MA5600 Multi-Service Access Module Operation and Maintenance 1.0

Security Level: Internal Objectives Upon completion of this course, you will be able to: Grasp the basic knowledge of command line Grasp the basic system configuration Grasp the basic service and function configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Security Level: Internal Contents 1 Introduction to Command Line Operations 2 Basic System Configuration 3 Port Configuration 此页为了让学员和老师对课程安排有一个大致的了解。 此页列出本课程的主要培训标题，列出每章的名称即可。如果章下面的节不多，在此页可以一并列出。 此页胶片仅在授课时使用，胶片＋注释中有专门的目录和标题，不需要重复使用该页面。 4 VLAN Service Configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Command Line Basis MA5600 command line mode return Login via serial port or TELNET quit Ordinary user mode ospf enable Privilege user mode Configure Global configuration mode OSPF mode MA5600(config-ospf)# MA5600＞ MA5600 # quit MA5600(config)# disable rip RIP mode MA5600(config-rip)# interface interface configuration mode MA5600(config-if-…)# MA5600命令模式分为普通用户模式（User Mode）、特权用户模式（Privilege Mode）、全局配置模式（Global Config Mode）、接口配置模式（Interface Config Mode）以及相应的业务配置模式等。 命令行的模式具有一定的向下兼容特性：普通用户模式中的所有命令在特权模式下都能执行；普通用户模式和特权模式中的所有命令在全局配置模式下都能执行。 BTV BTV mode MA5600(config-btv)# test TEST mode MA5600(config-test)# diagnose Diagnose mode MA5600 command line mode MA5600(config-diagnose)# Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Security Level: Internal Command Line Basis Command line help By entering “?” , you can get list of commands with a brief description under any command mode MA5600#display? Key word matching MA5600#conf<space> ---- MA5600#configure Chinese/English language switching MA5600#Switch language mode Access history commands Access the previous history command: "Ctrl +P" Access the next history command: "Ctrl +N" Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Security Level: Internal Contents 1 Introduction to Command Line Operations 2 Basic System Configuration 3 Port Configuration 此页为了让学员和老师对课程安排有一个大致的了解。 此页列出本课程的主要培训标题，列出每章的名称即可。如果章下面的节不多，在此页可以一并列出。 此页胶片仅在授课时使用，胶片＋注释中有专门的目录和标题，不需要重复使用该页面。 4 VLAN Service Configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Setting up Configuration Environment MA5600 control console provides two configuration modes: Setting up local configuration environment via the Console Local maintenance Setting up configuration environment via Telnet Local and remote maintenance In-band Telnet: Occupying service channels Out-band Telnet: Occupying no service channel MA5600控制台提供两种配置方式：串口配置方式和Telnet方式， Telnet方式又可以分为带内Telnet和带外Telnet两中方式。其中串口方式用到主控板的维护串口。带外Telnet方式用到主控板上的维护网口，不占用业务通道，此时Telnet的IP地址为系统设置的网管地址nm-ip；而带内Telnet方式，不使用维护网口，连接非常方便，可以使用任何合法的业务通道，此时Telnet的IP地址为MA5600上建立的对应的VLAN接口的IP地址。 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Setting up Configuration Environment Setting up a local configuration environment via the Console Connect the computer serial port with the MA5300 Console via a standard RS232 serial cable, then configure hyper terminal in Windows or other operation systems. MA5600 CON ETH MON SCU ADEF 串口配置方式是用RS232配置线缆将MA5300主控板上的维护串口和维护终端的串口直接相连，使用维护终端的操作系统提供的超级终端工具软件进行配置维护。主要用于在本地对设备直接进行配置，只要连接正确，不需要输入密码即可以直接登录。 RS232 serial port cable PC Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Setting up Configuration Environment Open the hyper terminal Open-Program-Accessories- Communications-Hyper terminal: Double click Setting the HyperTerminal parameters Enter the name: MA5600（The name can be defined by the user） Connection use: Directly connect to Serial port 1 (depending on actual conditions) Port setting: 9600bit/s, 8 data bits, no parity check 1 suspension bit, no flow control Terminal type: VT100 or automatic test Hypertrm. exe 当维护线缆连接好以后，通过依次点击开始菜单、程序、附件、通讯、超级终端将此应用软件打开，并双击Hypertrm.exe新建一个连接。在设置连接的属性时，选择与MA5300的维护串口相连的维护终端的串口，将其波特率设置成和MA5600维护串口的波特率一致：缺省值为9600bit/s，并选择无流控。 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Setting up Configuration Environment Setting up Configuration Environment via Telnet MA5600 CON ETH MON SCU ADEF workstation LAN ETH 本地Telnet方式通常采用带外管理方式，此时只需将维护终端和MA5600的维护网口都连接在同一个局域网内部即可，并使维护终端与维护网口在同一网段。 server workstation Telnet Terminal LAN local Telnet mode Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Setting up Configuration Environment Local router workstation LAN MA5600 CON ETH MON SCU ADEF Telnet terminal WAN 也可以通过广域网进行远程的维护管理，通常这种方式都是用在集中网管的情况，采用带外方式。也可以通过业务通道采用带内方式Telnet远程登陆对设备进行管理。 WAN remote Telnet configuration mode LAN Remote router workstation Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Setting up Configuration Environment User login Via the Console After correctly connecting the hyper terminal, press Enter key according to the prompt to enter the configuration environment Via Telnet According to the prompt, enter correct user name and password to enter the configuration environment 通过配置串口登录系统，不需要输入密码，连接正确直接回车即可。如果不能进入，请断开连接，重新登录。 通过Telnet模式登录时要输入的用户名和密码需要在MA5600中由管理员设置，并给予一定的权限。 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Basic Maintenance Operations Out-band NM configuration MA5300(config)#interface meth 0 Enter the external network interface port mode. MA5300(config-if-meth0)#ip address 10.71.53.2 255.255.255.0 Configure the IP address of the external network interface MA5300(config-if-meth0)#undo shutdown Activate the external network interface 带外网管，由于网管工作站与设备的外网口连接，所以必须要设置MA5600的外网口IP地址，并激活。MA5600的外网口为MEth0 。 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

In-band NM Configuration Example Port ethernet 0/7/0 on the MA5600’s SCU board is connected to port 0 on the MA5200’s HAB board. The IP address of the MA5600 inband NMS is 10.10.20.2/24. The NMS VLAN ID is 1000. The IP address of the NMS is 10.10.21.1/24 The IP address of the MA5200’s VT interface is 10.10.20.254/24. The IP address of port 0 of the MA5200 HRB board is 10.10.40.1/30. Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Basic Maintenance Operations In-band NM configuration MA5600(config)#vlan 1000 mux Add NM VLAN MA5600(config)#interface vlan-if 1000 Enter the Vlan-interface 1000 configuration mode . MA5600(config-if-vlanif1000)#ip address 10.10.20.2 255.255.255.0 Configure the equipment with a management address, which should be configured on vlan virtual interface 1000 . MA5600(config)#port vlan 1000 0/7 0 Add the upstream port 网管VLAN可以是MUX VLAN和Smart VLAN，但是为了节约Smart Vlan数目，一般采用MUX VLAN。 对于带内网管，需要在MA5600设备内建立一个VLAN三层接口，并配置相应的IP地址。也即为网管工作站上添加设备时需要输入的设备IP地址。 如果网管工作站与设备不在同一网段，还需要添加设备到网管工作站的路由。 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Basic Maintenance Operations SNMP network management configuration MA5600(config)# snmp-agent community read public MA5600(config)# snmp-agent community write private Set the community name and access authority MA5600(config)# snmp-agent trap enable Enable sending Trap 带内和带外网管方式都需要添加SNMP-Server的相关设置，主要的设置包括：团体名设置、traps发送设置以及网管工作站的IP地址的设置。 团体名是用来规定某个团体对设备访问权限的Trap是被管理设备主动向NMS发送的不经请求的信息，用于报告一些紧急的重要事件。 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Basic Maintenance Operations MA5600(config)#snmp-agent target-host trap address 10.10.21.1 securityname private Set Trap destination address. MA5600(config)#snmp-agent trap source vlanif 1000 Specify IP address of the inband NMS as the Trap source address. MA5600(config)#route-static 10.10.41.1 30 10.10.20.254 Configure the equipment with a static route. MA5600(config)#save Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Basic Maintenance Operations Operation terminal configuration Adding a User MA5600#terminal user name Deleting a User MA5600#undo terminal user name Modifying user level MA5600#terminal user level Modifying user password MA5600#terminal user password Modifying number re-entries MA5600#terminal user reenter Viewing User Information MA5600#display terminal user 远程Telnet管理需要在设备上添加相应的登录用户帐号。添加帐号同样使用user命令，此时service-type采用exec方式。 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Basic Maintenance Operations Board Management Query a Board MA5600#display board 0 MA5600#display board 0/2 Add a board(ADEF) MA5600(config)#board add 0/1 ADE Confirm a Board MA5600(config)#board confirm 0 Delete a board MA5600(config)#board delete 0/2 Reset a Board MA5600(config)#board reset 0/1 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Basic Maintenance Operations Equipment management Reset the system MA5600(config)#reboot system Show CPU Occupancy Ratio MA5600>display cpu 0/7 Display the system time MA5600> display time Set the system time MA5600#time HH:MM:SS YYYY/MM/DD Display the system version MA5600(config)#display version 0/7 Setting hostname MA5600(config)#sysname MA5600 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

System Management Configuration Configure File Management Query the initial configuration of the MA5300 intelligent IP integrated access equipment MA5600#display saved-configuration Query the current configuration of the MA5300 intelligent IP integrated access equipment MA5600#display current-configuration query the configuration commands of fault restoration. MA5600#display unresumed-configuration Save the current configuration MA5600#save Erase the configuration files in the Flash MA5600#erase flash data MA5300智能IP综合接入设备上电时，会从flash中读取配置文件进行MA5300智能IP综合接入设备的初始化工作，因此将flash中配置文件称为起始配置（startup-config），如果flash中没有配置文件，则设备使用缺省参数初始化。与起始配置相对应，MA5300智能IP综合接入设备运行过程中正在生效的配置称为当前配置（running-config）。 配置文件为一文本文件，其格式要求如下： 以命令格式保存。 为了节省空间，只保存非缺省的参数（各配置参数的缺省值请详见以后各章节）。 命令的组织以命令模式为基本框架，同一命令模式的命令组织在一起，形成一节，节与节之间通常用空行或注释行隔开（以！开始的为注释行）。 节的顺序安排通常为：全局配置、物理端口配置、逻辑接口配置等。 以end为结束。 用户通过命令行可以修改MA5300智能IP综合接入设备当前配置，为了使当前配置能够做为MA5300智能IP综合接入设备下次上电时的起始配置，需要用write命令保存当前配置到flash中。 用erase命令可以擦除MA5300智能IP综合接入设备flash中配置文件，配置文件被擦除后，设备下次上电将采用缺省的配置参数进行初始化，在以下几种情况时，可以擦除flash中配置文件： 在MA5300智能IP综合接入设备软件升级之后，可能会引起设备软件和配置文件不匹配。 发现flash中的配置文件遭到破坏，如加载了错误的配置文件。 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

ADSL Port Configuration To set the VPI/VCI of a port, run the command service-port. MA5600(config)#service-port vlan 2 adsl 0/2/1 vpi 0 vci 35 rx-cttr 0 tx-cttr 0 To add multiple virtual ports to a VLAN at a time, run the command multi-service-port. MA5600(config)#multi-service-port 3 adsl 0/2 3-10 rx-cttr 0 tx-cttr 0 (vlan-id 3, board 0/2 ,port range 3/10 ) Unblocking Adsl port MA5600(config-if-adsl-0/2)#undo block all Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Security Level: Internal Contents 1 Introduction to Command Line Operations 2 Basic System Configuration 3 Port Configuration 此页为了让学员和老师对课程安排有一个大致的了解。 此页列出本课程的主要培训标题，列出每章的名称即可。如果章下面的节不多，在此页可以一并列出。 此页胶片仅在授课时使用，胶片＋注释中有专门的目录和标题，不需要重复使用该页面。 4 VLAN Service Configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

ADSL Port Configuration ADEF SPLT ETH MON SCU MA5600 MODEM PC Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

ADSL Port Configuration Entering ADSL board configuration mode MA5600(config)#interface adsl 0/5 Add an ADSL2+ line profile MA5600(config)#adsl line-profile add huawei… Activate port 0 on the ADSL board with line-profile above: MA5600(config-if-adsl-0/5)#activate 0 huawei Resetting ADSL Chipset MA5300(config-if-adsl-0/2)#chipset reset 1 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

ADSL Port Configuration Through the bit allocation information, you can get to know the number of bits carried by every ADSL2+ tone (totally 512 tones), and analyze the performance of the line. MA5600(config-if-adsl-0/2)#display line bit-allocation 61 Upstream bits per frame: 312 Downstream bits per frame: 5616 0 0 …… 6 6 ****** 7 9 ********* 8 10 ********** 9 11 *********** 10 12 ************ 11 12 ************ 12 13 ************* 13 14 ************** 14 14 ************** 15 14 ************** …… 31 6 ****** Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

ADSL Port Configuration Adding an ADSL Line Alarm Profile MA5600(config)#adsl alarm-profile add 3 (Refer to operation manual to see more detail) Bind alarm profile 1 with all ports of the ADSL2+ board residing in slot 10. MA5600(config-if-adsl-0/10)#alarm-config all 1 Deleting an ADSL Line Alarm Profile MA5600(config)#adsl alarm-profile delete 3 Querying ADSL line alarm profile information MA5600(config)#display adsl alarm-profile 3 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

ADSL Port Configuration Querying ADSL Port Information MA5600(config)#display service-port port 0/10/1 Viewing line parameters of a port MA5600(config-if-adsl-0/2)#display parameter 2 view the statistics collected on an ADSL2+ port within the past 15 minutes or 24 hours, or all available performance statistics. MA5600(config-if-adsl-0/2)#display statistics performance 61 historic-15minutes 1 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

SHDSL Port Configuration MA5600 CON ETH MON SCU SHEA MODEM Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

SHDSL Port Configuration Add an SHDSL line profile, and number it as 3 MA5600(config)#shdsl line-profile add 3 When operating in blocked state, an SHDSL port cannot transmit data, and any operation on the port is prohibited. To operate the port, you need to unblock the port first. MA5600(config-if-shdsl-0/1)#undo block all Activate all ports on the board residing in slot 4 using profile 3. MA5600(config-if-shl-0/3)# activate all 3 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

SHDSL Port Configuration Adding an SHDSL Line Alarm Profile MA5600(config)#shdsl alarm-profile add 2 Bind alarm profile 2 with all ports of the SHDSL board residing in slot 3. MA5600(config-if-shdsl-0/3)#alarm-config all 2 Deleting an SHDSL Line Alarm Profile MA5600(config)#shdsl alarm-profile delete 2 Querying SHDSL line alarm profile information MA5600(config)#display shdsl alarm-profile 2 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

SHDSL Port Configuration view the brief information on a port MA5600(config-if-shl-0/3)#display port state 0 -------------------------------------------------------------------- Port Running Control Line Alarm Running Config Bind ID Status Status Profile Profile Operation Operation Status 0 Activating Active 1 1 Normal None Normal MA5600(config-if-shl-0/3)#display line state 2 MA5600(config-if-shl-0/3)#display statistics performance 2 current Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Ethernet Port Configuration Set duplex mode of an Ethernet port MA5600(config-if-scu-0/7)#duplex all full Set the bit rate of an Ethernet port MA5600(config-if-scu-0/7)#speed all 1000m Set an Ethernet port’s network cable type MA5600(config-if-scu-0/7)#mdi all auto Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Ethernet Port Configuration Enable/Disable a Port’s Traffic Control Function MA5600(config-if-scu-0/7)#flow-control all Enable/Disable Traffic Suppression MA5600(config-if-scu-0/7)#traffic-suppress all broadcast value 1 Configure a Port's MAC Address Learning Attribute MA5600(config)#mac-address max-mac-count adsl 0/10/1 vpi 0 vci 35 10 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Ethernet Port Configuration Enable/Disable Port Aggregation MA5600(config-if-scu-0/7)#link-aggregation 0-1 ingress MA5600(config-if-scu-0/7)#display link-aggregation ----------------------------------------------- Master port Sub-ports Mode 0 1 ingress Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Ethernet Port Configuration View the configuration of an Ethernet port MA5600(config-if-scu-0/7)#display port state all -------------------------------------------------------------------- Port Port Optic Native MDI Speed Duplex Flow- Active Link Type Status VLAN (Mbps) Control State 0 GE absence 1 - 1000 full on active offline 1 GE absence 1 - 1000 full on active offline Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

VLAN Service Configuration The MA5600 supports diverse VLAN applications, including: Standard VLAN Smart VLAN MUX VLAN Super VLAN QinQ VLAN Stacking VLAN Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Security Level: Internal Contents 1 Introduction to Command Line Operations 2 Basic System Configuration 3 Port Configuration 此页为了让学员和老师对课程安排有一个大致的了解。 此页列出本课程的主要培训标题，列出每章的名称即可。如果章下面的节不多，在此页可以一并列出。 此页胶片仅在授课时使用，胶片＋注释中有专门的目录和标题，不需要重复使用该页面。 4 VLAN Service Configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Standard VLAN Configuration Example To establish the above connections, do as follows: Add VLAN 9 Run the command port vlan on MA5600_A to add a port on MA5600_B and a port on MA5600_A to a standard VLAN. Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Standard VLAN Configuration Standard VLAN configuration involves: 1.Creating/Deleting a standard VLAN MA5600(config)#vlan 9 standard 2.Adding/Deleting a port to/from a standard VLAN MA5600(config)#port vlan 9 { frame/slot<S><3,4>|to<K> }:0/7 { portlist<S><1,256> }:0 { portlist<S><1,256> }:1 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Standard VLAN ServiceConfiguration 3.Displaying the information on a standard VLAN MA5600(config)#display vlan 9 VLAN ID: 9 VLAN attribute: standard Standard port number: 2 -------------------------- F/ S/ P State 0/ 7/ 0 down 0/ 7/ 1 down Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Smart VLAN Service Configuration The Smart VLAN configuration involves: 1.Adding/Deleting a Smart VLAN 2.Adding/Deleting a port to/from a Smart VLAN 3.Displaying the information on a Smart VLAN ADSL link configuration User User User…………………...User vlan 20 Upper network MA5600 CON ETH MON ADEF Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Smart VLAN Service Configuration Create a Smart VLAN. MA5600(config)#vlan { smart<K>|vlanid<U><1,4000> |attrib<K>}:20 {vlantype<E><mux,standard,smart,super>|to<K> }:smart Add the upstream port MA5600(config)#port vlan 20 0/7 0 Configure multicast PVCs. MA5600(config)#vlan smart 20 { vpi<K> }:vpi 0 vci 35 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Smart VLAN Service Configuration Add port 1 on the ADSL board residing in slot 0/12 to VLAN 20. MA5600(config)#service-port vlan 20 adsl 0/12/1 vpi 0 vci 35 rx-cttr 2 Add port 0-31on the ADSL board residing in slot 0/0 to VLAN 20 MA5600(config)# multi-service-port vlan 20 adsl 0/0 0-31 rx-cttr 2 tx-cttr 2 After the above configuration, the PCs can visit Internet but can not ping each other. Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MUX VLAN Configuration The MUX VLAN configuration involves: 1.Creating/Deleting a MUX VLAN 2.Adding/Deleting a port to/from a MUX VLAN 3.Displaying the information on a MUX VLAN ADSL link configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MUX VLAN Configuration Create a MUX VLAN. MA5600(config)#vlan { smart<K>|vlanid<U><1,4000> }:10 { mux<K>|standard<K>|smart<K>|to<K> }:mux Add upstream port MA5600(config)#port vlan 10 0/7 0 Add/Delete a service port to/from a MUX VLAN MA5600(config)# service-port vlan 10 adsl 0/1/0 vpi 0 rx-cttr 0 tx-cttr 0 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

MUX VLAN Configuration Add Multiple Ports to Different MUX VLAN Add all ADSL and SHDSL ports to MUX VLANs, with the first port corresponding to VLAN 2. MA5600(config)#multi-service-port from-vlan 2 board 0-15 vpi 0 vci 35 rx-cttr 2 tx-cttr 2 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal

Security Level: Internal Thank you Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal