Sie sind auf Seite 1von 95

www.huawei.

com
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved.
MSAN MA5600T
Basic Configuration
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page2
Objectives
Upon completion of this course, you will be able to:
Know how to setup configuration Terminal.
Know how to manage user and equipment.
Know how to configure Network Management
Know how to do Basic Maintenance Operation
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page3
Contents
1. Maintenance Environment
2. Command Line Feature
3. Basic System Operation
4. Network Management Configuration
5. System Maintenance Operation
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page4







System Platform

Management Entities
The MA5600T supports two
management entities
CLI (command Line
Interface ) agent
SNMP (Simple Network
Management Protocol) agent
CLI
Agent
SNMP
Agent
MIB
OSS
PC
EMS
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page5
Connect to the System
Command line interface
Serial port configuration mode
The maintenance information goes through the
maintenance COM port.
Telnet configuration mode
Outband: The maintenance information goes through the
maintenance Ethernet port.
Inband: The maintenance information goes through the
service channel.
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page6
First Time Login -Serial Port Mode
Run Hyper terminal in the computer and set the correct parameters
Serial port
PC
RS-232 serial
port cable
MA5600T
SCU
CON
ETH
ESC
Start All Programs
Hypertrm.exe
Hyper
Terminal
Communication
Accessories
Bit per Second :9600
Data Bit:8
Parity: None
Stop Bit:1
Flow Control: None
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page7
Telnet Configuration Mode
PC
Ethernet cable
MA5600T
SCU
CON
ETH
ESC
LAN
Outband
PC
IP
MA5600T
GICF
Inband
0/19/0
0/20/1
SCU
0/9/0
0/9/1
0/9/2
0/9/3
0/19/0
0/20/0
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page8
Questions
Q: How many types of mode to configure the MA5600T?
A:

Q: How to connect to the system?
A:
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page9
Contents
1. Maintenance Environment
2. Command Line Feature
3. Basic System Operation
4. Network Management Configuration
5. System Maintenance Operation

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page10
Login to the System
The system has one default user account
Username: root
Password: admin

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page11
Command Line Modes
The MA500T provides multiple
command modes to implement
hierarchical protection for
preventing any unauthorized
access.
interface...
quit
return
quit
BTV mode
MA5600T(BTV)#
Port/Interface mode
MA5600T(config-if-...)#
quit
quit
enable
disable
config
Global config mode
MA5600T(config)#
User mode
MA5600T>
Privilege mode
MA5600T#
BTV
Login
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page12
Command Line Features
Obtain Help Information

MA5600T(config)#interface ?
{aiu<K>|scu<K>|giu<K>|opf<K>|eth<K>|adsl<K>|shl<K>|g
pon<K>|emu<K>|vdsl<K>|oam<K>|top<K>|tunnel<K>|null<K
>|meth<K>|vlanif<K>|loopback<K> }:



Intelligent matching
MA5600T>ena [space]
MA5600T>enable
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page13
Command Line Features
Display History Commands

MA5600T(config)#display history-command
--------------------------------------------------
No. Command
--------------------------------------------------
10 terminal
9 smart
8 interactive
7 interface
6 config
5 en
4 interface
3 quit
2 interface
1 interactive
--------------------------------------------------
Key Board
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page14
CLI Command Control Characters
Deletes the characters before the cursor
Press <Backspace >
Moves the cursor to the left / right of one character
Press <Left arrow key or Ctrl A>
Press <Right arrow key or Ctrl D>
Displays history commands
Press <Up/Down arrow key / >
Press < Ctrl P>
Enter display history command
Suspends the display and the running of commands
Press < Ctrl C>
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved.
Command Line Parameter Meaning
Page15
Character Meaning
<K> Keyword
<E> Enumeration. Items following it are the available options.
<U> ULONG. Information following it is the range of the value to be entered
<L> LONG. Information following it is the range of the value to be entered.
<S> Character string. Information following it is the length of the character string to be entered.
<I> IP address
<M> MASK, such as the mask of an IP address.
<PA> MAC address
<H> Hexadecimal number. The system supports the input of "0x".
<D> <yyyy-mm-dd> Date
<T> <hh:mm:ss> Time
<Cr> Enter. It means the end of the command.
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page16
Command Syntax and Format
Format Description
Boldface The keywords of a command are in boldface.
[ ] Items in square brackets [ ] are optional.
{ x | y | ... } Alternative items are grouped in braces and separated by vertical bars. One is
selected.
[ x | y | ... ] Alternative items that are optional are grouped in square brackets and separated by
vertical bars. One or none is selected.
{ x | y | ... } * Alternative items are grouped in braces and separated by vertical bars. A minimum
of one or a maximum of all can be selected.
[ x | y | ... ] * Optional alternative items are grouped in square brackets and separated by vertical
bars. Multiple or none is selected.
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page17
CLI Error Prompts
Error Message Cause
Unknown command The entered command or keyword is not found, the
parameter type is incorrect or the parameter value exceeds
the threshold.
Incomplete command The entered command is incomplete.
Too many parameters You have entered too many parameters.
Ambiguous command The entered command is ambiguous.
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page18
Contents
1. Maintenance Environment
2. Command Line Feature
3. Basic System Operation
4. Network Management Configuration
5. System Maintenance Operation

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page19
Contents
3. Basic System Operation
3.1 User Account Management
3.2 Basic System Configuration
3.3 Hardware Operation







Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page20
User Profile and User
User Profile 1
User profile is a group collection of control parameters:
length of the user name and password
Validity period of the user name and password
Permitted login time
User A
User B
User C
User Profile 2
User G
User H
User K
All these users can login to the
MA5600T from 8:00AM to 5:00PM,
and the user account validity is
three months
All these users can login to the
MA5600T from 10:00AM to 3:00
PM, and the user account validity is
one month
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page21
User Authorities
Authority level Function
Common user Only query the basic settings of the MA5600T
Operator Configure the MA5600T and some services
Administrator
Manage all the functions and services of the MA5600T, and can
manage all the lower level users
Super User
The highest authority, manage all the functions and services and for
managing all the lower level users
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page22
User Management
Query all the user profiles
MA5600T(config)#display terminal user-profile
{all | online | name username}:all
------------------------------------------------
User profile name : root
Validity period of the user name : 0
Validity period of the password : 0
Permitted start time of logon by a user : 00:00
Permitted end time of logon by a user : 00:00
--------------------------------------------------
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page23
User Management
Add a new user-profile
MA5600T(config)#terminal user-profile add
User profile name(<=15 chars):huawei
Validity period of the user name(0--999 days)[0]:30
Validity period of the password(0--999 days)[0]:30
Permitted start time of logon by a
user(hh:mm)[00:00]:9:00
Permitted end time of logon by a
user(hh:mm)[00:00]:17:00
Repeat this operation? (y/n)[n]:
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page24
User Management
Add a new user
MA5600T(config)#terminal user name
User profile name(<=15 chars)[root]:
User Name(<=15 chars): huawei
User Password(<=15 chars):
Confirm Password(<=15 chars):
User's Level:
1. Common User 2. Operator 3. Administrator:3
Permitted Reenter Number(0--4):4
User's Appended Info(<=30 chars): test_user
This user has been added
Repeat this operation? (y/n)[n]:
Add a new user
MA5600T(config)#terminal user name
User profile name(<=15 chars)[root]:
User Name(<=15 chars): huawei
User Password(<=15 chars):
Confirm Password(<=15 chars):
User's Level:
1. Common User 2. Operator 3. Administrator:3
Permitted Reenter Number(0--4):4
User's Appended Info(<=30 chars): test_user
This user has been added
Repeat this operation? (y/n)[n]:
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page25
User Management
Query all the terminal user
MA5600T(config)#display terminal user
{all | online | name username}:all
-----------------------------------------------------
Name Level Status Reenter Profile Append
Num Info
------------------------------------------------------
root Super Online 1 root -----
huawei Admin Offline 4 root test_user
-------------------------------------------------------
Total record(s) number: 2
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page26
User Management
Modify the user password

MA5600T(config)#terminal user password
User name (<=15 chars):huawei
New password(<=15 chars):
Confirm Password(<=15 chars):
Information takes effect Repeat this operation?
(y/n)[n]: n
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page27
User Management
Modify the user other attribute
MA5600T(config)#terminal user user-profile
MA5600T(config)#terminal user level
MA5600T(config)#terminal user reenter
MA5600T(config)#terminal user apdinfo
We cant modify the current online user.
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page28
User Management
Query the online terminal user

MA5600T(config)#display client
--------------------------------------------------
Client-ID Client-Name Client-Type IP Login Time
--------------------------------------------------
1 huawei Telnet 10.11.117.55 2007-09-02
10:03:09
--------------------------------------------------

Kick off the online user
MA5600T(config)#client kickoff
{clientID<U><1,22>}:1
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page29


User Management
Delete the user

MA5600T(config)#undo terminal
{hold<K>|user<K>|debugging<K>|monitor<K>}:user
{name<K>}:name
Command:
undo terminal user name
User Name(<=15 chars):huawei
Are you sure to delete the user?(y/n)[n]:
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page30
Questions
Q: How many authority levels provide by MA5600T?
A:

Q: How to add a new user?
A:
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page31
Contents
3. System Operation
3.1 User Account Management
3.2 Basic System Configuration
3.3 Hardware Operation





Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page32
Configure Miscellaneous Stuff
Set the system time
MA5600T(config)#time
{time<T><hh:mm:ss>|date<D><yyyy-mm-dd>}:11:15:59 2009-
05-30
Query system time
MA5600T(config)#display time
{<cr>|dst<K>|time-stamp<K>}:
command: display time 2009-05-30 11:16:00 +08:00
Set the system identity
MA5600T(config)#sysname
{prompt<S><Length 1-50>}:DT_FAN1
DT_FAN1 (config)#
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page33
System Information
Query the detailed version
MA5600T(config)#display language
MA5600T(config)#display version 0/6
Query the system log information
MA5600T(config)#display log all
Set the NTP Server
MA5600T(config)#ntp-service unicast-server 10.10.10.1
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page34
Testing Network Connectivity
Check if the destination is reachable
MA5600T#ping 192.168.1.1
MA5600T(config)#ping 192.168.1.1
Locate the fault point on the network
MA5600T#tracert 10.11.106.133
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page35
Contents
3. System Operation
3.1 User Account Management
3.2 Basic System Configuration
3.3 Hardware Operation





Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page36
Board Management
Query all the boards in the frame
MA5600T(config)#display board 0
-----------------------------------------------------
SlotID BoardName Status SubType0 SubType1 Online/Offline
------------------------------------------------------
0
1 H801OPFA Normal
2 H801OPFA Normal
3
4 H801OPFA Failed Online
5
... ...
8
9 H801SCUN Standby_normal
10 H801SCUN Active_normal
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page37
Board Management
Query one board in the frame
MA5600T(config)#display board 0/1
----------------------------------------------
Board Name : H801OPFA
Board Status : Normal
-----------------------------------------------------------------------------------
Port Port Optic Native MDI Speed Duplex Flow- Active Link
Type Status VLAN (Mbps) Ctrl State
---------------------------------------------------------------------------------------
0 FE absence - - 100 full - active offline
1 FE absence - - 100 full - active offline
2 FE absence - - 100 full - active offline
3 FE absence - - 100 full - active offline
4 FE absence - - 100 full - active offline
5 FE absence - - 100 full - active offline
6 FE absence - - 100 full - active offline
7 FE absence - - 100 full - active offline
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page38
Board Management
Add a board
MA5600T(config)#board add
{ frameid/slotid<S><1,15> }:0/4
{H801MFGA<K>|H801ETHA<K>|H801X1CA<K>|H801GPBC<K>|H801X
2CA<K>|H801GICF<K>|H801GICG<K>|H801TOPA<K>|ADI<K>|ADL<K
>|SHD<K>|H801AIUG<K>|VDL<K>|H801OPFA<K>|H801CITA<K>|H801
PRTA<K>|VDS<K>|VDT<K> }:H801OPFA

Confirm a board
MA5600T(config)#board confirm
{frameid[/slotid]<S><1,15>}: 0/4
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page39
Board Management
Reset board
MA5600T(config)#board reset
{ frameid/slotid<S><1,15> }:0/3
Command: board reset 0/3 Are you sure to reset board? (y/n)[n]:y
0 frame 3 slot reset board message sent successfully...


Confirm a board
MA5600T(config)#board prohibit
{ frameid/slotid<S><1,15> }:0/3
Command: board prohibit 0/3
Prohibiting board will interrupt all services on this board, are you sure to
prohibit board? (y/n)[n]:y
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page40
Board Statuses
Board Status
Main Control
Board
Active-Normal
Standby-Normal
Service
Board
Auto_find
Config (transition
status)
Normal
Failed
1 The board can be automatically found
after inserted into the slot but not
registered in the system
2 Confirm the board, the status
becomes normal, the config status is a
transitional status
3 Faults happen, the status becomes
failed
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page41
Contents
1. Maintenance Environment
2. Command Line Feature
3. Basic System Operation
4. Network Management Configuration
5. System Maintenance Operation

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page42
Contents
4 . Network Management Configuration
4.1 Network Management Overview
4.2 Outband Network Management Configuration
4.3 Inband Network Management Configuration






Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page43
Out-band and In-band Networking
ETH port on
SCU
ETH port on
uplink board
User Data
NMS Data
Telnet
NMS SNMP
Outband
Inband
CLI Terminal
NMS
SNMP
message
Telnet
message
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page44
Basic Concepts of SNMP
SNMP: Simple Network Management Protocol
Used to ensure the transmission of management information between any two
points
Its easy for the network administrator to retrieve and modify information at any
node in the network, detect faults, diagnose faults, plan the capacity and
generate reports.
There are three versions, SNMP V1, V2 and V3. Currently, SNMPV1 are
widely applied to the network.
NMS: N2000
Agent
NE: MA5600T
SNMP
Operation
MIB
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page45
SNMP Message Format
Version
The version number of SNMP
Community
It is the collection of an SNMP agent
and a set of SNMP manager which
defines the authentication and access
control. It is identified by the
community name.
SNMP PDU:
The PDU is the protocol data unit.
Version Community SNMP PDU
PDU type Message Name
0 get-request
1 get-next-request
2 get-response
3 set-request
4 trap
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page46
SNMP V1
SNMPv1 is the original version, stated in 1988.
SNMPv1 use the Community Name to perform security management.
SNMPv1 has defined 5 types of protocol message
GetRequest
GetNextRequest
SetRequest
GetResponse
Trap

GetGetnextSet
GetResponse,
Trap
MIB
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page47
SNMPv2c
Compared to SNMPv1 SNMPv2c
Support more protocol messages
getBulkRequest
informRequest
Support more data types
Provide abundant error codes
SNMPv2c also use the security strategy based on
community names.
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page48
SNMP V3
Stated in 1998,come into formal standards in 2002.
SNMPv3 increase the security mechanism than SNMPv1/v2c
Limited security mechanism based on community name
The message cannot be encrypted
Based on SNMPv2cSNMPv3 provides:
USM authentication
USM encryption
VACM access control
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page49
Differences Between v1, v2 & v3
SNMP v1 SNMP v2 SNMP v3
Get-Request Get-Request Basic functions of SNMP
v3 inherited from SNMP v1
& v2.
New extensible SNMP
message format. For
future customisation and
extensions.
Provides better AAA and
security for SNMP
messages and Access
Control.
Get-Next-Request Get-Next-Request
Get-Bulk-Request
Set-Request Set-Request
Get-Response Get-Response
SNMP v1 Trap SNMP v2 Trap
Inform-Request
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page50
Contents
4 . Network Management Configuration
4.1 Network Management Overview
4.2 Outband Network Management Configuration
4.3 Inband Network Management Configuration






Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page51
Configure Steps
Login to Outband Interface
Configure outband IP address
Network Management
Mode
NMS?
NMS Parameters
END
No
Yes
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page52
MA5600T
SCU
CON
ETH
ESC
Outband Network Management
10.10.1.1/24
Gateway:192.168.50.1
255.255.255.0
Gateway:10.10.1.10
255.255.255.0
IP
Cor
e
IP: 192.168.50.250
255.255.255.0
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page53
Outband Network Management
Configure steps:
Login to the outband mode
Configure the IP address of the ETH
Configure the IP-route (In the different network)
SNMP Configuration (Optional)--For iManager N2000 BMS
Configure the community name
Enable sending Trap packets
Configure the IP address of the target host of the Trap packets
Configure the source of the Trap packets
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page54
Outband Network Management
Step1:Login to the outband mode
MA5600T(config)#interface MEth 0
Step2:Configure the IP address of the ETH
MA5600T(config-if-MEth0)#ip address
{ip_address<I>}:192.168.50.250
{submask<M>}:255.255.255.0

Query the IP address and all interface info
MA5600T(config)#display ip interface meth 0
MA5600T(config)#display interface meth 0
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page55
Outband Network Management
Step3: Configure the IP-route
MA5600T(config)#ip route-static
{ip_addr<I><X.X.X.X>|default-preference<K>}:
10.10.1.0
{ip_addr<I><X.X.X.X>|integer<U><0,32>}: 255.255.255.0
{NULL<K>|MEth<K>|Vlanif<K>|LoopBack<K>|ip_addr<I><X.
X.X.X>}:192.168.50.1
{<cr>|preference<K>}:
Destination Network
Gateway
Subnet mask
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page56
Outband Network Management
Step4:SNMP Configuration (Optional)
Set the SNMP version
MA5600T(config)# snmp-agent sys-info
{contact<K>|location<K>|version<K>}:version
{all<K>|v1<K>|v2c<K>|v3<K>}:v1
Configure the community name and the access right
MA5600T(config)#snmp-agent community
{read<K>|write<K>}:read
{communityname<S><Length 1-32>}:public
{<cr>|mib-view<K>}:
MA5600T(config)#snmp-agent community write private
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page57
Outband Network Management
Set the IP address of the target host for traps.
MA5600T(config)#snmp-agent target-host
{trap-hostname<K>|trap-paramsname<K>}:trap-paramsname
{paramsname<S><Length 1-32>}:huaweiNMS
{ v1<K>|v2c<K>|v3<K>}:v1
{securityname<K>}:securityname
{securityname<S><Length 1-32>}:private


MA5600T(config)#snmp-agent target-host
{trap-hostname<K>|trap-paramsname<K>}:trap-hostname
{hostname<S><Length 1-32>}:huawei
{address<K>}:address
{ip-addr<I><X.X.X.X>}:10.10.1.1
{trap-paramsname<K>|udp-port<K>}:trap-paramsname
{paramsname<S><Length 1-32>}:huaweiNMS
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page58
Outband Network Management
Enable sending Trap packets
MA5600T(config)#snmp-agent trap enable standard
Configure the source of the Trap packets
MA5600T(config)#snmp-agent trap source
{loopback<K>|meth<K>|tunnel<K>|vlanif<K>}:meth
{<0-0>}:0
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page59
Contents
4 . Network Management Configuration
4.1 Network Management Overview
4.2 Outband Network Management Configuration
4.3 Inband Network Management Configuration






Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page60
MA5600T
GIU
Inband Network Management
Uplink Port: 0/19/0
VLAN 850:10.50.1.1/24
Gateway:10.50.1.10
255.255.255.0
Gateway:10.10.1.10
255.255.255.0
10.10.1.1/24
Configure steps:
Create the management VLAN
Configure the uplink port of management VLAN
Configure the Layer3 address of management VLAN
Configure the IP-route (In the different network)
SNMP Configuration (Optional)--For iManager N2000 BMS
IP
Core
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page61
Inband Network Management
Step1:Create the management VLAN
MA5600T(config)#vlan
{vlanid<U><2,4000>|vlan-
list<S><1,64>|attrib<K>|car<K>}: 850
{vlantype<E><mux,standard,smart,super>|to<K>}:
Standard

Step2:Configure the uplink port of management VLAN
MA5600T(config)#port vlan
{vlanid<U><1,4000>|vlan-list<S><1,64>}: 850
{frameid/slotid<S><1,15>}: 0/19
{portlist<S><1,64>}:0
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page62
Inband Network Management
Step3:Configure the Layer3 address of management VLAN
MA5600T(config)#interface vlanif 850
MA5600T(config-if-Vlanif850)#ip address
{ip_addr<I><X.X.X.X>}:10.50.1.1
{ip_addr<I><X.X.X.X>|integer<U><0,32>}:255.255.255.0
{<cr>|sub<K>}:

Step4: Configure the IP-route (In the different network)
MA5600T(config)#ip route-static 10.10.1.0 255.255.255.0 10.50.1.10
The management VLAN has the Layer 3 address as
the system IP address.
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page63
Inband Network Management
Step5: SNMP Configuration (Optional)
Set the SNMP version
MA5600T(config)# snmp-agent sys-info version v3
Set the SNMP user
MA5600T(config)#snmp-agent usm-user v3
{username<S><Length 1-32>}:user1
{groupname<S><Length 1-32>}:group1
{<cr>|authentication-mode<K>}:authentication-mode
{md5<K>|sha<K>}:md5
{authkey<S><Length 1-64>}:authkey1
{<cr>|privacy-mode<K>}:privacy-mode
{aes128<K>|des56<K>}:Des56
{prikey<S><Length 8-64>}:2
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page64
Inband Network Management
Set the SNMP group
MA5600T(config)#snmp-agent group v3
{groupname<S><Length 1-32>}:group1
{authentication<K>|noauth<K>|privacy<K>}:authentica
tion
{<cr>|notify-view<K>|read-view<K>|write-
view<K>}:read-view
{viewname<S><Length 1-32>}:hardy
{<cr>|notify-view<K>|write-view<K>}: write-view
{viewname<S><Length 1-32>}:hardy
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page65
Inband Network Management
Set the SNMP view
MA5600T(config)#snmp-agent mib-view
{viewname<S><Length 1-32>}:hardy
{exclude<K>|include<K>}:include
{subtreename<S><Length 1-128>}:ip


Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page66
Inband Network Management
Set the IP address of the target host for traps.
MA5600T(config)#snmp-agent target-host trap-hostname
huawei1 address 10.10.1.1 trap-paramsname Swisscom

MA5600T(config)#snmp-agent target-host trap-paramsname
Swisscom v3 securityname user1 authentication
Enable the traps sending.
MA5600T(config)#snmp-agent trap enable standard
Configure the source of the Trap packets
MA5600T(config)#snmp-agent trap source vlanif 850
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page67
Contents
1. Maintenance Environment
2. Command Line Feature
3. Basic System Operation
4. Network Management Configuration
5. System Maintenance Operation

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page68
Contents
5. System Maintenance Operation
5.1 Managing Data
5.2 System Switchover
5.3 Setting Host Program Rollback



Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved.
Managing the data
In order to maintain the MA5600T, it is necessary to
be aware of:
The system files
Storage media
System upgrade steps
Page69
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page70
Managing the data: Files
The control board manages the following
files:
System database
Language resource
Service board program
Host program
BootRom program
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page71
Managing the data: Storage media
The main control board supports the below storage media:
Save the
execute host
software
program
SDRAM
Save the
operation log
and alarm
information
SRAM

Save the host
software
program,
database file,
language
resource file
and BIOS files
Flash
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved.
Managing the data:operations comparison
Page72
Operation Data source Data destination Management contents
Save SDRAM Flash memory
data
Duplicate Flash
memory
(active board)
Flash memory
(standby board)
program
data
language
Load Network
computer
Flash memory
Program, data, BIOS
Language
Backup Flash
memory
Network computer
program
data
language
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page73
1: Save


2: Duplicate


3: Backup


4: Load


Managing the data: Diagram
File Server
S
D
R
A
M

Active SCU Standby SCU
2
1
1
3
F
L
A
S
H

F
L
A
S
H

S
D
R
A
M

4
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page74
Managing the Data:Save
The MA5600T has the capability to save data
automatically, this feature can be:
Turned on or off
The time interval of when it saves data set
The time of day when to save data
View the above settings

As well as automatically saving data the system allows the user to
save data manually
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page75
Managing the Data:Save
Automatic saving on the SCU
Query the autosave configuration:
huawei# display autosave configuration
Configure the autosave interval function:
huawei# autosave intervlan on
huawei# autosave interval 2880
huawei# autosave interval configuration 30
Configure the autosave time function:
huawei# autosave time on
huawei# autosave time 04:20:00
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page76
Managing the Data:Save
Manual saving
huawei#save
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page77
Managing the Data:Duplicate
Duplicating data
Duplicating the data allows the user to copy the program,
packetfile,data or language files from the active flash to the standby
flash.


huawei(config)#duplicate
{ configuration<K>|data<K>|language<K>|packetfile<K>|program<K> }
:program
Command: duplicate program
After duplicating host program, corresponding database should be
loaded Rollback function will be disabled
Be sure that the system needn't this function
Are you sure to duplicate host program? (y/n)[n]:y
Load(backup,duplicate,...) begins, please wait and notice the rate of
progress Any operation such as reboot or switchover will cause failure
and unpredictable result .
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page78
Managing the Data:Backup
Back up the system data
It is possible to back up the system data to a server using ftp, tftp,sftp or
xmodem.The example shows a server with an IP address of 192.168.1.66:
huawei(config)# backup
{ bios<K>|configuration<K>|data<K>|language<K>|prog
ram<K> }:data
{ ftp<K>|sftp<K>|tftp<K>|xmodem<K> }:tftp
{ ServerIpAddress<I><X.X.X.X> }:192.168.1.66
{ filename<S><Length 1-128> }:testlab

huawei(config)# display progress backup
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page79
Loading the software: CLI examples
As well as backing up data, it is possible to load data from
a server to the MA5600T.
Loading the program:



Load the host database file:
huawei# load data tftp 192.168.1.66 db_scu.dat active
MA5600T TFTP server CLI terminal
huawei#load program tftp 192.168.1.66 0/9
Board name[H801SCUB]:
File name [rom_scu.lma]:
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page80
Upgrade Progress
Save the database file
huawei(config)#save data
Backup the database file to TFTP server
huawei(config)# backup data tftp 10.71.51.228 db_scu_old.dat
Update the database file to new version via the update tool
Load the packet file to both SCUN
huawei(config)#load packetfile tftp 10.71.51.228 scupacket.bin
Load the new version to both SCUN
huawei(config)# load data tftp 10.71.51.228 scu_new.dat all
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page81
Upgrade Progress
Reset the standby SCU
(config)#reboot standby
Check the synchronization between active and standby SCUN
(config)#display data sync state
Switchover when synchronizing completely
(config)#system switch-over
Do the same operations on the initial SCUN
(config)#reboot standby
(config)#display data sync state
(config)#system switch-over


Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page82
Managing the Data:Erase
Erase data
huawei# erase flash data active
This command will clear the active board data has been
loaded or saved
Please remember to backup the system configuration
data
Are you sure to continue? (y/n)[n]:y
Command executes successfully, and will take effect after
active board rebooted.
Used to restore all
data to default
values.
This can facilitate
reconfiguring the
system.
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page83
Managing the Data:Reboot
Restart the system
After data has been loaded or the flash erased, it is necessary to
restart the system.
huawei(config)# reboot
{ Options<E><system,active,standby> }:system
Command: reboot system

Data is not saved, the unsaved data will lose if reboot
system, are you sure to reboot system? (y/n)[n]:n
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page84
Contents
5. System Maintenance Operation
5.1 Managing Data
5.2 System Switchover
5.3 Setting Host Program Rollback



Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page85
SCUN
RUN
ALM
ACT
RESET
LINK ACT
1
0
2
3
C
O
N
E
T
H
E
S
C
TX2 RX2
TX1 RX1
TX0 RX0
TX3 RX3
System Switchover: Auto Synchronizations
The MA5600T supports dual configuration of the control cards.
It auto synchronizes data between the active and standby SCU cards.
When the active card or its link becomes faulty, the system automatically
performs active/standby switchover
To query the data synchronization use the display data sync state command
SCUN
RUN
ALM
ACT
RESET
LINK ACT
1
0
2
3
C
O
N
E
T
H
E
S
C
TX2 RX2
TX1 RX1
TX0 RX0
TX3 RX3
Standby SCU
Active SCU
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page86
SCUN
RUN
ALM
ACT
RESET
LINK ACT
1
0
2
3
C
O
N
E
T
H
E
S
C
TX2
RX2
TX1
RX1
TX0
RX0
TX3
RX3
SCUN
RUN
ALM
ACT
RESET
LINK ACT
1
0
2
3
C
O
N
E
T
H
E
S
C
TX2
RX2
TX1
RX1
TX0
RX0
TX3
RX3
System Switchover
huawei# display data sync state
huawei# system switch-over

Are you sure to switch over? (y/n)[n]:y
Standby SCU
Active SCU
NOTE:
The active and standby SCU cards must
be configured with subcards of the same
type
When the data on the two SCU cards
is not the same, the active/standby
switchover operation is not allowed
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page87
Contents
5. System Maintenance Operation
5.1 Managing Data
5.2 System Switchover
5.3 Setting Host Program Rollback



Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page88
Setting the Host Program Rollback
The MA5600T provides the host program rollback.
The previous host program and data can be rolled
back within a certain period.
NOTE:After the host program and data are loaded the
system must be restarted.
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page89
Setting the Host Program Rollback
By default, the upgraded system keeps the last host program and
data for two days. After that period, the rollback function is disabled
automatically.
Rollback to the previous host program




To query the state of host program rollback
huawei# rollback
<active,standby>: active

huawei# undo rollback
huawei# display rollback state active
Rollback function is enabled in current state.
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page90
Setting the Host Program Rollback Time
You can use the command <set norollback time> to set the period
within which you can perform the rollback
The period ranges from five minutes to 30 days
Setting the time to disable the host program rollback:



Displaying the time to disable the host program rollback
huawei# set norollback time { active | standby } day hour minute
huawei# set norollback time active 10 0 0 Example
huawei# display norollback time active
The total time to disable rollback function is 2days 0hours 0minutes, the
remaining time is 1days 3hours 34minutes
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page91
Summary
MA5600T supports two logic management entities: CLI and GUI
Command line interface (CLI)
Serial port (First time login )
Remote Telnet (Inband and outband)
Graphic user interface (GUI)
iManager N2000 BMS
Remote manage through SNMP (Inband and outband)
MA5600T provides multiple command modes to implement hierarchical
protection for preventing any unauthorized access: common user mode,
privilege mode, global configure mode and different interfaces mode
CLI user account specify four authority levels: super user, administrator,
operator and common user.
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page92
Summary
The hardware management includes the frame, board and port.
The board status includes: Active_normal/ Standby_normal/
Standby_failed / Normal/ Failed/ Config/ Auto-find /Prohibited /
Unmanageable.
Set up the outband management mode
configure the IP address of Meth 0
Set up the outband management mode
Configure the management VLAN and uplink port
configure the IP address of management IP address
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page93
Summary
MA5600T data configuration:
Save (auto-save and manually save)
Backup (data file and configuration file)
Load (data file and configuration file)
Duplicate (copy data from active to standby board )
Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page94
Glossary
CLI: Command line interface
GUI: Graphic user interface
SNMP: Simple Network Management Protocol
MIB: Management Information Base
OSS: Operation Support System
EMS: Element Management Server
BTV: Broadband Television
EMS: Element Management Server
NMS: Network Management Server
UMS: User-based Security Model
VACM: View-Based Access Control Model

Thank you
www.huawei.com