisus sas uuEE aV E cES XE FEX ME VE FNE NE KNEE EK FE NE 3 gpl Me 9 ProduCtOVEFVIE T T 3 SWitening Capability erc 4 Reliability and characteristics
176. de This is shown in Table 120 TABLE 120 SHOW IGMP FILTER COMMAND Format Mode Function show igmp Global This displays the configuration of filter config IGMP filter 98 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Example Chapter 7 Service Configuration Result This displays the configuration of IGMP filter 12 To display the multicast snooping results use command show igmp filter vlan lt 1 4094 gt in global configuration mode This is shown in Table 121 TABLE 121 SHOW IGMP FILTER VLAN COMMAND Format Mode Function show igmp filter vlan lt 1 4094 Global This displays the multicast config snooping results Result This displays the multicast snooping results END OF STEPS IGMP snooping has been configured This example describes IGMP snooping function Ports 1 3 and 5 are connected to the host Port 10 is connected to the router The one to multiple communication mode is implemented That is port 10 can communicate with ports 1 3 and 5 but ports 1 3 and 5 cannot communicate with each other The IGMP Snooping function of the switch is enabled and the snooping results are displayed This is shown in Figure 26 FiGURE 26 NETWORK TOPOLOGY IGMP Router Confidential and Proprietary Information of ZTE CORPORATION 99 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I Configuration zte cfo tset wlan 200 add
177. de Function show lac Global This displays the LACP P config configuration information Result This displays the LACP configuration information To display the aggregation information about the LACP aggregation group use command show lacp aggregator lt trunkid gt in global configuration mode This is shown in Table 96 TABLE 96 SHOW LACP AGGREGATOR COMMAND Format Mode Function show lacp Global This displays the aggregation aggregator information about the LACP config l lt trunkid gt aggregation group Result This displays the aggregation information about the LACP aggregation group To display the information of the port where the LACP is involved in the aggregation use command show lacp port lt portlist gt in global configuration mode This is shown in TABLE 99 Confidential and Proprietary Information of ZTE CORPORATION 89 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 99 SHOW LACP PORT COMMAND Format Mode Function This displays the information of the port where the LACP is involved in the aggregation show lacp port Global portlist gt in config Result This displays the information of the port where the LACP is involved in the aggregation END OF STEPS Result Link aggregation is configured Note After the configuration of the aggregation group various settings can be performed on it such as setting the PVID adding it to the VLAN setting th
178. default port priority The priority of a data packet is determined in the following sequence Priority of the data packets sent by CPU determined by CPU Priority of MGMT data packets management data packets such as the BPDU packets Priority of the management packets is determined by the initialization Priority of static source MAC address a VLAN priority 802 a Layer 3 DSCP priority 1P user priority Default port priority 132 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Purpose Steps Chapter 7 Service Configuration After data packet priority is determined by the previous priority determination policy the later policies are ignored To use the default port priority to decide the priority of the data packets received by the port all the following conditions shall be satisfied Data packets are not data packets sent by CPU or management data packets Source MAC address of the data packets cannot be the static address or the port source priority function is disabled Priority of VLAN that the data packets belong to is disabled or Priority of the VLAN of the port belongs to is disabled 802 1P user priority of the port is disabled or the data packets are not TAG data packets Port DSCP priority is disabled After the priority control policy of the switch is configured if the switch receives the data frames the data frames with higher priority
179. dify in global configuration mode This is shown in Table 294 TABLE 294 QoS REMARK IN SQINQ COMMAND Format Mode Function qos remark in global config This sets Qos sginq session lt 1 remark 256 profile lt 0 71 gt up no change enable modify disable modify dscp no change enable modify disable modify Result This sets Qos remark Confidential and Proprietary Information of ZTE CORPORATION 181 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH 3 To clear Qos remark use command clear policy qos remark in sqing session 1 256 in global configuration mode This is shown in Table 295 TABLE 295 CLEAR POLICY QOS COMMAND Format Mode Function clear policy qos global config This clears Qos remark in sginq remark session 1 256 Result This clears Qos remark To monitor traffic use command set policy policing in sqinq session 1 256 policer 0 255 in global configuration mode This is shown in Table 296 TABLE 296 SET POLICY POLICING COMMAND Format Mode Function set policy policing global config This monitors traffic in sqing session 1 256 policer 0 255 Result This monitors traffic To clear traffic monitor use command clear policy policing in sqinq session 1 256 in global configuration mode This is shown in Table 297 TABLE 297 CLEAR POLICY POLICING COMMAND Format Mode Function clear policy global config This clears traffi
180. direct the designated data flow to the egress port designated by users and monitor the flow To redirect the data flow use command set policy redirect in acl 1 349 rule 1 500 cpu port portname j in global configuration mode This is shown in Table 220 TABLE 220 SET POLICY REDIRECT COMMAND Format Mode Function set policy redirect global config This redirects the in acl 1 349 data flow rule 1 500 cpu port portname Result This redirects the data flow 21 To set policy statistics use command set policy statistics in acl 1 349 rule 1 500 counter 0 31 in global configuration mode This is shown in Table 222 TABLE 221 SET POLICY QOS REMARK COMMAND Format Mode Function set policy statistics in acl 1 349 rule isbal cont This sets policy lt 1 500 gt counter g g statistics lt 0 31 gt Result This sets policy statistics 22 Remarking the flow is to remark the QoS attribution of the designated flow This happens after the primary QoS marking on the port To remark the flow use command set police remark in acl lt 1 349 gt rule lt 1 500 gt up lt 0 7 gt in global configuration mode This is shown in Table 222 140 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 23 25 26 Chapter 7 Service Configuration TABLE 222 SET POLICY QOS REMARK COMMAND Format Mode Function set police remark in acl lt 1 349 gt lobal fi This remarks th
181. dr WYXX cfg group show group member MbrId MacAddress IpAddress Status 1 Doc cU EE MEIN Oe Gon T21 Up 2 CO ellie oles nee a esc Loe les I ya Up 9 Og ONDE xD S see 5 al GE dL e 168 1 4 24 Up 4 OO che oll ee MCI ile IGS Mi sp ma Up 5 QUO OUI peel dS T ILS 168 Ts 6 24 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Set IP address of TFTP Server in cluster to 110 1 1 2 Cilia OOCe ne euo ODIO were emeenme inesse TINO eZ Set IP address of cluster SYSLOG Server as 110 1 1 3 Cgeheo WOO cugr 91598 9 eec cnseup sweleesws Lit jt Xs 3 Download version kernel Z on member 4 Membr 4 zte CEOs EES terp Commander download kernel A Web Management Overview Web ZXR10 2920 2928 2952 provides an embedded WEB server Management stored in flash memory It allows users to manage the switch Description remotely using a standard WEB browser give the advice that the browser version should be above IE 4 O with a distinguish rate of 1024 768 through the network Logging On Using Web Management Purpose This topic describes procedure to login web management of ZXR10 2920 2928 2952 Prerequisites To login to web management meet the following requirements Enable the web through hyper terminal m ZXR10 2609 2818S 2826S 2852S supports web server It allows users to use standard web browser Internet Explorer 4 O is required for the access of web management Steps To login to web
182. e crunk L 2 3 zte cfg show pvlan pvlan session E Promiscuous port Ie isolated port MS 1solated trunk pvlan session DE OeOlins CUO Ms 19e x EG isolated port LSO lar rnk 4 E pvlan session d Promiscuous Porr isolated port isolated trunk pvlan session 4 Promiscuous pore TSolat dF port isolated trunk zte cfg 802 1x Transparent Transmission IEEE 802 1x is a port based network access control protocol Port based network access control is a way to authenticate and authorize the users connected to the LAN equipment This type of authentication provides a point to pint subscriber identification method in the LAN ZXR10 2920 2928 2952 provides 802 1x transparent transmission function that allows the transparent transmission of 802 1x protocol packets from the client to the authentication server for authentication Confidential and Proprietary Information of ZTE CORPORATION 149 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Configuring 802 1x Transparent Transmission Purpose This topic describes the configuration of 802 1x transparent transmission in ZXR10 2920 2928 2952 Steps For configuration of 802 1x transparent transmission perform the following steps 1 To enable disable the 802 1x transparent transmission function use command set 802 lxrelay enable disable in global configuration mode This is shown in Table 241 TABLE 241 SET 802 1x REL
183. e as shown in Figure 53 Confidential and Proprietary Information of ZTE CORPORATION 271 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I FIGURE 53 VLAN NUMBER INPUT ZTEmA ZTE switch Microsoft Internet Explorer E 81 xj XE MHD Baw REAO IAM EBD emRB Q O Qs uker Qus SA 3 vj E dra AD Hitik D http 192 168 1 3 index htm UID 800112 ApS ora Ea e A3 ZXR10 5124 FI Configuration gt System Port gt Port State gt Port Parameter Sy VLAN gt Vian Overview gt vlan Configure QS PVLAN gt Mirror Lacp Monitoring gt Terminal Log gt Port Statistics gt Running Config Maintenance gt Save gt Reboot gt Upload gt User Manager Logout All rights reserved ZTE Corporation ZTEPSM ZXR10 5124 Fl 1 120 Refresh Vlan Configuration Vlanid 1 3 5 e Please inputthe list of vlan that you want to config e g e Vian range is 1 4094 Apply Reset Return GE 4 Input the VLAN number number input page EE EH Intranet format is like 1 3 5 in the VLAN VLAN or batch VLANs configuration page and click Apply button to enter single 5 Single VLAN configuration page is shown in Figure 54 FIGURE 54 SINGLE VLAN ZTE switch Microsoft Internet Explorer E la xl RAD MHD SAM emu IAM BH FAR gt 0AA QRR akez Gee E 5 w igsuet
184. e operations Command format is similar to DOS commands as present in Microsoft Windows Operating System This topic describes file system operation of ZXR10 2920 2928 2952 To do file management there must have an access to Command Line Interface CLI CLI is a text based interface that can be accessed through a direct serial connection to device and through telnet connections For file system operation perform the following steps 1 To enter the file system configuration mode use command config tffs in global configuration mode This is shown in Table 21 TABLE 21 CONFIG TFFS COMMAND Format Mode Function This enters into the file config tffs conmg system configuration mode Result This enters into the file system configuration mode 2 To create new directory use command md lt directory name gt in file system configuration mode This is shown in Table 22 TABLE 22 MD COMMAND Format Mode Function File md lt directory name gt system This creates new directory config Result This creates new directory 3 To delete a file or directory use command remove lt file name gt in file system configuration mode This is shown in Table 23 TABLE 23 REMOVE COMMAND Format Mode Function remove lt file name gt File This creates new directory system Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Chapter 6 System Management Format Mode Function config Result This deletes a fi
185. e rule 1 500 up een ee flow of traffic 0 7 Result This remarks the flow of traffic To clear QoS policy counter use command clear qos policy counter 0 31 in global configuration mode This is shown in Table 223 TABLE 223 CLEAR Qos PoLicY COUNTER COMMAND Format Mode Function clear qos policy global config This clears QoS counter 0 31 policy counter Result This clear QoS policy counter To delete mirror for the traffic use command clear policy mirror in acl 1 349 rule 1 100 in global configuration mode This is shown in Table 224 TABLE 224 CLEAR POLICY MIRROR COMMAND Format Mode Function clear policy global config This deletes mirror mirror in acl 1 for the traffic 349 rule 1 100 Result This deletes mirror for the traffic To delete Vlan remark for the traffic use command clear policy vlan remark in acl 1 349 rule 1 100 in global configuration mode This is shown in Table 225 TABLE 225 CLEAR POLICY VLAN COMMAND Format Mode Function clear policy vlan global config This clears Vlan remark in acl 1 remark for the 349 rule 1 traffic 100 Result This clears Vlan remark for the traffic To delete QoS policing for the traffic use command clear policy policing in acl 1 349 rule 1 100 in global configuration mode This is shown in Table 226 Confidential and Proprietary Information of ZTE CORPORATION 141 ZXR10 2920 2928 2952 V1 0 Access Swit
186. e domains To delete control VLAN in ZESR domain use command set zesr domain lt domainId gt delete control vlan vlanname in global configuration mode This is shown in Table 359 TABLE 359 SET ZESR DOMAIN DELETE COMMAND Format Mode Function set zesr domain global config This deletes control domainId delete VLAN in ZESR control vlan domain lt vlanname gt Result This deletes control VLAN in ZESR domain To delete protect VLAN in ZESR domain use command set zesr domain lt domainlild gt delete protect vlan vlanlist in global configuration mode This is shown in Table 360 Confidential and Proprietary Information of ZTE CORPORATION 213 214 10 11 12 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 360 SET ZESR DOMAIN DELETE VLAN COMMAND Format Mode Function set zesr domain global config This deletes protect domainId delete VLAN in ZESR protect_vian domain lt vianlist gt Result This deletes protect VLAN in ZESR domain To enable disable ZESR function in ZESR domain use command set zesr domain domainId enable disable in global configuration mode This is shown in Table 361 TABLE 361 SET ZESR DOMAIN COMMAND Format Mode Function set zesr domain global config This enable disable domainId ZESR function in enable disable ZESR domain Result This enable disable ZESR function in ZESR domain Note Enable disable ZESR function i
187. e eee ey 192 1 1 1 24 192 1 1 2 24 192 1 2 0 24 Remote host is located in the network segment 192 1 2 0 24 which is not the same as the switch This is shown in Figure 29 Confidential and Proprietary Information of ZTE CORPORATION 153 154 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH To enable the communication between switch and host on the network segment 192 1 2 0 24 configure the following static route zte cfg config router zte Go routeri tiproute T92 E 2 0724 192 1 L 2 Use command show iproute to view the direct routes and static routes on the switch Command result displays destination network segment next hop address route metric and egress interface of the static route The following shows the result zte cig rou ter irshow iproute ype IpAddress Mask Gateway Metric IPport direct 192 i as 0 VES 5E ZS ce Be oe 0 192 Ig Iy 1 0 0 Sw dip ile E 0 2O DS Za 0 ROR ee ue 2 0 0 dion Ia 2 Use command clear iproute to delete one or more static routes Configuring ARP Table Entry This topic describes the configuration of ARP table entry For the configuration of ARP table entry perform the following steps 1 To add a static ARP table entry use command arp add A B C D gt xx Xx XX XX XX Xx 0 63 vlanname in router config mode This is shown in Table 247 TABLE 247 ARP ADD COMMAND Format Mode Function arp add A B ro
188. e external user connection and transceivers packets The interface module amp switching module are interlinked by standard interface Power module adopts the 220 VAC or 48 VDC for power supply to offer required power supply for other parts of the system FIGURE 1 ZXR10 2920 2928 2952FI WORKING PRINCIPLE Switching module vd Interface module Control module ZXR10 2920 2928 2952 uses the 19 inch su brack that is in compliance with the international standard Sub rack can be used as standalone equipment or installed in a standard cabinet Hardware Structure ZXR10 2920 2928 2952 adopts the box structure which is 1U high It employs independent power supply and natural dissipation method It has vents on the left and right sides of the box The box is composed of a bottom case and a shell It features light weight and simple structure It allows an easy installation and un installation 10 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 3 Structure and Principle On the front panel of ZXR10 2920 2928 2952 there are power indicators RUN indicators fixed Ethernet electrical interfaces Ethernet optical interfaces and one serial configuration port The AC or DC power socket and power switch are located on the rear panel Major hardware of the ZXR10 2920 2928 2952 is the Ethernet switching main board which is indispensable in any type of configura
189. e of configuration data between the Radius server and Radius client RADIUS adopts Client Server mode Client runs on NAS Itis responsible for sending subscriber information to specified Radius server and carrying out operations according to the result returned by the server Radius Authentication Server is responsible for receiving subscriber connection request verifying the subscriber identity and returning the configuration information required by the customer A Radius Authentication Server can serve as a RADIUS customer proxy to connect to another Radius Authentication Server Radius Accounting Server is responsible for receiving the subscriber billing start request and subscriber billing stop request and completing the billing function NAS communicates with Radius Server through RADIUS packets Attributes in RADIUS packets are used to transfer detailed authentication authorization and billing information Attributes used by this switch are primarily standard attributes defined in rfc2865 rfc2866 and rfc2869 EAP protocol is used between switch and subscriber Three types of identity authentication methods are provided between the RADIUS servers PAP CHAP and EAP Any of the methods can be used according to different service operation requirements PAP is a simple plain text authentication mode NAS requires Subscriber to provide username and password and subscriber returns subscriber information in the form of plain text
190. e protection tube should not entangle with one another They should be bent into a round shape at the bending position if any s Labels at two ends of fiber should be clear and legible Meanings of labels should clearly reflect corresponding 28 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 4 Installation and Debugging numbers and relationship between cabinets and between rows Labels Pattern and meanings of the labels attached to the connector Label attached to the connector is called transverse English label on panels and connectors Structure and dimensions of the label is shown in FIGURE 20 FIGURE 20 TRANSVERSE ENGLISH LABEL ON PANELS AND CONNECTORS LUE EE RJ45 Port A 3m WE a TIC 10 100Base T 1 These contents are described in the following section Confidential and Proprietary Information of ZTE CORPORATION 29 30 Label Features ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH a RJ45 Cable code Port A End A of the cable connector corresponding to End B or another end m 5m Length of the finished cable It refers to the straight line length of the cable from the connector at one end to the connector at the other end m TIC 10 100Base T 1 Connection position the first 10 100Base T network port of the TIC board Pattern and meanings of the label attached to the cable Label attached to t
191. e static binding MAC address and so on Example This example describes that switch A and switch B are connected through aggregation port binding the port 15 and port 16 Port 1 of switch A and port 2 of switch B belong to VLAN2 Port 3 of switch A and port 4 of switch B belong to VLAN2 Members of same VLAN can communicate with each other This is shown in Figure 25 FIGURE 25 LACP CONFIGURATION Switch A gegsggguBSg S ty UR ggg Yt p16 pl p3 p2 p4 zrtes ero uwesc Lace siaaloile zte c g tset lacp aggregator 3 add pori 5 16 zte cio set lacp aggregator gt mode dynamic zte cfg set vlan 2 add trunk 3 tag zte cig set vlan 2 add port l untag zte cfo set vlan gt o add irunk 3 Lag zte Cig fset vlan add port gt untag zte Cro set port l pvid 2 zee Chg tset pore Ss ove ss ZEe Crg tset vlan 2 enable 90 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Drawback of I GMP snooping Purpose Steps Chapter 7 Service Configuration Configuration of switch B zte cfg set lacp enable mace ice ccm ccc port IS l6 te eroa eset Maco aggregator 3 mode dynamic N N te cfg set vlan add trunk ta te cfg set vlan add port 2 untag N te N zte cfg set vlan add port 4 untag z
192. eee eren nnn 52 Confidential and Proprietary Information of ZTE CORPORATION ZTEDR ZXR10 2920 2928 2952 V1 00 Access Switch User Manual Volume I 314 Table 30 Saveconfig COMMANGA cccccceseeeeeeeeeeuseeeeeeeeeneees 55 Table 31 Show Version Command Window 57 Table 32 Show Version Command Window 58 Table 33 Remove Command eeeeeeeeeeree eren 58 Table 34 Set Port Command eeeeeeeeeee eere 68 Table 35 Auto Sensing Command ccccceeeeeeeeeeeeeeeeeeeeeeeas 68 Table 36 Work Mode Command eese 68 Table 37 Duplex Command eee ener 69 Table 38 Speed Command eee emen nnns 69 Table 39 Set Port speed Commands eem 69 Table 40 Port queue schedule Commands 70 Table 41 the priority of the source MAC address On Command 70 Table 42 Queue Schedule Command eene 70 Table 43 Default Priority Command een nnn 70 Table 44 Set Port Security Command esee 70 Table 45 Multicast Filter Command e eese 71 Table 46 Rate Advertisement Command 71 Table 47 Mac Address Command e eee 71 Table 48 Protocol Vlan Command seen 72 Table 49 Port jumbo Command eeeeennn nnn nnn 72 Table 50 Create Port C
193. eeeeeeeenes 90 Figure 26 Network Topology eeennnnn nnn 99 Figure 27 MSTP Topological Structure eeeeesee 110 Figure 28 PLVAN Configuration Example sese 148 Figure 29 Static ROUTE isepe sec cas senate sesso nnii oenanconssecsees 153 Figure 30 Using Pap Mode For Identity Authentication 161 Figure 31 Using Chap Mode For Identity Authentication 162 Confidential and Proprietary Information of ZTE CORPORATION 310 ZXR10 2920 2928 2952 V1 00 Access Switch User Manual Volume I ZTE Figure 32 Using Eap md5 Mode For Identity Authentication 162 Figure 33 QinQ Networking eee nnn mnn rn 178 Figure 34 Typical Network Of DHCP enne 195 Figure 35 Typical Network Of Vbas c enn nnne 205 Figure 36 Network Of ZESR eene nnn nnn 211 Figure 37 SSH Configuration ssassssssssssssnssnnssrsnnnnsnnsanna 223 Figure 38 Setting IP Address And Port Number Of SSH Server cen eRate 224 Figure 39 Setting SSH Version Number 225 Figure 40 Putty Security Alert eeeeee esee 225 Figure 41 Login Result sssseseeeeeennn mmn nnn 226 Figure 42 Cluster Management Network esee 242 Figure 43 Switch Role Changeover Rule 243 Figure 44 Web User Login eee eee eee 263 Figure
194. ence Class First In and First Out Field Programmable Gate Array Finite State Machine File Transfer Protocol Gigabit Interface Converter General Routing Encapsulation Internet Control Message Protocol Internet Engineering Task Force Internet Group Management Protocol Interior Gateway Protocol Internet Protocol International Organization for Standardization Internet Service Provider Local Area Network Link Access Procedure Balanced Link Control Protocol Label Distribution Protocol Logical Link Control Link State Advertisement Link State PDU Label Switch Router Media Access Control Message Digest 5 MULTI_EXIT_DISC Management Information Base Multi Protocol Label Switching Maximum Transmission Unit Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Abbreviation NAT NBMA NCP NIC NLRI NMS NSAP NSP NTP NVT OAM OI D OSI OSPF PAP PAT PCB PCM PDU POS PPP PSNP PRT QOS RARP RADI US RFC RIP RLE RMON ROS RSVP SDH SDLC SMP SMTP Abbreviations Full Name Network Address Translation Non Broadcast Multiple Access Network Control Protocol Network Information Center Network Layer Reachable Information Network Management System Network Service Access Point Network Service Provider Network Time Protocol Network Virtual Terminal Operation And Management Object ID Open Systems Interconnection Open Shortest Path First Password Authentication Protocol Port Address Translation
195. eome a a zte cfg show stp instance 0 RootID Eroni eS Address E OS do don Eig BER 0a HelloTime s ae MaxAge s 3 20 ForwardDelay s 15 Reg RootID Pie 1 OueIne Ae Oo Address EDD doz eS EER Esp Oa RemainHops 2219 BridgeID Priority Ee Address O dao eu do Bue Oa HelloTime s EP MaxAge s 3 20 ForwardDelay s 15 MaxHops 3 20 Liver race Pore ba COST Status Role Bound GuardStatus 2 ME DE Z 2000 91010 Discard Designated MSTP None zte cfg show stp instance 1 ROOCINIDE Priority n Address ST NB eU dOr E EER 0a HelloTime s 2 MaxAge s 3 20 ForwardDelay s 15 RemainHops 2 20 BridgeID Priority 2 0d Address OO don doi CEs Tone 0a HelloTime s 2 12 MaxAge s 3 20 ForwardDelay s 15 MaxHops 3 20 Jl once ee Portid Cost SIE SUIS ROS Guardo orars 2 qz 2 200000 Discard Designated None zicictgyshowestp por The following ports are active Pone IL ae MS ik 2 100 Priority EAS Cost 00019 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I 124 Introduction Description ACL Function ZTEDR The following ports are active Perr dil Peni Ms ial SEDI Iac abore abe DEAS COE ACO CHONG Status Forward Role Designated EdgePort 2 Jt Sredoudbeol GuardType None LinkType TEE PacketType IEEE Erogo 3 2 MSTI 3 01 Priority E COE 2 200000 Status Forward Role Designated EdgePort Disabled GuardType None LinkType PE PacketType IEEE ACL Packet filtering ca
196. ept as expressly provided in any written license between ZTE CORPORATION and its licensee the user of this document shall not acquire any license to the subject matter herein ZTE CORPORATION reserves the right to upgrade or make technical change to this product without further notice Users may visit ZTE technical support website http ensupport zte com cn to inquire related information The ultimate right to interpret this product resides in ZTE CORPORATION Revision History Date Revision No Serial No Reason for Issue 7 11 2007 R1 0 sjzl20071746 First edition ZTE CORPORATION Values Your Comments amp Suggestions Your opinion is of great value and will help us improve the quality of our product documentation and offer better services to our customers Please fax to 86 755 26772236 or mail to Documentation R amp D Department ZTE CORPORATION ZTE Plaza A Wing Keji Road South Hi Tech Industrial Park Shenzhen P R China 518057 Thank you for your cooperation TEMA ZXR10 2920 2928 2952 V1 00 Access Switch User Manual Volume Produce Versi n Document Revision Number Equipment Presentation Introductions Procedures Illustrations Completeness Level of Detail Organization Appearance Good C Fair C Average O Poor C Bad N A o E Accessibility HT E Contents Index Headings Numbering Glossary C Good C Fair Average LI Poor C Bad LI N A intelligibility Language Vocabulary Rea
197. er Manual Volume I ZTEDH broadcast signal sent through the provider s backbone network and servers allowing viewers to select content on demand and take advantage of other interactive TV options IPTV can be used through PC or IP machine box TV Configuring IPTV Global Parameters Purpose This topic describes the configuration of IPTV Steps For the configuration of IPTV perform the following steps 1 To set the least view time use command iptv control log time lt 1 65534 gt in nas config mode This is shown in Table 122 TABLE 122 IPTV CONTROL LOG TIME COMMAND Format Mode Function iptv control log 45 This sets the least view time time lt 1 65534 gt Contig mode Result This sets the least view time 2 To set the max preview counts on global use command iptv control prvcount count in nas config mode This is shown in Table 123 TABLE 123 IPTV CoNTROL PRVCOUNT COUNT COMMAND Format Mode Function nas l iptv control l This sets the max preview counts config prvcount count on global mode Result This sets the max preview counts on global 3 To set the least preview interval of global use command iptv control prvinterval in nas config mode This is shown TABLE 124 IPTV CONTROL PRVINTERVAL COMMAND Format Mode Function nas P iptv control confi This sets the least preview interval prvinterval de of global Result This sets the least preview interval of global 4 To set the
198. er config This enable disable enable disable the layer 3 port Result This enable disable the layer 3 port END OF STEPS IP port on ZXR10 2920 2928 2952 has been configured Note When modifying the configuration of an IP port set the port to disable state first and then modify the configuration The new settings will overwrite the original ones 152 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Example Chapter 7 Service Configuration Use the command clear ipport to clear one or all the parameters of the port Before clearing parameters set the port to disable state first Configure an IP port on the switch Set the IP address of the port to 192 1 1 1 and the mask to 24 digits Bind the port to VLAN 100 The port uses the default address of the switch The detailed configuration is as follows Zee elc ucombsdgr be zc Eo Troue r scr opone reads esc D jin i 1 24 Bes Cre coueeiriy sec ooo I vila Loe zte cfo router tset ipport 1 enable Zee EO TOE eis eb cfg After the configuration is completed use command show ippor to view the IP port configuration Static Route Configuration After an IP port is configured if the remote user to be connected is not in the network segment of the interface use command iproute lt A B C D M gt lt A B C D gt lt A B C D gt lt A B C D gt 1 15 to set a static route to the remote network FiGURE 29 STATIC ROUTE Poe ee
199. es the configuration of terminal record For the configuration of terminal record perform the following steps 1 Click the catalog tree in the left of the system main page Monitoring Terminal Log to open the terminal log information page as shown in Figure 65 Confidential and Proprietary Information of ZTE CORPORATION 281 y ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDR FIGURE 65 TERMINAL LOG INFORMATION la x XO RAO SEW REAA IAD BH HAER gt QAAL QLR mkr Gee GIA 59 ow H dr RAB Hichk D 4 http j 192 168 1 3 index htm UID 800112 sr v es e a ZTEDH ZXR10 5124 FI Configuration gt System ZTEPM ZXR10 5124 FI Port gt Part State gt Port Parameter VLAN vlan Overview 120 zl Refresh gt vlan Configure SI PVLAN Terminal Log gt Pvlan Overview gt Pvlan Configure gt Mirror Refresh Return Y Lacp Lacp Port e THU JUL 01 00 32 30 2004 Port 3 linkup e THU JUL 01 00 32 28 2004 Port 3 linkdown e THU JUL 01 00 00 10 2004 Port 3 linkup g Port Statistics Running Config Maintenance gt Save gt Reboot gt Upload gt User Manager Logout All rights reserved ZTE Corporation ess EE EH Intranet 2 Click Refresh button in the page to update the terminal log information END OF STEPS Result Terminal log information is accessible
200. ess session of the flux monitor use command set bandwidth geport lt portlist gt egress ion rate lt 281 1000000 gt burstsize lt 4 16380 gt off in global configuration mode This is shown in Table 203 TABLE 215 SET QOS POLICER PARAMETERS COMMAND Format Mode Function set bandwidth geport lt portlist gt egress on rate lt 281 1000000 gt burstsize lt 4 16380 gt off This configures the global config geport egress session Result This configures the geport egress session of flux monitor 16 To configure the packet type of geport ingress session of the flux monitor use command set bandwidth geport lt portlist gt packet type unicast nounicast multicast broadcast enable disable in global configuration mode This is shown in Table 203 138 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 17 18 19 Chapter 7 Service Configuration TABLE 216 SET Qos PoLicER PARAMETERS COMMAND Format Mode Function set bandwidth geport lt portlist gt packet type This configures the Asie acket type of nounicast global config p T yp multicast oo broadcast enable disable Result This configures the packet type of geport ingress session of flux monitor Remarking the VLAN is to remark the VLAN attribution of the designated flow To remark the VLAN use command set policy vlan remark in acl 1 349 rule 1 500 lt 1 4094 lt untagged tagged all
201. et The protocol used for the exchange of management information between the switching agent process and the NMS that is SNMP 226 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Purpose Steps Chapter 9 Network Management An NMS collects data by polling the agents that reside in managed devices Agents in managed devices can report errors to NMSs at any time before NMSs poll them These errors are called traps When a trap occurs to a device the NMS can be used to query the device suppose it is reachable and obtain more information All variables in the network are stored in MIB SNMP monitors network device status by querying the related object values in the agent MIB ZXR10 2920 2928 2952 implements the standard MIB defined in rfc1213 rfc1493 rfc2674 and rfc2819 Configuring SNMP This topic describes the configuration of SNMP For the configuration of SNMP perform the following steps ily To create communication name and set access authority use command create community in SNMP config mode This is shown in Table 372 TABLE 372 CREATE COMMUNITY COMMAND Format Mode Function create community SNMP config This creates communication name and set access authority Result This creates communication name and set access authority gt Community string offers a user confirmation mechanism for remote network administrators to configure switches The public indicates that switch only
202. et Syslog module Command sese 187 Table 310 Show Syslog Status Command 187 Table 311 Set Ntp Command een 188 Table 312 Set Ntp Server Command een 188 Table 313 Set Ntp Source Command ccccceesseeeeeeeeeeeeenes 188 Table 314 Show Ntp Command een 189 Table 315 Set Garp Command ennn nnn 190 Table 316 Set Garp Timer Command enn 190 Confidential and Proprietary Information of ZTE CORPORATION 321 ZTEDR ZXR10 2920 2928 2952 V1 00 Access Switch User Manual Volume I 322 Table 317 Show Garp Command een nnn 190 Table 318 Set Gvrp Command eeeeennnn mnn 191 Table 319 Set Gvrp Port Command enn 191 Table 320 Set Gvrp Port Registration Command 191 Table 321 Set Gvrp Trunk Command een 192 Table 322 Set Gvrp Trunk Registration Command 192 Table 323 Show Gvrp Command een 193 Table 324 Set Dhcp Command eem 196 Table 325 Set Dhcp Port Command eene 196 Table 326 Show Dhcp Command eene 196 Table 327 Set Dhcp Snooping Command 197 Table 328 Show Dhcp Snooping Command 197 Table 329 Show Dhcp Binding Port Command 198 Table 330 Clear Dhcp Snp Bind Command 1
203. et command on the host and input the IP address of the switch management Ethernet port as shown in Figure 20 FIGURE 20 RUN TELNET R LN Type the name of a program folder document or Internet resource and Windows will open it for you bit telnet 192 168 3 1 2 Click OK to enter the interface as shown in Figure 21 Confidential and Proprietary Information of ZTE CORPORATION 37 38 Result Overview Features of SNMP ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH FIGURE 21 TELNET LOGIN C WINNT system32 teln Welcome 4 LE Corporation Al rights reserved login 3 Type the correct user name and password at the prompt to enter into switch user mode END OF STEPS Configuring of ZXR10 2920 2928 2952 through Telnet is completed successfully Simple Network Management Protocol SNMP Network Management Protocol SNMP is one of the most popular network protocols An NM server can manage all devices on the network through this protocol SNMP adopts the management based on the server and client Background NM server serves as SNMP server and the foreground network device ZXR10 2920 2928 2952 serves as the SNMP client Foreground and background share one MIB management database and the SNMP is used for communications NMS software supporting the SNMP shall be installed in the background NM server to manage and configure the ZXR10 2920 2928 2952 Confident
204. et up go electrical port has two indicators one is link activation indicator amp the other one is link status indicator If the link activation indicator is flashing it indicates that data sending or receiving is underway a When link status indicator is on it indicates that the LINK is normal Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 3 Structure and Principle Power Supply Module Mode ZXR10 2920 2928 2952 supports two power supply modes m 48V DC power supply m 110V 220V AC power supply When the 48V DC power supply is adopted use 48V DC power cables When the AC power supply is adopted use AC power cables Both of the two modes support a backup power supply of 12v DC power supply FIGURE 8 and FIGURE 9 respectively show rear panel of the switch when the 48V DC power supply and 110V 220V AC power supply are adopted FIGURE 8 ZXR10 2920 2928 2952 BACK PANEL DC POWER M 48VRTN PGND OFF ON E afo FIGURE 9 ZXR10 2920 2928 2952 BACK PANEL AC POWER Ny i d00 240V BO 60Hz i TA 9 100 240V 50 60Hz 2 NS MA Confidential and Proprietary Information of ZTE CORPORATION 17 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH This page is intentionally blank 18 Confidential and Proprietary Information of ZTE CORPORATION Chapter 4 Instal
205. etary Information of ZTE CORPORATION 217 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I 218 Topics Configuring a System Configuring Port and Parameters Configuring Vlan Management Configuring PVLAN Configuring Mirroring Management Configuring LACP Management Configuring Terminal Record Configuring Port Statistics Configuring Saving Configuration Rebooting an Equipment Uploading a File Configuring User Management Confidential and Proprietary Information of ZTE CORPORATION ZTEDR Page No 264 265 270 273 275 278 281 282 283 284 285 286 288 ZTEmA Network Management Users Purpose Steps Chapter 9 Network Management Hemote Access Overview Remote Access is a restrictive mechanism used for network management users to log in through Telnet that is it is used to restrict the access This function is to enhance the security of the network management system After this function is enabled a network management is specified for user to access the switch only from a specified IP address by configuring the related parameters In this case user cannot access the switch from other IP addresses When this function is disabled the network management user can access the switch through Telnet from any IP address Configuring Remote Access This topic describes the configuration of Remote Access For the configuration of Remote Access perform the following steps 1 To enable disab
206. event the subscriber s continuous authentication attempts gt TxPeriod refers to the time after which authentication system will resend EAPOL data packets to client system when it does not receive the response from client system gt Supplicant Timeout and serverTimeout respectively refer to the time during which authentication system shall receive data packet from client system and authentication Server 168 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Purpose Steps Chapter 8 Access Service Max request refers to maximum times of request resending when timer expires before authentication system receives Challenge response from client system 6 To display the 802 1x configuration of the port use command show aaa control port lt portlist gt in nas config mode This is shown in Table 271 TABLE 271 SHOW AAA CoNTROL PoRT COMMAND Format Mode Function show aaa control nas config This displays the port portlist 802 1x configuration of the port Result This displays the 802 1x configuration of the port 7 To display the 802 1x protocol parameters use command show dotlx in nas config mode This is shown in Table 272 TABLE 272 SHOW DOT1X COMMAND Format Mode Function show dot1x nas config This displays the 802 1x protocol parameters Result This displays the 802 1x protocol parameters END OF STEPS Protocol parameters or 802 1x has been co
207. everal minutes To delete a community name use command clear community in SNMP config mode This is shown in Table 380 TABLE 380 CLEAR COMMUNITY COMMAND Format Mode Function clear community SNMP config This deletes a community name Result This deletes a community name To delete a view name use command clear view in SNMP config mode This is shown in Table 381 TABLE 381 CLEAR VIEW COMMAND Format Mode Function clear view SNMP config This deletes a view name Result This deletes a view name To delete a group name use command clear group in SNMP config mode This is shown in Table 382 TABLE 382 CLEAR GROUP COMMAND Format Mode Function clear group SNMP config This deletes a group name Result This deletes a group name To delete a user name use command clear suer in SNMP config mode This is shown in Table 383 TABLE 383 CLEAR SUER COMMAND Format Mode Function clear suer SNMP config This deletes a user name Result This deletes a user name To delete a trap use command clear host in SNMP config mode This is shown in Table 384 TABLE 384 CLEAR HosT COMMAND Format Mode Function clear host SNMP config This deletes a trap 230 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Result Example Chapter 9 Network Management Result This deletes a trap 14 To view SNMP configuration use command show snmp in SNMP config mode This is shown in Table 385 TABLE 38
208. ew user priority to the QoS profiles mapping session use command show qos priority map user priority in global configuration mode This is shown in Table 230 142 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 33 34 Chapter 7 Service Configuration TABLE 230 SHOW Qos DscP COMMAND Format Mode Function show qos global config This view dscp to priority map the Qos profiles user priority mapping session Result This views user priority to the QoS profiles mapping session To view ip priority to the QoS profiles mapping session use command show qos priority map ip priority in global configuration mode This is shown in Table 231 TABLE 231 SHOW QOS QUEUE PROFILE COMMAND Format Mode Function show qos global config This views queue priority map ip schedule profile priority Result This views user priority to the QoS profiles mapping session To view qos queue schedule use command show qos queue schedule wrrO sp wrrl sp wrr2 sp in global configuration mode This is shown in Table 233 TABLE 232 SHOW QOS POLICER COMMAND Format Mode Function show qos queue global config This views qos schedule wrrO sp policer wrri sp wrr2 sp Result This view qos queue schedule To view qos policer use command show qos policer lt 0 255 gt in global configuration mode This is shown in Table 233 TABLE 233 SHOW QOS POLICER COMMAND Format Mode Function show qos policer global
209. f line detection period of the port use command aaa control port lt portlist gt keepalive period lt 1 3600 gt in nas config mode This is shown in Table 264 TABLE 264 AAA CONTROL PORT KEEPALIVE PERIOD Format Mode Function aaa control port nas config This sets the lt portlist gt abnormal off line keepalive period detection period of lt 1 3600 gt the port Result This sets the abnormal off line detection period of the port Note The following are the main features of abnormal off line detection mechanism gt Besides re authentication mechanism NAS module also introduces abnormal off line detection mechanism to judge whether subscriber still keeps the connection Abnormal off line detection mechanism only requires a Confidential and Proprietary Information of ZTE CORPORATION 165 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH few packet interactions to determine whether the subscriber is still on line Abnormal off line detection mechanism is implemented in this way Device takes the initiative to send a detection request periodically to the client EAPOL EAP RepId packet defined in the 802 1x protocol is used as request packet When EAPOL EAP RepId response is received from client it means that subscriber is still on line Otherwise the subscriber is off line 9 To set authentication mode of the port use command aaa control port lt portlist gt protocol pap chap eap in na
210. fServ Code Point DSCP ToS and Precedence a L2 ACL Match source MAC address destination MAC address source VLAN ID L2 Ethernet protocol type and 802 1p priority value Hybrid ACL Match the following items Source IP address destination IP address IP protocol type TCP source port number TCP destination port number UDP source port number UDP destination port number DiffServ Code Point DSCP L2 Ethernet protocol type source MAC address destination MAC address source VLAN ID and 802 1p priority value Global ACL Match the following items gt Physical port number source IP address destination IP address IP protocol type TCP source port number TCP destination port number UDP source port number UDP destination port number DiffServ Code Point DSCP L2 Ethernet protocol type source MAC address destination MAC address source VLAN ID and 802 1p priority value Each ACL has an access list number to identify The access list number is a number The access list number ranges of different types of ACL s are shown in Table 187 Confidential and Proprietary Information of ZTE CORPORATION 125 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I TABLE 187 ACL DESCRIPTION ACL Description Basic ACL Extended ACL L2 ACL Hybrid ACL Global ACL TERY Access List Number The range is from 1 to 99 The range is from 100 to 199 The range is from 200 to 299 The range is from 300 to
211. ff f in global configuration mode This is shown in Table 158 TABLE 158 SET STP HMD5 KEY PORT COMMAND Format Mode Function set stp hmd5 key CI SCO HUAWEI 0 0x00 O Oxff f gt Global config This sets stp hmd5 key Result This sets stp hmd5 key To set the maximum number of hop between any two terminals of MST use command set stp hopmax 1 40 in global configuration mode This is shown in Table 159 TABLE 159 SET STP HOPMAX COMMAND Format Mode Function set stp hopmax lt 1 This sets the maximum Global 40 config number of hop between any two terminal of MST Result This sets the maximum number of hop between any two terminals of MST To set the bridge priority instance 0 15 priority use command set stp 0 61440 in global configuration mode This is shown in Table 160 TABLE 160 SET STP INSTANCE BRIDGE PRIORITY COMMAND Format Mode Function set stp instance lt 0 Global This sets the bridge 15 priority lt 0 config priority 61440 Result This sets the bridge priority To set port cost of the instance use command set stp instance 0 15 port lt portname gt cost lt 1 200000000 gt in global configuration mode This is shown in Table 161 TABLE 161 SET STP INSTANCE PORT COST COMMAND Format Mode Function This sets port cost of the instance set stp instance lt 0 Global 15 port lt portname gt config cost lt 1 200000000 gt Result This sets po
212. figuration mode This is shown in Table 38 TABLE 38 SPEED COMMAND Format Mode Function set lt portlist gt speedadvertise Global ae maxspeed speed10 speed100 speed1000 config EE port Result This sets speed of the port To set the working manner of the port use command set port portlist duplex full half Format Mode Function set port lt portlist gt Global This sets the working manner of duplex config the port full half To set the speed of the port use command set port lt portlist gt speed 10 100 1000 Table 39 Set Port speed Commands Format Mode Function set port lt portlist gt speed 10 100 1000 Global config This sets port s speed Result This sets port s speed To set port lt portlist gt queue schedule use command set port lt portlist gt queue schedule WRRO SP WRR1 SP WRR2 SP Table 40 Set port queue schedule command Confidential and Proprietary Information of ZTE CORPORATION 69 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 40 PORT QUEUE SCHEDULE COMMANDS Format Mode Function set port lt portlist gt queue scedule Global This sets packet type of WRRO SP WRR1 config ingress direction SP WRR2 SP 7 To set the priority of the source MAC address use command set port lt portlist gt sa priority enable disable TABLE 41 THE PRIORITY OF THE SOURCE MAC ADDRESS ON COMMAND Format Mode Function se
213. g untag Result This adds a specified port to the VLAN Confidential and Proprietary Information of ZTE CORPORATION 79 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH 7 To add a specified trunk to the VLAN use command set vlan lt vlanlist gt add trunk lt trunklist gt tag untag in global configuration mode This is shown in Table 70 TABLE 70 SET VLAN ADD TRUNK COMMAND Format Mode Function set vlan vlanlist add trunk lt trunklist gt tag untag Global This adds a specified trunk to the config VLAN Result This adds a specified trunk to the VLAN 8 To delete a specified port to the VLAN use command set vian lt vianlist gt delete port lt portlist gt in global configuration mode This is shown in Table 71 TABLE 71 SET VLAN DELETE PORT COMMAND Format Mode Function set vlan lt vlanlist gt Global This deletes a specified port to the delete port config VLAN lt portlist gt Result This deletes a specified port to the VLAN 9 To delete a specified trunk to the VLAN use command set vlan lt vlanlist gt delete trunk lt trunklist gt in global configuration mode This is shown in Table 72 TABLE 72 SET VLAN DELETE TRUNK COMMAND Format Mode Function set vlan lt vlanlist gt Global This deletes a specified trunk to the delete trunk config VLAN lt trunklist gt Result This deletes a specified trunk to the VLAN 10 To forbid port from VLAN use
214. ge converts to 5 amp obtain the queue to enter according to global UP TC table If port trust UP amp DSCP at the same time the gigabit port will trust DSCP firstly amp the megabit port will trust UP firstly END OF STEPS Basic port parameters are configured Confidential and Proprietary Information of ZTE CORPORATION 73 74 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Displaying Port Information Purpose This topic describes the displaying of port information Steps To view of port information perform the following steps 1 To display the configuration and work state of the port use command show port lt portlist gt in global configuration mode This is shown in Table 54 TABLE 54 SHOW PoRT COMMAND Format Mode Function show port Global This displays the configuration and portlist config work state of the port Result This displays the configuration and work state of the port 2 To displays Vlan information of the port use command show port lt portlist gt vlan in global configuration mode This is shown in Table 55 TABLE 55 SHOW PoRT VLAN COMMAND Format Mode Function show port Global This displays Vlan information of portlist vlan config the port Result This displays Vlan information of the port 3 To display statistics information of the port in unit time use command show port lt portlist gt Statistics lmin unit 5min unit in global configuration
215. global configuration mode This is shown in Table 174 TABLE 174 SET STP PoRT PcHECK COMMAND Format Mode Function set stp port Global This checks STP port lt portlist gt pcheck config protocol type Result This checks STP port protocol type To set BPDU guard use command set stp port lt portlist gt bpdu guard enable disable in global configuration mode This is shown in Table 175 TABLE 175 SET STP PoRT BPDU GUARD COMMAND Format Mode Function set stp port lt portlist gt Global bpdu l This sets BPDU guard config guard enable disable Result This sets BPDU guard To set STP BPDU guard interval use command set stp bpdu_interval lt 10 65535 gt in global configuration mode This is shown in Table 176 TABLE 176 SET STP BPDU INTERVAL COMMAND Format Mode Function set stp l bpdu interval lt 10 Mi epu STP BPDU guard 65535 g Result This sets STP BPDU guard interval To enable disable STP relay use command set stp relay enable disable in global configuration mode This is shown in Table 177 Confidential and Proprietary Information of ZTE CORPORATION 119 120 32 33 34 35 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 177 SET STP RELAY COMMAND Format Mode Function set stp relay Global This enables disables STP enable disable config relay Result This enables disables STP relay To set the MST version use command set stp revision lt 0
216. gured as bidirectional controlled or input controled to meet requirement of different applications If subscriber authentication is not passed this subscriber cannot visit services provided by authentication system Confidential and Proprietary Information of ZTE CORPORATION 159 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Authentication Server Client Server Mode Radius Accounting Server Password Authentication Protocol PAP Controlled port and uncontrolled port in the IEEE 802 1x protocol are logical ports There are no such physical ports on equipment IEEE 802 1x protocol sets up a local authentication for each subscriber that other subscribers cannot use Thus there will not be such a problem that the port is used by other subscribers after port is enabled Authentication server is generally a RADIUS server This server can store a lot of subscriber information such as VLAN that the subscriber belongs to CAR parameters priority subscriber access control list and so on After authentication of a subscriber is passed authentication server will pass information of this subscriber to authentication system which will create a dynamic access control list Subsequent flow of subscriber will be monitored by above parameters Authentication system communicates with RADIUS server through RADIUS protocol RADIUS is a protocol standard used for the authentication authorization and exchang
217. he cable is called roll type self cover laser print label model II Structure and dimensions of the label is shown in FIGURE 21 FIGURE 21 ROLL TYPE SELF COVER LASER PRINT LABEL MODEL Il F J Transparent area Transparent area N Y Printabl M HD182 Port B 1 30m rintable area C 1 L5 DTI1 D25 32 ro 2000 Contents of the label in the above figure have same meanings as those in FIGURE 20 These two types of labels are used in different places Transverse English label on panels and connectors is only applicable to the connectors where the attachment area is larger than the label area or to panels Roll up self mulching laser printing label is rolled around the cable with its own scotch adhesive tapes It is used when horizontal English label cannot be used because cable connector is small Before the cabinet equipment is delivered all the internal interconnected cables shall be attached with flag type direction labels This label attached to the cable is called Transverse English Type I Label Structure and dimensions of label is shown in Figure 15 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 4 Installation and Debugging FIGURE 15 TRANSVERSE ENGLISH TYPE I LABEL L i L E Meaning of the content and the structure of a fiber engineering label is shown in Figure 16 FIGURE 16 PATTERN AND MEANINGS OF ENGINEERING LABEL ON OPTICAL FIBER Opt
218. he half frequency with RUN shows it is the standby equipment 48 interface indicators correspond to the 24 10 100 Base T interfaces Every interface has two indicators one is semiduplex fullduplex indicator the other is link activation indicator gt Semiduplex fullduplex indicator is on in the condition of fullduplex is off in the condition of semiduplex amp is flashing in the condition of collision gt Link activation indicator is flashing when the link is activated 4 interface indicators correspond to the 2 10 100 1000 Base T interfaces Every interface has two indicators When one of the indicators is on it indicates that the LINK is normal When the other indicator is on it indicates that the LINK is normal If the indicator is flashing it indicates that data sending or receiving is underway ZXR10 2952 Front panel Front panel of the ZXR10 2952 is shown in Figure 4 FIGURE 4 FRONT PANEL Or ZXR102952 Ethernet switching main board of ZXR10 2952 is KEBF Interfaces ZXR10 2952 provides the following types of access ports Forty eight fixed 10 100BASE T Ethernet ports These ports support full duplex half duplex 10 100M amp MDI MDIX self adaption amp VCT self check a Two fixed 10 100 1000BASE T interface Confidential and Proprietary Information of ZTE CORPORATION 13 14 Indicators Sub board ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH a Two fixed
219. he key to PuTTY s cache and carry on connecting If you want to carry on connecting just once without adding the key to the cache hit Mo If you do not trust this host hit Cancel to abandon the w ome 4 SSH login result is shown in Figure 41 Confidential and Proprietary Information of ZTE CORPORATION 225 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Result Managed Devices Network Management Station NMS SNMP FIGURE 41 LOGIN RESULT of 192 1 1 1 PuTTY E ml x login as zte al Welcome ALE Corporation All rights reservered zteligz 1 1 1 s password zte en Dpassword ete cto Sl END OF STEPS SSH login has started successfully SNMP Overview SNMP is the most popular network management protocol currently It involves a series of protocol suite and specifications a MIB a SMI SNMP They collect network management information from network devices SNMP also enables devices to report problems and errors to network management stations Any network administrator can use SNMP to manage switches SNMP adopts the Management process Agent process model to monitor and control all types of managed network devices The SNMP network management needs three key elements Managed devices can communicate over the Internet Each device contains an agent The network management process shall be able to communicate over the Intern
220. heck whether the config txt file exists and when file exists switch will use it to recover configurations Config txt file is used for version update When the span between new version and old one is big using running cfg file of the primary version may cause mistakes after version update Consider the following recommendations Create config txt file before version update Use the newly downloaded version to reboot switch after deleting running cfg file of old version Important Switch will use config txt file to recover configurations When command format is not modified or deleted in new version configurations will be recovered successfully If configurations is not recovered recover them manually Use command saveconfig to create a running cfg file for new version after update is finished 2 The command readconfig is to read the configuration commands in the config txt in the FLASH and sends them to the switch for resolution and execution Result Contents of the config txt can be edited manually as needed and then downloaded to the switch by using the command tftp 54 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Purpose Prerequisites Steps Chapter 6 System Management Example This command downloads the file to the switch as shown below in the example Vance VGN E Che Wik es Hp eimicio Ibo ap 1 68 iT 102 download Config e END OF STEPS Imp
221. hen master switch detects that loop is down it turns its secondary port into forwarding state which ensures loop to be normal Figure 36 shows the typical network of ZESR S1 is master and other switches are transits Master has a primary port and a secondary port in ring When loop is good secondary port on master is blocked When loop is down master turns on its secondary port 210 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 8 Access Service FiGURE 36 NETWORK Or ZESR Transit Configuring ZESR Purpose Steps This topic describes the configuration of ZESR For the configuration of ZESR perform the following steps 1 To set node equipment mode in ZESR domain use command set zesr domain lt domainid gt mode master transit in global configuration mode This is shown in Table 352 TABLE 352 SET ZESR DOMAIN COMMAND Format Mode Function This sets node equipment mode n ZESR domain set zesr domain lt domainId gt mode master transit global config Result This sets node equipment mode in ZESR domain To set primary port in ZESR domain use command set zesr domain domainId primary port lt portname gt in global configuration mode This is shown in Table 353 TABLE 353 SET ZESR DOMAIN PRIMARY PORT COMMAND Format Mode Function set zesr domain lt domainId gt primary port lt portname gt global config This sets primary port in
222. her there is a self loop by judging whether the packet is received in the interval time Command is used to set the interval time by second 9 To display port loop test configuration and port detection status use command show loopdetect in global config mode This is shown in Table 445 TABLE 445 SHOW LooP DETECT COMMAND Format Mode Function show loopdetect global config This displays port loop test configuration and port detection status Result This displays port loop test configuration and port detection status Note When the port cannot work normally configure show loopdetect to observe whether a port loop exists If no loop is detected and the spanning tree of the port is enabled eliminate fault according to status of spanning status END OF STEPS Single Port loop test has been configured Virtual Circuit Test Virtual circuit test VCT uses time domain reflectometer TDR to diagnose circuit This test enables to diagnose circuit error status such as Open Short Impedance Mismatch and Good termination and to obtain the distance of the error circuit with the fitted empirical formula Use show vct port command on switch to query the VCT result of the specified port For interface modules in extended slots this switch only supports VCT of gigabit electrical interface For other interface modules VCT is not supported Confidential and Proprietary Information of ZTE CORPORATION 297 ZXR10 2920 29
223. ial and Proprietary Information of ZTE CORPORATION ZTEmA Introduction Purpose Steps Chapter 5 Usage and Operation Configuring through WEB Connection Web is a long distance management switchboard and is similar to Telnet Users can access some Web services through a peer to peer arrangement rather than by going to a central server The user should have the access along with password and management password for the switch enable Web function This topic describes the configuration of Web connection For the configuration of Web connection perform the following steps 1 To create user use command create user lt name gt admin guest in global configuration mode This is shown in Table 14 TABLE 14 CREATE USER COMMAND Format Mode Function create user name admin guest config This creates user Result This creates user 2 To configure user password use command set user local name login password string in global configuration mode This is shown in Table 15 TABLE 15 USER PASSWORD COMMAND Format Mode Function set user local name login config password string This configures user password Result This configures user password 3 To configure admin password use command set user local radius name admin password string in global configuration mode This is shown in Table 16 TABLE 16 ADMIN PASSWORD Format Mode Function set user local radius name admin
224. ial and Proprietary Information of ZTE CORPORATION ZTEmR Result Note Purpose Steps Chapter 9 Network Management 3 To add a member based on temporary device ID obtained from collected topology information use command set group add device lt idlist gt in group config mode This is shown in Table 412 TABLE 412 SET GROUP ADD DEVICE COMMAND Mode Function This adds a member based on temporary device ID obtained from collected topology information Format set group add device lt idlist gt group config Result This adds a member based on temporary device ID obtained from collected topology information 4 To delete a device with specified member ID from cluster use command set group delete member lt idlist gt in group config mode This is shown in Table 413 TABLE 413 SET GROUP DELETE MEMBER COMMAND Format Mode Function set group delete group config This deleted a member lt idlist gt device with specified member ID from cluster Result This deletes a device with specified member ID from cluster END OF STEPS Cluster member has been add delet is added to cluster but member ID is not system automatically allocates a unique ID to the When a device specified member Configuring Cluster Parameters This topic describes the configuration of cluster parameters For the configuration of cluster parameters following steps perform the LM To set cluster name use command set
225. ical fible R Optical fible L The side marked with The side marked with L must be filled in R must be filled in Fill in the Serial No ODE Serial No Layer No Row No Column No Engineering Two sides of the engineering label on the optical fiber are Labels marked L and R with the specific meanings given as follows s When label is pasted on fiber at ZXR10 2920 2928 2952 side row and column number of cabinet at side of connected remote optical interface device as well as the layer No of the fiber in the cabinet and the fiber No must be filled in the R area of the label In this case row and column Nos of ZXR10 2920 2928 2952 where the fiber is located as well as the layer No of the fiber and fiber number shall be filled in the L area of the label Confidential and Proprietary Information of ZTE CORPORATION 31 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I Lightning Protection Switch cabling Explanation TERY If the label is attached on the optical interface equipment of the customer contents filled on the label are just contrary to those at the ZXR10 2920 2928 2952 side Cable Lightning Protection Requirements Lightning can be direct lightning strike and induction Damage of direct lightning strike is hard to avoid Following lightning protection requirements are proposed t
226. icates with external routers network management devices backup servers administrative workstations and other devices Confidential and Proprietary Information of ZTE CORPORATION 145 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Isolated port An isolated port has complete separation from other ports within the same PVLAN The isolate port communicates with the promiscuous port only but not with any other isolate port Isolated port forwards traffic to all promiscuous ports only ZXR10 2920 2928 2952 supports 8 PVLANs groups each group having customized isolate ports and at most 8 promiscuous ports Configuring PVLAN Purpose This topic describes the configuration of PVLAN in ZXR10 2920 2928 2952 Steps For the configuration of PVLAN perform the following steps 1 To configure the isolate ports and promiscuous ports of PVLAN to isolate trunk and sharing port trunk use command set pvlan session 1 4 add promiscuous 1 port portid trunk lt trunkid gt isolate port lt portlist gt trunk lt trunklist gt in global configuration mode This is shown in Table 236 TABLE 236 SET PVLAN SESSION COMMAND Format Mode Function set pvlan session lt 1 4 gt add global config This promiscuous configures port portid trunk trunkid isolate ports isolate port portlist trunk and trunklist promiscuous ports of PVLAN Result This configures isolate ports and promiscuous port
227. ick Refresh button in the page to update the port statistics information Select the items in the PortNumber column to get the statistics data on the port END OF STEPS Result This shows statistics data on the port Configuring Information Purpose Steps For the opening of configuration of information following step This topic describes to open the configuration of information perform the 1 Click the catalog tree in the left of the system main page Monitoring gt Running config to open the configuration information page as shown in Figure 67 Confidential and Proprietary Information of ZTE CORPORATION 283 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I Result Purpose Steps FIGURE 67 CONFIGURATION INFORMATION ZTEDH ZTE switch Microsoft Internet Explorer e x RA MHD BS RAW IAM AEH FAE gt OAA Qer uker Qus SS 3u H sue HAHH http 192 168 1 3 index htm UID 800112 sU cp mama mj eea e les A322 Configuration gt System ZTE ZXR10 5124 FI Port Port State gt Port Parameter WYLAN 1 gt vlan Configure Console 3 3 ri vlan Overview 120 Refresh W PVLAN Running Config Information gt Pvlan Overview gt Pvlan Configure Software version vl l temp gt Mirror Switch s Mac Address 00 00 00 51 24 02 S1 Lacp gt Lacp Port i L Lacp State syslocation No 68_Zijinghua
228. iew This chapter introduces the safety instructions and sign descriptions This chapter includes the following topics TABLE 4 TOPICS IF CHAPTER 1 Topics Page No Safety Instructions Safety Instructions This equipment can only be installed operated and maintained by professional user Please observe local safety specifications and relevant operating procedures in equipment installation operation and maintenance Otherwise personal injury or equipment damage may occur Safety precautions introduced in this manual are only supplementary to local safety codes ZTE shall not bear any liabilities incurred by violation of the universal safety operation requirements or violation of the safety standards for designing manufacturing and using the equipment Confidential and Proprietary Information of ZTE CORPORATION 1 This page is intentionally blank 2 Confidential and Proprietary Information of ZTE CORPORATION 3 Introduction Contents background Chapter 2 System Overview Overview This chapter introduces the product overview functions and technical features This chapter includes the following topics TABLE 5 TOPICS IN CHAPTER 2 Topics Page No Product Overview Switching Capability Reliability and characteristics Security Controls QoS Guarantee Management Functions O0 UU wu d HR WwW Technical Features and Parameters Product Overview ZXR10 2920 2928 2952 series products a
229. ile is of binary and has poor compatibility It is advised to test configuration recovery first then check whether the configuration recovery needs to use config txt file When the old version has big span with the new one use config txt file to recover configuration After upadate check the recovered configurations are of same primary configurations or not If they are not the same configure according to facts and avoid the mistakes caused by update Upgrading Version at Abnormality This topic describes the procedure of software version upgrade for ZXR10 2920 2928 2952 if it fails to start Connect Console port of the switch to the serial port of the background host using the self contained configuration cable Connect an Ethernet port of the switch to the network port of the background host using a network cable Check whether the connections are correct For software version upgrade perform the following steps 1 Restart the switch At the HyperTerminal press any key as prompted to enter the VxWorks Boot state Confidential and Proprietary Information of ZTE CORPORATION 59 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Welcome to use ZTE eCarrier Copy rmene 620 29 04 7 Ot GC ATER O T2 E CS System Booting GUESS IIS INS Version VxWorksb5 b il Bor wes tom ln a e Creation date Aug 1 2006 09 40 27 Press any Key to stop auto boot 7 ZO BOc tll 2 Enter c in the ZxR10 Bo
230. im alee 1 ZXR1O config nas iptv channel 1 mvlan 100 PRR eomm ine Stas sory bre c TE vm eer vl HII SMELL mes q Creare otv oeue ucule i ewe cai _il il pa ZxXRIO config nas iptv cac rule ous CD iio DRO CO mike ies koi Cale rile new Lime 170 ZXRIO config nas Ptv Caic ruile DEevinterval 20 pug AZAXERIO contrigcnas t iapty cac rule right preview 1 User which connects to port gei 1 1 wants to view all multicast groups in Vlan 100 Configuration is shown below ZB UGG d ees iptv conirol enable A ERROR contig Siler s Create aou Ww hannel erus 565 Zoe ome c is IPE Channel 250 mylan NOU ANI erougs abor dele us eacanc apu cecus JL Toxousie Oed doy di ZRiIv conmiuG nas tot cac rule mno ccm 256 Confidential and Proprietary Information of ZTE CORPORATION 107 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Port gei_1 1 only permits receiving the requesting packets of multicast group 224 1 1 i Vian ID of this multicast group is 100 Configuration is shown below AARTO Con IO nas Ipee come Gol emeltte ZXREO COMENTG Mas 4 creata iptv channel special address 22 ales al sa IL ZRTO Con o iers aloe aa iL I mage eor 1010 PALO ECM LG mes 4 Cicer woo cuve T jooime cei db dE AARTO comiuycmqs ceupuUVedco rud qn accu ys 1 Maintenance and Diagnosis of IPTV Purpose This topic describes the configuration of maintenance and diagnosis of IPTV Steps For the configur
231. in Figure 55 FIGURE 55 BATCH VLAN FA ZTE switch Microsoft Internet explorer EMEN 2131 THO MHD SEM A IAD REH Ea HAE gt O2 4 Quer mar Que JD ad AFAA Hihik D http 192 168 1 3 index htm UID 800112 aE era ee a LTEDH ZXR10 5124 FI Configuration System ZTEPM ZXR105124 FI W Port gt Port State gt Port Parameter 3 Xp S3 VLAN gt Vian Overview 120 Refresh gt vlan Configure W PVLAN Vlan Configuration gt Mirror Lacp Selectitems M Admin I Port T Trunk Monitoring gt Terminal Log Vlanid 12 5 gt Port Statistics b Running Config AdminStatus Enable Maintenance uu gt Save Apply Return gt Reboot 3 2m z gt Upload gt User Manager Logout All rights reserved ZTE Corporation SESI EE EH Intranet 8 Select and configure some attributes of the Vlan in the page then click Apply button to submit Result Batch Vlan is configured END OF STEPS Result VLAN has been configured Configuring PVLAN Purpose This topic describes the configuration of PVLAN Steps Forthe configuration PVLAN perform the following steps 1 Click the catalog tree in the left of the system main page Configuration gt PVLAN gt PVLAN Overview to open PVLAN information page as shown in Figure 56 Confidential and Proprietary Information of ZTE CORPORATION 273 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I 274 FIGUR
232. ines cameo ada Aaa Cg 131 Contig ring ACL to a Physical POFt vitae grit diGess va PER S Deus dx 131 Quality OF Service OOS ie a7 as sarang nera axo txe ts NU Exi bx S dA MX 132 COMMUTING QOS aaa a A a N A A NA 133 Private Virtual LAN OVerViGWi sexretens yia vi riirii tae dd an 145 ConrgurinddViAN ss oiescsketin ss nina a E cU bod qus 146 802 1x Transparent TrahnstisslODis sies oce voir veio Ort egt 149 Configuring 802 1x Transparent Transmission 150 Layer 3 CONnNGUlallO Mcp uc icoreur Debe sa c nbEA Reales Reds 150 COMM GUC IP POC siste ualde taa usas Ure tddu Castel qe daga cas 151 Static ROUCE COMMGOUPA LOM susto NM Vtt RV RUIN ERA ERES 153 Conqguring ARP Table ENEY aii rt erepto te oer ERU Era eiai 154 Chapter 8 ones REN E Vr RD RR NE E DN RT RE KE RENT T 159 Access Servi Os eve uc ioo DU sus eves va aeo E coE or ER NUN UMP CREER EVE 159 CONNU SOF DOnna rp Pda di pep 163 Configuring Protocol Parameters of 802 1x enne 166 Connigunng RADIUS ovdi etu E C UN UI 169 OINO OVE EW rtm TP DOS 77 CONMOGUIING OIMO eraa a a a aa 178 SONO OVEIVI EW riie neea A AAAA AO AAE qe EATA 180 COMHJUrNNO SOMO renanira r a aeaee 181 SYSIOG OVOrVIGW orreri ra a EA TE A i 185 COMMOUMM SY SIO serias ia a EA A 186 Conatus E oan raa EA 187 GARP GVRP OV CIVIEW cecidi dicta debeat db aude t wd Ove aio 189 COMTGUTINGNGARP oves rper e dere aq e rate y ora Pl ICD Abo 190 CONGO UMN GVRP osssetusaxxetessaxdetums d DUE E vIQEIDSS UE ad
233. ing range is four hops By default time interval for collecting topology information is O minute that is information is not collected periodically topology When switch is configured to be a command switch VLAN for collecting topology information serves as management VLAN of command switch In this case it is not allowed to change specified VLAN for collecting topology information When network delay is high hop delay and port delay of topology forwarding shall be modified to adapt current network status To collect network topology information within a larger range administrator can increase hop counts To manually start collecting topology information use This is shown in Table 403 TABLE 403 ZTP START COMMAND Format Mode Function ztp start group config This starts collecting topology information manually Confidential and Proprietary Information of ZTE CORPORATION 247 248 Result ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Result This starts collecting topology information manually Note To know network topology information at any time user can manually start topology information collection procedure without depending on automatic topology information collection To display ZTP configuration use command show ztp in group config mode This is shown in Table 404 TABLE 404 SHOW START COMMAND Format Mode Function show ztp group config This displays ZTP configu
234. inux virtual bridge receiving unlawful protocol message will bring to net shocking or topology changing abnormally The port will be closed after using the protection After a while to check the net is normal or not If it is normal it will recovery to original state Root protection is function is a particular protection for root switch In the network that needs to appoint switch as root Confidential and Proprietary Information of ZTE CORPORATION 111 112 Loop protection Purpose Steps ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH switch if there exists vicious protocol attack or Linux virtual bridge it will bring to the change of the root amp net abnormal After using the root protection of the port if the port receives the protocolinfo prior to root switch it will transfer the port to blocking state no longer transmit message amp discard the received protocol message to protect the status of the root switch Loop protection function is a particular protection for loop net topology In the network that exists ring redundant topology will be in the state of backup amp in the state of blocking after the port is steady If there is no need to transfer to transmission state it is possible to set port to loop protect Once the port want to transform it will inspire loop protection amp set the port to blocking state When configuring one port you can configure only one of the three pr
235. ion 150 Layer 3 Configuration 150 Configuring IP Port 151 Static Route Configuration 153 Configuring ARP Table Entry 154 Access Service 159 Configuring 802 1x 163 Configuring Protocol Parameters of 802 1x 166 Configuring RADIUS 169 QinQ Overview 177 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Topics Configuring QinQ SQinQ Overview Configuring SQinQ Syslog Overview Configuring Syslog Configuring NTP GARP GVRP Overview Configuring GARP Configuring GVRP DHCP Snooping Option82 Configuring Global DHCP Configuring DHCP Snooping Configuring IP Source Guard Configuring DHCP Option82 VBAS Overview Configuring VBAS sFlow Monitoring Overview Configuring sFlow ZESR Overview Configuring ZESR Chapter 7 Service Configuration Confidential and Proprietary Information of ZTE CORPORATION 67 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Introduction Purpose Steps Configuring Basic Port Parameters On the ZXR10 2920 2928 2952 configuration of the following port parameters auto negotiation duplex mode rate flow control port priority MAC address number restriction and so on This topic describes the configuration of basic port parameters For basic port parameters perform the following steps 1 To clear port name statistics data use clear port lt portlist gt name statistics description TABLE 34 SET PORT COMMAND Format Mode Function clear po
236. ion has been displayed This example describes the initial configuration of switches is default configuration Set the VLAN where public network IP address of command switch in cluster is located to 2525 IP address to 100 1 1 10 24 gateway address to 100 1 1 1 cluster management VLAN to 4000 private address pool to 192 168 1 0 24 and IP address of TFTP Server of whole cluster to 110 1 1 2 This is shown in Figure 42 Detail configuration is as follows Configure public network IP address of command switch and gateway WYXX cfg set vlan 2525 enable WY XX Chg feet vlan 2525 add port Ilo tag WOO OUT C OIN TQUE OUEST WCG router o e pore 25 apaddress s i lie 10 24 MOOG Cre router reet ipEeort 22 vlan 2225 WYXX cfg router set ipport 25 enable Wb ctg eene Oe sab oreo ex O OF OF 0 0 100 lio Le 1 256 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 9 Network Management Create a cluster on layer 3 port 1 of command switch and VLAN 1 default VLAN Confidential and Proprietary Information of ZTE CORPORATION 257 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH WYXX cfg config group WY XX Cig group ser Group commander Vipoort h ire Poora IGS Ay 1 24 Cmelme WOO Os oup Zip Stare erem WYXX cfg group show ztp device ere Cx Tees om wlbsam 8 Il Last collection time 1232 ms Id MacAddress Hop ROE SPARS oue OO do dQ igo Chel
237. ion mode This is shown in Table 89 TABLE 89 SET LACP AGGREGATOR COMMAND Format Mode Function set lacp aggregator Global This adds a specified port to the trunkid add config aggregation group port lt portlist gt Confidential and Proprietary Information of ZTE CORPORATION 87 88 3 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Result This adds a specified port to the aggregation group To delete a specified port to the aggregation group use command set lacp aggregator lt trunkid gt delete port lt portlist gt in global configuration mode This is shown in Table 90 TABLE 90 SET LACP AGGREGATOR DELETE COMMAND Format Mode Function set lacp pc ed Global This deletes a specified port to the delete port config aggregation group lt portlist gt Result This deletes a specified port to the aggregation group To set aggregation mode of the aggregation group use command set lacp aggregator lt trunkid gt mode dynamic static mixed in global configuration mode This is shown in Table 91 TABLE 91 SET LACP AGGREGATOR MODE COMMAND Format Mode Function set lacp aggregator Global This sets aggregation lt trunkid gt mode confi mode of the aggregation dynamic static mixed g group Result This sets aggregation mode of the aggregation group To set the mode used by the port to participate in the aggregation use command set lacp port lt portlist gt mode active pa
238. ion mode This is shown in Table 190 TABLE 190 CONFIG ACL EXTEND COMMAND Format Mode Function config acl extend number lt acl global config number gt This configures extended ACL Result This configures extended ACL To configure the rules of ACL use command rule lt rule_id gt permit deny lt ip protocol gt ip tcp udp icmp arp lt source ipaddr wildcard gt any lt source port sourceport mask gt lt destination ipaddr wildcard gt any lt dest port destport mask gt established esblishing lt icmp type icmp code gt dscp fragment in ACL config mode This is shown in Table 191 TABLE 191 RULE COMMAND Format Mode Function rule lt rule_id gt permit deny lt ip protocol gt ip tcp udp icmp arp lt source ipaddr wildcard gt any source port sourceport mask 4 destination ipaddr wildcard gt any lt dest port destport mask established esblishing lt icmp type icmp code dscp fragment This configures AGE cong ACL rules Result This configures ACL rules END OF STEPS Basic ACL has been configured Confidential and Proprietary Information of ZTE CORPORATION 127 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Purpose Steps Steps Purpose Steps Configuring L2 ACL This topic describes the configuration of L2 ACL For the configuration of L2 ACL perform the following ste
239. ion terminal 4 Check whether the console port of switch is normal END OF STEPS This checks console port in detail 298 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Purpose Prerequisites Steps Result Purpose Prerequisite Steps Result Chapter 10 Maintenance Troubleshooting through Telnet This section describes the troubleshooting through telnet To troubleshoot through telnet meet the following requirements Check PVID of the port is configured incorrectly m Check port is disabled a Check VLAN bound with the IP port is disabled a Check no valid IP address subnet mask and default gateway is configured for the switch Check IP address of the switch conflicts with the IP address of another device in the network For troubleshooting through telnet perform the following steps 1 Modify the PVID of the port to be consistent with the related VLAN ID Enable the port Enable the VLAN bound with the IP port 4 Configure a valid IP address subnet mask and default gateway for the switch 5 Modify the IP address of the switch or that of the other device to eliminate the IP address conflict END OF STEPS This troubleshoots through Telnet connection Troubleshooting a Telnet connection with switch This topic describes the remote terminal can access but cannot log in to the switch through Telnet and system prompts the user that no password is configu
240. ion82 Purpose Steps Chapter 8 Access Service FIGURE 34 TYPICAL NETWORK Or DHCP Switch A Switch B DHCP SERVER Set attribute of the port on switch connecting to users directly as Client Set attribute of the port up connecting to server as Server and that of port cascade connecting as Cascade Enable DHCP Snooping function and DHCP response packets coming into switch from the port except Server port will be filtered This method solves the problem caused by private DHCP server Switch generates and maintains an information table of users who succeed to get host configuration which make it effective to distinguish and prevent the illegal users of IP or MAC address deceiving from accessing Enable IP source guard function on the base of DHCP Snooping It can stop IP data flow with illegal address and it also can prevent flux attack caused by embezzling neighbor IP address Enable DHCP Option82 function and request DHCP packets sent by users will add Option82 according to user configurations It makes it possible for hosts to interact with more special information with DHCP Server Using Circuit ID sub option switch provides user access link information which is good for server to distribute and manage address Server limits the amount of user IP address that distributed to each Remote ID labeled switch which prevent IP address from exhausting With incident user ID option of Option82 DHCP server does not need to use the u
241. is shown in Table 108 TABLE 108 SET IGMP SNOOPING VLAN DELETE GROUP PORT COMMAND Format Mode Function set igmp snooping vlan lt 1 4094 gt delete group Global A B C D port config portlist trunk trunklist2 This unbinds static multicast group from ports Result This unbinds static multicast group from ports To add static multicast router port to a Vlan use command set igmp snooping vlan lt 1 4094 gt add smr port lt portlist gt trunk lt trunklist gt in global configuration mode This is shown in Table 109 TABLE 109 SET IGMP SNOOPING VLAN ADD SMR PORT COMMAND Format Mode Function set igmp snooping vian lt 1 4094 gt add smr port Global This adds static multicast router E config port to a Vlan lt portlist gt trunk lt trunklist gt Result This adds static multicast router port to a Vlan To unbind static multicast group from ports use command set igmp snooping vian lt 1 4094 gt delete Confidential and Proprietary Information of ZTE CORPORATION 95 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH 17 18 group lt A B C D gt port portlist trunk lt trunklist gt in global configuration mode This is shown in Table 108 TABLE 110 SET IGMP SNOOPING VLAN DELETE GROUP PORT COMMAND Format Mode Function set igmp snooping vlan lt 1 4094 gt delete group lt A B C D port lt portlist gt trunk lt trunklist gt
242. itches that do not support cluster management are called independent switches Cluster management networking is shown in Figure 42 Confidential and Proprietary Information of ZTE CORPORATION 241 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH FIGURE 42 CLUSTER MANAGEMENT NETWORK TFTP Server NM console 110 1 1 2 110 1 1 1 Public network 100 1 1 10 ggugoggUgQqut Cluster internal address pool 192 168 1 0 24 Command Cluster internal switch network gugguuguUUSDt guUGOUBOUgUg gg t Member Member switch switch gggOBOBgBOSgS t Member switch SREGERRRRES a Member UBUBHUSUEGO ry switch Member switch ugggugUgUgguv guuggUSSgUoUt 7 Outside the cluster Independent switch Candidate switch Changeover rule of four roles of switches within a cluster is shown in 242 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Purpose Prerequisite Steps Chapter 9 Network Management FIGURE 43 SWITCH ROLE CHANGEOVER RULE Member switch Delete from the cluster Add to the cluster Specified as a candidate switch Candidate switch gt I S switch Specified as an Specified as a command switch independent switch Specified as a candidate switch Specified as a command switch without member Specified as an independent switch without member
243. ith the function of SQinQ to a Trunk in which ports must belong to same SQinQ Session 180 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Service Provider Vlan Configuration Purpose Steps Chapter 8 Access Service It is necessary to operate Service Provider Network after Customer Port configuration Packets can be exchanged successfully Configure all ports in Service Provider Network as Tag Ports and all Customer Ports as Untag Ports All the packets exchanged in Service Provider Network carry two layers of Tag which are Uplink Tag and Customer Tag When packets leaving Service Provider Network there is only one layer of Tag left Customer Tag Configuring SQinQ This topic describes the configuration of SQinQ strategy policy For the configuration of SQinQ perform the following steps 1 To configure SQinQ session use command set sqinq session 1 256 customer vlan lt vlanlist gt uplink vlan lt 1 4094 gt in global configuration mode This is shown in Table 293 TABLE 293 SET SQINQ SESSION COMMAND Format Mode Function set sqing session 1 256 customer vlan vlanlist uplink vlan lt 1 4094 gt global config This configures SQinQ session Result This configures SQinQ session 2 To set Qos remark use command set policy qos remark in sqinq session lt 1 256 gt profile 0 71 up no change enable modify disable modify dscp no change enable modify disable mo
244. ity View Command 228 Table 375 Set Group Command ceeeen nn nnn 228 Table 376 Set User Command eese 228 Table 377 Set EngineID Command eee nnn 229 Table 378 Set Host Command 2 ccccccccc cece cece ee eeeeeeeeeeaeanas 229 Table 379 Set Trap Command cccccceeeseeeeeeeeeeeeeeeeneeggenes 229 Table 380 Clear Community Command eese 230 Table 381 Clear View Command ern 230 Table 382 Clear Group Command eren 230 Table 383 Clear Suer Command eene 230 Table 384 Clear Host Command eene 230 Table 385 Show Snmp Command eren 231 Table 386 Set RMON Command eseeeeeeeeeennn nn 234 Table 387 Set History Command eene 235 Table 388 Set Statistics Command eese 235 Confidential and Proprietary Information of ZTE CORPORATION 323 ZXR10 2920 2928 2952 V1 00 Access Switch User Manual Volume I 324 Table 389 Set Event COMMANG ccc eee eee ee eee Table 390 Set Alarm Command sese Table 391 Show RMON Commands Table 392 Set Zdp Command ccccceeeeeeeeeeeeeeneees Table 393 Set Zdp Port Command ss Table 394 Set Zdp Trunk Command Table 395 Set Zdp Holdtime Command
245. ks between the switches or between the switch and server to increase the bandwidth in multiples and simultaneously As a result it becomes an import technology in broadening link bandwidth and creating link transmission flexibility and redundancy Aggregated link is also called trunk If a port of trunk is blocked or faulty data packets will be distributed to other ports of this trunk for transmission If this port recovers data packets will be re distributed to all the normal ports of this trunk for transmission ZXR10 2920 2928 2952 supports a maximum of 15 aggregation groups In each aggregation group number of links participating in aggregation does not exceed eight Links participating in the aggregation must have same transmission media type and same transmission rate Configuring LACP This topic describes the configuration of link aggregation For configuration of link aggregation perform the following steps 1 To Enable Disable the LACP function use command set lacp enable disable in global configuration mode This is shown in Table 88 TABLE 88 SET LACP COMMAND Format Mode Function set lacp Global This Enable Disable the LACP enable disable config function Result This Enable Disable the LACP function Note By default the LACP function is disabled 2 To add a specified port to the aggregation group use command set lacp aggregator lt trunkid gt add port lt portlist gt in global configurat
246. l Of ZXR102952 sssseseeeeee nnn 13 Flg re 5 FGEI SHUDDOGIEU srira vk uibs a sar E i a nate 15 Figure 6 SF 2GE 2SFP subboard FGFD 16 figure 7 SF 2GE SFPRIJ45subboard FGFED s 16 Figure 8 Installing Plastic Pads eeeeeee eere eee 20 Figure 9 Installing Flanges eee nnn 21 Figure 10 Installing Brackets een nn nnn 22 Figure 11 Fixing THE SWICK essessaussuxua eX Pus ia Yu REDE RACE ei d 23 Figure 12 AC Power Cable cccccccccssccecseeeureeeeeeceusnanneeeenngs 24 Figure 13 48 Power Socket eeeeerr nnnm enn nnn 24 Figure 14 DC Power Cable seen mnn 25 Figure 15 Transverse English Type I Label 31 Figure 16 Pattern And Meanings Of Engineering Label On Optical RSEN 31 Figure 17 Cabling Of The Ethernet Switch In A Building 32 Figure 18 Cabling Of A Convergence Switch 33 Figure 19 ZXR10 2920 2928 2952 Configuration Modes 36 Flig re 20 R n Lelriebussssesesostisxverer uvas uw duxit rvwA Vasa E VIN si 37 Figure 21 Telnet Login eee mm mnn nnne 38 Figure 22 TFTPD Interface cece cece cece eeeeeeeeeeessseeeeeees 53 Figure 23 Configure Dialog BOx eee nnn 53 Figure 24 Vlan Transparent Transmission sees 82 Figure 25 Lacp COnfiQuration cccccseesseeeeeeeeeeeeeeee
247. l and Proprietary Information of ZTE CORPORATION ZTEmA Tables Table 353 Set Zesr Domain Primary Port Command 211 Table 354 Set Zesr Domain Secondary Port Command 212 Table 355 Set Zesr Domain Primary Trunk Command 212 Table 356 Set Zesr Domain Secondary Trunk Command 212 Table 357 Set Zesr Domain Vlan Command 213 Table 358 Set Zesr Domain Add Protect Vlan Command 213 Table 359 Set Zesr Domain Delete Command 213 Table 360 Set Zesr Domain Delete Vlan Command 214 Table 361 Set Zesr Domain Command 214 Table 362 Clear Zesr Domain Command 214 Table 363 Show Zesr Domain Command 215 Table 364 Show Zesr Command eese 215 Table 365 Set Remote Access Command 219 Table 366 Set Remote Access Ipaddress Command 219 Table 367 Clear Remote Access All Command 220 Table 368 Clear Remote Access Ipaddress Command 220 Table 369 Show Remote Access Command 220 Table 370 Set Ssh Command eere eese 222 Table 371 Show Ssh Command e eene eene 222 Table 372 Create Community Command es 227 Table 373 Create View Command eeeeeee eee 227 Table 374 Set Commun
248. lation and Debugging Overview Introduction This chapter provides an overview of installation and debugging processes of ZXR10 2920 2928 2952 Contents This chapter includes the following topics TABLE 8 TOPICS IN CHAPTER 4 Topics Page No Equipment 19 Switch Installation on Desktop 20 Switch Installation onto a Cabinet 20 Cable 23 Power Cables 24 Console Cable 25 Network Cable 26 Optical Fiber 28 Labels 29 Cable Lightning Protection Requirements 32 Equipment Installation ZXR10 2920 2928 2952 can be placed on desktop and can be installed on a 19 inch standard cabinet 19 inch standard cabinet can be provided by customer If ZTE provides the cabinet install cabinet as per 19 inch Standard Cabinet Confidential and Proprietary Information of ZTE CORPORATION 19 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH switch Installation on Desktop When switch is placed on desktop install four plastic pads the plastic pads and screws are part of the accessories on bottom plate of switch Four pads support switch and form a lower ventilation channel for power to cool down It is shown in Figure 8 FIGURE 8 INSTALLING PLASTIC PADS
249. le 222 Set Policy Qos Remark Command 141 Table 223 Clear Qos Policy Counter Command 141 Table 224 Clear Policy Mirror Command enne 141 Table 225 Clear Policy Vian Command eese 141 Table 226 Clear Policy Policing Command 142 Table 227 Clear Policy Qos Remark Command 142 Table 228 Clear Policy Statistics Command 142 Table 229 Clear Policy Redirect Command 142 Table 230 Show Qos Dscp Command esee 143 Table 231 Show Qos Queue Profile command 143 Table 232 Show Qos Policer Command enn 143 Table 233 Show Qos Policer Command een 143 Table 234 Show Qos Policy Counter Command 144 Table 235 Show Policy Command een nnn 144 Table 236 Set PVLAN Session Command 146 Table 237 Set PVLAN Session Delete Command 146 Table 238 Set PVLAN Session Modify Command 147 Table 239 Set PVLAN Session Clear Command 147 Table 240 Show Pvlan Command e eere eere 147 Table 241 Set 802 1x Relay Command 150 Table 242 Show 802 1x Relay Command 150 Table 243 Set Ipport Command eeeenrnnnnnnnnn 152 Table 244 Set Ip
250. le disable GVRP in port Note By default GVRP in port is disabled After enabling GVRP in port the port can receive packets of GVRP protocol To configure type of GVRP registration in port use command set gvrp port lt portlist gt registration normal fixed forbidden in global configuration mode This is shown in Table 320 TABLE 320 SET GVRP PORT REGISTRATION COMMAND Format Mode Function set gvrp port lt portlist gt global config This configure registration type of GVRP normal fixed forbidden registration in port Result This configures type of GVRP registration in port Note By default system port GVRP registration status is normal this command is to setup port GVRP registration type There are three types of registration types Confidential and Proprietary Information of ZTE CORPORATION 191 192 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Normal Switches handle the receipt information of GARP Switches can dynamically create register and withdraw VLAN Fixed Switches ignore all information of GARP but are still in registration status Permit manually creating and registering VLAN and prevent withdrawing VLAN Other ports can t register VLANs which are received from the port Forbidden Ignore all information of GARP withdraw all VLANs except VLAN1 and prevent creating and registering other VLANs in port To enable disable GVRP in trunk port use command set gv
251. le or directory To rename a file use command rename lt file name gt lt file name in file system configuration mode This is shown in Table 24 TABLE 24 RENAME COMMAND Format Mode Function File rename lt file system This renames the file name file name config Result This renames the file To modify the current directory use command cd directory name gt in file system configuration mode This is shown in Table 25 TABLE 25 CD COMMAND Format Mode Function File This modifies the current cd directory name system config directory Result This modifies the current directory To displays the current directory list use command Is in file system configuration mode This is shown in Table 26 TABLE 26 LS COMMAND Format Mode Function File M This displays the current Is system directory config Result This displays the current directory To upload or download a version through TFTP use command tftp lt A B C D download upload name in file system configuration mode This is shown in Table 27 TABLE 27 TFTP COMMAND Format Mode Function tftp lt A B C D gt File download upload system lt name gt config This uploads or downloads a version through TFTP Result This uploads or downloads a version through TFTP Confidential and Proprietary Information of ZTE CORPORATION 51 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Result P
252. le restrictive remote access use command set remote access any specific in global configuration mode This is shown in Table 365 TABLE 365 SET REMOTE ACCESS COMMAND Format Mode Function set remote global config This enable disable access restrictive remote any specific access Result This enable disable restrictive remote access Note By default restrictive access is disabled 2 To configure IP address that allows remote access use command set remote access ipaddress A B C D A B C D gt in global configuration mode This is shown in Table 366 TABLE 366 SET REMOTE ACCESS IPADDRESS COMMAND Format Mode Function set remote global config This configures IP access ipaddress address that allows A B C D remote access lt A B C D gt Result This configures IP address that allows remote access 3 To delete all IP addresses that allow remote access use command clear remote access all in global configuration mode This is shown in Table 367 Confidential and Proprietary Information of ZTE CORPORATION 219 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I 220 Result Example 1 ZTEDR TABLE 367 CLEAR REMOTE ACCESS ALL COMMAND Function This deletes all IP addresses that allow remote access Format Mode clear remote access all global config Result This deletes all IP addresses that allow remote access To delete an IP address that allows remote a
253. lly the RUN indicator flashes at 1Hz Confidential and Proprietary Information of ZTE CORPORATION 11 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH If the power indicator PWR is flashing it indicates that the switch is the main or standby role of the stack system Flashing in the same frequency with RUN shows it is the main equipment Flashing in the half frequency with RUN shows it is the standby equipment 32 indicators corresponds to 10 100 Base T port each port with two one is semiduplex fullduplex amp the other is link activation indicator gt Semiduplex fullduplex indicator is on in the condition of fullduplex is off in the condition of semiduplex amp is flashing in the condition of collision gt Link activation indicator is flashing when the link is activated 4 interface indicators correspond to the 2 10 100 1000 Base T interfaces Every interface has two indicators When one of the indicators is on it indicates that the LINK is normal When the other indicator is on it indicates that the LINK is normal If the indicator is flashing it indicates that data sending or receiving is under way ZXR10 2928 Front Panel Front panel of the ZXR10 2928 is shown in Figure 3 FIGURE 3 FRONT PANEL OF ZXR10 2928 2 4 a so u LI hl A 22 m SF 2GE SFPRJ45 C TX RX C ACT f Aa bs 1000BASE X Ethernet switching main board of ZXR10 2928 is KEBT Interface ZXR
254. load lt name gt version through TFTP on command switch Result This download upload version through TFTP on command switch To save configuration of specified member switch use command save member 41 idlist all in privileged mode This is shown in Table 422 TABLE 422 SAVE MEMBER COMMAND Format Mode Function save member privileged mode This saves i idlist all configuration of specified member switch Result This saves configuration of specified member switch To delete configuration of specified member switch use command erase member idlist all in privileged mode This is shown in Table 423 TABLE 423 ERASE MEMBER COMMAND Format Mode Function erase member privileged mode This deletes lt idlist gt all configuration of 254 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Result Purpose Steps Chapter 9 Network Management Format Mode Function specified member switch Result This deletes configuration of specified member switch To restart specified member switch use command reboot member idlist all in privileged mode This is shown in Table 424 TABLE 424 REBOOT MEMBER COMMAND Format Mode Function reboot privileged mode This restarts member1 idlist all specified member switch Result This restarts specified member switch END OF STEPS Access and control cluster members have been configured Displaying Cluster Configura
255. lt This clears PVLAN session 5 To view PVLAN use command show pvlan in global configuration mode This is shown in Table 240 TABLE 240 SHOW PVLAN COMMAND Format Mode Function show pvlan global config This views PVLAN Result This views PVLAN END OF STEPS PVLAN has been configured This example describes how to add shared port 16 and isolated ports 1 2 and 3 to the PVLAN This is shown in Figure 28 Confidential and Proprietary Information of ZTE CORPORATION 147 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH FIGURE 28 PLVAN CONFIGURATION EXAMPLE Switch See eee ees pl6 Server Configuration Beeler see jovrlana Sessioma i eacel o omls jooee Le wsolace port Es zte cfg show pvlan pvlan session ISI Promiscuous Port NN isolated port oes 1solated trunk pvlan session 1902 uon eiie Isolated port isolated trunk pvlan session e Promiscuous porr isolated port rsolated trunk pvlan session 4 Promiscuous e its oet d por lsolated trunk zte cfg In PLVAN 2 session add trunk 16 with isolation port trunk 1 2 and 3 148 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA I EEE 802 1x Chapter 7 Service Configuration Zee ehg tSee vovilan Session 2 add promis temi Wo isolat
256. lt portlist gt trunk lt trunklist gt Result This binds static multicast group to ports on Vlan 12 To delete a static multicast group use command set igmp snooping vlan vlanname delete group lt A B C D gt in global configuration mode This is shown in Table 106 TABLE 106 SET IGMP SNOOPING VLAN DELETE COMMAND Format Mode Function set igmp snooping vlan vlanname Global This deletes a static multicast delete group config group A B C D 94 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA i IK Chapter 7 Service Configuration Result This deletes a static multicast group To bind static multicast group based on port or aggregation to ports on Vlan use command set igmp snooping vlan lt 1 4094 gt add group lt A B C D gt port portlist trunk trunklist in global configuration mode This is shown in Table 105 TABLE 107 STATIC MULTICAST GROUP TO PORTS COMMAND Format Mode Function set igmp snooping vlan lt 1 4094 gt add group A B Global This binds static multicast group to C D port config ports on Vlan lt portlist gt trunk lt trunklist gt Result This binds static multicast group to ports on Vlan 14 15 16 To unbind static multicast group from ports use command set igmp snooping vian lt 1 4094 gt delete group lt A B C D port lt portlist gt trunk lt trunklist gt in global configuration mode This
257. mation eeeeeeeee eee eee 283 Figure 67 Configuration Information eeeeeee eee 284 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Figures Figure 68 Configuration Saving Reminder 285 Figure 69 REDOO n sscntueiecenecserartaaaataseregagemeawisentessauee 286 Figure 70 File Upload ccccc cece cece ee eeeeeeeeeeeeeeeeeeaeeneeeenes 287 Figure 71 Browse And select File ccccecceeeeeeeseeeeeeeeeeeees 287 Figure 72 User Management cssessseee nnne 288 Figure 43 Adding USGI oon cvertuit cma tad 0buscqdu inaiebevvt du c dorsi 289 Figure 74 Deleting User eee nnnm nnn 289 Confidential and Proprietary Information of ZTE CORPORATION 311 ZTEDH ZXR10 2920 2928 2952 V1 00 Access Switch User Manual Volume D This page is intentionally blank 312 Confidential and Proprietary Information of ZTE CORPORATION 313 Tables Table 1 Chapter SUMIMANY vsssssxsdssipisuesaana kou psu inani i Table 2 Typographical Conventions een nnn ii Table 3 Mouse Operation Conventions cccceeeeeeeeeeeeeeeeneees iii Table 4 Topics If Chapter 1 een nnn 1 Table 5 Topics In Chapter 2 eeeeeseennn mmn 3 Table 6 Technical Features And Parameters 8 Table 7 Topics In Chapter 3 eeesseeeenn n mmn nnn 9 Table 8 Topics In Chapter 4 cen 19
258. mation of ZTE CORPORATION 199 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH lt portlist gt in global configuration mode This is shown in Table 334 TABLE 334 SET DHCP OPTION82 COMMAND Format Mode Function set dhcp option82 global config This enable disable add delete port Option82 function lt portlist gt based on port Result This enable disable Option82 function based on port Note Option82 function is disabled by default Command is to enable disable Option82 function on port When global DHCP function is enable then this function is enabled 3 To enable disable DHCP Option82 Circuit_ID sub option based on port use command set dhcp option82 sub option port lt portname gt circuit ID on cisco china tel dsl forum off in global configuration mode This is shown in Table 335 TABLE 335 SET DHCP OPTION82 SUB OPTION COMMAND Format Mode Function set dhcp option82 global config This enable disable sub option port DHCP Option82 portname Circuit ID sub circuit ID on option based on cisco china port tel dsl forum off Result This enable disable DHCP Option82 Circuit_ID sub option based on port Important ZXR10 2920 2928 2952 supports three forms of Circuit_ID sub option Cisco form CHINA TEL form and DSL Forum form 4 To enable disable DHCP Option82 Subscriber ID sub option based on port use command set dhcp option82 sub option port lt port
259. mber Command Table 424 Reboot Member Command Confidential and Proprietary Information of ZTE CORPORATION ZTEmA ZTEmA Tables Table 425 Show Group Command een nnn 255 Table 426 Show Group Candidate Command 255 Table 427 Show Group Member Command s 256 Table 428 System Configuration Detail esee 265 Table 429 Port Parameters Detail eere 267 Table 430 Parameters Description eeeeererennnnnnne 271 Table 431 PVLAN Parameters Description ee 274 Table 432 Port Mirror Detail eeeeeeeeeee eene eee 276 Table 433 LACP Basic Information Detail 278 Table 434 Assembling Port Information eee 279 Table 435 Assembling Group Detail eee 280 Table 436 Maintenance And Test Period Of Ethernet Switch 293 Table 437 Set Loop Detect Port Command se 294 Table 438 Set Loop Detect Port Vlan Command 295 Table 439 Set Loop Detect Trunk Command 295 Table 440 Set Loop Detect Trunk Vlan Command 295 Table 441 Set Loop Detect Port Protect Command 296 Table 442 Set Loop Detect Trunk Protect Command 296 Table 443 Set Loop Detect Block Delay Command 296 Table 444 Set Loo
260. mmand 105 Table 136 IPTV Cac Rule Prvinterval Command 106 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Tables Table 137 IPTV Cac Rule Right Command 106 Table 138 Clear Iptv Cac Rule Command eese 106 Table 139 Clear IPTV Client Command 106 Table 140 Show IPTV Control command 108 Table 141 Show Iptv Channel Command eese 108 Table 142 Show Iptv Channel Id Name Command 108 Table 143 Show IPTV Cac Rule command 109 Table 144 Show Iptv Cac Rule Statistics Command 109 Table 145 Show IPTV Client Command 109 Table 146 Show IPTV Client Command 109 Table 147 Set Stp Command nnnm 112 Table 148 Set Stp Command eeennnnm mnn 112 Table 149 Set Stp Command nnm nnn 113 Table 150 Set Stp Command eeennmm nnn 113 Table 151 Set Stp Command eenenn nmn 113 Table 152 Set Stp Agemax Command eene 113 Table 153 Set Stp Edge Port Command eee 114 Table 154 Set Stp Forceversion Command 114 Table 155 Set Stp Forward Delay Command 114 Table 156 Set Stp Hellotime Command eee 114 Table 157
261. mmand Chapter 5 Usage and Operation PAID er ONE EN e Command not found 040000066 zte cfg 5 Online help is used to create user Result Online help creates user Example An example is given below ZE ep eene B create Zee Chg fereale 7 pou create descriptive name for port vlan create descriptive name for vlan user Crearte user zte cfg create user Parameter not enough 0x40000071 zte cotg credte user 2 ser deber user name zte cfg create user wangke zte cfg END OF STEPS Online command help has been configured Command Abbreviations In ZXR10 2920 2928 2952 a command or keyword can be shortened into a character or string that can uniquely identify this command or keyword For example the command exit can be shortened as ex and the command show port shortened as sh po History Commands Input command can be recorded in the user interface up to 10 history commands can be recorded and this function is useful for invoking a long or complicated command again Execute one of the following operations to re invoke a command from the record buffer as shown in Table 18 TABLE 18 INVOKING A COMMAND Command Function CTRL P or Invoke a history command in the buffer forward Confidential and Proprietary Information of ZTE CORPORATION 47 48 User Interface ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Command Function CTRL N or Invoke a hist
262. mp set zte cfg snmp set t zte cfg snmp set zte cfg snmp set zte cfg snmp set se KO oe ve zte cfg snmp set zte cfg snmp set zte cfg snmp set zte cfg snmp set iE dE Jos aUo zte cfg snmp set zte cfg snmp set zte cfg snmp set zte cfg snmp set zte cfg snmp set Query configuration Chapter 9 Network Management event 2 description It sJustForTest event 2 type logandtrap event 2 community public event 2 owner zteNj event 2 Status valid 3138 dE CEA datasource 16 Mal She OE ST bucket 3 locat ene One 2 2 history 2 interval 10 2 owner zteNj 2 o LSC Ore Seo masculine rmon enable aen eq a alarm 2 variable 1 Du Ce I Zu ies OX Tap 1 alarm 2 sample absolute alleen 2 ewe SUEE DS 1 I stie alarm 2 threshold 8 eventindex 2 rising alarm 2 threshold 15 eventindex 2 alarm 2 owner zteNj allarm 2 std Sec stcacisectLcs L dacasourcece 16 Statistics 1 owner zteNj Slee eal euler Ll scacus valel information about event 2 zte cfg snmp Show event 2 EventIndex 2 Type 3 hOg and pap Community 3 191006 1L ab 6 Cees yy ale Owner ZteNj Description e sJuserorlese Zce CEG Sump Query configuration information about history 2 Confidential and Proprietary Information of ZTE CORPORATION 239 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I TEX Bee E O iustos 2 Controlindex 2 BucketsRequest 3 Interval 2
263. mp link of the physical local network Description Each VLAN is like an independent local area network logically In the same VLAN all the frame flow is limited in this VLAN Cross VLAN visit can only be implemented through forwarding on layer 3 This improve the network capability greatly Reduce the whole flow of the physical local network ZXR102920 2928 2952 support tagged based VLAN which is VLAN based on lable This is the mode IEEE 802 1Q defined amp the universal work mode In this mode VLAN partition is based on port s VLAN info PVID port VLAN ID or the information in VLAN lable VLAN provides the following advantages Lower broadcast traffic on the network Enhanced network security s Streamlined network management Configuring VLAN Purpose This topic describes the configuration of VLAN on ZXR10 2920 2928 2952 Steps For configuration of VLAN perform the following steps 1 To remove a VLAN name use command clear vlan lt vianlist gt name in global configuration mode This is shown in Table 64 TABLE 64 CLEAR VLAN COMMAND Format Mode Function clear vian Global lt vlanlist gt This removes a VLAN name config name Result This removes a VLAN name 2 To create a VLAN name use command create vlan lt 1 4094 gt name lt sting gt in global configuration mode This is shown in Table 65 TABLE 65 CREATE VLAN COMMAND Format Mode Function create vlan 1 Global 4094 name This
264. n enable disable Result This enable disable trunk ZTP function Important By default ZTP function of all ports trunks is enabled If ZTP function of a port trunk is disabled ZTP packets processing of port trunk is suspended Note A port trunk can collect and send ZTP information normally only when both ZTP function of the port trunk and system ZTP function are enabled To configure ZTP parameters use the following commands in group config mode as shown in Table 402 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA TABLE 402 SET ZTP COMMANDS Result This configures vlan and sets range Format set ztp vian lt 1 4094 set ztp hop lt 1 128 set ztp timer lt 0 60 set ztp hopdelay lt 1 1000 gt set ztp portdelay lt 1 100 gt Mode group config group config group config group config group config Chapter 9 Network Management Function This configures a VLAN for collecting topology information This sets range hop count of collecting topology information This sets time interval for collecting topology information periodically This sets hop delay for forwarding topology requests This sets port delay for forwarding topology requests set time set hop delay and set port delay for topology gt command ztp start in group config mode By default specified VLAN for collecting topology information is VLAN 1 and topology collect
265. n router config mode This is shown in Table 253 TABLE 254 SHOW ARP COMMAND Format Mode Function show arp router config This views static dynamic invalid ipport ARP table 0 63 entries static dynamic invalid lipaddress A B C D gt Result This views ARP info 9 To view ipport use command show ipport lt 0 63 gt in router config mode This is shown in Table 253 TABLE 255 SHOW ARP COMMAND Format Mode Function show ipport lt 0 router config This views ARP 63 gt table entries Result This views ipport 156 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 7 Service Configuration 10 To view ARP info use command show arp iproute in router config mode This is shown in Table 253 TABLE 256 SHOW ARP COMMAND Format Mode Function show arp iproute router config This views ARP table entries Result This views ARP iproute END OF STEPS Result ARP table entry has been configured Confidential and Proprietary Information of ZTE CORPORATION 157 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH This page is intentionally blank 158 Confidential and Proprietary Information of ZTE CORPORATION Introduction Client System Authentication System Chapter 8 Access Service With the rapid expansion of Ethernet construction scale to meet fast increase of subscribers and requirement of diversified broadband services Network Acces
266. n ZESR domain ZESR function in ZESR domains is disabled by default When enabling ZESR function parameters in domains should be set actually ZESR function can not be enabled if parameter is not integrated meanwhile ZESR control VLAN should be enabled by users and add ports in the ring as Tagged ports into control VLAN To distinguish with STP function ports in ZESR ring are not managed by STP Before ZESR function is enabled STP function in ring should be disabled To clear ZESR domain configurations use command clear zesr domain lt domainId gt in global configuration mode This is shown in Table 362 TABLE 362 CLEAR ZESR DOMAIN COMMAND Format Mode Function clear zesr domain global config This clears ZESR domainId domain configurations Result This clears ZESR domain configurations Note Clearing parameters configuration in ZESR domain can be processed when ZESR function is disabled in ZESR domain To display ZESR domain configuration use command show zesr domain lt domainId gt in global configuration mode This is shown in Table 363 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 13 zte cfg set zesr domain Bea Ure See vues Clomlealia zte cfg set zesr domain zte cfg set zesr domain Chapter 8 Access Service TABLE 363 SHOW ZESR DOMAIN COMMAND Format Mode Function show zesr domain global config This displays ZESR domainId domain configuration Result This dis
267. n authorized or off standard client identify field Correlating user MAC address and Remote ID makes server to prevent illegal users of other Remote ID who use same MAC address to deceive from accessing Configuring Global DHCP This topic describes the DHCP global configuration on ZXR10 2920 2928 2952 to support snooping and Option82 function For the global configuration of DHCP perform the following steps 1 To enable disable the system of DHCP function use command set dhcp fenable disable in global configuration mode This is shown in Table 324 Confidential and Proprietary Information of ZTE CORPORATION 195 196 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 324 SET DHCP COMMAND Format Mode Function set dhcp global config This enable disable enable disable the system of DHCP function Result This enable disable the system of DHCP function Note System DHCP function is disabled by default This command is used to enable or disabled the function globally 2 To configure DHCP attribute of port use command set dhcp port lt portname gt server cascade client in global configuration mode This is shown in Table 325 TABLE 325 SET DHCP PORT COMMAND Format Mode Function set dhcp port global config This configures lt portname gt DHCP attribute server cascade client of port Result This configures DHCP attribute of port Important There are three kinds of attrib
268. n configured ooftware Version Upgrade Software version upgrade is only made when the original version fails to support certain functions Improper operation may lead to upgrade failure and hence system booting failure Therefore version upgrading must be done with the understanding of principle operation and upgrade procedure of the ZXR10 2920 2928 2952 before start to upgrade the version Version Upgrading occurs in the following two cases Version Upgrade in case of System Abnormality Version Upgrade in case of Normal System Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 6 System Management Viewing System Information Purpose This topic describes the procedure for viewing system information Steps For system view perform the following steps 1 To view hardware and software versions of the System use show version command in global configuration mode as shown in Table 31 TABLE 31 SHOW VERSION COMMAND WINDOW Format Mode Function This display the version show config information about the software version and hardware of system Result This shows the running software and hardware information of system Example The following information is displayed after carrying out show version command zie ed CUTS Im SET The System s mharcware JD 3 Switch s Mac Address 00 e d0 EO o LL 22 Mod le 0 AXRIO 51245 fastet 0 gDIt 24 The System s Som Wee ID OR Version
269. n help limit network traffic and restrict network use by certain users or devices ACL s can filter traffic as it passes through a router and permit or deny packets at specified interfaces An ACL is a sequential collection of permit and deny conditions that apply to packets When a packet is received on an interface the switch compares the fields in the packet against any applied ACL s to verify that the packet has the required permissions to be forwarded based on the criteria specified in the access lists It tests packets against the conditions in an access list one by one The first match determines whether the switch accepts or rejects the packets because the switch stops testing conditions after the first match The order of conditions in the list is critical If no conditions match the switch rejects the packets If there are no restrictions the switch forwards the packet otherwise the switch drops the packet Packet matching rules defined by the ACL are also used in other conditions where distinguishing traffic is needed For instance the matching rules can define the traffic classification rule in the QoS ZXR10 2920 2928 2952 provides ACL functions as follows m ZXR10 2920 2928 2952 provides three binding types including physical port Trunk Groups and Vlan interface When a physical port is added into a Trunk Group and has been bounded as ACL current bound is to be released a false message will return When ACL is applied t
270. n nas config mode This is shown in Table 259 Confidential and Proprietary Information of ZTE CORPORATION 163 164 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 259 AAA CONTROL PORT MULTIPLE HOST COMMAND Format Mode Function aaa control port nas config This lt portlist gt allows prohibits multiple hosts multi subscriber enable disable access of the port Result This allows prohibits multi subscriber access of the port To set the maximum number of subscribers connected through the port use command aaa control port lt portlist gt max hosts 0 64 in nas config mode This is shown in Table 260 TABLE 260 AAA CONTROL PORT MAX HOSTS COMMAND Format Mode Function aaa control port nas config This set the lt portlist gt max maximum number hosts lt 0 64 gt of subscribers connected through port Result This sets the maximum number of subscribers connected through port Note A port can allow access of multiple subscribers and each subscriber has own independent authentication and billing processes The aaa control port max hosts command is valid only when the port allows access of multiple subscribers To enable disable re authentication mechanism use command dotlx re authenticate enable disable in nas config mode This is shown in Table 261 TABLE 261 DOT1X RE AUTHENTICATION COMMAND Format Mode Function dotlx re nas config This enable disable authenticate re a
271. n the left of the system main page Configuration Lacp Lacp Port to open LACP basic attributes page as shown in Figure 61 FiGURE 61 LACP BASIC ATTRIBUTE ZTE switch Microsoft Internet explorer NN lalxl THO MHD SAM KRA IAD REH FAE gt OAA Que Grex Qus 3D 3 i m t HAHEI http 192 168 1 3 index htm UID 800112 AER w eee E e ZTEDH Ethern ZXR10 5124 FI Configuration System ZTEPM ZXR105124 FI Y Port gt Port State gt Port Parameter 3 S VLAN I gt vlan Overview 120 gt vlan Configure W PVLAN Lacp Information gt Pvlan Overview Refresh d Pylan Configure AdminStatus Disable ror BLacp LacpPriority 32768 1 65535 Lach Port Select PortNum Grou i i pNum GroupMode LacpTime LacpActive gt Lacp State Monitoring Iv 21 2 Dynamic Long True gt Terminal Log b Port Statistics Iv 22 2 Dynamic Long True gt Running Config Iv 23 2 Dynamic Long True Maintenance b Save Iv 24 2 Dynamic Long True gt Reboot i ili Upload IM SelectAll gt User Manager Set Apply Refresh Return Logout All rights reserved ZTE Corporation E mE IIl fe ZH Intranet This page includes LACP basic information as shown in Table 433 TABLE 433 LACP BASIC INFORMATION DETAIL Parameters Description Admin Status LACP enable status Lacp Priority LACP priority
272. nabled port recorded by switch To clear information of DHCP Snooping dynamic binding table item use command clear dhcp snp bind entry all port lt portname gt mac xx xx XX xx xx xx in global configuration mode This is shown in Table 330 TABLE 330 CLEAR DHCP SNP BIND COMMAND Format Mode Function clear dhcp snp global config This clears bind entry information of all port DHCP Snooping dynamic binding table item portname mac XX XX XX XX XX XX Result This clears information of DHCP Snooping dynamic binding table item Important There are three kinds of modes to clear information of DHCP Snooping dynamic binding table item clear all based on port and based on MAC address Note All items in table are dynamic generated and cleared Only when network trouble appears and dynamic host configurations fail to recover users are advertised to clear table items by hand Otherwise it will impact DHCP interaction END OF STEPS DHCP snooping has been configured on ZXR10 2920 2928 2952 Configuring IP Source Guard This topic describes IP source guard configuration on ZXR10 2920 2928 2952 For the configuration of IP source guard perform the following steps 198 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Result Purpose Steps 1 Chapter 8 Access Service To enable disable IP source guard function based on port use command set dhcp ip source guard
273. name gt Subscriber ID on lt string gt off in global configuration mode This is shown in Table 336 TABLE 336 SET DHCP OPTION82 COMMAND Format Mode Function set dhcp option82 global config This enable disable sub option port DHCP Option82 portname Subscriber ID sub Subscriber I1D option based on on string offj port Result This enable disable DHCP Option82 Subscriber ID sub option based on port 200 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR 5 Chapter 8 Access Service To configure expanding option of DHCP Option82 based on port use command set dhcp option82 sub option port lt portname gt reserve on tag lt 1 255 gt value lt string gt off in global configuration mode This is shown in Table 337 TABLE 337 SET DHCP OPTION82 SUB OPTION PORT COMMAND Format Mode Function set dhcp option82 global config This configures sub option port expanding option of portname DHCP Option82 reserve on tag based on port 1 255 value string off Result This configures expanding option of DHCP Option82 based on port Note ZXR10 2920 2928 2952 supports Circuit ID Remote ID and Subscriber ID These three sub options tags are 1 2 and 6 in order Circuit ID supports three forms Remote ID is enabled by default and does not need to configure it Besides switches support a sub option which uses in expanding To display DHCP Option82 configuration information
274. name will not specified to use full account contain domain name 10 To configure domain description as subscriber name to If it is not use command radius isp ispname description string in nas config mode This is shown in Table 282 172 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 11 12 Chapter 8 Access Service TABLE 282 RADIUS ISP DESCRIPTION COMMAND Format Mode Function radius isp nas config This configures ispname domain description description string Result This configures domain description Configuration of RADIUS parameters i To set server response timeout time use command radius timeout 1 255 in nas config mode This is shown in Table 283 TABLE 283 RADIUS TIMEOUT COMMAND Format Mode Function radius timeout nas config This sets server lt 1 255 gt response Result This sets server response ii To set number of retransmissions upon server response timeout use command radius retransmit lt 1 255 gt in nas config mode This is shown in Table 284 TABLE 284 RADIUS RETRANSMIT COMMAND Format Mode Function radius retransmit nas config This sets number of lt 1 255 gt retransmission upon server response timeout Result This sets number of retransmission upon server response timeout iii To set NAS server name use command radius nasname lt nasname gt in nas config mode This is shown in Table 285 TABLE 285 RADIUS NASNA
275. ncluding hold timer join timer leave timer and leave all timer To show GARP information and timer setup status use command show garp in global configuration mode This is shown in Table 317 TABLE 317 SHOW GARP COMMAND Format Mode Function show garp global config This shows GARP information and timer setup status Result This shows GARP information and timer setup status Note All timers which enable GARP must be exactly same otherwise application protocol can t work normally END OF STEPS 190 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Purpose Steps Chapter 8 Access Service GARP has been configured Configuring GVRP This topic describes the configuration of GVRP For the configuration of GVRP perform the following steps 1 To enable disable GVRP use command set gvrp in global configuration mode This is shown in Table 318 TABLE 318 SET GVRP COMMAND Format Mode Function set gvrp global config This enable disable GVRP Result This enable disable GVRP Note By default GVRP is disabled GVRP is only enabled when GARP is enabled To enable disable GVRP in port use command set gvrp port lt portlist gt enable disable in global configuration mode This is shown in Table 319 TABLE 319 SET GvRP PoRT COMMAND Format Mode Function set gvrp port global config This enable disable lt portlist gt GVRP in port enable disable Result This enab
276. nd LING eausa nox Smdamued piget idi pda AA Vds 45 ComrnianaAbDbreviatiorS veo iva a ova n EAM Ed OLV OP DOCE EL PUR avia 47 History COMMONS att a et Uv EEAM vb Db RE SETPEERN EODEM ERI ER de RR eSI 47 PUNCHON K CY 2 EET 48 Chapter 5 onion cn onnnoXdnaofdend debeo VERA OPE DECR 49 System Management eoe eoe enean nnn nnn 49 OS ail Seen eR eee Ce er ene een ee rere een Rehd a pA DR em Noir 49 FUSSY SUCI mcr UT EM 49 operating FIle SVSEetTlosdesodulb m pre oun V b pacers EE 50 Configuring ZXR10 2920 2928 2952 as an TFTP Client 52 Configuring Imports and EXPOELS soda sexe Cart MU UR NERA DU SUR VES 54 Setting File Backup and Recovery storie TECH qute dotum mt SE IEVAT 55 SoftWare Version UDGrade 5 msauedo torrsdb kb SeEissucP stiest inier 56 Viewing System Information sccss sevuseavetkivevreotrk rd XeEEO pa deca cate 57 Upgrading Version at NoEellbyes sees nis ut xenon der b 57 Upgrading Version at Abnormality istud acta e aita a CPU n Get d 59 Chapter 7 usen VE VEREOR XLI GU EREMO ES EDU ERR RO E ER VADER 65 Service Configuration uice ixvxs cuan Er Ea ouEEMU ue nag Ex V FEE MEME 65 OVervie Wonestuss ebex Ts videi debe edu db usc bettd aun dE victu tax cin i IA da is 65 Configuring Basic Port Parameters ces erc d Erik va Ra dae ei wapa 68 Displaying Port Intormmistiortssermesseedatas ti ek ra noe aU Mi RU ES rubia s 74 POPE MIF OCHI oii e bL dom edt b a a aa man a deae Mus aat 75 Configuring Pore MIrFOnI
277. nected to Service Provider Network PE Provider Edge accessing equipment at the edge of Service Provider Network Client Network is accessed to PE via Trunk VLAN Uplink Ports inside Service Provider Network are connected via Trunk VLAN symmetrically By matching specific ACL traffic rules in ports SQinQ functions can set different Service Provider s VLAN tags for packets a Packets are transmitted in Service Provider Network Vian Tags of Service Provider would be strip off when packets leave Service Provider Vlan SQinQ configuration is determined as per following conditions Customer Port Normally a set of Customer Vlans is set in one Uplink Port Strategy Several sets of Customer Vlans can be in one Uplink Port when it Configuration is confirmed that all Vlans in this port are different with each other Configuration of SQinQ in Customer Port only makes sense for packets which carrying 802 1Q tag and for designated Customer Vlan As to the Customer Vlan which carries 802 1P tag or untag they are all handled as normal Vlan Note SQinQ would not work in good condition when QinQ is already configured Reason is that port could not recognize Customer Vlan Tag any more when QinQ is configured on this port Consequently SQinQ would not get any Customer Vlan information SQinQ does not support binding with Trunk directly so far However binding with Trunk could be supported indirectly adding ports bound w
278. nfigured on ZXR10 2920 2928 2952 Configuring RADIUS This topic describes the RADIUS configuration of ZXR10 2920 2928 2952 For the configuration of RADIUS perform the following steps 1 To add delete an ISP domain use command radius isp lt ispname gt enable disable in nas config mode This is shown in Table 273 TABLE 273 RADIUS ISP COMMAND Format Mode Function radius isp nas config This add delete an ispname ISP domain enable disable Result This add delete an ISP domain Confidential and Proprietary Information of ZTE CORPORATION 169 170 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Important In RADIUS configuration concept of isp domain is introduced Different domains may be operated by different ISPs Access equipment identifies domain that subscriber belongs to according to domain name in subscriber name username DomainName input by the subscriber and sends authentication and billing requests of subscriber to authentication server and billing server of the corresponding domain Each domain has its own RADIUS server After a domain is deleted all the configurations related to this domain are deleted To add authentication server to domain use command radius isp ispname add authentication lt A B C D gt lt 0 65535 gt in nas config mode This is shown in Table 274 TABLE 274 RADIUS ISP ADD AUTHENTICATION COMMAND Format Mode Function radius isp nas
279. nfigures the ingress session queue priority of flux monitor 11 To configure the ingress session mgmt no ratelimit of the flux monitor use command set bandwidth feport lt portlist gt ingress session 0 3 mgmt no ratelimit enable disable in global configuration mode This is shown in Table 203 136 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 12 13 14 Chapter 7 Service Configuration TABLE 210 SET Qos PoLicER PARAMETERS COMMAND Format Mode Function set bandwidth report Polar This configures the ingress session l l global config ingress session lt 0 3 gt mgmt no ratelimit enable disable mgmt no ratelimit Result This configures the ratelimit of flux monitor ingress session mgmt no To configure the ingress session of the flux monitor use command set bandwidth feport lt portlist gt ingress session 0 3 enable disable in global configuration mode This is shown in Table 203 TABLE 211 SET Qos PoLicER PARAMETERS COMMAND Format Mode Function set bandwidth feport lt portlist gt This configures the ingress session global config ingress session 0 3 enable mgmt no ratelimit disable Result This configures the ingress session of flux monitor To configure the egress session of the flux monitor use command set bandwidth feport lt portlist gt egress on rate lt 64 1000000 gt off in global configuration mode This is shown in Table 203
280. ns Note Acronyms and Abbreviations used in this particular manual are related to IP product Abbreviation Full Name ABR Area Border Router ACL Access Control List AD Administrative Distance API Application Programming Interface ARP Address Resolution Protocol AS Autonomous System ASBR Autonomous System Border Router ASN Abstract Syntax Notation ATM Asynchronous Transfer Mode BGP Border Gateway Protocol BOOTP Bootstrap Protocol BDR Backup Designate Router CHAP Challenge Handshake Authentication Protocol CIDR Classless Inter Domain Routing CLNP Connectionless Network Protocol CLNS Connectionless Network Service COS Class of Service CRC Cyclic Redundancy Check CRLDP Constraint based Routing Label Distribution Protocol CSN Cryptographic Sequence Number CSU Channel Service Unit DDN Digit Data Network DHCP Dynamic Host Configuration Protocol DIS Designate IS Confidential and Proprietary Information of ZTE CORPORATION Abbreviation DNS DR DSU EBGP EGP ES FDDI GER FEC FIFO FPGA FSM FTP GBIC GRE I CMP IETF I GMP IGP IP ISO ISP LAN LAPB LCP LDP LLC LSA LSP LSR MAC MD5 MED MI B MPLS MTU ZXR10 2920 2928 2952 V1 00 Access Switch User Manual Volume I ZTEDH Full Name Domain Name System Designate Router Data Service Unit External Border Gateway Protocol External Gateway Protocol End System Fiber Distributed Data Interface General Excellent Router Forwarding Equival
281. nstance lt trunkname gt root guard enable disable Result This sets trunk root guard of the instance To set trunk loop of the instance use command set stp instance 0 15 trunk lt trunkname gt loop guard enable disable in global configuration mode This is shown in Table 168 TABLE 168 SET STP INSTANCE TRUNK LOOP GUARD COMMAND Format Mode Function set stp instance lt 0 15 gt trunk Global This sets trunk loop of the lt trunkname gt loop config instance guard enable disable Result This sets trunk loop of the instance To set the mapping relation between the VLAN and instance use command set stp instance lt 0 15 gt add delete vlan lt vlanlist gt in global configuration mode This is shown in Table 169 Confidential and Proprietary Information of ZTE CORPORATION 117 118 25 26 2 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 169 SET STP INSTANCE VLAN COMMAND Format Mode Function set stp instance Global config This sets the lt 0 mapping relation 15 gt add delete between the VLAN vlan lt vlanlist gt and instance Result This sets the mapping relation between the VLAN and instance To set MST area name use command set stp name lt name gt in global configuration mode This is shown in Table 170 TABLE 170 SET STP NAME COMMAND Format Mode Function Ser SiP name ena This sets MST area name lt name gt config Result This
282. number 3 Vio Lo JE de b Version make date Jun 16 2006 Version make time 16 27 13 System has run O0 years 2 days 3 hours 8 minutes 43 Seconds Zte cfg END OF STEPS Result System information has been viewed Upgrading Version at Normality Purpose This topic describes the procedure of software version upgrade for ZXR10 2920 2928 2952 in normal case Confidential and Proprietary Information of ZTE CORPORATION 57 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Prerequisites To upgrade software version meet the following requirements Connect ZXR10 2920 2928 2952 console port on the main control board to the serial port of the background host with a console cable attached to the switch Connect the management Ethernet port to the background host s network port with a straight through network cable Make sure that both connections are correct Set the IP address of the Ethernet port on the switch Set the IP address of the background host used for upgrade The two IP addresses must be in the same network segment so that the host can ping the switch On the background host start the TFTP server software and set Configuring ZXR10 2920 2928 2952 as an TFTP Client Steps For software version upgrade perform the following steps 1 2 View the information about the currently running image by using show version command in privileged mode as shown in Table 32 TABLE 32 SHOW VERSION COMM
283. o 68_Zijinghua_Road Yuhuatai SysUpTime Oyears Odays 0 hours 10 minutes 55 seconds Apply Reset Refresh Logout All rights reserved ZTE Corporation else EE EH Intranet Detail of system configuration is given in Table 428 TABLE 428 SYSTEM CONFIGURATION DETAIL Parameters Detail Version Number Versin number detail Switch Type Type of switch Version Make Time When version is made Mac Address Hardware address of the switch Sys Location System location Sys Up Time Time the system has run since its start up 2 Host name and Sys location is change by clicking on Name and address is typed in columns 3 Click Apply Result Host name and address is changed END OF STEPS it Structure of switch has been configured This topic describes the port status and parameters For port status perform following steps Confidential and Proprietary Information of ZTE CORPORATION Configuring Port and Parameters 265 y ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDR 1 Click on Configuration gt Port gt Port State from configuration mode as show in Figure 47 FIGURE 47 PORT STATE AND PARAMETERS Configuration System Port Part State gt Part Parameter m VLAN gt Mirror Lach Monitoring P Terminal Log P Port Statistics Maintenance P Save Upload P User Manadaer Result Port status appears as shown in Figure 48 266 C
284. o Trunk Group physical port will be bound with ACL automatically Vlan interface also supports an ACL binding Note When a port trunk itself belongs to a Vlan choose mode to make sure that the received packets will be applied to a port trunk bound ACL or a Vlan bound ACL Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Five Types of ACL ACL Description Chapter 7 Service Configuration a ACL rule can be added deleted sorted gt Rule can be added to a configured ACL Regular ID number range is from 1 500 including Global ACL the number ranges from 1 to 16 Configured ACL can be deleted regularly If the specified ACL s access list number or rule number hasn t been configured a false message will return Many rules of an ACL can be sorted and defined where the rule number is placed An ACL can become effective according to configuring time range After configuring absolute or relative time range on the switch time range can be applied to the rule of ACL This results in the rule to be in effect according to the time range identified ZXR10 2920 2928 2952 provides the following five types of ACL s Basic ACL Only match source IP address Extended ACL Match the following items gt Source IP address destination IP address IP protocol type TCP source port number TCP destination port number UDP source port number UDP destination port number ICMP type ICMP Code Dif
285. o recover original packet and sends packet to user network 2 In this way data between user network 1 and user network 2 can be transmitted transparently VLAN IDs of user network can be planned regardless of conflict with VLAN IDs in ISP network Configuring QinQ This topic describes the PVLAN configuration on ZXR10 2920 2928 2952 For the PVLAN configuration perform the following steps I To add delete a Customer port use command set qinq customer port lt portlist gt enable disable in global configuration mode This is shown in Table 289 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Note Example Chapter 8 Access Service TABLE 289 SET QiNQ CusTOMER PoRT COMMAND Format Mode Function set ging customer global config This add delete a port lt portlist gt customer port enable disable Result This add delete a customer port 2 To add delete an uplink port use command set ging uplink port lt portlist gt enable disable in global configuration mode This is shown in Table 290 TABLE 290 SET QINQ UPLINK PORT COMMAND Format Mode Function set ging uplink global config This add delete a port lt portlist gt uplink port enable disable Result This add delete a uplink port 3 To set tpid of the outer tag use command set qinq tpid lt tpid gt in global configuration mode This is shown in Table 291 TABLE 291 SET QINQ TPID COMMAND Format Mode Fun
286. o reduce equipment failure rate in the areas where lightning is frequent Place the ethernet switch in the corridor preferably on the first floor to avoid the direct sunshine rains and lightning Ensure that all subscriber lines are distributed inside building to avoid lightning induction Uplink downlink and cascading lines are distributed outside Cabling of Ethernet switch in a four floor building with three units is shown in Figure 17 FIGURE 17 CABLING OF THE ETHERNET SWITCH IN A BUILDING Unit 1 Unit 2 Unit 3 Corridor Corridor Corridor 4th floor 7 3 3rd floor 5 6 2nd floor 3 4 E Z Ist floor l m a gt G a a c gt F gt A B C Uplink cable Cascading cable Cascading cable Switch placement in fourth floor is explained below m Switch A is in Unit 1 and is convergence switch of the whole building Switches B and C are access switches Switches A B and C are cascaded Cascading cables refers to connecting two switches Cascading cable of switch A is the uplink cable of switch B and cas
287. o submit 5 Click Delete in the user management page to open deleting user page as shown in Figure 74 FIGURE 74 DELETING USER la x X EO SEV HAO IAD HR e HAE gt Q DAQ grax Ques SIA 3 u 3 qr i A E Hitik D f http 192 168 1 3 index htm UID 800112 xr vj ese e a ZXR10 5124 FI Configuration gt System ZTEcX ZXR105124 FI Si Port S3 VLAN Q3 PVLAN Mirror Console 3 3 5 7 W Lacp 120 x Refresh Monitoring Terminal Log User Manager Port Statistics P Running Config Modify Add Delete Maintenance gt Save Your admin password p gt Reboot gt Upload gt User Manager Delete user of the switch User name EE Am Reun Logout All rights reserved ZTE Corporation ess mi eu ZH Intranet 6 Input the management password and select the user to be deleted then click Apply to submit Confidential and Proprietary Information of ZTE CORPORATION 289 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH END OF STEPS Result User management tool has been configured and now it is possible to add and delete a user 290 Confidential and Proprietary Information of ZTE CORPORATION Introduction Contents Chapter 1 0 Maintenance Overview This chapter provides routine maintenance methods and troubleshooting of ZXR10 2920 2928 2952 This chapter includes the following contents
288. obal configuration mode This is shown in Table 350 TABLE 350 SET SFLOW RELOAD MODE COMMAND Format Mode Function set sflow global config This sets sample ingress egress frequency reload reload mode mode on port of continuous cpu sFlow function Result This sets sample frequency reload mode on port of sFlow function 208 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 8 Access Service Parameters Description Continuous mode is continuous reload mode is using same sample frequency in each sample time Cpu mode is cpu control mode is each time it finishes to sample cpu will generate a random sample frequency 6 To clear sFlow configurations use command set sflow clear config in global configuration mode This is shown in Table 351 TABLE 351 SET SFLOW CLEAR CONFIG COMMAND Format Mode Function set sflow clear global config This clear sFlow config configurations Result This clears sFlow configurations END OF STEPS Result sFlow has been configured on ZXR10 2920 2928 2952 5116 FI 5124 FI Examples In the following instance it shows configurations of IP addresses of sFlow proxy and collector and it enables the sample flow function on port 1 zc em cb ss wen acne sb 168 I 1 zte c o tset stilow collector address 192 168 il 2 ZLe erg set srlow Ingress port 1 on requency 20000 zte c fol rset CONES iL 2 on s cr mov 20000 zte cfg Use command show sflow
289. ode This is shown in Table 194 TABLE 194 CONFIG ACL HYBRID COMMAND Format Mode Function config acl hybrid global config This enters into number lt acl Hybrid ACL number gt Result This enters into Hybrid ACL To configure the rules of ACL use command rule lt rule id permit deny lt ip protocol ip tcp udp arp lt source ipaddr wildcard any source port sourceport mask gt lt destination ipaddr wildcard gt any dest port destport mask dscp fragment ether type lt proto number gt cos source vlanId lt source mac wildcard any destination mac wildcard any in ACL config mode This is shown in TABLE 195 RULE COMMAND Format Mode Function rule lt rule id gt permit deny lt ip protocol gt ip tcp udp arp lt source ipaddr wildcard gt any source port sourceport mask 4 destination ipaddr wildcard gt any This enters into dest port destport ACL coms ACL rules mask dscp fragment ether type lt proto number gt cos source vlanId source mac wildcard gt any destination mac wildcard any Result This enters into ACL rules END OF STEPS Hybrid ACL has been configured Configuring Global ACL This topic describes the configuration of global ACL Confidential and Proprietary Information of ZTE CORPORATION 129 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZT
290. ode Function set port Pome Sone This sets port description description config lt string gt Result This sets port description 17 To set port s macaddress use command set port lt portlist gt macaddress on lt 1 16 gt off in global configuration mode This is shown in Table 49 TABLE 49 PORT JUMBO COMMAND Format Mode Function set port lt portlist gt Global macaddress config This sets port s macaddress on lt 1 16 gt off Result This sets port s macaddress 18 To set the ACL info use command set port lt portlist gt acl lt acl number gt enable disable in global configuration mode This is shown in Table 50 TABLE 50 CREATE PORT COMMAND Format Mode Function set port lt portlist gt acl Global lt acl number gt This sets the ACL info config enable disable Result This sets the ACL info 19 To set port vlanjump use command set port lt portlist gt vlanjump enable defaultauthvlan lt 1 4094 gt disable yin global configuration mode This is shown in Table 51 TABLE 51 PORT DESCRIPTION COMMAND Format Mode Function set port portlist vlanjump Global enable This sets port vlanjump defaultauthvlan 1 config 40942 disable Result This sets port vlanjump 72 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 7 Service Configuration 20 To set port trust up use command set port lt portlist gt 21 tr
291. ommand esses 72 Table 51 Port Description Command enn 72 Table 52 Port Description Command een nnn 73 Table 53 Port Description Command enn 73 Table 54 Show Port Command eeeeeeen mnm 74 Table 55 Show Port Vlan Command eee ee eere 74 Table 56 Show Port Statistics Time Command 74 Table 57 Show Port QoS Command eennn mnn 74 Table 58 Show Port Bandwidth Command 75 Table 59 Set Mirror Command eeeueee err 76 Table 60 Delete Mirroring Port Command eese 76 Table 61 Set Mirror Dest Port Command 76 Table 62 Set Mirror Delete Dest Port Command 76 Table 63 Show Mirror COMMANG cccccceeeceeeeeeeeeeeeeeeeeeeeeees 77 Table 64 Clear Vian Command esee 78 Table 65 Create Vian Command eene 78 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Tables Table 66 Set Port Pvid Command een 79 Table 67 Set Trunk Pvid Command erre 79 Table 68 Set Vlan Command eeeeeeeeenn mnm 79 Table 69 Set Vian Add Port Command eese 79 Table 70 Set Vian Add Trunk Command s 80 Table 71 Set Vi
292. ommand set enginelD in SNMP config mode This is shown in Table 377 TABLE 377 SET ENGINEID COMMAND Format Mode Function set enginel D SNMP config This sets engine identifier Result This sets engine identifier Note EngineID identifies a SNMP entity uniquely When it is changed configurations of primary engineID don t work any longer To set the address community name and version of trap or inform host use command set host in SNMP config mode This is shown in Table 378 TABLE 378 SET HOST COMMAND Format Mode Function set host SNMP config This sets address Result This set address community name and version of trap or inform host Host is destination IP address sending by trap or inform It can designate the version of trap and inform and community or user To enable disable SNMP trap use command set trap in SNMP config mode This is shown in Table 379 TABLE 379 SET TRAP COMMAND Format Mode Function set trap SNMP config This enable disable SNMP trap Result This enable disable SNMP trap gt When it is enabled operation as described in 5 above occurs a trap is sent to the management console The cold start and warm start traps are sent to management Confidential and Proprietary Information of ZTE CORPORATION 229 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTE B 10 11 12 13 console only after the system is started In general there is a delay of s
293. on mode This is shown in Table 301 TABLE 301 CLEAR POLICY STATISTICS COMMAND Format Mode Function clear policy global config This clears policy of statistics in statistics sginq session 1 256 Result This clears policy of statistics To apply SQinQ session to port use command set port lt portlist gt sqinq session lt sessionlist gt enable disable in global configuration mode This is shown in Table 302 TABLE 302 SET PORT SQINQ SESSION COMMAND Format Mode Function set port lt portlist gt global config This applies SQinQ sqing session session to port lt sessionlist gt enable disable Result This applies SQinQ session to port Confidential and Proprietary Information of ZTE CORPORATION 183 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Result Example 11 To clear SQinQ session in port use command clear sqing session lt sessionlist gt in global configuration mode This is shown in Table 303 TABLE 303 CLEAR SQINQ SESSION COMMAND Format Mode Function clear sqing global config This clears SQinQ session session in port lt sessionlist gt Result This clear SQinQ session in port 12 To view parameters of SQinQ session use command show sqginq session lt sessionlist gt in global configuration mode This is shown in Table 304 TABLE 304 SHOW SQINQ SESSION COMMAND Format Mode Function show sqinq global config This views session parameters of l
294. onfidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 9 Network Management FIGURE 48 PORT STATE INFORMATION E ZTE switch Microsoft Internet Explorer E x THO SD EEM BEA IAD BH Ea eRe gt Q2 a aLr wax ques GA 5 w H dr HR AD HAHEI http 192 168 1 2 index htm UID 8001 12 cp BAR ORB dide T A ZXR10 5124 FI Configuration gt System ZTE 7XR105124 FI gt Port State gt Port Parameter Console 3 ete Bey SVAN o ERE P Mirror x Monitoring b Terminal Log Portld PortClass LinkState Duplex Speed Port Statistics 1 802 3 down half 10Mbps Running Config 2 802 3 down half 10Mbps rro id 3 802 3 up full 100Mbps b Reboot 4 802 3 down half 10Mbps gt Upload 5 802 3 down half 10Mbps gt User Manager 6 802 3 down half 10Mbps 7 802 3 down half 10Mbps 8 802 3 down half 10Mbps 9 802 3 down half 10Mbps 10 802 3 down half 10Mbps 11 802 3 down half 10Mbps 12 802 3 down half 10Mbps 13 802 3 down half 10Mbps 14 802 3 down half 10Mbps 15 802 3 down half 10Mbps 16 802 3 down half 10Mbps 17 802 3 down half 10Mbps 18 802 3 down half 10Mbps 19 802 3 down half 10Mbps All rights reserved 20 802 3 down half 10Mbps GZTE Corporation 21 802 3 down half 10Mbps M e EE EH Intranet gt Detail of Port status of Figure 48 is given below in Table 429 TABLE 429 PORT PARAMETERS DETAIL Note When port state is linkdown the items Duplex
295. onfiguration mode as shown below Wee OE recon iog Nas zte cfg nas Note In the NAS configuration mode configuration of switch access service including user access authentication and management 2 To return to the global configuration mode from the NAS configuration mode use command exit or press Ctrl Z END OF STEPS NAS mode has been configured Configuring Cluster Management This topic describes the cluster management configuration mode For the configuration of cluster management perform the following steps 1 In the global configuration mode execute command config group to enter the cluster management configuration mode as shown below Confidential and Proprietary Information of ZTE CORPORATION 43 44 Result Purpose Steps Result Purpose Steps ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH zee Co on ILC ORE ODIO zte cfg group Note In the cluster management configuration mode configuration of switch cluster management service 2 To return to the global configuration mode from the cluster management configuration mode use command exit or press Ctrl Z END OF STEPS Cluster management is configured Configuring Basic ACL This topic describes the basic ACL configuration mode For the configuration of basic ACL perform the following steps 1 Inthe global configuration mode execute command config acl basic number lt 1 99 gt to ente
296. ort and export function has been configured Setting File Backup and Recovery This topic describes the procedure of file backups and recovery To backup files and recover meet the following requirements To do Data backup and Recovery there must have an access to Command Line Interface CLI CLI is a text based interface that can be accessed through a direct serial connection to device and through telnet connections Make sure the TFTP server is up and running as described above For file backup and recovery perform the following steps 1 Use command saveconfig in global configuration mode This is shown in Table 30 Note When a command is used to modify the switch configuration data is running in the memory of the switch When the switch is restarted all the contents newly configured will be lost In order to save the current configuration into the FLASH memory TABLE 30 SAVECONFIG COMMAND Format Mode Function This saves the current saveconfig config configuration into the FLASH memory Result This saves the current configuration into the FLASH memory Example The following shows the saveconfig command zte cfg saveconfig To prevent damage to the configuration data use command tftp in file system configuration mode This is shown in below table Format Mode Function tftp lt A B C D gt File download upload system This uploads or downloads a l version through TFTP lt name gt config
297. ory command in the buffer backward In the privileged mode execute the show history command to list the commands input the latest in this mode Function Key ZXR10 2920 2928 2952 provides a lot of functional keys for the user interface to facilitate user operations Functional keys are shown in Table 19 TABLE 19 FUNCTIONAL KEYS Functional Use Key g Recover the last command Roll back in the Ctrl P or historical records of commands Recover the next command Roll forward in the Ctrl N or Vv historical records of commands Ctrl B or Move left in the command line currently indicated by the prompt Ctrl F or gt Move right in the command line where the prompt is currently located Display commands starting with the character or Tab string If there is only one command make this command a complete one Ctrl A Skip to the beginning of the command line Ctrl E Skip to the end of the command line Ctrl K Delete the characters from the cursor to the end SONO Delete the character on the left of the cursor Backspace Cancel the command and display the prompt Ctrl C character Ctrl L Clear screen Ctrl Y Recover the last command executed Ctrl Z Return to the global configuration mode When the command output exceeds one page output is split into several pages automatically and the prompt more Press Q or Ctrl C to break appears at the bottom of current page Press any key to turn pages or press
298. ose This manual provides procedures and guidelines that support the ZXR10 2920 2928 2952 Intended Audience This manual is intended for engineers and technicians who perform operation on Layer 2 switches Prerequisite Skill and Knowledge To use this document effectively users should have a general understanding of Layer 2 Switches and protocols This is Volume 1 and the Volume 2 is based on Commands Familiarity with the following is helpful Virtual Local Area Network Link Aggregation Control Protocol Spanning Tree Protocol m Access Control List What Is in This Manual This manual contains the following chapters TABLE 1 CHAPTER SUMMARY Chapter Summary Chapter 1 Safety This chapter introduces the safety Instruction instructions and sign descriptions Chapter 2 System This chapter introduces the produce Overview overview functions and technical features Chapter 3 Structure This chapter introduces the working Confidential and Proprietary Information of ZTE CORPORATION i ZXR10 2920 2928 2952 V1 00 Access Switch User Manual Volume D Chapter and Principle Chapter 4 Installation and Debugging Chapter 5 and Operation Usage Chapter 6 System Management Chapter 7 Service Configuration Chapter 8 Network Management Chapter 9 Maintenance Conventions Typographical Conventions ZTEDR Summary principle technical and hardware structural information on each of the Z
299. ot state and press Enter to enter the parameter modification status Set the IP addresses of the Ethernet port and the TFTP server Generally these two addresses are set to the same network segment 60 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 3 A Chapter 6 System Management PAX IO sso Ee Ils Ip eS selear sb ds n EG OIEE ONE DI CN OMS field DRE boot device wbdEndl1 ves the default value s puces ou re 3 0 Use the default value 7405 host name ONES 2 sre the default value o file name vxWorks v Use the default value T inet on ethernet e 10 AO o 89 IROI aP acodeees od Clie Jil edes ot Lmect Om bac kp eue Uo x Use ehe e aaa e ser le pes erste shine A a LO AQ o B 9 o 78 ME address ori che TETE Ee c MS gateway inet 9 SEHE 40 oo Wes GB tche dercauli value user u Use che cderaalre value ftp password pw blank use rsh Use the cdera ulre value clags ie 0x80 5 Wise the default value Le target name EN x Use the default value EA Sra UNDE S C aah One e x Use the default value ee orher o Use the default value s E se 0e BOOT Set the IP address of the background host as the same with the IP address of the above TFTP server Start the TFTP server software on the background server and configure the TFTP server as per description in Configuring ZXR10 2920 2928 2952 as an TFTP Client In the ZxR10 Boot
300. otection BPDU protection root protection amp loop protection Configuring STP This topic describes the STP configuration In the default configuration MSTP only has the instance with ins id as O This instance always exists and cannot be manually deleted This instance is mapped with VLANs 1 to 4094 For the configuration of STP perform the following steps 1 To clear the STP instance use command clear stp instance 0 15 in global configuration mode This is shown in Table 151 TABLE 147 SET STP COMMAND Format Mode Function clear stp instance Global config This clear the STP 0 15 instance Result This clears the STP instance 2 To clear the STP instance port cost use command clear stp instance 0 15 port lt portname gt cost in global configuration mode This is shown in Table 151 TABLE 148 SET STP COMMAND Format Mode Function clear stp instance Global config This clear the STP lt 0 15 gt port instance lt portname gt cost Result This clears the STP instance Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 6 Chapter 7 Service Configuration To clear the STP trunkcost use command clear stp instance 0 15 trunk lt trunkid gt cost in global configuration mode This is shown in Table 151 TABLE 149 SET STP COMMAND Format Mode Function clear stp instance lt 0 Global config This clear the 15 gt trunk lt trunkid gt cost STP instance trunkcost Result This cle
301. p Detect Send Command 297 Table 445 Show Loop Detect Command eene 297 Table 446 Serial Port Attribute seeeeeeeee eene eee 298 Confidential and Proprietary Information of ZTE CORPORATION 325 This Page is intentionally blank 326 Confidential and Proprietary Information of ZTE CORPORATION Index AC power cable 24 BC ECL oaa 7 126 127 128 Console port 26 Control Module 10 Crossover RJ45J cable 27 DC power cable 24 pol ore 46 Q5 85 FIP SerVelsescxeenvir a uses 54 hardware cece cceseeueeeeueeueenees 11 IEEE 002 1Q rticssecersiaucasane 147 IGMP snooping 93 cem P 55 Internet Protocol television APT stone ce MERE RneU P bIR 103 IP address 37 127 147 Isolated port 147 148 local safety sees 1 Media Access Control MAC 85 NMS ersan 309 Power Module 10 Promiscuous port 147 PVLAN cceeeeeeees 147 148 152 OCS tari eins 5 126 RMON Tr 6 safety instructions i 1 security control 5 Simple Network Management Protocol SNMP 38 Straight through RJ45 27 Switching module 10 Telnet 37 38 39 40 52 53 54 57 TFTP server 54 56 57 VLAN eeernmm 80
302. p name gt server ip lt A B C D gt in nas config mode This is shown in Table 288 TABLE 288 SHOW RADIUS COMMAND Format Mode Function show radius nas config This displays ispName RADIUS ispname accounting stop session id lt session id gt user name lt user name gt isp name lt isp name gt server ip A B C D gt Result This displays RADIUS configuration configuration END OF STEPS 1 RADIUS has been configured on ZXR10 2920 2928 2952 This example describes how to enable 802 1x function of port Set quiet period to 60 seconds tx period to 30 seconds Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 8 Access Service Supp timeout to 30 seconds and server timeout to 30 seconds Enable keepalive function and set keepalive interval to 10 seconds zte cfg nas aaa control port 1 dotlx enable zte cfg nas dotlx quiet period 60 zte cfg nas dotlx tx period 30 zte cfg nas dotlx supplicant timeout 30 zte cfg nas dotlx server timeout 30 zte cfg nas aaa control port 1 keepalive enable zte cfg nas aaa control port 1 keepalive period 10 zte cfg nas fShow aaa Control 1 tene ILC 1 IEXoxice tom Te E auto DORP enabled Auc Nene e a Eron Protocole KeepAlive enabled KeepAlivePeriod lt 10 ACcCountIng disabled MultipleHosts disabled MaxHosts 8 HistOryHosestl otal OnlineHosts 2 zte Cfo nas Ss Mow doLllx TxPeriod 3 30
303. password p Confirm p Apply Return Logout All rights reserved GZTE Corporation 2 sete EE EH Intranet 2 Click Apply to submit Note Page is user modification page by default The login password and management password of users can be modified in this page but the current management password should be inputted before modification 3 Click Add in the user management page to open the adding user page as shown in Figure 73 288 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 9 Network Management FiGURE 73 ADDING USER le x TE MAD SEV KAW TAD aH SAE gt OAA Que wren Qus d B 3 w s AD Hihk D f http 192 168 1 3 index htm UIID 800112 LTEDX Configuration gt System ZTEPM ZXR10 5124 F Port 1 VLAN Q3 PVLAN Mirror Console 3 3 5 Y Lacp 120 Refresh Monitoring gt Terminal Log User Manager gt Part Statistics z Running Config Modify Add Delete Maintenance gt Save Your admin password p gt Reboot gt Upload gt User Manager RA PIC EARS ww CHR ki E Add userto the switch User name usemame User role guest Login password rm Confirm prm Apply Return Logout All rights reserved ZTE Corporation E THE EE EH Intranet 4 Input the management password of the current user and add and confirm the information of added user then click Apply t
304. plays ZESR domain configuration Note This command displays configuration in signal ZESR domain To display configurations in all ZESR domains use command show zesr domain in global configuration mode This is shown in Table 364 TABLE 364 SHOW ZESR COMMAND Format Mode Function show zesr domain global config This displays configuration in all ZESR domains Result This displays configuration in all ZESR domains Note This command displays configuration in all ZESR domains END OF STEPS ZESR has been configured This example describes instance configuration in ZESR domain mode transit leases owe Ss secondary port 6 adel prorcect vlan 110 115 2 Z Z zte Cig tset zesir domain 2 add control vlan N00 2 2 zte cfg set zesr domain enable The following instance shows configuration information in ZESR domain zte cfg show zesr domain 1 ZESR domains 1 Ring state Up Domain enabled Yes Node mode Master Xue us Pore 9 Port state Forward Secondary port 4 Port state Block AE oR Dona I n C On ro aan 10 ZESR Domain protected vlan 1y 20 30 In the following instance primary and secondary ports as trunk ports it sets the switch as master and set Confidential and Proprietary Information of ZTE CORPORATION 215 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I 216 Zeer show es 6 domain ZESR domains 2 ZTEDR Ring state Down Domain enabled No Primary ques
305. pore 1 zte loro toet vlan 20v eiclel port ip 10 zi IUE coude om SEM zee CrO sema cl pore NND zie Cn roset por lO puke 00 aes Cine ssc pori IL pvid 210 zte cdrom gt pyd Z 0 Zee Eo e ee oore E CU mee c uw EE NES MEME zte cfg set igmp snooping enable ZTEmA 5 10 untag untag untag untag enable zte cro Sere seme oao ae a ad wilem 22919 IE OE zte Cfo fset I19gmp snooping Crossvlan disable Multicast snooping result zte cfg show igmp snooping vlan Num VlanId Group PortMember 1 20 224 i de jJ 1 1 2 Zo 224 e i 1 2 3 E 2 910 224 IL de 1 9 5 OZ Ze ic 2E cU Last_Report TOST ile Ive fies Eoee 1 s Enable multi VLAN IGMP snooping function of the switch and display the snooping results Zee Che s cNempassmeo psc eress 7 lan enable zte cfg show igmp snooping vlan Num Vlanid Group Last _ Report PortMember i 210 goa i i i 192 168 qv 1 i 2 20 DOA 1 ile 1 192 168 i 2 3 3 250 DOs i i 1 192 168 1 3 5 4 200 DOA iL i i 192 168 i 3 Le oe Sp UC This example describes IGMP snooping and filter Port 1 3 5 connected to the host Port 10 is connected to the router Port 1 3 5 join port 10 to Vlan 200 Port 1 3 5 on user transmits the group address separately for 230 44 45 167 230 44 45 157 multicast joins the request increases 100 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 7 Service Configuration
306. port Vlan Command enn 152 Confidential and Proprietary Information of ZTE CORPORATION 319 ZTEDR ZXR10 2920 2928 2952 V1 00 Access Switch User Manual Volume I Table 245 Set Ipport Mac command enn 152 Table 246 Set Ipport Enable Disable Command 152 Table 247 Arp Add Command eem nnn 154 Table 248 Arp Delete Command een 155 Table 249 Clear Arp Command eeennnn mnn 155 Table 250 Arp Ipport Timeout Command enne 155 Table 251 Arp Ipport Timeout Command eene 155 Table 252 Arp Ipport Timeout Command enne 156 Table 253 Show Arp COMMANG cccccceeseeeeueeeeeeseeeeeeeguenes 156 Table 254 Show Arp Command eeennn nnn 156 Table 255 Show Arp Command seeeeennn nnn 156 Table 256 Show Arp Command een 157 Table 257 AAA Control Port Command see 163 Table 258 AAA Control Port Mode Command 163 Table 259 AAA Control Port Multiple Host Command 164 Table 260 AAA Control Port Max Hosts Command 164 Table 261 Dot1x Re authentication Command 164 Table 262 Dot1x Re Authentication Period Command 165 Table 263 AAA Control port Keepalive command 165 Table 264 AAA Control Port Keepalive Period 165 Table 265 AAA Control Protocol
307. port number END OF STEPS This troubleshoots web management Troubleshooting the Switch through Web This topic describes the troubleshooting of switch through web User name and password set on the switch is different with the one input on the host For the troubleshooting of switch through web perform the following step 1 Examine the configuration of the switch and input the right user name and password END OF STEPS Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 10 Maintenance Result This troubleshoots the switch through web Troubleshooting the User Name Password Purpose This topic describes how to troublshoot the user name password Prerequisite In logging in to the switch the entered user name or password iS incorrect Steps For troubleshooting of user name password perform the following steps 1 Confirm whether system administrator can find original user name and password If the user name and password cannot be found restart the switch and delete the configuration file Restart the switch and press any key according to the prompt to enter the boot status in the HyperTerminal Welcome to use ZTE eCarrier Copy el e OA DOS ZB COs e sc Oe System Booting CPUS SIN Version VxWorks5 5 1 BOI wcesssaous Is 27 eco Creavwom dater Aug 1 2006 09 40 27 Press amy Key to stop auto boot 7 Ip EE Od b gt In the boot status enter zte to ente
308. ps 1 To enter in L2 ACL configuration use command config acl link number lt acl number gt in global configuration mode This is shown in Table 192 TABLE 192 CONFIG ACL LINK COMMAND Format Mode Function config acl link global config This enters into L2 number lt acl ACL configuration number gt mode Result This enters into L2 ACL configuration mode To configure the rules of ACL use command rule lt rule id gt permit deny ip arp other any ether type lt protocol number gt dsap ssap cos source vlanid lt source mac wildcard gt any destination mac wildcard gt any in ACL config mode This is shown in Table 193 TABLE 193 RULE COMMAND Format Mode Function rule lt rule id gt permit deny ip arp other any ether type lt protocol number gt dsap ACL config This configures ACL ssap cos rules source vlanid i source mac wildcard any destination mac wildcard gt any Result This configures ACL rules END OF STEPS L2 ACL has been configured Configuring Hybrid ACL This topic describes the configuration of Hybrid ACL For the configuration of Hybrid ACL perform the following steps 128 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Result Purpose 1 Chapter 7 Service Configuration To enter into Hybrid ACL use command config acl hybrid number lt acl number gt in global configuration m
309. r switch Many residential buildings with proper grounding have a grounding resistance of 1 ohm If the test shows that grounding system is not up to standard It is recommended to equip an independent grounding post and the grounding cable must be of 16 mm2 in diameter and as Short as possible What ever grounding method is used the grounding resistance must be less than 5 ohm and cannot exceed 10 ohm It is prohibited that switch directly gets power from outdoor overhead power cable If switch gets direct power from outdoor overhead power cables special lightning protection measures must be taken into account Lightning protection Confidential and Proprietary Information of ZTE CORPORATION 33 34 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH socket and lightning protection bar must be added to power supply Lightning protection bar for power supply must have better lightning protection index than that for port cable Note Ethernet switch suffers lightning strike due to grounding power supply and wiring Lightning strike lead in mechanism also varies a lot Taking one measure does not prevent lightning strike Therefore several measures must be implemented at same time Proper grounding appropriate power supply reasonable wiring and suitable lightning protection measures will definitely reduce chances of switch damage resulted from lighting strike Confidential and Proprietary Information of Z
310. r switch can access TFTP Server by directly accessing command switch Configuring Access and Control Cluster Members This topic describes the configuration of access and control cluster members For the configuration of access and control cluster members perform the following steps 1 To switch from command switch to a specified member switch use command rlogin member lt 1 255 gt in privileged mode This is shown in Table 419 TABLE 419 RLOGIN MEMBER COMMAND Format Mode Function rlogin member privileged mode This switches from 1 255 command switch to a specified member switch Result This switches from command switch to a specified member switch Confidential and Proprietary Information of ZTE CORPORATION 253 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH 2 To switch from a member switch to command switch use command rlogin commander in privileged mode This is shown in Table 420 TABLE 420 RLOGIN COMMANDER COMMAND Format Mode Function rlogin privileged mode This switches from commander a member switch to command switch Result This switches from a member switch to command switch To download upload versions through TFTP on command switch use command tftp commander download upload name in privileged mode This is shown in Table 421 TABLE 421 TFTP COMMANDER COMMAND Format Mode Function tftp commander privileged mode This download upload download up
311. r into basic ACL configuration mode as shown below Zee CEG COonEIg acl Dasic number 10 zte bastc acl group Note In the basic ACL configuration mode it is possible to add delete move the ACL rule for the specified ACL id 2 To return to the global configuration mode from basic ACL configuration mode use command exit or press Ctrl Z END OF STEPS Basic ACL is configured Configuring Extended ACL This topic describes the extended ACL configuration mode For the configuration of extended ACL perform the following steps 1 In the global configuration mode execute command config acl extend number lt 100 199 gt to enter into extended ACL configuration mode as shown in zte ciol tCOnNELg acl extend number 200 zte extend acl group Note Extended ACL configuration mode includes configuring ACL parameters and moving ACL rule sequence id 2 To return to global configuration mode from the extended ACL configuration mode use command exit or press Ctri Z Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Purpose Steps Result Purpose Steps Online Help Purpose Chapter 5 Usage and Operation END OF STEPS Extended ACL is configured Configuring L2 ACL Mode This topic describes the L2 ACL configuration mode For the configuration of L2 ACL perform the following steps 1 In the global configuration mode execute command config acl link num
312. r members in switch network GVRP GARP VLAN Registration Protocol is a kind of protocol defined by GARP GVRP can dynamically maintenance information of VLAN in switches One switch which supports GVRP can receive information of VLAN registration from other switches and dynamically update local information of VLAN registration including current VLANs in switch and interfaces in these VLANs Confidential and Proprietary Information of ZTE CORPORATION 189 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Purpose Steps One switch which supports GVRP also can send local information of VLAN registration to other switches Configuring GARP This topic describes the configuration of GARP For the configuration of GARP perform the following steps To enable disable GARP use command set garp in global configuration mode This is shown in Table 315 TABLE 315 SET GARP COMMAND Format Mode Function set garp global config This enable disable GARP Result This enable disable GARP Note By default GARP is disabled To set timer of GARP use command set garp timer hold join leave leaveall timer value in global configuration mode This is shown in Table 316 TABLE 316 SET GARP TIMER COMMAND Format Mode Function set garp timer global config This sets timer hold join leave leaveall of GARP timer value Result This sets timer of GARP Note There are four kinds of timer i
313. r of the flux monitor use command set qos policer 0 255 counter 0 15 enable disable yin global configuration mode This is shown in Table 203 TABLE 205 SET Qos PoLicER PARAMETERS COMMAND Format Mode Function set qos policer 0 255 counter 0 15 enable disable This configures the global config promise speed of flux monitor Result This configures the policer counter of flux monitor To configure the overspeed disposal of the flux monitor use command set qos policer 0 255 exceed action ino operation drop in global configuration mode This is shown in Table 203 TABLE 206 SET QOS POLICER PARAMETERS COMMAND Format Mode Function set qos policer 0 255 counter 0 15 enable disable This configures the global config overspeed disposol of flux monitor Result This configures the overspeed disposal of flux monitor To configure the ingress session rate of the flux monitor use command set bandwidth feport lt portlist gt ingress session 0 3 rate lt 64 100000 gt in global configuration mode This is shown in Table 203 TABLE 207 SET Qos PoLicER PARAMETERS COMMAND Format Mode Function set bandwidth feport lt portlist gt This configures the ingress session global config ingress session rate 0 3 rate 64 of flux monitor 100000 Result This configures the ingress session rate of flux monitor To configure the ingress session packet type of the flux monitor
314. r the BootManager status of the switch Enter to get command help Confidential and Proprietary Information of ZTE CORPORATION 301 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Iz p OEOOt te NOTE Bootline not saved to NVRAM boot device marfec unit number O processor number T host name TTO file name 7 VxWorks inet on ethernet e 10 ZUM 89 206 host inet h 2 10 AQ o 89 204 gateway inet g sO 40 eo 204 user u 3 5124 ftp password pw 5124 flags f 3 0x0 other o 3 MACO 00 32345672893809 Attached TCP IP interface to marfec Warning no netmask specified Attaching network interface lo0 done Arta hime ie Oe ERES test flash passed perfectly MarvellDx has been initialized Welcome to boot manager Jb exe Oye help BootManager Run del command to delete the configuration file and then restart the switch v BootManager 1s KERNEL RUNNING CEG Config El BootManager del running cfg BoormManager sdel Contig exe BootManager reboot After the switch is restarted use the default user name and password to log in to the switch 302 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Purpose Steps Result Purpo se Prerequisites Steps Chapter 10 Maintenance Please Press any Key Co Start Welcome EM ty CO 16 eNevia ee 3E COD All rights reserved Poona Sei al ial Dias GOR m SS
315. ration Result This displays ZTP configuration To display details of specified device according to MAC address use command show ztp mac in group config mode This is shown in Table 405 TABLE 405 ZTP MAC COMMAND Format Mode Function show ztp mac group config This displays detail of specified device according to MAC address Result This displays detail of specified device according to MAC address To display topology information table use command show ztp device lt idlist gt in group config mode _ This is shown in Table 406 TABLE 406 SHOW ZTP DEVICE COMMAND Format Mode Function show ztp device group config This displays lt idlist gt topology information table Result This displays topology information table Note Device ID offered by topology information table is the temporary ID that is generated based on current topology information collection result With the purpose of facilitating display and cluster management it is effective to current topology information collection result only END OF STEPS ZTP has been configured Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Purpose Steps Chapter 9 Network Management Configuring Cluster This topic describes the cluster configuration Unique ID of a cluster consists of VLAN where cluster is located and MAC address of command switch For the configuration of cluster perform the following steps L To set candid
316. re megabit L2 Ethernet switch providing gigabit upward Ethernet ports They can provide different quantity of amp interface types of Ethernet port mainly located at megabit access amp converge to provide fast efficient and cost effective access and convergence solutions Port amp insert card expanding instance that ZXR10 2920 2928 2952 switch series support are as follows Confidential and Proprietary Information of ZTE CORPORATION 4 Features ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH ZXR10 2920 support sixteen 100M amp four 1000M ports m ZXR10 2928 support twenty four 100M amp four 1000M ports ZXR10 2952 support forty four 100M amp four 1000M ports Note 2920 amp 2928 support insert card expand ZXR10 2920 2928 2952 switch series have the following characters owitching Capability All the ports of ZXR10 2920 2928 2952 megabit switch series support the layer 2 switching at wire speed The filtration and stream sort transact based on port do not weaken the switching capability Ports provide high throughput packet discarding rate time delay and dithering can satisfy the demand of the key application Reliability and characteristics ZXR10 2920 2928 2952 megabit switch series ensures the link redundancy backup through STP RSTP MSTP RSTP switching that is based on IEEE 802 1w ensures the usability of the network These switches support the LACP function of 802 3ad func
317. re revu EUER EUPUEE UE etter 288 Chapter 10 sourris ER EES E RRE RMERERNYEFRENEI RENS RIMENERENEN RENS 291 MAINTSN ANGE PETIT PITT TID DI E 291 OVELVIOW satiren a oA wide Sie ea Sinis Mp LE DS OE EU Sopa Mobi cun 291 Routine Maintenance siminer nexu Settrexaa nM Ua SENVMEE ENS Mr du dE 292 Daily Routine Mallitenmallees seates bored a OUEST LE DUIS Cima a DR 292 Monthly MaintenaNCE cessvepet Voeux pePrrEDbkE GE CPU eiae OUI Edi M 292 Maintenance Period 2 to sueseres imaa RUD uad nus cei ad ctp Ra dps 293 Single Loop Test Method oa x c ian o a deli CR ACER 294 Configuring Single Port Loop Tests esioavetekuu ente etae P 294 WIPCUalCIRCUIE OSU m 297 Common CFOUDISSNOOUNG oos tieb s Ra do atbk Uli e acide dt me dara was 298 Troubleshooting through Console Port c eene 298 Troubleshooting through Telnet 52 09 dato VER a R eos EEE S 299 Troubleshooting a Telnet connection with switch 299 Troubleshooting the DIOWSER ect iheucradss indt eun rrr RR d A as 300 Troubleshooting the Switch through Web 300 Troubleshooting the User Name Password eene 301 Troubleshooting Password 1x xax ER RTRSERESTER RR REC uM A NIRE 305 Troubleshooting a Device Connection eene 303 Abbreviallolis uisi Eia iui cx oPx RI IRIE EREEENORR E EKEU EUIS EN OF AXRU MEUS 305 Acronyms and Abbreviations isqe iod Vx eon ip A VERE EDEN 305 GN NSS ae E 313 About This Manual Purp
318. red The login password of the switch is set to null For the troubleshooting o logging into switch through Telnet perform the following steps 1 Set a non null login password END OF STEPS This sets a non null password of the switch Confidential and Proprietary Information of ZTE CORPORATION 299 300 Purpose Prerequisites Steps Result Purpose Prerequisite Steps ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Troubleshooting the browser This topic describes the troubleshooting of web management after opening the web browser To troubleshoot web management meet the following requirements Browser version is too old to support it Address and port number is written wrong in the browser address fence There is a communication fault between the host and the equipment Switch management port is not set or the IP address is not set in a correct way Web management function of the switch is not enabled For the troubleshooting of web management perform the following steps 1 Update the browser version The version should be above 4 0 Examine the configuration of the host to get the right IP address and port number Examine the connection between the host and the equipment to make sure that the communication is normal Set the right management port on the switch and the right IP address Enable web management function of the switch and set the
319. riable can be configured only when object to be sampled specified by alarm variable can sample data Status can be set to valid only when alarm variable is configured successfully Confidential and Proprietary Information of ZTE CORPORATION 237 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH 6 To query RMON status and configuration information use the follwing commands in SNMP config mode as shown in Table 391 TABLE 391 SHOW RMON COMMANDS Format Mode Function show rmon SNMP config This displays RMON status show history SNMP config This displays configuration information about history group show statistic SNMP config This displays configuration information about Statistic group show event SNMP config This display configuration information about event group show alarm SNMP config This display configuration information about alarm group Result This displays RMON status history group statistics group event group and alarm group END OF STEPS Result RMON through a HyperTerminal or remote Telnet has been configured Example Following examples describe how to set event 2 history 2 alarm 2 and statistics 1 respectively 238 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA zte cfg snmp set zte cfg snmp set zte cfg snmp set zte cfg snmp set zte cfg snmp set zte cfg snmp set zte cfg snmp set zte cfg snmp set zte cfg sn
320. router config mode This is shown in Table 250 TABLE 251 ARP IPPORT TIMEOUT COMMAND Format Mode Function arp ipport 0 63 router config This sets ARP table timeout lt 1 1000 gt entry aging time of the IP port Result This deletes the iproute configuration To add the iproute use command add iproute lt A B C D M gt lt A B C D gt lt A B C D gt lt A B C Confidential and Proprietary Information of ZTE CORPORATION 155 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH D gt 1 15 in router config mode This is shown in Table 250 TABLE 252 ARP IPPORT TIMEOUT COMMAND Format Mode Function Add iproute lt A router config This sets ARP table B C D M gt lt A entry aging time of B C D A B the IP port C D gt A B C D lt 1 15 gt Result This adds the iproute 7A To view ARP table entries use command show arp static dynamic invalid ipport lt 0 63 gt static dynamic invalid ipaddress lt A B C D gt in router config mode This is shown in Table 253 TABLE 253 SHOW ARP COMMAND Format Mode Function show arp router This views static dynamic invalid ipport O config ARP table 63 static dynamic invalid entries lipaddress A B C D Result This views ARP table entries 8 To view ARP info use command show arp static dynamic invalid ipport 0 63 static dynamic invalid ipaddress lt A B C D gt i
321. rp trunk lt trunklist gt f enable disable in global configuration mode This is shown in Table 321 TABLE 321 SET GVRP TRUNK COMMAND Format Mode Function set gvrp trunk global config This enable disable lt trunklist gt GVRP in trunk port enable disable Result This enable disable GVRP in trunk port Note By default GVRP in trunk port is disabled After enabling GVRP in trunk port the port can receive packets of GVRP protocol To configure trunk port and GVRP registration type use command set gvrp trunk lt trunklist gt registration normal fixed forbidden in global configuration mode This is shown in Table 322 TABLE 322 SET GVRP TRUNK REGISTRATION COMMAND Format Mode Function set gvrp trunk lt trunklist gt global config This configures registration trunk port and normal fixed forbidden GVRP registration type Result This configures trunk port and GVRP registration type Note By default type of GVRP registration in trunk port is normal There are three kinds of registration type in trunk port Functions of them are same as that in port To show GVRP configuration information use command show gvrp in global configuration mode This is shown in Table 323 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Example Chapter 8 Access Service TABLE 323 SHOW GVRP COMMAND Format Mode Function show gvrp global config This shows GVRP configuration information
322. rt lt portlist gt name statistics descripti Global on config This clear port name statistics data Result This clear port name statistics data 2 To create port description name use command create port portname name lt name gt in global configuration mode This is shown in Table 35 TABLE 35 AUTO SENSING COMMAND Format Mode Function clear port lt portlist gt This creates port 1 Global Me name statistics descripti Config description on I name Result This creates port description name 3 To enable or disable the port use command set port lt portlist gt enable disable in global configuration mode This is shown in Table 36 TABLE 36 WORK MODE COMMAND Format Mode Function Set pore Global lt portlist gt This enables or disables the port enable disable 9 Result This enables or disables the port 4 To set the port auto use command set port lt portlist gt auto enable disable in global configuration mode This is Shown in Table 37 68 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 7 Service Configuration TABLE 37 DUPLEX COMMAND 5 Format Mode Function set port lt portlist gt auto eoa This sets the port auto config enable disable Result This sets the port auto To set the port speedadvertise use command set port lt portlist gt speedadvertise maxspeed speed10 speed10 O speed1000 in global con
323. rt cost of the instance To set the port priority of the instance use command set stp instance 0 15 port lt portname gt priority lt 0 Confidential and Proprietary Information of ZTE CORPORATION 115 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH 240 in global configuration mode This is shown in Table 162 TABLE 162 SET STP INSTANCE PORT PRIORITY COMMAND Format Mode Function set stp instance lt 0 Global This sets the port priority 15 port portname config of the instance priority 0 240 Result This sets the port priority of the instance 17 To set port loop guard for STP instance use command set stp instance 0 15 port lt portname gt root guard enable disable in global configuration mode This is shown in Table 163 TABLE 163 SET STP INSTANCE PoRT LooP GUARD COMMAND Format Mode Function set stp instance lt 0 Global This sets port root guard 15 port config for STP instance lt portname gt root guard enable disable Result This sets port root guard for STP instance 18 To set port loop guard for STP instance use command set stp instance 0 15 port lt portname gt loop guard enable disable in global configuration mode This is Shown in Table 163 TABLE 164 SET STP INSTANCE PORT LOOP GUARD COMMAND Format Mode Function set stp instance lt 0 Global This sets port loop guard 15 gt port config for STP instance lt portname gt loop
324. rway There are 2 indicators indicating the status of the two 1000 Base X ports Every port has 1 indicator If the link indicator is on it indicates that the LINK is normal If the indicator is flashing it indicates that data sending or receiving is underway 4 interface indicators correspond to the two 10 100 1000Base T interfaces Every interface has two indicators When one of the indicators is on it indicates that the LINK is normal When the other indicator is on it indicates that the LINK is normal If the indicator is flashing it indicates that data sending or receiving is underway ZXR10 2928 F I FGEI FGFI FGFE can be chosen for ZXR10 2920 2928 according to the practical networking Corresponding types amp functions are shown in table5 ZXR10 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 3 Structure and Principle TABLE5 ZXR10 2920 2928 SUBBOARD LIST Subboard Type Function 2 gigabit Ethernet electrical port FGEI SF 2GE 2RJ45 2 gigabit FGFI SF 2GE 2SFP Ethernet light port 1 gigabit Ethernet light port 1 FGFE SF 2GE SFPRJ45 gigabit Ethernet electrical port FGEI offer 2 gigabit ethernet upward electrical port the type is SF 2GE 2RJ45 as shown in Figure 5 FIGURE 5 FGEI SUBBOARD SF 2GE 2R 45 E Indicators There are 4 indicators on the FGEI panel Each gigabit ethernet electrical port has 2 indicators amp one is link activation indicator amp
325. s destination address mask next hop address and egress interface Destination address and destination address mask describe the destination network information The next hop address and egress interface describe the way that switch forwards destination packet ZXR10 2920 2928 2952 allows addition and deletion of entries in the static ARP table ARP table records mapping between IP address of each node in same network and MAC address When sending IP packets switch first checks whether destination IP address is in the same network segment If yes switch checks whether there is a peer end IP address and MAC address mapping entry in ARP table If yes switch directly sends the IP packets to this MAC address If MAC address corresponding to peer end IP address cannot be found in ARP table an ARP Request broadcast packet is sent to the network to query peer end MAC address Generally entries of the ARP table on the switch are dynamic Static ARP table entry is configured only when the connected host cannot respond to the ARP Request To configure the layer 3 function use command config router to enter into layer 3 configuration mode first Configuring IP Port This topic describes the configuration of IP port on ZXR10 2920 2928 2952 For the configuration of IP port perform the following steps 1 To set IP address and mask address of layer 3 port use command set ipport lt 0 63 gt ipaddress lt A B C D M gt lt
326. s of PVLAN 2 To delete the isolate ports and promiscuous ports of PVLAN use command set pvlan session 1 4 delete isolate port lt portlist gt trunk lt trunklist gt in global configuration mode This is shown in Table 237 TABLE 237 SET PVLAN SESSION DELETE COMMAND Format Mode Function set pvlan session global config This deletes the 1 4 delete isolate ports and isolate port promiscuous ports portlist trunk of PVLAN trunklist Result This deletes the isolate ports and promiscuous ports of PVLAN 146 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Result Example Chapter 7 Service Configuration 3 To modify promiscuous ports trunk in the PVLAN use command set pvlan session 1 4 modify promiscuous port lt portid gt trunk lt trunkid gt in global configuration mode This is shown in Table 238 TABLE 238 SET PVLAN SESSION MODIFY COMMAND Format Mode Function set pvlan session lt 1 4 gt global config This modifies modify promiscuous promiscuous port lt portid gt trunk lt trun ports trunk in kid gt the PVLAN Result This modifies promiscuous ports trunk in the PVLAN 4 To clear PVLAN session use command set pvlan session 1 4 clear config in global configuration mode This is shown in Table 239 TABLE 239 SET PVLAN SESSION CLEAR COMMAND Format Mode Function set pvlan session global config This clears PVLAN 1 4 clear session config Resu
327. s Service NAS is embedded on the switch to improve authentication and management of access subscribers and better support billing security operation and management of broadband network NAS uses the 802 1x protocol and RADIUS protocol to realize the authentication and management of access subscribers It is highly efficient safe and easy to operate IEEE 802 1x is called port based network access control protocol Its protocol system includes three key parts Client system is generally a user terminal system installed with client software A subscriber originates the IEEE802 1x protocol authentication process through this client software To support the port based network access control client system must support Extensible Authentication Protocol Over LAN EAPOL Authentication system is generally network equipment that supports IEEE802 1x protocol for example switch Corresponding to ports of different subscribers ports could be physical ports or MAC address VLAN or IP address of user equipment Authentication system has two logical ports controlled port and uncontrolled port Uncontrolled port is always in the state that the bidirectional connections are available It is used to transfer EAPOL frames and can ensure that client can always send or receive authentication Control port is enabled only when authentication is passed It is used to transfer network resource and services Controlled port can be confi
328. s config mode This is shown in Table 265 TABLE 265 AAA CoNTROL PROTOCOL COMMAND Format Mode Function aaa control port nas config This sets lt portlist gt protocol authentication pap chap eap mode for the port Result This sets authentication mode for port Note During the subscriber access authentication there are three subscriber identity authentication methods between the authentication server and the authentication system PAP CHAP and EAP The default one is EAP END OF STEPS Result 802 1x on ZXR10 2920 2928 2952 has been configured Configuring Protocol Parameters of 802 1x Purpose This topic describes the configuration of protocol parameters or 802 1x on ZXR10 2920 2928 2952 Steps For the configuration of protocol parameters perform the following steps 1 To set interval between first authentication failure of authentication system and next authentication request use command dotlx quiet period 0 65535 in nas config mode This is shown in Table 266 166 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 8 Access Service TABLE 266 DOT1X QUIET PERIOD COMMAND Format Mode Function dot1x quiet nas config This sets interval period lt 0 65535 gt between first authentication failure of authentication system and next authentication request Result This sets interval between first authentication failure of authentication system and next authentication request
329. s dr Da RU E 191 DEHEP Smooblbg ODEtolid svedese eom sateen henna 194 Conrqurmnmng Global DHCP pipi tao OS DUELO VERD DERE S OREL e 195 COnNOUrNDO DHCP SNOODING eeoeta see pev EUR uat Rx qaaa S ats 197 ConbguringrP source GUSEG seed vex o V ne bb oV EAT OEIA 198 Conbiguring DHCPXODUOT92 6t Eaits bte bb Cute ni sais o o ERES ODORE leta 199 MDAS OV CEMICW oo tbrE TERM a D pL DU CN ELI NECI cure 204 COVA RETIN VBA S ronan aA A NEE M E t UL MM E DU LEES 205 sFlow Monitoring OVCEVICW Ss enis oec iia ebat Ea CREDE Mp ERGO 207 CORNPQUFIBOSEIOM ossia rta cgaad ke e men agr bie o URP eara os 207 ZES OVENI W ar i ridens mut vaste AAE A O AEA 210 COMFIGUEITIGI VES ae ener a EE a AA 211 Chapter 9i aen xag E a ERO DR RR CORRER DRM RORIS RR 217 Network Management eee eene enne nnn 217 eal e 217 Semote AccessS OVETVIEW 2096521 901025 Sbrvsdbub tudo des Fabia ae 219 Configuring Remote Access ccisssreesccssccssucseeusseusavecucrnengs 219 Remote Access Configuration Examples esses 220 SOM OVERVIEW ssnedeutad sins cad in D ERAT COD ARR ma Ca tori det hentai aa 221 COMMOULIAG Sor serito rpignad adeat Ev RIA icta iauacesuati md ie 222 Contnguritadgu SSA Var O esmstasetssuc iesu senta Visa anwar eo doa cvatbafe ds 223 SNMP OVOFVIGWss cns x pss Rap Vds UdieSu qu Metu good ean nda ka 226 Configuririg SNMP int vp atit e eeuddessn ie eost em doce adus 227 RMON OVePVIOW Prasana duis Ded cuaatorum e ta
330. s enable Ise SHE POrT va cascade port SFlow Monitoring Overview Sample Flow sFlow is a technique to monitor data transmission of network equipments such as routers and switches SFlow monitors flow of 10 gigabit or even bigger speed and has advantages of timely actual low cost and being upgraded Sflow is an expert format and adds more information of monitored data packets It uses sFlow proxy embedded in network equipments to send the sampled data packets to the sFlow collectors sFlow collectors analyzes and processes the packets then gets information of current network Configuring sFlow This topic describes the configuration of sFlow on ZXR10 2920 2928 2952 5116 FI 5124 FI For the configuration of sFlow perform the following steps i To set proxy IP address of sFlow use command set sflow agent address lt A B C D gt in global configuration mode This is shown in Table 346 TABLE 346 SET SFLOW AGENT ADDRESS COMMAND Format Mode Function set sflow agent global config This sets proxy IP address lt A B address of sFlow C D gt Result This sets proxy IP address of sFlow Note Proxy IP address should be layer 3 poet IP address of switches If there are no enabled layer 3 ports on the switches proxy IP address of sFlow can not be set 2 To set IP address of sFlow collector use command set sflow collector address lt A B C D in global configuration mode This is shown in Table 347 Confidential
331. shown in Figure 57 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 9 Network Management FIGURE 57 PVLAN CONFIRUATION la x 3r RRO SEV KAW IAD WB e FAE gt OAA Qer uker Qus SS 3u HFH AD HithE D http 192 168 1 3 index htm UID 800112 xm vj era eea LTEDH ZXR10 5124 FI Configuration System ZTEPM ZXR10 5124 FI Port Port State gt Port Parameter VLAN um Vian Overview 120 z Refresh gt vlan Configure W PVLAN PVLAN Configure gt Pylan Overview R gt Pvlan Configure session 1 Mirror Lacp Promiscuous Port trunk 2 Monitoring J fos gt Terminal Log Isolated Port 6 9 13 ce 2 4 8 8 10 12 14 16 18 20 22 24 P Running Config Maintenance DOM EBMMOOOOODo b Save Select All BOUOOUEBEMMMOOOOD gt Reboot gt Upload eel yee TEN ANA led ale ality ae ee 7H gt User Manager Isolated Trunk 20 4 8 78 102 14165 r Bog m m m m ajm Select All T imr imr rrr mr le 13 ee eT Sale ie SIG Apply Refresh Retum Logout All rights reserved ZTE Corporation ESA EE EH Intranet 3 After configuring attributes in this page click Apply button to submit END OF STEPS Result PVLAN has been configured Configuring Mirroring Management Purpose This topic describes the port mirroring management Steps For the port mirroring management perform the following steps 1 Click the
332. sical Port This topic describes the configuration of ACL to a physical port For the configuration of ACL to a physical port perform the following step Confidential and Proprietary Information of ZTE CORPORATION 131 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I Result Data Packet Priority ZTEDH 1 To configure ACL to a physical port use the following command in global configuration mode as shown in Table 199 TABLE 199 PoRT COMMANDS Format Mode Function set port lt portlist gt global config This acl lt acl number gt enables disables tenable port ACL disable set trunk global config This trunktlist acl enables disables lt acl number gt trunk ACL enable disable set vlan valnlist global config This acl acl number enables disables enable Vlan ACL disable Result This enables disables port trunk and Vlan Note A physical port can only have one ACL It is necessary to release the current bound when you want to bind a new one in the case that an old one has applied to the physical port otherwise a false message will return END OF STEPS ACL has been configured to a physical port Quality of Service QoS ZXR10 2920 2928 2952 provides QoS function and priority control function Priority of the data packets can be determined by source MAC address priority of the data packets VLAN priority 802 1P user priority layer 3 DSCP priority or the
333. ssive in global configuration mode This is shown in Table 92 TABLE 92 SET LACP PORT MODE COMMAND Format Mode Function This sets the mode used by the port to participate in the aggregation set lacp port lt portlist gt mode active passive Global config Result This sets the mode used by the port to participate in the aggregation To configure the timeout information of the port participating in the aggregation use command set lacp port lt portlist gt timeout long short in global configuration mode This is shown in Table 93 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 7 Service Configuration TABLE 93 SET LACP PORT TIMEOUT COMMAND Format Mode Function set lacp port portlist Global timeout config long short This configures the timeout information of the port participating in the aggregation Result This configures the timeout information of the port participating in the aggregation To set the priority of LACP use command set lacp priority lt 1 65535 gt in global configuration mode This is shown in Table 94 TABLE 94 SET LACP PRIORITY COMMAND Format Mode Function set lacp priority 1 odi This sets the priority of LACP 65535 gt config Result This sets the priority of LACP To display the LACP configuration information use command show lacp in global configuration mode This is shown in Table 95 TABLE 95 SHOW LACP COMMAND Format Mo
334. strative command of IPTV users perform the following step 1 To delete online users of IPTV use command clear iptv client on nas config mode This is shown in Table 139 TABLE 139 CLEAR IPTV CLIENT COMMAND Format Mode Function clear iptv client Nas config mode This deletes online users 106 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Example Chapter 7 Service Configuration Result This deletes online users of IPTV END OF STEPS Administrative commands of IPTV users have been configured This example describes how the user connects to port gei 1 1 which is a requesting user of multicast group 224 1 1 1 Vian ID of this multicast group is 100 Configuration is shown below ZXRIO config as iptv control enable ZXR10 config nas create iptv channel special 1 address 224 ee Vs 1 Ie dE 0 COCs Leiner Ss ue aseo Clacuoaye db I aa 00 ZXRIOCcontig nas t iptv channel mame ccryvl AXP TOCO me Mas eustexelb e moe eae m Ullom db Ominm ocr le di ZXRIO Conn aber nas Iptv cac rule l right order T User in Vlan 1 User which connects to port gei_1 1 in Vlan 1 is the preview user of multicast group 224 1 1 1 Max preview time is 2 minutes Least preview interval is for 20 seconds Max preview counts are 10 Vlan ID of multicast group is 100 Configuration is shown below ARTO Gori mcs ND EE obe Elbe ZXR O config nas credte iptv channel special 1 address 224
335. t function based on port Result This enable disable DHCP Snooping function based on port Note DHCP snooping function is disabled by default This command is to enable or disable DHCP Snooping function on port Only in the condition that the global DHCP function is enabled can this function be enabled DHCP function on the ports connecting to user and that connecting to server Should be enabled at same time To display DHCP Snooping configurations use command show dhcp snooping in global configuration mode This is shown in Table 328 TABLE 328 SHOW DHCP SNOOPING COMMAND Format Mode Function show dhcp global config This displays DHCP snooping Snooping configurations Result This displays DHCP Snooping configurations To display information of DHCP Snooping dynamic binding table use command show dhcp snooping binding port portname in global configuration mode This is shown in Table 329 Confidential and Proprietary Information of ZTE CORPORATION 197 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I Result Purpose Steps ZTEDR TABLE 329 SHOW DHCP BINDING PORT COMMAND Format Mode Function show dhcp global config This displays snooping binding information of port DHCP Snooping lt portname gt dynamic binding table Result This displays information of DHCP Snooping dynamic binding table Note Display information of the host that get dynamic configurations on DHCP Snooping e
336. t the interfaces are not affected Back up the alarm data statistic data and configuration data END OF STEPS This checks the monthly maintenance of switch Maintenance Period Maintenance and test period of the Ethernet switch system for the reference of the maintenance personnel is shown in Table 436 TABLE 436 MAINTENANCE AND TEST PERIOD OF ETHERNET SWITCH No Maintenance amp Test Item ness Period 1 Check the running status of the switch Daily Check the temperature and humidity in the 2 Daily equipment room and check the power supply 3 Check the communication status between the Dail switch and each connected device y Check whether the relevant services are well 4 Daily developed 5 Monthly summarization of routine maintenance Monthly problems 6 Monthly summarization of routine maintenance Monthly experience 7 Clean the equipment room Monthly 8 Clean the switch Monthly 9 Yearly summarization Yearly 10 Completely maintain and check the equipment in Yearly the monitoring room Confidential and Proprietary Information of ZTE CORPORATION 293 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH single Loop Test Method Features of Single port loop test is to check whether a loop exists in the Singly Port ports of the switch If such a loop exists it may result in Loop errors in learning MAC addresses and may easily cause a broadcast storm In worse cases switch and network
337. t group is to configure eventTable in event group The configuration involves eventDescription eventType It can be none 1 log 2 snmp trap 3 and log and trap 4 When the log is selected a log instance is created for each event in the logTable When the snmp trap is selected for each event the monitor sends an SNMP trap to one or more management stations When the log and trap is selected the log is created and a trap is sent gt eventOwner gt eventCommunity gt eventStatus It can be valid underCreation createRequest and invalid When it is set to invalid event instance is deleted 5 To create configure instances of the alarm group use command set alarm 1 65535 interval lt 1 65535 gt variable lt mib oid gt sampletype absolute delta startup rising falling both threshold 1 65535 eventindex 236 3 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Chapter 9 Network Management lt 1 65535 gt rising falling owner string status valid underCreation createRequest invalid in SNMP config mode This is shown in Table 390 TABLE 390 SET ALARM COMMAND Format Mode Function set alarm lt 1 65535 gt interval 1 SNMP These 65535 gt variable lt mib config create configure oid gt sampletype instances of the absolute delta startup alarm group rising falling both
338. t port portlist sa Global This sets the priority of the source priority config MAC address enable disable Result This sets the priority of the source MAC address 8 To set the priority of the source VLAN use command set port lt portlist gt vlan priority enable disable TABLE 42 QUEUE SCHEDULE COMMAND Format Mode Function set port portlist vlan Global This sets port s priority of the priority config source VLAN enable disable Result This sets port s queue schedule profile 9 To set the priority of a port use command set port lt portlist gt default priority 0 7 in global configuration mode This is shown in Table 43 TABLE 43 DEFAULT PRIORITY COMMAND Format Mode Function set port portlist Global default config This sets the priority of a port priority 0 7 Result This sets the priority of a port 12 To set remapping tag priority of a port use command set port lt portlist gt remapping tag 0 7 priority in global configuration mode This is shown in Table 44 TABLE 44 SET PORT SECURITY COMMAND Format Mode Function 70 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR 13 14 15 Chapter 7 Service Configuration Format Mode Function set port portlist2 remapping tag 0 72 priority 0 7 Global This sets remapping tag priority config of a port Result This sets remapping tag priority of a port To se
339. t sessionlist gt SQinQ session Result This views parameters of SQinQ session END OF STEPS SQinQ strategy policy has been configured This example describes that there are two switches of ZXR10 5124 Switch A and Switch B in Service Provider Network Port 24 of Switch A is connected to port 24 of Switch B Vlani 200 is in port 1 through 6 of Switch A which communicate with port 1 through 3 of Switch B in which Uplink vlanid assigned as 100 Vian201 4094 is in port 1 through 6 of Switch A which communicates with port 4 though 6 of Switch B in which Uplink vlanid assigned as 200 Customer Port of Switch A is untag port only for Vlani Configuration of Switch A zte cfo tset sging Session cus omer vlan 1 200 uplink vlan 100 zte c o tset pori 1 6 squmq sessionm enable zte CCo seu vlan T00 enable Abe Chg rset vlan 100 add port 1 6 untag zte cng tset vlan 100 add port 24 tag zte cfg set Sqinq session 2 customer vlan 201 4094 Uolink vilen 200 zie cg sec por l 6 sging session 2 enable zte cfg set vlan 200 enable Zee Che rset vlan 200 add port T6 untag zte Cio fset Vlan 200 add por 21 tag 184 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 8 Access Service Configuration of Switch B ACSC GSS SCuloe sessiom I wuilsicomecsy lain db 2010 E SESS vlan 100 Zcco ChG lt sek Porte slo smcssessiemeslemabile zte cfg set vlan 100 enable ace cio foet vlan O0
340. t the port security use command set port lt portlist gt security enable disable in global configuration mode This is shown in Table 45 TABLE 45 MULTICAST FILTER COMMAND Format Mode Function set port lt portlist gt security enable disable Global This sets the multicast filter of a config port Result This sets the port security To enable or disable the port unit statistics use command set port lt portlist gt unit statistics enable disable in global configuration mode This is shown in Table 46 TABLE 46 RATE ADVERTISEMENT COMMAND Format Mode Function set port lt portlist gt unit statistics Global This sets the port unit enable disable config statistics Result This sets the port unit statistics To set the multicast filter use command set port lt portlist gt macaddress on lt 1 16 gt off in global configuration mode This is shown in Table 47 TABLE 47 MAC ADDRESS COMMAND Format Mode Function set port lt portlist gt Global This sets multicast filter macaddress on config lt 1 16 gt off Result This sets the number of MAC addresses 16 To set port on Vlan use command set port lt portname gt description lt string gt in global configuration mode This is shown in Table 48 Confidential and Proprietary Information of ZTE CORPORATION 71 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 48 PROTOCOL VLAN COMMAND Format M
341. te cfg set port 2 2 cfg set vlan 3 add trunk 3 tag 9 2 JON Ise 2 4 zte cfg set port uale 3 Beeler ues wis 2 29 esos IGMP Snooping Multicast address cannot appear in source address of the packet switch cannot learn multicast address When the switch receives a multicast message it broadcasts the message to all the ports in the same VLAN If no measure is taken unwanted multicast message may be spreaded to each node of the network thus causing a great waste of network bandwidth resource With IGMP Snooping function IGMP communication between host and router is snooped so that multicast packets are sent to the ports in the multicast forwarding table instead of all ports This restricts the wide spread of multicast messages in the LAN switch reduces the waste of network bandwidth and improves the utilization rate of the switch Configuring IGMP Snooping This topic describes the IGMP snooping configuration For configuration of IGMP snooping perform the following steps 1 To Enable Disable the IGMP Snooping function use command set igmp snooping enable disable in global configuration mode This is shown in Table 97 TABLE 97 SET IGMP SNOOPING COMMAND Format Mode Function set igmp Global This Enable Disable the IGMP snooping enable disable config Snooping function Result This Enable Disable the IGMP Snooping function Confidential and Proprietary Information of ZTE CORPORATION 91
342. ter S VLAN gt vlan Overview 120 Refresh gt vlan Configure W PVLAN Lacp Port gt Pvlan Overview M Configure Select items V Mode Timeout irror SL acp Portld 21 24 P Lacp Port Passive v Lacp State Port mode Ease mE Monitoring eee Terminal Log gH c j gt Port Statistics gt Running Config Maintenance gt Save gt Reboot gt Upload gt User Manager Logout All rights reserved ZTE Corporation JESA EE EH Intranet 5 To configure assembling port attributes in the page click Apply button to submit Result This configures assembling port attributes Click the catalog tree in the left of system main page Configuration gt Lacp gt Lacp State to open assembling group information page as shown in Figure 63 Confidential and Proprietary Information of ZTE CORPORATION 279 280 y ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDR FIGURE 63 ASSEMBLING GROUP INFORMATION 3 ZTE switch Microsoft Internet Explorer E 2d XE WE SEV KEA IAD SR Ea LAR gt QO2 QL Grex Gee 4 E 5 v H dr i AD Hihik D http 192 168 1 3 index htm UID 800112 APY BARS ORB L gt e LTEDH ZXR10 5124 FI Configuration gt System ZTEPM ZXR105124 FI Port Port State gt Port Parameter Console 3 J 6 Sy VLAN M b vlan Overview 120 zl Refresh gt
343. the flange and screws are part of the accessories as shown in Figure 9 20 Confidential and Proprietary Information of ZTE CORPORATION ZTEmR Chapter 4 Installation and Debugging FIGURE 9 INSTALLING FLANGES A zu r5 2 4 s B 10 2 L3 48 18 5 zeg Ze ae ee B See auum PF c T YN 2920 E R ld td FI ae d d hf p unu zum ws connus Ju Jue Jus Jus Cmn W RX KU r3 i i usi Won z E Tp gge gomme DD pumps gump nmmmp gmmpa ppuun 8 E 8 i i md mi m i i aa 260 amp 2 4 8 B 10 12 14 16 18 20 22 24 28 amp Tees ZRO os es ete e oes ecte es af ef Js gl ee aoe Ej f FN SA 1FEB S15KSC vx 2328 TE T dj ETE g T I Ei TF LY 4 bo Funus uui zh nu zur sonus Panne cun 2e suns um Juni Comm AE mx W i x FT uu ENSEM ha ACT O 7 Ed au o bf HQ p np mmm p ge ge fg gm gus SETS STG pun INCO NP ye CONSOLE 1 3 T 9 ED EI 15 17 19 E 25 Fa 5 OOOOOOOOOOOOOOOO OOOOOOOOOOOOOOOO ooo0o0000000000000 7 TA ENT T Tt at T Tl ET Li r T gh Fn a 52 p p dE I dE dE I M dI LL um r A pp re Jt RD RR D 5 d 2n 4a as am 10 9 124i 14413 4845 mi 20 9 22 21 24 23 28 25 28 27 30 29 221 3413 36 35 38 37
344. the other one is link status indicator If the link activation indicator is flashing it indicates that data sending or receiving is underway a When link status indicator is on it indicates that the LINK is normal FGF EGFI subboard offer two gigabit Ethernet up go light port amp the type is SF 2GE 2SFP as shown in Figure 6 Confidential and Proprietary Information of ZTE CORPORATION 15 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Indicators FGFE Indicators 16 Figure 6 SF 2GE 2SFP subboard FGFI E SF 2GE 25FP TH Re TA RA nyi T ACT i Ls ee TE ur cy ae ALT 1000064 SEX 10000A GE X There are 2 indicators on the FGFIpanel ACT1 amp ACT2 corresponding to the two gigabit light port When the indicator is on it indicates that LINKis normal if the indicator is flashing it indicates that data sending or receiving is underway FGFI subboard offers 1 gigabit Ethernet up go light port 1 gigabit Ethernet up go electrical port amp the type is SF 2GE SFPRJA45 as shown in figure 7 FIGURE 7 SF 2GE SFPRJ45SUBBOARD FGFE amp SF Z2GE SFPR 45 M RR T i l 1000BASE X There are 3 indicators on the FGFIpanel The gigabit Ethernet up go light port has an indicator ACT When the indicator is on it indicates that LINKis normal if the indicator is flashing it indicates that data sending or receiving is underway The gigabit Ethern
345. thms so that the loop network is pruned into a tree network without any loop thus avoiding the hyperplasia and infinite loop of packets in the loop network Rapid Spanning Tree Protocol RSTP is on the basis of common STP added with the mechanism that the port state can be rapidly changed from Blocking to Forwarding which increases the topology convergence speed Multiple Spanning Tree Protocol MSTP is on the basis of RSTP and STP added with the forwarding processing of frames with VLAN ID The whole network topology structure can be planned into a Common and Internal Spanning Tree CIST which is divided into Common Spanning Tree CST and Internal Spanning Tree IST as shown in Figure 27 FIGURE 27 MSTP TOPOLOGICAL STRUCTURE In this whole MSTP topology structure an IST can serve as a single bridge switch In this way CTS can serve as an RSTP for the interaction of configuration information BPDU Multiple instances can be created in an IST area and these instances are valid only in this area An instance is equivalent to an RSTP except that the instance needs to perform BPDU interaction with bridges outside this area Confidential and Proprietary Information of ZTE CORPORATION ZTEmA STP BPDU Protection Root Protection Chapter 7 Service Configuration Spanning Tree Protocol STP can calculate accoding to the protocol divide the ports into different parts Master the port type introduced in MSTP proto
346. time synchronization request of NTP protocol Result This configures source IP address which is used when switch send time synchronization request of NTP protocol 188 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result Example GARP uses Protocols GVRP Chapter 8 Access Service Note By default switch doesn t configure source address when NTP send time synchronization request IP address that the message need is decided by network layers 4 To view NTP status use command show ntp in global configuration mode This is shown in Table 314 TABLE 314 SHOW NTP COMMAND Format Mode Function show ntp global config This views NTP status Result This views NTP status END OF STEPS NTP has been configured In this example switch will synchronize time with NTP server whose IP address is 202 10 10 10 Configuration zte cfg set ntp server 202 i oes RO 10 ze Cre Scr EI uci odie zte cfg show ntp ntp protocol is enable RES Protocol Vere ton S ntp server address 220720 POF OF 10 ntp source address None ntp is synchronized No ntp rev stratum 3 16 no reference clock zte cfg In the output ntp is_synchronized represents whether switch has synchronized time with NTP server GARP GVRP Overview GARP Generic Attribute Registration Protocol uses different protocols to dynamically distribute attribute information such as VLAN and MAC address of multicast fo
347. ting server from the domain use command radius isp lt ispname gt delete accounting lt A B C D in nas config mode This is shown in Table 277 TABLE 277 RADIUS ISP DELETE ACCOUNTING COMMAND Format Mode Function radius isp nas config This deletes an lt ispname gt delete accounting server accounting lt A from the domain B C D Result This deletes an accounting server from the domain Note A domain can be configured with up to three accounting servers Priority of the server is determined by configuration order First server configured enjoys highest priority and last server has lowest priority When a server is deleted priorities of the related servers rise in sequence To set the IP address of the client in the domain use command radius isp ispname client A B C D in nas config mode This is shown in Table 278 TABLE 278 RADIUS ISP CLIENT COMMAND Format Mode Function radius isp nas config This sets the IP ispname client address of the A B C D client in the domain Result This sets the IP address of the client in the domain Note IP address of client in domain must be IP address of an interface on the switch To set shared password use command radius isp ispname sharedsecret lt string gt in nas config mode This is shown in Table 279 Confidential and Proprietary Information of ZTE CORPORATION 171 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I TABLE 27
348. tion ZXR10 2920 Front Panel Front panel of the ZXR10 2920 is shown in Figure 2 FIGURE 2 FRONT PANEL OF ZXR10 2920 SF 26 i SFPRJ45 we NT HHH He 1000BASEX Ethernet switching main board of ZXR10 2920 is KEBT Interfaces ZXR10 2920 provides the following types of access ports Sixteen fixed 10 100BASE T Ethernet ports support fullduplex or semiduplex 10 100M amp MDI MDIX self adaption function VCT auto test a Two fixed 10 100 1000BASE T interface s One expand slot expansile dual channel 1000M optical interface double 1000M electrical interface 1000M one optical amp one electrical upward subboard s One Console port is to realize the management and configuration of various services Indicators There are 32 indicators on the front panel of the ZXR10 2920 indicating the status of the 16 10 100Base T ports Every interface has two indicators indicating semiduplex fullduplex amp LNK ACT four indicators show two 10 100 1000 BASE T port amp two indicators for each port showing LNK amp LNK ACT status two system indicators show the system running work status System indicators include power indicator PWR and running indicator RUN After the system is powered up the PWR indicator is on and the RUN indicator is off gt BootROM starts to load the version If the version is unavailable the states of indicators do not change If the version is loaded norma
349. tion This topic describes the display of cluster configuration and cluster member information For the display of cluster configuration perform the following steps 1 To display cluster configuration information use command show group in global config mode This is shown in Table 425 TABLE 425 SHOW GROUP COMMAND Format Mode Function show group global config This displays cluster configuration information Result This displays cluster configuration information To display candidate switches that can be added to cluster use command show group candidate in global config mode This is shown in Table 426 TABLE 426 SHOW GROUP CANDIDATE COMMAND Format Mode Function show group global config This displays candidate candidate switches that can be added Confidential and Proprietary Information of ZTE CORPORATION 255 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Result Example Format Mode Function to cluster Result This displays candidate switches that can be added to cluster 3 To display cluster member information use command show group member lt 1 255 gt in global config mode This is shown in Table 427 TABLE 427 SHOW GROUP MEMBER COMMAND Format Mode Function show group global config This displays cluster member lt 1 member 255 gt information Result This displays cluster member information END OF STEPS Cluster configuration and member informat
350. tion and it supplies the load equalization backup and the link Switches support Ethernet ring network mode through ZESR High switching capability ensures that the operation do not be interrupted Particular function The following are the kinds of operation characteristics and control Use of different modes of VLAN sort It can be classified by types of port protocol and strategy Provide VPN on layer 2 through QinQ in addition to SelectiveQinQ and supply flexible control ability for optional outer layer label which makes it convenient to operate and scheme Supports the client end VBAS function and supplies efficient orientation technology support for client end Milticast support technology includes igmp snooping and proxy function fast leaving characteristic and Multicast Vlan Switching MVS function amp IPTV support Confidential and Proprietary Information of ZTE CORPORATION ZTEmA User Security Control Equipment Level Security Network Security Chapter 2 System Overview oecurity Controls The following are user level security control IEEE 802 1x implements dynamic and port based security provides the user ID authentication function and MAC IP VLAN PORT combines at random and prevent illegal user to accessing the network Segregating the ports is helpful to make sure that users can not monitor or access to other users on the same switch DHCP monitoring prevents spiteful users
351. to view sFlow Confidential and Proprietary Information of ZTE CORPORATION 209 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH zte cfg show sflow Agent address 3192 168 Lo 1 Colleceerraddress 192 168 Lo 2 JU BIOL Sisi c Reload Mode Continuous Sample Mode All PortLE POCE de aecexer CEU ieee Counter 1 20000 None 18459 luec cce Reload Mode Continuous Portie lice Je ieee Cell I ieec Counter 2 20000 None E9993 zc OE dg When counter of port is decreased to 0 data packets coming into port will be sampled to cpu When port does not link up value of counter is O ZESHR Overview Disadvantage There is disadvantage of STP its convergence speed is slow of STP To make up for it and considering that most of core networks are annular and each switch has two ports to link into the ring in this topology structure so it only needs to block a port in ring to avoid loop When link trouble occurs free the port from blocked to protect the service flow ZESR features ZTE Ethernet Switching Ring supports fast convergence well when the topology of ring Ethernet link changes ZESR is a master switch in an annular network and others are transits Each switch has two port connected into ring and one of the port is designated as primary port other as secondary port Master switch sends ring detection frames to detect whether loop is good When loop is good master switch blocks its secondary port W
352. twork Confidential and Proprietary Information of ZTE CORPORATION 187 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Purpose This topic describes the configuration of NTP Steps Forthe configuration of NTP perform the following steps 1 To enable disable NTP use command set ntp in global configuration mode This is shown in Table 311 TABLE 311 SET NTP COMMAND Format Mode Function set ntp global config This enable disable NTP Result This enable disable NTP Note Only after configuring this command the following commands can be configured To synchronize time with NTP server configuring IP address of NTP server is also required 2 To setup NTP server IP address use command set ntp server in global configuration mode This is shown in Table 312 TABLE 312 SET NTP SERVER COMMAND Format Mode Function set ntp server global config This setups NTP server IP address Result This setups NTP server IP address Note At present only one NTP server can be configured If several NTP servers are configured the latter will cover the former 3 To configure source IP address which is used when switch sends time synchronization request of NTP protocol use command set ntp source in global configuration mode This is shown in Table 313 TABLE 313 SET NTP SoURCE COMMAND Format Mode Function set ntp source global config This configure source IP address which is used when switch sends
353. ult This sets the snooping interval To set the snooping interval use command set igmp snooping response interval lt 10 250 gt in global configuration mode This is shown in Table 103 TABLE 103 SET IGMP SNOOPING RESPONSE INTERVAL COMMAND Format Mode Function set igmp snooping Sia This sets the snooping interval response Confidential and Proprietary Information of ZTE CORPORATION 93 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH Format Mode Function interval lt 10 250 gt Result This sets the snooping interval 10 To set multicast member route timeout use command set igmp snooping timeout lt 100 2147483647 gt host router in global configuration mode This is shown in Table 104 TABLE 104 SET IGMP SNOOPING TIMEOUT COMMAND Format Mode Function set igmp snooping timeout lt 100 Global This sets multicast member route 2147483647 gt config timeout host router Result This sets multicast member route timeout 11 To bind static multicast group to ports on Vlan use command set igmp snooping vlan lt 1 4094 gt add group A B C D gt port lt portlist gt trunk lt trunklist gt in global configuration mode This is shown in Table 105 TABLE 105 STATIC MULTICAST GROUP TO PORTS COMMAND Format Mode Function set igmp snooping vian lt 1 4094 gt add group lt A B Global This binds static multicast group to C D port config ports on Vlan
354. ume I FIGURE 31 USING CHAP MODE FOR IDENTITY AUTHENTICATION Switch User terminal system RADIUS server EAPOL RADIUS EAPOL Start EAP Request Identity EAP Request Challenge EAP Response MD5 Challenge Access Request CHAP BAP Succes Successful access Extensible EAP is an authentication method that transparently transmits Authentication EAP packets It includes EAP MD5 and PEAP The following Protocol example explains EAP MD5 Di eae eae EAP MD5 is a CHAP identity authentication mechanism used in g the EAP framework structure Process of using the EAP MD5 MD5 l a i mode for identity authentication is shown in FIGURE 32 USING EAP MD5 MODE FOR IDENTITY AUTHENTICATION User terminal system RADIUS EAPOL Start EAP Request Identity Connection setup EAP Response Identity Access Challenge Access Request EAP Request Challenge EAP Response MD5 Challenge Access Request Successful acess g_ _EAP Suecess 162 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Purpose Steps Chapter 8 Access Service Configuring 802 1x This topic describes the configuration of 802 1x on ZXR10 2920 2928 2952 For the configuration of 802 1x perform the following steps 1 To enable disable port 802 1x f
355. unction use command aaa control port lt portlist gt dotlx enable disable in nas config mode This is shown in Table 257 TABLE 257 AAA CONTROL PORT COMMAND Format Mode Function aaa control port nas config This enable disable lt portlist gt dot1x port 802 1x enable disable function Result This enable disable port 802 1x function 2 To configure the authentication control mode of the port use command aaa control port lt portlist gt port mode auto force unauthorized force authorized in nas config mode This is shown in Table 258 TABLE 258 AAA CONTROL PORT MODE COMMAND Format Mode Function aaa control port nas config This configures the lt portlist gt port authentication mode control mode of the auto force port unauthorized force authorized Result This configures the authentication control mode of the port Note The available modes include Auto Subscriber access from the port configured as auto must go through authentication Subscriber access is successful only when authentication is successful gt Force authorized Subscriber can be connected to network through this port without authentication gt Force unauthorized Subscriber cannot be connected to network through this port Note The default authentication control mode is auto J To allow prohibit multi subscriber access of the port use command aaa control port lt portlist gt multiple hosts enable disable i
356. uration of online command help perform the following steps 1 Input behind the prompt of any command mode to view all commands and brief descriptions of this mode Result Command mode is viewed Example An example given below shows behind the prompt of the command mode ice P enable enable configure mode exit exit from user mode help description of the interactive help system show SHON COM ae Inr ormar ron VESE Prime Command s zte gt Input the question mark behind a character or character string Result This will view the list of commands or keywords beginning with that character or character string Example An example given below shows the character string Ze Chg e config clear create zte cfg sc Input behind the command keyword and parameter Result It shows the keyword or parameter to be input next and its brief explanation Example An example is given below zie deno eg Ley E snmp enter SNMP config mode router enter router config mode tffs enter file system config mode nas enter nas config mode group enter group management config mode acl enter acl config mode nce erepti Ee Om ke If a wrong command keyword or parameter is entered then press Enter Result It will show message Command not found will be displayed on the interface Example An example is given below 46 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Result I nput Co
357. urpose Prerequisite Steps 8 To copy a file use command copy lt source pathname dest pathname in file system configuration mode This is shown in Table 28 TABLE 28 COPY COMMAND Format Mode Function copy lt source File pathname gt lt dest system This copies a file pathname gt config Result This copies a file 9 To format the FLASH memory use command format in file system configuration mode This is shown in Table 29 TABLE 29 FORMAT COMMAND Format Mode Function File This formats the FLASH format system memory config Result This formats the FLASH memory END OF STEPS File system operation of ZXR10 2920 2928 2952 is configured Configuring ZXR10 2920 2928 2952 as an TFIP Client This topic describes the background TFTP server configuration To configure background TFIP server meet the following requirements Start TFTP server on the background host and access ZXR10 2920 2928 2952 as a TFIP client from the TFTP server The following describes the background TFTP server configuration taking tftpd as an example 1 Run tftpd on the background host and an interface as shown in Figure 22 52 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 6 System Management FIGURE 22 TFTPD INTERFACE fig IFIP server Tftpd Help Server is not running 2 Select Tftpd Configure click Browse on the popup dialog box and select a directory to store
358. use command show dhcp Option82 in global configuration mode This is shown in Table 338 TABLE 338 SHOW DHCP OPTION82 COMMAND Format Mode Function show dhcp global config This displays DHCP Option82 Option82 configuration information Result This displays DHCP Option82 configuration information To display DHCP Option82 access node identifier use command show dhcp Option82 ani in global configuration mode This is shown in Table 339 TABLE 339 SHOW DHCP OPTION82 ANI COMMAND Format Mode Function show dhcp global config This displays DHCP Option82 ani Option82 access node identifier Result This displays DHCP Option82 access node identifier To display DHCP Option82 configuration information based on port use command show dhcp Option82 port Confidential and Proprietary Information of ZTE CORPORATION 201 202 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH portname in global configuration mode This is shown in Table 340 TABLE 340 SHOW DHCP OPTION82 PORT COMMAND Format Mode Function show dhcp global config This displays DHCP Option82 port Option82 portname configuration information based on port Result This displays DHCP Option82 configuration information based on port 9 To clear configuration of DHCP Option82 access node identifier use command clear dhcp Option82 ani in global configuration mode This is shown in Table 341 TABLE 341 CLEAR DHCP OPTION82 A
359. use command set bandwidth feport lt portlist gt ingress session 0 3 packet type unknowmulticast broadcast unicast multicast MGMT ARP tcp control tcp data udp non tcpudp enable disable in global configuration mode This is shown in Table 203 Confidential and Proprietary Information of ZTE CORPORATION 135 ZXR10 2920 2928 2952 V1 0 Access Switch User Manual Volume I ZTEDH TABLE 208 SET QOS POLICER PARAMETERS COMMAND Format Mode Function set bandwidth feport lt portlist gt ingress session 0 3 packet type unknowmulticast broadcast unicast multicast MGMT ARP tcp control tcp data udp non tcpudp enable disable This configures the global config ingress session packet type Result This configures the ingress session packet type of flux monitor 10 To configure the ingress session queue priority of the flux monitor use command set bandwidth feport lt portlist gt ingress session 0 3 packet type unknow multicast broadcast unicast multicast MGMT ARP tcp control tcp data udp non tcpudp enable disable in global configuration mode This is shown in Table 203 TABLE 209 SET QOS POLICER PARAMETERS COMMAND Format Mode Function set bandwidth feport lt portlist gt ingress session 0 3 queue priority lt queuelist gt enable disable This configures the global config ingress session queue priority Result This co
360. ust up enable disable in global configuration mode This is shown in Table 51 TABLE 52 PoRT DESCRIPTION COMMAND Format Mode Function set port lt portlist gt Global g trust up enable config This sets port trust up disable Result This sets port trust up To set port trust dscp use command set port lt portlist gt trust dscp enable disable yin global configuration mode This is shown in Table 51 TABLE 53 PORT DESCRIPTION COMMAND Format Mode Function set port lt portlist gt trust dscp Giona This sets port trust dscp config enable disable Result This sets port trust dscp Note When setting megabit port trust dscp the switch also converts it to the corresponding UP The flow is as follows When the IP message enterS from port A that trusts in DSCP firstly we get the default priority def 2 0 0 7 aggregately 3 bits Then mapping the global DSCP TC table according to DSCP value of the message we can get the initial TC value TC 1 0 0 3 aggregately 2 bits of the message We adopt TC 1 0 as the 2 1 digit of UP the last digit of port default priority def O as the new UP digit of the message 0 7 aggregately 3 bits Finally switch mapping the global UP TC table according to the new UP amp get the queue that the message will enter Example the DSCP of a item of message is 60 the entry default priority is 7 trust DSCP DSCP TC mapping table is 60 2 Then in the switch the UP messa
361. uter config This adds a static C D xx xx ARP table entry XX XX XX XX 0 63 lt vlanname gt Result This adds a static ARP table entry Confidential and Proprietary Information of ZTE CORPORATION ZTEmA 2 6 Chapter 7 Service Configuration To delete a static ARP table entry use command arp delete lt A B C D gt in router config mode This is shown in Table 248 TABLE 248 ARP DELETE COMMAND Format Mode Function arp delete A B router config This deletes a static C D ARP table entry Result This deletes a static ARP table entry To delete all static ARP table entry use command clear arp in clear arp in router config mode This is shown in Table 249 TABLE 249 CLEAR ARP COMMAND Format Mode Function clear arp router config This deletes all static ARP table entry Result This deletes static ARP table entry To delete the ipport configuration use command clear ipport 0 63 mac ipaddress lt A B C D M gt lt A B C D gt A B C D j vlan vlanname in router config mode This is shown in Table 250 TABLE 250 ARP IPPORT TIMEOUT COMMAND Format Mode Function arp ipport 0 63 router config This sets ARP table timeout lt 1 1000 gt entry aging time of the IP port Result This deletes the ipport configuration To delste the iproute configuration use command clear iproute lt A B C D M gt lt A B C D A B C D gt A B C D gt in
362. utes of the port server port connecting to DHCP server cascade cascade connecting port client port connecting to client Attribute is client by default 35 To display DHCP information and attribute of the ports use command show dhcp in global configuration mode This is shown in Table 326 TABLE 326 SHOW DHCP COMMAND Format Mode Function show dhcp global config This displays DHCP information and attribute of the ports Result This displays DHCP information and attribute of the ports END OF STEPS Result DHCP global has been configured on ZXR10 2920 2928 2952 and to support snooping and Option82 function Note DHCP global configurations are indispensable precondition to use Snooping and Option82 function Port attribute should be set accurately otherwise it will impact DHCP interaction Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 8 Access Service Configuring DHCP Snooping Purpose This topic describes the DHCP snooping configuration on ZXR10 2920 2928 2952 Steps For the DHCP snooping configuration perform the following steps 1 To enable disable DHCP Snooping function based on port use command set dhcp snooping add delete port lt portlist gt in global configuration mode This is shown in Table 327 TABLE 327 SET DHCP SNOOPING COMMAND Format Mode Function set dhcp snooping global config This enable disable add delete port DHCP Snooping lt portlist g
363. uthentication enable disable mechanism Result This enable disable re authentication mechanism To set the re authentication interval use command dotlx re authenticate period lt 1 4294967295 gt in nas config mode This is shown in Table 262 Confidential and Proprietary Information of ZTE CORPORATION ZTEmA Chapter 8 Access Service TABLE 262 DOT1X RE AUTHENTICATION PERIOD COMMAND Format Mode Function dotlx re nas config This sets the re authenticate authentication period 1 interval 4294967295 Result This sets the re authentication interval Important To judge whether access subscriber maintains connection all time NAS can periodically request re authentication of this subscriber Re authentication needs to initiate a complete authentication process for each on line subscriber If number of subscribers is large there will be a lot of authentication packets which brings a heavy burden to the switch To enable disable abnormal off line detection mechanism of the port use command aaa control port lt portlist gt keepalive enable disable in nas config mode This is shown in Table 263 TABLE 263 AAA CONTROL PORT KEEPALIVE COMMAND Format Mode Function aaa control port nas config This enable disable lt portlist gt abnormal off line keepalive detection enable disable mechanism of the port Result This enable disable abnormal off line detection mechanism of the port To set the abnormal of

ZXR10 2920/2928/2952(V1.0) Access Switch User Manual (Volume I)

Contents

Download Pdf Manuals

Related Search

Related Contents