hix5630 - user manual_cli

SURPASS hiX 5625/30/35 R2.5

Operation Manual CLI

IP-DSLAM

2


Id:0900d80580193ae8

f Important Notice on Product SafetyElevated voltages are inevitably present at specific points in this electrical equipment. Some of the parts may also have elevated operating temperatures.

Non-observance of these conditions and the safety instructions can result in personal injury or in prop-erty damage.

Therefore, only trained and qualified personnel may install and maintain the system.

The system complies with the standard EN 60950-1 / IEC 60950-1. All equipment connected has to comply with the applicable safety standards.

The same text in German:

Wichtiger Hinweis zur Produktsicherheit

In elektrischen Anlagen stehen zwangsläufig bestimmte Teile der Geräte unter Spannung. Einige Teile können auch eine hohe Betriebstemperatur aufweisen.

Eine Nichtbeachtung dieser Situation und der Warnungshinweise kann zu Körperverletzungen und Sachschäden führen.

Deshalb wird vorausgesetzt, dass nur geschultes und qualifiziertes Personal die Anlagen installiert und wartet.

Das System entspricht den Anforderungen der EN 60950-1 / IEC 60950-1. Angeschlossene Geräte müssen die zutreffenden Sicherheitsbestimmungen erfüllen.

Trademarks:

All designations used in this document can be trademarks, the use of which by third parties for their own purposes could violate the rights of their owners.

Copyright (C) Siemens AG 2007

Issued by the Communications GroupHofmannstraße 51D-81359 München

Technical modifications possible.Technical specifications and features are binding only insofar as they are specifically and expressly agreed upon in a written contract.

Copyright (C) Siemens AG 2007

Issued by the Communications GroupHofmannstraße 51D-81359 München

Technical modifications possible.Technical specifications and features are binding only insofar as they are specifically and expressly agreed upon in a written contract.

3


Id:0900d80580193ae8

Table of ContentsThis document has 324 pages.

Change History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151.1 Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151.2 Document Convention . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151.3 Document Notation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161.4 CE Declaration of Conformity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161.5 GPL/LGPL Warranty and Liability Exclusion. . . . . . . . . . . . . . . . . . . . . . . . 16

2 System Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 182.1 System Features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

3 Command Line Interface (CLI) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243.1 Configuration Mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243.1.1 User EXEC Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243.1.2 Privileged EXEC Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253.1.3 Global Configuration Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253.1.4 Bridge Configuration Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263.1.5 Interface Configuration Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263.1.6 Rule Configuration Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273.1.7 DHCP Configuration Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273.1.8 PPPoE Configuration Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283.1.9 RMON Configuration Mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283.1.10 VoIP Configuration Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283.1.11 H248 Configuration Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293.1.12 Configuration Mode Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293.2 Configuration Mode Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303.3 Useful Tips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303.3.1 Telnet Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313.3.2 Listing Available Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 323.3.3 Calling Command History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343.3.4 Using Abbreviation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 353.3.5 Using Command of Privileged EXEC Mode at Other Configuration Mode . 353.3.6 Exiting Current Command Mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

4 System Basic Configuration and Operation . . . . . . . . . . . . . . . . . . . . . . . . 364.1 Basic Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 364.1.1 Prerequisite Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 364.1.2 System Login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 384.1.3 Configuring System login Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 384.1.3.1 Changing Superuser Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 384.1.3.2 Creating New Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 394.1.3.3 Login Banner. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 404.1.3.4 Setting Auto Log-out Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 414.1.3.5 Setting Password for Privileged EXEC Mode . . . . . . . . . . . . . . . . . . . . . . . 424.1.4 Assigning IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

4


Id:0900d80580193ae8

4.1.4.1 Enabling Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 434.1.4.2 Assigning IP Address to Network Interface . . . . . . . . . . . . . . . . . . . . . . . . . 454.1.4.3 Setting Static Route and Default Gateway. . . . . . . . . . . . . . . . . . . . . . . . . . 464.1.4.4 Displaying Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474.1.4.5 Example of Assigning IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474.1.5 Configuring Host Name and Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 484.1.5.1 Setting Host Name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 484.1.5.2 Setting time Zone. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 494.1.5.3 Setting Time and Date . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 504.1.5.4 Enabling Network Time Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 514.1.5.5 Example of setting Hostname & Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 524.1.6 Setting DNS Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 524.2 System Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 524.2.1 Displaying Network Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 524.2.2 Tracing Packet Route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 534.2.3 Displaying User Connecting to System . . . . . . . . . . . . . . . . . . . . . . . . . . . . 534.2.4 Displaying Running Time of System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 544.2.5 Displaying System Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 544.2.6 Displaying System Memory Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . 544.2.7 Setting Memory Overload Threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 544.2.8 Setting CPU Overload threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 554.2.9 Displaying Running Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 554.3 Managing System Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 564.3.1 Understanding Configuration File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 564.3.2 Displaying System Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 564.3.3 Writing System Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 584.4 System Backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 584.4.1 Save configuration file to FLASH . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 584.5 Restoring System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 594.5.1 System Restoration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 594.5.2 Password Restoration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 604.6 Upgrading System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 614.6.1 Manually Upgrading CXU. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 624.6.2 Manually Upgrading IU. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 624.6.3 Manually data uploading for CXU/ IU. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 634.6.4 Automatic System Upgrade / S-APS upgrade . . . . . . . . . . . . . . . . . . . . . . . 654.6.5 Displaying Upgrade Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 664.6.6 Auto Backup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 664.7 Enhancing System Reliability. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

5 Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 705.1 Port Basic. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 705.1.1 General Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 755.2 Configuring Ethernet Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 765.2.1 Basic Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 765.2.1.1 Activating Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 765.2.1.2 Specifying Port Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 765.2.1.3 Setting Auto-negotiation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

5


Id:0900d80580193ae8

5.2.1.4 Setting Transmit Rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 775.2.1.5 Setting Duplex Mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 775.2.1.6 Configuring Flow Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 785.2.1.7 Configuring Link Discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 785.2.1.8 Displaying Traffic Statistic of Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 785.2.1.9 Displaying Port Status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 805.2.1.10 Example of Configuring Ethernet Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . 815.2.2 Link Aggregation Group (LAG) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 825.2.2.1 Port Trunk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 825.2.2.2 Link Aggregation Control Protocol (LACP) . . . . . . . . . . . . . . . . . . . . . . . . . 845.2.2.3 Layer 2 Control Protocol (L2CP). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 895.3 Configuring DSL Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 925.3.1 Understanding Modulation of DSL Signal . . . . . . . . . . . . . . . . . . . . . . . . . . 925.3.1.1 QAM Modulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 925.3.1.2 DMT Modulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 955.3.2 Configuring ADSL Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 965.3.2.1 Enabling LRE (Long Reach Ethernet) on ADSL Port . . . . . . . . . . . . . . . . . 975.3.2.2 Configuring ADSL Line-config Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1005.3.2.3 Configuring ADSL Alarm-config Profile. . . . . . . . . . . . . . . . . . . . . . . . . . . 1135.3.3 Configuring SHDSL Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1215.3.3.1 Configuring SHDSL Line-config Profile. . . . . . . . . . . . . . . . . . . . . . . . . . . 1215.3.3.2 Configuring SHDSL Alarm-config Profile . . . . . . . . . . . . . . . . . . . . . . . . . 1265.3.3.3 Configuring SHDSL Span-config Profile . . . . . . . . . . . . . . . . . . . . . . . . . . 1295.3.3.4 SHDSL bis Tcpam Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1325.3.4 Configuring xDSL Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1335.3.4.1 Configuring xDSL Line-config Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1335.3.4.2 Verifying Line-config Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1425.3.4.3 Verifying physical status information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1425.3.4.4 Verifying channel status information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1435.3.4.5 Displaying line band table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1435.3.4.6 Assigning the configured line-config profile to a port . . . . . . . . . . . . . . . . 1435.3.4.7 xDSL Notch Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1435.3.4.8 xDSL Channel Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1455.3.4.9 xDSL PSD Mask Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1475.3.4.10 xDSL DELT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1485.3.4.11 Configuring xDSL Alarm-config Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . 1505.4 Configuring hiX 56xx to Operate under ATM Environment. . . . . . . . . . . . 1515.4.1 Virtual Channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1515.4.2 DSL Channel Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1535.4.3 VC Rate Limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1535.4.4 Operation Administration Maintenance (OAM) . . . . . . . . . . . . . . . . . . . . . 1535.4.5 ATM Service Category . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1545.5 Rate Limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1565.5.1 Input Rate Limit (IRL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1575.5.1.1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1575.5.1.2 Profile Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1575.5.1.3 Port Mapping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159

6


Id:0900d80580193ae8

5.5.1.4 Displaying IRL Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1615.5.2 IRL Configuration Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1615.5.3 Output Rate Limit (ORL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1625.6 Bridging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1625.6.1 Setting VLAN ID of Uplink Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1625.6.2 Bridge Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1635.6.2.1 Bridge Base . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1635.6.2.2 Configuring Bridge Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1655.6.2.3 Setting IPoA Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1685.6.2.4 Example of Configuring VLAN & Bridge Properties . . . . . . . . . . . . . . . . . . 1685.6.2.5 Example of PPPoA configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1695.6.3 Address Resolution Protocol (ARP). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1695.6.3.1 Configuring ARP Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1705.6.3.2 Using ARP Alias. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1715.6.4 Configuring Access Control List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1715.6.5 MAC Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1735.6.6 Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1745.6.7 Virtual Local Area Network (VLAN) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1755.6.7.1 Creating VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1755.6.7.2 Displaying VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1765.6.7.3 Deleting VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1765.6.7.4 Specifying PVID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1775.6.7.5 Assigning Port to VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1775.6.7.6 VLAN Port Priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1785.6.7.7 VLAN Multicast Permission . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1785.6.7.8 VLAN Multicast-flooding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1795.6.7.9 VLAN MAC Address Translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1795.6.7.10 VLAN Default Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1795.6.7.11 Change Common VLAN to Management VLAN . . . . . . . . . . . . . . . . . . . . 1795.6.7.12 Configuring VLAN Servicetype/Cross-connect . . . . . . . . . . . . . . . . . . . . . 1805.6.8 Broadcast Storm Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1815.6.9 Spanning Tree Protocol (STP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1825.6.9.1 STP Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1825.6.9.2 RSTP Operation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1835.6.9.3 MSTP Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1845.6.9.4 Configuring STP/RSTP/MSTP Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1855.6.9.5 Configuring STP/RSTP/MSTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1865.6.9.6 BPDU Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1935.6.9.7 Sample Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1955.6.10 Ethernet Ring Protection (ERP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1965.6.11 Carrier Ethernet Border Switch (CEBS) . . . . . . . . . . . . . . . . . . . . . . . . . . . 198

6 Managing System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2016.1 Enhancing System Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2016.1.1 Setting System Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2016.1.1.1 Setting Authentication Method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2016.1.1.2 Setting Authentication Interface to Access RADIUS or TACACS Server. . 2016.1.1.3 Setting Primary Authentication Method . . . . . . . . . . . . . . . . . . . . . . . . . . . 202

7


Id:0900d80580193ae8

6.1.1.4 Setting RADIUS Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2026.1.1.5 Setting TACACS+ Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2046.1.1.6 Accounting Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2056.1.1.7 Displaying System Authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2066.1.2 Setting Mac Address Limitation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2066.1.3 Setting Max Host. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2076.2 Performance Data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2096.2.1 Performance Data of ADSL Port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2096.2.1.1 15 Minutes Performance Interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2096.2.1.2 Performance Data of ATU-C. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2106.2.1.3 Performance Data of ATU-R. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2106.2.1.4 Channel Performance Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2116.2.1.5 Clearing Performance Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2116.2.2 Performance Data of xDSL Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2126.2.2.1 Interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2126.2.2.2 15 Minutes Performance Interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2126.2.2.3 1 Day Performance Interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2136.2.2.4 Performance Data of VTU-C/VTU-R. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2136.2.2.5 Performance Data of xDSL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2146.3 Equipment Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214

7 Network Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2207.1 Simple Network Management Protocol (SNMP). . . . . . . . . . . . . . . . . . . . 2207.1.1 SNMP Community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2207.1.2 Information of SNMP Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2217.1.3 SNMP Com2sec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2227.1.4 SNMP Group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2227.1.5 SNMP View Record . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2227.1.6 Permission to Access SNMP View Record. . . . . . . . . . . . . . . . . . . . . . . . 2237.1.7 SNMP Version 3 User. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2237.1.8 SNMP Trap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2247.1.9 Displaying SNMP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2257.1.10 Disabling SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2257.2 Remote Monitoring (RMON) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2257.2.1 RMON History. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2267.2.1.1 Source Port of Statistical Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2277.2.1.2 Subject of RMON History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2277.2.1.3 Number of Sample Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2277.2.1.4 Interval of Sample Inquiry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2277.2.1.5 Activating RMON History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2287.2.1.6 Deleting Configuration of RMON History . . . . . . . . . . . . . . . . . . . . . . . . . 2287.2.1.7 Displaying RMON History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2287.2.2 RMON Alarm. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2287.2.2.1 Subject of RMON Alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2297.2.2.2 Object of Sample Inquiry. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2297.2.2.3 Absolute and Delta Comparison . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2307.2.2.4 Upper Bound of Threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2307.2.2.5 Lower Bound of Threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 230

8


Id:0900d80580193ae8

7.2.2.6 Standard of the First Alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2317.2.2.7 Interval of Sample Inquiry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2317.2.2.8 Activating RMON Alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2327.2.2.9 Deleting Configuration of RMON Alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . 2327.2.2.10 Displaying RMON Alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2327.2.3 RMON Event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2327.2.3.1 Event Community. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2327.2.3.2 Event Description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2337.2.3.3 Subject of RMON Event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2337.2.3.4 Event Type. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2337.2.3.5 Activating RMON Event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2337.2.3.6 Deleting Configuration of RMON Event . . . . . . . . . . . . . . . . . . . . . . . . . . . 2337.2.3.7 Displaying RMON Event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2347.2.3.8 Showing RMON Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2347.3 Syslog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2347.3.1 Syslog Output Level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2347.3.2 Facility Code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2367.3.3 Syslog Bind Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2367.3.4 Debug Message for Remote Terminal . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2377.3.5 Enabling/Disabling Syslog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2377.3.6 Displaying Syslog Message . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2377.3.7 Displaying Syslog Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237

8 IP Routing Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2398.1 BGP Routing Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2398.1.1 Basic Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2398.1.1.1 Activating BGP Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2398.1.1.2 AS Route Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2408.1.1.3 BGP Filtering through Prefix Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2408.1.2 Advanced Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2428.1.2.1 Configuring BGP Community Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2428.1.2.2 Checking and Managing BGP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2428.2 OSPF Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2438.2.1 Enabling OSPF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2448.2.2 Configuring Network OSPF Type. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2448.3 RIP Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2448.3.1 Enabling RIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2458.3.2 Configuring RIP Neighbor Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2468.3.3 Configuring RIP Version. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2488.3.4 Creating Static Route available only for RIP . . . . . . . . . . . . . . . . . . . . . . . 2488.3.5 Transmitting Routing Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2498.3.6 Configuring Metrics for Redistributed Routes . . . . . . . . . . . . . . . . . . . . . . 2498.3.7 Configuring Administrative Distance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2508.3.8 Creating Default Route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2508.3.9 Routing Information Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2508.3.10 Configuring Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2518.3.11 Configuring Split-Horizon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2518.3.12 Managing Authentication Key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 252

9


Id:0900d80580193ae8

8.3.13 Monitoring and Managing RIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2528.4 IS-IS Routing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2538.4.1 Router Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2538.4.2 Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2548.4.3 Packet Type Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2548.4.4 Metrics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2568.4.5 Mesh Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2568.4.6 Checking current Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 256

9 Rule and QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2589.1 How to Operate Rule and QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2589.1.1 How to Operate Rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2589.1.2 How to Operate QoS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2599.2 Rule Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2609.2.1 Creating Rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2609.2.2 Rule Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2619.2.3 Rule Priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2639.2.4 Rule Match . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2639.2.5 Rule Action . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2669.2.6 Applying Rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2699.2.7 Displaying Rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2709.2.8 Deleting Rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2719.2.9 IRL Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2719.2.10 IRL Port Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2739.3 Quality of Service (QoS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2739.3.1 802.1p Priory-to-queue Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2749.3.2 Scheduling Algorithm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2759.3.3 Weights and Watermarks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2769.3.4 Packet Counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2779.3.5 QoS Shaping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2789.3.6 Displaying QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279

10 Upper Layer Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28010.1 Internet Group Management Protocol (IGMP) . . . . . . . . . . . . . . . . . . . . . 28010.1.1 Enabling/Disabling IGMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28010.1.2 IGMP Provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28110.1.3 IGMP Queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28210.1.4 IGMP Host Parameter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28210.1.5 IGMP Multicast Package. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28310.1.6 IGMP Subscriber. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28310.1.7 Whole-Packet-checksum . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28410.2 Dynamic Host Configuration Protocol (DHCP) . . . . . . . . . . . . . . . . . . . . . 28410.2.1 DHCP/PPPoE Provider. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28510.2.1.1 Inner VLAN ID for DHCP/PPPoE Provider . . . . . . . . . . . . . . . . . . . . . . . . 28610.2.1.2 IP Address for DHCP Provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28610.2.1.3 DHCP Server for DHCP Provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28610.2.1.4 Default Gateway for DHCP Provider. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28710.2.1.5 Simplified DHCP Provider. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287

10


Id:0900d80580193ae8

10.2.1.6 CEBS MAC Address Translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28710.2.1.7 Displaying DHCP Provider Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . 28710.2.2 Assigning DHCP/PPPoE Provider to VLAN. . . . . . . . . . . . . . . . . . . . . . . . 28710.2.3 DHCP Relay Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28810.2.4 DHCP Flood. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28910.2.5 DHCP Option 82/Option 105 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28910.2.5.1 Enabling Option 82/Option 105 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29010.2.5.2 Option 82 Packet Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29110.2.6 Verifying DHCP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29110.2.7 DHCP Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29110.2.8 Displaying DHCP Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29210.2.9 Changing Destination MAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29210.3 IP Anti-Spoofing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29310.4 Uplink MAC Address Anti-Spoofing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29310.4.1 Port MAC Address Translation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29410.4.2 DSLAM MAC Address Translation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29410.5 Storm Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29410.6 Bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29510.7 Maximum Transmission Unit (MTU). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29510.8 Enabling/Blocking Static IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295

11 VoIP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29711.1 Basic Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29711.2 H248 Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29711.2.1 Creating and Configuring H248 Virtual Gateway . . . . . . . . . . . . . . . . . . . . 29811.3 Profile Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30011.3.1 MG Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30011.3.2 MGC Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30211.3.3 Codec Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30311.3.4 Jitter Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30611.3.5 Fax Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30611.3.6 RTCP Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30811.3.7 Voice ctp Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30911.3.8 Pots . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31011.3.9 IPhost Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31111.3.10 PPTP Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31211.3.11 Analog Profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31311.3.12 DM Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31411.3.13 Trap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31511.3.14 Priority Profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31611.4 VoIP Example and Explanation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31611.4.1 Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31711.4.2 Explanation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 319

12 Abbreviations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 321

11


Id:0900d80580193ae8

List of FiguresFigure 1 Overview of Configuration Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30Figure 2 M1200 Slot Allocation for CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70Figure 3 M1100/G1100 Slot Allocation for CLI. . . . . . . . . . . . . . . . . . . . . . . . . . . 71Figure 4 M600 Slot Allocation for CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72Figure 5 M400 Slot Allocation for CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73Figure 6 G400 Slot Allocation for CLI (Example: for ETSI application) . . . . . . . . 73Figure 7 G400R Slot Allocation for CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74Figure 8 Transmission in DSL System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92Figure 9 4-Bit QAM and 16-Bit QAM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93Figure 10 4-Bit QAM Modulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93Figure 11 2-Band QAM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94Figure 12 3-Band QAM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95Figure 13 4-Band QAM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95Figure 14 DMT Modulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96Figure 15 Transmit Rate according to SNR Margin . . . . . . . . . . . . . . . . . . . . . . . 103Figure 16 Counting Times of Error. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 209Figure 17 DHCP Option 82 Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290Figure 18 H.248 (MEGACO) Network Configuration . . . . . . . . . . . . . . . . . . . . . . 298Figure 19 VoIP Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 317

12


Id:0900d80580193ae8

List of TablesTable 1 Command Notation of Guide Book . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16Table 2 CXU for hiX 56xx . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19Table 3 Maximum line capacity of hiX5635 . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19Table 4 Maximum line capacity of hiX5630 . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20Table 5 Maximum line capacity of hiX5625 . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20Table 6 Main Command of User EXEC Mode . . . . . . . . . . . . . . . . . . . . . . . . . . 24Table 7 Main Command of Privileged EXEC Mode . . . . . . . . . . . . . . . . . . . . . . 25Table 8 Main Command of Configuration Mode . . . . . . . . . . . . . . . . . . . . . . . . 25Table 9 Main Command of Bridge Configuration Mode . . . . . . . . . . . . . . . . . . . 26Table 10 Main Command of Interface Configuration Mode . . . . . . . . . . . . . . . . . 27Table 11 Main Commands of Rule Configuration Mode . . . . . . . . . . . . . . . . . . . . 27Table 12 Main Command of DHCP Configuration Mode . . . . . . . . . . . . . . . . . . . 28Table 13 Main Commands of RMON Configuration Mode . . . . . . . . . . . . . . . . . . 28Table 14 Main Commands of VoIP Configuration Mode . . . . . . . . . . . . . . . . . . . . 29Table 15 Main Commands of H248 Configuration Mode . . . . . . . . . . . . . . . . . . . 29Table 16 Command Abbreviation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35Table 17 World Time Zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49Table 18 Port Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80Table 19 Information of ADSL Line-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111Table 20 IRL Value . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157Table 21 STP Path-cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187Table 22 RSTP Path-cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187Table 23 Setting Authentication Method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201Table 24 Setting Authentication Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202Table 25 Setting Primary Authentication Method . . . . . . . . . . . . . . . . . . . . . . . . 202Table 26 Adding RADIUS Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202Table 27 Deleting RADIUS Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203Table 28 Setting Timeout of Authentication Request . . . . . . . . . . . . . . . . . . . . . 203Table 29 Setting Frequency of Restransmit . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203Table 30 Adding TACACS+ Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204Table 31 Deleting TACACS+ Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204Table 32 Specifying Timeout Value . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204Table 33 TCP Port for Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205Table 34 Selecting Authentication Type for TACACS+ . . . . . . . . . . . . . . . . . . . . 205Table 35 Defining User’s Priority Level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205Table 36 Setting Accounting Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206Table 37 Displaying System Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206Table 38 Setting MAC Address Limitation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206Table 39 Displaying Access Control List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 207Table 40 Configuring Max Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 207Table 41 Deleting Configured Max Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208Table 42 Displaying Configured Max Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208Table 43 Displaying 15 Min Performance Interval . . . . . . . . . . . . . . . . . . . . . . . 209Table 44 Displaying Performance Data of ATU-C . . . . . . . . . . . . . . . . . . . . . . . 210Table 45 Displaying Performance Data of ATU-R . . . . . . . . . . . . . . . . . . . . . . . 211

13


Id:0900d80580193ae8

Table 46 Displaying Channel Performance Data of ATU-C/R . . . . . . . . . . . . . . 211Table 47 Clearing All Performance Data of ADSL Port . . . . . . . . . . . . . . . . . . . 212Table 48 Show Number of Valid Intervals . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 212Table 49 Displaying Performance Data of ATU-R . . . . . . . . . . . . . . . . . . . . . . . 213Table 50 Displaying Performance Data of ATU-R . . . . . . . . . . . . . . . . . . . . . . . 213Table 51 Displaying Performance Data of ATU-R . . . . . . . . . . . . . . . . . . . . . . . 214Table 52 Creating New Module(to be continued) . . . . . . . . . . . . . . . . . . . . . . . 214Table 53 Creating New Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215Table 54 Resetting Equipped Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217Table 55 Deleting Existing Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217Table 56 Changing Administrative State . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218Table 57 Changing Alarm Severity Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218Table 58 Changing External Alarm Configuration . . . . . . . . . . . . . . . . . . . . . . . 218Table 59 Changing Temperature Warning Thresholds . . . . . . . . . . . . . . . . . . . 218Table 60 Changing Thumidity Alarm Thresholds . . . . . . . . . . . . . . . . . . . . . . . . 219Table 61 Displaying Physical Tables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219Table 62 Rule Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 262Table 63 Rule Type with allowed Rule Match . . . . . . . . . . . . . . . . . . . . . . . . . . 262Table 64 Default 802.1p Priory-to-queue Mapping . . . . . . . . . . . . . . . . . . . . . . 274Table 65 Watermark Default Value . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276Table 66 Watermark Default Value . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276Table 67 Descriptions for variable command . . . . . . . . . . . . . . . . . . . . . . . . . . . 297

14


Id:0900d80580193ba6

Change History

Change History2.Update (08.10.2007)

System Basic Configuration and Operation (4)

– “netdevice” commands added

Port Configuration (5)

– “alarm history” commands added.– “upstream and downstream virtual noise” commands added.– “lre adsl-atm-bandwidth-check/overbook” commands added.

Bridging (5.6)

– Example for configuring the vlan cross-connect mode added.– Multicast package group deleted

Rule and QoS (9)

– New command: “qos shaping profile fastcreate...” is added.

1.Update (13.07.2007)

Initial release (03.05.2007)

15

Operation Manual CLI Introduction

Id:0900d80580145762

1 Introduction

1.1 AudienceThis manual is intended for SURPASS hiX 5635/30/25 Ethernet/IP-DSLAM operators and maintenance personnel for providers of digital subscriber line (DSL) and voice over internet protocol(VoIP) services. This manual assumes that you are familiar with the fol-lowing:

• Ethernet networking technology and standards • Internet topologies and protocols • DSL technology and standards • VoIP technology and standards • ATM technology and standards • Usage and functions of graphical user interfaces.

1.2 Document ConventionThis guide uses the following conventions to convey instructions and information.

Information

g This information symbol provides useful information when using commands to con-figure and means reader take note. Notes contain helpful suggestions or references.

Warning

!This warning symbol means danger. You are in a situation that could cause bodily injury or broke the equipment. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents by making quick guide based on this guide.

16


Id:0900d80580145762

Introduction

1.3 Document NotationThe following table shows commands used in guide book. Please be aware of each command to use them correctly.

1.4 CE Declaration of ConformityThe CE declaration of the product will be fulfilled if the construction and cabling is under-taken in accordance with the manual and the documents listed there in, e.g. mounting instructions, cable lists where necessary account should be taken of project-specific documents.

Deviations from the specifications or unstipulated changes during construction, e.g. the use of cable types with lower screening values can lead to violation of the CE require-ments. In such case the conformity declaration is invalidated and the responsibility passes to those who have caused the deviations.

1.5 GPL/LGPL Warranty and Liability ExclusionThe Siemens product, SURPASS hiX 5625/30/35, contains both proprietary software and “Open Source Software”. The Open Source Software is licensed to you at no charge under the GNU General Public License (GPL) and the GNU Lesser General Public License (LGPL). This Open Source Software was written by third parties and enjoys copyright protection. You are entitled to use this Open Source Software under the con-ditions set out in the GPL and LGPL licenses indicated above. In the event of conflicts between Siemens license conditions and the GPL or LGPL license conditions, the GPL and LGPL conditions shall prevail with respect to the Open Source portions of the soft-ware.

The GPL can be found under the following URL:

http://www.gnu.org/copyleft/gpl.html

The LGPL can be found under the following URL:

http://www.gnu.org/copyleft/lgpl.html

In addition, if the source code to the Open Source Software has not been delivered with this product, you may obtain the source code (including the related copyright notices) by sending your request to the following e-mail address: [email protected]

Notation Description

a Commands you should use as is.

NAME, PROFILE, VALUE, … Variables for which you supply values.

PORTS For entry this variable, see Section 5.1

[ ] Commands or variables that appear within square brackets [ ] are optional.

< > Range of number that you can use.

{ } A choice of required keywords appears in braces { }. You must select one.

| Optional variables are separated by vertical bars |.

Table 1 Command Notation of Guide Book

17

Operation Manual CLI Introduction

Id:0900d80580145762

You will, however, be required to reimburse Siemens for its costs of postage and copying. Any source code request made by you must be sent within 3 years of your purchase of the product. Please include a copy of your sales receipt when submitting your request. Also please include the exact name and number of the device and the version number of the installed software.

The use of Open Source Software contained in this product in any manner other than the simple running of the program occurs at your own risk, that is, without any warranty claims against Siemens. For more information about the warranties provided by the authors of the Open Source Software contained in this product, please consult the GPL and LGPL.

You have no warranty claims against Siemens when a defect in the product is or could have been caused by changes made by you in any part of the software or its configura-tion. In addition, you have no warranty claims against Siemens when the Open Source Software infringes the intellectual property rights of a third party.

Siemens provides no technical support for either the software or the Open Source Software contained therein if either has been changed.

18


Id:0900d8058017d18d

System Overview

2 System OverviewThe hiX 56xx is a shelf based modular Ethernet/IP-DSLAM that terminates the ATM and Ethernet traffic coming from the subscriber lines and consolidates it on one or more Fast/Gigabit Ethernet interfaces towards the Metropolitan Area. For DSL, the ATM layer (PVCs – Permanent Virtual Connections) is terminated on the interface unit and trans-lated to Ethernet to be transported through an Ethernet/IP environment. The multiple PVCs/VLAN are usually mapped into one or more VLANs and forwarded to the right destination with the appropriate CoS.

DSL is the ideal solution for the bottleneck of the last mile, providing voice, data, and video solutions.

The following DSL technologies are introduced:

– VDSL2– ADSL2+– SHDSL

Additional, POTS interfaces for Voice over IP (VoIP) can be provided.

It's high speed interfaces are suitable for asymmetrical and symmetrical applications such as High-speed Internet access, teleworking, video conferences, virtual private net-working and streaming multimedia content and video.

hiX56xx can also work as an VoIP Access Gateway(AGW),that introduces the IP tele-phony technology that enables to do the mediation between legacy TDM networks and emerges next generation IP packet networks by converting voice streams originating from the PSTN to media streams for IP networks and vice versa.The primary function of an access gateway is to provide the inter-working function between traditional voice telephony links and packet network links. For example, hiX 56xx performs a translation between compressed speech packet in Internet Protocol (IP) and Pulse Code Modu-lated (PCM) speech over Time Division Multiplexed (TDM) links. Incoming calls from the subscriber POTS lines will be processed at the VPLU in terms of media processing and call control interworking. The voice traffic will be digitized, compressed (if necessary and encapsulated into RTP ready for transport via IP. The call signaling will be translated into H.248 protocol. The AGW supports all call related tone detection and generation resources in order to support the basic call as well supplementary services controlled by the Media Gateway Controller (e.g. hiE9200).Additionally voiceband data (fax and modem) transmission over IP will be supported.

The VoIP feature in the hiX 56xx will ensure seamless inter-working with the soft switch, the SURPASS hiE 9200, from day one. Existing hiX 56xx installed base will have the option by software upgrade to become a multi-service AGW by simply adding a VoIP interface unit into the system.

The CXU is the central unit of hiX 5625/hiX 5630 and hiX 5635, it plays the important role of switching the traffic, managing all components and providing the network inter-faces. The CXU contains 4 fixed electrical GE interfaces and 4 interfaces for optical GE uplinks. Maximal 4 of these 8 possible uplinks can be used. The uplinks can be used as uplink towards the core network or they are used either to cascade other DSLAMs or to connect to a collocated switch. A typical configuration can be e. g.: 2 optical GB uplinks and 2 electrical GB links towards a cascaded/collocated DSLAM/switch. In order to be able to use the optical uplinks separate pluggable modules (SFPs) have to be delivered for these slots.

There are various types of central units for different shelves:

19

Operation Manual CLI System Overview

Id:0900d8058017d18d

The maximum line capacity of hiX 56xx is dependent on the equipment configuration, Table 3 lists the maximum line capacity of hiX 5635

Table 4 lists the maximum line capacity of hiX 5630

Product Name Shelf CXU

hiX 5635 M1200 CXU_B

hiX 5635 M1100 CXU_B1

hiX 5635 G1100 CXU_B1

hiX 5630 M600 CXU_C

hiX 5625 M400 CXU_C

hiX 5625 G400/G400R CXU_C

Table 2 CXU for hiX 56xx

Shelf CXU Plug-in Units Maximum Line Capacity

M1200

One CXU_B

24 port VDSL 24 x 16 = 384

48 port ADSL 48 x 16 = 768

72 port ADSL 72 x 16 = 1152

48 port SHDSL 48 x 16 = 768

72 port VPLU 72 x 16 = 1152

Two CXU_Bs

24 port VDSL 24 x 15 = 360

48 port ADSL 48 x 15 = 720

72 port ADSL 72 x 15 = 1080

48 port SHDSL 48 x 15 = 720

72 port VPLU 72 x 15 = 1080

M1100 One CXU_B1

24 port VDSL 24 x 15 = 360

72 port ADSL 72 x 15 = 1080

48 port SHDSL 48 x 15 = 720

72 port VPLU 72 x 15 = 1080

G1100 One CXU_B1

24 port VDSL 24 x 14 = 336

72 port ADSL 72 x 14 = 1008

48 port SHDSL 48 x 14 = 672

72 port VPLU 72 x 14 = 1008

M1100/G1100 Two CXU_B1s

24 port VDSL 24 x 14 = 336

72 port ADSL 72 x 14 = 1008

48 port SHDSL 48 x 14 = 672

72 port VPLU 72 x 14 = 1008

Table 3 Maximum line capacity of hiX5635

20


Id:0900d8058017d18d

System Overview

Table 5 lists the maximum line capacity of hiX 5625

The following different network scenarios with and without subtending of network elements are possible:

• Point-to-point networks • Ring networks or Meshed networks. • Meshed networks.

The network topology at the subtending interfaces can be point-to-point tree.

2.1 System FeaturesSURPASS hiX 56xx provides the following features.

VLAN

Virtual Local Area Network (VLAN) is made by dividing one network into several logical networks. Packet can not be transmitted and received between different VLANs. There-fore it can prevent undesired broadcasting forwarding and provide among between seg-mented small LANs. The hiX 56xx recognizes 802.1q tagged frame and supports maximum 4096 VLANs.

Shelf CXU Maximum Plug-in Units Maximum Line Capacity

M600 Two CXU_Cs

24 port VDSL 24 x 8 = 192

72 port ADSL 72 x 8 = 576

48 port ADSL 48 x 8 = 384

48 port SHDSL 48 x 8 = 384

72 port VPLU 72 x 8 = 576


Shelf CXU Plug-in Units Maximum Line Capacity

M400

One CXU_C

24 port VDSL 24 x 2 = 48

72 port ADSL 72 x 5 = 360

48 port SHDSL 48 x 5 = 240

72 port VPLU 72 x 5 = 360

Two CXU_Cs

24 port VDSL 24 x 2 = 48

72 port ADSL 72 x 4 = 288

48 port SHDSL 48 x 4 = 192

72 port VPLU 72 x 4 = 288

G400/G400R Two CXU_Cs

24 port VDSL 24 x 2 = 48

72 port ADSL 72 x 4 = 288

48 port SHDSL 48 x 4 = 192

72 port VPLU 72 x 4 = 288


21


Id:0900d8058017d18d

Quality of Service (QoS)

For the hiX 56xx, QoS-based forwarding sorts traffic into a number of classes and marks the packets accordingly. Different quality of service is provided to each class, which the packets belong to. The rich QoS capabilities enable network managers to protect mission-critical applications and support differentiated levels of bandwidth for managing traffic congestion. The hiX 56xx supports delay priority of the packet based on the IEEE 802.1p class of services (CoS) standard.

IP Multicast

The hiX 56xx provides IGMP snooping and IGMP querier. It allows users to selectively receive multicast traffic that is transmitted to only hosts who need them. It effectively reduces the amount of multicast traffic on network.

SNMP/RMON

In simple network management protocol (SNMP) mode, the DSLAM can manage and monitor switch is mounted at a remote place. The hiX 56xx supports SNMP version 1, 2, and four kinds of groups remote monitoring (RMON) so that administrator can check static data anytime.

Dynamic Host Configuration Protocol (DHCP)

The hiX 56xx supports dynamic host configuration protocol (DHCP) which automatically assigns IP address to clients accessed to network. You can effectively utilize limited IP source and lower cost to manage network because DHCP server manages all IP addresses from center.

Spanning Tree Protocol (STP)

To prevent loop and preserve backup route in Layer 2 network, the hiX 56xx supports spanning tree protocol (STP) defined in IEEE 802.1D and also supports a few STP evolutions: RSTP and MSTP. Between STP enabled switches, a root bridge is automat-ically selected and the network remains in tree topology. Rapid spanning tree protocol (RSTP, IEEE 802.1w) provides faster spanning tree convergence after a topology change. Multiple spanning tree protocol (MSTP; IEEE 802.1s) allows several VLANs to be mapped to a reduced number of spanning tree instances. STP could not work each VLAN, but in MSTP each instance handles multiple VLANs that have the same Layer 2 topology.

Rate-limit

The hiX 56xx provides graded bandwidth to all ports. Through providing bandwidth graded by user’s configuration, ISP can charge a service bill to subscribers according to their rate-limit grade. It also can plan and manage subscriber's lines in the most efficient and economized way.

ARP-alias

22


Id:0900d8058017d18d

System Overview

ARP-alias makes concentrating switch respond to ARP request from equipment without registered IP address for clients’ communication.

Port Trunk

The hiX 56xx aggregates several physical interfaces into one logical port (aggregate port). The port trunk aggregates interfaces that have same speed, duplex mode and VLAN ID into one. According to IEEE 802.3ad, the hiX 56xx can bind up to eight ports as an aggregate port and can create maximum six aggregate ports.

Link Aggregation Control Protocol (LACP)

The hiX 56xx supports Link Aggregation Control Protocol (LACP), complying with IEEE 802.3ad, which aggregates multiple links of the device to use more enlarged bandwidth.

Layer 2 Control Protocol (L2CP)

SURPASS hiX 56xx supports the Layer 2 Control Protocol (L2CP) for high speed Internet access via xDSL subscriber lines and uplink interfaces of CXU.

System Management based on CLI

It is easy for system administrators to configure system functions by using CLI through telnet or console port. They can search available CLI commands by help menu conve-niently and configure the needed functions.

Broadcast Storm Control

Broadcast storm may happen when constant broadcast or multicast traffics are flooded on the network and it eventually leads to a complete loss of network connectivity as the traffics occupy most of the transmit capacities. The hiX 56xx implements broadcast storm control function which disuses flooding packet that exceeds the limit during the time configured by user.

Secure Shell (SSH)

Network security is getting more important because the access network has been gen-eralized among numerous users. However, typical FTP and telnet service have big weakness for their security. Secure shell (SSH) is a network protocol that allows estab-lishing a secure channel between a local and a remote computer. It uses public-key cryptography to authenticate the remote computer and to allow the remote computer to authenticate the user. SSH server feature is enabled in the hiX 56xx by default, but note that the CLI for SSH is not provided.

VoIP Protocols

H.248 protocol is developed for real time multimedia data communication on IP. MEGACO standard is regulated by IETF and ITU. It is for outer call agent with MGCP, that is, for interface between MGC (Media Gateway Controller) and MG (Media Gate-way).

23


Id:0900d8058017d18d

Layer 2 Switching Scenario “S1”

The “S1” layer-2 scenario comprises four flavors of tagging and switching, which are

• Cross-Connect / Residential (referred to as CC+P+S) • Cross-Connect / Business (referred to as CC+P) • Bridged Mode / Residential (referred to as Br+S) • Bridged Mode / Business (referred to as Br+P)

24


Id:0900d80580141acd

Command Line Interface (CLI)

3 Command Line Interface (CLI)The hiX 56xx enables system administrators to manage the hiX 56xx by providing the command line interface (CLI). This user-friendly CLI provides you with a more conve-nient management environment.

To manage the system with the CLI, a management network environment is required. The hiX 56xx can connect to the management network either directly (outband) or through the access network (inband). It can even connect using a combination of the two; for example, a cascaded hiX 56xx connects inband to the cascading switch, and then from the cascading switch to the management network through the outband inter-face.

The hiX 56xx also provides the RS232 console interface to simply access the system with a provided RJ45-to-DB9 cable.

This chapter describes a basic instruction for using the command line interface (CLI) which is used for managing the hiX 56xx system.

• Configuration Mode • Configuration Mode Overview • Useful Tips

3.1 Configuration ModeYou can configure and manage the hiX 56xx with the CLI via a management network environment or the console interface.

The CLI provides the following command modes:

• User EXEC Mode • Privileged EXEC Mode • Global Configuration Mode • Bridge Configuration Mode • Interface Configuration Mode • Rule Configuration Mode • DHCP Configuration Mode • PPPoE Configuration Mode • RMON Configuration Mode • VoIP Configuration Mode • H248 Configuration Mode

3.1.1 User EXEC ModeWhen you log in to the system, the CLI will start with User EXEC mode which is a read-only mode. In this mode, you can see a system configuration and information with several commands.

Table 6 shows main command of User EXEC mode.

Command Description

enable Open privileged EXEC mode.

exit Log out the system.

Table 6 Main Command of User EXEC Mode

25

Operation Manual CLI Command Line Interface (CLI)

Id:0900d80580141acd

3.1.2 Privileged EXEC ModeTo configure the system, you need to open Privileged EXEC mode with the enable command, then the system prompt will change from SWITCH> to SWITCH#.

You can set a password to Privileged EXEC mode to enhance security. Once setting a password, you should enter a configured password, when you open Privileged EXEC Enable mode. For detailed information setting password for Privileged EXEC mode, refer to 4.1.3.5 Setting Password for Privileged EXEC Mode.

Table 7 shows main commands of Privileged EXEC mode.

3.1.3 Global Configuration ModeIn Global Configuration mode, you can configure general functions of the system. You can also open another configuration mode from this mode.

To open Global Configuration mode, enter the configure terminal command, and then the system prompt will be changed from SWITCH# to SWITCH(config)#.

Table 8 shows main commands of Global Configuration mode.

show Show a system configuration and information.

Command Description

Table 6 Main Command of User EXEC Mode (Cont.)

Command Mode Description

enable User Open Privileged EXEC mode

Command Description

clock Set a system time and date.

configure terminal Open Global Configuration mode.

telnet Connect to a remote host through telnet.

terminal length Configure the number of line of the current terminal.

traceroute Trace a packet route.

where Display users accessing the system via telnet or console.

Table 7 Main Command of Privileged EXEC Mode


configure terminal Privileged Open Configuration mode from Privileged EXEC mode

Command Description

access-list Configure an access list.

arp Register an IP address and MAC address in ARP table.

Table 8 Main Command of Configuration Mode

26


Id:0900d80580141acd


3.1.4 Bridge Configuration ModeIn Bridge Configuration mode, you can configure various Layer 2 functions such as VLAN, STP, LACP, etc.

To open Bridge Configuration mode, enter the bridge command, then the system prompt will be changed from SWITCH(config)# to SWITCH(bridge)#.

Table 9 shows main commands of Bridge Configuration mode.

3.1.5 Interface Configuration ModeIn Interface Configuration Mode, you can configure a specified interface.

bridge Open Bridge Configuration mode.

dns Set a DNS server.

exec-timeout Set an auto log-out timer.

help Show a description of the interactive help system.

hostname Set a host name of the system.

interface Open Interface Configuration mode to configure a specified interface.

ntp Configure NTP.

passwd Set a system password.

qos Configure QoS.

rmon-history Open RMON Configuration mode to configure RMON history.

rule Open Rule Configuration mode to configure a rule.

snmp Configure SNMP.

syslog Configure a syslog.

time-zone Specify the time zone.

Command Description

Table 8 Main Command of Configuration Mode (Cont.)


Bridge Global Opens Bridge Configuration mode.

Command Description

lacp Configure LACP.

mac Configure a MAC table.

mirror Configure a port mirroring.

port Configure Ethernet port.

stp Configure STP.

trunk Configure a trunk port.

vlan Configure VLAN.

Table 9 Main Command of Bridge Configuration Mode

27


Id:0900d80580141acd

To open Interface Configuration mode, enter the interface command, then the system prompt will be changed from SWITCH(config)# to SWITCH(config-if)#.

Table 10 shows main commands of Interface Configuration mode.

3.1.6 Rule Configuration ModeIn Rule Configuration mode, you can configure a rule for incoming packets. The rule classifies incoming traffic, and then processes the traffic according to defined policies.

To open Rule Configuration mode, enter the rule command, then the system prompt will be changed from SWITCH(config)# to SWITCH(config-rule[NAME])#.

Table 11 shows main commands of Rule Configuration mode.

3.1.7 DHCP Configuration ModeIn DHCP Configuration mode, you can configure general functions of DHCP per each DHCP pool.

To open DHCP Configuration mode, enter the ip dhcp provider command, then the system prompt will be changed from SWITCH(config)# to SWITCH(dhcp-provider)#.


interface INTERFACE Global Open Interface Configuration mode.

Command Description

bandwidth Configure a bandwidth.

description Specify a description.

ip address Assign IP address.

shutdown Deactivate an interface.

mtu Set MTU value.

Table 10 Main Command of Interface Configuration Mode


rule NAME create Global Open Rule Configuration mode.

Command Description

apply Save and apply a configured rule.

match Classify packets according to a given condition.

action Configure a rule action for classified packets.

no-action Configure a rule action for packets which do not meet a given condi-tion.

type Define a rule type.

prio Define the priority for rule.

Table 11 Main Commands of Rule Configuration Mode

28


Id:0900d80580141acd


Table 12 shows main commands of DHCP Pool Configuration mode.

3.1.8 PPPoE Configuration ModeIn PPPoE configuration mode, you can configure PPPoE provider’s VLAN ID, option105 flags . To open PPPoE Configuration mode, enter the ip pppoe provider command, then the system prompt will be changed from SWITCH(config)# to SWITCH(pppoe-provider)#.

3.1.9 RMON Configuration ModeIn RMON Configuration mode, you can configure RMON alarm, RMON event and RMON history. The hiX 56xx provides three different configuration modes to configure each type of RMON.

Table 13 shows main commands of RMON Configuration mode.

3.1.10 VoIP Configuration ModeIn VoIP Configuration mode, you can configure profiles for VoIP functions.

To open VoIP Configuration mode, enter the voip command, then the system prompt will be changed from SWITCH(config)# to SWITCH(voip)#.

To begin VoIP mode, use the following command.


ip dhcp provider NAME Global Open DHCP Configuration mode to configure DHCP.

Command Description

simplified Configure DHCP provider’s type.

option82 Configure DHCP provider’s option 82 flags.

Table 12 Main Command of DHCP Configuration Mode


ip pppoe provider NAME Global Open PPPoE Configuration mode.


rmon-alarm <1-65535>

Global

Open RMON Configuration mode.1-65535: index number

rmon-event <1-65535>

rmon-history <1-65535>

Command Description

active Activate RMON.

owner Show the subject, which configures each RMON and uses related information.

Table 13 Main Commands of RMON Configuration Mode

29


Id:0900d80580141acd

Table 14 shows some commands of VoIP Configuration mode.

3.1.11 H248 Configuration ModeIn H248 Configuration mode, you can configure H248 virtual gateway and profiles such as mgcprofile, mgprofile.

To open H248 Configuration mode, enter the h248 command, then the system prompt will be changed from SWITCH(voip)# to SWITCH(h248)#.

To begin H248 mode, use the following command.

Table 15 shows some commands of h248 Configuration mode.

3.1.12 Configuration Mode ExampleFollowing example shows how to enter into various types of configuration modes.

SWITCH>enable

SWITCH# configure terminal

SWITCH(config)# bridge

SWITCH(bridge)# exit

SWITCH(config)# Interface mgmt

SWITCH(config-if)# exit

SWITCH(config)# rule test_rule create

SWITCH(config-rule[test_rule])# end

SWITCH#


voip Global Begin VoIP mode.

Command Description

iphostprofile PROFILEID Configure iphostprofile.

codecprofile PROFILEID Configure codecprofile.

pptpprofile PROFILEID Configure pptpprofile.

Table 14 Main Commands of VoIP Configuration Mode


h248 VoIP Begin H248 mode.

Command Description

vgw create VGWID Create virtual gateway

mgcprofile PROFILEID Configure mgcprofile

mgprofile PROFILEID Configure mgprofile

Table 15 Main Commands of H248 Configuration Mode

30


Id:0900d80580141acd


3.2 Configuration Mode OverviewFigure 1 shows the overview of the configuration modes for the hiX 56xx.

Figure 1 Overview of Configuration Modes

3.3 Useful TipsThis section describes useful tips for operating the hiX 56xx with a CLI.

• Telnet Access • Listing Available Commands

Console InterfaceBits per second: 38400

Data bit: 8Parity: noneStop bits: 1

Flow control: none

Telnet

User EXEC ModeSWITCH>

Privileged EXEC ModeSWITCH#

enable

configure terminal

Login:Password:

exit

Back to previous mode

endBack to Privileged EXEC mode

Global Configuration ModeSWITCH(config)#

interface mgmt

voipInterface Configuration Mode

SWITCH(config-if)#

rule NAME create

(NAME: rule name)

Rule Congiguration ModeSWITCH(config-rule[NAME])#

VoIP ConfigurationMode

SWITCH(voip)#

h248ip pppoe provider NAME(NAME: provider name)

DHCP Configuration ModeSWITCH(dhcp-provider)#

H248 Configuration ModeSWITCH(h248)#

PPPoE Configuration ModeSWITCH (pppoe-provider)#

Bridge Configuration ModeSWITCH(bridge)#

rmon-history<1-65535>

RMON Configuration ModeSWITCH(config-rmonhistory[N])#

ip dhcp provider NAME(NAME:provider name)

bridge

31


Id:0900d80580141acd

• Calling Command History • Using Abbreviation • Using Command of Privileged EXEC Mode at Other Configuration Mode • Exiting Current Command Mode

3.3.1 Telnet AccessYou can connect to DSLAM via Telnet, use the following command at your terminal.

SWITCH# write memory

Building configuration...

[OK]

SWITCH#

To disconnect a user connected through telnet, use the following command.

The following is an example of disconnecting a user connected from a remote place.

(‘where‘ command is used for listing active user connections)

SWITCH(config)# where

admin at from console for 4 days 22 hours 15 minutes 24.88 seconds

admin at ttyp0 from 10.0.1.4:1670 for 4 days 17 hours 53 minutes 28.76 seconds

admin at ttyp1 from 147.54.140.133:49538 for 6 minutes 34.12 seconds

SWITCH(config)# disconnect ttyp0

SWITCH(config)# where

admin at from console for 4 days 22 hours 15 minutes 34.88 seconds

admin at ttyp1 from 147.54.140.133:49538 for 6 minutes 44.12 seconds

SWITCH(config)#


telnet DESTINATION [TCP-PORT] Privileged Connect to a remote host with telnet.DESTINATION: host IP address

!In case of telnet connection, you should wait for the [OK] message to appear when saving a system configuration.


disconnect TTY-NUMBER Global Disconnect a user connected through telnet.

32


Id:0900d80580141acd


3.3.2 Listing Available CommandsTo list available commands, input question mark <?> in the current mode. When you input the question mark <?>, you can see available commands used in this mode and variables following after the commands.

The following is the available commands on Privileged EXEC mode of the hiX 56xx.

SWITCH# ?

Exec commands:

@qos QoS debugging

@show Show running system information

clear Reset functions

clock Manually set the system clock

configure Enter configuration mode

copy Copy from one file to another

debug Debugging functions (see also 'undebug')

enable Turn on privileged mode command

exit End current mode and down to previous mode

help Description of the interactive help system

history histories of user commands

no Negate a command or set its defaults

ping Send echo messages

show Show running system information

slot slot rate configuration

telnet Open a telnet connection

terminal Set terminal line parameters

traceroute Trace route to destination

where List active user connections

write Write running configuration to memory, network, or terminal

SWITCH #

g Question mark <?> will not be seen in the screen and you do not need to press <ENTER> key to display the command list.

If you need to find out the list of available commands of the current mode in detail, use the following commands.

The following is an example of displaying the list of available commands of Privileged EXEC mode

SWITCH# show list


show list All Show available commands of the current mode.

show cli Show available commands of the current mode with tree structure.

33


Id:0900d80580141acd

@debug (trace|sched) (on|off)

@debug set (SMIDS|all) (INSTANCE-IDS|all) (PORTS|all)

@debug stp (on|off)

@off

@qos debug show kernel

@show shdsl alarm-profiles

@show shdsl span-profiles

clear ip bgp *clear ip bgp * in

clear ip bgp * in prefix-filter

clear ip bgp * ipv4 (unicast|multicast) in

clear ip bgp * ipv4 (unicast|multicast) in prefix-filter

clear ip bgp * ipv4 (unicast|multicast) out

clear ip bgp * ipv4 (unicast|multicast) soft

clear ip bgp * ipv4 (unicast|multicast) soft in

clear ip bgp * ipv4 (unicast|multicast) soft out

clear ip bgp * out

clear ip bgp * soft

clear ip bgp * soft in

clear ip bgp * soft out

clear ip bgp * vpnv4 unicast in

clear ip bgp * vpnv4 unicast out

clear ip bgp * vpnv4 unicast soft

clear ip bgp * vpnv4 unicast soft in

clear ip bgp * vpnv4 unicast soft out

-- more --

g Press the <ENTER> key to skip to the next list.

In case that the hiX 56xx installed command shell, you can find out commands starting with a specific alphabet. Input the first letter and question mark without space. The fol-lowing is an example of finding out the commands starting “s” in Privileged EXEC mode of hiX 56xx.

SWITCH# s?show Show running system informationSWITCH# s

Also, it is possible to view variables you should input following after commands. After inputting the command you need, make one space and input a question mark. The fol-lowing is an example of viewing variables after the command, write. Please note that you must input one space between the command and question mark.

SWITCH# write ?

34


Id:0900d80580141acd


file Write to file

memory Write to NV memory

terminal Write to terminal

<cr>

SWITCH# write

3.3.3 Calling Command HistoryIn case of installed command shell, you do not have to enter the command you entered before. When you need to reuse the commands you did, use this arrow key <?>. When you press the arrow key, the commands will be displayed in the latest order.

The following is an example of calling command history after using several commands. After using these commands in order: show clock -> configure terminal -> interface mgmt -> exit, press the arrow key <?¸> and then you will see the commands from latest one: exit -> interface mgmt -> configure terminal -> show clock.

SWITCH(config)# exit

SWITCH# show clock

Mon, 5 Jan 1970 23:50:12 GMT+0000


SWITCH(config)# interface mgmt

SWITCH(config-if)# exit


SWITCH# (press the arrow key ?¸)

SWITCH# exit (press the arrow key ?¸)

SWITCH# interface mgmt (press the arrow key ?¸)

SWITCH# configure terminal (press the arrow key ?¸)

SWITCH# show clock (press the arrow key ?¸)

The hiX 56xx also provides the command that shows the commands used before up to 100 lines.

To set the number of the buffer line for the commands used before, use the following command.


show history Privileged Show a command history.


history log <0-1000> Global Set the number of the lines for the commands used before. (default: 100)

35


Id:0900d80580141acd

3.3.4 Using AbbreviationSeveral commands can be used in the abbreviated form. The following table shows some examples of abbreviated commands.

3.3.5 Using Command of Privileged EXEC Mode at Other Configuration ModeYou can execute the commands of Privileged EXEC mode as show, ping, telnet, traceroute, and so on regardless of which mode you are located on (except User EXEC mode and Privileged EXEC mode).

To execute the commands of Privileged EXEC mode on different mode, use the follow-ing command.

3.3.6 Exiting Current Command ModeTo exit to the previous command mode, use the following command.

Command Abbreviation

show sh

configure terminal con te

Table 16 Command Abbreviation


do COMMAND Except Privi-leged EXEC mode and User EXEC mode

Execute the commands of Privileged EXEC mode.

Command Mode

exit All Exit to the previous command mode.

end Except Privi-leged EXEC mode and User EXEC mode

End current mode and change to Privileged EXEC mode.

!If you use the exit command in Privileged EXEC mode or User EXEC mode, you will be logged out!

36


Id:0900d8058017d737

System Basic Configuration and Operation

4 System Basic Configuration and OperationThe hiX 56xx default configuration is suitable for operation with most networks. By using text-based command-line interface (CLI), you can configure and customize all aspects of DSLAM operation to suit your needs.

You can use either of two methods for configuring hiX 56xx

• From a local console or workstation—Connect to the console port or connect to the Ethernet port of the DSLAM. This connection allows you to issue CLI commands directly to the DSLAM chassis.

• From a remote console or workstation—Initiate a Telnet connection to a target DSLAM. Telnet allows you to remotely issue CLI commands to that chassis.

4.1 Basic Configuration

4.1.1 Prerequisite TasksPerforming following tasks before configuring the system:

• Check if all cards and cables are well installed. • Make sure you have one multimeter on hand. • Prepare one console cable. (RJ45-9 pins Series Port), following diagram shows the

detailed connection.

• Make sure you have one PC or a notepad PC with an Ethernet card and a Series Port.

• You should have a terminal simulator such as Hyper Terminal provided by MS Windows

• You should have the correct hiX 56xx system files, including loading files of CXU and LIU.

Feeding power to hiX56xx DSLAM:

• Since the power of hiX 56xx is -48v DC, please check every power cable before con-necting them.You should check the circuitry from power by a multimeter.

• Check voltage range. It’s from 48v to 54v? • Lable anod or cathode mark for every power cable. • Power safety supplied by exchange must be above 40A. • Check if the internal power cable in the subrack is correctly connected.(Based on

standard, blue cable is negative)

RJ45 Plug to Console Interface

34 5 67 8

9-pin SUB-D Connector to Com Port:

TXD

GNDGND

RXD

Pin 1

Pin 2

Pin 3:Pin 4:Pin 5:

Pin 6:Pin 7Pin 8

12345

6789

Pin 1

Pin 2Pin 3:Pin 4:

Pin 5:Pin 6:Pin 7:Pin 8:Pin 9:

12

37

Operation Manual CLI System Basic Configuration and Operation

Id:0900d8058017d737

• For hiX 56xx power soket, the middle terminal is negative.For detailed information, please refer to Installation manual.

• After performing above tasks, set power cables. When you make sure everything is normal,feed power to hiX 56xx.

Connect to hiX 56xx system by serial Cable via Console port

Attach the RJ45 connector of serial cable to the Console port of CXU, attach DB9 con-nector to Series port of PC or NB. After connecting series cable, run simulator such as HyperTerminal. Modify connection configuration to 38400/8/N/1(Baud rate:38400;Data bit:8; Parity:none; Stop bit:1).

Operations under boot mode

After feeding power or restarting the system, press ‘s’ key to go to Boot mode. Key in ‘?’ to get command list:

************************************************************

* *

* Boot Loader Version 4.65 *

* SIEMENS AG *

* *

************************************************************

Press 's' key to go to Boot Mode: 0

boot> ?

? : alias for 'help'

erase_flash : erase all FLASH Memory

exit : exit from BOOT LOADER

flashinfo : show FLASH Image Specification Information

gateway : set GATEWAY Address

help : print online help

ip : set IP Address

load : download OS Image file from TFTP Server

mac : set Ethernet Address 0

mac1 : set Ethernet Address 1

netmask : set NETMASK Address

ping : send ICMP ECHO_REQUEST to network host

reboot : reboot the system using specific OS (Only Once) <os1 | os2>

set : select default OS <default-os> [os1 | os2]

show : show current IP and MAC

sysinfo : show system information

boot>

g The IP address of outband interface which is set under boot mode is valid under boot mode only. When the system starting up normally, this management IP address becomes invalid.

38


Id:0900d8058017d737


After the system starts normally, you can configure your system by following steps.

4.1.2 System LoginStep 1

When you turn on the switch, booting will be automatically started and login prompt will be displayed.

SWITCH login

Step 2

When you enter a login ID at the login prompt, the password prompt will be displayed, and then enter the proper password to log in the system. By default, the login ID is con-figured as root with password vertex25.

SWITCH login: rootPassword:SWITCH>

Step 3

In User EXEC mode, you can check only the configuration for the switch. To configure and manage the switch, you should begin Privileged EXEC mode. The following is an example of opening the Privileged EXEC mode.

SWITCH> enableSWITCH#

4.1.3 Configuring System login Information

4.1.3.1 Changing Superuser PasswordBy default, the superuser’s username of hiX 56xx R2.5.1 system is root, password is vertex25. To modify the superuser password, use the following command:

Example of changing superuser password:

SWITCH(config)# passwd

Changing password for root Enter the new password (minimum of 8, maximum of 16 characters)

Please use a combination of upper and lower case letters and numbers.

Please input at least one number, alphabet and special character

Enter new password:

Re-enter new password:

Password changed.

SWITCH(config)#

For informating describing how to restore ‘root’ password, refer to Password Restoration


Passwd Global Modify superuser password

39


Id:0900d8058017d737

4.1.3.2 Creating New AccountTo create a new account, use the following command.

To display a created account, use the following command.

g The password you are entering will not be seen in the screen, so please be careful not to make a mistake.

The following is an example of creating a new account, Siemens. The password is set to vertex25@%.

SWITCH>enable


SWITCH(config)# user add Siemens jkleeChanging password for SiemensEnter the new password (minimum of 8, maximum of 16 characters)Please use a combination of upper and lower case letters and numbers. Please input at least one number, alphabet and special characterEnter new password:vertex25@%Re-enter new password:vertex25@%Password changed.SWITCH(config)#

The following is an example of logging in the system with a new account.

SWITCH login: SiemensPassword: vertex25@%SWITCH>

The following is an example of listing available commands for a person who logs in the system with a normal account by entering a question mark<?>.

SWITCH> ?

Exec commands:

@show Show running system informationclear Reset functionsdebug Debugging functions (see also 'undebug')enable Turn on privileged mode commandexit End current mode and down to previous mode


user add NAME DESCRIPTION Global Create a new account.

user del NAME Delete an account


show user UserPrivilegedGlobal

Show a created account.

40


Id:0900d8058017d737


help Description of the interactive help systemno Negate a command or set its defaultsshow Show running system informationterminal Set terminal line parametersSWITCH>

To configure a password for created account, use the following command.

The following is an example of changing the current password.

SWITCH(config)# passwd SiemensChanging password for SiemensEnter the new password (minimum of 8, maximum of 16 characters)Please use a combination of upper and lower case letters and numbers. Please input at least one number, alphabet and special characterEnter new password:asdf123!@#Re-enter new password:asdf123!@#Password changed.SWITCH(config)#

4.1.3.3 Login BannerIt is possible to set a system login and log-out banner. Administrator can leave a message to other users with this banner.

To set a system login and log-out banner, use the following command.

To delete a configured banner, use the following command.

To display a current login banner, use the following command.

!Information such as ID and description of created account cannot be changed!


passwd [NAME] Global Configure a password for created account.


banner

Global

Set a banner before login the system.

banner login Set a banner when successfully log in the system.

banner login-fail Set a banner when failing to login the system.


no banner

Global

Delete a configured banner.

no banner login

no banner login-fail

41


Id:0900d8058017d737

Following example shows how to set a banner which is displayed before login,after suc-cessful login, after failed login respectively:

SWITCH(config)# banner loginSave & Exit : CTRL-D hello,siemens guys! SWITCH(config)# banner Save & Exit : CTRL-D hi,how are you? SWITCH(config)# banner login-failSave & Exit : CTRL-Dtry again:)

You can check your settings:

SWITCH(config)# endSWITCH# exit hi,how are you? SWITCH login: rootPassword: Login incorrect try again:) SWITCH login: root Password: hello,siemens guys! SWITCH> enable SWITCH#

4.1.3.4 Setting Auto Log-out TimeFor security reasons of the hiX 56xx, if no command is entered within the configured inactivity time, the user is automatically logged out of the system. Administrator can con-figure the inactivity timer.

To enable auto-logout function, use the following command.

To display a configuration of auto-logout function, use the following command.


show banner PrivilegedGlobal

Show a current login banner.


exec-timeout <1-35791> [<0-59>] Global Enable auto log-out.1-35791: time unit in minutes (by default 10 minutes)0-59: time unit in seconds

exec-timeout 0 Disable auto log-out.

42


Id:0900d8058017d737


The following is an example of configuring auto-logout function as 60 seconds and viewing the configuration.

SWITCH(config)# exec-timeout 60SWITCH(config)# show exec-timeoutLog-out time : 60 secondsSWITCH(config)#

4.1.3.5 Setting Password for Privileged EXEC ModeYou can configure a password to enhance the security for Privileged EXEC mode. To configure a password for Privileged EXEC mode, use the following command.

The following is an example of configuring the password in Privileged EXEC mode as “testpassword”.

SWITCH# configure terminalSWITCH(config)# passwd enable testpasswordSWITCH(config)#

The following is an example of accessing after configuring the password.

SWITCH login: rootPassword:SWITCH > enablePassword:SWITCH#

To delete the configured password, use the following command.

The created password can be displayed with the show running-config command. To encrypt the password not to be displayed, use the following command.


show exec-timeout PrivilegedGlobal

Show a configuration of auto-logout function.


passwd enable {8|} LINE Global Configure a password to begin Privileged EXEC mode.

8: specifies an encrypted password in LINE

LINE: The 'enable' password string


no passwd enable Global Delete the password.

43


Id:0900d8058017d737

To disable password encryption, use the following command.

4.1.4 Assigning IP AddressThis section provides a summary of IP addressing concepts for those who are familiar with IP addressing.

Internet addresses are 32-bit values assigned to hosts that use the IP protocols. These addresses are in dotted decimal format (four decimal numbers separated by periods), such as 192.17.5.100. Each number is an 8-bit value between 0 and 255.

IP addresses are divided into three classes. These classes differ in the number of bits al-located to the network and host portions of the address:

• The Class A Internet address format allocates the highest 8 bits to the network field and sets the highest-order bit to 0 (zero). The remaining 24 bits form the host field.

• The Class B Internet address allocates the highest 16 bits to the network field and sets the two highest-order bits to 1, 0. The remaining 16 bits form the host field.

• The Class C Internet address allocates the highest 24 bits to the network field and sets the three highest-order bits to 1, 1, 0. The remaining 8 bits form the host field.

The DSLAM sees only the MAC address in an incoming packet to determine where the packet needs to come from/to and which ports should receive the packet. Layer 2 switches do not need IP addresses to transmit packets. However, if you want to access to the hiX 56xx from a remote place with TCP/IP through SNMP or telnet, it requires an IP address.

g The default interface of the hiX 56xx is mgmt.

You can enable the interface to communicate with another network device on the network by assigning an IP address as follows:

• Enabling Interface • Assigning IP Address to Network Interface • Setting Static Route and Default Gateway • Displaying Interface

4.1.4.1 Enabling InterfaceTo assign an IP address to an interface, you need to enable the interface first. If the inter-face is not enabled, you cannot access it from a remote place, even though an IP address has been assigned.

To display if an interface is enabled, use the show running-config command.


service password-encryption Global Encrypt the system password.


no service password-encryption Global Disable password encryption.

44


Id:0900d8058017d737


There are two ways to enable an interface, in Global Configuration mode and Interface Configuration mode.

Global Configuration Mode

To enable/disable an interface in Global Configuration mode, use the following command.

g For multiple interfaces, use “-“ or “,” at INTERFACES.

The following is an example of enabling the interface mgmt in Global Configuration mode.

SWITCH# configure terminalSWITCH(config)# interface noshutdown mgmtSWITCH(config)# show running-config interface mgmt

Interface Configuration Mode

You can also enable an interface in Interface Configuration mode. Before enabling an interface in Interface Configuration mode, you should open Interface Configuration mode.

To open Interface Configuration mode, use the following command.

To enable/disable an interface, use the following command.

The following is an example of enabling the interface mgmt in Interface Configuration mode.


SWITCH(config)# interface mgmt

SWITCH(config-if)# no shutdown

SWITCH(config-if)#

g To display if an interface is enabled, use the show running-config command


interface noshutdown NAME Global Enable an interface in Global Configuration mode.

interface shutdown NAME Disable a specified interface in Global Configura-tion mode.


interface IFNAME Global Open Interface Configuration mode to configure a specified interface.


no shutdown Interface Enable an interface on Interface Configuration mode.

shutdown Disable an interface on Interface Configuration mode.

45


Id:0900d8058017d737

4.1.4.2 Assigning IP Address to Network InterfaceAfter enabling an interface, assign an IP address. To assign an IP address to a network interface, use the following command.

Example:

SWITCH# ip address 30.30.50.56/24

To modify network interface configurations, use the following commands.

To disable an assigned IP address, use the following command.

To delete network interface, use the following command.

To display an assigned IP address, use the following command.


ip address A.B.C.D/M Interface Assign an IP address to an interface.

ip address A.B.C.D/M secondary Assign a secondary IP address to an interface.

ip address A.B.C.D/M scope {host | link}

Assign host/link IP address. Link means IP address only for the appropriate network and host means IP address only for the appropriate equipment.

netdevice {A.B.C.D/M | dhcp} DESCR <2-4093> (<2-4093>|)

Global Configure network interface, assign IP address manually or by DHCP server.DESCR: description<2-4093>: outer VLAN<2-4093>: inner VLAN


netdevice mod vlan INDEX <2-4093> (<2-4093>|)

Global Modify outer or inner VLAN of network interface INDEX: interface index number.<2-4093>: outer VLAN<2-4093>: inner VLAN

netdevice mod name INDEX NAME Modify interface name.INDEX: interface index number.NAME: interface new name

netdevice mod descr INDEX DESCR

Modify interface description.INDEX: interface index number.DESCR: interface description

netdevice mod ipaddr INDEX (A.B.C.D/M | dhcp)

Modify interface ip addressINDEX: interface index number.A.B.C.D/M : ip address with subnet mask.


no ip address A.B.C.D/M Interface Clear an IP address assigned to an interface.

no ip address A.B.C.D/M secondary Clear a secondary IP address assigned to an inter-face.


no netdevice (INDEX| all) Global Delete network interface.INDEX: interface index number.

46


Id:0900d8058017d737


Example:

SWITCH(config-if)# show ip

IP-Address Scope Status

-------------------------------------

172.18.103.9/24 global

4.1.4.3 Setting Static Route and Default GatewayThe static route is a predefined route to a specific network and/or device such as a host. Packets are transmitted to destination through static route. Static route includes desti-nation address, neighbor router to receive packet, number of routes that packets have to go through.

To configure a static route, use the following command.

To configure a default gateway, use the following command.


show ip Interface Show an IP address assigned to an interface


ip route A.B.C.D SUBNET-MASK {GATEWAY | INTERFACE} [<1-255>]

Global Configure a static route.A.B.C.D: destination IP prefixA.B.C.D/M: destination IP prefix with mask

GATEWAY: gateway address1-255: distance valuesrc: binding source IP address

ip routeA.B.C.D/M {GATEWAY | INTERFACE} [<1-255> | src A.B.C.D]

netif-route NAME A.B.C.D/M A.B.C.D

Configure a route.NAME: route nameA.B.C.D/M: destination ip address with subnet mask,A.B.C.D: gateway address

netif-route mod destination INDEX A.B.C.D/M

Modify destination address and subnet mask.INDEX: route index.A.B.C.D/M: destination address and subnet mask

netif-route mod name INDEX NAME

Modify route name.INDEX: route index.NAME: route name.

no ip route A.B.C.D SUBNET-MASK {GATEWAY | INTERFACE} [<1-255>]

Delete a configured static route.

no ip route A.B.C.D/M {GATEWAY | INTERFACE} [<1-255>]

no netif-route (INDEX | all) Delete a static route or all routes.

47


Id:0900d8058017d737

The following is an example of configuring a static route to reach three destinations, which are not directly connected.

SWITCH(config)# ip route 100.1.1.0/24 10.1.1.2SWITCH(config)# ip route 200.1.1.0/24 20.1.1.2SWITCH(config)# ip route 172.16.1.0/24 30.1.1.2

To display a configured static route, use the following command.

4.1.4.4 Displaying InterfaceTo display an interface status and configuration, use the following command.

4.1.4.5 Example of Assigning IP AddressThis example shows how to configure the interface mgmt with IP address 172.18.103.9:


ip route default {GATEWAY | INTERFACE} [<1-255>]

Global Configure default gateway.GATEWAY: gateway address<1-255>: Distance value for this route

netif-route mod gateway INDEX A.B.C.D

Modify gateway IP address.A.B.C.D: gateway address

no ip route default {GATEWAY | INTERFACE} [<1-255>]

Delete default gateway.


show ip route {bgp | connected | dhcp | isis | kernel | ospf | rip | static| A.B.C.D | A.B.C.D/M | summary}

PrivilegedGlobal

Show configured routing information.

Bgp: Border Gateway Protocol (BGP)

Connected:Connected

Dhcp: Dynamic Host Configuration Protocol (DHCP) Isis: ISO IS-IS

Kernel: Kernel

Ospf: Open Shortest Path First (OSPF)

Rip: Routing Information Protocol (RIP)

Static: Static routes

A.B.C.D: Network in the IP routing table to display A.B.C.D/M: IP prefix <network>/<length>, e.g., 35.0.0.0/8

Summary: Summary information

show ip route database {bgp | connected | dhcp| isis | kernel | ospf | rip | static}

Show configured routing information with IP routing table database.


show interface [INTERFACE] PrivilegedGlobalUser

Show an interface status and configuration.INTERFACE: interface name

show ip interface [INTERFACE] brief

Show brief information of interface.INTERFACE: interface name

show running-config netif-cfg Global show network interface configuration

48


Id:0900d8058017d737


switch (config)# interface mgmt

switch(config-if)# ip address 172.18.103.9/24

switch(config-if)# no shutdown

switch(config-if)# show ip

IP-Address Scope Status

-------------------------------------

172.18.103.9/24 global

switch(config-if)# exit

switch(config)#

Display interface settings:

switch(config)# show interface mgmt

Interface mgmt

Hardware is Ethernet, address is 000f.bb03.7033

index 2 metric 1 mtu 1500 <UP,BROADCAST,RUNNING,MULTICAST>

VRF Binding: Not bound

Bandwidth 100m

inet 172.18.103.9/24 broadcast 172.18.103.255

input packets 1585, bytes 95100, dropped 0, multicast packets 0

input errors 0, length 0, overrun 0, CRC 0, frame 0, fifo 0, missed 0

output packets 5, bytes 300, dropped 0

output errors 0, aborted 0, carrier 0, fifo 0, heartbeat 0, window 0

collisions 0

switch(config)#

4.1.5 Configuring Host Name and Time

4.1.5.1 Setting Host NameA host name displayed on prompt is necessary to distinguish each device connected to network.

To set a new host name, use the following command in privileged mode.

The following is an example of changing a host name to TEST.


hostname NAME Global Create a host name of the switch, enter the name.

no hostname [NAME] Delete a configured host name, enter the name.

49


Id:0900d8058017d737

SWITCH(config)# hostname TESTTEST(config)#

You can see the default name “SWITCH” has been changed into "TEST”.

4.1.5.2 Setting time ZoneThe hiX 56xx provides three kinds of time zone, GMT, UCT and UTC. The time zone of the DSLAM is predefined as GMT (Greenwich Mean Time). Also you can set the time zone where the network element belongs.

To set the time zone, use the following command (refer to the below table).

Table 17shows the world time zone.

Following example shows how to set time-zone to GMT+8 and shows the world time zone map.

SWITCH(config)# time-zone GMT+8

SWITCH(config)# show time-zone

GMT

GMT+0

GMT+1

GMT+2

GMT+3

GMT+4

GMT+5

GMT+6

GMT+7


time-zoneTIMEZONE Global Set the time zone.

show time-zone PrivilegedGlobal

Show the world time zone map.

Time Zone Country/City Time Zone Country/City Time Zone Country/City

GMT-12 Eniwetok GMT-3 Rio De Janeiro GMT+6 Rangoon

GMT-11 Samoa GMT-2 Maryland GMT+7 Singapore

GMT-10 Hawaii, Honolulu GMT-1 Azores GMT+8 Hong Kong

GMT-9 Alaska GMT+0 London, Lisbon GMT+9 Seoul, Tokyo

GMT-8 LA, Seattle GMT+1 Berlin, Rome GMT+10 Sydney,

GMT-7 Denver GMT+2 Cairo, Athens GMT+11 Okhotsk

GMT-6 Chicago, Dallas GMT+3 Moscow GMT+12 Wellington

GMT-5 New York, Miami GMT+4 Teheran

GMT-4 George Town GMT+5 New Dehli

Table 17 World Time Zone

50


Id:0900d8058017d737


GMT+8

GMT+9

GMT+10

GMT+11

GMT+12

GMT-0

GMT-1

GMT-2

GMT-3

GMT-4

GMT-5

GMT-6

GMT-7

GMT-8

GMT-9

GMT-10

GMT-11

GMT-12

GMT0

Greenwich

UCT

UTC

Universal

4.1.5.3 Setting Time and DateTo set a system time and date, use the following command.

The following is an example of setting a system time-zone as GMT+0000, time and date as 10:20pm, July 4th, 2005.

SWITCH# clock 04 jul 2005 10:20Mon, 4 Jul 2005 10:20:00 GMT+0000SWITCH# show clockMon, 4 Jul 2005 10:20:37 GMT+0000SWITCH#

To show all clock sync sources, use the following command.


clock DATETIME PrivilegedGlobal

Set a system time and date.

show clock Show a system time and date.

51


Id:0900d8058017d737

To modify config of clock sync source, use the following command.

To modify clock sync wait time for switching back to a higher source when error happens, use the following command.

4.1.5.4 Enabling Network Time ProtocolThe Network Time Protocol (NTP) provides a mechanism to synchronize time on com-puters across an internet. The specification for NTP is defined in RFC 1119. To enable/disable the NTP function, use the following command.

To display a configured NTP, use the following command.

Following example shows how to enable NTP and set the interval of synchronization time to 120 seconds, and set ntp-server :

SWITCH(config)# ntp-client

SWITCH(config)# ntp-client interval 120


show clock-sync sources Global Show all clock sync sources


modify clock-sync source INDEX <1-10>

Global Modify config of clock sync source.

INDEX: clock source to modify

<1-10>: the alarm severity profile index


modify clock-sync waittime TIME Global modify clock sync wait time.

TIME: wait time before switching back to a higher clock source when error happens (unit is 100 ms)


ntp-client

Global

Enable the NTP function.

ntp-client interval <60-1800> Set the interval to synchronize time from NTP server.60-1800: interval (unit: second)

ntp-client server SERVER Specify NTP server.SERVER: server IP address

no ntp-client Disable the NTP function.

no ntp-client server SERVER Delete a specified NTP server.SERVER: server IP address


show ntp-client PrivilegedGlobal Show a configured NTP function.

show running-config ntp-client Global

52


Id:0900d8058017d737


SWITCH(config)# ntp-client server 30.30.50.51

SWITCH(config)# show ntp-client

4.1.5.5 Example of setting Hostname & TimeFollowing example shows the procedures of setting device hostname and time related parameters:

SWITCH # configure terminal

SWITCH(config)# hostname hiX5635

hiX5635(config)# time-zone GMT+8

hiX5635(config)# clock 15:40 Aug 23 2005

Tue, 23 Aug 2005 15:40:00 +0800 hiX5635(config)# show clock

Tue, 23 Aug 2005 15:40:05 +0800

4.1.6 Setting DNS ServerTo set a DNS server, use the following command.

4.2 System StatusWhen there is any problem in the system, you must find what the problem is and its solu-tion. Therefore you should not only be aware of a status of the system but also check if the system is correctly configured.

This section includes the following functions with CLI commands.

• Displaying Network Status • Tracing Packet Route • Displaying User Connecting to System • Displaying Running Time of System • Displaying System Information • Displaying System Memory Information • Displaying Running Process

4.2.1 Displaying Network StatusTo check if your system is correctly connected to the network, use the ping command. For IP network, this command transmits a message to internet control message protocol (ICMP). ICMP is an internet protocol that notifies fault situation and provides information on the location where IP packet is received. When the ICMP echo message is received at the location, its replying message is returned to the place where it came from.

To perform a ping test to display network status, use the following command.


dns-server A.B.C.D Global Set a DNS server.

no dns-server A.B.C.D Remove a DNS server.

show dns-server PrivilegedGlobal

Show a DNS server.

53


Id:0900d8058017d737

The following is an example of pinging one IP address.

SWITCH# ping 10.1.158.158

4.2.2 Tracing Packet RouteYou can discover the routes that packets will actually take when traveling to their desti-nations. To do this, the traceroute command sends probe datagrams and displays the round-trip time for each node.

If the timer goes off before a response comes in, an asterisk (*) is printed on the screen.

The following is an example of tracing a packet route sent to 10.1.158.158.

SWITCH# traceroute 10.1.158.158traceroute to 10.1.158.158 (10.1.158.158), 30 hops max, 40 byte packets 1 10.27.41.254 (10.27.41.254) 0.478 ms 0.428 ms 0.415 ms 2 10.27.1.254 (10.27.1.254) 0.473 ms 0.466 ms 0.437 msSWITCH#

4.2.3 Displaying User Connecting to SystemTo display current users connecting to the system from a remote place or via console interface, use the following command.

The following is an example of displaying current users connecting to the system.

SWITCH(config)# whereadmin at ttyp0 from 10.20.1.32:2196 for 30 minutes 35.56 secondsadmin at ttyS0 from console for 28 minutes 10.90 secondsSWITCH(config)#


ping [ADDRESS] Privileged Perform a ping test to display network status.ADDRESS: IP address or host name


traceroute [DESTINATION] Privileged Trace packet routes through the network.DESTINATION: IP address or host name

tracerouteip [DESTINATION]


where PrivilegedGlobal

Show current users connecting to the system from a remote place or via console interface.

54


Id:0900d8058017d737


4.2.4 Displaying Running Time of SystemTo display running time of the system, use the following command.

4.2.5 Displaying System InformationTo display the system information, use the following command.

4.2.6 Displaying System Memory InformationTo display a system memory status, use the following command.

4.2.7 Setting Memory Overload ThresholdTo set memory overload threshold, use the following command.


show uptime PrivilegedGlobal

Show running time of the system.


show system-version

PrivilegedGlobal

Show the system information.

show startup-type Show the type of the last startup.

show startup-result Show the result of startup.

show tmn-connect Show whether a TMN is connected to the system.

show lct-connect Show whether an LCT is connected to the system.

show cli-connect Show if and how many cli are connected to the network element.

show system-feature-list Show a feature list of the system.

show status fan Show fan status.

show status memory Show memory information.

show status cpuload Show CPU load.


show memory {bgp | dhcp | igmp | imi | lib | nsm | ospf | rip}

PrivilegedGlobal

Show system memory information with a specific option.


threshold memory THRESHOLD (5|60|600)

Global Memory Overload Threshold.

55


Id:0900d8058017d737

4.2.8 Setting CPU Overload thresholdTo set CPU overload threshold, use the following command.

4.2.9 Displaying Running ProcessThe hiX 56xx provides a function that shows information of the running processes. The information with this command can be very useful to manage the DSLAM.

To display the information of the running processes, use the following command.

The following is an example of displaying the information of the running processes.

SWITCH# show process

USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND

admin 1 0.2 0.2 1448 592 ? S 20:12 0:05 init [3]

admin 2 0.0 0.0 0 0 ? S 20:12 0:00 [keventd]

admin 3 0.0 0.0 0 0 ? SN 20:12 0:00 [ksoftirqd_CPU0]

admin 4 0.0 0.0 0 0 ? S 20:12 0:00 [kswapd]

admin 5 0.0 0.0 0 0 ? S 20:12 0:00 [bdflush]

admin 6 0.0 0.0 0 0 ? S 20:12 0:00 [kupdated]

admin 7 0.0 0.0 0 0 ? S 20:12 0:00 [mtdblockd]

admin 8 0.0 0.0 0 0 ? SW< 20:12 0:00 [bcmDPC]

admin 9 1.4 0.0 0 0 ? SW< 20:12 0:29 [bcmCNTR.0]

admin 10 1.4 0.0 0 0 ? SW< 20:12 0:29 [bcmCNTR.1]

admin 17 0.0 0.0 0 0 ? SWN 20:12 0:00 [jffs2_gcd_mtd3]

admin 149 0.0 0.3 1784 776 ? S Jan01 0:00 /sbin/syslogd nm

admin 151 0.0 0.2 1428 544 ? S Jan01 0:00 /sbin/klogd -c 1

admin 103 2.6 2.0 20552 5100 ? S 20:12 0:53 /usr/sbin/swchd

(Omitted)


threshold cpuload <20-100> (5|60|600)

Global Configure CPU overload threshold:

20-100: Threshold in percent

5, 60, 600: Time interval in sec.


show process PrivilegedGlobal

Show information of the running processes.

56


Id:0900d8058017d737


4.3 Managing System Configuration

4.3.1 Understanding Configuration FileSystem Configuration file contains the configuration values of system enviroment , when you configure your system via CLI, the values such as Host Name, Timezone and Login Banner will be stored in a “running-config” file with which you can display, save, copy, restore current system evironment settings.

Following tasks can be performed to manage configuration file for system environment. User can check if user’s configurations are correct and save them in the system.

• Displaying System Configuration • Writing System Configuration

4.3.2 Displaying System ConfigurationTo display a current running configuration of the system, use the following command.


show running-config All Show a configuration of the system.

57


Id:0900d8058017d737

show running-config {adsl {alarm-profile | line-profile| rfi_band | dpbo-profile} | arp| atm vccTp | atm shaping | atm policing | bcsc | dns | erp | full | hostname | igmp| interface | lacp I login | mac | maxhosts | mfdb | port | qos | rmon | router| rule | shdsl {alarm_profile | line | span_profile} | snmp | stp | switch | syslog | time-out | time-zone | trunk | vlan}

User Show a configuration of the system with the specific option. Adsl: Adsl information Arp: ARP information Atm vccTp: ATM vccTp information Atm shaping: ATM shaping informationAtm policing: ATM policing information

Bcsc: Bcsc information

Dhcp: Dynamic Host Configuration Protocol

Dns: DNS information

Erp: Erp information

Full: full configuration

Gsmp: GSMP (General Switch Management Proto-col)

Hostname: Host name information

Igmp: Internet Group Management Protocol Interface: Show interface configuration

Lacp : Lacp information

Login : Login information

Mac : Mac information

Maxhosts : Maxhosts information

Mfdb : Mfdb information

Ntp-client : NTP client Information

Port : Port information

Qos : Qos information

Rmon : Rmon information

Router: Router configuration

Rule: Rule information

Shdsl: Shdsl information

Snmp: SNMP information

Stp: Stp information

Switch: Switch information

Syslog: Syslog information

Time-out: Time-out information

Time-zone: Time zone information

Trunk: Trunk information

Bridging: Bridging information

Protovlan: Protovlan information

Vlan: Vlan information

Mirror: Mirror information

Aarule: Aarule information

show running-config {adsl {alarm-profile | line-profile| rfi_band | dpbo-profile} | arp| atm vccTp | atm shaping | atm policing | bcsc | dhcp | dns | erp | full | gsmp | hostname | igmp| interface | lacp I login | mac | maxhosts | mfdb | ntp-client| pm | port | qos | rmon |router| rule | shdsl {alarm_profile | line | span_profile} | snmp | stp | switch | syslog | time-out | time-zone | trunk |bridging|protovlan| vlan|mirror| aarule}

PrivilegedGlobal

show running-config {xdsl {alarm-profile | line-profile| all-profiles | chan-profile|notch-profile| psd-profile | vcc}

UserPrivilegedGlobal

Alarm-profile:Vdsl alarm profile informationLine-profile: Vdsl line profile informationAll-profiles: Vdsl all profile informationChan-profile: Vdsl channel profile informationNotch-profile: Vdsl notch profile informationPsd-profile: Vdsl psd profile informationVcc: Vdsl VCC information

show runnning-config voip Show voip information


58


Id:0900d8058017d737


Example:

SWITCH(config)# show running-config hostname

hostname SWITCH

4.3.3 Writing System ConfigurationIf you change the configuration of the system, you need to save the changes in the system flash memory.

To write a current running configuration, use the following command.

Following example shows how to write current running configuration in the system flash memory:

SWITCH# write memory config_test

4.4 System BackupYou can realize system backup by saving system configuration file as a copy. The con-figuration file saved in Flash can be transfered to a remote FTP SERVER as well.

4.4.1 Save configuration file to FLASHTo copy or erase a system configuration file, use the following command.

show running-config l2cp Global Show running configuration of L2CP



write memory [DESTINATION] Privileged Write a current running configuration in the system flash memory.DESTINATION: configuration file namefile: system configuration fileterminal: current terminal (alias to show running-config)

write [file | terminal]

!When you use the write memory command, make sure there is no key input until [OK] message appeares.

59


Id:0900d8058017d737

To display a system configuration file, use the following command.

The following example shows how to copy a running-config:

SWITCH(config)# copy running-config backup-1

SWITCH(config)# show config-list========================= CONFIG-LIST=========================backup-1SURPASS hiX 5635SWITCH(config)#

4.5 Restoring System

4.5.1 System RestorationTo restore the default configuration of the system, use the following command.

Following example shows how to restore the factory default configuration:

*************************************


copy running-config {FILENAME | startup-config}

PrivilegedGlobal

Copy a running configuration file.FILENAME: configuration file namestartup-config: startup configuration file

copy startup-config FILENAME Copy a startup configuration file.FILENAME: configuration file name.

copy FILENAME startup-config Copy a specified configuration file to the startup con-figuration file.FILENAME: configuration file name

copy FILENAME1 FILENAME2 Copy a specified configuration file to another config-uration file.

erase FILENAME Global Delete a specified configuration file.FILENAME: configuration file name


show startup-config Privileged Show a current startup configuration.

show config-list PrivilegedGlobal

Show a list of configuration files.


restore factory-defaults Global Restore a factory default configuration.

60


Id:0900d8058017d737


SWITCH(config)# restore factory-defaults


SWITCH(config)# resetcard 9

*************************************

g After restoring the default configuration, you need to restart the system to initiate.

4.5.2 Password RestorationHow can you restore your superuser password if you forget it? Please perform following tasks to delete forgotten superuser password.

In below method, you must input “bold” characters .

Reboot your system, during the boot process:

1. Wait this message : Linux/PPC load: console=ttyS0,38400 root=/dev/ram rw2. When you see this message, press <space> key immediately.3. Now you can input “init=/bin/sh”.

************************************************************

* *

* Boot Loader Version 4.64 *

* SIEMENS AG *

* *

************************************************************

Press 's' key to go to Boot Mode: 0

Load Address: 0x01000000

Image Size: 0x00936000

Start Address: 0x01000000

loaded at: 01000000 0193938C

board data at: 01936028 019361FC

relocated to: 01009870 01009A44

zimage at: 0100A1E0 0119576B

initrd at: 01196000 019070B7

avail ram: 0193A000 10000000

Linux/PPC load: console=ttyS0,38400 root=/dev/ram rw init=/bin/sh

zImage 0100A1E0:0018B58B

initrd 01196000:007710B7 extra 01908000:0002DFEF

Uncompressing Linux...done.

Now booting the kernel

......

......

Freeing initrd memory: 7620k freed

e2compr 0.4.43 (2002-04-12) loading.

61


Id:0900d8058017d737

VFS: Mounted root (ext2 filesystem).

Freeing unused kernel memory: 236k init

/bin/sh: No controlling tty (open /dev/tty: No such device or address)

/bin/sh: warning: won't have full job control

# mknod /dev/ramdisku b 1 1

# gunzip /tmp/ramd2.img.gz -c > /dev/ramdisku

# rm -rf /usr

# mkdir /usr

# mount /dev/ramdisku /usr

# rm /tmp/ramd2.img.gz

# mknod /dev/mtdblock3 b 31 3

# mkdir -p /tmp/.config

# mount -t jffs2 /dev/mtdblock3 /tmp/.config > /dev/null 2>&1

# tar pxzf /tmp/.config/cxub_config_v002

# vi /etc/passwd

root:jcc5hpW3knppE:0:0:VERTEX2503-Admin:/etc:/bin/ksh Change this line like below line

root::0:0:VERTEX2503-Admin:/etc:/bin/ksh Like this, Delete some word between first :<some word>:

# passwd

Changing password for root

Old password:

Enter the new password (minimum of 8, maximum of 16 characters)

Please use a combination of upper and lower case letters and numbers.

Enter new password:

Re-enter new password:

passwd[23]: password for `root' changed by user `root'

Password changed.

# tar Pczf /tmp/.config/cxub_config_v002 /etc/dataid /etc/passwd /etc/ZebOS.conf /etc/if_mgr_cfg /etc/upgrade.conf /etc/sys-log.conf

# /sbin/reboot

Restarting system.

4.6 Upgrading SystemYou should perform following download steps to upgrade DSLAM.

62


Id:0900d8058017d737


4.6.1 Manually Upgrading CXUTo upgrade CXU OS image or board configuration, use following command:

Example of upgrading CXU OS image:

SWITCH(config)# download cxu load 172.18.107.12 R2.5/she_r2.5_cxu-b_o.109

FTP User Name:usera

FTP Password :

timeout (1200 seconds) active

g If the command will return immediately with:

“.. access denied, system startup not reached!"

You have to wait until system startup is done completely!

“.. access denied, S-APS upgrade enabled!"

You have to disable S-APS upgrade via "download disable sapshandling" before!

g In case of an redundant system, both CXU boards are updated with the same load, for load activation, the user should use the switchover command (NOT "reset all"), otherwise the user connections will be interrupted.

4.6.2 Manually Upgrading IUTo upgrade IU OS image or IU configuration, use the following commands.


download cxu {load | con-fig}ADDRESS FILE

Global Upgrade OS image or board configuration:load: uses software load.config: uses configuration data.ADDRESS: server IP address or host nameFILE: source file name


download iu {load | config} ADDRESS FILE

Global

Upgrade IU image or configuration:load: uses load file.config: uses configuration data.ADDRESS: server IP address or host nameFILE: source file name Note: Command “download iu configADDRESS FILE“ is applied to VPLU card only.

download iu load alloftype ADDRESS FILE

Upgrade IU image for all plug-in units of the same type: ADDRESS: server IP address or host nameFILE: source file name

Note: this download will be done serially, one IU at a time.

download iu load alloftype parallel ADDRESS FILE

Upgrade IU image for all plug-in units of the same type nearly at the same time: ADDRESS: server IP address or host nameFILE: source file name

Note: this download will be done in parallel, all IUs nearly at same time.

63


Id:0900d8058017d737

g Load names must have an extension in the form of î.XXXî like she_r2.5_cxu-b_o.109 or she_r2.5_iu-adsl72-ifxa_o.109. All other given names could damage the internal upgrade system.

Following example shows how to upgrade IU image

SWITCH(config)# download iu load 172.18.107.12 R2.5/she_r2.5_iu-adsl72-ifxa_o.109

FTP User Name:usera

FTP Password :

timeout (600 seconds) active






4.6.3 Manually data uploading for CXU/ IUTo upload CXU informations, use the following commands:

SWITCH(config)# upload cxu errlog 172.18.107.12 R2.5FTP User Name:useraFTP Password :timeout (120 seconds) active

upload cxu errlog file R2.5/errlog to server 172.18.107.12 complete

g The uploaded error log file of CXU has tar-gzip (tgz) format.

To upload IU informations, use the following commands:


upload cxu (config| errlog| inventory| perfdata| alarm-log|uptimelog) ADDRESS FILE

Global Uploads CXU data:config: for configuration dataerrlog: for error log file (file format: *.tgz)inventory: for inventory dataperfdata: for performance data alarmlog: for alarm log data uptimelog: for board uptime log data ADDRESS: IP address of FTP server FILE: path/source name of destination file on FTP server acc. to the selected command

64


Id:0900d8058017d737


Following example shows how to upload IU image

SWITCH(config)# upload iu inventory 172.18.107.12 R2.5/testinv.txtSlot number(1..10, no):2FTP User Name:useraFTP Password :timeout (120 seconds) active...upload iu inventory file R2.5/testinv.txt to server 172.18.107.12 complete

g Possibly by selecting the CXU slot you can get the extra information:“this is the main board slot, upload main board inventory data"

The CXU inventory data contain inventory data of possibly plugged extension modules:

67CN+/TO033463 SIEMENS M:CXUCGE:4E:E S50028-Q2030-A1 9optional extension modules:===============================================================S/P MEDIUM PLUGGED TRANSCEIVER VENDOR-NAME VENDOR-NUMBER REV. SERIAL-NUMBER DATE ===============================================================0/1 Elect no unknown - - - - - 0/2 unknown no unknown - - - - - 0/3 unknown no unknown - - - - - 0/4 unknown no unknown - - - -

SWITCH(config)# upload iu inventory alloftype 172.18.107.12 R2.5/testinv.txtReference slot number(1..10, no):5


upload iu {config I errlog I inventory I perfdata} ADDRESS FILE

Global

Uploads IU data for slot number 1..x):config: uses configuration data uploaderrlog: uses error log upload (not supported yet)inventory: uses inventory data uploadperfdata: for performance data (not supported yet)ADDRESS: FTP server IP addressFILE: path/source name of destination file on FTP server acc. to the selected commandAfter confirmation of the command, please enter the slotnumber of the IU:slot number: plug-in slot of the unit the data are requested from.

upload iu inventory alloftype ADDRESS FILE

Uploads IU inventory data for all IUs of same type:ADDRESS: : FTP server IP addressFILE: destination file name (inventory file)file format: *.tgzAfter confirmation of the command, please enter the slotnumber of one IU referencing the requested type (mnemo code):slot number: plug-in slot of the unit the data are requested from.

65


Id:0900d8058017d737

this is the main board slot, upload main board inventory dataFTP User Name:useraFTP Password :timeout (120 seconds) active...upload iu inventory file R2.5/testinv.txt to server 172.18.107.12 complete






4.6.4 Automatic System Upgrade / S-APS upgradeThe user can make a choice beween manual or S-APS upgrade.

For S-APS upgrade, the user needs an S-APS configuration file containing load infor-mations for possibly plugged units, based on their unique mnemo codes.

If S-APS is enabled, most manual up- or download commands are blocked.

Exceptions are "upload cxu errorlog", "upload cxu/iu inventory".

In order to download SAPS, use one of the following command.


download create sapsserver-infoADDRESS USER PASSWORD SAPSFILE

Global

Configure S-APS upgrade:ADDRESS: S-APS server IP addressUSER: S-APS server user namePASSWORD: S-APS server passwordSAPSFILE: S-SAPS file on S-APS server

download{enable I disable Irestart_reset I restart_noreset Ireload} sap-shandling

Configure S-APS handling, S-APS use of SAPSdata from now on:enable: S-APS handling enableS-APS configuration file will be read from server.If it is not possible, S-APS handling will be switched OFF automatically!

disable: S-APS handling disabled, manual up-/download possible

restart_reset: S-APS handling restart (if S-APS enabled)All plugged units will be checked again against S-APS configuration file content and if needed an upgrade with load activation; automatic unit reset will be done.

restart_noreset: S-APS handling restart without boardAll plugged units will be checked again against S-APS configuration file content and if needed an upgrade will be done.NO automatic load activation is performed.

reload: (if S-APS is disabled) S-APS configuration file reload

66


Id:0900d8058017d737


4.6.5 Displaying Upgrade InformationTo display upgrade information of CXU and IU, use the following command.




Following example shows how to display upgrade information:

SWITCH(config)# show upgrade.load informations:OS1: she_r2.5_cxu-b_o.109length=12414976 Bytes OS2: she_r2.5_cxu-b_o.109length=12414976 Bytes ->Default OS ->Trial OS, used for rebootrunning: she_r2.5_cxu-b_o.109 # build=# Mon Apr 23 16:48:55 CEST 2007(running is OS2)

g If the command "show upgrade table sapsjobs" will return immediately with an empty table,this means, that S-APS upgrade is disabled.

4.6.6 Auto BackupIn order to configure auto backup local, use one of the following command.

In order to check auto backup configuration, use the following command.


show upgrade PrivilegedGlobal

Show upgrade information.

show upgrade table Show an upgrade file table of all system.

show upgrade table mnemocode Show slot based mnemocodes

show upgrade table sapsjobs Show table of S-APS upgrade jobs

show upgrade table sapsserver-info

Show S-APS server data known by upgrade

show flash Show information of the system flash memory.


auto-backup local {enable I disable}

Global Enables/disables the automatic save of the configurationdata in persistant memory.

auto-backup local waiting-time<1-59>

Configures auto-backup waiting-time for local backup:1-59: the waiting time in minutes after the last configura-tion action before the configuration data are saved in per-sistent memory.

no auto-backup local Disable the automatic save function.

67


Id:0900d8058017d737

In order to configure auto backup on a FTP server, use one of the following command.

In order to check auto backup FTP file table, use the following command.

4.7 Enhancing System ReliabilityFor an increased reliability of the hiX 5635/hiX 5630/hiX 5625, board redundancy for the central switch unit (CXU) is supported. The M1200/M1100/G1100/M600/M400 shelf can be optionally equipped with a set of two CXUs, one of them acting as active CXU. The second CXU remains in the standby mode until a failure condition on the active CXU triggers a redundancy switching event.

The board redundancy meets following requirements:


show auto-backup Global Display the auto-backup configuration.


auto-backup ftp {enable I disable}

Global

Enables/disables the automatic save of the configuration-data on a FTP server.

auto-backup ftp file-count <1-32>

Configures the number of files on FTP server:1-32: the number of files

auto-backup ftp ipA.B.C.D Configures the Ip address of the FTP server:A.B.C.D: the Ip address of the FTp server

auto-backup ftp path {PATH I} Configures the path on FTP server where to save the-backup:PATH: the path on FTP server where to save

auto-backup ftp account USER PASSWORD

Configures the the account to access the FTP serverwith user name and pasword:USER: user name of the FTP server accountPASSWORD: password of the FTP server account

auto-backup ftp account_USER PASSWORD

Configure the account to access the FTP-server with user name and password already cipheredUSER:ciphered user name of the FTP-accountPASSWORD:ciphered password of the FTP-account

auto-backup ftp interval <1-48>

Configures the time between two backups:1-48: the time (hours) between to backups

auto-backup ftp start-time <0-1439>

Configures the time of day when first backup is written:0-1439: the time of day (minutes) when the firstbackup is written.

auto-backup now Writes a local backup and backup on FTP server now.

auto-backup ftp refresh-file-table

Refreshes FTP backup file table

auto-backup ftp restoreIN-DEX

Restores backup from FTP server:INDEX: the index of the backup to be restored in the FTP file table.

no auto-backup ftp Disables the automatic save function.


show auto-backup ftp file-table

Global Displays the backup files located on the FTP server.

68


Id:0900d8058017d737


• Redundancy switching is initiated autonomously by CXU HW in case of a watchdog event (SW error on the currently active CXU).

• Redundancy switching is initiated autonomously if the currently active CXU is plugged-out.

• Redundancy switching can be initiated by a SW command on the currently active CXU. This can occur:– as a result of HW state monitoring or– if switchover is requested by the TMN.

g Normally, when a critical error occurs on the current active CXU, the hiX 5635/hiX 5630/hiX 5625 will proceed the switchover to the standby CXU automatically. In this case, the uplink connection can be kept up with the cross-connection for the CXU redundancy. For more information, refer to the System Description for the hiX 56xx and the Installation Manual for the hiX 5635/hiX 5630/hiX 5625.

To enable/disable the CXU redundancy manually, use the following command.

To display a current redundancy state, use the following command.

You can also configure the DSLAM to monitor the operation of the optical interfaces on the CXU for automatic CXU switchover for a connection failure.

To enable/disable link monitoring, use the following command.


redundancy SLOT Global Enable the redundancy for a plug-in unit in the given slot, enter the slot number.

no redundancy SLOT Disable the redundancy for a plug-in unit in the given slot, enter the slot number.

switchover SLOT Switchover to the standby plug-in unit if the standby unit has no error, enter the slot number in which the active unit is plugged-in.

switchover-forced SLOT Switchover to the standby plug-in unit, enter the slot number in which the active unit is plugged-in.

optical_splitter Activate the Optical-Splitter-Redundancy, e.g. Link 1 from activ CXU + Link 1 from Stdby CXU are guided over optical splitter.

no optical_splitter Deactivate the Optical-Splitter-Redundancy.


show redundancy-states Global Show a redundancy state of all plug-in units.

show optical_splitter Show optical splitter configuration


link-monitor PORTS switch-over

Global

Activate the port monitor for optical splitter -> loss of link on the active CXU causes the switchover to the stdby CXU.

no link-monitor PORTS switch-over Deactivate the port monitor for optical splitter -> loss of link on the active CXU causes the switcho-ver to the stdby CXU.

69


Id:0900d8058017d737

To show link-monitor configuration, use the following command.

port link-monitor PORTS switch-over Bridge Activate the port monitor -> loss of link on the active CXU causes the switchover to the stdby CXU.

port link-monitor PORTS enable Activate the port monitor -> loss of link on the active CXU causes the switchover to the stdby CXU.

port link-monitor PORTS disable Deactivate the port monitor.

PORTS: select port number like 0/1-0/1 or s0.


show link-monitor Global Show link-monitor configuration


70


Id:0900d8058018f37e

Port Configuration

5 Port ConfigurationYou can configure Ethernet, ADSL and VDSL ports. ADSL and VDSL ports will be con-figured as line configuration or as line configuation profile. Read the below instruction carefully before you configure a port in the DSLAM.

It mainly contains the following sections.

• Port Basic • General Port Configuration • Configuring Ethernet Port • Configuring ADSL Port • Configuring SHDSL Port • Configuring xDSL Port • Configuring hiX 56xx to Operate under ATM Environment • Bridging

5.1 Port BasichiX 5635: Slot Allocation of M1200

The M1200 shelf provides 15 mounting slots for the IUs, 1 mounting slot for the CXU_B and 1 mounting slot for either IU or redundant CXU_B. Each IU contains 48 or 72 ADSL ports/48 SHDSL ports/24 VDSL ports/72 VPLU ports, and CXU_B contains 4 Gigabit Ethernet ports.

When you configure the hiX 5635 via the CLI, the hiX 5635 assigns the slot number 0, 9 or 10 to the mounting slot for CXU_B in the physical slot number 209/210. The slot number 1-8 and 10/11-17 will be assigned to other mounting slots for the IUs in the physical slot number 201-208 and 210/211-217, refer to Figure 2.

Figure 2 M1200 Slot Allocation for CLI

Slot203

IU 1)

Slot204

IU 1)

Slot205

IU 1)

Slot206

IU 1)

Slot207

IU 1)

Slot208

IU 1)

Slot209

CXU_B

Slot210

CXU_B

Slot211

IU 1)

Slot212

IU 1)

Slot213

IU 1)

Slot214

IU 1)

Slot215

IU 1)

Slot216

IU 1)

Slot217

IU 1)

Slot202

IU 1)

Slot201

IU 1)

Fan unit

1) IU_ADSL48, IU_ADSL72, IU_SHDSL48, IU_SHDSL48.bis, IU_VPLU72, IU_VDSL24, IU_VDSL24P

orIU 1)

12)

22)

32)

42)

52) 6

2)7

2)8

2)0 or 0 or 11

2)12

2)13

2)14

2)15

2)16

2)17

2)

2) Slot number in CLI3) Slot number in CLI is 10 for IU on mounting slot 210.

Slot number in CLI is 0 for CXU_B for port commands.Slot number in CLI is 9 or 10 for CXU_B for the following commands: reset card, card admin-state,card alarm-severity-profile, switchover commands, slot card commands and show commands.

93)

103)

71

Operation Manual CLI Port Configuration

Id:0900d8058018f37e

hiX5635: Slot Allocation of M1100/G1100

The M1100/G1100 shelf provides 14 mounting slots for the IUs, 1 mounting slot for the CXU_B1 and 1 mounting slot for a redundant CXU_B1. In M1100 shelf, mounting slot 110 can be equipped with an additional IU instead of the redundant CXU_B1. Each IU contains 72 ADSL ports/48 SHDSL ports/24 VDSL ports/72 VPLU ports, and CXU_B1 contains 4 Gigabit Ethernet ports.

When you configure the hiX 5635 via the CLI, the hiX 5635 assigns the slot number 0, 9 or 10 to the mounting slot for CXU_B1 in the physical slot number 109/110. The slot number 1-8 and 10/11-16 will be assigned to other mounting slots for the IUs in the physical slot number 101-108 and 110/111-116, refer to Figure 3

Figure 3 M1100/G1100 Slot Allocation for CLI

hiX 5630: Slot Allocation of M600

The M600 shelf provides 8 mounting slots for the IUs, 2 mounting slots for the CXU_C and 1 mounting slot for CIUG. Each IU contains 72 ADSL ports/48 ADSL ports/48 SHDSL ports/24 VDSL ports/72 VPLU ports, and CXU_C contains 4 Gigabit Ethernet ports

When you configure the hiX 5630 with the CLI, the hiX 5630 assigns the slot number 0, 5 or 6 to the mounting slot for CXU_C in the physical slot number 206/207. The slot number 1-4 and 7-10 will be assigned to other mounting slots for the IUs in the physical slot number 202-205 and 208-211, refer to Figure 4

Slot103

IU 1)

Slot104

IU 1)

Slot105

IU 1)

Slot106

IU 1)

Slot107

IU 1)

Slot108

IU 1)

Slot109

CXU_B1

Slot110

CXU_B1

Slot111

IU 1)

Slot112

IU 1)

Slot113

IU 1)

Slot114

IU 1)

Slot115

IU 1)

Slot116

IU 1)

Slot117

Slot102

IU 1)

Slot101

IU 1)

Fan unit

1) IU_ADSL72, IU_SHDSL48.bis, IU_VPLU72, IU_VDSL24, IU_VDSL24P

orIU 1)

PM_1

Slot118

PM_UPL

2) Slot number in CLI

12)

22)

32)

42)

52) 6

2)7

2)8

2)0 or 0 or 11

2)12

2)13

2)14

2)15

2)16

2)

93)

103)

3) Slot number in CLI is 10 for IU on mounting slot 110 (only possible in M1100 shelf). Slot number in CLI is 0 for CXU_B1 for port commands.Slot number in CLI is 9 or 10 for CXU_B1 for the following commands: reset card, card admin-state,card alarm-severity-profile, switchover commands, slot card commands and show commands.

72


Id:0900d8058018f37e

Port Configuration


hiX 5625: Slot Allocation of M400

The M400 shelf provides 5 mounting slots for the IUs, 1 mounting slots for the CXU_C and 1 mounting slot for CIUG. Each IU contains 72 ADSL ports/48 SHDSL ports/24 VDSL ports/72 VPLU ports, and CXU_C contains 4 Gigabit Ethernet ports.

When you configure the hiX 5625 with the CLI, the hiX 5625 assigns the slot number 0, 1 or 2 to the mounting slot for CXU_C in the physical slot number 202/203 . The slot number 2/3-6 will be assigned to other mounting slots for the IUs in the physical slot number 203/204-207, refer to Figure 5.

IU 1)

IU 1)

IU 1)

IU 1)

IU 1)

IU 1)

IU 1)

IU 1)

CXU_C

CXU_C

CIUG

Fan

Un

itSlot210Slot

Slot

Slot

Slot

Slot

Slot

Slot

Slot

Slot

209

208

207

206

205

204

203

202

201

102)

9

8

7

0 or 6

0 or 5

4

3

2

1

2)

2)

2)

3)

3)

2)

2)

2)

2)

1) IU_ADSL72, IU_ADSL48, IU_SHDSL48, IU_SHDSL48.bis, IU_VPLU72, IU_VDSL24, IU_VDSL24P 2) Slot number in CLI

Slot211

3) Slot number in CLI is 0 for CXU_C for port commands. Slot number in CLI is 5 or 6 for CXU_C for the following commands:reset card, card admin-state, card alarm-severity-profile, switchover commands, slot card commands and show commands.

73


Id:0900d8058018f37e


hiX 5625: Slot Allocation of G400

The G400 shelf provides 4 mounting slots for the IUs, 2 mounting slots for the CXU_C and 2 mounting slot for PM_UPL and PM_1R. Each IU contains 72 ADSL ports/48 SHDSL ports/24 VDSL ports/72 VPLU ports, and CXU_C contains 4 Gigabit Ethernet ports.

When you configure the hiX 5625 with the CLI, the hiX 5625 assigns the slot number 0, 3 or 4 to the mounting slot for CXU_Cs. The slot number 1-2, 5-6 will be assigned to other mounting slots for the IUs in the physical slot number 201-202, 205-206 refer to Figure 6.

Figure 6 G400 Slot Allocation for CLI (Example: for ETSI application)

hiX 5625: Slot Allocation of G400R

The G400R shelf provides 4 mounting slots for the IUs, 2 mounting slots for the CXU_C and 2 mounting slot for PM_UPL and PM_1R. Each IU contains 72 ADSL ports/48

IU 1)207

IU 1)

IU 1)

IU 1)

IU 1)

Slot205Slot204Slot203Slot202Slot201

CXU_C

CIUG

Fan

Un

it

0 or 1

0 or 2

3

4

5

6

3)

3)

2)

2)

2)

2)


CXU_C/

Slot206

Slot

2) Slot number in CLI3) Slot number in CLI is 2 for IU on mounting slot 203.

Slot number in CLI is 0 for CXU_B for port commands.Slot number in CLI is 1 or 2 for CXU_B for the following commands: reset card, card admin-state, card alarm-severity-profile, switchover commands, slot card commands and show commands.

1)

1)

1)


1)

2)

2)

3)

3)

2)

2)


G40

0 F

an U

nit Slot 201

Slot 202Slot 203Slot 204

Slot 205

Slot 206Slot 207

IU

IUCXUCXU

IU

IU

1

2

56

PM_UPL ETSI Slot 208 PM_1R ETSI

0 or 3

0 or 4

3) Slot number in CLI is 0 for CXU for port commands. Slot number in CLI is 3 or 4 for CXU for the following commands: reset card, card admin-state,card alarm-severity-profile, switchover commands, slot card commands and show commands.

74


Id:0900d8058018f37e

Port Configuration

SHDSL ports/24 VDSL ports/72 VPLU ports, and CXU_C contains 4 Gigabit Ethernet ports.

When you configure the hiX 5625 with the CLI, the hiX 5625 assigns the slot number 0, 3 or 4 to the mounting slot for CXU_Cs. The slot number 1-2, 5-6 will be assigned to other mounting slots for the IUs in the physical slot number 201-202, 205-206 refer to Figure 7.

Figure 7 G400R Slot Allocation for CLI

Slot Number

When specifying a slot number in the CLI, you can simply put the number in the form of s1, s2, …. To input multiple slot numbers is also possible, e.g. s1, s2, s7 or s1-s5. Note that the CXU is normally configured with ports but not a slot.

g kFor hiX 56xx, regardless of the state (active or standby) or place, the CXU always has the slot number 0 in the CLI.

Port Number

In the principle of the slot numbering, the hiX 56xx displays a physical port number in the form of SLOT/PORT, e.g. 0/1 (Ethernet port 1 in the CXU), 3/26 (xDSL port 26 in the slot 3) or 5/72 (xDSL port 72 in the slot 5).

Bridge Port Number

The hiX 56xx provides up to 8 bridge ports on every physical xDSL port. When specify-ing a bridge port number in the CLI, enter the number in the form of SLOT/PORT/VC, e.g. 4/21/5 (bridge port 5 of xDSL port 21 in the slot 4), 6/15/2 (bridge port 2 of xDSL port 15 in the slot 6), or 2/2/1 (bridge port 1 of xDSL port 2 in the slot 2).

1)

1)

1)

1)


2)

2)

3)

3)

2)

2)


G40

0 F

an U

nit Slot 201

Slot 202Slot 203

Slot 204

Slot 205Slot 206

Slot 207

IUIU

CXUCXUIU

IUPM_R

65

0 or 40 or 3

2

1

3) Slot number in CLI is 0 for CXU for port commands. Slot number in CLI is 3 or 4 for CXU for the following commands: reset card, card admin-state,card alarm-severity-profile, switchover commands, slot card commands and show commands.

75


Id:0900d8058018f37e

5.1.1 General Port ConfigurationTo enable/disable a port, use the following commands.


port {working_cu|protecting_cu} PORTS {enable| disable|t est}

Bridge Enable/disable a port on working/protecting central unit (CXU), enter the port number:test: configures a port as test port.

port role PORTS {uplink | cascad-ing}

Configure port as uplink or cascading, enter the port number:

port alarm-severity PORTS<1-10>

Configure port alarm severity, enter the port number and the severity index.

port {working_cu | protecting_cu} PORTS description LINE

Specifiy CXU port description (max. number of char-acters is 100), enter a text line.

port lre PORTS description LINE Enable LRE port description (max. number of charac-ters is 100), enter a text line.

port lrePORTS alarm-severity-profile <1-10>

Configure LRE port specific alarm severity profile, enter a port number:1-10: number profiles

port {working_cu | protecting_cu} PORTS alarm-severity-profile <1-10>

Configure working/protecting central unit (CXU) specific alarm severity profile, enter a port number:1-10: number profiles

port {working_cu Iprotecting_cu} PORTS operstatus-trap {enable I disable}

Enables/disables operational state trap for work-ing/protecting central unit, enter the port number:working_cu: working central unitprotecting_cu: protecting central unit

port lre PORTS operstatus-trap{enable I disable}

Enables/disables operational state trap on selected LRE port, enter the port number.

port stby-laser PORTS {on | off | enable | disable}

Activate/deactivate the optical port on the Stdby CXU (necessary for optical Splitter redundancy)

on, enable: laser on standby board enabled.

off, disable: laser on standby board disabled.

port interlink {disable | electrical | optical}

Interlink configuration.Disable: do not use interlinkElectrical: the medium type of interlink is electricalOptical: The medium type of interlink is optical

“Disable” must be chosen for the optical splitter

76


Id:0900d8058018f37e

Port Configuration

5.2 Configuring Ethernet Port

5.2.1 Basic ConfigurationEthernet Port Basic Configuration Task List

By default, all uplink interfaces are 1000M/100M/10M auto-negotiation electrical ones.

Perform the tasks in the following sections to configure an Ethernet port:

• Activating Port • Specifying Port Type • Setting Auto-negotiation • Setting Transmit Rate • Setting Duplex Mode • Configuring Flow Control • Configuring Link Discovery

5.2.1.1 Activating PortThe default status of Ethernet Port is active. If you want to activate one port, use the fol-lowing command in bridge mode:

Example:

SWITCH(bridge)# port working_cu 0/1 enable

5.2.1.2 Specifying Port TypeFor the hiX 56xx, it is possible to specify the Ethernet port type to optical or electrical regardless of the physical network connection.

To choose the port type, use the following command.

Example:

SWITCH(bridge)# port type 0/2,0/3 electrical

5.2.1.3 Setting Auto-negotiationYou can configure the auto-negotiation for a port, automatically to match the transmit rate and the duplex mode of the attached device.


port working_cu PORTS enable Bridge Enable Ethernet Port.


port type PORTS {electrical | optical}

Bridge Configure the port type of the specified port, enter port number:electrical: internal electrical port (default)optical: external optical SFP.

port medium PORTS {electrical| optical}

Configure the port medium of the specified port, enter port number:electrical: internal electrical port (default)optical: external optical SFP

77


Id:0900d8058018f37e

To determine if the speed and duplex mode are set to auto-negotiate, use the following command in the Bridge Configuration mode.

For the hiX 56xx, you can configure transmit rate and duplex mode as standard to con-figure transmit rate or duplex mode of connected equipment even when auto-negotiation is enabled. For example, when you configure transmit rate as 10Mbps with configured auto-negotiation, a port is worked by the standard 10Mbps/Full duplex mode.

g By default, auto-negotiation is activated in 100/1000BASE-TX port of the hiX 56xx. However, we do not recommend you to use the default setting since the equipments are from various manufactures and the compatibility issues may happen.

Following example shows how to disable auto-negotiation for the port:

SWITCH(bridge)# port nego 0/1 force

5.2.1.4 Setting Transmit RateTo set the transmit rate of an Ethernet port, use the following commands beginning in privileged Bridge mode

Example:

SWITCH(bridge)# port speed 0/1 1000

5.2.1.5 Setting Duplex ModeOnly unidirectional communication is practicable on half duplex mode, and bidirectional communication is practicable on full duplex mode.

To set duplex mode, use the following command.

Example:

SWITCH(bridge)# port duplex 0/1 full


port nego PORTS {force | auto} Bridge Configure the auto-negotiation of the specified port, enter the port number:force: auto-negotiation disabledauto: auto-negotiation enabled


port s peed PORTS {100 | 1000} Bridge Set the transmit rate of an Ethernet port, enter a port number.


port duplex PORTS full Bridge Set full duplex mode of specified port, enter the port number.

78


Id:0900d8058018f37e

Port Configuration

5.2.1.6 Configuring Flow ControlEthernet ports on the switches use flow control to restrain the transmission of packets to the port for a period of time. Typically, if the receive buffer becomes full, the port trans-mits a pause packet that tells remote ports to delay sending more packets for a specified period of time. In addition, the Ethernet ports can receive and act upon pause packets from other devices.

To configure flow control of the Ethernet port, use the following command.

5.2.1.7 Configuring Link DiscoveryTo configure link discovery, use the following commands.

5.2.1.8 Displaying Traffic Statistic of PortTo display traffic statistic of each port or interface with MIB or RMON MIB data defined, use the following commands.


port flow-control PORTS {disable | enable}

Bridge Configure flow control for a specified port, enter the port number.


port link-discovery chassis PORTS IP-ADDRESS

Bridge Configure link discovery (remote chassis IP address) for a specified port, enter the port number and set the remote chassis IP address.

port link-discovery slot PORTS REMOTE-SLOT

Configure link discovery (remote slot value) for a spec-ified port, enter the port number and set the remote slot number.

port link-discovery port PORTS REMOTE-PORT

Configure link discovery (remote port value) for a specified port, enter the port number and set the remote port number.

port link-discovery mode PORTS {none | manual | automatic}

Configure link discovery (link discovery mode value) for a specified port, enter the port number and set the mode.

79


Id:0900d8058018f37e

The following is an example of displaying the traffic statistics of average packet for the Ethernet port 4 in the CXU.

SWITCH(bridge)# show port statistics avg-pkt 0/4 =================================================================Slot/Port | Tx | Rx--------------------------------------------------------------- Time | pkts/s | bytes/s | bits/s | pkts/s | bytes/s | bits/s===============================================================0/4 ------------------------------------------------------------5 sec: 0 0 0 11 1106 8,8481 min: 0 1 8 1 155 1,24010 min: 0 0 0 0 15 120SWITCH(bridge)#

Otherwise, to clear all recorded statistics of port and initiate, use the following command.


show port statistics avg-pkt [PORTS | all]

PrivilegedGlobalBridge

Show average taffic of specified port, enter port number.

PORTS: set port number like 0/1 or 0/1-0/4 or s0

all: all ports including internal ports to IU

show port statistics interface {PORTS | rcu}

Show MIB data of specified port:PORTS: port numberrcu: Redundant Central Unit (CXU)

show port statistics ethernet [PORTS|all]

Show Ethernet statistic counters of specified port, enter the port number.


show port statistics dot3 [PORTS|all] Show DOT3 statistic counters of specified port, enter the port number.


show port state mirror [PORTS] Show state information of mirrored port, enter the port number.


clear port PORTS description

Bridge

Clear port specific s, enter the port number.

clear port statistics interface {PORTS | all}

Clear all recorded port statistics:PORTS: port numberall: clear all information.

clear port statistics dot3 PORTS Clear DOT3 statistic counters of specified port, enter the port number.

clear port statistics ethernet PORTS Clear Ethernet statistic counters of specified port, enter the port number.

clear port statistics avg-pkt PORTS Clear traffic average of specified port, enter the port number.

80


Id:0900d8058018f37e

Port Configuration

5.2.1.9 Displaying Port StatusTo display a port status, use the following command.

The following items are the information that you can see by using above commands.

The following shows the state of Ethernet ports in the CXU.

SWITCH(bridge)# show port 0/1-0/4

===============================================================

S/P TYPE PVID LINK NEGO DUP SPEED FC FP ROLE

===============================================================

0/1 Eth - Up/Up Auto Full/Full 1000/1000 Dis/Dis No/Int Aggr



show port


Show configured state of all ports.

show port PORTS description Show port specific description (max. number of char-acters is 100), enter the port number.

show port stby-laser [PORTS] Show a status of CXU uplink port.

show port link-discovery [PORTS] Show configured link state of port, enter the port number.

show port sfp [PORTS] Show installed SFP module information, enter the port number.

show lre PORTS adsl Show LRE port status, enter the port number.

show lre PORTS adsl physical {atuc | atur}

Show ADSL physical table information, enter the port number and ATU value.

show lre PORTS adsl chan-table Show LRE adsl channel status.

Item Description

S/P Show the slot and port number.

TYPE Show type of port, Ethernet or ADSL.

PVID Show PVID of port.

LINK Show status of port. LINK is up/down status by user configuration.

NEGO Show status for auto-negotiation.

DUP Show status for duplex mode.

SPEED Show status for rate of the port

FC Show flow control of port, enable or disable.

MEDIUM Show the medium type.

ROLE Show role of the port.

Table 18 Port Information

81


Id:0900d8058018f37e



SWITCH(bridge)#

5.2.1.10 Example of Configuring Ethernet PortThe following example shows how to configure an Ethernet port and display its state. Note: the sentence after “//” mark is the description of the command , you don’t need to input them.

SWITCH(bridge)# port type 0/2,0/3 electrical //Set Ethernet port 2,3 in CXU to electrical port

SWITCH (bridge)# port type 0/1,0/4 optical //Set Ethernet port 1,4 in CXU to optical port

SWITCH (bridge)# port nego 0/1 force //Disable auto-negotiation for Ethernet port 1 in CXU

SWITCH (bridge)# port speed 0/1 1000 //Assign transmit speed 1000M to Ethernet port 1 in CXU.

SWITCH (bridge)# port duplex 0/1 full //Set full duplex mode for Ethernet port 1 in CXU.

SWITCH(bridge)# port flow-control 0/1 enable //Enable flow control for Ethernet port 1 in CXU.

SWITCH(bridge)# show port 0/1-0/4//Display the state of Ethernet ports in the CXU

===============================================================

S/P TYPE PVID LINK NEGO DUP SPEED FC SFP ROLE

===============================================================


0/2 Eth - Up/Up Auto Full/Full 1000/1000 Dis/Dis No/Int Agg



SWITCH(bridge)# show port statistics avg-pkt 0/4 // displaying the traffic statis-tics of average packet for the Ethernet port 4 in the CXU

===============================================================

Slot/Port| Tx | Rx

---------------------------------------------------------------

Time | pkts/s | bytes/s | bits/s | pkts/s | bytes/s | bits/s

=============================================================

82


Id:0900d8058018f37e

Port Configuration

0/4 ------------------------------------------------------------

5 sec: 0 0 0 11 1106 8,848

1 min: 0 1 8 1 155 1,240

10 min: 0 0 0 0 15 120

SWITCH(bridge)#

5.2.2 Link Aggregation Group (LAG)Link aggregation group (LAG) complying with IEEE 802.3ad bundles several physical ports together into one logical port so that you can get enlarged bandwidth.

The hiX 56xx supports two kinds of link aggregation: port trunk and LACP. There’s a little difference in these two ways. In case of port trunking, it is quite troublesome to set the configuration manually and the rate to adjust to the network environment changes when connecting to the switch using logical port. On the other hand, in case of LACP, once you specify LACP member ports between the switches, the ports will be automatically aggregated by LACP, with no need to manually configure the aggregated ports.

g You can create 2 aggregate ports at maximum, and an aggregate port can bind up to 4 physical ports.

5.2.2.1 Port TrunkPort trunking enables you to dynamically group the similarly configured interfaces into a single logical link (aggregate port) to increase bandwidth, while reducing traffic conges-tion.

• Configuring Port Trunk • Enabling/Disabling Port Trunk • Displaying Port Trunk Configuration

Configuring Port TrunkTo create a logical port by aggregating the physical ports, use the following command.

g It is possible to input 0 or 1 to the trunk group ID because the hiX 56xx supports 2 logical aggregated ports, and the group ID of port trunk and the aggregator number of LACP cannot coexist.

g For the hiX 56xx, a source/destination MAC address is basically used to decide packet route.


trunk group distmode AGGREGA-TORS {srcmac | dstmac | srcdst-mac | scrip | dstip | srcdstip}

Bridge

Manage fixed trunk groups:AGGREGATORS: trunk group IDsrcmac: source MAC addressdstmac: destination MAC addresssrcdstmac: source/destination MAC address (default)srcip: source IP addressdstip: destination IP addresssrcdstip: source/destination IP address

no trunk group distmode AGGRE-GATORS

Delete fixed trunk groups, select the trunk group ID.

83


Id:0900d8058018f37e

The port designated as a member port of port trunk is automatically deleted from existing VLAN. Therefore, the aggregated ports have to be added into the corresponding vlans after the member ports are configured as trunk ports.

Enabling/Disabling Port TrunkTo enable or disable the configured port trunk, use the following command.

g If a member port is deleted from a logical port or the port trunk is disabled, the member port will be removed from the existent vlan automatically, i.e., the member port will not belong to any existent vlan.

Displaying Port Trunk ConfigurationTo display a configuration of port trunk, use the following command.

Port Trunk ExampleSWITCH(bridge)# trunk group distmode 0 srcdstip

SWITCH(bridge)# trunk port 0 0/1

SWITCH(bridge)# show port 0/1

============================================================

S/P TYPE PVID LINK NEGO DUP SPEED FC SFP ROLE

============================================================


SWITCH(bridge)# show trunk

Trunk Group 0 : srcdstip : 1(o)

Trunk Group 1 : srcdstmac : Inactive


trunk port AGGREGATOR PORTS

Bridge

Manage trunk:AGGREGATOR: trunk group IDPORTS: port numbers to be added (e.g. 0/1 -0/4).

no trunk port AGGREGATOR PORTS

Delete trunk:AGGREGATOR: trunk group IDPORTS: port numbers to be deleted


show trunk PrivilegedGlobalBridge

Show the configuration for trunk.

84


Id:0900d8058018f37e

Port Configuration

5.2.2.2 Link Aggregation Control Protocol (LACP)Link aggregation control protocol (LACP) is the function of using wider bandwidth by aggregating more than two ports as a logical port like previously stated port trunk func-tion.

A principle of aggregating the physical ports into a logical port by LACP is that the aggre-gated ports must belong to the same vlan or not belong to any vlan. Accordingly, the aggregator port will be automatically added into the same vlan or not belong to any vlan.

g LACP can generate up to 2 aggregators whose number value could be 0 or 1. The group ID of port trunk and the aggregator number of LACP cannot be configured with the same value.

The following explains how to configure LACP.

• Enabling/Disabling LACP • Configuring distribution mode • Configuring Member Port • Configuring Operation Mode • Setting Priority of Switch • Manual Aggregating • Configuring BPDU Transmit Rate • Setting Administration Key • Setting Port Priority • Displaying LACP Configuration

Enabling/Disabling LACPTo configure LACP function, use the following commands.

In order to release LACP and delete the configuration of LACP, use one of the follow-ingcommand.


lacp aggregator AGGREGATIONS

Bridge

Enable LACP of designated Aggregator-number:AGGREGATIONS: select aggregator ID that should be enabled for LACP (valid value from 0 to 1).

lacp aggregator admin-key AGGREGA-TIONS <1-65535>

Enable admin-key of designated Aggregator-number:AGGREGATIONS: select aggregator ID that should be enabled for LACP (valid value from 0 to 1).1- 65535: admin-key value (default: 1)

lacp aggregator delay AGGREGATIONS <0-65535>

Enables collector max delay of designated Aggregatornumber:AGGREGATIONS: select port number0- 65535: select aggregator numbers (default 0).

85


Id:0900d8058018f37e

Configuring distribution modeIf packets enter a logical port which aggregates several physical ports and there is no method to decide the packet route, the packets could be gathered on a particular member port. But, the logical port cannot be used effectively.

To solve this problem, hiX 56xx can be configured to decide the packet route in order to distribute (or forward) packets to the member port effectively when packets enter. The distribution mode can be decided by Source IP address, destination IP address, source MAC address, destination MAC address and the user could get information of packets to decided packet route. srcip is source IP address and srcmac means source MAC address. dstip is destination IP address and dstmac means destination MAC address.

g For hiX 56xx, a source/destination MAC address is basically used to decide packet route.

After configuring an LACP aggregator, you should configure the distribution mode. The following is the command for configuring the distribution mode of the LACP aggregator.

To delete a configured distribution mode, use the following command.


no lacp aggregator AGGREGATIONS Bridge Disable LACP for designated Aggregator-number, select the aggregator ID that should be disabled for LACP.

no lacp aggregator admin-key AGGRE-GATIONS

Disable admin-key of designated Aggregator-number, select the port number.

no lacp aggregator delayAGGREGA-TIONS

Releasse collector max delay of designated Aggregator-number, select the aggregator ID that should be disabled for LACP and the admin-key value.


lacp aggregator distmode AGGREGETIONS {srcmac | dstmac | srcdstmac | srcip | dstip | srcdstip}

Bridge Configure the distribution mode of the LACP aggre-gator:AGGREGATIONS: aggregator IDsrcmac: source MAC addressdstmac: destination MAC addresssrcdstmac: source/destination MAC address (default)srcip: source IP addressdstip: destination IP addresssrcdstip: source/destination IP address


no lacp aggregator distmode AGGREGETIONS

Bridge Delete a configured distribution mode.

86


Id:0900d8058018f37e

Port Configuration

Configuring Member PortAfter configuring the aggregator, configure the physical port that is a member of aggre-gated port.

To configure the member port of aggregated port, use the following command on Bridge Configuration mode.

g When you configure several ports, you have to enter each port separated by a comma without space or use dash mark “-“ to arrange port range.

To delete the member port, use the following command.

Configuring Operation ModeAfter configuring the member port, configure the LACP operation mode of the member port. This defines the operation way for starting LACP operation. You can select the operation mode between the active and passive mode.

The active mode allows the system to start LACP operation regardless of other con-nected devices. On the contrary, the passive mode allows the system to start LACP operation only when receiving LACP messages from other connected devices.

To configure the operation mode of the member port, use the following command.

To delete the configured operation mode of the member port, use the following command.


lacp port PORTS Bridge Configure physical port that is member port of aggre-gator, select the port number(s) that should be enabled for LACP.PORTS: 0/1 to 0/4 (slot/port, slot 0 is CXU slot)


no lacp port PORTS Bridge Delete the member port from aggregator, select the port number(s) that should be disabled for LACP.

!In case of an LACP connection between 2 switches, if the member ports of both switches are configured as the passive mode, the link between the switches cannot be established.


lacp port activity PORTS {active | passive}

Bridge Configure the operation mode of the member port. (default: active)


no lacp port activity PORTS Bridge Delete the configured operation mode of the member port.

87


Id:0900d8058018f37e

Setting Priority of SwitchIf the member ports of connected switches are configured as Active mode (LACP system enabled), it is required to configure which switch would be a standard for it. For this case, the user could configure the priority on switch.

The following is the command of configuring the priority of the switch in LACP function.

To delete the priority of configured switch, use the following command.

Manual AggregatingAfter the port is configured as LACP member port and even not released, they could operate as independent port without being aggregated to LACP. However, these inde-pendent ports cannot be configured as trunk port because they are independent from being aggregated to LACP under the condition of being configured as member port.

To configure member port aggregated to LACP, use the following command.

g For hiX 56xx, the member port is basically configured to aggregated to LACP.

To clear aggregated to LACP of configured member port, use the following command.

g If you clear the user configuration of aggregating to LACP, it returns to default con-figuration (aggregated).

Configuring BPDU Transmit RateThe member port transmits BPDU with its information. For hiX 56xx, the BPDU transmit rate can be configured with the following command.


lacp system priority <1-65535> Bridge Set the priority of the switch in LACP function, enter the switch system priority. (default: 32768)


no lacp system priority Bridge Clear the priority of the configured switch.


lacp port aggregation PORTS {aggregatable | individual}

Bridge Configure the property of a specified member port for LACP. (default: aggregatable)


no lacp port aggregation PORTS Bridge Delete the configured property of a specified member port for LACP.

88


Id:0900d8058018f37e

Port Configuration

To clear the BPDU transmit rate, use the following command.

Setting Administration KeyThe member port of LACP has an admin-key. All member ports in one aggregator should have the same key value.

To make the aggregator consist of specified member ports, the desired member ports should be configured with the same key value, and other ports should be configured the different values for their key.

To delete the key value of a configured member port, use the following command.

Setting Port PriorityTo configure priority of an LACP member port, use the following command.

To delete the configured port priority of the member port, use the following command.


lacp port timeout PORTS {short | long}

Bridge Configure BPDU transmit rate:PORTS: select the port number.short: short timeout (1 sec)long: long timeout (30 sec: default)


no lacp port timeout PORTS Bridge Clear BPDU transmit rate of configured member port, select the port number.


lacp port admin-key PORTS <1-15>

Bridge Configure the key value of a member port:PORTS: select the port number.1-15: key value (default: 1)


no lacp port admin-key PORTS Bridge Delete key value of a specified member port, select the member port number.


lacp port priority PORTS <1-65535>

Bridge Set the LACP priority of a member port, select the port number. (default: 32768)


no lacp port priority PORTS Bridge Delete the configured port priority of a selected member port, select the member port number.

89


Id:0900d8058018f37e

Displaying LACP ConfigurationTo display a configured LACP, use the following commands.

LACP Configuration ExampleSWITCH(bridge)# lacp aggregator add 0

SWITCH(bridge)# lacp aggregator distmode 0 srcmac

SWITCH(bridge)# lacp port add 0/1-0/2

SWITCH(bridge)# show lacp aggregator 0

Actor part

Administrative Operational

Aggregator MAC address 000000-000000

Aggregator ID 0

Aggregator key 0x0000 0x0000

Partner part

Administrative Operational

System 000000-000000

System priority 0x0000

Aggregator key 0x0000

Distributing Algorithm : XOR MAC

MEMBERS(#0):

5.2.2.3 Layer 2 Control Protocol (L2CP)SURPASS hiX 56xx supports the Layer 2 Control Protocol (L2CP) for high speed Internet access via xDSL subscriber lines and uplink interfaces of CXU.

L2CP is used in hiX 56xx to deliver information about the type of DSL subscriber line as well as upstream and downstream bit rates to the broadband remote access server(BRAS). Without this information, BRAS has to adjust its shaping functions to the-maximum configured rate values. However, traffic losses can occur in the DSLAM and-incorrect billing may ensue if the actual rate is lower than the maximum rate.

To create/delete new L2CP interface, use the following commands.

g "The string “L2CP_MAX_INTERFACES_STR" represents the interface number in DSLAM, the values are different for various shelves:

– hix 5625: 5 – hix 5630: 8– 5635 M1200: 16


show lacp aggregator


Show the information of aggregated port.

show lacp aggregator AGGREGA-TIONS

Show the information of selected aggregated port.

show lacp port Show the information of member port.

show lacp port PORTS Show the information of appropriated member port.

90


Id:0900d8058018f37e

Port Configuration

– hix 5635 M1100: 15– hix 5635 G1100: 14

“L2CP_MAX_ALARMSEVERITYPROFILEINDEX_STR” is the max alarm severity profiles used by the interface.

To modify L2CP interface and port parameters, use the following commands.


l2cp create A.B.C.D ACCESS_NODE_IDENTIFIER <0-25> <0-10> <0-60> (<0-255> | no-partitioning) (<1-"L2CP_MAX_ALARMSEVERITYPROFILEINDEX_STR">)

Global

Create a new L2CP interface.A.B.C.D: IP address of the controller to connect withACCESS_NODE_IDENTIFIER: Access Node Identi-fier (the DSLAM identifies itself by this name),0-25: timer T1 - Time in seconds between periodic adjacency protocol message. 0 = use default value of 10 seconds0-10: timer T2 - Minimum time in seconds between two DSL state changes which are reported to the con-troller.0-60: timer T3 - Time in second before all active ports are reported to the controller after the connection was established.0-255: the partition ID which is handled by this inter-face.no-partitioning: partitioning is not enabled for this interface. This is the default value of this parameter is not given.1-10: the alarm severity profile used by this interface. Alarm profile 1 is used if this parameter is not given.

l2cp delete <1-"L2CP_MAX_INTERFACES_STR">

Delete an L2CP interface 1-"L2CP_MAX_INTERFACES_STR": L2CP inter-face number

91


Id:0900d8058018f37e

To verify L2CP interface and port parameters, use the following commands.


l2cp modify interface <1-"L2CP_MAX_INTERFACES_STR"> ip-address A.B.C.D

Global

Modify L2CP interface parameters1-"L2CP_MAX_INTERFACES_STR": Index of the L2CP interface to be modified

A.B.C.D: IP address of the controller to connect with .

l2cp modify interface <1-"L2CP_MAX_INTERFACES_STR"> access-node-identifier ACCESS_NODE_IDENTIFIER

Modify access node identifier1-"L2CP_MAX_INTERFACES_STR": index of the L2CP interface to be modified

ACCESS_NODE_IDENTIFIER: Access Node Identi-fier (the DSLAM identifies itself by this name)

l2cp modify interface <1-"L2CP_MAX_INTERFACES_STR"> t1 <0-25>

Modify T11-"L2CP_MAX_INTERFACES_STR": index of the L2CP interface to be modified

0-25: timer T1 - time in seconds between periodic adjacency protocol message. 0 = use default value of 10 seconds



0-10: timer T2 - minimum time in seconds between two DSL state changes which are reported to the con-troller.



0-60: timer T3 - time in second before all active ports are reported to the controller after the connection was established.

l2cp modify interface <1-"L2CP_MAX_INTERFACES_STR"> alarm-severity-profile <1-"L2CP_MAX_ALARMSEVERITYPROFILEINDEX_STR">

Modify alarm severity profile used by this interface. "The alarm severity profile" )

1-"L2CP_MAX_INTERFACES_STR": index of the L2CP interface to be modified

1-"L2CP_MAX_ALARMSEVERITYPROFILEINDEX_STR" : the alarm severity profile

l2cp modify interface <1-"L2CP_MAX_INTERFACES_STR"> partition-id <0-255>

Modify partition-id


0-255: the partition ID which is handled by this inter-face.

l2cp modify interface <1-"L2CP_MAX_INTERFACES_STR"> no-partitioning

Disable partitioning


l2cp modify port (<0-255>|no-par-tition|unassigned) SLOT (PORT|)

Modify L2CP port parameters.

0-255: the new partition ID", no-partition: the port will be assigned to no partition", unassigned: the port will be not assigned to any partition (not managed by L2CP), SLOT : the slot where the port is located, PORT: the port number(s). A list of ports can be given with 1,2,10,... If no port is given, all ports of the slot are used.

92


Id:0900d8058018f37e

Port Configuration

5.3 Configuring DSL Port

5.3.1 Understanding Modulation of DSL SignalhiX 56xx provides both Internet and telephone communication through existing tele-phone line with DSL technology. DSL communication system requires the technique to convert a digital signal into an analog signal and return the analog signal into the digital signal. There are three types of modulation commonly in DSLAMs: QAM (Quadrature Amplitude Modulation), CAP (Carrierless Amplitude and Phase), and DMT (Discrete Multitone).

Figure 8 shows the process of signal transmission in DSL system.

Figure 8 Transmission in DSL System

In the above picture, Modulator converts a digital signal into an analog signal to be sent over the channel. Also, the analog signal is returned into the digital signal at the Demod-ulator. First, QAM is described in the following section.

5.3.1.1 QAM ModulationQAM (Quadrature Amplitude Modulation) classifies digital signal into certain amount and changes it to carrier wave and phase to modulate into a frequency component. Classified symbols during certain time are transmitted with certain bits and transmitted


show l2cp interface (<1-"L2CP_MAX_INTERFACES_STR">|)

Global

Show information about L2CP interfaces, 1-"L2CP_MAX_INTERFACES_STR": the ID of ther L2CP interface." )

show l2cp port parition-id (SLOT|) Show information about ports - assigned partitionsS-LOT: the slot number where the ports are located.

show l2cp port state (SLOT|) Show information about ports - current port state

SLOT: the slot number where the ports are located.

93


Id:0900d8058018f37e

bits are marked as coordinates in QAM constellation. The classified symbols by regular interval that is notated as bit are called constellation. If a constellation is 2, symbol is notated as 2 bits. Digital signal consists of 0 and 1. So, 2 bits can be notated as 00, 01, 10, and 11. To mark 2 bits as signal, four coordinates are required.

That is, all possible numbers of 2 bits can be made by 0 and 1. If a symbol is transmitted as 4 bits, all possible combinations of 0 and 1 are 16. That can be notated as 16 coor-dinates. QAM can be divided according to constellation. If constellation is 2, it is called 4-QAM because total number of 22 =4 can be made with 0 and 1. If constellation is 4, total number of 24=16 can be made. So, it is called 16-QAM.

That is, kinds of QAM can be counted with 2-constellation QAM.

Figure 9 shows 4-QAM and 16-QAM.

Figure 9 4-Bit QAM and 16-Bit QAM

Figure 10 shows the process of 4-bit QAM modulation.

Figure 10 4-Bit QAM Modulation

94


Id:0900d8058018f37e

Port Configuration

As the above picture shows, the 4 bits of signal to be transmitted are mapped only one point on QAM constellation. The transmitted signal is transmitted to DSL equipment again through connected channel. And the DSL equipment can mark this signal on QAM constellation as the same way. However, noise and distortion in the channel and com-promised electronics in the transmitter and receiver prevent the point projected onto the receiver’s constellation from falling directly on the top of a true point. So, the receiver selects the closest true point to the projected point as the one the transmitter is more likely to use to generate the QAM constellation.

If too much noise is present at the receiver, the point projected on the constellation may be closer to the wrong known point than the accurate known point, resulting in an error estimating the recovered symbol. In this case, the distance between the points in the 4 QAM constellation is greater than the distance between the points in the 16-QAM con-stellation. Consequently, in the same channel more noise is necessary to cause an error with using 4-QAM than with using 16-QAM. Or 16-QAM requires a greater SNR (Signal to Noise Ratio) than 4-QAM requires. Therefore, you can take a larger QAM when there is higher SNR because there must be less noise. But you would better take a smaller QAM when there is lower SNR.

• Select the QAM type according to the size of SNR– recommend selecting a larger QAM in case of higher SNR– recommend selecting a smaller QAM in case of lower SNR.

In addition, the more bits are transmitted in certain time, the higher the transmit rate is. So, the bigger the constellation is, the higher the transmit rate is. Therefore, 32-QAM is faster than 16-QAM, and 16-QAM is faster than 4-QAM regarding the transmit rate of signal.

• Transmit rate according to type of QAM– 4-QAM < 16-QAM < 32-QAM

QAM is divided into 2-band, 3-band, and 4-band according to the band area. 2-band modulates signals of downstream and upstream areas. 3-band modulates signals of two downstream and upstream areas. And, 4-band modulates signals of two downstream and two upstream areas. Either 3-band or 4-band has faster transmit rate than 2-band because they can process more signals at once than 2-band.

Figure 11 2-Band QAM

95


Id:0900d8058018f37e



5.3.1.2 DMT ModulationDMT builds on some of the ideas of QAM. Imagine has more than one constellation encoder. Each encoder receives a set of bits that are encoded by using a constellation encoder as described in the previous sections. In this basis, QAM is referred to as single carrier and DMT is referred to as multi carrier

In DMT modulation, frequency channel is named frequency bins, bins, tone, DMT tones, and sub-channels.

Figure 14 shows the process of DMT modulation.

96


Id:0900d8058018f37e

Port Configuration

Figure 14 DMT Modulation

QAM using single carrier has advantage of relatively easy chip implementation and low power consumption, whereas it is impossible to control carrier about exterior noise dif-ferently came from each frequency in detail. However, QAM modulation has been used for many years and it is very stable and responsible.

Meanwhile, DMT using multi carrier can control carrier about exterior noise differently came from each frequency in detail, whereas the chip implementation is more compli-cated than QAM and power consumption is quite high. At the same time, it is possible to process many digital signals. Although its fundamentals are complicated, the pro-cessing is faster than QAM.

5.3.2 Configuring ADSL PortADSL Port Configuration Task List

The following sections introduce how to configure features on an ADSL port:

• Enabling LRE (Long Reach Ethernet) on ADSL Port • Configuring ADSL Line-config Profile • Configuring ADSL Alarm-config Profile

97


Id:0900d8058018f37e

5.3.2.1 Enabling LRE (Long Reach Ethernet) on ADSL PortBy default, all user ports are locked, to enable/disable and configure LRE ports, use the following commands in privileged Bridge mode.

Use the following command to display the adsl and atm bandwidth checking and over-booking configuration

Following example shows how to disable and enable LRE ports:

SWITCH(bridge)# port lre 2/1 disable

SWITCH(bridge)# port lre 2/1-2/24 disable

SWITCH(bridge)# port lre 2/1 enable


port lre PORTS {enable | disable | test | description}

Bridge

Enable/disable the long reach Ethernet configuration, enter the port number or slot number. (e.g. 1/1-1/24, s1)test: port as test port description: port specific description

lre PORTS adsl line-config gs action {startup | spectrumReverb | analogLb | digitalLb | atmLp | spectrumMedley | spectrumPilot | spectrumCMtpr | spectrumRMtpr | hybridLossTest | rcvLineari-tyTest | rcvFilterTest | rcvPower-PerBinTest | idleNoisePerBinTest | totalIdleNoiseTest}

Configure the long reach Ethernet configuration, enter the port number or slot number. (e.g. 1/1-1/8, s1)

lre slot SLOT port PORTS Configure the long reach Ethernet configuration , enter the port number and slot number

lre PORTS adsl line-config pmsf (l0tol2 | l2tol0)

Power managment state forced , l0tol2: force state L0 (data) to L2 (lowpower), l2tol0: force state L2 (low-power) to L0 (data)

lre PORTS adsl line-config rfi-band INDEX (enable|disable)

RFI band configration. INDEX: RFI band index (1-32).

lre PORTS adsl line-config rfi-band INDEX restore

Restore RFI band configuration info after reboot,INDEX: RFI band index (1-32),

lre adsl-atm-bandwidth-check {enable | disable}

Enable/disable the adsl and atm bandwidth checking function

lre PORTS adsl adsl-atm-band-width-overbook <100-500>

Configure the adsl and atm bandwidth check over-booking

100-500: percent

adsl rfi-band createBANDNAME <1-512> <1-512>

Privileged/

Global/

Bridge

Creates ADSL RFI band, enter band name:1-512. start tone index1-512: end tone band

adsl rfi-band delete <1-32> Deletes RFI band, enter band index (1-32).


show lre PORTS adsl-atm-band-width-check

Bridge Display the adsl and atm bandwidth checking function

show lre PORTS adsl adsl-atm-bandwidth-overbook

Display the adsl and atm bandwidth check overbook-ing

98


Id:0900d8058018f37e

Port Configuration

SWITCH(bridge)# port lre 2/1-2/24 enable

To apply a configured line-config profile to a specific port or slot, use the following command.

Example:

SWITCH (bridge)# lre 1/1-1/72 adsl line-config profile test

DELT(Duel Ended Line Test) allows you to test lines of ATU-C side and ATU-R side, and view the test results.

Use the following command to enable DELT mode

Use the following command to display DELT configuration status

To view DELT data, use following command


lre PORTS adsl line-config profile PROFILE

Bridge Configure an LRE (long reach Ethernet) and ADSL line-config profile:PORTS: enters LRE port or slot number {1/1-1/8 I s1}.PROFILE: enter profile name.


lre PORTS adsl line-config delt {force | inhibit}

Bridge Configure an LRE (long reach Ethernet) and ADSL line-config profile:PORTS: enters LRE port or slot number {1/1-1/8 I s1}.force: Force mode operation Inhibit: Inhibit mode operation


show lre PORTS adsl line-table Bridge Display DELT config status PORTS: enters LRE port or slot number {1/1-1/8 I s1}.


show lre PORTS adsl physical {atur |atuc} delt {hlin|hlog|hlogmt|qln/qlnmt/scale/all}

Bridge Display DELT config status PORTS: enters LRE port or slot number {1/1-1/8 I s1}.

99


Id:0900d8058018f37e

The following is an example of displaying the result of the line testing with DELT using the hlin option:

In the figure above, the values are displayed in form of a table with four columns for every displayed subcarrier (three subcarriers per line).

The columns have the following meanings, see also standards ITU-T G.992.3 and ITU-T G.997.1:column 1: Subcarrier index (i) column 2: calculated complex value H(f)

absolute value of Hlin (linear representation of the calculated complex value, can also bee shown as a graphic in the ACI register card “DELT”)

column 3: a(i) column 4: b(i)

Depending of the parameters used in the CLI command, the following values can be cal-culated: • The channel characteristic function H(f) corresponds to the frequency response of

the channel (i.e. amplitude magnification and phase shift) and is related to the values of the (complex) source and load impedance. H(f) can be used for analyzing the physical copper loop condition. – Hlin: linear representation of the channel characteristic function H(f) per subcar-

rier – Hlog: logarithmic representation in dB of the channel characteristic function H(f)

per subcarrier – Hlogmt: H(f) logarithmic measurement time

This parameter contains the number of symbols used to measure the Hlog(f) values.

– Scale: H(f) linear representation scale per subcarrier This parameter is the scale factor to be applied to the Hlin values.

• QLN: quiet line noise PSD in dB per subcarrier • QLNMT: quiet line noise PSD measurement time

100


Id:0900d8058018f37e

Port Configuration

5.3.2.2 Configuring ADSL Line-config ProfileFor hiX 56xx, it is possible to adjust the policy to the service port by designating it as a profile. The profile that user can configure is the configuration applied to ADSL line and the configuration for alarm which informs the errors with SNMP trap. The configuration applied to ADSL line is named line-config profile. Line-config profile is the policy config-uring the transmit rate, SNR margin, interleave-delay, and so on. Such a function is con-venient for ISP business to apply the service according to the level. It is possible to adjust the policy designated as a profile without configuring each port according to the subscriber’s level, just apply the profile to the desired ports.

Some line-config profiles may be configured according to xTU-C and xTU-R respec-tively. xTU-C (xDSL Terminal Unit Center) means hiX 56xx CO as central service and xTU-R (ADSL Terminal Unit Remote) means CPE as subscriber’s equipment. When configuring line-config profile, xTU-C means the direction from CO to CPE, and xTU-R means the direction from CPE to CO.

How to configure a line-config is as follows.

Step 1

• Creating a New ADSL Line-config Profile

Step 2

Configure the line-config profile as you need.

• Setting ADSL Rate Mode • Configuring SNR Margin • Setting Transmit Rate • Setting Interleave-delay • Choosing Fast/Interleaved Channel

Step 3

• Assigning the configured line-config profile to a port

Creating a New ADSL Line-config ProfileTo create a line-config profile, use the following commands.

g If it is not initiated by configuring a line card, an ADSL port cannot be configured

in order to remove the port in line-config profile, use the following command.In order to configure static line-config assigned to dynamic line-config profile, you must remove it from the profile.


adsl add line-config-profilePROFILE {adsl | adsl-isdn | adsl2 | adsl2-isdn | adsl2-i | adsl2-j | adsl2-m | adsl2plus | adsl2plus-isdn | adsl2plus-i | adsl2plus-j | adsl2plus-m}

Bridge

Add an ADSL profile (ADSL line config profile), specify profile name and enter the default profile type.


adsl delete line-config-profile PROFILE

Bridge Delete an ADSL profile, enter the profile name.

101


Id:0900d8058018f37e

To copy a line-config profile, use the following command.

Following example shows how to create and delete a line-config-profile with name ‘test’:

SWITCH(bridge)# adsl add line-config-profile test

SWITCH(bridge)# show adsl line-config-info

---------------------------------------------------------------

PROFILE NAME display port number related to application

----------------------------------------------------------------

DEFVAL s4

DEFVAL_ISDN

test ===============================================================

SWITCH(bridge)# adsl delete line-config-profile test

SWITCH(bridge)#

Setting ADSL Rate ModeAs ADSL2+, hiX 56xx makes sync for communicating between CO and CPE and detects an appropriate rate by monitoring a line status. The criteria detecting the line status is the shift SNR margin and shift time.

There are 3 ways of monitoring the line status to decide the rate. First, the fixed type is the way of using the configured rate until sync is disabled. Therefore, the shift SNR margin and shift time are useless for this case. Second, adapt-at-startup type is the way of configuring the rate if the shift SNR margin continues during the shift time when the first sync is realized by monitoring the line status time. Once the rate is decided, there’s no way of changing the rate by monitoring a line status. Lastly, adapt-at-runtime is the way of changing the rate whenever a shift SNR margin lasts for shift time by monitoring a line status after completing sync.

To configure the rate-mode in a line-config profile, use the following command.

The following example shows the method of setting ADSL rate mode and displays current setting(Applied to ADSL2+):

SWITCH(bridge)# adsl line-config-profile test atuc rate-mode adapt-at-runtime


adsl copy line-config-profileSRC-PROFILE DST-PROFILE

Bridge Copy a line-config profile.SRC-PROFILE: source line-config profileDST-PROFILE: destination line-config profile


adsl line-config-profilePROFILE atuc rate-mode {fixed | adapt-at-startup | adapt-at-runtime}

Bridge ADSL ATUC configuration, configure the transmit rate mode.

adsl line-config-profile PROFILE atur rate-mode (fixed | adapt-at-startup | adapt-at-runtime)

ADSL ATUR configuration, configure the transmit rate mode.

102


Id:0900d8058018f37e

Port Configuration

SWITCH(bridge)# show adsl line-config-profile test

When SNR margin is reduced or rises, decreasing or increasing the transmit rate may keep the physical connection being up. For hiX 56xx, after configuring the shift SNR margin and shift time, if the shift SNR margin lasts for shift time, the rate is changed with SNR margin changing.

To control the transmit rate according to the changing SNR margin, control it when SNR margin is lasting for certain amount of time.

To set how much time of line-config profile should last to control the transmit rate, use the following commands.

g The unit of up/downshift time is second.

Configuring SNR MarginIn digital and analog communication, Signal to Noise Ratio (SNR) is the ratio of the signal divided by a noise. When the signal strength is referred as Vs and the noise strength is referred as Vn, the formula can be “SNR(dB) = 20 log10(Vs/Vn)”. When the signal strength is same with or less than the noise strength, stable communication can not be done. Therefore, SNR must not be minus or 0. But if SNR is 0, you have to increase signal strength or decrease noise strength. The transmit rate of ADSL line depends on SNR. But, the line status must always vary. Thus, you need to configure the transmit rate of ADSL line that can be decided according to the changing line status. If the noise suddenly increases, SNR is decreased and communication becomes unsta-ble. Therefore, you should configure the transmit rate for decreased SNR when the noise suddenly increases. Then there will not be a problem with communication although the noise always varies.

When you set an estimate SNR, the difference between the estimate SNR and current SNR is called the SNR margin. hiX 56xx applies the SNR margin to the transmit rate.

If you set an SNR margin as 6, the difference that subtracts 6 from current SNR will be applied to the transmit rate as the below picture.


adsl line-config-profile PROFILE atuc min-dnshift-time <0-16383>

Bridge

Minimum time of ATU-C that the current margin is below downshift SNR margin before a downshift occurs. In case that CADSL mode is not present, the value will be 0.

adsl line-config-profile PROFILE atuc min-upshift-time <0-16383>

Minimum time of ATU-C that the current margin is above upshift SNR margin before an up shift occurs. In case that CADSL is not present, the value will be 0.

adsl line-config-profile PROFILE atur min-dnshift-time <0-16383>

Minimum time of ATU-R that the current margin is below downshift SNR margin before a downshift occurs. In case that RADSL mode is not present, the value will be 0.

adsl line-config-profile PROFILE atur min-upshift-time <0-16383>

Minimum time of ATU-R that the current margin is above upshift SNR margin before an up shift occurs. In case that RADSL is not present, the value will be 0.

103


Id:0900d8058018f37e

Figure 15 Transmit Rate according to SNR Margin

If you think that the noise may change, it is better to configure a large SNR margin. However, if you set too large SNR, the transmit rate will slow down and the network state may become unstable.

To set the SNR margin of ATU-C, use the following commands.

g The default value of target SNR margin and maximum SNR margin of ATU-C is 6dB and 31dB individually. The unit of SNR margin is dB/10.

The following example shows how to configure the SNR and display the current settings:

SWITCH(bridge)# adsl line-config-profile test atuc dnshift-snr-mgn 30


To set the SNR margin of ATU-R, use the following commands.


adsl line-config-profile PROFILE atuc target-snr-mgn <0-310>

Bridge

Set the Signal/Noise margin of ATU-C.

adsl line-config-profile PROFILE atuc max-snr-mgn <0-310>

Set the maximum Signal/Noise margin of ATU-C.

adsl line-config-profile PROFILE atuc min-snr-mgn <0-310>

Set the minimum Signal/Noise margin of ATU-C.

adsl line-config-profile PROFILE atuc dnshift-snr-mgn <0-310>

Set the Signal/Noise margin for rate downshift of ATU-C.

adsl line-config-profile PROFILE atuc upshift-snr-mgn <0-310>

Set the Signal/Noise margin or rate upshift of ATU-C.

104


Id:0900d8058018f37e

Port Configuration

g The default value of target SNR margin of ATU-R is 6dB.

Configuring PSD (Power Spectral Density)To make upstream PSD selection of ATU-R, use the following command.

To make upstream PSD mask selection of ATU-R , use the following command.

To add custom PSD mask breakpoint pair of ATU-C, use the following command.

To delete custom PSD mask breakpoint pair of ATU-C, use the following command.


adsl line-config-profile PROFILE atur target-snr-mgn <0-310>

Bridge

Set Signal/Noise margin of ATU-R.

<0-310>: Signal/Noise Margin(dB/10)

adsl line-config-profile PROFILE atur max-snr-mgn <0-310>

Set maximum acceptable Signal/Noise Margin of

ATU-R.


adsl line-config-profile PROFILE atur min-snr-mgn <0-310>

Set minimum acceptable Signal/Noise Margin


adsl line-config-profile PROFILE atur dnshift-snr-mgn <0-310>

Set Signal/Noise margin for rate downshift of ATU-R.


adsl line-config-profile PROFILE atur upshift-snr-mgn <0-310>

Set Signal/Noise margin for rate upshift of ATU-R.



adsl line-config-profile PROFILE atur upstream-psd-selection <1-9>

Bridge Make upstream PSD selection.

1-9: upstream PSD Selection (Only for ANNEX M/J)


adsl line-config-profile PROFILE atur upstream-psd-mask-selection {adlu-eu-32 | adlu-eu-36| adlu-eu-40| adlu-eu-44| adlu-eu-48| adlu-eu-52| adlu-eu-56| adlu-eu-60| adlu-eu-64}

Bridge Make upstream PSD mask selection (only for ANNEX M/J). Enter the profile name.


adsl line-config-profile PROFILE atuc custom-psd-mask add <32-511> <0-190>

Bridge ADSL atuc configuration, add custom psd mask break-point pair. Enter the profile name.

<32-511>: Bin number from GsTxStartBin to GsTxEnd-Bin for line config profile

<0-190>: User-defined psd mak level 0 - 190dBm in steps of 0.5 dBm/Hz

105


Id:0900d8058018f37e

To delete custom PSD mask breakpoint pair of ATU-C by index, use the following command.

To enable/disable user defined PSD Mask breakpoint pair, use the following command.

To set maximum nominal PSD for downstream of ATU-C, use the following command.

To set maximum nominal aggregate transmission power for downstream of ATU-C, use the following command.

Setting Transmit RateIt is possible to set the transmit rate of passing the interleave process. To set the transmit rate for interleave channel, use the following commands.


adsl line-config-profile PROFILE atuc custom-psd-mask delete <32-511>

Bridge Delete custom PSD mask breakpoint pair. Enter the profile name.

<32-511>: Bin number in custom-psd-mask table


adsl line-config-profile PROFILE atuc custom-psd-mask delete-index <1-32>

Bridge Delete custom PSD mask breakpoint pair by index. Enter the profile name.

<1-32>: PSD mask index 1-32


adsl line-config-profile PROFILE gs use-custom-psdmask (enable|disable)

Bridge Enables/disable user defined PSD Mask breakpoint pair. Enter the profile name.


adsl line-config-profile PROFILE atuc maxnompsd <400-600>

Bridge Set maximum nominal PSD for downstream. Enter the profile name.

<400-600>: PSD range PSD from -40dBm/Hz to -60 in steps of 0.1 db.


adsl line-config-profile PROFILE atuc maxnomatp <0-255>

Bridge Set maximum nominal aggregate transmission power for downstream. Enter the profile name.

<0-255>: ranges from 0(0.0) dBm to 255(25.5) dBm in steps of 0.1 dB

106


Id:0900d8058018f37e

Port Configuration

g In line-config profile, user can set adsl fixed rate mode for Conexant interface card, because of the limitation of Conexant chipset, user should set same value for min-tx-rate of ATUR/ATUC and max-tx-rate of ATUR/ATUC. For fixed rate mode on Infinion card, user only need to set min-tx-rate as the fixed rate. By default, the adsl rate mode is “rate adap-tive”.

g The unit of transmit rate is kbps.

Following example shows how to configure the transmit rate and display the current set-tings:

SWITCH(bridge)# adsl line-config-profile test atuc interleaved max-tx-rate 1024


Setting Interleave-delayThere is an interleave process to correct data errors before modulating the digital signal into the analog signal. The interleave process gathers a certain size of data, re-orga-nizes the gathered data, and transmits the data divided by a certain size. After dispers-ing errors, the size of error becomes smaller so that you can correct the error easily.

On the other hand, the interleave process avoids errors with enhanced correction, but may slow down the transmit rate, because it takes some time to gather packets. There-fore you need to consider user’s condition before using the interleave process.

You can configure the interval of interleave process during modulation. This interval is called an interleave-delay. By configuring the interleave-delay, you can avoid transmis-sion delay which is caused by waiting data gathered.

To set the interleave-delay in a line-config profile, use the following commands.


adsl line-config-profile PROFILE atuc {fast | interleaved} max-tx-rate <32-32736>

Bridge

Set max. ATU-C transmit rate (fast or interleave).

adsl line-config-profile PROFILE atuc {fast | interleaved} min-tx-rate <32-32736>

Set min. ATU-C transmit rate (fast or interleave).

adsl line-config-profile PROFILE atuc max-tx-rate <32-32736>

Set max. ATU-C transmit rate.

adsl line-config-profile PROFILE atuc min-tx-rate <32-32736>

Set min. ATU-C transmit rate.

adsl line-config-profile PROFILE atur {fast | interleaved} max-tx-rate <32-3520>

Set max. ATU-R transmit rate (fast or interleave).

adsl line-config-profile PROFILE atur {fast | interleaved} min-tx-rate <32-3520>

Set min. ATU-R transmit rate (fast or interleave).

adsl line-config-profile PROFILE atur max-tx-rate <32-3520>

Set max. ATU-R transmit rate.

adsl line-config-profile PROFILE atur min-tx-rate <32-3520>

Set min. ATU-R transmit rate.

107


Id:0900d8058018f37e

Example:

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Intl atuc max-interleave-delay 16

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Intl atur inter-leaved max-tx-rate 512


g It is also possible to configure an interleave-delay per ADSL port.

Choosing Fast/Interleaved ChannelThere is interleave process to correct data error before modulation digital signal into analog signal. Interleave gathers certain size of data, re-organize the gathered data, and transmits the data divided by certain size. In the below image, you can see disperse errors by re-organizing gathered data through Interleave. After dispersing errors, the size of error becomes smaller so that you can correct the error easily.By the way, Inter-leave prevents error by enhanced correction but may slow down transmit rate because packets are gathered. Therefore you need to consider userís condition to configure mode.

If you skip the interleave process, the error correction will not be done well, whereas the transmit rate of data becomes faster and the latency will be lower. You can skip the inter-leave process and configure it before transmitting data.

To skip the interleave process, use the following command.

Setting ADSL mode, ADSL or ADSL2+. You should set it based on CPE, generally, ADSL CPE use multimode, ADSL2+ CPE use adsl2PlusAuto

Example:

SWITCH(bridge)# adsl line-config-profile test comm line-type fast

SWITCH(bridge)# adsl line-config-profile test gs standard multi-mode



adsl line-config-profile PROFILE atuc max-interleave-delay <1-63>

Bridge Set an interleave-delay of ATU-C.unit : millisecond

adsl line-config-profile PROFILE atur max-interleave-delay <1-63>

Set an interleave-delay of ATU-R.unit : millisecond


adsl line-config-profile PROFILE comm line-type {fast | interleaved| fast-and-interleaved }

Bridge Configure to enable/disable the interleave process.

108


Id:0900d8058018f37e

Port Configuration

Setting Transmission ModeFor hiX 56xx, the type of DMT mode can be configured. There are FDM (Frequency Division Multiplexing) and EC (Echo Cancellation) in channel construction method.

To configure the channel configuration method of a line-config profile, use the following command.

Power ManagementhiX 56xx provides power management on IFX72 card, this offers the way of saving power at three levels (L0/L2/L3).

The L2 low-power mode enables statistical powers savings at the ADSL transceiver unit in the central office (ATU-C) by rapidly entering and exiting low power mode based on Internet traffic running over the ADSL connection. When large files are being down-loaded, ADSL2 operates in full power mode (called "L0" power mode) in order to maximize the download speed. When Internet traffic decreases, such as when a user is reading a long text page, ADSL2 systems can transition into L2 low power mode, in which the data rate is significantly decreased and overall power consumption is reduced.

The L3 power mode on the other hand, enables overall power savings at the ATU-C by entering into sleep mode when the connection is not being used for extended periods of time. L3 is a sleep mode where traffic cannot be communicated over the ADSL connec-tion when the user is not online.

To confgure ADSL power management, use following commands:


adsl line-config-profile PROFILE comm dmt-mode {ec | fdm}

Bridge Configure the transmission mode in DMT of a line-config profile:comm-dmt-mode: indicates whether there is overlap or no overlap of bins.ec: echo cancel modefdm: frequency division mux mode

109


Id:0900d8058018f37e

Impulse Noise ProtectionTo reduce the number of errors that occur due to impulse noise, use following commands to set ADSL impulse noise protection of ATUC/ATUR.

Additional ConfigurationsFor hiX 56xx, it is possible to configure not only the features of ADSL2+ standards but also the distinguished features of hiX 56xx.


adsl line-config-profilePROFILE atuc pwrmgmt l0-time <0-255>

Bridge Configures ADSL power management (L0-time con-figuration), enter profile name0-255: value in seconds

adsl line-config-profilePROFILE atuc pwrmgmt l2-time <0-255>

Configures ADSL power management (L2-time con-figuration), enter profile name0-255 : value in seconds

adsl line-config-profilePROFILE atuc pwrmgmtI2atpr <0-310>

Configures ADSL power management (L2atpr con-figuration), enter profile name0-310 : values 0-310 (dB/10)

adsl line-config-profilePROFILE atuc pwrmgmtI2rate <800000-1024000>

Configures ADSL power management (L2 minimum rate configuration), enter profile name800000-1024000: value in bits/sec

adsl line-config-profilePROFILE atuc pwrmgmtmode {disable I l2only Il2andl3}

Configures ADSL power management mode, enter profile namedisable: disable power managementl2only: enable L2 model2andl3: enable L2 and L3 mode


adsl line-config-profile PROFILE atuc inp {0| half | 1| 2| 3 | 4 | 5 | 6 | 7| 8| 9| 10| 11| 12| 13| 14| 15| 16| auto}

Bridge Set ADSL Impulse noise protection of ATUC, enter profile namehalf: half symbolauto: auto mode0: 0 symbols - minimal protection1...16: 1...16 symbols

adsl line-config-profile PROFILE atur inp { 0 | half | 1| 2| 3| 4| 5| 6| 7| 8| 9| 10| 11| 12|13|14|15|16| auto}

Set ADSL Impulse noise protection of ATUR, enter profile namehalf: half symbol0: 0 symbols - minimal protection1...16: 1...16 symbols

110


Id:0900d8058018f37e

Port Configuration

Displaying Line-config ProfileTo display the configuration of a line-config profile, use the following commands.


adsl line-config-profile PROFILE gs adv-cap {disable | annex-a | annex-b | annex-I | annex-j | annex-m | adsl-plus | annex-a_adsl-plus}

Bridge Configure if the CO will attempt to startup using alter-nate standards, if CPE does not support ADSL+.

adsl line-config-profile PROFILE gs bit-swap {enable | disable}

Enable bit swapping.

adsl line-config-profile PROFILE gs erase-profs {enable | disable }

Enable the ability to erase all fast retrain profiles at startup.

adsl line-config-profile PROFILE gs psd-mask-type {adsl | hadsl-m1 | hadsl-m2 | msk2-rfi | flat-msk-rfi | cab-msk2-rfi | adsl2-nonovlp-m1 | adsl2-nonovlp-m2 | adsl2-nonovlpflat}

Select the PSD mask option to be used.

adsl line-config-profile PROFILE gs rs-int-correct-dn {disable | 125US | 250US | 500US | 1MS | 2MS | 4MS}

Configure the correction time for the downstream interleaved buffer. RS can also be disabled.

adsl line-config-profile PROFILE gs rs-int-correct-up {disable | 125US | 250US | 500US | 1MS | 2MS | 4MS}

Configure the correction time for the upstream inter-leaved buffer. RS can also be disabled.

adsl line-config-profile PROFILE gs standard {t1-413 | g-lite | g-dmt | multimode | adsl2 | adsl2-plus | adsl2-plus-auto | readsl2}

Select preferred standard compliance. Outcome is dependent upon standard support of the remote unit. Only for ADSL+ applications.

adsl line-config-profile PROFILE gs tx-power-attn <0-40 >

Configure the value in dB of TX power attenuation.

adsl line-config-profile PROFILE gs use-custom-bin {enable | disable}

Enable user selection of some of those 511 bins that will be enabled for upstream and downstream trans-mission.

adsl line-config-profile PROFILE gs config-custom-bin BINSET

Set user selection for any of the 511 bins, 1 bit per bin:BINSET: 128 values 123456789ABCDEF..., nothing will reset to 64 times FF.


show adsl rfi-band PrivilegedGlobalBridge

Display the ADSL RFI band configuration.

show adsl line-config-profile Show all configured line profiles.

show adsl line-config-profile PROFILE

Show one configured line profile, enter the profile name.

show adsl line-config-info Show all line-config profiles and their assigned ports.

show adsl line-config-info PROFILE

show one line-config profile and its assigned ports

111


Id:0900d8058018f37e

To display the line configuration for a specified port, use the following commands.

The following information will be shown via the command, show lre PORTS adsl line-config.

The following example displays the current line-config-profile


---------------------------------------------------------------

Profile Name : test

Target SNR Margin(dB) : UP [ 6.0] / DOWN [ 6.0]

ATU-C Max SNR Margind(dB) : [ 31.0]

ATU-C Min SNR Margind(dB) : [ 0.0]

ATU-R Max SNR Margind(dB) : [ 31.0]

ATU-R Min SNR Margind(dB) : [ 0.0]

ATU-C Shift SNR Margin(dB) : UP [ 12.0] / DOWN [ 0.0]

ATU-R Shift SNR Margin(dB) : UP [ 9.0] / DOWN [ 3.0]

ATU-C Minimum shift time(sec) : UP [ 0] / DOWN [ 0]

ATU-R Minimum shift time(sec) : UP [ 30] / DOWN [ 30]

Fast Min Rate (kbps) : UP [ 32] / DOWN [ 32]

Fast Max Rate (kbps) : UP [ 1088] / DOWN [ 32736]


show lre PORTS adsl line-config


Show ADSL line configuration briefly for a spec-ified port, enter the port number.

show lre PORTS adsl line-config-detail Show ADSL line configuration in detail for a specified port, enter the port number.

show lre PORTS adsl line-config-info Show ADSL line configuration information for a specified port, enter the port number.

show lre PORTS adsl line-table Show ADSL line table information for a speci-fied port, enter the port number.

Item Description

Port Show slot and port number.

Admin Status Show link connection status on the port.

GS Standard Show ADSL standard.

Line Type Show whether interleave is used.

Line Speed Show the transmit rate of Line.

Target Snr Show target SNR margin.

Interleaved Delay Show interleaved delay.

Table 19 Information of ADSL Line-config

112


Id:0900d8058018f37e

Port Configuration

Examples of Configuring and applying Line-config ProfileConfiguring Line-config Profile for ADSL port (interleaved mode)

SWITCH(bridge)# adsl add line-config-profile ADSL_1M_Intl adsl

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Intl atuc rate-mode adapt-at-startup

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Intl atuc inter-leaved max-tx-rate 1024

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Intl atur inter-leaved max-tx-rate 640

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Intl atuc max-interleave-delay 16

Configuring Line-config Profile for ADSL port (fast mode)

SWITCH(bridge)# adsl add line-config-profile ADSL_1M_Fast adsl

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Fast atuc rate-mode adapt-at-startup

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Fast atuc fast max-tx-rate 1024

SWITCH(bridge)# adsl line-config-profile ADSL_1M atur fast max-tx-rate 640

SWITCH(bridge)# adsl line-config-profile ADSL_1M gs standard mul-timode

Configuring Line-config Profile for ADSL2+ port (interleaved mode), complying with CPE

SWITCH(bridge)# adsl add line-config-profile ADSL2plus_1M_Intl adsl

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Intl atuc rate-mode adapt-at-startup

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Intl atuc interleaved max-tx-rate 1024

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Intl atur interleaved max-tx-rate 640

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Intl atuc max-interleave-delay 16

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Intl atur max-interleave-delay 16

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Intl gs standard adsl2-plus

Configuring Line-config Profile for ADSL2+ port (fast mode), complying with CPE

SWITCH(bridge)# adsl add line-config-profile ADSL2plus_1M_Fast adsl

113


Id:0900d8058018f37e

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Fast atuc rate-mode adapt-at-startup

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Fast atuc fast max-tx-rate 1024

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Fast atur fast max-tx-rate 640

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Fast gs standard adsl2-plus

Assign a line-config profile to a ADSL port

SWITCH (bridge)# port lre 1/1-1/72 disable

SWITCH (bridge)# lre 1/1-1/72 adsl line-config profile ADSL_1M_Intl

SWITCH (bridge)# port lre 1/1-1/72 enable

Show the list of line-config details

SWITCH (bridge)# show adsl line-config-info

SWITCH (bridge)# @show config adsl line_profile

5.3.2.3 Configuring ADSL Alarm-config ProfileAn alarm-config profile is a configured policy, which alarm service is provided to clients with using SNMP trap in case of system error. It is convenient way because it is possible to configure standards of error displaying, which varies according to its service type in each port.

For hiX 56xx, it is possible to configure the alarm-config in two ways. They are dynamic alarm-config configuration by inputting a desired port in the configured profile and static alarm-config configuration by specifying the alarm-config on each port.

Some alarm-config profiles may be configured according to xTU-C and xTU-R respec-tively. xTU-C (xDSL Terminal Unit Center) means hiX 56xx CO as central service and xTU-R (xDSL Terminal Unit Remote) means CPE as subscriber’s equipment. When configuring the alarm-config profile, xTU-C means the direction from CO to CPE, and xTU-R means the direction from CPE to CO.

How to configure an alarm-config is as follows.

Step 1

• Creating Alarm-config Profile

Step 2

Configure the alarm-config profile as you need.

• Alarming of Initializing Failure • Setting Threshold of Error Seconds within 15 Minutes of ATU-C • Setting Threshold of Error Seconds within 15 Minutes of ATU-R • Configuring Threshold of Change in Fast/Interleave Rate of ATU-C • Configuring Threshold of Change in Fast/Interleave Rate of ATU-R

Step 3

114


Id:0900d8058018f37e

Port Configuration

• Applying Alarm-config Profile

Creating Alarm-config ProfileTo create/delete an alarm-config profile, use the following commands.

Example:

SWITCH (bridge)# adsl add alarm-config-profile test

SWITCH (bridge)# show adsl alarm-config-info

Above example shows how to create an adsl alarm-config-profile with name ‘test’.

Alarming of Initializing FailureYou can configure hiX 56xx to be able to alarm by trap when the init failure occurs. To configure the alarm-config profile for initializing failure of ATU-C, use the following com-mands.

The following example shows how to create an adsl alarm-config-profile with name ‘test’ and enable the ATU-C init-failure trap:

SWITCH (bridge)# adsl alarm-config-profile test atuc init-fail-trap enable

SWITCH (bridge)# show adsl alarm-config-profile test

Setting Threshold of Error Seconds within 15 Minutes of ATU-CTo configure the alarm-config profile about the threshold of error in ATU-C, within any given 15 minutes performance data collection period, use the following commands.


adsl add alarm-config-profile PROFILE

Bridge Create an alarm-config profile, enter a profile name.

adsl delete alarm-config-profile PROFILE

Delete an alarm-config profile.


adsl alarm-config-profile PROFILE atuc init-fail-trap {enable | disable}

Bridge Enables/disable the init-failure trap. This option is disabled as default.

adsl alarm-config-profile PROFILE atuc op-state-trap {enable | disable}

Enables/disable the op-state trap. This option is disabled as default.

115


Id:0900d8058018f37e

The following example shows how to configure a threshold of error seconds(600) inATU-C, within any given 15 minutes performance data collection period.

SWITCH(bridge)# adsl alarm-config-profile test atuc thresh-15min-ess 600

SWITCH(bridge)# show adsl alarm-config-profile test

Setting Threshold of Error Seconds within 15 Minutes of ATU-RTo configure the alarm-config profile about the threshold of error in ATU-R, within any given 15 minutes performance data collection period, use the following commands.

The following example shows how to configure a threshold of error seconds(600) in ATU-R, within any given 15 minutes performance data collection period.

SWITCH(bridge)# adsl alarm-config-profile test atur thresh-15min-ess 600



adsl alarm-config-profile PROFILE atuc thresh-15min-ess <0-900>

Bridge

Configure a threshold of error seconds in ADSL inter-face, within any given 15 minutes performance data collection period.

adsl alarm-config-profile PROFILE atuc thresh-15min-lofs <0-900>

Configure a threshold of loss of frame seconds in ADSL interface within any given 15 minutes perfor-mance data collection period.

adsl alarm-config-profilePROFILE atuc thresh-15min-lols <0-900>

Configure a threshold of loss of link seconds in ADSL interface, within any given 15 minutes performance.

adsl alarm-config-profile PROFILE atuc thresh-15min-loss <0-900>

Configure a threshold of loss of signal seconds in ADSL interface, within any given 15 minutes perfor-mance data collection period.

adsl alarm-config-profile PROFILE atuc thresh-15min-lprs <0-900>

Configure a threshold of loss of power seconds in ADSL interface, within any given 15 minutes perfor-mance data collection period.


adsl alarm-config-profile PROFILE atur thresh-15min-ess <0-900>

Bridge

Configure a threshold of error seconds in ADSL inter-face, within any given 15 minutes performance data collection period.

adsl alarm-config-profile PROFILE atur thresh-15min-lofs <0-900>

Configure a threshold of loss of frame seconds in ADSL interface within any given 15 minutes perfor-mance data collection period.

adsl alarm-config-profile PROFILE atur thresh-15min-loss <0-900>

Configure a threshold of loss of signal seconds in ADSL interface, within any given 15 minutes perfor-mance data collection period.

adsl alarm-config-profile PROFILE atur thresh-15min-lprs <0-900>

Configure a threshold of loss of power seconds in ADSL interface, within any given 15 minutes perfor-mance data collection period.

116


Id:0900d8058018f37e

Port Configuration

Configuring Threshold of Change in Fast/Interleave Rate of ATU-CTo configure the alarm-config profile about the threshold of change in rate in ATU-C, use the following command.

Configuring Threshold of Change in Fast/Interleave Rate of ATU-RTo configure the alarm-config profile about the threshold of change in rate in ATU-R, use the following command.

g The fast rate applies to ‘Interleave’ channel only.

Displaying Alarm-config ProfileTo display a configuration of alarm-config, use the following command.


adsl alarm-config-profile PROFILE atuc fast-thresh-rate-down <0-65535>

Bridge Configure a threshold of change in fast rate of down-stream in ATU-C.

adsl alarm-config-profile PROFILE atuc fast-thresh-rate-up <0-65535>

Configure a threshold of change in fast rate of upstream in ATU-C.

adsl alarm-config-profile PROFILE atuc intl-thresh-rate-down <0-65535>

Configure a threshold of change in interleaved rate of downstream in ATU-C.

adsl alarm-config-profile PROFILE atuc intl-thresh-rate-up <0-65535>

Configure a threshold of change in interleaved rate of downstream in ATU-C.


adsl alarm-config-profile PROFILE atur fast-thresh-rate-down <0-65535>

Bridge

Configure a threshold of change in fast rate of down-stream in ATU-R.

adsl alarm-config-profile PROFILE atur fast-thresh-rate-up <0-65535>

Configure a threshold of change in fast rate of upstream in ATU-R.

adsl alarm-config-profile PROFILE atur intl-thresh-rate-down <0-65535>

Configure a threshold of change in interleaved rate of downstream in ATU-R.

adsl alarm-config-profile PROFILE atur intl-thresh-rate-up <0-65535>

Configure a threshold of change in interleaved rate of downstream in ATU-R.

117


Id:0900d8058018f37e

The following is an example of displaying an ADSL alarm-config profile.

SWITCH(bridge)# adsl alarm-config-profile test atuc init-fail-trap enable

SWITCH(bridge)# show adsl alarm-config-profile

----------------------------------------------------------------

Profile Name : DEFVAL

ADSL ATUC Configuration :

----------------------------------------------------------------

Thresh Fast Rate Up(bps) : 4000 Thresh Intl Rate Up(bps) : 4000

Thresh Fast Rate Down(bps) : 4000 Thresh Intl Rate Down(bps) : 4000

Thresh 15Min Lofs : 0 Thresh 15Min Loss : 0

Thresh 15Min Lols : 0 Thresh 15Min Lprs : 0

Thresh 15Min Ess : 0 Thresh 15Min Fail FastR : 0

Thresh 15Min SesL : 0 Thresh 15Min UasL : 0

Thresh 15Min FecsL : 0

ADSL ATUR Configuration :

-------------------------------




Thresh 15Min Lprs : 0 Thresh 15Min Ess : 0

---------------------------------------------------------------


show adsl alarm-config-profile PrivilegedGlobalBridge

Show all configured alarm profiles.

show adsl alarm-config-profile [PROFILE]

Show one configured alarm profile, enter the profile name.

show lre PORTS adsl alarm-config-info

Show an LRE port ADSL alarm-config.

show adsl alarm-config-info [PROFILE]

Show one alarm-config profile and its assigned ports, enter the profile name.

show adsl alarm-config-info Show all alarm-config profiles and their assigned ports.

118


Id:0900d8058018f37e

Port Configuration

Profile Name : test


-------------------------------









------------------------------





===============================================================

SWITCH(bridge)#

Applying Alarm-config ProfileTo apply a configured alarm-config profile to a specific port or slot, use the following command.

Following example shows how to apply an Alarm-config Profile to a port.

SWITCH (bridge)# lre s4 adsl alarm-config profile test

SWITCH (bridge)# lre 5/1 adsl alarm-config profile test


lre PORTS adsl alarm-config profile PROFILE

Bridge Configure LRE (long reach Ethernet) and ADSL alarm-config profile:PORTS: LRE port or slot number {1/1-1/8 I s1}PROFILE: enters {profile name I static}.

119


Id:0900d8058018f37e

Copying an Alarm-config ProfileTo copy an alarm-config profile, use the following command.

Displaying Generated AlarmsTo display the generated alarms, use the following commands.

To modify/update the alarm, use the following command.


adsl copy alarm-config-profileSRC-PROFILEDST-PROFILE

Bridge Copy an alarm-config profile.SRC-PROFILE: source alarm-config profileDST-PROFILE: destination alarm-config profile


show alarm-id

PrivilegedGlobal

Show assignment alarm and ID.

show alarm-list-oid Show the alarm list of the system (alarms shownby OIDs).

show alarm-list {critical | major | minor | warning}

Show the alarm list of the system:DEFAULT: all alarmscritical: only critical alarmsmajor: only major alarmsminor: only minor alarmswarning: only warnings

show alarm-list-reportingsourcetype {physical_entity | interface | vcctp I vlan | bridgeport | erpdomain}

Show the alarm list of the system:physical_entity: only alarms from physical entityinterface: only alarms from interfacesvcctp: only alarms from VccTPvlan: only alarms from VLANbridgeport: only alarms from bridge porterpdomain: only alarms from ERP domain

show alarm-severity-table SEVERITY_TABLE_INDEX

Show the alarm severity table with the chosen index, index of alarm severity table index range <1-10>

show alarm-severity ALARM_ID Show the severity of a alarm, enter the ID value.


modify alarm-severity ALARM_ID PROFILE_INDEX SEVERITY

Global Modify the index of the severity profile in severity profile table, enter the index value:ALARM_ID: alarm ID of the alarm (use: show alarm id)PROFILE_INDEX: index of the severity profile in severity profile tableSEVERITY: new severity of the alarm (1 to 5)

update alarm-list Update the alarm list.

al-mgr set sev profile {ALARM-ID} {SEV1} {SEV2} {SEV3} {SEV4} {SEV5} {SEV6} {SEV7} {SEV8} {SEV9} {SEV10}

Set all severities for chosen alarm, first is default and cannot be overwritten:ALARM_ID: alarm ID of the alarm (use: show alarm id)SEV1-10: severity for profile 1-10.

120


Id:0900d8058018f37e

Port Configuration

To enable/disable the alarm history table, use the following commands

To show the status of alarm history table, use the following command

To show the whole alarm history table, use the following command.

To clear the alarm history table, use the following command.

Example of Configuring and applying ADSL Alarm-config ProfileFollowing example shows how to configure and adsl alarm-config profile.

SWITCH(bridge)# adsl add alarm-config-profile test

SWITCH(bridge)# adsl alarm-config-profile test atuc init-fail-trap enable

SWITCH(bridge)# adsl alarm-config-profile test atur thresh-15min-ess 600


---------------------------------------------------------------

Profile Name : test


-------------------------------


set alarm-history-enabled Global Enable the alarm history table

set alarm-history-disabled Disable the alarm history table

set alarm-history-base HISTORY_NUMBER (critical| major| minor| warning)

Set the alarm history table base values (number ofmax history entries and severity level.HISTORY_NUMBER: Number of max hist entries in the alarm history table (max1000)critical: severity level, critical: only critical errors will be storedmajor: severity level, major: critical and major errors will be storedminor: severity level, minor: critical major and minor errors will be storedwarning:severity level, warning: all errors will be stored.


show alarm-history-table-status PrivilegedGlobal

Show the status of alarm history table.


show alarm-history-table PrivilegedGlobal

Show the whole alarm history table.


clear alarm-history PrivilegedGlobal

Clear the alarm history table.

121


Id:0900d8058018f37e


Thresh Fast Rate Down(bps): 4000 Thresh Intl Rate Down(bps) : 4000

Init Fail Trap : enable OpState Trap : disable







-------------------------------


Thresh Fast Rate Down(bps): 4000 Thresh Intl Rate Down(bps) : 4000



===============================================================

SWITCH (bridge)# lre 5/1 adsl alarm-config profile test

5.3.3 Configuring SHDSL Port

5.3.3.1 Configuring SHDSL Line-config ProfileTo configure SHDSL line-config profile, use the following command.

122


Id:0900d8058018f37e

Port Configuration


lre PORTS shdsl line-config power-scaleSCALE

Bridge

Define power scale on a specified port, enter the port number:SCALE: value of scale (1-65534, default: 26112)

lre PORTS shdsl line-config arcrcchk {enable | disable}

Enable/disable auto retrain based on CRC errors for the specified port, enter the port number.

lre PORTS shdsl line-config arfrmrsynchk {enable | disable}

Enable/disable auto retrain based on framer synchro-nization for the specified port, enter the port number.

lre PORTS shdsl line-config ars-nrmarginchk {enable | disable}

Enable/disable auto retrain based on SNR margin for the specified port, enter the port number.

lre PORTS shdsl line-config arcrcthresh <0-500>

Determine threshold for the number of frame with CRC errors for auto-retrain for the specified port, enter the port number:0-500: threshold value

lre PORTS shdsl line-config ars-nrmarginthresh <1-6>

Determine margin threshold for auto-retrain for the specified port, enter the port number:1-6: value of threshold.

lre PORTS shdsl line-config artime <1-10>

Determine the time auto-retrain occurs for auto-retrain for the specified port, enter the port number:1-10: times

lre PORTS shdsl line-config opstatetrap {enable | disable}

Enable/disable trap indicating a change in op state for the specified port, enter the port number.

lre PORTS shdsl line-config frmroh <0-65535>

Determines framer overhead channel for the specified port, enter the port number:0-65535: value for framer overhead channel

lre PORTS shdsl line-config latrapenable {enable | disable}

Enables/disables trap for loop attenuation threshold crossing for the specified port, enter the port number.

lre PORTS shdsl line-config srmgntrapenable {enable | disable}

Enable/disable trap for SNR margin threshold crossing for the specified port, enter the port number.

lre PORTS shdsl line-config frm-rohtrapenable {enable | disable}

Enable/disable trap for framer overhead threshold crossing for the specified port, enter the port number.

lre PORTS shdsl line-config atm-celldelineation {enable | disable}

Enable/disable cell delineation for serial ATM opera-tion.

lre PORTSshdsl line-config autoretrain {enable | disable}

Enable/disable auto-retrain.

lre PORTS shdsl line-config encodecoeffaVALUE

Determine the value of encoder coefficient A, as defined in ITU-T G.991.2.

lre PORTS shdsl line-config encodecoeffbVALUE

Determine the value of encoder coefficient B, as defined in ITU-T G.991.2.

lre PORTS shdsl line-config hsannexbtype {default | anfp | annexbOranfp}

Allow the customer to choose between support for Annex B, Annex B with Access Network Frequency Plan (ANFP), or both.

lre PORTS shdsl line-config hsnsf {enable | disable}

Enable/disable nonstandard information fields for MP, MS, CL, and CLR messages, as defined in ITU-T G.994.1.

123


Id:0900d8058018f37e

lre PORTS shdsl line-config individualrates1VALUE

Bridge

Enable/disable base rates for N=1 through N=16. The default is all rates enabled.





lre PORTS shdsl line-config initiate {default | co | cpe}

Define which STU initiates a startup. The default is STU-R initiates and STU-C waits.

lre PORTS shdsl line-config ntr {disable | refclkip8k | refclkop4096k}

Define how network timing recovery is performed.

lre PORTS shdsl line-config rxeocbufferlen VALUE

Determine the number of bytes of EOC data that is buffered by the DSP in the receive direction.

lre PORTS shdsl line-config set-reqsilencemode {enable | disable}

Enable a silent mode for the STU at the opposite end of the loop for approximately one minute. During the silent period, the STU that requested the silent mode can perform whatever operations it wants and the STU at the opposite end will remain in handshake.

lre PORTS shdsl line-config tomdata {1 | 2 | 3 | 4} VALUE

Identify one of four words of proprietary vendor data, as described in the Vendor Data section of ITU-T G.994.1.

lre PORTS shdsl line-config txeocbufferlenVALUE

Determine the number of bytes of EOC data that is buffered by the DSP in the transmit direction.

lre PORTS shdsl line-config rxfrmrdataclkedge {negative | positive}

This parameter is for Serial ATM applications only. It is recommended that the default value be used. For special customer configurations, receive data can be valid upon either rising or falling edge of the receive clock.

lre PORTS shdsl line-config txfrmrdataclkedge {negative | positive}

This parameter is for Serial ATM applications only. It is recommended that the default value be used. For special customer configurations, transmit data can be sampled upon either rising or falling edge of the transmit clock.

lre PORTS shdsl line-config rxfrmrpulseclkedge {negative | positive}

This parameter is for Serial ATM applications only. It is recommended that the default value be used. For special customer configurations, the receive frame pulse can be active upon either rising or falling edge.

lre PORTS shdsl line-config txfrmrpulseclkedge {negative | positive}

This parameter is for Serial ATM applications only. It is recommended that the default value be used. For special customer configurations, the transmit frame pulse can be active upon either rising or falling edge.

lre PORTS shdsl line-config rxfrmrpulselvl {low | high}

This parameter is for Serial ATM applications only. It is recommended that the default value be used. For special customer configurations, the receive frame pulse can be either active high (1) or active low (0).


124


Id:0900d8058018f37e

Port Configuration

To configure maintenance operations for SHDSL line, use the following command.

lre PORTS shdsl line-config txfrmrpulselvl {low | high} Bridge

This parameter is for Serial ATM applications only. It is recommended that the default value be used. For special customer configurations, the transmit frame pulse can be either active high (1) or active low (0).

lre PORTS shdsl line-config rxfrmrpulsedelay <0-7>

This parameter is for Serial ATM applications only. It is recommended that the default value be used. For special customer configurations, a delay of up to 7 clock cycles can be specified for the receive frame pulse.

lre PORTS shdsl line-config txfrmrpulsedelay <0-7>

This parameter is for Serial ATM applications only. It is recommended that the default value be used. For special customer configurations, a delay of up to 7 clock cycles can be specified for the transmit frame pulse.

lre PORTS shdsl line-config frmr-celldroperror {enable | disable}

Determine whether cells are dropped, i.e., not passed to the host, or not dropped, i.e., passed to the host. This object must be set prior to startup.

lre PORTS shdsl line-config frmr-rxclkmode {slave | internal}

Determine the source of the receive clock.

lre PORTS shdsl line-config frmr-rxpllmode {enable | disable}

Enable or disables the internal PLL.

lre PORTS shdsl line-config hscustdata0 DATA

Identify one word of customer data during handshak-ing, as defined in ITU-T G.994.1.

lre PORTS shdsl line-config hscustdata1 DATA

Identify one word of customer data during handshak-ing, as defined in ITU-T G.994.1.

lre PORTS shdsl line-config rxupstrmfrmsync <0-16383>

Define the upstream frame sync word (FSW).

lre PORTS shdsl line-config rxd-wnstrmfrmsync <0-16383>

Define the downstream frame sync word (FSW).

lre PORTS shdsl line-config rxupstrmstuffbits VALUE

Define the upstream stuff bits.

lre PORTS shdsl line-config rxd-wnstrmstuffbits VALUE

Defines the downstream stuff bits.

lre PORTS shdsl line-config seri-alatmciubuffszSIZE

Enable the user to set the size of the framer buffer for serial ATM operation.

lre PORTS shdsl line-config snrmgntrapenable {enable | disable}

Enable a trap for SNR margin threshold crossing.


125


Id:0900d8058018f37e

To configure SHDSL line-config profile (action), use the following command.

Displaying Line-config ProfileTo display a configuration of SHDSL line-config, use the following command.


lre PORTS shdsl endp-maint loopback {stuC | stuR} {noLoop-back | normalLoopback | spe-cialLoopback | digitalLoopback | analogLoopback | interface-Loopback | localFramerLoopback | normalLoopbackEocId9 | specialLoopbackEocId9}

Bridge

Control configuration of loopbacks for the associated segment endpoint.

lre PORTS shdsl endp-maint pow-erbackoff {stuC | stuR} {default | enhanced | disable}

Configure the receiver at the associated segment endpoint to operate in default or enhanced power backoff mode.

lre PORTS shdsl endp-maint {softrestart|loopback|powerback-off}

Enable the manager to trigger a soft restart of the modem at the associated segment endpoint.

lre PORTS shdsl unit-maint timeout {stuC I stuR} <0-4095>

Set timeout value for loopback for specified port, enter the port number:0-4095: value in minutes (0 means timeout disable)


lre PORTS shdsl line-config action {startup | abortreq | gearshiftreq | downloadreq | bertstarttxreq | bertstartrxreq | bertstopreq | hybridlosstestreq | spectrumdownreq | spectru-mupreq | spectrumtxrxreq | residualechoreq | totalechoreq | nextpsdreq | autoretrainonreq | autoretrainoffreq | propeocon-req | propeocoffreq | rmtatm-cellstatusreq | rmtfullstatusreq}

Bridge Specify actions that are used to control trans-ceiver operation, including abort, startup and tests.

126


Id:0900d8058018f37e

Port Configuration

5.3.3.2 Configuring SHDSL Alarm-config ProfileJust like configuring Alarm-config Profile for ADSL port, you can configure a SHDSL alarm-config profile as following steps:

Step 1

• Creating an Alarm-config Profile

Step 2

• Configuring Alarm-config Profile

Step 3

• Applying Alarm-config Profile

Creating an Alarm-config ProfileTo create an alarm-config profile, use the following command.


show lre PORTS shdsl line-config


Show SHDSL line configuration for a specified port, enter the port number.

show lre PORTS shdsl line-config-detail

Show SHDSL line configuration in detail for a speci-fied port, enter the port number.

show lre PORTS shdsl line-status Show SHDSL line state for a specified port, enter the port number.

show lre PORTS shdsl perf-intv 15min {stuC | stuR} {network-side | customer-side} {wire-pair-1 | wire-pair-2} <1-96>

Show 15 minutes interval of SHDSL channel for a specified port, enter the port number:1-96: interval number

show lre PORTS shdsl perf-intv 1day {stuC | stuR} {network-side | customer-side} {wire-pair-1 | wire-pair-2} <1-30>

Show 1 day interval of SHDSL channel for a specified port, enter the port number:1-30: interval number

show lre PORTS shdsl intv 15min {wire-pair-1 | wire-pair-2} <1-96>

Show 15 minutes interval of SHDSL line:1-96: interval number

show lre PORTS shdsl intv 1day {wire-pair-1 | wire-pair-2} <1-96>

Show 1 day interval of SHDSL line:1-96: interval number

show lre PORTS shdsl ep-maint Show endpoint maintenance configuration for a spec-ified port, enter the port number.

show lre PORTS shdsl unit-maint Show unit maintenance configuration for a specified port, enter the port number.

show shdsl intv valid-no {15min | 1day}

Show number of valid intervals for all SHDSL ports:15min: 15 min invalid numbers1day: 1 day invalid numbers

show lre PORTS shdsl inventory Show inventory data for a specified port, enter the port number.

show config shdsl line Bridge Show SHDSL line parameters.


shdsl add alarm-config-profile PROFILE

Bridge Create an SHDSL alarm-config profile, enter a profile name.

127


Id:0900d8058018f37e

Configuring Alarm-config ProfileTo configure a SHDSL alarm-config profile, use the following commands.

Displaying Alarm-config ProfileTo display the configuration of SHDSL alarm-config, use the following command.

Applying Alarm-config ProfileTo apply a configured alarm-config profile to a specific port or slot, use the following command.


shdsl alarm-config-profilePROFILE threshloopattenuation-VALUE

Bridge Configure a specific loop attenuation alarm threshold profile, enter profile name and value for loop attenu-ation alarm threshold.

shdsl alarm-config-profile PROFILE threshSNRmargin-VALUE

Configure a specific SNR margin alarm threshold profile, enter profile name and value for SNR margin alarm threshold.

shdsl alarm-config-profile PROFILE threshES <0-900>

Configure a specific ES alarm threshold profile, enter profile name and value for ES alarm threshold.

shdsl alarm-config-profile PROFILE threshSES <0-900>

Configure a specific SES alarm threshold profile, enter profile name and value for SES alarm thresh-old.

shdsl alarm-config-profile PROFILE threshCRCanomalies <0-2147483647>

Configure a specific CRC anomalies alarm threshold profile, enter profile name and value for CRC anom-alies alarm threshold.

shdsl alarm-config-profile PROFILE threshLOSWS <0-900>

Configure a specific LOSWS alarm threshold profile, enter profile name and value for LOSWS alarm threshold.

shdsl alarm-config-profile PROFILE threshUAS <0-900>

Configure a specific UAS alarm threshold profile, enter profile name and value for UAS alarm thresh-old.


show shdsl alarm-config-profile PROFILE


Show an SHDSL alarm-config profile, enter a profile name.

show shdsl alarm-config-profile Show all SHDSL alarm-config profiles.

show shdsl alarm-config-info PROFILE

Show config information of a specified SHDSL alarm-config profile, enter a profile name.

show shdsl alarm-config-info Show information of all SHDSL alarm-config pro-files.

show lre PORTS shdsl epcurr-status Show SHDSL endpoint currently status, enter an LRE port number: (x/y)

show lre PORTS shdsl alarm-config-info

Show an SHDSL line alarm profile information on an LRE port or slot, enter an LRE port or slot number:(1-24 |1/1-1/8 | s1 | s1-s3)

128


Id:0900d8058018f37e

Port Configuration

Deleting an Alarm-config Profile

To delete an alarm-config profile, use the following command.

Displaying Generated AlarmsTo display the generated alarms, use the following command.

To modify/update the alarm, use the following command.


lre PORTS shdsl alarm-config PROFILE

Bridge Configure an assignment of alarm profile to profile for an LRE port or slot, enter profile name and LRE port or slot number: (1/1-1/8 | s1)

lre PORTS shdsl alarm-config span PROFILE

Configure an assignment of alarm profile to span profile for a LRE port or slot, enter profile name and LRE port or slot number: (1/1-1/8 | s1)


shdsl delete alarm-config-profile PROFILE

Bridge Delete SHDSL alarm-config profile, enter the profile name.


show alarm-id

PrivilegedGlobal

Show assignment alarm and ID.

show alarm-list-oid Show alarm list shown by OIDs.

show alarm-list {critical | major | minor | warning }

Show the alarm list of the system:DEFAULT: allcritical: only critical alarmsmajor: only major alarmsminor: only minor alarmswarning: only warningscleared: only cleared alarms

show alarm-list-reportingsourcetype {physical_entity | interface | vcctp I vlan | bridgeport | erpdomain}

Show the alarm list of the system:physical_entity: only alarms from physical entityinterface: only alarms from interfacesvcctp: only alarms from VccTPvlan: only alarms from VLANbridgeport: only alarms from bridge porterpdomain: only alarms from ERP domain

show alarm-severity-table SEVERITY_TABLE_INDEX

Show the alarm severity table with the chosen index, index of alarm severity table index range <1-10>

show alarm-severity ALARM_ID Show the severity of a alarm, enter the ID value.

129


Id:0900d8058018f37e

5.3.3.3 Configuring SHDSL Span-config Profile

Creating a Span-config ProfileTo create a span-config profile, use the following command.

Deleting a Span-config Profile

To delete a span-config profile, use the following command.

Configuring Span-config ProfileTo configure SHDSL span-config profile, use the following command.


modify alarm-severity ALARM_ID PROFILE_INDEX SEVERITY

Global

Modify the index of the severity profile in severity profile table, enter the index value:ALARM_ID: alarm ID of the alarm (use: show alarm id)PROFILE_INDEX: index of the severity profile in severity profile tableSEVERITY: new severity of the alarm (1 to 5)

update alarm-list Update the alarm list.

al-mgr set sev profile{ALARM-ID} {SEV1} {SEV2} {SEV3} {SEV4} {SEV5} {SEV6} {SEV7} {SEV8} {SEV9} {SEV10}

Set all severities for chosen alarm, first is default and cannot be overwritten:ALARM_ID: alarm ID of the alarm (use: show alarm id)SEV1-10: severity for profile 1-10.


shdsl add span-config-profile PROFILE

Bridge Create an SHDSL span-config profile, enter a profile name.


shdsl delete span-config-profile PROFILE

Bridge Delete an SHDSL span-config profile, enter the profile name.

130


Id:0900d8058018f37e

Port Configuration


shdsl span-config-profile PROFILE remoteenable {enable | disable}

Bridge

Enable/disable remote management of units.

shdsl span-config-profile PROFILE minlinerate <200-11408>

Configure the minimum transmit rate:PROFILE: profile name200-11408: rate (kbps)If the minlinerate equals the maxlinerate, the line is considered ’fixed’. If the minlinerate is less than the maxlinerate, the line rate is considered ’rate adap-tive’.

shdsl span-config-profile PROFILE maxlinerate <200-11408>

Configure the maximum transmit rate:PROFILE: profile name200-11408: rate (kbps)If the minlinerate equals the maxlinerate, the line is considered’fixed’. If the minlinerate is less than the maxlinerate, the line rate is considered ’rate adap-tive’.

shdsl span-config-profile PROFILE psd {symmetric | asym-metric | r1asymmetric | r2asymmetic}

Configure use of symmetric/asymmetric psd (Power Spectral Density) mask, enter a profile name.

shdsl span-config-profile PROFILE transmissionmode {region1 | region2}

Configure the transmission mode, enter a profile name.

shdsl span-config-profile PROFILE currcondtgtmgndown MARGIN

Specify the downstream current condition target SNR margin, enter a profile name:MARGIN: margin value (-10-21).

shdsl span-config-profile PROFILE worstcasetgtmgndown MARGIN

Specify the downstream worst case target SNR margin, enter a profile name:MARGIN: margin value (-10-21).

shdsl span-config-profile PROFILE currcondtgtmgnup MARGIN

Specify the upstream current condition target SNR margin, enter a profile name:MARGIN: margin value (-10-21).

shdsl span-config-profile PROFILE referenceclock (local-clk|netclk|dataornetclk|dataclk)

Specify clock reference for STU-C

localclk: local clock,netclk: network clock,dataornet-clk: data or network clock,dataclk: data clock

shdsl span-config-profile PROFILE powerfeeding (nopo-wer|powerfeed|wettingcurrent)

Specify power feeding in SHDSL line

131


Id:0900d8058018f37e

Displaying Span-config ProfileTo display a configuration of SHDSL span-config, use the following commands.

Applying a Span-config ProfileTo apply a configured span-config profile to a specific port or slot, use the following command.

shdsl span-config-profile PROFILE worstcasetgtmgnup-MARGIN

Specify the upstream worst case target SNR margin, enter a profile name:MARGIN: margin value (-10-21).

shdsl span-config-profile PROFILE usedtgtmgns {current-conddown | worstcasedown | cur-rentcondup | worstcaseup}

Enable/disable target SNR margin, enter a profile name:currentconddown: current condition downworstcasedown: worst case downcurrentcondup: current condition upworstcasedup: worst case up

shdsl span-config-profile PROFILE lineprobe {enable | disable}

Enable/disable line probe, enter a profile name.

shdsl span-config-profile PROFILE wireintf {twowire | fourwire | forwirebitinterleaved | forwirebitinterleaveenhanced | forwirebyteinterleaveenhanced |fourwirebitinterleaved|fourwire-byteinterleaveenhanced|four-wirebitinterleaveenhanced}

Configure two-wire or optional four-wire operation.



show shdsl span-config-profile PROFILE


Show a specified SHDSL span-config profile, enter a profile name.

show shdsl span-config-profile Show all SHDSL span-config profiles.

show shdsl span-config-info PROFILE

Show config information of a specified SHDSL span-config profile, enter a profile name.

show shdsl span-config-info Show config information of all SHDSL span config profiles.

show lre PORTS shdsl span-config-info

Show config information for a specified long reach Ethernet port, enter LRE port or slot number:(1-24 | 1/1-1/8 | s1 | s1-s3)

show lre PORTS shdsl span-status

Show span-config status for a specified long reach Ethernet port, enter LRE port or slot number:(1-24 | 1/1-1/8 | s1 | s1-s3)

show config shdsl span_profile Show a span profile for SHDSL.

132


Id:0900d8058018f37e

Port Configuration

Example of setting span-config profileSWITCH(bridge)# shdsl add span-config-profile test

SWITCH(bridge)# shdsl span-config-profile test minlinerate 200SWITCH(bridge)# shdsl span-config-profile test maxlinerate 2320

SWITCH(bridge)# shdsl span-config-profile test transmissionmode region

SWITCH(bridge)# show shdsl span-config-profile test

----------------------------------------------------------------------------

Profile Number: 2

Profile Name : test

---------------

Wire Interface : 2 wire

PSD : symmetric

Transmission Mode: region 1 / -

Remote Enabled : no

Power Feeding : no power

Reference Clock : local

Line Probe Enable: yes

Minimum / Maximum Line Rate (kbps) : 200 / 2320

Target Margin: Target Margin used:

Curr Cond Down/Up (dB) : 5 / 5 yes / no

Worst Case Down/Up (dB): 5 / 5 no / no

===============================================================

SWITCH (bridge)# port lre 5/1 disable

SWITCH (bridge)# lre 5/1 shdsl span-config test

SWITCH (bridge)# port lre 5/1 enable

5.3.3.4 SHDSL bis Tcpam ModeTo configure SHDSL bis tcpam mode, use the following command.


lre PORTS shdsl span-config PROFILE

Bridge Configure a profile for long reach Ethernet, enter a profile name:PORTS: LRE port or slot number (1/1-1/8 I s1)


lre PORTS shdsl bis-tcpam-mode (16tcpam | 32tcpam| autotcpam)

Bridge SHDSL tcpam mode configuraion16tcpam:16bit tcpam mode32tcpam: 32bit tcpam modeautotcpam: auto tcpam mode

133


Id:0900d8058018f37e

To show SHDSL bis tcpam mode, use the following command.

5.3.4 Configuring xDSL Port

5.3.4.1 Configuring xDSL Line-config ProfileThe operator can create and configure xDSL line-config profiles.

Creating a line-config profile

In order to create a line-config profile, use the following command

Deleting a line-config profile

In order to delete line-config profile, use the following command

profileRate mode

In order to configure rate mode, use the following command

Max. aggregate power

In order to configure max. aggregate power, use the following command


show lre PORTS shdsl bis-tcpam-mode

Bridge Show SHDSL bis tcpam mode

Command Mode Function

xdsl add line-config-profile PROFILE

Bridge Create xDSL line-config profile, enter the profile name.


xdsl delete line-config-profile PROFILE

Bridge Delete xDSL line-config profile, enter the profile name..


xdsl line-config-profile PROFILE {down-rate-mode I up-rate-mode}{fixed I adapt-at-init I adapt-at-runtime}

Bridge Configure rate mode on xDSL line, enter the profile name:

down...: rate selection behaviour downstream

up...: rate selection behaviour upstream

fixed: force to configured rate

adapt-at-init: adapt to line quality

adapt-to-runtime: seamless rateadapts during runtime based upon line quality


xdsl line-config-profile PROFILE {down-max-pwr I up-max-pwr}<0-255>

Bridge Configure max aggregate power on xDSL line, enter the profile name:down...: max. aggregate downstream powerup...: max. aggregate upstream powerfixed: force to configured rate0-255: value from 0 to 25,5 dBm in steps of 0.1 dBm

134


Id:0900d8058018f37e

Port Configuration

Max. Rx power upstream

In order to configure max. Rx power upstream, use the following command

Signal noise margin (SNR margin)

In order to configure signal noise margin, use one of the following command


xdsl line-config-profile PROFILE max-up-rx-pwr MAX_RCV_POWER

Bridge Configure max Rx power upstream on xDSL line, enter the profile name:down...: max. received upstream powermax-up-rx-pwr: max. aggregate upstream power-fixed: force to configured rateMAX...: value from 0 to 25,5 dBm in steps of 0.1 dBm


xdsl line-config-profile PROFILE {down-max-snr-mgn I down-min-snr-mgn I down-tgt-snr-mgn I up-max-snr-mgn I up-min-snr-mgn I up-tgt-snr-mgn} <0-310>

Bridge Bridge Configures max./min SNR margin on xDSL line, enter the profile name:down-max...: max. downstream SNR margindown-min...: min. downstream SNR margindown-tgt...: target downstream SNR margin the tran-ceiver must achieveup-max...: max. upstream SNR marginup-min...: min. upstream SNR marginup-tgt...: target upstream SNR margin the tranceiver must achieve0-310: value from 0-31 dBm in steps of 0.1dBm

xdsl line-config-profile PROFILE all-snr-mgns {down I up} <0-310><0-310> <0-310> <0-310> <0-310>

Set all 5 SNR margin with one command (min< downshift<tgt<upshift<max) on xDSL line, enter the profile name:down: downstream directionup: upstream direction0-310: min. SNR margin in steps of 0.1 dBm0-310: SNR margin for bitrate downshift (rate mode =adapt-at-runtime)0-310: target SNR margin the receiver must achieve with BER <10E-70-310: SNR margin for bitrate upshift (rate mode = adaptat-runtime)0-310: max SNR margin

xdsl line-config-profile PROFILE {vtuc-down-snr-mgn I vtuc-up-snr-mgn I vtur-down-snr-mgn I vtur-up-snr-mgn} <0-310>

Set SNR margin for rate downshift/upshift on xDSL line,enter the profile name:vtuc-down...: SNR margin for rate downshift VTUC(upstream)vtuc-up...: SNR margin for rate upshift VTUC (upstream)vtur-down...: SNR margin for rate downshift VTUR (downstream)vtur-up...: SNR margin for rate upshift VTUR (down-stream))0-310: value from 0-31 dBm in steps of 0.1dBm

135


Id:0900d8058018f37e

Virtual Noise

In order to configure virtual noise, use the following command

xdsl line-config-profile PROFILE {vtuc-down-snr-time I vtuc-up-snr-time I vtur-down-snr-time I vtur-up-snr-time} <0-16383>

Bridge Set SNR margin the downshift/upshift min. time on xDSL line, enter the profile name:vtuc-down...: min. time that current margin < Down-shiftSnrMgnbefore downshift VTUC (upstream) occursvtuc-up...: min. time that current margin > UpshiftSnrMgnbefore upshift VTUC (upstream) occursvtur-down...: min. time that current margin < Down-shiftSnrMgnbefore downshift VTUR (downstream) occursvtur-up...: min. time that current margin > UpshiftSn-rMgnbefore upshift VTUR (downstream) occurs0-16383: value in seconds


xdsl line-config-profile PROFILE (snr-mode-ds|snr-mode-us) {enable | disable}

Bridge

Enable/disable the transmitter referred virtual noise in the DS/US direction , enter the profile name.

snr-mode-ds: the transmitter referred virtual noise in the downstream direction

snr-mode-us: the transmitter referred virtual noise in the upstream direction

xdsl line-config-profile PROFILE tx-ref-vn-down add <1-4095> (0|<80-280>)

Set one downstream virtual noise breakpoint (pair of subcarrier + level), add one subcarrier/level pair (ascending order of subcarriers will be sorted auto-matically) on xDSL line

1-4095: subcarrier index",0: special value (coded as 0) indicates a noise level of 0 W/Hz80-280: noise level coded in steps of 0.5 dBm/Hz

xdsl line-config-profile PROFILE tx-ref-vn-up add <1-4095> (0|<80-280>)

Set one upstream virtual noise breakpoint (pair of subcarrier + level), add one subcarrier/level pair (ascending order of subcarriers will be sorted auto-matically) on xDSL line

1-4095: subcarrier index",0: special value (coded as 0) indicates a noise level of 0 W/Hz80-280: noise level coded in steps of 0.5 dBm/Hz

xdsl line-config-profile PROFILE tx-ref-vn-down delete index <1-32>

Delete one entry (pair subcarrier/level) by mask index on xDSL line1-32: virtual noise mask index 1-32 (downstream)"

xdsl line-config-profile PROFILE tx-ref-vn-up delete index <1-16>

Delete one entry (pair subcarrier/level) by mask index on xDSL line1-16: virtual noise mask index 1-16 (upstream)

xdsl line-config-profile PROFILE tx-ref-vn-down delete subcarrier <1-4095>

Delete one entry (pair subcarrier/level) by subcarrier index on xDSL line

1-4095: virtual noise mask subcarrier index 1-4095 (downstream)

xdsl line-config-profile PROFILE tx-ref-vn-up delete subcarrier <1-4095>

Delete one entry (pair subcarrier/level) by subcarrier index on xDSL line

1-4095: virtual noise mask subcarrier index 1-4095 (upstream)


136


Id:0900d8058018f37e

Port Configuration

Max Nominal Transmit PSD (power spectral density)

In order to configure max nominal transmit PSD in upstream/downstream direction during initializtion and showtime, use following command.

To make upstream PSD mask selection of ATU-R , use the following command.

xDSL2 profiles

In order to configure xDSL2 profiles, use the following command

GS standard

In order to configure line type, use the following command


xdsl line-config-profile PROFILE (down-max-nom-psd|up-max-nom-psd) MAX_NOM_PSD

Bridge Set max nominal transmit PSD during initialization and showtime.

down-max-nom-psd: max. nominal transmit PSD in downstream direction during initialization and show-time. up-max-nom-psd: max. nominal transmit PSD in upstream direction during initialization and showtime. MAX_NOM_PSD: Value between -60...-38 in 0.1 dBm/Hz.


xdsl line-config-profile PROFILE us-psd-mask-sel {adlu-eu-32| adlu-eu-36| adlu-eu-40| adlu-eu-44| adlu-eu-48| adlu-eu-52| adlu-eu-56| adlu-eu-60|adlu-eu-64}

Bridge Selects the PSD mask option to be used. Only forannexes J and M - other DSL standards will ignorevalue! Enter the profile name.


xdsl line-config-profile PROFILE use-profile-number {profile8a Iprofile8b I profile8c | profile8d Iprofile12a I profile12b I profile17a Iprofile17b | profile30a}

Bridge Select xDSL2 profile which should be used for basic parameter configuration on xDSL line, enter the profile name:8a: 8A (8.8 MHz bandwidth, 2048 tones, 17.5 dBm line power)8b: 8B (8.8 MHz bandwidth, 2048 tones, 20.5 dBm line power)8c: 8C (8.5 MHz Bandwidth, 1972 Tones, 11.5 dBm Line Power)

8d: 8D (8.8 MHz bandwidth, 2048 tones, 14.5 dBm line power)12a: 12A (12 MHz bandwidth, 2783 tones, 14.5 dBm line power)12b: 12B (12 MHz bandwidth, 2783 tones, 14.5 dBm line power)17a: 17A (17 MHz bandwidth, 4096 tones, 14.5 dBm line power)17b: 17B (17 MHz Bandwidth, 4096 Tones, 14.5 dBm line power)30a: 30A (30 MHz bandwidth, 3479 tones, 14.5 dBm line power)

137


Id:0900d8058018f37e

Bit swapping

In order to enable/disable bit swapping, use the following command

Power backoff (PBO)

In order to configure power backoff attributes, use one of the following command


xdsl line-config-profile PROFILE profile-gs-standard {ansi-t1-413| adsl-pots| adsl-isdn| adsl2-pots| adsl2-isdn| reach-ext-adsl2-pots-m1| reach-ext-adsl2-pots-m2| ext-up-adsl2-pots| adsl2plus-pots| adsl2plus-isdn| ext-up-adsl2plus-pots| vdsl2-region-a| vdsl2-region-b| vdsl2-region-c}

Bridge Configure the used standard compliance (selects either single mode or combine all and system selects) on xDSL line, enter the profile name:ansi-t1-413: ANSI T1.413-1998 Standardadsl-isdn: G9921 Adsl Isdn NonOverlappedadsl-pots: G9921 Adsl Pots NonOverlappedadsl2-pots: G9923 Adsl2 Pots NonOverlappedadsl2-isdn: G9923 Adsl2 Isdn NonOverlappedreach-ext-adsl2-pots-m1: G9923 Reach Ext Adsl2 Pots NonOverlapped M1reach-ext-adsl2-pots-m2: G9923 Reach Ext Adsl2 Pots NonOverlapped M2ext-up-adsl2-pots: G9923 Ext Up Adsl2 Pots Non-Overlappedadsl2plus-pots: G9925 Adsl2+ Pots NonOverlappedext-up-adsl2plus-pots: G9925 Ext Up Adsl2+ Pots NonOverlappedadsl2plus-isdn: G9925 Adsl2+ Isdn NonOverlappedvdsl2-region-a: G9932 Vdsl2 NonOverlapped RegionAvdsl2-region-b: G9932 Vdsl2 NonOverlapped RegionBvdsl2-region-c : G9932 Vdsl2 NonOverlapped RegionC


xdsl line-config-profile PROFILE {down-bitswap I up-bitswap}{enable I disable}

Bridge Enable/disable downstream/upstream bit swapping on xDSL line, enter the profile name.

138


Id:0900d8058018f37e

Port Configuration


xdsl line-config-profile PROFILE {down-pbo-esel I down-pbo-esel-min} <0-512>

Bridge

Configurepower backoff assumed electrical length of xDSL line, enter the profile name:down-pbo-esel: downstream power backoff assumed electrical lengthdown-pbo-esel-min: downstream power backoff assumed minimum electrical length0-255: values in steps of 0.5 dB (0 = PBO disabled

xdsl line-config-profile PROFILE down-pbo-mus <0-255>

Set min. usable receive signal PSD on xDSL line, enter the profile name:0-255: values in steps of 0.5 dB/Hz

xdsl line-config-profile PROFILE down-pbo-fmin <0-4096>

Set start value of frequency range where PBO is applied on xDSL line, enter the profile name:0-4096: value*4.3125 kHz

xdsl line-config-profile PROFILE down-pbo-fmax <32-4095>

Set end value of frequency range where PBO is applied on xDSL line, enter the profile name:32-4095: value*4.3125 kHz

xdsl line-config-profile PROFILE {<32-6956>

Set end value of frequency range where PBO is applied on xDSL line, enter the profile name:32-6956: value*4.3125 kHz

xdsl line-config-profile PROFILE dpbo-epsd add <1-4095> <0-255>

Add one subcarrier/level pair (PSD mask) on xDSL line,enter the profile name:1-4095: subcarrier index0-255: PSD mask leve

xdsl line-config-profile PROFILE dpbo-epsd delete index <1-16>

Delete one entry (pair subcarrier/level ) by index on xDSL line, enter the profile name:1-16: EPSD mask index

xdsl line-config-profile PROFILE dpbo-epsd delete subcarrier <1-4095>

Delete one entry (pair subcarrier/level ) by subcarrier on xDSL line, enter the profile name:1-4095: EPSD subcarrier index

xdsl line-config-profile PROFILE {down-pbo-escma I down-pbo-escmb I down-pbo-escmc} <0-640>

Configure cabel model parameter on xDSL line, enter the profile name:escma: cabel model parameter A (fixed part of ESCM(f) equation)escmb: cabel model parameter B (linear part of ESCM(f) equation)escmc: cabel model parameter C (square root part of ESCM(f) equation)0-255: value in multiples of 2E-7

xdsl line-config-profile PROFILE up-pboa {us1 I us2 I us3 I us4 | us5}<4000-8095>

Configure the value A in the reference PSD on xDSL line,enter the profile name:us1: UPBOA for US1 bandus2: UPBOA for US2 bandus3: UPBOA for US3 bandus4: UPBOA for US4 bandus5 UPBOA for US5 band4000-8095: value in 0.01 dBm/Hz

139


Id:0900d8058018f37e

Power management

In order to configure power management, use the following command

gsAction

In order to set gsAction (possible test modes on IU), use the following command.

xdsl line-config-profile PROFILE up-pbob {us1|us2|us3|us4|us5} <0-4095>

Bridge Configure the value B in the reference PSD on xDSL line,enter the profile name:us1: UPBOB for US1 bandus2: UPBOB for US2 bandus3: UPBOB for US3 bandus4: UPBOB for US4 bandus5 UPBOA for US5 band0-4095: Value in 0.01 dBm/Hz (if 0 + up-pboa=4000 => UPBO disabled for this band)

xdsl line-config-profile PROFILE up-pbo-kl <0-1280>

Configure the upstream electrical loop length expressed in dB at 1 MHz on xDSL line, enter the profile name:0-1280: value insteps of 0.1 dB (0=0 dB ...1280=128 dB)

xdsl line-config-profile PROFILE up-pbo-ko {enable I disable}

Enable/disable usage of electrical loop length on xDSL line, enter the profile name.

xdsl line-config-profile PROFILE boost-mode {enable I disable}

Enable/disable usage of boost mode on xDSL line,enter the profile name.


xdsl line-config-profile PROFILE {pwr-mgmt-l0time I pwr-mgmt-l2time} <0-255>

Bridge

Configure the L0/L2 time on xDSL line, enter the profile name.

xdsl line-config-profile PROFILE (pwr-mgmt-l2atpr|pwr-mgmt-l2atprt) <0-310>

Configure the maximum aggregate transmit power reduction.pwr-mgmt-l2atpr: maximum aggregate transmit power reduction performed through a single Power Trim, pwr-mgmt-l2atprt: total max. aggregate transmit power reduction performed in L2 state (L2 req.s + Power Trims. 0-310: value in dB/10

xdsl line-config-profile PROFILE pwr-mgmt-mode {disabled| l3-enabled| l1-l2-enabled| l1-l2-l3-enabled }

Configure the enabled power management state and where the line may autonomously transition todisabled: nonel3-enabled: idle statel1-l2-enabled: low power statel1-l2-l3-enabled: both idle and low power state

lre PORTS xdsl pmsf (none| l0-to-l2| l2-to-l0)

Power Management State Forced

none: PM is not forced but only influenced by the Admin State,l0-to-l2: force the line to transition from L0 full power to L2 low powerl2-to-l0: force the line to transition from L2 low power to L0 full power


140


Id:0900d8058018f37e

Port Configuration

Usage of subcarrier masking

In order to enable/disable usage of subcarrier masking, use the following command.

Band plan number

To select the band plan number which should be used for basic parameter configuration, use the following command.


lre PORTS xdsl line-config gs-action {startup| spectrum-reverb | atm-lb| spectrum-medley| showtime-lock| return-loss}

Bridge Defines gsAction (possible test modes on IU)

startup: start up (NO testmode activated)".spectrum-reverb: activate SPECTRUM REVERB mode without cyclic prefix.atm-lb: activate ATM (UTOPIA) loopback from DS to US.spectrum-medley: activate SPECTRUM MEDLEY mode with cyclic prefix.showtime-lock: activate a line with \"Showtime-Lock\" enabledreturn-loss: special command: mask all subcarriers afterwards REVERB mode


xdsl line-config-profile PROFILE subcarrier-mask-use {enable|dis-able}

Bridge Enable/disable usage of subcarrier masking (defined with subcarrier-mask),Enable: enable subcarrier-mask usage,Disable: disable subcarrier-mask usage.

141


Id:0900d8058018f37e

Bin

In order to set user selection for any of the 512 ADSL bins, use the following command.


xdsl line-config-profile PROFILE band-plan-number{itu-annexa-m1-eu32 | itu-annexa-m9-eu64|itu-annexa-m1-adlu32| itu-annexa-m9-adlu64 | itu-annexa-m10-eu128|997-m1c-a-7|997-m1x-m-8|997-m1x-m|997-m2x-m-8|997-m2x-a|997-m2x-m | 998-m1x-a | 998-m1x-b|998-m1x-nus0 | 998-m2x-a|998-m2x-m|998-m2x-m17| 998-m2x-b|998-m2x-b17| 998-m2x-nus0|998-m2x-nus017| 997e30-m2x-nus0|998e17-m2x-a | 998e17-m2x-nus0|anfp-cal0-long| anfp-cal0-medium|anfp-cal0-short| anfp-cal0e-short | annexa-m1-eu32 |annexa-m2-eu36 | annexa-m3-eu40| annexa-m4-eu44| annexa-m5-eu48|annexa-m6-eu52| annexa-m7-eu56 | annexa-m8-eu60|annexa-m9-eu64| annexa-eu128| annexa-m1-adlu32| annexa-m2-adlu36| annexa-m3-adlu40 | annexa-m4-adlu44 |annexa-m5-adlu48| annexa-m6-adlu52 | annexa-m7-adlu56 | annexa-m8-adlu60| annexa-m9-adlu64| annexa-adlu128| annexb-997-m1c-a-7|annexb-997-m1x-m-8|annexb-997-m1x-m|annexb-997-m2x-m-8|annexb-997-m2x-a|annexb-997-m2x-m|annexb-997-hpe17-m1-nus0 | annexb-997-hpe30-m1-nus0 | annexb-997-e17-m2x-nus0| annexb-997-e30-m2x-nus0 |annexb-998-m1x-a | annexb-998-m1x-b| annexb-998-m1x-nus0| annexb-998-m2x-a | annexb-998-m2x-m | annexb-998-m2x-b|annexb-998-m2x-nus0 | annexb-998-e17-m2x-nus0 | annexb-998-e17-m2x-nus0-m| annexb-998-ade17-m2x-nus0-m| annexb-998-ade17-m2x-a| annexb-998-ade17-m2x-b| annexb-998-e30-m2x-nus0 | annexb-998-e30-m2x-nus0-m | annexb-998-ade30-m2x-nus0-m | annexb-998-ade30-m2x-nus0-a | annexb-998-ade17-m2x-m| annexb-998-e17-m2x-a}

Bridge Selects the Band plan number which should be used for basic parameter configuration.

142


Id:0900d8058018f37e

Port Configuration

Minimum Rate of Message

In order to set minimum rate of message based overhead maintained by the xTU in the upstream/downstream direction,use the following command.

5.3.4.2 Verifying Line-config ProfileTo verify the configuration of an xDSL line-config profile, use the following commands.

5.3.4.3 Verifying physical status informationTo display xDSL physical status information, use the following commands..


xdsl line-config-profile PROFILE custom-subc-mask {upstream|downstream} (BIN-SET|)

Bridge Set user selection for any of the 512 ADSL bins (1 bit per Bin),upstream: upstream subcarrier maskdownstream: downstream subcarrier maskBINSET: 128 values like 123456789ABCDEF (CR resets mask to 64 x FF) - only for ADSL.


xdsl line-config-profile PROFILE (msg-min-up|msg-min-down) <4-248>

Bridge set minimum rate of message based overhead main-tained by the xTU in the upstream/downstream direc-tion.

<4-248>: value in kbps


show lre PORTS xdsl line-table

Privi-leged/Glo-bal/lBridge

Show xDSL line status information

show lre PORTS xdsl line-conf Show line table configuration

show xdsl line-config-profile Show all configured line profiles.

show xdsl line-config-profile PROFILE

Show one configured line profile, enter the profile name.

show xdsl line-config-profile PROFILE margin

Show all SNR margins of selected profile, enter the profile name.

show xdsl line-config-info Show all line-config profiles and their assigned ports.

show xdsl line-config-info PROFILE

Show one line-config profile and its assigned ports.

show lre PORTS xdsl line-config-info

Show xDSL line configuration information for a spec-ified port, enter the port number.

143


Id:0900d8058018f37e

5.3.4.4 Verifying channel status informationTo display xDSL channel status information, use the following commands..

5.3.4.5 Displaying line band tableTo display xDSL line band table, use the following commands..

5.3.4.6 Assigning the configured line-config profile to a portTo apply a configured xDSL line-config profile to a specific port or slot, use the following command.

5.3.4.7 xDSL Notch ProfileThe operator can create and configure Notch profile.

Creating a Notch profile

In order to create Notch profile, use one of the following command


show lre PORTS xdsl phys-table detail (xtuc|xtur) Privileged

Global

Bridge

Show detailed information of xDSL physical status.

PORTS: LRE port or slot number

xtuc: VDSL LIU = vtuC

xtur: VDSL modem = vtuR

show lre PORTS xdsl phys-table linerates

Show xDSL physical status: only linerates (up/down-stream)


show lre PORTS xdsl phys-table alarm

Show xDSL physical status: alarm/failure state PORTS: LRE port or slot number


show lre PORTS xdsl chan-table Privileged

Global

Bridge

display xDSL channel status information



show lre PORTS xdsl band-table Privileged

Global

Bridge

Show xDSL line band table



lre PORTS xdsl line-config PROFILE

Bridge Configure an LRE (long reach Ethernet) and xDSL line-config profile:PORTS: enters LRE port or slot number {1/1-1/8 I s1}.

PROFILE: enters profile name.

144


Id:0900d8058018f37e

Port Configuration

Deleting a Notch profile

In order to delete a Notch profile, use one of the following command

Configuring a Notch profile

In order to configure Notch profile, use the following command

Verifying the configuration of Notch profile

In order to verify about configuration of Notch profile, use one of the following command


xdsl add notch-config-profile PROFILE

Bridge Create Notch profile, enter the profile name.

xdsl notch-config-profile PROFILE add-notch <1-4095> <2-4095>

Add one Notch to the table, (up to 16 Notchespossi-ble), enter the profile name:1-4095: start index of subcarrier for Notch2-4095: stop index of subcarrier for Notch


xdsl delete notch-config-profile PROFILE

Bridge Delete a specified Notch profile, enter the profile-name.

xdsl notch-config-profile PROFILE delete-notch <1-16>

Delete one Notch from the Notch profile table,enter the profile name:1-16: Notch index


lre PORTS xdsl rfibandmask {{amateurband2 I amateurband3 I amateurband4 I amateurband5 I amateurband1 I gmdss1 I gmdss2 Igmdss3}I}

Bridge

Configure transmit power spectral density maskcode (avoid interference with HAM (handheldamateur radio) radio bands) to specified port, enterthe port name:amat.1: start/stop frequency: 1800 kHz/2000 kHzamat.2: start/stop frequency: 3500 kHz/3800 kHz(ETSI)amat.3: start/stop frequency: 7000 kHz/7200 kHz(ETSI)amat.4: start/stop frequency: 10100 kHz/10150 kHzamat.5: start/stop frequency: 14000 kHz/14300 kHzgmdss1: start/stop frequency: 2173 kHz/2191 kHzgmdss2: start/stop frequency: 4200 kHz/4215 kHzgmdss3. start/stop frequency: 6300 kHz/6320 kHz.

lre PORTS xdsl notch-config {PROFILE|}

Configure xDSL Notch profile for a specified port .

PROFILE: Enter profile name or nothing if profile has to be removed from port.

145


Id:0900d8058018f37e

5.3.4.8 xDSL Channel ProfileThe operator can create and configure channel profile.

Creating a channel profile

In order to create channel profile, use one of the following command

Deleting a channel profile

In order to delete a channel profile, use the following command

Configuring a channel profile

In order to configure channel profile, use the following commands


show xdsl notch-config-profile PROFILE

Privileged

Config

Bridge

Show one configured notch profile, enter the profile, enter the profile name.

show xdsl notch-config-profile Show all configured notch profiles.

show xdsl notch-config-info PROFILE

Show one notch-config profile and its assigned portsl, enter the profile name.

show xdsl notch-config-info Show all notch-config profiles and their assigned ports .

show xdsl rfi-config-info Show the xDSL RFI band masks and portsassigned to them.

show lre PORTS xdsl notch- config-info

Show LRE port xDSL Notch config profile informa-tion,enter the port name.


xdsl add chan-config-profile PROFILE

Bridge Create channel profile, enter the profile name.


xdsl delete chan-config-profile PROFILE

Bridge Delete a specified channel profile, enter the profile-name.

146


Id:0900d8058018f37e

Port Configuration

Verifying the configuration of channel profile

In order to verify about configuration of channel profile, use one of the following command


xdsl chan-config-profile PROFILE (datarate-min-ds|dat-arate-min-us|datarate-min-res-ds|datarate-min-res-us|datarate-max-ds|datarate-max-us|dat-arate-min-low-pwr-ds) <32-103980>

Bridge Configure the maximum and minimum data rate of downstream/upstream channel.datarate-min-ds: Min. data rate of downstream channeldatarate-min-us: Min. data rate of upstream channeldatarate-min-res-ds: Min. reserved data rate of down-stream channel (only used in dynamic RA mode)datarate-min-res-us: Min. reserved data rate of upstream channel (only used in dynamic RA modedatarate-max-ds: Max. data rate of downstream channeldatarate-max-us: Max. data rate of upstream channeldatarate-min-low-pwr-ds: Min. data rate of down-stream channel in low power state

xdsl chan-config-profile PROFILE (max-interdelay-ds|max-interdelay-us) <0-255>

Configure maximum interleave delay for down-stream/upstream channel.max-interdelay-ds: Max. interleave delay for down-stream channel.max-interdelay-us: Max. interleave delay for upstream channel.

xdsl chan-config-profile PROFILE {min-inp-ds|min-inp-us} {off| half-symbol| 0| 1| 2| 3| 4| 5| 6| 7| 8| 9| 10| 11| 12| 13| 14| 15| 16}

Configure minimum Impulse noise protection on xDSL line, enter the profile name.off: offhalfsymbol: 0.5 symbol.0: 0 symbol (= off)1....16: 1 symbol ... 16 symbols

xdsl chan-config-profile PROFILE (max-bit-errorrate-ds|max-bit-errorrate-us) (10E-7|10E-5|10E-3)

Configure maximum value for allowed bit error rate onxDSL line, enter the profile name.max-bit-errorrate-ds: maximum value for allowed bit error rate on downstream direction.max-bit-errorrate-us: maximum value for allowed bit error rate on upstream direction

xdsl chan-config-profile PROFILE (thresh-downshift-ds| thresh-upshift-ds | thresh-downshift-us| thresh-upshift-us) <0-1000000>

Configure rate change threshold causing a down-shift/upshift trap on downstream/upstream channel.thresh-downshift-ds: rate change threshold causing a downshift trap on downstream channel.thresh-downshift-us: rate change threshold causing a downshift trap on upstream channel.thresh-upshift-ds: rate change threshold causing an upshift trap on downstream channel. thresh-upshift-us: rate change threshold causing an upshift trap on upstream channel.

lre PORTS xdsl chan-config (channel1| channel2) (PROFILE|)

Set profile name for channel1/channel2.

Profile name for channel 1 must be set, profile name for channel2 can be left empty.

lre PORTS xdsl chan-config (chan1-ratio-ds| chan1-ratio-us) <0-100>

Bridge Set ratio allocated by Channel1 in down-stream/upstream direction.

Channel1 + channel2 = 100%

<0-100>: value from 0-100 %

147


Id:0900d8058018f37e

5.3.4.9 xDSL PSD Mask ProfileThe operator can create and configure PSD (power spectral density) mask profile.

In order to create PSD mask profile or a PSD breakpoint, use one of the following command

Deleting a PSD mask profile or a PSD mask

In order to delete PSD mask profile or a PSD mask, use one of the following command

Configuring a PSD mask profile

In order to configure PSD mask profile, use the following command


show xdsl chan-config-profile PROFILE

Privileged

Config

Bridge

Show one configured channel profile, enter the profile name.

show xdsl chan-config-profile Show all configured channel profiles.

show xdsl chan-config-info PROFILE

Show information of xDSL channel config profile , enter the profile name

show xdsl chan-config-info Show information of xDSL channel config pro-files.

show lre PORTS xdsl chan-config-info

Show LRE port xDSL channel config profile information, enter the port name.


xdsl add psd-config-profile PROFILE {downstream I upstream}

Bridge Create PSD mask profile in upstream/downstreamdirec-tion, enter the profile name

xdsl psd-config-profile PROFILE add-psd <1-4095> <0-195>

Add one PSD breakpoint to the table, possible up to 32 (downstream)/16 (upstream), enter the profile name:1-4095: index os subcarrier, where breakpoint willbe placed0-195: PSD mask level 0 to -97.5 dBm/Hz (codedas 0 to 195) in steps of 0.5 dBm/Hz


xdsl delete psd-config-profile PROFILE

Bridge Delete a specified PSD mask profile, enter theprofile name.

xdsl psd-config-profile PROFILE delete-psd index <1-32>

Delete one PSD mask from the PSD mask profilebymask index, enter the profile name:1-32: PSD mask index

xdsl psd-config-profile PROFILE delete-psd subcarrier <1-4095>

Delete one PSD mask from the PSD mask profileby sub-carrier index, enter the profile name:1-4095: subcarrier index


lre PORTS xdsl psd-config {up Idown} {PROFILE|}

Bridge Assigne PSD upstream/downstream profile to specified port, enter the port name.

PROFILE: enter profile name (or nothing to reassign profile from ports.)

148


Id:0900d8058018f37e

Port Configuration

Verifying the configuration of PSD mask profile

In order to verify about configuration of PSD mask profile, use one of the following command

5.3.4.10 xDSL DELTThe operator can configure dual ended line diagnastic mode (DELT) for xDSL line.In order to confiure the DELT mode, use the following command.

In order to verify the DELT parameter, use one of the following command.


show xdsl psd-config-profile PROFILE

Privileged

Config

Bridge

Show one configured PSD profile, enter the profile name.

show xdsl psd-config-profile Show all configured PSD config profiles.

show xdsl psd-config-info PROFILE

Show one psd-config profile and its assigned ports, enter the profile name.

show xdsl psd-config-info Show all psd-config profiles and their assigned ports

show lre PORTS xdsl psd-config-info

Show LRE port xDSL PSD config profile informa-tion, enter the port name.


lre PORTS xdsl delt {force I inhibit}

Privileged

Config

Bridge

Configure DELT mode on xDSL line for a specified-port, enter the port number:force: force loop diagnostic by VTU-Cinhibit: stop loop diagnostic process

149


Id:0900d8058018f37e


show lre PORTS xdsl delt status

Privileged

Config

Bridge

Show information about the DELT status on xDSLline for one port, enter the port number.

show lre PORTS xdsl delt bit-allocation {downstream Iup-stream} {<1-4096> {<1-4096> I} I}

Show bit allocation table for different subcarriersof one port, enter the port number:downstream: downstream directionupstream: upstream direction1-4096: start subcarrier (press ENTER to show all)1-4096: end subcarrier (press ENTER to show onlyone)

show lre PORTS xdsl delt gain-allocation {downstream Iupstream} {<1-4096> {<1-4096> I} I}

Show gain allocation table for different subcarriersof one port, enter the port number:downstream: downstream directionupstream: upstream direction1-4096: start subcarrier (press ENTER to show all)1-4096: end subcarrier (press ENTER to show onlyone)

show lre PORTS xdsl delt snr {downstream I upstream} {<1-4096> {<1-4096> I} I}

Show SNR table for different subcarrier groupsofone port, enter the port number:downstream: downstream directionupstream: upstream direction1-4096: start subcarrier group (press ENTER to show all)1-4096: end subcarrier group (press ENTER to how only one)

show lre PORTS xdsl delt qln {downstream I upstream} {<1-4096> {<1-4096> I} I}

Show Queit Lkne Noise table for different subcarrier-groups of one port, enter the port number:downstream: downstream directionupstream: upstream direction1-4096: start subcarrier group (press ENTER to show all)1-4096: end subcarrier group (press ENTER to show only one)

show lre PORTS xdsl delt hlin {downstream I upstream} {<1-4096> {<1-4096> I} I}

Show H(f) linear representation for subcarriergroups of one port, enter the port number:downstream: downstream directionupstream: upstream direction1-4096: start subcarrier group (press ENTER to show all)1-4096: end subcarrier group (press ENTER to show only one)

show lre PORTS xdsl delt hlog {downstream I upstream} {<1-4096> {<1-4096> I} I}

Show H(f) linear representation for subcarriergroups of one port, enter the port number:downstream: downstream directionupstream: upstream direction1-4096: start subcarrier group (press ENTER to show all)1-4096: end subcarrier group (press ENTER to show only one)

show lre PORTS xdsl delt all {downstream I upstream} {<1-4096> {<1-4096> I} I}

Show all subcarrier group values of one port,enter the port number:downstream: downstream directionupstream: upstream direction1-4096: start subcarrier group (press ENTER to show all)1-4096: end subcarrier group (press ENTER to show only one)

150


Id:0900d8058018f37e

Port Configuration

5.3.4.11 Configuring xDSL Alarm-config ProfileAlarm-config profile is a configured policy, which alarm service is provided to clients with using SNMP trap in case of system error. It is convenient way because it is possible to configure standard of error checking, which varies according to service type, in each port.

Creating xDSL alarm-config profile

If you want to configure alarm-config profile, first of all, create the new alarm-config profile. By designating new alarm-config profile, bridge configuration mode changes to alarm-config profile mode.

In order to make the new alarm-config profile, use the following command.

The following is an example of configuring alarm-config-profile named as TEST, that default profile is ADSL.

SWITCH (bridge)# xdsl add alarm-config profile TEST

SWITCH (bridge)#

Deleting xDSL alarm-config profile

In order to delete an xDSL alarm-config profile, use the following command.

Configuring alarm-config profile

In order to configure alarm-config profile, use one of the following command.

show lre PORTS xdsl delt tss {downstream | upstream} (<1-512> (<1-512>|)|)

Privileged

Config

Bridge

Show transmit spectrum shaping table for different subcarriers of one port (only ADSL)<1-512>: start subcarrier (press ENTER to show all)<1-512>: end subcarrier (press ENTER to show only one)

show lre PORTS xdsl delt mrefpsd {down-stream|upstream}

Show medley reference PSD table (only VDSL)



xdsl add alarm-config-profile PROFILE-NAME

Bridge Create the new alarm-config profile, enter the profile name


xdsl delete alarm-config-profile PROFILE-NAME

Bridge Delete the alarm-config profile, enter the profile name.

151


Id:0900d8058018f37e

Checking the Configuration of Alarm-config

In order to verify about configuration of alarm-config, use one of the following command.

5.4 Configuring hiX 56xx to Operate under ATM EnvironmentYou can configure hiX 56xx to operate under ATM environment. Before configuring the ATM parameters, you have to disable the adsl port first; after the configuration, you have to enable the port to trigger the configuration.

5.4.1 Virtual ChannelhiX 56xx supports ATM network with virtual channel (VC). VC is configured by virtual circuit identifier (VCI) and virtual path identifier (VPI).

To configure VC, use the following command.


xdsl alarm-config-profile PROFILE {thres-lofs I thres-loss I thres-lprs I thres-lols I thres-es I thres-ses I thresuas} <0-900}

Bridge Configure the alarm threshold profile, enter the profile-name:thres-lofs: loss of frame seconds alarm thresholdthres-loss: loss of signal seconds alarm thresholdthres-lrps: loss of power seconds alarm thresholdthres-lols: loss of link seconds alarm thresholdthres-es: errored seconds alrm thresholdthres-ses: severely errored seconds alarm threshold-thres-uas: unavailable seconds alarm threshold0-900: value in seconds

xdsl alarm-config-profile PROFILE {opstate-notify I init-failure-notify} {enable I disabe}

Enable/disable the the state notification, enter theprofile name:opstate...: operation state notificationinitfailure...: init failure notification

lre PORTS xdsl alarm-config PROFILE

Configure LRE (long reach Ethernet) and xDSL alarm-config profile:PORTS: enter LRE port or slot number {1/1-1/8 I s1}PROFILE: enter profile name


show lre PORTS xdsl alarm-config-info

Privileged Config

Bridge

Show the xDSL relation between ports and assigned alarm profiles.

show xdsl alarm-config-profile Show all configured alarm profiles

show xdsl alarm-config-profile PROFILE

Show one configured alarm profile, enter the profile name

show xdsl alarm-config-info PROFILE

Show one alarm-config profile and its assigned ports, enter the profile name.

show xdsl alarm-config-info Show all alarm-config profiles and their assigned ports.

show xdsl key-info Show the xDSL key information for IU and LIUBD

152


Id:0900d8058018f37e

Port Configuration

To configure VPI and VCI, use the following command.

To set adminstatus of VCC, use the following command.

To display a configuration of ATM VCCTP, use the following command.


lre PORTS atm vc {create | delete} vpi <0-255> vci <32-65535>

Bridge Create/delete VC on specified port, enter the port number, the VPI and VCI values.

lre PORTS xdsl atm vc { create | delete} vpi <0-255> vci <32-65535>

xDSL configuration, create/delete VC on specified xDSL port, enter the port number, the VPI and VCI values.


lre PORTS atm vcc <1-8> vpi <0-255> vci <32-65535>

Bridge

Configure VC on specified port, enter the port number, the VPI and VCI values.

lre PORTS atm vcc <1-8> alarm-severity <1-10>

Configure alarm severity.

lre PORTS xdsl atm vcc <1-8> alarmseverity <1-10>

xDSL configuration, configure alarm severity.

lre PORTS atm vcc <1-8> encap {llc | vc-mux}

Configure VC encapsulation over AAL5):llc: LLC encapsulationvc-mux: VC-MUX encapsulation

lre PORTS xdsl atm vcc <1-8> vpi <0-255> vci <32-65535>

xDSL configuration, configure VC on specified xDSL port, enter the port number, the VPI and VCI values.

lre PORTS xdsl atm vcc <1-8> encap (llc|vc-mux)

xDSL configuration, configure VC encapsulation over AAL5):llc: LLC encapsulationvc-mux: VC-MUX encapsulation


lre PORTS atm vcc <1-8> admin-status (enable|disable)

Bridge Set adminstatus of VCC

1-8: VCC value(1-8), enable: adminstatus enable, disable: adminstatus disable.

lre PORTS xdsl atm vcc <1-8> adminstatus (enable|disable)

xDSL configuration, set adminstatus of VCC

1-8: VCC value(1-8), enable: adminstatus enable, disable: adminstatus disable.


show lre PORTS atm vc PrivilegedGlobalBridge

Show VC for a specified port, enter the port number.

show lre PORTS xdsl atm vcctp-overview

Show VCC configuration overview for a xDSL port, enter the port number.

show lre PORTS xdsl atm vcctp-info

Show VCC configuration detailed information for a xDSL port, enter the port number.

153


Id:0900d8058018f37e

Following example shows how to create virtul channel on a port.

SWITCH(bridge)# lre 4/1 atm vc create vpi 0 vci 35SWITCH(bridge)# show lre 4/1 atm vc===============================================================PORT Num VPI VCI type a5txsize a5rxsize orl AlarmSeverity ---------------------------------------------------------------4/ 1 1 0 32 llc 1536 1536 24000 14/ 1 2 0 35 llc 1536 1536 24000 1===============================================================

Following example shows how to configure virtual channel

SWITCH(bridge)# lre 4/1 atm vcc 2 vpi 0 vci 36SWITCH(bridge)# show lre 4/1 atm vc===============================================================PORT Num VPI VCI type a5txsize a5rxsize orl AlarmSeverity ---------------------------------------------------------------4/ 1 1 0 32 llc 1536 1536 24000 1 4/ 1 2 0 36 llc 1536 1536 24000 1===============================================================SWITCH(bridge)#

5.4.2 DSL Channel TypeTo set Dsl channel type of ATM VC cells, use the following command.

5.4.3 VC Rate LimitYou can configure hiX 56xx with rate limit of VC. To configure rate limit of VC, use the following command.

5.4.4 Operation Administration Maintenance (OAM)You can check VC status configured by user through Operation Administration Mainte-nance (OAM). The OAM of hiX 56xx uses a continuity check (CC) method.


lre PORTS xdsl atm vcc <1-8> dsl-channel (1| 2)

Bridge xDSL configuration, set Dsl channel type of ATM VC cells.

1: First channel used by VCC-TP

2: Second channel used by VCC-TP

Second channel can only be assigned to VC in case of dual latency.


lre PORTS atm vcc <1-8> aal5-pdu tx-size <1-1536> rx-size <1-1536>

Bridge Configure rate limit of VC channel on specified port, enter the port number and the values

154


Id:0900d8058018f37e

Port Configuration

To enable a CC and configure a target CC, use the following commands.

To disable CC, use the following command.

To select the mode of CC, use the following command.

hiX 56xx detects the problem occurring in ATM Network with loopback. To perform loopback in ATM Network, use the following command.

To display OAM status, use the following command.

5.4.5 ATM Service CategoryTo set the weight for the weighted fair queuing (WFQ), use the following command.


lre atm vcc PORTS <1-8> oam cc action act dir {sink I src I both} Bridge

Bridge Enables CC and configures target CC on specified port, enter the port name and the values.

1-8: VCC value(1-8)

lre PORTS atm vcc <1-8> aal5-pdu tx-size <1-1536> rx-size <1-1536>

Configure rate limit of VC channel on specified port, enter the port number and the values


lre PORTS atm vcc <1-8> oam cc action deact

Bridge Disable CC on specified port, enter the port name and the values.


lre PORTS atm vcc <1-8> oam cc mode {auto | manual}

Bridge Select the mode of CC on specified port, enter the port name and the values.


lre PORTS atm vcc <1-8> oam loopback type e2e Bridge

Configure loopback function on specified port, enter the port name and the values.

lre PORTS xdsl atm vcc <1-8> looptest (none| e2e)

xDSL configuration, set loop test status of VCC.

none: no test running.

e2e: end-to-end test.


show lre PORTS atm oam{loopback | cc}


Show the OAM status of loopback or CC cell on spec-ified port, enter the port name and the values.

155


Id:0900d8058018f37e

To configure ingress policer, use the following command.

To set a constant bit rate (CBR), use the following command.

The two commands described above can be used to set Input Rate Limit (IRL) and Out-put Rate Limit (ORL) for Infinion (IFX) line card, the following example shows how to realize that:

SWITCH(bridge)# lre 1/1 atm vcc 1 ingress-policing scr 9436 mbs 100

SWITCH(bridge)# lre 1/1 atm vcc 1 egress-shaping service-category cbr pcr 5000

To set a real-time variable bit rate (RTVBR), use the following command.

To set a non-real-time variable bit rate (NRTVBR), use the following command.


lre PORTS atm vcc <1-8> egress-shaping service-category best-effort weight <1-8>

Bridge Set the weight for the weighted fair queuing (WFQ).1-8: VCC value1-8: weight value


lre PORTS atm vcc <1-8> ingress-policing scr <3-9436> mbs <1-1073741824>

Bridge The long reach ethernet configuration, configure the ingress policer.

1-8: VCC value(1-8), 3-9436: cells/second, 1-1073741824: Cells,


lre PORTS atm vcc <1-8> egress-shaping service-category cbr pcr <3-73129>

Bridge Set a constant bit rate (CBR).1-8: VCC valuepcr: peak cell rate3-73129: cells per second


lre PORTS atm vcc <1-8> egress-shaping service-category rtvbr pcr <3-73129> scr <3-73129> mbs <0-1073741824>

Bridge Set a real-time variable bit rate (RTVBR).1-8: VCC valuepcr: peak cell rate3-73129: cells per secondscr: sustained cell ratembs: maximum burst size0-1073741824: cells


lre PORTS atm vcc <1-8> egress-shaping service-category nrtvbr pcr <3-73129> scr <3-73129> mbs <0-1073741824>

Bridge Set a non-real-time variable bit rate (NRTVBR).1-8: VCC valuepcr: peak cell rate3-73129: cells per secondscr: sustained cell ratembs: maximum burst size0-1073741824: cells

156


Id:0900d8058018f37e

Port Configuration

To set an unspecified bit rate (UBR), use the following command.

To display an ATM shaping configuration, use the following command.

The following is an example of displaying an ATM shaping configuration.

SWITCH(bridge)# show lre 13/1 atm shaping-conf===============================================================slot port vcc atm_service trf_desc weight pcr scr mbs---------------------------------------------------------------13 1 1 best effort unshaped 1 unused unused unused13 1 2 best effort unshaped 1 unused unused unused13 1 3 best effort unshaped 1 unused unused unused13 1 4 best effort unshaped 1 unused unused unused13 1 5 best effort unshaped 1 unused unused unused13 1 6 best effort unshaped 1 unused unused unused13 1 7 best effort unshaped 1 unused unused unused13 1 8 best effort unshaped 1 unused unused unused===============================================================

5.5 Rate Limit

g IRL configuration described in this chapter is only valid for Conexant (CNX) line card, to set IRL and ORL for Infinion (IFX) line card, refer to 5.4.5 ATM Service Cat-egory.


lre PORTS atm vcc <1-8> egress-shaping service-category ubr pcr <3-73129>

Bridge Set an unspecified bit rate (UBR).1-8: VCC valuepcr: peak cell rate3-73129: cells per second


show lre PORTS atm shaping-conf Bridge Show an ATM shaping configuration.

show lrePORTS atm policing-conf Show an ATM policing information.

157


Id:0900d8058018f37e

5.5.1 Input Rate Limit (IRL)

5.5.1.1 OverviewInput Rate Limit (IRL) can be used to control the amount of incoming traffic at the sub-scriber’s side. IRL provides mechanisms to manage maximum and committed values of bandwidth (kbit/sec) and burst size (bytes) because many subscribers may share the same resources of the switch and the network.

IRL application is configured via profiles. An IRL profile is a kind of traffic policy and each profile determines a set of four values. Additionally, each profile has a unique name.

A profile can be applied to one or more subscriber ports. These ports can reside on the same or different interface units (IUs). One profile can be referred by any number of ports at the same time.

5.5.1.2 Profile ConfigurationCreating a New Profile

To create an IRL profile, use the following command.

g The profile name must be unique. It may have a length of up to 245 significant char-acters.

Configuring Values of an IRL Profile

To configure the value of each parameter, use the following commands.

Value Unit Range

cir (committed information rate) Kbps 0-16000

pir (peak information rate) Kbps 0-16000

cbs (committed burst size) Byte 96-10000

pbs (peak burst size) Byte 96-15000

Table 20 IRL Value


irl create profile PROFILENAME Global Create a new IRL profile, enter a profile name.


irl set profile {cir | cbs | pir | pbs} VALUE

Global Set IRL profile data, enter the profile name:cir: committed information rate <0-16000>cbs; committed burst size <96-10000>pir: peak information rate <0-16000>pbs: peak burst size <96-15000>value: enter the value.

158


Id:0900d8058018f37e

Port Configuration

g The order in which the irl set profile command is entered is arbitrary. The configu-ration of a profile being edited can be changed as often as wanted until the irl apply command is entered.

Here is an example of creating and configuring an IRL profile.

SWITCH(config)# irl create profile Profile_001

SWITCH(config)# irl set profile cir 1000

SWITCH(config)# irl set profile cbs 7500

SWITCH(config)# irl set profile pir 1000

SWITCH(config)# irl set profile pbs 10000

SWITCH(config)# irl apply profile

SWITCH(config)# show irl profile info Profile_001

------+-------+-------+-------+-------+------------------------

CIR | CBS | PIR | PBS | SNMP-| Profile Name

(kbps)|(bytes)|(kbps)|bytes)|index|

------+-------+-------+-------+-------+------------------------

1000| 7500| 1000| 10000| 1| Profile_001

SWITCH(config)#

If “irl apply profile” isn’t executed after creating or modifying one profile, you can display the information by the command: “show irl profile editor”.

SWITCH(config)# irl create profile Profile_002SWITCH(config)# show irl profile editor IRL profile to be created: Profile_002CIR: 500 (kbps)CBS: 5000 (bytes)PIR: 1500 (kbps)PBS: 10000 (bytes)SWITCH(config)# show irl profile info No IRL profiles configured.SWITCH(config)#

Modifying a Profile

To modify an applied IRL profile, use the following command.

Here is an example of modifying, setting and applying the IRL profile:

SWITCH(config)# irl modify profile Profile_003SWITCH(config)# irl set profile cbs 5000SWITCH(config)# irl apply profileSWITCH(config)# show irl profile info Profile_003------+-------+-------+-------+-------+------------------------ CIR | CBS | PIR | PBS | SNMP- | Profile Name(kbps)|(bytes)| (kbps)|(bytes)| index |


irl modify profile PROFILENAME Global Modify an existing IRL profile, enter the profile name.

159


Id:0900d8058018f37e

------+-------+-------+-------+-------+------------------------ 1000 | 5000 | 3000 | 10000 | 3| Profile_003SWITCH(config)#

Saving a Profile

After configuring a new profile or modifying an existing profile using the commands above, it should be applied to the switch by saving. If the profile is not saved, all entered configurations will be lost.

To save and apply the profile, use the following command.

1. The switch manages up to 200 different profiles at the same time.2. Each profile has a unique name.3. Each adsl port can be applied only one IRL profile.4. g The switch keeps the values of the latest created or modified profile in tem-

porary memory. These values can be reused to create further profiles, which only differ in e.g. the cbs value. That means, it is not necessary always to enter all four values if they are the same as the previously created or modified profile.

Deleting a Profile

To delete an existing IRL profile, use the following command.

g A profile cannot be deleted if it is applied to any adsl port, i.e., the profile must be released from all applied ports before it is deleted. The show irl ifmap profile command can be used to get a list of all ports being mapped to this profile.

To apply a IRL profile to a port, refer to Port Mapping

5.5.1.3 Port MappingInput rate limit can be activated for a VC of a dedicated port by mapping this VC to an existing IRL profile.

Mapping a Port to an IRL Profile

To map an IRL profile, use the following command.


irl apply profile Global Save profile configuration.


irl delete profile PROFILENAME Global Delete an existing IRL profile, enter the profile name.


irl create ifmap PORT PROFILE-NAME

Global Create a new IRL port, enter subscriber port number and profile name.

160


Id:0900d8058018f37e

Port Configuration

g The port should already exist and should be a subscriber port. The switch rejects non-created ports and ports with the wrong type. However, offline configuration is of course possible (e.g. if the concerned LIU is currently not plugged-in).

Here’s an example of applying IRL profiles to ports.

SWITCH(config)# irl create ifmap1/1/1 Profile_001SWITCH(config)# irl create ifmap1/4/1 Profile_001SWITCH(config)# irl create ifmap1/2/1 Profile_003SWITCH(config)# irl create ifmap2/2/1 Profile_003SWITCH(config)# irl create ifmap2/4/1 Profile_003SWITCH(config)#

Deleting an IRL Mapping

To delete a mapping, use the following command.

Here’s an example of deleting a mapping and a profile.SWITCH (config)# irl delete ifmap 1/4/1SWITCH(config)# show irl ifmap No ports are mapped to any IRL profile.SWITCH (config)# show irl profile info ------+-------+-------+-------+-------+-----------------CIR | CBS | PIR | PBS | SNMP- | Profile Name(kbps)|(bytes)| (kbps)|(bytes)| index |------+-------+-------+-------+-------+-----------------500 | 5000 | 1500 | 10000 | 1 | Profile_001SWITCH (config)# irl delete profile Profile_001SWITCH (config)# show irl profile info No IRL profiles configured.SWITCH (config)#

• irl create ifmap and irl delete ifmap commands will be processed immediately. • g One and the same IRL profile can be used for any number of ports residing

on the same or different LIUs. • An IRL profile will be automatically loaded from CXU_B to that LIU, which owns a

given port, at the moment the profile is referred the first time. It will be automatically unloaded if the last port of this LIU, that is mapped to this profile, is unmapped. That means, unused (unreferred) profiles are not loaded on a LIU in order to save profile memory on LIUs.

• This restriction (10 different profiles per LIU) means that all IRL ports of the same LIU can be mapped to at most 10 different profiles. The switch rejects a port mapping command (irl create ifmap) that would require to load the eleventh profile to this LIU. Please select one of the already loaded profiles, that fulfill your require-ments as nearest as possible in this case.

• The switch automatically deletes the port mapping if the concerned port will be de-leted and unloads the profile if it becomes unused in the case.


irl delete ifmap PORT Global Delete an existing port from IRL profile, enter the sub-scriber port name.

161


Id:0900d8058018f37e

5.5.1.4 Displaying IRL ConfigurationThe DSLAM provides several ways to display IRL profiles, IRL port mapping, or both together.

To display an IRL profile and/or port mapping, use the following commands.

g The output of the show command can be unsorted.

5.5.2 IRL Configuration Example1. Create one IRL profile:

SWITCH(config)# irl create profile testSWITCH(config)# irl set profile cbs 5000SWITCH(config)# irl set profile cir 1000SWITCH(config)# irl set profile pbs 10000SWITCH(config)# irl set profile pir 1500SWITCH(config)# irl apply profile SWITCH(config)# show irl profile info ------+-------+-------+-------+-------+---------------------------CIR | CBS | PIR | PBS | SNMP- | Profile Name(kbps)|(bytes)| (kbps)|(bytes)| index |------+-------+-------+-------+-------+---------------------------1000 | 5000 | 1500 | 10000 | 1 | test

2. Apply the profile to one port:

SWITCH(config)# irl create ifmap 1/4/1 testSWITCH(config)# show irl ifmap --------------+-------+------------------------------------Slot/Port/Vcc | SNMPi | Profile Name--------------+-------+------------------------------------1/ 4/ 1 | 1 | test

3. Modify the IRL profile:


show irl profile info

PrivilegedGlobal

Show profile information of all existing profiles regard-less used or unused.

show irl profile info PROFILE-NAME

Show profile values for a specified profile, enter the profile name.

show irl ifmap port PORT Show IRL mapping information for a specified port, enter the port number.

show irl profile editor Show information of profile being created or modified.

show irl ifmap slot SLOT Show all IRL mapping information for a specified slot together with their profile name, enter the slot number.

show irl ifmap profile PROFILE-NAME

Show all ports of the whole system (all slots), which are currently mapped to any given profile, enter the profile name.

show irl ifmap Show IRL mapping information.

162


Id:0900d8058018f37e

Port Configuration

SWITCH(config)# irl modify profile test SWITCH(config)# irl set profile cir 500SWITCH(config)# irl apply profile SWITCH(config)# show irl profile info ------+-------+-------+-------+-------+---------------------------CIR | CBS | PIR | PBS | SNMP- | Profile Name(kbps)|(bytes)| (kbps)|(bytes)| index |------+-------+-------+-------+-------+---------------------------500 | 5000 | 1500 | 10000 | 1 | test

4. Delete the IRL profile:

Before deleting one IRL profile, please delete ifmap first.SWITCH(config)# irl delete ifmap 1/4/1SWITCH(config)# show irl ifmap No ports are mapped to any IRL profile.SWITCH(config)# show irl profile info ------+-------+-------+-------+-------+---------------------------CIR | CBS | PIR | PBS | SNMP- | Profile Name(kbps)|(bytes)| (kbps)|(bytes)| index |------+-------+-------+-------+-------+---------------------------500 | 5000 | 1500 | 10000 | 1 | test

SWITCH(config)# irl delete profile testSWITCH(config)# show irl profile info No IRL profiles configured.SWITCH(config)#

5.5.3 Output Rate Limit (ORL)hiX 56xx provides the function that adjusts the transmit rate of upstream and down-stream for ADSL port.

To configure the output rate limit which determines the upstream speed, use the follow-ing command. Note that before using this command, the adsl port should be disabled first.

5.6 Bridging

5.6.1 Setting VLAN ID of Uplink InterfaceVLAN: Abbreviation for virtual LAN, a network of computers that behave as if they are connected to the same wire even though they may actually be physically located on dif-


lre PORTS atm orl <64-29952> Bridge Configure the output rate limit on specified port, enter a port number (1/1-1/8, s1) and ORL values.

Output rate limiting value is in 16 kbps granularity. For Shdsl IU line, the value can be changed, orl(max 11408) setting through span-config-profile 's maxlin-erate.

163


Id:0900d8058018f37e

ferent segments of a LAN. VLANs are configured through software rather than hard-ware, which makes them extremely flexible.

You need to create a vlan first, then add the ports into the vlan. Configure VLAN ID for uplink interface using following command beginning in privileged Bridge mode:

For detailed information about VLAN configuration, refer to 5.6.7 Virtual Local Area Network (VLAN)

The following example shows how to create a vlan and assign Ethernet port 1 in CXU_B to the vlan.

SWITCH(bridge)# vlan create 2000

SWITCH(bridge)# vlan add 2000 0/1 tagged

5.6.2 Bridge Function

5.6.2.1 Bridge BaseDefault Bridge Mode

To select the default bridge mode, use the following command.

Default Tagging Mode

hiX 56xx support two tagging modes, the default mode is single. If need, the double tagging mode can be set. Before changing the tagging mode, you should delete all new created vlans. To configure a tagging mode, use the following commands.


vlan create VLANS Bridge Create new VLAN by assigning VLAN ID:VLANS: VLAN ID (1-4094)

vlan add VLANS PORTS {tagged | untagged} [PORTS {tagged | untagged}]

Assign a port to VLAN:VLANS: enter the VLAN ID.PORTS: port number (e.g. 1/1/1-1/48/1)


bridgebase bridgemode {basic | diffserv | enhanced}

Bridge Set the default bridge mode.

164


Id:0900d8058018f37e

Port Configuration

Routing Mode

The default routing mode is residential. This mode forbids the communication between subscriber ports no matter the subscriber ports belong to the same LIU card or different LIU cards. However, an ‘unrestricted’ mode can be set to permit the communication between subscriber ports. To configure a routing mode, use the following command.

Destination Lookup Failure (DLF) Filter

The default value of dlf-filter is ‘enable’. This filter only works for downstream traffic.

Displaying Bridge Base Configuration

To display a configuration of bridge base, use the following command.


bridgebase taggingmode {single | double}

Bridge

Set a tagging mode.

bridgeport PORTS tagging-mode{off | tagged I untagged }

Configures bridgeport taggingmode:off: untagged, tagged frames are forwarded-unchanged tagged: tagged frames are forwarded, untagged frames are droppeduntagged: untagged frames are forwarded, tagged frames are dropped

bridgebase outertagging PVID PRIORITY

Set a default value of the outer tag (only in double tagging mode):PVID: default outer PVIDPRIORITY: default outer tag priority

bridgeport PORTS replace-vlantag {VID I off}

Configures bridgeport, enter a port number, e.g.,1/1-1/48,2/20/1:VID: VLAN ID for tag replacementoff: switch off tag replacement

no bridgeport PORTS replace-vlantag

Deletes bridgeport replace vlantag, enter a portnum-ber, e.g., 1/1-1/48,2/20/1:


bridgebase routing-mode{residential | unrestricted}

Bridge Set a routing mode:residential: internal routing of frames among sub-scribers disabledunrestricted: internal routing of frames among sub-scribers enabled


bridgebase dlf-filter {enable | disable}

Bridge Configure a destination lookup failure (DLF) filter:enable: destination MAC unknown unicast towards subscriber ports blockeddisable: destination MAC unknown unicast towards subscriber ports allowed

165


Id:0900d8058018f37e

5.6.2.2 Configuring Bridge PortBridge Port PVID

To configure a bridge port PVID, use the following command.

Following example shows how to set Bridgeport PVID

SWITCH(bridge)# bridgeport 1/1/1-1/72/1 pvid 1000

Bridge Port Mode

To configure bridge port mode, use the following command.

VCC Aggregator

To enable/disable a VCC aggregator, use the following command.

To delete a port from a VCC aggregator, use the following command.

Source MAC Address for IPoA

To configure a source MAC address for IPoA, use the following command.


show bridgebase PrivilegedGlobalBridge

Show a configured bridge base.


bridgeport PORTS pvid PVIDS Bridge Configure PVID, enter a port number.(e.g. 1/1-1/48, 2/20)PVID: list of PVIDs (e.g. 101-172, 101)


bridgeport PORTS mode {ipoa | ipoe | pppoa}

Bridge Select a bridge port mode, enter a port number.(e.g. 1/1-1/48, 2/20)ipoa: IPoA modeipoe: IPoE modepppoa: PPPoA mode

bridgeport PORTS leavemode (fast|normal)

Configure bridgeport leave mode,fast: switch leave mode to fast,normal: switch leave mode to normal.

bridgeport PORTS ehtmode (on|off)

Configure bridgeport EHT mode,on: switch EHT mode to ON,off: switch EHT mode to OFF.

no bridgeport PORTS ehtmode Configure bridgeport EHT mode,


bridgeport PORTS mode vcc-aggr {enable | disable}

Bridge Enable/disable VCC aggregator, enter a port number. (e.g. 1/1-1/48, 2/20)


no bridgeport PORTS mode vcc-aggr

Bridge Delete a specified port from VCC aggregator, enter a port number. (e.g. 1/1-1/48, 2/20)

166


Id:0900d8058018f37e

Port Configuration

Default Remote ID

To specify a default remote ID, use the following command.

To display a configured remote ID format, use the following command.

Default Circuit ID

To specify a default circuit ID, use the following command.

To display a configured circuit ID format, use the following command.

Max-hostname

To set max-hostname length for circuit-id and remote-id, use the following command.


bridgeport PORTS srcmacaddr (auto|SRCMACADR)

Bridge Configure a source MAC address for IPoA, enter a port number. (e.g. 1/1-1/48, 2/20)auto: no source MAC address configuration for IPoASRCMAC-ADDR: source MAC address(e.g. 00:11:22:33:44:55)

no bridgeport PORTS srcmac-addr

Delete source for MAC address for IPoA, enter a port number. (e.g. 1/1-1/48, 2/20)


bridgeport PORTS remoteid REMOTEID Bridge Specify a default remote ID, enter a port number and DHCP remote ID. (e.g. 1/1-1/48, 2/20)

remoteid-format STRING Set the default format string for remote ID.

no bridgeport PORTS remoteid Delete a specified default remote ID.


show remoteid-format Bridge Show a configured default format string for remote ID.


bridgeport PORTS circuitid CIRCUIT-ID

Bridge

Specify a default circuit ID, enter a port number and DHCP circuit ID. (e.g. 1/1-1/48, 2/20)

circuitid-format STRING Set the default format string for circuit ID.

no bridgeport PORTS circuitid Delete a specified default circuit ID.


show circuitid-format Bridge Show a configured default format string for circuit ID.


bridgebase max-hostname <1-63>

Bridge Set max-hostname length for circuit-id and remote-id.<1-63>: set max-hostname (1-63), default value is 16.

167


Id:0900d8058018f37e

To set max-hostname length to default value (16), use the following command.

Service-tag-tpid

To set the default service-tpid (only in double tagging mode), use the following command.

Bridge Port Priority

To configure bridge port priority, use the following command. The bridge port priority will be effective when this bridge port is added into the vlan as untag mode and the corre-sponding receiver port is added into the vlan as tagged mode.

To configure bridge port inner priority, use the following command.

Host Configuration Protocol

To configure a host configuration protocol, use the following command.

Displaying Bridge Port Configuration

To display a configuration of bridge port, use the following command.


no bridgebase max-hostname Bridge Set max-hostname length to default value (16).


bridgebase service-tag-tpid WORD

Bridge Set the default service-tpid (only in double tagging mode).WORD: service-tag-tpid(0x0000-0xFFFF)


bridgeport PORTS priority PRIORITY

Bridge Configure port priority, enter a port number.(e.g. 1/1-1/48, 2/20)PRIORITY: priority (0-7)


bridgeport PORTS inner-priority PRIORITY

Bridge Configure port inner priority, enter a port number.(e.g. 1/1-1/48, 2/20)PRIORITY: priority (0-7)


bridgeport PORTS host-protocol {none | dhcp | pppoe | dhcp-pppoe}

Bridge Configure a host configuration protocol, enter a port number. (e.g. 1/1-1/48, 2/20)none: no host protocoldhcp: DHCP host protocolpppoe: PPPoE (PPPoA) host protocoldhcp-pppoe: DHCP and PPPoE (PPPoA) host protocol


show bridgeport PORTS PrivilegedGlobalBridge

Show bridge port configuration, enter a port number. (e.g. 1/1/1-1/72/1, 0/1)

168


Id:0900d8058018f37e

Port Configuration

Displaying IU Bridge Profile Configuration

To display the configuration of IU bridge profile configuration, use the following command.

Configuring PPPoA Source MAC Address

To configure PPPoA source MAC address, use the following commands.

Configuring Bridgeport Multicast group

To configure bridgeport multicast group, use the following commands.

5.6.2.3 Setting IPoA ModeTo set the IP over ATM mode configuration, use the following command.

To disable the IP over ATM mode, use the following command.

5.6.2.4 Example of Configuring VLAN & Bridge PropertiesFollowing example shows how to configure VLAN and Bridge properties of User Port, first, ports 1/1/1-1/72/1 are added to vlan 1000, the interfaces are in untagging mode,


show iubridgeprofile {SLOT|} PrivilegedGlobalBridge

Show IU bridge profile configurationSLOT: IU slot number, optional.


iubridgeprofile SLOT pppoa-srcmac (MACADDRESS| auto)

Bridge Configure PPPoA source MAC address.SLOT: IU slot numberl.MACADDRESS: mac address (e.g. 00:11:22:33:44:55 or none)

no iubridgeprofile SLOT pppoa-srcmac

IU uses the system default MAC address.


bridgeport PORTS max-mcast-group MAXJOINED

Bridge Configure bridgeport max. multicast groups,MAXJOINED: max. joined multicast groups (1..256).


ipoa destination SLOT A.B.C.D XX.XX.XX.XX.XX.XX

Bridge Set the IPoA mode:SLOT: IU slot number (e.g. s1)A.B.C.D: destination IP addressXX.XX.XX.XX.XX.XX: destination MAC address


no ipoa destination SLOTA.B.C.D XX.XX.XX.XX.XX.XX

Bridge Disable the IPoA mode:SLOT: IU slot number (e.g. s1)A.B.C.D: destination IP addressXX.XX.XX.XX.XX.XX: destination MAC address

169


Id:0900d8058018f37e

then PVID of ports 1/1/1-1/72/1 are set to 1000(generally, it’s the same as Vlan ID),set host protocol of 1/1/1 to DHCP – PPPoe.

SWITCH(bridge)# vlan add 1000 1/1/1-1/72/1 untagged

SWITCH(bridge)# bridgeport 1/1/1-1/72/1 pvid 1000

SWITCH(bridge)# bridgeport 1/1/1 host-protocol dhcp-pppoe

5.6.2.5 Example of PPPoA configurationFollowing example shows how to configure PPPoA.

SWITCH(bridge)# bridgeport 1/5/1 host-protocol dhcp-pppoe

SWITCH(bridge)# iubridgeprofile s1 pppoa-srcmac auto

If the relay agent will be used for PPPoA, a provider should be configured. Following example shows how to configure a provider and apply it to a specific VLAN.

SWITCH(config)# ip pppoe provider pppoa1pppoa1index: 2vlan: 0 not createdsuboption105: noneSWITCH(pppoe-provider)#

SWITCH(config)# show ip pppoe providerPPPoE PROVIDER TABLEpppoa1index: 2vlan: 100 createdsuboption105: remote & circuit id

SWITCH(config)# ip pppoe use-provider 100 pppoa1SWITCH(config)# show ip dhcp vlanVLAN TABLEvid user dhcp ppp bdhcp bppp bport33+ dhcp 1+ 0- 1 0 16051+100+ pppoe 0- 2+ 0 2 1051+

5.6.3 Address Resolution Protocol (ARP)Devices connected to IP network have two addresses, LAN address and network address. LAN address is sometimes called as a data link address because it is used in Layer 2 level, but more commonly the address is known as a MAC address. A switch on Ethernet needs a 48-bit-MAC address to transmit packets. In this case, the process of finding a proper MAC address from the IP address is called an address resolution.

On the other hand, the progress of finding the proper IP address from the MAC address is called reverse address resolution. Siemens switches and DSLAMs find their MAC

170


Id:0900d8058018f37e

Port Configuration

addresses from the IP addresses through address resolution protocol (ARP). ARP saves these addresses in ARP table for quick search. Referring to the IP addresses in ARP table, the packets containing the IP address are transmitted to network. When con-figuring the ARP table, it is possible to do it only in some specific interfaces.

This chapter consists of the following sections.

• Configuring ARP Table • Using ARP Alias

5.6.3.1 Configuring ARP TableThe contents of an ARP table are automatically registered when a MAC address corre-sponds to its IP address is found.

To make a specific IP address to be accorded with a MAC address, use the following command.

Following example shows how to set a static ARP entry:

SWITCH(config)# arp 10.2.2.1 00:00:cd:01:82:d0 mgmt

To delete a registered IP address and MAC address or change all the contents of the ARP table, use the following command.

To display the current ARP table registered in the DSLAM, use the following command.


arp A.B.C.D MAC-ADDR

Global

Set a static ARP entry, enter the IP address and the MAC address.MAC-ADDR: MAC address

arp A.B.C.D MAC-ADDR INTER-FACE

Set a static ARP entry, enter the IP address, the MAC address and enter an interface name.INTERFACE: interface nameMAC-ADDR: MAC address


no arp A.B.C.D

Globa

Delete a static ARP entry, enter the IP address.

no arp A.B.C.D INTERFACE Delete a static ARP entry, enter the IP address and the interface name.

clear arp Delete all the dynamic contents of ARP table.

clear arp INTERFACE Delete all the dynamic contents of ARP table, enter the interface name.


show arp PrivilegedGlobal

Show ARP table.

show arp INTERFACE Show ARP table for specified interface, enter the interface name.

171


Id:0900d8058018f37e

The following is an example of displaying the current ARP table for all interfaces.

SWITCH(config)# show arp

------------------------------------------------------------

Address HWaddress Type Interface

------------------------------------------------------------

10.254.254.105 00:bb:cc:dd:ee:05 DYNAMIC br4094

10.2.2.1 00:00:cd:01:82:d0 DYNAMIC mgmt

SWITCH(config)#

5.6.3.2 Using ARP AliasAlthough clients are joined in the same client switch, it may be impossible to communi-cate between them for security reasons. When you need to make them communicate with each other, the hiX 56xx supports ARP alias, which responses the ARP request from client net through the concentrating switch.

To register the address of client net range in ARP alias, use the following command.

g Unless you input a MAC address, the MAC address of user’s device will be used for ARP response.

To delete the registered IP address range of ARP alias, use the following command.

To display a registered ARP alias, use the following command.

5.6.4 Configuring Access Control ListFor the hiX 56xx, it is possible to filter packets which transmit to the subscriber’s port by using a MAC address. The function of global entry is to deny the packets with the same source MAC address as the defined global ACL entry. The function of port entry is to allow only the packets with the same source MAC address as the defined port ACL entry. If both the global and port ACL entries define a same MAC address, the priority of the global entry is higher than that of the port entry, i.e., the packets with the same source MAC address will be denied.

To configure an access control list, use the following command.


arp-alias A.B.C.D A.B.C.D[XX:XX:XX:XX:XX:XX]

Global Register IP address range and MAC address in ARP alias to make user’s device response ARP request.


no arp-alias START-IP-ADDRESS END-IP-ADDRESS

Global Delete the registered IP address range of ARP alias.


show arp-alias PrivilegedGlobal

Show a registered ARP alias.

172


Id:0900d8058018f37e

Port Configuration

g First of all, configure the global policy, and then the policy of specified port

To display the access control list, use the following command.

Following example shows how to configure an access control list, then shows the list entries.

SWITCH (bridge)# acl create global 00:00:00:00:11:11

SWITCH (bridge)# acl create port 4/1/1 00:00:00:00:00:01

SWITCH (bridge)# show acl global

----------------------------

MAC address Deny

----------------------------

00:00:00:00:11:11 enable

SWITCH (bridge)# show acl port

-------------------------

Port MAC address

-------------------------

4/1/1 00:00:00:00:00:01

SWITCH (bridge)#


acl {create | delete} globalMAC-ADDR

Bridge Configure a global access control list (MAC ACL) entries:create: creates a new ACL entry.delete: deletes an ACL entry.MAC-ADDR: enter the value for MAC address.(XX:XX:XX:XX:XX:XX)

acl {create | delete} port PORTS MAC-ADDR

Configure port access control list (MAC acl) entries:create: creates a new ACL entry.delete: deletes an ACL entry.PORTS: enter the port number.MAC-ADDR: enter the value for MAC address.(XX:XX:XX:XX:XX:XX)


show acl global PrivilegedGlobalBridge

Show the global access control list (MAC acl) entries.

show acl global MACADDR Show the global access control list (MAC acl) entries, enter the MAC address value.

show acl port Show port access control list (MAC acl) entries.

show acl port PORT Show port access control list (MAC acl) entries, enter the port number.

show acl port PORT MACADDR Show port access control list (MAC acl) allowed entries:PORT: enter the port number.MAC-ADDR: enter the value for MAC address.(XX:XX:XX:XX:XX:XX)

173


Id:0900d8058018f37e

5.6.5 MAC TableA dynamic MAC address is automatically registered in the MAC table, and it is removed if there is no access to/from the network element corresponding to the MAC address during the specified MAC aging time. On the other hand, a static MAC address is manually registered by user. This will not be removed regardless of the MAC aging time before removing it manually.

To manage a MAC table in the DSLAM, use the following command.

To remove the registered dynamic MAC addresses from the MAC table, use the follow-ing command.

To remove the static MAC addresses manually registered by user from the MAC table, use the following command.


mac NAME PORT MAC-ADDR Bridge Specify a static MAC address in the MAC table.NAME: bridge namePORT: port numberMAC-ADDR: MAC address

mac learning-uplink {enable | disable}

Enable/disable MAC learning option (only uplinks affected).

mac aging-time <1-100000> Specify MAC aging time:1-100000: aging time (default: 300)


clear mac

Bridge

Clear all dynamic MAC addresses.

clear mac NAME Clear dynamic MAC addresses, enter the bridge name.

clear mac NAME PORT Clear dynamic MAC addresses.NAME: bridge namePORT: port number

clear mac NAME PORTMAC-ADDR

Clear dynamic MAC addresses.NAME: bridge namePORT: port numberMAC-ADDR: MAC address


no mac

Bridge

Delete all static MAC addresses.

no mac NAME Delete static MAC addresses, enter the bridge name.

no mac NAME PORT Delete static MAC addresses.NAME: enter the bridge name.PORT: enter the port number.

no mac NAME PORT MACADDR Delete a specified static MAC address.NAME: enter the bridge name.PORT: enter the port number.MACADDR: enter the MAC address.

174


Id:0900d8058018f37e

Port Configuration

To display the MAC table in the DSLAM, use the following command.

g There are more than a thousand of MAC addresses in MAC table. And it is difficult to find information you need at one sight. So, the system shows a certain amount of addresses displaying –more– on standby status. Press any key to search more. After you find the information, you can go back to the system prompt without display-ing the other table by pressing <q>

Following example shows how to specify a static MAC address in the MAC table and how to delete static MAC addresses.

SWITCH(bridge)# mac br10 0/4 00:00:00:00:00:01

SWITCH(bridge)# show mac vlan 10

===============================================================

port mac addr permission in use

===============================================================

0/ 4 00:00:00:00:00:01 static 0.00

SWITCH(bridge)# no mac br10

SWITCH(bridge)# show mac vlan 10

===============================================================

port mac addr permission in use

===============================================================

SWITCH(bridge)#

5.6.6 Port MirroringTo configure the mirror monitor port, use the following command. Note that to enable the mirror function, you need to create a corresponding rule to monitor the traffic you want to control.


show mac port PORT


Show switch MAC address, selection by port number (sub-scriber port only):PORT: port number

show mac vlan NAME Show switch MAC address, selection by VLAN (MAC address learned at IU only are invisible):NAME: VLAN name

show mac vlan NAME PORT Show switch MAC address, selection by VLAN (MAC address learned at IU only are invisible):NAME: VLAN namePORT: port number


bridgebase mirror PORT Bridge Set the mirroring port. Select uplink port number.

no bridgebase mirror Deletes the mirror port.

175


Id:0900d8058018f37e

5.6.7 Virtual Local Area Network (VLAN)The first step in setting up your bridging network is to define VLAN on your IP-DSLAM. VLAN is a bridged network that is logically segmented by customer or function. Each VLAN contains a group of ports called VLAN members. On the VLAN network, packets received on a port are forwarded only to the ports that belong to the same VLAN as the receiving port. Network devices in different VLANs cannot communicate with one another without a Layer 3 switching device to route traffic between the VLANs. VLAN reduces the amount of broadcast traffic so that flow control could be realized. It also has security benefits by completely separating traffics between different VLANs.

The IEEE 802.1q based ports on the DSLAM support simultaneously tagged and untagged traffic. An 802.1q port is assigned a default port VLAN ID (PVID), and all untagged traffic is assumed to belong to the default PVID. Thus, the ports participating in the VLANs accept packets bearing VLAN tags and transmit them to the port VLAN ID.

This chapter contains the following sections:

• Creating VLAN • Displaying VLAN • Deleting VLAN • Specifying PVID • Assigning Port to VLAN • VLAN Port Priority • VLAN Multicast Permission • VLAN Default Gateway • Change Common VLAN to Management VLAN • Configuring VLAN Servicetype/Cross-connect

5.6.7.1 Creating VLANTo configure VLAN, use the following command.

g VLAN 1 & 4094 are default values, and cannot be created and deleted


vlan create VLANS

Bridge

Create new VLAN by assigning VLAN ID:VLANS: VLAN ID (1-4094)

vlan name VLANS {none | NAME}

Configure VLAN name:VLANS: VLAN IDs (e.g. 101-148, 1000)NAME: VLAN name.

host-vlan VLANID (DTVLANID|) Global Add host to a specified VLAN, VLANID:<1-4093>DTVLANID:doubletag vlanid.

host-vlan OUTERVLANID (INNERVLANID|)

Global Configure VLANs which are assigned to the host, OUTERVLANID: add host to outer vlan id (without inner vlan id means single tagged host-vlan)INNERVLANID: add host to inner vlan id (means double tagged host-vlan),

host-vlan dsl (enable|disable) Global Configure behaviour of host-vlan command. enable:DSL ports and the host can belong to the same VLANs (configuration via DSL port possible)disable:DSL ports and host must not belong to the same VLANs (configuration via DSL port not allowed)

176


Id:0900d8058018f37e

Port Configuration

g The variable VLANS is a particular set of bridged interfaces. Frames are bridged only among interfaces in the same VLAN.

5.6.7.2 Displaying VLANTo display a configuration of VLAN, use the following command.

5.6.7.3 Deleting VLANTo delete VLAN, use the following command.

g All ports must be removed from VLAN before you delete VLAN.

The following is an example of creating, displaying and deleting VLAN.

dslam9(bridge)# vlan create 10

dslam9(bridge)# show vlan

u: untagged port, t: tagged port

---------------------------------------------------------------

| Port:| 1 2 3 4 5 6 7

|123456789012345678901234567890123456789012345678901234567890123456789012

VlanID|iu/vcc|

---------------------------------------------------------------

1 |UP+LAG|......

----------------------------------------------------------------

10 |UP+LAG|......

---------------------------------------------------------------

4094 |UP+LAG|......


show vlan [VLANS]


Show the configuration for specific VLAN, enter VLAN ID.

show vlan status Show a status of all the VLANs.

show port-in-vlan PORTS List ports VLAN, enter the port number. (e.g. 1/1-1/48, 0/1, 1/2/1)

show host-vlan Global Show assignment of host to a VLAN.


no vlan VLANS Bridge Delete VLAN, enter the VLAN ID to be deleted.

no vlan name VLANS Delete VLAN configuration, select VLAN IDs. (e.g. 101-148, 1000)

no host-vlan VLANID (DTV-LANID|)

Global Remove host from a selected VLAN, VLANID:<1-4093>DTVLANID:doubletag vlanid.

177


Id:0900d8058018f37e

----------------------------------------------------------------

dslam9(bridge)# no vlan 10

5.6.7.4 Specifying PVIDEach port has a default PVID 1. You can also configure a PVID according to the need. To configure a PVID in a port, use the following command.

In doubletag mode, you can define PVID for inner tag.

The following is an example of creating and displaying PVID.

dslam9(bridge)# bridgeport 0/4 pvid 10

dslam9(bridge)# show pvid

---------------------------------------------------------------

iu | Port mapping (port/vcc)

| 1/1 1/2 1/3 1/4 1/5 1/6 1/7 1/8 2/1 2/2 2/3 2/4 2/5 2/6 2/7 2/8

| ...

| 71/1 71/2 71/3 71/4 71/5 71/6 71/7 71/8 72/1 72/2 72/3 72/4 72/5 72/6 72/7 72/8

---------------------------------------------------------------

0 | 1 - - - - - - - 1 - - -

| 1 - - - - - - - 10 - - -

| 1 - - - - - - - 1 - - -

---------------------------------------------------------------

4 | 401 401 - - - - - - 402 - - -

| 403 - - - - - - - 404 - - -

5.6.7.5 Assigning Port to VLANTo assign a port to VLAN, use the following command.


bridgeport PORTS pvid PVIDS Bridge Configure a PVID:PORTS: port number (e.g. 1/1/1-1/72/1, 0/1)PVIDS: PVIDs (e.g. 101-172,101, multiple entries possi-ble)


bridgeport PORTS inner-pvid PVIDS

Bridge Define pvid for inner tag in doubletag mode.

178


Id:0900d8058018f37e

Port Configuration

The following is an example.

dslam9(bridge)# vlan add 10 0/4 tagged

dslam9(bridge)# vlan add 10 0/3 tagged 4/1/1 untagged

dslam9(bridge)# show vlan

u: untagged port, t: tagged port

---------------------------------------------------------------

| Port:| 1 2 3 4 5 6 7 | |123456789012345678901234567890123456789012345678901234567890123456789012

VlanID|iu/vcc|

---------------------------------------------------------------

1 |UP+LAG|......

---------------------------------------------------------------

10 |04/1 |u...................................................

. |UP+LAG|..tt..

---------------------------------------------------------------

4094 |UP+LAG|......

---------------------------------------------------------------

dslam9(bridge)# vlan del 10 0/4

5.6.7.6 VLAN Port PriorityTo assign VLAN port priority, use the following command.

5.6.7.7 VLAN Multicast PermissionTo enable/disable a multicast permission, use the following command.


vlan add VLANS PORTS {tagged | untagged} [PORTS {tagged | untagged}]

Bridge Assign a port to VLAN:VLANS: enter the VLAN ID.PORTS: port number (e.g. 1/1/1-1/48/1)

vlan del VLANS PORTS Delete associated ports from specified VLAN:VLANS: VLAN ID.PORTS: port number to be deleted


bridgeport PORTS priority PRIORITY

Bridge Configure port priority for a specified port:PORTS: port number (e.g. 1/1/1-1/48/1)PRIORITY: priority value (0-7).

179


Id:0900d8058018f37e

5.6.7.8 VLAN Multicast-floodingTo configure multicast-flooding, use the following command.

5.6.7.9 VLAN MAC Address TranslationTo configure flooding of mac address translation, use the following command.

5.6.7.10 VLAN Default GatewayTo configure a VLAN default gateway, use the following command.

5.6.7.11 Change Common VLAN to Management VLANTo change common VLAN to management VLAN, use the following command.

To change management VLAN to common VLAN, use the following command.


vlan multicast-permission VLANS {enable | disable}

Bridge Configure multicast permission:VLANS: VLAN IDs (e.g. 101-148, 1000)


vlan multicast-flooding VLANS {off | on}

Bridge Configure flooding of multicast packages:VLANS: VLAN IDs (e.g. 101-148, 1000) off: switch ip-routing off,on: switch ip-routing on.


vlan mac-address-trans VLANS (off|on)

Bridge Configure flooding of mac address translation,VLANS: vlan ids (e.g. 101-148,1000)",off: switch mat OFF.on: switch mat ON.)


vlan default-gateway VLANS{DEFGATEWAY | none}

Bridge Configure default gateway:VLANS: VLAN IDs (e.g. 101-148, 1000)DEFGATEWAY: default gateway (e.g. 10.0.0.1)

no vlan default-gateway VLANS Delete a default gateway:VLANS: VLAN IDs (e.g. 101-148, 1000)


vlan mgmtVLANS Bridge Change common VLAN to management VLAN:VLANS: VLAN IDs (e.g. 101-148, 1000)


no vlan mgmtVLANS Bridge Change management VLAN to common VLAN:VLANS: VLAN IDs (e.g. 101-148, 1000)

180


Id:0900d8058018f37e

Port Configuration

5.6.7.12 Configuring VLAN Servicetype/Cross-connectTo configure a VLAN default gateway, use the following command.

Following example shows how to configure the vlan cross-connect mode. A VLAN must be created (e.g. outer VLAN ID 1000). The port in the CXU (e.g. port 0/1) must be assigned tagged to this VLAN. Also the port in the IU (e.g. port 1/1/1) must be assigned to this VLAN. An inner VLAN ID must be defined (e.g. 200):

SWITCH>enable


SWITCH(config)# bridge

SWITCH(bridge)# bridgebase taggingmode double

SWITCH(bridge)# vlan create 1000

SWITCH(bridge)# vlan servicetype 1000 doubletagged


vlan service-tag-only VLANS Bridge configure vlan into service tag only in double tagging mode. VLANS: Vlan IDs.

no vlan service-tag-only VLANS cancel the vlan configuration- service tag only in double tagging mode. VLANS: Vlan IDs.


slot SLOTNUMBER limited-rate RATE burst-rate BURST

Global

Bridge

Configure slot rate.SLOTNUMBER: number of the Slot (e.g s1, s2),RATE: limited rate in kbits/sec,BURST: burst rate in kbits/sec.

show slot SLOTNUMBER limited-rate

Show slot rate.SLOTNUMBER: Number of the Slot (e.g s1, s2).

slot SLOTNUMBER tx-pause (enable|disable) rx-pause (enable|disable)

Configure slot rate:SLOTNUMBER: number of the Slot (e.g s1, s2).tx-pause: tx flow contrl,enable: enable flow contrl,disable: disable flow control,rx-pause: rx flow con-trl,enable: enable flow contrl,disable: disable flow control

show slot SLOTNUMBER flow-ctrl

Show slot rate:SLOTNUMBER: number of the Slot (e.g s1, s2).


vlan servicetype VLANS (double-tagged|vlanstacked)

Bridge Configure vlan servicetype.servicetype is a tagging and striping methods that can be used in the double tagging mode.doubletagging: the two tags are added and stripted at the DSLAM. vlanstacking: only a service VLAN tag is added and stripted at the DSLAM.

vlan cross-connect VLANS (off|on)

Configure vlan cross-connect mode. on: all multicast/broadcast/unicast frames are flooded in the VLAN and no mac learning. off: this is a normal mode.

181


Id:0900d8058018f37e

SWITCH(bridge)# vlan add 1000 0/1 tagged

SWITCH(bridge)# vlan add 1000 1/1/1 untagged

SWITCH(bridge)# bridgeport 1/1/1 pvid 1000

SWITCH(bridge)# bridgeport 1/1/1 inner-pvid 200

SWITCH(bridge)# port lre 1/1 enable

SWITCH(bridge)# vlan cross-connect 1000 on

The cross-connect mode is activ after the last command.

5.6.8 Broadcast Storm ControlThe hiX 56xx system supports broadcast storm control for broadcast packet. Broadcast-storm is overloading situation of broadcast packets since they need major part oftrans-mit capacity. Broadcast storm may be often occurred because of difference of versions.For example, when there are mixed 4.3 BSD and 4.2 BSD, or mixed Appletalk-phase I and phase II in TCP/IP, storm may be occurred. Also, when information ofrouting protocol regularly transmitted from router is wrong recognized by system, whichdoes not support the protocol, broadcast storm may be occurred. Broadcast stormcontrol is operated by; system counts how many broadcast packets are there for asecond and if there are packets over configured limit, they are discarded.

The IP-DSLAM provides not only broadcast storm but also control of multicast and DLF(destination lookup fail) storm. In order to use control of multicast and DLF storm, useone of the following command. Then all configurations of broadcast storm control will beequally applied to all VLANs.In order to enable multicast storm control and DLF storm control, use one of the followingcommand.

g The default is enabled DLF storm control and disabled multicast storm control.


storm-control {broadcast |mul-ticast | dlf} RATE PORTS

Bridge Enables broadcast, multicast, or DLF storm control respectively in a port with a user defined rate. Rate value is from 1 to 262142 for FE, and from 1 to 2097150 for GE, select the port number.

no storm-control {broadcast |multicast | dlf} PORTS

Disables broadcast, multicast, or DLF storm control respectively, select the port number.

show storm-control Privileged exec/Con-fig/ Bridge

Displays a configuration of storm control.

show storm-controlPORT Displays a configuration of specified storm control, select the port number.

bridgebase multicast-filter {enable|dis-able|upstream|down-stream|updownstream}

Bridge Enable/disable multicast Destination-Lockup-Failure filter.

enable: enable multicast DLF filter (destination-mac unknown multicast towards subscriber ports blocked),disable: disable multicast DLF filter (destination-mac unknown multicast towards subscriber ports allowed)upstream: enable multicast DLF filter (destination-mac unknown multicast from subscriber ports blocked)downstream: enable multicast DLF filter (destination-mac unknown multicast towards subscriber ports blocked)updownstream: enable multicast DLF filter (destination-mac unknown multicast from and towards subscriber ports blocked)

182


Id:0900d8058018f37e

Port Configuration

5.6.9 Spanning Tree Protocol (STP)The local area network (LAN), which is composed of double paths like token ring, has the advantage that it is possible to access in case of disconnection with one path. However there is another problem called a loop when you always use the double paths.

The loop may occur when double paths are used for link redundancy between switches and one sends unknown unicast or multicast packet that causes endless packet floating on the LAN like loop topology. That superfluous traffic eventually can result in network fault. It causes superfluous data transmission and network fault.

The spanning-tree protocol (STP) is the function to prevent the loop in LAN with more than two paths and to utilize the double paths efficiently. It is defined in IEEE 802.1d. If the STP is configured in the system, there is no loop since it chooses more efficient path of them and blocks the other path.

Meanwhile, the rapid spanning-tree protocol (RSTP) defined in IEEE 802.1w dramati-cally reduces the time of network convergence on the spanning-tree protocol (STP). It is easy and fast to configure new protocol. The IEEE 802.1w also supports backward compatibility with IEEE 802.1d.

The hiX 5635 provides STP, RSTP and MSTP. For more detail description of STP and RSTP, refer to the following sections.

5.6.9.1 STP OperationThe 802.1d STP defines port state as blocking, listening, learning and forwarding. When STP is configured in LAN with double-path, switches exchange their information includ-ing bridge ID.

It is named as BPDU (Bridge Protocol Data Unit). Switches decide port state based on exchanged BDPU and automatically decide optimized path to communicate with root switch as standard of spanning-tree.

Root Switch

The critical information to decide root switch is bridge ID. Bridge ID is composed of two bytes-priority and six bytes-mac address. The root switch is decided with the lowest bridge ID.

After configuring STP, switches exchange their information. The priority of SWITCH A is 8, the priority of SWITCH B is 9 and the priority of SWITCH C is 10. In this case, SWITCH A is automatically configured as root switch.

Designated Switch

After deciding root switch, when SWITCH A transmits packet to SWITCH C, SWITCH A compares exchanged BDPU to decide path. The critical information to decide path is path-cost. Path-cost depends on transmit rate of LAN interface and path with lower path-cost is selected.

The standard to decide designated switch is total root path-cost which is added with path-cost to root. Path-cost depends on transmit rate of switch LAN interface and switch with lower path-cost is selected to be designated switch.

g The standard to decide designated switch is total root path-cost which is added with path-cost to root. Switch with lower path-cost is selected to be designated switch. When root path-costs are same, bridge ID is compared.

Designated Port and Root Port

183


Id:0900d8058018f37e

Except root port in each switch, selected port to communicate is designated port. The other ports, except root port and designated port, are named blocked port.

Port Priority

Meanwhile, when path-costs of two paths are same, port-priority is compared. As the below picture, suppose that two switches are connected. Since the path-costs of two paths are 100, same, their port priorities are compared and port with smaller port priority is selected to transmit packet.

All these functions are automatically performed by BDPU, which is the information of switch. It is also possible to configure BDPU to change root switch or path manually.

5.6.9.2 RSTP OperationWhen STP or RSTP is configured on network where Loop can be created, result of the last topology is same. However, RSTP is more rapidly progressed than STP at the stage of reaching to the last topology. This section describes how the RSTP more improved than STP works. It contains the below sections.

– Port States– BPDU Policy– Rapid Network Convergence– Compatibility with 802.1d.

Port States

RSTP defines port states as discarding, learning and forwarding. Blocking of 802.1d and listening is combined into discarding. Same as STP, root port and designated port are decided by port state. But existing blocked port is divided into alternate port and backup port. Alternate port means a port blocked by receiving BDPU of priority of high numerical value from another network element, and backup port means a port blocked by receiving BDPU of priority of high numerical value from another port of same equipment.

The difference of between alternate port and backup port is that alternate port can alter-nate path of packet when there is a problem between Root switch and SWITCH C but Backup port cannot provide stable connection in that case.

BPDU Policy

802.1d forwards BDPU following Hello-time installed in root switch and the other switch except root switch its own BDPU only when receiving BDPU from root switch. However, in 802.1w not only root switch but also all the other switches forward BDPU following Hello-time. BDPU is more frequently changed than the interval root switch exchanges, but with 802.1w it becomes faster to be master of the situation of changing network.

By the way, when low BDPU is received from root switch or designated switch, it is immediately accepted. For example, suppose that root switch is disconnected to SWITCH B. Then, SWITCH B is considered to be root because of the disconnection and forwards BDPU.

However, SWITCH C recognizes root existing, so it transmits BDPU including informa-tion of root to Bridge B. Thus, SWITCH B configures a port connected to SWITCH C as new root port.

Rapid Network Convergence

A new link is connected between SWITCH A and root. Root and SWITCH A is not directly connected, but indirectly through SWITCH D. After SWITCH A is newly

184


Id:0900d8058018f37e

Port Configuration

connected to root, packet cannot be transmitted between the ports because state of two switches becomes listening, and no loop is created.

In this state, if root transmits BDPU to SWITCH A, SWITCH A transmits new BDPU to SWITCH A and SWITCH C, switch C transmits new BDPU to SWITCH D. SWITCH D, which received BDPU from SWITCH C makes port connected to SWITCH C Blocking state to prevent loop after new link.

This is very an epochal way of preventing loop, the matter is that communication is dis-connected during two times of BDPU Forward-delay till a port connected to switch D and SWITCH C is blocked.

Then, right after the connection, it is possible to transmit BDPU although packet cannot be transmitted between switch A and root.

SWITCH A negotiates with root through BDPU. To make the link between SWITCH A and root, port state of non-edge designated port of SWITCH is changed to blocking. Although SWITCH A is connected to root, loop will not be created because SWITCH A is blocked to SWITCH Band C. In this state, BDPU form root is transmitted to SWITCH B and C through SWITCH A. To configure forwarding state of SWITCH A, SWITCH A negotiates with SWITCH B and SWITCH A does with SWITCH C.

SWITCH B has only edge-designated port. Edge designated does not cause loop, so it is defined in 802.1w to be changed to forwarding state. Therefore, SWITCH B does not need to block specific port to forwarding state of SWITCH A. However since SWITCH C has a port connected to SWITCH D, you should make blocking state of the port.

It is same with 802.1d to block the connection of SWITCH D and SWITCH C. However, 802.1w does not need any configured time to negotiate between switches to make for-warding state of specific port. So it is very fast progressed. During progress to forward-ing state of port, listening and learning are not needed. These negotiations use BDPU.

Compatibility with 802.1d

RSTP internally includes STP, so it has compatibility with 802.1d. Therefore, RSTP can recognize BDPU of STP. But, STP cannot recognize BDPU of RSTP. For example, assume that SWITCH A and SWITCH B are operated as RSTP and SWITCH A is con-nected to SWITCH C as designated switch. Since SWITCH C, which is 802.1d ignores RSTP BDPU, it is interpreted that switch C is not connected to any switch or segment.

However, SWITCH A converts a port received BDPU into RSTP of 802.1d because it can read BDPU of SWITCH C. Then SWITCH C can read BDPU of SWITCH A and accepts SWITCH A as designated switch.

5.6.9.3 MSTP OperationTo operate the network more effectively, hiX 5635 uses MSTP (Multiple Spanning-Tree Protocol). It consists of the network with VLAN subdividing the existing LAN domain log-ically and configures the route by VLAN or VLAN group instead of the existing routing protocol.

Operation

Here explains how STP/MSTP differently operates on the LAN. Suppose to configure 100 VLANs from Switch A to B, C. In case of STP, there’s only a STP on all of the VLANs and it does not provide multiple instances.

While the existing STP is a protocol to prevent Loop in a LAN domain establishes STP per VLAN in order to realize routing suitable to VLAN environment.

185


Id:0900d8058018f37e

It does not need to calculate all STP for several VLAN so that traffic overload could be reduced. By reducing unnecessary overload and providing multiple transmission route for data forwarding, it realizes load balancing and provides many VLAN through Instances.

MSTP

In MSTP, VLAN is classified to groups with the same Configuration ID. Configuration ID is composed of Revision name, Revision, VLAN map. Therefore in order to have same configuration ID, all of these three conditions should be the same. VLAN classified with the same configuration ID is called MST region. In a region, there’s only a STP so that it is possible to reduce the number of STP comparing to PVSTP. There’s no limitation for region in a network environment but it is possible to generate Instances up to 32. Therefore instances can be generated from 1 to 32. Spanning-tree which operates in each region is IST (Internal Spanning-Tree). CST is applied by connecting each spanning-tree of region. Instance 0 means that there is not any Instance generated from grouping VLAN, that is, it does not operate as MSTP. Therefore Instance 0 exists on all the ports of the equipment. After starting MSTP, all the switches in CST exchanges BPDU and CST Root is decided by comparing their BPDU. Here, the switches that don’t operate with MSTP have instance 0 so that they can also join BPUD exchanges. The operation of deciding CST Root is CIST (Common & Internal Spanning-Tree).

In CST, A and B are the switches operating with STP and C, D and, E are those oper-ating with MSTP. First, in CST, CIST is established to decide CST Root. After CST root is decided, the closest switches to CST root is decided as IST root of the region. Here, CST root in IST is IST root.

In above situation, if B operates with MSTP, B will send it’s BPDU to CST root and IST root in order to request itself to be CST root. However, if any BPDU having higher priority than that of B is sent, B cannot be CST root.

For the hiX 5635, the commands configuring MSTP are also used to configure STP and RSTP.

5.6.9.4 Configuring STP/RSTP/MSTP ModeFor hiX 5635, in order to configure STP, first of all, configure force-version in order to decide the mode.

To decide force-version, use the following command.

To clear STP configuration from the DSLAM, use the following command.


stp force-version {stp | rstp | mstp} Bridge Configure Force-version in the bridge:stp: STP (802.1d-1998)rstp: Rapid STP (802.1d-2004/802.1w)mstp: Multiple STP (802.1Q-2003/802.1s)


no stp force-version Bridge Clear force-version configuration.

186


Id:0900d8058018f37e

Port Configuration

5.6.9.5 Configuring STP/RSTP/MSTP

Activating STP/RSTP/MSTPTo enable/disable STP, RSTP and MSTP in the force-version, use the following command.

Even though STP function does not operate, loop event does not occur in a DSLAM which belongs to the non-dual path LAN environment.

Root SwitchTo establish STP, RSTP or MSTP function, first of all, root switch should be decided. In STP or RSTP, it is root switch and in MSTP it is IST root switch. Each switch has its own bridge ID and root switch on the same LAN is decided by comparing their bridge IDs. However, the user can change root switch by configuring priority for it. The switch having lowest priority is decided as root switch.

To change root switch by configuring priority for it, use the following commands.

Here is an example for the stp mst priority command.

SWITCH(bridge)# stp mst priority 0 8192SWITCH(bridge)# show stp mst 0 allCST Root2000.080006261d2fmax age 20(s) hello time 4(s) forward delay 15(s) max hops 20-------------------- MST00 --------------------IST Root2000.080006261d2fvlans : 51-4096bridge id2000.080006261d2fdesignated root2000.080006261d2froot port 0/0 path cost 0 bridge topology change time 0:00:00 bridge topology change count 0 bridge topology change flag false Port id AdminCost Cost Role State UpTime Attribute------------------------------------------------------------------------------


stp mst {enable | disable} Bridge Enable/disable STP, RSTP or MSTP function.

stp mst reset-tccount MSTID_RANGE

Reset “bridge topology change” counts, enter the instance number <1-32>.


stp mst priority MSTID_RANGE <0-61440>

Bridge Configure the priority of the switch:MSTID_RANGE: select instance number 0.0-61440: priority value in steps of 4096 (default: 32768)

no stp mst priority MSTID_RANGE Clear the Priority of the switch, enter the instance number.

187


Id:0900d8058018f37e

0/12001020000designatedforwarding0:00:00P2P 0/28002020000backupblocking0:00:00P2P 0/38003020000designatedforwarding0:00:00P2P 0/48004020000backupblocking0:00:00P2P 0/580050-disabledisabled0:00:00- 0/680060-disabledisabled0:00:00- SWITCH(bridge)#

Path-costAfter deciding the root switch, you need to decide to which route you will forward the packet. To do this, the standard is path-cost.

Generally, the path cost depends on the transmission speed of LAN interface in the DSLAM. The following table shows path cost according to transmit rate of LAN interface.

When the route decided by path-cost gets overloading, you would better take another route. Considering these situations, it is possible to configure path-cost of root port so that user can configure route manually.

To configure path-cost, use the following command.

Transmit Rate Path-cost

4M 250

10M 100

100M 19

1G 4

10G 2

Table 21 STP Path-cost

Transmit Rate Path-cost

4M 20000000

10M 2000000

100M 200000

1G 20000

10G 2000

Table 22 RSTP Path-cost


stp mst path-cost MSTID_RANGE PORTS<1-200000000>

Bridge Configure path-cost to configure route:MSTID_RANGE: select instance number (0-32).PORTS: select the port number.1-...: enter the path cost value.

no stp mst path-cost MSTID_RANGE PORTS

Clear the configured path-cost, enter the instance number and the port number.

188


Id:0900d8058018f37e

Port Configuration

MST RegionIf MSTP is established in hiX 5635, decide which MST region the switch is going to belong to by configuring MST configuration ID. Configuration ID contains region name, revision, VLAN map.

To set configuration ID, use the following command.

g In case of configuring STP or RSTP, you don’t need to set configuration ID. If you try to set configuration ID on STP or RSTP, an error message will be displayed.

To delete configuration ID, use the following command.

After configuring configuration ID in hiX 5635, you should apply the configuration to the switch. After changing or deleting the configuration, you must apply it to the switch. If not, it is not injected into the switch.

To apply the configuration to the switch after configuring configuration ID, use the fol-lowing command.

g After deleting the configured configuration ID, apply it to the switch using the above command.


stp mst config-id name NAME Bridge Designate the name for the region:name: set the MST region name.NAME: enter name to give the MST region.

stp mst config-id map <1-32> VLAN-RANGE

Configure the range of VLAN that is going to be grouping as a region:1-64: select an instance ID number.VLAN-RANGE: enter a number of the VLANs to be mapped to the specified instance.

stp mst config-id revision <0-65535> Configure the switches in the same MST boundary as same number:0-65535: set the MST configuration revision number.


no stp mst config-id Bridge Delete the entire configured configuration ID.

no stp mst config-id name Delete the name of region, enter the MST region name.

no stp mst config-id map <1-32> VLAN-RANGE

Delete entire VLAN-map or part of it, select the instance ID number and the number of the VLANs to remove from the specified instance.

no stp mst config-id map <1-32> Delete entire VLAN-map or part of it, select the instance ID number.

no stp mst config-id revision Delete the configured revision number.


stp mst config-id commit Bridge Commit the configuration of the region.

189


Id:0900d8058018f37e

Displaying ConfigurationTo display the configuration after configuring STP, RSTP and MSTP, use the following command.

g With the show stp command, it is possible to display the information for STP, RSTP and MSTP. How to distinguish them is to check which one is marked on the mode.

g In case STP or RSTP is configured in hiX 5635, you should configure MSTID_RANGE as 0.

Here is an example for show stp mst command.

SWITCH(bridge)# show stp mst 0,2 allCST Root8000.080006261d2fmax age 20(s) hello time 4(s) forward delay 15(s) max hops 20-------------------- MST00 --------------------IST Root8000.080006261d2fvlans : 51-4096bridge id8000.080006261d2fdesignated root8000.080006261d2froot port 0/0 path cost 0 bridge topology change time 0:00:00 bridge topology change count 0 bridge topology change flag false Port id AdminCost Cost Role State UpTime Attribute------------------------------------------------------------------------------ 0/18001020000designatedforwarding0:00:00P2P 0/28002020000backupblocking0:00:00P2P 0/38003020000designatedforwarding0:00:00P2P 0/48004020000backupblocking0:00:00P2P 0/580050-disabledisabled0:00:00- 0/680060-disabledisabled0:00:00– -------------------- MST02 --------------------IST Root8000.080006261d2fvlans : 1-50bridge id8002.080006261d2fdesignated root8002.080006261d2froot port 0/0 path cost 0 bridge topology change time 0:00:00


show stp PrivilegedGlobalBridge

Show the configuration of STP/RSTP/MSTP.

show stp mst Show the configuration when it is configured as MSTP.

show stp mst MSTID_RANGE Show the configuration of specific Instance, enter the instance number.

show stp mst MSTID_RANGE {all | PORTS} [detail]

Show the configuration of the specific Instance for the ports:MSTID_RANGE: select the MST instance number.all: select all ports.PORTS: select port number.detail: show detail information (optional).

190


Id:0900d8058018f37e

Port Configuration

bridge topology change count 0 bridge topology change flag false Port id AdminCost Cost Role State UpTime Attribute------------------------------------------------------------------------------ 0/18001020000designatedforwarding0:00:00P2P 0/28002020000backupblocking0:00:00P2P 0/38003020000designatedforwarding0:00:00P2P 0/48004020000backupblocking0:00:00P2P 0/580050-disabledisabled0:00:00- 0/680060-disabledisabled0:00:00– SWITCH(bridge)# show stp mst 2 0/1 detailCST Root8000.080006261d2fmax age 20(s) hello time 4(s) forward delay 15(s) max hops 20-------------------- MST02 --------------------IST Root8000.080006261d2fvlans : 1-50bridge id8002.080006261d2fdesignated root8002.080006261d2froot port 0/0 path cost 0 bridge topology change time 0:00:00 bridge topology change count 0 bridge topology change flag false port 0/1 port id1001 stateforwardingroledesignated designated root8002.080006261d2fpath cost5000 designated bridge8002.080006261d2message age timer0.0 designated port1001forward delay timer0.00 designated cost0 flagsP2P

SWITCH(bridge)#

To display a configured MSTP of the DSLAM, use the following command.

For example, after the user configures configuration ID, if you apply it to the DSLAM with the stp mst config-id commit command, you can see configuration ID with the show stp mst config-id current and show stp mst config-id pending command.

However, if the you do not use the stp mst config-id commit command to apply the con-figuration to the DSLAM, the configuration could be checked with the show stp mst config-id pending command and you can check the configuration with the show stp mst config-id current command.


show stp mst config-id {current | pending}


Show the MSTP configuration identifier:current: show the current configuration as it is used to run MST.pending: show the edited configuration.

191


Id:0900d8058018f37e

STP PortsThis feature allows administrator to decide whether the port can be managed by STP or not.

To set port configuration, use the following command.

g When the administrator deletes a port from STP, this port is not managed by STP, but packet forwarding can be available.

To display the managed ports, use the following command to show the port-set list.

Here is an example for the show stp port and stp port del command.

SWITCH(bridge)# show stp port---------------------------------------------------------------- Port STP Portset-status MAC Admin-status MAC Oper-status---------------------------------------------------------------- 6/1addedenabledOn 6/2addedenabledOn 6/3addedenabledOn 6/4addedenabledOn 6/5addedenabledOn 6/6addedenabledOff----------------------------------------------------------------Default portset bitmask:0x3fCurrent portset bitmask:0x3fSWITCH(bridge)# stp port del 6/3SWITCH(bridge)# show stp port---------------------------------------------------------------- Port STP Portset-status MAC Admin-status MAC Oper-status---------------------------------------------------------------- 6/1addedenabledOn 6/2addedenabledOn 6/4addedenabledOn 6/5addedenabledOn


stp port {add | del} PORTS Bridge Set portset to be managed by STP:add: add port number to portset (default: all ports are added).del: delete port number from portset.PORTS: select slot/port number (for STP slot number always 0).


show stp port PrivilegedGlobalBridge

Show the portset list to be managed by STP.

192


Id:0900d8058018f37e

Port Configuration

6/6addedenabledOff----------------------------------------------------------------Default portset bitmask:0x3fCurrent portset bitmask:0x3fSWITCH(bridge)#

MSTP ProtocolMSTP protocol has a backward compatibility with STP and RSTP. If another bridge runs with STP mode and send BDPU version of STP or RSTP, MSTP automatically changes to STP mode. However, STP mode cannot be changed to MSTP mode automatically. If administrator wants to change network topology to MSTP mode, administrator has to clear previous detected protocol manually.

To configure the protocol, use the following command.

Point-to-point MAC ParametersThe internal sublayer service makes available a pair of parameters that permit inspec-tion of, and control over, the administrative and operational state of the point-to-point status of the MAC entity by the MAC relay entity.

To configure the point-to-point status, use the following command.

true’ means, the MAC is connected to a point-to-point LAN, i.e., there is at most one system attached to the LAN. ‘false’ means, the MAC is connected to a non point-to-point LAN, i.e., there can be more than one systems attached to the LAN.

To delete the point-to-point configuration, use the following command.

Edge PortsEdge ports are used for connecting end devices. There are no switches or spanning-tree bridges after the edge port.


stp clear-detected-protocol PORTS Bridge Clear detected protocol:PORTS: select the port number.


stp point-to-point-mac PORTS {auto | force-true | force-false}

Bridge Set point-to-point MAC:PORTS: select the port numberauto: auto detectForce-true: force to point-to-point MACforce-false: force to shared MAC (not point-to point MAC)


no stp point-to-point-mac PORT Bridge Deletes point-to-point MAC configuration: PORT: select the port number.

193


Id:0900d8058018f37e

To configure edge port mode, use the following command.

To delete the edge port mode, use the following command.

5.6.9.6 BPDU ConfigurationBPDU is a transmission message in LAN in order to configure and maintain the config-uration for STP/RSTP/MSTP. DSLAMs in which STP is installed to exchange their infor-mation BDPUs to find the best path. MSTP BPDU is the general STP BPDU having additional MST data on it’s end. MSTP part of BPDU does not rest when it is out of Region.

– Hello TimeHello time decides an interval time when a switch transmits BPDU. It can be config-ured from 1 to 10 seconds. The default is 2 seconds.

– Max AgeRoot switch transmits new information every time based on information from another switches. However, if there are many switches on network, it takes lots of time to transmit BDPU. And if network status is changed while transmitting BDPU, this infor-mation is useless. To get rid of useless information, max age is identified in each information.

– Forward DelaySwitches find location of other switches connected to LAN by received BDPU and transmit packets. Since it takes certain time to receive BDPU and find the loca-tion before transmitting packet, switches send packet at regular interval. This interval time is named forward delay.

g The configuration for BPDU is applied as selected in force-version. The same commands are used for STP, RSTP and MSTP.

Hello TimeHello time decides an interval time when a switch transmits BPDU. To configure hello time, use the following command.

To clear configured hello-time, use the following command.


stp edge-port PORTS Bridge Set port edge mode:PORTS: select the port number.


no stp edge-port PORTS Bridge Delete port edge mode:PORTS: select the port number.


stp mst hello-time <1-10> Bridge Configure hello time to transmit the message in STP, RSTP, MSTP:1-10: set the hello time (default: 2 seconds).

194


Id:0900d8058018f37e

Port Configuration

Forward DelayIt is possible to configure forward delay, which means the time to take port status from listening to forwarding. To configure forward delay, use the following command.

To delete a configured forward delay, use the following command.

Max AgeMax age shows how long path message is valid. To configure max age to delete useless messages, use the following command.

g It is recommended that max age is configured less than twice of forward delay and more than twice of hello time.

To delete a configured max age, use the following command.

BPDU HopIn MSTP, it is possible to configure the number of hops in order to prevent BPDU from wandering. BPDU passes the switches as the number of hop by this function.

To configure the number of hop of BPDU in MSTP, use the following command.

To delete the configured number of hops for BPDU, use the following command.


no stp mst hello-time Bridge Clear the time configuration that is set up to transmit route message.


stp mst forward-delay <4-30> Bridge Designate Forward-delay in STP, RSTP or MSTP, enter a delay time value. (default: 15 seconds)


no stp mst forward-delay Bridge Delete a configured forward delay.


stp mst max-age <6-40> Bridge Configure max age of route message in STP, RSTP or MSTP, enter a max age time value. (default: 20 seconds)


no stp mst max-age Bridge Delete max age of configured route message.


stp mst max-hops <1-40> Bridge Configure the number of hops for BPDU, set the number of possible hops in the region.

195


Id:0900d8058018f37e

Displaying BPDU ConfigurationTo display a configuration for BPDU, use the following command.

Self Loop DetectionAlthough there is no double path in user’s equipment, loop can be caused by network environment and cable condition connected to the equipment. To avoid this problem, hiX 5635 has self loop detection to perceive that outgoing packet is got back. Through the self loop detection, you can deny packet, which comes back because it blocks the port.

To enable/disable self loop detection, use the following command.

To display a configuration for BPDU, use the following command.

To display a configuration for BPDU, use the following command.

5.6.9.7 Sample ConfigurationMSTP Configuration

The following is an example of configuring MSTP in the DSLAM.


no stp mst max-hops Bridge Delete the number of hop for BPDU in MSTP.


show stp mst PrivilegedGlobalBridge

Show a configuration for BPDU.


stp self-loop-detect {enable | disable}

Bridge Enable/disable self loop detection function.


show stp self-loop-detect PrivilegedGlobalBridge

Show status of self loop detection and a port where loop is happed.

show stp self-loop-detect {all | PORTS}

Show self loop detection status on specified ports:all: all the portsPORTS: selected port


show stp self-loop-detect PrivilegedGlobalBridge

Show status of self loop detection and a port where loop is happed.

show stp self-loop-detect {all | PORTS}

Show self loop detection status on specified ports:all: all the portsPORTS: selected port

196


Id:0900d8058018f37e

Port Configuration

SWITCH(bridge)# stp force-version mstpSWITCH(bridge)# stp mst enableSWITCH(bridge)# stp mst config-id map 2 1-50SWITCH(bridge)# stp mst config-id name 1SWITCH(bridge)# stp mst config-id revision 1SWITCH(bridge)# stp mst config-id commitSWITCH(bridge)# show stp mst Statusenabled bridge id8000.00d0cb000183 designated root8000.00d0cb000183 root port0/0path cost 0 max age20.00bridge max age20.00 hello time2.00bridge hello time2.00 forward delay15.00bridge forward delay15.00 CIST regional root8000.00d0cb000183CIST path cost0 max hops20 nameTEST revision1 instance vlans--------------------------------------------------------------------CIST51-4094 21-50--------------------------------------------------------------------SWITCH(bridge)#

5.6.10 Ethernet Ring Protection (ERP)The ERP is a Siemens protection protocol and procedure to protect Ethernet ring topol-ogies. ERP provides for optimal loop prevention and optimal failover performance of a ring configuration optimized for fast failure detection and recovery of Ethernet rings.

The main characteristics of the ERP are the follows:

– It required no additional underlying protection mechanism within the ring configura-tion, the complete functionality is implemented on the interface units of the system and does not require additional dedicated hardware which may raise network com-plexity and costs.

– It is a unique robustness functionality which runs on every network element involved in the ring configurations. It means each system is active part of the ring protection mechanism. Therefore it guarantees a maximum of 50 ms to switch over towards a new configuration after link or system failures.

Before adding a VLAN to an ERP domain, you should create a domain first. Then use the following command to add a vlan to the new created domain.


erp traffic-vlan-add {VLAN | VLANX-VLANY} <1-64>

Global Add a VLAN to an ERP domain:VLAN: VLAN IDVLANX-VLANY: VLAN ID range.

197


Id:0900d8058018f37e

To delete a VLAN from ERP domain, use the following command.

To display a VLAN, use the following command.

To configure ERP domain, use the following command.


erp traffic-vlan-del {VLAN | VLANX-VLANY}

Global Remove a VLAN to an ERP domain:VLAN: VLAN IDVLANX-VLANY: VLAN ID range.


show erp traffic-vlan all Global Show all VLANs.

show erp traffic-vlan domain <1-64> Show VLANs of a certain ERP domain, enter the domain number.

198


Id:0900d8058018f37e

Port Configuration

To display an ERP domain, use the following command.

5.6.11 Carrier Ethernet Border Switch (CEBS)The Carrier Ethernet Border Switch (CEBS) instead of the existing BRAS is to support the effective delivery of triple play application on a multi service provider environment.


erp domain <1-64> {create | delete} Global Create/delete an ERP domain, enter a domain number.

erp domain <1-64> name NAME Assign or change the name of ERP domain, enter the domain number and domain name.

erp domain <1-64> primary-port uplink <1-4>

Assign or change the primary port of an ERP domain, enter the domain number and port name.uplink: Uplink port<1-4>: Port index of CXU.

erp domain <1-64> secundary-port uplink <1-4>

Assign or change the secondary port of an ERP domain, enter the domain number and port name.uplink: Uplink port<1-4>: Port index of CXU.

erp domain <1-64> control-vlan VLAN

Assign or change the control VLAN of an ERP domain, enter the domain number and VLAN number.

erp domain <1-64> mode {nn | rm} Mode of the ERP node of the CXU:nn: normal noderm: recource manager node

erp domain <1-64> wait-to-restore-time <2-720>

Wait time to verify ring integrity

erp domain <1-64> testpacket-interval <10-500>

Time interval between consecutive transmission of test packets (in steps of 10 ms)

erp domain <1-64> learning-disable-time <0-500>

Time to disable MAC learning after FDB flush (in steps of 10 ms)

erp domain <1-64> lotp-trap {enable | disable}

Enable/disable “loss of test packets” traps.

erp domain <1-64> ulotp-trap {enable | disable}

Enable/disable “loss of unidirectional test packets” traps.

erp domain <1-64> multiple-rm-trap {enable | disable}

Enable/disable "multiple recource manager" traps.

erp domain <1-64> rm-reach-trap {enable | disable}

Enable/disable “recource manager accessibility (reachable)” traps.

erp domain <1-64> operator-request {switch-over | clear}

Manual switchover to secondary port:switch-over: swap the role of secondary and primary port.clear: disable a previous manual switch to secondary port.

erp domain <1-64> activation {acti-vate | deactivate}

Manual activation/deactivation of a created domain.


show erp domain {<1-64> | all} Global Show the specified ERP domain.

199


Id:0900d8058018f37e

Features to deal with scalability, security, availability and reliability, authentication, authorization, accounting and service selection have been introduced in the platform.

In this concept, the hiX 5635 still stays with Layer 2 functionality, whose the basic traffic switching is done on Layer 2 with the higher layer data processing in addition. This keeps the network cost-effective and technically as simple as possible in regard to pro-visioning and protocol transparency.

One of the key features for CEBS implementation is N:1 MAC address translation which is that all the end users MACs are replaced by the MAC address of the DSLAM.

Configuring a Gateway

To specify the IP address of the gateway, use the following command.

To display the specified IP address of the gateway, use the following command.

Configuring a Port

To specify a subscriber port, use the following command.

To display the port status of CEBS, use the following command.

Configuring a Virtual MAC Address

!When configuring the DSLAM with CEBS MAC address translation (N:1), for proper DHCP operation, you need to use the cebs mac-translation command. For more infor-mation, see Section 9.2.1.6.


cebs gateway VID A.B.C.D Global Specify the IP address of the gateway.VID: VLAN ID of subscriberA.B.C.D: IP address of the next hop in the upstream direction

no cebs gateway VID Delete a specified IP address.


show cebs gateway dynamic Global Show the dynamic gateway created by DHCP.

show cebs gateway static Show the static gateway created by operator.


cebs port BRIDGEPORTS Global Specify a subscriber port.BRIDGEPORTS: port number, e.g. 1/1/1-1/72/1, 2/1/1

no cebs port PORTS Delete a specified port.


show cebs port {BRIDGEPORTS | enabled}

Global Show the port status of CEBS.BRIDGEPORTS: port number, e.g. 1/1/1-1/72/1, 2/1/1enabled: shows the enabled ports.

200


Id:0900d8058018f37e

Port Configuration

To specify a virtual MAC address, use the following command.

To display a specified virtual MAC address, use the following command.

Displaying Subscriber’s Information

To display subscriber’s information, use the following command.


cebs virtual-mac ip {MAC-ADDR | dslam}

Global Specify a virtual MAC address.MAC-ADDR: virtual MAC addressdslam: system’s MAC address

no cebs virtual-mac ip Delete a specified MAC address.


show cebs virtual-mac Global Show a specified MAC address.


show cebs subscribers all Global Show the information of all subscribers.

show cebs subscribers bridgeport BRIDGEPORTS

Show the information of the specified bridge ports.BRIDGEPORTS: port number, e.g. 1/1/1-1/72/1, 2/1/1

show cebs subscribers ip A.B.C.D Show the information of the IP address of the sub-scribers.A.B.C.D: IP address of subscriber

201

Operation Manual CLI Managing System

Id:0900d8058017d865

6 Managing System

6.1 Enhancing System Security

6.1.1 Setting System AuthenticationFor enhancing system security, hiX 56xx provides two authentication methods to access the DSLAM using Remote Authentication Dial-In User Service (RADIUS) and Terminal Access Controller Access Control System Plus (TACACS+).

RADIUS: an authentication and accounting system used by many Internet Service Pro-viders (ISPs). When you dial in to the ISP you must enter your username and password. This information is passed to a RADIUS server, which checks that the information is correct, and then authorizes access to the ISP system.

TACACS+ : an authentication protocol that was commonly used in UNIX networks. TACACS allows a remote access server to communicate with an authentication server in order to determine if the user has access to the network.

6.1.1.1 Setting Authentication MethodTo set the system authentication method, use the following command.

6.1.1.2 Setting Authentication Interface to Access RADIUS or TACACS ServerIf more than 2 interfaces are specified to the hiX 56xx, you can designate one specific interface to access RADIUS or TACACS server.

To designate an authentication interface, use the following command.


login {local | remote} {radius | tacacs | host | all} enable

Global Set the system authentication method.local: authentication for console accessremote: authentication for telnet accessradius: select RADIUS authentication.tacacs: select TACACS+ authentication.host: select nominal system authentication (default).all: select all the authentication methods.

login {local | remote} {radius | tacacs | host | all} disable

Disable a configured system authentication method.

Table 23 Setting Authentication Method

202


Id:0900d8058017d865

Managing System

Example:

SWITCH(config)# login radius interface 10.1.158.158

6.1.1.3 Setting Primary Authentication MethodYou can set the order of the authentication method by giving the priority to each authen-tication method.

To set the primary authentication method, use the following command.

6.1.1.4 Setting RADIUS Server

Setting RADIUS Server for System AuthenticationTo add a RADIUS server for system authentication, use the following command.

g You can add up to five RADIUS servers.

To delete an added RADIUS server for system authentication, use the following command.


login {radius | tacacs} interface INTERFACE [A.B.C.D]

Global Designate an authentication interface.radius: select RADIUS authentication.tacacs: select TACACS+ authentication.INTERFACE: interface nameA.B.C.D: IP address (optional)

Table 24 Setting Authentication Interface


login {local | remote} {radius | tacacs | host} primary

Global Set the primary authentication method.local: authentication for console accessremote: authentication for telnet accessradius: select RADIUS authentication.tacacs: select TACACS+ authentication.host: select nominal system authentication (default).

Table 25 Setting Primary Authentication Method


login radius server add A.B.C.D KEY [auth_port PORT acct_port PORT]

Global Add a RADIUS server with its information.A.B.C.D: IP addressKEY: authentication key valueauth_port: authentication port (optional)acct_port: accounting port (optional)

Table 26 Adding RADIUS Server

203


Id:0900d8058017d865

Setting Timeout of Authentication RequestAfter an authentication request, the hiX 56xx waits for a response from a RADIUS server for specified time.

To specify a timeout value, use the following command.

Setting Frequency of RetransmitIn case of no response from a RADIUS server, the hiX 56xx is supposed to retransmit an authentication request.

To set the frequency of retransmitting an authentication request, use the following command.

Example of Setting RADIUS ServerThe following example shows how to add a RADIUS server for system authentica-tion;setting timeout value for a response from the RADIUS server,setting the time of retransmitting an authentication request; then set the system authentication method to RADIUS, and set RADIUS authentication as the primary method.Last, it displays the current system authentication.

SWITCH(config)# login radius server add 10.1.158.158 SWITCH(config)# login radius timeout 8 SWITCH(config)# login radius retransmit 5

SWITCH(config)# login remote radius enable SWITCH(config)# login remote radius primary SWITCH(config)# show login


login radius server del A.B.C.D Global Delete an added RADIUS server.A.B.C.D: IP address

Table 27 Deleting RADIUS Server


login radius timeout TIME Global Specify a timeout value.TIME: timeout value for a response (default: 5)

Table 28 Setting Timeout of Authentication Request


login radius retransmit COUNT Global Set the frequency of retransmit.COUNT: frequency count (default: 3)

Table 29 Setting Frequency of Restransmit

204


Id:0900d8058017d865

Managing System

6.1.1.5 Setting TACACS+ Server

TACACS+ Server for System AuthenticationTo add the TACACS+ server for system authentication, use the following command.

g You can add up to five TACACS+ servers.

To delete an added TACACS+ server for system authentication, use the following command.

Timeout of Authentication RequestAfter the authentication request, the hiX 56xx waits for the response from the TACACS+ server for specified time.

To specify a timeout value, use the following command.

Additional TACACS+ ConfigurationThe hiX 56xx provides several additional options to configure the system authentication via TACACS+ server.

– TCP Port for the AuthenticationTo specify TCP port for the system authentication, use the following command.


login tacacs server add A.B.C.D KEY

Global Add the TACACS+ server with its information.A.B.C.D: IP addressKEY: authentication key value

Table 30 Adding TACACS+ Server


login tacacs server del A.B.C.D Global Delete an added TACACS server.A.B.C.D: IP address

Table 31 Deleting TACACS+ Server


login tacacs timeout TIME Global Specify a timeout value.TIME: timeout value for the response (default: 5)

Table 32 Specifying Timeout Value

205


Id:0900d8058017d865

– Authentication TypeTo select the authentication type for TACACS+, use the following command.

– Priority LevelYou can define a priority level of user. According to the defined priority level, the user has different authorization to access the DSLAM. This priority should be defined in the TACACS+ server in the same way.To define the priority level of user, use the following command.

g The order of priority is root = max > user > min.

Example of Setting TACACS+ ServerThe following example shows how to add a TACACS+ server for system authentica-tion;setting timeout value for a response from the TACACS+ server; then setting the system authentication method to TACACS+, and setting TACACS+ authentication as the primary method.

SWITCH(config)# login tacacs server add 10.1.158.158 SWITCH(config)# login tacacs timeout 8 SWITCH(config)# login tacacs socket-port PORT SWITCH(config)# login tacacs auth-type ascii SWITCH(config)# login remote tacacs enable SWITCH(config)# login remote tacacs primary

6.1.1.6 Accounting ModeThe hiX 56xx provides the accounting function of AAA (Authentication, Authorization, and Accounting). Accounting is the process of measuring the resources a user has con-


login tacacs socket-port PORT Global Specify TCP port for the authentication.PORT: TCP port

Table 33 TCP Port for Authentication


login tacacs auth-type {ascii | pap | chap}

Global Select the authentication type for TACACS+.ascii: plain textpap: password authentication protocolchap: challenge handshake authentication protocol

Table 34 Selecting Authentication Type for TACACS+


login tacacs priority-level {min | user | max | root}

Global Define the priority level of user, see the below information for the order of priority.

Table 35 Defining User’s Priority Level

206


Id:0900d8058017d865

Managing System

sumed. Typically, accounting measures the amount of system time a user has used or the amount of data a user has sent and received.

To set an accounting mode, use the following command.

6.1.1.7 Displaying System AuthenticationTo display a configured system authentication, use the following command.

6.1.2 Setting Mac Address LimitationFor the hiX 56xx, it is possible to filter packets which transmit to the subscriber’s port by using a MAC address. The MAC address registered by user is not accepted as deny.

To configure an access control list, use the following command.

g First of all, configure the global policy, and then the policy of specified port.

To display the access control list, use the following command.


login accounting-mode {none | start | stop | both}

Global Set an accounting mode.none: disable an accounting function.start: measure start point only.stop: measure stop point only.both: measure start and stop point both.

Table 36 Setting Accounting Mode


show login PrivilegedGlobal

Show a configured system authentication.

Table 37 Displaying System Authentication


acl {create | delete} globalMAC-ADDR

Bridge Configure a global access control list (MAC ACL) entries:create: create a new ACL entry.delete: delete an ACL entry.MAC-ADDR: enter the value for MAC address.(XX:XX:XX:XX:XX:XX)

acl {create | delete} port PORTS MAC-ADDR

Configure port access control list (MAC acl) entries:create: create a new ACL entry.delete: delete an ACL entry.PORTS: enter the port number.MAC-ADDR: enter the value for MAC address.(XX:XX:XX:XX:XX:XX)

Table 38 Setting MAC Address Limitation

207


Id:0900d8058017d865

Following example shows how to configure an access control list

SWITCH(bridge)# acl create global 00:00:00:00:11:11 SWITCH(bridge)# acl create port 4/1/1 00:00:00:00:00:01 SWITCH(bridge)# show acl global ---------------------------- MAC address Deny ---------------------------- 00:00:00:00:11:11 enable SWITCH(bridge)# show acl port ------------------------- Port MAC address ------------------------- 4/1/1 00:00:00:00:00:01 SWITCH(bridge)#

6.1.3 Setting Max HostYou can limit the number of users by configuring the maximum number of users also named as max hosts for each port. In this case, you need to consider not only the number of PCs in network but also devices such as switches in network.

For the hiX 56xx, you have to lock the port like MAC filtering before configuring max hosts. In case of ISPs, it is possible to arrange a billing plan for each user by using this configuration.

To configure a max host, use the following command.


show acl global PrivilegedGlobalBridge

Show the global access control list (MAC acl) entries.

show acl global MAC-ADDR Show the global access control list (MAC acl) entries, enter the MAC address value.

show acl port Show port access control list (MAC acl) entries.

show acl port PORT Show port access control list (MAC acl) entries, enter the port number.

show acl port PORT MAC-ADDR Show port access control list (MAC acl) allowed entries:PORT: enter the port number.MAC-ADDR: enter the value for MAC address.(XX:XX:XX:XX:XX:XX)

Table 39 Displaying Access Control List


max-hosts PORTS <1-64> Bridge Limit the number of connection to a port by setting maximum host:PORTS: port number1-64: maximum MAC address, Max-host of LIU is 16 for ports of conexant iu card or 64 for ports of infenion iu card

Table 40 Configuring Max Host

208


Id:0900d8058017d865

Managing System

g For Conexant Interface Unit, there is a limitation that the total number of static and dynamic MACs is 64. As a result, when setting max-hosts (max Dynamic allowed) to 64, it can learn 64 dynamic MACs, but static MAC can not be registered.

The following is an example of configuring to allow five MAC addresses to relevant port or slot.

DSLAM13(bridge)# max-hosts 0/1 5 DSLAM13(bridge)# max-hosts 1/1/1 5 DSLAM13(bridge)# max-hosts 1/2/1-1/5/1 5 DSLAM13(bridge)# max-hosts s2 5

To delete a configured max host, use the following command.

To display a configured max host, use the following command.

The following is an example of displaying a configured max host.

SWITCH(bridge)# show max-hosts0/10/2 (current/max)0/20/5 (current/max)0/30/5 (current/max)0/40/10 (current/max)0/51/Unlimited (current/max)0/60/Unlimited (current/max)16/1/10/16 (current/max)16/1/20/16 (current/max)16/1/30/16 (current/max)16/1/40/16 (current/max)16/1/50/16 (current/max)16/1/70/16 (current/max) (omitted) SWITCH(bridge)#


no max-hosts PORTS Bridge Delete a configured max host, enter the port number.

Table 41 Deleting Configured Max Host


show max-hosts PrivilegedGlobalBridge

Show a configured max host.

show max-hosts PORT Show a configured max host for a specified port, enter port number.

Table 42 Displaying Configured Max Host

209


Id:0900d8058017d865

6.2 Performance Data

6.2.1 Performance Data of ADSL PortFor the hiX 56xx, you can check how many times CRC error, frame loss and signal loss happened.

An error is counted every 15 minutes after the system starts. After the time is over, the number is reset to 0 and error is counted again. In addition, the error is counted by each day. It is also reset to 0 after the day.

You can check the error count at present time from the latest 15 minutes beginning moment (Curr.15min). Also you can check the number of times an error occurred for the previous 15 minutes, whole 1day, previous day, or total time from now that are all on the 15 minutes interval basis.

Figure 16 shows the units of error count in the hiX 56xx.

Figure 16 Counting Times of Error

6.2.1.1 15 Minutes Performance IntervalTo display the 15min performance interval, use the following command.


show lre PORTS adsl intv atuc line <1-96>


Show 15 minutes performance interval of ADSL line (ATU-C performance data).

show lre PORTS adsl intv atur line <1-96>

Show 15 minutes performance interval of ADSL line (ATU-R performance data).

show lre PORTS adsl intv atuc chan <1-96>

Show 15 minutes performance interval of ADSL channel (ATU-C performance data).

show lre PORTS adsl intv atur chan <1-96>

Show 15 minutes performance interval of ADSL channel (ATU-R performance data).

Table 43 Displaying 15 Min Performance Interval

210


Id:0900d8058017d865

Managing System

6.2.1.2 Performance Data of ATU-CTo display performance data of ATU-C, use the following command.

6.2.1.3 Performance Data of ATU-RTo display performance data of ATU-R, use the following command.


show lre PORTS adsl perf-data atuc line


Show ATU-C performance and line performance data.

show lre PORTS adsl perf-data atuc channel

Show ATU-C performance and channel performance data.

show lre PORTS adsl perf-data atuc-es

Show count of the number of errored second since agent was reset.

show lre PORTS adsl perf-data atuc-failedfastretrains

Show count of failed fast retrain.

show lre PORTS adsl perf-data atuc-fastretrains

Show count of fast retrain.

show lre PORTS adsl perf-data atuc-fecsl

Show count of 1-second intervals with one or more FEC.

show lre PORTS adsl perf-data atuc-inits

Show count of line initialization attempts since agent was reset.

show lre PORTS adsl perf-data atuc-lofs

Show count of the number of loss of framing failure since agent was reset.

show lre PORTS adsl perf-data atuc-lols

Show count of the number of loss of link second encountered by an ADSL interface since agent was reset.

show lre PORTS adsl perf-data atuc-lossl

Show count of 1-second intervals with one or more LOS.

show lre PORTS adsl perf-data atuc-loss

Show count of the number of loss of signal failure since agent was reset.

show lre PORTS adsl perf-data atuc-lprs

Show count of the number of loss of power failure since agent was reset.

show lre PORTS adsl perf-data atuc-ses

Show count of severely errored second line.

show lre PORTS adsl perf-data atuc-uas

Show count of unavailable errored seconds.

Table 44 Displaying Performance Data of ATU-C

211


Id:0900d8058017d865

6.2.1.4 Channel Performance DataTo display channel performance data of ATU-C/R, use the following command.

The following is an example of displaying channel performance data of ATU-C for slot 1.

SWITCH(bridge)# show lre s1 adsl chanperf-data atuc--------------------------------------------------------------------Port Received Transmitted Corrected UncorrectedBlocks Blocks Blocks Blocks--------------------------------------------------------------------8/1 724350 691425 10711SWITCH(bridge)#

6.2.1.5 Clearing Performance DataTo clear all performance data of ADSL port, use the following command.


show lre PORTS adsl perf-data atur line


Show ATU-R performance and line performance data.

show lre PORTS adsl perf-data atur channel

Show ATU-R performance and channel performance data.

show lre PORTS adsl perf-data atur-es

Show count of the number of errored second since agent was reset.

show lre PORTS adsl perf-data atur-ses

Show count of severely errored seconds.

show lre PORTS adsl perf-data atur-uas

Show count of unavailable errored seconds.

show lre PORTS adsl perf-data atur-lofs

Show count of the number of loss of framing failure since agent was reset.

show lre PORTS adsl perf-data atur-loss

Show count of the number of loss of signal failure since agent was reset.

show lre PORTS adsl perf-data atur-lprs

Show count of the number of loss of power failure since agent was reset.

Table 45 Displaying Performance Data of ATU-R


show lre PORTS adsl chanperf-data {atuc | atur}


Show channel performance data of ATU-C/R.

Table 46 Displaying Channel Performance Data of ATU-C/R

212


Id:0900d8058017d865

Managing System

6.2.2 Performance Data of xDSL PortError is counted every 15 minutes after booting. After the time is over, the number is reset to ì0î and error is counted again. In addition, error is counted by each day. It is also reset to ì0î after the day.

Consequently, you can check times of error (Curr15m) at present time from beginning of the 15 minutes and time of error (Prev15m) of previous 15 minutes. Also, you can check times of error (Curr1Day) at present time from starting Today, times of error (Prev1day) of yesterday, and total times of error (Total) from booting.

6.2.2.1 IntervalIn order to verify the 15min interval, use one of the following command.

6.2.2.2 15 Minutes Performance IntervalIn order to check the 15min performance data of VDU-C/VTU-R, use one of the following command.


clear lre PORTS adsl perf-data [all] Bridge Clear port performance data on specified port, enter the LRE port number to be cleared.

clear lre PORTS adsl perf-data {atuc | atur} [total | 15min | 1day]

Clear port performance data of ATU-C/R on specified port with the specific option.

Table 47 Clearing All Performance Data of ADSL Port


show xdsl valid-intv-no {15min I 1day}

Privileged/Config/Bridge

Displays number of valid intervals for all ports.

Table 48 Show Number of Valid Intervals

213


Id:0900d8058017d865

6.2.2.3 1 Day Performance IntervalIn order to check the 1day performance data of VDU-C/VTU-R, use one of the following command.

6.2.2.4 Performance Data of VTU-C/VTU-RIn order to check the performance data of VDU-C/VTU-R, use one of the following command.


show lre PORTS xDSL perf-intv 15min {vtuc I vtur} line {<1-96> I}


Displays 15min line performance intervals (ATU-C/ATU-R performance data of xDSL line), enter the port number: 1-96: 1 interval of 1-96.

show lre PORTS xDSL perf-intv 15min {vtuc I vtur} chan {<1-96> I}

Displays 15min channel performance intervals (ATU-C/ATU-R performance data of xDSL line), enter the port number: 1-96: 1 interval of 1-96.

show lre PORTS xDSL perf-intvls 15min {vtuc I vtur} line {<1-96> I}

Displays 15min line performance intervals (ATU-C/ATU-R performance data of xDSL line), enter the port number:

show lre PORTS xDSL perf-intvls 15min {vtuc I vtur} chan

Displays 15min channel performance intervals (ATU-C/ATU-R performance data of xDSL line), enter the port number:



show lre PORTS xDSL perf-intv 1day {vtuc I vtur} line {<1-30> I}


Displays 1day line performance intervals (ATU-C/ATU-R performance data of xDSL line), enter the port number: 1-30: 1 interval. of 1-30

show lre PORTS xDSL perf-intv 1day {vtuc I vtur} chan {<1-30> I}

Displays 1day channel performance intervals (ATU-C/ATU-R performance data of xDSL line), enter the port number:1-30: 1 interval. of 1-30

show lre PORTS xDSL perf-intvls 1day {vtuc I vtur} line {<1-96> I}

Displays 1day line performance intervals (ATU-C/ATU-R performance data of xDSL line), enter the port number:

show lre PORTS xDSL perf-intvls 1day {vtuc I vtur} chan

Displays 1day channel performance intervals (ATU-C/ATU-R performance data of xDSL line), enter the port number:


214


Id:0900d8058017d865

Managing System

6.2.2.5 Performance Data of xDSLTo create a new module, use the following command.

6.3 Equipment ManagementFor the hiX 56xx, it is possible to configure a slot of the shelf for a specific module without module equipping. If a certain module is equipped, the system will check whether the module equipping is valid or not.

To create a new module, use the following command.


show lre PORTS xDSL perf-data line {vtuc I vtur}


Displays VTU-C/VTU-R line performance data for a specified port, enter the port number.

show lre PORTS xDSL perf-data single {lofs I loss I lprs I lols I ess I sess I uass I inits}

Displays single line performance data for a specified port, enter the port number:lofs: loss of framingloss: loss of signallprs: loss of powerlols: loss of linkess: errored secondssess: severlely errored second-suass: unavailable erored secondsinits: line initializa-tion attemps (successful + failed)

show lre PORTS xDSL perf-data chan {vtuc I vtur}

Displays VTU-C/VTU-R channel performance data



lre PORTS xdsl atm reset-perf-data Privileged/Config/Bridge

Reset performance data of VCCs.

show lre PORTS xdsl atm vcctp-perfdata

Show VCC TP performance data.

show lre PORTS xdsl perf-intv 1day (xtuc|xtur) line (<1-7>|)

Show 1day intervals of xDSL line,Line performance interval.

show lre PORTS xdsl perf-intv 1day (xtuc|xtur) chan (1|2) (<1-7>|)

Show 1day intervals of xDSL line,Channel perfor-mance intervals.1: Channel 1 data,2: Channel 2 data.

Table 52 Creating New Module(to be continued)

215


Id:0900d8058017d865


card create {m_iuvdsl_24p_e|m_vplu-s72-pots_e|m_iuadsl_72p_ifx|m_iuadsl_72i_ifx|m_iushdsl_48s_e|m_iushdsl_48b_e|m_iuadsl_72a_e|m_iuadsl_72b_e|m_iuadsl_72a_cg|m_iuadsl_72b_cg|m_iuadsl_72ai_wc|m_iuadsl_72aj_wc|m_iuvdsl_24d_ifx|m_iuvdsl_24d2_ifx|m_iuadsl_48p_e|m_iufe_16_e|m_cxuge_4e_e|m_cxucge_4e_e|m_cxub1ge_4e_e|m_cxub2ge_4_e|m_cxuc2ge_4_e} PHYSIN-DEX {planned|locked}

Global Create a new card

iuvdsl_24p_e: (IU with 24 ports VDSL2 over POTS Infineon Convergate D)iuvoip_72p : (IU with 72 ports VoIP)iuadsl_72p_ifx: (IU with 72 ports ADSL+ Annex A Infineon)iuadsl_72i_ifx: (IU with 72 ports ADSL+ Annex B Infineon)iushdsl_48s_e: (IU with 48 ports SHDSL Conexant 24-Port when 4 wired) iushdsl_48b_e: (IU with 48 ports SHDSL Conexant bonding, bis and wetting current sup-port",iuadsl_72a_e: (IU with 72 ports ADSL+ Annex A Conexant)iuadsl_72b_e: (IU with 72 ports ADSL+ Annex B Conexant)iuadsl_72a_cg: (IU with 72 ports ADSL2+ Annex A Infineon Convergate D)iuadsl_72b_cg: (IU with 72 ports ADSL2+ Annex B Infineon Convergate D)iuadsl_72ai_wc: (IU with 72 ports ADSL+ Annex I Infineon)iuadsl_72aj_wc: (IU with 72 ports ADSL+ Annex J Infin-eon)iuvdsl_24d_ifx: (IU with 24 ports VDSL2 Infineon Convergate D Vinax 1.3)iuvdsl_24d2_ifx: (IU with 24 ports VDSL2 Infineon Convergate D Vinax 1.4)iuadsl_48p_e: (IU with 48 ports ADSL+ Annex A Conexant)iufe_16_e: (Fast Ethernet Board with 16 ports Ethernet Broadcom)cxuge_4e_e card or EnableRedundancycxucge_4e_e card or EnableRedundancycxub1ge_4e_e card or EnableRedundancycxub2ge_4_e card or EnableRedundancycxuc2ge_4_e card or EnableRe-dundancyPHYSINDEX: Physical Index of the Slot-planned: sets admin state to <planned>locked: sets admin state to <locked>

Table 53 Creating New Module

216


Id:0900d8058017d865

Managing System

g If an equipped module is valid, then the administrative state will be automatically changed to the state <unlocked>.

To reset an equipped module, use the following command.

slot card create SLOTNUMBER {m_iuvdsl_24p_e|m_vplu-s72-pots_e|m_iuadsl_72p_ifx|m_iuadsl_72i_ifx|m_iushdsl_48s_e|m_iushdsl_48b_e|m_iuadsl_72a_e|m_iuadsl_72b_e|m_iuadsl_72a_cg|m_iuadsl_72b_cg|m_iuadsl_72ai_wc|m_iuadsl_72aj_wc|m_iuvdsl_24d_ifx|m_iuvdsl_24d2_ifx|m_iuadsl_48p_e|m_iufe_16_e|m_cxuge_4e_e|m_cxucge_4e_e|m_cxub1ge_4e_e|m_cxub2ge_4_e|m_cxuc2ge_4_e} {planned | locked}

Global Create a new module:SLOTNUMBER: number of the slotiuvdsl_24p_e: (IU with 24 ports VDSL2 over POTS Infineon Convergate D)iuvoip_72p: (IU with 72 ports VoIP)iuadsl_72p_ifx: (IU with 72 ports ADSL+ Annex A Infineon)iuadsl_72i_ifx: (IU with 72 ports ADSL+ Annex B Infineon)iushdsl_48s_e: (IU with 48 ports SHDSL Conexant 24-Port when 4 wired) iushdsl_48b_e: (IU with 48 ports SHDSL Conexant bonding, bis and wetting current support iuadsl_72a_e: (IU with 72 ports ADSL2+ Annex A Conexant) iuadsl_72b_e: (IU with 72 ports ADSL2+ Annex B Conexant) iuadsl_72a_cg: (IU with 72 ports ADSL2+ Annex A Infineon Convergate D) iuadsl_72b_cg: (IU with 72 ports ADSL2+ Annex B Infineon Convergate D) iuadsl_72ai_wc: (IU with 72 ports ADSL2+ Annex I Infineon) iuadsl_72aj_wc: (IU with 72 ports ADSL2+ Annex J Infineon) iuvdsl_24d_ifx: (IU with 24 ports VDSL2 Infineon Convergate D Vinax 1.3) iuvdsl_24d2_ifx: (IU with 24 ports VDSL2 Infineon Convergate D Vinax 1.4) iuadsl_48p_e: (IU with 48 ports ADSL+ Annex A Conexant) iufe_16_e: (Fast Ethernet Board with 16 ports Ethernet Broadcom) cxuge_4e_e card or EnableRedundancycxucge_4e_e card or EnableRedundancycxub1ge_4e_e card or EnableR-edundancy cxub2ge_4_e card or EnableRedundancycxuc2ge_4_e card or EnableRe-dundancy

planned: sets admin state to <planned>.locked: sets admin state to <locked>.

slot card convert SLOTNUM {m_iuadsl_48p_e | m_iuadsl_72p_ifx | m_iuadsl_72i_ifx | m_iushdsl_48s_e | m_iushdsl_48b_e | m_iuadsl_72a_e | m_iuadsl_72b_e|m_iuvdsl_24d_ifx|m_iuvdsl_24d2_ifx}

Convert an existing module:SLOTNUM: number of the slotm_iuadsl_48p_e: IU_ADSL48 (IU with 48 ports ADSL2+ Annex A Conexant)m_iuadsl_72p_ifx: IU_ADSL72p_ifx (IU with 72 ports ADSL2+ Annex A Infineon)m_iuadsl_72i_ifx: IU_ADSL72i_ifx (IU with 72 ports ADSL2+ Annex B Infineon)m_iushdsl_48s_e: IU_SHDSL48s_e (IU with 48 ports SHDSL Conexant 24 port when 4 wired)m_iushdsl_48b_e: IU_SHDSL48b_e (IU with 48 port SHDSL Conexant bonding, bis and wetting current support)m_iuadsl_72a_e: IU_ADSL72a_e (IU with 72 ports ADSL2+ Annex A Conexant)m_iuadsl_72b_e: IU_ADSL72b_e (IU with 72 ports ADSL2+ Annex B Conexant)m_iuvdsl_24d_ifx: IU with 24 ports VDSL2 Infineon Convergate D Vinax 1.3m_iuvdsl_24d2_ifx: IU with 24 ports VDSL2 Infineon Convergate D Vinax 1.4


Table 53 Creating New Module (Cont.)

217


Id:0900d8058017d865

To delete an existing module, use the following command.

To change the administrative state, use the following command.


reset type {m_iuvdsl_24p_e|m_iuadsl_48p_e | m_iuadsl_72p_ifx | m_iuadsl_72i_ifx | m_iushdsl_48s_e | m_iushdsl_48b_e | m_iuadsl_72a_e | m_iuadsl_72b_e|m_iuadsl_72a_cg|m_iuadsl_72b_cg|m_iuvdsl_24_ifx|m_iuvdsl_24d_ifx|m_iuvdsl_24d2_ifx|m_iuadsl_72ai_wc|m_iuadsl_72aj_wc|m_vplu-s72-pots_e|m_iufe_16_e}

Global Reset all modules of the same type:m_iuvdsl_24p_e:IU_VDSL24p_e (IU with 24 ports VDSL2 over POTS Infineon Convergatem_iuadsl48p_e: IU_ADSL48 (IU with 48 ports ADSL2+ Annex A Conexant)m_iuadsl72p_ifx: IU_ADSL72p_ifx (IU with 72 ports ADSL2+ Annex A Infineon)m_iuadsl72i_ifx: IU_ADSL72i_ifx (IU with 72 ports ADSL2+ Annex B Infineon)m_iushdsl48s_e: IU_SHDSL48s_e (IU with 48 ports SHDSL Conexant 24 port when 4 wired)m_iushdsl48b_e: IU_SHDSL48b_e (IU with 48 port SHDSL Conexant bonding, bis and wetting current support)m_iuadsl72a_e: IU_ADSL72a_e (IU with 72 ports ADSL2+ Annex A Conexant)m_iuadsl72b_e: IU_ADSL72b_e (IU with 72 ports ADSL2+ Annex B Conexant)m_iuadsl_72a_cg: IU with 72 ports ADSL2+ Annex A Infineon Convergate Dm_iuadsl_72b_cg: IU with 72 ports ADSL2+ Annex B Infineon Convergate Dm_iuvdsl_24_ifx:m_iuvdsl_24d_ifx: IU with 24 ports VDSL2 Infineon Convergate D Vinax 1.3m_iuvdsl_24d2_ifx: IU with 24 ports VDSL2 Infineon Convergate D Vinax 1.4m_iuadsl_72ai_wc: IU with 72 ports ADSL2+ Annex I Infineonm_iuadsl_72aj_wc: IU with 72 ports ADSL2+ Annex J Infineonm_vplu-s72-pots_e: IU 72-Port VOIP (AGLU)m_iufe_16_e: create iufe_16_e (Fast Ethernet Board with 16 ports Ethernet Broadcom)

reset card SLOT Reset a specified module.SLOT: number of the module

reset cxu SLOTNUMBER Reset cxu.SLOTNUMBER: number of the slot

Table 54 Resetting Equipped Module


slot card delete SLOT Global Delete an existing module:SLOT: number of the slot

Table 55 Deleting Existing Module

218


Id:0900d8058017d865

Managing System

To change an alarm severity profile, use the following command.

To change an external alarm configuration, use the following command.

To change temperature warning thresholds, use the following command.

To change humidity alarm thresholds, use the following command.


card admin-state SLOT {planned | locked | unlocked}

Global Change the administrative state of a module:SLOT: number of the slot

Table 56 Changing Administrative State


change physindex-alarm-severi-typrofile PHYSINDEX <1-10>

Global Change alarm severity profile:PHYSINDEX: physical index of the card1-10: index of the profile

card alarm-severity-profile SLOT <1-10>

Change alarm severity profile:SLOT: number of the slot1-10: index of the profile

rack alarm-severity-profile <1-10> Change alarm severity profile:1-10: index of the profile

shelf alarm-severity-profile <1-10> Change alarm severity profile:1-10: index of the profile

Table 57 Changing Alarm Severity Profile


shelf ext-alarm-output<1-3> USAGE

Global Change usage string of an external alarm output:1-3: number of the alarm outputUSAGE: new usage string

shelf ext-alarm-input <1-8><0-1> USAGE

Change level and usage string of an external alarm input:1-8: number of the alarm output0-1: low or high activeUSAGE: new usage string

Table 58 Changing External Alarm Configuration


change temperature-warning-thresholds <0-120> <0-120>

Global Change temperature-warning-thresholds:0-120: Temperature that clears the overtemperature warning0-120: Temperature that issues the overtemperature warning

Table 59 Changing Temperature Warning Thresholds

219


Id:0900d8058017d865

To display the physical tables, use the following command.


change humidity-alarm-thresholds <0-100> <0-100>

Global Change humidity-alarm-thresholds:0-100: humidity that clears the humidity alarm0-100: humidity that issues the humidity alarm

Table 60 Changing Thumidity Alarm Thresholds


show table physical-container PrivilegedGlobal

Show an SNMP table.

show table physical-container SLOT Show an SNMP table, enter the physical slot to show the information for this module.SLOT: slot number to show information for.

show table physical-card Show an SNMP table.

show table physical-card SLOT Show an SNMP table, enter the physical plug-in unit to show the information.SLOT: slot number to show information for.

show table shelf SLOT Show a slot usage and configuration, enter the slot number to show information for.SLOT: number of the slot

show table shelf Show a slot usage and configuration for all slots.

show table physical-entity[PHYSINDEX]

Show an SNMP table, enter the physical index to show the information.PHYSINDEX: physical index of the card

show objects temperature shows SNMP objects.

show system-information Show system information.

Table 61 Displaying Physical Tables

220


Id:0900d8058015ad3c

Network Management

7 Network Management

7.1 Simple Network Management Protocol (SNMP)Simple Network Management Protocol (SNMP) is an application-layer protocol designed to facilitate the exchange of management information between network devices. SNMP system consists of three parts: an SNMP manager, an SNMP agent and a managed device. SNMP allows SNMP manager and SNMP agent to communicate with each other. SNMP provides a message format for sending information between SNMP manager and SNMP agent. The agent and MIB reside on the switch. In config-uring SNMP on the switch, you define the relationship between the manager and the agent. According to community, you can give right only to read or right both to read and to write. The SNMP agent has MIB variables to reply to request from SNMP administra-tor. And SNMP administrator can obtain data from the agent and save data in the agent. The SNMP agent gets data from MIB, which saves information on system and network.

SNMP agent sends trap to administrator for specific cases. Trap is a warning message to alert network status to SNMP administrator.

The hiX 56xx enhances access management of SNMP agent and limit the range of OID opened to agents.

The following is how to configure SNMP.

– SNMP Community– Information of SNMP Agent– SNMP Com2sec– SNMP Group– SNMP View Record– Permission to Access SNMP View Record– SNMP Version 3 User– SNMP Trap– Displaying SNMP Configuration– Disabling SNMP

7.1.1 SNMP CommunityOnly an authorized person can access an SNMP agent by configuring SNMP commu-nity with a community name and additional information.

To configure an SNMP community to allow an authorized person to access, use the fol-lowing command.

To display a configured SNMP community, use the following command.


snmp community {ro | rw} COMMU-NITY [IP-ADDRESS] [OID|]

Global Create SNMP community.COMMUNITY: community name IP-ADDRESS: <A.B.C.D> OID: object identity

no snmp community {ro | rw} COM-MUNITY

Delete a created community.COMMUNITY: community name

221

Operation Manual CLI Network Management

Id:0900d8058015ad3c

The following is an example of creating 2 SNMP communities.

SWITCH(config)# snmp community ro publicSWITCH(config)# snmp community rw privateSWITCH(config)# show snmp communityCommunity ListTypeCommunitySourceOID-----------------------------------------------ropublicrwprivate SWITCH(config)#

7.1.2 Information of SNMP AgentYou can specify basic information of SNMP agent such as administrator, location, and address that identify the agent.

To set basic information of SNMP agent, use the following command.

The following is an example of specifying basic information of SNMP agent.

SWITCH(config)# snmp contact BradSWITCH(config)# snmp location GermanySWITCH(config)#

To display basic information of SNMP agent, use the following command.


show snmp community PrivilegedGlobal

Show a created SNMP community.


snmp contact NAME Global Set a name of administrator.

snmp location LOCATION Set a location of SNMP agent.

snmp agent-address ADDRESS Set an address of SNMP agent.

snmp engineid {default|STRING} Configure engine ID. default: use MAC address to generate engineID. STRING: use speficed string to generate engineID.

no snmp contact Delete specified basic information for each item.


show snmp contact PrivilegedGlobal

Show a name of administrator.

show snmp location Show a location of SNMP agent.

show snmp engineid Show SNMP engineID configuration.

show snmp engine-boots Show SNMP engine boots.

show snmp agent-address Show an address of SNMP agent.

222


Id:0900d8058015ad3c

Network Management

7.1.3 SNMP Com2secSNMP v2 authorizes the host to access the agent according to the identity of the host and community name. The command, com2sec, specifies the mapping from the identity of the host and community name to security name.

To configure an SNMP security name, use the following command.

The following is an example of configuring SNMP com2sec.

SWITCH(config)# snmp com2sec TEST 10.1.1.1 PUBLICSWITCH(config)# show snmp com2sec Com2Sec ListSecName Source Community---------------------------------------com2secTEST 10.1.1.1 PUBLIC SWITCH(config)#

7.1.4 SNMP GroupYou can create an SNMP group that can access SNMP agent and its community that belongs to a group.

To create/delete/show an SNMP group, use the following command.

7.1.5 SNMP View RecordYou can create an SNMP view record to limit access to MIB objects with object identity (OID) by an SNMP manager.

To configure an SNMP view record, use the following command.


snmp com2sec SECURITY{IP-ADDRESS | IP-ADDRESS/M} COMMUNITY

Global Specify the mapping from the identity of the host and community name to security name, enter security and community name.SECURITY: security name IP-ADDRESS: host address IP-ADDRESS/M: host addressCOMMUNITY: community name

no snmp com2sec SECURITY Delete a specified security name, enter the security name.SECURITY: security name

show snmp com2sec PrivilegedGlobal

Show a specified security name.


snmp group GROUP {v1 | v2c | v3} SECURITY

Global Create SNMP group, enter the group name.GROUP: group nameSECURITY: security name v1: version 1 v2c: version 2 v3: version 3

no snmp group GROUP {v1 | v2c | v3} (SECNAME|)

Delete SNMP group, enter the group name.GROUP: group nameSECNAME: Security name

show snmp group PrivilegedGlobal

Show a created SNMP group.

223


Id:0900d8058015ad3c

To display a created SNMP view record, use the following command.

SWITCH(config)# snmp view TEST included 410SWITCH(config)# show snmp view View list------------------------------------------------view TEST included 410 SWITCH(config)#

7.1.6 Permission to Access SNMP View RecordTo grant an SNMP group the access to a specific SNMP view record, use the following command.

To display a granted SNMP group’s access to a specific SNMP view record, use the fol-lowing command.

7.1.7 SNMP Version 3 UserIn SNMP version 3, you can register an SNMP agent as user. If you register SNMP version 3 user, you should configure it with the authentication key.

To create/delete SNMP version 3 user, use the following command.


snmp view VIEW {included | excluded} OID [MASK]

Global Create an SNMP view record.VIEW: view record nameincluded: includes sub-tree.excluded: excludes sub-tree.OID: OID number MASK: 0xFF, in hexadecimal.

no snmp view VIEW Delete a created SNMP view record.VIEW: view record name


show snmp view PrivilegedGlobal

Show a created SNMP view record.


snmp access GROUP {v1 | v2c} READ-VIEW WRITE-VIEW

Global Grant an SNMP group the access to a specific SNMP view record.GROUP: group name

snmp access GROUP v3 {noauth | auth | priv} READ-VIEW WRITE-VIEW

Grant an SNMP version 3 group to access a specific SNMP view record.GROUP: group name

no snmp access GROUP Delete a granted SNMP group to access a specific SNMP view record.


show snmp access PrivilegedGlobal

Show a granted SNMP group’s access to a specific SNMP view record

224


Id:0900d8058015ad3c

Network Management

To display a current SNMP version 3 user, use the following command.

7.1.8 SNMP TrapSNMP trap is an alert message that SNMP agent notifies SNMP manager about certain problems. If you configure SNMP trap, switch transmits pertinent information to network management program. In this case, trap message receivers are called trap host.

To set an SNMP trap host, use the following command.

g You need to configure an SNMP trap host with the snmp trap-host, trap2-host, or trap3-host command, if you manage the DSLAM via the ACI-E. The kind of command is determined by used version of SNMP: SNMPv1, SNMPv2c, or SNMPv3.î

To delete a specified SNMP trap host, use the following command.


snmp user USER {md5 | sha} AUTH_KEY [des PRIVATE_KEY]

Global Create an SNMP version 3 user. USER: user name (or user id). md5: an encrption algorithm. sha: an encrption algorithm. AUTH_KEY: authentication key to be encrypted. Des: an encrption algorithm. PRIVATE_KEY: private key to be encrypted.

no snmp user USER Delete a registered SNMP version 3 user.


show snmp user PrivilegedGlobal

Display SNMP version 3 user.


snmp trap-host IP-ADDRESS [COMMUNITY]

Global Specify IP address of an SNMP trap host. IP-ADDRESS: <A.B.C.D> COMMUNITY: community name

snmp trap2-host IP-ADDRESS [COMMUNITY]

snmp trap3-host A.B.C.D defaultEID (md5|sha) USER AUTH_KEY ((des PRIVATE_KEY)|)

Set SNMP v3 trap hostA.B.C.D: IP addressdefaultEID: EngineID initiated by snmpd itselfmd5:MD5 Authentication protocolsha: SHA Authentication protocolUSER : User nameAUTH_KEY: Authentication passworddes: Privacy protocolPRIVATE_KEY: Privacy password

snmp trap3-host A.B.C.D USER Set SNMP v3 trap hostA.B.C.D: IP addressUSER : User name

snmp trap auth-fail Set SNMP authentication fail trap

snmp trap-counter reset Reset SNMP trap counter. Reset trap counter to 0.

snmp inform-trap-host IP-ADDRESS [COMMUNITY]

Specify IP address of an SNMP inform trap host.

225


Id:0900d8058015ad3c

g You can set maximum 16 SNMP trap hosts, inputting hosts one by one.

The following is an example of setting an SNMP trap host.

SWITCH(config)# snmp trap-host 10.1.1.3SWITCH(config)# snmp trap-host 20.1.1.5SWITCH(config)# snmp trap-host 30.1.1.2SWITCH(config)#

To display a configured SNMP trap, use the following command.

7.1.9 Displaying SNMP ConfigurationTo display all configurations of SNMP, use the following command.

7.1.10 Disabling SNMPTo disable SNMP feature, use the following command.

7.2 Remote Monitoring (RMON)Remote Monitoring (RMON) is a function to monitor communication status of devices connected to Ethernet at remote place. While SNMP can give information only about the


no snmp trap-host IP-ADDRESS Global Delete a specified SNMP trap host.

no snmp trap2-host IP-ADDRESS

no snmp trap3-host IP-ADDRESS

no snmp trap auth-fail

no snmp inform-trap-host IP-ADDRESS

Delete a specified SNMP inform trap host.


show snmp trap PrivilegedGlobal

Show a configuration of SNMP trap.

show snmp trap-counter PrivilegedGlobal

Show a configuration of SNMP trap counter.


show snmp PrivilegedGlobal

Show all configurations of SNMP.


no snmp Global Disable SNMP feature.

!When you use the no snmp command, all configurations concerning SNMP will be deleted.

226


Id:0900d8058015ad3c

Network Management

device mounting an SNMP agent, RMON gives network status information about overall segments including devices. Thus, user can manage network more effectively. For instance, in case of SNMP it is possible to be informed traffic about certain ports but through RMON you can monitor traffics occurred in overall network, traffics of each host connected to segment, and the current status of traffic between hosts.

Since RMON processes quite lots of data, its processor share is very high. Therefore, administrator should take intensive care to prevent performance degradation and not to overload network transmission caused by RMON. There are nine RMON MIB groups defined in RFC 1757: Statistics, History, Alarm, Host, Host Top N, Matrix, Filter, Packet Capture, and Event. The hiX 56xx supports four of them: Statistics, History, Alarm and Event.

7.2.1 RMON HistoryRMON history is periodical sample inquiry of statistical data about each traffic occurred in Ethernet port. Statistical data of all ports are pre-configured to be monitored at 30-minute interval, and 50 statistical data stored in one port. It also allows you to configure the time interval to take the sample and the number of samples you want to save.

The following is an example of displaying the default configuration of RMON history.

SWITCH(config)# show rmon-history config 5 RMON History configu-ration:===========================history index: 5data source: 0/1 (1)buckets requested: 50buckets granted: 50interval time (s): 1800owner: nonestatus: under create SWITCH(config)#

To open RMON Configuration mode, use the following command.

The following is an example of opening RMON Configuration mode with index number 5.

SWITCH(config)# rmon-history 5SWITCH(config-rmonhistory[5])#

Input a question mark <?> at the system prompt on RMON Configuration mode if you want to list available commands.

The following is an example of listing available commands on RMON Configuration mode.

SWITCH(config-rmonhistory[5])# ?RMON history configuration commands:active Activate the historydata-source Set data source port


rmon-history <1-65535> Global Open RMON Configuration mode.1-65535: index number

227


Id:0900d8058015ad3c

do To run exec commands in config modeexit End current mode and down to previous modehelp Description of the interactive help systeminterval Define the time interval for the historyowner Assign the owner who define and is using the historyresourcesrequested-buckets Define the bucket count for the intervalshow Show running system information SWITCH(config-rmonhis-tory[5])#

7.2.1.1 Source Port of Statistical DataTo specify a source port of statistical data, use the following command.

7.2.1.2 Subject of RMON HistoryTo identify a subject using RMON history, use the following command.

7.2.1.3 Number of Sample DataTo configure the number of sample data of RMON history, use the following command.

7.2.1.4 Interval of Sample InquiryTo configure the interval of sample inquiry in terms of second, use the following command.


data-source PORT RMON Specify a source port of statistical CXU uplink port:PORT: enter the uplink port number. (e.g. slot/port for uplink port, slot/port/vcc for data port)


owner NAME RMON Identify subject using related data, enter the name (max. 127 characters).


requested-buckets <1-65535> RMON Define a bucket count for the interval, enter the number of buckets.1-65535: bucket number


interval <1-3600> RMON Define the time interval for the history (in seconds), enter the value.

228


Id:0900d8058015ad3c

Network Management

g 1 sec is the minimum time which can be selected. But the minimum sampling interval currently is 30 sec, i.e., all intervals will be round up to a multiple of 30 seconds.

7.2.1.5 Activating RMON HistoryTo activate RMON history, use the following command.

7.2.1.6 Deleting Configuration of RMON HistoryTo delete an RMON history, use the following command.

7.2.1.7 Displaying RMON HistoryTo display a configured RMON history, use the following command.

g Always the last values will be displayed but no more than the number of the granted buckets.

The following is an example of displaying RMON history.

SWITCH(config-rmonhistory[5])# show rmon-history config 5 RMON History configuration:===========================history index: 5data source: 0/1 (1)buckets requested: 25buckets granted: 25interval time (s): 60owner: teststatus: valid SWITCH(config-rmonhistory[5])#

7.2.2 RMON AlarmYou need to open RMON Alarm Configuration mode first to configure RMON alarm.


active RMON Activate RMON history.


no rmon-history <1-65535> RMON Delete the RMON history of specified number, enter the value for deleting.


show rmon-history config<1-65535>

PrivilegedGlobalRMON

Show the configuration of an RMON history of speci-fied number, enter the value for specifying.

show rmon-history ether-history <1-65535> <1-100>

Show the ether history entries (sampling values);1-65535: enters the history index for ether history table.1-100: enters the number of sample to be displayed.

229


Id:0900d8058015ad3c

7.2.2.1 Subject of RMON AlarmYou need to configure RMON alarm and identify subject using many kinds of data from alarm. To identify subject of alarm, use the following command.

7.2.2.2 Object of Sample InquiryTo assign object used for sample inquiry, use the following command.


rmon-alarm <1-65535> Global Open RMON Alarm Configuration mode.1-65535: index number


owner NAME RMON Identify subject using related data, enter the name (max. 32 characters).


sample-variable MIB-OBJECT RMON Assign MIB object used for sample inquiry, max. 255 characters.

sample-variable (WORD|ifInOc-tets|ifInUcastPkts|ifInNUcastP-kts|ifInDiscards|ifInErrors|ifInUnknownProtos|ifOutOctets|ifOutUcastP-kts|ifOutNUcastPkts|ifOutDis-cards|ifOutErrors|ifInMulticastPkts|ifInBroadcastPkts|ifOutMulticastP-kts|ifOutBroadcastPkts|ifHcInOc-tets|ifHcInUcastPkts|ifHcInMulticastPkts|ifHcInBroadcastPkts|ifHcOu-tOctets|ifHcOutUcastPkts|ifHcOut-MulticastPkts|ifHcOutBroadcastPkts) (PORT|)

RMON Define the counter which is observed,MIB Object OID (max. 255 characters in form X.X...X.IFIDX),ifInOctets: RFC 1213 interface counter value,ifInUcastPkts: RFC 1213 interface counter value,ifInNUcastPkts: RFC 1213 interface counter value,ifInDiscards: RFC 1213 interface counter value,ifIn-Errors: RFC 1213 interface counter value,ifInUnknownProtos: RFC 1213 interface counter value,ifOutOctets: RFC 1213 interface counter value,ifOutUcastPkts: RFC 1213 interface counter value,ifOutNUcastPkts: RFC 1213 interface counter value,ifOutDiscards: RFC 1213 interface counter value,ifOutErrors: RFC 1213 interface counter value,ifInMulticastPkts: RFC 2233 interface counter value,ifInBroadcastPkts: RFC 2233 interface counter value,ifOutMulticastPkts: RFC 2233 interface counter value,ifOutBroadcastPkts: RFC 2233 interface counter value,ifHcInOctets: RFC 2233 interface counter value,ifHcInUcastPkts: RFC 2233 interface counter value,ifHcInMulticastPkts: RFC 2233 interface counter value,ifHcInBroadcastPkts: RFC 2233 interface counter value,ifHcOutOctets: RFC 2233 interface counter value,ifHcOutUcastPkts: RFC 2233 interface counter value,ifHcOutMulticastPkts: RFC 2233 interface counter value,ifHcOutBroadcastPkts: RFC 2233 interface counter value,Port that should be observed (do not enter in case of OID)

230


Id:0900d8058015ad3c

Network Management

7.2.2.3 Absolute and Delta ComparisonThere are two ways to compare with the threshold: absolute comparison and delta com-parison.

– Absolute ComparisonComparing sample data with the threshold at configured interval, if the data is more than the threshold or less than it, alarm is occurred.

– Delta ComparisonComparing difference between current data and the latest data with the threshold, if the data is more than the threshold or less than it, alarm is occurred.

To compare object selected as sample with the threshold, use the following command.

To configure delta comparison, use the following command.

7.2.2.4 Upper Bound of ThresholdIf you need alarm occur when object used for sample inquiry is more than upper bound of threshold, you have to configure the upper bound of threshold.

To configure upper bound of threshold, use the following command.

After configuring upper bound of threshold, configure to generate RMON event when object is more than configured threshold. Use the following command.

7.2.2.5 Lower Bound of ThresholdIf you need alarm occur when object used for sample inquiry is less than lower bound of threshold, you should configure lower bound of threshold. To configure lower bound of threshold, use the following command.


sample-type absolute RMON Compare object with the threshold directly.


sample-type delta RMON Compare difference between current data and the latest data with the threshold.


rising-threshold VALUE RMON Configure upper bound of threshold.VALUE: 0-2147483647


rising-event <1-65535> RMON Configure to generate RMON event when object is more than configured threshold.1-65535: event index


falling-threshold VALUE RMON Configure lower bound of threshold.

231


Id:0900d8058015ad3c

After configuring lower bound of threshold, configure to generate RMON event when object is less than configured threshold. Use the following command.

7.2.2.6 Standard of the First AlarmIt is possible for users to configure standard when alarm is first occurred. User can select the first point when object is more than threshold, or the first point when object is less than threshold, or the first point when object is more than threshold or less than thresh-old.

To configure the first RMON alarm to occur when object is less than lower bound of threshold first, use the following command.

To configure the first RMON alarm to occur when object is more than upper bound of threshold first, use the following command.

To configure the first RMON alarm to occur when object is firstly more than threshold or less than threshold, use the following command.

7.2.2.7 Interval of Sample InquiryThe interval of sample inquiry means time interval to compare selected sample data with upper bound of threshold or lower bound of threshold in terns of seconds.

To configure interval of sample inquiry for RMON alarm, use the following command.


falling-event <1-65535> RMON Configure to generate RMON alarm when object is less than configured threshold.


startup-type falling RMON Configure the first RMON Alarm to occur when object is less than lower bound of threshold first.


startup-type rising RMON Configure the first Alarm to occur when object is firstly more than upper bound of threshold.


startup-type rising-and-falling RMON Configure the first Alarm to occur when object is firstly more than threshold or less than threshold.


sample-interval <0-65535> RMON Configure interval of sample inquiry.(unit: second)

232


Id:0900d8058015ad3c

Network Management

7.2.2.8 Activating RMON AlarmAfter finishing all configurations, you need to activate RMON alarm. To activate RMON alarm, use the following command.

7.2.2.9 Deleting Configuration of RMON AlarmTo delete RMON alarm, use the following command.

7.2.2.10 Displaying RMON AlarmTo display a configured RMON alarm, use the following command.

7.2.3 RMON EventRMON event identifies all operations such as RMON alarm in the switch. You can con-figure event or trap message to be sent to SNMP management server when sending RMON alarm.

You need to open RMON Event Configuration mode to configure RMON event.

7.2.3.1 Event CommunityWhen RMON event happens, you need to input community to transmit SNMP trap message to host. Community means a password to give message transmission right.

To configure community for trap message transmission, use the following command.


active RMON Activate RMON alarm.


no rmon-alarm <1-65535> Global Delete RMON history of specified number, enter the value for deleting.


show rmon-alarm config<1-65535>

GlobalRMON

Show the configuration of an RMON alarm of speci-fied number, enter the value for specifying.


rmon-event <1-65535> Global Open RMON Event Configuration mode.1-65535: index number


community NAME RMON Configure password for trap message transmission right.

233


Id:0900d8058015ad3c

7.2.3.2 Event DescriptionIt is possible to describe event briefly when event happens. However, the description will not be automatically made. Thus administrator should make the description.

To specify a description about the current RMON event, use the following command.

7.2.3.3 Subject of RMON EventYou need to configure event and identify subject using various data from event. To identify subject of RMON event, use the following command.

7.2.3.4 Event TypeWhen RMON event happens, you need to configure event type to arrange where to send event.

To configure event type, use the following command.

7.2.3.5 Activating RMON EventAfter finishing all configurations, you should activate RMON event. To activate RMON event, use the following command.

7.2.3.6 Deleting Configuration of RMON EventTo delete RMON event, use the following command.


description DESCRIPTION RMON Specify the description of the current RMON event.


owner NAME RMON Identify subject of event. You can use maximum 126 characters and this subject should be same with the subject of RMON event.


type log RMON Configure event type as log type. Event of log type is sent to the place where the log file is made.

type trap Configure event type as trap type. Event of trap type is sent to SNMP administrator and PC.

type log-and-trap Configure event type as both log type and trap type.

type none Configure none event type.


Active RMON Activate RMON event.


no rmon-event <1-65535> Global Delete RMON event of specified number.

234


Id:0900d8058015ad3c

Network Management

7.2.3.7 Displaying RMON EventTo display a configured RMON event, use the following command.

7.2.3.8 Showing RMON LogTo show RMON log, use the following command.

7.3 SyslogThe syslog is a function that allows the network element to generate the event notifica-tion and forward it to the event message collector like a syslog server. This function is enabled as default, so even though you disable this function manually, the syslog will be enabled again.

This section contains the following contents.

– Syslog Output Level– Facility Code– Syslog Bind Address– Debug Message for Remote Terminal– Enabling/Disabling Syslog– Displaying Syslog Message– Displaying Syslog Configuration

7.3.1 Syslog Output LevelSyslog Output Level without a Priority

To set a syslog output level, use the following command.

To disable a specified syslog output, use the following command.


show rmon-event config<1-65535>

GlobalRMON

Show the configuration of an RMON event of speci-fied number, enter the value for specifying.


show rmon-log Global Show RMON log information.


syslog output {emerg | alert | crit | err | warning | notice | info | debug} console

Global Generate a syslog message of selected level or higher and forwards it to the console.

syslog output {emerg | alert | crit | err | warning | notice | info | debug} local {volatile | non-volatile}

Generate a syslog message of selected level or higher in the system memory.volatile: deletes a syslog message after restart.non-volatile: reserves a syslog message.

syslog output {emerg | alert | crit | err | warning | notice | info | debug} remote IP-ADDRESS

Generate a syslog message of selected level or higher and forwards it to a remote host.

235


Id:0900d8058015ad3c

Syslog Output Level with a Priority

To set a user-defined syslog output level with a priority, use the following command.

To disable a user-defined syslog output level, use the following command.


no syslog output {emerg | alert | crit | err | warning | notice | info | debug} console

Global Delete a specified syslog output.

no syslog output {emerg | alert | crit | err | warning | notice | info | debug} local {volatile | non-volatile}

no syslog output {emerg | alert | crit | err | warning | notice | info | debug} remote IP-ADDRESS


syslog output priority {auth | authpriv | cron | daemon | kern | local1 | local2 | local3 | local4 | local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp} {emerg | alert | crit | err | warning | notice | info} console

Global Generate a user-defined syslog message with a priority and forwards it to the console.

syslog output priority {auth | authpriv | cron | daemon | kern | local1 | local2 | local3 | local4 | local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp} {emerg | alert | crit | err | warning | notice | info} local {volatile | non-volatile}

Generate a user-defined syslog message with a priority in the system memory.volatile: delete a syslog message after restart.non-volatile: reserve a syslog message.

syslog output priority {auth | authpriv | cron | daemon | kern | local1 | local2 | local3 | local4 | local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp} {emerg | alert | crit | err | warning | notice | info} remote IP-ADDRESS

Generates a user-defined syslog message with a priority and forwards it to a remote host.

236


Id:0900d8058015ad3c

Network Management

g The order of priority is emergency > alert > critical > error > warning > notice > info. If you set a specific level of syslog output, you will receive only a syslog message for selected level or higher. If you want receive a syslog message for all the levels, you need to set the level to info.

7.3.2 Facility CodeYou can set a facility code of the generated syslog message. This code makes a syslog message distinguished from others, so network administrator can handle various syslog messages efficiently.

To set a facility code, use the following command.

7.3.3 Syslog Bind AddressYou can specify an IP address to attach to the syslog message for its identity. To specify the IP address for syslog identity, use the following command.


no syslog output priority {auth | authpriv | cron | daemon | kern | local1 | local2 | local3 | local4 | local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp} {emerg | alert | crit | err | warning | notice | info} console

Global Delete a specified user-defined syslog output level with a priority.

no syslog output priority {auth | authpriv | cron | daemon | kern | local1 | local2 | local3 | local4 | local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp} {emerg | alert | crit | err | warning | notice | info} local {volatile | non-volatile}

no syslog output priority {auth | authpriv | cron | daemon | kern | local1 | local2 | local3 | local4 | local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp} {emerg | alert | crit | err | warning | notice | info} remote IP-ADDRESS


syslog local-code <0-7> Global Sets a facility code.

no syslog local-code Deletes a specified facility code.


syslog bind-address A.B.C.D Global Specify an IP address for a syslog message identity.

no syslog bind-address Delete a specified binding IP address.

237


Id:0900d8058015ad3c

7.3.4 Debug Message for Remote TerminalTo display a syslog debug message to a remote terminal, use the following command.

7.3.5 Enabling/Disabling SyslogTo enable/disable the syslog, use the following command.

g The syslog is basically enabled in the system, so the command, syslog start, is nec-essary only when the function is manually disabled by user.

7.3.6 Displaying Syslog MessageTo display the received syslog message in the system memory, use the following command.

To delete the received syslog message from the system memory, use the following command.

7.3.7 Displaying Syslog ConfigurationTo display the configuration of the syslog, use the following command.

The following is an example of displaying the configuration of the syslog.

SWITCH(config)# show syslogSystem logger on running! infolocal volatile


terminal monitor Privileged Enable a terminal monitor function.

terminal no monitor Disable a terminal monitor function.


syslog start Global Enable the syslog.

no syslog Disable the syslog.


show syslog local {volatile | non-vol-atile} [NUMBER]

PrivilegedGlobal

Show a received syslog message.volatile: removes a syslog message after restart.non-volatile: reserve a syslog message.NUMBER: show the last N syslog messages.


clear syslog local {volatile | non-vol-atile}

Global Remove a received syslog message.


show syslog PrivilegedGlobal

Show the configuration of the syslog.

238


Id:0900d8058015ad3c

Network Management

inforemote 10.27.41.11infoconsoleemergconsoleSWITCH(config)#

239

Operation Manual CLI IP Routing Protocols

Id:0900d8058016849d

8 IP Routing Protocols

8.1 BGP Routing ProtocolBGP (border gateway protocol) is, as defined in RFC 1163, 1267, EGP (exterior gateway protocol) to connect to exterior Network. BGP manages routing information in network so that an autonomous system (AS) can transmit and receive routing informa-tion. BGP consists of network number, which packet is passed through and autonomous system number. The system supports BGP version 4 defined in RFC 1771. BGP version 4 provides Aggregate route by using CIDR (classless interdomain routing) to reduce size of routing table. CIDR provides IP prefix, which is network address instead of IP address on BGP network. OSPF and RIP can also transmit CIDR path.

The hiX 56xx system, which takes BGP protocol, is intended to exchange AS and path reaching to AS between BGP equipments. By doing it, user can prevent routing Loop and take the most effective AS information.

User can configure MED (multi exit discriminator) by using route map. When new routing information is transmitted to neighbor BGP, MED is passed without any change. Thus, BGP routers located in same AS can select path with same standard.

8.1.1 Basic ConfigurationBGP configuration is roughly divided into basic configuration and advanced configura-tion. Basic configuration includes the following.

• Activating BGP Routing • Configuring BGP neighbor router • Changing routing policy • Configuring BGP weights • BGP route filtering • AS Route Filtering • BGP Filtering through Prefix Lists • Blocking information transmission to next destination • Configuring BGP version.

8.1.1.1 Activating BGP RoutingIn order to activate the BGP router, use the following command.

AS number is an identification of autonomous system used for detecting the BGP con-nection. AS number 65512 through 65535 are defined as private AS number. Private number cannot be advertised on the config Internet.


router bgp <1-65535> Config Assigns AS number to configure BGP routing, enter the AS number.

240


Id:0900d8058016849d

IP Routing Protocols

8.1.1.2 AS Route FilteringAs filtering information with network address on BGP network, it is possible to filter information going through AS. Policies applied to decide route are registered in access list. In order to filter routing information with AS standard, configure filtering policy in access list and apply the policy to neighbor router.

Define specific AS in access list.

8.1.1.3 BGP Filtering through Prefix ListsWhen you restrict BGP route, prefix list is preferred than access list because of the fol-lowing reasons;

• saves time to search and apply data in case of massive filter lists. • unlimited registration in filter lists. • easy to use.

Before applying prefix list, user should configure prefix list. User can assign number to each policy registered in prefix list.

Traffic filtering operation through prefix lists

Filtering through prefix list processes routing information in specific order by applying policy defined in filter list. It is similar to access list but there are more detail rules as follow.

• Allows all network information if there is no defined policy in prefix list. • Rejects specified network information unless policy applied to network is defined in

prefix list. • Distinguishes each policy with the assigned number and applies policy which has

the lowest number when there are more than one policy applied to one network.

Routers search policy in prefix list from the Privilegedin order. When they find required policy, they Previleged searching. For faster operation, user can make quick search list on the Privilegedof the list by using seq provided from ip prefix-list. In order to view assigned number to policy, use the command, show ip prefix-list.

Policies configured by user are automatically assigned number. If you do not configure it, you should assign number to each policy by using the command, ip prefix-list SEQ-VALUE.

Making prefix list

In order to create prefix list, use one of the following command.


ip as-path access-list WORD {permit | deny} LINE

Config Defines specific AS in access list:WORD: enter the access list numberLINE: enter a regular expression


ip prefix-list WORD {deny | permit} A.B.C.D/M ge <0-32> [le <0-32>]

Config Configures list name when creating prefix list.

ip prefix-list WORD {deny | permit} A.B.C.D/M le <0-32> [ge <0-32>]


241


Id:0900d8058016849d

g In order to create prefix list, you should select permit or deny.

Creating prefix list policy

You can add policy to prefix list one by one. Use the following command.

You can input ge and le optionally, and they are used when you configure more than one network. If you do use neither ge nor le, network range is more clearly configured. When only ge attribute us configured, network range is configured from ge value, and when only le attribute is configured, network range is configured from netmask to le value.

Viewing prefix list policy

In order to check information about prefix table, use one of the following command.

Deleting number of inquiring prefix list

By default system records number how many times prefix list is inquired. In order to delete the number, use the following command.

ip prefix-list WORD {deny | permit} {A.B.C.D/M I any]


ip prefix-list WORD description LINE Config Makes additional description to prefix list.


ip prefix-list NAME seq <1-4294967295> {deny | permit} {A.B.C.D/M I any}

Config Configures policy of prefix list and assigns number to the policy.

ip prefix-list NAME seq <1-4294967295> {deny | permit} A.B.C.D/M ge <0-32> [le <0-32>]


ip prefix-list NAME seq <1-4294967295> {deny | permit} A.B.C.D/M le <0-32> [ge <0-32>]



show ip prefix-list [detail | summary] Privileged/Config Shows prefix lists in detail or briefly.

show ip prefix-list [detail | summary] WORD

Privileged/Config Shows prefix list of specified name.

show ip prefix-list WORD [seq number] Privileged/Config Shows policy of specified number.

show ip prefix-list WORD A.B.C.D/M Privileged/Config Shows policy applied to specified network.

show ip prefix-list WORD A.B.C.D/M longer

Privileged/Config Shows all policies of prefix list applied to specified network.

show ip prefix-list WORD A.B.C.D/M first-match

Privileged/Config Shows policy first applied to specified network.


clear ip prefix-list WORD [A.B.C.D/(M]

Privileged Deletes the number how many times prefix list is inquired.


242


Id:0900d8058016849d


8.1.2 Advanced ConfigurationAfter finishing basic configuration, it is possible to do advanced configuration. It contains the following sections.

• Configuring BGP Community Filtering • Checking and Managing BGP

8.1.2.1 Configuring BGP Community FilteringBGP supports transmit policy distributing routing information. Distributing routing infor-mation is operated based on not only community list but also IP address and AS route. Community list makes community according to each destination and routing policy is applied based on community standard.

It helps configure BGP speaker that distributes routing information.

Community is destination group that shares some common attributes. One destination can be belonged to more than one community. As administrator can configure to which community destination is belonged. By default, all destinations are configured to be in internet community.

The other defined and well-known communities are as the below.

• no-export:Do not distribute this route to exterior BGP neighbor router

• no-advertise: (either exterior or interior) Do not distribute this route to neighbor router.

• local-as:Distribute this information to neighbor routers of low level AS located on BGP united network. Do not distribute it to exterior router.

In order to create community list, use the following command.

community is notated with a form, AA:NN as defined in RFC. AA is AS number and NN is number of 2 bytes.

8.1.2.2 Checking and Managing BGPUser can delete all factors of cache, table and database. Also it is possible to display specific statistics.

1. Deleting cache, table and database

You can delete all contents of specific cache, table, and database when some factors are invalid or unreliable. In order to delete cache, table or database, use the following command.


ip community-list WORD {permit | deny} LINE Config Creates community list.

ip community-list <1-99> {permit | deny} [LINE] Config Creates community list.

ip community-list <100-199> {permit | deny} [LINE] Config Creates community list.


clear ip bgp { * I ip-address I as-number} [in | out I soft [in I out]]

Privileged Reconfigures information about BGP neighbor router, AS group, all (*) BGP connections.

243


Id:0900d8058016849d

2. Displaying system and network statistics

You can display specific statistics such as contents of BGP routing table, cache, and database. Information provided can be used to determine resource utilization and solve network problems.

You can also display information about node reachability and discover the routing path your device's packets are taking through the network. In order to display various routing statistics, use one of the following command.

8.2 OSPF ProtocolOSPF (open shortest path first) is an interior gateway protocol developed by the OSPF working group of IETF (Internet engineering task force). OSPF designed for IP network supports IP subnetting and marks on information from exterior network.

Moreover, it supports packet authorization and transmits/receives routing information through IP multicast. It is most convenient to operate OSPF on layered network.


show ip bgp prefix-list NAME Privileged/ Config

Shows peers to which the prefix has been advertised.

show ip bgp cidr-only Privileged/ Config

Displays all BGP routes including subnetwork and upper network.

show ip bgp community [number | local-AS | no-advertise | no-export]

Privileged/ Config

Displays route belonged in specific community. Commu-nity Number is formed as AA:NN.

show ip bgp community-list WORD [exact-match|]

Privileged/ Config

Shows all routes that are permitted by the community list:WORD: enter the name of the list.

show ip bgp community-info Privileged/ Config

Displays all information of BGP community.

show ip bgp filter-list WORD Privileged/ Config

Shows routes that are matched by the specified autono-mous system route in access list, enter the name of the list.

show ip bgp regexp LINE Privileged/ Config

Shows routes that match the specified regular expres-sion entered on the command line, enter a regular expression for LINE.

show ip bgp attribute-info Privileged/ Config

Shows all information of BGP attributes.

show ip bgp neighbors[ip-address]

Privileged/ Config

Shows detail information on TCP and BGP connections to individual neighbors.

show ip bgp neighborsip-address [advertised-routes | received-routes | routes]

Privileged/ Config

Shows information about the TCP and BGP connections to neighbors. The advertised-routes option displays all the routes the router has advertised to the neighbor. The received-routes option displays all received routes (both accepted and rejected) from the specified neighbor. The routes option displays all routes that are received and accepted.

show ip bgp paths Privileged/ Config

Shows all BGP routes in database.

show ip bgp summary Privileged/ Config

Shows all BGP connections.

244


Id:0900d8058016849d


The first thing you should do on OSPF network is to configure border router and AS boundary router. And then, you need to configure basic setting to operate OSPF router and interface in area.

When you customize OSPF router for user’s environment, you have to check that all configurations are same in each router.

8.2.1 Enabling OSPFIn order to configure routing protocol use the following command.

8.2.2 Configuring Network OSPF TypeOSPF network is divided into three types as follow. • Broadcast network • NBMA (nonbroadcast multi-access) network • Point-to-point network.

It is possible to configure OSPF network as broadcast type or non-broadcast type. For example, if user’s network does not support multicasting, it is possible to configure broadcast network as nonbroadcast type. Conversely, it is also possible to configure NBMP network such as frame relay as broadcast type.

To operate network as NBMA type, all routers should be connected through virtual circuit. However, it is possible to connect to some part of OSPF network with using virtual circuit through point-to-multipoint function so that network management cost can be saved. Two routers that are not directly connected should transmit and receive routing information through intermediate router. So, you do not have to configure neighbor router anymore.

The followings are features of OSPF point-to-multipointing type.

– IP source is economized because you do not have to assign Neighbor router and there is no additional process to configure designated router.

– Management cost is saved because it does not need to be linked with all router on network like a spider's thread.

– It can provide more stable network service since it can communicate even when virtual circuit is disconnected.

In order to configure OSPF network type, use the following command.

8.3 RIP Protocol RIP (routing information protocol) is commonly used, for use in small, homogeneous networks. It is a classical distance-vector routing protocol with using hop count. RIP is


router ospf Config Enters into Router configuration mode.

no router ospf Config Enters into previous mode.


ip ospf network {broadcast | non-broad-cast | (point-to-multipoint | point-to-point)}

Interface Configures OSPF network type in OSPF interface.

no ip ospf network Interface Deletes OSPF network type in OSPF interface.

245


Id:0900d8058016849d

documented in RFC 1058. RIP uses broadcast UDP (user datagram protocol) data packets to exchange routing information. The OS software sends routing information updates every 30 seconds. This process is termed advertised. If a router does not receive an update from another router for 180 seconds or more, it marks the routes served by the nonupdating router as being unusable. If there is still no update after 120 seconds, the router removes all routing table entries for the nonupdating router. The metric that RIP uses to rate the value of different routes is hop count. The hop count is the number of routers that can be traversed in a route. A directly connected network has a metric of zero; an unreachable network has a metric of 16. This small range of metrics makes RIP an unsuitable routing protocol for large networks. A router that is running RIP can receive a default network via an update from another router that is running RIP, or the router can source (generate) the default network itself with RIP. In both cases, the default network is advertised through RIP to other RIP neighbors. RIP sends updates to the interfaces in the specified networks.

If an interface's network is not specified, it will not be advertised in any RIP update. The system supports RIP version 1and 2.

8.3.1 Enabling RIP To use RIP protocol, you should enable RIP.

Step 1 In order to enter into Router configuration mode, use the following command.

Step 2 Configure network to operate as RIP.

The command network A.B.C.D./M enables RIP interfaces between certain numbers of a special network address. For example, if the network for 10.0.0.0/24 is RIP enabled, this would result in all the addresses from 10.0.0.0 to 10.0.0.255 being enabled for RIP.

• Configuring RIP Neighbor Router • Configuring RIP Version • Creating Static Route available only for RIP • Transmitting Routing Information • Configuring Metrics for Redistributed Routes • Configuring Administrative Distance • Creating Default Route • Routing Information Filtering • Configuring Time • Configuring Split-Horizon • Managing Authentication Key • Monitoring and Managing RIP


router rip Config Enters into Router configuration mode and operates RIProuting protocol.


network A.B.C.D/M [backdoor] Router Configures network to operate as RIP.

network A.B.C.D/M route-map WORD {backdoor I]

Router Configures network to operate as RIP.

246


Id:0900d8058016849d


8.3.2 Configuring RIP Neighbor Router Since RIP is broadcast protocol, routers should be connected to transmit routing infor-mation of RIP to non-broadcast network.

In order to configure neighbor router to transmit RIP information, use one of the following command.


neighbor {A.B.C.D I WORD} activate Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} advertisement-interval <0-600> Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} allows-in [<1-10>] Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} atribute-unchaned [{as-path I next-hop I med}]

Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} atribute-unchaned as-path {next-hop I med}


neighbor {A.B.C.D I WORD} atribute-unchaned as-path med next-hop


neighbor {A.B.C.D I WORD} atribute-unchaned as-path next-hop med


neighbor {A.B.C.D I WORD} atribute-unchaned med {as-path I next-hop}


neighbor {A.B.C.D I WORD} atribute-unchaned med as-path next-hop


neighbor {A.B.C.D I WORD} atribute-unchaned next-hop {as-path I med}


neighbor {A.B.C.D I WORD} atribute-unchaned next-hop as-path med


neighbor {A.B.C.D I WORD} atribute-unchaned next-hop med as-path


neighbor {A.B.C.D I WORD} capability dynamic Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} capability orf prefix-list {both I receive I send}


neighbor {A.B.C.D I WORD} capability route refresh Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} collide-established Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} default-originate [route-map WORD]


neighbor {A.B.C.D I WORD} description LINE Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} distribute-list {<1-199> I <1300-2699> I WORD} {in, I out}


neighbor {A.B.C.D I WORD} dont-capability-negotiate Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} ebgp-multihop [<1-255>] Router Configure neighbor router to transmit routing information.

247


Id:0900d8058016849d

neighbor {A.B.C.D I WORD} enforce-multihop Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} filter-list WORD {in I out} Router Configure neighbor router to transmit routing information.

neighbor A.B.C.D interface WORD Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} maximumprefix <1-4294967295> [<1-100] [warning-only]


neighbor {A.B.C.D I WORD} maximumprefix <1-4294967295> warning-only


neighbor {A.B.C.D I WORD} next-hop-self Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} override-capability Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} passive Router Configure neighbor router to transmit routing information.

neighbor A.B.C.D peer-group WORD Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} port <0-65535> Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} prefix-list WORD {in, I out} Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} remote-as <1-65535> Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} remote-private-AS Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} prefix-list WORD {in, I out} Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} route-reflector-client Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} route-server-client Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} sent-community [{both I extended I standard}]


neighbor {A.B.C.D I WORD} shutdown Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} soft-reconfiguration inbound Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} strict-capabilitx-match Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} timers <0-65535> <0-65535> Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} timers connect <0-65535> Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} transparent-as Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} transparent-nexthop Router Configure neighbor router to transmit routing information.


248


Id:0900d8058016849d


You can block routing information to specific interface by using passive-interface command.

8.3.3 Configuring RIP Version Siemens’ routers basically support RIP version 1 and 2. However, you can configure to receive only version 1 type packet or only version 2 type packet. In order to configure RIP version, use the following command.

The preceding task controls default RIP version settings. You can override the routers RIP version by configuring a particular interface to behave differently. To control which RIP version an interface sends, perform one of the following tasks after entering into RIP interface configuration mode.

Similarly, to control how packets received from an interface are processed, perform one of the following tasks.

8.3.4 Creating Static Route available only for RIPThis feature is provided only by Siemens’ route command creates static route available only for RIP. If you are not familiar with RIP protocol, you would better use redistribute static command.

neighbor {A.B.C.D I WORD} unsuppres-map WORD Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} updata-source WORD Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} version {4} Router Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} weight <0-65535>} Router Configure neighbor router to transmit routing information.

neighbor WORD peer-group Router Configure neighbor router to transmit routing information.



version <1-2> Router Configures version to transmit one of RIP 1 type packet and RIP 2 type packet.


ip rip send version 1 Interface Transmits only RIP version 1 type packet in the interface.

ip rip send version 2 Interface Transmits RIP version 2 type packet on the interface.

ip rip send version 1 2 Interface Transmits RIP version 1 and 2 type packets.


ip rip receive version 1 Interface Receives only RIP version 1 type packet in the inter

ip rip receive version 2 Interface Receives only RIP version 2 type packet on the interface.

ip rip receive version 1 2 Interface Receives RIP version 1 and 2 type packets.

249


Id:0900d8058016849d

8.3.5 Transmitting Routing InformationThe system can redistribute routing information from a source route entry into the RIP tables. For example, you can instruct the router to re-advertise connected, kernel, or static routes as well as routing protocol-derived routes. This capability applies to all the IP-based routing protocols.

In order to redistribute routing information from a source route entry into the RIP table, use the following command.

You may also conditionally control the redistribution of routes between the two domains using route map command. In order to define a route map for redistribution, use the following command.

One or more match and set commands typically follow route-map command. If there are no match commands, then everything matches. If there are no set commands, nothing is done. Therefore, you need at least one match or set command. To define conditions for redistributing routes from a source route entry into the RIP tables, perform at least one of the following tasks in route-map configuration node.

8.3.6 Configuring Metrics for Redistributed Routes The metrics of one routing protocol do not necessarily translate into the metrics of another. For example, the RIP metric is a hop count and the OSPF metric is a combina-tion of five quantities. In such situations, an artificial metric is assigned to the redistrib-uted route. Because of this unavoidable tampering with dynamic information, carelessly


route IP-ADDRESS/M Router Creates static route available only for RIP.


redistribute {kernel I connected | static | rip I ospf | isis} [route-map WORD]

Router Registers transmitted routing information in another router’s RIP table.


route-map WORD {deny | permit} <1-65535> Config Creates route map.


match interface INTERFACE-NAME Route-map Transmits information to only specified interface.

match ip address {access-list-name |prefix-list ip-address-name}

Route-map Transmits information matched with access-list or prefix-list.

match ip next-hop {access-list-name | prefix-list ip-address-name}

Route-map Transmits information to only neighbor router in accesslist or prefix-list.

match metric <0-4294967295> Route-map Transmits information matched with specified metric, enter the metric value.

set ip next-hop IP-ADDRESS Route-map Configures Neighbor router address.

set metric {<0-2147483647> I <+/-metric>}

Route-map Configures metric value.

250


Id:0900d8058016849d


exchanging routing information between different routing protocols can create routing loops, which can seriously degrade network operation.

In order to set metrics for redistributed routes, use the following command.

g The metric of all protocols can be configured from 0 to 16777214. It can be config-ured from 1 to 16 for RIP.

8.3.7 Configuring Administrative Distance Distance value represents confidence of routing information created by router. In large scaled network, some routing protocols or routing information may be more confident than other protocols or routers. Therefore, although a router has many routing protocols, the most confident route can receive routing information. When user configures distance value, router can find where routing information is created. Router always selects route created by routing protocol of the smallest distance value . Each network has its own features. So, there is no general rule for distance configuration. You should consider overall network to configure distance value.

In order to configure distance value, use the following command.

8.3.8 Creating Default Route You can force an autonomous system boundary router to generate a default route into an RIP routing domain. Whenever you specifically configure redistribution of routes into an RIP routing domain, the router automatically becomes an autonomous system boundary router. However, an autonomous system boundary router does not, by default, generate a default route into the RIP routing domain.

In order to force the autonomous system boundary router to generate a default route, use the following command.

8.3.9 Routing Information Filtering You can filter routing protocol information by performing the following tasks.

• Suppress sending of routing updates on a particular router interface. This is done to prevent other systems on an interface from learning about routes dynamically.

• Apply an offset to routing metrics. This is done to provide a local mechanism for increasing the value of routing metrics.


default-metric <0-16777214> Router Configures same metric for all route transmitted by routing protocol, enter the value.


distance <1-255> [ip-address/M [access-list-name]] Router Configures distance value.


default-information originate Router Forces the autonomous system boundary router to generate a default route into the RIP routing domain.

251


Id:0900d8058016849d

Blocking Outgoing Routing Information to Interface

To prevent other routers on a local network from learning about routes dynamically, you can keep routing update messages from being sent through a router interface. This feature applies to all IP-based routing protocols except BGP.

Configuring Offset List

An offset list is the mechanism for increasing incoming and outgoing metrics to routes learned via RIP. You can limit the offset list with an access list.In order to increase the value of routing metrics, use the following command.

8.3.10 Configuring Time Routing protocols use several timers that determine such variables as the frequency of routing updates, the length of time before a route becomes invalid, and other parame-ters. You can adjust these timers to tune routing protocol performance to better suit your internet needs. The default settings for the timers are as follows.

• The update timer is 30 seconds. Every update timer seconds, the RIP process is awakened to send an unsolicited response message containing the complete routing table to all neighboring RIP routers.

• The timeout timer is 180 seconds. Upon expiration of the timeout, the route is no longer valid; however, it is retained in the routing table for a short time so that neigh-bors can be notified that the route has been dropped

• The garbage collect timer is 120 seconds. Upon expiration of the garbage-collection timer, the route is finally removed from the routing table.

In order to adjust the timers, use the following command.

8.3.11 Configuring Split-Horizon Normally, routers that are connected to broadcast-type IP networks and that use distance-vector routing protocols employ the split horizon mechanism to reduce the pos-sibility of routing loops. Split horizon blocks information about routes from being adver-tised by a router out any interface from which that information originated. This behavior usually optimizes communications among multiple routers, particularly when links are broken. However, with non broadcast networks, such as Frame Relay, situations can arise for which this behavior is less than ideal. For these situations, you might want to disable split horizon.


passive-interface interface-name Router Blocks routing information from interface of router.


offset-list ACCESSLIST NAME {in | out} <0-16< [inter-face]

Router Applies an offset to routing metries.


timers basic update timeout garbage Router Adjusts routing protocol timers.

252


Id:0900d8058016849d


If an interface is configured with secondary IP addresses and split horizon is enabled, updates might not be sourced by every secondary address. One routing update is sourced per network number unless split horizon is disabled.

In order to activate or deactivate or disable split horizon, perform the following tasks in interface configuration mode.

8.3.12 Managing Authentication Key RIP Version 1 does not support authentication. If you are sending and receiving RIP Version 2 packets, you can enable RIP authentication on an interface.

The key chain determines the set of keys that can be used on the interface. If a key chain is not configured, plain text authentication can be performed using string command.

We support two modes of authentication on an interface for which RIP authentication is enabled: plain text authentication and MD5 authentication. The default authentication in every RIP Version 2 packet is plain text authentication.

g Do not use plain text authentication in RIP packets for security purposes, because the unencrypted authentication key is sent in every RIP Version 2 packet. Use plain text authentication when security is not an issue, for example, to ensure that mis-configured hosts do not participate in routing.

In order to configure RIP authentication, use one of the following command.

8.3.13 Monitoring and Managing RIP You can display specific router statistics such as the contents of IP routing tables, and databases. Information provided can be used to determine resource utilization and solve network problems. You can also discover the routing path your router’s packets are taking through the network.

In order to display various router statistics, use one of the following command.


ip split-horizon Interface Activates Split horizon.

no ip split-horizon Interface Deactivates Split horizon.


ip rip authentication KEY-CHAIN NAME

Interface Activates RIP authentication.

ip rip authentication mode {text | md5} Interface Configures the interface to use MD5 digest authen-tication or let it default to simple password authenti-cation.

ip rip authentication string STRING Interface Configures the interface with plain text authentica-tion. The string must be shorter than 16 characters.


show ip rip Privileged/ Config Shows RIP information being used in router.

show ip protocols Privileged/ Config Shows current status of using RIP protocol and the infor-mation.

253


Id:0900d8058016849d

8.4 IS-IS RoutingIS-IS (Intermediate System to Intermediate System) routing can be used inside the routing domain to form adjacencies between all L3 nodes of the same domain. The implementation of IS-IS routing is dedicated to IP routing (Integrated IS-IS), according to RFC1142 and RFC1195. Connectionless network routing and End System-IS discovery are not supported.

• Router Configuration • Password • Packet Type Parameters • Metrics • Mesh Groups • Checking current Configuration

8.4.1 Router ConfigurationThe system makes use of Level 1 IS-IS routing:

• Level 1 (L1) routers know the topology inside their area, including all routers and hosts. They forward all traffic for destinations outside by using a Level 2 (L2) router within their area which knows the domain (level 2) topology. All L1 routers and hosts in an area must have a Network Service Access Point (NSAP) with the same area address.

• Level 2 (L2) routers connect all areas within a routing domain. They advertise their own area addresses (NSAP) to the other L2 routers in the backbone.

L1 and L2 routers have two link-state databases: a level 1 link-state database for intra-area routing and a level 2 link-state database for inter-area routing. The routing tables are builded calculating the shortest path tree (SPT) by each IS.

g On the point-to point interface IS-IS Hello will be sent regardless of the circuit-type.


router isis {WORD | } Config Initiates IS-IS routing instance and enters router configu-ration mode.WORD: ISO instance tag (e.g. symbolic router name excluding spaces)Remove IS-IS routing instance with the no command.

ip router isis {WORD | } Config/Interface

Enable an IS-IS IPv4 routing process on the interface.This command is mandatory to IS-IS configuration!WORD: existing or new routing instance tag (e.g. symbolic router name)WORD: Routing process tag (excluding spaces)Disable IS-IS routing on the interface with the no command (To clear the database, unconfigure the IS-IS routing instance.)

isis priority <0-127> {level-1 | level-2 | }

Config/Interface

Set priority for designated router election.<0-127>: Priority value (default priority is 64 for both level-1 and level-2)level-1: Specify priority for level-1 routinglevel-2: Specify priority for level-2 routing

isis circuit-type {level-1 | level-1-2 | level-2-only}

Config/Interface

Configure circuit type for the interface.level-1: Level-1 only adjacencies are formedlevel-1-2: Level-1-2 adjacencies are formed (this is the default circuit typ)level-2-only: Level-2 only adjacencies are formed

254


Id:0900d8058016849d


8.4.2 PasswordIS-IS specifies an authentication mechanism to prevent unauthorized routers from forming adjacencies or injecting TLVs (Table-length-value). The authentication can only be activeted globally but can be configured independently for L1 and L2 Hello PDUs (Protocol Data Unit). By default no password is used.

g On point-to-point interfaces for both L1 and L2 the same password must be config-ured.

8.4.3 Packet Type ParametersIS-IS is used to intermittently send out link state information across the network, so that each router can maintain a current picture of network topology. For messages four packet types are used:

• Hello-packets are used for functions capability announcement and neighbor discov-ery

• LSP-packets (Link state PDU) are used to distribute routing information between the IS-IS notes, e.g. network topology information and IP addresses.

• CSNP-packets (Complete Sequence Number PDU) contains a list of all LSPs from the current link state database, using to be ensure that all routers of LSPs have the same information and are synchronized.

• PSNP-packets (Partial Sequence Number PDU) are used to request one or more LSPs and acknowledge their receiption.

Use the following commands to configure the message intervals and attributes:

summary-address A.B.C.D/M Config/Router

Configure summary address to summarize IPv4 reach-ability information.A.B.C.D: IPv4 addressM: Bit counter Net-IDlevel-1: Summarize reachability information only for Level-1.level-1-2: Summarize reachability information for both Level-1 and Level-2.level-2: Summarize reachability information only for Level-2. Summary-address is applied to Level-2 IS if level param-eter is omitted.The no parameter with this command is unconfigured the summary.



isis password WORD {level-1 | level-2 | }

Config/Interface

Configure the authentication password for interface.WORD: plain-text password (excluding spaces). level-1: Specify password for level-1 PDUs (Intra area)level-2: Specify password for level-2 PDUs (Domain)Use the no parameter to clear the password.

255


Id:0900d8058016849d

Following commands sets the LSB parameter:


isis hello-interval

{minimal | <1-65535>}

{level-1 | level-2 | }

Config/Interface

Set Hello interval in seconds. The interval is set with the hello-multiplier. The Hello interval is calculated bydividing by the hello-multiplier.minimal: Holdtime 1 second, interval depends on multiplier,

<1-65535>: Hello interval valuelevel-1: Specify hello-interval for level-1 IIHslevel-2: Specify hello-interval for level-2 IIHsThe no parameter with this command sets the default value 10 sec. for both level-1 and level-2.

isis hello-multiplier<3-1000> {level-1 | level-2 | }

Config/Interface

Set multiplier for Hello holding time<3-1000>: Hello multiplier valuelevel-1: Specify hello multiplier for level-1 IIHslevel-2: Specify hello multiplier for level-2 IIHsThe no parameter sets the default value 3 to both level-1 and level-2.

isis hello padding Config/Interface

Add padding to IS-IS hello packetsIS-IS pads the Hello packet by default to notice neighbors the supported MTU size.The no parameter disable the padding.

isis lsp-interval <1-4294967295>

Config/Interface

Set LSP transmission interval<1-4294967295>: LSP interval in millisecondsThe no parameter sets the default value 33 ms for the inter-val.

isis retransmit-interval <0-65535>

Config/Interface

Set per-LSP retransmission interval<0-65535>: Interval between retransmissions of the same LSP in secondsThe no paramater sets the default value 5 Sec. for the inter-val.

isis csnp-interval <0-65535> {level-1 | level-2 | }

Config/Interface

Set CSNP interval. This parameter is only valid on broadcast interface,<0-65535>: CSNP interval in secondslevel-1: Specify interval for level-1 CSNPs onlylevel-2: Specify interval for level-2 CSNPs onlyThe no paramater sets the default value 10 Sec. for the interval to both level-1 and level-2.


max-lsp-lifetime <1-65535> Config/Router

Set the maximum LSP lifetime.<1-65535>: max. LSP lifetime in sec.The no paramater sets the default value 1200 Sec. for the LSP lifetime.

set-overload-bit { {suppress [external | interlevel | external interlevel | interlevel external] | on-startup <5-86400>} | }

Config/Router

Set the overload-bit in self-LSPs.Suppress: The router suppresses the redistribution of speci-fied types of reachability information during overload state.suppress external: suppress to redistribute external reach-abilitysuppress interlevel: suppress to redistribute interlevel reach-abilityon-startup: The router sets overload bit at startup only , then clears the bit after specified interval has elapsed.<5-86400>: interval in seconds after which the overload state is exited. The no parameter clears the overload-bit from self-LSPs.

256


Id:0900d8058016849d


8.4.4 MetricsRunning integrated IS-IS, a default IP route will automatically be installed in the level 1 routers pointing toward the nearest L1/L2 router that originally set the attached bit in its level 1 LSP. If there are multiple level 2-capable routers in the area, the closest L1/L2 router is selected based on the cost.

The cost metric (narrow-metric) is used by default, measuring the cost of the complete link. The interface default metric is put into IP reachability information TLVs and IS reachability information TLVs in LSPs.

8.4.5 Mesh GroupsMesh groups are a mechanism to reduce redundant packet transmissions for the IS-IS protocol.

g If an interface is configured as "mesh group blocked", the standard LSP database synchronization process is applied if the interface receives CSNP (Complete Sequence Number PDU) or PSNP (Partial Sequence Number PDU).

8.4.6 Checking current ConfigurationIn order to check the current configuration use the following commands:

g To modify the lines displayed, use the | (output modifier token) and to save the output to a file use the > (output redirection token).

ignore-lsp-errors Config/Router

Use to ignore LSPs' checksum error. By default LSP checksum is checked on receipt.The no parameter to turn off this function.

max-area-addresses <3-254>

Config/Router

Specify the number of max area addresses.<3-254>: max. addresses rangeThe no parameter set the number to the default value 3.

default-information origi-nate

Config/Router

Originates reachability information to default destination into LSP (Level-2 domain).



isis metric <1-63>{level-1 | level-2 | }

Config/Interface

Configure the default metric (metric-style narrow) for the interface <1-63>: Range of calculationlevel-1: Apply metric to level-1 linkslevel-2: Apply metric to level-2 linksThe no parameter with this command sets default metric to the default value = 10 to both level-1 and level-2


isis mesh-group {blocked |<1-4294967295>}

Config/Interface

Set IS-IS mesh group ID on the current interface.<1-4294967295>: Mesh-group Numberblocked: Blocked LSPs on the current interfaceThe no parameter disables / unblocked mesh group on the current interface.

257


Id:0900d8058016849d


show running-config router isis Exec/Config Shows current IS-IS router information

show isis topology {l1 | l2 | level-1 | level-2 | }

Privileged/Exec Command displays data about IS-IS topology.IS-IS paths to Intermediate Systemsl1, level-1: Path to all level-1 routers in the area (inter area topology)l2, level-2: Path to all level-2 routers in the domain (intra area topology)

show isis counter Privileged/Exec IS-IS isisSystemCounterEntry MIBs

show ip route {database} isis Privileged/Exec Display IS-IS routing table for IPv4.database: Link state database

show isis WORD database[detail | verbose] | [l1 | l 2 | level-1 | level-2]

Privileged/Exec IS-IS link state database information.Detail: detailed informationverbose: detailed informationWORD: Routing area tagl1, level-1: for Level 1 onlyl2, level-2: for Level 2 only

show isis database [detail | verbose] | [l1 | l 2 | level-1 | level-2] | [WORD]

Privileged/Exec IS-IS link state database information.Detail: detailed informationverbose: detailed informationWORD: Routing area tagl1, level-1: for Level 1 onlyl2, level-2: for Level 2 only

show isis interface [counter] Privileged/Exec Display detailed interface information. Counter: isisSystemCounterEntry MIBs

show isis interface IFNAME Privileged/Exec Display detailed interface information.IFNAME: Enter interfacename

show memory isis Config Show consumption ratio of IS-IS memory

258


Id:0900d8058017d869

Rule and QoS

9 Rule and QoShiX 56xx provides a rule and QoS feature for traffic management. The rule classifies incoming traffic, and then processes the traffic according to user-defined policies. You can use the physical port, 802.1p priority (CoS), VLAN ID, DSCP, and so on to classify incoming packets.

You can configure the policy in order to change some data fields within a packet or to relay packets to a mirror monitor by a rule. QoS (Quality of Service) is one of useful func-tions to provide more reliable service for traffic flow control. It is very serviceable to prevent overloading and delaying or failing of sending traffic by giving priority to traffic.

QoS can give priority to specific traffic by basically offering higher priority to the traffic or lower priority to the others.

When processing traffic, the traffic is usually supposed to be processed in time-order like first in, first out. This way, not processing specific traffic first, might cause undesired traffic loss in case of traffic overloading. However, in case of overloading traffics QoS can apply processing order to traffic by reorganizing priorities according to its impor-tance. By favor of QoS, you can predict network performance in advance and manage bandwidth more efficiently.

9.1 How to Operate Rule and QoS

9.1.1 How to Operate RuleFor hiX 56xx, rules operate as the follows.

– Rule CreationTo classify the packets according to the specific basis, configure the policies about them first. The basis used to classify the packets is 802.1p priority (CoS), VLAN ID, DSCP and port number. Additionally, a unique name needs to be assigned to each rule.

– Rule TypeAssigns a type to a rule. The rule type in general classifies the rule and determines the set of allowed rule matches and actions.

– Rule PriorityAssigns a priority to a rule (precedence to other rules).

– Rule MatchConfigures the policy to adjust how and what is to be analyzed within transmitted packets. Some rule types support combinations of two or more rule matches (e.g. ìgeneric ruleî). Such rules only match if all of their matches are true. Otherwise the rule does not match at all.

– Rule ActionConfigures the policy classifying the action(s) to be performed if the configured rule match fits transmitted packet(s).– mirror transmits the classified traffic to the monitor port.– redirect transmits the classified traffic to the specified port.– permit allows traffic matching given characteristics.– deny blocks traffic matching given characteristics.– untag strips the outer tag from tagged frames.– count counts how often the rule matches

259

Operation Manual CLI Rule and QoS

Id:0900d8058017d869

– bandwith adjusts a maximum bandwith– copy-to-cpu copies matching packets to the cpu portAdditionally, there are several actions, which can be used to change certain values within matching packets (e.g. DSCP, cos, tos, vlan).Some rule types support com-binations of two or more rule actions (e.g. ìgeneric ruleî). All these actions will be performed at once if such a rule matches. If some actions of one and the same rule conflict, then an internal logic of the switch circuit determines the actual result.

– Rule ApplyApplies a configured rule. The configured values will be checked and the rule becomes activated within the system. Note: if some of the rule parameters are not set correctly, ‘apply’ will fail.

– Rule DeleteCancels an existing rule and removes it from the system.

– Rule DisplayDisplays information about the rule currently being configured (so called a rule-pro-file), one rule selected by its name, all rules of a certain type, or even all rules at once.

g An already applied rule cannot be modified. It needs to be deleted and then created again with changed values.

g Some rule types will correctly operate only in single tagging mode, others only in double tagging mode. Nevertheless it is possible and allowed to create and apply all rule types in both tagging modes. hiX 56xx internally activates only the rules which fit the currently running tagging mode.

9.1.2 How to Operate QoSFor hiX 56xx, QoS operates as follows.

– Class-of-service (802.1p priority) mapping to queuesTwo different CoS mapping tables can be managed in the hiX 56xx:– a table that maps 802.1p priorities to ports having 8 queues (the command,

map)– a table that maps 802.1p priorities to ports having 4 queues only (the command,

map-reduced).These mapping schemes will be applied on all ports within the system, that means in both uplink and downlink interfaces.

– Scheduling algorithmTo handle overloading of traffic, you need to configure differently processing orders of the traffic by using scheduling algorithms. hiX 56xx provides:– Strict Priority Queuing (SPQ)– Weighted Round Robin (WRR)– Weighted Fair Queuing (WFQ).Each scheduling algorithm can be separately assigned to the following interface types:– uplink interfaces (non-cascaded uplink ports)– downlink interfaces (subscriber ports), and– interfaces in cascading mode (cascaded uplink ports).It means that each interface type can operate in another scheduling mode.

260


Id:0900d8058017d869

Rule and QoS

– Queue weights and watermarksQueue weights and queue watermarks can be used to additionally adjust the sched-uling mode per queue (becomes effective internally only for interfaces in mode WRR and WFQ).– Queue weights control the scheduling precedence of the internal packet queues.

The higher the weight value is, the higher the scheduling precedence of this queue is.

– Queue watermarks configure the packet drop precedence by means of a given fill level (percentage value of the queue size). First, the queue scheduler drops the packets having a lower precedence if the low watermark is reached. If the high watermark is reached then also packets having higher precedence will be dropped.

Note: the current version does not have watermark function.

9.2 Rule Configuration

9.2.1 Creating RuleFor hiX 56xx, you need to enter Rule Configuration mode first. To enter Rule Configu-ration mode, use the following command.

After entering Rule Configuration mode, the prompt changes from SWITCH(config)# to SWITCH(config-rule[name])#.

In the following example, a rule is to be created. It matches VLAN ID 100 (in downstream direction) and sets the 802.1p priority value (class of service, CoS value) to value 4 within this VLAN tag.

SWITCH(config)# rule Testrule1 createSWITCH(config-rule[Testrule1])# type vlan-cosSWITCH(config-rule[Testrule1])# prio 2SWITCH(config-rule[Testrule1])# action set-iprioSWITCH(config-rule[Testrule1])# match vlan 100SWITCH(config-rule[Testrule1])# action-param cos 4SWITCH(config-rule[Testrule1])# show rule-profile Rule name: Testrule1Type : QosVlan (vlan-cos)Priority : 2Match : exact- VLAN : 100Action : Change inner .1p PRIO (set-iprio)- COS : 4 SWITCH(config-rule[Testrule1])# applySWITCH(config-rule[Testrule1])# exitSWITCH(config)#


rule NAME create Global Open Rule Configuration mode, enter rule name.

261


Id:0900d8058017d869

After entering Rule Configuration mode, a rule can be configured by user. The rule type, rule priority, rule match, rule action, and action parameter(s) can be configured for each rule.

g 1. The rule name must be unique. Its size is limited to 63 significant characters.2. The order in which the following configuration commands are entered is arbi-

trary, but the rule type must always be selected first.3. The configuration of a rule being configured can be changed as often as wanted

(inclusive rule type) until the apply command is entered.4. Use the show rule-profile command to display the configuration entered up to

now.

9.2.2 Rule TypeEach rule must be of a certain type. The rule type classifies a rule and determines the allowed rule matches, rule actions, and required action parameters.

To set a rule type, use the following command.

To delete all existing rules corresponding to a specified rule type at once, use the follow-ing command.

To display all existing rules corresponding to a specified rule type, use the following command.

Tab 1.1 shows the description for each rule type.


type {vlan-cos | dscp-cos | dscp-tag | port-cos | isp-dt-vlan | cos-dt-vlan | dscp-dt-vlan | isp-dt-tag | cos-dt-tag | dscp-dt-tag | mirror | dscp-deny | isp-vlan | isp-tag | eth-vlan | cos-trans | eth-trans | vlan-trans | dscp-trans | cos-dt-cos | cxu-generic | cxu-admin}

Rule Set a rule type, see Tab 1.1 and Tab 1.2.


no rule-type {vlan-cos | dscp-cos | dscp-tag | port-cos | isp-dt-vlan | cos-dt-vlan | dscp-dt-vlan | isp-dt-tag | cos-dt-tag | dscp-dt-tag | mirror | dscp-deny | isp-vlan | isp-tag | eth-vlan | cos-trans | eth-trans | vlan-trans | dscp-trans | cos-dt-cos | cxu-generic | cxu-admin}

Rule Delete all existing ruler corresponding to a specified rule type at once.


show rule type {vlan-cos | dscp-cos | dscp-tag | port-cos | isp-dt-vlan | cos-dt-vlan | dscp-dt-vlan | isp-dt-tag | cos-dt-tag | dscp-dt-tag | mirror | dscp-deny | isp-vlan | isp-tag | eth-vlan | cos-trans | eth-trans | vlan-trans | dscp-trans | cos-dt-cos | cxu-generic | cxu-admin}

PrivilegedGlobalRule

Show all existing rules corresponding to a specified rule type.

262


Id:0900d8058017d869

Rule and QoS

Tab 1.2 shows a rule type matching allowed rule match.

Rule Type Description Tagging Mode

vlan-cos Change the 802.1p priority in downstream frames having a given VLAN ID.

Single tagging

dscp-cos Change the 802.1p priority in downstream frames having a given DSCP value.

Single tagging

dscp-tag Change the 802.1p priority and VLAN ID in downstream frames having a given DSCP value.

Single tagging

port-cos Change the 802.1p priority in upstream frames having a given subscriber port.

Both

isp-dt-vlan Change the VLAN ID in outer tag in upstream frames having a given VLAN-ID inner tag.

Double tagging

cos-dt-vlan Change the VLAN ID in outer tag in upstream frames having a given 802.1p priority in inner tag.

Double tagging

dscp-dt-vlan Change the VLAN ID in outer tag in upstream frames having a given DSCP value.

Double tagging

isp-dt-tag Change the 802.1p priority and VLAN ID in outer tag in upstream frames having a given VLAN-ID in inner tag.

Double tagging

cos-dt-tag Change the 802.1p priority and VLAN ID in outer tag in upstream frames having a given 802.1p priority in inner tag.

Double tagging

dscp-dt-tag Change the 802.1p priority and VLAN ID in outer tag in upstream frames having a given DSCP value.

Double tagging

mirror Mirror upstream frames having a given VLAN ID to the mirror monitoring port.

Both

dscp-deny Block incoming traffic at given subscriber port having a given DSCP value.

Both

isp-vlan Change the VLAN-ID in upstream frames having a given VLAN ID tag and makes an entry in the provider-VLAN lookup table.

Single tagging

isp-tag Change the 802.1p priority and VLAN ID in upstream frames having a given VLAN ID and makes an entry in the provider-VLAN lookup table.

Single tagging

eth-vlan Change VLAN-ID in upstream frames having a given Ethertype. Single tagging

cos-trans Translate the 802.1p priority in upstream frames. Single tagging

eth-trans Translate the Ethertype in upstream frames. Single tagging

vlan-trans Translate the VLAN-ID in upstream frames. Single tagging

dscp-trans Translate the DSCP value in upstream frames. Single tagging

cxu-generic Set a generic rule for CXU. Both

cxu-admin Set an admin access rule for CXU. Both

cos-dt-cos Sets innter COS to outer COS double tag rule (rule 23, qosDoubleTagPriority03)

Both

Table 62 Rule Type

Rule Type Match Type Match Value Action Type Action Parameter(s)

vlan-cos exact vlan VLAN set-iprio cos <0-7>

Table 63 Rule Type with allowed Rule Match

263


Id:0900d8058017d869

9.2.3 Rule PriorityIf two or more rules match the same packet then the rule having a higher priority will be processed first.

To set a priority for the rule, use the following command.

9.2.4 Rule MatchTo specify a rule match type, use the following command. Default is “exact“.

To configure one or more rule match pattern(s), use the following command.

dscp-cos exact dscp <0-63> set-iprio cos <0-7>

dscp-tag exact dscp <0-63> set-itag cos <0-7>vlan VLAN

port-cos exact port PORTS set-iprio cos <0-7>

isp-dt-vlan exact vlan VLAN set-ovid vlan VLAN

cos-dt-vlan exact cos <0-7> set-ovid vlan VLAN

dscp-dt-vlan exact dscp <0-63> set-ovid vlan VLAN

isp-dt-tag exact vlan VLAN set-otag cos <0-7>vlan VLAN

cos-dt-tag exact cos <0-7> set-otag cos <0-7>vlan VLAN

dscp-dt-tag exact dscp <0-63> set-otag cos <0-7>vlan VLAN

mirror exact vlan VLAN mirror None

cos-dt-cos exact cos <0-7> set-iprio cos <0-7>

Rule Type Match Type Match Value Action Type Action Parameter(s)

Table 63 Rule Type with allowed Rule Match (Cont.)


prio <0-7> Rule Set the priority for the new rule.0-7: value of priority (default: 0)


match {exact | exclude} Rule Specify the match type:exact (default): matche exactly the given value(s).exclude: matche all values except given value(s).(Only the cxu-generic and cxu-admin rule type can use exclude option, refer to Tab 1.2.)

264


Id:0900d8058017d869

Rule and QoS


match port {PORT | cpu | any} Rule Match a CXU or subscriber port:PORT: enter the port number.cpu: CPU portany: matche any port (ignore).

match egress port {PORT | cpu | any}

Match an egress port (CXU):PORT: enter the port number.cpu: CPU portany: set to default.

match ingress port {PORT | any | default}

Match an ingress port (CXU):PORT: enter the port number.any: set to default.default: set to default.

match ingress slot {SLOT | any | default}

Match an ingress slot (IU):SLOT: enter the slot number.any: set to default.default: set to default.

match vlan {VLAN | any} Match a VLAN:VLAN: enter a VLAN ID.any: matche any VLAN (ignore).

match inner-vlan {VLAN | any} Match an inner-vlan:VLAN: enter a VLAN ID.any: matche any VLAN (ignore).

match dscp {<0-63> | any} Match a DSCP value:0-63: enter a DSCP value.any: match any DSCP (ignore).


match cos {<0-7> | any} Rule Match the IEEE 802.1p priority:0-7: enter an 802.1p priority value.any: match any 802.1p priority value (ignore).

265


Id:0900d8058017d869

match inner-cos {<0-7> | any} Rule Match the IEEE 802.1p priority in inner tag:0-7: enter an 802.1p priority value.any: match any 802.1p priority value (ignore).

match tos {<0-255> | any} Match all ToS field:0-255: enter ToS value.any: match any ToS value (ignore).

match ip-prec {<0-7> | any} Match an IP precedence:0-7: enter IP precedence value.any: match any IP precedence value (ignore).

match mac {MAC-ADDRESS | {MAC-ADDRESS/M | any} {MAC-ADDRESS | MAC-ADDRESS/M I any}

Match MAC address:MAC-ADDRESS: source/destination MAC address (mask default: 48)MAC-ADDRESS/M: source/destination MAC address with maskany: any source/destination MAC address (ignore)

match flow {upstream | downstream | bidirectional | default | any}

Match an packet flow direction:upstream: only upstream packets (all IU slots)downstream: only downstream packets (all CXU uplink)bidirectional: upstream and downstream packetsdefault: set to default.any: match any flow direction (ignore).

match ethtype {TYPE-NUM | arp | ip | ppp-disc | ppp-sess | any}

Match an Ethernet type:TYPE-NUM: Ethernet type field (hex, e.g. 0800 for IPv4)arp: address resolution protocolip: IP protocolppp-disc: PPPoE discoveryppp-sess: PPPoE sessionany: match any Ethertype (ignore).

match ip {A.B.C.D | A.B.C.D/M | any} {A.B.C.D | A.B.C.D/M | any}

Configure an IP address:A.B.C.D: source/destination IP addressA.B.C.D/M: source/destination IP address with maskany: any source/destination IP address

match ip {A.B.C.D | A.B.C.D/M | any} {A.B.C.D I A.B.C.D/M | any} icmp

Configure an IP protocol:A.B.C.D: source/destination IP addressA.B.C.D/M: source/destination IP address with maskany: any source/destination IP addressicmp: ICMP

match ip {A.B.C.D | A.B.C.D/M | any} {A.B.C.D | A.B.C.D/M | any} icmp <0-255>

Configure an IP protocol:A.B.C.D: source/destination IP addressA.B.C.D/M: source/destination IP address with maskany: any source/destination IP addressicmp: ICMP0-255: ICMP message type number


266


Id:0900d8058017d869

Rule and QoS

g – If a match being entered conflicts one or more already configured matches then the latest command wins and automatically invalidates (revokes) all conflicting matches. The system displays an information message in this case.

– The value “any” for a match parameter means that this match command will be revoked.

– If a rule has two or more joined matches then each of the match commands needs to be entered by a separate match command. The order does no matter.

9.2.5 Rule ActionSome rule types are supposed to specify the action type (refer to Tab 1.2 ) first. To specify an action type, use the following command.


match ip {A.B.C.D | A.B.C.D/M | any} {A.B.C.D | A.B.C.D/M | any} icmp <0-255> <0-255>

Rule Configure an IP protocol:A.B.C.D: source/destination IP addressA.B.C.D/M: source/destination IP address with maskany: any source/destination IP addressicmp: ICMP0-255: ICMP message type number0-255: ICMP message code number

match ip {A.B.C.D | A.B.C.D/M | any} {A.B.C.D | A.B.C.D/M | any} {igmp | pim | <0-255> | any}

Configure an IP protocol:A.B.C.D: source/destination IP addressA.B.C.D/M: source/destination IP address with maskany: any source/destination IP addressigmp: IGMPpim: PIM0-255: IP protocol numberany: any IP protocol

match ip {A.B.C.D | A.B.C.D/M | any} {A.B.C.D | A.B.C.D/M | any} {tcp | udp}

Configure an IP protocol:A.B.C.D: source/destination IP addressA.B.C.D/M: source/destination IP address with maskany: any source/destination IP addresstcp: TCPudp: UDP

match ip {A.B.C.D | A.B.C.D/M | any} {A.B.C.D | A.B.C.D/M | any} {tcp | udp} {<0-65535> | any}

Configure an IP protocol:A.B.C.D: source/destination IP addressA.B.C.D/M: source/destination IP address with maskany: any source/destination IP addresstcp: TCPudp: UDP0-65535: TCP/UDP source port numberany: any TCP/UDP source port

match ip {A.B.C.D | A.B.C.D/M | any} {A.B.C.D | A.B.C.D/M | any} {tcp | udp} {<0-65535> | any} {<0-65535> | any}

Configure an IP protocol:A.B.C.D: source/destination IP addressA.B.C.D/M: source/destination IP address with maskany: any source/destination IP addresstcp: TCPudp: UDP0-65535: TCP/UDP source/destination port numberany: any TCP/UDP source/destination port

267


Id:0900d8058017d869

To specify a rule action (action) for the packets matching the configured match patterns, use the following command.

g If user specify "action copy-to-cpu" when creating a rule, it may lead to CXU over-load. This may result in the recovery of CXU when it works abnormally.

To specify a rule action (action-param) for the packets matching the configured match patterns, use the following command.


action {set-ivid | set-ovid | set-iprio | set-oprio | set-tos | set-dscp | set-itag | set-otag}

Rule Set action type:set-ivid: change inner VLAN ID.set-ovid: change outer VLAN ID.set-iprio: change inner 802.1p priority.set-oprio: change outer 802.1p priority.set-tos: change type of service (ToS).set-dscp: change DSCP.set-itag: change inner VLAN tag (VID and PRIO).set-otag: change outer VLAN tag (VID and PRIO).


action deny Rule Rule action: deny access

action {allow | permit} Rule action:permit access

action redirect {PORT | cpu} Redirect to specified egress port:PORT: CXU uplink port number (e.g. 0/1)cpu: CPU port

action mirror Send a copy to mirror monitoring port.

action dscp <0-63> Change DSCP field, enter DSCP value.

action cos <0-7> Change 802.1p class of service, enter CoS value.

action cos <0-7> overwrite Overwrite 802.1p CoS field in the packet, enter CoS value.

action cos same-as-tos overwrite Overwrite 802.1p CoS field in the packet same as IP ToS precedence bits.

action ip-prec <0-7> Change IP ToS precedence bits in the packet, enter the ToS precedence value.

action ip-prec same-as-cos Change IP ToS precedence bits in the packet, same as 802.1p CoS value.

action bandwidth BANDWIDTH Determine maximum allowed bandwidth (Mbps).

action vlan <1-4094> Specify matched-packet VLAN ID, enter the VLAN ID value.

action copy-to-cpu Copy to CPU.

action counter Rule action:counter

action untag Rule action:untag

268


Id:0900d8058017d869

Rule and QoS

To specify a rule action (no-action) for the packets not matching the configured match patterns, use the following command.

g The current hiX 56xx version only supports the combination of commands shown in Tab 1.2. The exeptions are the rule types “cxu-generic” and “cxu-admin”, which are so-called “expert rules”. These types support complex sets of matches and actions and their combinations (Example: Rule type “cxu-generic“ with “match cos 3“ + “match dscp 20“ + “match ip any any udp“ with “action vlan 2000“ + “action mirror“ + “action dscp 17“ + “action count“).

To delete a specified rule action (action), use the following command.


action-param vlan VLAN Rule Change VLAN parameter, enter VLAN number.

action-param cos <0-7> Change class of service (IEEE 802.1p priority), enter an 802.1p priority value.

action-param tos <0-7> Change IP ToS precedence bits in the packet, enter a ToS value.

action-param dscp <0-63> Change DSCP, enter a DSCP value.


no-action deny Rule Rule action:deny access

no-action {allow | permit} Rule action:permit access

no-action redirect {PORT | cpu} Redirects to specified egress port:PORT: CXU uplink port number (e.g. 0/1)cpu: CPU port

no-action mirror Sends a copy to mirror monitoring port.

no-action dscp <0-63> Change DSCP field, enter DSCP value.

no-action cos <0-7> Change 802.1p class of service, enter CoS value.

no-action cos <0-7> overwrite Overwrite 802.1p COS field in the packet, enter CoS value.

no-action cos same-as-tos overwrite Overwrite 802.1p CoS field in the packet same as IP ToS precedence bits.

no-action ip-prec <0-7> Change IP ToS precedence bits in the packet, enter the ToS precedence value.

no-action ip-prec same-as-cos Change IP ToS precedence bits in the packet, same as 802.1p CoS value.

no-action bandwidth BANDWITH Determine maximum allowed bandwidth (Mbps).

no-action vlan <1-4094> Specify matched-packet VLAN ID, enter the VLAN ID value.

no-action copy-to-cpu Copy to CPU.

no-action counter Rule action:counter

no-action untag Rule action:untag

269


Id:0900d8058017d869

To delete a specified rule action (no-action), use the following command.

g – If an action being entered conflicts one or more already configured actions then the latest command wins and automatically invalidates (revokes) all conflicting actions. The system does not show an information message in this case.

– If a rule has two or more joined actions then each of the action commands needs to be entered by a separate action command. The order does no matter.

9.2.6 Applying RuleAfter configuring the rule using the above commands, apply it to the system with the fol-lowing command. If you do not apply the rule to the system, all specified rules will be lost.

To save and apply a rule, use the following command.


no action deny Rule Delete deny access.

no action {allow | permit} Delete permit access.

no action redirect Delete redirect to specified egress port.

no action mirror Delete sending a copy to mirror monitoring port.

no action dscp Delete change of Changes DiffServ field.

no action cos Delete changes of 802.1p class of service.

no action ip-prec Delete change of IP ToS precedence bits in the packet.

no action bandwidth Delete maximum allowed bandwidth.

no action vlan Delete specifying of matched-packet VLAN ID.

no action copy-to-cpu Delete copy to CPU.

no action counter No rule action: counter

no action untag No rule action: untag


no no-action deny Rule Delete deny access.

no no-action {allow | permit} Delete permit access.

no no-action redirect Delete redirect to specified egress port.

no no-action mirror Delete sending a copy to mirror monitoring port.

no no-action dscp Delete change of Changes DiffServ field.

no no-action cos Delete changes of 802.1p class of service.

no no-action ip-prec Delete change of IP ToS precedence bits in the packet.

no no-action bandwidth Delete maximum allowed bandwidth.

no no-action vlan Delete specifying of matched-packet VLAN ID.

no no-action copy-to-cpu Delete copy to CPU.

no no-action counter No rule action: counter

no no-action untag No rule action: untag

270


Id:0900d8058017d869

Rule and QoS

g 1. The switch performs a detailed plausibility check and rejects the rule if the con-figuration is incomplete, contains bad or unsupported values, or conflicts to other rules. In this case, the switch informs about the reason and the operator may correct the values

2. The switch may reject a rule with the message “A rule having the same NAME already exists” allthough the name is not listed by the show rule command. Unfortunately, the entered name in this case interferes with the name of an inter-nally managed rule.Remedy: Select another name for the rule (e.g. add a prefix).

3. All previously entered values are kept in the editor’s memory if the apply command fails. The system remains in the current rule node and the operator can display the configuration of the rule being edited (command: show rule-profile) and can directly correct the values (match and/or actions) and can try again to apply the rule or can exit the rule mode.

9.2.7 Displaying RuleThe following command can be used to show a certain rule by its name, all rules of a certain type, or all rules at once sorted by the rule type.

The following is an example of displaying a configured rule.

SWITCH(config)# show rule-----------------------------------------------------------RULE TYPE 51: Admin Access rule (cxu-admin)-----------------------------------------------------------rule blocksubs type cxu-admin (Admin Access rule) prio 0 match ip any any tcp any 23 match flow upstream action deny Activation state: activated SWITCH(config)#


apply Rule Apply a rule to the system.


show rule name NAME PrivilegedGlobalRule

Show a rule, enter a rule name.

show rule Show all rules sorted by type.

show rule all The same as “show rule“ (alias).

show rule type {type} Show all rules of given type (see Table 63 for a list of possible rule types).

show rule cxu Show all active user rules and admin access rules at CXU in a condensed format.

show rule-profile Rule Show current configuration of a rule.

271


Id:0900d8058017d869

9.2.8 Deleting RuleThe following command can be used to delete a certain rule by its name, all rules of a certain type, or all rules at once.

9.2.9 IRL ProfileTo create/modify/apply Input/Output Rate Limit (IRL) profile, use the following com-mands.


no rule NAME Global Delete a rule, enter a rule name.

no rule Delete all rules at once (be careful!).

no rule-type {type} Delete all rules of given type (see Table 63 for a list of possible rule types).

272


Id:0900d8058017d869

Rule and QoS

To delete IRL profile, use the following command.

To display IRL profile, use the following commands.


irl create profile PROFILENAME GlobalRMON

Create a new Input/Output Rate Limiting (IRL) config-uration profile.PROFILENAME: Profile name.

irl modify profile PROFILENAME Modify Input/Output Rate Limiting (IRL) profile.PRO-FILENAME: Profile name.

irl set profile (cir|cbs|pir|pbs|dscir|dscbs|dspir|dspbs|policingus|policingds) VALUE

Configure Input/Output Rate Limiting (IRL) profileSet IRL profile dataProfile information",cir: Committed information rate for upstream policing <" STRINGIFY(SWCH_RULE_IRL_CIR_MIN) " - " STRINGIFY(SWCH_RULE_IRL_CIR_MAX) "> (kbps),cbs: Committed burst size for upstream policing <" STRINGIFY(SWCH_RULE_IRL_CBS_MIN) " - " STRINGIFY(SWCH_RULE_IRL_CBS_MAX) "> (bytes),pir: Peak information rate for upstream policing <" STRINGIFY(SWCH_RULE_IRL_PIR_MIN) " - " STRINGIFY(SWCH_RULE_IRL_PIR_MAX) "> (kbps),pbs: Peak burst size for upstream policing <" STRINGIFY(SWCH_RULE_IRL_PBS_MIN) " - " STRINGIFY(SWCH_RULE_IRL_PBS_MAX) "> (bytes),dscir: Committed information rate for downstream policing<" STRINGIFY(SWCH_RULE_IRL_DSCIR_MIN) " - " STRINGIFY(SWCH_RULE_IRL_DSCIR_MAX) "> (kbps),dscbs: Committed burst size for upstream policing <" STRINGIFY(SWCH_RULE_IRL_DSCBS_MIN) " - " STRINGIFY(SWCH_RULE_IRL_DSCBS_MAX) "> (bytes),dspir: Peak information rate for upstream policing <" STRINGIFY(SWCH_RULE_IRL_DSPIR_MIN) " - " STRINGIFY(SWCH_RULE_IRL_DSPIR_MAX) "> (kbps),dspbs: Peak burst size for upstream policing <" STRINGIFY(SWCH_RULE_IRL_DSPBS_MIN) " - " STRINGIFY(SWCH_RULE_IRL_DSPBS_MAX) "> (bytes),policingus: using the meterprofile parameter settings for policing upstream <0 - 1> (off - on),policingds: using the meterprofile parameter settings for policing downstream <0 - 1> (off - on),VALUE: value.

irl set profile snmp-index VALUE

irl apply profile Applies profile configuration.


irl delete profile PROFILENAME Global Delete IRL configuration.PROFILENAME: profile name

273


Id:0900d8058017d869

9.2.10 IRL Port MappingTo create IRL port mapping, use the following commands. (IRL:Input/Output Rate Limit)

To delete IRL port mapping, use the following command.

To display IRL port mapping, use the following commands.

9.3 Quality of Service (QoS)For the hiX 56xx, it is possible to use Strict Priority Queuing, Weighted Fair Queuing, and Weighted Round Robin for packet scheduling.

The following steps explain how QoS can be configured.

– 9.3.1 802.1p Priory-to-queue Mapping– 9.3.2 Scheduling Algorithm– 9.3.3 Weights and Watermarks– 9.3.4 Packet Counters– 9.3.5 QoS Shaping


show irl profile info Global Show Input/Output Rate Limiting (IRL) profile.

show irl profile info PROFILENAME Show Input/Output Rate Limiting (IRL) profile.PROFILENAME: profile name

show irl profile editor Show Input/Output Rate Limiting (IRL) profile when the profile is being created or modified.


irl create ifmap PORT PROFILE-NAME

Global Create a new IRL port mapping,PORT: subscriber port number,PROFILENAME: Profile name.


irl delete ifmap PORT Global Delete port mapping,PORT: subscriber port number,


show irl ifmap port PORT Global Show port information of an IRL port mapping,PORT: subscriber port number,

show irl ifmap slot SLOT Show slot information of an IRL port mapping,SLOT: LIU slot number,

show irl ifmap profile PROFILE-NAME

Show all ports mapped to an IRL profile,PROFILENAME: Profile name.

show irl ifmap Show IRL port mapping,

274


Id:0900d8058017d869

Rule and QoS

9.3.1 802.1p Priory-to-queue MappingFor hiX 56xx, it is possible to configure how packets having a certain 802.1p priority will be stored into which queue. Default mapping is shown as below (default values).

To define an 802.1p priory-to-queue map for 8 queues, use the following command.

To define an 802.1p priory-to-queue map for 4 queues, use the following command.

To define an 802.1p priory-to-queue map for CXU, use the following command.

CoS(802.1p Priority)

Description Queue Mapping(8 Queues)

Reduced Queue Mapping

(4 Queues)

0 Lowest: Best Effort IP (be) 2 1

1 Background (bg) 0 0

2 Spare (spare) 1 0

3 Excellent Effort (ee) 3 1

4 Controlled Load (cl) 4 2

5 Video (video) 5 2

6 Voice (voice) 6 3

7 Highest: Network Control (ctrl) 7 3

Table 64 Default 802.1p Priory-to-queue Mapping


qos map <0-7> <0-7> Global Priority to queue number mapping, priority value (0-7) according to 802.1p:0 = lowest: best effort (be)1: background (bg)2: spare (spare)3: excellent effort (ee)4: controlled load (cl)5: video (video)6: voice (voice)7: network control (ctrl)Queue value:0-7: queue number

qos map {be | bg | spare | ee | cl | video | voice | ctrl} <0-7>


qos map-reduced {<0-7>|be | bg | spare | ee | cl | video | voice | ctrl} <0-3>

Global Priority to queue number mapping, priority value (0-7) according to 802.1p:0 = lowest: best effort (be)1: background (bg)2: spare (spare)3: excellent effort (ee)4: controlled load (cl)5: video (video)6: voice (voice)7: network control (ctrl)Queue value:0-3: queue number

275


Id:0900d8058017d869

9.3.2 Scheduling AlgorithmTo process incoming packets by the queue scheduler, the hiX 56xx provides the sched-uling algorithm as Strict Priority Queuing (SPQ), Weighted Round Robin (WRR) and Weighted Fair Queuing (WFQ).

– Strict Priority Queuing (SPQ)Strict Priority Queuing is used to process firstly more important data than the others. Since all data are processed by their priorities, data with high priorities can be pro-cessed fast but data without low priorities might be delayed and piled up. This method has a strong point of providing the distinguished service with a simple way. However, if the packets having higher priority enter, the packets having lower priority are not processed.

– Weighted Round Robin (WRR)Weighted Round Robin processes packets as much as weight. Processing the packets that have higher priority is the same way as strict priority queuing. However, it passes to next stage after processing as configured weight so that it is possible to configure for packet process to the packets having higher priority. However, there’s a limitation of providing differentiated service from those existing service.

– Weighted Fair Queuing (WFQ)WFQ has only good points of strict priority queuing and WRR. If the bandwidth is configured for all queues, the packets of appropriate queue can be processed in the assigned bandwidth.

To select a packet scheduling mode, use the following command.

g It is possible to assign a different scheduling mode to each interface usage. Inter-face usage can be: uplink (non-cascaded), downlink, and cascading (uplink in cascaded mode).

Here is an example for setting the scheduling mode for all interfaces which operate as uplink to WRR.

SWITCH(config)# qos scheduling-mode uplink wrrSWITCH(config)# show qos scheduling-mode--------------------------------------------------Interface type|Scheduling mode--------------------------------------------------


qos cxu-map {fixed | configurable} Global Priority to queue number mapping for CXU:fixed: fixed mapping (default)configurable: configurable mapping


qos scheduling-mode {uplink | downlink | cascading | all} {sp | wfq | wrr}

Global Select a packet scheduling mode for interfaces:uplink: interfaces in usage uplinkdownlink: interface in usage downlinkcascading: interfaces in usage cascadingall: all interface will get the following mode at once.The mode of the selected interface:sp: strict priority queuingwfq: weighted fair queuingwrr: weighted round robin

276


Id:0900d8058017d869

Rule and QoS

uplink|wrr(weighted round robin)downlink|sp(strict priority)cascading|sp(strict priority)SWITCH(config)#

9.3.3 Weights and WatermarksIn WRR and WFQ, the packets are processed by means of queue weights. You can con-figure the queue weights and watermark values for each queue.

g The default for weight is 100 for all queues. The default values for watermarks depend on the queue number.

The watermark values can also have following defaults depending on deployed IU types (e.g VDSL line cards). See 4.5.1 System Restoration for details.

To set the queue weights, use the following command.

Queue Number Low Watermark High Watermark

0 6 6

1 6 6

2 12 12

3 6 6

4 3 3

5 3 3

6 3 3

Table 65 Watermark Default Value

Queue Number Low Watermark High Watermark

0 10 15

1 10 15

2 10 15

3 10 15

4 10 15

5 10 15

6 20 30

7 20 30

Table 66 Watermark Default Value

277


Id:0900d8058017d869

g 1. Queue weights and queue watermarks can be configured in any case indepen-dent on the current scheduling mode. The switch automatically applies weights and watermarks only for those queues which operate in an appropriate sched-uling mode.

2. Some parts of hiX 56xx hardware do not actually support WFQ and/or WRR. In this case the configured weight values will be used automatically (if possible) to emulate these scheduling modes.

Here is an example for setting the low watermark value of queue 4 to 15 percent and high watermark to 25 percent.

SWITCH(config)# qos watermark 4 15 25SWITCH(config)# show qos watermark--------------------------------Queue| Low water| High water--------------------------------0|6 %|6 %1|6 %|6 %2|12 %|12 %3|6 %|6 %4|15 %|25 %5|3 %|3 %6|3 %|3 %7|3 %|3 % SWITCH(config)#

9.3.4 Packet CountersThe hiX 56xx manages a set of packet counters for each of the four gigabit uplink inter-faces. One packet counter per queue (that is, eight counters) and one dropped counter can be read-out/or cleared for each uplink interface. The counters have 64-bit width values.

To clear (reset to 0) all packet counters and the dropped counter of one or more inter-face(s), use the following command.

Note: the current version does not support the packet counter function.


qos weight <0-7> {<0-100> | unlim-ited}

Global QoS with queue weights:0-7: queue number0-100: weight value in percentunlimited: strict priority based queuing (the same as weight value = 100)

qos watermark <0-7> <0-100> <0-100>

QoS with queue watermarks:0-7: queue number0-100: low watermark value in percent, less then or equal high watermark0-100: high watermark value in percent


qos clear-pm-counters PORT Global Clear CXU packet and dropped counters, enter port number or port range of CXU uplink port(s).

278


Id:0900d8058017d869

Rule and QoS

9.3.5 QoS ShapingTo create/modify/apply shaping profile, use the following command.

To delete shaping profile, use the following command.


qos shaping profile create PRO-FILENAME

Global Create a new shaping configuration:PROFILENAME: profile name

qos shaping profile fastcreate PRO-FILENAME (cir|cbs) (<0-"STRING-IFY(SNMP_SHAPINGPROFILEINDEX_MAX)">|)

Create a new shaping configuration",PROFILENAME: profile name,CIR: Committed Information Rate for downstream shaping, " " <"STRING-IFY(SNMP_SHAPINGPROFILECONTROLPROFILECIR_MIN)"-"STRING-IFY(SNMP_SHAPINGPROFILECONTROLPROFILECIR_MAX)">, (kBit/s). CBS: Committed Burst Size for downstream shaping, <"STRING-IFY(SNMP_SHAPINGPROFILECONTROLPROFILECBS_MIN)"-"STRING-IFY(SNMP_SHAPINGPROFILECONTROLPROFILECBS_MAX)">, (bytes) .: snmp index only for internal processing FLASH config file

qos shaping profile modify PRO-FILENAME

Modify shaping configuration:PROFILENAME: profile name

qos shaping profile set (cbs|cir) VALUE

Set shaping profile data.cbs: committed burst size for upstream shaping, <"STRING-IFY(SNMP_SHAPINGPROFILECONTROLPROFILECBS_MIN) " - "STRING-IFY(SNMP_SHAPINGPROFILECONTROLPROFILECBS_MAX) "> (bytes)"cir: peak information rate for upstream shaping, <"STRING-IFY(SNMP_SHAPINGPROFILECONTROLPROFILECIR_MIN) " - "STRING-IFY(SNMP_SHAPINGPROFILECONTROLPROFILECIR_MAX) ">, (kBit/s)VALUE: enter value

qos shaping profile apply Apply profile configuration.

qos shaping assign PORT QUEUE PROFILENAME

Configure shaping profile to port queue (shaping port mapping).PORT: subscriber LIU physical slot/port,QUEUE: queue."STRING-IFY(SNMP_SHAPINGPROFILEASSIGNMENTQUEUENUMBER_MIN) " - " STRING-IFY(SNMP_SHAPINGPROFILEASSIGNMENTQUEUENUMBER_MAX)" ".PROFILENAME: profilename.


qos shaping profile delete PRO-FILENAME

Global Delete shaping profile configuration:PROFILENAME: profile name

qos shaping assign delete Delete shaping profile assignment configuration.

279


Id:0900d8058017d869

To display shaping profile, use the following command.

9.3.6 Displaying QoSTo display the configuration of QoS, use the following command.


show qos shaping profile Global Show shaping profile information.

show qos shaping profile name PROFILENAME

Show shaping profile information.PROFILENAME: profile name.

show qos shaping profile editor Show shaping profile information, when the profile is being created or modified.

show qos shaping assign port PORT Show port information of shaping-port mapping, (profile to LIU logical slot and port and queue) PORT: subscriber only one LIU physical slot/port.

show qos shaping assign slot SLOT Show physical slot information of shaping-port mapping (profile to LIU logical slot and port and queue)SLOT: subscriber physical slot.

show qos shaping assign profile PROFILENAME

Show all ports mapped to an shaping profile.PROFILENAME: profile name.

show qos shaping assign Show shaping port mapping, profile to LIU logical slot and port and queue.


show qos {map | map-reduced | cxu-map | scheduling-mode | weight | watermark |shaping| all}

PrivilegedGlobal

Show the configuration of QoS:map: priority to queue mappingmap-reduced: priority to reduced queue mappingcxu-map: priority to queue mapping of CXUscheduling-mode: scheduling algorithmweight: queue weightswatermark: queue watermarksshaping: slot/port/queue shapingall: all

show qos factory-defaults Shows factory default values.

280


Id:0900d8058017e872

Upper Layer Control

10 Upper Layer Control

10.1 Internet Group Management Protocol (IGMP)The multicast packet is transmitted to a part of group which request the multicast packet. Internet Group Management Protocol (IGMP) is the internet protocol that helps to inform multicast groups to multicast router. In the multicast network, multicast router sends only IGMP query message that quests whether to receive multicast packet when multicast packet is transmitted. Multicast router transmits the multicast packet to a switch only if that switch sends the join message to multicast router.

IGMP snooping is a function that finds port, which sends join message to join in specific multicast group to receive multicast packet or leaves message to get out of the multicast group because it does not need multicast packets. Only when the switch is connected to multicast router, IGMP snooping can be enabled.

10.1.1 Enabling/Disabling IGMPTo enable/disable global IGMP, use the following command.

To display global IGMP, use the following command.

To clear statistics of IGMP message, use the following command.


igmp {enable | disable} Global Enable/disable IGMP.

igmp traffic max-joinedgroups <1-5000>

Set maximum joined group.


show igmp PrivilegedGlobal

Show IGMP.

show igmp version <1-5> Show IGMP version currently running:1-5: provider index

show igmp traffic max-joined-groups Show traffic settings.

show igmp joined-ports-list <1-16> <1-512>

Show list of joined ports:1-16: IU slot1-512: group index

show igmp v1router-vaild-time <1-5>

Show vaild time for version1 router1-5: provider index, default 1

show igmp statistics (BRIDGE-PORT|)

Show statistics of igmp message for DSLAM or per subscriber.BRIDGEPORT: bridgeport specified by slot/port/vcc

show igmp current-ports <1-4094> A.B.C.D.

Show list of current ports per group.1-4094: vlan idA.B.C.D: ip address of multicast group

281

Operation Manual CLI Upper Layer Control

Id:0900d8058017e872

g Conexant chip provides IGMP Snooping function to learn about ports belonging to a multicast Group address and to populate the multicast forwarding table with that information. (IGMP Snooping is the process of listening to IGMP conversations between hosts and routers.)

When there are some multicast groups, 239.0.0.1, 238.0.0.1, 237.0.0.1, and so on (the last 24 bits are the same), their multicast Group addresses are the same 01:00:5e:00:00:01. While Conexant chip does Layer 2 switches for multicast packages based on multicast group address, that means only the 1st joined multi-cast group, port and vlan info. can be recorded, other multicast groups' packages will be forwarded based on that record. This defect is caused by current Conexant chip Solution.

As a result, when subscriber under CNX IU joined these groups, it can receive these multicast traffic. But DSLAM system can only display the first joined group's info.

10.1.2 IGMP ProviderTo create/delete an IGMP provider, use the following command.

To display an IGMP provider, use the following command.


igmp clear statistics (BRIDGE-PORT|)

Global clear statistics of IGMP message for DSLAM or per subscriber.BRIDGEPORT: bridgeport specified by slot/port/vcc (default: clear statistics for DSLAM)


igmp provider [<1-5>] A.B.C.D <0-4094>NAME <0-4094>

Global Create an IGMP provider, enter the IGMP proxy IP address, the VLAN ID, the name of IGMP provider and the index.<1-5>: provider indexA.B.C.D: IGMP proxy IP address<0-4094>:VLAN ID of IGMP providerNAME: name of of IGMP provider<0-4094>: Inner VLAN ID of IGMP provider ('0' for no inner tag).

igmp provider <1-5> dot1p <0-7> [<0-7>] [<0-7>][<0-7>]

Modify an IGMP provider, 802.1p:<1-5>: provider index<0-7>: priority<0-7>: priority for report <0-7>: priority for inner tag(Double VLAN mode)<0-7>: priority for inner tag of Report(Double VLAN mode)


no igmp provider {<1-5>} Global Delete IGMP provider:<1-5>: provider index (default all)

282


Id:0900d8058017e872

Upper Layer Control

10.1.3 IGMP QueriesYou can use the hiX 56xx as IGMP queries without multicast router, because IGMP query daemon has been installed in the hiX 56xx.

To configure IGMP queries, use the following command.

To display IGMP query parameter, use the following command.

10.1.4 IGMP Host ParameterTo set IGMP host parameter, use the following command.

To display IGMP host parameter, use the following command.


show igmp provider PrivilegedGlobal

Show a list of created IGMP providers.

show igmp provider egress-port-list <1-5>

Show subscriber list per provider:1-5: provider index

show igmp v1router-vaild-time [<1-5>|]

Show vaild time for version1 Router:<1-5>: provider index (default: 1)


igmp query-parameter <1-255> <10-250> <1-255> <1-65565> <1-255> <1-255> <1-255> <1-400> {on | off} [<1-5>]

Global Set IGMP querier parameters:<1-255>: robustness variable (default: 2)<10-250>: query interval, multiple of 10 (default: 60)<1-255>:query response interval, 1/10 sec (default: 100)<1-65565>: startup query interval (default: 15)<1-255>: startup query count (default: 2)<1-255>: last member query interval (default: 10)<1-255>: last member query count (default: 2)<1-400>: version 1 router timeout (default: 400)on/off: immediate leave on/off<1-5>: provider index (default: 1)


show igmp query-parameter [<1-5>|]

PrivilegedGlobal

Show querier parameters:1-5: provider index (default: 1)|: output modifiers


igmp host-parameter <1-65565> <1-5>

Global Set host parameter:1-65565: unsolicited report interval (default: 10):1-5: provider index (default: 1)


show igmp host-parameter [<1-5>|] Global Show a configured host parameter:1-5: provider index (default: 1)

283


Id:0900d8058017e872

10.1.5 IGMP Multicast PackageTo create IGMP package of multicast group, use the following command.

To delete IGMP package of multicast group, use the following command.

To display IGMP package of multicast group, use the following command.

10.1.6 IGMP SubscriberTo create/delete an IGMP subscriber, use the following command.


igmp multicast-package NAME Global Create package of multicast group, enter the multi-cast package name.

igmp multicast-package NAME <1-100>

Create package of multicast group, enter the multi-cast package name and the index.

igmp multicast-group <1-5> A.B.C.D NAME <1-512>

Create IGMP multicast group:1-5: provider index (default: 1)A.B.C.D: multicast IP addressNAME: multicast group name1-512: index of multicast group.

igmp add-group-to-package <1-512> <1-100>

Add IGMP multicast group to package, enter the mul-ticast group index (<1-512>) and the package index (<1-100>).


no igmp multicast-group index <IGMP_GROUP_IDX_RANGE_STR>

Delete multicast group:

index: multicast group indexIGMP_GROUP_IDX_RANGE_STR: index number, <1-100>

no igmp multicast-group NAME Delete multicast group:NAME: multicast group name

no igmp add-group-to-package <1-512> <1-100>

Delete multicast group from package, enter the mul-ticast group index (<1-512>) and the package index (<1-100>).


show igmp multicast-package PrivilegedGlobal

Show a list of created package of multicast group.

show igmp multicast-group[BRIDGEPORT|]

Show a list of created multicast groups.

show igmp vlan Show a list of VLANs with multicast permission.

show igmp group-ports <1-512> Show assigned subscribers per multicast group:1-512: group index

show igmp port-groups BRIDGE-PORT

Show joined multicast group list per subscriber, enter the bridge port specified by slot/port/vcc.

284


Id:0900d8058017e872

Upper Layer Control

To display IGMP package of multicast group, use the following command.

10.1.7 Whole-Packet-checksumAlthough source of multicast is not connected to multicast group, multicast communica-tion is possible. In the below picture, first-hop router directly connected to source can receive packet from source without (S, G) entry about source. The first-hop router encapsulates the packet in register message and unicasts to RP of multicast group. RP decapsulates capsule of register message and transmits it to members of multicast group.

10.2 Dynamic Host Configuration Protocol (DHCP)Dynamic host configuration protocol (DHCP) makes DHCP server assign IP address to DHCP clients automatically and manage the IP address. In the environment that all PCs may be not connected to network at the same time, all of them do not need to have IP addresses. When some of them need IP address, it can be automatically assigned. In this case, DHCP server is the one that assigns IP address automatically and DHCP clients are those PCs which get IP address from the DHCP server when connected to network. DHCP provides the following benefits.

Saving Cost

With limited IP source, many users can connect to internet. So, it can save IP source and the cost.

Effective Network Management

Anyone can configure DHCP server and DHCP clients belonged to network managed by DHCP server access to network without professional knowledge such as configuring TCP/IP on network environment.

The hiX 56xx can be the DHCP relay agent according to user’s configuration. The DHCP relay agent’s function is to connect the DHCP server to the DHCP client. You need to know the following functions.


igmp subscriber {<1-17> <1-72> <1-8>} | BRIDGEPORT} <1-100>

Global Create an IGMP subscriber:<1-17>: logical IU slot<1-72>: IU port<1-8>: ADSL VCCBRIDGEPORT: bridge port specified by slot/port/vcc<1-100>: package index.

no igmp subscriber {<1-17> <1-72> <1-8> | BRIDGEPORT} <1-100>

Delete an IGMP subscriber:1-17: logical IU slot1-72: IU port1-8: ADSL VCCBRIDGEPORT: bridge port specified by slot/port/vcc1-100: package index.


show igmp subscriber PrivilegedGlobal

Show a list of enabled IGMP subscribers.

285


Id:0900d8058017e872

– DHCP/PPPoE Provider– Assigning DHCP/PPPoE Provider to VLAN– DHCP Relay Agent– DHCP Option 82/Option 105– Verifying DHCP Configuration– DHCP Statistics– Displaying DHCP Configuration

10.2.1 DHCP/PPPoE ProviderTo configure a DHCP/PPPoE provider, use the following command.

To delete a configured DHCP/PPPoE provider, use the following command.

To display a configured DHCP/PPPoE provider, use the following command.

If you configure a DHCP/PPPoE provider with the ip dhcp provider or ip pppoe provider command, DHCP/PPPoE Configuration mode will be opened. You can configure all the DHCP/PPPoE functions in DHCP/PPPoE Configuration mode.

To exit DHCP/PPPoE Configuration mode, use the following command.


ip dhcp provider NAME Global Create DHCP provider pool, enter the provider name.

ip pppoe provider NAME Create PPPoE provider pool, enter the provider name.

pppoe provider NAME VLAN (none|remoteid|circuitid|all)

Create PPPoE provider, enter the provider name.

NAME: Provider name,VLAN: VLAN id,none: Option82 none,remoteid: Option82 remoteid,circuitid: Option82 circuitid,all: Option82 all


no ip dhcp provider NAME Global Delete DHCP provider pool entry, enter the provider name.

no ip pppoe provider NAME Delete PPPoE provider pool entry, enter the provider name.

ip dhcp-snoop delete BRIDGE-PORT A.B.C.D.

Delete DHCP snoop table. delete: ADMIN delete,BRIDGEPORT: Bridge port index by slot/port/vcc,A.B.C.D: IP ADDRESS.


show ip [dhcp | pppoe] provider {NAME | index}

Global Show DHCP/PPPoE provider pool:NAME: provider pool nameindex: sorted by index

286


Id:0900d8058017e872

Upper Layer Control

10.2.1.1 Inner VLAN ID for DHCP/PPPoE ProviderTo specify a inner VLAN ID for DHCP/PPPoE provider, use the following command.

10.2.1.2 IP Address for DHCP ProviderTo specify an IP address for VLAN of DHCP provider, use the following command.

10.2.1.3 DHCP Server for DHCP ProviderTo specify/delete a DHCP server address for DHCP provider, use the following command.


commit {exit | end} DHCPPPPoE

Save values after having verified them successfully:exit: commit configured value and exits DHCP/PPPoE Configuration mode to Global Config-uration mode.end: commit configured value and exits DHCP/PPPoE Configuration mode to Privileged EXEC mode.

exit {secure | forced} Exits DHCP/PPPoE Configuration mode.secure: only if some valid data are committed (default)forced: exits a current mode without saving.


innervlanid <0-4093> DHCP Configure DHCP provider's inner VLAN ID.


ip A.B.C.D/M DHCP Specify an IP address with a netmask.

ip address A.B.C.D Specify an IP address.

ip netmask {<1-31> | A.B.C.D} Specify a netmask.

ip ((address A.B.C.D)|A.B.C.D/M|(netmask (A.B.C.D|<1-31>)))

Configures DHCP relay IP address and netmask.

Configures DHCP relay IP address (optional),A.B.C.D: IP address,A.B.C.D/M: IP address plus netmask (netmask not evaluated),Con-figures DHCP relay IP netmask (netmask not evalu-ated),A.B.C.D: IP netmask (not evaluated),<1-31>: IP netmask as length (not evaluated).


server A.B.C.D DHCP Specify an IP address with a netmask, input maximum 3 addresses.

no server (A.B.C.D|all|) DHCP Delete DHCP server IP address(es).A.B.C.D: specific DHCP server IP address.all: all DHCP server IP addresses (default)

287


Id:0900d8058017e872

10.2.1.4 Default Gateway for DHCP ProviderYou need to configure default gateway all IP addresses can be allowed so that DHCP server can communicate with unspecified IP address.

To configure default gateway of DHCP provider, use the following command.

10.2.1.5 Simplified DHCP ProviderTo select a DHCP provider’s type, use the following command.

10.2.1.6 CEBS MAC Address TranslationOne of the key features for CEBS implementation is N:1 MAC address translation which is that all the end users MACs are replaced by the MAC address of the DSLAM. For proper DHCP operation with this feature, an additional DHCP process is needed.

To enable CEBS MAC address translation with DHCP, use the following command.

g It is to be verified if the R2.5.1 support CEBS in PPPoE scenario.

10.2.1.7 Displaying DHCP Provider ConfigurationTo display all the configured values of a DHCP/PPPoE provider, use the following command.

10.2.2 Assigning DHCP/PPPoE Provider to VLANTo set the DHCP provider of a VLAN, use the following command..


gateway A.B.C.D DHCP Configure DHCP provider’s gateway IP address.


simplified {on | off} DHCP Select a DHCP provider’s type:on: simplified DHCPoff: normal DHCP


cebs mac-translation DHCP Enable CEBS MAC address translation with DHCP.

no cebs mac-translation Disable CEBS MAC address translation with DHCP.


print {name | option82 | server | all} DHCP Show current values:name: provider’s nameoption82: option 82 flagserver: DHCP server IP addressall: all (default).

print {name | option105 | remote-id | all}

PPPoE Show current values:name: provider’s nameoption105: option 105 flagremote-id: remote IDall: all (default).

288


Id:0900d8058017e872

Upper Layer Control

To disable the DHCP provider of a VLAN, use the following command.

To show the DHCP provider of a VLAN, use the following command.

10.2.3 DHCP Relay AgentTo enable DHCP relay agent, use the following command.

To disable DHCP relay agent, use the following command.

To display a configured DHCP/PPPoE relay, use the following command.

To configure DHCP relay agent for management interface towards uplink, use the fol-lowing command.


ip (dhcp|pppoe) use-provider VLANS PROVIDERNAME

Global Assigning DHCP provider of a VLAN,VLANS: select vlan ids (e.g. 101-148,1000),PROVIDERNAME: provider name

ip (dhcp|pppoe) use-provider-index VLANS PROVIDERINDEX

Assigning DHCP provider of a VLAN,VLANS: select vlan ids (e.g. 101-148,1000),PROVIDERINDEX : provider index


no ip (dhcp|pppoe) use-provider VLANS

Global unset the dhcp provider of a VLAN,VLANS: vlan ids (e.g. 101-148,1000)


show ip dhcp-pppoe use-provider VLANS

Global Show the dhcp provider of a VLAN,VLANS: vlan ids (e.g. 101-148,1000).

show ip dhcp session vlan VLANS Show DHCP session,VLANS: vlan ids (e.g. 101-148,1000).

show ip dhcp pool show vlan pool.

ip dhcp release A.B.C.D Release DHCP session data for an IP address forcely, A.B.C.D: subscriber IP address.


ip dhcp relay Global Enable DHCP relay agent.


no ip dhcp relay Global Disable DHCP relay agent.


show ip dhcp relay Global Show DHCP relay agent configuration.

289


Id:0900d8058017e872

To disable DHCP relay agent for management interface towards uplink, use the follow-ing command.

10.2.4 DHCP FloodTo enable flooding of DHCP, use the following command..

To disable flooding of DHCP, use the following command.

To show status of DHCP flood of all VLANs, use the following command.

10.2.5 DHCP Option 82/Option 105In some networks, it is necessary to use additional information to further determine which IP addresses to allocate. By using the DHCP option 82, a DHCP relay agent can include additional information about itself when forwarding client-originated DHCP packets to a DHCP server. The DHCP relay agent will automatically add the circuit ID and the remote ID to the option 82 field in the DHCP packets and forward them to the DHCP server.

The DHCP option 82 resolves the following issues in an environment in which untrusted hosts access the internet via a circuit based public network:

Broadcast Forwarding


mgmt-uplink-dhcp-relay UPLINK_IF A.B.C.D

Global Enable DHCP-realay agent for mgmt interface towards uplink,UPLINK: bridge device (brxxx) on the uplink interface", A.B.C.D.: IP address of DHCP server


no mgmt-uplink-dhcp-relay Global Disable DHCP-realay agent for mgmt interface towards uplink.


ip dhcp flood VLANID Global Enable flooding of DHCP.VLANID: input vlan id (2-4093).


no ip dhcp flood VLANID Global Disable flooding of DHCP.VLANID: input vlan id (2-4093).


show ip dhcp flood (|VLANID) Global List status of DHCP flood of All VLANs.

290


Id:0900d8058017e872

Upper Layer Control

The DHCP option 82 allows a DHCP relay agent to reduce unnecessary broadcast flooding by forwarding the normally broadcasted DHCP response only on the circuit indi-cated in the circuit ID.

DHCP Address Exhaustion

In general, a DHCP server may be extended to maintain a DHCP lease database with an IP address, hardware address and remote ID. The DHCP server should implement policies that restrict the number of IP addresses to be assigned to a single remote ID.

Static Assignment

A DHCP server may use the remote ID to select the IP address to be assigned. It may permit static assignment of IP addresses to particular remote IDs, and disallow an address request from an unauthorized remote ID.

IP Spoofing

A DHCP client may associate the IP address assigned by a DHCP server in a forwarded DHCP_ACK message with the circuit to which it was forwarded. The circuit access device may prevent forwarding of IP packets with source IP addresses, other than, those it has associated with the receiving circuit. This prevents simple IP spoofing attacks on the central LAN, and IP spoofing of other hosts.

MAC Address Spoofing

By associating a MAC address with a remote ID, a DHCP server can prevent offering an IP address to an attacker spoofing the same MAC address on a different remote ID.

Client Identifier Spoofing

By using the agent-supplied remote ID option, the untrusted and as-yet unstandardized client identifier field need not be used by the DHCP server.

Fig 9.1shows how the DHCP relay agent with the DHCP option 82 operates.

Figure 17 DHCP Option 82 Operation

10.2.5.1 Enabling Option 82/Option 105To enable DHCP option 82, use the following command.

291


Id:0900d8058017e872

To enable PPPoE option 105, use the following command.

10.2.5.2 Option 82 Packet PolicyYou can configure how to process the packets when DHCP option 82 packets come to DHCP server or DHCP relay agent.

To configure a policy for option 82 packet, use the following command.

g A rule for option 82 packet can be configured when the hiX 56xx operates as DHCP relay agent.

10.2.6 Verifying DHCP ConfigurationTo verify that all the values for DHCP/PPPoE are configured correctly, use the following command. If there is any incorrect configuration, a failure message will be displayed.

10.2.7 DHCP StatisticsTo display a DHCP packet statistics, use the following command.


option82 {none | remote-id | circuit-id | all}

DHCP Configure DHCP provider’s option 82 flags:none: using no suboption.remote-id: enables using remote ID suboption.circuit-id: enables using circuit ID suboption.all: enables flags for all suboptions.


option105 {non | remote-id | circuit-id | all}

PPPoE Configure PPPoE provider’s option 105 flags:non: Using no suboption.remote-id: using remote ID suboption.circuit-id: using circuit ID suboption.all: using all suboptions.


ip dhcp option82 policy {replace | keep | drop}

Global Configure a policy of option 82 packet.:replace: replace the existing address with option82 information of relay or server.keep: keep the option 82 information.drop: drop the option 82 packet(default).


verify DHCPPPPoE

Show if the provider entry’s values are consistent.

292


Id:0900d8058017e872

Upper Layer Control

The following is an example of displaying a DHCP packet statistics.

SWITCH(config)# show ip dhcp statistics Received 0Sent 0 Received errors 0Sent errors 0 Received BOOTP requests 0Received BOOTP replies 0 Sent BOOTP requests 0Sent BOOTP replies 0 received DISCOVER 0received OFFER 0received REQUEST 0received DECLINE 0received ACK 0received NAK 0received RELEASE 0received INFORM 0 SWITCH(config)#

10.2.8 Displaying DHCP ConfigurationTo display a current DHCP configuration, use the following command.

10.2.9 Changing Destination MACTo change destination MAC of reply to unicast from broadcast, use the following command.


show ip dhcp statistics Global Show DHCP packet sent/received statistics.

ip dhcp clear statistics Clear DHCP status (packet sent/received statistics).


show ip dhcp config Global Show a current DHCP configuration.

show ip dhcp-snoop BRIDGEPORT Show DHCP snoop table:BRIDGEPORT: bridge port index by slot/port/vcc.

show dhcp pool Show DHCP vlan pool.


unicast-xlation (on|off) DHCP Change the dst-mac of reply to unicast from bcast, default status is Off,

293


Id:0900d8058017e872

10.3 IP Anti-SpoofingMany computer viruses or worms attack the target system using DoS (Denial of Service) or scan the network. In this case, that software usually changes its source IP address to hide itself. Sometimes, some hacking software tries to change its source IP address to pretend the target system. To prevent this kind of attack solves security problems as well as traffic problems.

In order to prevent IP spoofing, reliable information about IP address of a subscriber is needed. This information can be acquired by:

– using DHCP information– static configuration

To enable/disable IP anti-spoofing, use the following command.

To set the time to enable IP anti-spoofing when the entries in the DHCP snooping table are lost, use the following command.

To show the remaining time to enable IP anti-spoofing when the entries in the DHCP snooping table are lost, use the following command.

10.4 Uplink MAC Address Anti-SpoofingIn order to prevent uplink MAC address spoofing, reliable information about MAC address of a subscriber is needed. This information can be acquired by:

– using DHCP information– static configuration

To enable uplink MAC anti-spoofing, use the following command.

To disable uplink MAC anti-spoofing, use the following command.


ip anti-spoofing (enable|disable) Global Enable/disable IP anti-spoofing.


ip anti-spoofing grace-period <0-65536>

Global Set the time to enable IP anti-spoofing.(unit: second)


show ip anti-spoofing remainingtime Global Show RemainingTime to end waiting for GracePe-riod.


umas static XX:XX:XX:XX:XX:XX Bridge Enable uplink MAC anti-spoofing, using static config-uration.

umas dhcp-nexthop-addr Bridge Enable uplink MAC anti-spoofing, using DHCP infor-mation.

294


Id:0900d8058017e872

Upper Layer Control

To show MAC anti-spoofing, use the following command.

10.4.1 Port MAC Address TranslationTo enable/disable PORT MAC address translation, use the following command.

10.4.2 DSLAM MAC Address TranslationTo enable/disable DSLAM MAC address translation, use the following command.

10.5 Storm ControlThe hiX 5635 provides storm control feature for mass broadcast, multicast, and destina-tion lookup failure (DLF). Generally, wrong network configuration, hardware malfunc-tion, virus and so on cause these kinds of mass packets. Packet storm occupies most of the bandwidth of the network, and that causes the network very unstable..

To enable/disable storm control for CXU, use the following command.


no umas static XX:XX:XX:XX:XX:XX

Bridge Disable uplink MAC anti-spoofing, using static config-uration.

no umas dhcp-nexthop-addr Bridge Disable uplink MAC anti-spoofing, using DHCP infor-mation.


show umas Bridge show Gateway MAC anti-spoofing.


mac PORT (enable|disable) Bridge Enable/disable Port MAC address translation.

show mat mac PORT Show Port MAC address translation.

show mat port PORT Show Port MAC address translation.


mat dslamid <0-4095> DHCP Enable DSLAM MAC address translation.

<0-4095>: dslam id (range 0 .. 4095).

mat translation-mode (world|ths) configure MAC translation mode,world: world mac translation format,ths: THS mac translation format.

no mat dslamid Disable DSLAM MAC address translation.

show mat dslamid Show DSLAM MAC address translation.

295


Id:0900d8058017e872

To display a configuration of storm control, use the following command.

Example:

SWITCH(bridge)# storm-control broadcast 500 0/1SWITCH (bridge)# show storm-control----------------------------------------+Slot/Port/Vcc| Packet Type| Rate |-------------+--------------------------+0/1 broadcast 500

10.6 BandwidthRouting protocol uses bandwidth information to measure routing distance value. To con-figure bandwidth of interface, use the following command.

g This bandwidth is only for routing information implement and it does not concern physical bandwidth.

10.7 Maximum Transmission Unit (MTU)Maximum value for the length of the data payload can be transmitted. You can set a maximum transmission unit (MTU) with below command.

10.8 Enabling/Blocking Static IP AddressIn the hiX 56xx, it is possible to block to use IP pool resources as fixed by using the assigned IP addresses without renewing them.


storm-control {broadcast | mul-ticast | dlf} RATE PORTS

Bridge Enables broadcast, multicast, or DLF storm control respectively in a port with a user defined rate. Rate value is from 1 to 262142 for FE, and from 1 to 2097150 for GE, select the port number..

no storm-control {broadcast | multi-cast | dlf} PORTS

Disables broadcast, multicast, or DLF storm control respectively, select the port number.


show storm-control [PORT] PrivilegedG-lobalBridge

Shows a configuration of storm control, select the port number.


bandwidth <1-10000000> Interface Configure bandwidth of interface, enter the value of bandwidth.

no bandwidth Delete configured bandwidth of interface.


mtu <64-17940> Interface Set a MTU size, enter the value of MTU.

no mtu Return to the default MTU size.

296


Id:0900d8058017e872

Upper Layer Control

The following is the commands of blocking the user who uses static IP address.

To delete a configured value, use the following command.

You can display the information of valid and invalid IP address using the following command.


ip arp-reply flood Global Enable ARP reply flood.

ip arp-reply fixed <1-18000> A.B.C.D

Handle a static IP address entry:1-18000: bridge port indexA.B.C.D: static IP address

ip arp-reply fixed BRIDGEPORT A.B.C.D

Handle a static IP address entry:BRIDGEPORT: bridge port index by slot/port/vccA.B.C.D: static IP address

ip arp-reply vlan-forward <1-4094> enable

Enable forward policy for vlan configuration of arp forward. vlan-forward: vlan configuration of arp forward <1-4094>: input vlan id, e.g. 100 enable: to enable forward policy.

ip arp-reply vlan-forward <1-4094> disable

disable forward policy for vlan configuration of arp forward. vlan-forward: vlan configuration of arp forward <1-4094>: input vlan id, e.g. 100 disable: to disable forward policy.


no ip arp-reply flood Global Disable ARP reply flood.

no ip arp-reply fixed {<1-18000> | all}

Delete a static IP address table:1-18000: bridge port indexall: deletes all static IP address entries

no ip arp-reply fixedBRIDGEPORT

Delete a static IP address entry:BRIDGEPORT: bridge port index by slot/port/vcc

no ip arp-reply vlan-forward <1-4094>

Delete the forward policy for vlan configuration of arp forward. vlan-forward: vlan configuration of arp forward <1-4094>: input vlan id, e.g. 100

ip dhcp-snoop delete BRIDGE-PORT A.B.C.D

Delete DHCP snoop table.delete: ADMIN delete.BRIDGEPORT: Bridge port index by slot/port/vcc.A.B.C.D: IP address.


show ip arp-reply flood Global Show ARP replier’s flooding state.

show ip arp-reply fixed-ip Show a static IP address entry.

show ip arp-reply vlan-forward Show forward policy for vlan configuration of arp forward. vlan-forward: vlan configuration of arp forward.

297

Operation Manual CLI VoIP configuration

Id:0900d805800ebb8a

11 VoIP configurationVoIP allows you to make telephone calls using a computer network, over a data network like the Internet. VoIP converts the voice signal from your telephone into a digital signal that travels over the internet then converts it back at the other end so you can speak to anyone with a regular phone number. VoIP may also allow you to make a call directly from a computer using a conventional telephone.

11.1 Basic ConfigurationThis chapter describes the basic configuration for hiX 56xx R2.0M.

To begin VoIP mode, use the following command.

Before you start configuring VoIP command, please refer to the Tab 10.1 to type variable numbers for the command.

11.2 H248 ConfigurationH.248 protocol is developed for real time multimedia data communication on IP. MEGACO standard is regulated by IETF and ITU. It is for outer call agent with MGCP, that is, for interface between MGC (Media Gateway Controller) and MG (Media Gate-way).


voip Global Begin VoIP mode.

Variable Inputs Description

SLOT s1 Select slot number 1

s1, s3 Select slot number 1 and 3

s1 - s4 Select slot number from 1 to 4

PORTS s1 Select all ports in slot number 1

s1/1, s1/24 Select number 1 port and number 24 port in slot number 1

s1 - s8 Select all ports in all slots

Table 67 Descriptions for variable command

298


Id:0900d805800ebb8a

VoIP configuration

Figure 18 H.248 (MEGACO) Network Configuration

It has same structure with MGCP. Even if it was developed after MGCP, MEGACO is enough for MGCP function and supports additional function with rapid growth.

The below is components for H.248 (MEGACO)

– Signaling Gateway: overall calling and hanging up function– Access Gateway: transmits voice and computer data by packet– Call Agent: receives signal from SG, manages bandwidth and provides server by

choosing MG

To begin H248 mode, use the following command.

11.2.1 Creating and Configuring H248 Virtual GatewayTo create virtual gateway, use the following command.

To display virtual gateway, use the following command.

To control a virtual gateway, use the following command.


h248 VoIP Begin into H248 mode.


vgw create <1-16> NAME H248 Vgw: H248 Virtual Gateway create: Create Virtual Gateway <1-16>: Specify VGWID <1-16> NAME: Specify VGW Name and max 32 characters


show vgw H248 show:Show Virtual Gateway Info, vgw:Virtual Gateway Info

299


Id:0900d805800ebb8a

To add slots or digit map into a virtual gateway, use the following command.

To delete slots or digit map from a virtual gateway, use the following command.

To specify ip address for a media gateway, use the following command.

To configure an alarmseverity profile for a virtual gateway, use the following command.

To configure a priority profile for a virtual gateway, use the following command.


vgw control <1-16> (start|stop) H248 vgw: H248 Virtual Gateway, control: Control operation, <1-16>: Specify VGWID, <1-16>, start: Start Virtual Gateway,stop: Stop Virtual Gateway


vgw <1-16> add ((slots SLOTS)|(dm INDEX))

H248 vgw: H248 Virtual Gateway, <1-16>: Specify VGWID, <1-16>, add: Add slots or digit map into this vgw, slots: slots key, SLOTS: slots, e.g. s1-s2 or s1-s3,s4...and no more than s17, dm: digit map key, INDEX: digit map index,eg. 1,2,... and max 32767


vgw <1-16> delete ((slots SLOTS)|(dm INDEX))

H248 Vgw: H248 Virtual Gateway, <1-16>: Specify VGWID, <1-16>, delete: Delete slots from this vgw, slots: slots key. SLOTS: slots, e.g. s1-s2 or s1-s3,s4..., dm:digit map, INDEX: digit map index,eg. 1,2,... and max 32767


vgw <1-16> midip ADDRESS midport NUM

H248 vgw: H248 Virtual Gateway, <1-16>: Specify VGWID, <1-16>, midip: MG (Media Gateway) Address, ADDRESS: Specify MG Address (ex: A:B:C:D),midport: MG (Media Gateway) Port, NUM: Specify MG Port (type: decimal)


vgw <1-16> alarmseverityprofile PROFILEID <0-32767>

H248 vgw: H248 Virtual Gateway, <1-16>: Specify VGWID, <1-16>, alarmSeverityProfile: Specific profile ID, (1,2,.....)<0-32767>: valid range, 0 is close

300


Id:0900d805800ebb8a

VoIP configuration

To configure a MG profile for a virtual gateway, use the following command.

To delete a virtual gateway, use the following command.

11.3 Profile ConfigurationIn this version of hiX 56xx, the VoIP function is configured through profiles. The following explains how to create, show, modify, configure and delete profiles. Then an example with diagram and explanation is provided for better illustration in Section 10.4.

11.3.1 MG ProfileTo create a MG profile, use the following command.

To display an mg profile, use the following command.

To modify an MG profile, use the following command.


vgw <1-16> priorityprofile PRO-FILEID

H248 vgw: H248 Virtual Gateway, <1-16>: Specify VGWID, <1-16>, priorityProfile: Specific profile ID, (1,2,.....) and valid range <0-32767>, 0 is close


vgw <1-16> mgprofile <0-16> H248 vgw: H248 Virtual Gateway,<1-16>: Specify VGWID, <1-16>, mgprofile: Config MG Profile for this VGW, <0-16>: Specify MG Profile ID,0 is close


no vgw <1-16> H248 no: Unset Value, vgw: Delete Virtual Gateway, <1-16>: Specify VGWID <1-16>


mgprofile create <2-16> NAME (text) (v1)

H248 mgprofile: MG Profile Configuration, create: Create a MG Profile, <2-16>: Profile ID, e.g. valid range <2-16>, NAME: Name string of this profile and max 31 char-acters, text: Text Encoding, v1: Protocol Version 1.


show mgprofile (<1-16>|) H248 show: Show running system information, mgprofile: MG profile, <1-16>: Specify MG profile ID <1-16>

301


Id:0900d805800ebb8a

To configure a MG profile, use the following command.




mgprofile PROFILEID ((name NAME)|(encoding (textlong|text-short))|(version(v1))

H248 mgprofile: MG Profile Configuration, PROFILEID: Profile ID to be modified <1-16>,name: Change Profile Name, NAME: New name string and max 31 characters,encoding: Message Encoding, textlong: Text Encoding long(default), textshort: Text Encoding short, version: Protocol Version, v1: Version 1.


mgprofile PROFILEID ((maxcontext NUM)|(maxterm NUM)|(topology (yes|no))|(timestamp (yes|no))|(namingphyterm NAME)|(namingephterm NAME))

H248 mgprofile: MG Profile Configuration, PROFILEID: Profile ID to be configured <1-16>,maxcontext: ROOT Property: max context number,NUM: Specify Number, default: 180, maxterm: ROOT Property: max termination in a context, NUM: Specify Number, default: 6, topology: Use Topology, yes: Yes Use Topology, no: No Use Topology, timestamp: Use Timestamp, yes: Yes Use Timestamp, no: No Use Timestamp, namingphyterm: Naming for Physical Termination,NAME: Specific Prefix, e.g. POTS and max 128 char-acters, namingephterm: Naming for Ephemeral Termination,NAME: Specific Prefix, e.g. RTP and max 128 char-acters


mgprofile PROFILEID ((tos NUM)|(pktlist PACKAGES))

H248 mgprofile: MG Profile Configuration, PROFILEID: Profile ID to be configured <1-16>, tos: Type of Service, NUM: Specific Type of Service, <1-255>, pktlist: Packages List for H248 Protocol,PACKAGES: Specific Packages, E.g. basic,ctyp,alert,an,ipfax,andisp,ftmd,fax,xcg,amet,xal,biztn,srvtn,xsrvtn,bcg,int

302


Id:0900d805800ebb8a

VoIP configuration

To delete a MG profile, use the following command.

11.3.2 MGC ProfileTo create a MGC profile, use the following command.

To display mgc profile, use the following command.

To configure a MGC profile for a virtual gateway, use the following command.


mgprofile PROFILEID((heartbeat-time NUM)|(retransti-meNUM)|(maxretranscntNUM)|(startuptype(normal|expe-dited|local))|(mwdNUM)|(termquit-mode(graceful|forced))|(tcpudp (udp|tcp)))

H248 mgprofile: MG profile configuration,PROFILEID: Profile ID to be configured <1-16>,heartbeattime: Heart Beat Timer,NUM: Specify Timer(second), default: 12s,retranstime: Retransmit Timer,NUM: Specify Timer(second), default: 3,maxretranscnt: Max Retransmit Count,NUM: Specify Number, default: 3,startuptype: Startup Type,normal: Normal,expedited: Expedited,local: Local,mwd: Max Waiting Delay for 1st ServiceChange

after Reboot,NUM: Specify Number,termquitmode: Termination Quit Mode,graceful: Graceful Quit,forced: Forced Quit,tcpudp: Transport Lay Protocol,udp: Use UDP,tcp: Use TCP


no mgprofile PROFILEID H248 no: Unset Value, mgprofile: Delete a MG Profile, PROFILEID: Specify MG Profile ID <2-16>, Profile 1 is default and could not be deleted.


mgcprofile create PROFILEID NAME mgc1 IPADDRESS NUM

H248 mgcprofile: MGC Profile Configuration, create: Create a MGC Profile,PROFILEID: ProfileId, <1-16>, NAME:Name of This MGC Profile and max 31 char-acters, mgc1: Config The Primary MGC in This Profile,IPADDRESS: Ip Address of This MGC, A.B.C.D,NUM:TCP/UDP Port Number, E.g: 2944


show mgcprofile (<1-16>|) H248 show: Show running system information, mgcprofile: MGC profile, <1-16>: Specify MGC profile ID <1-16>

303


Id:0900d805800ebb8a

To modify a MGC profile, use the following command.

To delete a MGC profile, use the following command.

11.3.3 Codec ProfileTo create a codec profile, use the following command.

To display codec profile, use the following command.


vgw <1-16> mgcprofile <0-16> H248 vgw: H248 Virtual Gateway, <1-16>: Specify VGWID, <1-16>, mgcprofile: Config MGC Profile for this VGW, <0-16>: Specify MGC Profile ID,0 is close


mgcprofile PROFILEID ((name NAME)|((mgc1|mgc2|mgc3|mgc4|mgc5) IPADDRESS NUM)) |((softswitch1 | softswitch2 | softswitch3 | softswitch4 | softswitch5) alcatelA5020 | common | ericssionTes | huaweiSOFTX3000 | nortelCS2000 | siemensHiE9200)))

H248 mgcprofile: MGC Profile Configuration, PROFILEID: Modify a MGC Profile, Specify ID <1-16>, name: Change The Name of this profile,NAME: New Name String and max 31 characters,mgc1: Config The Primary MGC,mgc2: Config The Second MGC,mgc3: Config The Third MGC,mgc4: Config The Fourth MGC,mgc5: Config The Fifth MGC,IPAD-DRESS: Ip Address of This MGC,A.B.C.D,NUM:TCP/UDP Port Number, E.g: 2944Softswitch(1-5): soft switch type, common defaultalcatelA5020: soft swith type, alcatelA5020common: soft swith type, common defaultericssionTes: soft swith type,ericssionTesnortelCS2000: soft swith type,nortelCS2000siemensHiE9200: Soft swith type,siemensHiE9200238 A50010-Y3-E206-4-7619


no mgcprofile PROFILEID H248 no: Unset Value, mgcprofile: Delete a MGC Profile, PROFILEID: Specify MGC Profile ID <1-16>


codecprofile create PROFILEID NAME CODETYPE1 CODETYPE2 CODETYPE3 CODETYPE4 CODETYPE5

VOIP codecprofile:codecprofile configuaration,create:create a Codec profile, PROFILEID:Specific profile ID,(1,2,.....) and max 32767, NAME:name length less than 32,CODETYPE1:codec type1: g711a|g711u|g723|g729|g726,CODETYPE2:codec type2: g711a|g711u|g723|g729|g726, CODETYPE3:codec type3: g711a|g711u|g723|g729|g726, CODETYPE4:codec type4: g711a|g711u|g723|g729|g726, CODETYPE5:codec type5: g711a|g711u|g723|g729|g726

304


Id:0900d805800ebb8a

VoIP configuration

To modify a codec profile, use the following command.

To configure a codec profile, use the following command.


show codecprofile (PROFILEID|) VOIP show: Show running system information,codecprofile: codecprofile, PROFILEID: Specific profile ID,(1,2,.....) and max 32767 , :all content


codecprofile PROFILEID ((name NAME)|(codectype CODETYPE1 CODETYPE2 CODETYPE3 CODETYPE4 CODETYPE5))

VOIP codecprofile:codecprofile configuaration,PROFILEID:Specific profile ID,(1,2,.....) and max 32767, name:name of codecprofile, NAME:name length less than 32, codectype:codec type to be used, CODETYPE1:codec type1: g711a|g711u|g723|g729|g726, CODETYPE2:codec type2: g711a|g711u|g723|g729|g726, CODETYPE3:codec type3: g711a|g711u|g723|g729|g726, CODETYPE4:codec type4: g711a|g711u|g723|g729|g726, CODETYPE5:codec type5: g711a|g711u|g723|g729|g726

305


Id:0900d805800ebb8a

To configure a codec profile, use the following command.


codecprofile PROFILEID ((g726pktype <0-255>)|(g723br (6300bps|5300bps))|(g726br (16kbps|24kbps|32kbps|40kbps))|(ptime711 (10msec|20msec|30msec|40msec|50msec|60msec))|(ptime723 (30msec|60msec))|(ptime726 (10msec|20msec|30msec))|(ptime729 (10msec|20msec|30msec|40msec|50msec|60msec)))

VOIP codecprofile:codecprofile configuaration,PROFILEID:Specific profile ID,(1,2,.....) and max 32767, g726pktype: G726 PayloadType for slot, <0-255>: [value range] Value = <0..255> Default:2, g723br: G723Bitrate for slot, 6300bps: 6300bps, 5300bps: 5300bps, g726br: G726Bitrate for slot, 16kbps: 16kbps, 24kbps: 24kbps, 32kbps: 32kbps, 40kbps: 40kbps, ptime711: Packet generation cycle of G.711 codec., 10msec: 10msec, 20msec: 20msec, 30msec: 30msec, 40msec: 40msec, 50msec: 50msec, 60msec: 60msec, ptime723: Packet generation cycle of G.723 codec., 30msec: 30msec, 60msec: 60msec, ptime726: Packet generation cycle of G.726 codec., 10msec: 10msec, 20msec: 20msec, 30msec: 30msec, ptime729: Packet generation cycle of G.729 codec., 10msec: 10msec, 20msec: 20msec, 30msec: 30msec, 40msec: 40msec, 50msec: 50msec, 60msec: 60msec


codecprofile PROFILEID ((ec <0-15>)|(vad (appendixIIs-cheme|defaultmethod|off|))|(plc (yes|no))|(cng (no|yes))|(autoswitchcodec (off|g711a|g711u)))

VOIP codecprofile: codecprofile configuaration, PRO-FILEID: Specific profile ID,(1,2,.....) and max 32767, ec: Use of Echo Canceler and level, <0-15>: off(0): disable ;on(1..15): On Echo Can-celer, vad: Use of Voice Activation Detec-tion, appendixIIscheme: appendixIIscheme, VAD Enabled using PT13/G.711 Appendix II scheme,defaultmethod: defaultmethod, VAD Enabled using the coding scheme’s default method, off: off:Voice Activation Detection (default), plc: Packet Loss Concealment, yes: yes, no: no, cng: Comfor Noise Gerneration, no: no:Unuse CNG, yes: yes:Use CNG, autoswitchcodec: autoswitchcodec, off: off, g711a: g711a (pcma), g711u: g711u (pcmu)

306


Id:0900d805800ebb8a

VoIP configuration

To delete a codec profile, use the following command.

11.3.4 Jitter ProfileTo create a jitter profile, use the following command.

To display jitter profile, use the following command.

To delete a jitter profile, use the following command.

11.3.5 Fax ProfileTo create a fax profile, use the following command.


no codecprofile PROFILEID VOIP no:Unset Value, codecprofile:delete codecprofile configuaration,PROFILEID:Specific profile ID, (1,2,.....) and max 32767


jitterprofile PROFILEID ((name NAME)|(jittermode (dynamic|static))|(min <0-200>)|(max <0-200>)|(init <0-200>)|(updateperiod <0-65535>)|(delthreshold <0-500>))

VOIP jitterprofile: jitterprofile configuaration, PROFILEID: Specific profile ID,(1,2,.....) and max 32767, name: name of jitterprofile, NAME: name length less than 32, jittermode: Jitter Mode, dynamic: dynamic, static: static, min: Jitter Min Size, <0-200>: valid range 0-200, max: Jitter Max Size, <0-200>: valid range 0-200, init:: Jitter Init Size, <0-200>: valid range 0-200, updateperiod: Jitter Update Period, <0-65535>: valid range 0-65535, delthreshold: JitterDelThreshold, <0-500>: valid range 0-500


show jitterprofile (PROFILEID|) VOIP show: Show running system information, jitterprofile: jitterprofile, PROFILEID: Specific profile ID,(1,2,.....) and max 32767, :all content


no jitterprofile PROFILEID VOIP no: Unset Value, jitterprofile:Delete a jitter buffer profile, PROFILEID: Specific profile ID,(1,2,.....) and max 32767

307


Id:0900d805800ebb8a

To display fax profile, use the following command.

To modify a fax profile, use the following command.

To configure a fax profile, use the following command.


faxprofile create PROFILEID NAME (auto|mgc|off) (t30auto|t30mgc|t38auto| t38mgc|off) (nospeed|2400bps|4800bps|7200bps|9600bps|12000bps|14400bps)

VOIP faxprofile:faxprofile configuaration, create:create a fax profile, PROFILEID:Specific profile ID,(1,2,.....) and max 32767, NAME:name length less than 32, auto: Use Modem Detection. auto, mgc: Use Modem Detection. Mgc, off: no use Modem Detection. t30auto:On Fax service T30auto, t30mgc:On Fax service T30mgc, t38auto:On Fax service T38auto, t38mgc:On Fax service t38mgc off:Off Fax service, nospeed:Max Baudrate: nospeed, 2400bps:Max Baudrate: 2400bps, 4800bps:Max Baudrate: 4800bps, 7200bps:Max Baudrate: 7200bps, 9600bps:Max Baudrate: 9600bps, 12000bps:Max Baudrate: 12000bps, 14400bps:Max Baudrate: 14400bps


show faxprofile (PROFILEID|) VOIP show: Show running system information, faxprofile: faxprofile, PROFILEID: Specific profile ID,(1,2,.....) and max 32767, :all content


faxprofile PROFILEID ((name NAME)|(modemdetect (auto|mgc|off))|(fax (t30auto|t30mgc|t38auto| t38mgc|off) (maxbr (nospeed|2400bps|4800bps|7200bps|9600bps|12000bps|14400bps)))

VOIP faxprofile:faxprofile configuaration, PROFILEID:Specific profile ID,(1,2,.....) and max 32767, name:name of faxprofile, NAME:name length less than 32, modemdetect:Use Modem Detection, auto: Use Modem Detection. auto, mgc: Use Modem Detection. Mgc, off: no use Modem Detection. fax:Use of Fax, t30auto:On Fax service T30auto, t30mgc:On Fax service T30mgc, t38auto:On Fax service T38auto, t38mgc:On Fax service T38mgc off:Off Fax service, maxbr:Max Baudrate, nospeed:Max Baudrate: nospeed, 2400bps:Max Baudrate: 2400bps, 4800bps:Max Baudrate: 4800bps, 7200bps:Max Baudrate: 7200bps, 9600bps:Max Baudrate: 9600bps, 12000bps:Max Baudrate: 12000pbs, 14400bps:Max Baudrate: 14400pbs

308


Id:0900d805800ebb8a

VoIP configuration

To delete a fax profile, use the following command.

11.3.6 RTCP ProfileTo create a rtcp profile, use the following command.

To display rtcp profile, use the following command.

To modify a rtcp profile, use the following command.


faxprofile PROFILEID ((t38ecm (yes|no))|(t38tcfmode (procedure1|procedure2))|(t38numfec <0-3>)|(t38numifp <0-4>)|(t38bytemode (byte|frame)))

VOIP faxprofile:faxprofile configuaration, PROFILEID:Specific profile ID,(1,2,.....) and max 32767, t38ecm:T38 Fax Error Correction Mode, yes:yes.Use T38 Fax Error Correction Mode, no:no,Unuse T38 Fax Error Correction Mode, t38tcfmode:T38 FaxTcfmode, procedure1:procedure1, procedure2:procedure2, t38numfec:T38 Fax Forward Error Correction, <0-3>:valid range 0-3, t38numifp:T38 Internet Fax Protocol, <0-4>:valid range 0-4, t38bytemode:T38 Byte or Frame Mode, byte:byte mode, frame:frame mode


no faxprofile PROFILEID VOIP no:Unset Value, faxprofile:delete Fax profile, PROFILEID:Specify Fax id (1,2,....)and max 32767


rtcpprofile create PROFILEID NAME (inbanddtmf|rfc2833)

VOIP rtcpprofile:rtcpprofile configuaration, create:create a rtcpprofile, PROFILEID:Specific profile ID,(1,2,.....) and max 32767, NAME:name length less than 32, inbanddtmf: use inband DTMF (default),rfc2833:Use RFC2833 DTMF


show rtcpprofile (PROFILEID|) VOIP show: Show running system information, rtcpprofile: rtcpprofile, PROFILEID: Specific profile ID, (1,2,.....) and max 32767, :all content

309


Id:0900d805800ebb8a

To configure an rtcp profile, use the following command.

To delete a rtcp profile, use the following command.

11.3.7 Voice ctp ProfileTo configure a voice ctp, use the following command.


rtcpprofile PROFILEID ((name NAME)|(oobdtmf (off|oob|rfc2833)))

VOIP rtcpprofile:rtcpprofile configuaration, PROFILEID:Specific profile ID,(1,2,.....) and max 32767, name:name of rtcpprofile, NAME:name length less than 32, oobdtmf:Use of Out-of-Band DTMF,off:Unuse Out-of-band DTMF, oob:Use Out-of-band DTMF, rfc2833:Use RFC2833 DTMF


rtcpprofile PROFILEID ((t38pktcount <0-3>)|(t30pktcount <0-7>)|(rfc2833pkttype <96-127>)|(rfc2833redpkttype <96-127>)|(rtppktcount <0-2>)|(rtcpgen (yes|no))|(rtcpinterval <5-180>))

VOIP rtcpprofile: rtcpprofile configuaration, PROFILEID: Specific profile ID,(1,2,.....) and max 32767,t38pktcount: T38 Fax Redundancy Packet Count, <0-3>: valid range 0-3, t30pktcount: T30 Fax Redundancy Red Packet Count, <0-7>: valid range 0-7, rfc2833pkttype: Rfc2833 Packet Type, <96-127>: valid range 96-127,rfc2833redpkttype:Rfc2833 Red Packet Type, <96-127>: valid range 96-127, rtppktcount: Redundancy for RTP Packet, <0-2>: valid range 0-2, rtcpgen: RTCP Generation,yes: yes,Use RTCP Generation , no: no,Unuse RTCP Generation,rtcpinterval: RTCP Interval, <5-180>: valid range 5-180


no rtcpprofile PROFILEID VOIP no:Unset Value, rtcpprofile:Delete rtcpprofile, PROFILEID:Specify profile ID (1,2....)and max 32767

310


Id:0900d805800ebb8a

VoIP configuration

To display voicectp with port index, use the following command.

11.3.8 PotsTo configure a pots with slot, use the following command.

To display pots with port index, use the following command.

To test a pots, use the following command.


voicectp SLOT ((iphostprofileid <0-16>)|(codecprofileid <0-32767>)|(jit-terprofileid <0-32767>)|(faxprofileid <0-32767>)|(rtcpprofileid <0-32767>)|(rtpudpportbase RTPUDP-PORTBASE))

H248 voicectp: voicectp configuaration, SLOT: slot eg. s1,s2 ..., iphostprofileid:iphostpro-fileid, <0-16>: iphostprofileid 1-16, 0 is close,codecprofileid: codecprofileid,<0-32767>: codecprofileid 1-32767, 0 is close,jitterprofileid:jitterprofileid, <0-32767>: jitterprofileid 1-32767, 0 is close,faxprofileid: faxprofileid, <0-32767>: faxprofileid1-32767, 0 is close,rtcpprofileid: rtcpprofileid, <0-32767>: rtcpprofileid 1-32767, 0 is close, rtpudpportbase:RtpUdpPortBase,RTPUDPPORTBASE:RtpUdpPortBase larger than 20000


show voicectp (PORT|) VOIP show:Show running system information,voicectp:voicectp, PORT: port number, :all content


pots slotport ((pptpprofileid <0-16>)|(analogprofiled <0-32767>)| (prioritylevel <1-3>))

H248 pots: pots configuaration, slotport: slotport eg. s1, s2..., s1/3, pptpprofileid: pptpprofileid, <0-32767>: pptpprofileid 1-32767,0 is close, analog-profiled:analogprofileid, <0-32767>: analogprofileid 1-32767,0 is closeprioritylevel: priority level. <1-3>: prioritylevel, default is 3.


show pots PORT VOIP show:Show running system information, pots:pots, PORT: port number :all content

311


Id:0900d805800ebb8a

11.3.9 IPhost ProfileTo create an iphost profile, use the following command.

To display iphost profile, use the following command.

To configure an iphost profile, use the following command.


pots test SLOTPORT (acVoltage| batteryVoltage | dcFeedCurrent| dcFeedVoltage | loopResis-tance|onOffHookSelf | openCircuit-Voltage|receiverOffHook | resistance| ring | stop| telephone-num | tonebusy | tonedial | tonering-back)

VOIP pots:pots configuaration,test:pot test,SLOTPORT: ifindex eg. s1/1,s2... valid ranges1-s17 and port <1~72>,acVoltage: pot test acVoltagebatteryVolt-age: pot test batteryVoltagedcFeedCurrent: pot test dcFeedCurrentdcFeedVoltage: pot test dcFeedVolt-ageloopResistance: pot test loopResistance

onOffHookSelf: pot test onOffHookSelfopenCircuit-Voltage: pot test openCircuitVoltagereceiverOff-Hook: pot test receiverOffHookresistance: pot test resistancering: pot test ringtone: pot test tonestop: pot test stoptelephonenum: pot test telephone num-bertonebusy: pot test tone busytonedial: pot test tonedialtoneringback: pot test toneringback


iphostprofile create PROFILEID NAME (no|yes) IPADDRESS NETMASK GATEWAY

VOIP iphostprofile:iphostprofile configuaration, create: create a iphostprofile, PROFILEID: Specific profile ID,(1,2,.....) and max 32767, NAME: name length less than 32, no: No use slot Dhcp,yes: Yes use slot Dhcp, IPADDRESS: SlotIpad-dress:A.B.C.C, NETMASK: Slot subnet mask:A.B.C.C, GATEWAY: Default gateway:A.B.C.C


show iphostprofile (PROFILEID|) VOIP show: Show running system information,iphostprofile: iphostprofile, PROFILEID: Specific profile ID,(1,2,.....) and max 32767, :all content

312


Id:0900d805800ebb8a

VoIP configuration

To delete an iphost profile, use the following command.

11.3.10 PPTP ProfileTo create a pptp profile, use the following command.

To display pptp profile, use the following command.

To configure a pptp profile, use the following command.


iphostprofile PROFILEID ((name NAME)|(dhcp (no|yes))|(ipaddress IPADDRESS)|(netmask NET-MASK)|(gateway GATEWAY))

VOIP iphostprofile: iphostprofile configuaration, PROFILEID: Specific profile ID,(1,2,.....) and max 32767, name: name of iphostprofile, NAME: name length less than 32, dhcp: Wether to use slot Dhcp, no: No use slot Dhcp,yes: Yes use slot Dhcp,ipaddress: SlotIpaddress, IPADDRESS: SlotIpaddress:A.B.C.C, netmask: Slot subnet mask, NETMASK: Slot subnet mask:A.B.C.C, gateway: Default gateway, GATEWAY: Default gateway:A.B.C.C


no iphostprofile PROFILEID VOIP no: Unset Value, iphostprofile:Delete iphost profile, PROFILEID: Specify iphostprofile ID (1,2....) and max 32767


pptpprofile create PROFILEID NAME IGAINNUMBER OGAIN-NUMBER <10-15> (coin-box|dtmf|pulse) (no|yes)

VOIP pptpprofile:pptpprofile configuaration, create:create a pptpprofile, PROFILEID:Specific profile ID,(1,2,.....) and max 32767, NAME:name length less than 32, IGAINNUM-BER:Input volume of AGLU port range -140-60, OGAINNUMBER:Output volume of AGLU port range -140-60, <10-15>:Fax volume of AGLU port,10-15, coinbox : coinbox, dtmf : dtmf, pulse: pulse, no:Unuse PulseDigitDialing,yes: Use PulseDigitDialing


show pptpprofile (PROFILEID|) VOIP show: Show running system information, pptpprofile: pptpprofile, PROFILEID: Specific profile ID,(1,2,.....) and max 32767, : all content

313


Id:0900d805800ebb8a

To delete a pptp profile, use the following command.

11.3.11 Analog ProfileTo create an analog profile, use the following command.

To display analog profile, use the following command.

To modify an analog profile, use the following command.


pptpprofile PROFILEID ((name NAME)|(igain IGAINNUM-BER)|(ogain OGAINNUMBER)|(fax-lvl <10-15>)|(porttype (no|yes) ))

VOIP pptpprofile:pptpprofile configuaration, PROFILEID:Specific profile ID,(1,2,.....) and max 32767, name:name of pptpprofile, NAME:name length less than 32, igain:Input volume of AGLU port, IGAINNUMBER:Input volume of AGLU port range -140-60, ogain:Output volume of AGLU port,OGAINNUMBER:Output volume of AGLU port range -140-60, faxlvl:Fax volume of AGLU port, <10-15>:Fax volume of AGLU port,10-15, porttype: port type,


no pptpprofile PROFILEID VOIP no:Unset Value, pptpprofile:Delete pptpprofile, PROFILEID:Specific profile ID,(1,2,.....) and max 32767


analogprofile create PROFILEID NAME (dtmf|nonrpas|rpas|ntt)

VOIP analogprofile:analogprofile configuaration, create: create a analogprofile, PROFILEID: Specific profile ID,(1,2,.....) and max 32767, NAME: name length less than 32, dtmf: dtmf, nonrpas: nonrpas, rpas: rpas, ntt: ntt


show analogprofile (PROFILEID|) VOIP show: Show running system information,analogprofile: analogprofile, PROFILEID: Specific profile ID,(1,2,.....) and max 32767

314


Id:0900d805800ebb8a

VoIP configuration

To configure an analog profile, use the following command.

To delete an analog profile, use the following command.

11.3.12 DM ProfileTo create a dm profile (digitmap profile), use the following command.

To display dm profile, use the following command.


analogprofile PROFILEID ((name NAME)|(cid (dtmf|nonr-pas|rpas|ntt)))

VOIP analogprofile:analogprofile configuaration, PROFILEID: Specific profile ID,(1,2,.....) and max 32767, name: name of analogprofile, NAME: name length less than 32, cid: Use of Caller ID, dtmf: dtmf, nonrpas: nonrpas, rpas: rpas, ntt: ntt


analogprofile PROFILEID ((flmin <10-2000>)|(flmax <10-2000>)|(pbmin <10-1000>)|(pbmax <10-1000>)|(pmmin <10-1000>)|(pmmax <10-1000>)|(pid-min <10-1000>))

VOIP analogprofile:analogprofile configuaration, PROFILEID: Specific profile ID,(1,2,.....) and max 32767, flmin: recognize Hook-flash, <10-2000>: valid range 250-2000, flmax: Maximum hook flash threshold time to recog-nize Hook-flash, <10-2000>: valid range 300-2000, pbmin: PulseBreakMin for slot, <10-1000>: valid range 10-1000, pbmax: PulseBreakMax for slot, <10-1000>: valid range 10-1000, pmmin: PulseMakeMin for slot, <10-1000>: valid range 10-1000, pmmax: PulseMakeMax for slot, <10-1000>: valid range 10-1000, pidmin: PulseInterdigitMin for slot, <10-1000>: valid range 10-1000


no analogprofile PROFILEID VOIP no: Unset Value, analogprofile:Detlete analogprofile, PROFILEID: Specific profile ID,(1,2,.....) and max 32767


dmprofile create PROFILEID NAME STRING

H248 dmprofile:dmprofile configuaration, create:create a dmprofile, PROFILEID:Specific profile ID,(1,2,.....) and max 32767, NAME:name length less than 32, STRING:digitmap string and valid character is '0123456789.|xABCDEF][abcde-f) ('

315


Id:0900d805800ebb8a

To modify a dm profile, use the following command.

To configure a dm profile, use the following command.

To delete a dm profile, use the following command.

11.3.13 TrapTo configure trap, use the following command.


show dmprofile (PROFILEID|) H248 show:Show running system information,dmprofile:dmprofile, PROFILEID:Specific profile ID,(1,2,.....) and max 32767, :all content


dmprofile PROFILEID ((name NAME)|(digitmap STRING))

H248 dmprofile:dmprofile configuaration, PROFILEID:Specific profile ID,(1,2,.....) and max 32767, name:name of dmprofile, NAME:name length less than 32, digitmap:digitmap, STRING:digitmap string and valid character is '0123456789.|xABCDEF][abcde-f)('


dmprofile PROFILEID ((long <0-99>)|(short <0-99>)|(start <0-99>)|(ztime <0-99>))

H248 dmprofile:dmprofile configuaration, PROFILEID:Specific profile ID,(1,2,.....) and max 32767, long:DigitmapLongTime, <0-99>:valid range 0-99, short:DigitmapShortTime , <0-99>:valid range 0-99, start:DigitmapStartTime , <0-99>:valid range 0-99, ztime:DigitmapZTime, <0-99>:valid range 0-99


no dmprofile PROFILEID H248 no:Unset Value, dmprofile:Delete dmprofile, PROFILEID:Specify profile id (1,2,....) max is 32767


sendtrap (enable|disable) VOIP sendtrap: Control whether to send trap when voip configuration changed, enable: Enable sending trap, disable: Disable sending trap

316


Id:0900d805800ebb8a

VoIP configuration

11.3.14 Priority ProfileTo create a priority profile, use the following command.

To display priority profile, use the following command.

To modify a priority profile, use the following command.

To delete a priority profile, use the following command.

11.4 VoIP Example and ExplanationThe following diagram shows the relationship in this example.


priorityprofile create PROFILEID NAME <1-100> <1-100> <1-100>

VOIP priorityprofile : priorityprofile configuaration create: create a priorityprofile, PROFILEID : Specific profile ID, (1,2,.....), NAME: name length less than 32, <1-100>: Level1 of Priority Service (default:75)", <1-100>: Level2 of Priority Service (default:50), <1-100>: Level3 of Priority Service (default:25)


show priorityprofile (PROFILEID|) VOIP show: configuaration information, priorityprofile: priorityprofile, PROFILEID: Specific profile ID,(1,2,.....)


priorityprofile PROFILEID ((name NAME)|(level1 <1-100>)|(level2 <1-100>)|(level3 <1-100>))

VOIP priorityprofile : priorityprofile configuarationPROFILEID : Specify a profile ID, (1,2,.....) for modifi-cation. name: NAME length less than 32, level1: Level1 of Priority Service, range <1-100> (default:75),level2: Level2 of Priority Service, range <1-100> (default:50),level3: Level3 of Priority Service, range <1-100> (default:25)


no priorityprofile VOIP no: unset. priorityprofile: priority profile to be deleted.

317


Id:0900d805800ebb8a

Figure 19 VoIP Configuration

11.4.1 CommandThe basic commands have two parts. One is system command, the other is voip command. For the system command, there are slot card command that create AGLU card.), vlan command that create vlan and configure vlan ipaddress and mark vlan, route commands and so on. For the voip commands, there are vgw commands and different profile commands.

In our system implementation, some profiles are created when system start. These profiles are called default profile, including mgprofile1, codecprofile1, jitterprofile1, faxprofile1, rtcpprofile1, dmprofile1, pptpprofile1 and analogprofile1.

This example support vgw1, vgw2 and mgc1, mgc2.

Note: In the following example, numbers with square brackets are added before each of the line. The line number and the square brackets are themselves NOT command com-ponents. They are added only for better reference in the later explanation.

[1].SWITCH> enable [2].SWITCH# configure terminal [3].SWITCH(config)# slot card create 1 m_vplu-s72-pots_e planned[4].SWITCH(config)# slot card create 3 m_vplu-s72-pots_e planned[5].SWITCH(config)# slot card create 4 m_vplu-s72-pots_e planned

318


Id:0900d805800ebb8a

VoIP configuration

[6].SWITCH(config)# slot card create 5 m_vplu-s72-pots_e planned[7].SWITCH(config)# slot card create 8 m_vplu-s72-pots_e planned[8].SWITCH(config)# bridge [9].SWITCH(bridge)# create vlan 10[10].SWITCH(bridge)# create vlan 11 [11].SWITCH(bridge)# create vlan 100 [12].SWITCH(bridge)# create vlan 101 [13].SWITCH(bridge)# vlan add 100 s1 untagged[14].SWITCH(bridge)# vlan add 100 s3 untagged[15].SWITCH(bridge)# vlan add 100 s5 untagged[16].SWITCH(bridge)# vlan add 101 s4 untagged[17].SWITCH(bridge)# vlan add 101 s8 untagged[18].SWITCH(bridge)# vlan add 10 0/1 untagged[19].SWITCH(bridge)# vlan add 11 0/2 untagged[20].SWITCH(bridge)# vlan add 100 0/3 untagged[21].SWITCH(bridge)# vlan add 101 0/4 untagged[22].SWITCH(bridge)# bridgeport pvid 10 0/1[23].SWITCH(bridge)# bridgeport pvid 11 0/2[24].SWITCH(bridge)# bridgeport pvid 100 0/3[25].SWITCH(bridge)# bridgeport pvid 101 0/4[26].SWITCH(bridge)# port lre s1,s3,s4,s5,s8 enable[27].SWITCH(bridge)# exit [28].SWITCH(config)# host-vlan 10 [29].SWITCH(config)# interface br10 [30].SWITCH(config-if)# ip address 172.18.104.10/24 [31].SWITCH(config-if)# no shutdown [32].SWITCH(config-if)# exit [33].SWITCH(config)# host-vlan 11 [34].SWITCH(config)# interface br11[35].SWITCH(config-if)# ip address 172.18.105.10/24 [36].SWITCH(config-if)# no shutdown[37].SWITCH(config-if)# exit [38].SWITCH(config)# host-vlan 100 [39].SWITCH(config)# interface br100 [40].SWITCH(config-if)# ip address 172.18.106.10/24 [41].SWITCH(config-if)# no shutdown [42].SWITCH(config-if)# exit [43].SWITCH(config)# host-vlan 101 [44].SWITCH(config)# interface br101 [45].SWITCH(config-if)# ip address 172.18.107.10/24 [46].SWITCH(config-if)# no shutdown [47].SWITCH(config-if)# exit [48].SWITCH(config)# ip route 172.18.105.0/24 172.18.105.253[49].switch(config)# ip arp-reply vlan-forward 100 enable[50].switch(config)# ip arp-reply vlan-forward 101 enable[51].SWITCH(config)# voip [52].SWITCH(voip)# iphost create 1 ip1 no 172.18.106.121 255.255.255.0 172.18.106.253 [53].SWITCH(voip)# iphost create 3 ip3 no 172.18.106.122 255.255.255.0 172.18.106.253 [54].SWITCH(voip)# iphost create 5 ip5 no 172.18.106.123

319


Id:0900d805800ebb8a

255.255.255.0 172.18.106.253 [55].SWITCH(voip)# iphost create 4 ip4 no 172.18.107.121 255.255.255.0 172.18.107.253 [56].SWITCH(voip)# iphost create 8 ip8 no 172.18.107.122 255.255.255.0 172.18.107.253 [57].SWITCH(voip)# h248 [58].SWITCH(h248)# mgcprofile create 1 mgpro1 mgc1 172.18.104.20 2944 [59].SWITCH(h248)# mgcprofile create 2 mgpro2 mgc2 172.18.105.20 2944. [60].SWITCH(h248)# voicectp s1 iphostprofileid 1[61].SWITCH(h248)# voicectp s3 iphostprofileid 3[62].SWITCH(h248)# voicectp s5 iphostprofileid 5[63].SWITCH(h248)# voicectp s4 iphostprofileid 4[64].SWITCH(h248)# voicectp s8 iphostprofileid 8[65].SWITCH(h248)# vgw create vgw1 [66].SWITCH(h248)# vgw 1 add slots s1,s3,s5 [67].SWITCH(h248)# vgw 1 ipaddress 172.18.104.10 port 2944[68].SWITCH(h248)# vgw 1 mgcprofile 1 [69].SWITCH(h248)# vgw create vgw2[70].SWITCH(h248)# vgw 2 add slots s4,s8[71].SWITCH(h248)# vgw 2 ipaddress 172.18.105.10 port 2944[72].SWITCH(h248)# vgw 2 mgcprofile 2[73].SWITCH(h248)# exit [74].SWITCH(VOIP)# exit

11.4.2 Explanation[2]. enter configure terminal mode

[3-7]. create AGLU card.

[8]. enter bridge mode

[9].create vlan10 for VGW1 signaling vlan

[10]. create vlan11 for VGW2 signaling vlan

[11]. create vlan100 for VGW1 RTP vlan

[12]. create vlan100 for VGW2 RTP vlan

[13-17]. add slot to vlan

[18-20]. add port to vlan

[22-25]. port marks

[26]. only after enable the AGLU slot, then are able to call

[28-32]. configure vlan10 ipaddress and enable this vlan

[48]. if MG and MGC did not connect directly, then use static route

[49]. For MG communicates with MGC.

[52-56]. configure slot’s ipaddress, netmask and gateway.

[58]. create mgc entry and config the ip address and port.

[59]. mgc1's ipaddress is different from mgc2's ipaddrss,so port2 can be same as port1.

320


Id:0900d805800ebb8a

VoIP configuration

[60-64]. apply the iphost profile to the slot

[65]. create vgw1

[66]. add slot1 slot3 slot5 to the vgw1

[67]. configure vgw1's ipaddress and port.

[68]. apply the mgcprofile1 to vgw1

[69-74]. The same as [65-68].

321

Operation Manual CLI Abbreviations

Id:0900d80580190b85

12 AbbreviationsAAL5 ATM Adaptation Layer type 5

ACI Access Integrator

ACL Access Control List

ADSL Asymmetric Digital Subscriber Line

ADSL2+ Asymmetric Digital Subscriber Line 2+

ARP Address Resolution Protocol

ATM Asynchronous Transfer Mode

AS Autonomous System

BGP Border Gateway Protocol

CBS Committed Burst Size

CE Communauté européenne

CEBS Carrier Ethernet Border Switch

CIDR Classless Inter Domain Routing

CIR Committed Information Rate

CLI Command Line Interface

CoS Class of Service

CPE Customer Premises Equipment

CRC Cyclic Redundancy Check/Code

CSNP Complete Sequence Number PDU

CXU Central Switch Fabric Unit

DA Destination Address

DHCP Dynamic Host Configuration Protocol

DIN Deutsche Industrie Norm (German Standard)

DRAM Dynamic Random Access Memory

DSCP Differentiated Service Code Point

DSL Digital Subscriber Line

DSLAM Digital Subscriber Line Access Multiplexer

E1 ETSI digital signal level 1 (2.048 Mbit/s)

EGP Exterior Gateway Protocol

EMC Electro-Magnetic Compatibility

322


Id:0900d80580190b85

Abbreviations

EN European Norm

ERP Ethernet Ring Protection

FDB Filtering Data Base

FE Fast Ethernet

FTP File Transfer Protocol

GB Gigabyte

GE Gigabit Ethernet

hiX Access Products in SURPASS Product Family

HW Hardware

I2C Inter - Integrated Circuit interface

ID Identifier

IEC International Electrotechnical Commission

IEEE 802 Standards for Local and Metropolitan Area Networks

IEEE 802.1 Glossary, Network Management, MAC Bridges, and Internetworking

IEEE Institute of Electrical and Electronic Engineers

IETF Internet Engineering Task Force

IGMP Internet Group Management Protocol

IP Internet Protocol

IRL Input Rate Limit

IS Intermediate System

ISP Internet Service Provider

ITU International Telecommunication Union

ITU-T International Telecommunication Union - Telecommunications standardisation sector

IU Interface Unit

L2 Layer 2

LACP Link Aggregation Control Protocol

LAN Local Area Network

LCT Local Craft Terminal

LED Light Emitting Diode

L2CP Layer 2 Control Protocol

LLC Logical Link Control

LLDP Link Layer Discover Protocol

323

Operation Manual CLI Abbreviations

Id:0900d80580190b85

LOF Loss of Frame

LOL Loss of Link

LOS Loss of Signal

LPR Loss of Power

LSP Link state PDU

M1100 High density medium DSLAM M1100 Shelf Variant

M1200 High density medium DSLAM M1200 Shelf Variant

M400 Low density medium DSLAM M400 Shelf Variant

M600 Medium density medium DSLAM M600 Shelf Variant

MAC Medium Access Control

MIB Management Information Base

MTU Multi Tenant Unit

NBMA nonbroadcast Multi-access

NE Network Element

OAM Operation, Administration and Maintenance

ORL Output Rate Limiter

OS Operating System

OSPF Open Shortest Path First

PC Personal Computer

PDU Protocol Data Unit

PPP Point to Point Protocol

PPPoE PPP over Ethernet

PVC Permanent Virtual Connection

QoS Quality of Service

RFC Request for Comments

RIP Routing Information Protocol

RSTP Rapid Spanning Tree Protocol

RTCP Realtime Control Protocol

SA Source Address

SFP Small Form Factor Pluggable

SHDSL Symmetrical High Bit Rate Digital Subscriber Line

SNMP Simple Network Management Protocol

324


Id:0900d80580190b85

Abbreviations

SNR Signal to Noise Ratio

STP Spanning Tree Protocol

SW Software

TCP Transmission Control Protocol

TFTP Trivial FTP

TMN Telecommunication Management Network

TOS Type of Service

UDP User Datagram Protocol

UMN User Manual

VC Virtual Channel

VCI Virtual Channel Identifier

VID VLAN ID

VLAN Virtual Local Area Network

VoD Video on Demand

VoIP Voice over IP

VPI Virtual Path Identifier

VPLU VoIP over POTS Line Unit

VPN Virtual Private Network

xDSL Any form of DSL

xTU-C xDSL Terminal Unit Central

xTU-R xDSL Terminal Unit Remote

hix5630 - user manual_cli

Documents

power spectral density

special customer configurations

external optical sfp

privileged exec mode

noise suddenly increases

exterior noise differently

serial atm applications

quadrature amplitude modulation