S1720&S2700&S5700&S6720 Series Ethernet Switches Commands

16 Network Management and Monitoring

Commands

About This Chapter

NOTE

Only the S5720SI S5720S-SI S5720EI S5720HI S6720EI and S6720S-EI support vpn-instance parameter

161 SNMP Configuration Commands

162 RMON and RMON2 Configuration Commands

163 LLDP Configuration Commands

164 Performance Management Commands

165 iPCA Configuration Commands

166 NQA Configuration Commands

167 Service Diagnosis Configuration Commands

168 Mirroring Configuration Commands

169 Packet Capture Configuration Command

1610 NetStream Configuration Commands

1611 sFlow Configuration Commands

1612 Ping and Tracert Configuration Commands

S1720ampS2700ampS5700ampS6720 Series Ethernet SwitchesCommand Reference 16 Network Management and Monitoring Commands

Issue 03 (2016-07-22) Huawei Proprietary and ConfidentialCopyright copy Huawei Technologies Co Ltd

8559

e-DOC CF39AB1C-eProc 134092016

Documento assinado digitalmente Para verificar as assinaturas acesse wwwtcdfgovbrautenticidade e informe o edoc CF39AB1C


1611 clear configuration snmp-agent trap enable

FunctionThe clear configuration snmp-agent trap enable command deletes alarm configurationsrelated to one or all functions in a batch and restores the default alarm functions

Formatclear configuration snmp-agent trap enable [ feature-name feature-name ]

Parameters

Parameter Description Value

feature-namefeature-name

Deletes configurations of thetrap function of a feature

The value is the name of a featurethat has been supported by thedevice

ViewsSystem view

Default Level3 Management level

Usage GuidelinesUsage Scenario

After a feature trap function is enabled or disabled using the snmp-agent trap enablefeature-name feature-name [ trap-name trap-name ] command the trap functions of allfeatures are enabled using the snmp-agent trap enable command or the trap functions of allfeatures are disabled using the snmp-agent trap disable command To delete theconfigurations run the clear configuration snmp-agent trap enable command

Configuration Impact

l When the trap function is enabled or disabled globally running the clear configurationsnmp-agent trap enable feature-name feature-name command deletes configurationsof the trap function of the feature specified by feature-name and restores the status of thetrap function to be the same as that of the global trap function

l When the global trap function is in the default state running the clear configurationsnmp-agent trap enable feature-name feature-name command deletes configurationsof the trap function of the feature specified by feature-name and restores the status of thetrap function to be the default status



8560



l Running the clear configuration snmp-agent trap enable command deletesconfigurations of the trap functions of all features and restores all feature alarm functionsto the default status

Example

Delete configurations of the trap functions of all features

ltHUAWEIgt system-view[HUAWEI] clear configuration snmp-agent trap enable

1612 display snmp-agent

Function

The display snmp-agent command displays the engine ID of the local or remote SNMPagent

Format

display snmp-agent local-engineid | remote-engineid

Parameters


local-engineid Displays the engine ID of the local SNMP agent The engine IDof a local SNMP agent is specified in the snmp-agent local-engineid command

-

remote-engineid Displays the engine ID of a remote SNMP agent -

Views

All views

Default Level

3 Management level

Usage Guidelines

Usage Scenario

After the SNMP agent function is enabled you can run the display snmp-agent local-engineid | remote-engineid command to view the engine ID of the local SNMP agent or theengine IDs of all remote SNMP agents

The SNMP engine ID uniquely identifies an SNMP agent in a management domain TheSNMP engine ID is an important component of the SNMP agent It schedules and processesSNMP messages implements security authentication access control and so on

Prerequisites



8561



Before running the display snmp-agent local-engineid | remote-engineid command toview the engine ID of the local or remote SNMP agent you need to run the snmp-agentcommand to enable the SNMP agent function

Precautions

To set an engine ID for the local SNMP agent you can run the snmp-agent local-engineidcommand

Example

Display the engine ID of the local SNMP agent with the prerequisite that the SNMP agentfunction is enabledltHUAWEIgt display snmp-agent local-engineid SNMP local EngineID 800007DB03360102101100

Table 16-1 Description of the display snmp-agent local-engineid command output

Item Description

SNMP local EngineID Indicates the engine ID of the local SNMPagent The engine ID can be specified by theadministrator through the snmp-agentlocal-engineid command or beautomatically calculated through analgorithm

Related Topics16131 snmp-agent local-engineid

1613 display snmp-agent community

Function

The display snmp-agent community command displays the configured community name

Format

display snmp-agent community [ read | write ]

Parameters


read Displays the name of a read-only community The parameter isspecified using the snmp-agent community command

-

write Displays the name of a read-write community The parameter isspecified using the snmp-agent community command

-



8562



ViewsAll views


Usage GuidelinesWhen configuring a management entity you can use the display snmp-agent communitycommand to check the community name configured on the current agent

If the parameter read or write is not specified the names of all communities are displayed

You have to configure the community name using the snmp-agent community commandbefore you run the display snmp-agent community command

Example Display the current community nameltHUAWEIgt display snmp-agent community Community name ^T|ampWhvyf$ltGdIwXi5SP_6~Nakk6ltlt+3HN-haJ6dl0mdHCeAY8~gtX=gtxVJKNAL=124r839vlt^ Group name ^T|ampWhvyf$ltGdIwXi5SP_6~Nakk6ltlt+3HN-haJ6dl0mdHCeAY8~gtX=gtxVJKNAL=124r839vlt^ Acl2001 Storage type nonVolatile

Table 16-2 Description of the display snmp-agent community command output

Item Description

Community name Name of a community

Group name Name of a group

Acl Number of the ACL configured for thecommunity This parameter is displayedonly when it is specified in thesnmp-agentcommunity command



8563



Item Description

Storage type Standard type of saving a line to memoryThe possible types are as followsl volatile Lines are saved in the volatile

storage medium and are lost after thedevice restarts

l nonVolatile Lines are saved in thenonvolatile storage medium such as NonVolatile Random Access Memory(NVRAM) and can be restored after thedevice restarts

l permanent Permanent lines are saved inthe nonvolatile storage medium such asRead-only Memory (ROM) They can bemodified but cannot be deleted

l readOnly Readonly lines are saved inthe nonvolatile storage medium such asROM They cannot be modified ordeleted

l otherNOTE

At present only nonVolatile is available

Related Topics16123 snmp-agent community

1614 display snmp-agent extend error-code status

FunctionThe display snmp-agent extend error-code status command allows you to check whetherthe function of sending extended error codes to the NMS is enabled on the device

Formatdisplay snmp-agent extend error-code status

ParametersNone

ViewsAll views




8564



Usage Guidelines

If the NMS does not receive the extended error codes sent from the device you can run thedisplay snmp-agent extend error-code status command to check whether the function ofsending extended error codes is enabled on the device

Example

Display whether the function of sending extended error codes is enabled on the device

ltHUAWEIgt display snmp-agent extend error-code statusExtend error-code status enabled

Table 16-3 Description of the display snmp-agent extend error-code status command output

Item Description

Extend error-code status Whether the function of sending extended error codes isenabledl enabled The function of sending extended error codes

is enabledl disabled The function of sending extended error codes

is disabled

Related Topics16125 snmp-agent extend error-code enable

1615 display snmp-agent group

Function

The display snmp-agent group command displays information about an SNMP agent group

Format

display snmp-agent group [ group-name ]

Parameters


group-name Displays the name of anSNMP agent group

The value is a string of 1 to 32 case-sensitivecharacters spaces not supported When doublequotation marks are used around the string spacesare allowed in the string

Views

All views



8565



Default Level

3 Management level

Usage Guidelines

Usage Scenario

When configuring a management object according to the SNMPv3 group information youcan run the display snmp-agent group command to view information about the SNMP agentgroup

If the command contains no parameter information about all groups is displayed such as thegroup name security model and storage type

Precautions

You can run the display snmp-agent group command to view information about an SNMPagent group only after the SNMP agent group is created through the snmp-agent groupcommand

Example

Display information about all SNMPv3 working groupsltHUAWEIgt display snmp-agent group Group name testgroup Security model v3 AuthPriv Readview ViewDefault Writeview dnsmib Notifyview dnsmib Storage type nonVolatile Acl 2001

Table 16-4 Table 1 Description of the display snmp-agent group command output

Item Description

Group name Name of an SNMP agent group

Security model Security mode The options are as followsl v3 AuthPriv authenticated and

encryptedl v3 AuthnoPriv authenticated but not

encryptedl v3 noAuthnoPriv neither authenticated

nor encrypted

Readview View of the read-only MIB of the groupThis parameter can be set using the snmp-agent group command



8566



Item Description

Writeview View of the read-write MIB of the groupThis parameter can be set using the snmp-agent group command

Notifyview View of the notify MIB of the group Thisparameter can be set using the snmp-agentgroup command

Storage-type Data storage type The system supports thefollowing five storage typesl readOnly Readonly lines are saved in

the nonvolatile storage medium Theycannot be modified or deleted

l permanent Permanent lines are saved inthe nonvolatile storage medium Theycan be modified but cannot be deleted

l nonVolatile Lines are saved in thenonvolatile storage medium and arerestored after the device restarts

l volatile Lines are saved in the volatilestorage medium and are lost after thedevice restarts

l other other storage typesIn practice the device generally uses onlythe nonVolatile type

Acl Number of the ACL configured for thegroup

Related Topics16126 snmp-agent group

1616 display snmp-agent heartbeat configuration

Function

The display snmp-agent heartbeat configuration command displays the configuration ofthe heartbeat trap function

Format

display snmp-agent heartbeat configuration

Parameters

None



8567



ViewsAll views

Default Level1 Monitoring level

Usage GuidelinesNone

Example Display the configuration of the heartbeat trap function on the device

ltHUAWEIgt display snmp-agent heartbeat configurationSnmp-agent heartbeat configuration Status Enabled Interval 60s

Table 16-5 Table 1 Description of the display snmp-agent heartbeat configuration commandoutput

Item Description

Status Indicates whether the device to sendheartbeat traps to the NMS This parametercan be set using the snmp-agent heartbeatenable command

Interval Indicates the interval at which the devicesends heartbeat trap messages to the NMSThis parameter can be set using the snmp-agent heartbeat interval command

Related Topics16127 snmp-agent heartbeat enable16128 snmp-agent heartbeat interval

1617 display snmp-agent inform

FunctionThe display snmp-agent inform command displays parameters configured for all orspecified target hosts to send Inform messages

Formatdisplay snmp-agent inform [ address udp-domain ip-address [ vpn-instance vpn-instance-name ] params securityname security-name | cipher security-name ]



8568



Parameters


address udp-domain ip-address

Specifies the IP address of thetarget host with thetransmission domain of thetarget host being based on theUser Datagram Protocol(UDP)NOTE

The IP address specified byaddress and the security namespecified by securitynametogether identify a host

The value is dotted decimal notation

vpn-instancevpn-instance-name

Specifies the name of a VPNinstanceNOTE

vpn-instance is optional To runthe display snmp-agent informcommand on a VPN network youneed to use the VPN instancespecified by vpn-instance IPaddress and security name toidentify a host

The value is a string of 1 to 31 case-sensitive characters spaces notsupported When double quotationmarks are used around the stringspaces are allowed in the string

params Indicates information about thetarget host that generatesSNMP messages

-

securitynamesecurity-name

Specifies the user securityname displayed on the NMS


cipher security-name

Indicates the unencrypted orencrypted string of securityname

The value is a string of 1 to 32 32 or56 case-sensitive characters withoutspaces When double quotation marksare used around the string spaces areallowed in the stringl When the community name is a

string of 1 to 32 characters thestring is processed as plain text bydefault and will be encrypted

l When the community name is astring of 32 or 56 characters thestring is processed as cipher text bydefault and the system willdetermine whether the string can beparsed



8569



Views

All views

Default Level

3 Management level

Usage Guidelines

Usage Scenario

The display snmp-agent inform command displays the configuration of sending Informmessages on all target hosts including

l Retransmission times configured on all target hosts

l Timeout period

l Maximum number of Inform messages that can be pending in the inform buffer foracknowledgment from NMS

l Current number of Inform messages pending in the inform buffer waiting foracknowledgment from NMS

The display snmp-agent inform command displays the configuration of sending Informmessages on a specified target host and message statistics including

l Retransmission times configured on the specified target host

l Timeout period in seconds after which an inform is retransmitted from inform buffer tothe NMS

l Number of times that an Inform message has been retransmitted

l Number of Inform messages to be confirmed

l Number of Inform messages that have been sent

l Number of Inform messages that are dropped because the inform buffer is full

l Number of Inform messages that are dropped because no correspondingacknowledgement messages are returned

l Number of received acknowledgement messages

When you run the display snmp-agent inform command without specifying any parameterthe alarm configuration is displayed in global inform mode and inform configurations andpacket statistics on all hosts are displayed

Example

Display the parameters configured for all to send Inform messages

ltHUAWEIgt display snmp-agent informGlobal config resend-times 3 timeout 15s pending 39Global status current notification count 1Target-host ID VPN instanceIP-AddressSecurity name-10111^Ogttf1ssv|~v3IY|GkIXOrFazE1lxR^ Config resend-times 3 timeout 15s Status retries 0 pending 0 sent 0 dropped 0 failed 0 confirmed 0



8570



Table 16-6 Description of the display snmp-agent inform command output

Item Description

Global config Global configuration The possible typesarel resend-times Indicates the number of

times for retransmitting Informmessages

l timeout Indicates the set timeout periodl pending Indicates the maximum number

of informs in the trap queueThe global inform parameter can be setusing the snmp-agent inform command

Global status Global packet statistics

Target-host ID ID of the target host consisting of the VPNinstance name IP address of the target hostand security name

Config Configuration of the host where the SNMPagent resides The possible types arel resend-times Indicates the number of


l timeout Indicates the set timeout periodThe inform parameter can be set using thesnmp-agent inform address command

Status Statistics about the Inform messagesgenerated on the host where the SNMPagent resides The possible types arel retries Indicates the number of Inform

messages retransmitted to the target hostl pending Indicates the number of

informs waiting in the inform buffer foracknowledgment from NMS

l sent Indicates the number of Informmessages that are successfully sent

l dropped Indicates the number of Informmessages that are dropped because theinform buffer is full

l failed Indicates the number of Informmessages that are not confirmed duringthe retransmission

l confirmed Indicates the number ofAcknowledgment messages returnedfrom the target host



8571



Related Topics16129 snmp-agent inform16130 snmp-agent inform address16145 snmp-agent target-host inform

1618 display snmp-agent mib-view

FunctionThe display snmp-agent mib-view command displays the current MIB view

Formatdisplay snmp-agent mib-view [ exclude | include | viewname view-name ]

Parameters


exclude Excludes the displayed and setattributes of the SNMP MIB view

-

include Includes the displayed and set attributesof the SNMP MIB view

-

viewname view-name

Specifies the view to be displayed Thisparameter can be set using the snmp-agent mib-view command

The value is a string of 1 to 32case-sensitive characters spacesnot supported When doublequotation marks are usedaround the string spaces areallowed in the string

ViewsAll views



The snmp-agent mib-view command creates or updates a MIB view To check the defaultand configured MIB view you can run the display snmp-agent mib-view command

By default the view ViewDefault is adopted

Precautions

Before running the display snmp-agent mib-view command ensure that the SNMP agenthas been enabled



8572



Example Display the current MIB view

ltHUAWEIgt display snmp-agent mib-view View nameViewDefault MIB Subtreeinternet Subtree maskF0(Hex) Storage-type nonVolatile View Typeincluded View statusactive

Table 16-7 Description of the display snmp-agent mib-view command output

Item Description

View name View name

MIB Subtree MIB subtree

Subtree mask Subtree mask

Storage type Data storage typel volatile Lines are saved in the volatile




l readOnly Readonly lines are saved inthe nonvolatile storage medium Theycannot be modified or deleted

l other other storage typesNOTE


View Type Whether the access to a MIB object ispermitted or denied This parameter can beset using the snmp-agent mib-viewcommand

View status Indicates the status of the MIB view

Related Topics16132 snmp-agent mib-view



8573



1619 display snmp-agent notification-log

Function

The display snmp-agent notification-log command displays logs in the trap log buffer

Format

display snmp-agent notification-log [ info | logtime starttime to endtime | size size ]

Parameters


info Displays information about thetrap log buffer including thenumber of global trap logs inthe trap log buffer number ofdiscarded trap logs aging timeof trap lops limit on thenumber of trap logs totalnumber of current trap logsand flag of the notificationlogging function

-

starttime Specifies the start time of traplogs

The value is in the HHMMSSYYYYMMDD format where HHMMSSindicates the hour minute and second andYYYYMMDD indicates the year monthand day HH ranges from 0 to 23 MM andSS range from 0 to 59 YYYY ranges from2000 to 2099 MM ranges from 1 to 12 DDranges from 1 to 31

endtime Specifies the end time of traplogs


size size Number of latest trap logs to bedisplayed

The value is an integer that ranges from 1 to5000

Views

All views

Default Level

3 Management level



8574



Usage Guidelines

You can use any of the following methods to view logs in the trap log buffer

l Specify the size size parameter to view the specified number of latest trap logs

l Specify logtime starttime to endtime to view the trap logs generated in a specifiedperiod

l Run the command without any optional parameters so that the system displays all traplogs by default

Example

Display trap logs in the trap log buffer

ltHUAWEIgt display snmp-agent notification-log infoNotification log information Notification Admin Status enable GlobalNotificationsLogged 0GlobalNotificationsBumped 0GlobalNotificationsLimit 500GlobalNotificationsAgeout 24Total number of notification log(s) 0

Table 16-8 Description of the display snmp-agent notification-log info command output

Item Description

Notification Admin Status Whether the notification logging function is enabled

GlobalNotificationsLogged Number of global trap logs

GlobalNotificationsBumped Number of discarded global trap logs

GlobalNotificationsLimit Limit on the number of trap logs

GlobalNotificationsAgeout Aging time of trap logs

Total number of notificationlog(s)

Total number of current trap logs

Display the latest 20 trap logs (Only one trap log is available in the system)

ltHUAWEIgt display snmp-agent notification-log size 20 Total number of notifications log(s) 1

LogTable LogIndex= 12 LogTime= 229323 LogDateAndTime= 200738 102816 LogEngineID= 000007DB7F00000100004CFB LogEngineTAddress= 192168391162 LogEngineTDomain= snmpUDPDomain LogContextEngineID= null LogContextName= null LogNotificationID= 136141201161021LogVariableTable LogVariableIndex= 1 LogVariableOID= 13612113



8575



LogVariableValueType= TimeTicksLogVariableValue = 229323 LogVariableIndex= 2 LogVariableOID= 1361631141 LogVariableValueType= OidLogVariableValue = 1 LogVariableIndex= 3 LogVariableOID= 13614120116101171329 LogVariableValueType= Integer32LogVariableValue = 1 LogVariableIndex= 4 LogVariableOID= 13614120116101171429 LogVariableValueType= Integer32LogVariableValue = 3 LogVariableIndex= 5 LogVariableOID= 13614120116101171529 LogVariableValueType= Integer32LogVariableValue = 2

Table 16-9 Description of the display snmp-agent notification-log size 20 command output

Item Description

LogTable Log table

LogIndex Index of the log

LogTime Difference between the time when the log was recordedand the time when the system started The unit is 10 ms

LogDateAndTime Absolute date and time when the log was recorded

LogEngineID Engine ID of the SNMP message recorded in the log

LogEngineTAddress IP address and port number of the SNMP messagerecorded in the log

LogEngineTDomain Transmission type of the SNMP message recorded in thelog

LogContextEngineID Engine ID of context of the SNMP message recorded inthe log

LogContextName Secure user name IP address and VPN instance name

LogNotificationID OID of the object recorded in the log

LogVariableTable Variable table of the log

LogVariableIndex Index of a variable

LogVariableOID OID of a variable

LogVariableValueType Value type of a variable

LogVariableValue Value of a variable

Related Topics16133 snmp-agent notification-log



8576



16110 display snmp-agent notify-filter-profile

Function

The display snmp-agent notify-filter-profile command displays information about aspecified trap filter profile or all trap filter profiles

Format

display snmp-agent notify-filter-profile [ profile-name ]

Parameters


profile-name Specifies the name of atrap filter profile


Views

All views

Default Level

3 Management level

Usage Guidelines

You can use the display snmp-agent notify-filter-profile command to view informationabout configured trap filter profiles The command can display all the configured trap filterprofiles or a specified trap file profile

Example

Display information about configured trap filter profilesltHUAWEIgt display snmp-agent notify-filter-profile Notify-filter namesnmpv2 Notify-filter SubtreesnmpV2 Notify-filter Subtree maskF8(Hex) Notify-filter Storage-typenonVolatile Notify-filter Typeincluded Notify-filter statusactive

Table 16-10 Description of the display snmp-agent notify-filter-profile command output

Item Description

Notify-filter name Name of a trap filter profile

Notify-filter Subtree Trap filter subtree



8577



Item Description

Notify-filter Subtree mask Mask of the trap filter subtree

Notify-filter Storage-type Storage mode of the trap filter profile

Notify-filter Type Whether to filter out the trap object

Notify-filter status Status of a row

Related Topics16135 snmp-agent notify-filter-profile

16111 display snmp-agent statistics

Function

The display snmp-agent statistics command displays the SNMP messages statistics

Format

display snmp-agent statistics

Parameters

None

Views

All views

Default Level

3 Management level

Usage Guidelines

In an SNMP management system the NMS and the SNMP agent exchange SNMP messagesas followsl The NMS acts as a manager to send an SNMP Request message to the SNMP agentl The SNMP agent searches the MIB on the device for the required information and sends

an SNMP Response message to the NMSl When the trap triggering conditions are met the SNMP agent sends a trap to the NMS to

report the event occurring on the device In this manner the network administrator canprocess the event occurring on the network in time

The display snmp-agent statistics command analyzes the statistics about SNMP messagesand obtains information about the communication between the SNMP agent and the NMS forfault location



8578



NOTE

If large number of messages are received in short period a great number of CPU resources are occupiedThe number of received messages depends on the frequency at which the NMS sends the Requestmessages

Example Display the statistics about the SNMP messages

ltHUAWEIgt display snmp-agent statistics 0 Messages delivered to the SNMP entity 0 Messages which were for an unsupported version 0 Messages which used a SNMP community name not known 0 Messages which represented an illegal operation for the community supplied 0 ASN1 or BER errors in the process of decoding 7 Messages passed from the SNMP entity 0 SNMP PDUs which had badValue error-status 0 SNMP PDUs which had genErr error-status 0 SNMP PDUs which had noSuchName error-status 0 SNMP PDUs which had tooBig error-status 0 MIB objects retrieved successfully 0 MIB objects altered successfully 0 GetRequest-PDU accepted and processed 0 GetNextRequest-PDU accepted and processed 0 GetResponse-PDU accepted and processed 0 SetRequest-PDU accepted and processed 0 Trap-PDU accepted and processed 0 Inform-PDU sent 0 Inform ACK PDUs failed to be processed 0 Inform ACK PDUs successfully processed

Table 16-11 Description of the display snmp-agent statistics command output

Item Description

Messages delivered to the SNMP entity Total number of input SNMP messages

Messages which were for an unsupportedversion

Number of messages with version errors

Messages which used a SNMP communityname not known

Number of messages with communityname errors

Messages which represented an illegaloperation for the community supplied

Number of messages with authority errorscorresponding to community name

ASN1 or BER errors in the process ofdecoding

Number of SNMP messages withencoding errors

Messages passed from the SNMP entity Total number of output SNMP messages

SNMP PDUs which had badValue error-status Number of SNMP messages with badvalues

SNMP PDUs which had genErr error-status Number of SNMP PDUs with generalerrors

SNMP PDUs which had noSuchName error-status

Number of SNMP PDUs with requests fornon-existing MIB objects



8579



Item Description

SNMP PDUs which had tooBig error-status Number of SNMP PDUs with Too_bigerrors

MIB objects retrieved successfully Number of variables requested by NMS

MIB objects altered successfully Number of variables set by NMS

GetRequest-PDU accepted and processed Number of received Get-request PDUs

GetNextRequest-PDU accepted andprocessed

Number of received GetNext-requestPDUs

GetResponse-PDU accepted and processed Number of received Get-response PDUs

SetRequest-PDU accepted and processed Number of received Set-request PDUs

Trap-PDU accepted and processed Number of sent Trap PDUs

Inform-PDU sent Number of sent Inform PDUs

Inform ACK PDUs failed to be processed Number of Inform-PDUs received with noacknowledgement

Inform ACK PDUs successfully processed Number of Inform-PDUs received withacknowledgement

16112 display snmp-agent statistics mib

Function

The display snmp-agent statistics mib command displays statistics about the NMSsoperations on MIB objects

NOTE

Only S5720EI S5720HI S6720EI and S6720S-EI support this command

Format

display snmp-agent statistics mib [ address ipv4-address | ipv6 ipv6-address | vpn-instancevpn-instance-name address ipv4-address ]

Parameters


address ipv4-address Specifies an IPv4 address -

ipv6 ipv6-address Specifies an IPv6 address -

vpn-instance vpn-instance-name

Specifies a VPN instancename

The value is a string of 1 to 31characters case-sensitivecharacters without spaces



8580



Views

All views

Default Level

3 Management level

Usage Guidelines

Usage Scenario

An NMS performs operations on MIB objects to manage devices To check these operationstatistics run the display snmp-agent statistics mib command The command outputdisplays names access frequencies and handling dates of MIB objects

If no NMS is specified the display snmp-agent statistics mib command displays statisticsabout the operations performed by all NMSs (that is IPv4+VPN IPv6+VPN IPv4 and IPv6NMSs) on MIB objects

Follow-up Procedure

If the NMS accesses a great amount of MIB node information and statistics do not need to besaved run the reset snmp-agent statistics mib command to delete the statistics

Example

Display all statistics about the NMSs operations on MIB objects

ltHUAWEIgt display snmp-agent statistics mib----------------------------------------------------------------------------------------- ip address19216814 total mib node number9 SUMMARY Total set0Total get9Total get-next75 ----------------------------------------------------------------------------------------- MibNode Set Get GetNext MaxTime MinTime AveTime ifEntry 0 0 75 0 0 0 ifNumber 0 1 0 0 0 0 sysContact 0 1 0 0 0 0 sysDescr 0 1 0 0 0 0 sysLocation 0 1 0 0 0 0 sysName 0 1 0 0 0 0 sysObjectID 0 1 0 0 0 0 sysServices 0 1 0 0 0 0 sysUpTime 0 2 0 0 0 0



8581



Table 16-12 Description of the display snmp-agent statistics mib command output

Item Description

ip address IP address of the NMS

total mib nodenumber

Total number of MIB objects

SUMMARY Abstract of statistics about the NMSs operations on MIB objects

Total set Total number of Set operations

Total get Total number of Get operations

Total get-next Total number of Get-next operations

MibNode MIB object name

Set Number of the Set operations performed on a specified MIB object

Get Number of the Get operations performed on a specified MIB object

GetNext Number of the Get-next operations performed on a specified MIBobject

MaxTime Maximum time for an operation performed on MIB objects

MinTime Minimum time for an operation performed on MIB objects

AveTime Average time for an operation performed on MIB objects

Related Topics16120 reset snmp-agent statistics mib16143 snmp-agent statistics mib disable

16113 display snmp-agent sys-info

Function

The display snmp-agent sys-info command displays the system information of the currentSNMP device including the contact information about the system maintenance physicallocation of the device and SNMP version

Format

display snmp-agent sys-info [ contact | location | version ]

Parameters


contact Displays the contact information of the current SNMP device -



8582




location Displays the physical location information of the current SNMPdevice

-

version Displays the SNMP version running in the current system -

Views

All views

Default Level

3 Management level

Usage Guidelines

You can use the display snmp-agent sys-info command to check the system maintenanceinformation of the current SNMP device The information includes

l Contact information of the device administrator

l Physical location of the device

l SNMP version

If the parameter is not specified all information is displayed

The snmp-agent sys-info command can be used to set the output of the display snmp-agentsys-info command

Example

Display the system information of the SNMP agent

ltHUAWEIgt display snmp-agent sys-info The contact person for this managed node RampD Beijing Huawei Technologies coLtd The physical location of this node Beijing China SNMP version running in the system SNMPv2c

Display the SNMP version running in the current system

ltHUAWEIgt display snmp-agent sys-info version SNMP version running in the system SNMPv2c

Display the contact information of the current SNMP device

ltHUAWEIgt display snmp-agent sys-info contact The contact person for this managed node RampD Beijing Huawei Technologies coLtd

Display the physical location information of the current SNMP device

ltHUAWEIgt display snmp-agent sys-info location The physical location of this node Beijing China



8583



Table 16-13 Description of the display snmp-agent sys-info command output

Item Description

The contact person for this managed node Contact person of the managed device Byspecifying this parameter you can store theimportant information to the router forconvenient query

The physical location of this node Location of the managed device

SNMP version running in the system SNMP version running in the currentsystem The value can bel SNMPv1l SNMPv2cl SNMPv3

Related Topics16144 snmp-agent sys-info

16114 display snmp-agent target-host

Function

The display snmp-agent target-host command displays information about all destinationhosts including the IP address of each destination host VPN instance name modes ofsending traps the security name used to send traps protocol version and security level

Format

display snmp-agent target-host

Parameters

None

Views

All views

Default Level

3 Management level

Usage Guidelines

You can use the display snmp-agent target-host command to view the configurations of alldestination hosts At present the system can save the configuration of a maximum of 20destination hosts Therefore the display snmp-agent target-host command can view theconfiguration of a maximum of 20 destination hosts



8584



Example Display the configurations of all destination hosts in the system

ltHUAWEIgt display snmp-agent target-hostTarget-host NO 1----------------------------------------------------------- IP-address 10121 Source interface - VPN instance - Security name ^uqYZfvW4vf[~C|ClUqS(vXdwwqR~5M(rU^ Port 162 Type trap Version v2c Level No authentication and privacy NMS type HW NMS With ext-vb No-----------------------------------------------------------

Table 16-14 Description of the display snmp-agent target-host command output

Parameter Description

IP-address Indicates the IP address of a destination host

Source interface Indicates the source interface

VPN instance Indicates the VPN instance to which a destination hostbelongs

Security name Indicates the security name

Port Indicates the UDP port number that sends requests

Type Indicates the requested method of propagating alarmsThe method can be Trap or Inform

Version Indicates the SNMP version number

Level Indicates security levels which includesl Authentication indicates that packets must be

authenticated rather than encryptedl Privacy indicates that packets must be authenticated

and encryptedl No authentication and privacy indicates that packets

need not be authenticated nor encrypted

NMS type Indicates the type of the NMSl NSM indicates the network management system

which can be either a Huawei NMS or the NMS ofanother manufacturer

l HW NMS indicates the Huawei NMS The alarmmessage sent to the HW NMS can contain moredetailed information



8585




With ext-vb Indicates whether an SNMP trap sent to a destination hostcarries extended private VB informationl No indicates that no extended private VB information

is carriedl Yes indicates that extended private VB information is

carried

Related Topics16145 snmp-agent target-host inform16146 snmp-agent target-host trap

16115 display snmp-agent trap all

FunctionThe display snmp-agent trap all command checks current and default status of all traps inall features

Formatdisplay snmp-agent trap all

ParametersNone

ViewsAll views


Usage GuidelinesYou can run the display snmp-agent trap all command to check current and default status ofall traps in all features You can configure the trap status by running snmp-agent trap enablesnmp-agent trap enable feature-name and snmp-agent trap disable

Example Check the default status of all traps in all features

ltHUAWEIgt display snmp-agent trap all------------------------------------------------------------------------------Feature name TRUNK Trap number 4



8586



------------------------------------------------------------------------------Trap name Default switch status Current switch status hwExtLinkDown off off hwExtLinkUp off off hwExtAllMemberDownNotify off off hwExtAllMemberDownResume off off ---------------------------------------------------------------------------------- More ----

Table 16-15 Description of the display snmp-agent trap all command output

Item Description

Feature name Module name

Trap number Number of traps corresponding to a module

Trap name Trap name

Current switch status Current enabling or disabling status of atrapThis status can be configured using thesnmp-agent trap enable feature-namecommand

Default switch status Default enabling or disabling status of atrap

Related Topics16148 snmp-agent trap disable16149 snmp-agent trap enable16150 snmp-agent trap enable feature-name

16116 display snmp-agent trap feature-name all

FunctionThe display snmp-agent trap feature-name all command displays whether the router isenabled to send alarms of specified features to the NM station

Formatdisplay snmp-agent trap feature-name feature-name all

Parameters


feature-name Specifies the feature that generates alarms -

ViewsAll views



8587




Usage GuidelinesAfter the router is enabled to send alarms to the NM station you can run the display snmp-agent trap feature-name all command to check whether the alarm function is enabled forspecified features You can use the snmp-agent trap enable feature-name command toenable the alarm function of specified features The following table lists the alarm informationof related features

FeatureName

Command Used to Enable orDisable the Trap Function

Command Used to Check the TrapStatus

ACL snmp-agent trap enable feature-name acle

display snmp-agent trap feature-nameacle all

ARP snmp-agent trap enable feature-name arp

display snmp-agent trap feature-namearp all

ASMNGTRAP

snmp-agent trap enable feature-name asmngtrap

display snmp-agent trap feature-nameasmngtrap all

BFD snmp-agent trap enable feature-name bfd

display snmp-agent trap feature-namebfd all

BGP snmp-agent trap enable feature-name bgp

display snmp-agent trap feature-namebgp all

CONFIGURATION

snmp-agent trap enable feature-name configuration

display snmp-agent trap feature-nameconfiguration all

DATASYNC

snmp-agent trap enable feature-name datasync

display snmp-agent trap feature-namedatasync all

DHCP snmp-agent trap enable feature-name dhcp

display snmp-agent trap feature-namedhcp all

DLDP snmp-agent trap enable feature-name dldp

display snmp-agent trap feature-namedldp all

EASYOPERATRAP

snmp-agent trap enable feature-name easyoperatrap

display snmp-agent trap feature-nameeasyoperatrap all

EFM snmp-agent trap enable feature-name efm

display snmp-agent trap feature-nameefm all

ENTITYMIB

snmp-agent trap enable feature-name entitymib

display snmp-agent trap feature-nameentitymib all

ENTITYTRAP

snmp-agent trap enable feature-name entitytrap

display snmp-agent trap feature-nameentitytrap all



8588



FeatureName



EOAM-1AG

snmp-agent trap enable feature-name eoam-1ag

display snmp-agent trap feature-nameeoam-1ag all

Eoam-Y1731

snmp-agent trap enable feature-name eoam-y1731

display snmp-agent trap feature-nameeoam-y1731 all

ERPS snmp-agent trap enable feature-name erps

display snmp-agent trap feature-nameerps all

ERROR-DOWN

snmp-agent trap enable feature-name error-down

display snmp-agent trap feature-nameerror-down all

ETRUNK snmp-agent trap enable feature-name etrunk

display snmp-agent trap feature-nameetrunk all

FM snmp-agent trap enable feature-name fm

display snmp-agent trap feature-namefm all

Ftp_Server

snmp-agent trap enable feature-name ftp_server

display snmp-agent trap feature-nameftp_server all

GTL snmp-agent trap enable feature-name gtl

display snmp-agent trap feature-namegtl all

HGMP snmp-agent trap enable feature-name hgmp

display snmp-agent trap feature-namehgmp all

IFNET snmp-agent trap enable feature-name ifnet

display snmp-agent trap feature-nameifnet all

IFPDT snmp-agent trap enable feature-name ifpdt

display snmp-agent trap feature-nameifpdt all

INFO snmp-agent trap enable feature-name info

display snmp-agent trap feature-nameinfo all

IP snmp-agent trap enable feature-name ip

display snmp-agent trap feature-nameip all

IPFPM snmp-agent trap enable feature-name ipfpm

display snmp-agent trap feature-nameipfpm all

IPLPM snmp-agent trap enable feature-name iplpm

display snmp-agent trap feature-nameiplpm all

IPV6 snmp-agent trap enable feature-name ipv6

display snmp-agent trap feature-nameipv6 all

ISIS snmp-agent trap enable feature-name isis

display snmp-agent trap feature-nameisis all

L2BPTNL

snmp-agent trap enable feature-name l2bptnl

display snmp-agent trap feature-namel2bptnl all



8589



FeatureName



L2IF snmp-agent trap enable feature-name l2if

display snmp-agent trap feature-namel2if all

L2IFPPI snmp-agent trap enable feature-name l2ifppi

display snmp-agent trap feature-namel2ifppi all

L2VPN snmp-agent trap enable feature-name l2vpn

display snmp-agent trap feature-namel2vpn all

L3MB snmp-agent trap enable feature-name l3mb

display snmp-agent trap feature-namel3mb all



LACP snmp-agent trap enable feature-name lacp

display snmp-agent trap feature-namelacp all

LBDT snmp-agent trap enable feature-name lbdt

display snmp-agent trap feature-namelbdt all

LDP snmp-agent trap enable feature-name ldp

display snmp-agent trap feature-nameldp all

LINE snmp-agent trap enable feature-name line

display snmp-agent trap feature-nameline all

LLDPTRAP

snmp-agent trap enable feature-name lldptrap

display snmp-agent trap feature-namelldptrap all

MAD snmp-agent trap enable feature-name mad

display snmp-agent trap feature-namemad all

MCAST snmp-agent trap enable feature-name mcast

display snmp-agent trap feature-namemcast all

Mid_Eapol

snmp-agent trap enable feature-name mid_eapol

display snmp-agent trap feature-namemid_eapol all

Mid_Web snmp-agent trap enable feature-name mid_web

display snmp-agent trap feature-namemid_web all

MPLS snmp-agent trap enable feature-name mpls

display snmp-agent trap feature-namempls all

Mpls_Lspm

snmp-agent trap enable feature-name mpls_lspm

display snmp-agent trap feature-namempls_lspm all

Mpls_Rsvp

snmp-agent trap enable feature-name mpls_rsvp

display snmp-agent trap feature-namempls_rsvp all

MSTP snmp-agent trap enable feature-name mstp

display snmp-agent trap feature-namemstp all



8590



FeatureName



OSPF snmp-agent trap enable feature-name ospf

display snmp-agent trap feature-nameospf all

OSPFV3 snmp-agent trap enable feature-name ospfv3

display snmp-agent trap feature-nameospfv3 all

PM snmp-agent trap enable feature-name pm

display snmp-agent trap feature-namepm all

POETRAP

snmp-agent trap enable feature-name poetrap

display snmp-agent trap feature-namepoetrap all

RADIUS snmp-agent trap enable feature-name radius

display snmp-agent trap feature-nameradius all

RIP snmp-agent trap enable feature-name rip

display snmp-agent trap feature-namerip all

RM snmp-agent trap enable feature-name rm

display snmp-agent trap feature-namerm all

RMON snmp-agent trap enable feature-name rmon

display snmp-agent trap feature-namermon all

RRPP snmp-agent trap enable feature-name rrpp

display snmp-agent trap feature-namerrpp all

SECURITYTRAP

snmp-agent trap enable feature-name securitytrap

display snmp-agent trap feature-namesecuritytrap all

SINDEX snmp-agent trap enable feature-name sindex

display snmp-agent trap feature-namesindex all

SNMP snmp-agent trap enable feature-name snmp

display snmp-agent trap feature-namesnmp all

SPMTRAP

snmp-agent trap enable feature-name spmtrap

display snmp-agent trap feature-namespmtrap all

SRMTRAP

snmp-agent trap enable feature-name srmtrap

display snmp-agent trap feature-namesrmtrap all

STACK snmp-agent trap enable feature-name stack

display snmp-agent trap feature-namestack all

SWITHSRVRES

snmp-agent trap enable feature-name swithsrvres

display snmp-agent trap feature-nameswithsrvres all

SYSTEM snmp-agent trap enable feature-name system

display snmp-agent trap feature-namesystem all

TCP snmp-agent trap enable feature-name tcp

display snmp-agent trap feature-nametcp all



8591



FeatureName



TRUNK snmp-agent trap enable feature-name trunk

display snmp-agent trap feature-nametrunk all

Uni-Topomng

snmp-agent trap enable feature-name uni-topomng

display snmp-agent trap feature-nameuni-topomng all

Uni-Tplm snmp-agent trap enable feature-name uni-tplm

display snmp-agent trap feature-nameuni-tplm all

Uni-Vermng

snmp-agent trap enable feature-name uni-vermng

display snmp-agent trap feature-nameuni-vermng all

UNIMBRTRAP

snmp-agent trap enable feature-name unimbrtrap

display snmp-agent trap feature-nameunimbrtrap all

USBLOADTRAP

snmp-agent trap enable feature-name usbloadtrap

display snmp-agent trap feature-nameusbloadtrap all

VBST snmp-agent trap enable feature-name vbst

display snmp-agent trap feature-namevbst all

VCMP snmp-agent trap enable feature-name vcmp

display snmp-agent trap feature-namevcmp all

VFS snmp-agent trap enable feature-name vfs

display snmp-agent trap feature-namevfs all

VPLSOAM

snmp-agent trap enable feature-name vplsoam

display snmp-agent trap feature-namevplsoam all

VRRP snmp-agent trap enable feature-name vrrp

display snmp-agent trap feature-namevrrp all

WLAN snmp-agent trap enable feature-name wlan

display snmp-agent trap feature-namewlan all

Example Display the status of the ARP alarms

ltHUAWEIgt display snmp-agent trap feature-name arp all------------------------------------------------------------------------------ Feature name ARP Trap number 4 ------------------------------------------------------------------------------ Trap name Default switch status Current switch status hwEthernetARPSpeedLimitAlarm on on hwEthernetARPThresholdExceedAlarm on on hwEthernetARPThresholdResumeAlarm on on hwEthernetARPIPConflictEvent on on



8592



Table 16-16 Description of the display snmp-agent trap feature-name all command output

Item Description

Feature name Name of the feature that generates alarms

Trap number Number of alarms generated by this feature

Trap name Name of the alarm

Default switch status Status of the default trap switchl on The trap function is enabledl off The trap function is disabled

Current switch status Status of the current trap switchl on The trap function is enabledl off The trap function is disabledThis status can be configured using the snmp-agent trap enable feature-name command

Related Topics16150 snmp-agent trap enable feature-name

16117 display snmp-agent trap feature-name snmp all

FunctionThe display snmp-agent trap feature-name snmp all command displays whether all SNMPtraps are enabled

Formatdisplay snmp-agent trap feature-name snmp all

ParametersNone

ViewsAll views


Usage GuidelinesYou can run the display snmp-agent trap feature-name snmp all command to check statusof all SNMP traps This status can be configured using the snmp-agent trap enable feature-name snmp command



8593



Example View whether all SNMP traps are enabled

ltHUAWEIgtdisplay snmp-agent trap feature-name snmp all------------------------------------------------------------------------------ Feature name SNMP Trap number 5 ------------------------------------------------------------------------------ Trap name Default switch status Current switch status coldStart on on warmStart on on authenticationFailure off off hwSNMPLockThreshold on on hwSNMPLockThresholdResume on on

Table 16-17 Description of the display snmp-agent trap feature-name snmp all commandoutput

Item Description

Feature name Name of the module where the trap is generated

Trap number Number of traps

Trap name Name of trap includingl coldStart This trap is generated when the device is

powered off and restartedl warmStart This trap is generated when the status of

SNMP agent is changed from disable to enablel authenticationFailure This trap is generated when a user

uses an incorrect community name and is unable to login to the device

l hwSNMPLockThreshold This trap is generated whenthe number of users who were locked due to anauthentication failure reached the upper threshold

l hwSNMPLockThresholdResume This trap is generatedwhen the number of users who were locked due to anauthentication failure fell below the lower threshold

Default switch status Default status of a trapl on The trap function is enabledl off The trap function is disabled

Current switch status Current status of a trapl on The trap function is enabledl off The trap function is disabledThis status can be configured using the snmp-agent trapenable feature-name snmp command

Related Topics16151 snmp-agent trap enable feature-name snmp



8594



16118 display snmp-agent usm-user

Function

The display snmp-agent usm-user command displays information about an SNMPv3 user

Format

display snmp-agent usm-user [ engineid engineid | group group-name | username user-name ]

Parameters


engineid engineid Displays information about an SNMPv3 user with a specifiedengine ID

This parameter is specified using the snmp-agent local-engineid command

-

group group-name Displays the SNMPv3 user belonging to a specified group

This parameter is specified using the snmp-agent groupcommand

-

username user-name

Displays information about a specified SNMPv3 user

This parameter is specified using the snmp-agent usm-usercommand

-

Views

All views

Default Level

3 Management level

Usage Guidelines

Usage Scenario

You can run the display snmp-agent usm-user command to display the SNMPv3 userinformation configured through the snmp-agent usm-user command The SNMPv3 user hererefers to the remote user that carries out SNMPv3 management

The displayed information about an SNMPv3 user includesl User namel Local engine ID of the user The SNMPv3 engine ID uniquely identifies an SNMPv3

agent in a management domain The SNMPv3 engine ID is an important component of



8595



the SNMPv3 agent It schedules and processes SNMPv3 messages and implementssecurity authentication and access control

Precautions

The display snmp-agent usm-user command is applicable only to SNMPv3 users

Example

Display information about all current SNMPv3 users

ltHUAWEIgt display snmp-agent usm-user User name myuser Engine ID 800007DB03360102101100 active Authentication Protocol sha Privacy Protocol aes256 Group name mygroup

Table 16-18 Description of the display snmp-agent usm-user command output

Item Description

User name A string used to identify an SNMPv3 user

Engine ID Engine ID of an SNMPv3-enabled deviceThis parameter is specified using the snmp-agent local-engineid command

active Status of an SNMPv3 user

Authentication Protocol Type of the authentication protocol

Privacy Protocol Type of the privacy protocol

Group name Name of the SNMPv3 group

Related Topics16126 snmp-agent group16131 snmp-agent local-engineid16159 snmp-agent usm-user

16119 enable snmp trap updown

Function

The enable snmp trap updown command enables an interface to send a trap to the NMSwhen the protocol status of the interface changes

The undo enable snmp trap updown command disables an interface from sending a trap tothe NMS when the protocol status of the interface changes

By default an interface sends a Trap message to the NMS when the protocol status of theinterface changes



8596



Format

enable snmp trap updown

undo enable snmp trap updown

Parameters

None

Views

Interface view

Default Level

2 Configuration level

Usage Guidelines

Usage Scenario

The enable snmp trap updown command is used to enable an interface to send a Trapmessage to the NMS when the protocol status of the interface changes which helps the NMSmonitor the interface status in real time

Precautions

By default the function of sending a Trap message to the NMS when the protocol status ofthe interface changes is enabled If an interface alternates between Up and Down it willfrequently send Trap messages to the NMS causing the NMS to be busy processing theseTrap messages In this case you can run the undo enable snmp trap updown command todisable the interface from sending trap messages to the NMS

Example

Disable an interface from sending a trap to the NMS when the protocol status of theinterface changesltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] undo enable snmp trap updown

16120 reset snmp-agent statistics mib

Function

The reset snmp-agent statistics mib command clears statistics about the NMSs operationson MIB objects

NOTE




8597



Format

reset snmp-agent statistics mib [ address ipv4-address | ipv6 ipv6-address | vpn-instancevpn-instance-name address ipv4-address ]

Parameters







Views

User view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

An NMS performs operations on MIB objects to manage devices You can run the displaysnmp-agent statistics mib command to check the operation statistics


If no NMS is specified the reset snmp-agent statistics mib command clears statistics aboutthe operations performed by all NMSs (that is IPv4+VPN IPv6+VPN IPv4 and IPv6NMSs) on MIB objects

Precautions

Operation statistics cannot be restored after they are cleared Exercise caution when runningthe reset snmp-agent statistics mib command

Example

Clear all statistics about the NMSs operations on MIB objects

ltHUAWEIgt reset snmp-agent statistics mib

Related Topics16112 display snmp-agent statistics mib16143 snmp-agent statistics mib disable



8598



16121 snmp-agent

FunctionThe snmp-agent command enables the SNMP agent function

The undo snmp-agent command disables the SNMP agent function

By default the SNMP agent function is disabled

Formatsnmp-agent

undo snmp-agent

ParametersNone

ViewsSystem view



Before configuring SNMP you need to enable the SNMP agent function

By executing the snmp-agent command with any parameter enables the SNMP agentfunction For example if you execute the snmp-agent community command the communityname gets created and also SNMP agent function is enabled

Precautions

After the snmp-agent command is executed both the IPv4 and IPv6 services are enabled forthe SNMP agent By default the switch listens on the IP address 0000 that is all IPaddresses This default setting is a threat to data confidentiality You are advised to run thesnmp-agent protocol source-interface interface-type interface-number command to specifythe source interface that receives and responds to SNMP requests from the NMS

Example Enable the SNMP agent function

ltHUAWEIgt system-view[HUAWEI] snmp-agent

Disable the SNMP agent function

ltHUAWEIgt system-view[HUAWEI] undo snmp-agent



8599



16122 snmp-agent acl

Function

The snmp-agent acl command configures an SNMP ACL

The undo snmp-agent acl command deletes the configured SNMP ACL

By default no SNMP ACL is configured

Format

snmp-agent acl acl-number | acl-name

undo snmp-agent acl

Parameters


acl-number Specifies an ACL number The value is an integer ranging from 2000 to3999

acl-name Specifies the name of abasic Named ACL

The value is a string of 1 to 64 case-sensitivecharacters without spaces The value must startwith a letter (a to z or A to Z case sensitive)

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

When using the NMS to manage devices you can run the snmp-agent acl command toconfigure an SNMP ACL on the devices and restrict the NMSs access to the devices toenhance network security

Precautions

The SNMP ACLs take precedence over ACLs based on SNMP community names SNMPgroups and SNMP users

Example

Configure SNMP ACL 2000 to allow NM stations that match rules defined in ACL 2000 toaccess the device using SNMP

ltHUAWEIgt system-view[HUAWEI] acl 2000



8600



[HUAWEI-basic-2000] rule permit source 1921681010 0[HUAWEI-basic-2000] quit[HUAWEI] snmp-agent acl 2000

16123 snmp-agent community

FunctionThe snmp-agent community command configures the SNMPv1 or SNMPv2c read-writecommunity name

The undo snmp-agent community command is used to delete the configuration of thecommunity name

By default the community name is not configured

Formatsnmp-agent community read | write community-name | cipher community-name [ mib-view view-name | acl acl-number | alias alias-name ]

undo snmp-agent community community-name

undo snmp-agent community read | write [ cipher ] community-name

Parameters


read Indicates that thecommunity with aspecified name has theread-only rights in thespecified view

-

write Indicates that thecommunity with aspecified name has theread-write rights in thespecified view

-



8601




community-name

Specifies the name of acommunity

The community name isdisplayed in cipher text inthe configuration file

The value is a string of 8 to 32 case-sensitivecharacters spaces not supported When doublequotation marks are used around the stringspaces are allowed in the string

By default the complexity check is enabled fora community name If a community name failsthe complexity check the community namecannot be configured To disable thecomplexity check for a community name runthe snmp-agent community complexity-check disable commandNOTE

The device has the following requirements forcommunity name complexity

l The default minimum length of a communityname is eight characters

l A community name includes at least two kindsof characters which can be uppercase letterslowercase letters digits and special charactersexcept question marks ()

If the complexity check of a community name isdisabled by using the snmp-agent communitycomplexity-check disable command the length ofcommunity-name ranges from 1 to 32



8602




ciphercommunity-name

Specifies the communityname in plain text or incipher text

The value is a string of 8 to 32 32 44 56 80or 88 case-sensitive characters without spacesWhen double quotation marks are used aroundthe string spaces are allowed in the stringl When the community name is a string of 8

to 32 characters the string is processed asplain text by default and will be encrypted

l When the community name is a string of32 44 56 80 or 88 characters the string isprocessed as cipher text by default and thesystem will determine whether the stringcan be parsed





If the complexity check of a community name isdisabled by using the snmp-agent communitycomplexity-check disable command the length ofcipher community-name is 80 or ranges from 1 to32

mib-viewview-name Specifies a MIB view that

the community name canaccess

It is a string of 1 to 32 case-sensitive characterswithout spaces When double quotation marksare used around the string spaces are allowedin the string

acl acl-number

Specifies the ACLcorresponding to thecommunity nameNOTE

Currently SNMP supportsonly basic ACLs

The ACL configured by theacl acl-number parametertakes effect on both IPv4 andIPv6 networks

The value is an integer that ranges from 2000to 2999



8603




alias alias-name

Specifies the alias namefor a community

The alias names ofcommunities are stored inplain text in theconfiguration file


Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

When running the snmp-agent community command you can select parameters based onthe networking requirementsl To grant the NMS read-only permission in the specified view configure readl To grant the NMS read-write permission in the specified view configure writel To allow specified NMSs using this community name have the rights of ViewDefault

omit mib-view view-namel To allow all NMSs using this community name to manage specified objects on a

managed device omit acl acl-numberl To allow specified NMSs using this community name to manage specified objects on a

managed device configure mib-view and acll The community name will be saved in encrypted format in the configuration file To

facilitate identification of community names specify the alias alias-name parameter toset the alias names for the communities The alias names are stored in plain text in theconfiguration file

NOTE

When both community name and ACL are configured the NMS verifies the community name beforeaccessing the device and then checks the ACL rules If the community name does not exist the pacektis discarded and a log indicating that the community name is wrong is printed The ACL rule is notchecked That is the ACL rule is checked only when the community name exists

You can run the display snmp-agent community command to view the current communityname

The device supports a maximum of 25 community names

Precautions

If you specify the parameter mib-view or acl when running the snmp-agent communitycommand configure the MIB view and ACL rule If the default MIB view is deleted the



8604



NMS using this community name cannot communicate with managed devices To continue touse this community name specify an existing MIB view

When a user with a level lower than the level configured using this command queries thepassword configured using the display this or display current-configuration command thepassword is displayed as asterisks ()

Example

Set the name of a community to comaccess1 and configure the read-only rights for thecommunity

ltHUAWEIgt system-view[HUAWEI] snmp-agent community read comaccess1

Set the name of a community to comaccess2 and configure the read-write rights for thecommunity

ltHUAWEIgt system-view[HUAWEI] snmp-agent community write comaccess2

Related Topics1613 display snmp-agent community

16124 snmp-agent community complexity-check disable

Function

The snmp-agent community complexity-check disable command disables the complexitycheck of a community name

The undo snmp-agent community complexity-check disable command enables thecomplexity check of a community name

By default the complexity check is enabled for a community name

Format

snmp-agent community complexity-check disable

undo snmp-agent community complexity-check disable

Parameters

None

Views

System view

Default Level

3 Management level



8605



Usage Guidelines

The device has the following requirements for community name complexity

l By default the minimum length of a community name is eight characters The setpassword min-length command determines the minimum length of a community name

l The community name includes at least two kinds of characters uppercase letterslowercase letters numbers and special characters (excluding )

To ensure the security of SNMP community names enable the complexity check forcommunity names If a community name fails the complexity check the community namecannot be configured The complexity check can also be disabled for a community nameHowever disabling the complexity check will weaken the security

If complexity check of community names is not enabled the system does not check thecomplexity of community names when they are configured However if a community name issimple and does not meet complexity requirements it is prone to be attacked and cracked byunauthorized users which affects device security Therefore enabling complexity check ofcommunity names is recommended

Example

Disable the complexity check for community names

ltHUAWEIgt system-view[HUAWEI] snmp-agent community complexity-check disable

Related Topics16123 snmp-agent community2521 set password min-length

16125 snmp-agent extend error-code enable

Function

The snmp-agent extend error-code enable command enables the function of sendingextended error codes to the NMS on the device

The undo snmp-agent extend error-code enable command disables the function of sendingextended error codes to the NMS

By default the function of sending extended error codes to the NMS is disabled

Format

snmp-agent extend error-code enable

undo snmp-agent extend error-code enable

Parameters

None



8606



Views

System view

Default Level

3 Management level

Usage Guidelines

If the NMS and managed device are Huawei devices error codes are extended and morescenarios are defined after the function of sending extended error codes is enabled As aresult users are enabled to locate and troubleshoot faults quickly and accurately

Support of the MIB for the extended error code

l For the MIB that supports the extended error code you can enable the SNMP extendederror code function and use Huawei NMS to provide the NMS with various error codes

l For the MIB that does not support the extended error code after the SNMP extendederror code function is enabled NMS of either Huawei or other vendors can obtain onlythe standard error code

Example

Enable the function of sending extended error codes to the NMS on the device

ltHUAWEIgt system-view[HUAWEI] snmp-agent extend error-code enableInfo Succeeded in enabling the error-code status

Related Topics1614 display snmp-agent extend error-code status

16126 snmp-agent group

Function

The snmp-agent group command creates an SNMP group by mapping SNMP users toSNMP views

The undo snmp-agent group command deletes a specified SNMP user group

By default no SNMP group is configured

Format

snmp-agent group v3 group-name authentication | privacy | noauthentication [ read-view read-view | write-view write-view | notify-view notify-view ] [ acl acl-number | acl-name ]

undo snmp-agent group v3 group-name authentication | privacy | noauthentication



8607



Parameters


v3 Indicates that the SNMP groupuses the security mode inSNMPv3

-

group-name Specifies the name of anSNMP group


authentication |privacy |noauthentication

Indicates the security level ofthe SNMP groupl authentication

authenticates SNMPmessages withoutencryption

l privacy authenticates andencrypts SNMP messages

l noauthentication notauthenticate or encryptSNMP messages

To ensure security it isrecommended that you set thesecurity level of the SNMP group toprivacy

read-view read-view Specifies a read-only view The value is a string of 1 to 32 case-sensitive characters spaces notsupported When double quotationmarks are used around the stringspaces are allowed in the string

read-view specified by the snmp-agent mib-view command

write-view write-view

Specifies a read-write view The value is a string of 1 to 32 case-sensitive characters spaces notsupported When double quotationmarks are used around the stringspaces are allowed in the string

write-view is specified by thesnmp-agent mib-view command

notify-view notify-view

Specifies a notify view The value is a string of 1 to 32 case-sensitive characters spaces notsupported When double quotationmarks are used around the stringspaces are allowed in the string

notify-view is specified by thesnmp-agent mib-view command



8608




acl acl-number |acl-name

NOTE

The specified ACL takes effectfor both IPv4 and IPv6 networks

Specifies the ACL

l acl-number specifies thenumber of the ACL

l acl-name specifies thename of an ACL

l The value of acl-number is aninteger that ranges from 2000 to3999

l The value of acl-name is a stringof 1 to 32 case-sensitivecharacters without spaces Thevalue must start with a letter (ato z or A to Z case sensitive)and can contain numbershyphens (-) or underlines (_)

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

SNMPv1 and SNMPv2c have serious defects in terms of security The security authenticationmechanism used by SNMPv1 and SNMPv2c is based on the community name In thismechanism the community name is transmitted in plain text You are not advised to useSNMPv1 and SNMPv2c on untrusted networks

By adopting the user-based security model SNMPv3 eradicates the security defects inSNMPv1 and SNMPv2c and provides two services authentication and privacy The SNMPgroup name and security name determine an SNMP group SNMPv3 defines the followingsecurity levels

l noAuthNoPrivl AuthNoPrivl AuthPriv

NOTE

The security authentication level noAuthPriv does not exist This is because the generation of a key isbased on the authentication information and product information

The snmp-agent group command can be used to configure the following

l Authenticationl Privacyl Access rights for users of SNMP groupl Bind the SNMP group to a MIB view

Parameters are selected based on the following rulesl To enhance security configure the parameter authentication or privacy



8609



ndash If the noauthentication parameter is set SNMP messages are not authenticated orencrypted This applies to the environment that is secure and has a fixedadministrator

ndash To authenticate SNMP messages without encryption configure the parameterauthentication This mode is applicable to secure networks managed by manyadministrators who may frequently perform operations on the same deviceAuthentication allows only the administrators with permission to access the device

ndash To authenticate and encrypt SNMP messages configure the parameter privacyThis mode is applicable to insecure networks managed by many administrators whomay frequently perform operations on the same device Authentication andencryption allow only specified administrators to access the device and encryptsdata before the transmission This prevents data from being tampered or leaked

l To grant the NMS read-only permission in the specified view configure read-view Togrant the NMS read-write permission in the specified view configure write-view

To filter unnecessary alarms configure notify-view After this parameter is configuredonly alarms generated on MIB objects specified by notify-view are delivered to theNMS

By default the read-only view of an SNMP group is the ViewDefault view and thenames of the read-write view and inform view are not specified

l To allow specified NMSs in the same SNMPv3 group to access the device configure acl

The device supports a maximum of 20 user gruop


When you run the undo snmp-agent group command to delete an SNMP user group youdelete all SNMP users in the SNMP user group

Precautions

To receive trap messages specified in notify-view you need to ensure the target host forreceiving SNMP traps is specified through the snmp-agent target-host trap command

To configure security levels of a user and an alarm host after the security level for an SNMPgroup is configured the following two requirements must be met

l The security level of a user must not be lower than that of an SNMP group Otherwisecommunication will fail

l The alarm host security level must not be lower than the security level of the SNMPgroup Otherwise alarms will fail to be sent

If non authentication and non encryption or authentication and non encryption is configuredfor an SNMPv3 group these modes bring security risks To improve system security deletethe group and create a group with authentication and encryption

Example

Create an SNMPv3 group named Johngroup authenticate and encrypt SNMP messagesand configure the view that the SNMPv3 group can read only to public

ltHUAWEIgt system-view[HUAWEI] snmp-agent[HUAWEI] snmp-agent mib-view excluded public 136121[HUAWEI] snmp-agent group v3 Johngroup privacy read-view public



8610



Create an SNMPv3 group named Johngroup authenticate and encrypt SNMP messagesand configure the view that the SNMPv3 group write-view to private

ltHUAWEIgt system-view[HUAWEI] snmp-agent[HUAWEI] snmp-agent mib-view included private 136121[HUAWEI] snmp-agent group v3 Johngroup privacy write-view private

Related Topics16132 snmp-agent mib-view16159 snmp-agent usm-user1615 display snmp-agent group

16127 snmp-agent heartbeat enable

Function

The snmp-agent heartbeat enable command enables the device to send heartbeat traps to theNMS

The undo snmp-agent heartbeat enable command disables the device from sendingheartbeat traps to the NMS

By default the device does not send heartbeat traps to the NMS

Format

snmp-agent heartbeat enable

undo snmp-agent heartbeat enable

Parameters

None

Views

System view

Default Level


Usage Guidelines

When the NMS cannot initiatively obtain the status of the device run the snmp-agentheartbeat enable command to enable the device to send heartbeat traps to the NMS Thedevice then periodically sends heartbeat trap messages to the NMS to notify the NMS of itsstatus

Example

Enable the device to send heartbeat traps to the NMS



8611



ltHUAWEIgt system-view[HUAWEI] snmp-agent heartbeat enableInfo Snmp-agent heartbeat trap has been enabled successfully

Related Topics1616 display snmp-agent heartbeat configuration

16128 snmp-agent heartbeat interval

Function

The snmp-agent heartbeat interval command sets the interval at which the device sendsheartbeat trap messages to the NMS

The undo snmp-agent heartbeat interval command restores the default interval

By default the device sends heartbeat trap messages to the NMS at an interval of 60 seconds

Format

snmp-agent heartbeat interval interval

undo snmp-agent heartbeat interval

Parameters


interval Specifies the interval at which the devicesends heartbeat trap messages to theNMS

The value is an integer that rangesfrom 60 to 86400 in seconds

Views

System view

Default Level


Usage Guidelines

Usage Scenario

After enabling the device to send heartbeat trap messages to the NMS you can use the snmp-agent heartbeat interval command to set the interval at which heartbeat trap messages aresent On a stable network increase the interval to reduce the bandwidth consumed forperiodic transmission of heartbeat trap messages

Prerequisites

The device has been enabled to send heartbeat trap messages to the NMS using the snmp-agent heartbeat enable command



8612



Example

Configure the device to send heartbeat trap message to the NMS at an interval of 180seconds

ltHUAWEIgt system-view[HUAWEI] snmp-agent heartbeat interval 180Info Snmp-agent heartbeat trap sending interval has been changed to 180s

Related Topics1616 display snmp-agent heartbeat configuration16127 snmp-agent heartbeat enable

16129 snmp-agent inform

Function

The snmp-agent inform command sets global parameters of informs including the timeoutperiod for waiting for inform ACK messages number of times to retransmit informs andmaximum number of informs to be confirmed in the inform buffer

The undo snmp-agent inform command restores the default setting

By default the timeout waiting period for inform ACK messages is 15 seconds the number oftimes to retransmit informs is 3 and the maximum number of informs in the inform buffer is39

Format

snmp-agent inform timeout seconds | resend-times times | pending number

undo snmp-agent inform timeout | resend-times | pending

Parameters


timeout seconds Specifies the timeout period forwaiting for inform ACK messagesfrom the NMS

The value is an integer rangingfrom 1 to 1800 in seconds Thedefault value is 15 seconds

resend-timestimes

Specifies the times to retransmitinforms in the case that no informACK message is returned from theNMS

The value is an integer rangingfrom 0 to 10 The default value is3

pending number Specifies the maximum number ofinforms to be confirmed in theinform buffer

The value is an integer rangingfrom 1 to 2048 The default valueis 39

Views

System view



8613



Default Level

3 Management level

Usage Guidelines

Usage Scenario

After sending an inform the SNMP agent waits for an inform ACK message from the NMSYou can run the snmp-agent inform command to set parameters timeout resend-times andpending of the inform

These three parameters mutually affect each other For example if the timeout period forwaiting for inform ACK messages prolongs or the times to retransmit informs increase butthe maximum number of informs to be confirmed is not changed the number of informs to beconfirmed is increased causing the inform buffer to be quickly filled up

Once the inform buffer is filled up the earliest inform in the inform buffer is deleted eachtime a new inform enters the queue The deleted informs are not retransmitted to the NMS Toavoid this problem you can increase the maximum number of informs to be confirmed in theinform buffer

You can configure the snmp-agent inform command to contain the parameter timeoutresend-times or pending according to the network condition

l When a large number of informs are dropped on the network you can run the snmp-agent inform pending number command to increase the inform buffer

l When the transmission speed on the network is low you can increase the timeout periodIncreasing the timeout period will increase the waiting time of informs in the informbuffer You can also run the snmp-agent inform timeout seconds | pending number command to increase the inform

l When the transmission speed on the network is high you can run the snmp-agentinform timeout seconds command to reduce the timeout period

l When informs are transmitted on an unreliable network you can increase theretransmission times In this case the informs in the inform buffer need to wait for alonger time to be confirmed You can run the snmp-agent inform resend-times times |pending number command to increase the inform buffer

Prerequisites

Parameters for sending informs take effect only after the IP address of the target host forreceiving informs is configured using the snmp-agent target-host inform command

Precautions

You need to configure only parameters for sending informs using the snmp-agent informcommand you do not need to configure parameters for sending traps

You must set the parameters timeout resend-times and pending according to the networkcondition Otherwise the SNMP working efficiency is greatly affected

Example

Set the times to retransmit an inform to 5 and the maximum number of informs waiting tobe confirmed in the inform buffer to 100



8614



ltHUAWEIgt system-view[HUAWEI] snmp-agent inform resend-times 5 pending 100

Related Topics1617 display snmp-agent inform16130 snmp-agent inform address16149 snmp-agent trap enable

16130 snmp-agent inform address

FunctionThe snmp-agent inform address command sets parameters for sending informs includingthe timeout period for waiting for inform ACK messages from the NMS and times toretransmit an inform

The undo snmp-agent inform address command restores the default setting for a particularinform host

By default the timeout waiting period for inform ACK messages is 15 seconds and thenumber of times to retransmit informs is 3

Format

snmp-agent inform timeout seconds | resend-times times address udp-domain ip-address [ vpn-instance vpn-instance-name ] params securityname security-name | ciphersecurity-name

undo snmp-agent inform timeout [ seconds ] | resend-times [ times ] address udp-domain ip-address [ vpn-instance vpn-instance-name ] params securityname security-name | cipher security-name

Parameters


timeout seconds Specifies the timeout period forwaiting for inform ACKmessages from the NMS

The value is an integer ranging from 1to 1800 in seconds The default valueis 15 which is equal to the globaltimeout period configured using thesnmp-agent inform command

resend-timestimes

Specifies the number of timesthat informs are retransmittedwhen no inform ACK messageis returned from the NMS

The value is an integer ranging from 0to 10 The default value is 3 which isequal to the global retransmissiontimes configured using the snmp-agentinform command



8615




address Indicates the address of thetarget host for receiving SNMPtrapsNOTE



udp-domain ip-address

Specifies the IP address of aspecified target host with thetransmission domain based onUDP



Specifies the name of a VPNinstance

The value is a string of 1 to 31 case-sensitive characters spaces notsupported When double quotationmarks are used around the stringspaces are allowed in the string Theparameter vpn-instance is optional Ona VPN network you need to use theVPN instance specified by vpn-instance IP address and securityname to identify a target host

params Indicates information about thetarget host that generates SNMPnotifications

-


Displays the name of the targethost for receiving informs onthe NMS

For SNMPv3 securitynamemust be configured as the username securityname configuredon the host needs to be the sameas that configured on the NMSor the NMS cannot receive thetrap messages sent from thehost

For SNMPv1 and SNMPv2cthe NMS can receive trapmessages from all hosts withouthaving securitynameconfigured securityname isused to distinguish multiplehosts that generate trapmessages




8616









ViewsSystem view



For example if the snmp-agent inform address command is executed on the target host afterthe global inform parameters are configured only the parameter configured using the snmp-agent inform address command takes effect

You can use both the snmp-agent inform address command and the snmp-agent informcommand to set parameters according to the network condition

l When a large number of Inform messages are dropped on the network you arerecommended to run the snmp-agent inform pending number command to lengthen thetrap queue and then the snmp-agent inform address command to specify the destinationIP address and name of the target host

l When the transmission speed on the network is low you are recommended to increasethe timeout period Increasing the timeout period will surely increase the waiting time ofinforms in the trap queue for confirmation In this case you are also recommended to runthe snmp-agent inform timeout seconds | pending number command to lengthenthe trap queue and then the snmp-agent inform address command to specify thedestination address and the displayed user name

l When the transmission speed on the network is high you are recommended to run thesnmp-agent inform timeout seconds address udp-domain ip-address paramssecurityname security-name command to reduce the timeout period

l When informs are transmitted on an unreliable network you are recommended toincrease the retransmission times In this case the informs in the trap queue need to wait



8617



for a longer time to be confirmed This requires you to run the snmp-agent inform resend-times times | pending number command to lengthen the trap queue andthen the snmp-agent inform address command to specify the destination address andthe displayed user name

Prerequisites


Precautions

You must set the parameters timeout and resend-times according to the network conditionOtherwise the SNMP working efficiency is greatly affected

NOTE

You need to configure only parameters for sending informs using the snmp-agent inform addresscommand you do not need to configure parameters for sending traps

The priority set for the timeout and resend-times parameters using the snmp-agent informaddress command is higher than that set for the timeout and resend-times parameters usingthe snmp-agent inform command If both parameters in Inform mode and parameters usingthe snmp-agent inform address command are configured parameters using the snmp-agentinform address command take effect for a specified destination host

For SNMPv2c when a user with a level lower than the level configured using this commandqueries the securityname configured using the display this or display current-configurationcommand the securityname is displayed as asterisks ()

Example

Set the times to retransmit an inform to the target host (with the IP address of 10111 andthe security name of ABC) to 10

ltHUAWEIgt system-view[HUAWEI] snmp-agent inform resend-times 10 address udp-domain 10111 params securityname ABC

Related Topics1617 display snmp-agent inform16129 snmp-agent inform

16131 snmp-agent local-engineid

Function

The snmp-agent local-engineid command sets an engine ID for the local SNMP agent

The undo snmp-agent local-engineid command restores the engine ID of the local SNMPagent to the default value

By default the device uses an internal algorithm to automatically generate an engine ID for adevice The engine ID consists of the enterprise number and the device information



8618



Format

snmp-agent local-engineid engineid

undo snmp-agent local-engineid

Parameters


engineid Specifies the engine ID of thelocal SNMP agent

The value is string of 10 to 64 hexadecimaldigits It cannot be all 0s or all Fs

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

You can run the snmp-agent local-engineid command to set an engine ID for the localSNMP agent for identification

The SNMP engine ID uniquely identifies an SNMP agent in a management domain TheSNMP engine ID is an important component of the SNMP agent It schedules and processesSNMP messages and implements security authentication and access control You can use thedisplay snmp-agent local-engineid command to check the engine ID of the local SNMPentity

When setting an engine ID you need to comply with the following rules

l The length of the octet strings varies The first four octets are set to the binary equivalentof the agent which is SNMP management private enterprise number and is assigned bythe Internet Assigned Numbers Authority (IANA)The engine ID of Huawei devices is2011 in decimal notation The first digit is in binary format and has a fixed value 1Therefore the engine ID in hexadecimal format is 800007DB

l The device information can be configured manually It is recommended that the IPaddress or MAC address of the device be used as the device information to uniquelyidentify the device

Precautions

If the local engine ID is set or changed the existing SNMPv3 user with this engine ID isdeleted If the original engine ID is restored the corresponding user configuration is restored

After the SNMP agent function is enabled using the snmp-agent command the systemautomatically adopts the default engine ID for the local SNMP agent

The password summary used by SNMPv3 users is calculated using MD5 or SHA based on theuser password and engine ID of the local SNMP agent If the engine ID of the local SNMP



8619



agent is changed the generated password summary becomes invalid As a result a newpassword summary needs to be generated for SNMPv3 users

Example

Set the engine ID of the local SNMP agent to 800007DB03360102101100

ltHUAWEIgt system-view[HUAWEI] snmp-agent local-engineid 800007DB03360102101100

Related Topics1612 display snmp-agent16159 snmp-agent usm-user

16132 snmp-agent mib-view

Function

The snmp-agent mib-view command creates or updates a MIB view

The undo snmp-agent mib-view command cancels the configuration of the current MIBview

By default the MIB view name is ViewDefault and the MIB subtree includes all internetsubnodes except for snmpVacmMIB snmpUsmMIB and snmpCommunityMIB

Format

snmp-agent mib-view excluded | included view-name oid-tree

undo snmp-agent mib-view view-name [ oid-tree ]

undo snmp-agent mib-view [ excluded | included ] view-name [ oid-tree ]

Parameters


excluded Excludes the MIB subtree -

included Includes the MIB subtree -

view-name Specifies the view name The value is a string of 1 to 32 case-sensitive characters spaces notsupported When double quotation marksare used around the string spaces areallowed in the string

oid-tree Specifies the OID for the MIBsubtree oid-tree can be the OID(such as 14531) or the name(such as system) of the subtree

It is a string of 1 to 255 case-sensitivecharacters without spaces

NOTEIt must be a valid MIB subtree



8620



Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

Most SNMP configuration commands contain the parameter view-name The snmp-agentmib-view command is used to create or update a view You cannot modify or delete thedefault ViewDefault MIB view

In the snmp-agent mib-view command the parameter view-name can be displayed as an OIDor an object name

l Displaying the parameter view-name as an OID snmp-agent mib-view includedmyview 136121

l Displaying the parameter view-name as an object name snmp-agent mib-viewexcluded myview system7

NOTETo uniquely identify object identifiers in SNMP messages SNMP uses a hierarchical naming structureto distinguish object identifiers from each other This is a tree-like structure with the nodes (such as136121) representing object identifiers The MIB is a collection of standard variables on monitorednetwork devices

You can select parameters based on the following rules

l excluded If a few MIB objects on the device or some objects in the current MIB viewdo not or no longer need to be managed by the NM station excluded needs to bespecified in the command to exclude these MIB objects

l included If a few MIB objects on the device or some objects in the current MIB viewneed to be managed by the NM station included needs to be specified in the commandto include these MIB objects

If you forget which information you have configured for a MIB view you can run the displaysnmp-agent mib-view command to check it

Precautions

When you run the snmp-agent mib-view command for multiple times to define the MIBview the new configuration overwrites the original configuration if the values of view-nameand oid-tree are the same the new and original configurations both take effect if the values ofview-name and oid-tree are different The system can store a maximum of 256 MIB viewconfigurations among which there are four default views

If both the include and exclude parameters are configured for MIB objects that have aninclusion relationship whether to include or exclude the lowest MIB object will bedetermined by the parameter configured for the lowest MIB object For example the snmpV2snmpModules and snmpUsmMIB objects are from top down in the MIB table If the excludeparameter is configured for snmpUsmMIB objects and include is configured for snmpV2snmpUsmMIB objects will still be excluded



8621



Example

Create MIB view mib2view that includes all mib-2 objects and the subtree with the OID as136121

ltHUAWEIgt system-view[HUAWEI] snmp-agent mib-view included mib2view 136121

Related Topics1618 display snmp-agent mib-view16123 snmp-agent community16126 snmp-agent group

16133 snmp-agent notification-log

Function

The snmp-agent notification-log command sets the aging time of trap logs and the maximumnumber of trap logs that can be saved in the trap log buffer

The undo snmp-agent notification-log command restores the default configuration

By default the aging time of trap logs is 24 hours and a maximum of 500 trap logs can besaved in the trap log buffer

Format

snmp-agent notification-log global-ageout ageout | global-limit limit

undo snmp-agent notification-log global-ageout [ ageout ] | global-limit [ limit ]

Parameters


global-ageoutageout

Specifies the aging time oftrap logs

The value can be 0 or an integer thatranges from 12 to 36 in hours Thedefault value is 24 The value 0indicates that trap logs are never agedout

global-limit limit Specifies the maximumnumber of trap logs that canbe saved in the trap log buffer

The value is an integer that ranges from1 to 5000

Views

System view

Default Level

3 Management level



8622



Usage Guidelines

Usage Scenario

If notification logs in the log buffer do not need to be aged you can set the aging time of thesenotification logs to 0

If the number of notification logs saved to the log buffer within the aging time exceeds thelimit new notification logs can still be saved but overwrites the earlier logs in the log buffer

Precautions

If the size of the log buffer is excessively large more network resources are consumed Youare therefore recommended to set the size of the log buffer to a reasonable value

NOTE

Only Inform logs are saved to the log buffer trap logs are not saved to the log buffer

Example

Set the aging time of trap logs to 36 hours

ltHUAWEIgt system-view[HUAWEI] snmp-agent notification-log global-ageout 36

Set the maximum number of trap logs that can be saved in the trap log buffer to 1000

ltHUAWEIgt system-view[HUAWEI] snmp-agent notification-log global-limit 1000

Related Topics1619 display snmp-agent notification-log16134 snmp-agent notification-log enable

16134 snmp-agent notification-log enable

Function

The snmp-agent notification-log enable command enables the notification logging function

The undo snmp-agent notification-log enable command disables the notification loggingfunction

By default the notification logging function is disabled

Format

snmp-agent notification-log enable

undo snmp-agent notification-log enable

Parameters

None



8623



Views

System view

Default Level

3 Management level

Usage Guidelines

When the route from a network element to the NMS is unreachable because of a link failurebetween the network element and NMS the network element does not send any SNMPnotifications to the NMS If the notification logging function is enabled the network elementrecords trap logs When the link between the network element and NMS recovers the NMScan obtain the trap logs recorded when the link was faulty

Only informs are recorded in trap logs and traps are not recorded

After the notification logging function is enabled the system records informs in trap logs ineither of the following conditions

l No ACK message is received after an inform in the notification queue is retransmittedthe specified number of times

l Earliest informs are discarded because the number of notifications in the notificationqueue exceeds the limit The system records the discarded informs in trap logs

Example

Enable the notification logging function

ltHUAWEIgt system-view[HUAWEI] snmp-agent notification-log enable


16135 snmp-agent notify-filter-profile

Function

The snmp-agent notify-filter-profile command creates or updates a trap filter profile

The undo snmp-agent notify-filter-profile command deletes a trap filter profile

By default no trap is filtered

Format

snmp-agent notify-filter-profile included | excluded profile-name oid-tree

undo snmp-agent notify-filter-profile [ included | excluded ] profile-name



8624



Parameters


included Includes the specified MIB subtree -

excluded Excludes the specified MIB subtree -

profile-name Specifies the name of a trap filterprofile


oid-tree Specifies the OID for the MIBsubtree oid-tree can be the OID(such as 14531) or the name (suchas system) of the subtree

The value is a string of 1 to 255 case-sensitive characters without spacesNOTE

It must be a valid MIB subtree

ViewsSystem view


Usage GuidelinesTo filter the traps sent to a destination host run the snmp-agent notify-filter-profilecommand to configure a trap filter profile and specify the MIB object to be filtered in theprofile

The snmp-agent notify-filter-profile command creates or updates a trap filter profile Thevalue of oid-tree can be an OID or a subtree name An OID can contain asterisks () aswildcards An asterisk () cannot be placed at the beginning or end of the OID string

NOTEIf no trap filter profile is configured all traps are sent to the destination host

Example Configure a trap filter profile named tmpltHUAWEIgt system-view[HUAWEI] snmp-agent notify-filter-profile included tmp 13614

Related Topics16110 display snmp-agent notify-filter-profile



8625



16136 snmp-agent packet contextengineid-check enable

FunctionThe snmp-agent packet contextengineid-check enable command enables the device tocheck consistency between the contextEngineID on the NMS and the local engine ID

The undo snmp-agent packet contextengineid-check enable command disables the devicefrom checking consistency between the contextEngineID on the NMS and the local engineID

By default the device does not check consistency between the contextEngineID on the NMSand the local engine ID

Formatsnmp-agent packet contextengineid-check enable

undo snmp-agent packet contextengineid-check enable

ParametersNone

ViewsSystem view



If the device does not check consistency between the contextEngineID on the NMS and thelocal engine ID the NMS can connect to the device even if the contextEngineID is differentfrom the local engine ID

To improve system security run the snmp-agent packet contextengineid-check enablecommand to enable the device to check consistency between the contextEngineID on theNMS and the local engine ID


After this function is enabled an NMS cannot connect to the device if the contextEngineIDon the NMS is different from the local engine ID

Precautions

This consistency check function applies only to SNMPv3

Example Enable the consistency check between the contextEngineID and local engine ID



8626



ltHUAWEIgt system-view[HUAWEI] snmp-agent packet contextengineid-check enable

16137 snmp-agent packet max-size

FunctionThe snmp-agent packet max-size command sets the maximum size of an SNMP message

The undo snmp-agent packet max-size command restores the default setting

By default the maximum size of an SNMP message is 12000 bytes

Formatsnmp-agent packet max-size byte-count

undo snmp-agent packet max-size

Parameters


byte-count Specifies the maximum size of anSNMP message that the SNMP agentcan receive and send

The value is an integer that rangesfrom 484 to 17940 in bytes Thedefault value is 12000

ViewsSystem view



You are recommended to run the snmp-agent packet max-size command to set the maximumsize of an SNMP message that the SNMP agent receives or sends according to the networkcondition

By increasing the maximum size of an SNMP message you can prevent the NMS fromobtaining the incomplete information about the device status

By decreasing the maximum size of an SNMP message you can prevent the NMS or devicefrom discarding an SNMP message because its size exceeds the processing capability of theNMS or device

Precautions

You need to increase the size of an SNMP message according to the network conditionOtherwise the transmission efficiency of SNMP messages is affected

You are advised to use the default value



8627



The maximum size set through the snmp-agent packet max-size command takes effect forthe SNMP messages of all SNMP versions

Example

Set the maximum size of an SNMP message that the SNMP agent can receive or send to1042 bytes

ltHUAWEIgt system-view[HUAWEI] snmp-agent packet max-size 1042

16138 snmp-agent packet-priority

Function

The snmp-agent packet-priority command sets the priority of SNMP messages

The undo snmp-agent packet-priority command restores the default priority of SNMPmessages

By default the priority of SNMP messages is 6

Format

snmp-agent packet-priority snmp | trap priority-level

undo snmp-agent packet-priority snmp | trap

Parameters


snmp Sets the priority of common SNMPmessages (excluding trap messages)includingl Get-Response packetsl Set-Response packets

-

trap Sets the priority of SNMP trap messagesincludingl Trap packetsl Inform packets

-

priority-level Specifies the priority of SNMPmessages

The value is an integer that rangesfrom 0 to 7 The default value is6 The value 0 indicates the lowestpriority and the value 7 indicatesthe highest priority

Views

System view



8628



Default Level

3 Management level

Usage Guidelines

This command sets the priority of SNMP messages in transmission The priority determinesthe priority of IP packets in which SNMP messages are encapsulated This command can beused in the following situations

l To prevent traps from being discarded increase the priority of SNMP trap messages sothat traps can be successfully sent to the NMS

l To improve reliability of MIB operations performed on the device by the NMS increasethe priority of common SNMP messages excluding SNMP trap messages

l When the network is severely congested and traps are generated frequently reduce thepriority of all SNMP messages including SNMP trap messages

Example

Set the priority of common SNMP messages to 5ltHUAWEIgt system-view[HUAWEI] snmp-agent packet-priority snmp 5

16139 snmp-agent protocol get-bulk timeout

Function

The snmp-agent protocol get-bulk timeout command configures a get-bulk operationtimeout period

The undo snmp-agent protocol get-bulk timeout command restores the default get-bulkoperation timeout period

The default get-bulk operation timeout period is 2 seconds

Format

snmp-agent protocol get-bulk timeout time

undo snmp-agent protocol get-bulk timeout

Parameters


time Specifies a get-bulkoperation timeout period

The value is an integer ranging from 0 to 600 inseconds

NOTEThe value 0 indicates that a get-bulk operation neverexpires



8629



Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

A get-bulk operation allows an NMS to query information about multiple managed devices ata time equaling multiple get-next operations

If an NMS requests many data through a get-bulk operation a long time is required to obtainthe data You can run the snmp-agent protocol get-bulk timeout command to change theget-bulk operation timeout period

Precautions

You are not advised to change the get-bulk operation timeout period The default get-bulkoperation timeout period is recommended To reconfigure a get-bulk operation timeout periodyou must ensure that the configured period is less than an NMSs timeout period

Example

Set the get-bulk operation timeout period to 10 seconds

ltHUAWEIgt system-view[HUAWEI] snmp-agent protocol get-bulk timeout 10

16140 snmp-agent protocol server disable

Function

The snmp-agent protocol server disable command disables the SNMP IPv4 or IPv6listening port

The undo snmp-agent protocol server disable command enables the SNMP IPv4 or IPv6listening port

By default the SNMP IPv4 or IPv6 listening port is disabled

Format

snmp-agent protocol server [ ipv4 | ipv6 ] disable

undo snmp-agent protocol server [ ipv4 | ipv6 ] disable

Parameters


ipv4 Disables the SNMP IPv4 listening port -



8630





Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

To enable alarm sending to the NMS without performing the GetSet operation SNMP portlistening is not required To disable the SNMP IPv4 or IPv6 listening port run the snmp-agent protocol server disable command

This command helps separately manage and control SNMP IPv4 and IPv6 listening ports

If ipv4 or ipv6 is not selected both SNMP IPv4 and IPv6 listening ports are disabled

Precautions

After you disable the SNMP IPv4 or IPv6 listening port using the snmp-agent protocolserver disable command SNMP no longer processes SNMP packets Exercise caution whenyou disable the SNMP IPv4 or IPv6 listening port

Example

Disable the SNMP IPv4 listening portltHUAWEIgt system-view[HUAWEI] snmp-agent protocol server ipv4 disable

16141 snmp-agent protocol source-interface

Function

The snmp-agent protocol source-interface command configures a source interface forreceiving and responding to NM station requests

The undo snmp-agent protocol source-interface command restores the defaultconfiguration

By default the source interface is not configured for receiving and responding to NM stationrequests

Format

snmp-agent protocol source-interface interface-type interface-number

undo snmp-agent protocol source-interface



8631



Parameters


interface-type interface-number

Specifies an interface type andnumber

Currently only loopbackinterfaces are supported

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

By default a source interface is randomly selected for receiving and responding to NM stationrequests which is inconvenient for unified data management To resolve this problem run thesnmp-agent protocol source-interface command to configure a source interface forreceiving and responding to NM station requests

Prerequisites

The interface to be configured as the source interface must have been created and a valid IPaddress must have been assigned to this interface If the interface to be configured as thesource interface is not created or a valid IP address is not assigned to the interface the snmp-agent protocol source-interface command will not take effect If a valid IP address isassigned to the interface the snmp-agent protocol source-interface command will takeeffect automatically

Precautions

If the interface on which the snmp-agent protocol source-interface command is configuredis deleted or an address is changed or deleted on the interface SNMP configurations will notbe affected

After SNMP is bound to the source interface SNMP listens only this interface through whichthe NMS communicates with the device If the source interface or its IP address is deletedSNMP will stop receiving IP packets and therefore communication between the NMS anddevices will interrupt After the source interfaces IP address is changed the NMS cancommunicate with devices only through the new IP address

Example

Configure loopback 1 as a source interface for receiving and responding to NM stationrequestsltHUAWEIgt system-view[HUAWEI] snmp-agent protocol source-interface Loopback 1



8632



16142 snmp-agent protocol server message queue

FunctionThe snmp-agent protocol server message queue command configures the size of a packetqueue that can be received by an SNMP agent

The snmp-agent protocol server message queue command restores the default size

By default the packet queue that can be received by an SNMP agent contains 30 packets

Formatsnmp-agent protocol server message queue message-queue

undo snmp-agent protocol server message queue

Parameters


message-queue Specifies the size of a packet queue The value is an integer ranging from10 to 100

ViewsSystem view


Usage GuidelinesIf some packets are discarded when the number of packets in the packet queue that can bereceived by an SNMP agent has reached the upper limit run the snmp-agent protocol servermessage queue command to adjust the queue size

Example Configure the packet queue that can be received by an SNMP agent to contain 50 packets atmost

ltHUAWEIgt system-view[HUAWEI] snmp-agent protocol server message queue 50

16143 snmp-agent statistics mib disable

FunctionThe snmp-agent statistics mib disable command disables the statistics function about theNMSs operations on MIB objects

The undo snmp-agent statistics mib disable command restores the default statistics status



8633



By default the statistics function about the NMSs operations on MIB objects is enabled

NOTE


Formatsnmp-agent statistics mib disable

undo snmp-agent statistics mib disable

ParametersNone

ViewsSystem view



An NMS performs operations on MIB objects to manage devices Currently SNMP supportsthe statistics function about these operations

By default the statistics function is enabled To disable this function due to some reasons forexample high CPU usage caused by collecting statistics about the NMS accessing MIBobjects run the snmp-agent statistics mib disable command

Follow-up Procedure

Run the display snmp-agent statistics mib command to check statistics about the NMSsoperations on MIB objects


Precautions

After you run the snmp-agent statistics mib disable command the statistics function isdisabled but statistics that have been collected are not deleted

Example Disable the statistics function about the NMSs operations on MIB objects

ltHUAWEIgt system-view[HUAWEI] snmp-agent statistics mib disable

Related Topics16112 display snmp-agent statistics mib



8634




16144 snmp-agent sys-info

Function

The snmp-agent sys-info command sets the SNMP system information

The undo snmp-agent sys-info command restores the default setting

By default the system maintenance information is RampD Beijing Huawei TechnologiescoLtd the system location is Beijing China and the version is SNMPv3

Format

snmp-agent sys-info contact contact | location location | version v1 | v2c | v3 |all

undo snmp-agent sys-info contact | location | version v1 | v2c | v3 | all

Parameters


contact contact Indicates contact information ofsystem maintenance

The value is a string of 1 to225 case-sensitive charactersthat can contain spaces

location location Indicates the location of a device The value is a string of 1 to255 case-sensitive charactersthat can contain spaces

version v1 | v2c |v3 | all

Indicates the SNMP versionl v1 SNMPv1 is enabledl v2c SNMPv2c is enabledl v3 SNMPv3 is enabledl all SNMPv1 SNMPv2c and

SNMPv3 are enabled

-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario



8635



To configure the contact information for the managed node you can run the snmp-agent sys-info contact command in the system If a device fails maintenance personnel can contact thevendor for device maintenance

To configure the physical location of the node you can run the snmp-agent sys-info locationcommand in the system

To configure features in a specified version you can run the snmp-agent sys-info versioncommand to set the corresponding SNMP version in the system SNMPv1 or SNMPv2c is notsecure enough Using SNMPv3 is recommended

SNMPv1l Community-name-based access controll MIB-view-based access control

SNMPv2cl Community-name-based access controll MIB-view-based access controll Supporting Inform messages

Besides inheriting basic SNMPv2c operations SNMPv3 defines a management architecturewhich introduces a User-based Security Model (USM) to provide users with a more secureaccess mechanisml User groupl Group-based access controll User-based access controll Authentication and encryption mechanisms

NOTE

Use display snmp-agent sys-info command to view the information of the system maintenance thephysical location of the node and the SNMP version

Precautions

A lack of authentication capabilities in SNMPv1 and SNMPv2c results in vulnerability tosecurity threats so SNMPv3 is recommended

Example Set the contact information of the system maintenance as call Operator at 010-12345678

ltHUAWEIgt system-view[HUAWEI] snmp-agent sys-info contact call Operator at 010-12345678

Set the location of a device as shanghai China

ltHUAWEIgt system-view[HUAWEI] snmp-agent sys-info location shanghai China

Set the current SNMP version used by the system to v2c

ltHUAWEIgt system-view[HUAWEI] snmp-agent sys-info version v2c

Related Topics16113 display snmp-agent sys-info



8636



16145 snmp-agent target-host inform

Function

The snmp-agent target-host inform command sets the target host for receiving Informmessages

The undo snmp-agent target-host command cancels the target host set to receive Informmessages

By default the target host for receiving Inform messages is not set

Format

snmp-agent target-host inform address udp-domain ip-address [ udp-port port-number |source interface-type interface-number | [ vpn-instance vpn-instance-name | public-net ] ]

params securityname security-name | cipher security-name v2c [ notify-filter-profileprofile-name | ext-vb ]


params securityname security-name v3 [ authentication | privacy ] [ notify-filter-profileprofile-name | ext-vb ]

undo snmp-agent target-host ip-address securityname security-name | cipher security-name [ vpn-instance vpn-instance-name ]

undo snmp-agent target-host inform address udp-domain ip-address [ udp-port port-number | source interface-type interface-number | [ vpn-instance vpn-instance-name |public-net ] ] params securityname security-name | cipher security-name

Parameters


address Indicates the address of the target host forreceiving SNMP Inform messagesNOTE

The IP address specified by address and thesecurity name specified by securitynametogether identify a target host

-


Specifies the IP address of a specifiedtarget host with the transmission domainbeing based on UDP

It is dotted decimal notation

udp-port port-number

Specifies the number of the UDP port forreceiving Inform messages

The value is an integerranging from 0 to 65535The default value is 162

source interface-type interface-number

Specifies the source interface for sendingInform messages

-



8637





Specifies the name of a VPN instanceNOTE

On a VPN network you need to use the VPNinstance specified by vpn-instance IPaddress and security name to identify a targethost

The value is a string of 1 to31 case-sensitive charactersspaces not supported Whendouble quotation marks areused around the stringspaces are allowed in thestring

public-net Connects the NMS host on the publicnetwork

-

params Indicates information about the targethost that generates SNMP notifications

-


Specifies the user security namedisplayed on the NMS

For SNMPv3 securityname must beconfigured as the user namesecurityname configured on the hostneeds to be the same as that configuredon the NMS or the NMS cannot receivethe trap messages sent from the host

For SNMPv1 and SNMPv2c the NMScan receive trap messages from all hostswithout having securitynameconfigured securityname is used todistinguish multiple hosts that generatetrap messages



Indicates the unencrypted or encryptedstring of security name

The value is a string of 1 to32 32 48 56 or 68 case-sensitive characters withoutspaces When doublequotation marks are usedaround the string spaces areallowed in the stringl When the community

name is a string of 1 to32 characters the stringis processed as plain textby default and will beencrypted

l When the communityname is a string of 32 4856 or 68 characters thestring is processed ascipher text by defaultand the system willdetermine whether thestring can be parsed



8638




v2c Indicates the SNMP version v2c indicates SNMPv2c

v3 Indicates the SNMP version v3 indicates SNMPv3

authentication |privacy

Specifies the security model authentication authenticates SNMP

messages without encryptionl privacy authenticates and encrypts

SNMP messages

This parameter takes effect only inSNMPv3

-

notify-filter-profile profile-name

Specifies the filtering view name The value is a string of 1 to32 case-sensitive charactersspaces not supported Whendouble quotation marks areused around the stringspaces are allowed in thestring



8639




ext-vb Indicates that traps sent to a target hostcarry extended bound variables

If a Huawei data communication deviceextends the trap objects defined in thepublic MIB you can configure thisparameter to determine whether trapssent to the NMS carry extended boundvariables

l If this parameter is not configured thetraps sent from the Huawei datacommunication device do not carryextended bound variablesIf you are using a third-party NMStool you are not advised to configurethis parameter which ensures that theNMS tool can receive alarms sentfrom the Huawei deviceBy default a trap sent from a Huaweidata communication device does notcarry extended bound variables

l If this parameter is configured thetraps sent from the Huawei datacommunication device carry extendedbound variablesIf you are using a Huawei NMS toolyou are advised to configure thisparameter which allows you to viewmore information carried in a trap

-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

To set the target host to receive SNMP notifications you can run the snmp-agent target-hostinform command When informs are sent to notify the NMS of the network status you canconfigure the engine ID for the NMS to ensure that the NMS can receive informs The NMSreceives an inform and returns an ACK message to the SNMP agent only if the engine IDcontained in the Inform message and actual engine ID are the same If the IDs areinconsistent the NMS discards the inform



8640



If there are multiple target hosts you need to run the snmp-agent target-host informcommand on each target host If the snmp-agent target-host inform command is executedfor multiple times on the target host only the last successful operation takes effect Forexample if you run the snmp-agent target-host inform command twice on a target host thesecond operation overwrites the previous one

The system supports the configurations of 20 hosts for receiving traps and informs

The descriptions of the command parameters are as followsl udp-port The default UDP port number is 162 In some special cases (for example port

mirroring is configured to prevent a well-known port from being attacked) the parameterudp-port can be used to specify a non-well-known UDP port number This ensurescommunication between the NMS and managed device

l vpn-instance If the alarms sent from the managed device to the NMS need to betransmitted over a private network the parameter vpn-instance vpn-instance-nameneeds to be configured to specify a VPN that takes over the sending task

l securityname Identifies the alarm sender which helps you learn the alarm source

NOTE

Ensure that the security-name value is the same as the created user name otherwise the NMScannot access the device


After the snmp-agent target-host trap command is executed no matter whether a trap sentfrom the SNMP agent reaches the NMS the SNMP agent deletes the trap to reduce theresource consumption

After the snmp-agent target-host inform command is executed the SNMP agent aftersending an Inform message waits for an Inform ACK message from the NMS and willretransmit the same Inform message only when no Inform ACK message is received from theNMS within the specified period If the SNMP agent does not receive the inform ACKmessage from the NMS during the retransmission period the SNMP agent deletes this informmessage from the trap queue This ensures that the NMS can receive the SNMP Informmessages to the maximum extent The transmission of Inform messages however consumesmore resources than that of traps

Precautions

To enable a switch to propagate Inform messages you need to run at least one of the twocommands namely snmp-agent target-host inform on the switch

Ensure that the security level of a trap host is not higher than that of the user specified bysecurityname and not lower than that of the user group Otherwise the trap host cannot sendtrap messages properly

The user security level can be (in descending order)l Level 1 privacy (authentication and encryption)l Level 2 authentication (without encryption)l Level 3 noauthentication (no authentication or encryption)

The security level of a user group must be not higher than that of a trap host and the securitylevel of a trap host must be not higher than that of a userl If the security level of the user group is privacy the security levels of the trap host and

user must also be privacy



8641



l If the security level of the user group is authentication the security level of the trap hostmust also be authentication and the security level of the user can be authentication orprivacy

l If the security levels of the user group and trap host are authentication and privacyrespectively the security level of the user must be privacy

l If the security levels of the user group and trap host are both noauthentication thesecurity level of the user can be noauthentication authentication or privacy

l If the security levels of the user group and trap host are noauthentication andauthentication respectively the security level of the user can be authentication orprivacy

l If the security levels of the user group and trap host are noauthentication and privacyrespectively the security level of the user must be privacy


Example Configure alarms to be sent in inform mode set the security name of the host to 123 andprotocol version to SNMPv2c and send alarms to the NMS host with the IP address of19216801

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable[HUAWEI] snmp-agent target-host inform address udp-domain 19216801 params securityname 123 v2c

Related Topics16114 display snmp-agent target-host16149 snmp-agent trap enable

16146 snmp-agent target-host trap

FunctionThe snmp-agent target-host trap command configures the target host for receiving SNMPtraps

The undo snmp-agent target-host command deletes the target host configuration forreceiving SNMP traps

By default the target host is not set

Formatsnmp-agent target-host trap address udp-domain ip-address [ udp-port port-number |source interface-type interface-number | [ public-net | vpn-instance vpn-instance-name ] ] params securityname security-name [ [ v1 | v2c | v3 [ authentication | privacy ] ] | private-netmanager | notify-filter-profile profile-name | ext-vb ]

snmp-agent target-host trap address udp-domain ip-address [ udp-port port-number |source interface-type interface-number | [ public-net | vpn-instance vpn-instance-name ] ]



8642



params securityname cipher security-name [ [ v1 | v2c ] | private-netmanager | notify-filter-profile profile-name | ext-vb ]


undo snmp-agent target-host trap address udp-domain ip-address [ udp-port port-number | source interface-type interface-number | [ public-net | vpn-instance vpn-instance-name ] ] params securityname security-name | cipher security-name

Parameters


address Specifies the address of the target host thatreceives SNMP trapsNOTE


-



-


Specifies the number of ports that receiveSNMP traps



Specifies the source interface for sendingtraps

-


-



On a VPN network you need to use the VPNinstance specified by vpn-instance IP addressand security name to identify a target host

The value is a string of 1 to31 case-sensitivecharacters spaces notsupported When doublequotation marks are usedaround the string spacesare allowed in the string



8643




paramssecuritynamesecurity-name

Specifies the user security name displayedon the NMS

For SNMPv3 securityname must beconfigured as the user namesecurityname configured on the hostneeds to be the same as that configured onthe NMS or the NMS cannot receive thetrap messages sent from the host

For SNMPv1 and SNMPv2c the NMScan receive trap messages from all hostswithout having securityname configuredsecurityname is used to distinguishmultiple hosts that generate trap messages




The value is a string of 1 to32 32 48 56 or 68 case-sensitive characterswithout spaces Whendouble quotation marks areused around the stringspaces are allowed in thestringl When the community

name is a string of 1 to32 characters the stringis processed as plaintext by default and willbe encrypted

l When the communityname is a string of 3248 56 or 68 charactersthe string is processedas cipher text bydefault and the systemwill determine whetherthe string can beparsed

v1 | v2c | v3 Indicates the SNMP versionl v1 SNMPv1l v2c SNMPv2cl v3 SNMPv3If this parameter is not specified thedefault version is SNMPv1

-



8644





Specifies the security model authentication authenticates packets

without encryptionl privacy authenticates and encrypts

SNMP messages


-

private-netmanager

Indicates the Huawei NMS as the targethost receiving a trap When a HuaweiNMS is deployed and this parameter isconfigured a trap sent to the NMScontains more information such as thetrap type sequence of the trap andsending time

-


Specifies the filtering view name The value is a string of 1 to32 case-sensitivecharacters spaces notsupported When doublequotation marks are usedaround the string spacesare allowed in the string



8645





If a Huawei data communication deviceextends the trap objects defined in thepublic MIB you can configure thisparameter to determine whether traps sentto the NMS carry extended boundvariables

l If this parameter is not configured thetraps sent from the Huawei datacommunication device do not carryextended bound variablesIf you are using a third-party NMStool you are not advised to configurethis parameter which ensures that theNMS tool can receive alarms sent fromthe Huawei deviceBy default a trap sent from a Huaweidata communication device does notcarry extended bound variables


-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

SNMP notifications can be classified into traps and inform messages Trap messages are lessreliable than inform messages because the NMS does not send any acknowledgment when itreceives a trap In this case the sender cannot verify whether the trap has been receivedInforms are configured with an acknowledgment mechanism and therefore are reliable

To configure multiple target hosts you must run the snmp-agent target-host trap commandon each target host If you run the snmp-agent target-host trap command for multiple times



8646



on a host only the latest configuration takes effect For example if you configure the trapfunction for a host that has been configured with trap the second configuration takes effect


You can select parameters based on the following rulesl The default destination UDP port number is 162 Upon special needs such as prventing

well-known ports from being attacked configure the parameter udp-port to change theUDP port number to a non-well-known port number This ensures secure communicationbetween the NMS and managed devices

l If you want the managed devices to send traps to the NMS through the VPN networkconfigure the parameter vpn-instance vpn-instance-name and specify a VPN instance

l The parameter securityname identifies devices that send traps on the NMS

NOTE




After the snmp-agent target-host inform command is executed the SNMP agent aftersending an inform waits for an inform ACK message from the NMS and the same inform isretransmitted only when no inform ACK message is received from the NMS within thespecified period If the SNMP agent does not receive the inform ACK message from the NMSduring the retransmission period the SNMP agent deletes this inform from the trap queueThis ensures that the NMS can receive the SNMP traps to the maximum extent Thetransmission of traps however consumes fewer resources than that of informs

Precautions




user must also be privacyl If the security level of the user group is authentication the security level of the trap host

must also be authentication and the security level of the user can be authentication orprivacy





8647





Before traps are filtered using the snmp-agent target-host trap command run the snmp-agent notify-filter-profile command to define the parameter notify-filter-profile The snmp-agent notify-filter-profile command creates or updates the trap filtering rules A devicefilters traps to be sent to the destination host and sends only the traps that meet the filteringrules to the destination host

NOTEIf the trap filtering is not configured using the parameter notify-filter-profile all traps will be sent to thedestination host

After you run the set net-manager vpn-instance command to configure a VPN instance usedby the NMS note the followingl If public-net or vpn-instance is not configured the system accesses the NMS host in the

VPN instance used by the NMSl If public-net is configured the system accesses a host generating traps on a public

networkThe VPN instance configured for the NMS host that must be the same as the VPN instancebound to the source interface on the NMS host Otherwise traps may fail to be sent

For SNMPv1 and SNMPv2c when a user with a level lower than the level configured usingthis command queries the securityname configured using the display this or display current-configuration command the securityname is displayed as asterisks ()

Example Allow the SNMP agent to send SNMP traps to the target host with the IP address of10111

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable[HUAWEI] snmp-agent target-host trap address udp-domain 10111 params securityname comaccess

Allow the SNMP agent to send SNMP traps to the Huawei NMS with the IP address of10111

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable[HUAWEI] snmp-agent target-host trap address udp-domain 10111 params securityname comaccess private-netmanager




8648



16147 snmp-agent target-host trap ipv6

FunctionThe snmp-agent target-host trap ipv6 command configures a target host to receive SNMPtrap messages

The undo snmp-agent target-host ipv6 command deletes the configuration of a target host toreceive SNMP trap messages

By default the target host that receives SNMP trap messages is not set

Formatsnmp-agent target-host trap ipv6 address udp-domain ipv6-address [ udp-port port-number ] params securityname security-name [ [ v1 | v2c | v3 [ authentication | privacy ] ] |private-netmanager | notify-filter-profile profile-name | ext-vb ]

snmp-agent target-host trap ipv6 address udp-domain ipv6-address [ udp-port port-number ] params securityname cipher security-name [ [ v1 | v2c ] | private-netmanager |notify-filter-profile profile-name | ext-vb ]

undo snmp-agent target-host ipv6 ipv6-address securityname security-name | ciphersecurity-name

undo snmp-agent target-host trap ipv6 address udp-domain ipv6-address [ udp-port port-number ] params securityname security-name | cipher security-name

Parameters


ipv6 address Sets the IPv6 address of the target host usedto receive SNMP trap messages

-

udp-domain Indicates that trap messages are sent to thetarget host through the User DatagramProtocol (UDP)

-

ipv6-address Specifies the IPv6 address of the targethost

-


Specifies the port number used to receivetrap messages

The value is an integerthat ranges from 0 to65535 The default valueis 162



8649





Specifies the SNMP security name that isdisplayed as the user name on the NMS

For SNMPv3 securityname must beconfigured as the user name securitynameconfigured on the host needs to be the sameas that configured on the NMS or the NMScannot receive the trap messages sent fromthe host

For SNMPv1 and SNMPv2c the NMS canreceive trap messages from all hostswithout having securityname configuredsecurityname is used to distinguishmultiple hosts that generate trap messages

The value is a string of 1to 32 case-sensitivecharacters spaces notsupported When doublequotation marks are usedaround the string spacesare allowed in the string



The value is a string of 1to 32 32 48 56 or 68case-sensitive characterswithout spaces Whendouble quotation marksare used around the stringspaces are allowed in thestringl When the community

name is a string of 1 to32 characters thestring is processed asplain text by defaultand will be encrypted

l When the communityname is a string of 3248 56 or 68characters the string isprocessed as ciphertext by default and thesystem will determinewhether the string canbe parsed

v1 | v2c | v3 Specifies the SNMP versionl v1 indicates SNMPv1l v2c indicates SNMPv2cl v3 indicates SNMPv3If no SNMP version is specified SNMPv1is used by default

-



8650





Specifies the security mode for SNMP trapmessagesl authentication indicates that the

SNMP trap messages are authenticatedbut not encrypted

l privacy indicates that SNMP trapmessages are authenticated andencrypted

-

private-netmanager

Indicates that the target host is a HuaweiNMS Specify this parameter when aHuawei NMS is used This parameterenables trap messages sent to the NMS tocontain more information including typessequence numbers and transmission timeof trap messages

-


Specifies the name of a trap filter profile The value is a string of 1to 32 case-sensitivecharacters spaces notsupported When doublequotation marks are usedaround the string spacesare allowed in the string



8651




ext-vb Indicates that trap messages sent to a targethost carry extended bound variables

If alarm objects defined in public MIBs areextended on a Huawei data communicationdevice you can use ext-vb to determinewhether the trap messages sent to the NMScarry extended bound variables

l If ext-vb is not specified trap messagessent from the device do not carryextended bound variablesWhen a third-party NMS is used youare advised not to specify the ext-vbparameter so that the third-party NMScan receive trap messages from Huaweidata communication devicesBy default trap messages sent from aHuawei data communication device donot carry extended bound variables

l If ext-vb is specified trap messagessent from the device carry extendedbound variablesThis parameter is recommended when aHuawei NMS is used so that moreinformation can be transmitted in trapmessages

-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

This command is used to configure an IPv6 NMS host so that traps can be sent to the hostusing the IPv6 protocol


Precautions

The S1720ampS2700ampS5700ampS6720 cannot send traps to a VPN interface using the IPv6protocol



8652













Example

Configure an IPv6 NMS host that uses SNMP v3 Set the security name to Huawei andconfigure traps to be authenticated and encrypted

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enableWarning All switches of SNMP trapnotification will be open Continue [YN]y[HUAWEI] snmp-agent target-host trap ipv6 address udp-domain FC001 params securityname Huawei v3 privacy

16148 snmp-agent trap disable

Function

The snmp-agent trap disable command disables the trap function for all features

The undo snmp-agent trap disable command restores the trap function for all features to thedefault status

By default the display snmp-agent trap all command can be used to view the status of thetrap function for all features



8653



Format

snmp-agent trap disable

undo snmp-agent trap disable

Parameters

None

Views

System view

Default Level


Usage Guidelines

To enable the trap function for all modules run the snmp-agent trap enable command Toenable the trap function for a specified module run the snmp-agent trap enable feature-name command

l To disable the trap function for all modules run the snmp-agent trap disable command

l To restore the trap function for all features to the default status run the undo snmp-agent trap disable or undo snmp-agent trap enable command

NOTE

To disable the trap function for a specified module run the undo snmp-agent trap enable feature-name command

Example

Disable the trap function for all features

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap disable

Related Topics16115 display snmp-agent trap all

16149 snmp-agent trap enable

Function

The snmp-agent trap enable command enables the switch to send traps

The undo snmp-agent trap enable command restores the default setting

The default configuration of the snmp-agent trap enable command can be checked by thedisplay snmp-agent trap all command



8654



Format

snmp-agent trap enable

undo snmp-agent trap enable

Parameters

None

Views

System view

Default Level


Usage Guidelinesl To enable the trap function for all modules run the snmp-agent trap enable command


l To enable the trap function for a specified module run the snmp-agent trap enablefeature-name feature-name command

l To disable the trap function for a specified module run the undo snmp-agent trapenable feature-name feature-name command

l To enable a specified trap for a specified module run the snmp-agent trap enablefeature-name feature-name trap-name trap-name command

l To disable a specified trap for a specified module run the undo snmp-agent trapenable feature-name feature-name trap-name trap-name command

l To restore the default trap status of all modules run the undo snmp-agent trap disableor undo snmp-agent trap enable command

To enable a device to send traps you need to run at least the snmp-agent target-host informcommand or snmp-agent target-host trap command on the device to specify the destinationaddress of the traps

Example

Enable the switch to send traps

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable




8655



16150 snmp-agent trap enable feature-name

Function

The snmp-agent trap enable feature-name command enables a specified trap for a specifiedfeature

The undo snmp-agent trap enable feature-name command disables a specified trap for aspecified feature

The default configuration of the snmp-agent trap enable feature-name command can bechecked using the display snmp-agent trap all command

Format

snmp-agent trap enable feature-name feature-name [ trap-name trap-name ]

undo snmp-agent trap enable feature-name feature-name [ trap-name trap-name ]

Parameters


feature-name Specifies the name of the feature that generates traps -

trap-name trap-name Specifies the name of a trap -

Views

System view

Default Level


Usage Guidelines

If trap-name trap-name is not specified the switch enables all traps about a specified featureafter the snmp-agent trap enable feature-name feature-name command is used

You can run the display snmp-agent trap feature-name all command to check theconfiguration result

Example

Enable the switch to send the fallingalarm trap about RMON to the NMS

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable feature-name rmon trap-name fallingalarm

Related Topics16115 display snmp-agent trap all16116 display snmp-agent trap feature-name all



8656



16151 snmp-agent trap enable feature-name snmp

FunctionThe snmp-agent trap enable feature-name snmp command enables an SNMP trap

The undo snmp-agent trap enable feature-name snmp command disables an SNMP trap

By default the coldStart and warmStart traps are enabled and the authenticationFailure trap isdisabled

Formatsnmp-agent trap enable feature-name snmp [ trap-name trap-name ]

undo snmp-agent trap enable feature-name snmp [ trap-name trap-name ]

Parameters


trap-name trap-name Specifies the name of a trap The traps are as followsl authenticationFailurel coldstartl hwsnmplockthresholdl hwsnmplockthresholdresumel warmstart

ViewsSystem view

Default Level2 Configuration level

Usage GuidelinesThe snmp-agent trap enable feature-name snmp command is used to enable an SNMP trapAfter that the trap generated during the device running will be sent to the NMS At presentthe following SNMP traps are supportedl coldStart This trap is generated when the device is powered off and restartedl warmStart This trap is generated when the status of SNMP agent is changed from

disable to enablel authenticationFailure This trap is generated when a user uses an incorrect community

name and is unable to log in to the devicel hwSNMPLockThreshold This trap is generated when the number of users who were

locked due to an authentication failure reached the upper thresholdl hwSNMPLockThresholdResume This trap is generated when the number of users who

were locked due to an authentication failure fell below the lower threshold



8657



You can run the display snmp-agent trap feature-name snmp all command to check theconfiguration result

Example

Enable the SNMP authenticationFailure trap

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable feature-name snmp trap-name authenticationFailure

Related Topics16117 display snmp-agent trap feature-name snmp all

16152 snmp-agent trap life

Function

The snmp-agent trap life command sets the lifetime of trap messages When the lifetimeexpires the trap messages are discarded

The undo snmp-agent trap life command cancels the current settings

By default the lifetime of trap messages is 300 seconds

Format

snmp-agent trap life seconds

undo snmp-agent trap life

Parameters


seconds Specifies the lifetime of trapmessages

The value is an integer that ranges from 1 to2592000 in seconds The default value is 300

Views

System view

Default Level

3 Management level

Usage Guidelines

When the lifetime expires the trap messages are discarded

Example

Set the lifetime of trap messages to 60 seconds



8658



ltHUAWEIgt system-view[HUAWEI] snmp-agent trap life 60

Related Topics16149 snmp-agent trap enable16146 snmp-agent target-host trap16145 snmp-agent target-host inform

16153 snmp-agent trap queue-size

Function

The snmp-agent trap queue-size command sets the queue length of the trap messages sent toa target host

The undo snmp-agent trap queue-size command cancels the current settings

The default value is 1000

Format

snmp-agent trap queue-size size

undo snmp-agent trap queue-size

Parameters


size Specifies the queue length oftrap messages

The value is an integer that ranges from 1 to1000 The default value is 1000

Views

System view

Default Level

3 Management level

Usage Guidelines

When a large number of trap messages need to be sent in a certain period of time packets willbe lost if the queue length of trap messages is insufficient The queue length can be adjustedto reduce the packet loss ratio

When the lifetime of trap messages is long the queue length of trap messages needs to belengthened If the queue length is not lengthened packet loss will occur

Example

Set the queue length of the trap messages sent to the target host to 200



8659



ltHUAWEIgt system-view[HUAWEI] snmp-agent trap queue-size 200

Related Topics16149 snmp-agent trap enable16146 snmp-agent target-host trap16145 snmp-agent target-host inform16152 snmp-agent trap life

16154 snmp-agent trap start-trap resend disable

Function

The snmp-agent trap start-trap resend disable command disables the function of resendingdevice cold-start or warm-start traps

The undo snmp-agent trap start-trap resend disable command restores the default status ofthe function of resending device cold-start or warm-start traps

By default the function of resending device cold-start or warm-start traps is enabled

Format

snmp-agent trap start-trap resend disable

undo snmp-agent trap start-trap resend disable

Parameters

None

Views

System view

Default Level

3 Management level

Usage Guidelines

SNMP uses the resending mechanism for device cold-start or warm-start traps Thismechanism works in the following wayl The system resends a cold-start or warm-start trap for three consecutive times to ensure

that the trap can be sent to the destinationl The first trap that the device sends must be a cold-start or warm-start trap If another

alarm is generated before the cold-start or warm-start trap the system buffers that alarmand sends it only after the cold-start or warm-start trap is sent The system also resendsthe buffered alarm for three consecutive times

If the function of resending device cold-start or warm-start traps is not required any more runthe snmp-agent trap start-trap resend disable command to disable it



8660



Example

Disable the function of resending device cold-start or warm-start traps

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap start-trap resend disable

16155 snmp-agent trap source

Function

The snmp-agent trap source command sets the source interface from which traps are sent

The undo snmp-agent trap source command removes the set source interface configuration

By default source interface is not set

Format

snmp-agent trap source interface-type interface-number

undo snmp-agent trap source

Parameters



Specifies the type and number of the sourceinterface that sends traps

-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

You can run the snmp-agent trap source command to specify the type and number of theinterface on the device from which traps are sent The system specifies the IP address of thisinterface as the source IP address of traps In this way the trap source can be identified on theNMS

Precautions

The source interface that sends traps must have an IP address otherwise the commands willfail to take effect To ensure device security it is recommended that you set the source IPaddress to the local loopback address

The source interface in traps on the device must be the same as the source interface specifiedon the NM station Otherwise the NM station cannot receive traps



8661



Example Specify the IP address of VLANIF100 as the source address of traps

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap source vlanif 100


16156 snmp-agent trap source-port

FunctionThe snmp-agent trap source-port command configures the number of the source port thatsends trap messages

The undo snmp-agent trap source-port command restores the default number of the sourceport that sends trap messages

By default the source port that sends trap messages is a random port

Formatsnmp-agent trap source-port port-num

undo snmp-agent trap source-port

Parameters


port-num Specifies the number of the source portthat sends trap messages

The value is an integer rangingfrom 1025 to 65535

ViewsSystem view



To improve security of network packets run the snmp-agent trap source-port command toconfigure the source port that sends trap messages Therefore the user firewall filters packetsbased on the port number

Precautions



8662



By default a random port is used to send trap messages and no configuration file isgenerated After you configure a specific source port the corresponding configuration file isgenerated If you delete the specified source port no configuration file is generated

If a device sends packets to the NMS in Inform mode and the snmp-agent trap source-portcommand is run to change the source port number SNMP uses the new source port instead ofthe original port to receive response packets from the NMS As a result packets areretransmitted

Example Set the number of the source port that sends SNMP agent trap messages to 1057

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap source-port 1057

16157 snmp-agent trap type

FunctionThe snmp-agent trap type command configures the device to send ENTITYTRAP traps orBASETRAP traps

The undo snmp-agent trap type command restores the default configuration

By default the device sends BASETRAP traps

Formatsnmp-agent trap type base-trap | entity-trap

undo snmp-agent trap type

ParametersParameter Description Settings

base-trap Configures the device tosend BASETRAP traps

-

entity-trap Configures the device tosend ENTITYTRAP traps

-

ViewsSystem view





8663



There are two types of traps for the hardware of the switch BASETRAP and ENTITYTRAP

l The BASETRAP traps are sent when faults occur so they are classified based on faulttypes For example the same BASETRAP trap is sent when a board or a fan is removed

l The ENTITYTRAP traps are classified based on hardware types For example differentENTITYTRAP traps are sent when a board is removed and when a fan is removed

The functions of the two types of traps are similar Select one type of traps based on yourrequirements

Precautions

The following conditions must be met otherwise the device does not send BASETRAP trapsto the NMS

l The trap type is set to base-trap using the snmp-agent trap type command

l The BASETRAP trap function is enabled

The following conditions must be met otherwise the device does not send ENTITYTRAPtraps to the NMS

l The trap type is set to entity-trap using the snmp-agent trap type command

l The ENTITYTRAP trap function is enabled

Example

Configure the device to send BASETRAP traps

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap type base-trap

Related Topics16116 display snmp-agent trap feature-name all16115 display snmp-agent trap all

16158 snmp-agent udp-port

Function

The snmp-agent udp-port command sets the listening port of the SNMP agent

The undo snmp-agent udp-port command restores the default listening port of the SNMPagent

By default the listening port of the SNMP agent is 161

Format

snmp-agent udp-port port-num

undo snmp-agent udp-port



8664



Parameters


port-num Specifies the listening port of theSNMP agent

The value is 161 or an integer that rangesfrom 1025 to 65535

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

The SNMP agent is a proxy process running on a network device By default the SNMPagent listens on port 161 to respond to instructions sent from the NMS In this manner theNMS can manage the network device Fixing the listing port may threaten network securityFor example if all attack packets are sent to this listening port the network is congested

To improve device security run the snmp-agent udp-port command to change the listeningport of the SNMP agent


After you run this command the SNMP agent listens on the new port number The originalSNMP connection with the NMS is torn down and the NMS must use the new port number toconnect to the device

Precautions

The listening port configured on the NMS must be the same as that specified by the snmp-agent udp-port command Otherwise the NMS cannot connect to the device

Example

Set the listening port of the SNMP agent to 1057

ltHUAWEIgt system-view[HUAWEI] snmp-agent udp-port 1057

16159 snmp-agent usm-user

Function

The snmp-agent usm-user command adds a user to an SNMP user group

The undo snmp-agent usm-user command deletes a user from an SNMP user group

By default the SNMP user group has no users added



8665



Formatsnmp-agent [ remote-engineid engineid ] usm-user v3 user-name [ group group-name | aclacl-number ]

snmp-agent [ remote-engineid engineid ] usm-user v3 user-name authentication-mode md5 | sha [ localized-configuration cipher password | cipher password ]

snmp-agent [ remote-engineid engineid ] usm-user v3 user-name privacy-mode des56 |aes128 | aes192 | aes256 | 3des [ localized-configuration cipher password | cipherpassword ]

undo snmp-agent [ remote-engineid engineid ] usm-user v3 user-name [ group | acl |authentication-mode | privacy-mode ]

Parameters


remote-engineidengineid

Specifies the ID of the engine associated with auser

NOTEremote-engineid engineid must be set to the engineID of the destination host that receives alarms Theengine IDs of the source and destination hosts mustbe different

The value is string of10 to 64 hexadecimaldigits It cannot be all0s or all Fs

v3 Indicates that the security mode in v3 isadopted

-

user-name Specifies the name of a user The value is a stringof 1 to 32 case-sensitive charactersspaces not supportedWhen doublequotation marks areused around thestring spaces areallowed in the string

group group-name Specifies the name of the group to which a userbelongs

The value is a stringof 1 to 32 case-sensitive charactersspaces not supportedWhen doublequotation marks areused around thestring spaces areallowed in the string



8666




authentication-mode

Sets the authentication modeNOTE

Authentication is a process in which the SNMPagent (or the NMS) confirms that the message isreceived from an authorized NMS (or SNMP agent)and the message is not changed during transmissionRFC 2104 defines Keyed-Hashing for MessageAuthentication Code (HMAC) an effective tool thatuses the security hash function and key to generatethe message authentication code This tool is widelyused in the Internet HMAC used in SNMP includesHMAC-MD5-96 and HMAC-SHA-96 The hashfunction of HMAC-MD5-96 is MD5 that uses 128-bit authKey to generate the key The hash function ofHMAC-SHA-96 is SHA-1 that uses 160-bit authKeyto generate the key

-

md5 | sha Indicates the authentication protocoll md5 Specifies HMAC-MD5-96 as the

authentication protocoll sha Specifies HMAC-SHA-96 as the

authentication protocol

NOTEThe calculation speed of the HMAC-MD5-96algorithm is faster than that of the HMAC-SHA-96algorithm the HMAC-SHA-96 algorithm is moresecure than the HMAC-MD5-96 algorithm Toensure high security please use the HMAC-SHA-96algorithm

-

privacy-mode Specifies the authentication with encryption

The system adopts the cipher block chaining(CBC) code of the data encryption standard(DES) and uses 128-bit privKey to generate thekey The NMS uses the key to calculate theCBC code and then adds the CBC code to themessage while the SNMP agent fetches theauthentication code through the same key andthen obtains the actual information Like theidentification authentication the encryptionrequires the NMS and the SNMP agent to sharethe same key to encrypt and decrypt themessage

-

des56 | aes128 |aes192 | aes256 |3des

Indicates 3DES AESndash128 AESndash192 AESndash256 or DESndash56 as the encryption protocol

-



8667




localized-configuration

Specifies the localized password configurationmodeNOTE

After authentication and encryption passwords areconfigured through MIB this keyword is displayedin the commands recorded in configuration files

After authentication and encryption passwords areconfigured through command line you are notadvised to use this keyword If this keyword is usedthe cipher text passwords configured later use thelocal format

As a password with the localized-configurationkeyword is related to the engine ID copyingconfigurations with this keyword from one device toanother causes the password to be invalid

-

cipher password Specifies the password The value is a case-insenstive stringwithout spaces Itmust be in cipher textformat with 32 to 108characters Whendouble quotationmarks are usedaround the stringspaces are allowed inthe string

acl acl-number Specifies the ACL numberNOTE

The ACL configured by the acl acl-numberparameter takes effect on both IPv4 and IPv6networks

The value is aninteger that rangesfrom 2000 to 2999

ViewsSystem view




By adopting the user-based security model SNMPv3 eradicates the security defects inSNMPv1 and SNMPv2c and provides two services authentication and encryption The user-



8668



based security model defines three security authentication levels noAuthNoPriv AuthNoPrivand AuthPriv

NOTEThe security authentication level noAuthPriv does not exist This is because the generation of a key isbased on the authentication information and product information

Different from SNMPv1 and SNMPv2c SNMPv3 can implement access control identityauthentication and data encryption through the local processing model and user securitymodel SNMPv3 can provide higher security and confidentiality than SNMPv1 andSNMPv2c The following table lists the difference between SNMPv1 SNMPv2c andSNMPv3

Table 16-19 Comparison in the security of SNMP of different versions

Protocol version User Checksum Encryption Authentication

v1 Adopts thecommunity name

None None

v2c Adopts thecommunity name

None None

v3 Adopts user name-based encryptiondecryption

Yes Yes

The snmp-agent group command can be used to configure the authentication encryptionand access rights for an SNMP group The snmp-agent group command can be used toconfigure the rights for users in a specified SNMP group and bind the SNMP group to a MIBview The MIB view is created through the snmp-agent mib-view command For details seethe usage guideline of this command After an SNMP user group is configured the MIB-view-based access control is configured for the SNMP user group Users cannot accessobjects in the MIB view through the SNMP user group The purpose of adding SNMP usersto an SNMP user group is to ensure that SNMP users in an SNMP user group have the samesecurity level and access control list When you run the snmp-agent usm-user command toconfigure a user in an SNMP user group you configure the MIB-view-based access rights forthe user If an SNMP user group is configured with the AuthPriv access rights you canconfigure the authentication mode and encryption mode when configuring SNMP users Notethat the authentication keys and encryption passwords configured on the NMS and the SNMPagent should be the same otherwise authentication fails

To ensure that the NMS correctly receives the alarm in Inform mode sent by the switch runthe snmp-agent remote-engineid engineid usm-user v3 user-name command to specify theNMS engine ID on the host After the command is run the host encapsulates the NMS engineID in the Authoritative Engine ID field of the SNMPv3 alarm packet before sending the alarmin Inform mode After receiving the alarm the NMS compares the engine ID carried in thereceived packet with its own engine ID If the two IDs match the NMS sends a response tothe alarm host If the two IDs do not match the NMS discards the packet

When the NMS and device are in an insecure network environment for example a networkprone to attacks it is recommended that you configure different authentication password andencryption password to improve security

The device supports a maximum of 20 users



8669




If an SNMP agent is configured with a remote user the engine ID is required during theauthentication If the engine ID changes after the remote user is configured the remote userbecomes invalid

Precautions

The user security level must be higher than or equal to the security level of the SNMP usergroup to which the user is added

The security level of an SNMP user group can be (in descending order)

l Level 1 privacy (authentication and encryption)

l Level 2 authentication (without encryption)

l Level 3 none (neither authentication nor encryption)

The user security level must be higher than the user group level For example if the securitylevel of an SNMP user group is level 1 the security level of the user that is added to the groupmust be level 1 if the security level of an SNMP user group is level 2 the security level ofthe user that is added to the group can be level 1 or level 2

If the user security level is set to neither authentication nor encryption the user only has theread-only permission within MIB-2 (OID 136121)

To add an SNMP user to an SNMP group ensure that the SNMP user group is valid

If you run the snmp-agent usm-user command multiple times only the latest configurationtakes effect

Keep your user name and plain-text password well when creating the user The plain-textpassword is required when the NMS accesses the device

The passwords have the following characteristics

l The password is a string of 8 to 64 case-sensitive characters

l The password must contain at least two of the following characters upper-case characterlower-case character digit and special character

Special characters do not include the question mark () and space

l The password should not contain repeated character strings such as abc123abc123abc123and 123abc123abc

l The password entered in interactive mode is not displayed on the screen

Users of the same name can only belong to one user group If you add a user to a user groupdelete a user from a user group or change a user to another group the operation takes effectfor other users with the same name

To ensure high security do not use the MD5 algorithm for SNMPv3 authentication or use theDES56 or 3DES168 algorithm for SNMPv3 encryption




8670



Example Configure an SNMPv3 user with user name u1 group name g1 authentication mode shaauthentication password 8937561bc encryption mode aes128 and encryption password68283asd

ltHUAWEIgt system-view[HUAWEI] snmp-agent usm-user v3 u1 group g1[HUAWEI] snmp-agent usm-user v3 u1 authentication-mode shaPlease configure the authentication password (8-64) Enter Password Confirm Password [HUAWEI] snmp-agent usm-user v3 u1 privacy-mode aes128Please configure the privacy password (8-64) Enter Password Confirm Password[HUAWEI]

Related Topics16118 display snmp-agent usm-user16126 snmp-agent group

162 RMON and RMON2 Configuration CommandsNOTE

Only S5720EI S5720HI S6720EI and S6720S-EI support RMON2

1621 display rmon alarm

FunctionThe display rmon alarm command displays information about RMON alarm function

Formatdisplay rmon alarm [ entry-number ]

Parameters


entry-number Displays information about the RMON alarmentry with the specified index If no index isspecified information about all alarms isdisplayed

The value is an integerthat ranges from 1 to65535

ViewsAll views




8671



Usage Guidelines

After configuring the RMON alarm thresholds using the rmon alarm command you can runthis command to view the configured alarm variables sampling interval thresholds alarmtriggering condition and last sampled value

Example

Display the RMON alarm configurations

ltHUAWEIgt display rmon alarmAlarm table 1 owned by creator is valid Samples delta value 1361211611141ltetherStatsOctets1gt Sampling interval 5(sec) Rising threshold 1000 (linked with event 1) Falling threshold 100(linked with event 1) When startup enables risingOrFallingAlarm Latest value 0

Table 16-20 Description of the display rmon alarm command output

Item Description

Alarm table entry-number ownedby owner is status

The current status of the alarm entry entry-numbercreated by owner is statusl entry-number alarm entry index corresponding

to the alarmIndex object in alarmTablel owner creator of the entry corresponding to the

alarmOwner object in alarmTablel status row status of the alarm entry with the

specified index corresponding to the alarmStatusin alarmTablendash undercreation invalidndash valid validndash invalid invalid due to hot swapping of the

LPU

Samples delta value Alarm variable namely monitored MIB objectcorresponding to the alarmVariable object inalarmTable

Sampling interval Sampling interval in seconds corresponding to thealarmInterval object in alarmTable

Rising threshold Rising threshold of the alarm table corresponding tothe alarmRisingThreshold object in alarmTableWhen the sampled value reaches or exceeds therising threshold an alarm is generated

Falling threshold Falling threshold of the alarm table correspondingto the alarmFallingThreshold object in alarmTableWhen the sampled value reaches or falls below thefalling threshold an alarm is generated



8672



Item Description

When startup enables Condition that triggers alarms corresponding to thealarmStartupAlarm object in alarmTable When thesampled value exceeds the rising threshold or fallsbelow the falling threshold an alarm is generatedThe values arel risingOrFallingAlarm generating an alarm when

the sampled value exceeds the rising threshold orfalls below the falling threshold

l risingAlarm generating an alarm when thesampled value exceeds the rising threshold

l fallingAlarm generating an alarm when thesampled value falls below the falling threshold

Latest value Latest sampled value corresponding to thealarmValue object in alarmTable

Related Topics16211 rmon alarm

1622 display rmon event

Function

The display rmon event command displays information about RMON events

Format

display rmon event [ entry-number ]

Parameters


entry-number Displays the configuration of the RMON eventwith the specified index If no index is specifiedinformation about all events is displayed


Views

All views

Default Level

1 Monitoring level



8673



Usage GuidelinesAfter configuring the trap or log function for RMON events you can run this command toview the configured event description whether events trigger traps and logs and latest event

Example Display the RMON event configurations

ltHUAWEIgt display rmon eventEvent table 1 owned by Huawei is valid Description null Will cause log when triggered last triggered at 0days 00h24m10s69th

Table 16-21 Description of the display rmon event command output

Item Description

Event table entry-number owned byowner is status

The current status of the event entry entry-number created by owner is statusl entry-number event entry index

corresponding to the eventIndex object ineventTable

l owner creator of the entry correspondingto the eventOwner object in eventTable

l status row status of the event entry with thespecified index corresponding to theeventStatus in eventTablendash undercreation invalidndash valid validndash invalid invalid due to hot swapping of

the LPU

Description Event description corresponding to theeventDescription object in eventTable

Will cause log when triggered Whether events trigger traps or logscorresponding to the eventType object ineventTableThe actions associated with events are asfollowsl none no action is takenl log a log is recorded when an event is

triggeredl trap a trap is sent to the NMS when an

event is triggeredl log-trap a log is recorded and a trap is sent

to the NMS when an event is triggered

last triggered at Latest event time corresponding to theeventLastTimeSent object in eventTable



8674



Related Topics16212 rmon event

1623 display rmon eventlog

Function

The display rmon eventlog command displays details about RMON event logs

Format

display rmon eventlog [ entry-number ]

Parameters


entry-number Displays the log with the specified index If noindex is specified information about all eventlogs is displayed

The value is an integer thatranges from 1 to 65535

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

If you use the rmon event command to specify that a log is recorded for a certain event theevent record is stored in the LogTable The command output includes event index currentevent status time the event triggers a log (calculated based on the number of seconds elapsedsince system initialization or startup) and event description

Example

Display the log of RMON event 1

ltHUAWEIgt display rmon eventlog 1Event table 1 owned by User is valid Generates eventLog 11 at 0days 00h00m07s43th Description The 1361211611141 defined in alarm table 1 less than or equal to 100 with alarm value 0 Alarm sample type is delta Generates eventLog 12 at 0days 00h02m26s43th Description The 1361211611141 defined in alarm table 1 greater than or equal to 1000 with alarm value 10443 Alarm sample type is delta



8675



Table 16-22 Description of the display rmon eventlog command output

Item Description


The current status of the event entry entry-number created by owner is statusl entry-number event log entry index

corresponding to the logEventIndex objectin LogTable



the LPU

Generates eventLog at Log creation time (time elapsed since systemstartup) corresponding to the logTime object inLogTable

Description Event description corresponding to thelogDescription object in LogTable

Related Topics1622 display rmon event16212 rmon event

1624 display rmon history

Function

The display rmon history command displays RMON history sampling information

Format

display rmon history [ interface-type interface-number ]

Parameters


interface-typeinterface-number

Displays RMON history sampling information on thespecified Ethernet interface If this parameter is notspecified RMON history sampling information on allinterfaces is displayed

-



8676



ViewsAll views


Usage GuidelinesAfter configuring RMON history statistics on an interface using the rmon history commandthe system samples packets on the interface periodically The display rmon history commandcan display history sampling information including the number of sampled packets historysampling interval latest sampling information Ethernet interface usage number of CRC errorpackets and total number of packets

Example Display RMON history sampling information

ltHUAWEIgt display rmon historyHistory control entry 1 owned by Creator is valid Samples interface GigabitEthernet001ltifIndex402653698gt Sampling interval 30(sec) with 10 buckets max Last Sampling time 0days 00h09m43s00th Latest sampled values octets 645 packets 7 broadcast packets 7 multicast packets 0 undersize packets 6 oversize packets 0 fragments packets 0 jabbers packets 0 CRC alignment errors 0 collisions 0 Dropped packet 0 utilization 0

Display RMON history sampling information on the specified interface

ltHUAWEIgt display rmon history gigabitethernet 001History control entry 1 owned by Creator is valid Samples interface GigabitEthernet001ltifIndex402653698gt Sampling interval 30(sec) with 10 buckets max Last Sampling time 0days 00h09m43s00th Latest sampled values octets 645 packets 7 broadcast packets 7 multicast packets 0 undersize packets 6 oversize packets 0 fragments packets 0 jabbers packets 0 CRC alignment errors 0 collisions 0 Dropped packet 0 utilization 0 History record Record No1 (Sample time 0days 00h02m30s01th) octets 0 packets 0 broadcast packets 0 multicast packets 0 undersize packets 0 oversize packets 0 fragments packets 0 jabbers packets 0 CRC alignment errors 0 collisions 0 Dropped packet 0 utilization 0



8677



Table 16-23 Description of the display rmon history command output

Item Description

History control entry entry-numberowned by owner is status

The current status of the event entry entry-number created by owner is statusl entry-number history control table entry

index corresponding to thehistoryControlIndex object inhistoryControlTable

l owner creator of the entry correspondingto the historyControlOwner object inhistoryControlTable

l status row status of the history control tableentry with the specified indexcorresponding to the historyControlStatus inhistoryControlTablendash undercreation invalidndash valid validndash invalid invalid due to hot swapping of

the LPU

Samples interface Sampled interface

Sampling interval Sampling interval in seconds corresponding tothe historyControlInterval object inhistoryControlTable The system samplespackets on the interface at this interval

Last Sampling time Latest sampling time corresponding to theetherHistoryIntervalStart object inetherHistoryTable

Latest sampled values Latest sampling result

octets Number of bytes received in a samplinginterval corresponding to theetherHistoryOctets object in etherHistoryTable

packets Number of packets received in a samplinginterval corresponding to the etherHistoryPktsobject in etherHistoryTable

broadcast packets Number of broadcast packets received in asampling interval corresponding to theetherHistoryBroadcastPkts object inetherHistoryTable

multicast packets Number of multicast packets received in asampling interval corresponding to theetherHistoryMulticastPkts object inetherHistoryTable



8678



Item Description

undersize packets Number of undersize packets received in asampling interval corresponding to theetherHistoryUndersizePkts object inetherHistoryTable

oversize packets Number of large packets received in a samplinginterval corresponding to theetherHistoryOversizePkts object inetherHistoryTable

fragments packets Number of undersize and CRC error packetsreceived in a sampling interval correspondingto the etherHistoryFragments object inetherHistoryTable

jabbers packets Number of large and CRC error packetsreceived in a sampling interval correspondingto the etherHistoryJabbers object inetherHistoryTable

CRC alignment errors Number of CRC error packets received in asampling interval corresponding to theetherHistoryCRCAlignErrors object inetherHistoryTable

collisions Number of collision packets received in asampling interval corresponding to theetherHistoryCollisions object inetherHistoryTable

Dropped packet Number of packets discarded in a samplinginterval corresponding to the etherHistoryDro-pEvents object in etherHistoryTable

utilization Bandwidth usage in a sampling intervalcorresponding to the etherHistoryUtilizationobject in etherHistoryTable

History record History sampling result

Related Topics16213 rmon history

1625 display rmon prialarm

FunctionThe display rmon prialarm command displays information about RMON extended alarmfunction



8679



Formatdisplay rmon prialarm [ entry-number ]

Parameters


entry-number Displays information about the RMON extendedalarm entry with the specified index If thisparameter is not specified all RMON extendedalarm information is displayed


ViewsAll views


Usage GuidelinesAfter configuring RMON extended alarm function using the rmon prialarm command youcan run this command to view sampling interval rising and falling thresholds alarmtriggering condition and latest sampled value

Example Display the RMON extended alarm configurations

ltHUAWEIgt display rmon prialarmPrialarm table 1 owned by Huawei is valid Samples absolute value 1361211611161+1361211611171 Sampling interval 30(sec) Rising threshold 1000(linked with event 3) Falling threshold 100(linked with event 3) When startup enables risingOrFallingAlarm This entry will exist forever Latest value 557



8680



Table 16-24 Description of the display rmon prialarm command output

Item Description

Prialarm table entry-number ownedby owner is status

The current status of the extended alarm entry entry-number created by owner is statusl entry-number extended alarm entryl owner creator of the entryl status row status of the extended alarm entry

with the specified indexndash undercreation invalidndash valid validndash invalid invalid due to hot swapping of the

LPU

Samples type value The sampling type is type The value of type can bel absolute absolute value samplingl delta variable value samplingl changeratio change rate of sampled values

(Change rate = Value changeSampling interval)This field is followed by an alarm variable

Sampling interval Interval at which traffic is sampled

Rising threshold Alarm rising threshold

Falling threshold Alarm falling threshold

linked with event entry-number Associate with the row with index entry-number

When startup enables Condition that triggers alarms (exceed the risingthreshold or falls below the falling threshold) Thevalues arel risingOrFallingAlarm generating an alarm when




This entry will exist Aging time of the extended alarm entry An entrymay be valid permanently or in a certain period

Latest value Latest sampling result

Related Topics16214 rmon prialarm



8681



1626 display rmon statistics

Function

The display rmon statistics command displays RMON Ethernet statistics

Format

display rmon statistics [ interface-type interface-number ]

Parameters



Displays RMON Ethernet statistics on the specifiedEthernet interface If this parameter is not specifiedRMON Ethernet statistics on all interfaces are displayed

-

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

After you configure Ethernet statistics using the rmon statistics command the systemcollects packet statistics on Ethernet interfaces The command output includes communicationinformation generated since statistics function is enabled The command output helps youlocate faults

When the device restarts all statistics are cleared

Example

Display RMON Ethernet statistics

ltHUAWEIgt display rmon statisticsStatistics entry 1 owned by Creator is valid Interface GigabitEthernet001ltifIndex402653698gt Received octets 142915224 packets 1749151 broadcast packets 11603 multicast packets756252 undersize packets 0 oversize packets 0 fragments packets 0 jabbers packets 0 CRC alignment errors0 collisions 0 Dropped packet (insufficient resources)1795 Packets received according to length (octets) 64 150183 65-127 150183 128-255 1383 256-5113698 512-10230 1024-15180



8682



Table 16-25 Description of the display rmon statistics command output

Item Description

Statistics entry entry-number owned byowner is status

The current status of the event entry entry-number created by owner is statusl entry-number Ethernet statistics entry

corresponding to the etherStatsIndex objectin etherStatsTable

l owner creator of the entry correspondingto the etherStatsOwner object inetherStatsTable

l status row status of the Ethernet statisticsentry with the specified indexcorresponding to the etherStatsStatus inetherStatsTablendash undercreation invalidndash valid validndash invalid invalid due to hot swapping of

the LPU

Interface Interface where statistics are collectedcorresponding to the etherStatsDataSourceobject in etherStatsTable followed by theinterface OID

Received Number of received packets

octets Number of received octets

packets Number of received packets corresponding tothe etherStatsPkts object in etherStatsTable

broadcast packets Number of received broadcast packetscorresponding to the etherStatsBroadcastPktsobject in etherStatsTable

multicast packets Number of received multicast packetscorresponding to the etherStatsMulticastPktsobject in etherStatsTable

undersize packets Number of received undersize packetscorresponding to the etherStatsUndersizePktsobject in etherStatsTable

oversize packets Number of received large packetscorresponding to the etherStatsOversizePktsobject in etherStatsTable

fragments packets Number of received undersize and CRC errorpackets corresponding to theetherStatsFragments object in etherStatsTable



8683



Item Description

jabbers packets Number of received large and CRC errorpackets corresponding to the etherStatsJabbersobject in etherStatsTable

CRC alignment errors Number of received CRC error packetscorresponding to the etherStatsCRCAlignEr-rors object in etherStatsTable

collisions Number of received collision packetscorresponding to the etherStatsCollisionsobject in etherStatsTable

Dropped packet Number of discarded packets corresponding tothe etherStatsDropEvents object inetherStatsTable

Packets received according to length Number of received packets with differentlengths corresponding to theetherStatsPkts64OctetsetherStatsPkts65to127OctetsetherStatsPkts128to255OctetsetherStatsPkts256to511OctetsetherStatsPkts512to1023Octets andetherStatsPkts1024to1518Octets objects inetherStatsTableNOTE

In classified packet statistics on the S1720 S2720S2750 S5700S-LI S5700LI S5710-X-LI S5720SIand S5720S-SI 1024-1518 includes the packetslonger than 1518

Related Topics16215 rmon statistics

1627 display rmon2 hlhostcontroltable

FunctionThe display rmon2 hlhostcontroltable command displays information about entries inhlHostControlTable

Formatdisplay rmon2 hlhostcontroltable [ index ctrl-index ] [ verbose ]



8684



Parameters


ctrl-index Indicates the entry index which uniquelyidentifies an entry in the host control table


verbose Displays details about the host control table -

ViewsAll views


Usage GuidelinesAfter you use the rmon2 hlhostcontroltable command to create a protocol directory tableyou can run the display rmon2 hlhostcontroltable command to view the configurations

If no entry index is specified the configuration of the entire table is displayed

Example Display information about the entry with index 123 in the host control table

ltHUAWEIgt display rmon2 hlhostcontroltable index 123Abbreviationindex - hlhostcontrolindexdatasource - hlhostcontroldatasourcedroppedfrm - hlhostcontrolnldroppedframesinserts - hlhostcontrolnlinsertsDeletes - hlHostControlNlDeletesmaxentries - hlhostcontrolnlmaxdesiredentriesstatus - hlhostcontrolstatus

index datasource droppedfrm inserts Deletes maxentries status123 Vlanif10 0 0 0 50 active

Display detailed information about the entry with index 123 in the host control tableltHUAWEIgt display rmon2 hlhostcontroltable index 123 verboseAbbreviationindex - hlhostcontrolindexdatasource - hlhostcontroldatasourcedroppedfrm - hlhostcontrolnldroppedframesinserts - hlhostcontrolnlinsertsDeletes - hlHostControlNlDeletesmaxentries - hlhostcontrolnlmaxdesiredentriesowner - hlhostcontrolownerstatus - hlhostcontrolstatusindex 123datasource Vlanif10droppedfrm 0inserts 0Deletes 0maxentries 50owner chinastatus active



8685



Table 16-26 Description of the display rmon2 hlhostcontroltable command output

Item Description

index Index of hlHostControlTable

datasource Source interface of data

droppedfrm Number of the frames that are received on the statisticsinterface but not added into nlHost entries

inserts Times add nlHost entries are added to nlHostTable

Deletes Times nlHost entries are deleted from nlHostTable

maxentries Maximum number of entries that nlHostTable contains

owner Owner of entries

status Status of entries in the hlHostControlTablel active running normallyl not in service invalid

Related Topics16216 rmon2 hlhostcontroltable

1628 display rmon2 nlhosttable

FunctionThe display rmon2 nlhosttable command displays information about entries in thenlHostTable

Formatdisplay rmon2 nlhosttable [ hostcontrolindex ctrl-index ] [ timemark time-value ][ protocoldirlocalindex protocol-local-index ] [ hostaddress ip-address ]

Parameters


hostcontrolindex ctrl-index Specifies the index number Actrl-index uniquely identifies anentry in thehlHostControlTable

It is an integer rangingfrom 1 to 65535



8686




timemark time-value Enables the time filter The value is in the range of0 to 4294967295 Theentries in the nlHostTablewith the ChgTm valuebeing larger than this valueare displayed

protocoldirlocalindexprotocol-local-index

Identifies the network layerprotocol of the nlHostAddress

Its value ranges from 1 to2147483647

hostaddress ip-address Checks the traffic on a specifiedhost

-

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

After statistics function is configured on an interface you can view traffic statistics using thiscommand A maximum of 5000 rows can be displayed for each protocol on an interface

Example

Display information about the entry with index 1 in the host table

ltHUAWEIgt display rmon2 nlhosttable hostcontrolindex 1 protocoldirlocalindex 2 hostaddress 1011094177AbbreviationHIdx - hlHostControlIndexPIdx - ProtocolDirLocalIndexAddr - nlHostAddressInPkts - nlHostInPktsOutPkts - nlHostOutPktsInOctes - nlHostInOctetsOutOctes - nlHostOutOctetsOutMac - nlHostOutMacNonUnicastPktsChgTm - nlHostTimeMarkCrtTm - nlHostCreateTimeHIdx PIdx Addr InPkts OutPkts InOctes OutOctes OutMac ChgTm CrtTm1 2 1011094177 59 68 3240 3821 0 0 days 00h01m29s09th(8909) 0 days 00h01m01s13th(6113)

Table 16-27 Description of the display rmon2 nlhosttable command output

Item Description

HIdx Index of the host control table

PIdx Protocol directory index



8687



Item Description

Addr Host address It is the source address of theincoming IP packets on the monitored interfaceand destination address of the outgoing IPpackets on the interface

InPkts Number of incoming packets on the monitoredinterface

OutPkts Number of outgoing packets on the monitoredinterface

InOctes Number of incoming bytes on the monitoredinterface

OutOctes Number of outgoing bytes on the monitoredinterface

OutMac Number of outgoing non-unicast packets on themonitored interface

ChgTm Entry time filter in the host control table

CrtTm Customized time filter

1629 display rmon2 protocoldirtable

Function

The display rmon2 protocoldirtable command displays all entries in the protocolDirTable

Format

display rmon2 protocoldirtable

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

After you use the rmon2 protocoldirtable command to configure statistics on IP packetsyou can run the display rmon2 protocoldirtable command to view the configurations



8688



Example Display entries in the protocolDirTable

ltHUAWEIgt display rmon2 protocoldirtableprotocolDirId 800010080protocolDirParameters 200protocolDirLocalIndex 2protocolDirDescr wwprotocolDirAddressMapConfig not supportedprotocolDirHostConfig supported onprotocolDirMatrixConfig not supportedprotocolDirOwner huaweiprotocolDirStatus active

Table 16-28 Description of the display rmon2 protocoldirtable command output

Item Description

protocolDirId Protocol directory ID Currently RMON2 onlysupports IP protocol so the protocol directoryID is fixed at 800010080

protocolDirParameters Protocol directory parameter The value is fixedat 200

protocolDirLocalIndex Local protocol directory index

protocolDirDescr Protocol directory description

protocolDirAddressMapConfig Whether protocol directory address mapping issupported This function is not supportedcurrently

protocolDirHostConfig Whether the protocol directory host issupportedl not supported The device does not monitor

the network-layer host table of the protocoland this value cannot be changed

l supported on The device can monitor thenetwork-layer host table of the protocol andthe monitoring function is enabled

l supported off The device can monitor thenetwork-layer host table of the protocol butthe monitoring function is disabled

protocolDirMatrixConfig Whether protocol directory matrix is supportedThis function is not supported currently

protocolDirOwner Protocol directory owner

protocolDirStatus Protocol directory statusl active running normallyl not in service invalid



8689



Related Topics16217 rmon2 protocoldirtable

16210 display snmp-agent trap feature-name rmon all

Function

The display snmp-agent trap feature-name rmon all command displays the status of alltraps about the RMON module

Formatdisplay snmp-agent trap feature-name rmon all

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

None

Example

Display the status of all traps about the RMON module

ltHUAWEIgt display snmp-agent trap feature-name rmon all------------------------------------------------------------------------------Feature name RMONTrap number 4------------------------------------------------------------------------------Trap name Default switch status Current switch statusrisingalarm on onfallingalarm on onrmon_pri_risingalarm on onrmon_pri_fallingalarm on on

Table 16-29 Description of the display snmp-agent trap feature-name rmon all commandoutput

Item Description

Feature name Name of the module to which a trap message belongs

Trap number Number of trap messages

Trap name Name of a trap message of the RMON module



8690



Item Description

Default switch status Default status of the trap functionl on indicates that the trap function is enabledl off indicates that the trap function is disabled

Current switch status Current status of the trap functionl on indicates that the trap function is enabledl off indicates that the trap function is disabled

risingalarm Indicates that the current sampled value is greater than orequal to the set threshold specified by the alarm table

fallingalarm Indicates that the current sampled value is less than or equalto the set threshold specified by the alarm table

rmon_pri_risingalarm Indicates that the current sampled value is greater than orequal to the set threshold specified by the pri_alarm table

rmon_pri_fallingalarm Indicates that the current sampled value is less than or equalto the set threshold specified by the pri_alarm table

Related Topics16219 snmp-agent trap enable feature-name rmon

16211 rmon alarm

FunctionThe rmon alarm command adds an entry to the alarm table

The undo rmon alarm command deletes an entry from the alarm table

Formatrmon alarm entry-number alarm-OID sampling-time absolute | changeratio | delta rising-threshold threshold-value1 event-entry1 falling-threshold threshold-value2 event-entry2 [ startup-alarm falling | rising | risingorfalling ] [ owner owner-name ]

undo rmon alarm entry-number

Parameters


entry-number Specifies the index of the entry to beadded or deleted




8691




alarm-OID Specifies the alarm OID The name is a string of 1 to256 case-sensitivecharacters without spacesWhen quotation marks areused around the stringspaces are allowed in thestring

sampling-time Specifies the sampling interval The value is an integer thatranges from 5 to 65535 inseconds

absolute Indicates that the sample type isabsolute The value is the sampled valueat the end of the period

-

changeratio Indicates that the sample type ischangeratio The value is ChangingvalueSampling interval

-

delta Indicates that the sample type is deltaThe value is the difference between thesamples at the beginning and end of theperiod

-

rising-thresholdthreshold-value1

Specifies the rising threshold ofsampled value

The value is an integer thatranges from 1 to2147483647

event-entry1 Indicates the event index correspondingto the rising threshold


falling-thresholdthreshold-value2

Specifies the falling threshold ofsampled value


event-entry2 Indicates the event index correspondingto the falling threshold


startup-alarm falling | rising |risingorfalling

Indicates the trap flagl falling indicates that the system

sends a trap or log about an eventonly when a falling alarm istriggered

l rising indicates that the systemsends a trap or log about an eventonly when a raising alarm istriggered

l risingorfalling indicates that thesystem sends a trap or log about anevent when a raising alarm or fallingis triggered

-



8692




owner owner-name Indicates the owner of the alarm The name is a string of 1 to127 case-sensitivecharacters without spacesWhen quotation marks areused around the stringspaces are allowed in thestring

Views

System view

Default Level


Usage Guidelines

Usage Scenario

To monitor system running status run the rmon alarm command to configure an alarm tableand add an entry to the alarm table After the command is executed the RMON alarmfunction is enabled The system obtains information about the monitored object at thespecified interval and compares the obtained value with the configured threshold Then thesystem triggers the event according to the following table and records log or sends a trap tothe NMS

Situation Action

The sampled value is larger than or equal tothe configured rising threshold threshold-value1

Trigger event-entry1

The sampled value is smaller than or equalto the configured falling thresholdthreshold-value2


Prerequisites

Before configuring alarm function for the specified object run the rmon event command todefine the associated events Otherwise events cannot be triggered even if alarms aregenerated

If the alarm variables configured in RMON alarm function are MIB variables defined in thestatistics group or history group the Ethernet statistics function or history statistics functionmust be configured on the monitored Ethernet interface first Otherwise alarm entries cannotbe created



8693



Example

Monitor alarm thresholds for etherStatsBroadcastPkts (alarm OID is1361211611161) Set the sampling interval to 30 seconds and sample type to absoluteWhen the sampled value reaches or exceeds 500 event 1 is triggered When the sampledvalue reaches or falls below 100 event 2 is triggered The owner is creator

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] rmon statistics 1 owner creator[HUAWEI-GigabitEthernet001] quit[HUAWEI] rmon event 1 log[HUAWEI] rmon event 2 trap public[HUAWEI] rmon alarm 1 1361211611161 30 absolute rising-threshold 500 1 falling-threshold 100 2 owner creator

Related Topics1621 display rmon alarm

16212 rmon event

Function

The rmon event command adds an entry to the event table

The undo rmon event command deletes an entry from the event table

Format

rmon event entry-number [ description string ] log | trap object | log-trap object | none [ owner owner-name ]

undo rmon event entry-number

Parameters




description string Specifies the event description The value is a string of 1 to 127characters

log Records a log for the event -

trap Sends a trap to the NMS -

object Specifies the community name of theNMS receiving the trap

The value is a string of 1 to 127characters

log-trap Records a log and sends a trap to theNMS for the event

-

none Indicates that no action is taken forthe event

-



8694




owner owner-name

Indicates the creator of the evententry

The name is a string of 1 to 127case-sensitive characters withoutspaces When quotation marksare used around the string spacesare allowed in the string

ViewsSystem view



This command specifies whether to record a log or send a trap for events When an erroroccurs in the system the RMON alarm function triggers the corresponding event You can runthe rmon event command to configure an event table and add an entry to the table The entryspecifies whether to record a log or send a trap to the NMS for the event

Prerequisites

The rmon alarm command is executed to configure the alarm objects Otherwise no alarmwill trigger the event

Example Send a trap to the NMS for event 10

ltHUAWEIgt system-view[HUAWEI] rmon event 10 trap public

Related Topics1622 display rmon event

16213 rmon history

FunctionThe rmon history command adds an entry to the history control table

The undo rmon history command deletes an entry from the history control table

Formatrmon history entry-number buckets number interval sampling-interval [ owner owner-name ]

undo rmon history entry-number



8695



Parameters


entry-number Specifies the index of the entryto be added or deleted

The value is an integer that rangesfrom 1 to 65535

buckets number Indicates the maximumnumber of records in thehistory control table


intervalsampling-interval

Specifies the samplinginterval


owner owner-name

Indicates the owner of theentry in the history controltable

The name is a string of 1 to 127 case-sensitive characters without spacesWhen quotation marks are used aroundthe string spaces are allowed in thestring

Views

Ethernet interface view GE interface view XGE interface view MultiGE interface view40GE interface view

Default Level


Usage Guidelines

Usage Scenario

To collect statistics on the specified interface at an interval and save the statistics for futureretrieval run the rmon history command to configure a history control table and add an entryto the table The system can periodically collect statistics on each type of traffic includingbandwidth usage number of error packets and total number of packets

Precautions

The number of stored records is determined by the buckets number parameter When thenumber of records in the table reaches the maximum the system overwrites the old recordswith new ones Statistics include the number of packets broadcast packets and multicastpackets received by the interface within a sampling interval You can run the display rmonhistory command to view history sampling results

Example

Configure a history control table and add an entry with index 1 to the table Set themaximum number of entries in the table to 10 sampling interval to 5 seconds and creator touser1

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] rmon history 1 buckets 10 interval 5 owner user1



8696



Related Topics1624 display rmon history

16214 rmon prialarm

Function

The rmon prialarm command adds an entry to the extended alarm table

The undo rmon prialarm command deletes an entry from the extended alarm table

Format

rmon prialarm entry-number prialarm-formula description-string sampling-interval absolute | changeratio | delta rising-threshold threshold-value1 event-entry1 falling-threshold threshold-value2 event-entry2 entrytype cycle entry-period | forever [ ownerowner-name ]

undo rmon prialarm entry-number

Parameters


entry-number Specifies the index of the entry to be added ordeleted


prialarm-formula

Specifies the formula for calculating an alarmvariable The alarm variable in the formula isidentified by an OID The OID value startswith a dot for example (13612121101)8 The calculationformula is defined by user The calculationresult is a long integer Ensure that the lengthof calculation result in each step cannotexceed the limit otherwise the calculationresult is incorrect

The value is a string of 1to 256 characters

description-string

Specifies the alarm description The value is a string of 1to 256 characters

sampling-interval

Specifies the sampling interval The value is an integerthat ranges from 10 to65535 in seconds

absolute Indicates that the sample type is absolute Thevalue is the sampled value at the end of theperiod

-

changeratio Indicates that the sample type is changeratioThe value is Changing valueSamplinginterval

-



8697




delta Indicates that the sample type is delta Thevalue is the difference between the samples atthe beginning and end of the period

-


Specifies the alarm rising threshold The value is an integerthat ranges from 1 to2147483647

event-entry1 Indicates the entry number of the eventcorresponding to the rising threshold in theevent table



Specifies the alarm falling threshold The value is an integerthat ranges from 0 to2147483646

event-entry2 Indicates the entry number of the eventcorresponding to the falling threshold in theevent table


entrytype Indicates the lifetime type of an alarm entry -

cycle entry-period

Indicates the lifetime of an alarm entry The value is an integerthat ranges from 11 to2147483646

forever Indicates that the alarm entry is validpermanently

-

owner owner-name

Indicates the owner of the extended alarmvariable

The value is a string of 1to 127 case-sensitivecharacters without spaces

ViewsSystem view



The extended alarm function can compute the alarm variables and compare the result with thespecified threshold

After the extended alarm function is enabled the system performs the following operations

1 Samples the alarm variables in the extended alarm formula at the specified samplinginterval

2 Calculates the sampled value using the defined formula3 Compares the calculation result with the thresholds and takes actions according to the

following table



8698



Situation Action

The sampled value is larger than or equalto the configured rising thresholdthreshold-value1


The sampled value is smaller than orequal to the configured falling thresholdthreshold-value2


To use more alarm functions run the rmon prialarm command to configure the extendedalarm table and add an entry to the table

Prerequisites

Before configuring extended alarm function for the specified object run the rmon eventcommand to define the associated events Otherwise events cannot be triggered even ifalarms are generated When the sampled value exceeds the rising threshold or falls below thefalling threshold whether to record a log or send a trap to the NMS is determined by thermon event command

Example

Monitor broadcast and multicast packets Set the sampling interval to 10 seconds andsample type to absolute Trigger event 3 when the sample value reaches or exceeds 100000and when the sample value reaches or falls below 100 Set the lifetime of the entry to foreverand the owner to Huawei

ltHUAWEIgt system-view[HUAWEI] rmon prialarm 1 11361211611161+1361211611171 sumofbroadandmulti 10 absolute rising-threshold 100000 3 falling-threshold 100 3 entrytype forever owner Huawei

Related Topics1625 display rmon prialarm

16215 rmon statistics

Function

The rmon statistics command adds an entry to the statistics table

The undo rmon statistics command deletes an entry from the statistics table

Format

rmon statistics entry-number [ owner owner-name ]

undo rmon statistics entry-number



8699



Parameters


entry-number Indicates the row indexcorresponding to the entry tobe added or deleted


owner owner-name

Indicates the owner name The name is a string of 1 to 127 case-sensitive characters without spaces Whenquotation marks are used around thestring spaces are allowed in the string

Views


Default Level


Usage Guidelines

Usage Scenario

To keep collecting statistics on the current interface run the rmon statistics command toconfigure a statistics table and add an entry to the table This command monitors usage ofEthernet interfaces and collects statistics on errors including the number of collision packetsCRC error packets undersize and large packets timeout packets fragments broadcastpackets multicast packets and unicast packets

Prerequisites

The rmon-statistics enable command is executed to enable RMON statistics function on theinterface If the command is not executed the statistics result is 0

Example

Configure a statistics table on GigabitEthernet001 and add an entry with index 20 to thetable

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] rmon statistics 20 owner creater

Related Topics1626 display rmon statistics16218 rmon-statistics enable



8700



16216 rmon2 hlhostcontroltable

Function

The rmon2 hlhostcontroltable command creates or changes an entry in thehlHostControlTable

The undo rmon2 hlhostcontroltable command deletes an entry from the hlHostControlTableor from the whole table

Format

rmon2 hlhostcontroltable index ctrl-index [ datasource interface interface-type interface-number ] [ maxentry maxentry-value ] [ owner owner-name ] [ status active | inactive ]

undo rmon2 hlhostcontroltable [ index ctrl-index ]

Parameters




datasourceinterfaceinterface-typeinterface-number

Identifies an interface and a subnetcorresponding to hlHostControlDataSourceThe parameter value namely the interfaceindex is the data source defining the entry Inthis command the data source is representedby interface type and number

-

maxentrymaxentry-value

Indicates the maximum number of entries inthe host table

The value is an integerthat ranges from 1 to100000 The default valueis 50If the host tablecontains too many entriessystem performance isdegraded The defaultsettings of host table arerecommended

owner owner-name

Indicates the owner The value is a string of 1to 127 characters andcannot be empty

status Indicates the status of an entry in the hostcontrol table corresponding tohlHostControlStatus

-

active Indicates that the hlHostControlStatus value inthe host control table is active and this entry isavailable

-



8701




inactive Indicates that the hlHostControlStatus value inthe host control table is not in service and thisentry is inactive and unavailable

-

Views

System view

Default Level


Usage Guidelines

Usage Scenario

To monitor traffic on the subnet connected to an interface of the managed device run thermon2 hlhostcontroltable command and specify the interface

Precautions

When creating an entry specify the datasource interface parameter to identify the interfacewhich specifies the subnet The parameter value namely the interface index is the datasource defining the entry Enter the interface type and number in the command Only oneentry can be created for each interface in the host control table

The parameter status in the display rmon2 hlhostcontroltable command output matches thehlhostcontrolstatus value which indicates the entry status

l When the hlhostcontrolstatus value is set to inactive all related entries in the host tableare deleted automatically

l When the hlhostcontrolstatus value is set to active you cannot change thehlhostcontroldatasource and hlhostcontrolnlmaxdesiredentries values

l If an interface that corresponds to the hlhostcontroldatasource in an entry is deleted theentry is deleted at the same time

Example

Create an entry in the host control table

ltHUAWEIgt system-view[HUAWEI] rmon2 hlhostcontroltable index 1 datasource interface gigabitethernet 001 maxentry 100 owner huawei status active

Set the hlHostControlStatus value in the host control table to not in service

ltHUAWEIgt system-view[HUAWEI] rmon2 hlhostcontroltable index 1 status inactive

Related Topics1627 display rmon2 hlhostcontroltable



8702



16217 rmon2 protocoldirtable

Function

The rmon2 protocoldirtable command creates or modifies an entry in the protocolDirTable

The undo rmon2 protocoldirtable command deletes an entry from the protocolDirTable Ifoptional parameters are not specified the entire table is deleted

Format

rmon2 protocoldirtable protocoldirid protocol-id parameter parameter-value [ descrdescription-string ] [ host notsupported | supportedon | supportedoff ] [ owner owner-name ] [ status active | inactive ]

undo rmon2 protocoldirtable [ protocoldirid protocol-id parameter parameter-value ]

Parameters


protocol-id Indicates the protocol ID Only IP protocol issupported currently

The value is fixed at800010080

parameter-value Indicates the protocol parameter The value is fixed at200

description-string

Indicates the description of the protocoldirectory table

The value is a string of1 to 64 characters

host Indicates the configuration of protocoldirectory host corresponding toprotocolDirHostConfig in the display rmon2protocoldirtable command output

-

notsupported Indicates that the device does not monitor thenetwork-layer host table of the protocol andthis value cannot be changed

-

supportedon Indicates that the device can monitor thenetwork-layer host table of the protocol andthe monitoring function is enabled

-

supportedoff Indicates that the device can monitor thenetwork-layer host table of the protocol but themonitoring function is disabled

-

owner owner-name

Indicates the owner The value is a string of1 to 127 characters

status Indicates the entry status corresponding to theprotocolDirStatus value in the display rmon2protocoldirtable command output

-

active Indicates that the protocolDirStatus value in thehost control table is active and this entry isavailable

-



8703




inactive Indicates that the protocolDirStatus value in thehost control table is notinservice and this entryis inactive and unavailable

-

ViewsSystem view



To monitor statistics on IP packets run this command

RMON2 supports only statistics on IP packets on an Ethernet interface A protocol occupiesan entry so there is only one entry in the table

Precautions

When running the rmon2 protocoldirtable command you must set the description andprotocols supported by the host That is the descr and host parameters are mandatory

The parameter status in the display rmon2 protocoldirtable command output matches theprotocolDirStatus value which indicates the entry status

l When the status parameter is set to active the descr value cannot be modified Thevalue of host (corresponding to the protocolDirHostConfig value indicating the protocoldirectory host configuration) can be modified This parameter indicates whether tomonitor the network-layer host table of the protocolndash If the host value is set to notsupported the host value cannot be modifiedndash If the host value is not notsupported the value can be switched between

supportedon and supportedoffndash When the host value is changed from supportedon to supportedoff the

corresponding entry in the host control table is deletedl When the status is inactive all related entries in the host table are deleted

Example Create an entry in the protocol directory table

ltHUAWEIgt system-view[HUAWEI] rmon2 protocoldirtable protocoldirid 800010080 parameter 200 descr huawei host supportedon owner huawei status active

Set the protocolDirStatus value in the protocol directory table to notinservice

ltHUAWEIgt system-view[HUAWEI] rmon2 protocoldirtable protocoldirid 800010080 parameter 200 status inactive

Set the protocolDirHostConfig value in the protocol directory table to supportedoff



8704



ltHUAWEIgt system-view[HUAWEI] rmon2 protocoldirtable protocoldirid 800010080 parameter 200 host supportedoff

Related Topics1629 display rmon2 protocoldirtable

16218 rmon-statistics enable

FunctionThe rmon-statistics enable command enables RMON statistics function on an interface

The undo rmon-statistics command disables RMON statistics function on an interface

By default RMON statistics function is disabled on interfaces

Formatrmon-statistics enable

undo rmon-statistics

ParametersNone

ViewsEthernet interface view GE interface view XGE interface view MultiGE interface view40GE interface view


Usage GuidelinesIf the statistics function is not enabled on an interface statistics in the statistics table andhistory table are 0

NOTE

After the interface mode is changed from Layer 2 to Layer 3 by using the undo portswitch command thedevice does not support the rmon-statistics enable command

Example Enable RMON statistics function on GigabitEthernet001

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] rmon-statistics enable




8705



16219 snmp-agent trap enable feature-name rmon

Function

The snmp-agent trap enable feature-name rmon command enables the alarm function forthe RMON module

The undo snmp-agent trap enable feature-name rmon command disables the alarmfunction for the RMON module

By default the alarm function is enabled for the RMON module

Format

snmp-agent trap enable feature-name rmon [ trap-name fallingalarm | risingalarm |rmon_pri_fallingalarm | rmon_pri_risingalarm ]

undo snmp-agent trap enable feature-name rmon [ trap-name fallingalarm |risingalarm | rmon_pri_fallingalarm | rmon_pri_risingalarm ]

Parameters


trap-name Enables or disables the alarm function for the specifiedevent

If no event type is specified using the trap-nameparameter all types of alarms are enabled or disabled forthe RMON module

-

fallingalarm Indicates that the current sampled value is smaller than orequal to the threshold configured in the alarmTable

-

risingalarm Indicates that the current sampled value is larger than orequal to the threshold configured in the alarmTable

-

rmon_pri_fallingalarm Indicates that the current sampled value is smaller than orequal to the threshold configured in the prialarmTable

-

rmon_pri_risingalarm Indicates that the current sampled value is larger than orequal to the threshold configured in the prialarmTable

-

Views

System view

Default Level




8706



Usage GuidelinesA device managed by the NMS can send traps to the NMS if the alarm function is enabled forthe RMON module on the device By default all alarms for the RMON module are enabled Ifonly one or some event alarms need to be enabled run the snmp-agent trap enable feature-name rmon trap-name command

Example Enable the fallingalarm for the RMON module


163 LLDP Configuration Commands1631 cdp clear neighbor

FunctionThe cdp clear neighbor command clears statistics about Cisco Discovery Protocol (CDP)packets on all interfaces or a specified interface

Formatcdp clear neighbor [ interface interface-type interface-number ]

ParametersParameter Description Value

interface interface-typeinterface-number

Clears CDP packet statisticson a specified interfacel interface-type specifies

the type of the interfacel interface-number

specifies the number ofthe interface

If no interface is specifiedthis command clears CDPpacket statistics on allinterfaces

-

ViewsUser view




8707



Usage Guidelines

None

Example

Clear CDP packet statistics on all the interfaces

ltHUAWEIgt cdp clear neighborWarning This command will clear CDP neighbor information of all the ports Continue [YN]y

Related Topics16317 lldp enable (system view)16316 lldp enable (interface view)16313 lldp compliance cdp receive

1632 display cdp local

Function

The display cdp local command displays CDP local information on a specified interface orall interfaces

Format

display cdp local [ interface interface-type interface-number ]

Parameters


interface interface-type interface-number

Displays the CDP local information on a specified interfacel interface-type specifies the interface typel interface-number specifies the interface number

If this parameter is not specified the command displays CDPlocal information on all the interfaces

-

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

Usage Scenario



8708



To check CDP information on a specified interface or all interfaces run the display cdp localinformation

Prerequisites

LLDP has been enabled globally using the lldp enable (system view) command and LLDPcompatibility with CDP has been enabled on the specified interface using the lldpcompliance cdp receive command

Example

Display CDP local information on all the interfaces

ltHUAWEIgt display cdp localSystem configuration-------------------------------------------------------------------------- CDP Notification Interval 5 (default is 5s) CDP Notification Enable enabled (default is enabled)

Remote Table Statistics-------------------------------------------------------------------------- Remote Table Last Change Time 0 days 23 hours 21 minutes 37 secondsRemote Neighbors Added 0Remote Neighbors Deleted 0Remote Neighbors Dropped 0Remote Neighbors Aged 0Total Neighbors 1

Port information-------------------------------------------------------------------------- Interface GigabitEthernet001CDP Status enabled (default is disabled) Total Neighbors 1 Interface GigabitEthernet002CDP Status enabled (default is disabled) Total Neighbors 0 ---- More ----

Table 16-30 Description of the display cdp local command output

Item Description

System configuration System configuration information

CDP Notification Interval Delay in sending a notification when theCDP neighbor information changes

CDP Notification Enable Status of the CDP notification functionl enabledl disabled

Remote Table Statistics Statistics about remote neighbors

Remote Table Last Change Time Time that elapsed since the last modificationof neighbor information

Remote Neighbors Added Number of added remote neighbors

Remote Neighbors Deleted Number of deleted remote neighbors



8709



Item Description

Remote Neighbors Dropped Number of remote neighbors of which theinformation is deleted because ofinsufficient storage memory

Remote Neighbors Aged umber of remote neighbors of which theinformation is deleted by the agingmechanism

Total Neighbors Total number of remote neighbors

Port information Total number of CDP neighbors of thedevice

CDP Status Whether LLDP compatibility with CDP isenabled on the interfacel enabledl disabled

Total Neighbors Number of CDP neighbors of the interface

1633 display cdp neighbor

Function

The display cdp neighbor command displays information about CDP neighbors of allinterfaces or a specified interface

Format

display cdp neighbor [ interface interface-type interface-number ]

Parameters



Displays information about CDP neighbors of a specifiedinterfacel interface-type specifies the interface typel interface-number specifies the interface number

If this parameter is not specified the command displaysinformation about CDP neighbors of all interfaces

-

Views

All views



8710



Default Level

1 Monitoring level

Usage Guidelines

Usage Scenario

This command enables you to know which CDP neighbors the local device has Layer 2information about the neighbors and to which interfaces the neighbors connect You can alsouse this command to check whether the Layer 2 information is configured correctly on theneighbors

Prerequisites


Example

Display information about CDP neighbors of all the interfaces

ltHUAWEIgt display cdp neighborGigabitEthernet001 has 1 neighbor(s) Neighbor index 1 Device ID ME3400 Port ID GigabitEthernet04 Version SCCP758-3-3SR2SPlatform cisco ME-3400EG-2CS-AMacAddress b4a4-e3cf-e984Discovered time 0 days 22 hours 33 minutes 36 seconds Expired time 122 Power drawn 12000 mw Power request ID 39308 Power management ID 2 Power request levels 12000 mw 0 mw ---- More ----

Table 16-31 Description of the display cdp neighbor command output

Item Description

Neighbor index Index of a CDP neighbor

Device ID ID of the CDP neighbor

Port ID ID of the interface connecting to the CDPneighbor

Version Version of the CDP neighbor

Platform Software platform of the CDP neighbor

MacAddress MAC address of the CDP neighbor

Discovered time Time when the CDP neighbor wasdiscovered



8711



Item Description

Expired time Aging time of CDP neighbor information inseconds

Power drawn Power set on the source

Power request ID Requested power ID

Power management ID ID used to manage power The ID is thenumber of times the power is changed

Power request levels Requested power level The maximumpower among the negotiated power values isselected

Related Topics16317 lldp enable (system view)

1634 display cdp neighbor brief

Function

The display cdp neighbor brief command displays brief information about CDP neighborsof the device

Format

display cdp neighbor brief

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

Usage Scenario

To quickly check information about CDP neighbors run the display cdp neighbor briefcommand

Prerequisites



8712




Example Display brief information about CDP neighbors

ltHUAWEIgt display cdp neighbor briefLocal Intf Neighbor Dev Neighbor Intf Exptime(s) GE001 ME3400 GE004 144

Table 16-32 Description of the display cdp neighbor brief command output

Item Description

Local Intf Local interface name

Neighbor Dev Name of a CDP neighbor

Neighbor Intf Neighbor interface name

Exptime(s) Aging time of CDP neighbor information inseconds

Related Topics16317 lldp enable (system view)16313 lldp compliance cdp receive

1635 display cdp statistics

FunctionThe display cdp statistics command displays statistics about CDP packets sent and receivedby all interfaces or a specified interface

Formatdisplay cdp statistics [ interface interface-type interface-number ]



8713



Parameters


interfaceinterface-typeinterface-number

Displays statistics about CDP packets sent and received by aspecified interfacel interface-type specifies the interface typel interface-number specifies the interface number

If this parameter is not specified the command displaysstatistics about CDP packets sent and received by all theinterfaces

-

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

Usage Scenario

When you need to locate an LLDP fault on a device according to statistics about CDP packetssent and received by the device run the display cdp statistics command

NOTE

To check statistics about CDP packets sent and received in a specified period of time run the reset cdpstatistics command to clear the historical CDP packet statistics Wait for the specified period of timeand then run the display cdp statistics command to check the new CDP packet statistics

Prerequisites


Example

Display statistics about CDP packets received by all interfaces

ltHUAWEIgt display cdp statisticsCDP statistics global InformationStatistics for GigabitEthernet001Total frames received 30 Total frames discarded 0 Total frames error 0 Last cleared time never



8714



Table 16-33 Description of the display cdp statistics command output

Item Description

CDP statistics global Information Statistics about CDP packets and receivedby the device

Total frames received Number of received CDP packets

Total frames discarded Number of discarded CDP packets

Total frames error Number of received CDP error packets

Last cleared Time Time when the CDP packet statistics werecleared last time

Related Topics16317 lldp enable (system view)16329 reset cdp statistics

1636 display lldp local

Function

The display lldp local command displays global LLDP information or the LLDP informationon a specified interface

Format

display lldp local [ interface interface-type interface-number ]

Parameters



Displays the LLDP information on a specified interfacel interface-type specifies the interface typel interface-number specifies the interface number

If no interface is specified the command displays LLDPinformation on all the interfaces with LLDP enabled

-

Views

All views

Default Level

1 Monitoring level



8715




The display lldp local command displays the global LLDP information or the LLDPinformation on an interfacel The global LLDP information includes system information MED system information

system configuration and data statistics on the peer devicel The LLDP information on an interface includes the interface information and MED

interface information

To verify the LLDP information and Layer 2 information of the system and interfaces runthis command

Prerequisites

The LLDP function has been enabled globally and on the specified interface

Example Display the global LLDP information

ltHUAWEIgt display lldp localSystem information --------------------------------------------------------------------------Chassis type MAC address Chassis ID 00e0-11fc-1710 System name HUAWEI System description HUAWEI S5700-28P-LI Huawei Versatile Routing Platform Software VRP (R) softwareVersion 5160 (S5700 V200R009C00 ) Copyright (C) 2000-2015 HUAWEI TECH CO LTDSystem capabilities supported bridge router System capabilities enabled bridge router LLDP Up time 2015-01-22 132926 MED system information --------------------------------------------------------------------------Device class Network Connectivity (MED inventory information of master board) HardwareRev VER B FirmwareRev NA SoftwareRev Version 5160 V200R009C00 SerialNum NA Manufacturer name HUAWEI TECH CO LTD Model name NA Asset tracking identifier NA System configuration--------------------------------------------------------------------------LLDP Status enabled (default is disabled)LLDP Message Tx Interval 30 (default is 30s)LLDP Message Tx Hold Multiplier 4 (default is 4)LLDP Refresh Delay 2 (default is 2s)LLDP Tx Delay 2 (default is 2s)LLDP Notification Interval 5 (default is 5s)LLDP Notification Enable enabled (default is enabled)Management Address IP 1010101 MAC000b-09e6-3da1

Remote Table Statistics--------------------------------------------------------------------------Remote Table Last Change Time 0 days 0 hours 4 minutes 15



8716



seconds Remote Neighbors Added 5 Remote Neighbors Deleted 0 Remote Neighbors Dropped 0 Remote Neighbors Aged 0 Total Neighbors 5 Port information --------------------------------------------------------------------------

Interface GigabitEthernet001 LLDP Enable Status enabled (default is disabled) Total Neighbors 1 Port ID subtype Interface name Port ID GigabitEthernet001 Port description GigabitEthernet001 Port and protocol VLAN ID(PPVID) 0 Port and protocol VLAN supported NoPort and protocol VLAN enabled No Port VLAN ID(PVID) 1 VLAN name of VLAN 1 VLAN1 Protocol identity STP RSTPMSTP LACP EthOAM CFM Auto-negotiation supported Yes Auto-negotiation enabled Yes OperMau speed(1000)duplex(Full) Power port class PD PSE power supported No PSE power enabled No PSE pairs control abilityNo Power pairs Unknown Port power classificationUnknown Link aggregation supportedYes Link aggregation enabled No Aggregation port ID 0 Maximum frame Size 1526

EEE support YesTransmit Tw 36Receive Tw 36Fallback Receive Tw 36Echo Transmit Tw 36Echo Receive Tw 36 MED port information Media policy type Unknown Unknown Policy Yes VLAN tagged No Media policy VlanID 0 Media policy L2 priority 0 Media policy Dscp 0



8717



Power Type Unknown PoE PSE power source Unknown Port PSE Priority Unknown Port Available power value02(w) ---- More ----

Table 16-34 Description of the display lldp local command output

Item Description

System information

Chassis type Device ID sub-typel Chassis component chassis aliasl Interface alias interface aliasl Port component interface or backplane aliasl MAC address MAC addressl Network address network addressl Interface name name of the interfacel Locally assigned name of the local device

Chassis ID Device ID

System name Name of the device

System description Device description

System capabilities supported Capabilities of the local device includingl repeater repeaterl bridge bridge devicel wlanAccessPoint wireless access pointl router routerl telephone wireless devicel docsisCableDevice management stationl stationOnly base stationl other other capabilities

System capabilities enabled Capabilities enabled on the local device includingl repeater repeaterl bridge bridge devicel wlanAccessPoint wireless access pointl router routerl telephone wireless devicel docsisCableDevice management stationl stationOnly base stationl other other capabilities

LLDP Up time Time when LLDP is enabled



8718



Item Description

MED system information

Device class Type of the MED device

HardwareRev Hardware version of the device

FirmwareRev Firmware version of the product

SoftwareRev Software version of the device

SerialNum Serial number

Manufacturer name Name of the manufacturer

Model name Name of a model

Asset tracking identifier Asset tracking ID

System configuration

LLDP Status LLDP statusl Enabledl DisabledThis parameter is configured using the lldp enable(system view) command

LLDP Message Tx Interval Interval for sending LLDP packetsThis parameter is configured using the lldp message-transmission interval command

LLDP Message Tx HoldMultiplier

Multiplier of the period in which the message is heldThis parameter is configured using the lldp message-transmission hold-multiplier command

LLDP Refresh Delay Delay in re-initializing the LLDP moduleThis parameter is configured using the lldp restart-delaycommand

LLDP Tx Delay Delay in sending the LLDP packetsThis parameter is configured using the lldp message-transmission delay command

LLDP Notification Interval Delay in sending the notification after the remoteinformation changesThis parameter is configured using the lldp trap-intervalcommand

LLDP Notification Enable Status of the notification functionl Enabledl Disabled



8719



Item Description

Management Address Management addressThis parameter is configured using the lldp management-address commandIf an invalid management address is used the inactivefield is added for this address For example if 10111 isan invalid management address the displayed informationis as follows Management Address IP101010110111 (inactive) MAC000b-09e6-3da1

Remote Table Statistics

Remote Table Last ChangeTime

Time that elapsed since the latest modification of remotedata



Remote Neighbors Dropped Number of packets discarded after the buffer is used up

Remote Neighbors Aged Number of neighbors that are aged out and deleted

Total Neighbors Number of remote neighbors

Port information

LLDP Enable Status LLDP statusl Enabledl Disabled


Port ID subtype Subtypes of a port IDl Interface alias interface aliasl Port component interface or backplane aliasl MAC address MAC addressl Network address network addressl Interface name name of the interfacel Agent circuit ID circuit ID of the DHCP agentl Locally assigned name of the local device

Port ID Interface ID

Port description Interface description

Port VLAN ID(PVID) VLAN ID of the interface

VLAN name of VLAN 1 Name of VLAN 1

Protocol identity Protocol ID



8720



Item Description

Auto-negotiation supported Whether the interface supports auto-negotiationl Yesl No

Auto-negotiation enabled Whether the interface is enabled with auto-negotiationl Yesl No

OperMau Auto-sensing rate and duplex mode of the interface

Power port class PoE typel PSE power-sourcing equipmentl PD powered device

PSE power supported Whether the PSE power is supportedl Yes PSE power is supportedl No PSE power is not supported

PSE power enabled Whether the PSE power is enabledl Yes enabledl No disabled

PSE pairs control ability Whether the PSE twisted pair control is supportedl Yes PSE twisted pair control is supportedl No PSE twisted pair control is not supported

Power pairs PoE remote power supply model Signal power supply mode of signal linesl Spare power supply mode of spare signal linesl Unknown an unknown remote power supply mode

Port power classification PD power control level on the interfacel Class0 indicates level 1l Class1 indicates level 2l Class2 indicates level 3l Class3 indicates level 4l Class4 indicates level 5l Unknown indicates an unknown level

Link aggregation supported Whether the interface supports link aggregationl Yes The interface supports link aggregationl No The interface does not support link aggregation



8721



Item Description

Link aggregation enabled Whether link aggregation is enabled on the interfacel Yes enabledl No disabled

Aggregation port ID ID of an aggregated interface If link aggregation isdisabled the value of this field is 0

Maximum frame Size Maximum size of a frame supported by the interface

EEE support Whether the interface supports energy efficient Ethernet(EEE)

Transmit Tw Amount of time the sender waits before starting sendingdata after leaving LPI mode

Receive Tw Amount of time the receiver expects the sender to waitbefore starting sending data after leaving LPI mode

Fallback Receive Tw Additional information provided to the sender which maybe used for more effective configuration

Echo Transmit Tw Transmit Tw value specified in the Echo message sentfrom the remote end

Echo Receive Tw Receive Tw value specified in the Echo message sent fromthe remote end

MED port information

Media policy type Type of the media policyl Voicel Voice Signalingl Guest Voicel Guest Voice Signalingl Softphone Voicel Video Conferencingl Streaming Videol Video Signalingl unknown indicates that the type of the media policy is

unknown

Unknown Policy Whether the type of the media policy is unknownl Yes unknownl Defined known

VLAN tagged Whether to add tag to the packets of the voice VLANl Yes Adds a VLAN tag to packets of the voice VLANl No Not to add a VLAN tag to packets of the voice

VLAN



8722



Item Description

Media policy VlanID ID of the voice VLAN

Media policy L2 priority Layer 2 priority

Media policy Dscp DSCP value

Power Type Power supply type

PoE PSE power source Type of the PSEl Primary indicates primary power supplyl Backup indicates backup power supplyl Unknown indicates power supply of an unknown type

Port PSE Priority PSE priority of an interfacel Unknown indicates an unknown priorityl Critical indicates the highest priorityl High indicates the medium priorityl Low indicates the lowest priority

Port Available power value Port power supply


1637 display lldp neighbor

FunctionThe display lldp neighbor command displays information about neighboring device of allinterfaces or a specified interface

Formatdisplay lldp neighbor [ interface interface-type interface-number ]



8723





Displays information aboutneighboring devices of aspecified interfacel interface-type specifies

the interface typel interface-number

specifies the interfacenumber

If no interface is specifiedthe command displaysinformation aboutneighboring devices of allinterfaces with LLDPenabled

-

ViewsAll views



Using this command you can know which neighboring devices are connected to the localdevice to which interfaces the neighboring devices are connected layer 2 information aboutthe neighbors and whether LLDP configuration is correct

Prerequisites


Example Display information about neighbor devices of interfaces GigabitEthernet001

ltHUAWEIgt display lldp neighbor interface gigabitethernet001GigabitEthernet001 has 1 neighbor(s) Neighbor index 1 Chassis type MAC address Chassis ID 00e0-11fc-1710 Port ID type Interface name Port ID GigabitEthernet001 Port description GigabitEthernet001 System name HUAWEI System description HUAWEI S5700-28P-LIHuawei Versatile Routing Platform Software



8724



VRP (R) softwareVersion 5160 (S5700 V200R009C00) Copyright (C) 2000-2015 HUAWEI TECH CO LTDSystem capabilities supported bridge router System capabilities enabled bridge router Management address type ipv4 Management address value 127001 OID 061543614120115254112111Expired time 104s Port VLAN ID(PVID) 1 VLAN name of VLAN 1 VLAN 0001 Protocol identity Auto-negotiation supported Yes Auto-negotiation enabled Yes OperMau speed(1000)duplex(Full) Power port class PD PSE power supported No PSE power enabled No PSE pairs control abilityNo Power pairs Unknown Port power classificationUnknown Link aggregation supportedYes Link aggregation enabled No Aggregation port ID 0 Maximum frame Size 9216

EEE support YesTransmit Tw 36Receive Tw 36Fallback Receive Tw 36Echo Transmit Tw 36Echo Receive Tw 36 MED Device information Device class Network Connectivity HardwareRev VERA FirmwareRev NA SoftwareRev Version 5160 V200R009C00 SerialNum NA Manufacturer name HUAWEI TECH CO LTD Model name NA Asset tracking identifier NA Media policy type Voice Unknown Policy Defined VLAN tagged Yes Media policy VlanID 0 Media policy L2 priority 6 Media policy Dscp 46 Power Type Unknown PoE PSE power source Unknown Port PSE Priority Unknown Port Available power value02(w)



8725



Table 16-35 Description of the display lldp neighbor command output

Item Description

Neighbor index Index of a neighbor

Chassis type ID sub-types of a neighboring devicel Chassis component chassis aliasl Interface alias interface aliasl Port component interface or backplane aliasl MAC address MAC addressl Network address network addressl Interface name name of the interfacel Locally assigned name of the local device

Chassis Id ID of a neighboring device

Port ID type ID sub-type of a neighboring interfacel Interface alias interface aliasl Port component interface or backplane aliasl MAC address MAC addressl Network address network addressl Interface name name of the interfacel Agent circuit ID circuit ID of the DHCP agentl Locally assigned name of the local device

Port Id ID of a neighbor interface

Port description Description of a neighboring interface

System name System name of a neighboring device

System description Description of a neighboring device

System capabilities supported Capabilities of a neighboring device (at least onecapability is supported)l other other capabilitiesl repeater repeaterl bridge bridge devicel wlanAccessPoint wireless access pointl router routerl telephone wireless devicel docsisCableDevice management stationl stationOnly base station



8726



Item Description

System capabilities enabled Capabilities enabled on a neighboring device (This field isa subset of the system capabilities supported field and atleast one capability must be enabled)l other other capabilitiesl repeater repeaterl bridge bridge devicel wlanAccessPoint wireless access point (AP)l router routerl telephone wireless devicel docsisCableDevice management stationl stationOnly base station

Management address value Management address of a neighbor

Management address Management address of a neighbor

OID Neighbor management address OID

Expired time Aging time of a neighbor

Port VLAN ID(PVID) VLAN ID of an interface



Auto-negotiation supported Whether the interface supports auto-negotiationl Yes Auto-negotiation is supportedl No Auto-negotiation is not supported

Auto-negotiation enabled Whether the interface is enabled with auto-negotiationl Yes enabledl No disabled

OperMau Transmission rate and duplex mode of the interface






8727



Item Description

PSE pairs control ability Whether the PSE control is supportedl Yes PSE control is supportedl No PSE control is not supported


Port power classification PD power control level on the interfacel Class0 indicates level 1l Class1 indicates level 2l Class2 indicates level 3l Class3 indicates level 4l Class4 indicates level 5l Unknown indicates an unknown control level

Link aggregation supported Whether link aggregation is supported on the interfacel Yes The interface supports link aggregationl No The interface does not support link aggregation

Link aggregation enabled Whether link aggregation is enabled on an interfacel Yes The interface supports link aggregationl No The interface does not support link aggregation












8728



Item Description

HardwareRev Hardware version of the product


SoftwareRev Software version of the product






unknown

Unknown Policy Whether the type of the media policy is unknown Yesindicates that the media policy type is unknown Noindicates that the media policy type is known

VLAN tagged Whether to add tag to the packets of the voice VLAN




Power Type Power supply typel PSE power-sourcing equipmentl PD powered device




8729



Item Description




1638 display lldp neighbor brief

FunctionThe display lldp neighbor brief command displays brief information about neighbors of thedevice

Formatdisplay lldp neighbor brief

ParametersNone

ViewsAll views



To quickly view the neighbors of the local device and the interfaces connected to neighborsrun this command

Prerequisites

The LLDP function has been enabled globally

Example Display information about neighbor devices



8730



ltHUAWEIgt display lldp neighbor briefLocal Intf Neighbor Dev Neighbor Intf Exptime(s)GE001 Huawei GE001 103

Table 16-36 Description of the display lldp neighbor brief command output

Item Description

Local Intf Local interface

Neighbor Dev Name of neighbor device

Neighbor Intf Neighboring interface

Exptime Aging time of a neighbor in seconds

Related Topics1637 display lldp neighbor16317 lldp enable (system view)

1639 display lldp statistics

Function

The display lldp statistics command displays statistics about LLDP packets sent and receivedby all or a specified interface

Format

display lldp statistics [ interface interface-type interface-number ]

Parameters



Displays statistics aboutLLDP packet sent andreceived by a specifiedinterfacel interface-type specifies



If no interface is specifiedthe command displaysstatistics about LLDPpackets on all interfaces

-



8731



Views

All views

Default Level

1 Monitoring level

Usage Guidelines

Usage Scenario

The display lldp statistics command displays the statistics about sent and received LLDPpackets

To display the LLDP packet statistics within a specified period of time run the reset lldpstatistics command to clear the existing statistics first and then run the display lldp statisticscommand to display the new statistics

Prerequisites

The LLDP function has been enabled globally and on interfaces

Precautions

If the LLDP function is enabled globally but disabled on an interface the packet statistics onthe interface are 0

Example

Display the statistics about sent and received LLDP packets on all interfacesltHUAWEIgt display lldp statisticsLLDP statistics global Information Statistics for GigabitEthernet001 Transmitted Frames Total 2839 Received Frames Total 2728 Frames Discarded Total 0 Frames Error Total 0 TLVs Discarded Total 0 TLVs Unrecognized Total 0 Neighbors Expired Total 0

Table 16-37 Description of the display lldp statistics command output

Item Description

Transmitted Frames Total Number of sent LLDP packets

Received Frames Total Number of received LLDP packets

Frames Discarded Total Number of discarded LLDP packets

Frames Error Total Number of received errored LLDP packets

TLVs Discarded Total Number of discarded TLVs

TLVs Unrecognized Total Number of unknown TLVs

Neighbors Expired Total Number of aged-out neighbors



8732



Related Topics16317 lldp enable (system view)16330 reset lldp statistics

16310 display lldp tlv-config

FunctionThe display lldp tlv-config command displays optional TLVs that can be sent with LLDPpackets on all or a specified interface

Formatdisplay lldp tlv-config [ interface interface-type interface-number ]



Displays optional TLVssupported by a specifiedinterfacel interface-type specifies



If no interface is specifiedthe command displaysoptional TLVs on allinterfaces

-

ViewsAll views



The display lldp tlv-config command displays the TLVs supported by the specified interfaceor all interfaces and thus you can know whether the required TLVs are enabled and unneededTLVs are disabled

Prerequisites




8733



Example

Display Optional TLVs that can be sent with LLDP packets on GigabitEthernet001

ltHUAWEIgt display lldp tlv-config interface gigabitethernet 001LLDP tlv-config of port [GigabitEthernet001]---------------------------------------------------- Name Status Default ---------------------------------------------------- Basic optional TLV ---------------------------------- Port Description TLV Yes Yes System Name TLV Yes Yes System Description TLV Yes Yes System Capabilities TLV Yes Yes Management Address TLV Yes Yes IEEE 8021 extend TLV ---------------------------------- Port VLAN ID TLV Yes Yes Port And Protocol VLAN ID TLV Yes Yes VLAN Name TLV Yes Yes Protocol identity TLV No No IEEE 8023 extend TLV ---------------------------------- MAC-Physic TLV Yes Yes Power Via MDI TLV Yes Yes Link Aggregation TLV Yes Yes Maximum Frame Size TLV Yes Yes EEE TLV Yes Yes LLDP-MED extend TLV ---------------------------------- Capabilities TLV Yes Yes Extended Power Via MDI TLV Yes Yes Inventory TLV Yes Yes Network Policy TLV Yes Yes Location Identification TLV No No

Table 16-38 Description of the display lldp tlv-config command output

Item Description

Name Type of TLV

Status Whether the interface is configured to send theTLVs of the specified type

Default Whether the TLVs of the specified types are senton an interface by default

Basic optional TLV Basic TLVs that can be sent on an interface

Port Description TLV Interface description TLV

System Name TLV System name TLV

System Description TLV System description TLV

System Capabilities TLV TLV indicating the system capability set

Management Address TLV Management address TLV



8734



Item Description

IEEE 8021 extend TLV Type of the IEEE 8021 organizational-specificTLVs that can be sent on an interface

Port VLAN ID TLV PVID TLV

Port And Protocol VLAN ID TLV Port and protocol VLAN ID TLV

VLAN Name TLV VLAN name TLV

Protocol identity TLV Protocol ID TLV

IEEE 8023 extend TLV IEEE 8023 organizational-specific TLVs that canbe sent on an interface

MAC-Physic TLV TLV indicating physical attributes of an interface

Power Via MDI TLV Power capability TLV

Link Aggregation TLV Link aggregation TLV

Maximum Frame Size TLV Maximum frame length TLV

LLDP-MED extend TLV LLDP MED TLV

Capabilities TLV TLV indicating MED capability sets

Extended Power Via MDI TLV TLV indicating the extended power supplycapabilities

Inventory TLV Inventory information including HardwareRevision TLV Firmware Revision TLV SoftwareRevision TLV Serial Number TLV ManufacturerName TLV Model name TLV and Asset id TLV

Network Policy TLV Network policy TLV

Location Identification TLV Location ID TLV

EEE TLV EEE capability TLV

16311 display snmp-agent trap feature-name lldptrap all

FunctionThe display snmp-agent trap feature-name lldptrap all command displays the status of alltraps on the LLDP module

Formatdisplay snmp-agent trap feature-name lldptrap all

ParametersNone



8735



ViewsAll views


Usage GuidelinesBefore running the display snmp-agent trap feature-name lldptrap all command run thesnmp-agent command to enable the SNMP Agent function

Example Display the status of all traps on the LLDP module

ltHUAWEIgt display snmp-agent trap feature-name lldptrap all------------------------------------------------------------------------------ Feature name LLDPTRAP Trap number 5 ------------------------------------------------------------------------------ Trap name Default switch status Current switch status lldpRemTablesChange on on hwLldpEnabled on on hwLldpDisabled on on hwLldpLocManIPAddrChange on onhwLldpRateExcessive on on

Table 16-39 Description of the display snmp-agent trap feature-name lldptrap allcommand output

Item Description

Feature name Name of the module to which a trap belongs


Trap name Names of a trap traps of the LLDP module includel lldpRemTablesChange Sends a trap when LLDP

neighbor information changesl hwLldpEnabled Sends a Huawei proprietary trap when

the LLDP function is enabled globallyl hwLldpDisabled Sends a Huawei proprietary trap when

the LLDP function is disabled globallyl hwLldpLocManIPAddrChange Sends a Huawei

proprietary trap when the LLDP management address ofthe device changes

l hwLldpRateExcessive Sends a Huawei proprietary trapwhen the rate of LLDPDUs received by an interfaceexceeds the alarm threshold



8736



Item Description

Default switch status Default status of a trapl on The trap is enabledl off The trap is disabled

Current switch status Status of a trapl on The trap is enabledl off The trap is disabled

Related Topics16331 snmp-agent trap enable feature-name lldptrap

16312 lldp clear neighbor

Function

The lldp clear neighbor command clears neighbor information in the system or on aninterface

Format

lldp clear neighbor [ interface interface-type interface-number ]

Parameters



Indicates the type andnumber of the interfacewhose neighbor informationto be cleared In thecommandl interface-type specifies



If no interface is specifiedneighbor information of allinterfaces is cleared

-

Views

User view



8737



Default Level


Usage Guidelines

Usage Scenario

If you want to obtain the latest neighbor information of interfaces use the lldp clearneighbor command to clear existing neighbor information When an interface receives newpackets new neighbor information is generated

Prerequisites


Example

Clear neighbor information of all interfaces

ltHUAWEIgt lldp clear neighborWarning This command will clear the neighbor information of all the ports Continue [YN]y

Related Topics1636 display lldp local1637 display lldp neighbor1638 display lldp neighbor brief16316 lldp enable (interface view)16317 lldp enable (system view)

16313 lldp compliance cdp receive

Function

The lldp compliance cdp receive command enables CDP-compatible LLDP on an interface

The undo lldp compliance cdp receive command disables CDP-compatible LLDP on aninterface

By default CDP-compatible LLDP is disabled on an interface

Format

lldp compliance cdp receive

undo lldp compliance cdp receive

ParametersNone



8738



ViewsEthernet interface view GE interface view XGE interface view MultiGE interface view40GE interface view port group view



Neighbors may use other proprietary protocols but LLDP for example CDP To ensure thatthe local device can discover and identify the neighbors you can use this command to enableCDP-compatible LLDP on an interface

Prerequisites

The LLDP function has been enabled globally using the lldp enable (interface view)command

Precautions

An Ethernet interface supports the LLDP configuration no matter whether it works in Layer 2or Layer 3 mode

Example Enable CDP-compatible LLDP on GigabitEthernet001

ltHUAWEIgt system-view[HUAWEI] interface GigabitEthernet 001[HUAWEI-GigabitEthernet001] lldp compliance cdp receive

Related Topics16317 lldp enable (system view)16316 lldp enable (interface view)

16314 lldp compliance cdp txrx

FunctionThe lldp compliance cdp txrx command enables an interface to exchange information withCDP-capable devices

The undo lldp compliance cdp txrx command disables an interface from exchanginginformation with CDP-capable devices

By default an interface cannot exchange information with CDP-capable devices

Formatlldp compliance cdp txrx

undo lldp compliance cdp txrx



8739



Parameters

None

Views

Ethernet interface view GE interface view XGE interface view MultiGE interface view40GE interface view port group view

Default Level


Usage Guidelines

Usage Scenario

Some IP phones send proprietary protocol packets but not DHCP packets to apply for IPaddresses After you run the lldp compliance cdp txrx command on an interface the switchcan identify proprietary protocol packets sent from such the IP phone connected to theinterface and respond to the proprietary protocol packets In addition the switch assigns thevoice VLAN configured on the LLDP module to the IP phone

Prerequisites


Precautions

The lldp compliance cdp txrx command can only be configured on the physical Ethernetinterface working in Layer 2 mode

When a switch connects the IP phones of some vendors you are advised to run the lldp tlv-enable med-tlv network-policy voice-vlan vlan vlan-id command to specify the voiceVLAN ID in the MED TLVs advertised from the interface

Example

Enable GigabitEthernet001 to exchange information with CDP-capable voice devices

ltHUAWEIgt system-view[HUAWEI] interface GigabitEthernet 001[HUAWEI-GigabitEthernet001] lldp tlv-enable med-tlv network-policy voice-vlan vlan 10[HUAWEI-GigabitEthernet001] lldp compliance cdp txrx

16315 lldp dot3-tlv power

Function

The lldp dot3-tlv power command sets the standard to which the 8023 Power via MDI TLVsent by an interface conforms

The undo lldp dot3-tlv power command restores the default configuration

By default the 8023 Power via MDI TLV conforms to 8021 ab



8740



Format

lldp dot3-tlv power 8021ab | 8023at

undo lldp dot3-tlv power 8023at


8021ab Indicates that the 8023Power via MDI TLV sent bythe interface conforms to8021 ab

-

8023at Indicates that the 8023Power via MDI TLV sent bythe interface conforms to8023 at

-

Views


Default Level


Usage Guidelines

Usage Scenario

The 8023 Power via MDI TLV has the following formatsl 8021 ab format [ TLV type | TLV information string length | 8023 OUI | MDI power

support | PSE power pair | power class ]l 8023 at format [ TLV type | TLV information string length | 8023 OUI | MDI power

support | PSE power pair | power class | typesourcepriority | PD requested power value |PSE allocated power value ]

Based on 8021 ab 8023 at extends three fields typesourcepriority PD requested powervalue and PSE allocated power value

Prerequisites


Precautions

After the global LLDP is disabled the LLDP configuration is deleted from all interfaces

Before selecting a format of the 8023 Power via MDI TLV you must know the TLV formatsupported by the neighbors The TLV format on the local device must be the same as that onthe neighbors



8741



An Ethernet interface supports the lldp dot3-tlv power command no matter whether it worksin Layer 2 or Layer 3 mode

Example

Configure the interface to send the 8023 Power via MDI TLV conforming to 8023 at

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] lldp dot3-tlv power 8023at

Related Topics1636 display lldp local16317 lldp enable (system view)16316 lldp enable (interface view)

16316 lldp enable (interface view)

Function

The lldp enable command enables LLDP on an interface

The undo lldp enable command disables LLDP on an interface

After LLDP is enabled in the system view all interfaces are enabled with LLDP

Format

lldp enable

undo lldp enable

Parameters

None

Views

Ethernet interface view GE interface view XGE interface view MultiGE interface view40GE interface view port group view MEth interface view

Default Level


Usage Guidelines

Usage Scenario

After LLDP is enabled on an interface the interface exchanges LLDP packets with LLDP-enabled neighbors The interface receives status information from the neighbors and sends thelocal status information to the neighbors The NMS then obtains the status information fortopology discovery



8742



Prerequisites


Precautions

LLDP can be enabled in the system view and the interface viewl After LLDP is enabled in the system view all interfaces are enabled with LLDPl After LLDP is disabled in the system view all LLDP settings are restored to the default

settings except the setting of LLDP trap Therefore LLDP is also disabled on allinterfaces

l An interface can send and receive LLDP packets only after LLDP is enabled in both thesystem view and the interface view

l After LLDP is disabled globally the commands for enabling and disabling LLDP on aninterface do not take effect

l If LLDP needs to be disabled on some interfaces enable LLDP globally first and run theundo lldp enable command on these interfaces To re-enable LLDP on these interfacesrun the lldp enable command in the views of these interfaces

NOTE

l LLDP can be enabled and disabled only on the physical interfaces but cannot be used on logicalinterfaces such as VLANIF interface and Eth-Trunk

l On an Eth-Trunk LLDP can only be enabled on member interfaces LLDP status of a memberinterface does not affect that of another

l An Ethernet interface supports the LLDP configuration no matter whether it works in Layer 2 orLayer 3 mode

Example

Disable LLDP on GigabitEthernet001

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] undo lldp enableInfo The LLDP is disabled on the port successfully

Related Topics1636 display lldp local16317 lldp enable (system view)

16317 lldp enable (system view)

Function

The lldp enable command enables LLDP globally

The undo lldp enable command disables LLDP globally

By default LLDP is disabled globally

Format

lldp enable



8743



undo lldp enable

Parameters

None

Views

System view

Default Level


Usage Guidelines

Usage Scenario

To view the Layer 2 link status or analyze network topology run the lldp enable command


After LLDP is enabled globally the device sends its own status information to LLDP-enabledneighbors and receives the status information from the neighbors

Precautions

The interval between enabling LLDP globally and disabling LLDP cannot be shorter than 10seconds otherwise an error message is displayed





Example

Enable LLDP globally

ltHUAWEIgt system-view[HUAWEI] lldp enableInfo Global LLDP is enabled successfully

Disable LLDP globally

ltHUAWEIgt system-view[HUAWEI] undo lldp enableWarning This command will delete the configurations of LLDP on all the portsContinue[YN]yInfo Global LLDP is disabled successfully



8744



16318 lldp management-address

Function

The lldp management-address command configures the LLDP management IP address

The undo lldp management-address command restores the default setting

By default the system automatically obtains the management IP address

Format

lldp management-address ip-address

undo lldp management-address


ip-address Specifies the managementIP address

The value is in dotteddecimal notation

Views

System view

Default Level


Usage Guidelines

Usage Scenario

The management IP address is carried in the management address TLV field of the LLDPpacket It is used by the NMS to identify and manage devices A management addressidentifies a device facilitating the layout of the network topology and network managementTo allocate a management address to a neighbor run the lldp management-addresscommand

Prerequisites


The management IP address to be allocated must be a valid IP address existing on the device


After the configuration the management IP address is added to the management address TLVfield of the LLDP packet The NMS then identifies the device according to the managementIP address

Precautions



8745



If the configured management IP address is invalid or no management IP address isconfigured the system sets an IP address in the address list as the management IP addressThe system selects the IP address in the following sequence loopback interface addressmanagement port address VLANIF interface address Layer 3 Ethernet interface address andSub-interface Among the IP addresses of the same type the system selects the smallest oneIf the system does not find a management IP address the bridge MAC address is used as themanagement IP address

Example

Set the LLDP management IP address to 1010101

ltHUAWEIgt system-view[HUAWEI] lldp management-address 1010101


16319 lldp message-transmission delay

Function

The lldp message-transmission delay command sets the LLDP packet transmission delay

The undo lldp message-transmission delay command restores the default LLDP packettransmission delay

By default the LLDP packet transmission delay is 2 seconds

Format

lldp message-transmission delay delay

undo lldp message-transmission delay [ delay ]


delay Specifies the LLDP packettransmission delay

The value is an integerranging from 1 to 8192 inseconds The default valueis 2 secondsThe delay value depends onthe interval value in lldpmessage-transmissioninterval The delay valuemust be equal to or smallerthan a quarter of the intervalvalue



8746



Views

System view

Default Level


Usage Guidelines

Usage Scenario

There is a delay before the interface sends an LLDP packet to the neighbor when the devicestatus changes frequently After the LLDP packet transmission delay is set on the device theLLDP-enabled interfaces send LLDP packets to neighbors after a delay (the delay is the sameas or longer than the delay you specified) The interfaces may send LLDP packets at differenttime points

If the device status changes frequently extend the delay in preventing the device fromfrequently sending packets to the neighbors A delay suppresses the network topologyflapping

Prerequisites



The LLDP packet transmission delay must be set properly and adjusted according to networkloads

l A large value reduces the LLDP packet transmission frequency when the local devicestatus frequently changes This helps save system resources However if the value is toolarge the device cannot notify neighbors of its status in a timely manner and the NMScannot discover the network topology changes in real time

l A small value increases the LLDP packet transmission frequency and enables the NMSto discover network topology changes in real time when the local device statusfrequently changes However if the value is too small LLDP packets are exchangedfrequently increasing the system load

l The default value is recommended

Precautions

Consider the value of interval when adjusting the value of delay because it is restricted by thevalue of intervall The value of delay ranges from 1 to 8192l The value of delay must be smaller than or equal to a quarter of interval Therefore if

you want to set delay to be greater than a quarter of interval first increase the intervalvalue to four times the new delay value and then increase the delay value

NOTE

If the interval value is smaller than four times the delay value the system displays an error messagewhen you run the undo lldp message-transmission delay command To run the undo lldp message-transmission delay command in this case increase the interval value to at least four times the delayvalue first



8747



Example

Set the LLDP packet transmission delay to 5 second

ltHUAWEIgt system-view[HUAWEI] lldp message-transmission delay 5

Related Topics1636 display lldp local16317 lldp enable (system view)16321 lldp message-transmission interval

16320 lldp message-transmission hold-multiplier

Function

The lldp message-transmission hold-multiplier command sets the hold time multiplier ofdevice information stored on neighbors

The undo lldp message-transmission hold-multiplier command restores the default holdtime multiplier of device information stored on neighbors

The default hold time multiplier is 4

Format

lldp message-transmission hold-multiplier hold

undo lldp message-transmission hold-multiplier [ hold ]


hold Specifies the hold timemultiplier of deviceinformation on neighbors

The value is an integerranging from 2 to 10 Thedefault value is 4

Views

System view

Default Level


Usage Guidelines

Usage Scenario



8748



The time multiplier is used to calculate how long a packet can be saved on a neighboringnode After receiving an LLDP packet a neighbor updates the aging time of the deviceinformation from the sender based on the TTL

The storage time calculation formula is TTL = Min (65535 (interval x hold))

TTL is the device information storage time It is the smaller value between 65535 and(interval x hold)

interval indicates the interval at which the device sends LLDP packets to neighbors Thisparameter is set by lldp message-transmission interval hold indicates the hold timemultiplier of device information on neighbors

After the LLDP function is disabled on the device its neighbors wait until the TTL of thedevice information expires and then delete the device information This prevents networktopology flapping

Prerequisites



The hold time multiplier of device information on neighbors must be set to a proper valuel A large value of hold prevents network topology flapping However if the value is too

large the device cannot notify neighbors of its status in a timely manner and the NMScannot discover the network topology changes in real time

l A small value of hold enables the NMS to discover topology change in time However ifthe value is too small the neighbors update device information too frequently Thisincreases the load on the system and wastes resources


Example

Set the hold time multiplier of device information on neighbors to 5

ltHUAWEIgt system-view[HUAWEI] lldp message-transmission hold-multiplier 5


16321 lldp message-transmission interval

Function

The lldp message-transmission interval command sets the LLDP transmission interval

The undo lldp message-transmission interval command restores the default LLDPtransmission interval

The default LLDP transmission interval is 30 seconds



8749



Formatlldp message-transmission interval interval

undo lldp message-transmission interval [ interval ]


interval Specifies the LLDPtransmission interval

The value is an integerranging from 5 to 32768 inseconds The default valueis 30 secondsThe interval value dependson the delay value in lldpmessage-transmissiondelay The value of intervalmust be equal to or greaterthan four times the value ofdelay Otherwise an erroroccurs in the configuration

ViewsSystem view



When the LLDP status of the device keeps unchanged or the device does not discover newneighbors the interface sends LLDP packets to the neighbors at a certain interval After theLLDP transmission interval is set on the device the LLDP enabled interfaces send LLDPpackets to neighbors at this interval The interfaces may send LLDP packets at different timepoints

If you want to change the network topology detection frequency run the lldp message-transmission interval command to change the LLDP transmission interval

Prerequisites



The LLDP transmission interval must be set properly and adjusted according to networkloadsl A large value reduces the LLDP packet transmission frequency This helps save system

resources However if the value is too large the device cannot notify neighbors of its



8750



status in a timely manner and the NMS cannot discover the network topology changes inreal time

l A short interval increases the LLDP packet transmission frequency and enables the NMSto discover network topology changes in real time However if the interval is too shortLLDP packets are exchanged frequently increasing the system load


Precautions

Consider the value of delay when adjusting the value of interval because it is restricted by thevalue of delayl The value of interval ranges from 5 to 32768l The value of interval must be equal to or greater than four times the value of delay

Therefore if you want to set interval to be smaller than four times the value of delayfirst reduce the delay value to be equal to or smaller than a quarter of the new intervalvalue and then reduce the interval value

NOTE

If the delay value is greater than a quarter of the interval value the system displays an error messagewhen you run the undo lldp message-transmission interval command To run the undo lldp message-transmission interval command in this case reduce the delay value to be equal to or smaller than aquarter of interval first

Example

Set the LLDP transmission interval to 35 seconds

ltHUAWEIgt system-view[HUAWEI] lldp message-transmission interval 35

Related Topics1636 display lldp local16317 lldp enable (system view)16319 lldp message-transmission delay

16322 lldp restart-delay

Function

The lldp restart-delay command sets the delay in re-enabling the LLDP function on aninterface

The undo lldp restart-delay command restores the default delay in re-enabling the LLDPfunction on an interface

The default delay is 2 seconds

Format

lldp restart-delay delay

undo lldp restart-delay [ delay ]



8751



Parameters


delay Specifies the delay in re-enabling the LLDP functionon an interface

The value is an integerranging from 1 to 10 inseconds The default valueis 2 seconds

Views

System view

Default Level


Usage Guidelines

Usage Scenario

There is a delay before LLDP is re-enabled on an interface The delay suppresses the topologyflapping caused by the frequent LLDP status changes

Prerequisites



The delay in re-enabling the LLDP function on an interface must be set properly

l A large value of delay prevents network topology flapping However if the value is toolarge the device cannot notify neighbors of its status in a timely manner and the NMScannot discover the network topology changes in real time

l A small value of delay enables the NMS to discover topology change in time Howeverif the value is too small the neighbors update device information too frequently Thisincreases the load on the system and wastes resources


Example

Set the delay in re-enabling the LLDP function on an interface to 3 second

ltHUAWEIgt system-view[HUAWEI] lldp restart-delay 3




8752



16323 lldp tlv-enable (MEth interface view)

Function

The lldp tlv-enable command sets the TLVs that can be sent by the MEth interface

The undo lldp tlv-enable command sets the TLVs disabled on the MEth interface

By default the MEth interface can advertise all TLVs except the Location Identification TLV

Format

lldp tlv-enable basic-tlv all | management-address | port-description | system-capability| system-description | system-name

lldp tlv-enable med-tlv all | capability | inventory | location-id civic-address device-type country-code ca-type ca-value amp lt1-10gt | elin-address Tel-Number

undo lldp tlv-enable basic-tlv all | management-address | port-description | system-capability | system-description | system-name

undo lldp tlv-enable med-tlv all | capability | inventory | location-id [ civic-address |elin-address ]

Parameters


all Indicates to advertise all basic TLV -

management-address Indicates to advertise Management-address TLV

-

port-description Indicates to advertise Port DescriptionTLV

-

system-capability Indicates to advertise SystemCapabilities TLV

-

system-description Indicates to advertise SystemDescription TLV

-

system-name Indicates to advertise System NameTLV

-

all Indicates to advertise all MED TLVsexcept the Location Identification TLV

-

capability Indicates to advertise MED CapabilitiesTLV

-

inventory Indicates to advertise HardwareRevision TLV Firmware Revision TLVSoftware Revision TLV Serial NumberTLV Manufacturer Name TLV ModelName TLV and Asset ID TLV

-



8753




location-id Indicates to advertise LocationIdentification TLV

-

civic-address device-typecountry-code ca-typeca-value amp lt1-10gt

Indicates to advertise the commonaddress information of the networkdevices encapsulated in LocationIdentification TLVl device-type specifies the type of the

device The value is an integer thatranges from 0 to 2 0 indicates thatthe device is a DHCP server 1indicates that the device is a switch2 indicates that the device is anMED endpoint

l country-code specifies the countrycode For the value range see ISO3166

l ca-type ca-value amplt1-10gtspecifies the address informationca-type specifies the type of addressinformation The value is an integerthat ranges from 0 to 255 ca-valuespecifies the content of the addressinformation The value is a string of1-250 characters lt1-10gt indicatesthat the preceding parameters can beentered 10 times

-

elin-address Tel-Number Advertises the emergency phonenumber encapsulated in LocationIdentification TLV

The value is astring of 10 to 25numerals Eachnumeral rangesfrom 0 to 9

ViewsMEth interface view



In LLDP all device information is encapsulated in Link Layer Discovery Protocol data units(LLDPDUs) which are then sent to neighbors An LLDPDU contains a variety of TLVs In aTLV T indicates the information type L indicates the information length and V indicates thevalue or the content to be sent



8754



Devices exchange LLDPDUs carrying TLVs to obtain neighbor information LLDPPDUssupported by the management interface includes basic TLVs and MED TLVs

Devices on both ends can have different TLV types configured You only need to configureTLV types according to networking requirements

Prerequisites

The LLDP function is enabled globally and on interfaces

Precautions

l If the all parameter is not specified all the available TLVs of the specified type can beadvertised except the Location Identification TLV If the all parameter is not specifiedonly one type of TLV can be advertised To advertise multiple types of TLVs run thiscommand multiple times

l You can specify the other types of MED TLVs only after specifying the MEDCapabilities TLVTo disable the MED Capabilities TLV first disable the other types of MED TLVs

Example

Configure The MEth interface to advertise the MED Capabilities TLV

ltHUAWEIgt system-view[HUAWEI] interface meth 001[HUAWEI-MEth001] lldp tlv-enable med-tlv capability


16324 lldp tlv-enable basic-tlv

Function

The lldp tlv-enable basic-tlv command sets the basic TLVs that can be sent by an interface

The undo lldp tlv-enable basic-tlv command set the basic TLVs disabled on an interface

By default an interface can advertise all basic TLVs

Format



Parameters


all Indicates to advertise all basic TLVs -



8755





-


-


-


-


-





Devices exchange LLDPDUs carrying TLVs to obtain neighbor information The TLVs thatcan be encapsulated in an LLDP packet include basic TLVs TLVs in the IEEE 8021 formatTLVs in the IEEE 8023 format and MED TLVs

Basic TLVs are essential for managing network devices The TLVs in the IEEE 8021 formatTLVs in the IEEE 8023 format and MED TLVs are defined by standardization organizationsand other organizations which are used to enhance the network device management You candetermine whether to advertise the IEEE 8021 format TLVs in the IEEE 8023 format andMED TLVs


Prerequisites


Precautions

If the all parameter is not specified only one type of TLV can be advertised To advertisemultiple types of TLVs run this command multiple times



8756



NOTE

An Ethernet interface working in Layer 3 mode also supports the basic TLV

Example

Configure GigabitEthernet001 to advertise all basic TLVs

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] lldp tlv-enable basic-tlv all

Related Topics16317 lldp enable (system view)16310 display lldp tlv-config

16325 lldp tlv-enable dot1-tlv

Function

The lldp tlv-enable dot1-tlv command sets to advertise TLVs defined by the IEEE 8021working group

The undo lldp tlv-enable dot1-tlv command sets the TLVs defined by the IEEE 8021working group disabled on an interface

By default an interface advertises all TLVs defined by the IEEE 8021 working group

Format

lldp tlv-enable dot1-tlv all | port-vlan-id | protocol-vlan-id [ vlan-id ] | vlan-name [ vlan-id ] | protocol-identity

undo lldp tlv-enable dot1-tlv all | port-vlan-id | protocol-vlan-id [ vlan-id ] | vlan-name[ vlan-id ] | protocol-identity

Parameters


all Indicates to advertise all TLVs definedby the IEEE 8021 working group

-

port-vlan-id Indicates to advertise port VLAN TLVThe VLAN ID is the default VLAN IDon the interface

-

protocol-vlan-id [ vlan-id ]

Indicates to advertise port protocolVLAN TLV If vlan-id is not specifiedthe interface does not support protocolVLAN TLVs

The value of vlan-id is an integer thatranges from 1 to4094



8757




vlan-name [ vlan-id ] Indicates to advertise VLAN NameTLV If vlan-id is not specified thedefault VLAN ID is used


protocol-identity Indicates to advertise protocol identityTLV

-

Views


Default Level


Usage Guidelines

Usage Scenario





Prerequisites


Precautions


NOTE

An Ethernet interface working in Layer 3 mode does not support the TLVs defined in IEEE8021



8758



Example

Configure GigabitEthernet001 to advertise the port VLAN TLV in the IEEE 8021 formatltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] lldp tlv-enable dot1-tlv port-vlan-id



Function

The lldp tlv-enable dot3-tlv command sets to advertise the TLVs defined by the IEEE 8023working group



Format

lldp tlv-enable dot3-tlv all | eee | link-aggregation | mac-physic | max-frame-size |power

undo lldp tlv-enable dot3-tlv all | eee | link-aggregation | mac-physic | max-frame-size |power

Parameters



-

eee Indicates to advertise EEE (Energy-Efficient Ethernet) TLVThe S6720EI and S6720S-EI do notsupport the EEE functionEEE is supported only when the switchhas only one neighbor

-

link-aggregation Indicates to advertise Link AggregationTLV

-

mac-physic Indicates to advertise MACPHYConfigurationStatus TLV

-

max-frame-size Indicates to advertise Maximum FrameSize TLV

-



8759




power Indicates to advertise Power Via MDITLV

-

Views


Default Level


Usage Guidelines

Usage Scenario





Prerequisites


Precautions


NOTE

An Ethernet interface working in Layer 3 mode also supports the TLVs defined by the IEEE 8023 workinggroup

Example

Configure GigabitEthernet001 to advertise the Link Aggregation TLV in the IEEE 8023format



8760



ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] lldp tlv-enable dot3-tlv link-aggregation


16327 lldp tlv-enable med-tlv

Function

The lldp tlv-enable med-tlv command sets to advertise the MED TLVs

The undo lldp tlv-enable med-tlv command sets the MED TLVs disabled on an interface

By default an interface advertises all types of MED TLVs except the Location IdentificationTLV and Network Policy TLV

NOTE

Although the interface does not advertise Network Policy TLV Network Policy TLV is still enabled

Format

lldp tlv-enable med-tlv all | capability | inventory | location-id civic-address device-type country-code ca-type ca-value amplt1-10gt | elin-address Tel-Number | network-policy [ voice-vlan vlan vlan-id [ cos cvalue | dscp dvalue ] | 8021p [ cos cvalue | dscpdvalue ] | untagged ] | power-over-ethernet

undo lldp tlv-enable med-tlv all | capability | inventory | location-id [ civic-address |elin-address ] | network-policy [ voice-vlan vlan | cos | dscp | 8021p | untagged ] |power-over-ethernet

Parameters


all Indicates that all MED TLVs exceptLocation Identification TLV andNetwork Policy TLV are advertisedNOTE

After the all parameter is specified theNetwork Policy TLV is enabled but notadvertised

-


-


-



8761





-






-



network-policy Advertises Network Policy TLVNetwork Policy TLV is used toexchange VLAN configurationsbetween network devices and terminaldevices A switch uses the TLV toadvertise voice VLAN ID and voicestream priority to an IP phone Then theIP phone forwards packets according tothe received voice VLAN ID andpriority ensuring the voice qualityNOTE

An Ethernet interface working in Layer 3mode does not support the Network PolicyTLV

-

voice-vlan Encapsulates the voice VLAN ID whenadvertising Network Policy TLV

-



8762




vlan vlan-id Specifies the voice VLAN ID The value is aninteger that rangesfrom 1 to 4094

cos cvalue Specifies the CoS priorityThe CoS priority is the PRI (Priority)field in an 8021Q VLAN frame Thisfield is 3 bits long and ensures thathigh-priority data packets areforwarded first when congestionoccurs

The value is aninteger that rangesfrom 0 to 7 Thedefault value is 5A larger valueindicates a higherpriority

dscp dvalue Sets the DSCP priorityThe first six bits of the Type of Service(ToS) field in an IPv4 packet header areused as the DiffServ Code Point(DSCP) DSCP is used in the DiffServmodel to provide QoS guarantee on anIP network The operations performedby the traffic controller on the gatewayare determined only by these six bits

The value is aninteger that rangesfrom 0 to 63 Thedefault value is 46

8021p Sets the voice VLAN ID to VLAN 0 -

untagged Configures voice devices to senduntagged voice data packets

-

power-over-ethernet Advertises Extended Power via MDITLV

-








8763





Prerequisites


Precautions

l When the supported TLVs are MED TLVs the lldp tlv-enable command with the allparameter advertises all TLVs except Location Identification TLV If the all parameter isnot specified only one type of TLV can be advertised To advertise multiple types ofTLVs run this command multiple times

l You can specify the other types of MED TLVs only after specifying the MEDCapabilities TLV

To disable the MED Capabilities TLV first disable the other types of MED TLVs

To disable the MACPHY ConfigurationStatus TLVs first disable the MED CapabilitiesTLV

l The 8023 MACPHY ConfigurationStatus TLVs are automatically advertised after theMED Capabilities TLV is advertised

l If you disable the MED TLVs using the command with the all parameter the 8023MACPHY ConfigurationStatus TLVs are not disabled automatically

Example

Configure GigabitEthernet001 to advertise the MED Capabilities TLV

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] lldp tlv-enable med-tlv capability


16328 lldp trap-interval

Function

The lldp trap-interval command sets the delay in sending neighbor change traps to the NMS

The undo lldp trap-interval command restores the default delay in sending neighbor changetraps to the NMS

By default the device sends a neighbor change trap to the NMS after a 5-second delay



8764



Format

lldp trap-interval interval

undo lldp trap-interval [ interval ]

Parameters


interval Specifies the delay insending traps

The value is an integerranging from 5 to 3600 inseconds The default valueis 5 secondsThe default value isrecommended

Views

System view

Default Level


Usage Guidelines

Usage Scenario

There is a delay before the device sends LLDP traps about neighbor information changes tothe NMS When neighbor information changes frequently you can prolong the delay In thisway the device will not frequently send traps to the NMS and the network topology flappingis suppressed

Prerequisites



After the delay is set on the device LLDP-enabled interfaces send LLDP traps to neighborsafter a delay (the delay is the same as or longer than the delay you specified) The interfacesmay send LLDP traps at different time points

Precautions

The configured delay applies only to the trap which reports changes in neighbor informationincluding the number of added neighbors number of deleted neighbors number of neighborsthat are aged out and number of neighbors of which the information is deleted

Example

Set the delay in sending neighbor change traps to 6 seconds



8765



ltHUAWEIgt system-view[HUAWEI] lldp trap-interval 6


16329 reset cdp statistics

FunctionThe reset cdp statistics command clears statistics about CDP packets that all interfacesreceive and send or CDP packets that a specified interface receives and sends

Formatreset cdp statistics [ interface interface-type interface-number ]

Parameters



Interface on which statistics about CDP packets are to beclearedl interface-type specifies the interface typel interface-number specifies the interface number

If this parameter is not specified CDP packet informationabout all interfaces is cleared

-

ViewsUser view



If you want to quickly locate and process a CDP fault you must calculate the numbers ofCDP packets sent and received by a device for a specified period Before collecting specificCDP packet statistics you can run the reset cdp statistics command to clear existing statisticsabout CDP packets

Prerequisites

LLDP has been globally enabled using the lldp enable command in the system view andLLDP has been configured to be compatible with CDP on interfaces using the lldpcompliance cdp receive command



8766



Follow-up Procedure

After running the reset cdp statistics command to clear existing statistics about CDP packetsyou can run the display cdp statistics command to check statistics about CDP packets sentand received by a device for a specific period

Precautions

If you do not set the interface parameter when running the reset cdp statistics commandstatistics about CDP packets sent and received by all interfaces are cleared Exercise cautionwhen running this command

Example

Display statistics about CDP packets that all interfaces receive and send

ltHUAWEIgt reset cdp statistics

Related Topics16317 lldp enable (system view)1635 display cdp statistics

16330 reset lldp statistics

Function

The reset lldp statistics command clears LLDP packet statistics on all interfaces or on aspecified interface

Format

reset lldp statistics [ interface interface-type interface-number ]

Parameters



Specifies the type andnumber of the interfacewhere the LLDP statisticsyou want to reset In thecommandl interface-type specifies



If no interface is specifiedLLDP packet statistics of allinterfaces are cleared

-



8767



Views

User view

Default Level


Usage Guidelines

Usage Scenario

To troubleshoot LLDP faults you may need to view LLDP packet statistics within a certainperiod of time In this case you must run the reset lldp statistics command to clear existingLLDP packet statistics and run the display lldp statistics command to view the new LLDPpacket statistics

Prerequisites


Example

Clear LLDP packet statistics on all interfaces

ltHUAWEIgt reset lldp statisticsWarning This Command will clear LLDP statistics of all the ports Continue [YN]y

Clear LLDP packet statistics of GigabitEthernet001

ltHUAWEIgt reset lldp statistics interface gigabitethernet 001

Related Topics1639 display lldp statistics16317 lldp enable (system view)

16331 snmp-agent trap enable feature-name lldptrap

Function

The snmp-agent trap enable feature-name lldptrap command enables the LLDP trapfunction on the device

The undo snmp-agent trap enable feature-name lldptrap command disables the LLDP trapfunction on the device

By default the LLDP trap function is enabled

Format

snmp-agent trap enable feature-name lldptrap [ trap-name hwlldpdisabled |hwlldpenabled | hwlldplocmanipaddrchange | hwlldprateexcessive |lldpremtableschange ]



8768



undo snmp-agent trap enable feature-name lldptrap [ trap-name hwlldpdisabled |hwlldpenabled | hwlldplocmanipaddrchange | hwlldprateexcessive |lldpremtableschange ]

Parameters


trap-name Enables or disables the trapfunction for the specifiedevent

-

hwlldpdisabled Sends a Huawei proprietarytrap when the LLDPfunction is disabled globally

-

hwlldpenabled Sends a Huawei proprietarytrap when the LLDPfunction is enabled globally

-

hwlldplocmanipaddrch-ange

Sends a Huawei proprietarytrap when the LLDPmanagement address of thedevice changes

-

hwlldprateexcessive Sends a Huawei proprietarytrap when the rate ofLLDPDUs received by aninterface exceeds the alarmthresholdThe alarm threshold is 5That is a trap is sent if morethan 5 LLDPDUs arereceived by an interfacewithin one second

-

lldpremtableschange Sends a trap when LLDPneighbor informationchanges

-

Views

System view

Default Level


Usage Guidelines

Usage Scenario



8769



To enable the device to send traps when the LLDP status changes run the snmp-agent trapenable feature-name lldptrap command

Prerequisites

A reachable route exists between the device and the NMS and the SNMP parameters are set


After the LLDP trap function is enabled the device sends traps to the NMS in one of thefollowing casesl The LLDP function is enabled or disabled globallyl The local management address changesl The rate of LLDPDUs received by an interface exceeds the alarm thresholdl A neighbor is added deleted discarded or aged out

Precautions

The LLDP trap function applies to all interfaces

If the network topology is unstable disable the LLDP trap function to prevent frequent trapsending

To set the interval between sending neighbor change traps to the NMS run the lldp trap-interval command If neighbor information changes frequently extend the interval to reducethe number of traps

Example

Enable the LLDP trap function on the device

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable feature-name lldptrap

Related Topics16311 display snmp-agent trap feature-name lldptrap all

164 Performance Management CommandsNOTE

Only the S5720HI supports performance management commands

1641 binding

Function

The binding command binds an instance to a performance statistics collection task

The undo binding command unbinds an instance from a performance statistics collectiontask

By default no instance is bound to a performance statistics collection task



8770



Formatbinding instance-type instance-type all

binding instance-type instance-type instance instance-name amplt1-5gt

undo binding instance-type instance-type all | instance instance-name amplt1-5gt

Parameters


instance-typeinstance-type

Specifies the type ofan instance bound toa performancestatistics collectiontask

The enumerated values includel ipfpm collects IP FPM statisticsl uni-mng-as-port collects statistics on an AS portl wlan-ap collects AP statisticsl wlan-radio collects statistics about a specified

AP radiol wlan-ssid collects statistics about a service set

bound to a specific AP radiol wlan-ap-wiredport collects statistics on an AP

wired port

all Binds all instances

When all isspecified instance-type can only beipfpm

-



8771




instanceinstance-name

Specifies the nameof an instance of aspecific type

The value is a string of 1 to 255 case-insensitivecharactersl When instance-type is ipfpm the instance-name

value is configured using the instance (IPFPM-MCP view) command

l When instance-type is uni-mng-as-port theinstance-name value is AS name+interfacenumber for example as1 gigabitethernet001

l When instance-type is wlan-ap the instance-namevalue is ap-id For example 1 indicates AP 1

l When instance-type is wlan-radio the instance-name value is ap-idradio-id For example 01indicates radio 1 of AP 0

l When instance-type is wlan-ssid the instance-name value is ap-idradio-idSSID namelengthSSID name ASCII code For example1059899100101102 indicates the SSID withthe name bcdef and name length 5 of radio 0 of AP1

l When instance-type is wlan-ap-wiredport theinstance-name value is ap-idport type x 100+portnumber For example 0101 indicates FE port 1 ofAP 0 The port type can be 1 (an FE port) or 2 (aGE port) The port number ranges from 0 to 99

ViewsPerformance statistics collection task view



After you bind an instance to a performance statistics collection task the system collectsperformance data of the instance Multiple instances can be bound to a performance statisticscollection task

Example Bind all instances in IP FPM to performance statistics collection task task1

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] quit[HUAWEI-nqa-ipfpm-mcp] quit



8772



[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] binding instance-type ipfpm all

Related Topics16410 pm16421 statistics-task

1642 display pm brief

Function

The display pm brief command displays brief PM information

Format

display pm brief

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

After PM is configured you can run the display pm brief command to view brief PMinformation such as the PM status number of performance statistics tasks number ofperformance statistics files

Example

Display brief PM information

ltHUAWEIgt display pm briefStatistics Status disableStatistics Start Time -Number of Statistics Tasks 2Number of Active Statistics Objects 0Number of Configured Pm Servers 0Number of Statistics Files 0Statistics Files Saved Directory pmdata



8773



Table 16-40 Description of the display pm brief command output

Item Description

Statistics Status Whether PM is enabled The value can bel enablel disable

Statistics StartTime

Time when the performance statistics function starts

Number ofStatistics Tasks

Number of performance statistics tasks

Number of ActiveStatistics Objects

Number of current performance statistics objects

Number ofConfigured PmServers

Number of configured PM servers

Number ofStatistics Files

Number of performance statistics files

Statistics FilesSaved Directory

Path where performance statistics files are saved

1643 display pm measure-info

FunctionThe display pm measure-info command displays information about performance statisticscounters

Formatdisplay pm measure-info [ instance-type instance-type ]



8774



Parameters



Specifies the type ofan instance bound toa performancestatistics task

The enumerated values includel ipfpm collects IP FPM statisticsl uni-mng-as-port collects statistics on an AS

portl wlan-ap collects AP statisticsl wlan-radio collects statistics about a specified



wired port

ViewsAll views


Usage GuidelinesBefore running the measure disable command to configure performance statistics countersfor instances of a specific type run the display pm measure-info command to viewinformation about available performance statistics counters including the name typemaximum value and minimum value of each counter

Example Display information about performance statistics counters of the instance of the IPFPMtype

ltHUAWEIgt display pm measure-infoTotal instance types 1 total measures 10--------------------------------------------------------------------------------Instance Type ipfpm Measures Count 10 Measure Name forward-loss-ratio-max Measure Type Maximum Measure Counter Size(bits) 32 Measure MaxValue 100000000 Measure MinValue -100000000

Measure Name forward-loss-ratio-min Measure Type Minimum Measure Counter Size(bits) 32 Measure MaxValue 100000000 Measure MinValue -100000000

Measure Name forward-loss-pkts-inc Measure Type Increase Measure Counter Size(bits) 64



8775



Measure MaxValue 9223372036854775807 Measure MinValue -9223372036854775808

Table 16-41 Description of the display pm measure-info command output

Item Description

Instance Type Type of an instance

Measures Count Number of a performance statistics counter

Measure Name Name of a performance statistics counter

Measure Type Type of a performance statistics counter The value can bel Increase Accumulated performance statistics are compared with

the counterl Actual The currently collected performance statistics are

compared with the counterl Maximum The maximum performance statistics are compared

with the counterl Minimum The minimum performance statistics are compared

with the counterl Average The average performance statistics are compared with

the counter

Measure CounterSize(bits)

Size of a performance statistics counter 32 bits or 64 bits

Measure MaxValue Maximum value of a performance statistics counter

Measure MinValue Minimum value of a performance statistics counter

1644 display pm statistics

FunctionThe display pm statistics command displays the collected performance statistics

Formatdisplay pm statistics task-name data-index index [ instance-type instance-type [ measuremeasure-name | instance instance-name amplt1-5gt ] ]



8776



Parameters


task-name Displays theperformancestatistics of aspecifiedperformancestatisticscollection task

The value is a string of 1 to 31 case-insensitivecharacters spaces not supported The string containsletters digits and underscores (_) and must start withletters or digits

data-indexindex

Displays theperformancestatistics collectedat a specifiedinterval

The value is an integer that ranges from 0 to 16

l If the value is 0 the current performance statistics aredisplayed

l If the value is larger than 0 the performance statisticscollected in one or more cycles are displayed Thesmaller the value the latest the statisticsndash If a short performance statistics collection cycle

(5 10 15 30 or 60 minutes) is set the value ofindex ranges from 1 to 16

ndash If a long performance statistics collection cycle(1440 minutes) is set the value of index rangesfrom 1 to 3


Specifies the typeof an instancebound to aperformancestatisticscollection task

The enumerated values includel ipfpm collects IP FPM statisticsl uni-mng-as-port collects statistics on an AS portl wlan-ap collects AP statisticsl wlan-radio collects statistics about a specified AP

radiol wlan-ssid collects statistics about a service set


wired port

measuremeasure-name

Specifies thename of astatistics counter

The value is a string of 1 to 63 case-insensitivecharacters without spaces Select statistics countersaccording to the device configuration



8777





Specifies thename of aninstance



l When instance-type is uni-mng-as-port theinstance-name value is AS name+interface numberfor example as1 gigabitethernet001



l When instance-type is wlan-ssid the instance-namevalue is ap-idradio-idSSID name lengthSSID nameASCII code For example 1059899100101102indicates the SSID with the name bcdef and namelength 5 of radio 0 of AP 1

l When instance-type is wlan-ap-wiredport theinstance-name value is ap-idport type x 100+portnumber For example 0101 indicates FE port 1 ofAP 0 The port type can be 1 (an FE port) or 2 (a GEport) The port number ranges from 0 to 99

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

To view the current or historical performance statistics run the display pm statisticscommand The system can display the current performance statistics and historicalperformance statistics collected in a maximum of 16 cycles

Example

Display the current performance statistics of the performance statistics collection task task1

ltHUAWEIgt display pm statistics task1 data-index 0Total measures count 10--------------------------------------------------------------------------------Instance Type ipfpmInstance Name 1Measure Name forward-loss-ratio-maxMeasure Data 0Valid Flag no statistics



8778



Timestamp 2014-04-15 111700

Table 16-42 Description of the display pm statistics command output

Item Description

Total measurescount

Number of a performance statistics counter

Instance Type Type of an instance bound to a performance statistics collection task

Instance Name Name of an instance bound to a performance statistics collectiontask


Measure Data Statistics counter

Valid Flag Valid flag of the performance statistics The value can bel no statistics The performance statistics are not collectedl valid The performance statistics are validl incredible value The performance statistics are not reliablel measure not configured The statistics counter is disabled

Timestamp Time when the performance statistics are collected

1645 display pm statistics-file

Function

The display pm statistics-file command displays performance statistics files

Format

display pm statistics-file [ task-name ]

Parameters


task-name Displays the performancestatistics files generated fora performance statisticstask

The value is a string of 1 to 31 case-insensitivecharacters spaces not supported The stringcontains letters digits and underscores (_) andmust start with letters or digits

Views

All views



8779




Usage GuidelinesAfter a performance statistics task starts the system automatically generates performancestatistics files for the task To view the performance statistics files generated for theperformance statistics task run the display pm statistics-file command

Example Display performance statistics files for all performance statistics tasks

ltHUAWEIgt display pm statistics-fileTotal files count 1 --------------------------------------------------------------------------------Task Name test test20130701150001txt

Table 16-43 Description of the display pm statistics-file command output

Item Description

Total files count Number of performance statistics files

Task Name Name of a performance statistics task

1646 display pm statistics-task

FunctionThe display pm statistics-task command displays information about a performance statisticscollection task

Formatdisplay pm statistics-task [ task-name ]

Parameters


task-name Displays the informationabout a specifiedperformance statisticscollection task


ViewsAll views



8780



Default Level

1 Monitoring level

Usage Guidelines

You can use this command to check information about a performance statistics collection taskincluding the running status of the task statistics collection cycle and type of the instancebound to the task

Example

Display information about performance statistics collection tasks

ltHUAWEIgt display pm statistics-taskTotal task count 1--------------------------------------------------------------------------------Task Name task1Task State readyRecord-file Status enableThreshold Alarm Status disableTask Cycle 15 minutesSample Interval 3 minutesInstance Type -Record Interval(cycle) 4File Format textFile Name Prefix task1File Transfer Mode passiveCurrent File Name -

Table 16-44 Description of the display pm statistics-task command output

Item Description

Total task count Number of performance statistics collection tasks

Task Name Name of a performance statistics collection taskThe task name is specified in the 16421 statistics-task task-namecommand

Task State Running status of a performance statistics collection task

Record-file Status Whether performance statistics file generation is enabled The valuecan bel enable This function is enabledl disable This function is not enabledThis function is configured using the 16413 record-file disablecommand

Threshold AlarmStatus

Whether the threshold alarm function is enabled The value can bel enable This function is enabledl disable This function is not enabledThis function is configured using the 16422 threshold-alarmenable command



8781



Item Description

Task Cycle Performance statistics collection cycle configured in a performancestatistics collection taskThis parameter is configured using the 16420 statistics-cycle cyclecommand

Sample Interval Sampling interval configured in a performance statistics collectiontaskThis parameter is configured using the 16417 sample-intervalinterval command

Instance Type Type of an instance bound to a performance statistics collection taskThis parameter is configured using the 1641 binding instance-typeinstance-type all | instance instance-name amplt1-5gt command

RecordInterval(cycle)

Interval at which the system generates performance statistics filesThis parameter is configured using the 16414 record-intervalinterval command

File Format Format of performance statistics files

File Name Prefix Name prefix of a performance statistics file

File Transfer Mode Mode in which statistics files are uploaded to the performancemanagement server The value can bel active The device automatically uploads statistics files to the

performance management serverl passive The device uploads statistics files to the performance

management server following the instructions from the commandline interface or network management system

Current File Name Name of the current performance statistics file

Related Topics1641 binding16413 record-file disable16414 record-interval16417 sample-interval16420 statistics-cycle16421 statistics-task

1647 display snmp-agent trap feature-name pm all

Function

The display snmp-agent trap feature-name pm all command displays the status of all trapsrelated to the PM module



8782



Formatdisplay snmp-agent trap feature-name pm all

ParametersNone

ViewsAll views


Usage GuidelinesYou can use this command to check the status of all traps related to the PM module Thesetraps can be enabled or disabled using the 16418 snmp-agent trap enable feature-namepm command

Example Display the status of all traps related to the PM module

ltHUAWEIgtdisplay snmp-agent trap feature-name pm all------------------------------------------------------------------------------Feature name PMTrap number 2------------------------------------------------------------------------------Trap name Default switch status Current switch statushwPMStatisticsTaskThresholdTriggerAlarm on onhwPMStatisticsTaskThresholdClearAlarm on on

Table 16-45 Description of the display snmp-agent trap feature-name pm all commandoutput

Item Description

Feature name Name of a module to which a trap message belongs


Trap name Name of a trap

Default switch status Whether the trap function is enabled by defaultl on The trap function is enabledl off The trap function is disabled

Current switch status Whether the trap function is enabled currentlyl on The trap function is enabledl off The trap function is disabled



8783



Related Topics16418 snmp-agent trap enable feature-name pm

1648 measure disable

FunctionThe measure disable command disables statistics indicators in a performance statistics task

The undo measure disable or measure enable command enables statistics indicators in aperformance statistics task

By default all statistics counters of the instance bound to the performance statistics collectiontask are measured

Formatmeasure disable [ measure-name ]

undo measure disable [ measure-name ]

measure enable [ measure-name ]

Parameters


measure-name Specifies the name of astatistics counter in aperformance statisticscollection task

The value is a string of 1 to 63 case-insensitive characters without spacesSelect statistics counters according to thedevice configuration




If the type of the instance bound to a performance statistics task is specified statisticsindicators of instances of the specified type are enabled by default The indicator disablecommand can be used to disable some or all statistics indicators

After you run the measure disable [ measure-name ] command some or all statisticsindicators are disabled To add one or more indicators that have been disabled to theperformance statistics task again run the measure enable [ measure-name ] or undomeasure disable [ measure-name ] command to enable these indicators

Prerequisites



8784



An instance has been bound to a performance statistics task using the binding instance-typeinstance-type-name instance instance-name command

The performance statistics function has been enabled using the statistics enable command

Example Disable measurement of the forward-loss-ratio-max counter for ipfpm instances

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] binding instance-type ipfpm all[HUAWEI-pm-statistics-task1] measure disable forward-loss-ratio-max

Related Topics1643 display pm measure-info1641 binding16410 pm16421 statistics-task

1649 path

FunctionThe path command configures the destination path to save performance statistics files on thePM server

The undo path command deletes the configured destination path

By default performance statistics files are uploaded to the default path on a PM server

Formatpath destination-path

undo path

Parameters


destination-path Specifies the destination path to saveperformance statistics files on the PMserver

The value is a string of 1 to 63case-sensitive characters withoutspaces

ViewsPM server view




8785



Usage Guidelines

Usage Scenario

To upload performance statistics files to a specific path on the PM server run the pathcommand to specify the destination path

Precautions

The specified destination path must exist in the performance management server Otherwisethe statistics file cannot be uploaded to the server

Example

Specify the destination path to save performance statistics on the PM server

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server server1[HUAWEI-pm-server-server1] path dpmdata

Related Topics16410 pm16411 pm-server

16410 pm

Function

The pm command displays the PM view

Format

pm

Parameters

None

Views

System view

Default Level


Usage Guidelines

To enable the performance statistics function of PM run the pm command to display the PMview



8786



Example Display the PM view

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm]

16411 pm-server

FunctionThe pm-server command creates a process serving the PM server and displays the view ofthe PM server created in the process If there is an existing PM server view the pm-servercommand displays the PM server view without creating a process

The undo pm-server command deletes the created process

By default no process serving the PM server is created

Formatpm-server server-name

undo pm-server server-name

Parameters


server-name Specifies the name of theprocess serving the PMserver

The value is a string of 1 to 31 case-sensitivecharacters spaces not supported The stringcontains letters digits and underscores (_) andmust start with letters or digits

ViewsPM view



To upload generated performance statistics files to the PM server run the pm-servercommand to create a process serving the PM server

Follow-up Procedure

Configure the IP address and port number for the PM server and user name and password forlogging in to the PM server Performance statistics files are uploaded to the PM server usingFTP or SFTP



8787



Precautions

If a device is enabled to upload performance statistics files to a PM server the process servingthe PM server cannot be deleted

Example

Create a process named server1 to serve the PM server

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server server1[HUAWEI-pm-server-server1]

16412 protocol

Function

The protocol command configures the parameters for connecting to a PM server

The undo protocol command deletes the parameters for connecting to a PM server

By default no PM server connection parameter is configured

Format

protocol ftp | sftp ip-address ip-address [ port port-number | net-manager-vpn | vpn-instance vpn-instance-name ]

undo protocol

Parameters


ftp Uses the FTP protocol toupload performance statisticsfiles

-

sftp Uses the SFTP protocol toupload performance statisticsfiles

-

ip-address ip-address

Specifies the IP address of thePM server

The value is in dotted decimalnotation

port port-number Specifies the port number The value is an integer that rangesfrom 1 to 65535 The default portnumber is 21 (using FTP) or 22(using SFTP)

net-manager-vpn Indicates the networkmanagement VPN

-



8788







Views

PM server view

Default Level


Usage Guidelines

Usage Scenario

To upload statistics files to a PM server use this command to configure connectionparameters including the transfer protocol IP address and port number of the PM server

Precautions

Using FTP to upload performance statistics files is insecure Therefore using SFTP isrecommended

Example

Configure the device to upload performance statistics files to the SFTP server with the IPaddress 10111

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server server1[HUAWEI-pm-server-server1] protocol sftp ip-address 10111


16413 record-file disable

Function

The record-file disable command disables performance statistics file generation

The undo record-file disable command restores performance statistics file generation

By default a performance statistics file is automatically generated and saved on the device Amaximum of four performance statistics files can be generated for each performance statisticscollection task



8789



Formatrecord-file disable

undo record-file disable

ParametersNone



Usage GuidelinesTo save system resources reduce system cost and operations on storage devices and prolongthe lifespan of storage devices during performance statistics collection run the record-filedisable command to prevent performance statistics files from being generated

The system-generated file name is named in the format of name of a performance statisticstask+time that a performance statistics file is generated and is saved in the text format Eachperformance statistics collection task can generate a maximum of four statistics files If morethan four statistics files are generated the new file replaces the earliest one

Example Disable performance statistics file generation

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] record-file disable


16414 record-interval

FunctionThe record-interval command sets the number of performance statistics collection cyclesafter which the system generates a statistics file

The undo record-interval command restores the default number of performance statisticscollection cycles

By defaultl If a short performance statistics collection cycle (5 10 15 30 or 60 minutes) is set the

system generates a statistics file after four cycles



8790



l If a long performance statistics collection cycle (1440 minutes) is set the systemgenerates a statistics file after one cycle

Format

record-interval interval

undo record-interval

Parameters


interval Specifies thenumber ofperformancestatistics collectioncycles

The value is an integer The value range depends on theperformance statistics collection cyclel If a short performance statistics collection cycle is set

the value of interval ranges from 1 to 16 and thedefault value is 4

l If a long performance statistics collection cycle is setthe value of interval ranges from 1 to 3 and thedefault value is 1

Views

Performance statistics collection task view

Default Level


Usage Guidelines

After you configure a performance statistics collection task the system periodically savescollected performance data to statistics files To set the interval at which the system generatesstatistics files run the record-interval command Then the system generates performancestatistics files every cycle x interval minutes and automatically saves the performance data inthe files The system generates a maximum of four statistics files for each performancestatistics collection task and saves performance statistics files to the path flash pmdata bydefault

Example

Configure the system to save performance data to a statistics file every three performancestatistics collection cycles If the performance statistics collection cycle is 5 minutes thesystem saves a performance data to a statistics file every 15 minutes

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] statistics-cycle 5Warning All data of the statistics task will be deleted Continue [YN] y[HUAWEI-pm-statistics-task1] record-interval 3Warning This operation will cause some data to be lost Continue [YN] y



8791



Related Topics16410 pm16414 record-interval16420 statistics-cycle16421 statistics-task

16415 reset pm current-data

FunctionThe reset pm current-data command deletes the collected performance statistics

Formatreset pm current-data [ instance-type instance-type [ measure measure-name | instanceinstance-name amplt1-5gt ] ]

Parameters



Deletes theperformancestatistics aboutinstances of aspecified type

If instance-typeinstance-type is notspecified the systemdeletes theperformancestatistics aboutinstances of alltypes

The enumerated values include

l ipfpm collects IP FPM statistics

l uni-mng-as-port collects statistics on an ASport

l wlan-ap collects AP statistics

l wlan-radio collects statistics about a specifiedAP radio

l wlan-ssid collects statistics about a service setbound to a specific AP radio

l wlan-ap-wiredport collects statistics on an APwired port

measuremeasure-name

Deletes theperformancestatistics about aspecified counter




8792





Deletes theperformancestatistics about aspecified instance




l When instance-type is wlan-ap the instance-name value is ap-id For example 1 indicates AP1


l When instance-type is wlan-ssid the instance-name value is ap-idradio-idSSID namelengthSSID name ASCII code For example1059899100101102 indicates the SSID withthe name bcdef and name length 5 of radio 0 ofAP 1





To delete the collected performance statistics and collect new performance statistics run thereset pm current-data command

Precautions

Performance statistics cannot be restored after being deleted Confirm your action beforeusing this command

Example Delete the collected performance statistics



8793



ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] reset pm current-data


16416 retry

Function

The retry command sets the number of retransmissions for a performance statistics file

The undo retry command restores the number of retransmissions for a performance statisticsfile to the default value

The default number of retransmissions for a performance statistics file is 3

Format

retry retry-times

undo retry

Parameters


retry-times Sets the number of retransmissionsfor a performance statistics file

The value is an integer ranging from 1to 3 The default value is 3

Views

PM server view

Default Level


Usage Guidelines

The system generates performance statistics files and transmits these files to a PM server Toset the number of retransmissions for a performance statistics file run the retry command

Example

Set the number of retransmissions for a performance statistics file to 2

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server server1[HUAWEI-pm-server-server1] retry 2



8794




16417 sample-interval

FunctionThe sample-interval command configures the sampling interval for a performance statisticstask

The undo sample-interval command restores the default setting

By default the sampling interval varies with the performance statistics interval as follows

l If the interval at which the performance statistics are collected is 5 minutes the defaultsampling interval is 1 minute

l If the interval at which the performance statistics are collected is 10 minutes the defaultsampling interval is 2 minutes




l If the interval at which the performance statistics are collected is 1440 minutes thedefault sampling interval is 15 minutes

Formatsample-interval interval

undo sample-interval



8795



Parameters


interval Specifies theinterval at whichthe performancestatistics collectedin a performancestatistics task issampled

The value can be 1 2 3 5 10 15 30 or 60 in minutes

l If the interval at which performance statistics arecollected is 5 minutes the sampling interval is 1minute by default and can be set to 1 minute or 5minutes

l If the interval at which performance statistics arecollected is 10 minutes the sampling interval is 2minutes by default and can be set to 1 2 5 or 10minutes


l If the interval at which performance statistics arecollected is 30 minutes the sampling interval is 5minutes by default and can be set to 1 2 3 5 10 15or 30 minutes

l If the interval at which performance statistics arecollected is 60 minutes the sampling interval is 5minutes by default and can be set to 1 2 3 5 10 1530 or 60 minutes


ViewsPerformance statistics task view


Usage GuidelinesAfter the statistics task is configured the system collects statistics at a specified samplinginterval The shorter the sampling interval the more accurate the statistics However moresystem resources are consumed

Example Set the sampling interval to 5 minutesltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] sample-interval 5



8796




16418 snmp-agent trap enable feature-name pm

FunctionThe snmp-agent trap enable feature-name pm command enables the trap function of thePM module

The undo snmp-agent trap enable feature-name pm command disables the trap function ofthe PM module

By default the trap function of the PM module is enabled

Formatsnmp-agent trap enable feature-name pm [ trap-name trap-name ]

undo snmp-agent trap enable feature-name pm [ trap-name trap-name ]

Parameters


trap-name trap-name Specifies the name of a trap This parameter has enumeratedvalues Select one from the displayedvalues

ViewsSystem view


Usage GuidelinesThe snmp-agent trap enable feature-name pm command is used to enable a PM trap Afterthat the trap generated during the device running will be sent to the NMS

You can run the 1647 display snmp-agent trap feature-name pm all command to checkthe configuration result

Example Enable hwpmstatisticstaskthresholdtriggeralarm for the PM module

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable feature-name pm trap-name hwpmstatisticstaskthresholdtriggeralarm



8797



Related Topics1647 display snmp-agent trap feature-name pm all

16419 statistics enable

Function

The statistics enable command enables the performance statistics function

The undo statistics enable command disables the performance statistics function

By default the performance statistics function is disabled

Format

statistics enable

undo statistics enable

Parameters

None

Views

PM view

Default Level


Usage Guidelines

Usage Scenario

To collect performance statistics run the statistics enable command to enable theperformance statistics function

Precautions

After the undo statistics enable command is run the performance statistics task that isrunning will be stopped Therefore exercise caution when you run this command

Example

Enable the performance statistics function

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics enable

Related Topics16410 pm



8798



16420 statistics-cycle

FunctionThe statistics-cycle command configures the performance statistics collection interval for aperformance statistics task

The undo statistics-cycle command restores the default setting

The default interval is 15 minutes

Formatstatistics-cycle cycle

undo statistics-cycle

Parameters


cycle Specifies theperformance statisticscollection interval for aperformance statisticstask

The value can be 5 10 15 30 60 or 1440 inminutes The default value is 15 minutes

The system defines the interval 1440 minutes as along interval and the interval 5 10 15 30 or 60minutes as a short interval




A specific performance statistics collection interval is set for each performance statistics taskAfter the performance statistics collection interval is set bind an instance to the performancestatistics task and enable statistics counter measurement so that the system can collectperformance statistics at the specified interval If the statistics interval is set to a small valuethe obtained performance statistics are more accurate but more system resources areconsumed


Running the statistics-cycle command in the performance statistics task view has thefollowing impactsl Performance statistics of the performance statistics task are deletedl The default interval at which the system generates performance statistics files is used In

the case of a short statistics collection interval the system generates a performance



8799



statistics file every four performance statistics collection intervals in the case of a longstatistics collection interval the system generates a performance statistics file every oneperformance statistics collection interval

Example

Set the performance statistics collection interval for the performance statistics task namedtask1 to 5 minutes

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] statistics-cycle 5Warning All data of the statistics task will be deleted Continue [YN] y


16421 statistics-task

Function

The statistics-task command creates a performance statistics task or displays the performancestatistics task view

The undo statistics-task command deletes a performance statistics task

By default no performance statistics task is created

Format

statistics-task task-name

undo statistics-task task-name

Parameters


task-name Specifies the name of aperformance statisticstask


Views

PM view

Default Level




8800



Usage Guidelines

Usage Scenario

A performance statistics task is the minimum statistics collection unit of PM Beforeconfiguring the performance statistics function run the statistics-task command to create aperformance statistics task Only one performance statistics collection interval can beconfigured for each performance statistics task After a performance statistics task isconfigured enable statistics counter measurement for the task

Precautions

l A maximum of 16 performance statistics tasks can be configuredl After the undo statistics-task command is run to delete a performance statistics task

performance statistics and performance statistics files of the task are deleted

Example

Configure a performance statistics task named task1

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1]


16422 threshold-alarm enable

Function

The threshold-alarm enable command enables the threshold alarm

The undo threshold-alarm enable command disables the threshold alarm

By default the threshold alarm function is disabled

Format

threshold-alarm enable

undo threshold-alarm enable

Parameters

None

Views

Performance statistics task view

Default Level




8801




The threshold alarm function enables users to learn the device operating status in a timelymanner so that the device maintenance level can be promoted To monitor the running datarun the command to enable the threshold alarm

Precautions

After the undo threshold-alarm enable command is run the threshold alarm function will bedisabled and threshold alarms will be cleared Exercise caution before operation

Follow-up Procedure

After the command is run run the 16423 threshold-alarm measure command to configuremonitoring rules for the threshold alarm Otherwise the threshold alarm function will not takeeffect

Example Enable the threshold alarm function

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] threshold-alarm enable

Related Topics16423 threshold-alarm measure

16423 threshold-alarm measure

FunctionThe threshold-alarm measure command creates monitoring rules for threshold alarms

The undo threshold-alarm measure command deletes monitoring rules for threshold alarms

By default no monitoring rules are created for threshold alarms about performance statisticstasks

Formatthreshold-alarm measure measure-name operation ge | le trigger-value trigger-value-val clear-value clear-value-val

undo threshold-alarm measure measure-name operation ge | le



8802



Parameters


measure-name Specifies the thresholdmonitoring indicator Theindicator name ispredefined by eachfeature

The value is a string of 1 to 63 case-insensitive characters without spaces Selectstatistics counters according to the deviceconfiguration

operation ge |le

Specifies the type oftriggering a thresholdalarm

Enumerated value ge or lel ge the system triggers an alarm if the

monitored indicator value is greater thanor equal to the threshold value

l le the system triggers an alarm if themonitored indicator value is less than orequal to the threshold value

trigger-valuetrigger-value-val

Specifies the thresholdinformation when thealarm is triggered

The value is an integer and the value rangeis determined by measure-name

clear-value clear-value-val

Specifies the thresholdinformation when thealarm is cleared


Views


Default Level


Usage Guidelines

Usage Scenario

The threshold alarm function is used for the system to periodically monitor the deviceoperating status If an alarm condition is triggered the alarm will be sent to the NMS andcleared after the alarm condition is cleared

The threshold-alarm measure command configures threshold monitoring rules for currentperformance statistics tasks The threshold-alarm measure command configures the alarmtriggering type threshold for triggering an alarm and threshold for clearing an alarm based onthe instance type and indicators of the threshold monitoring instance

Prerequisites

Before the threshold-alarm measure command is run run the binding instance-typeinstance-type all | instance instance-name amplt1-5gt command to bind a thresholdmonitoring instance and run the threshold-alarm enable command to enable the thresholdalarm function Otherwise alarms will not be sent



8803



Example

Create threshold monitoring rules

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] binding instance-type ipfpm all[HUAWEI-pm-statistics-task1] threshold-alarm enable[HUAWEI-pm-statistics-task1] threshold-alarm measure forward-loss-ratio-max operation ge trigger-value 1000 clear-value 10

Related Topics1641 binding16422 threshold-alarm enable

16424 upload

Function

The upload command configures the device to upload performance statistics files to a PMserver

Format

upload request-name file filename amplt1-16gt

Parameters


request-name Specifies the name of arequest for uploadingperformance statisticsfiles


file filename Specifies the name of aperformance statisticsfile

The value is a string of 1 to 255 case-insensitivecharacters without spaces

The file name can contain the file path Ifmultiple files are specified separate them withspaces

Views

PM view

Default Level

3 Management level



8804



Usage Guidelines

Usage Scenario

The system periodically generates performance statistics files based on the collectedperformance statistics You can manually upload the statistics files to a PM server

Prerequisites

A request for uploading performance statistics files to the PM server has been created usingthe upload-config request-name server server-name command

Example

Configure the device to upload performance statistics file to the PM server

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server ftpserver[HUAWEI-pm-server-ftpserver] quit[HUAWEI-pm] upload-config req1 server ftpserver[HUAWEI-pm] upload req1 file stream20130703103001txt

Related Topics16410 pm16426 upload-config

16425 upload auto

Function

The upload auto command enables a device to automatically upload performance statisticsfiles to a server

The undo upload auto command disables a device from automatically uploadingperformance statistics files to a server

By default a device does not automatically upload performance statistics files to a server

Format

upload auto request-name

undo upload auto

Parameters


request-name Specifies the name of arequest for uploadingperformance statistics files toa server

The value is a string of 1 to 31 case-sensitivecharacters spaces not supported The stringcontains letters digits and underscores (_)and must start with letters or digits



8805



Views


Default Level


Usage Guidelines

Usage Scenario

The system periodically generates performance statistics files based on the collectedperformance statistics To enable the device to automatically upload performance statisticsfiles to the PM server at a specific interval run the upload auto command

Prerequisites


Example

Configure the device to automatically upload statistics files to a PM server

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server ftpserver[HUAWEI-pm-server-ftpserver] quit[HUAWEI-pm] upload-config req1 server ftpserver[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] upload auto req1


16426 upload-config

Function

The upload-config command creates a request for uploading performance statistics files to aspecified PM server

The undo upload-config command deletes a request for uploading performance statisticsfiles to a specified PM server

By default no request for uploading performance statistics files is available on a device

Format

upload-config request-name server server-name

undo upload-config request-name



8806



Parameters




server server-name

Specifies the name of theprocess serving the PMserver


Views

PM view

Default Level


Usage Guidelines

Usage Scenario

To enable a device to upload performance statistics files to a PM server run the upload-config command to create a file uploading request

Prerequisites

A PM server process has been created using the pm-server server-name command

Follow-up Procedure

Enable the device to upload performance statistics files to the PM server

l Run the upload request-name file filename amplt1-16gt command in the PM view tomanually upload statistics files to the PM server

l Run the upload auto request-name command in the performance statistics collectiontask view to configure the device to automatically upload statistics files to the PM server

Example

Create a request for uploading statistics files to a PM server

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server ftpserver[HUAWEI-pm-server-ftpserver] quit[HUAWEI-pm] upload-config req1 server ftpserver




8807



16411 pm-server16424 upload16426 upload-config

16427 username password

FunctionThe username password command configures the user name and password for logging in tothe PM server

The undo username command deletes the user name and password for logging in to the PMserver

By default no user name and password for logging in to the PM server are configured

Formatusername user-name password password

undo username

Parameters


user-name Specifies the username for logging into a PM server

The name is a string of 1 to 255 case-sensitivecharacters without spaces

password Specifies thepassword for loggingin to a PM server

The value is a string of 1 to 128 characters or a stringof 32 to 200 characters The password can be in plainor cipher textl The password in plain text is a string of 1 to 128

case-sensitive characters without spacesl The password in cipher text is a string of 32 to 200

characters

The password is displayed in ciphertext in theconfiguration file regardless of whether it is input inplaintext or cipher text

NOTEA 24-character ciphertext password configured in an earlierversion is also supported in this version

ViewsPM server view




8808



Usage Guidelines

To log in to a PM server for upload performance statistics files to the PM server run theusername password command to configure the user name and password

Example

Configure the user name and password for logging in to the PM server

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server server1[HUAWEI-pm-server-server1] username admin password Pwd123



NOTE

Only the S5720HI supports iPCA

1651 ach

Function

The ach command creates an Atomic Closed Hop (ACH) and displays the ACH view If theACH already exists the command displays the ACH view directly

The undo ach command deletes an ACH and all configurations in the ACH view

By default no ACH is created

Format

ach ach-id

undo ach ach-id

Parameters


ach-id Specifies an ACH ID The value is an integer ranging from 1 to 2147483647

Views

IPFPM-MCP instance view



8809



Default Level


Usage Guidelines

Usage Scenario

An ACH consists of two target logical ports (TLPs) and is used to identify a segment betweentwo specified devices on the network In IP FPM hop-by-hop measurement you need tospecify the ACH for the target flow in a measurement instance and configure the direction andmeasurement points for the target flow in the ACH view You can create an ACH and enterthe ACH view by running the ach command

Prerequisites

The instance command has been run to configure an IP FPM instance on an MCP

Example

Create an ACH

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] ach 1

Related Topics16540 mcp (IPFPM-DCP instance view)16545 out-group16523 in-group

1652 authentication-mode (IPFPM-DCP view)

Function

The authentication-mode command configures the authentication mode and password on aData Collecting Point (DCP)

The undo authentication-mode command deletes the authentication mode and password ona DCP

By default no authentication mode or password is configured on a DCP

Format

authentication-mode hmac-sha256 key-id key-id [ cipher ] password

undo authentication-mode hmac-sha256



8810



Parameters


hmac-sha256 Uses HMAC-SHA256 to encryptand authenticate packets sent by aDCP to the MCP

-

key-id key-id Specifies the ID of theauthentication password configuredon a DCP


cipher Specifies the cipher-textauthentication password on a DCP

-

password Specifies the authenticationpassword on a DCP

The value is a case-sensitive characterstring without spacesl The value is a string of 1 to 255

characters in plain textl The value is a string of 32 to 392

characters in cipher text

Views

IPFPM-DCP view

Default Level


Usage Guidelines

Usage Scenario

After the same authentication mode and password are configured on the MCP and DCPs theMCP accepts the packets only from authenticated DCPs This improves statistics data securityand reliability

Prerequisites

Global DCP has been enabled using the nqa ipfpm dcp command

Example

Configure the authentication mode and password on a DCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] authentication-mode hmac-sha256 key-id 1 cipher huawei

Related Topics16543 nqa ipfpm dcp1654 authentication-mode (IPFPM-MCP view)1653 authentication-mode (IPFPM-DCP instance view)



8811



1653 authentication-mode (IPFPM-DCP instance view)

Function

The authentication-mode command configures the authentication mode and password for ameasurement instance on a DCP

The undo authentication-mode command deletes the authentication mode and password of ameasurement instance on a DCP

By default no authentication mode or password is configured for a measurement instance ona DCP

Format



Parameters



-

key-id key-id Specifies the ID of theauthentication password configuredfor a measurement instance


cipher Specifies the cipher-textauthentication password for ameasurement instance

-

password Specifies the authenticationpassword for a measurementinstance




Views

IPFPM-DCP instance view

Default Level


Usage Guidelines

Usage Scenario



8812



On a network demanding high security when iPCA is used to measure network-level packetloss enable authentication After the same authentication mode and password are configuredon the MCP and DCPs the MCP accepts the packets only from authenticated DCPs Thisimproves network security and reliability of packet loss measurement The authentication-mode command configures the authentication mode and password for a measurement instanceon a DCP

Prerequisites

A measurement instance has been created on the DCP using the instance command

Precautions

If the authentication-mode command is not used to configure the authentication mode andpassword all measurement instances of the DCP use the authentication mode and passwordconfigured by the authentication-mode (IPFPM-DCP view) command

Example Configure the authentication mode and password for a measurement instance

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] authentication-mode hmac-sha256 key-id 1 cipher huawei

Related Topics16524 instance (IPFPM-DCP view)1654 authentication-mode (IPFPM-MCP view)1652 authentication-mode (IPFPM-DCP view)

1654 authentication-mode (IPFPM-MCP view)

FunctionThe authentication-mode command configures the authentication mode and password on theMeasurement Control Point (MCP)

The undo authentication-mode command deletes the authentication mode and password onthe MCP

By default no authentication mode or password is configured on the MCP

Formatauthentication-mode hmac-sha256 key-id key-id [ cipher ] password

undo authentication-mode hmac-sha256 key-id key-id



8813



Parameters


hmac-sha256 Uses HMAC-SHA256 to decryptand authenticate packets sent by aDCP to the MCP

-

key-id key-id Specifies the ID of theauthentication password configuredon the MCP


cipher Specifies the cipher-textauthentication password configuredon the MCP

-

password Specifies the authenticationpassword configured on the MCP




ViewsIPFPM-MCP view



On a network demanding high security when iPCA is used to measure network-level packetloss enable authentication After the same authentication mode and password are configuredon the MCP and DCPs the MCP accepts the packets only from authenticated DCPs Thisimproves network security and reliability of packet loss measurement The authentication-mode command configures the authentication mode and password on the MCP

Prerequisites

Global MCP has been enabled using the nqa ipfpm mcp command

Precautions

The MCP and DCP must be configured with the same authentication mode and passwordotherwise the MCP cannot obtain packet loss measurement from the DCP

Example Configure the authentication mode and password on the MCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] authentication-mode hmac-sha256 key-id 1 huawei



8814



Related Topics16544 nqa ipfpm mcp1652 authentication-mode (IPFPM-DCP view)1653 authentication-mode (IPFPM-DCP instance view)

1655 color-flag loss-measure

Function

The color-flag loss-measure command configures the color bit used in network-level packetloss measurement

The undo color-flag command restores the default color bit used in network-level packet lossmeasurement

By default bit 6 in the ToS field is used as the color bit for network-level packet lossmeasurement The default configuration is recommended

Format

color-flag loss-measure tos-bit tos-bit | flags-bit0

undo color-flag

Parameters


tos-bit tos-bit Specifies a bit in the range of bits 3 to 7 in the ToS fieldof IP packets as the color bit for network-level packetloss measurement


flags-bit0 Specifies bit 0 in the Flags field of IP packets as thecolor bit for network-level packet loss measurement

-

Views

IPFPM-DCP view

Default Level


Usage Guidelines

Usage Scenario

Before deploying Packet Conservation Algorithm for Internet (iPCA) to implement network-level packet loss measurement run this command to configure the color bit You can select acolor bit according to the actual situation and network planning

Prerequisites



8815




Precautions

All devices on a network must use the same color bit setting When the DS field is used toprovide differentiated service it is not recommended that you configure bits 3-5 as color bitsbecause the measurement result may be inaccurate

When both network-level and device-level packet loss measurements are enabled on a devicethe color bits must be differentiated

Example

Configure bit 3 in the ToS field as the color bit for network-level packet loss measurement

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] color-flag loss-measure tos-bit 3

Related Topics16543 nqa ipfpm dcp

1656 dcp

Function

The dcp command associates the DCP ID with a measurement instance on the MCP

The undo dcp command disassociates the DCP ID from a measurement instance on the MCP

By default no DCP ID is associated with a measurement instance on the MCP

Format

dcp dcp-id

undo dcp [ dcp-id ]

Parameters


dcp-id Specifies the DCP ID to be associated with ameasurement instance


Views


Default Level




8816



Usage Guidelines

Usage Scenario

Each measurement instance of the MCP contains one or more DCP IDs The MCP checkswhether the statistics data is complete based on the DCP ID so the DCP ID must be specifiedfor a measurement instance created on the MCP The dcp command associates the DCP IDwith a measurement instance on the MCP

Prerequisites

A measurement instance has been created on the MCP using the instance command

Precautions

The DCP ID associated with the measurement instance on the MCP must be the same as theDCP ID configured by the dcp id command on the DCP

The undo dcp command without dcp-id specified deletes all DCP IDs associated with ameasurement instance

Example

Associate a DCP ID with measurement instance 1 on the MCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] dcp 10111

Related Topics16544 nqa ipfpm mcp16525 instance (IPFPM-MCP view)

1657 dcp id

Function

The dcp id command sets the DCP ID

The undo dcp id command deletes the DCP ID

By default no DCP ID is configured

Format

dcp id dcp-id

undo dcp id

Parameters


dcp-id Specifies the DCP ID It is recommended that youconfigure the router ID of the device as the DCP ID




8817



Views

IPFPM-DCP view

Default Level


Usage Guidelines

Usage Scenario

When the MCP communicates with a DCP the DCP encapsulates statistics data collectedfrom Target Logical Ports (TLPs) in a packet and sends the packet with the DCP ID as thesource IP address After receiving the packet sent from the DCP the MCP compares the DCPID in the packet with the DCP ID configured by the dcp command

l If the two DCP IDs are the same the MCP accepts the packet and then summarizes andcalculates the statistics data

l If the two DCP IDs are different the MCP considers the packet invalid and discards it

Prerequisites


Precautions

Each DCP has a unique ID on the network It is recommended that you configure the routerID of the device as the DCP ID The DCP ID must be the same as the DCP ID in themeasurement instance configured by the dcp command on the MCP

Example

Set the DCP ID

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] dcp id 10111

Related Topics16543 nqa ipfpm dcp16541 mcp id1656 dcp

1658 description (IPFPM-DCP instance view)

Function

The description command configures the description for a measurement instance on a DCP

The undo description command deletes the description of a measurement instance on a DCP

By default no description is configured for a measurement instance on a DCP



8818



Formatdescription text

undo description

Parameters


text Specifies the description of ameasurement instance

The value is a string of 1 to 64 case-sensitivecharacters with spaces supported

ViewsIPFPM-DCP instance view


Usage GuidelinesThe description command configures the description for a measurement instance on a DCPwhich helps you understand the function of the measurement instance

It is recommended that the description command be used to configure the description for ameasurement instance in the following situationsl Many measurement instances are configured and it is difficult to differentiate functions

of each measurement instancel The interval for using the same measurement instance is too long and functions of

measurement instances change

Example Configure the description for measurement instance 1

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] description NanJinToHeFei

Related Topics1659 description (IPFPM-MCP instance view)

1659 description (IPFPM-MCP instance view)

FunctionThe description command configures the description for a measurement instance on theMCP

The undo description command deletes the description of a measurement instance on theMCP



8819



By default no description is configured for a measurement instance on the MCP


undo description

Parameters




ViewsIPFPM-MCP instance view






Example Configure the description for measurement instance 1 on the MCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] description NanJinToHeFei

Related Topics1658 description (IPFPM-DCP instance view)

16510 display ipfpm dcp

FunctionThe display ipfpm dcp command displays the DCP configuration in the IP FlowPerformance Measurement (FPM) system



8820



Format

display ipfpm dcp

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

You can run this command to check the DCP configuration

Example

Display the DCP configuration

ltHUAWEIgt display ipfpm dcp

Specification Information(Main Board) Max Instance Number 512 Max 10s Instance Number 512 Max 1s Instance Number 1 Max TLP Number 512 Max TLP Number Per Instance 8

Configuration Information DCP ID 10111 Loss-measure Flag tos-bit6(default) Authentication Mode -- Test Instances MCP ID 10222 Test Instances MCP Port 65030(default) Current Instance Number 1

Table 16-46 Description of the display ipfpm dcp command output

Item Description

Specification Information(MainBoard)

Specification information of the main board

Max Instance Number Maximum number of measurement instancessupported

Max 10s Instance Number Maximum number of measurement instances atintervals of 10s


Max TLP Number Maximum number of TLPs supported



8821



Item Description

Max TLP Number Per Instance Maximum number of TLPs supported by eachmeasurement instance

Configuration Information DCP configuration

DCP ID DCP ID

Loss-measure Flag Color bit used in packet loss measurementl tos-bit3 bit 3 in the ToS fieldl tos-bit4 bit 4 in the ToS fieldl tos-bit5 bit 5 in the ToS fieldl tos-bit6 bit 6 in the ToS fieldl tos-bit7 bit 7 in the ToS fieldl flag-bit0 bit 0 in the Flags fieldTo configure the color bit run the 1655 color-flag loss-measure command

Authentication Mode Authentication mode on the DCPl hmac-sha256 HMAC-SHA256 encrypted

authenticationl -- non-authenticationTo configure the authentication mode on a DCPrun the 1652 authentication-mode (IPFPM-DCP view) command

Test Instances MCP ID MCP ID To associate an MCP ID with ameasurement instance of a DCP run the 16540mcp (IPFPM-DCP instance view) command

Test Instances MCP Port MCP Port To configure the UDP port numberthrough which the DCP and MCP communicatewith each other run the 16540 mcp (IPFPM-DCP instance view) command

Current Instance Number Number of measurement instances

Related Topics16511 display ipfpm mcp

16511 display ipfpm mcp

FunctionThe display ipfpm mcp command displays the MCP configuration and status in the IP FlowPerformance Measurement (FPM) system



8822



Format

display ipfpm mcp

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

You can run this command to check the MCP configuration and status

Example

Display the MCP configuration

ltHUAWEIgt display ipfpm mcpSpecification Information Max Instance Number 128 Max DCP Number Per Instance 128 Max ACH Number Per Instance 16 Max TLP Number Per ACH 16

Configuration Information MCP ID 10111 Status Active Protocol Port 65030(default) Current Instance Number 1

Table 16-47 Description of the display ipfpm mcp command output

Item Description

Specification Information Specifications of the MCP

Max Instance Number Maximum number of measurement instancessupported by the MCP

Max DCP Number Per Instance Maximum number of DCPs supported by eachmeasurement instance on the MCP

Max ACH Number Per Instance Maximum number of ACHs supported by eachmeasurement instance on the MCP

Max TLP Number Per ACH Maximum number of TLPs supported by ACHon the MCP

Configuration Information MCP configuration



8823



Item Description

MCP ID MCP ID To set the MCP ID run the 16541mcp id command on the MCP

Status MCP statusl Active The MCP works properlyl Deleting The undo nqa ipfpm mcp

command is being used to disable globalMCP

Protocol Port UDP port number through which the DCP andMCP communicate with each other To configurethe UDP port number through which the DCPand MCP communicate with each other run the16546 protocol udp port command

Current Instance Number Total number of measurement instances

Related Topics16510 display ipfpm dcp

16512 display ipfpm statistic-type

Function

The display ipfpm statistic-type command displays packet loss statistics of a specifiedmeasurement instance in the IP Flow Performance Measurement (FPM) system

Format

display ipfpm statistic-type loss instance instance-id [ ach ach-id ]

Parameters


loss Displays packet loss statistics -

instance instance-id Displays packet loss statistics of aspecified measurement instance


ach ach-id Displays hop-by-hop performancestatistics for an Atomic Closed Hop(ACH)


Views

All views



8824





The packet loss statistics of a specified measurement instance include the indicators such asthe number of discarded packets number of discarded bytes and packet loss ratio To viewpacket loss statistics of a specified measurement instance run the display ipfpm statistic-type command

To locate and diagnose network faults when network performance deteriorates run thedisplay ipfpm statistic-type command with ach configured to check statistics for a specifiedACH

Precautions

This command can be only executed on the MCP

The first statistics record obtained through the IP FPM may be inaccurate so do not use thefirst statistics record to determine network performance

If the packet loss ratio is a negative value the service packets may be unknown unicastpackets or the color bits on devices participating in measurement may be different

Example Display packet loss statistics of measurement instance 1

ltHUAWEIgt display ipfpm statistic-type loss instance 1Latest loss statistics of forward flowUnit p - packet b - byte ------------------------------------------------------------------------------------------ Period Loss(p) LossRatio(p) Loss(b) LossRatio(b) ------------------------------------------------------------------------------------------ 136118757 20 20000000 2000 20000000 136118756 20 20000000 2000 20000000 136118755 20 20000000 2000 20000000 136118753 20 20000000 2000 20000000 136118752 20 20000000 2000 20000000 136118751 20 20000000 2000 20000000 136118750 20 20000000 2000 20000000 136118749 20 20000000 2000 20000000 136118748 20 20000000 2000 20000000 136118747 20 20000000 2000 20000000 136118746 20 20000000 2000 20000000 136118745 20 20000000 2000 20000000



8825



Latest loss statistics of backward flowUnit p - packet b - byte ------------------------------------------------------------------------------------------ Period Loss(p) LossRatio(p) Loss(b) LossRatio(b) ------------------------------------------------------------------------------------------ 136118757 20 20000000 2000 20000000 136118756 20 20000000 2000 20000000 136118755 20 20000000 2000 20000000 136118753 20 20000000 2000 20000000 136118752 20 20000000 2000 20000000 136118751 20 20000000 2000 20000000 136118750 20 20000000 2000 20000000 136118749 20 20000000 2000 20000000 136118748 20 20000000 2000 20000000 136118747 20 20000000 2000 20000000 136118746 20 20000000 2000 20000000 136118745 20 20000000 2000 20000000

Table 16-48 Description of the display ipfpm statistic-type command output

Item Description

Period Measurement interval

Loss(p) Number of discarded packets

LossRatio(p) Packet loss ratio

Loss(b) Number of discarded bytes

LossRatio(b) Packet loss ratio of bytes

16513 display iplpm configuration brief

Function

The display iplpm configuration brief command displays the brief configuration of device-level packet loss measurement (including measurement on the entire device and direct link)

Format

display iplpm configuration brief



8826



Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

To view parameters of device-level packet loss measurement run this command

Example

Display the brief configuration of device-level packet loss measurement

ltHUAWEIgt display iplpm configuration briefConfiguration information----------------------------------------------------------------Loss-measure flag flags-bit0(default)Global loss-measure interval(s) 10(default)Global loss-measure status disableGlobal loss-measure alarm disableLoss-measure board number 1Loss-measure board list 0Loss-measure port number 9Loss-measure port list GigabitEthernet001 GigabitEthernet002 GigabitEthernet003 GigabitEthernet004 GigabitEthernet005 GigabitEthernet006 GigabitEthernet007 GigabitEthernet008 GigabitEthernet009----------------------------------------------------------------

Table 16-49 Description of the display iplpm configuration brief command output

Item Description

Loss-measure flag Color bit for packet loss measurement Toconfigure the color bit run the iplpm loss-measure color-flag commandl tos-bit6 bit 6 in the ToS fieldl tos-bit7 bit 7 in the ToS fieldl flags-bit0 bit 0 in the Flags fieldThe value default indicates that the defaultcolor bit is used



8827



Item Description

Global loss-measure interval(s) Measurement interval of packet lossmeasurement on the device To set themeasurement interval run the iplpm globalloss-measure interval commandThe value default indicates that the defaultmeasurement interval is used

Global loss-measure status Whether packet loss measurement on thedevice is enabled To packet lossmeasurement for a device run the iplpmglobal loss-measure enable commandl enablel disable

Global loss-measure alarm Whether the alarm and clear alarm of packetloss ratio are enabled To enable the alarmand clear alarm of packet loss ratio run theiplpm global loss-measure alarm enablecommandl enablel disable

Loss-measure board number Number of cards that support device-levelpacket loss measurement

Loss-measure board list List of slot numbers of cards that supportdevice-level packet loss measurement Thevalue -- indicates that no card supportsdevice-level packet loss measurement

Loss-measure port number Number of interfaces where packet lossmeasurement for direct links is enabled

Loss-measure port list List of interfaces where packet lossmeasurement for direct links is enabled Thevalue -- indicates that no interface isenabled with packet loss measurement fordirect links

Related Topics16535 iplpm loss-measure color-flag16530 iplpm global loss-measure interval16529 iplpm global loss-measure enable16528 iplpm global loss-measure alarm enable



8828



16514 display iplpm loss-measure statistics global

Function

Run the display iplpm loss-measure statistics global command displays the packet lossmeasurement result on a device

Format

display iplpm loss-measure statistics global

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

You can run this command to view the packet loss measurement result on a device includingthe number of discarded packets packet loss ratio and error information

Example

Display the packet loss measurement result on a device

ltHUAWEIgt display iplpm loss-measure statistics global Latest global loss statistics-------------------------------------------------------------------------------- StartTime(DST) Loss Packets LossRatio ErrorInfo -------------------------------------------------------------------------------- 2014-06-12 184730 344127 4513519 OK 2014-06-12 184720 381085 4513196 OK 2014-06-12 184710 381192 4513290 OK 2014-06-12 184700 381339 4513341 OK 2014-06-12 184650 381465 4513392 OK 2014-06-12 184640 381444 4513487 OK 2014-06-12 184630 381129 4513309 OK --------------------------------------------------------------------------------

Table 16-50 Description of the display iplpm loss-measure statistics global command output

Item Description

StartTime(DST) Time the packet loss measurement resultwas generated (standard DST) which is alsothe start time of each measurement interval

Loss Packets Number of discarded packets in the currentmeasurement interval



8829



Item Description

LossRatio Packet loss ratio in the current measurementinterval

ErrorInfo Error code about packet loss measurementin the current measurement intervall OK There is no error and the packet

loss measurement result is normall Incomplete The statistics data is

incomplete An exception may occur inthe inter-card channel or the statisticsdata on a card cannot be sent

16515 display iplpm loss-measure statistics history-record

FunctionThe display iplpm loss-measure statistics history-record command displays the historyrecords of packet loss measurement on a device and a direct link

Formatdisplay iplpm loss-measure statistics history-record global | interface interface-typeinterface-number

Parameters


global Displays the history records of packet lossmeasurement on a device

-


Displays the history records of packet lossmeasurement on a direct link

-

ViewsAll views


Usage GuidelinesWhen the measurement interval is 1s 10s or 60s the system summarizes statistics results ineach measurement interval every 5 minutes to obtain the maximum and minimum packet lossratios within 5 minutes When the measurement interval is 600s the system summarizesstatistics results in each measurement interval every 60 minutes to obtain the maximum and



8830



minimum packet loss ratios within 60 minutes The system saves a maximum of foursummarized records You can run this command to view history records

Example

Display the history records of packet loss measurement on a device

ltHUAWEIgt display iplpm loss-measure statistics history-record globalLatest global history record(every 5 minutes)------------------------------------------------------------------------ Record no 29 Period(DST) 2014-03-19 162010 to 2014-03-19 162510 Valid statistic data number 30 Maximum loss ratio 0000000 Minimum loss ratio 0000000 Total loss packets 0 Total receive packets 0

Record no 28 Period(DST) 2014-03-19 161510 to 2014-03-19 162010 Valid statistic data number 30 Maximum loss ratio 0000000 Minimum loss ratio 0000000 Total loss packets 0 Total receive packets 0



------------------------------------------------------------------------

Display the history records of packet loss measurement on a direct link of GE001

ltHUAWEIgt display iplpm loss-measure statistics history-record interface gigabitethernet 001Latest history record of interface GigabitEthernet001(every 5 minutes)---------------------------------------------------------------------------- Record no 29 Period(DST) 2014-03-19 162010 to 2014-03-19 162510 Valid statistic data number 30 Maximum forward loss ratio 0000000 Minimum forward loss ratio 0000000 Total forward loss packets 0 Total forward receive packets 0 Maximum backward loss ratio 20000000 Minimum backward loss ratio 19980020 Total backward loss packets 6000 Total backward receive packets 30001

Record no 28 Period(DST) 2014-03-19 161510 to 2014-03-19 162010 Valid statistic data number 30 Maximum forward loss ratio 0000000 Minimum forward loss ratio 0000000 Total forward loss packets 0



8831



Total forward receive packets 0 Maximum backward loss ratio 20079920 Minimum backward loss ratio 19980020 Total backward loss packets 6001 Total backward receive packets 30003

Record no 27 Period(DST) 2014-03-19 161010 to 2014-03-19 161510 Valid statistic data number 30 Maximum forward loss ratio 0000000 Minimum forward loss ratio 0000000 Total forward loss packets 0 Total forward receive packets 0 Maximum backward loss ratio 20039880 Minimum backward loss ratio 19960080 Total backward loss packets 6001 Total backward receive packets 30005

Record no 26 Period(DST) 2014-03-19 160510 to 2014-03-19 161010 Valid statistic data number 30 Maximum forward loss ratio 0000000 Minimum forward loss ratio 0000000 Total forward loss packets 0 Total forward receive packets 0 Maximum backward loss ratio 20059880 Minimum backward loss ratio 19980020 Total backward loss packets 6001 Total backward receive packets 30004---------------------------------------------------------------------------------

Table 16-51 Description of the display iplpm loss-measure statistics history-record commandoutput

Item Description

Record no History record ID

Period(DST) Time history records were generated (standard DST)

Valid statisticdata number

Number of valid history statistics records

Maximum lossratio

Maximum packet loss ratio of the device

Minimum lossratio

Minimum packet loss ratio of the device

Total loss packets Total number of packets discarded by the device

Total receivepackets

Total number of packets received by the device

Maximumforward loss ratio

Maximum packet loss ratio of a forward flow (a forward flow is sentby the local device interface and received by the remote deviceinterface)

Minimumforward loss ratio

Minimum packet loss ratio of a forward flow (a forward flow is sentby the local device interface and received by the remote deviceinterface)



8832



Item Description

Total forward losspackets

Total number of discarded packets of a forward flow (a forward flowis sent by the local device interface and received by the remote deviceinterface)

Total forwardreceive packets

Total number of received packets (including the number of discardedpackets) of a forward flow (a forward flow is sent by the local deviceinterface and received by the remote device interface)

Maximumbackward lossratio

Maximum packet loss ratio of a backward flow (a backward flow issent by the remote device interface and received by the local deviceinterface)

Minimumbackward lossratio

Minimum packet loss ratio of a backward flow (a backward flow issent by the remote device interface and received by the local deviceinterface)

Total backwardloss packets

Total number of discarded packets of a backward flow (a backwardflow is sent by the remote device interface and received by the localdevice interface)

Total backwardreceive packets

Total number of received packets (including the number of discardedpackets) of a backward flow (a backward flow is sent by the remotedevice interface and received by the local device interface)

16516 display iplpm loss-measure statistics interface

FunctionThe display iplpm loss-measure statistics interface command displays the packet lossmeasurement result on the direct link of a specified interface

Formatdisplay iplpm loss-measure statistics interface interface-type interface-number [ forward |backward ]

Parameters



Displays the packet loss measurement result on the direct link ofa specified interface

-

forward Displays the packet loss measurement result of a forward flowon the direct link of a specified interface A forward flow is sentby the local device interface and received by the remote deviceinterface

-



8833




backward Displays the packet loss measurement result of a backward flowon the direct link of a specified interface A backward flow issent by the remote device interface and received by the localdevice interface

-

ViewsAll views


Usage GuidelinesYou can run this command to view the packet loss measurement result in the forward andbackward directions including the number of discarded packets and packet loss ratio

Example Display the packet loss measurement result on the direct link of GE001

ltHUAWEIgt display iplpm loss-measure statistics interface gigabitethernet 001Latest forward loss statistics of interface GigabitEthernet001------------------------------------------------------------------------------------------------------- StartTime(DST) Forward Loss Packets Forward LossRatio ErrorInfo ------------------------------------------------------------------------------------------------------- 2014-03-19 155050 200 19980020 OK 2014-03-19 155040 200 20000000 OK 2014-03-19 155030 200 19980020 OK 2014-03-19 155020 200 20020020 OK 2014-03-19 155010 200 20000000 OK 2014-03-19 155000 200 19980020 OK--------------------------------------------------------------------------------------------------------Latest backward loss statistics of interface GigabitEthernet001 --------------------------------------------------------------------------------------------------------- StartTime(DST) Backward Loss Packets Backward LossRatio ErrorInfo --------------------------------------------------------------------------------------------------------- 2014-03-19 155050 0 0000000 OK 2014-03-19 155040 0 0000000 OK 2014-03-19 155030 0 0000000 OK 2014-03-19 155020 0 0000000 OK



8834



2014-03-19 155010 0 0000000 OK 2014-03-19 155000 0 0000000 OK------------------------------------------------------------------------------------------------------------

Table 16-52 Description of the display iplpm loss-measure statistics interface commandoutput

Item Description


Forward Loss Packets Number of discarded packets of a forwardflow (a forward flow is sent by the localdevice interface and received by the remotedevice interface) in the current measurementinterval

Forward LossRatio Packet loss ratio of a forward flow (aforward flow is sent by the local deviceinterface and received by the remote deviceinterface) in the current measurementinterval

Backward Loss Packets Number of discarded packets of a backwardflow (a backward flow is sent by the remotedevice interface and received by the localdevice interface) in the current measurementinterval

Backward LossRatio Packet loss ratio of a backward flow (abackward flow is sent by the remote deviceinterface and received by the local deviceinterface) in the current measurementinterval



8835



Item Description

ErrorInfo Error code about packet loss measurementin the current measurement intervall Init The device is in initialized state and

there is no statistics datal OK There is no error and the packet

loss measurement result is normall NoRecvData The local end does not

receive statistics data from the remoteend The possible causes are as followsndash The packet loss measurement on a

direct link is not enabled on theremote device

ndash The direct link becomes faulty orthere is a forwarding node on thelink

l DataErr The local end receives errorstatistics data from the remote end

l DiffAuth The authentication modes orpasswords on both ends are different

l DiffIntvl The measurement intervals onboth ends are different

l ASynClock The time on both ends isasynchronous When this code occurscheck the NTP configuration

l PortIsDown The interface is Down

16517 display iplpm loss-measure statistics port-flow interface

Function

The display iplpm loss-measure statistics port-flow interface command displays statisticsabout discarded packets on an interface

Format

display iplpm loss-measure statistics port-flow interface interface-type interface-number

Parameters


interface-type interface-number Displays statistics about discarded packets on aspecified interface

-



8836



Views

All views

Default Level

1 Monitoring level

Usage Guidelines

When you find packet loss on an interface in the packet loss measurement result on the directlink in the display iplpm loss-measure statistics interface command output you can run thedisplay iplpm loss-measure statistics port-flow interface command to check the statisticsdata Then you can check whether the fault on the local interface causes packet loss

Example

Display statistics about discarded packets on GE001

ltHUAWEIgt display iplpm loss-measure statistics port-flow interface gigabitethernet 001Latest port loss statistics of interface GigabitEthernet001-------------------------------------------------------------------------------- StartTime(DST) Output Packets Loss Ratio Input Packets Loss Ratio -------------------------------------------------------------------------------- 2014-04-01 180940 0000000 0000000 2014-04-01 180930 0000000 0000000 2014-04-01 180920 0000000 0000000 2014-04-01 180910 0000000 0000000 ---------------------------------------------------------------------------------

Table 16-53 Description of the display iplpm loss-measure statistics port-flow interfacecommand output

Item Description


Output Packets Loss Ratio Packet loss ratio of packets sent by theinterface in the current measurementinterval which is used for reference only

Input Packets Loss Ratio Packet loss ratio of packets received by theinterface in the current measurementinterval which is used for reference only

16518 display iplpm loss-measure statistics qos-queue interface

Function

The display iplpm loss-measure statistics qos-queue interface command displays statisticsabout sent packets in QoS queues on an interface



8837



Formatdisplay iplpm loss-measure statistics qos-queue interface interface-type interface-number

Parameters



Displays statistics about sent packets in QoSqueues on a specified interface

-

ViewsAll views


Usage GuidelinesWhen you find packet loss on an interface in the packet loss measurement result on the directlink in the display iplpm loss-measure statistics interface command output you can run thedisplay iplpm loss-measure statistics qos-queue interface command to check the statisticsabout sent packets in QoS queues on an interface Then you can check whether congestion inqueues causes packet loss

Example Display statistics about sent packets in QoS queues on GE001

ltHUAWEIgt display iplpm loss-measure statistics qos-queue interface gigabitethernet 001Latest qos queue loss statistics of interface GigabitEthernet001 --------------------------------------------------------------------------------- StartTime(DST) 2014-03-19 162510 Queue0 0000000 Queue1 0000000 Queue2 0000000 Queue3 0000000 Queue4 0000000 Queue5 0000000 Queue6 0000000 Queue7 0000000 UserQueue 0000000 StartTime(DST) 2014-03-19 162500 Queue0 0000000 Queue1 0000000 Queue2 0000000 Queue3 0000000



8838



Queue4 0000000 Queue5 0000000 Queue6 0000000 Queue7 0000000 UserQueue 0000000 ---------------------------------------------------------------------------------

Table 16-54 Description of the display iplpm loss-measure statistics qos-queue interfacecommand output

Item Description


Queue0-Queue7 Packet loss ratios of queues 0 to 7 in themeasurement interval which is used forreference only

UserQueue Packet loss ratio of the subscriber queue onthe interface in the current measurementinterval The value of this field can beobtained only when HQoS is configuredand is used for reference only

16519 display snmp-agent trap feature-name ipfpm all

Function

The display snmp-agent trap feature-name ipfpm all command displays all traps of the IPFlow Performance Measurement (FPM) module

Formatdisplay snmp-agent trap feature-name ipfpm all

Parameters

None

Views

All views

Default Level

1 Monitoring level



8839



Usage GuidelinesWhen you need to check the status of the IP FPM module but do not determine whether thetrap function of the IP FPM module is enabled run the display snmp-agent trap feature-name ipfpm all command to check the status of all traps of the IP FPM module

Example Display all traps of the IP FPM module

ltHUAWEIgt display snmp-agent trap feature-name ipfpm all------------------------------------------------------------------------------ Feature name IPFPM Trap number 4 ------------------------------------------------------------------------------ Trap name Default switch status Current switch status hwIpfpmLossRatioExceed off on hwIpfpmLossRatioRecovery off on hwIpfpmTlpExceed off on hwIpfpmTlpRecovery off on

Table 16-55 Description of the display snmp-agent trap feature-name ipfpm all commandoutput

Item Description

Feature name Name of the module that the trap message belongs to


Trap name Trap name Traps of the IP FPM module includel hwIpfpmLossRatioExceed The packet loss ratio exceeds

the thresholdl hwIpfpmLossRatioRecovery The default packet loss

ratio is restoredl hwIpfpmTlpExceed The number of TLPs exceeds the

limitl hwIpfpmTlpRecovery The default number of TLPs is

restored

Default switch status Default status of the trap functionl on The trap function is enabledl off The trap function is disabled

Current switch status Status of the trap functionl on The trap function is enabledl off The trap function is disabled

Related Topics16547 snmp-agent trap enable feature-name ipfpm



8840



16520 display snmp-agent trap feature-name iplpm all

Function

The display snmp-agent trap feature-name iplpm all command displays all traps of the IPLocal Performance Measurement (LPM) module

Formatdisplay snmp-agent trap feature-name iplpm all

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

When you need to check the status of the IP LPM module but do not determine whether thetrap function of the IP LPM module is enabled run the display snmp-agent trap feature-name iplpm all command to check the status of all traps of the IP LPM module

Example

Display all traps of the IP LPM module

ltHUAWEIgt display snmp-agent trap feature-name iplpm all------------------------------------------------------------------------------Feature name iplpm Trap number 4 ------------------------------------------------------------------------------Trap name Default switch status Current switch status hwIplpmGlobalLossRatioExceed on on hwIplpmGlobalLossRatioRecovery on on hwIplpmLinkForwardLossRatioExceed on on hwIplpmLinkForwardLossRatioRecovery on on

Table 16-56 Description of the display snmp-agent trap feature-name iplpm all commandoutput

Item Description





8841



Item Description

Trap name Trap name Traps of the IP LPM module includel hwIplpmGlobalLossRatioExceed The packet loss ratio

of the entire device exceeds the upper limitl hwIplpmGlobalLossRatioRecovery The packet loss

ratio of the entire device falls below the upper limitl hwIplpmLinkForwardLossRatioExceed The packet loss

ratio of the link between directly connected devicesexceeds the upper limit

l hwIplpmLinkForwardLossRatioRecovery The packetloss ratio of the link between directly connected devicesfalls below the upper limit



Related Topics16548 snmp-agent trap enable feature-name iplpm

16521 flow (IPFPM-DCP instance view)

FunctionThe flow command configures a target flow in a measurement instance on a DCP

The undo flow command deletes the target flow from a measurement instance on a DCP

By default no target flow is configured in a measurement instance on a DCP

Format Define a unidirectional flowl When the protocol of a target flow is TCP or UDP run the following command

flow forward | backward protocol tcp | udp source-port src-port-number1[ to src-port-number2 ] | destination-port dest-port-number1 [ to dest-port-number2 ] | dscp dscp-value | source src-ip-address [ src-mask-length ] | destination dest-ip-address [ dest-mask-length ]

l When the protocol of a target flow is not TCP or UDP run the following commandflow forward | backward protocol protocol-number | dscp dscp-value | sourcesrc-ip-address [ src-mask-length ] | destination dest-ip-address [ dest-mask-length ]

Define a bidirectional symmetrical flow



8842



l When the protocol of a target flow is TCP or UDP run the following command

flow bidirectional protocol tcp | udp source-port src-port-number1 [ to src-port-number2 ] | destination-port dest-port-number1 [ to dest-port-number2 ] | dscpdscp-value | source src-ip-address [ src-mask-length ] | destination dest-ip-address[ dest-mask-length ]

l When the protocol of a target flow is not TCP or UDP run the following command

flow bidirectional protocol protocol-number | dscp dscp-value | source src-ip-address[ src-mask-length ] | destination dest-ip-address [ dest-mask-length ]

Cancel the configured target flow

undo flow forward | backward | bidirectional

Parameters


forward Indicates the forward flow -

backward Indicates the backward flow -

protocol tcp |udp

Indicates that the protocol of a targetflow is TCP or UDP

-

source-port src-port-number1

Specifies the start source portnumber of a target flow


src-port-number2 Specifies the end source portnumber of a target flow

The value is an integer thatranges from 1 to 65535 src-port-number2 must be largerthan src-port-number1

destination-portdest-port-number1

Specifies the start destination portnumber of a target flow


dest-port-number2 Specifies the end destination portnumber of a target flow

The value is an integer thatranges from 1 to 65535 dest-port-number2 must be largerthan dest-port-number1

dscp dscp-value Specifies the value of aDifferentiated Services CodePoint(DSCP) of a target flow


source src-ip-address Specifies the source IP address of atarget flow


src-mask-length Specifies the mask length of thesource IP address of a target flow


destination dest-ip-address

Specifies the destination IP addressof a target flow


dest-mask-length Specifies the mask length of thedestination IP address of a targetflow




8843




protocol protocol-number

Specifies the protocol type of atarget flow

The value is an integerranging from 1 to 5 7 to 16or 18 to 255NOTE

The value 6 indicates TCP andthe value 17 indicates UDP

bidirectional Indicates the bidirectionalsymmetrical flowNOTE

If the target flow is symmetricalbidirectional set src-ip-address tospecify a source IP address and dest-ip-address to specify a destination IPaddress for the target flow

-




A target flow is the objective in iPCA measurement and can be defined by any combinationsof source IP address destination IP address protocol type DSCP value source port numberand destination port number Specifying more attributes can make the target flow accurateTherefore it is recommended that you specify more attributes to improve precision ofmeasurement results

Precautions

A target flow has the direction feature If a target flow is unidirectional only a forward flowor a backward flow needs to be configured If a target flow is bidirectional (the source anddestination addresses of forward and backward flows mirror to each other) only abidirectional symmetrical flow needs to be configured The system then automaticallygenerates two symmetrical unidirectional flows If the source and destination addresses arenot mirrored two unidirectional flows need to be configured

A measurement instance can contain only one unidirectional flow or bidirectional flow (twounidirectional flows logically) Different measurement instances cannot contain the sametarget flow That is a target flow cannot belong to both instance A and instance B and theforward flow and backward flow in the same measurement instance cannot be the same

When you define a bidirectional symmetrical flow you must specify the source anddestination IP addresses

Example Configure a target flow of measurement instance 1 on a DCP



8844



ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] flow bidirectional protocol udp source-port 1025 source 10111 destination 10222

Related Topics16543 nqa ipfpm dcp16524 instance (IPFPM-DCP view)

16522 flow (IPFPM-MCP-ACH view)

Function

The flow command configures the target flow direction in the Atomic Closed Hop (ACH)view

The undo flow command deletes the target flow direction in the ACH view

By default no direction is configured for target flows in the ACH view

Format

flow forward | backward

undo flow

Parameters


forward Indicates the forward target flow -

backward Indicates the backward target flow -

Views

IPFPM-MCP-ACH view

Default Level


Usage Guidelines

Usage Scenario

Run the flow command in IP FPM hop-by-hop performance statistics scenarios

Prerequisites

The ach command has been run to create an ACH and display the ACH view



8845



Example

Configure the forward target flow in the ACH view

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] ach 1[HUAWEI-nqa-ipfpm-mcp-instance-1-ach-1] flow forward

Related Topics16544 nqa ipfpm mcp16525 instance (IPFPM-MCP view)1651 ach

16523 in-group

Function

The in-group command creates a Target Logical Port (TLP) in-group for the target flow

The undo in-group command deletes a TLP in-group or deletes a TLP from a TLP in-group

By default no TLP in-group is configured for the target flow

Format

in-group dcp dcp-id tlp tlp-id

undo in-group [ dcp dcp-id tlp tlp-id ]

Parameters


dcp dcp-id Specifies a DCP to which TLPs in a TLPin-group belongs

This value is in dotted decimalnotation

tlp tlp-id Indicates a TLP in a TLP in-group The value is an integer ranging from1 to 16777215

Views

IPFPM-MCP-ACH view

Default Level


Usage Guidelines

Usage Scenario



8846



To measure the packet loss or delay of service packets entering a network run the in-groupcommand In IP FPM hop-by-hop performance statistics scenarios a hop is a set of links andinterfaces that service packets travel through from one measurement point or group to thenext measurement point or group and therefore is represented by (TLP in-group TLP out-group) Performance statistics are implemented on the TLP in-point or in-group throughwhich service packets enter a network and the TLP out-point or out-group through whichservice packets leave the network

Prerequisites


Example

Create a TLP in-group for the target flow

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] ach 1[HUAWEI-nqa-ipfpm-mcp-instance-1-ach-1] in-group dcp 10111 tlp 100

Related Topics16544 nqa ipfpm mcp1651 ach16523 in-group

16524 instance (IPFPM-DCP view)

Function

The instance command creates an IPFPM-DCP instance and displays the IPFPM-DCPinstance view or directly displays the view of an existing IPFPM-DCP instance

The undo instance command deletes an IPFPM-DCP instance

By default no IPFPM-DCP instance is created on a DCP

Format

instance instance-id

undo instance instance-id

Parameters


instance-id Specifies the ID of an IPFPM-DCPinstance


Views

IPFPM-DCP view



8847



Default Level


Usage Guidelines

Usage Scenario

The DCP collects statistics data based on measurement instances Each measurement instanceconsists of the target flow TLP and measurement interval The MCP reports measurementresults based on measurement instances The MCP summarizes and analyzes statistics data ofthe same measurement instance on all DCPs and reports measurement results of target flows

Prerequisites


Follow-up Procedure

Run the flow command to configure a target flow run the tlp command to configure the TLPsof the measurement instance and run the interval command to configure the measurementinterval

Precautions

To measure packet loss for a specified service flow create the same measurement instance onthe MCP and DCP

Example

Create IPFPM-DCP instance 1

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1

Related Topics16543 nqa ipfpm dcp1658 description (IPFPM-DCP instance view)16525 instance (IPFPM-MCP view)16521 flow (IPFPM-DCP instance view)16549 tlp16526 interval (IPFPM-DCP instance view)

16525 instance (IPFPM-MCP view)

Function

The instance command creates an IPFPM-MCP instance and displays the IPFPM-MCPinstance view or directly displays the view of an existing IPFPM-MCP instance

The undo instance command deletes an IPFPM-MCP instance

By default no IPFPM-MCP instance is created on the MCP



8848



Format



Parameters


instance-id Specifies the ID of an IPFPM-MCPinstance


Views

IPFPM-MCP view

Default Level


Usage Guidelines

Usage Scenario


Prerequisites


Precautions


Example

Create IPFPM-MCP instance 1

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1

Related Topics16544 nqa ipfpm mcp1659 description (IPFPM-MCP instance view)16524 instance (IPFPM-DCP view)



8849



16526 interval (IPFPM-DCP instance view)

FunctionThe interval command sets the measurement interval of a measurement instance on a DCP

The undo interval command restores the default measurement interval of a measurementinstance on a DCP

By default the measurement interval of a measurement instance on a DCP is 10 seconds

Formatinterval interval

undo interval

Parameters


interval Specifies the measurementinterval of a measurement instanceon a DCP

The value is of the enumerated type andcan be 1 10 60 or 600 in seconds




The measurement interval of a measurement instance on a DCP is the interval at which a TLPcollects statistics on packets or bytes and records the timestamp of packet receiving orsending It is also the interval at which a DCP reports statistics data to the MCP A shorterinterval indicates a higher frequency at which a DCP reports statistics data to the MCP so theinterval adjustment affects the performance of the DCP and MCP

Considering factors such as the clock synchronization offset maximum transmission delayand device performance you can run this command to change the measurement interval

Precautions

The measurement intervals of the same measurement instances on all DCPs must be the sameotherwise the statistics data will be empty

To ensure accuracy of statistics data disable the statistics collection in the IPFPM-DCPinstance view before changing the measurement interval

The measurement interval of a measurement instance cannot be changed when themeasurement instance is running If the measurement interval of a running measurement



8850



instance is changed the statistics reported by MCP may be inaccurate To change themeasurement interval run the measure disable command in the IPFPM-MCP instance viewto disable the measurement and then run the measure enable command to enable themeasurement

Example Set the measurement interval of measurement instance 1 to 60s

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] interval 60

Related Topics16543 nqa ipfpm dcp16524 instance (IPFPM-DCP view)16521 flow (IPFPM-DCP instance view)

16527 ipfpm tlp

FunctionThe ipfpm tlp command binds a Target Logical Port (TLP) to an interface in a measurementinstance on a DCP

The undo ipfpm tlp command unbinds a TLP from an interface in a measurement instance ona DCP

By default an interface is not bound to a TLP in a measurement instance on a DCP

Formatipfpm tlp tlp-id

undo ipfpm tlp tlp-id | all

Parameters


tlp-id Specifies the ID of a TLP The value is an integer that rangesfrom 1 to 16777215

all Cancels the binding between all TLPs andinterfaces

-

ViewsGE interface view XGE interface view Eth-Trunk interface view




8851



Usage Guidelines

Usage Scenario

Before performing packet loss measurement run this command to bind a TLP to an interface

Prerequisites

A Layer 2 or Layer 3 interface can be bound to a TLP If you want to bind a Layer 2 interfaceto a TLP the undo portswitch command must have been executed in the interface view toswitch the interface to Layer 3 mode

Precautions

On a DCP one TLP is bound to one interface

Example

Bind GE001 to TLP 100

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] undo portswitch[HUAWEI-GigabitEthernet001] ipfpm tlp 100

Related Topics16549 tlp

16528 iplpm global loss-measure alarm enable

Function

The iplpm global loss-measure alarm enable command enables the alarm and clear alarm ofthe packet loss ratio for device-level packet loss measurement

The undo iplpm global loss-measure alarm enable command restores the default setting

By default the alarm and clear alarm of the packet loss ratio are disabled

Format

iplpm global loss-measure alarm enable

undo iplpm global loss-measure alarm enable

Parameters

None

Views

System view

Default Level




8852



Usage Guidelines

After this command is used the alarm threshold and clear alarm threshold of the packet lossratio are 5 and 1l If the packet loss ratio in five consecutive measurement intervals exceeds the alarm

threshold the device reports the hwIpfpmLossRatioExceed alarm to the NMS to notifythe link fault in real time

l If the packet loss ratio in five consecutive measurement intervals falls below or isequivalent to the clear alarm threshold the device reports thehwIpfpmLossRatioRecovery alarm to the NMS to notify link recovery in real time

Example

Enable the alarm and clear alarm of the packet loss ratio for device-level packet lossmeasurement

ltHUAWEIgt system-view[HUAWEI] iplpm global loss-measure alarm enable

16529 iplpm global loss-measure enable

Function

The iplpm global loss-measure enable command enables packet loss measurement for adevice

The undo iplpm global loss-measure enable command disables packet loss measurement fora device

By default packet loss measurement for a device is disabled

Format

iplpm global loss-measure enable

undo iplpm global loss-measure enable

Parameters

None

Views

System view

Default Level


Usage Guidelines

To measure the packet loss of a switch run this command to enable packet loss measurementfor the switch



8853



Example

Enable packet loss measurement for a device

ltHUAWEIgt system-view[HUAWEI] iplpm global loss-measure enable

16530 iplpm global loss-measure interval

Function

The iplpm global loss-measure interval command configures the device-level packet lossmeasurement interval

The undo iplpm global loss-measure interval command restores the default device-levelpacket loss measurement interval

By default the device-level packet loss measurement interval is 10s

Format

iplpm global loss-measure interval interval

undo iplpm global loss-measure interval

Parameters


interval Specifies the device-levelpacket loss measurementinterval

The value is of the enumerated type and canbe 1 10 60 or 600 in seconds

Views

System view

Default Level


Usage Guidelines

The device-level packet loss measurement interval refers to the period from received packetstatistics collection to sent packet statistics collection To ensure accuracy of statistics datarun the undo iplpm global loss-measure enable command to disable device-level packet lossmeasurement in the system view before changing the measurement interval

Example

Set the device-level packet loss measurement interval to 60s

ltHUAWEIgt system-view[HUAWEI] iplpm global loss-measure interval 60



8854



Related Topics16529 iplpm global loss-measure enable

16531 iplpm link authentication-mode

FunctionThe iplpm link authentication-mode command configures the authentication mode andpassword for packet loss measurement on a direct link

The undo iplpm link authentication-mode command deletes the authentication mode andpassword

By default no authentication mode or password is configured for packet loss measurement ona direct link

Formatiplpm link authentication-mode hmac-sha256 key-id key-id [ cipher ] password

undo iplpm link authentication-mode

Parameters


hmac-sha256 Uses HMAC-SHA256 toauthenticate packets betweendevices

-

key-id key-id Specifies the ID of theauthentication password


cipher Specifies the cipher-textauthentication password

-

password Specifies the authenticationpassword

The value is a character string withoutspacesl The value is a string of 1 to 255



ViewsGE interface view XGE interface view





8855



After packet loss measurement is configured on a direct link statistics data on received andsent packets on an interface at one end is sent to an interface at the other end and summarizedfor packet loss measurement This command is used to authenticate communication packetson the direct link improving security

Precautions

When the authentication mode and password are configured on an interface packetsencapsulated with local statistics data sent from the interface are authenticated Thereforeboth interfaces of the direct link must be configured with the same authentication mode andpassword

Example Set the authentication mode to hmac-sha256 and password to huawei in cipher text forpacket loss measurement on a direct link on the GE001

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] iplpm link authentication-mode hmac-sha256 key-id 1 cipher huawei

16532 iplpm link loss-measure alarm enable

FunctionThe iplpm link loss-measure alarm enable command enables the alarm and clear alarm ofthe packet loss ratio for packet loss measurement on a direct link

The undo iplpm link loss-measure alarm enable command restores the default setting

By default the packet loss alarm and clear alarm are disabled for packet loss measurement ona direct link

Formatiplpm link loss-measure alarm enable

undo iplpm link loss-measure alarm enable

ParametersNone



Usage GuidelinesAfter this command is used the alarm threshold and clear alarm threshold of the packet lossratio are 5 and 1



8856



l If the packet loss ratio in five consecutive measurement intervals exceeds the alarmthreshold the device reports the hwIpfpmLossRatioExceed alarm to the NMS to notifythe link fault in real time

l If the packet loss ratio in five consecutive measurement intervals falls below the clearalarm threshold the device reports the hwIpfpmLossRatioRecovery alarm to the NMS tonotify link recovery in real time

Example

On the GE001 enable the alarm and clear alarm of the packet loss ratio for packet lossmeasurement on a direct link

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] iplpm link loss-measure alarm enable

16533 iplpm link loss-measure enable

Function

The iplpm link loss-measure enable command enables packet loss measurement on thedirect link

The undo iplpm link loss-measure enable command disables packet loss measurement onthe direct link

By default packet loss measurement is disabled on the direct link

Format

iplpm link loss-measure enable

undo iplpm link loss-measure enable

Parameters

None

Views

GE interface view XGE interface view

Default Level


Usage Guidelines

To accurately locate packet loss on a link run the iplpm link loss-measure enable commandto enable packet loss measurement on the direct link between two devices

This function must be enabled on both device interfaces of the direct link



8857



Example On the GE001 enable packet loss measurement on the direct link

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] iplpm link loss-measure enable

16534 iplpm link loss-measure interval

FunctionThe iplpm link loss-measure interval command configures the interval for packet lossmeasurement on the direct link

The undo iplpm link loss-measure interval command restores the default interval for packetloss measurement on the direct link

By default the interval for packet loss measurement on the direct link is 10s

Formatiplpm link loss-measure interval interval

undo iplpm link loss-measure interval

Parameters


interval Specifies the interval for packet lossmeasurement on the direct link

The value is an integer that can be 110 60 or 600 in seconds



Usage GuidelinesThe interval for packet loss measurement on the direct link refers to the period from receivedpacket statistics collection to sent packet statistics collection on a specified interface Toensure accuracy of statistics data run the undo iplpm link loss-measure enable command todisable packet loss measurement on the direct link in the interface view before changing themeasurement interval

Example On the GE001 set the interval for packet loss measurement on the direct link to 60s

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] iplpm link loss-measure interval 60



8858



Related Topics16533 iplpm link loss-measure enable

16535 iplpm loss-measure color-flag

FunctionThe iplpm loss-measure color-flag command configures the color bit used in device-levelpacket loss measurement

The undo iplpm loss-measure color-flag command restores the default color bit used indevice-level packet loss measurement

By default bit 0 in the Flags field is used as the color bit for device-level packet lossmeasurement The default configuration is recommended

Formatiplpm loss-measure color-flag tos-bit tos-bit | flags-bit0

undo iplpm loss-measure color-flag

Parameters


tos-bit tos-bit Specifies bit 6 or 7 in the ToS field of IP packets as thecolor bit for device-level packet loss measurement

The value is 6or 7

flags-bit0 Specifies bit 0 in the Flags field of IP packets as the colorbit for device-level packet loss measurement

-

ViewsSystem view



Device-level packet loss measurement contains measurement on the entire device and directlink Before deploying Packet Conservation Algorithm for Internet (iPCA) to implementdevice-level packet loss measurement run this command to configure the color bit You canselect a color bit according to the actual situation and network planning

Precautions

Before changing the color bit for device-level packet loss measurement run the undo iplpmglobal loss-measure enable command in the system view to disable device-level packet lossmeasurement If packet loss measurement is configured on the direct link run the undo iplpm



8859



link loss-measure enable command in the interface view to disable packet loss measurementon the direct link and ensure that the color bits on both devices of the direct link are changedto be the same


Example

Configure bit 7 in the ToS field as the color bit for device-level packet loss measurement

ltHUAWEIgt system-view[HUAWEI] iplpm loss-measure color-flag tos-bit 7

Related Topics16529 iplpm global loss-measure enable16533 iplpm link loss-measure enable

16536 loss-measure enable

Function

The loss-measure enable command enables statistics collection based on the time range for ameasurement instance on a DCP

The undo loss-measure enable command disables statistics collection based on the timerange for a measurement instance on a DCP

By default statistics collection based on the time range is disabled for a measurement instanceon a DCP

Format

loss-measure enable [ mid-point ] [ time-range time-range ]

undo loss-measure enable [ [ mid-point ] time-range [ time-range ] ]

Parameters


mid-point Enables on-demand packet loss measurement formid-points

If this parameter is configured on-demand packetloss measurement is enabled for all mid-points Ifthis parameter is not configured on-demand packetloss measurement is enabled for all measurementpoints

NOTEThe mid-point is only applied to hop-by-hopmeasurement

-



8860




time-rangetime-range

Specifies the time range for statistics collection The value is 5 1015 or 30 inminutes Thedefault value is 10minutes

Views


Default Level


Usage Guidelines

Usage Scenario

The IP FPM performance statistics serve as a reliable reference for assessing IP networkperformance and therefore are useful for fault diagnosis and service statistics To monitor on-demand packet loss performance in a specified period or diagnose network faults and locatefaulty nodes when network performance deteriorates run the loss-measure enable command

Prerequisites

An IP FPM model has been established including configuring a DCP and MCP binding aTLP to a physical interface and creating a target flow and IP FPM instance

Precautions

This command is not recorded in the configuration file after being executed After devicerestart statistics collection based on the time range becomes invalid and needs to bereconfigured

Statistics collection based on the time range and continual statistics collection cannot beenabled simultaneously

Example

Enable statistics collection based on the time range for a measurement instance on a DCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] loss-measure enable time-range 30

Related Topics16543 nqa ipfpm dcp16524 instance (IPFPM-DCP view)16537 loss-measure enable continual



8861



16537 loss-measure enable continual

Function

The loss-measure enable continual command enables continual statistics collection for ameasurement instance on a DCP

The undo loss-measure enable command disables continual statistics collection for ameasurement instance on a DCP

By default continual statistics collection is disabled for a measurement instance on a DCP

Format

loss-measure enable continual

undo loss-measure enable [ continual ]

Parameters

None

Views


Default Level


Usage Guidelines

Usage Scenario

If you are unaware of network performance degrading and want to continuously monitorpacket loss on the network run the loss-measure enable continual command to enablecontinual statistics collection

Prerequisites


Precautions

Continual statistics collection and statistics collection based on the time range cannot beenabled simultaneously

Example

Enable continual statistics collection for a measurement instance on a DCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] loss-measure enable continual



8862



Related Topics16543 nqa ipfpm dcp16524 instance (IPFPM-DCP view)16536 loss-measure enable

16538 loss-measure ratio-threshold

Function

The loss-measure ratio-threshold command configures the alarm and clear alarm thresholdsof the packet loss ratio for a measurement instance on the MCP

The undo loss-measure ratio-threshold command restores the default setting

By default the alarm and clear alarm thresholds of the packet loss ratio are not configured fora measurement instance on the MCP That is no alarm is generated for packet loss

Format

loss-measure ratio-threshold upper-limit upper-limit lower-limit lower-limit

undo loss-measure ratio-threshold

Parameters


upper-limitupper-limit

Specifies the alarmthreshold for the packetloss ratio

The value is a string of 1 to 10 digits and in therange of 0000001 to 100 The value isaccurate to six decimal places in percentage

lower-limitlower-limit

Specifies the clearalarm threshold for thepacket loss ratio

The value is a string of 1 to 10 digits and in therange of 0000001 to 100 The value isaccurate to six decimal places in percentagelower-limit must be smaller than or equal toupper-limit

Views


Default Level


Usage Guidelines

Usage Scenario

After the alarm and clear alarm thresholds of the packet loss ratio are configured for ameasurement instance on the MCP



8863



l If the packet loss ratio in five consecutive measurement intervals exceeds the alarmthreshold the MCP reports the hwIpfpmLossRatioExceed alarm to the NMS to notifythe link fault in real time

l If the packet loss ratio in five consecutive measurement intervals falls below the clearalarm threshold the MCP reports the hwIpfpmLossRatioRecovery alarm to the NMS tonotify link recovery in real time

To facilitate operation and maintenance you are advised to run this command to configure thealarm and clear alarm thresholds of the packet loss ratio for a measurement instance on theMCP according to network performance

Precautions

If you run the loss-measure ratio-threshold command multiple times only the latestconfiguration takes effect

This command only configures the alarm and clear alarm thresholds of the packet loss ratiofor a measurement instance on the MCP The hwIpfpmLossRatioExceed andhwIpfpmLossRatioRecovery alarms are triggered only when the alarm and clear alarmfunctions are enabled and the packet loss ratio in five consecutive measurement intervalsreaches the threshold

Example

Set the alarm and clear alarm thresholds of the packet loss ratio to 10 and 55 formeasurement instance 1

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] loss-measure ratio-threshold upper-limit 10 lower-limit 55

Related Topics16544 nqa ipfpm mcp16525 instance (IPFPM-MCP view)16547 snmp-agent trap enable feature-name ipfpm

16539 mcp (IPFPM-DCP view)

Function

The mcp command associates the MCP ID with all measurement instances of a DCP

The undo mcp command disassociates the MCP ID from all measurement instances of aDCP

By default no MCP ID is associated with a measurement instance of a DCP

Format

mcp mcp-id [ port port-number ] [ vpn-instance vpn-instance-name | net-manager-vpn ]

undo mcp



8864



Parameters


mcp-id Specifies the MCP ID associatedwith all measurement instances of aDCP It is recommended that youconfigure the router ID of the deviceas the MCP ID


port port-number

Specifies the UDP port numberthrough which the DCP and MCPcommunicate with each other

The value is an integer that rangesfrom 1024 to 65535 The defaultvalue is 65030 and isrecommended


Specifies the VPN instance where theDCP and MCP communicate witheach other

The value is a string of 1 to 31case-sensitive characters spacesnot supported When doublequotation marks are used aroundthe string spaces are allowed inthe string

net-manager-vpn

Specifies the manager VPN wherethe DCP and MCP communicatewith each other

-

ViewsIPFPM-DCP view



In the IP Flow Performance Measurement (FPM) system each measurement instance belongsto an MCP Before a DCP sends statistics data of a measurement instance from TLPs to theMCP you must associate the MCP ID with the measurement instance The mcp commandassociates the MCP ID with all measurement instances of a DCP

A DCP encapsulates statistics data collected from Target Logical Ports (TLPs) and MCP IDassociated with all measurement instances on the DCP in a packet and sends the packet withthe MCP ID as the destination IP address After receiving the packet sent from the DCP theMCP compares the MCP ID in the packet with the MCP ID configured by the mcp idcommandl If the two MCP IDs are the same the MCP accepts the packet and then summarizes and

calculates the statistics datal If the two MCP IDs are different the MCP considers the packet invalid and discards it

Prerequisites




8865



NOTEIf the DCP is required to send statistics data to the MCP through a specified VPN instance or managerVPN the VPN instance must have been created on the DCP before you run the mcp command withvpn-instance vpn-instance-name or net-manager-vpn specified

Precautions

The MCP ID must be an IP address that DCPs can reach and must be the same as the MCP IDconfigured by the mcp id command on the MCP

The UDP port number through which the DCP and MCP communicate with each other mustbe the same as the UDP port number configured by the protocol udp port command

The mcp command associates the MCP ID with all measurement instances on the DCPHowever if some measurement instances on the DCP have been associated with the MCP IDconfigured by the mcp command the measurement instances still use the MCP ID in theIPFPM-DCP instance view

Example Associate the MCP ID with all measurement instances of a DCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] mcp 10111

Related Topics16543 nqa ipfpm dcp16546 protocol udp port16540 mcp (IPFPM-DCP instance view)16541 mcp id

16540 mcp (IPFPM-DCP instance view)

FunctionThe mcp command associates the MCP ID with a measurement instance of a DCP

The undo mcp command disassociates the MCP ID from a measurement instance of a DCP


Formatmcp mcp-id [ port port-number ] [ vpn-instance vpn-instance-name | net-manager-vpn ]

undo mcp



8866



Parameters


mcp-id Specifies the MCP ID associated with ameasurement instance of a DCP It isrecommended that you configure therouter ID of the device as the MCP ID


port port-number Specifies the UDP port number throughwhich the DCP and MCP communicatewith each other

The value is an integer thatranges from 1024 to 65535The default value 65030 isrecommended


Specifies the VPN instance where theDCP and MCP communicate with eachother

The value is a string of 1 to31 case-sensitive characterswithout spaces

net-manager-vpn

Specifies the manager VPN where theDCP and MCP communicate with eachother

-




Before a DCP sends statistics data of a measurement instance from TLPs to the MCP youmust associate the MCP ID with the measurement instance The mcp command associates theMCP ID with a measurement instance of a DCP

A DCP encapsulates statistics data collected from Target Logical Ports (TLPs) and MCP IDassociated with a measurement instance of the DCP in a packet and sends the packet with theMCP ID as the destination IP address After receiving the packet sent from the DCP the MCPcompares the MCP ID in the packet with the MCP ID configured by the mcp id commandl If the two MCP IDs are the same the MCP accepts the packet and then summarizes and


Prerequisites


Precautions





8867



Example

Associate the MCP ID with a measurement instance of a DCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] mcp 10111

Related Topics16543 nqa ipfpm dcp16524 instance (IPFPM-DCP view)16539 mcp (IPFPM-DCP view)16541 mcp id

16541 mcp id

Function

The mcp id command configures the MCP ID in the IP Flow Performance Measurement(FPM) system

The undo mcp id command deletes the MCP ID

By default no MCP ID is configured

Format

mcp id mcp-id

undo mcp id

Parameters


mcp-id Specifies the MCP ID It is recommended that youconfigure the router ID of the device as the MCP ID


Views

IPFPM-MCP view

Default Level


Usage Guidelines

Usage Scenario

When the MCP communicates with a DCP the DCP encapsulates statistics data collectedfrom TLPs and MCP ID associated with a measurement instance by the mcp command in a



8868



packet and sends the packet with the MCP ID as the destination IP address After receivingthe packet sent from the DCP the MCP compares the MCP ID in the packet with the MCP IDof the device

l If the two MCP IDs are the same the MCP accepts the packet and then summarizes andcalculates the statistics data

l If the two MCP IDs are different the MCP considers the packet invalid and discards it

This command configures the MCP ID

Prerequisites


Precautions

The MCP ID must be an IP address that a DCP can reach and must be the same as the MCPID configured by the mcp command on the DCP If you have changed the MCP ID you mustchange the MCP ID associated with measurement instances on the DCP otherwise the DCPcannot communicate with the MCP

Example

Set the MCP ID

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] mcp id 10111

Related Topics1657 dcp id16544 nqa ipfpm mcp16540 mcp (IPFPM-DCP instance view)

16542 measure disable (IPFPM-MCP instance view)

Function

The measure disable command disables measurement of all indicators in a measurementinstance on the MCP

Both the undo measure disable and measure enable commands enable measurement of allindicators in a measurement instance on the MCP

By default measurement of all indicators is enabled in a measurement instance on the MCP

Format

measure disable

measure enable

undo measure disable



8869



Parameters

None

Views


Default Level


Usage Guidelines

If the MCP receives error data during the DCP configuration update you can run the measuredisable command to disable measurement of all indicators in a measurement instance on theMCP When the DCP configuration update is complete run the undo measure disable ormeasure enable command to enable measurement of all indicators in a measurement instanceon the MCP so that data of the measurement instance is more accurate

Example

Disable measurement of all indicators in measurement instance 1 on the MCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] measure disable

Related Topics16544 nqa ipfpm mcp

16543 nqa ipfpm dcp

Function

The nqa ipfpm dcp command enables global DCP and displays the IPFPM-DCP view ordirectly displays the IPFPM-DCP view if global DCP has been enabled

The undo nqa ipfpm dcp command disables global DCP

By default global DCP is disabled

Format

nqa ipfpm dcp

undo nqa ipfpm dcp

Parameters

None



8870



Views

System view

Default Level


Usage Guidelines

Usage Scenario

Before performing packet loss measurement for service traffic run the nqa ipfpm dcpcommand to enable global DCP and enter the IPFPM-DCP view

Follow-up Procedure

Run the dcp id command to set the DCP ID

Precautions

DCP and MCP functions can be configured on the same device

Example

Enable global DCP and enter the IPFPM-DCP view

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp]

Related Topics1657 dcp id16544 nqa ipfpm mcp

16544 nqa ipfpm mcp

Function

The nqa ipfpm mcp command enables global MCP and displays the IPFPM-MCP view ordirectly displays the IPFPM-MCP view if global MCP has been enabled

The undo nqa ipfpm mcp command disables global MCP

By default global MCP is disabled

Format

nqa ipfpm mcp

undo nqa ipfpm mcp

Parameters

None



8871



Views

System view

Default Level


Usage Guidelines

Usage Scenario

Before performing packet loss measurement for service traffic run the nqa ipfpm mcpcommand to enable global MCP and enter the IPFPM-MCP view

Follow-up Procedure

Run the mcp id command to set the MCP ID

Precautions

MCP and DCP functions can be configured on the same device

Example

Enable global MCP and enter the IPFPM-MCP view

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp]

Related Topics16541 mcp id16543 nqa ipfpm dcp

16545 out-group

Function

The out-group command creates a Target Logical Port (TLP) out-group for the target flow

The undo out-group command deletes a TLP out-group or deletes a TLP from a TLP out-group

By default no TLP out-group is configured for the target flow

Format

out-group dcp dcp-id tlp tlp-id

undo out-group [ dcp dcp-id tlp tlp-id ]



8872



Parameters


dcp dcp-id Indicates a DCP to which TLPs in a TLPout-group belongs


tlp tlp-id Indicates a TLP in a TLP out-group The value is an integer ranging from1 to 16777215

Views

IPFPM-MCP-ACH view

Default Level


Usage Guidelines

Usage Scenario

To measure the packet loss or delay of service packets leaving a network run the out-groupcommand In IP FPM hop-by-hop performance statistics scenarios a hop is a set of links andinterfaces that service packets travel through from one measurement point or group to thenext measurement point or group and therefore is represented by (TLP in-group TLP out-group) Performance statistics are implemented on the TLP in-point or in-group throughwhich service packets enter a network and the TLP out-point or out-group through whichservice packets leave the network

Prerequisites


Example

Create a TLP out-group for the target flow

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] ach 1[HUAWEI-nqa-ipfpm-mcp-instance-1-ach-1] out-group dcp 10111 tlp 100




8873



16546 protocol udp port

Function

The protocol udp port command configures the UDP port number through which the DCPand MCP communicate with each other

The undo protocol udp port command restores the default UDP port number through whichthe DCP and MCP communicate with each other

By default the DCP and MCP communicate with each other through UDP port 65030 Thedefault configuration is recommended

Format

protocol udp port port-number

undo protocol udp port

Parameters


port-number Specifies the UDP port number throughwhich the DCP and MCP communicate witheach other


Views

IPFPM-MCP view

Default Level


Usage Guidelines

Usage Scenario

The DCP uses UDP and default port 65030 to send statistics data to the MCP To change theUDP port number run this command

Prerequisites


Precautions

The UDP port number of the DCP must be the same as the UDP port number configured bythe mcp (IPFPM-DCP instance view) command on the DCP

Example

Specify UDP port 1024 through which the DCP and MCP communicate with each other



8874



ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] protocol udp port 1024

Related Topics16541 mcp id16544 nqa ipfpm mcp16543 nqa ipfpm dcp

16547 snmp-agent trap enable feature-name ipfpm

FunctionThe snmp-agent trap enable feature-name ipfpm command enables the trap function forthe IP Flow Performance Measurement (FPM) module

The undo snmp-agent trap enable feature-name ipfpm command disables the trap functionfor the IP FPM module

By default the trap function is disabled for the IP FPM module

Formatsnmp-agent trap enable feature-name ipfpm [ trap-name hwipfpmlossratioexceed |hwipfpmlossratiorecovery | hwipfpmtlpexceed | hwipfpmtlprecovery ]

undo snmp-agent trap enable feature-name ipfpm [ trap-name hwipfpmlossratioexceed | hwipfpmlossratiorecovery | hwipfpmtlpexceed |hwipfpmtlprecovery ]

Parameters


trap-name Enables the trap function for the specified event -

hwipfpmlossratioexceed Enables the trap function about the packet loss ratioexceeding the threshold

-

hwipfpmlossratiorecovery Enables the trap function about the packet loss ratiorestoration

-

hwipfpmtlpexceed Enables the trap function for TLPs exceeding thespecifications

-

hwipfpmtlprecovery Enables the trap function for TLP specificationrestoration

-

ViewsSystem view




8875



Usage Guidelines

Usage Scenario

The Simple Network Management Protocol (SNMP) is a network management standardwidely used on the TCPIP network It uses a central computer (a network managementstation) that runs network management software to manage network elements The SNMPagent reports trap messages to the network management station so that the networkmanagement station can obtain the network status in a timely manner and the networkadministrator can take measures accordingly

The snmp-agent trap enable feature-name ipfpm command enables the trap function forthe IP FPM module

Precautions

To enable the trap function for one or several events specify trap-name If trap-name is notspecified all trap functions are enabled for the IP FPM module

Example

Enable the trap function about the packet loss ratio exceeding the threshold

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable feature-name ipfpm trap-name hwipfpmlossratioexceed

Related Topics16519 display snmp-agent trap feature-name ipfpm all

16548 snmp-agent trap enable feature-name iplpm

Function

The snmp-agent trap enable feature-name iplpm command enables the trap function forthe IP Local Performance Measurement (LPM) module

The undo snmp-agent trap enable feature-name iplpm command disables the trap functionfor the IP LPM module

By default the trap function is disabled for the IP LPM module

Format

snmp-agent trap enable feature-name iplpm [ trap-name hwiplpmgloballossratioexceed | hwiplpmgloballossratiorecovery |hwiplpmlinkforwardlossratioexceed | hwiplpmlinkforwardlossratiorecovery ]

undo snmp-agent trap enable feature-name iplpm [ trap-name hwiplpmgloballossratioexceed | hwiplpmgloballossratiorecovery |hwiplpmlinkforwardlossratioexceed | hwiplpmlinkforwardlossratiorecovery ]



8876



Parameters


trap-name Enables the trap function for the specifiedevent

-

hwiplpmgloballossratioexceed Enables the trap function about the packetloss ratio exceeding the threshold on thedevice

-

hwiplpmgloballossratiorecovery Enables the trap function about the packetloss ratio restoration on the device

-

hwiplpmlinkforwardlossratioexceed Enables the trap function about the packetloss ratio exceeding the threshold on thedirect link

-

hwiplpmlinkforwardlossratiorecovery Enables the trap function about the packetloss ratio restoration on the direct link

-

Views

System view

Default Level


Usage Guidelines

Usage Scenario


The snmp-agent trap enable feature-name iplpm command enables the trap function forthe IP LPM module

Precautions

To enable the trap function for one or several events specify trap-name If trap-name is notspecified all trap functions are enabled for the IP LPM module

Example

Enable the trap function about the packet loss ratio exceeding the threshold on the directlink

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable feature-name iplpm trap-name hwiplpmlinkforwardlossratioexceed



8877



Related Topics16520 display snmp-agent trap feature-name iplpm all

16549 tlp

Function

The tlp command configures Target Logical Ports (TLPs) of an IP FPM instance and theirroles

The undo tlp command deletes TLPs of a measurement instance

By default no TLP of a measurement instance is configured

Format

tlp tlp-id in-point | out-point ingress | egress

tlp tlp-id mid-point flow forward | backward | bidirectional ingress | egress

undo tlp tlp-id

Parameters


tlp-id Specifies the ID of a TLP The value is aninteger that rangesfrom 1 to 16777215

in-point Indicates the in-point TLP An in-point TLP colors atarget flow

-

out-point Indicates the out-point TLP An out-point TLPremoves the color flag from a target flow

-

ingress Indicates the ingress TLP An ingress TLP onlyreceives packets

-

egress Indicates the egress TLP An egress TLP only sendspackets

-

mid-point Indicates the TLP as a mid-point -

flow Indicates the target flow -



bidirectional Indicates the bidirectional target flows -



8878



Views


Default Level


Usage Guidelines

Usage Scenario

To locate faults in IP FPM performance statistics scenarios run the tlp command to configureTLPs in an IP FPM instance TLPs are measurement points along the path of the target flowand compile and output the statistics TLPs can be in-points mid-points or out-points

Precautions

A TLP that functions as the in-point for the forward target flow is the out-point for thebackward target flow The TLP role specified in the tlp command applies only to the forwardtarget flow and the reverse of the specified role is used for the backward target flow

Mid-points apply only to IP FPM hop-by-hop performance statistics scenarios Therefore youmust configure flow to specify the target flow direction when specifying a TLP as a mid-point

A TLP cannot function as both the in-point and out-point for the same unidirectional targetflow

Example

Configure TLP 100 and its role for measurement instance 1

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] tlp 100 in-point ingress

Related Topics16543 nqa ipfpm dcp16524 instance (IPFPM-DCP view)16527 ipfpm tlp


NOTE

Only the S5720EI S5720HI S6720EI and S6720S-EI support the LSP Ping LSP Jitter LSP TracePWE3 Ping and PWE3 Trace test instances The S1720GFR does not support the MAC Ping testinstances



8879



1661 agetime

FunctionThe agetime command sets the aging time of an NQA test instance

The undo agetime command restores the default aging time of an NQA test instance

The default aging time of an NQA test instance is 0 indicating that the test instance is notaged

Formatagetime hhmmss

undo agetime

Parameters


hhmmss Specifies the aging time hh ranges from 0 to 23 mm ranges from 0 to 59 ssranges from 0 to 59

ViewsNQA view



To prevent endless running of a test instance you need to age the test instance periodicallyThe agetime command can be used to configure the aging time to change the survival time ofa test instance in the system

l The aging time is started when the NQA test instance is in the inactive state When theaging time expires the system deletes the NQA test instance automatically

l The aging time is reset when the NQA test instance is in the active state

Prerequisites

The type of a test instance has been specified using the test-type command

Precautions

The aging time of a running test instance cannot be changed

Example Set the aging time of NQA test instance user test



8880



ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] agetime 100

Related Topics16639 nqa16658 test-type

1662 clear-records

Function

The clear-records command clears statistics on NQA test instances

Format

clear-records

Parameters

None

Views

NQA view

Default Level


Usage Guidelines

Clearing statistics on the ongoing test is forbidden

Before running the command ensure that the test type specified by the test-type commandexists

Example

Clear all statistics on NQA test instance user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] clear-records

Related Topics16639 nqa16658 test-type1669 display nqa history16610 display nqa results



8881



1663 community read cipher

Function

The community read cipher command configures the community name for SNMP test

The undo community command deletes the community name of SNMP test

By default the community name for SNMP test is public

Format

community read cipher community-name

undo community

Parameters


community-name

Specifies thecommunity namefor SNMP test

The value is a string of case-sensitive characterswithout command line characters such as spaces andquestion marks The length ranges from 1 to 32 forplain text and ranges from 32 to 68 for cipher textNOTE

When quotation marks are used around the string spacesare allowed in the string

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

A community uniquely identified by a community name defines administrative relationshipsbetween NMSs and SNMP agents The community name acts like a password to regulateaccess to an SNMP agent An NMS can access an SNMP agent only if the community namecarried in the SNMP request sent by the NMS is the same as the community name configuredon the SNMP agent

When the SNMP versions on agents are SNMPv1 or SNMPv2c the community name must beconfigured using the community read cipher command and the community name must be aread-only community name on SNMP agents When the SNMP versions on agents areSNMPv3 the community name does not need to be configured because SNMPv3 does notsupport community names

Prerequisites



8882



The NQA test instance has been configured using the nqa command and the test instancetype has been set to SNMP using the test-type command

Example

Set the community name for SNMP test

ltHUAWEIgt system-view [HUAWEI] nqa test-instance user test1[HUAWEI-nqa-user-test1] test-type snmp[HUAWEI-nqa-user-test1] community read cipher Huawei-123

1664 datafill

Function

The datafill command configures pad characters in an NQA test instance

The undo datafill command deletes the pad characters in an NQA test instance

By default there are no padding characters in an NQA test instance

Format

datafill fillstring

undo datafill

Parameters


fillstring Specifies the padcharacters for NQA testpackets

The value is a string of 1 to 230 case-sensitivecharacters with spaces supported The questionmark () is not supported The default value is 0 (anempty pad character)

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

In an NQA test you need to simulate actual datagrams to obtain more accurate statistics Thedatasize command can be used to set the size of the Data field To differentiate packets sentfrom different test instances add the specified characters to identify the test packets

Prerequisites



8883



The type of a test instance has been specified using the test-type command The type can beone of the following

l UDPl Jitterl ICMPl Tracel Path Jitter


After the datafill command is run the following situations may occur

l If the length of the data packet sent from the test instance is shorter than the configuredpad character only the forepart of the pad character can be used

l If the length of the data packet sent from the test instance is larger than the configuredpad character the pad character is repeated in sequence until the data packet issuccessfully padded

For example the pad character is set to abcd If the length of the test packet is 3 only abc isused to pad the test packet If the length of the test packet is 6 abcdab is used to pad the testpacket

Precautions

The pad character of a running test instance cannot be changed

Example

Set the pad characters of the test named user test to abcd

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] datafill abcd

Related Topics16639 nqa16658 test-type1665 datasize

1665 datasize

Function

The datasize command sets the size of the NQA test packet

The undo datasize command restores the size of the NQA test packet

The default size is 0 which indicates that the test packet does not carry data information

Format

datasize size



8884



undo datasize


size Specifies the size of theNQA test packet

The value is an integer thatranges from 0 to 8100 inbytes If the configured sizeof a packet is smaller thanthe default size of a packetthe configured size is invalidand the packet is forwardedbased on its default sizeNOTE

Only for MAC ping testinstancethe value ranges from95 to 9000 in bytes

ViewsNQA view



You can run the datasize command to set the size of the data field of a test packet Thisensures that the size of the test packet is closer to the size of the actual data packet and theobtained statistics are more accurate

For example if a UDP jitter test instance is used to detect voice over IP (VoIP) services youcan run the datasize command to set the size of the NQA test packet to the same size as theactual voice packet This enables a simulation of the actual traffic that occurs in a period oftime

To simulate a voice data flow with the transmission rate of 64 kbits you can set the size ofthe voice packet to 172 bytes (160-byte payload + 12-byte RTP header + 28-byte IP headerand UDP header) and set the interval for sending the voice packet to 20 ms In this manner3000 packets can be sent in one minute

Prerequisites

The test type has been specified using the test-type command

The datasize command is applicable only to the PWE3 ping ICMP UDP LSP jitter pathjitter trace LSP ping MAC ping and jitter test instances

Precautions

You cannot change the size of the running test packets



8885



Example Set the size of the packets to 100 bytes in the test instance named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] datasize 100

Related Topics16639 nqa16658 test-type16624 interval (NQA view)1664 datafill

1666 description (NQA view)

FunctionThe description command configures description of an NQA test instance

The undo description command deletes the description of an NQA test instance

By default no description is configured for an NQA test instance

Formatdescription string

undo description

Parameters


string Specifies the description of anNQA test instance

The value is a string of 1 to 230 case-sensitive characters with spaces

ViewsNQA view



The description command can be used to briefly describe the test instance to helpmaintenance Generally the test item or the test objective of a test instance is described

Prerequisites



8886





If the description of a test instance has been configured running the description commandwill override the previous configuration

Precautions

The description of a running test instance cannot be changed

Example

Set the description of the test named user test to fortest

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] description fortest


1667 destination-address

Function

The destination-address command specifies the destination address of an NQA test instance

The undo destination-address command deletes the destination address of an NQA testinstance

By default destination address is not configured for an NQA test instance

Format

destination-address ipv4 ipv4-address [ lsp-masklen masklen | lsp-loopback loopback-address ] [ vpn-frr-path ]

destination-address ipv4 ipv4-address

destination-address mac mac-address

destination-address remote-mep mep-id rmep-id

destination-address url urlstring

undo destination-address

Parameters


ipv4 ipv4-address Specifies an IPv4 destinationaddress

The IPv4 address is in dotteddecimal notation



8887




lsp-masklen masklen Specifies the mask length of anLSPs IPv4 address prefix


lsp-loopbackloopback-address

Specifies a 1278 IP address inthe MPLS echo request packetheader

-

vpn-frr-path Indicates that the connectivityof the backup VPN FRR LSPwill be checked

-

mac mac-address Specifies a unicast MACaddress

The value is in H-H-H format inwhich H is a 16-bit binary number

remote-mep mep-idrmep-id

Specifies the ID of a remoteMEP


url urlstring Specifies a destination URLaddress

The value is a string of 1 to 230case-insensitive characters withoutspaces When quotation marks areused around the string spaces areallowed in the string

ViewsNQA view



You can run the destination-address command to specify the destination address of an NQAtest instance

Precautions

l The Label Switched Path (LSP) parameters can be configured only for the LSP testinstances

l The mac and remote-mep mep-id parameters can be configured only for MAC ping testinstances

l Only the destination addresses of HTTP trace and DNS test instances can be URLaddresses For the HTTP test instances only absolute URL addresses are supported

l The destination addresses of DNS test instances cannot be IPv4 addresses and thedestination URL addresses must contain dots () otherwise the test may fail

l You cannot change the destination address of a running test instance

Example Configure the destination address for test instance user test



8888



ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] destination-address ipv4 10111


1668 destination-port

FunctionThe destination-port command configures the destination port number for an NQA test

The undo destination-port command restores the default setting

The default port numbers for test instances of different types are as followsl TCP and UDP 7l HTTP 80l FTP 21l Trace 33434l Jitter No default value is available and the destination port number must be configured

NOTE

A port number larger than 10000 is recommended for a jitter test instance A small port number may beconflict with the default port number of a protocol causing a test failure

Formatdestination-port port-number

undo destination-port


port-number Specifies the destinationport number

The value is integer thatranges from 1 to 65535 Theconfigured port cannot be awell-known port or used byother modules

ViewsNQA view




8889




This command applies to only the FTP HTTP Jitter TCP UDP and Trace test instances

Precautions

You cannot change the destination port number of the test that is being performed

Example Set the destination port number to 2020 for the test instance named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] destination-port 2020


1669 display nqa history

FunctionThe display nqa history command displays the history records about an NQA test

Formatdisplay nqa history [ test-instance admin-name test-name ]

Parameters


test-instance Indicates NQA test instances -

admin-name Specifies the name of theadministrator for an NQA testinstance

The value must be the name of anexisting NQA test instanceadministrator

test-name Specifies the name of an NQA testinstance

The value must be the name of anexisting NQA test instance

ViewsAll views




8890



Usage Guidelines

Usage Scenario

NQA provides NQA test instances to test network operation conditions to export statisticsand to effectively cut costs NQA measures the performance of different protocols running onthe network

The display nqa history command helps you understand the network status by displaying theoperation statistics about each test packet including the status and round-trip delay

NOTE

No history record about the failed jitter test instances exist

Precautions

If no optional parameter is specified all history records of an NQA test instance aredisplayed

When NQA test result table and historical table are displayed in a split screen latest resultsare displayed to improve user experience

Example

Display the history records about an NQA test

ltHUAWEIgt display nqa history NQA entry(admin ftp) history Index THP Response Status Address Time 1 111 1157ms success 10212 2012-07-15 101638188 2 211 3000ms timeout UnKnow 2012-07-15 10182922 NQA entry(admin http) history Index THP Response Status Address Time 1 111 0ms busy UnKnow 2012-07-15 111639915 2 112 0ms busy UnKnow 2012-07-15 111639978 3 113 0ms busy UnKnow 2012-07-15 11163940

Table 16-57 Description of the display nqa history command output

Item Description

NQA entry(admin ftp) NQA test itemsl admin indicates the name of the administrator for

an NQA test instancel ftp indicates the name of the NQA test instance

Index Index of a test record

THP l T Times which indicates the sequence of the testfor a test instance

l H Hop which indicates the sequence of the hopl P Probe which indicates the sequence of the

probe

Response Period from the time when a probe packet is sent to thetime when a response packet is received



8891



Item Description

Status Probe statusl success indicates that the probe succeedsl timeout indicates that the probe times out and no

response packet is receivedl busy indicates that the resources are insufficient

and the probe packet fails to be sent When Statusis busy the value of the Response field is 0 ms

l drop indicates that the probe packet is discardedbecause of no link is available When Status isbusy the value of the Response field is 0 ms

Address Destination IP address of an NQA test instance

Time Time when the response packet is received

Related Topics1662 clear-records16645 records

16610 display nqa results

Function

The display nqa results command displays NQA test results

Format

display nqa results [ test-instance admin-name test-name ]

Parameters


test-instance Indicates an NQA test instance -





Views

All views



8892



Default Level

1 Monitoring level

Usage Guidelines

Usage Scenario

NQA test results cannot be displayed automatically on the terminal To view NQA test resultsrun the display nqa results command

If no test instance is specified the test result of the test instance is displayed in thecorresponding test instance view and the test result of all test instances is displayed in thesystem view or other views irrelevant to test instances If a test instance is specified the testresult of only this test instance is displayed

The display nqa results command displays the results of a test instance that has beencomplete

The output of the display nqa results command contains the following two parts

l Universal test results This part does not vary according to the test instance type

l Detailed statistics of each test Statistics items in this part vary according to the testinstance type

Precautions

If no optional parameter is specified all NQA test results are displayed

Example

Display the results of an NQA ICMP test

ltHUAWEIgt display nqa results test-instance admin icmp NQA entry(admin icmp) testflag is inactive testtype is icmp 1 Test 1 result The test is finished Send operation times 3 Receive response times 3 Completionsuccess RTD OverThresholds number 0 Attempts number1 Drop operation number0 Disconnect operation number0 Operation timeout number0 System busy operation number0 Connection fail number0 Operation sequence errors number0 RTT Status errors number0 Destination ip address101387721 MinMaxAverage Completion Time 222 SumSquare-Sum Completion Time 612 Last Good Probe Time 2012-07-02 1709181 Lost packet ratio 0

Table 16-58 Description of the display nqa results test-instance admin icmp command output

Item Description

NQA entry(admin icmp) NQA test itemsl admin indicates the administrator or creator

of the NQA test instancel icmp indicates the name of the NQA test

instance



8893



Item Description

testflag Test flagl active indicates that the test is

runningChecking the result of a running testis invalid

l inactive indicates that the test iscompleteAt this time the actual test resultis displayed

testtype Test type

1 Test 1 result Sequence number of test results Test results arenumbered based on the time when the tests arecomplete

The test is finished Test statusl finished indicates that the test is completel running indicates that the test is running

Send operation times Number of sent packets

Receive response times Number of received response packets

Completion Completing status of the testl success indicates that the test is complete

successfullyl no result indicates that the test is running

so no result is obtainedl failed indicates that the test fails

RTD OverThresholds number Number of times that the round-trip delay(RTD) threshold is exceeded

Attempts number Test times

Drop operation number Number of system resource allocation failures

Disconnect operation number Number of forcible disconnections

Operation timeout number Number of timeout operations during the test

System busy operation number Number of conflict operations

Connection fail number Number of times that the local end fails toestablish connections with the peer

Operation sequence errors number Number of received disordered packets

RTT Status errors number Number of RTT status errors

Destination ip address Destination IP address of the test

MinMaxAverage Completion Time MinimumMaximumAverage time taken tocomplete the test



8894



Item Description

SumSquare-Sum Completion Time Sum and square sum of the time taken tocomplete the test

Last Good Probe Time Time at which the last probe is complete

Lost packet ratio Packet loss ratio

Display the result of an NQA jitter test

ltHUAWEIgt display nqa results test-instance admin jitter NQA entry(admin jitter) testflag is inactive testtype is jitter 1 Test 1 result The test is finished SendProbe60 ResponseProbe0 Completionfailed RTD OverThresholds number0 MinMaxAvgSum RTT0000 RTT Square Sum0 NumOfRTT0 Drop operation number0 Operation sequence errors number0 RTT Stats errors number0 System busy operation number0 Operation timeout number60 Min Positive SD0 Min Positive DS0 Max Positive SD0 Max Positive DS0 Positive SD Number0 Positive DS Number0 Positive SD Sum0 Positive DS Sum0 Positive SD Square Sum0 Positive DS Square Sum0 Min Negative SD0 Min Negative DS0 Max Negative SD0 Max Negative DS0 Negative SD Number0 Negative DS Number0 Negative SD Sum0 Negative DS Sum0 Negative SD Square Sum0 Negative DS Square Sum0 Min Delay SD0 Min Delay DS0 Avg Delay SD0 Avg Delay DS0 Max Delay SD0 Max Delay DS0 Packet Loss SD0 Packet Loss DS0 Packet Loss Unknown0 Average of Jitter0 Average of Jitter SD0 Average of Jitter DS0 Jitter out value00000000 Jitter in value00000000 NumberOfOWD0 OWD SD Sum0 OWD DS Sum0 TimeStamp unit ms Packet Rewrite Number 0 Packet Rewrite Ratio 0 Packet Disorder Number 0 Packet Disorder Ratio 0 Fragment-disorder Number 0 Fragment-disorder Ratio 0 Start time 2014-09-01 104757+0800 End time 2014-09-01 104801+0800

Table 16-59 Description of the display nqa results test-instance admin jitter command output

Item Description

NQA entry(admin jitter) NQA test itemsl admin indicates the name of the

administrator for an NQA test instancel jitter indicates the name of the NQA test

instance



8895



Item Description

testflag Test flagl active indicates that the test is running

Checking the test result during the operationis invalid

l inactive indicates that the test is completeAt this time the actual test result isdisplayed

testtype Test type

SendProbe Number of sent probes

ResponseProbe Number of received response probes




RTD OverThresholds number Number of times that the RTD threshold isexceeded

MinMaxAvgSum RTT MinimumMaximumAverageSum of the RTT

RTT Square Sum RTT square sum of the probes

NumOfRTT Number of RTTs


Operation sequence errors number Serial number of the error packets received bythe client

RTT Stats errors number Number of RTT status errors



Min Positive SD Minimum positive jitter from the source to thedestination

Min Positive DS Minimum positive jitter from the destination tothe source

Max Positive SD Maximum positive jitter from the source to thedestination

Max Positive DS Maximum positive jitter from the destination tothe source



8896



Item Description

Positive SD Number Number of the positive jitter from the source tothe destination

Positive DS Number Number of the positive jitter from thedestination to the source

Positive SD Sum Sum of the positive jitter from the source to thedestination

Positive DS Sum Sum of the positive jitter from the destination tothe source

Positive SD Square Sum Square sum of the positive jitter from the sourceto the destination

Positive DS Square Sum Square sum of the positive jitter from thedestination to the source

Min Negative SD Minimum negative jitter from the source to thedestination

Min Negative DS Minimum negative jitter from the destination tothe source

Max Negative SD Maximum negative jitter from the source to thedestination

Max Negative DS Maximum negative jitter from the destination tothe source

Negative SD Number Number of the negative jitter from the source tothe destination

Negative DS Number Number of the negative jitter from thedestination to the source

Negative SD Sum Sum of the negative jitter from the source to thedestination

Negative DS Sum Sum of the negative jitter from the destinationto the source

Negative SD Square Sum Square sum of the negative jitter from thesource to the destination

Negative DS Square Sum Square sum of the negative jitter from thedestination to the source

Min Delay SD Minimum delay from the source to thedestination

Min Delay DS Minimum delay from the destination to thesource

Avg Delay SD Average delay from the source to thedestination



8897



Item Description

Avg Delay DS Average delay from the destination to thesource

Max Delay SD Maximum delay from the source to thedestination

Max Delay DS Maximum delay from the destination to thesource

Packet Loss SD Maximum number of lost packets from thesource to the destination

Packet Loss DS Maximum number of lost packets from thedestination to the source

Packet Loss Unknown Number of packets lost at an unknowndirection

Average of Jitter Average jitter

Average of Jitter SD Average jitter from the source to thedestination

Average of Jitter DS Average jitter from the destination to thesource

Jitter out value Jitter in sending packets

Jitter in value Jitter in receiving packets

NumberOfOWD Number of OWD packets

OWD SD Sum Sum of OWD from the source to thedestination

OWD DS Sum Sum of OWD from the destination to thesource

TimeStamp unit Unit of the timestamp

Packet Rewrite Number Number of rewritten packets

Packet Rewrite Ratio Percentage of rewritten packets to total packets

Packet Disorder Number Number of out-of-order packets

Packet Disorder Ratio Percentage of out-of-order packets to totalpackets

Fragment-disorder Ratio Percentage of out-of-order fragmented packetsto total packets

Start time Time when the test began

End time Time when the test ended



8898



Related Topics1662 clear-records

16611 display nqa-agent

Function

The display nqa-agent command displays test status and configuration on an NQA client

Format

display nqa-agent [ admin-name test-name ] [ verbose ]

Parameters


admin-name Specifies the administrator of an NQA testinstance




verbose Indicates detailed information about theclient status of an NQA test

-

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

None

Example

Display the client status of an NQA test

ltHUAWEIgt display nqa-agentnqa test-instance admin ftp test-type ftp ftp-operation get nqa status normal nqa test-instance admin icmp nqa status normal nqa test-instance admin jitter test-type jitter destination-address ipv4 10101010 destination-port 100 nqa status normal



8899



Table 16-60 Description of the display nqa-agent command output

Item Description

NQA Tests Max Maximum number of supported NQA test instances

NQA Tests Number Number of current NQA test instances

NQA Flow Max Maximum number of concurrent NQA test instances

NQA Flow Remained Maximum number of concurrent and performable NQAtest instances

test-type Test type

destination-address destination address of a test

nqa status Status of NQA

Related Topics16639 nqa16658 test-type16655 start

16612 display nqa-server

Function

The display nqa-server command displays information about NQA servers

Format

display nqa-server

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

None



8900



Example Display the information about NQA servers

ltHUAWEIgt display nqa-server NQA Server Max100 NQA Server Num3NQA Concurrent TCP Server1 NQA Concurrent UDP Server2 nqa-server tcpconnect 10111 2000 ACTIVE nqa-server udpecho 10111 2000 ACTIVE nqa-server udpecho 10111 6000 ACTIVE

Table 16-61 Description of the display nqa-server command output

Item Description

NQA Server Max Maximum number of NQA servers that can be configured

NQA Server Num Number of current NQA servers

NQA Concurrent TCP Server Number of the configured TCP servers

NQA Concurrent UDPServer

Number of the configured UDP servers

nqa-server Running servers

ACTIVE Status of the NQA server

Related Topics16641 nqa-server tcpconnect16642 nqa-server udpecho

16613 dns-server

FunctionThe dns-server command configures the IP address of the domain name service (DNS) serverin the NQA test

The undo dns-server command deletes the configured IP address of the DNS server

By default the IP address of the DNS server is not configured

Formatdns-server ipv4 ip-address

undo dns-server



8901



Parameters


ipv4 ip-address Specifies an IPv4 address for the DNSserver


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

Before using a DNS test instance to detect the rate of resolving a given DNS name to an IPaddress configure a DNS server first

Prerequisites

The type of a test instance has been specified using the test-type command The test instancecan only be a DNS or HTTP test instance

Precautions

The DNS server configuration of a running test instance cannot be changed

Example

Set the IP address of the DNS server to 10111 in the test named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type dns[HUAWEI-nqa-user-test] dns-server ipv4 10111

Related Topics16639 nqa16658 test-type1667 destination-address

16614 fail-percent

Function

The fail-percent command sets the failure percentage for the NQA test instance

The undo fail-percent command deletes the configured failure percentage for the NQA testinstance



8902



By default the failure percentage is 100 That is the test is regarded as a failure only whenall the probes fail

Format

fail-percent percent

undo fail-percent

Parameters


percent Specifies the percentage of failedprobes


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

In an NQA test instance multiple probes are sent to test probe packets Statistics obtainedfrom multiple probe tests show the network quality

In actual scenarios however a probe test may fail because of interference in the network Inaddition a failure in a probe test does not mean that the NQA test fails The fail-percentcommand can be used to set failure percentage to check whether an NQA test fails or not Ifthe number of failure probe packets to the total number of probe packets reaches a specifiedpercentage the NQA test is considered as a failure

For example the number of sent packets set in the probe-count command is 10 but seven ofthem are lost during the probe test the following situations occurl If the failure percentage is set to 80 the probe test is considered a successl If the failure percentage is set to 60 the probe test is considered a failure

Prerequisites

The type of a test instance has been specified using the test-type command The type of testinstances that are not supported is as followsl FTPl Tracel LSP Tracel PWE3 Tracel DNSl Path Jitter



8903



Precautions

The failure percentage of a running test instance cannot be changed

Example

Set the percentage of the failed probes to 10 in the test named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] fail-percent 10

Related Topics16643 probe-count

16615 frequency

Function

The frequency command sets the interval at which an NQA test instance is automaticallyperformed

The undo frequency command deletes the configured interval at which an NQA test instanceis automatically performed

By default the interval at which an NQA test instance is automatically performed is notconfigured That is the test is performed for one time

Format

frequency interval

undo frequency

Parameters


interval Specifies the interval at which an NQAtest instance is automatically performed


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario



8904



You can run the start command to set the start time and end time of an NQA test If you needto perform period test from the start time to the end time in a test instance run the frequencycommand to set the interval at which an NQA test instance is automatically performed Afterthat the NQA test is automatically performed one time at each configured interval

Configuring the interval of periodic NQA test avoid time-consuming manual operations

Prerequisites


Precautions

In a trace LSP trace or PWE3 trace test the configured frequency must be greater than orequal to 60s

If the configured frequency is smaller than or equal to (probe-count - 1) x interval + timeout+ 1 the test result may be no result For the test instance supporting the jitter-packetnumparameter the number of sent packets is probe-count x jitter-packetnum packets

In an FTP test instance the configured frequency must be 2s greater than the timeout valueotherwise the FTP test instance may fail

If the masterslave switchover is performed on the NQA client before the test instance (group)is complete the following situations may occur

l If the interval for automatically performing the test is not set the test stops after themasterslave switchover

l If the interval for automatically performing the test instance is set the test is performedfrom the next period after the masterslave switchover

For trace LSP trace and PWE3 trace test instances the interval must be larger than or equalto 60 seconds

If no end time is configured the test cannot stop automatically You need to stop it manuallyThe frequency of a running test instance cannot be changed

Example

Set the interval at which test instance user test is automatically performed to 20 seconds

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] frequency 20

16616 ftp-filename

Function

The ftp-filename command configures the file name and file path for an NQA FTP testinstance

The undo ftp-filename command deletes the file name and file path for an NQA FTP testinstance

By default no file name and file path are configured



8905



Format

ftp-filename file-name

undo ftp-filename

Parameters


file-name Specifies the name and path of theoperation file in an FTP test instance


Views

NQA view

Default Level

3 Management level

Usage Guidelines

The ftp-filename command is valid only for FTP test instances

You cannot change the file path and file name of a running test instance

If no file path is specified the system searches for the file in the current path

The file name cannot end with any forward slashes () or backward slashes ()

The file name includes but is not limited to the extension name such as txt

NOTE

Various FTP servers may support files with the file name in different length ranges Before youconfigure this command ensure that the target FTP server supports the length of the specified file nameOtherwise NQA test results may fail to be transmitted using FTP

Example

Set the FTP path and file name of test instance user test to Dabc and abctxt respectively

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type ftp[HUAWEI-nqa-user-test] ftp-filename Dabcabctxt

Related Topics16639 nqa16618 ftp-operation16658 test-type



8906



16617 ftp-filesize

FunctionThe ftp-filesize command sets the size of the file used in an NQA FTP test instance

The undo ftp-filesize command restores the default size of the file used in an NQA FTP testinstance

By default the size of the file used in the FTP test is 1000 Kbytes

Formatftp-filesize size

undo ftp-filesize

Parameters


size Specifies the size of the file used in theFTP test

The value is an integer that rangesfrom 1 to 10000 in Kbytes

ViewsNQA view


Usage GuidelinesYou cannot change the configured size of the file when the test is running

If specifying the size of the upload file is adopted the FTP client automatically generates thefile name nqa-ftp-testtxt If the test is performed several times the newly uploaded filereplaces the previous one

The type of the test instance has been set to ftp using the test-type command

Example Set the size of the file to 1024 bytes in the FTP upload test named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type ftp[HUAWEI-nqa-user-test] ftp-filesize 1024

Related Topics16618 ftp-operation16658 test-type



8907



16618 ftp-operation

Function

The ftp-operation command sets the operation mode for an NQA FTP test instance

The undo ftp-operation command restores the default operation mode of an NQA FTP testinstance

By default the operation mode of an FTP test instance is get

Format

ftp-operation get | put

undo ftp-operation put

Parameters


get Indicates that the client downloads a file from the server and thedownload speed is recorded

-

put Indicates that the client uploads a local file or a created file to theserver and the upload speed is recorded

-

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

In the FTP download test the local device functions as an FTP client to downloadupload thespecified file fromto the FTP server Statistics about each FTP phase are displayed includingthe time to set up an FTP control connection and the time to transmit data

The ftp-operation command can be used to specify the FTP operation mode as put or get Aconnection with the FTP server is set up using the IP address the user name and thepassword of the FTP server and the time to set up FTP connection is recorded

Prerequisites


Precautions

The operation mode of a running test instance cannot be changed



8908



Example

Perform a test named user test to obtain the FTP download speed

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type ftp[HUAWEI-nqa-user-test] ftp-operation get

Related Topics16617 ftp-filesize16616 ftp-filename16658 test-type

16619 ftp-password

Function

The ftp-password command sets a password for logging in to the FTP server in an NQA FTPtest instance

The undo ftp-password command deletes the configured password for logging in to the FTPserver

By default no password is set for FTP test instances

Format

ftp-password password | cipher cipher-password

undo ftp-password

Parameters


password Specifies the password forlogging in to the FTP serverin an FTP test instance

The value is a string of 1 to32 or 32 to 68 case-sensitivecharacters without spacesl The length of a plaintext

password ranges from 1to 32

l The length of aciphertext passwordranges from 32 to 68

NOTEWhen quotation marks areused around the string spacesare allowed in the string



8909




cipher cipher-password Specifies the password forlogging in to the FTP serverin an FTP test instance

The value is a string of 1 to3232 to 68case-sensitivecharacters without spacesl The length of a plaintext



l If the password length is32 and the configuredciphertext password canbe decryptedsuccessfully theconfigured ciphertextpassword takes effect Ifthe configured ciphertextpassword cannot bedecrypted the plaintextpassword is used afterpassing the validitycheck


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

In the FTP test the local device functions as an FTP client to downloadupload the specifiedfile fromto the FTP server Statistics about each FTP phase are displayed including the timeto set up an FTP control connection and the time to transmit data

To ensure test security and prevent unauthorized users from accessing the network you needto enable identity authentication The ftp-password command can be used to set the specifieduser and password Only the user who enters the authorized user name and password isauthorized to access the network

Prerequisites



8910




Precautions

The password of a running test instance cannot be changed

Example

Set the password for logging in to the FTP server to Huawei-123

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type ftp[HUAWEI-nqa-user-test] ftp-password Huawei-123

Related Topics16620 ftp-username16658 test-type

16620 ftp-username

Function

The ftp-username command sets the user name for logging in to the FTP server in an FTPtest instance

The undo ftp-username command deletes the configured user name for logging in to the FTPserver

By default no user name is set for FTP test instances

Format

ftp-username name

undo ftp-username

Parameters


name Specifies the user name forlogging in to the FTP server

The value is a string of 1 to 255 case-sensitivecharacters without spacesNOTE

When quotation marks are used around the stringspaces are allowed in the string

Views

NQA view

Default Level




8911



Usage Guidelines

Usage Scenario


To ensure test security and prevent unauthorized users from accessing the network you needto enable identity authentication The ftp-username command can be used to set the specifieduser in an FTP test Only the user who enters the authorized user name and password isauthorized to access the network

Prerequisites


Precautions

The user name of a running test instance cannot be changed

Example

Set the user name for logging in to the FTP server to user1

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type ftp[HUAWEI-nqa-user-test] ftp-username user1

Related Topics16619 ftp-password16658 test-type

16621 http-operation

Function

The http-operation command sets the operation mode for an NQA HTTP test instance

By default the operation mode of the HTTP test instance is GET

Format

http-operation get

Parameters


get Obtains data from the HTTP server -

Views

NQA view



8912



Default Level


Usage Guidelines

This command applies only to the HTTP test

You cannot change the operation mode of a running HTTP test instance

Example

Set the operation mode of HTTP test instance user test to get

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type http[HUAWEI-nqa-user-test] http-operation get

Related Topics16622 http-url16658 test-type

16622 http-url

Function

The http-url command configures the uniform resource locator (URL) and versioninformation for an HTTP test instance

The undo http-url command deletes the configured URL and version information

By default no URL or version information is configured for an HTTP test instance

Format

http-url deststring [ verstring ]

undo http-url

Parameters


deststring Specifies the name of theweb page used for anHTTP test

The value is a string of 1 to 230 case-insensitivecharacters without spacesNOTE


verstring Specifies the HTTPversion

The total length of verstring should be equal to orshorter than 7 characters It can be set to v10 or11 The default HTTP version is v10



8913



Views

NQA view

Default Level



HTTP10 and HTTP11 are supported in this test instance

Precautions

The http-url command applies only to HTTP test instances You cannot change the URL of arunning HTTP test instance

The URL of a HTTP test instance must be a URL that is displayed in a browser

Example

Set the URL of HTTP test instance user test to httpwwwexamplecom

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type http[HUAWEI-nqa-user-test] http-url httpwwwexamplecom

Related Topics16621 http-operation16658 test-type

16623 icmp-jitter-mode

Function

The icmp-jitter-mode command specifies the mode of an ICMP jitter test

The undo icmp-jitter-mode command restores the default mode of an ICMP jitter test

By default the ICMP jitter test is in icmp-timestamp mode

Format

icmp-jitter-mode icmp-echo | icmp-timestamp

undo icmp-jitter-mode

Parameters


icmp-echo Configures the ICMP jitter test to use ICMP Echo messages -



8914




icmp-timestamp Configures the ICMP jitter test to use ICMP Timestampmessages

-

Views

NQA view

Default Level


Usage Guidelines

The icmp-jitter-mode command can only be used to configure the mode for ICMP jitter orpath jitter tests

Example

Configure the ICMP jitter test to use ICMP Echo messages

ltHUAWEIgt system-view[HUAWEI] nqa test-instance admin icmpjitter[HUAWEI-nqa-admin-icmpjitter] test-type icmpjitter[HUAWEI-nqa-admin-icmpjitter] icmp-jitter-mode icmp-echo

Related Topics16658 test-type

16624 interval (NQA view)

Function

The interval command sets the interval at which NQA test packets are sent

The undo interval command restores the default setting

By default the intervals for sending test packets in various tests are as follows

l For jitter path jitter and ICMP jitter test instance the interval is 100 milliseconds on theS1720GFR S2720 S2750EI S5700LI S5700S-LI and S5710-X-LI and is 50milliseconds on the S5720S-SI S5720SI S5720EI S5720HI S6720EI and S6720S-EI

l The interval is 4 seconds for other test instances

Format

interval milliseconds interval | seconds interval

undo interval



8915




milliseconds interval Sets the interval at whichpackets are sent inmillisecondsNOTE

If the configured interval is amultiple of 1000 millisecondsthe system will automaticallyconvert milliseconds intoseconds


seconds interval Sets the interval at whichpackets are sent in seconds

The value is an integer thatranges from 1 to 60 inseconds

ViewsNQA view



In an NQA test instance multiple probes are sent Statistics obtained from multiple probetests show the network quality Probe packets (or probes) are sent at a specified interval

l If the network quality is poor the interval at which packets are sent must be increasedOtherwise the network performance may deteriorate

l If the network quality is good the interval at which are sent can be decreased to shortenthe waiting time

Prerequisites

The type of a test instance has been specified using the test-type command The intervalcommand is valid only for the jitter ICMP jitter path jitter ICMP SNMP LSP ping PWE3ping TCP UDP and LSP jitter test instances


l If the configured interval is a multiple of 1000 milliseconds the system willautomatically convert milliseconds into seconds

l Packets can be sent at interval of milliseconds only in jitter path jitter or ICMP jitter testinstances The interval at which packets are sent must be greater than the timeout periodset using the timeout command in all test instances except the jitter path jitter or ICMPjitter test instance

l If the interval for sending packets has been configured running the interval commandwill override the previous configuration



8916



Precautions

The interval for sending packets of a running test instance cannot be changed

Example Set the interval for sending test packets to 1000 milliseconds

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] interval milliseconds 1000

16625 ip-forwarding

FunctionThe ip-forwarding command configures packets to be forcibly forwarded using IP on thefirst node

The undo ip-forwarding command disables packets from being forcibly forwarded using IPon the first node

Formatip-forwarding

undo ip-forwarding

ParametersNone

ViewsNQA view


Usage GuidelinesWhen a fault occurs on the network you can first run the ping command to check networkconnectivity

NOTE

Currently only NQA ICMP test instances support this configuration

Example Configure packets to be forwarded using IPltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] ip-forwarding



8917




16626 jitter-packetnum

FunctionThe jitter-packetnum command sets the number of packets sent in each probe test instance

The undo jitter-packetnum command restores the default number of packets sent in eachprobe test instance

By default 20 test packets are sent in each probe

Formatjitter-packetnum number

undo jitter-packetnum

Parameters


number Specifies the number of test packets sentin each probe in the jitter test (probe-count)

The value is an integer that rangesfrom 1 to 3000 The default valueis 20

ViewsNQA view



In an NQA test instance the jitter-packetnum command can be used to set the number ofconsecutive packets to simulate the actual traffic of a data in a specified period of time Thishelps simulate services more accurately

For example the jitter-packetnum command can be used to set the number of consecutivepackets to 3000 and an interval of 20 ms to send packets In this way G711 traffic can besimulated within one minute to detect VoIP services in UDP jitter test instances

Prerequisites

The type of a test instance has been specified using the test-type command The number ofsent packets can be configured only for jitter LSP jitter path jitter and ICMP jitter testinstances




8918



l In jitter LSP jitter path jitter and ICMP jitter test instances the number of sent packets= jitter-packetnum x probe-count but the product cannot exceed 3000

l If the number of probe packets has been set running the jitter-packetnum commandwill override the previous configuration

Precautions

The number of probe packets of a running test instance cannot be changed

Example Perform 3 probes in the test named user test and send 1000 packets in each probe

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] probe-count 3[HUAWEI-nqa-user-test] jitter-packetnum 1000

Related Topics16624 interval (NQA view)16643 probe-count

16627 local-pw-id

FunctionUsing the local-pw-id command you can set the ID of the local end of a PW or a VC

Using the undo local-pw-id command you can delete the configured ID of the local end of aPW or a VC

By default local-pw-id is not configured

Formatlocal-pw-id local-pw-id

undo local-pw-id



8919



Parameters


local-pw-id Specifies the ID ofthe local end of aPW or a VC

The value is a decimal integer

l When the test instance is of PWE3Ping the value oflocal-pw-id is an integer that ranges from 1 to4294967295 and only the VC type of LDP issupported

l When the test instance is of PWE3Tracendash When the VC type is LDP the value of local-pw-id

is an integer that ranges from 1 to 4294967295ndash When the VC type is BGP the value of local-pw-id

is an integer that ranges from 0 to 65534

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

PWE3 ping and PWE3 trace test instances can be used in the following scenarios

Connectivity and faulty node detections for a single-hop PW After the local-pw-id commandis run in the NQA view to configure the local PW ID or VC ID you can specify a PW for thedetection

Connectivity and faulty node detections for a multi-hop PW After the local-pw-id commandis run in the NQA view to configure the local PW ID or VC ID you need to specify thedestination addressl If the label-type parameter is set to control-word run the remote-pw-id remote-pw-id

command to configure the remote PW IDl If the label-type parameter is set to label-alert run the destination-address ipv4 ipv4-

address [ lsp-masklen masklen | lsp-masklen masklen lsp-loopback loopback-address |lsp-loopback loopback-address lsp-masklen masklen ] command to configure thedestination address for PWE3 ping and PWE3 trace test instances

l If the label-type parameter is set to normal run the destination-address ipv4 ipv4-address [ lsp-masklen masklen | lsp-masklen masklen lsp-loopback loopback-address |lsp-loopback loopback-address lsp-masklen masklen ] command to configure thedestination address for PWE3 ping and PWE3 trace test instances

Precautions

Before running the local-pw-id command you must set the NQA test type to PWE3 Trace orPWE3 Ping in the NQA view



8920



Example

Set the ID of the local end of a PW to 100 in the NQA view

ltHUAWEIgt system-view[HUAWEI] nqa test-instance admin pwe3[HUAWEI-nqa-admin-pwe3] test-type pwe3trace[HUAWEI-nqa-admin-pwe3] local-pw-id 100

Related Topics16646 remote-pw-id16668 vc-type

16628 local-pw-type

Function

Using the local-pw-type command you can configure the PW type of the local end

Using the undo local-pw-type command you can cancel setting the PW type of the local end

By default the PW type of the local end is Ethernet

Format

local-pw-type local-pw-type

undo local-pw-type

Parameters


local-pw-type Specifies the PW type of thelocal end

Currently encapsulation types ethernet ip-interworking and vlanare supported By thedefault the value is ethernet

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

The local-pw-type command is used to configure a PW encapsulation type for the local PEThe PW encapsulation type configured for the local PE must be the same as the PWencapsulation type for the remote PE

Prerequisites



8921



Before configuring the local-pw-type command configure the test type of NQA test instancesas PWE3 trace or PWE3 ping in the NQA view

Example In the NQA view configure the local pw-type as VLAN

ltHUAWEIgt system-view[HUAWEI] nqa test-instance admin pwe3[HUAWEI-nqa-admin-pwe3] test-type pwe3trace[HUAWEI-nqa-admin-pwe3] local-pw-type vlan

Related Topics16627 local-pw-id

16629 label-type

FunctionUsing the label-type command you can configure the label type

Using the undo label-type command you can cancel the operation of configuring the labeltype

By default the label type is control-word

Formatlabel-type control-word | label-alert | normal [ no-control-word ]

undo label-type

Parameters


control-word Indicates that the control word option is encapsulated in MPLSEcho Request packets

-

label-alert Indicates that the router alert option is encapsulated in MPLSEcho Request packets

-

normal Indicates that neither control words nor router alert options areencapsulated in MPLS Echo Request packets

-

no-control-word Indicates that the control word option is not encapsulated inMPLS Echo Request packets This parameter can be used inNQA PWE3 ping and NQA PWE3 trace tests

-

ViewsNQA view




8922



Usage Guidelines

Usage Scenario

The usage scenarios of the label types are as follows

l control-wordndash If the encapsulation type is set to control-word at a switch node on a multi-hop

PW the MPLS Echo Request packets are not delivered to the CPU for processinguntil the TTL of the label times out In this case the source obtains little PWinformation This type however ensures system performance and the source cannotlearn information on the downstream interfaces of the switch node You should usethis type when there are a great number of packets

ndash Only control-word is supported when the vc-type is BGP and lsp-version is draft6l label-alert

ndash If the encapsulation type is set to label-alert at a switch node on a multi-hop PWthe MPLS Echo Request packets are delivered to the CPU for processing In thiscase the source can obtain more PW information The system performance isgreatly affected when there are a great number of packets You can use this type toobtain details about the switch node when test instances are few

ndash Only control-word or label-alert is supported when the vc-type is BGP and lsp-version is rfc4379

l In the case that a device communicates with Huawei devices running earlier versions andthe label alert or normal mode is adopted the no-control-word option must be carried inthe test packets

Prerequisites

Before running the label-type command you must set the test type to PWE3 trace or PWE3ping in the NQA view otherwise label-type cannot be specified

Example

Configure the encapsulation type of test packets as label-alert in the NQA view

ltHUAWEIgt system-view[HUAWEI] nqa test-instance admin pwe3[HUAWEI-nqa-admin-pwe3] test-type pwe3trace[HUAWEI-nqa-admin-pwe3] label-type label-alert

Related Topics16628 local-pw-type

16630 lsp-exp

Function

The lsp-exp command configures the LSP EXP value of MPLS Echo Request packets in anNQA test instance

Using the undo lsp-exp command you can restore the default setting

By default LSP EXP is 0



8923



Format

lsp-exp exp

undo lsp-exp

Parameters


exp Specifies the LSP EXP value of anNQA test instance

The value is an integer that ranges from0 to 7 The default value is 0

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

The MPLS experimental bits (EXP) field is a 3-bit field in the MPLS header used to mark theprecedence of MPLS packets

Test packets are added to different queues according to their LSP EXP values so that

l Congestion on the link can be avoided

l Specified queue can be detected

Precautions

This command applies to only the LSP test

You cannot change the configured LSP EXP value when the test is performed

Example

Set the LSP EXP value to 5

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type lspping[HUAWEI-nqa-user-test] lsp-exp 5




8924



16631 lsp-nexthop

Function

The lsp-nexthop command is used to configure the IP address of the next hop in the case thatload balancing is enabled

Using the undo lsp-nexthop command you can cancel the current setting

By default the next-hop IP address of any link that participates in load balancing

Format

lsp-nexthop nexthop-ip-address

undo lsp-nexthop

Parameters


nexthop-ip-address Specifies the next hop address It is in dotted decimal notation

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

Two conditions must be meet before you use the commandl lsp-type is IPv4l lsp-version is RFC4379You can use the lsp-nexthop command to configure the IP address of the next hop Testinstance type supported as followingl LSP Pingl LSP Tracel LSP Jitter

Precautions

A running test instance cannot be configured with the next hop address

Example

Specify the next hop address for the LSP Ping test instance whose LSP type is IPv4 and lsp-version is rfc4379



8925



ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type lspping[HUAWEI-nqa-user-test] lsp-type ipv4[HUAWEI-nqa-user-test] lsp-version rfc4379[HUAWEI-nqa-user-test] lsp-nexthop 101220

Related Topics16658 test-type16634 lsp-type

16632 lsp-replymode

Function

Using the lsp-replymode command you can set the reply mode for the LSP test

Using the undo lsp-replymode command you can restore the default setting

By default UDP packets are used

Format

lsp-replymode no-reply | udp

undo lsp-replymode

Parameters


no-reply Indicates that the LSP testis not responded

If the no-reply parameter is specified in thecommand the destination does not respond toNQA probe packets This configuration is used tocollect the statistics on or process received probepackets on the destination host and no responsepackets need to be sent Meanwhile the NQA testinstance fails because the client does not receiveresponse packets

udp Indicates that IPv4 UDPpackets are used torespond to the LSP test

-

Views

NQA view

Default Level




8926



Usage Guidelines

Usage Scenario

Using the lsp-replymode command you can set the reply mode for the LSP test Thesupported test instance arel LSP Pingl LSP Tracel LSP Jitterl PWE3 Pingl PWE3 Trace

Precautions

lsp-replymode no-reply indicates the unidirectional test If the client displays timeout itindicates that the test succeeds

You cannot change the reply mode of the currently performed LSP test

Example

Set the reply mode of the test named user test to sending UDP packets

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type lspping[HUAWEI-nqa-user-test] lsp-replymode udp


16633 lsp-tetunnel

Function

The lsp-tetunnel command configures the TE tunnel used in an NQA LSP test

The undo lsp-tetunnel command deletes the configured TE tunnel

By default no TE tunnel is configured for an LSP test instance

Format

lsp-tetunnel tunnel interface-number [ hot-standby | primary ]

undo lsp-tetunnel

Parameters


tunnel interface-number Specifies the tunnel interface number -

hot-standby Indicates the hot-standby tunnel of the TE tunnel -



8927




primary Indicates the primary tunnel of the TE tunnel -

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

Hot standby An ordinary backup CR-LSP is set up immediately after a primary CR-LSP isset up The ordinary backup CR-LSP takes over traffic if the primary CR-LSP fails After theprimary CR-LSP recovers traffic switches back

CR-LSP backup can be configured to allow traffic to switch from a primary CR-LSP to abackup CR-LSP providing end-to-end protection

An NQA LSP test instance can check the reachability of the following LSPs and collect SLAstatisticsl MPLS TE tunnel Run the lsp-tetunnel interface-type interface-number command to

configure an interface number for an MPLS TE tunnell Hot-standby MPLS CR-LSP Run the lsp-tetunnel interface-type interface-number hot-

standby command to configure an interface number for a hot-standby MPLS CR-LSPl Primary MPLS TE tunnel Run the lsp-tetunnel interface-type interface-number

primary command to configure an interface number for a primary MPLS TE tunnel

Prerequisites

Before using the lsp-tetunnel command to configure the TE tunnel in an NQA LSP testinstance run the lsp-type te command to specify the NQA LSP test type to TE

LSP jitter test instances cannot test the hot-standby tunnel of a TE tunnel

You cannot change the TE tunnel when the LSP test is performed

Example

Configure the TE tunnel of the test named user test

ltHUAWEIgt system-view[HUAWEI] interface tunnel 1[HUAWEI-Tunnel1] quit[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type lspping[HUAWEI-nqa-user-test] lsp-type te[HUAWEI-nqa-user-test] lsp-tetunnel tunnel 1

Configure the CR-LSP hot-standby tunnel of the test named user testltHUAWEIgt system-view[HUAWEI] interface tunnel 1[HUAWEI-Tunnel1] quit



8928



[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type lspping[HUAWEI-nqa-user-test] lsp-type te[HUAWEI-nqa-user-test] lsp-tetunnel tunnel 1 hot-standby


16634 lsp-type

Function

Using the lsp-type command you can configure the LSP test type

Using the undo lsp-type command you can cancel configuring the LSP test type

By the default the value of lsp-type is ipv4

Format

lsp-type ipv4 | te | ipv4-vpn

undo lsp-type

Parameters


ipv4 Sets the test type to Ipv4 LSP pingtracejitter -

te Sets the type to LSP pingtracejitter of the TE tunnel -

ipv4-vpn Sets the LSP test type to IPv4 L3VPN -

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

The lsp-type command can be used to configure the LSP test type of an NQA test instance todetect an LDP or a TE tunnel

l If ipv4 is configured the NQA test instance is used to detect the connectivity of aspecified LDP LSP The destination address of the test instance is configured using thedestination-address command



8929



l If te is configured the NQA test instance is used to detect the connectivity of a specifiedTE tunnel The destination address of the test instance is configured using the lsp-tetunnel command

l If the ipv4-vpn parameter is set the NQA test case is used to test LSPs on a BGP-basedL3VPN network

ndash To test a primary LSP on a BGP-based L3VPN network specify the destinationaddress using the destination-address lsp-masklen masklen command

ndash To test a primary LSP on a BGP-based L3VPN network specify the destinationaddress using the destination-address lsp-masklen masklen vpn-frr-pathcommand

Prerequisites

l If the LSP test type is set to IPv4 the NQA test instance type must be set to LSP pingLSP trace or LSP jitter

l If the LSP test type is set to TE the NQA test instance type must be set to LSP pingLSP trace or LSP jitter

l If the LSP test type is set to IPv4 L3VPN the NQA test instance type must be set to LSPping

Precautions

The type of an LSP test that is running cannot be changed

Example

Set the type of the test named user test to Ipv4 LSP ping

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type lspping[HUAWEI-nqa-user-test] lsp-type ipv4


16635 lsp-version

Function

Using the lsp-version command you can configure the protocol that is used by the LSP testinstance

Using the undo lsp-version command you can restore the default setting

By default draft6 is adopted

Format

lsp-version rfc4379 | draft6

undo lsp-version



8930



Parameters


rfc4379 Indicates that the protocol defined in RFC 4379 is adopted -

draft6 Indicates that Draft-ietf-mpls-lsp-ping-06 is adopted -

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

The lsp-version command can be used to specify the protocol that is used by the LSP testinstance

Prerequisites

If draft6 or rfc4379 is specified in the lsp-version command specify lspping lsptracelspjitter pwe3ping or pwe3trace in the test-type command

NOTEThe protocol adopted by a running LSP test instance cannot be changed

Example

Configure the LSP test instance to use the protocol defined in RFC 4379

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type lspping[HUAWEI-nqa-user-test] lsp-version rfc4379


16636 md

Function

Using the md command you can specified the Maintenance Domain (MD) and MaintenanceAssociation (MA) of the NQA test packet to be sent This command takes effect only in theMAC Ping test instance

Using the undo md command you can remove the specified MD from the NQA test packetto be sent

By default no MD is specified



8931



NOTE

The S1720GFR does not support this command

Formatmd md-name ma ma-name

undo md

Parameters


md-name Specifies an MD The value is a string of 1 to 43 case-sensitive characterswithout spaces

ma-name Specifies an MA The value is a string of 1 to 43 case-sensitive characterswithout spaces

ViewsNQA view


Usage GuidelinesYou can use this command to specify the MD and MA of an MAC Ping test instance Thiscommand has the same effect as the operation of checking the connectivity fault in the MAview Before running this command you need to create an MD and MA and set the test typeto macping

You cannot modify the MD and MA when the test instance is running

Example Set the test type of an NQA test instance to MAC Ping and specify the MD name tomdcustome and the MA name to macustomer

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type macping[HUAWEI-nqa-user-test] md mdcustomer ma macustomer

Related Topics16639 nqa

16637 mep

FunctionUsing the mep command you can configure the MEP ID for an NQA test instance



8932



Using the undo mep command you can delete the MEP ID configured for an NQA testinstance

By default the MEP ID for an NQA test instance is 0

NOTE


Formatmep mep-id mep-id

undo mep

Parameters


mep-id Specifies the MEP ID of an NQA testinstance

The value is an integer ranging from1 to 8191

ViewsNQA view


Usage GuidelinesBefore starting an NQA test instance you need to run the mep-id mep-id command toconfigure the EOAM module Otherwise the normal operation of the NQA test instance willbe affected

This command is available for NQA MAC ping test instances

Example Set the MEP ID of an NQA MAC ping test instance to 1

ltHUAWEIgt system-view[HUAWEI] nqa test-instance test macping[HUAWEI-nqa-test-macping] test-type macping[HUAWEI-nqa-test-macping] mep mep-id 1

Related Topics12730 mep mep-id

16638 nexthop

FunctionThe nexthop configures a next hop address for NQA test packets



8933



The undo nexthop deletes the configured next hop address for the NQA test packets

By default the next hop address for the NQA test packets is obtained by searching the routingtable

Format

nexthop ipv4 ip-address

undo nexthop

Parameters


ipv4 ip-address Specifies a next hopaddress for NQA testpackets

The value is in dotted decimal notation

NOTEThe specified next hop must be the physicalinterface directly connected to the device thatsends the NQA test packets

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

In the scenario that an NQA test instance is associated with static routes if a link becomesfaulty the NQA test instance detects this fault and then the static routes associated with theNQA test instance become Down After the link recovers the NQA test instance attempts tosend ICMP test packets over the static routes Because these static routes are still Down theNQA test instance still fails to detect link connectivity Traffic fails to be forwarded

The nexthop command configures a next hop address for the NQA test packets whichensures that the packets are forwarded when the link recovers from the fault and the staticroutes associated with the NQA test instance are Up

Prerequisites

Only the NQA ICMP test instance allows you to specify a next hop address for NQA testpackets

Precautions

After you configure a next hop address for an NQA ICMP test instance the test instancepackets will be sent based on the address



8934



You can also run the source-interface command to specify an outbound interface throughwhich the NQA ICMP test instance packets are sent to the specified next hop address Toguarantee that the test packets are sent the following two conditions must be met

l The specified next hop address matches the outbound interfacel The specified outbound interface cannot be the member interface of a logical interface

Example Configure a next hop address for NQA ICMP test packets

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] nexthop ipv4 10111

16639 nqa

FunctionThe nqa command creates an NQA test instance and enters the NQA view

The undo nqa command deletes an NQA test instance

Formatnqa test-instance admin-name test-name

undo nqa test-instance admin-name test-name | all-test-instance

Parameters


admin-name Specifies the administratorof an NQA test instance

The value is a string of 1 to 32 case-sensitivecharacters excluding question marks () endashes (-) a single or consecutive quotationmarks ()

test-name Specifies the name of anNQA test instance


all-test-instance Specifies all NQA testinstances

-

ViewsSystem view




8935



Usage Guidelines

Usage Scenario

The NQA is an integrated network test function NQA test instances can accurately detectnetwork running status collect test statistics and reduce costs

NQA measures the performance of different protocols running on the network NQA allowsenterprise users to collect network operation indexes in real time such as total delay of theHTTP TCP connection delay DNS resolution delay file transmission delay FTP connectiondelay and DNS resolution error ratio

To check these performance indexes you can create NQA test instances The two ends of anNQA test are called the NQA client and NQA server The NQA client is responsible forinitiating an NQA test After receiving packets the NQA server sends response messages tothe NQA client You can learn about the running status of a corresponding network accordingto the returned packets


After the undo nqa all-test-instance command is run all NQA test instances except therunning test instance will be deleted

Precautions

A running test instance cannot be deleted

Example

Create a test named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test]


16640 nqa-jitter tag-version

Function

The nqa-jitter tag-version command sets the packet version for a jitter test instance

The undo nqa-jitter tag-version command restores the default packet version for a jitter testinstance

By default the packet version of a jitter test instance is 1

Format

nqa-jitter tag-version version-number

undo nqa-jitter tag-version



8936



Parameters


version-number Specifies the packet version for a jitter testinstance

The value can be 1 or 2

Views

System view

Default Level


Usage Guidelines

Usage Scenario

Version 1 does not support unidirectional packet loss statistics

Version 2 produces more accurate packet statistics which helps network administrators tolocate network faults and detect malicious attacks towards the network After version 2 andcollecting the packet loss across a unidirectional link are enabled you can view the packetloss across the link from the source end to the destination end from the destination end to thesource end or in an unknown direction in the test results

Therefore configuring version 2 is recommended


If the packet version of a jitter test instance has been configured running the nqa-jitter tag-version command will override the previous configuration

Precautions

l If the packet version for the jitter test is 1 configuring the UDP server is optionall If the packet version of the jitter test is 2 configuring UDP server is mandatory You

need to run the nqa-server udpecho command to configure the UDP server If thecommand is not configured the UDP jitter test instance on the ingress will fail due totimeout

Example

Set the packet version of a jitter test instance to 2

ltHUAWEIgt system-view[HUAWEI] nqa-jitter tag-version 2

16641 nqa-server tcpconnect

Function

The nqa-server tcpconnect command configures the IP address and port number for the TCPserver in an NQA TCP test instance



8937



The undo nqa-server tcpconnect command deletes the IP address and port numberconfigured for the TCP server in an NQA TCP test instance

By default no IP address or port number is configured for the TCP server in an NQA TCPtest instance

Formatnqa-server tcpconnect [ vpn-instance vpn-instance-name ] ip-address port-number

undo nqa-server tcpconnect all | [ vpn-instance vpn-instance-name ] ip-address port-number

NOTE




Specifies the name of the VPNinstance to which the TCP serverbelongsNOTE

This parameter is invalid when aloopback address is specified as theTCP server address

The value is a stringof 1 to 31 case-sensitive charactersspaces notsupported Whendouble quotationmarks are usedaround the stringspaces are allowed inthe string

all Indicates all TCP listeningaddresses and port numbers

-

ip-address Specifies the IP address of the TCPserver for monitoring TCP services

The value is indotted decimalnotation

port-number Specifies the port number of theTCP server for monitoring TCPservices

The value is aninteger that rangesfrom 1 to 65535 Theconfigured portcannot be a well-known port or usedby other modules

ViewsSystem view




8938



Usage Guidelines

Usage Scenario

The NQA TCP test is used to detect the rate at which a TCP connection is set up between anNQA client and a TCP server through the three-way handshake In a TCP test instance a TCPserver needs to be configured on the server end to respond to probe packets

Perform the following steps on the client to configure TCP server parametersl Run the destination-address command to configure the destination address of an NQA

test instance or the IP address of the TCP serverl Run the destination-port command to configure the destination port number of an NQA

test instance or the port number of the TCP server

If the client and the server are connected through a VPN you need to specify the VPNinstance name


Running the undo nqa-server tcpconnect all command will delete the IP address and portnumber of the TCP server

Precautions

A TCP server is configured only in a TCP test instance

Example

Create a TCP server for an NQA test instance with the IP address as 1010101 and the portnumber as 5000

ltHUAWEIgt system-view[HUAWEI] nqa-server tcpconnect 1010101 5000

Related Topics1667 destination-address1668 destination-port

16642 nqa-server udpecho

Function

The nqa-server udpecho command configures the IP address and port number for the UDPserver in an NQA test

The undo nqa-server udpecho command deletes the IP address and port number configuredfor the UDP server in an NQA test

By default no IP address or port number is configured for the UDP server in an NQA test

Format

nqa-server udpecho [ vpn-instance vpn-instance-name ] ip-address port-number




8939



undo nqa-server udpecho [ vpn-instance vpn-instance-name ] ip-address port-number |all

Parameters



Specifies the name of the VPN instanceto which the server belongsNOTE

This parameter is invalid when a loopbackaddress is specified as the UDP serveraddress


all Specifies a server for all NQA testinstances

-

ip-address Specifies the IP address of the serverfor monitoring UDP services


port-number Specifies the port number of the serverfor monitoring UDP services

The value is an integer thatranges from 1 to 65535 Theconfigured port cannot be awell-known port or used byother modules

Views

System view

Default Level


Usage Guidelines

Usage Scenario

This command is used on a UDP server

UDP packets are transmitted in a jitter test The test is used to obtain the packet delay jitterand packet loss ratio by comparing timestamps in the request and response packets A UDPserver needs to be configured for an NQA test to respond to probe packets



Running the undo nqa-server udpecho all command will delete the IP address and portnumber of the UDP server for all NQA UDP test instances

Precautions

l If the version number of the jitter test packets is 1 the command is optional



8940



l If the version number of the jitter test packets is 2 the command is mandatory If thecommand is not configured the jitter test instance on the ingress will fail due to timeout

Example

Create an NQA UDP monitoring server with the IP address 1010102 and the port number6000

ltHUAWEIgt system-view[HUAWEI] nqa-server udpecho 1010102 6000

16643 probe-count

Function

The probe-count command sets the number of probes for an NQA test instance

The undo probe-count command restores the default number of probes for an NQA testinstance

By default the number of probes for an NQA test instance is 3

Format

probe-count number

undo probe-count

Parameters


number Specifies the number ofprobes in an NQA testinstance

The value is an integer that ranges from 1 to 15The default value is 3NOTE

The number of probes in a trace test instance cannotbe more than 10

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

An NQA test consists of multiple probes By default if one or more probes are successful inan NQA test the test is considered successful If all probes fail the test is considered a failureThe number of probes in an NQA test is based on the network quality



8941



l If the network to be tested is a reliable network the number of probes can be setrelatively small because the probe can be successful after a small number of probepackets are sent

l If the network to be tested is an unreliable network the number of probes can be setrelatively large because the probe can be successful only after a large number of probepackets are sent

You can also detect the network quality based on statistics obtained from multiple probes Forexamplel If the probe test is successful after a small number of probes packets are sent the

network quality is goodl If the probe test is successful after a large number of probes packets are sent the network

quality is poor

Prerequisites

The type of a test instance has been specified using the test-type command The type of testinstances that are not supported is as followsl FTPl DNS


l In jitter test instances ICMP jitter test instances path jitter test instances LSP jitter testinstances the number of sent packets = probe-count x jitter-packetnum but theproduct cannot exceed 3000

l If the number of probes has been configured running the probe-count command willoverride the previous configuration

Precautions

The number of probes of a running test instance cannot be changed

Example Set the number of probes to 6 in NQA test instance user testltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] probe-count 6

Related Topics16626 jitter-packetnum16644 probe-failtimes

16644 probe-failtimes

FunctionThe probe-failtimes command sets the threshold for the number of traps to be sent when theNQA test fails That is test packet fragmentation is not allowed

The undo probe-failtimes command restores the default threshold for the number of traps tobe sent when the NQA test fails



8942



By default one trap is sent for each probe failure

Formatprobe-failtimes times

undo probe-failtimes

Parameters


times Specifies the threshold for the number of trapsto be sent when the NQA test fails that is thenumber of continuous probe failures

The value is an integer thatranges from 1 to 15 Thedefault value is 1

ViewsNQA view



The NQA probe test is used to check whether response packets are received in a probe If thenumber of continuous probe failures reaches the specified value the system sends a trap to thespecified NMS

Prerequisites


The type of a test instance has been specified using the test-type command Path jitter test isnot supported

Follow-up Procedure

Run the send-trap probefailure command to enable the system to send a trap to the NMSafter a probe fails Otherwise the trap cannot be sent to the NMS after a probe fails

Precautions

This configuration of a running test instance cannot be changed

If the test instance does not support probe-count you are advised to set probe-failtimes to 1otherwise traps cannot be sent

If the test instance supports probe-count you are advised to set probe-failtimes to be smalleror equivalent to probe-count otherwise traps cannot be sent

Example Set the number of continuous probe failures to 10 in the test named user test



8943



ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type tcp[HUAWEI-nqa-user-test] probe-failtimes 10

Related Topics16658 test-type16649 send-trap

16645 records

FunctionThe records command sets the maximum number of history records and the maximumnumber of test results for NQA test instances

The undo records command restores the default maximum number of history records and thedefault maximum number of test results for NQA test instances

By default the number of history records is 50 and the number of test results is 5

Formatrecords history number | result number

undo records history | result


history number Specifies the maximumnumber of history records


result number Specifies the maximumnumber of test results


ViewsNQA view



You can run the records command to set the maximum number of history records and themaximum number of test results for NQA test instances



8944



By default a test instance supports 50 history records You need to limit the number of historyrecords on the device In addition you need to set the number of allowed remaining historyrecords that can be added The configured maximum number of history records cannot exceedthe sum of the total default number of history records and the remaining number of historyrecords

Precautions



Example Set the maximum number of history records to 30 for test instance user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] records history 30

Related Topics1669 display nqa history16610 display nqa results

16646 remote-pw-id

FunctionUsing the remote-pw-id command you can configure the ID of the remote end of a PW or aVC

Using the undo remote-pw-id command you can remove the configured ID of the remoteend of a PW or a VC

When the VC type is LDP remote-pw-id defaults to be 0

Formatremote-pw-id remote-pw-id

undo remote-pw-id



8945



Parameters


remote-pw-id

Specifies the IDof the remote endof a PW or a VC


l In the case of a PWE3 ping test instance the value ofremote-pw-id is an integer that ranges from 1 to4294967295 and only the VC type of LDP issupported The default value is 0 indicating that theID of the remote end of a PW is not configured

l In the case of a PWE3 tracendash if the VC type is LDP the value of remote-pw-id is

an integer that ranges from 1 to 4294967295 Thedefault value is 0

ndash if the VC type is BGP the value of remote-pw-idis an integer that ranges from 0 to 65534

Views

NQA view

Default Level


Usage Guidelines

Before running the remote-pw-id command you must set the test type to PWE3 Trace orPWE3 Ping in the NQA view

Example

In the NQA view configure the ID of the remote end of a PW to 100 the administrator toadmin and the test type to PWE3 trace

ltHUAWEIgt system-view[HUAWEI] nqa test-instance admin pwe3[HUAWEI-nqa-admin-pwe3] test-type pwe3trace[HUAWEI-nqa-admin-pwe3] remote-pw-id 100


16647 restart (NQA view)

Function

The restart command restarts the current running test instance



8946



Formatrestart

ParametersNone

ViewsNQA view


Usage GuidelinesFunction of the restart command is the same as that of the start now command

Example Restart the test instance named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] destination-port 8000[HUAWEI-nqa-user-test] destination-address ipv4 10111[HUAWEI-nqa-user-test] restart

Related Topics16655 start16656 stop

16648 sendpacket passroute

FunctionThe sendpacket passroute command enables test packets to be sent without searching therouting table

The undo sendpacket passroute command restores the default setting

By default the test packet is sent according to the routing table

Formatsendpacket passroute

undo sendpacket passroute

ParametersNone



8947



Views

NQA view

Default Level


Usage Guidelines

The type of a test instance has been specified using the test-type command The type of testinstances that are supported is as follows

l ICMP

l TCP

l UDP

l HTTP

l Jitter

l FTP

l SNMP

l Trace

You cannot change this configuration of a running test instance

After the sendpacket passroute command is executed the device sends test packets withoutsearching the routing table However the configurations of ttl and ip-forwarding becomeinvalid

Example

Enable test packets to be sent without searching the routing table

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] sendpacket passroute

Related Topics16658 test-type16639 nqa

16649 send-trap

Function

The send-trap command configures conditions for sending traps

The undo send-trap command deletes the previous configuration

By default the device is disabled from sending traps



8948



Format

send-trap all | probefailure | rtd | testcomplete | testfailure | testresult-change

undo send-trap all | probefailure | rtd | testcomplete | testfailure | testresult-change

Parameters


all Indicates that a trap is sent in any of the following situationsl The RTD exceeds the thresholdl NQA probes faill An NQA test succeedsl NQA tests fail

-

probefailure Indicates that a trap is sent when the number of probe failuresreaches the threshold

NOTEThis parameter does not apply to the jitter and ICMP jitter test instances

-

rtd Indicates that a trap is sent when the RTD exceeds the threshold -

testcomplete Indicates that a trap is sent when a test succeeds -

testfailure Indicates that a trap is sent when the number of test failuresreaches the threshold

-

testresult-change Indicates that a trap is sent when the probe result changesNOTE

This function supports only ICMP test instances

-

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

Traps are generated no matter whether the NQA test succeeds or fails You can determinewhether traps are sent to the NMS by enabling or disabling the trap function

The device sends traps to the NMS in any of the following situationsl The RTD exceeds the threshold

If the RTD exceeds the threshold the device sends a trap to the NMS using theconfigured address



8949



l NQA probes failWhen no response packet is received after a specified number of continuous test packetsare sent the device sends a trap to the NMS using the configured address

l An NQA test succeedsWhen the device receives a response packet from a destination address the device sendsa trap to the NMS using the configured address

l NQA tests failWhen the number of continuous test failures reaches the maximum number the devicesends a trap to the NMS using the configured address

You can run the send-trap command to configure conditions for sending traps When acondition is met the device sends a trap to the NMS

Prerequisites


The route between the device and NMS is reachable and related configurations are completeThe host where traps are sent is configured using the snmp-agent target-host trapcommand otherwise traps cannot be sent to the NMS

Precautions


Example Configure the test instance user test to send a trap when the test fails

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] send-trap testfailure

Related Topics16644 probe-failtimes16657 test-failtimes

16650 sender-address

FunctionThe sender-address command configures the source IP address in the multi-hop PWscenario

The undo sender-address command restores the default setting

By default no source IP address is configured

Formatsender-address ipv4 ip-address

undo sender-address



8950



Parameters


ipv4 ip-address Specifies a source IPv4 address -

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

When PWE3 ping is performed in the multi-hop PW scenario and the lsp-version is rfc4379the sender-address command specifies a source IP address The value is a routable addresson the same public network with the address of the destination PE Usually the source IPaddress is the address of the adjacent SPE or UPE

Precautions

After the sender-address command is run the LSP version cannot be set to draft6

Example

Set the source IP address of the PWE3 ping test instance in the multi-hop PW scenario to10111

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type pwe3ping[HUAWEI-nqa-user-test] lsp-version rfc4379[HUAWEI-nqa-user-test] sender-address ipv4 10111

16651 set-df

Function

The set-df command configures the DF (Dont Fragment) field of the test packet This fieldprevents packets from being fragmented

The undo set-df command restores the default setting

By default packet fragmentation is allowed

Format

set-df

undo set-df



8951



ParametersNone

ViewsNQA view



If two hosts need to communicate with each other over multiple networks the smallest MTUvalue of the networks is the path MTU value Packets can be transmitted normally overmultiple networks only after the path MTU value is obtained

If the DF bit of a packet is not configured and the length of the packet is longer than theMTU value the packet will be fragmented into several fragments that are shorter than thepath MTU value As a result the path MTU cannot be detected by sending packets withincreasing lengths To detect the path MTU value run the set-df command to prohibit packetfragmentation Then increase the length of packets sent along the path to find the path MTUvalue

Prerequisites

The type of a test instance has been set to Trace using the test-type trace command

Precautions

The configuration of the DF bit for packets in a running test instance cannot be changed

Example Set the test packet sent without being fragmented

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type trace[HUAWEI-nqa-user-test] set-df


16652 source-address

FunctionThe source-address command sets the source IP address for a test instance

The undo source-address command restores the default setting

By default the IP address of the interface where packets are sent functions as the source IPaddress of a test instance



8952



Format

source-address ipv4 ipv4-address

undo source-address

Parameters


ipv4 ipv4-address Specifies the IPv4 source address for theNQA test instance


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

After the test packets are transmitted to the destination address the source address of theNQA test instance The source-address command is used to configure the source IP addressfor the NQA test If no source IP address is configured the system specifies the IP addressthat sends test packets as the source IP address

Prerequisites

The type of a test instance has been specified using the test-type command However the testtype cannot be PWE3 trace PWE3 ping or MAC ping

Precautions

The configuration of the source IP address of the running test instance cannot be changed

Example

Set the source IP address to 10111 for test instance user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] source-address ipv4 10111

Related Topics16658 test-type16653 source-interface16654 source-port



8953



16653 source-interface

Function

The source-interface command configures the source interface for an NQA test instance

The undo source-interface command cancels the configuration

By default no source interface is configured for an NQA test instance

Format

source-interface interface-type interface-number

undo source-interface

Parameters



Specifies the type and number of the source interfacefor an NQA test instance

-

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

After test packets reach the destination address the destination end sends response packets tothe client end After the source-interface command is used to configure the source interfacefor an NQA test instance there are the following scenariosl If the source-address command is run to specify the source IP address the test packets

are sent from the specified source interface but the response packets are received fromthe configured source IP address

l If no source IP address is specified for an NQA test instance the IP address of the sourceinterface will be used as the source IP address of the NQA test instance In this scenariothe initiated and responded packets are both transmitted over the outbound interfacespecified by the source-interface command

Prerequisites

The type of a test instance has been specified using the test-type command The sourceinterface can be configured only for ICMP ICMP jitter Jitter and MAC ping test instances

Precautions

The configuration of the source interface of a running test instance cannot be changed



8954



The source interface of an NQA test instance must be an interface with an IP addressconfigured otherwise the command cannot take effect

The source interface cannot be a link aggregation interface or a member interface in loadbalancing scenario otherwise the command cannot take effect

Example

Set the source interface of test instance user test to vlanif 100

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] source-interface vlanif 100

Related Topics16658 test-type16654 source-port16652 source-address

16654 source-port

Function

The source-port command configures the source port for an NQA test instance

The undo source-port command restores the default setting

No default source port number is specified port numbers are randomly allocated by thesystem

Format

source-port port-number

undo source-port

Parameters


port-number Specifies the source portnumber for an NQA testinstance

The value is an integer that ranges from 1 to65535 The configured port cannot be a well-known port or used by other modules

Views

NQA view

Default Level




8955



Usage Guidelines

Usage Scenario

If a source port number is specified in an NQA test instance NQA test packets can beregulated more accurately which prevents the probe packets from being filtered by rules suchACL The source-port command can be used to configure the source port for this NQA testinstancel If no source port number is specified for an NQA test instance a port number is selected

at random to receive or send NQA test packetsl If source port number is specified for an NQA test instance the specified port number is

used to receive and send NQA test packets

Prerequisites

The test instance type has been specified using the test-type command The source portcannot be configured for LSP ping LSP trace LSP jitter PWE3 ping PWE3 trace mac pingpath jitter DNS ICMP ICMP jitter or trace test instances

Precautions

The port specified in the source-port command must be available otherwise the probe fails


Example

Set the source port number of test instance user test to 3000

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type tcp[HUAWEI-nqa-user-test] source-port 3000

Related Topics16658 test-type16653 source-interface16652 source-address

16655 start

Function

The start command sets the start mode and end mode for an NQA test instance

The undo start command stops a running NQA test instance or restores the configuration ofstart mode and end mode of an unperformed NQA test instance

By default the test instance stops automatically after test packets are sent

Format

start at [ yyyymmdd ] hhmmss [ end at [ yyyymmdd ] hhmmss | delay secondssecond | hhmmss | lifetime seconds second | hhmmss ]



8956



start delay seconds second | hhmmss [ end at [ yyyymmdd ] hhmmss | delay seconds second | hhmmss | lifetime seconds second | hhmmss ]

start now [ end at [ yyyymmdd ] hhmmss | delay seconds second | hhmmss |lifetime seconds second | hhmmss ]

undo start

Parameters


start at[ yyyymmdd ]hhmmss

Performs a test instance at aspecified timeNOTE

The configured time must belater than the time on thedevice

-

start delay seconds second |hhmmss

Specifies a delay inperforming a test instance

l seconds second specifies a delay inperforming a test instance The valueis an integer ranging from 1 to86399 in seconds

l hhmmss specifies a delay inperforming a test instance Ifhhmmss is specified the systemautomatically sets the moment inseconds For example 100indicates that a test instance starts inone hour (3600 seconds)

start now Performs a test instanceimmediately

-

end at[ yyyymmdd ]hhmmss

Stops a test instance at aspecified time

-

end delay seconds second |hhmmss

Specifies a delay in stoppinga test instance This delay isset based on the currentsystem time For example Ifstart at 90000 end delayseconds 60 is run at 85940then a test instance starts at90000 and ends at 90040

l seconds second specifies a delay instopping a test instance The value isan integer ranging from 6 to 86399in seconds

l hhmmss specifies a delay instopping a test instance Forexample 100 stands for a 3600-second delay from the currentsystem time till the time that the testinstance stops

NOTEThe delay in stopping a test instance must beset to at least 6s later than the delay inperforming the test instance



8957




end lifetime seconds second |hhmmss

Specifies the lifetime of anNQA test instance (startingfrom the moment that theNQA test instance starts) Forexample If start delayseconds 60 end lifetimeseconds 120 is run at90000 then a test instancelasts for 120s as it starts at090100 and ends at090300

l seconds second sets the life time ofa test instance in seconds The valueis an integer ranging from 6 to86399 in seconds

l hhmmss sets the lifetime of a testinstance For example 100indicates that the lifetime of a testinstance is 3600s starting from themoment a test instance starts

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

After configuring test instances and relevant attributes you need to manually set the start andend modes for the test instances The types of start and end modes are as followsl Start modes

ndash Starting a test instance at a specified timendash Starting a test instance immediatelyndash Starting a test instance after a certain delay

l End modesndash Ending a test instance at a specified timendash Ending a test instance immediatelyndash Ending a test instance after a certain delayndash Ending a test instance after all test packets are sent

You can set the start and end modes as required

Precautions

If the number of the running test instances reaches the maximum value defined by the systemthe start command is invalid

For the same test instance the start now command can be used again only when the previousconfiguration is complete Although this command has been run and configurations have beensaved this start now command will not be restored and needs to be run again after the deviceis restarted

When starting a test instance at a specified time the time must be later than the current timeon the device



8958



Example

Perform the test 10 hours later

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] destination-address ipv4 10111[HUAWEI-nqa-user-test] destination-port 4000[HUAWEI-nqa-user-test] start delay 100000

Related Topics16658 test-type16611 display nqa-agent

16656 stop

Function

The stop command stops an NQA test instance

Format

stop

Parameters

None

Views

NQA view

Default Level


Usage Guidelines

You can run this command to stop only the running NQA test instances that is test instancesin active state

Example

Stop the test instance named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] stop

Related Topics16655 start16615 frequency



8959



16657 test-failtimes

Function

The test-failtimes command sets the number of consecutive test failures in an NQA test

The undo test-failtimes command restores the default setting

By default a trap message is sent for each test failure

Format

test-failtimes times

undo test-failtimes

Parameters


times Specifies the number of consecutivetest failures in an NQA test


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

An NQA test consists of multiple probe tests By default if one or more probe tests aresuccessful in an NQA test the test is considered successful If all probe tests fail the test isconsidered failed If the number of consecutive test failures reaches the specified value thesystem will send a trap to the specified NMS

Prerequisites


Follow-up Procedure

Run the send-trap testfailure command to send a trap to the NMS after an NQA test failsOtherwise the trap cannot be sent to the NMS after an NQA test fails

Precautions




8960



Example

Set the number of consecutive test failures to 10

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] test-failtimes 10

Related Topics16614 fail-percent16649 send-trap

16658 test-type

Function

The test-type command configures the test type for an NQA test instance

The undo test-type command cancels the test type configured for an NQA test instance

By default no test type is configured

Format

test-type dns | ftp | http | icmp | icmpjitter | jitter | lspjitter | lspping | lsptrace | macping| pathjitter | pwe3ping | pwe3trace | snmp | tcp | trace | udp

undo test-type

NOTE

The S1720GFR does not support macping

Parameters


dns Specifies a DNS test -

ftp Specifies an FTP service test -

http Specifies an HTTP service test -

icmp Specifies an ICMP test -

icmpjitter Specifies an ICMP jitter test which can detect the jitter on thenetwork

-

jitter Specifies a jitter test which can detect the jitter during UDP packettransmission

-

lspjitter Specifies an LSP jitter test -

lspping Specifies an LSP ping test -

lsptrace Specifies an LSP trace route test -

macping Specifies a MAC ping test -



8961




pathjitter Specifies a path jitter test which can detect the hop-by-hop jitterduring the ICMP packet transmission

-

snmp Specifies an SNMP test -

tcp Specifies a TCP test -

trace Specifies a trace test -

udp Specifies a UDP test -

Views

NQA view

Default Level


Usage Guidelines

The type of a running test instance cannot be changed

Example

Configure the test type of an NQA test instance as TCP

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type tcp


16659 timestamp-unit

Function

The timestamp-unit command sets the unit of timestamp for an NQA test instance

The undo timestamp-unit command restores the default setting

By default the unit of timestamp for an NQA test instance is millisecond

Format

timestamp-unit millisecond | microsecond

undo timestamp-unit microsecond



8962



Parameters


millisecond Sets the unit of timestamp for an NQA test instance to millisecond -

microsecond Sets the unit of timestamp for an NQA test instance to microsecond -

ViewsNQA view



The timestamp-unit millisecond command sets the unit of timestamp for an NQA testinstance to millisecond

The timestamp-unit microsecond command sets the unit of timestamp for an NQA testinstance to microsecond

Precautions

This command applies to the ICMP Jitter and Jitter tests

Example Set the unit of timestamp for an NQA test instance to microsecondltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] timestamp-unit microsecond


16660 threshold

FunctionThe threshold command sets the RTD threshold

The undo threshold command deletes the RTD threshold

By default no threshold is set

Formatthreshold rtd rtd-value

undo threshold rtd



8963



Parameters


rtd rtd-value Sets the RTDthreshold

The value is an integer that ranges from 1 to 60000The unit of this value is the same as that of thetimestamp set using the timestamp-unit command

Views

NQA view

Default Level


Usage Guidelines


Example

Set the RTD threshold to 2 ms

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] threshold rtd 2

Related Topics16649 send-trap

16661 timeout

Function

The timeout command sets the timeout period for a probe of an NQA test instance

The undo timeout command restores the default timeout period for a probe of an NQA testinstance

By default the timeout period for FTP test instances is 15 seconds and that for other testinstances is 3 seconds

Format

timeout time

undo timeout



8964



Parameters


time Specifies the timeout period for aprobe

The value is an integer that ranges from 1to 60 in seconds

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

The timeout period refers to the waiting time after a probe is sent If no response packet isreceived when the timeout period expires the test fails The timeout period is set based on theactual networking If the value is too small the NQA test instance fails

On an unstable network with a low transmission rate you need to prolong the timeout periodfor sending probe packets to ensure that response packets can be received

Prerequisites


Precautions

l You are advised to set the timeout period based on the round-trip time (RTT) valueEnsure that the timeout period set by the timeout command is longer than the RTTvalue

l In all test instances except jitter and ICMP jitter test instances the timeout period set bythe timeout command must be smaller than or equal to the interval of automatic tests setby the interval command Otherwise the tests fail due to timeout of test packets

Precautions


In an ICMP test instance if the following conditions are met the Completion field in the testresults will be displayed as no resultl The system CPU usage exceeds 90 and the configured timeout period is less than 6sl frequency configured le (probe-count - 1) times interval + 6

Example

Set the timeout period of the test instance named user test to 20 seconds

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] timeout 20



8965



Related Topics16615 frequency16624 interval (NQA view)

16662 tos

Function

The tos command sets the ToS value for an NQA test packet

The undo tos command restores the default ToS value of an NQA test packet

By default the ToS value is 0

Format

tos value

undo tos

Parameters


value Specifies the ToS value of apacket


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

The ToS field contains a precedence sub-field and a ToS sub-field The precedence sub-fieldindicates the priority of a packet and the ToS sub-field is seldom used All the bits in the ToSsub-field must be set to 0 You can set the priority of probe packets by setting the ToS valueWhen a large number of packets are received packets of high priorities are processedpreferentially

Prerequisites

The type of a test instance has been specified using the test-type command The followingtypes of test instances are supportedl FTPl HTTPl ICMP



8966



l ICMP Jitter

l Jitter

l SNMP

l TCP

l UDP


If you run the tos command multiple times only the latest configuration takes effect

Precautions

The ToS value of a running test instance cannot be changed

Example

Set the ToS value for the test instance named user test to 10

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] tos 10


16663 tracert-hopfailtimes

Function

The tracert-hopfailtimes command sets the number of consecutive failed hops indicating afailed trace test instance

The undo tracert-hopfailtimes command restores the default number of consecutive failedhops indicating a failed trace test instance

By default five consecutive failed hops indicates a failed trace test instance

Format

tracert-hopfailtimes times

undo tracert-hopfailtimes

Parameters


times Specifies the number of consecutive failedhops indicating a failed trace test instance




8967



Views

NQA view

Default Level


Usage Guidelines

The tracert-hopfailtimes command only takes effect for trace test instances


Example

Set the number of consecutive failed hops indicating a failed trace test instance to 6

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type trace[HUAWEI-nqa-user-test] tracert-hopfailtimes 6


16664 tracert-livetime

Function

The tracert-livetime command sets the time to live (TTL) value for trace test instances in anNQA test

The undo tracert-livetime command restores the default TTL value for trace test instances inan NQA test

The tracert-livetime command sets the time to live (TTL) value for LSP Trace test instancein an NQA test

The undo tracert-livetime command restores the default TTL value for LSP trace testinstance in an NQA test

By default the initial TTL value is 1 and the maximum TTL value is 30

Format

tracert-livetime first-ttl first-ttl max-ttl max-ttl

undo tracert-livetime



8968



Parameters


first-ttl first-ttl Specifies the initial TTLvalue of a packet


max-ttl max-ttl Specifies the maximumTTL value of a packet

The value is an integer that ranges from 1 to255 The value of max-ttl must be greater thanthe value of first-ttl By default the maximumTTL value is 30

Views

NQA view

Default Level


Usage Guidelines

The tracert-livetime command takes effect only for trace test instances


Example

Set the initial TTL value of the test instance named user test to 5 and the maximum TTLvalue to 20

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type trace[HUAWEI-nqa-user-test] tracert-livetime first-ttl 5 max-ttl 20


16665 ttl

Function

The ttl command sets the TTL value for the test packets of an NQA test instance

The undo ttl command restores the default setting

The default TTL value is 30

Format

ttl number

undo ttl



8969



Parameters


number Specifies the TTL value The value is an integer that ranges from 1 to 255The default TTL value is 30

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

To prevent test packets from being transmitted endlessly the test instance must be performedwithin certain hops

When a test packet is created you can run the ttl command to set the TTL value When thetest packet is transmitted along Layer 3 routing devices each Layer 3 routing devicedecrements the TTL value by one when the packet arrives When the TTL value is 0 theLayer 3 routing device discards the test packet and sends an error message to the sending endThis prevents test packets from being transmitted endlessly

Prerequisites

The type of a test instance has been specified using the test-type command The type of testinstances that are not supported is as follows

l DNS

l Trace

l MAC Ping

l Path Jitter


If you run the ttl command multiple times only the latest configuration takes effect

Precautions


Example

Set the TTL value for the test packets of a test instance named user test to 10

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] ttl 10



8970




16666 ttl-copymode

Function

Using the ttl-copymode command you can specify the TTL propagation mode (pipe oruniform) for a multi-hop PW detection

Using the undo ttl-copymode command you can cancel the TTL propagation modeconfigured in the NQA view

By default the TTL propagation mode varies with products

Format

ttl-copymode pipe | uniform

undo ttl-copymode

Parameters


pipe Sets the TTL propagation mode to pipe -

uniform Sets the TTL propagation mode to uniform -

Views

NQA view

Default Level


Usage Guidelines

During the detection of a multi-hop PW if the default TTL propagation mode on differentdevices is different you need to specify the TTL propagation mode on the first hop of the PWThis command is used to detect PWE3 networks and BGPMPLS IP VPN networks

The TTL propagated in pipe and uniform modes is processed in different manners

l When receiving a packet carrying the TTL propagated in pipe mode the system stripsthe outer tag of the packet decreases the TTL in the inner tag by 1 and then sets theTTL in the outer tag to 255

l When receiving a packet carrying the TTL propagated in uniform mode the systemmaps the TTL in the outer tag to the inner tag decreases the TTL in the inner tag by 1and then sets the TTL in the outer tag to the value of the TTL in the inner tag



8971



NOTEThe ttl-copymode command makes sense only in the trace test instances In the case of an trace test instanceyou need to first run the vpn-instance vpn-instance-name command to bind the NQA trace test instance witha VPN instance

Example Configure the TTL propagation mode of packets in the NQA trace test instance as pipe

ltHUAWEIgt system-view[HUAWEI] nqa test-instance admin trace[HUAWEI-nqa-admin-trace] test-type trace[HUAWEI-nqa-admin-trace] vpn-instance voice[HUAWEI-nqa-admin-trace] ttl-copymode pipe


16667 undo no-control-word

FunctionUsing the undo no-control-word command you can enable the control-word option

By default the control-word is used in packet encapsulation

Formatundo no-control-word

ParametersNone

ViewsNQA view



The control-word option carries control-word information in each encapsulated packet Theinformation is used for packet sequence verification packet fragmentation and packetreassembling on the forwarding plane

By default the control-word is used in packet encapsulation If a non-huawei device does notsupport control-word information in the packet structure the label-type label-alert |normal no-control-word command can be used on the Huawei device to remove thecontrol-word option from each packet sent to the non-huawei device to facilitate theirinterworking



8972



If a non-huawei device supports control-word information in the packet structure the undono-control-word command can be used on the Huawei device to restore the Huawei packetstructure

NOTE

Only NQA PWE3 ping and tracert test instances support the undo no-control-word command

Example

Enable the control-word option

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type pwe3ping[HUAWEI-nqa-user-test] label-type label-alert no-control-word[HUAWEI-nqa-user-test] undo no-control-word

Related Topics16629 label-type

16668 vc-type

Function

Using the vc-type command you can configure the type of the protocol used for setting up anL2VPN VC in the NQA view

Using the undo vc-type command you can delete the protocol type configured in the NQAview

By default the type of the protocol used for setting up an L2VPN VC is LDP

Format

vc-type ldp | bgp

undo vc-type

Parameters


ldp Propagates inner labels by using LDP as the signaling protocol -

bgp Propagates inner labels by using BGP as the signaling protocol -

Views

NQA view

Default Level




8973



Usage Guidelines

Usage Scenario

The vc-type command is used to configure the signaling protocol for an NQA test instance tobe identical with that for the PW on the network to be tested

Prerequisites

For the vc-type ldp command ensure that the test instance is of the following type

l PWE3 Ping

l PWE3 Trace

For the vc-type bgp command ensure that the test instance is of the following type

l PWE3 Trace

Precautions

The signaling type of a running test instance cannot be changed

Example

In the NQA view configure BGP to be the type of the protocol used for setting up anL2VPN VC

ltHUAWEIgt system-view[HUAWEI] nqa test-instance admin pwe3[HUAWEI-nqa-admin-pwe3] test-type pwe3trace[HUAWEI-nqa-admin-pwe3] vc-type bgp


16669 vpn-instance

Function

The vpn-instance command configures the VPN instance that an NQA test instance belongsto

The undo vpn-instance command deletes the configured VPN instance

By default no VPN instance is configured

NOTE

Only S5720SI S5720S-SI S5720EI S5720HI S6720EI and S6720S-EI support this command

Format


undo vpn-instance



8974



Parameters


vpn-instance-name

Specifies the VPN instancethat an NQA test instancebelongs to

The value is a string of 1 to 31 case-sensitivecharacters spaces not supported Whendouble quotation marks are used around thestring spaces are allowed in the string

Views

NQA view

Default Level


Usage Guidelines

The vpn-instance command applies to FTP HTTP ICMP ICMP jitter Path jitter SNMPTCP trace UDP and UDP jitter test instances


Example

Set the VPN instance for an NQA test instance named user test to vrf1

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] vpn-instance vrf1



1671 display trace information

Function

The display trace information command displays information about service diagnosis

Format

display trace information



8975



Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

After configuring service diagnosis you can run this command to view global informationabout service diagnosis for example the counts of diagnosis instances and objects created onthe device

Example

Display information about service diagnosis

ltHUAWEIgt display trace informationTrace Information------------------------------------------------------------Trace Enable EnableDebug info level BriefDebug fill-instance OffDebug quit-instance OffDebug output information OffSyslog Source IP Address -

The sum of all the instances 0The startID of the instance table -Alloc instance times 9Free instance times 9The sum of all the objects 2------------------------------------------------------------

Table 16-62 Description of the display trace information command output

Item Description

Trace Information Information about service diagnosis

Trace Enable Status of service diagnosisl Disable Service diagnosis is disabledl Enable Service diagnosis is enabledThis field can be modified using the trace enablecommand

Debug info level Output level of service diagnosis informationl Brief brief service diagnosis informationl Detail detailed service diagnosis informationThis field can be modified using the trace enablecommand



8976



Item Description

Debug fill-instance Debugging status of the fill-instance modulel Off disabledl On enabled

Debug quit-instance Debugging status of the quit-instance modulel Off disabledl On enabled

Debug output information Debugging status of the output information modulel Off disabledl On enabled

Syslog Source IP Address IP address of the interface for exporting diagnosisinformation to the log server To set the IP address of theinterface for exporting diagnosis information to a logserver run the trace syslog source command

The sum of all the instances Total number of diagnosis instances

The startID of the instancetable

Start ID of the instance table

Alloc instance times Number of the allocated diagnosis instances

Free instance times Number of the release diagnosis instances

The sum of all the objects Total number of diagnosis objects

Related Topics1676 trace enable1678 trace syslog source

1672 display trace instance

FunctionThe display trace instance command displays diagnosis instances on a device

Formatdisplay trace instance [ instance-start-id [ instance-end-id ] | mac-address mac-address | ip-address ip-address [ vpn-instance vpn-instance-name ] | interface interface-type interface-number | cid cid ] [ process-wlan ]



8977



Parameters


instance-start-id Specifies the ID of the firstinstance whose information isdisplayed that is start ID

The value varies according todifferent devices

instance-end-id Specifies the ID of the lastinstance whose information isdisplayed that is end ID

The value varies according todifferent devicesNOTE

The instance-end-id value must belarger than the instance-start-id value

mac-address mac-address

Specifies a MAC address The value is in the format of H-H-H in which H is a hexadecimalnumber of 1 to 4 digits


Specifies an IP address The value is in dotted decimalnotation





Specifies the type and number ofan interface

-

cid cid Specifies the diagnosis instanceCID


process-wlan Specifies the WLAN sub-core

NOTEOnly the S5720HI supports theprocess-wlan

-

ViewsAll views


Usage GuidelinesIf you specify no parameter all diagnosis instances are displayed in sequence Each time yourun this command 10 diagnosis instances are displayed For example all diagnosis instanceshave been created on the device When you run the display trace instance command for thefirst time information about diagnosis instances 0 to 9 is displayed When you run this



8978



command again information about instances 10 to 19 is displayed This process is repeateduntil information about all the diagnosis instances is displayed If you specify the value ofinstance-start-id information about 10 diagnosis instances from this ID is displayed

To view information about diagnosis instances within a specified range run the display traceinstance instance-start-id instance-end-id command to specify the start and end IDs ofdiagnosis instances

Example

Display information about diagnosis instances on the interface with the IP address of1010101

ltHUAWEIgt display trace instance ip-address 1010101Trace Instance------------------------------------------------------------ ID 0 MAC Address 0101-0101-0101 IP Flag - Session ID - IP Address 1010101 VRF Index - CID 100 User Name - Interface - QinQ VLAN ID - User VLAN ID - Access Mode dot1x Modules online EAPoL 0 WEBS 0 WEB 0 AAA 0 CM 0 TM 0 SAM 0 RADIUS 1 DHCPS 0 DHCPC 0 DHCPR 0 DHCPP 0 TACACS 0 AM 0 SAVI 0 WLAN_AC0 ------------------------------------------------------------ Total 1 1 printed

Table 16-63 Description of the display trace instance command output

Item Description

ID ID of the diagnosis instance

MAC Address MAC address of the interface

IP Flag Flag of the IP address

Session ID ID of the session only valid for PPPoX users

IP Address IP address of the interface

VRF Index User VRF index

CID User connect ID

User Name User name

Interface Interface index

QinQ VLAN ID QinQ VLAN ID

User VLAN ID User VLAN ID

Access Mode User access mode



8979



Item Description

Modules online User status on a module User status can bel 0 The user is offline on the modulel 1 The user is online on the module

Related Topics1677 trace object

1673 display trace object

FunctionThe display trace object command displays the configuration about a service diagnosisobject

Formatdisplay trace object [ service-object-id ] [ process-wlan ]

Parameters


service-object-id Specifies the ID of a diagnosis object The value is an integer thatranges from 0 to 3


NOTEOnly the S5720HI supports the process-wlan

-

ViewsAll views


Usage GuidelinesIf you do not specify the parameter service-object-id configurations about all diagnosisobjects are displayed

Example Display configurations about all diagnosis objects



8980



ltHUAWEIgt display trace objectTrace Object------------------------------------------------------------ Object ID 0 Slot - MAC Address - IP Flag - Session ID - IP Address 10111 VRF Index - CID - User Name - Interface - QinQ VLAN ID - User VLAN ID - Access Mode - Output command line ( User-Intf 4 )

Object ID 1 Slot - MAC Address 0101-0101-0101 IP Flag - Session ID - IP Address - VRF Index - CID - User Name - Interface - QinQ VLAN ID - User VLAN ID - Access Mode - Output file ( flashatxt )

Object ID 2 Slot - MAC Address 0101-0101-0101 IP Flag - Session ID - IP Address 10222 VRF Index - CID - User Name - Interface - QinQ VLAN ID - User VLAN ID - Access Mode - Output server ( 10101010 )

------------------------------------------------------------ Total 3 3 printed

Table 16-64 Description of the display trace object command output

Item Description

Object ID ID of the diagnosis object This parameter isautomatically generated from 0 in sequence of creationtime

Slot Slot ID of the interface board

MAC Address MAC address of the interface To set the MAC addressof an interface run the trace object command




8981



Item Description


IP Address IP address of the interface To set the IP address of aninterface run the trace object command


CID User connect ID

User Name User name To set the user name run the trace objectcommand

Interface Interface index To set the interface index run the traceobject command

QinQ VLAN ID QinQ VLAN ID To set the QinQ VLAN ID run thetrace object command

User VLAN ID User VLAN ID To set the user VLAN ID run the traceobject command

Access Mode User access mode including dot1x mac-authen portaland wlan To set the user access mode run the traceobject commandNOTE

Only S5720HI supports portal and wlan

Output Direction in which the device exports diagnosisinformation To set the direction run the trace objectcommandl Command line (User-Intf X) Diagnosis information

is displayed on the screen of a configuration terminalNOTE

When the configuration terminal is online X displays theabsolute number of the user interface (the absolute numbercan be checked using the display users command) Whenthe configuration terminal is offline X displays offline

l file Diagnosis information is exported to filesl server Diagnosis information is exported to a log

server

Total 3 3 printed Total number of created diagnosis objects and count ofdisplayed objects


1674 reset trace instance



8982



Function

The reset trace instance command clears all the diagnosis instances on a device

Format

reset trace instance

Parameters

None

Views

System view

Default Level

3 Management level

Usage Guidelines

After service diagnosis is enabled and a diagnosis object is created on a device the devicecreates a diagnosis instance when a user matching the attributes of the diagnosis object getsonline If the device diagnoses services of multiple users it creates a diagnosis instance foreach user which occupies a large amount of system resources Therefore the deviceautomatically deletes diagnosis instances when corresponding users get offline The servicediagnosis module may fail to detect that some users are offline because these users got offlineabnormally The diagnosis instances created for these users are not deleted and occupy systemresources The device provides an aging mechanism for service diagnosis When the agingtime is reached the device automatically deletes diagnosis instances to reclaim resources

In addition to the preceding two methods for automatically clearing diagnosis instances youcan run the reset trace instance command to clear all the diagnosis instances

NOTICEAfter all the diagnosis instances are cleared using the reset trace instance commandproperly running diagnosis instances are also deleted Exercise caution when you run thereset trace instance command

Example

Clear all diagnosis instances on the device

ltHUAWEIgt system-view[HUAWEI] reset trace instance

Related Topics1672 display trace instance



8983



1675 save trace information

Function

The save trace information command saves diagnosis information in the buffer area as a file

Format

save trace information

Parameters

None

Views

System view

Default Level


Usage Guidelines

Usage scenario

After you specify the parameter file file-name in the trace object command to save diagnosisinformation as files to the default root directory on the storage device the system savesdiagnosis information in the buffer area until the buffer is full To prevent data loss thesystem automatically saves diagnosis information in the buffer area as the file file-nameBefore the buffer becomes full to view real-time diagnosis information run the save traceinformation command to save diagnosis information in the buffer area as a file

Prerequisites

The device has been configured to export diagnosis information as a file using the traceobject command

Example

Save diagnosis information as a file

ltHUAWEIgt system-view[HUAWEI] save trace information


1676 trace enable



8984



Function

The trace enable command enables service diagnosis

The undo trace enable command disables service diagnosis

By default service diagnosis is disabled

Format

trace enable [ brief ]

undo trace enable

Parameters


brief Configures the device tooutput brief servicediagnosis information

-

Views

System view

Default Level


Usage Guidelines

Usage scenario

It is difficult to locate problems during user access based on debugging information onexisting networks because multiple users may get online or offline simultaneously anddebugging information about a specified user cannot be displayed Service diagnosis providedby the switch allows maintenance personnel to customize attributes and create diagnosisobjects to diagnose information about services of specified users To enable service diagnosisrun the trace enable command

Service diagnosis information can be displayed in two methodsl The trace enable brief command configures the device to output brief service diagnosis

informationl The trace enable command configures the device to output detailed service diagnosis

information

Follow-up Procedure

After service diagnosis is enabled run the trace object command to create a diagnosis objectAfter an ID is generated for the diagnosis object the system starts diagnosis services

Precautions



8985



Service diagnosis affects system performance Therefore enable service diagnosis only whenfault locating is required After locating faults immediately run the undo trace enablecommand to disable service diagnosis

The trace enable command is not recorded in the configuration file Therefore run the traceenable command again after the device restarts to make service diagnosis take effect

Example

Enable the service diagnosis function and configure the device to output brief servicediagnosis information

ltHUAWEIgt system-view[HUAWEI] trace enable brief


1677 trace object

Function

The trace object command creates a diagnosis object

The undo trace object command deletes a diagnosis object

By default no diagnosis object is created If you do not specify the direction at whichinformation is exported the default direction is the CLI

Format

trace object mac-address mac-address | ip-address ip-address [ vpn-instance vpn-instance-name ] | interface interface-type interface-number | user-vlan user-vlan-id [ qinq-vlan qinq-vlan-id ] | user-name user-name | access-mode dot1x | mac-authen | portal |wlan [ process-wlan ] [ output command-line | file file-name | syslog-server syslog-server-ip ]

undo trace object mac-address mac-address | ip-address ip-address [ vpn-instance vpn-instance-name ] | interface interface-type interface-number | user-vlan user-vlan-id [ qinq-vlan qinq-vlan-id ] | user-name user-name | access-mode dot1x | mac-authen | portal |wlan [ process-wlan ] [ output command-line | file file-name | syslog-server syslog-server-ip ]

undo trace object service-object-id | all

Parameters



Creates a diagnosis object based on theMAC address

The value is in the format ofH-H-H in which H is ahexadecimal number of 1 to4 digits



8986





Creates a diagnosis object based on theIP address



Specifies the name of a VPN instance The value is a string of 1 to31 case-sensitive characterswithout spaces


Creates a diagnosis object based on theinterface

-

user-vlan user-vlan-id

Creates a diagnosis object based on theuser VLAN


qinq-vlan qinq-vlan-id

Creates a diagnosis object based on theQinQ VLAN ID


user-name user-name Creates a diagnosis object based on the

user name

The value is a string of 1 to64 case-insensitivecharacters without spaces

access-mode Creates a diagnosis object based on theaccess mode

-

dot1x Creates a diagnosis object based on thedot1x access mode

-

mac-authen Creates a diagnosis object based on themac-authen access mode

-

portal Creates a diagnosis object based on theportal access mode

-

wlan Creates a diagnosis object based on thewlan access mode

NOTEOnly S5720HI supports access-mode wlan

-



-

output Specifies the direction in which thedevice exports diagnosis information

-



8987




command-line Exports diagnosis information to theCLI

-

file file-name Exports diagnosis information as a file

NOTEIt is recommended that you export thediagnosis information to a specified file

The value of file-name is astring of 1 to 63 case-insensitive characterswithout spaces

syslog-serversyslog-server-ip

Exports diagnosis information to a logserver

syslog-server-ip specifiesthe IP address of the logserver in dotted decimalnotation

service-object-id Specifies the ID of a diagnosis object tobe deleted

NOTEDiagnosis object IDs are generated based onsequence in which the diagnosis objects arecreated The ID starts from 0

To view all created diagnosis objects run thedisplay trace object command


all Deletes all diagnosis objects -

ViewsSystem view


Usage GuidelinesUsage scenario

When locating faults of DHCP AAA or NAC service during user access maintenancepersonnel can create diagnosis objects to trace services and locate the faults

Users with different services have different attributes Create diagnosis objects for differentservices based on different attributes

l DHCP service based on the MAC addressl AAA and NAC services based on the MAC address IP address user name user VLAN

ID access mode or interface number

NOTE

To ensure that you can diagnose the entire DHCP service process create a diagnosis object based on theMAC address You can run the trace object mac-address mac-address [ output command-line | file file-name | syslog-server syslog-server-ip ] command to create a diagnosis object for the DHCP serviceService diagnosis supports only common AAA users



8988



Prerequisites

Service diagnosis has been enabled using the trace enable command

Precautions

If a diagnosis object is created based on the MAC address or IP address various serviceprocesses can be diagnosed generally If a diagnosis object is created based on otherparameters service diagnosis may fail to be performed because the parameters may not beobtained in service processes Therefore you are advised to create a diagnosis object based onthe MAC address or IP address

The diagnosis output file cannot exceed 1 MB The excessive diagnosis information is notrecorded

You can run the undo trace object command to delete diagnosis objects in any of thefollowing modesl Delete diagnosis objects based on the object attributes Run the undo trace object

mac-address mac-address | ip-address ip-address [ vpn-instance vpn-instance-name ]| interface interface-type interface-number | user-vlan user-vlan-id [ qinq-vlan qinq-vlan-id ] | user-name user-name | access-mode dot1x | mac-authen | portal | wlan [ output command-line | file file-name | syslog-server syslog-server-ip ]command For example diagnosis objects 1 (1010101) and 2 (1010101+0025-9efb-be78) have been created To delete diagnosis objects based on the IP address run theundo trace object ip-address 1010101 command Diagnosis objects 1 and 2 aredeleted

l Delete diagnosis objects based on the object ID Run the undo trace object service-object-id command to delete a specified diagnosis object You can view the object IDusing the display trace object command

l Delete all diagnosis objects using the undo trace object all command

Example

Create a diagnosis instance on the interface with the IP address of 1010101

ltHUAWEIgt system-view[HUAWEI] trace object ip-address 1010101

Related Topics1673 display trace object1676 trace enable

1678 trace syslog source

Function

The trace syslog source command sets the source interface from which the device exportsdiagnosis information to a log server

The undo trace syslog source command cancels the configuration of the source interfacefrom which the device exports diagnosis information to a log server

By default no interface is specified to export diagnosis information to the log server



8989



Format

trace syslog source interface-type interface-number

undo trace syslog source

Parameters


interface-type interface-number Specifies the type and number of an interface -

Views

System view

Default Level


Usage Guidelines

Usage scenario

After you specify an interface for exporting diagnosis information to a log server the systemspecifies the IP address of this interface as the source IP address of service diagnosis packetsIn this way the log server can identify the source of diagnosis information

Prerequisites

The device has been configured to export diagnosis information to a log server using the traceobject command

Precautions

The trace syslog source command is not recorded in the configuration file After the devicerestarts the configured source interface for exporting diagnosis information is invalid To setthe source interface run the trace syslog source command again

Example

Set VLANIF100 as the source interface for exporting diagnosis information to the logserver

ltHUAWEIgt system-view[HUAWEI] trace syslog source vlanif 100




8990



168 Mirroring Configuration CommandsNOTE

The device supports the mirroring function which is mainly used for network monitoring and faultmanagement and may use user communication information Huawei will not collect or save usercommunication information independently You must use this function in compliance with applicablelaws and regulations Ensure that your customers privacy is protected when you are using or savingcommunication information

1681 display observe-port

FunctionThe display observe-port command displays the observing port configuration

Formatdisplay observe-port

ParametersNone

ViewsAll views



Example Display the observing port configuration

ltHUAWEIgt display observe-port ---------------------------------------------------------------------- Index 1 Untag-packet No Interface GigabitEthernet001 Vlan 10 ----------------------------------------------------------------------



8991



Table 16-65 Description of the display observe-port command output

Item Description

Index Index of an observing port This parameteris configured using the 1686 observe-port(local observing port) or 1687 observe-port (remote observing port) command

Untag-packet Whether to remove VLAN tags of mirroredpackets This parameter is configured usingthe 1686 observe-port (local observingport) commandNOTE

VLAN tags of mirrored packets can be removedonly when local observing ports are configuredon an S5720HI Each mirrored packet can haveat most two VLAN tags removed

Interface Observing ports configured one by oneThis parameter is configured using the1686 observe-port (local observing port)or 1687 observe-port (remote observingport) command

Vlan ID of the VLAN to which an observing portbelongs This parameter is configured usingthe 1687 observe-port (remote observingport) command

1682 display port-mirroring

Function

The display port-mirroring command displays the mirroring configuration

Format

display port-mirroring

Parameters

None

Views

All views

Default Level

1 Monitoring level



8992




Example Display the mirroring configuration

ltHUAWEIgt display port-mirroring ---------------------------------------------------------------------- Observe-port 1 GigabitEthernet002 ---------------------------------------------------------------------- Port-mirror ---------------------------------------------------------------------- Mirror-port Direction Observe-port ---------------------------------------------------------------------- 1 GigabitEthernet0015 Inbound Observe-port 1 ---------------------------------------------------------------------- Stream-mirror ---------------------------------------------------------------------- Behavior Direction Observe-port ---------------------------------------------------------------------- b1 - Observe-port 1 ---------------------------------------------------------------------- Vlan-mirror ---------------------------------------------------------------------- Mirror-vlan Direction Observe-port ---------------------------------------------------------------------- 10 Inbound Observe-port 1 ---------------------------------------------------------------------- Mac-mirror ---------------------------------------------------------------------- Mirror-mac Vlan Direction Observe-port ---------------------------------------------------------------------- 0001-0001-0001 10 Inbound Observe-port 1 ----------------------------------------------------------------------

Table 16-66 Description of the display port-mirroring command output

Item Description

Port-mirror Port mirroring configuration

Mirror-port Mirrored port This parameter is configuredusing the 1688 port-mirroring toobserve-port command

Direction Direction of mirrored packetsl Inboundl Outbound

Observe-port Observing port to which mirrored packetsare sent This parameter is configured usingthe 1686 observe-port (local observingport) or 1687 observe-port (remoteobserving port) command

Stream-mirror Traffic mirroring configuration



8993



Item Description

Behavior Traffic behavior of traffic mirroringl In MQC-based traffic mirroring this

parameter is configured using the 1685mirroring to observe-port (trafficbehavior view) command

l In ACL-based traffic mirroring thisparameter is configured using the 1589traffic-mirror (system view) or 1588traffic-mirror (interface view)command

Vlan-mirror VLAN mirroring configuration

Mirror-vlan VLAN ID in VLAN mirroring Thisparameter is configured using the 1684mirroring to observe-port (VLAN view)command

Mac-mirror MAC address mirroring configuration

Mirror-mac MAC address in MAC address mirroringThis parameter is configured using the1683 mac-mirroring command

Vlan VLAN in which MAC address mirroring isused

1683 mac-mirroring

FunctionThe mac-mirroring command copies packets with a specified MAC address to observingports

The undo mac-mirroring command cancels copying packets with a specified MAC addressto observing ports

By default packets with a specified MAC address are not copied to observing ports

NOTE

This command is not supported by S5720HI

Formatmac-mirroring mac-address to observe-port observe-port-index inbound

undo mac-mirroring mac-address [ to observe-port observe-port-index ] inbound



8994



Parameters


mac-address Specifies the MAC addressof mirrored packets

The value is in H-H-Hformat where H is ahexadecimal number of 1 to4 digits

observe-port-index Specifies the index ofobserving ports

The value is an integer Thevalue ranges from 1 to 8 onan S5720EI S6720S-EI orS6720EI The value is 1 onan S1720GFR S2720S2750 S5700LI S5700S-LI S5710-X-LI S5720S-SIor S5720SI

inbound Copies inbound packets onall the active ports in aVLAN to observing ports

-

Views

VLAN view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

In MAC address mirroring you can run the mac-mirroring command to copy packetsmatching a specified source or destination MAC address in a VLAN to observing ports

Prerequisites

Observing ports have been configured using the 1686 observe-port (local observing port)or 1687 observe-port (remote observing port) command in the system view

Precautions

Currently in MAC address mirroring only the packets that are received by all the active portsin a VLAN and contain a specified MAC address can be copied to observing ports

Example

Copy inbound packets of which the source or destination MAC address is 0000-0000-0001on the active ports in VLAN 3 to observing ports with index 1

ltHUAWEIgt system-view[HUAWEI] observe-port 1 interface gigabitethernet 001



8995



[HUAWEI] vlan 3[HUAWEI-vlan3] mac-mirroring 0000-0000-0001 to observe-port 1 inbound

Related Topics1686 observe-port (local observing port)1687 observe-port (remote observing port)

1684 mirroring to observe-port (VLAN view)

FunctionThe mirroring to observe-port command copies packets on all the active ports in a VLAN toobserving ports

The undo mirroring command cancels copying packets on all the active ports in a VLAN toobserving ports

By default packets on all the active ports in a VLAN are not copied to observing ports

NOTE


Formatmirroring to observe-port observe-port-index inbound

undo mirroring [ to observe-port observe-port-index ] inbound





-

ViewsVLAN view




8996




In VLAN mirroring you can run the mirroring to observe-port command to copy packetson all the active ports in a specified VLAN to observing ports

Prerequisites


Precautions

Currently in VLAN mirroring only the packets that are received by all the active ports in aVLAN can be copied to observing ports

Example Copy inbound packets on the active ports in VLAN 10 to observing ports with index 1

ltHUAWEIgt system-view[HUAWEI] observe-port 1 interface gigabitethernet 001[HUAWEI] vlan 10[HUAWEI-vlan10] mirroring to observe-port 1 inbound


1685 mirroring to observe-port (traffic behavior view)

FunctionThe mirroring to observe-port command copies traffic matching rules to observing ports

The undo mirroring command cancels copying traffic matching rules to observing ports

By default traffic matching rules is not copied to observing ports

Formatmirroring to observe-port observe-port-index

undo mirroring



8997



Parameters



The value is an integer Thevalue ranges from 1 to 8 onan S5720EI S5720HIS6720S-EI or S6720EI Thevalue is 1 on an S1720GFRS2720 S2750 S5700LIS5700S-LI S5710-X-LIS5720S-SI or S5720SI

Views

Traffic behavior view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

In traffic mirroring you can run the mirroring to observe-port command to configure a copytraffic matching rules to specified observing ports

Prerequisites


Precautions

If both the alarm of IP packet check and traffic mirroring are configured on the S5700S-28X-LI-AC S5700S-52X-LI-AC S5710-X-LI S5720S-SI and S5720SI only one function cantake effect

Example

Copy traffic matching rules to observing ports with index 1

ltHUAWEIgt system-view[HUAWEI] observe-port 1 interface gigabitethernet 001[HUAWEI] traffic behavior tb1[HUAWEI-behavior-tb1] mirroring to observe-port 1




8998



1686 observe-port (local observing port)

FunctionThe observe-port command configures local observing ports

The undo observe-port command deletes local observing ports

By default no local observing ports are configured

Formatobserve-port [ observe-port-index ] interface interface-type interface-number [ untag-packet ] (single configuration)

observe-port [ observe-port-index ] interface-range interface-type interface-number [ tointerface-type interface-number ] amplt1-ngt [ untag-packet ] (batch configuration notsupported by S1720GFR S2720 S2750 S5700LI S5700S-LI S5710-X-LI S5720S-SI andS5720SI n in amplt1-ngt is 4 on an S5720EI S6720S-EI or S6720EI and 8 on an S5720HI)

observe-port observe-port-index interface-range add | delete interface-type interface-number

undo observe-port observe-port-index

Parameters


observe-port-index

Specifies the index of observing ports The value is an integer Thevalue ranges from 1 to 8 on anS5720EI S5720HI S6720S-EI or S6720EI The value is 1on an S1720GFR S2720S2750 S5700LI S5700S-LIS5710-X-LI S5720S-SI orS5720SI


Specifies the type and number of aninterface

-

add Adds observing ports to the observingports configured in a batch

-

delete Deletes observing ports from theobserving ports configured in a batch

-



8999




untag-packet Removes VLAN tags of mirroredpackets

NOTEThis parameter is supported only on anS5720HI Each mirrored packet can have atmost two VLAN tags removed

-

ViewsSystem view



When an observing port is directly connected to a monitoring host you can run the observe-port command to configure a local observing port Observing ports can be configured one byone or in a batch The single configuration and batch configuration modes can be usedsimultaneously If multiple observing ports are configured in a batch these observing portsare bound to the same mirrored port Therefore batch configuration is often used to simplifythe configuration of 1N mirroring

Precautions

l If you configure observing ports without specifying observe-port-index the systemselects the smallest unused indexes and assigns the indexes to the observing ports insequence

l If you need to update the observing ports configured in a batch run the observe-portobserve-port-index interface-range add | delete interface-type interface-numbercommand to add or delete observing ports to or from the configured observing ports

l In 1N mirroring if you configure packets (in the inbound or outbound direction) on amirrored port to be copied to multiple observing ports configured in a batch the packetscannot be copied to other observing ports

l On the S1720GFR S2720 S2750 S5700S-LI S5700LI S5710-X-LI S5720S-SI andS5720SI only Ethernet ports can be configured as observing ports On the S5720EIS5720HI S6720S-EI and S6720EI both Ethernet ports and Eth-Trunks can beconfigured as observing ports

l An observing port in blocked state can still forward mirrored packetsl The maximum number of observing ports varies depending on device models For

details see Mirroring Configuration - Specifications in theS1720ampS2700ampS5700ampS6720 Series Ethernet Switches Configuration Guide - NetworkManagement and Monitoring Configuration

Example Configure GigabitEthernet001 as a local observing port



9000




Configure GigabitEthernet001 through GigabitEthernet003 as local observing ports in abatchltHUAWEIgt system-view[HUAWEI] observe-port 1 interface-range gigabitethernet 001 to gigabitethernet 003

Related Topics1681 display observe-port1687 observe-port (remote observing port)

1687 observe-port (remote observing port)

Function

The observe-port command configures remote observing ports

The undo observe-port command deletes remote observing ports

By default no remote observing ports are configured

Format

observe-port [ observe-port-index ] interface interface-type interface-number vlan vlan-id(Layer 2 remote observing port configured one by one)

observe-port [ observe-port-index ] interface-range interface-type interface-number [ tointerface-type interface-number ] amplt1-ngt vlan vlan-id (Layer 2 remote observing portsconfigured in a batch not supported by S1720GFR S2720 S2750 S5700LI S5700S-LIS5710-X-LI S5720S-SI and S5720SI n in amplt1-ngt is 4 on an S5720EI S6720S-EI orS6720EI and 8 on an S5720HI)



Parameters


observe-port-index

Specifies the index of observingports

The value is an integer The valueranges from 1 to 8 on an S5720EIS5720HI S6720S-EI or S6720EIThe value is 1 on an S1720GFRS2720 S2750 S5700LI S5700S-LI S5710-X-LI S5720S-SI orS5720SI



-



9001




add Adds observing ports to theobserving ports configured in abatch

-

delete Deletes observing ports from theobserving ports configured in abatch

-

vlan vlan-id Specifies the VLAN IDencapsulated into mirroredpackets


Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

In remote mirroring a monitoring device and monitored device where an observing portresides are connected through a Layer 2 network The monitored device adds a specifiedVLAN tag to mirrored packets and then the observing port broadcasts the mirrored packets ina specified VLAN so that the mirrored packets can be sent to the monitoring device

Observing ports can be configured one by one or in a batch The single configuration andbatch configuration modes can be used simultaneously If multiple observing ports areconfigured in a batch these observing ports are bound to the same mirrored port Thereforebatch configuration is often used to simplify the configuration of 1N mirroring

Precautions







9002





Example

Configure GigabitEthernet001 as a Layer 2 remote observing port and bind the port toVLAN 10

ltHUAWEIgt system-view[HUAWEI] observe-port 1 interface gigabitethernet 001 vlan 10

Configure GigabitEthernet001 through GigabitEthernet003 as Layer 2 remote observingports in a batch and bind these ports to VLAN 10ltHUAWEIgt system-view[HUAWEI] observe-port 2 interface-range gigabitethernet 001 to gigabitethernet 003 vlan 10

Related Topics1681 display observe-port1686 observe-port (local observing port)

1688 port-mirroring to observe-port

Function

The port-mirroring to observe-port command copies packets on a mirrored port toobserving ports

The undo port-mirroring command cancels copying packets on a mirrored port to observingports

By default packets on a mirrored port are not copied to observing ports

Format

port-mirroring to observe-port observe-port-index both | inbound | outbound

undo port-mirroring [ to observe-port observe-port-index ] both | inbound | outbound

Parameters


observe-port-index


The value is an integer The valueranges from 1 to 8 on an S5720EIS5720HI S6720S-EI or S6720EIThe value is 1 on an S1720GFRS2720 S2750 S5700LI S5700S-LIS5710-X-LI S5720S-SI orS5720SI



9003




both Copies inbound and outboundpackets on a mirrored port toobserving ports

-

inbound Copies inbound packets on amirrored port to observing ports

-

outbound Copies outbound packets on amirrored port to observing ports

-

Views

MultiGE interface view Ethernet interface view GE interface view XGE interface view40GE interface view Eth-Trunk interface view port group view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

In port mirroring you can run the port-mirroring to observe-port command to copy packetsthat pass through a mirrored port to specified observing ports

Prerequisites


Precautions

To prevent mirrored packets from being lost ensure that mirrored and monitoring ports havethe same port type and bandwidth

Both Ethernet ports and Eth-Trunks can be configured as mirrored ports If an Eth-Trunk isconfigured as a mirrored port its member ports cannot be configured as observing ports

Example

Configure port mirroring for inbound packets on GigabitEthernet001

ltHUAWEIgt system-view[HUAWEI] observe-port 1 interface gigabitethernet 002[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] port-mirroring to observe-port 1 inbound




9004



169 Packet Capture Configuration CommandNOTE

Based on your requirements to detect failures in telecom transmission this feature may collect or storesome communication information about specific customers Huawei cannot offer services to collect orstore this information unilaterally Before enabling the function ensure that it is performed within theboundaries permitted by applicable laws and regulations Effective measures must be taken to ensurethat information is securely protected

1691 capture-packet

Function

The capture-packet command captures service packets matching specified rules displayscaptured packet information on the terminal

Format

capture-packet interface interface-type interface-number | acl acl-number [ vlan vlan-id | cvlan cvlan-id ] destination terminal [ car cir car-value | time-out time-out-value |packet-num number | packet-len length | total-packet ]

NOTE

Only S5720EI S5720HI S6720EI and S6720S-EI support the car cir car-value parameter OnlyS5720EI S5720HI S6720EI and S6720S-EI capture packets based on inner VLAN IDs that is thedevice supports the cvlan cvlan-id parameter

Parameters



Captures packets on aspecified interfacel interface-type specifies



-

acl acl-number Captures packets matching aspecified ACL


vlan vlan-id Captures packets from aspecified VLAN


cvlan cvlan-id Captures packets with aspecified inner VLAN ID


destination Indicates the destination towhich captured packetinformation is sent

-



9005




terminal Displays captured packetinformation on a terminal

-

car cir car-value Specifies the rate at whichpackets are captured

The value is an integer thatranges from 8 to 256 inkbits The default value is64 kbits

time-out time-out-value Specifies the timeout periodfor capturing packets Thesystem stops capturingpackets after the specifiedtimeout period expires

The value is an integer thatranges from 1 to 300 inseconds By default thetimeout period is 60s

packet-num number Specifies the number ofpackets to be captured Thesystem stops capturingpackets after the specifiednumber of packets arecaptured


packet-len length Specifies the length ofcaptured packets that can bedisplayed or stored

The value is an integer thatranges from 20 to 1518 inbytes The default value is64 bytes

total-packet Displays the content of theentire captured packet

-

ViewsSystem view



If an error occurs in service traffic forwarding (for example the traffic status does not matchthe traffic model) it is recommended that you configure the device to capture service packetsfor analysis so that the device can quickly identify invalid packets This function ensurescorrect data transmission on the network

Precautions

The packet capture configuration is not saved in the configuration file and becomes invalidwhen packet capture is complete

The device can capture only incoming packets and cannot capture outgoing packets



9006



Before using the capture-packet command again wait until the last command execution iscomplete

The system limits the rate of captured packets The default rate limit is 64 kbits If the rate ofpackets exceeds the limit some packets may be discarded

The device cannot capture the packets of BFD 8021ag and VBST

When an S1720GFR S2720 S2750EI S5700LI S5700S-LI S5710-X-LI S5720SI orS5720S-SI discards the packets that it cannot forward packets may not be captured in somesituations It is recommended that you obtain packets in other ways such as mirroring

Example

Capture packets on the interface GigabitEthernet001 and display them on the terminal

ltHUAWEIgt system-view[HUAWEI] capture-packet interface gigabitethernet 001 destination terminal[HUAWEI] Packet 1 ------------------------------------------------------- 01 80 c2 00 00 00 00 e0 09 87 78 90 81 00 00 01 00 69 42 42 03 00 00 03 02 7c 80 00 00 e0 09 87 78 90 00 00 00 00 80 00 00 e0 09 87 78 90 80 23 00 00 14 00 02 00 0f 00 00 00 40 00 72 67 31 00 ------------------------------------------------------- Packet 2 ------------------------------------------------------- 01 80 c2 00 00 00 00 e0 09 87 78 90 81 00 00 01 00 69 42 42 03 00 00 03 02 7c 80 00 00 e0 09 87 78 90 00 00 00 00 80 00 00 e0 09 87 78 90 80 23 00 00 14 00 02 00 0f 00 00 00 40 00 72 67 31 00 -------------------------------------------------------

------------------packet getting report----------------------- file NULL packets getting interface GigabitEthernet001 acl - vlan - cvlan - car 64kbps timeout 60s packets 100 (expected) 0 (actual) length 64 (expected) -------------------------------------------------------

Table 16-67 Description of the capture-packet command output

Item Description

file When the value is displayed as NULL the capturedpackets cannot be stored to a local file

packets getting Interface where packets are captured

acl ACL number

vlan VLAN ID of captured packets

cvlan Inner VLAN ID of captured packets

car Rate of captured packets



9007



Item Description

timeout Timeout interval of packet capture The system stopscapturing packets after the specified time interval

packets Expected number and actual number of captured packets

length Length of captured packets

1692 capture-packet cpu

FunctionThe capture-packet cpu command captures packets sent to the CPU

Format

capture-packet cpu [ vlan vlan-id | acl acl-number ] destination terminal [ time-out time-out-value | packet-num number | packet-len length | total-packet ]







-


-


The value of time-out-valueis an integer that rangesfrom 1 to 300 in secondsBy default the timeoutperiod is 60s


The value of number is aninteger that ranges from 1 to1000 The default value is100



9008





The value of length is aninteger that ranges from 20to 1518 in bytes Thedefault value is 64 bytes


-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

When a CPU fault occurs such as the CPU usage is high configure the packet capturefunction to capture packets sent to the CPU for analysis This allows the device to processinvalid packets in time ensuring that the CPU works properly

Precautions


Before using the capture-packet cpu command again wait until the last command executionis complete

When the CPU usage is above 80 executing this command will keep the CPU usageincreasing

Example

Capture the packets to be sent to the CPU and display them on the terminalltHUAWEIgt system-view[HUAWEI] capture-packet cpu destination terminal [HUAWEI] Packet 1 ------------------------------------------------------- 01 80 c2 00 00 0e 00 e0 09 87 78 90 81 00 00 01 88 cc 02 07 04 00 e0 09 87 78 90 04 16 05 47 69 67 61 62 69 74 45 74 68 65 72 6e 65 74 34 2f 30 2f 32 36 06 02 00 78 08 15 47 69 67 61 62 69 74 ------------------------------------------------------- Packet 2 ------------------------------------------------------- 01 80 c2 00 00 0e 00 e0 09 87 78 90 81 00 00 01 88 cc 02 07 04 00 e0 09 87 78 90 04 16 05 47 69 67 61 62 69 74 45 74 68 65 72 6e 65 74 34 2f 30 2f 32 36 06 02 00 78 08 15 47 69 67 61 62 69 74



9009



------------------------------------------------------- ------------------packet getting report----------------------- file NULL packets getting cpu acl - vlan - cvlan - car -- timeout 60s packets 100 (expected) 0 (actual) length 64 (expected) -------------------------------------------------------

Table 16-68 Description of the capture-packet cpu command output

Item Description


packets getting The system captures the packets to be sent to the CPU

acl ACL number







1610 NetStream Configuration CommandsNOTE

The NetStream function conforms to IETF RFC3954 For security risks see IETF RFC3954 Thisfunction involves analyzing the communications information of terminal customers Before enabling thefunction ensure that it is performed within the boundaries permitted by applicable laws and regulationsEffective measures must be taken to ensure that information is securely protected

Only the S5720HI supports NetStream

16101 collect counter

Function

The collect counter command allows the flexible flow statistics exported to the NetStreamCollector (NSC) to contain the number of bytes and packets

The undo collect counter command restores the default setting

By default the flexible flow statistics exported to the NSC do not contain the number of bytesor packets



9010



Formatcollect counter bytes | packets

undo collect counter bytes | packets


bytes Indicates that the flexibleflow statistics exported toNSC contain the number ofbytes

-

packets Indicates that the flexibleflow statistics exported toNSC contain the number ofpackets

-

ViewsFlexible flow statistics template view



To obtain richer flow statistics configure whether flexible flow statistics contain the numberof bytes and packets

Prerequisites

A flexible flow statistics template has been created using the ip netstream record command

Precaution

If a flexible flow statistics template has been applied to an interface the templateconfiguration cannot be modified or deleted

Example Configure the flexible flow statistics template record1 to export the flexible flow statisticscontaining the number of packets to the NSC

ltHUAWEIgt system-view[HUAWEI] ip netstream record record1[HUAWEI-record-record1] collect counter packets

Related Topics161020 ip netstream record



9011



16102 collect interface

Function

The collect interface command allows the flexible flow statistics exported to the NSC tocontain the indexes of inbound and outbound interfaces

The undo collect interface command restores the default setting

By default the flexible flow statistics exported to the NSC do not contain the index ofinbound or outbound interface

Format

collect interface input | output

undo collect interface input | output

Parameters


input Indicates that the flexibleflow statistics exported tothe NSC contain the indexof inbound interface

-

output Indicates that the flexibleflow statistics exported tothe NSC contain the indexof outbound interface

-

Views

Flexible flow statistics template view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

To obtain richer flow statistics configure whether flexible flow statistics exported to the NSCcontain indexes of inbound and outbound interfaces

Prerequisites


Precaution



9012




Example

Configure the flexible flow statistics template record1 to export the flexible flow statisticscontaining the inbound interface index to the NSC

ltHUAWEIgt system-view[HUAWEI] ip netstream record record1[HUAWEI-record-record1] collect interface input


16103 display ip netstream record

Function

The display ip netstream record command displays the configuration of a flexible flowstatistics template

Format

display ip netstream record all | name record-name


all Displays configurations ofall flexible flow statisticstemplates

-

name record-name Displays the configurationof a flexible flow statisticstemplate specified byrecord-name

NOTEThe parameter record-name isdetermined by the templatename configured using the ipnetstream record command

Views

All views

Default Level

3 Management level

Usage Guidelines

None



9013



Example Display the configuration of the flexible flow statistics template test0

ltHUAWEIgt display ip netstream record name test0ip netstream record test0 match ip source-address match ip destination-address

Table 16-69 Description of the display ip netstream record command output

Item Description

ip netstream record test0 The flexible flow statistics template is test0

match ip source-address According to the template test0 flows are aggregatedbased on the source IP address This field is configuredusing the match ip command

match ip destination-address According to the template test0 flows are aggregatedbased on the destination IP address This field isconfigured using the match ip command


16104 display ip netstream statistics

FunctionThe display ip netstream statistics command displays the NetStream flow statistics

Formatdisplay ip netstream statistics slot slot-id


slot slot-id Specifies the slot ID The value depends on theactual configuration

ViewsAll views




9014




Example Display the NetStream flow statistics in slot 0

ltHUAWEIgt display ip netstream statistics slot 0 =====Netstream statistics===== OriginFlexible ingress entries 572 OriginFlexible ingress packets 56122 OriginFlexible ingress octets 6762976 OriginFlexible egress entries 57 OriginFlexible egress packets 3588 OriginFlexible egress octets 394680 OriginFlexible total entries 629 Handle origin entries 620 Handle As aggre entries 12 Handle ProtPort aggre entries 11 Handle SrcPrefix aggre entries 10 Handle DstPrefix aggre entries 15 Handle Prefix aggre entries 7 Handle AsTos aggre entries 6 Handle ProtPortTos aggre entries 5 Handle SrcPreTos aggre entries 5 Handle DstPreTos aggre entries 4 Handle PreTos aggre entries 1 Record test handle entries 0

Table 16-70 Description of the display ip netstream statistics command output

Item Description

OriginFlexible ingress entries Total number of incoming original flows or flexibleflows

OriginFlexible ingress packets Total number of packets in incoming original flows orflexible flows

OriginFlexible ingress octets Total number of bytes in incoming original flows orflexible flows

OriginFlexible egress entries Total number of outgoing original flows or flexibleflows

OriginFlexible egress packets Total number of packets in outgoing original flows orflexible flows

OriginFlexible egress octets Total number of bytes in outgoing original flows orflexible flows

OriginFlexible total entries Total number of original flows or flexible flows

Handle origin entries Number of processed incoming and outgoing originalflows

Handle As aggre entries Number of processed incoming and outgoing ASaggregation flows



9015



Item Description

Handle ProtPort aggre entries Number of processed incoming and outgoing protocol-port aggregation flows

Handle SrcPrefix aggre entries Number of processed incoming and outgoing source-prefix aggregation flows

Handle DstPrefix aggre entries Number of processed incoming and outgoingdestination-prefix aggregation flows

Handle Prefix aggre entries Number of processed incoming and outgoing prefixaggregation flows

Handle AsTos aggre entries Number of processed incoming and outgoing AS-ToSaggregation flows

Handle ProtPortTos aggreentries

Number of processed incoming and outgoing protocol-port-ToS aggregation flows

Handle SrcPreTos aggre entries Number of processed incoming and outgoing source-prefix-ToS aggregation flows

Handle DstPreTos aggre entries Number of processed incoming and outgoingdestination-prefix-ToS aggregation flows

Handle PreTos aggre entries Number of processed incoming and outgoing prefix-ToSaggregation flows

Record test handle entries Number of flows processed using the flexible flowstatistics template test

16105 display netstream

FunctionThe display netstream command displays the NetStream configurations

Formatdisplay netstream all | global | interface interface-type interface-number



9016



Parameters


all Displays all the NetStreamconfigurations includingl NetStream

configurations in thesystem view

l NetStreamconfigurations in theaggregation view

l NetStreamconfigurations in theflexible flow statisticsview

l NetStreamconfigurations in theinterface view

-

global Displays the globalNetStream configurationsincludingl NetStream




-


Displays the NetStreamconfigurations on aspecified interfaceThe parameter interface-type interface-numberspecifies the interface typeand number

-

Views

All views

Default Level

3 Management level



9017



Usage GuidelinesThis command displays the NetStream configurations for both IPv4 and IPv6 flows

Example Display all the NetStream configurations

ltHUAWEIgt display netstream allsystem ip netstream export version 9 ip netstream export source 10111 ip netstream export host 10002 6000 ip netstream export host 10555 6000 ipv6 netstream export version 9 ipv6 netstream export host 10003 6000 ip netstream record test ip netstream aggregation destination-prefix enable export version 9 ip netstream aggregation protocol-port export version 9 slot 0 GigabitEthernet001 ip netstream inbound

Table 16-71 Description of the display netstream all command output

Item Description

ip netstream export version version The field version indicates the version of theexported packets carrying IPv4 originalflow statistics This field is displayed onlywhen the 161019 ip netstream exportversion command has been executed If theversion retains the default setting this fieldis not displayed

ip netstream export host ip-address port-number

The field ip-address indicates thedestination address of the exported packetscarrying IPv4 flow statistics and port-number is the UDP port This field isdisplayed only when the 161016 ipnetstream export host command has beenexecuted in the system view

ip netstream export source ip-address The field ip-address indicates the sourceaddress of the exported packets carryingIPv4 flow statistics This field is displayedonly when the 161018 ip netstreamexport source command has been executedIf the source address is not specified theoutbound interface IP address is used



9018



Item Description

ipv6 netstream export version version The field version indicates the version of theexported packets carrying IPv6 originalflow statistics This field is displayed onlywhen the 161029 ipv6 netstream exportversion command has been executed If theversion retains the default setting this fieldis not displayed

ipv6 netstream export host ip-address port-number

The field ip-address indicates thedestination address of the exported packetscarrying IPv6 flow statistics and port-number is the UDP port This field isdisplayed only when the 161026 ipv6netstream export host command has beenexecuted in the system view

ip netstream record Name of the flexible flow statisticstemplate

ip netstream aggregation destination-prefix Destination-prefix aggregation method Thisfield is displayed only when the 161015 ipnetstream aggregation command has beenexecuted to set the aggregation methodCurrently the following aggregationmethods are supportedl as AS aggregationl as-tos AS-ToS aggregationl destination-prefix destination-prefix

aggregationl destination-prefix-tos destination-

prefix-ToS aggregationl prefix prefix aggregationl prefix-tos prefix-ToS aggregationl protocol-port protocol-port aggregationl protocol-port-tos protocol-port-ToS

aggregationl source-prefix source-prefix aggregationl source-prefix-tos source-prefix-ToS

aggregation

enable The destination-prefix aggregation methodis enabled This field is displayed only whenthe enable command has been executed inthe aggregation view



9019



Item Description

export version version The field version indicates the versionformat of the exported packets carryingaggregation flow statistics If the versionretains the default setting this field is notdisplayed This field is displayed only whenthe 161013 export version command hasbeen executed

ip netstream inbound The flow statistics function is enabled forincoming packets on GE001 This field isdisplayed only when the 161014 ipnetstream command has been executed inthe interface view

Related Topics161015 ip netstream aggregation161016 ip netstream export host161019 ip netstream export version161018 ip netstream export source161026 ipv6 netstream export host161029 ipv6 netstream export version161028 ipv6 netstream export source161021 ip netstream sampler (interface view)161012 enable

16106 display netstream cache ip aggregation

FunctionThe display netstream cache ip aggregation command displays details about IPv4aggregation flow statistics on a device

Formatdisplay netstream cache ip aggregation as | as-tos | destination-prefix | destination-prefix-tos | prefix | prefix-tos | protocol-port | protocol-port-tos | source-prefix | source-prefix-tos slot slot-id



9020



Parameters


as Specifies the AS aggregation It classifies flows basedon source AS number destination AS numberinbound interface index and outbound interfaceindex

-

as-tos Specifies the AS-ToS aggregation It classifies flowsbased on source AS number destination AS numberinbound interface index outbound interface indexand ToS

-

destination-prefix

Specifies the destination-prefix aggregation Itclassifies flows based on destination AS numberdestination mask length destination prefix andoutbound interface index

-

destination-prefix-tos

Specifies the destination-prefix-ToS aggregation Itclassifies flows based on destination AS numberdestination mask length destination prefix outboundinterface index and ToS

-

prefix Specifies the prefix aggregation It classifies flowsbased on source AS number destination AS numbersource mask length destination mask length sourceprefix destination prefix inbound interface indexand outbound interface index

-

prefix-tos Specifies the prefix-ToS aggregation It classifiesflows based on source AS number destination ASnumber source mask length destination mask lengthsource prefix destination prefix inbound interfaceindex outbound interface index and ToS

-

protocol-port Specifies the protocol-port aggregation It classifiesflows based on protocol number source port anddestination port

-

protocol-port-tos

Specifies the protocol-port-ToS aggregation Itclassifies flows based on protocol number sourceport destination port ToS inbound interface indexand outbound interface index

-

source-prefix Specifies the source-prefix aggregation It classifiesflows based on source AS number source masklength source prefix and inbound interface index

-

source-prefix-tos

Specifies the source-prefix-ToS aggregation Itclassifies flows based on source AS number sourcemask length source prefix ToS and inboundinterface index

-

slot slot-id Specifies the slot ID The valuedepends on thedeviceconfiguration



9021



Views

All views

Default Level

3 Management level

Usage Guidelines

Usage Scenario

This command displays real-time statistics on IPv4 aggregation flows on the device

Precaution

This command must be executed before the flows age out otherwise no information will bedisplayed

Example

Display detailed statistics about flows aggregated based on protocol and port on the device

ltHUAWEIgt display netstream cache ip aggregation protocol-port slot 0Info The operation may take a long time Please wait for a moment or press Ctrl+C to abortNetStream cache information-------------------------------------------------------------------------------- Protocol SrcPort DstPort Direction Streams Packets Octets-------------------------------------------------------------------------------- 114 0 0 IN 200 50688 5271552--------------------------------------------------------------------------------

Table 16-72 Description of the display netstream cache ip aggregation command output

Item Description

Protocol Protocol number of packets

SrcPort Source port number of packets

DstPort Destination port number of packets

Direction Packet sampling directionl IN inbound directionl OUT outbound direction

Streams Number of flows

Packets Number of packets

Octets Number of octets in packets



9022



16107 display netstream cache ip record

Function

The display netstream cache ip record command displays details about IPv4 flexible flowstatistics on a device

Format

display netstream cache ip record record-name [ inbound | outbound | destinationinterface interface-type interface-number | destination ip ip-address | destination port port-number | source interface interface-type interface-number | source ip ip-address | sourceport port-number | protocol protocol-type | tos tos-number ] slot slot-id [ verbose ]


record-name Specifies the name of aflexible flow statisticstemplate

It must be an existingtemplate name on thedevice

inbound Specifies incoming packets -

outbound Specifies outgoing packets -

destination interfaceinterface-type interface-number

Specifies the destinationinterface of packets

-

destination ip ip-address Specifies the destination IPaddress of packets

-

destination port port-number

Specifies the destinationport number of packets


source interface interface-type interface-number

Specifies the sourceinterface of packets

-

source ip ip-address Indicates the source IPaddress of packets

-

source port port-number Specifies the source portnumber of packets


protocol protocol-type Specifies the protocol typeof packets


tos tos-number Specifies the ToS value ofpackets


slot slot-id Specifies the slot ID The value depends on thedevice configuration

verbose Displays detailedinformation

-



9023



Views

All views

Default Level

3 Management level

Usage Guidelines

Usage Scenario

This command displays real-time statistics on IPv4 flexible flows on the device

Precaution


Example

Display IPv4 flexible flow statistics on the device

ltHUAWEIgt display netstream cache ip record record1 slot 0 verboseInfo The operation may take a long time Please wait for a moment or press Ctrl+C to abortNOTE L4 Info Source PortDestination PortProtocol TCP Flags Ack Flush Push Reset Syn UrgentNetStream cache information-------------------------------------------------------------------------------- SrcIP DstIP L4 Info DstAS Direction SrcIf DstIf TCP Flags SrcAS ToS NextHop BGPNextHop Octets Packets-------------------------------------------------------------------------------- 10112 10111 00114 -- IN GE005 -- 000000 -- 0 -- -- 4784 46--------------------------------------------------------------------------------

Table 16-73 Description of the display netstream cache ip record command output

Item Description

SrcIP Source IP address of packets

DstIP Destination IP address of packets

L4 Info Transport-layer information of packets including sourceport destination port and protocol type

DstAS Destination AS number of packets




9024



Item Description

SrcIf Source interface of packets

DstIf Destination interface of packets

TCP Flags TCP flag of packets including ACK Flush PushReset Syn and Urgent

SrcAS Source AS number of packets

ToS ToS field of packets

NextHop Next hop address

BGPNextHop Address of the BGP next hop



16108 display netstream cache ip origin

Function

The display netstream cache ip origin command displays details about IPv4 original flowstatistics on a device

Format

display netstream cache ip origin [ inbound | outbound | destination interfaceinterface-type interface-number | destination ip ip-address | destination port port-number |source interface interface-type interface-number | source ip ip-address | source port port-number | protocol protocol-type | tos tos-number ] slot slot-id [ verbose ]

Parameters






-


-






9025






-


-









-

ViewsAll views



This command displays real-time statistics on IPv4 original flows on the device

Precaution


Example Display details about IPv4 original flow statistics on the device

ltHUAWEIgt display netstream cache ip origin slot 0 verboseInfo The operation may take a long time Please wait for a moment or press Ctrl+C to abortNOTE L4 Info Source PortDestination PortProtocol TCP Flags Ack Flush Push Reset Syn UrgentNetStream cache information-------------------------------------------------------------------------------- SrcIf SrcIPMask DstIPMask L4 Info ToS Direction SrcAS DstAS DstIf TCP Flags Octets Packets NextHop BGPNextHop



9026



-------------------------------------------------------------------------------- GE005 10112-- 10111-- 00114 0 IN -- -- -- 000000 5200 50 -- ----------------------------------------------------------------------------------

Table 16-74 Description of the display netstream cache ip origin command output

Item Description


SrcIPMask Source IP address and mask of packets

DstIPMask Destination IP address and mask of packets


ToS Service type of packets









BGP NextHop BGP next hop address

16109 display netstream cache ipv6 record

FunctionThe display netstream cache ipv6 record command displays details about IPv6 flexible flowstatistics on a device

Formatdisplay netstream cache ipv6 record record-name [ inbound | outbound | destinationinterface interface-type interface-number | destination ipv6 ipv6-address | destination portport-number | source interface interface-type interface-number | source ipv6 ipv6-address |



9027



source port port-number | flowlabel flowlabel | protocol protocol-type | tos tos-number ] slot slot-id [ verbose ]








-

destination ipv6 ipv6-address

Specifies the destinationIPv6 address of packets

-






-

source ipv6 ipv6-address Specifies the source IPv6address of packets

-



flowlabel flowlabel Specifies the flow label ofpackets








-

ViewsAll views




9028



Usage Guidelines

Usage Scenario


Precaution


Example


ltHUAWEIgt display netstream cache ipv6 record test slot 0 verboseInfo The operation may take a long time Please wait for a moment or press Ctrl+C to abortNOTE L4 Info Source PortDestination PortProtocol TCP Flags Ack Flush Push Reset Syn UrgentNetStream cache information-------------------------------------------------------------------------------- SrcIP SrcIf L4 Info DstIP DstIf ToS NextHop SrcAS DstAS BGPNextHop FlowLabel Direction TCP Flags Octets Packets-------------------------------------------------------------------------------- FEC08012000A01102 GE005 0059 FEC08012000C108101 -- 0 -- -- -- -- 0 IN 000000 232648 2237--------------------------------------------------------------------------------

Table 16-75 Description of the display netstream cache ipv6 record command output

Item Description

SrcIP Source IPv6 address of packets



DstIP Destination IPv6 address of packets


ToS ToS of packets





FlowLabel IPv6 flow label



9029



Item Description





161010 display netstream cache ipv6 origin

Function

The display netstream cache ipv6 origin command displays details about IPv6 original flowstatistics on a device

Format

display netstream cache ipv6 origin [ inbound | outbound | destination interfaceinterface-type interface-number | destination ipv6 ipv6-address | destination port port-number | source interface interface-type interface-number | source ipv6 ipv6-address |source port port-number | flowlabel flowlabel | protocol protocol-type | tos tos-number ] slot slot-id [ verbose ]

Parameters






-



-






-


-



9030














-

ViewsAll views




Precaution



ltHUAWEIgt display netstream cache ipv6 origin slot 0 verboseInfo The operation may take a long time Please wait for a moment or press Ctrl+C to abortNOTE L4 Info Source PortDestination PortProtocol TCP Flags Ack Flush Push Reset Syn UrgentNetStream cache information-------------------------------------------------------------------------------- SrcIf TCP Flags SrcIPMask DstIf ToS DstIPMask L4 Info FlowLable NextHop SrcAS DstAS BGP NextHop Direction Octets Packets-------------------------------------------------------------------------------- GE005 000000 FEC08012000A01102-- -- 0 FEC08012000C108101--



9031



0059 0 -- -- -- -- IN 3821896 36749--------------------------------------------------------------------------------

Table 16-76 Description of the display netstream cache ipv6 origin command output

Item Description



SrcIPMask Source IPv6 address and mask of packets



DstIPMask Destination IPv6 address and mask of packets


FlowLable IPv6 flow label








161011 display snmp-agent trap feature-name sindex all

Function

The display snmp-agent trap feature-name sindex all command displays the status of alltraps on the SINDEX module

Formatdisplay snmp-agent trap feature-name sindex all



9032



Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

You can run the display snmp-agent trap feature-name sindex all command to check thestatus of all traps on the SINDEX module This status can be configured using the snmp-agent trap enable feature-name sindex command

Example

Display the status of all traps on the SINDEX module

ltHUAWEIgt display snmp-agent trap feature-name sindex all------------------------------------------------------------------------------ Feature name SINDEX Trap number 1 ------------------------------------------------------------------------------ Trap name Default switch status Current switch status hwNetStreamIndexUsedUp on on

Table 16-77 Description of the display snmp-agent trap feature-name sindex all commandoutput

Item Description

Feature name Name of the module that a trap message belongs




Current switch status Status of a trapl on The trap is enabledl off The trap is disabledThis status can be configured using the snmp-agent trapenable feature-name sindex command

hwNetStreamIndexUsedUp The NetStream interface indexes are all allocated



9033



Related Topics161037 snmp-agent trap enable feature-name sindex

161012 enable

Function

The enable command enables the aggregation function in the aggregation view

The undo enable command disables the aggregation function in the aggregation view

By default the aggregation function is disabled

Format

enable

undo enable

Parameters

None

Views

NetStream aggregation view

Default Level

3 Management level

Usage Guidelines

The enable command takes effect only in the NetStream aggregation view Flow statistics areexported according to the configured aggregation method only after you run the enablecommand in the aggregation view

Example

Enable destination address prefix aggregation

ltHUAWEIgt system-view[HUAWEI] ip netstream aggregation destination-prefix[HUAWEI-aggregation-dstpre] enable

Related Topics161015 ip netstream aggregation

161013 export version



9034



FunctionThe export version command configures the version of exported packets carryingaggregation flow statistics

The undo export version command restores the default setting

By default the aggregation flow statistics are exported in the version of V8

Formatexport version version

undo export version


version Specifies the versionnumber of exported packetscarrying aggregation flowstatistics

The value of version is set to8 or 9 The default is 8

ViewsNetStream aggregation view


Usage GuidelinesThe NDE exports NetStream flow statistics to the NSC The version of exported packets mustbe the same as that configured on the NSC so that the NSC can parse the exported packets

The format of exported packets in V8 is fixed and is not easy to expand The format ofexported packets in V9 is defined in templates and is easy to combine or expand Thestatistics are exported more flexibly

V9 is supported by most NSCs for its advantages It is recommended that you set the versionof exported packets carrying aggregation flow statistics to V9

Example Set the version number of exported packets carrying aggregation flow statistics to V9

ltHUAWEIgt system-view[HUAWEI] ip netstream aggregation as[HUAWEI-aggregation-as] export version 9




9035



161014 ip netstream

FunctionThe ip netstream command enables IPv4 flow statistics collection on the inbound andoutbound interfaces

The undo ip netstream command restores the default setting

By default statistics collection for IPv4 flows is disabled on the inbound and outboundinterfaces

Formatip netstream inbound | outbound

undo ip netstream inbound | outbound


inbound Enables flow statisticscollection on the inboundinterface

-

outbound Enables flow statisticscollection on the outboundinterface

-

ViewsGE interface view XGE interface view port group view



To export IPv4 flow statistics you must run the ip netstream command to enable the IPv4flow statistics collection function on the interface

Precautions

After the statistics collection function is enabled for IPv4 and IPv6 flows the statistics areindependent of each other

Currently the flow statistics collection function can be enabled only on the main interface

If the NetStream function is enabled on the main interface but you do not set a sampling ratiousing the 161021 ip netstream sampler (interface view) command the main interface uses



9036



the sampling ratio of 11000 If you set the sampling ratio the interface uses this samplingratio

Example

Enable the flow statistics collection function for the incoming IPv4 packets on GE001

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] ip netstream inbound

Related Topics161021 ip netstream sampler (interface view)

161015 ip netstream aggregation

Function

The ip netstream aggregation command configures the aggregation method and displays theaggregation view

Format

ip netstream aggregation as | as-tos | destination-prefix | destination-prefix-tos | prefix |prefix-tos | protocol-port | protocol-port-tos | source-prefix | source-prefix-tos

Parameters


as Specifies the ASaggregation It classifiesflows based onl Source AS numberl Destination AS numberl Inbound interface indexl Outbound interface index

-

as-tos Specifies the AS-ToSaggregation It classifiesflows based onl Source AS numberl Destination AS numberl Inbound interface indexl Outbound interface indexl ToS

-



9037




destination-prefix Specifies the destination-prefix aggregation Itclassifies flows based onl Destination AS numberl Destination mask lengthl Outbound interface indexl Destination prefix

-

destination-prefix-tos Specifies the destination-prefix-ToS aggregation Itclassifies flows based onl Destination AS numberl Destination mask lengthl Destination prefixl ToSl Outbound interface index

-

prefix Specifies the prefixaggregation It classifiesflows based onl Source and destination

AS numbersl Source and destination

mask lengthsl Source and destination

prefixesl Inbound interface indexl Outbound interface index

-

prefix-tos Specifies the prefix-ToSaggregation It classifiesflows based onl Source and destination



prefixesl ToSl Inbound interface indexl Outbound interface index

-



9038




protocol-port Specifies the protocol-portaggregation It classifiesflows based onl Protocol numberl Source port numberl Destination port number

-

protocol-port-tos Specifies the protocol-port-ToS aggregation Itclassifies flows based onl Protocol numberl Source port numberl Destination port numberl ToSl Inbound interface indexl Outbound interface index

-

source-prefix Specifies the source-prefixaggregation It classifiesflows based onl Source AS numberl Source mask lengthl Source prefixl Inbound interface index

-

source-prefix-tos Specifies the source-prefix-ToS aggregation Itclassifies flows based onl Source AS numberl Source mask lengthl Source prefixl ToSl Inbound interface index

-

ViewsSystem view





9039



NetStream aggregation groups the original flows with the same attributes together Theaggregation flow statistics collection and original flow statistics collection are different Theoriginal flow statistics collection is on the basis of sampled packets while the aggregationflow statistics collection is on the basis of original flows Therefore the aggregation flowstatistics collection generates less data

Follow-up Procedure

Run the enable command in the aggregation view to enable the device to export flowstatistics according to the configured aggregation method

Example

Configure the NetStream AS aggregation method

ltHUAWEIgt system-view[HUAWEI] ip netstream aggregation as[HUAWEI-aggregation-as]

Configure the NetStream destination-prefix aggregation method

ltHUAWEIgt system-view[HUAWEI] ip netstream aggregation destination-prefix[HUAWEI-aggregation-dstpre]

Related Topics161012 enable

161016 ip netstream export host

Function

The ip netstream export host command configures the destination IP address and destinationUDP port number for the exported packets carrying IPv4 flow statistics

The undo ip netstream export host command deletes the configured destination IP addressand destination UDP port number for the exported packets carrying IPv4 flow statistics

By default no destination IP address and destination UDP port number are configured in thesystem view or aggregation view for the exported packets carrying IPv4 flow statistics

Format


undo ip netstream export host ip-address port-number

Parameters


ip-address Specifies the destinationIPv4 address of the exportedpackets carrying IPv4 flowstatistics

-



9040




port-number Specifies the destinationUDP port number of theexported packets carryingIPv4 flow statistics


Views

System view NetStream aggregation view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

After finishing data collection the NDE sends the collected data to the NSC This commandspecifies the destination address of the collected data that is the NSC IP address

Precautions

When you run the ip netstream export host command in the system view this commandconfigures the destination address for the exported packets carrying IPv4 original flowstatistics and IPv4 flexible flow statistics when you run this command in the aggregationview this command configures the destination address for the exported packets carrying IPv4aggregation flows The exported packets carrying aggregation flow statistics preferentially usethe destination address configured in the aggregation view If the destination address is notconfigured in the aggregation view the exported packets carrying aggregation flow statisticsuse the destination address configured in the system view

You can configure two destination addresses in the system view or aggregation view toimplement NSC backup To configure a third destination IP address run the undo netstreamexport ip host command to delete an existing one first otherwise the system displays amessage indicating that the maximum number of addresses is exceeded and the configurationfails

Example

Set the destination IP address for the exported packets carrying original flow statistics to10111 and UDP port number to 222

ltHUAWEIgt system-view[HUAWEI] ip netstream export host 10111 222

Set the destination IP address for the exported packets carrying aggregation flow statistics to10221 and UDP port number to 255

ltHUAWEIgt system-view[HUAWEI] ip netstream aggregation as[HUAWEI-aggregation-as] ip netstream export host 10221 255



9041



Related Topics16105 display netstream

161017 ip netstream export index-switch

FunctionThe ip netstream export index-switch command sets the number of digits in the interfaceindex contained in an exported packet carrying IPv4 flow statistics

By default the number of digits in interface indexes is 16

Formatip netstream export index-switch index-switch

undo ip netstream export index-switch


index-switch Specifies the number ofdigits in the index of aspecified interface

The value is 16 or 32 Thedefault value is 16

ViewsSystem view



You can run the ip netstream export index-switch command to set the number of digits inthe interface index to 16 or 32

The number of digits in an interface index contained in exported packets must be the same asthe number of digits in an interface index that can be parsed by the NMS For example if theNMS can parse the 32-digit interface index set the number of digits in an interface indexcontained in exported packets to 32

Precautions

The number of digits in the interface index can be changed to 32 only when the NMSsupports 32-digit interface index If the number of digits in an interface index contained inexported packets is different from the number of digits in an interface index supported by theNMS the NMS cannot identify NetStream packets sent by the device



9042



This command is valid for V9 Before changing 16-digit interface indexes to 32-digitinterface indexes ensure that

l The version of exported packets of original flows is V9

l The version of exported packets carrying aggregation flow statistics is V9

When the 32-digit interface index is used the version of exported packets of original flowscannot be changed from V9 to V5 and the version of exported packets carrying aggregationflow statistics cannot be changed from V9 to V8

Example

Change the number of digits in the interface index contained in an exported packet carryingIPv4 flow statistics from 16 to 32

ltHUAWEIgt system-view[HUAWEI] ip netstream export version 9[HUAWEI] ip netstream export index-switch 32

Related Topics161019 ip netstream export version161013 export version

161018 ip netstream export source

Function

The ip netstream export source command configures the source address for the exportedpackets carrying IPv4 flow statistics

The undo ip netstream export source command deletes the configured source address forthe exported packets carrying IPv4 flow statistics

By default the source IP address of the exported packets carrying IPv4 flow statistics is theVLANIF interface address of the exported packets

Format

ip netstream export source ip-address

undo ip netstream export source

Parameters


ip-address Specifies the source IPv4address of the exportedpackets carrying IPv4 flowstatistics

The parameter must be setto an existing IP address onthe device



9043



ViewsSystem view NetStream aggregation view



If the NMS identifies the data source according to the source IP address in NetStream packetsyou need to specify the source IP address for NetStream packets

Precautions

NetStream prefers the source IP address configured in the aggregation view If no sourceaddress is specified in an aggregation method the source address configured in the systemview is used

Example In the system view set the source address for the exported packets carrying IPv4 flowstatistics to 10111

ltHUAWEIgt system-view[HUAWEI] ip netstream export source 10111

In the aggregation view set the source address for the exported packets carrying IPv4 flowstatistics to 10222

ltHUAWEIgt system-view[HUAWEI] ip netstream aggregation as[HUAWEI-aggregation-as] ip netstream export source 10222


161019 ip netstream export version

FunctionThe ip netstream export version command configures the version number and AS option ofthe exported packets carrying IPv4 flow statistics

The undo ip netstream export version command restores the default setting

By default the version number of the exported packets carrying IPv4 original flow statistics is5 and no AS option is used The version number of the exported packets carrying IPv4flexible flow statistics is 9 Packets of V9 have no AS option and do not carry BGP next hopinformation

Formatip netstream export version version [ origin-as | peer-as ] [ bgp-nexthop ]



9044



undo ip netstream export version


version Specifies the versionnumber of exported packetscarrying IPv4 flow statistics

The value of version is set to5 or 9

origin-as Specifies the AS numberrecorded in the statistics asthe original AS number

-

peer-as Specifies the AS numberrecorded in the statistics asthe peer AS number

-

bgp-nexthop Configures the statistics tocarry BGP next hopinformation Currently onlyV9 supports the exportedpackets carrying BGP nexthop information

-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

The NDE exports NetStream flow statistics to the NSC The version of exported packets mustbe the same as that configured on the NSC so that the NSC can parse the exported packets



Precautions

Only one version can be specified on a device The versions configured on all the devices onthe network must be the same as the version configured on the NMS

The AS option is used according to the actual situation of the AS configured on each deviceThe AS option affects only the packet statistics result but does not affect the flows The AS



9045



option is encapsulated in the AS option field carried in the NetStream packets sent to theNMS The exported packets of V5 do not support BGP next hop information

Example

Set the version of the exported packets carrying IPv4 flow statistics to V9 and AS option topeer-as

ltHUAWEIgt system-view[HUAWEI] ip netstream export version 9 peer-as


161020 ip netstream record

Function

The ip netstream record command creates a new flexible flow statistics template or displaysthe view of an existing flexible statistics template

The undo ip netstream record command deletes a specified flexible flow statistics template

By default no flexible flow statistics template exists

Format

ip netstream record record-name

undo ip netstream record record-name


record-name Specifies the name of theflexible flow statisticstemplate

The value is a string of 1 to32 case-insensitivecharacters without spacesThe name of the flexibleflow statistics templatecannot contain specialcharacters such as or

Views

System view

Default Level

3 Management level



9046




You need to create the flexible flow statistics template before exporting flexible flowstatistics

Precautions

A maximum of 16 flexible flow statistics templates can be configured on one device Toconfigure a third flexible flow statistics template run the undo ip netstream recordcommand to delete an existing one first

The flexible flow statistics template that has been applied to an interface cannot be modifiedor deleted To delete this flexible flow statistics template run the undo port ip netstreamrecord command on the interface and then modify or delete the template

Example Create the flexible flow statistics template named abc

ltHUAWEIgt system-view[HUAWEI] ip netstream record abc Info Creating the new record succeeded[HUAWEI-record-abc]

Related Topics161033 port ip netstream record16103 display ip netstream record

161021 ip netstream sampler (interface view)

FunctionThe ip netstream sampler command configures the packet sampling function for IPv4packets on an interface

The undo ip netstream sampler command restores the default setting

By default an interface uses the packet-based regular sampling and the sampling ratio is1000

Formatip netstream sampler fix-packets packet-interval inbound | outbound

undo ip netstream sampler [ fix-packets packet-interval ] inbound | outbound



9047



Parameters


fix-packets packet-interval Indicates the sampling ratiofor packet-based regularsampling

Its value is an integer thatranges from 1 to 65535

inbound Samples incoming traffic onan interface

-

outbound Samples outgoing traffic onan interface

-

Views

GE interface view XGE interface view port group view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

You can set an interval for sampling packets so that only statistics about sampled packets arecollected The statistics show the flow status on the entire network The sampling functionreduces NetStream impact on device performance

Precautions

You must run the ip netstream sampler command together with the 161014 ip netstreamcommand If you run only the ip netstream sampler command the command does not takeeffect

If you run the ip netstream sampler command multiple times in the same view only thelatest configuration takes effect

Example

Set the packet-based regular sampling ratio for the incoming packets on GE001 to 1200

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] ip netstream sampler fix-packets 1200 inbound[HUAWEI-GigabitEthernet001] ip netstream inbound

Related Topics161014 ip netstream

161022 ip netstream tcp-flag enable



9048



FunctionThe ip netstream tcp-flag enable command configures the aging of NetStream trafficaccording to the FIN flag or the RST flag in the TCP packet header

The undo ip netstream tcp-flag enable command restores the default setting

By default NetStream flows are not aged according to the FIN or RST flag in the TCP packetheader

Formatip netstream tcp-flag enable

undo ip netstream tcp-flag enable

ParametersNone

ViewsSystem view



The FIN or RST flag in a TCP packet indicates that the TCP connection is terminated Whenreceiving a packet with the FIN or RST flag the device immediately ages the correspondingNetStream flow If the ip netstream tcp-flag enable command is not run NetStream flowsare aged by following other criteria for example inactive aging time or bytes overflow

Precautions

If you set multiple aging modes on the device a flow is aged when it matches any criterion

Only original flows can be aged according to the FIN or RST flag in the TCP packet header

Example Configure the aging of original flows according to the FIN or RST flag in the TCP packetheader

ltHUAWEIgt system-view[HUAWEI] ip netstream tcp-flag enable

161023 ip netstream timeout active

FunctionThe ip netstream timeout active command configures the active flow aging time



9049



The undo ip netstream timeout active command restores the default setting

By default the active flow aging time is 200 seconds

Format

ip netstream timeout active active-interval

undo ip netstream timeout active

Parameters


active-interval Specifies the active agingtime

The value is an integer that ranges from 1 to300 in seconds The default is 200

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

Network traffic may burst intermittently while the memory capacity of the NDE is limitedEarlier flows in the memory need to be exported to release space for the new flows Theprocess of exporting old flows is called aging All flows in the NDE memory will be exportedto the NSC for analysis

When the active time (from flow creation time to the current time) of a flow exceeds thespecified active aging time the flow is exported to the destination

To quickly detect the status of an active flow set the active time to a small value howeverthis setting increases the frequency at which NetStream packets are sent To reduce thefrequency at which NetStream packets are exported and improve statistics collectingefficiency set the active time to a large value

Precautions


Example

Set the active aging time to 240 secondsltHUAWEIgt system-view[HUAWEI] ip netstream timeout active 240

161024 ip netstream timeout inactive



9050



Function

The ip netstream timeout inactive command configures the inactive aging time

The undo ip netstream timeout inactive command restores the default setting

By default the inactive aging time is 30 seconds

Format

ip netstream timeout inactive inactive-interval

undo ip netstream timeout inactive

Parameters


inactive-interval Specifies the inactive agingtime

The value is an integer thatranges from 1 to 300 inseconds The default is 30

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario


When the inactive time (from the last packet receiving time to the current time) of an originalor flexible flow exceeds the specified inactive aging time the flow is exported to thedestination

To quickly detect the status of an inactive flow set the inactive time to a small valuehowever this setting increases the frequency at which NetStream packets are sent To reducethe frequency at which NetStream packets are exported and improve statistics collectingefficiency set the inactive time to a large value

Precautions

The inactive aging time that is configured using the ip netstream timeout inactive commandapplies to both IPv4 and IPv6 flows




9051



Example

Set the inactive aging time to 20 seconds

ltHUAWEIgt system-view[HUAWEI] ip netstream timeout inactive 20

161025 ipv6 netstream

Function

The ipv6 netstream command enables IPv6 flow statistics collection on the inbound andoutbound interfaces

The undo ipv6 netstream command restores the default setting


Format

ipv6 netstream inbound | outbound

undo ipv6 netstream inbound | outbound


inbound Enables IPv6 flow statisticscollection on the inboundinterface

-

outbound Enables IPv6 flow statisticscollection on the outboundinterface

-

Views


Default Level

3 Management level

Usage Guidelines

Usage Scenario

To export IPv6 flow statistics you must run the ipv6 netstream command to enable IPv6flow statistics collection on the inbound interface

Precautions



9052



When you enable IPv6 flow statistics collection on the inbound interface enable statisticscollection on unicast and multicast packets

After statistics collection is enabled for IPv4 and IPv6 flows the statistics are independent ofeach other

Currently flow statistics collection can be enabled only on main interfaces

If statistics collection is enabled on an interface but you do not set a sampling ratio using the161030 ipv6 netstream sampler command the interface uses the sampling ratio of 11000If you have set the sampling ratio the interface uses this sampling ratio

Example

Enable statistics collection for the incoming IPv6 flows on GE001

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] ipv6 netstream inbound

Related Topics161030 ipv6 netstream sampler

161026 ipv6 netstream export host

Function

The ipv6 netstream export host command configures the destination IP address anddestination UDP port number for the exported packets carrying IPv6 flow statistics

The undo ipv6 netstream export host command deletes the configured destination IPaddress and destination UDP port number for the exported packets carrying IPv6 flowstatistics

By default no destination IP address or destination UDP port number is configured in thesystem view for the exported packets carrying IPv6 flow statistics

Format


undo ipv6 netstream export host ip-address port-number

Parameters



-



9053




port-number Specifies the destinationUDP port number of theexported packets


Views

System view




Precautions

The netstream export ipv6 host command configures the destination address for theexported packets carrying IPv6 original flows and flexible flows

You can configure two destination IP addresses to implement NSC backup To configure athird destination IP address run the undo ipv6 netstream export host command to delete anexisting one first otherwise the system displays a message indicating that the maximumnumber of addresses is exceeded and the configuration fails

Example Set the destination IP address for the exported packets carrying IPv6 original flows to10111 and UDP port number to 222

ltHUAWEIgt system-view[HUAWEI] ipv6 netstream export host 10111 222

161027 ipv6 netstream export index-switch

FunctionThe ipv6 netstream export index-switch command sets the number of digits in the interfaceindex contained in an exported packet carrying IPv6 flow statistics

The undo ipv6 netstream export index-switch command restores the default setting

By default an interface index contains 16 digits

Formatipv6 netstream export index-switch index-switch



9054



undo ipv6 netstream export index-switch

Parameters


index-switch Specifies the digit of theinterface index

The value is an integer thatcan be 16 or 32 The defaultis 16

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

You can run the ipv6 netstream export index-switch command to set the number of digits inthe interface index to 16 or 32

Set the type of the interface index contained in exported packets the same as the type of theinterface index that can be parsed by the NMS For example if the NMS can parse the 32-digit interface index set the type of the interface index contained in exported packets to 32-digit interface index

Prerequisites

The interface index length in exported packets can be set to 32 bits only when the NMSsupports 32-bit interface index otherwise the NMS cannot identify the NetStream packets

Example

Change the interface index type of the exported packets carrying IPv6 flow statistics from16-digit to 32-digit

ltHUAWEIgt system-view[HUAWEI] ipv6 netstream export index-switch 32

161028 ipv6 netstream export source

Function

The ipv6 netstream export source command configures the source address for the exportedpackets carrying IPv6 flow statistics

The undo ipv6 netstream export source command deletes the configured source address forthe exported packets carrying IPv6 flow statistics



9055




Format

ipv6 netstream export source ip-address

undo ipv6 netstream export source



-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario


Example

In the system view set the source address for the exported packets carrying IPv6 flowstatistics to 10111

ltHUAWEIgt system-view[HUAWEI] ipv6 netstream export source 10111

161029 ipv6 netstream export version

Function

The ipv6 netstream export version command configures the version number and AS optionof the exported packets carrying IPv6 flow statistics

The undo ipv6 netstream export version command restores the default setting

By default the version number of the exported packets carrying IPv6 flow statistics is notspecified



9056



Format

ipv6 netstream export version version [ origin-as | peer-as ]

undo ipv6 netstream export version

Parameters


version Specifies the version ofexported packets

Only V9 is supported


-


-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario


Precautions

The AS option is used according to the actual situation of the AS configured on each deviceThe AS option affects only the packet statistics result but does not affect the flows The ASoption is encapsulated in the AS option field carried in the NetStream packets sent to theNMS

Example

Set the version of exported packets carrying IPv6 flow statistics to V9 and AS to peer-as

ltHUAWEIgt system-view[HUAWEI] ipv6 netstream export version 9 peer-as

161030 ipv6 netstream sampler



9057



Function

The ipv6 netstream sampler command configures packet sampling for IPv6 packets on aninterface

The undo ipv6 netstream sampler command restores the default setting


Format

ipv6 netstream sampler fix-packets packet-interval inbound | outbound

undo ipv6 netstream sampler [ fix-packets packet-interval ] inbound | outbound





-


-

Views


Default Level

3 Management level

Usage Guidelines

Usage Scenario

You can set an interval for sampling packets so that only statistics about sampled packets arecollected The statistics show the flow status on the entire network The sampling functionreduces impact of NetStream on device performance

Precautions

You must run the ipv6 netstream sampler command together with the 161025 ipv6netstream command If you run only the ipv6 netstream sampler command the commanddoes not take effect

If you run the ipv6 netstream sampler command multiple times in the same view only thelatest configuration takes effect



9058



Example

Set the packet-based regular sampling interval for the incoming packets on GE001 to1200

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] ipv6 netstream inbound[HUAWEI-GigabitEthernet001] ipv6 netstream sampler fix-packets 1200 inbound

Related Topics161025 ipv6 netstream

161031 mask

Function

The mask command sets the aggregation mask length

The undo mask command restores the default setting

By default no aggregation mask is configured

Format

mask source | destination minimum mask-length

undo mask source | destination

Parameters


source Indicates the aggregation mask of the source address Itis used in the following aggregation methods prefixprefix-ToS source-prefix and source-prefix-ToS

-

destination Indicates the aggregation mask of the destinationaddress It is used in the following aggregation methodsprefix prefix-ToS destination-prefix or destination-prefix-ToS

-

mask-length Specifies the aggregation mask length The value is aninteger that rangesfrom 1 to 32

Views


Default Level

3 Management level



9059




The system uses the larger value between the set mask and the largest mask in the FIB tableIf the aggregation mask is not configured the system uses the mask in the FIB table foraggregation

Precaution

Aggregation masks are applied to six aggregation methods destination-prefix destination-prefix-tos prefix prefix-tos source-prefix and source-prefix-tos

Example Set the aggregation mask length in the source-prefix aggregation method to 24

ltHUAWEIgt system-view[HUAWEI] ip netstream aggregation source-prefix[HUAWEI-aggregation-srcpre] mask source minimum 24

161032 match ip

FunctionThe match ip command configures aggregation keywords in a flexible flow statisticstemplate

The undo match ip command deletes aggregation keywords from a flexible flow statisticstemplate

By default no aggregation keyword is configured in a flexible flow statistics template

Formatmatch ip protocol | dscp | source-address | destination-address | source-port |destination-port | flow-label

undo match ip protocol | dscp | source-address | destination-address | source-port |destination-port | flow-label


protocol Indicates the IP protocolaggregation of IPv4 andIPv6 flows

-

dscp Indicates the DSCP priorityaggregation of IPv4 andIPv6 flows

-

source-address Indicates the source IPaddress aggregation of IPv4and IPv6 flows

-



9060




destination-address Indicates the destinationaddress aggregation of IPv4and IPv6 flows

-

source-port Indicates the source portnumber aggregation of IPv4and IPv6 flows

-

destination-port Indicates the destinationport number aggregation ofIPv4 and IPv6 flows

-

flow-label Indicates the IPv6 flow labelaggregation Thisaggregation method appliesonly to IPv6 flows

-

Views


Default Level

3 Management level

Usage Guidelines

Usage Scenario

During NetStream implementation you can run the match ip command to configureaggregation keywords in a flexible flow statistics template

Prerequisites

A flexible flow statistics template has been created using the 161020 ip netstream recordcommand

Precautions

When you run the match ip command to configure the aggregation keywords only onekeyword can be configured each time If you run this command multiple times in the sameview a set of multiple aggregation keywords is configured If a template has been applied toan interface you cannot modify or delete aggregation keywords from the template

Example

Set the flexible flow statistics template abc123 to aggregate flows based on the source port

ltHUAWEIgt system-view[HUAWEI] ip netstream record abc123[HUAWEI-record-abc123] match ip source-port



9061



161033 port ip netstream record

FunctionThe port ip netstream record command applies the flexible flow statistics template to aninterface

The undo port ip netstream record command deletes a specified flexible flow statisticstemplate on an interface

By default no flexible flow statistics template is applied to an interface

Formatport ip netstream record record-name

undo port ip netstream record



The value is a string of 1 to32 case-insensitivecharacters without spacesThe value is the same as theIPv4 flexible flow statisticstemplate name configuredusing the ip netstreamrecord command




After a flexible flow statistics template is configured run the port ip netstream recordcommand to apply the template to an interface

The interface then aggregates flows based on the configured aggregation keywords collectsflow statistics and exports aged flows to the NSC

Prerequisites

The flexible flow statistics template has been created and at least one aggregation keywordhas been configured using the match ip command



9062



Precautions

Each interface can be configured with only one flexible flow statistics template Beforemodifying the flexible flow statistics template in the same interface view run the undo portip netstream record command to delete the existing configuration

If the flexible flow statistics template has been applied to an interface the templateconfiguration cannot be modified or deleted

When flow statistics collection is enabled both on the inbound and outbound interfaces theport ip netstream record command does not take effect

Example

Configure the flexible flow statistics template abc1 (aggregating flows based on the sourceand destination IP addresses collecting statistics about the number of packets and exportingthe inbound interface index) Apply such configurations to GE001

ltHUAWEIgt system-view[HUAWEI] ip netstream record abc1[HUAWEI-record-abc1] match ip source-address[HUAWEI-record-abc1] match ip destination-address[HUAWEI-record-abc1] collect counter packets[HUAWEI-record-abc1] collect interface input[HUAWEI-record-abc1] quit[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] port ip netstream record abc1 Info Configuring a record on the interface succeeded

Related Topics161020 ip netstream record161014 ip netstream161025 ipv6 netstream

161034 refresh netstream template

Function

The refresh netstream template command immediately refreshes the NetStream outputtemplate

By default the template is refreshed every 30 minutes

Format

refresh netstream template

Parameters

None

Views

User view



9063



Default Level

3 Management level

Usage Guidelines

After a NetStream server restarts you need to run this command to enable the device toimmediately resend the NetStream output template Only the V9 template supports thiscommand

Example

Refresh the NetStream output template

ltHUAWEIgt refresh netstream template

161035 reset ip netstream cache

Function

The reset ip netstream cache command forcibly ages all the flows in the cache

Format

reset ip netstream cache slot slot-id

Parameters



Views

System view

Default Level

3 Management level

Usage Guidelines

Forced aging is used when you require the latest statistics but you do not satisfy with theexisting aging conditions or some flows fail to age out due to an anomaly You can forciblyage out all the original flows in the cache and export the flow statistics

NOTE

If you run the reset ip netstream cache command on an interface card before the inactive aging time isreached the NDE does not export the flow statistics to the NSC



9064



Example

Age all the flows forcibly in slot 0

ltHUAWEIgt system-view[HUAWEI] reset ip netstream cache slot 0

161036 reset ip netstream statistics

Function

The reset ip netstream statistics command deletes NetStream flow statistics

Format

reset ip netstream statistics slot slot-id

Parameters



Views

User view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

When diagnosing and locating network faults collect flow statistics in a specified periodBefore statistics collection starts you can run this command to delete historical statistics

Precautions

The reset ip netstream statistics command deletes all NetStream statistics The statisticscannot be restored after being deleted Therefore confirm the action before running thiscommand

You can run this command multiple times at any interval

Example

Delete NetStream statistics in slot 0

ltHUAWEIgt reset ip netstream statistics slot 0



9065



161037 snmp-agent trap enable feature-name sindex

Function

The snmp-agent trap enable feature-name sindex command enables the trap function forthe SINDEX module

The undo snmp-agent trap enable feature-name sindex command disables the trap functionfor the SINDEX module

By default the trap function is enabled for the SINDEX module

Format

snmp-agent trap enable feature-name sindex [ trap-name hwnetstreamindexusedup ]

undo snmp-agent trap enable feature-name sindex [ trap-namehwnetstreamindexusedup ]

Parameters


trap-name Specifies the name of thetrap for a specified event onthe SINDEX module

-

hwnetstreamindexusedup Sends Huawei-proprietarytrap messages when allinterface indexes areallocated

-

Views

System view

Default Level


Usage Guidelines

None

Example

Enable the trap function for the SINDEX module

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable feature-name sindex



9066



1611 sFlow Configuration CommandsNOTE

The sFlow function conforms to RFC3176 and sFloworg standard For security risks see sFloworg standardThis function involves analyzing the communications information of terminal customers Before enabling thefunction ensure that it is performed within the boundaries permitted by applicable laws and regulationsEffective measures must be taken to ensure that information is securely protected

The S1720GFR and S5720HI do not support sFlow

16111 display sflow

Function

The display sflow command displays the sFlow configuration in the system or on a specifiedLPU

Format

display sflow [ slot slot-id ]

Parameters


slot slot-id Displays the sFlowinformation on an LPUwhere slot-id specifies theslot ID of the LPUIf this parameter is notconfigured the global sFlowconfiguration is displayed

The value is an integer andmust be set according to thedevice configuration

Views

All views

Default Level

3 Management level

Usage Guidelines

After configuring the sFlow function you can use the display sflow command to verify theconfiguration

The display sflow command shows the sFlow configuration which helps you locate faults inthe system or on an interface



9067



Example

Display the sFlow configuration on a specified LPU

ltHUAWEIgt display sflow slot 0sFlow Version 5 Information -------------------------------------------------------------------------- Agent Information

IP Address 1921681206 Address family IPV4 Vpn-instance NA -------------------------------------------------------------------------- Collector Information

Collector ID 1 IP Address 1921681194 Address family IPV4 Vpn-instance NA Port 6343 Datagram size 1500 Time out NA Description zjm-pc -------------------------------------------------------------------------- Port on slot 0 Information

Interface GE001 Flow-sample collector 1 Counter-sample collector 1 Flow-sample rate(1x) 2048 Counter-sample interval(s) 10 Flow-sample maxheader 128 Flow-sample direction INOUT

Table 16-78 Description of the display sflow command output

Item Description

Agent Information

IP Address IP address of the sFlow agent To set this value see sflow agent

Address family Address family of the sFlow agent includingl IPv4 IPv4 address familyl IPv6 IPv6 address familyTo set this value see sflow agent

Vpn-instance VPN instance of the sFlow agent

Collector Information

Collector ID ID of the sFlow collector To set this value see sflow collector

IP Address IP address of the sFlow collector To set this value see sflowcollector

Address family Address family of the sFlow collector includingl IPv4 IPv4 address familyl IPv6 IPv6 address familyTo set this value see sflow collector

Vpn-instance VPN instance of the sFlow collector



9068



Item Description

Port Port number of the sFlow collector To set this value see sflowcollector

Description Description of the sFlow collector To set this value see sflowcollector

Datagram size Maximum length of sFlow packets sent to the sFlow collector Toset this value see sflow collector

Time out Aging time of the sFlow collector

Port on slot 0 Information

Interface sFlow-enabled interface

Flow-sample direction Flow sampling directionl IN Enable flow sampling in the inbound directionl OUT Enable flow sampling in the outbound directionl INOUT Enable flow sampling in both inbound direction and

outbound directionTo set this value see sflow flow-sampling

Flow-sample collector Target collector that receives flow sampling data To set thisvalue see sflow flow-sampling collector

Counter-samplecollector

Target collector that receives counter sampling data To set thisvalue see sflow counter-sampling collector

Flow-sample rate(1x) Flow sampling rate To set this value see sflow flow-samplingrate

Flow-samplemaxheader

The maximum bytes of data that can be copied from a sampledpacket in flow sampling To set this value see sflow flow-sampling max-header

Counter-sampleinterval(s)

Counter sampling interval To set this value see sflow counter-sampling interval

Related Topics16113 sflow agent16114 sflow collector16115 sflow counter-sampling collector16116 sflow counter-sampling interval16117 sflow flow-sampling16118 sflow flow-sampling collector16119 sflow flow-sampling max-header161110 sflow flow-sampling rate16112 display sflow statistics



9069



16112 display sflow statistics

FunctionThe display sflow statistics command displays sFlow statistics

Formatdisplay sflow statistics [ slot slot-id | interface interface-type interface-number ]


slot slot-id Specifies the slot ID of anLPU



Specifies the type andnumber of an interface

-

ViewsAll views


Usage GuidelinesThe display sflow statistics command displays sFlow statistics including the sampling modenumber of sampled packets sequence number of sent packets and number of discarded sFlowpackets because of expiration You can use the command output to locate faults

Example Display sFlow statistics

ltHUAWEIgt display sflow statisticssFlow Version 5 statistic Information -------------------------------------------------------------------------- Collector 1 Current sample sequence22388 -------------------------------------------------------------------------- Port on slot 0 statistic Information Interface GE001 Flow-sample sequence 7 Counter-sample sequence 44778 Flow-sample inbound pool 28000 Flow-sample outbound pool



9070



4000

--------------------------------------------------------------------------

Table 16-79 Description of the display sflow statistics command output

Item Description

Collector 1 Current samplesequence

Sampling sequence number of the sFlow collector

Flow-sample sequence Sequence number for flow sampling on an interface

Counter-sample sequence Sequence number for counter sampling on an interface

Flow-sample inbound pool Number of incoming packets that are sampled on aninterface

Flow-sample outboundpool

Number of outgoing packets that are sampled on an interface

Related Topics16113 sflow agent16114 sflow collector16115 sflow counter-sampling collector16116 sflow counter-sampling interval16117 sflow flow-sampling16118 sflow flow-sampling collector16119 sflow flow-sampling max-header161110 sflow flow-sampling rate16111 display sflow

16113 sflow agent

FunctionThe sflow agent command creates an sFlow agent and specifies an IP address for the sFlowagent or updates the IP address of the existing sFlow agent

The undo sflow agent command deletes the IP address of an sFlow agent

By default an sFlow agent uses the IP address of the outbound interface in the route to thesFlow collector as the sFlow agent IP address of sFlow packets

Formatsflow agent ip [ vpn-instance vpn-instance-name ] ip-address | ipv6 [ vpn-instance vpn-instance-name ] ipv6-address

undo sflow agent ip [ vpn-instance vpn-instance-name ] ip-address | ipv6 [ vpn-instancevpn-instance-name ] ipv6-address



9071




ip ip-address Specifies the IPv4 addressof an sFlow agent

The value is in dotteddecimal notation and is avalid unicast address except127XXX

ipv6 ipv6-address Specifies an IPv6 address ofthe sFlow agent

The value is an IPv6 unicastaddress which is a 32-digithexadecimal number


Specifies the name of aVPN instance


ViewsSystem view



sFlow is a traffic monitoring technique that collects and analyzes traffic statistics An sFlowagent encapsulates traffic statistics into sFlow packets and sends the sFlow packets tospecified sFlow collectors To send the sFlow packets to a certain sFlow collector configurean IP address for the sFlow agent as the source address of sFlow packets The sFlow collectoranalyzes and displays the traffic statistics based on the traffic in the received sFlow packetsNetwork administrators can view the traffic statistics on a specified interface based on the IPaddress of the sFlow agent and interface number

Prerequisites

l The IP address configured as the source address must exist on the devicel A VPN instance has been created if the sFlow agent is located on a private network

Precautions

A maximum of two sFlow agents can be configured in the system and each VPN instance ofan address family supports only one agent The IP address of an agent must be a valid unicastIP address of an interface If an IPv6 address is specified for an agent the IPv6 address mustbe a global unicast address but cannot be a link-local address

Example Configure an IPv4 address for the sFlow agent

ltHUAWEIgt system-view[HUAWEI] sflow agent ip 19216810010



9072



Related Topics16114 sflow collector16115 sflow counter-sampling collector16116 sflow counter-sampling interval16117 sflow flow-sampling16118 sflow flow-sampling collector16119 sflow flow-sampling max-header161110 sflow flow-sampling rate16111 display sflow16112 display sflow statistics

16114 sflow collector

Function

The sflow collector command creates an sFlow collector and sets or modifies optionalparameters for the sFlow collector

The undo sflow collector command restores default values of optional parameters of thesFlow collector or deletes the sFlow collector

By default no sFlow collector is configured

Format

sflow collector collector-id ip [ vpn-instance vpn-instance-name ] ip-address | ipv6 [ vpn-instance vpn-instance-name ] ipv6-address [ datagram-size datagram-size | port port-num| time-out time ] [ description description ]

sflow collector collector-id datagram-size datagram-size | port port-num [ descriptiondescription ]

undo sflow collector collector-id [ datagram-size | port | description ]


collector-id Specifies the ID of an sFlowcollector This ID is usedwhen you specify thecollector in subsequentsFlow configuration

The value is an integer thatcan be 1 or 2






9073




ip-address Specifies an IPv4 address ofthe sFlow collector

The value is a value unicastIP address in XXXXformat dotted decimalnotation The value cannotbe 127XXX

ipv6-address Specifies an IPv6 addressfor the sFlow collector

The value is a 32-digithexadecimal number in theformat ofXXXXXXXX and is avalid global IPv6 unicastaddress

datagram-size datagram-size

Specifies the maximumlength of sFlow packets sentfrom an sFlow agent to ansFlow collector

The value is an integer inbytes It ranges from 1024 to8100 The default value is1400

port port-num Specifies the UDPdestination port number ofsFlow packets


description description Specifies the description ofan sFlow collector

The value is a string of 1 to255 case-sensitivecharacters without spaces

time-out time Specifies the aging time ofan sFlow collector

The value is an integer thatranges from 0 to 3600 inseconds The default valueis 0 indicating that thesFlow collector is not agedout If the default value isused the aging time cannotbe changed

ViewsSystem view



sFlow is a traffic monitoring technique that collects and analyzes traffic statistics An sFlowagent encapsulates traffic statistics into sFlow packets and sends the sFlow packets to allsFlow collectors To send the sFlow packets to a certain sFlow collector configure an sFlowcollector used to receive sFlow packets and analyze traffic of sFlow packets When both flow



9074



sampling and counter sampling are configured on an interface of an sFlow agent the sFlowagent sends the flow sampling data and counter sampling data to one or two sFlow collectorsBecause sFlow packets are sampled quickly and the number of sFlow packets sent everysecond is limited run the sflow collector command with datagram-sizelength specified toset the maximum length of sFlow packets so that an sFlow packet carries more sampled dataThis reduces the number of sent sFlow packets

NOTE

When you create an sFlow collector specify the ID and IP address for the sFlow collector If the agingtime of the sFlow collector is not set the sFlow collector is not aged out by default and the aging timecannot be changed

Prerequisites

l There is a reachable route between an sFlow agent and an sFlow collector

l A VPN instance has been created if the sFlow collector is located on a private network

Precautions

A maximum of two sFlow collectors can be configured in the system

Example

Configure an IPv4 address for the sFlow collector and set the aging time of the sFlowcollector to 100s

ltHUAWEIgt system-view[HUAWEI] sflow collector 1 ip 19216810010 time-out 100

Related Topics16113 sflow agent16115 sflow counter-sampling collector16116 sflow counter-sampling interval16117 sflow flow-sampling16118 sflow flow-sampling collector16119 sflow flow-sampling max-header161110 sflow flow-sampling rate16111 display sflow16112 display sflow statistics

16115 sflow counter-sampling collector

Function

The sflow counter-sampling collector command specifies the target sFlow collector thatreceives counter sampling data

The undo sflow counter-sampling collector command deletes the target sFlow collector

By default no target sFlow collector is specified



9075



Formatsflow counter-sampling collector collector-id | all

undo sflow counter-sampling collector collector-id | all


collector-id Specifies the ID of the targetsFlow collector that receivescounter sampling data

The value is an integer thatcan be 1 or 2NOTE

The value of collector-id is setusing the sflow collectorcommand

all Indicates all the configuredsFlow collectors

-




Counter sampling is based on time An sFlow agent periodically obtains traffic statistics on aninterface encapsulates the traffic statistics into sFlow packets and sends them to an sFlowcollector When multiple sFlow collectors are configured you can run the sflow counter-sampling collector command to specify the target sFlow collector to receive the countersampling data Each interface can send sFlow sampling data to a maximum of two sFlowcollectors

When you run the sflow counter-sampling collector command to specify the first targetsFlow collector on an interface counter sampling is enabled on the interface When you runthe undo sflow counter-sampling collector command to delete the last target sFlow collectoron an interface counter sampling is disabled on the interface

Prerequisites

An sFlow collector has been created using the sflow collector command

Precautions

The sflow flow-sampling rate command only applies to Layer 2 physical interfaces but doesnot apply to Eth-Trunk or Layer 3 interfaces However this command takes effect on theLayer 3 interface which is switched from a Layer 2 interface using the undo portswitchcommand and can take effect on Eth-Trunk member interfaces



9076



Example Specify sFlow collector 1 to receive counter sampling data

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] sflow counter-sampling collector 1

Configure a port group pg1 that has member ports GE002 and GE003 and specify sFlowcollector 1 to receive counter sampling data for the port group pg1[HUAWEI] port-group pg1[HUAWEI-port-group-pg1] group-member gigabitethernet 002[HUAWEI-port-group-pg1] group-member gigabitethernet 003[HUAWEI-port-group-pg1] sflow counter-sampling collector 1

Related Topics16113 sflow agent16114 sflow collector16116 sflow counter-sampling interval16111 display sflow16112 display sflow statistics

16116 sflow counter-sampling interval

FunctionThe sflow counter-sampling interval command sets the counter sampling interval on aninterface

The undo sflow counter-sampling interval command restores the default counter samplinginterval on an interface

By default the counter sampling interval on an interface is 10s

Formatsflow counter-sampling interval interval

undo sflow counter-sampling interval


interval interval Specifies the countersampling interval

The value is an integer thatranges from 2 to 3600 inseconds The default valueis 10




9077



Default Level

3 Management level

Usage Guidelines

Usage scenario

Counter sampling is based on time An sFlow agent periodically obtains traffic statistics on aninterface encapsulates the traffic statistics into sFlow packets and sends them to an sFlowcollector You can run the sflow counter-sampling interval command to set an appropriatecounter sampling interval

Precautions

The sflow flow-sampling rate command only applies to Layer 2 physical interfaces but doesnot apply to Eth-Trunk or Layer 3 interfaces However this command takes effect on theLayer 3 interface which is switched from a Layer 2 interface using the undo portswitchcommand and can take effect on Eth-Trunk member interfaces If you run the sflow flow-sampling rate command multiple times only the latest configuration takes effect

Example

Set the counter sampling interval to 100s

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] sflow counter-sampling interval 100

Configure a port group pg1 that has member ports GE002 and GE003 and set thecounter sampling interval to 100s for the port group pg1[HUAWEI] port-group pg1[HUAWEI-port-group-pg1] group-member gigabitethernet 002[HUAWEI-port-group-pg1] group-member gigabitethernet 003[HUAWEI-port-group-pg1] sflow counter-sampling interval 100

Related Topics16113 sflow agent16114 sflow collector16115 sflow counter-sampling collector16111 display sflow16112 display sflow statistics

16117 sflow flow-sampling

Function

The sflow flow-sampling command enables flow sampling in a specified direction on aninterface

The undo sflow flow-sampling command disables flow sampling in a specified direction onan interface

By default flow sampling is enabled in both directions on an interface



9078



Format

sflow flow-sampling inbound | outbound

undo sflow flow-sampling inbound | outbound

Parameters


inbound Enables flow sampling inthe inbound direction

-

outbound Enables flow sampling inthe outbound direction

-

Views


Default Level

3 Management level

Usage Guidelines

Usage scenario

You can specify the direction in which flow sampling is performed Flow sampling can beperformed in both inbound and outbound directions

Precautions


Example

Enable flow sampling in the inbound direction

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] sflow flow-sampling inbound

Configure a port group pg1 that has member ports GE002 and GE003 and enable flowsampling in the inbound direction of the port group pg1[HUAWEI] port-group pg1[HUAWEI-port-group-pg1] group-member gigabitethernet 002[HUAWEI-port-group-pg1] group-member gigabitethernet 003[HUAWEI-port-group-pg1] sflow flow-sampling inbound



9079



Related Topics16113 sflow agent16114 sflow collector16118 sflow flow-sampling collector16119 sflow flow-sampling max-header161110 sflow flow-sampling rate16111 display sflow16112 display sflow statistics

16118 sflow flow-sampling collector

FunctionThe sflow flow-sampling collector command specifies the target sFlow collector thatreceives flow sampling data

The undo sflow flow-sampling collector command deletes the target sFlow collector thatreceives flow sampling data


Formatsflow flow-sampling collector collector-id | all

undo sflow flow-sampling collector collector-id | all


collector-id Specifies the ID of the targetsFlow collector that receivesflow sampling data



-






9080



An sFlow agent samples packets in a direction of an interface based on a sampling rateanalyzes packets encapsulates sampled packets and analysis result into sFlow packets andthen sends the sFlow packets to an sFlow collector When multiple sFlow collectors areconfigured you can run the sflow flow-sampling collector command to specify one or two toreceive sFlow packets Each interface can send sFlow sampling packets to a maximum of twocollectors

When you run the sflow flow-sampling collector command to specify the first target sFlowcollector on an interface flow sampling is enabled on the interface When you run the undosflow flow-sampling collector command to delete the last target sFlow collector on aninterface flow sampling is disabled on the interface

Prerequisites


Precautions


Example

Specify sFlow collector 1 to receive the flow sampling data

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] sflow flow-sampling collector 1

Configure a port group pg1 that has member ports GE002 and GE003 and specify sFlowcollector 1 to receive flow sampling data for the port group pg1[HUAWEI] port-group pg1[HUAWEI-port-group-pg1] group-member gigabitethernet 002[HUAWEI-port-group-pg1] group-member gigabitethernet 003[HUAWEI-port-group-pg1] sflow flow-sampling collector 1

Related Topics16113 sflow agent16114 sflow collector16117 sflow flow-sampling16119 sflow flow-sampling max-header161110 sflow flow-sampling rate16111 display sflow16112 display sflow statistics

16119 sflow flow-sampling max-header

Function

The sflow flow-sampling max-header command sets the maximum bytes of data that can becopied from a sampled packet in flow sampling



9081



The undo sflow flow-sampling max-header command restores the default maximum bytesof data

By default a maximum of 128 bytes of data can be copied from a sampled packet in flowsampling

Formatsflow flow-sampling max-header length

undo sflow flow-sampling max-header


length Specifies the maximumbytes of data that can becopied from a sampledpacket

The unit is byte The valueis an integer that rangesfrom 128 to 512 The defaultvalue is 128




An sFlow agent samples packets in a direction of an interface based on a sampling rateanalyzes packets encapsulates sampled packets and analysis result into sFlow packets andthen sends the sFlow packets to an sFlow collector The datagram size of sFlow packets is setusing the sflow collector [ datagram-size datagram-size ] command If only the informationcarried in the packet header is required run the sflow flow-sampling max-header commandto set the maximum length of data starting from the original packet header that can be copiedfrom a sampled packet

Precautions


Example Set the maximum length of data starting from the original packet header that can be copiedfrom a sampled packet to 256 bytes



9082



ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] sflow flow-sampling max-header 256

Configure a port group pg1 that has member ports GE002 and GE003 and set themaximum length of data starting from the original packet header that can be copied from asampled packet to 256 bytes for the port group pg1[HUAWEI] port-group pg1[HUAWEI-port-group-pg1] group-member gigabitethernet 002[HUAWEI-port-group-pg1] group-member gigabitethernet 003[HUAWEI-port-group-pg1] sflow flow-sampling max-header 256

Related Topics16113 sflow agent16114 sflow collector16117 sflow flow-sampling16118 sflow flow-sampling collector161110 sflow flow-sampling rate16111 display sflow16112 display sflow statistics

161110 sflow flow-sampling rate

FunctionThe sflow flow-sampling rate command sets the sampling rate on an interface

The undo sflow flow-sampling rate command restores the default sampling rate on aninterface

By default the sampling rate on a 40GE interface is 120480 and on other types of interfacesis 12048

Formatsflow flow-sampling rate rate

undo sflow flow-sampling rate


rate rate Specifies the sampling ratein the format of 1rate ratespecifies the number ofpackets out of which theinterface will sample apacket

The rate is an integer thatranges from 256 to 1048576The maximum value forS6720EI and S6720S-EI are1048576 and for othermodels is 8192 The defaultvalue for a 40GE port is20480 and for other types ofports is 2048



9083






An sFlow agent samples packets in a direction of an interface based on a sampling rateanalyzes packets encapsulates sampled packets and analysis result into sFlow packets andthen sends the sFlow packets to an sFlow collector You can run the sflow flow-sampling ratecommand to set the sampling rate to limit the number of sampled packets

Precautions


Example Set the sampling rate to 13072

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] sflow flow-sampling rate 3072

Configure a port group pg1 that has member ports of GE002 and GE003 and set thesampling rate to 13072 for the port group pg1[HUAWEI] port-group pg1[HUAWEI-port-group-pg1] group-member gigabitethernet 002[HUAWEI-port-group-pg1] group-member gigabitethernet 003[HUAWEI-port-group-pg1] sflow flow-sampling rate 3072

Related Topics16113 sflow agent16114 sflow collector16117 sflow flow-sampling16118 sflow flow-sampling collector16119 sflow flow-sampling max-header16111 display sflow16112 display sflow statistics



9084



1612 Ping and Tracert Configuration Commands16121 ping

FunctionThe ping command checks whether a specified IPv4 address is reachable and exportscorresponding statistics

Formatping [ ip ] [ -a source-ip-address | -c count | -d | -f | ignore-mtu | -h ttl-value | -nexthopnexthop-ip-address | -i interface-type interface-number | -m time | -n | -name | -p pattern | -q |-r | -s packetsize | -range [ min min-size | max max-size | step step-size ] | -system-time |-t timeout | -tos tos-value | -v | -vpn-instance vpn-instance-name ] host [ ip-forwarding ]

Parameters


ip Indicates the IPv4 protocol If ip is notspecified the IPv4 protocol is used

-

-a source-ip-address

Specifies the source IP address of theICMP Echo Request message If thesource IP address is not specified the IPaddress of the outbound interface is usedas the source IP address of the ICMPEcho Request message


-c count Specifies the number of times forsending ICMP Echo Request messages

The ping command labels each ICMPEcho Request message with a sequenceID that starts from 1 and is increased by1 By default five ICMP Echo Requestmessages are sent You can set thenumber of ICMP Echo Requestmessages to send by specifying theparameter count

In the case of poor network quality youcan set this parameter to a comparativelylarge value to check the network qualitybased on the packet loss rate

The value is an integer thatranges from 1 to 4294967295The default value is 5

-d Indicates that the socket works in debugmode

By default the socket works innon-debug mode



9085




-f Indicates that packets are not fragmentedduring transmissionNOTE

After this parameter is specified ICMPpackets are not fragmented If the ICMPpacket size exceeds the link MTU the ICMPpacket is discarded If you do not want ICMPpackets to be discarded do not specify thisparameter or increase the link MTU

-

-h ttl-value Specifies the TTL value

If the TTL field is reduced to 0 duringmessage forwarding the Layer 3 devicethat the message reaches sends an ICMPtimeout message to the source hostindicating that the destination host isunreachable


-nexthopnexthop-ip-address

Specifies an IP address for the next hop

If you have specified this parameter thedevice no longer searches the routingtable before sending ICMP EchoResponse packets This process preventsping failures caused by incorrect routingentries


NOTE

l The specified next hop addressmust be the next hop address ofa directly connected physicalinterface

l When you specify a next hopaddress you can configure -iinterface-type interface-numberto specify an outboundinterface The followingconditions must be met toensure a test success

l The specified next hopaddress must match theoutbound interface

l The specified outboundinterface cannot be a logicalinterfaces memberinterface

l If you have specified a next hopaddress you cannot specify aVPN

-i interface-type interface-number

Specifies the outbound interface forsending ICMP Echo Request messages

-



9086




-m time Specifies the time to wait before sendingthe next ICMP Echo Request message

Each time the source sends an ICMPEcho Request message using the pingcommand the source waits a period oftime (500 ms by default) before sendingthe next ICMP Echo Request messageYou can set the time to wait beforesending the next ICMP Echo Requestmessage using the parameter time In thecase of poor network condition thevalue should be equal to or larger than500 in milliseconds

The value is an integer thatranges from 1 to 10000 inmilliseconds The default valueis 500

-n Uses the value of host as the IP addressto spare domain name resolution

-

-name Displays the name of the destinationhost

-

-p pattern Specifies pad characters for ICMP EchoRequest messages

By configuring pad characters for ICMPEcho Request messages you canidentify a specific message among thelarge number of received ICMP EchoReply messages

The value is a hexadecimalinteger that ranges from 0 toFFFFFFFF By default thepadding starts from 0x01 andcontinues in ascending order

-q Displays only the statistics If the pingcommand carries this parameter thesystem displays only the statisticsinformation such as the number of sentand received packets packet loss rateand minimum average and maximumRTTs of the packet

By default the system displaysall statistics information



9087




-r Records the route along which an IPpacket is forwarded

When -r is specified during thetransmission of an IP packet the IPaddress of each Layer 3 device that theIP packet passes through is added to theOptions field When the IP packetreaches the destination all IP addressesrecorded in the Options field are copiedto the ICMP Echo Reply message Inaddition the IP address of each Layer 3device that the returned IP packet passesthrough is added to the message Whenthe ping program receives the ICMPEcho Reply message IP addresses of thepassed Layer 3 devices are displayed

By default the route alongwhich an IP packet is forwardedis not recorded

-s packetsize Specifies the length of an ICMP EchoRequest message excluding the IPheader and ICMP header

The value is an integer thatranges from 20 to 9600 in bytesThe default value is 56



9088




-range Enables the device to send ICMP EchoRequest messages with variable payloadlengths

l If the -range parameter is notspecified the payload lengthof an ICMP Echo Requestmessage is equal to thelength specified by the -spacketsize parameter Thedefault value is 56 in bytes

l If the -range parameter isspecified the payload lengthof the first ICMP EchoRequest message is min min-size and that of the secondICMP Echo Request messageis min min-size plus stepstep-size The payload lengthincreases incrementally bystep step-size for subsequentICMP Echo Requestmessages until max max-sizeis reached After that thedevice will not send ICMPEcho Request messages anymoreBy default the payloadlength of an ICMP EchoRequest message ranges from56 to 9600 bytes and the steplength is 1 byteNOTE

l The command executiontakes a long period if alarge number of ICMPEcho Request messagesneed to be sent If you wantto terminate the commandexecution press Ctrl+C

l To change the number ofICMP Echo Requestmessages to be sent changethe values of min min-sizeand max max-size Thevalue of min min-size mustbe smaller than that of maxmax-size

l If both the -range and -ccount parameters arespecified the device sendsICMP Echo Requestmessages of the samepayload length for thenumber of times specifiedby the -c count parameter



9089




min min-size Specifies the minimum payload lengthof an ICMP Echo Request message

The value is an integer rangingfrom 20 to 9600 in bytes Thedefault value is 56

max max-size Specifies the maximum payload lengthof an ICMP Echo Request message


step step-size Specifies the step length of an ICMPEcho Request message


-system-time Displays the system time when the pingpacket is sent

-

-t timeout Specifies the timeout period to wait foran ICMP Echo Reply message after anICMP Echo Request message is sent

After the ping command is run thesource sends an ICMP Echo Requestmessage to a destination and waits for anICMP Echo Reply message If thedestination after receiving the ICMPEcho Request message returns an ICMPEcho Reply message to the sourcewithin the period specified by theparameter timeout the destination isreachable If the destination does notreturn an ICMP Echo Reply messagewithin the specified period the sourcedisplays that the message times out

Normally the source receives an ICMPEcho Reply message within 1 to 10seconds after sending an ICMP EchoRequest message If the transmissionspeed is low properly prolong thetimeout period


-tos tos-value Specifies the ToS value of the sentICMP Echo Request messages The ToSvalue is used to set the packet priority


-v Displays all received ICMP Echo Replymessagesl If -v is not specified the system

displays only the ICMP Echo Replymessages received by the local user

l If -v is specified the system displaysall received ICMP Echo Replymessages

By default only ICMP EchoReply messages for the localuser are displayed



9090




-vpn-instancevpn-instance-name

Specifies the name of a VPN instance The value is a string of 1 to 31case-sensitive characters spacesnot supported When doublequotation marks are used aroundthe string spaces are allowed inthe string

ignore-mtu Indicates that the system does not checkthe interface MTU when a packet is sent

-

host Specifies the domain name or IP addressof the destination host

The value is a string of 1 to 255case-sensitive characters withspaces not supported Whendouble quotation marks are usedaround the string spaces areallowed in the stringAlternatively the value can be avalid IPv4 address in dotteddecimal notation

ip-forwarding Indicates that the ping packets areforcibly forwarded through IP on thefirst node

-

Views

All views

Default Level

0 Visit level

Usage Guidelines

Usage Scenario

The ping command is a common debugging tool for testing the network connectivity bytransmitting ICMP Echo messages It can detect the following items

l Availability of the remote device

l Round-trip delay in communication between the local and remote devices

l Packet loss rate

You can run the ping command to check the network connectivity or line quality in thefollowing scenarios

l Check the protocol stack on the local device You can run the ping loopback-addresscommand to check whether the TCPIP protocol stack works properly on the localdevice

l Check whether the destination host is reachable on an IP network You can run the pinghost command to send an ICMP Echo Request message to the destination host If a replyis received the destination host is reachable



9091



l Check whether the peer is reachable on a Layer 3 VPN On a Layer 3 VPN devices maynot have routing information about each other Therefore you cannot use the ping hostcommand to check whether the peer is reachable When a VPN instance name isspecified you can run the ping -vpn-instance vpn-instance-name host command to sendan ICMP Echo Request message to the peer If the peer returns an ICMP Echo Replymessage the peer is reachable

l In the case of an unstable network you can run the ping -c count -t timeout hostcommand to check the quality of the network between the local device and the peer Byanalyzing the packet loss rate and average delay in the command output you canevaluate the network quality If the network is unreliable set the packet transmissioncount (-c) and timeout (-t) to the upper limits This makes the test result accurate

l Check the path You can run the ping -r host command to obtain information aboutnodes along the path from the local device to the peer

Prerequisite

l Before running the ping command ensure that the ICMP module is working properlyl If -vpn-instance is specified ensure that the VPN module is working properly

Precautions

l If an intermediate device is disabled from responding to ICMP messages detection onthis node fails

l If a fault occurs in the ping process you can press Ctrl+C to terminate the pingoperation

l To ensure security do not ping the broadcast address such as XXXXXX255l When the destination host is unreachable the system displays Request time out which

indicates that the ICMP Echo Request message times out

Example

Check whether the host at 10112 is reachable

ltHUAWEIgt ping 10112 PING 10112 56 data bytes press CTRL_C to break Reply from 10112 bytes=56 Sequence=1 ttl=255 time=2 ms Reply from 10112 bytes=56 Sequence=2 ttl=255 time=1 ms Reply from 10112 bytes=56 Sequence=3 ttl=255 time=1 ms Reply from 10112 bytes=56 Sequence=4 ttl=255 time=1 ms Reply from 10112 bytes=56 Sequence=5 ttl=255 time=1 ms --- 10112 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 000 packet loss round-trip minavgmax = 112 ms

Check whether the host at 10114 is reachable set the transmission count to 8 and set theperiod for waiting for an ICMP Echo Reply message to 4000 ms

ltHUAWEIgt ping -c 8 -t 4000 10114 PING 10114 56 data bytes press CTRL_C to break Reply from 10114 bytes=56 Sequence=1 ttl=255 time=32 ms Reply from 10114 bytes=56 Sequence=2 ttl=255 time=32 ms Reply from 10114 bytes=56 Sequence=3 ttl=255 time=32 ms Reply from 10114 bytes=56 Sequence=4 ttl=255 time=32 ms Reply from 10114 bytes=56 Sequence=5 ttl=255 time=32 ms Reply from 10114 bytes=56 Sequence=6 ttl=255 time=32 ms Reply from 10114 bytes=56 Sequence=7 ttl=255 time=32 ms Reply from 10114 bytes=56 Sequence=8 ttl=255 time=32 ms



9092



--- 10114 ping statistics --- 8 packet(s) transmitted 8 packet(s) received 000 packet loss round-trip minavgmax = 323232 ms

Enable the device to send ICMP Echo Request messages with variable payload lengths

ltHUAWEIgt ping -range min 56 max 60 19216819 PING 19216819 56-60 data bytes press CTRL_C to break Reply from 19216819 bytes=56 Sequence=1 ttl=255 time=80 ms Reply from 19216819 bytes=57 Sequence=2 ttl=255 time=60 ms Reply from 19216819 bytes=58 Sequence=3 ttl=255 time=80 ms Reply from 19216819 bytes=59 Sequence=4 ttl=255 time=80 ms Reply from 19216819 bytes=60 Sequence=5 ttl=255 time=50 ms



ltHUAWEIgt ping 101110ping 101110 PING 101110 56 data bytes press CTRL_C to break Reply from 101110 bytes=56 Sequence=1 ttl=128 time=1 ms Reply from 101110 bytes=56 Sequence=1 ttl=64 time=1 ms (DUP) Reply from 101110 bytes=56 Sequence=2 ttl=128 time=1 ms Reply from 101110 bytes=56 Sequence=2 ttl=64 time=1 ms (DUP) Reply from 101110 bytes=56 Sequence=3 ttl=128 time=1 ms Reply from 101110 bytes=56 Sequence=3 ttl=64 time=1 ms (DUP) Reply from 101110 bytes=56 Sequence=4 ttl=128 time=1 ms Reply from 101110 bytes=56 Sequence=4 ttl=64 time=1 ms (DUP) Reply from 101110 bytes=56 Sequence=5 ttl=128 time=1 ms --- 101110 ping statistics --- 5 packet(s) transmitted 9 packet(s) received 4 duplicates -- somebodys printing up packets round-trip minavgmax = 101 ms



9093



Table 16-80 Description of the ping command output

Item Description

PING xxxx Reachability of the destination host with the IP address as xxxxis tested

x data bytes Length of a sent ICMP Echo Request message

press CTRL_C tobreak

The ongoing ping test is terminated after you press Ctrl+C

Reply from xxxx The destination host responds to the ICMP Echo Requestmessage with an ICMP Echo Reply message that contains thefollowing itemsl bytes indicates the length of the ICMP Echo Reply messagel Sequence indicates the sequence number of the ICMP Echo

Reply messagel ttl indicate the TTL value of the ICMP Echo Reply messagel time indicates the RTT in millisecondsIf no ICMP Echo Reply message is received after the timeoutperiod the system displays Request time outNOTE

If a received packet ends with (DUP) the device has received the EchoReply messages with repeated sequence number

xxxx ping statistics Statistics collected after the ping test on the destination host Thestatistics include the following informationl packet(s) transmitted indicates the number of sent ICMP

Echo Request messagesl packet(s) received indicates the number of received ICMP

Echo Reply messagesl duplicates indicates that the device has received the Echo

Reply messages with repeated sequence numberl packet loss indicates the percentage of unresponded

messages to total sent messagesl -- somebodys printing up packets indicates that the number

of received Echo Reply messages is larger than the number ofsend Echo Request messages

l round-trip minavgmax indicates the minimum average andmaximum RTTs The unit is ms (On an IPv4 network round-trip minavgmax is not displayed if the ping fails On an IPv6network round-trip minavgmax = 000 ms is displayed ifthe ping fails)

Related Topics16122 ping ipv616123 tracert16124 tracert ipv6



9094



16122 ping ipv6

FunctionThe ping ipv6 command checks whether a specified IPv6 address is reachable and exportscorresponding statistics

Formatping ipv6 [ -a source-ipv6-address | -c count | -h ttl-value | -m time | -name | -s packetsize | -ttimeout | -tc traffic-class-value | vpn-instance vpn-instance-name ] host [ -i interface-typeinterface-number ]

Parameters


-a source-ipv6-address

Specifies a source IPv6 address forsending ICMPv6 Echo Requestmessages

If no source IPv6 address is specifiedthe IPv6 address of the outboundinterface is used as the source addressfor sending ICMPv6 Echo Requestmessages

The value is a 32-digithexadecimal number in theformat of XXXXXXXX

-c count Specifies the number of times forsending ICMPv6 Echo Requestmessages

You can increase the number of outgoingpackets to detect the network qualitybased on the packet loss rate



If the TTL field is reduced to 0 duringmessage forwarding the Layer 3 switchthat the message reaches sends anICMPv6 timeout message to the sourcehost indicating that the destination hostis unreachable




9095




-m time Specifies the time to wait before sendingthe next ICMPv6 Echo Requestmessage

Each time the source sends an ICMPv6Echo Request message using the pingipv6 command the source waits a periodof time (2000 ms by default) beforesending the next ICMPv6 Echo Requestmessage You can set the time to waitbefore sending the next ICMPv6 EchoRequest message using the parametertime In the case of poor networkcondition the value should be equal toor larger than 2000 in milliseconds



-

-s packetsize Specifies the length of an ICMPv6 EchoRequest message excluding the IPheader and ICMPv6 header

The value is an integer thatranges from 20 to 9600 inbytes The default value is 56

-t timeout Specifies the timeout period to wait foran ICMPv6 Echo Reply message after anICMPv6 Echo Request message is sent

After the ping ipv6 command is run thesource sends an ICMPv6 Echo Requestmessage to a destination and waits for anICMPv6 Echo Reply message If thedestination after receiving the ICMPv6Echo Request message returns anICMPv6 Echo Reply message to thesource within the period specified by theparameter timeout the destination isreachable If the destination does notreturn an ICMPv6 Echo Reply messagewithin the specified period the sourcedisplays that the message times outNormally the source receives anICMPv6 Echo Reply message within 1to 10 seconds after sending an ICMPv6Echo Request message If thetransmission speed is low properlyprolong the timeout period




9096




-tc traffic-class-value

Specifies the traffic classification in theICMPv6 Echo Request message

To configure traffic control for ICMPv6packets set the parameter traffic-class-value



Specifies the name of a VPN instance forthe IPv6 address family


host Specifies the host name or IPv6 addressof the destination host

The value is a string of 1 to 46case-sensitive characters spacesnot supported When doublequotation marks are used aroundthe string spaces are allowed inthe string The IPv6 address is a32ndashbit string in hexadecimalformat namely the formatXXXXXXXX


Specifies the outbound interface forsending ICMPv6 Echo Requestmessages

-

Views

All views

Default Level

0 Visit level

Usage Guidelines

Usage Scenario

The ping ipv6 command is a widely used debugging tool for checking network connectivityand host reachability on an IPv6 network by transmitting ICMPv6 messages It can detect thefollowing items



l Packet loss rate

You can run the ping ipv6 command to check the IPv6 network connectivity or line quality inthe following scenarios



9097



l Check the protocol stack on the local device You can run the ping ipv6 IPv6-loopback-address command to check whether the TCPIP protocol stack works properly on thelocal device

l Check whether the destination IPv6 host is reachable on an IPv6 network You can runthe ping ipv6 host command to send an ICMPv6 Echo Request message to thedestination host If a reply is received the destination host is reachable

l Check whether the peer is reachable on a Layer 3 VPN On a Layer 3 VPN devices maynot have routing information about each other Therefore you cannot use the ping ipv6host command to check whether the peer is reachable When a VPN instance name isspecified you can run the ping ipv6 vpn-instance vpn-instance-name host command tosend an ICMPv6 Echo Request message to the peer If the peer returns an ICMPv6 EchoReply message the peer is reachable

l In the case of an unstable network you can run the ping ipv6 -c count -t timeout hostcommand to check the quality of the network between the local device and the peer Byanalyzing the packet loss rate and average delay in the command output you canevaluate the network quality If the network is unreliable set the packet transmissioncount (-c) and timeout (-t) to the upper limits This makes the test result accurate

Prerequisites

l Before running the ping ipv6 command ensure that the ICMPv6 module is workingproperly

l If -vpn-instance is specified ensure that the VPN module is working properly

Precautions

l If an intermediate device is disabled from responding to ICMPv6 messages detection onthis node fails

l If the IPv6 address of the destination host maps the local address specify the name of thelocal outbound interface through which the ICMPv6 Echo Request message is sentOtherwise reply to the ping ipv6 command times out

l When the destination host is unreachable the system displays Request time outindicating that the ICMPv6 Echo Request message times out and displays statisticscollected by the IPv6 ping test

l If a fault occurs in the IPv6 ping process you can press Ctrl+C to terminate the IPv6ping operation

Example

Check whether the host with the IPv6 address as FC001 is reachable

ltHUAWEIgt ping ipv6 FC001 PING FC001 56 data bytes press CTRL_C to break Reply from FC001 bytes=56 Sequence=1 hop limit=64 time=115 ms Reply from FC001 bytes=56 Sequence=2 hop limit=64 time=1 ms Reply from FC001 bytes=56 Sequence=3 hop limit=64 time=1 ms Reply from FC001 bytes=56 Sequence=4 hop limit=64 time=1 ms Reply from FC001 bytes=56 Sequence=5 hop limit=64 time=1 ms ---FC001 ping statistics--- 5 packet(s) transmitted 5 packet(s) received



9098



000 packet loss round-trip minavgmax=123115 ms

Table 16-81 Description of the ping ipv6 command output

Item Description

PING HHHHHHH IPv6 address of the destination host

x data bytes Length of a sent ICMPv6 Echo Request message


The ongoing IPv6 ping test is terminated after you press Ctrl+C

Reply fromHHHHHHH

The destination host responds to the ICMPv6 Echo Requestmessage with an ICMPv6 Echo Reply message that contains thefollowing itemsl bytes indicates the length of the ICMPv6 Echo Reply

messagel sequence indicates the sequence number of the ICMPv6

Echo Reply messagel hop limit indicates the TTL of the ICMPv6 Echo Reply

messagel time indicates the RTT in millisecondsIf no ICMPv6 Echo Reply message is received after the timeoutperiod the system displays Request time out

HHHHHHH pingstatistics

Statistics collected after the IPv6 ping test on the destinationhost The statistics include the following informationl packet(s) transmitted indicates the number of sent ICMPv6

Echo Request messagesl packet(s) received indicates the number of received ICMPv6

Echo Reply messagesl packet loss indicates the percentage of unresponded

messages to total sent messagesl round-trip minavgmax indicates the minimum average and

maximum RTTs

Related Topics16124 tracert ipv6

16123 tracert

FunctionThe tracert command checks the path of packets from the source to the destination checksnetwork connectivity and locates a network fault



9099



Formattracert [ -a source-ip-address | -f first-ttl | -m max-ttl | -name | -p port | -q nqueries | -v | -vpn-instance vpn-instance-name [ pipe ] | -w timeout | -s packetsize ] host

NOTE

Only S5720SI S5720S-SI S5720EI S5720HI S6720EI and S6720S-EI support the -v and -vpn-instancevpn-instance-name parameter

Parameters



Specifies the source address of a probepacket

If this parameter is not specified the IPaddress of the outbound interface is used asthe source IP address for sending tracertpackets


-f first-ttl Specifies the initial TTL The TTL field iscarried in the IP header It indicates thelifetime of packets and specifies themaximum hops that packets can passthrough The TTL value is set on the sourceand reduced by 1 each time the packet passesthrough a hop When the TTL value isreduced to 0 the packet is discarded At thesame time an ICMP Timeout message is sentto notify the source host If first-ttl isspecified and the number of hops is smallerthan the value of first-ttl no ICMP Timeoutpacket is sent to the source host when thepacket passes through these hops If max-ttlis specified the value of first-ttl must besmaller than the value of max-ttl


-m max-ttl Specifies the maximum TTL Usually themaximum TTL is set to the number of hopsthe packet passes through You need to usethis parameter to change the TTL If first-ttlis specified the value of max-ttl must begreater than the value of first-ttl


-name Displays the host name of each hop -



9100




-p port Specifies the UDP port number of thedestinationl If no UDP port number is specified for the

destination when you run the tracertcommand a port with the port numbergreater than 32768 is randomly chosen forthe destination to receive tracert packets

l Before specifying the UDP port numberfor the destination ensure that the port isnot in use otherwise the tracert fails


-q nqueries Specifies the number of probe packets to besent each time In the case of poor networkquality you can set this parameter to acomparatively large value to ensure that theprobe packet can reach the destination


-v Displays the MPLS label carried in the ICMPTime Exceeded packet

By default the MPLS labelcarried in the ICMP TimeExceeded is not displayedInstead only the pathinformation carried in theICMP Time Exceeded andPort-Unreachable packets isdisplayed


Specifies the name of the VPN instance towhich the destination address belongs


pipe Specifies the pipe mode When a probepacket passes through the MPLS domain theentire MPLS domain is considered as onehop and the IP TTL of the probe packet isreduced by one on the ingress node andegress node respectively

-

-w timeout Specifies the timeout period to wait for areply If a tracert packet times out whenreaching a gateway an asterisk () isdisplayed

In the case of poor network quality and a lownetwork transmission rate you are advised toprolong the timeout period

The value is an integer thatranges from 0 to 65535 inmilliseconds The defaultvalue is 5000



9101




-s packetsize Specifies the length of an ICMP EchoRequest message excluding the IP headerand ICMP header

The value is an integer thatranges from 12 to 9600 inbytes The default value is12

host Indicates the domain name or IPv4 address ofthe destination host

The value is a string of 1 to255 case-sensitivecharacters with spaces notsupported When doublequotation marks are usedaround the string spaces areallowed in the stringAlternatively the value canbe a valid IPv4 address indotted decimal notation

Views

All views

Default Level

0 Visit level

Usage Guidelines

Usage Scenario

During routine system maintenance you can run the ping command to check networkconnectivity If the ping fails run the tracert command to locate the fault on the network

You can specify different parameters in the tracert command for different scenarios

l To check information about nodes between the source and the destination run thetracert host command

l To check information about nodes between the source and the destination on a Layer 3VPN run the tracert -vpn-instance vpn-instance-name host command On a Layer 3VPN devices may not have routing information about each other Therefore you cannotuse the tracert host command to check whether the peer is reachable To checkinformation about nodes between the source and the destination in a specified VPNinstance run the tracert -vpn-instance vpn-instance-name host command

l On an unstable network you can run the tracert -q nqueries -w timeout host commandto check information about nodes between the source and the destination If the networkis unreliable set the packet transmission count (-q) and timeout (-w) to the upper limitsThis makes the test result accurate

l To check information about nodes along a segment of a path run the tracert -f first-ttl -m max-ttl host command that has initial TTL and maximum TTL specified

Prerequisite

l The UDP module of each node is working properly otherwise the tracert operation fails



9102



l If -vpn-instance is specified ensure that the VPN module of each node is workingproperly

l The ICMP module of each node is working properly otherwise is displayed

Procedure

The execution process of the tracert command is as follows

1 The source sends a packet with the TTL being 1 After the TTL times out the first hopsends an ICMP Error message to the source indicating that the packet cannot beforwarded

2 The source sends a packet with the TTL being 2 After the TTL times out the secondhop sends an ICMP Error message to the source indicating that the packet cannot beforwarded

3 The source sends a packet with the TTL being 3 After the TTL times out the third hopsends an ICMP Error message to the source indicating that the packet cannot beforwarded

4 The preceding process proceeds until the packet reaches the destination

When receiving a packet each destination hop cannot find the port specified in the packetand returns an ICMP Port Unreachable message indicating that the destination port isunreachable and the tracert ends In this manner the result of each probe is displayed on thesource according to which you can find the path from the source to the destination


If a fault occurs when you run the tracert command the following information may bedisplayedl H The host is unreachablel N The network is unreachablel The port is unreachablel P The protocol type is incorrectl F The packet is incorrectly fragmentedl S The source route is incorrect

Precautions

Once -r is specified the outputs of both the tracert and ping commands show informationabout nodes between the source and the destination Differences between the outputs of thetracert and ping commands are as follows

l If the ping command times out on a transit node a timeout packet is returned and thecommand output displays no path information

l If the tracert command times out on a transit node the command output displays indicating that the tracert times out on the node but the tracert is not interrupted

Example

Tracert the gateways from the source host to the destination host with the IP address being101111

ltHUAWEIgt tracert 101111traceroute to 101111 (101111) max hops 30 packet length 40 press CTRL_C to break



9103



1 1031121 10 ms 10 ms 10 ms2 10322161 19 ms 19 ms 19 ms3 4 5 6 7 101111 339 ms 279 ms 279 ms

Table 16-82 Description of the tracert command output

Item Description

traceroute to Tracert to a destination IP address

max hops Maximum TTL value

packet length Length of a sent packet

1031121 10 ms 10 ms 10 ms The integer 1 indicates the first hop gatewayEach hop increments the hop count By defaultthe maximum hop count is 301031121 is the gateway address of the firsthop The IPv4 address following the serialnumber of each hop is the gateway address of thehop10 ms 10 ms 10 ms indicates the differencebetween the time when the three UDP packets aresent and when corresponding ICMP TimeExceeded or ICMP Port Unreachable messagesare received By default each hop sends threeUDP probe packets

No ICMP Time Exceeded message or ICMP PortUnreachable message is returned within aspecified period on the Nth hop By default anICMP Time Exceeded message or ICMP Port-unreachable message should be returned within5000 ms

Related Topics16121 ping16122 ping ipv616124 tracert ipv6

16124 tracert ipv6

FunctionThe tracert ipv6 command checks the path of packets from the source to the destinationchecks IPv6 network connectivity and locates a network fault



9104



Formattracert ipv6 [ -a source-ipv6-address | -f first-hop-limit | -m max-hop-limit | -name | -p port-number | -q probes | -s packetsize | -w timeout | vpn-instance vpn-instance-name ] host

Parameters



Specifies the source address of a tracertpacket

If this parameter is not specified the IPaddress of the outbound interface is usedas the source IP address for sendingtracert packets


-f first-hop-limit

Specifies the initial hop-limit

Carried in the IPv6 header the hop-limit(time to live) indicates the lifetime ofIPv6 packets and specifies the maximumnumber of hops that the IPv6 packets canpass through The hop-limit field in IPv6packets is similar to the TTL field in theIPv4 packets The hop-limit value is seton the source and reduced by 1 each timethe packet passes through a Layer 3device When the hop-limit value isreduced to 0 on a Layer 3 device theLayer 3 device discards the packet andsends an ICMPv6 Timeout message tothe source

If first-hop-limit is specified and thenumber of hops is smaller than thespecified value the hop-limit value willbe greater than 0 after the packet passesthrough all the nodes Therefore noICMPv6 Timeout message is sent to thesource

If max-hop-limit is specified the value offirst-hop-limit must be smaller than thevalue of max-hop-limit




9105




-m max-hop-limit

Specifies the maximum hop-limit

Usually the maximum hop-limit is set tothe number of hops that a packet passesthrough To change the hop-limit valueyou need to use this parameter

If first-hop-limit is specified the value ofmax-hop-limit must be greater than thevalue of first-hop-limit


-name Displays the name of the destination host -

-p port-number

Specifies the UDP port number of thedestinationl If no UDP port number is specified

for the destination when you run thetracert ipv6 command a port withthe port number greater than 32768 israndomly chosen for the destinationto receive tracert packets

l Before specifying the UDP portnumber for the destination ensurethat the port is not in use otherwisethe tracert fails


-q probes Specifies the number of tracert packetssent each time

In the case of poor network quality youcan set probes to a comparatively largevalue to ensure that tracert packets canreach the destination




-w timeout Sets the timeout period to wait for areply

If a tracert packet times out whenreaching a gateway an asterisk () isdisplayed

In the case of poor network quality and alow network transmission rate you areadvised to prolong the timeout period




9106









Views

All views

Default Level

0 Visit level

Usage Guidelines

Usage Scenario

When a fault occurs on the network and the peer is an IPv6 device you can run the ping ipv6command to check network connectivity based on the reply message and then run the tracertipv6 command to locate the fault

You can specify different parameters in the tracert ipv6 command for different scenariosl To check information about nodes between the source and the IPv6 destination run the

tracert ipv6 host commandl To check information about nodes between the source and the IPv6 destination on a

Layer 3 VPN run the tracert ipv6 vpn-instance vpn-instance-name host command Ona Layer 3 VPN devices may not have routing information about each other Thereforeyou cannot use the tracert ipv6 host command to check whether the peer is reachableTo check information about nodes between the source and the IPv6 destination in aspecified VPN instance run the tracert ipv6 vpn-instance vpn-instance-name hostcommand

l On an unstable network you can run the tracert ipv6 -q probes -w timeout hostcommand to check information about nodes between the source and the IPv6 destinationIf the network is unreliable set the packet transmission count (-q) and timeout (-w) tothe upper limits This makes the test result accurate

l To check information about nodes along a segment of a path run the tracert ipv6 -ffirst-hop-limit -m max-hop-limit host command that has initial hop-limit and maximumhop-limit specified



9107



Prerequisites

l The UDP module of each node is working properly otherwise the IPv6 tracert operationfails

l The VPN module of each node is working properly if vpn-instance is specified

l The ICMPv6 module of each node is working properly otherwise is displayed

Procedure

The execution process of the tracert ipv6 command is as follows

l The source sends a packet with the hop-limit being 1 After the hop-limit times out thefirst hop sends an ICMPv6 Error message to the source indicating that the packet cannotbe forwarded

l The source sends a packet with the hop-limit being 2 After the hop-limit times out thesecond hop sends an ICMPv6 Error message to the source indicating that the packetcannot be forwarded

l The source sends a packet with the hop-limit being 3 After the hop-limit times out thethird hop sends an ICMPv6 Error message to the source indicating that the packetcannot be forwarded

l The preceding process proceeds until the packet reaches the destination

When receiving an IPv6 packet each destination hop cannot find the port specified in theIPv6 packet and therefore returns an ICMPv6 Port Unreachable message indicating that thedestination port is unreachable and the IPv6 tracert ends In this manner the result of eachprobe is displayed on the source according to which you can find the path from the source tothe destination


If a fault occurs when you run the tracert ipv6 command the following information may bedisplayed

l H The host is unreachable

l N The network is unreachable

l The port is unreachable

l P The protocol type is incorrect

l F The packet is incorrectly fragmented

l S The source route is incorrect

Precautions

By default the ICMPv6 module is automatically enabled after you enable the IPv6 module

Example

Set the number of packets to be sent to 5 and timeout period to 8000 ms and tracert thegateways from the source to the destination at FC003

ltHUAWEIgt tracert ipv6 -q 5 -w 8000 FC003traceroute to FC003 30 hops max60 bytes packet1 FC0013 26 ms 23 ms 26 ms 30 ms 29 ms 2 FC003 3020 ms 3024 ms 4040 ms 6820 ms 5584 ms



9108



Table 16-83 Description of the tracert ipv6 command output

Item Description

traceroute to HHHHHHH IPv6 address of the destination host

x hops max Maximum hop-limit value

x bytes packet Length of a tracert packet

12

Sequence number of the received ICMPv6Echo Reply message

HHHHHHH Address of the IPCMPv6 Echo Replymessage

26 ms 23 ms 26 ms 30 ms 29 ms RTT in milliseconds

Related Topics16122 ping ipv6



9109



16 Network Management and Monitoring Commands






















16121 snmp-agent


















































16211 rmon alarm

16212 rmon event

16213 rmon history

16214 rmon prialarm







1631 cdp clear neighbor



1634 display cdp neighborbrief












16316 lldp enable (interfaceview)



16319 lldp message-transmissiondelay


16321 lldp message-transmissioninterval












1641 binding








1649 path

16410 pm

16411 pm-server

16412 protocol




16416 retry








16424 upload

16425 upload auto

16426 upload-config



1651 ach





1656 dcp

1657 dcp id
















16523 in-group




16527 ipfpm tlp














16541 mcp id


16543 nqa ipfpm dcp

16544 nqa ipfpm mcp

16545 out-group




16549 tlp


1661 agetime

1662 clear-records


1664 datafill

1665 datasize








16613 dns-server

16614 fail-percent

16615 frequency

16616 ftp-filename

16617 ftp-filesize

16618 ftp-operation

16619 ftp-password

16620 ftp-username


16622 http-url



16625 ip-forwarding


16627 local-pw-id

16628 local-pw-type

16629 label-type

16630 lsp-exp

16631 lsp-nexthop

16632 lsp-replymode

16633 lsp-tetunnel

16634 lsp-type

16635 lsp-version

16636 md

16637 mep

16638 nexthop

16639 nqa




16643 probe-count


16645 records

16646 remote-pw-id



16649 send-trap


16651 set-df



16654 source-port

16655 start

16656 stop


16658 test-type


16660 threshold

16661 timeout

16662 tos



16665 ttl

16666 ttl-copymode


16668 vc-type

16669 vpn-instance







1676 trace enable

1677 trace object





1683 mac-mirroring







1691 capture-packet














161012 enable


161014 ip netstream





161019 ip netstream exportversion












161031 mask

161032 match ip







16111 display sflow


16113 sflow agent









16121 ping

16122 ping ipv6

16123 tracert

16124 tracert ipv6



FunctionThe clear configuration snmp-agent trap enable command deletes alarm configurationsrelated to one or all functions in a batch and restores the default alarm functions

Formatclear configuration snmp-agent trap enable [ feature-name feature-name ]

Parameters


feature-namefeature-name

Deletes configurations of thetrap function of a feature

The value is the name of a featurethat has been supported by thedevice

ViewsSystem view



After a feature trap function is enabled or disabled using the snmp-agent trap enablefeature-name feature-name [ trap-name trap-name ] command the trap functions of allfeatures are enabled using the snmp-agent trap enable command or the trap functions of allfeatures are disabled using the snmp-agent trap disable command To delete theconfigurations run the clear configuration snmp-agent trap enable command


l When the trap function is enabled or disabled globally running the clear configurationsnmp-agent trap enable feature-name feature-name command deletes configurationsof the trap function of the feature specified by feature-name and restores the status of thetrap function to be the same as that of the global trap function

l When the global trap function is in the default state running the clear configurationsnmp-agent trap enable feature-name feature-name command deletes configurationsof the trap function of the feature specified by feature-name and restores the status of thetrap function to be the default status



8560



l Running the clear configuration snmp-agent trap enable command deletesconfigurations of the trap functions of all features and restores all feature alarm functionsto the default status

Example

Delete configurations of the trap functions of all features

ltHUAWEIgt system-view[HUAWEI] clear configuration snmp-agent trap enable


Function

The display snmp-agent command displays the engine ID of the local or remote SNMPagent

Format

display snmp-agent local-engineid | remote-engineid

Parameters


local-engineid Displays the engine ID of the local SNMP agent The engine IDof a local SNMP agent is specified in the snmp-agent local-engineid command

-

remote-engineid Displays the engine ID of a remote SNMP agent -

Views

All views

Default Level

3 Management level

Usage Guidelines

Usage Scenario

After the SNMP agent function is enabled you can run the display snmp-agent local-engineid | remote-engineid command to view the engine ID of the local SNMP agent or theengine IDs of all remote SNMP agents

The SNMP engine ID uniquely identifies an SNMP agent in a management domain TheSNMP engine ID is an important component of the SNMP agent It schedules and processesSNMP messages implements security authentication access control and so on

Prerequisites



8561



Before running the display snmp-agent local-engineid | remote-engineid command toview the engine ID of the local or remote SNMP agent you need to run the snmp-agentcommand to enable the SNMP agent function

Precautions

To set an engine ID for the local SNMP agent you can run the snmp-agent local-engineidcommand

Example

Display the engine ID of the local SNMP agent with the prerequisite that the SNMP agentfunction is enabledltHUAWEIgt display snmp-agent local-engineid SNMP local EngineID 800007DB03360102101100

Table 16-1 Description of the display snmp-agent local-engineid command output

Item Description

SNMP local EngineID Indicates the engine ID of the local SNMPagent The engine ID can be specified by theadministrator through the snmp-agentlocal-engineid command or beautomatically calculated through analgorithm

Related Topics16131 snmp-agent local-engineid


Function

The display snmp-agent community command displays the configured community name

Format

display snmp-agent community [ read | write ]

Parameters


read Displays the name of a read-only community The parameter isspecified using the snmp-agent community command

-

write Displays the name of a read-write community The parameter isspecified using the snmp-agent community command

-



8562



ViewsAll views


Usage GuidelinesWhen configuring a management entity you can use the display snmp-agent communitycommand to check the community name configured on the current agent

If the parameter read or write is not specified the names of all communities are displayed

You have to configure the community name using the snmp-agent community commandbefore you run the display snmp-agent community command

Example Display the current community nameltHUAWEIgt display snmp-agent community Community name ^T|ampWhvyf$ltGdIwXi5SP_6~Nakk6ltlt+3HN-haJ6dl0mdHCeAY8~gtX=gtxVJKNAL=124r839vlt^ Group name ^T|ampWhvyf$ltGdIwXi5SP_6~Nakk6ltlt+3HN-haJ6dl0mdHCeAY8~gtX=gtxVJKNAL=124r839vlt^ Acl2001 Storage type nonVolatile

Table 16-2 Description of the display snmp-agent community command output

Item Description

Community name Name of a community

Group name Name of a group

Acl Number of the ACL configured for thecommunity This parameter is displayedonly when it is specified in thesnmp-agentcommunity command



8563



Item Description

Storage type Standard type of saving a line to memoryThe possible types are as followsl volatile Lines are saved in the volatile


l nonVolatile Lines are saved in thenonvolatile storage medium such as NonVolatile Random Access Memory(NVRAM) and can be restored after thedevice restarts

l permanent Permanent lines are saved inthe nonvolatile storage medium such asRead-only Memory (ROM) They can bemodified but cannot be deleted

l readOnly Readonly lines are saved inthe nonvolatile storage medium such asROM They cannot be modified ordeleted

l otherNOTE


Related Topics16123 snmp-agent community


FunctionThe display snmp-agent extend error-code status command allows you to check whetherthe function of sending extended error codes to the NMS is enabled on the device

Formatdisplay snmp-agent extend error-code status

ParametersNone

ViewsAll views




8564



Usage Guidelines

If the NMS does not receive the extended error codes sent from the device you can run thedisplay snmp-agent extend error-code status command to check whether the function ofsending extended error codes is enabled on the device

Example

Display whether the function of sending extended error codes is enabled on the device

ltHUAWEIgt display snmp-agent extend error-code statusExtend error-code status enabled

Table 16-3 Description of the display snmp-agent extend error-code status command output

Item Description

Extend error-code status Whether the function of sending extended error codes isenabledl enabled The function of sending extended error codes

is enabledl disabled The function of sending extended error codes

is disabled

Related Topics16125 snmp-agent extend error-code enable


Function

The display snmp-agent group command displays information about an SNMP agent group

Format

display snmp-agent group [ group-name ]

Parameters


group-name Displays the name of anSNMP agent group


Views

All views



8565



Default Level

3 Management level

Usage Guidelines

Usage Scenario

When configuring a management object according to the SNMPv3 group information youcan run the display snmp-agent group command to view information about the SNMP agentgroup

If the command contains no parameter information about all groups is displayed such as thegroup name security model and storage type

Precautions

You can run the display snmp-agent group command to view information about an SNMPagent group only after the SNMP agent group is created through the snmp-agent groupcommand

Example

Display information about all SNMPv3 working groupsltHUAWEIgt display snmp-agent group Group name testgroup Security model v3 AuthPriv Readview ViewDefault Writeview dnsmib Notifyview dnsmib Storage type nonVolatile Acl 2001

Table 16-4 Table 1 Description of the display snmp-agent group command output

Item Description

Group name Name of an SNMP agent group

Security model Security mode The options are as followsl v3 AuthPriv authenticated and

encryptedl v3 AuthnoPriv authenticated but not

encryptedl v3 noAuthnoPriv neither authenticated

nor encrypted

Readview View of the read-only MIB of the groupThis parameter can be set using the snmp-agent group command



8566



Item Description

Writeview View of the read-write MIB of the groupThis parameter can be set using the snmp-agent group command

Notifyview View of the notify MIB of the group Thisparameter can be set using the snmp-agentgroup command

Storage-type Data storage type The system supports thefollowing five storage typesl readOnly Readonly lines are saved in

the nonvolatile storage medium Theycannot be modified or deleted



l volatile Lines are saved in the volatilestorage medium and are lost after thedevice restarts

l other other storage typesIn practice the device generally uses onlythe nonVolatile type

Acl Number of the ACL configured for thegroup

Related Topics16126 snmp-agent group


Function

The display snmp-agent heartbeat configuration command displays the configuration ofthe heartbeat trap function

Format

display snmp-agent heartbeat configuration

Parameters

None



8567



ViewsAll views



Example Display the configuration of the heartbeat trap function on the device

ltHUAWEIgt display snmp-agent heartbeat configurationSnmp-agent heartbeat configuration Status Enabled Interval 60s

Table 16-5 Table 1 Description of the display snmp-agent heartbeat configuration commandoutput

Item Description

Status Indicates whether the device to sendheartbeat traps to the NMS This parametercan be set using the snmp-agent heartbeatenable command

Interval Indicates the interval at which the devicesends heartbeat trap messages to the NMSThis parameter can be set using the snmp-agent heartbeat interval command

Related Topics16127 snmp-agent heartbeat enable16128 snmp-agent heartbeat interval


FunctionThe display snmp-agent inform command displays parameters configured for all orspecified target hosts to send Inform messages

Formatdisplay snmp-agent inform [ address udp-domain ip-address [ vpn-instance vpn-instance-name ] params securityname security-name | cipher security-name ]



8568



Parameters


address udp-domain ip-address

Specifies the IP address of thetarget host with thetransmission domain of thetarget host being based on theUser Datagram Protocol(UDP)NOTE




Specifies the name of a VPNinstanceNOTE

vpn-instance is optional To runthe display snmp-agent informcommand on a VPN network youneed to use the VPN instancespecified by vpn-instance IPaddress and security name toidentify a host


params Indicates information about thetarget host that generatesSNMP messages

-


Specifies the user securityname displayed on the NMS









8569



Views

All views

Default Level

3 Management level

Usage Guidelines

Usage Scenario

The display snmp-agent inform command displays the configuration of sending Informmessages on all target hosts including

l Retransmission times configured on all target hosts

l Timeout period

l Maximum number of Inform messages that can be pending in the inform buffer foracknowledgment from NMS

l Current number of Inform messages pending in the inform buffer waiting foracknowledgment from NMS

The display snmp-agent inform command displays the configuration of sending Informmessages on a specified target host and message statistics including

l Retransmission times configured on the specified target host

l Timeout period in seconds after which an inform is retransmitted from inform buffer tothe NMS

l Number of times that an Inform message has been retransmitted

l Number of Inform messages to be confirmed

l Number of Inform messages that have been sent

l Number of Inform messages that are dropped because the inform buffer is full

l Number of Inform messages that are dropped because no correspondingacknowledgement messages are returned

l Number of received acknowledgement messages

When you run the display snmp-agent inform command without specifying any parameterthe alarm configuration is displayed in global inform mode and inform configurations andpacket statistics on all hosts are displayed

Example

Display the parameters configured for all to send Inform messages

ltHUAWEIgt display snmp-agent informGlobal config resend-times 3 timeout 15s pending 39Global status current notification count 1Target-host ID VPN instanceIP-AddressSecurity name-10111^Ogttf1ssv|~v3IY|GkIXOrFazE1lxR^ Config resend-times 3 timeout 15s Status retries 0 pending 0 sent 0 dropped 0 failed 0 confirmed 0



8570



Table 16-6 Description of the display snmp-agent inform command output

Item Description

Global config Global configuration The possible typesarel resend-times Indicates the number of


l timeout Indicates the set timeout periodl pending Indicates the maximum number

of informs in the trap queueThe global inform parameter can be setusing the snmp-agent inform command

Global status Global packet statistics

Target-host ID ID of the target host consisting of the VPNinstance name IP address of the target hostand security name

Config Configuration of the host where the SNMPagent resides The possible types arel resend-times Indicates the number of


l timeout Indicates the set timeout periodThe inform parameter can be set using thesnmp-agent inform address command

Status Statistics about the Inform messagesgenerated on the host where the SNMPagent resides The possible types arel retries Indicates the number of Inform

messages retransmitted to the target hostl pending Indicates the number of

informs waiting in the inform buffer foracknowledgment from NMS

l sent Indicates the number of Informmessages that are successfully sent

l dropped Indicates the number of Informmessages that are dropped because theinform buffer is full

l failed Indicates the number of Informmessages that are not confirmed duringthe retransmission

l confirmed Indicates the number ofAcknowledgment messages returnedfrom the target host



8571



Related Topics16129 snmp-agent inform16130 snmp-agent inform address16145 snmp-agent target-host inform


FunctionThe display snmp-agent mib-view command displays the current MIB view

Formatdisplay snmp-agent mib-view [ exclude | include | viewname view-name ]

Parameters


exclude Excludes the displayed and setattributes of the SNMP MIB view

-

include Includes the displayed and set attributesof the SNMP MIB view

-

viewname view-name

Specifies the view to be displayed Thisparameter can be set using the snmp-agent mib-view command

The value is a string of 1 to 32case-sensitive characters spacesnot supported When doublequotation marks are usedaround the string spaces areallowed in the string

ViewsAll views



The snmp-agent mib-view command creates or updates a MIB view To check the defaultand configured MIB view you can run the display snmp-agent mib-view command

By default the view ViewDefault is adopted

Precautions

Before running the display snmp-agent mib-view command ensure that the SNMP agenthas been enabled



8572



Example Display the current MIB view

ltHUAWEIgt display snmp-agent mib-view View nameViewDefault MIB Subtreeinternet Subtree maskF0(Hex) Storage-type nonVolatile View Typeincluded View statusactive

Table 16-7 Description of the display snmp-agent mib-view command output

Item Description

View name View name

MIB Subtree MIB subtree

Subtree mask Subtree mask

Storage type Data storage typel volatile Lines are saved in the volatile




l readOnly Readonly lines are saved inthe nonvolatile storage medium Theycannot be modified or deleted

l other other storage typesNOTE


View Type Whether the access to a MIB object ispermitted or denied This parameter can beset using the snmp-agent mib-viewcommand

View status Indicates the status of the MIB view

Related Topics16132 snmp-agent mib-view



8573




Function

The display snmp-agent notification-log command displays logs in the trap log buffer

Format

display snmp-agent notification-log [ info | logtime starttime to endtime | size size ]

Parameters


info Displays information about thetrap log buffer including thenumber of global trap logs inthe trap log buffer number ofdiscarded trap logs aging timeof trap lops limit on thenumber of trap logs totalnumber of current trap logsand flag of the notificationlogging function

-

starttime Specifies the start time of traplogs


endtime Specifies the end time of traplogs


size size Number of latest trap logs to bedisplayed


Views

All views

Default Level

3 Management level



8574



Usage Guidelines

You can use any of the following methods to view logs in the trap log buffer

l Specify the size size parameter to view the specified number of latest trap logs

l Specify logtime starttime to endtime to view the trap logs generated in a specifiedperiod

l Run the command without any optional parameters so that the system displays all traplogs by default

Example

Display trap logs in the trap log buffer

ltHUAWEIgt display snmp-agent notification-log infoNotification log information Notification Admin Status enable GlobalNotificationsLogged 0GlobalNotificationsBumped 0GlobalNotificationsLimit 500GlobalNotificationsAgeout 24Total number of notification log(s) 0

Table 16-8 Description of the display snmp-agent notification-log info command output

Item Description

Notification Admin Status Whether the notification logging function is enabled

GlobalNotificationsLogged Number of global trap logs

GlobalNotificationsBumped Number of discarded global trap logs

GlobalNotificationsLimit Limit on the number of trap logs

GlobalNotificationsAgeout Aging time of trap logs

Total number of notificationlog(s)

Total number of current trap logs

Display the latest 20 trap logs (Only one trap log is available in the system)

ltHUAWEIgt display snmp-agent notification-log size 20 Total number of notifications log(s) 1

LogTable LogIndex= 12 LogTime= 229323 LogDateAndTime= 200738 102816 LogEngineID= 000007DB7F00000100004CFB LogEngineTAddress= 192168391162 LogEngineTDomain= snmpUDPDomain LogContextEngineID= null LogContextName= null LogNotificationID= 136141201161021LogVariableTable LogVariableIndex= 1 LogVariableOID= 13612113



8575



LogVariableValueType= TimeTicksLogVariableValue = 229323 LogVariableIndex= 2 LogVariableOID= 1361631141 LogVariableValueType= OidLogVariableValue = 1 LogVariableIndex= 3 LogVariableOID= 13614120116101171329 LogVariableValueType= Integer32LogVariableValue = 1 LogVariableIndex= 4 LogVariableOID= 13614120116101171429 LogVariableValueType= Integer32LogVariableValue = 3 LogVariableIndex= 5 LogVariableOID= 13614120116101171529 LogVariableValueType= Integer32LogVariableValue = 2

Table 16-9 Description of the display snmp-agent notification-log size 20 command output

Item Description

LogTable Log table

LogIndex Index of the log

LogTime Difference between the time when the log was recordedand the time when the system started The unit is 10 ms

LogDateAndTime Absolute date and time when the log was recorded

LogEngineID Engine ID of the SNMP message recorded in the log

LogEngineTAddress IP address and port number of the SNMP messagerecorded in the log

LogEngineTDomain Transmission type of the SNMP message recorded in thelog

LogContextEngineID Engine ID of context of the SNMP message recorded inthe log

LogContextName Secure user name IP address and VPN instance name

LogNotificationID OID of the object recorded in the log

LogVariableTable Variable table of the log

LogVariableIndex Index of a variable

LogVariableOID OID of a variable

LogVariableValueType Value type of a variable

LogVariableValue Value of a variable




8576




Function

The display snmp-agent notify-filter-profile command displays information about aspecified trap filter profile or all trap filter profiles

Format

display snmp-agent notify-filter-profile [ profile-name ]

Parameters


profile-name Specifies the name of atrap filter profile


Views

All views

Default Level

3 Management level

Usage Guidelines

You can use the display snmp-agent notify-filter-profile command to view informationabout configured trap filter profiles The command can display all the configured trap filterprofiles or a specified trap file profile

Example

Display information about configured trap filter profilesltHUAWEIgt display snmp-agent notify-filter-profile Notify-filter namesnmpv2 Notify-filter SubtreesnmpV2 Notify-filter Subtree maskF8(Hex) Notify-filter Storage-typenonVolatile Notify-filter Typeincluded Notify-filter statusactive

Table 16-10 Description of the display snmp-agent notify-filter-profile command output

Item Description

Notify-filter name Name of a trap filter profile

Notify-filter Subtree Trap filter subtree



8577



Item Description

Notify-filter Subtree mask Mask of the trap filter subtree

Notify-filter Storage-type Storage mode of the trap filter profile

Notify-filter Type Whether to filter out the trap object

Notify-filter status Status of a row

Related Topics16135 snmp-agent notify-filter-profile


Function

The display snmp-agent statistics command displays the SNMP messages statistics

Format

display snmp-agent statistics

Parameters

None

Views

All views

Default Level

3 Management level

Usage Guidelines

In an SNMP management system the NMS and the SNMP agent exchange SNMP messagesas followsl The NMS acts as a manager to send an SNMP Request message to the SNMP agentl The SNMP agent searches the MIB on the device for the required information and sends

an SNMP Response message to the NMSl When the trap triggering conditions are met the SNMP agent sends a trap to the NMS to

report the event occurring on the device In this manner the network administrator canprocess the event occurring on the network in time

The display snmp-agent statistics command analyzes the statistics about SNMP messagesand obtains information about the communication between the SNMP agent and the NMS forfault location



8578



NOTE

If large number of messages are received in short period a great number of CPU resources are occupiedThe number of received messages depends on the frequency at which the NMS sends the Requestmessages

Example Display the statistics about the SNMP messages

ltHUAWEIgt display snmp-agent statistics 0 Messages delivered to the SNMP entity 0 Messages which were for an unsupported version 0 Messages which used a SNMP community name not known 0 Messages which represented an illegal operation for the community supplied 0 ASN1 or BER errors in the process of decoding 7 Messages passed from the SNMP entity 0 SNMP PDUs which had badValue error-status 0 SNMP PDUs which had genErr error-status 0 SNMP PDUs which had noSuchName error-status 0 SNMP PDUs which had tooBig error-status 0 MIB objects retrieved successfully 0 MIB objects altered successfully 0 GetRequest-PDU accepted and processed 0 GetNextRequest-PDU accepted and processed 0 GetResponse-PDU accepted and processed 0 SetRequest-PDU accepted and processed 0 Trap-PDU accepted and processed 0 Inform-PDU sent 0 Inform ACK PDUs failed to be processed 0 Inform ACK PDUs successfully processed

Table 16-11 Description of the display snmp-agent statistics command output

Item Description

Messages delivered to the SNMP entity Total number of input SNMP messages

Messages which were for an unsupportedversion

Number of messages with version errors

Messages which used a SNMP communityname not known

Number of messages with communityname errors

Messages which represented an illegaloperation for the community supplied

Number of messages with authority errorscorresponding to community name

ASN1 or BER errors in the process ofdecoding

Number of SNMP messages withencoding errors

Messages passed from the SNMP entity Total number of output SNMP messages

SNMP PDUs which had badValue error-status Number of SNMP messages with badvalues

SNMP PDUs which had genErr error-status Number of SNMP PDUs with generalerrors

SNMP PDUs which had noSuchName error-status

Number of SNMP PDUs with requests fornon-existing MIB objects



8579



Item Description

SNMP PDUs which had tooBig error-status Number of SNMP PDUs with Too_bigerrors

MIB objects retrieved successfully Number of variables requested by NMS

MIB objects altered successfully Number of variables set by NMS

GetRequest-PDU accepted and processed Number of received Get-request PDUs

GetNextRequest-PDU accepted andprocessed

Number of received GetNext-requestPDUs

GetResponse-PDU accepted and processed Number of received Get-response PDUs

SetRequest-PDU accepted and processed Number of received Set-request PDUs

Trap-PDU accepted and processed Number of sent Trap PDUs

Inform-PDU sent Number of sent Inform PDUs

Inform ACK PDUs failed to be processed Number of Inform-PDUs received with noacknowledgement

Inform ACK PDUs successfully processed Number of Inform-PDUs received withacknowledgement


Function

The display snmp-agent statistics mib command displays statistics about the NMSsoperations on MIB objects

NOTE


Format

display snmp-agent statistics mib [ address ipv4-address | ipv6 ipv6-address | vpn-instancevpn-instance-name address ipv4-address ]

Parameters









8580



Views

All views

Default Level

3 Management level

Usage Guidelines

Usage Scenario

An NMS performs operations on MIB objects to manage devices To check these operationstatistics run the display snmp-agent statistics mib command The command outputdisplays names access frequencies and handling dates of MIB objects

If no NMS is specified the display snmp-agent statistics mib command displays statisticsabout the operations performed by all NMSs (that is IPv4+VPN IPv6+VPN IPv4 and IPv6NMSs) on MIB objects

Follow-up Procedure


Example

Display all statistics about the NMSs operations on MIB objects

ltHUAWEIgt display snmp-agent statistics mib----------------------------------------------------------------------------------------- ip address19216814 total mib node number9 SUMMARY Total set0Total get9Total get-next75 ----------------------------------------------------------------------------------------- MibNode Set Get GetNext MaxTime MinTime AveTime ifEntry 0 0 75 0 0 0 ifNumber 0 1 0 0 0 0 sysContact 0 1 0 0 0 0 sysDescr 0 1 0 0 0 0 sysLocation 0 1 0 0 0 0 sysName 0 1 0 0 0 0 sysObjectID 0 1 0 0 0 0 sysServices 0 1 0 0 0 0 sysUpTime 0 2 0 0 0 0



8581



Table 16-12 Description of the display snmp-agent statistics mib command output

Item Description

ip address IP address of the NMS

total mib nodenumber

Total number of MIB objects

SUMMARY Abstract of statistics about the NMSs operations on MIB objects

Total set Total number of Set operations

Total get Total number of Get operations

Total get-next Total number of Get-next operations

MibNode MIB object name

Set Number of the Set operations performed on a specified MIB object

Get Number of the Get operations performed on a specified MIB object

GetNext Number of the Get-next operations performed on a specified MIBobject

MaxTime Maximum time for an operation performed on MIB objects

MinTime Minimum time for an operation performed on MIB objects

AveTime Average time for an operation performed on MIB objects

Related Topics16120 reset snmp-agent statistics mib16143 snmp-agent statistics mib disable


Function

The display snmp-agent sys-info command displays the system information of the currentSNMP device including the contact information about the system maintenance physicallocation of the device and SNMP version

Format

display snmp-agent sys-info [ contact | location | version ]

Parameters


contact Displays the contact information of the current SNMP device -



8582




location Displays the physical location information of the current SNMPdevice

-

version Displays the SNMP version running in the current system -

Views

All views

Default Level

3 Management level

Usage Guidelines

You can use the display snmp-agent sys-info command to check the system maintenanceinformation of the current SNMP device The information includes

l Contact information of the device administrator

l Physical location of the device

l SNMP version

If the parameter is not specified all information is displayed

The snmp-agent sys-info command can be used to set the output of the display snmp-agentsys-info command

Example

Display the system information of the SNMP agent

ltHUAWEIgt display snmp-agent sys-info The contact person for this managed node RampD Beijing Huawei Technologies coLtd The physical location of this node Beijing China SNMP version running in the system SNMPv2c

Display the SNMP version running in the current system

ltHUAWEIgt display snmp-agent sys-info version SNMP version running in the system SNMPv2c

Display the contact information of the current SNMP device

ltHUAWEIgt display snmp-agent sys-info contact The contact person for this managed node RampD Beijing Huawei Technologies coLtd

Display the physical location information of the current SNMP device

ltHUAWEIgt display snmp-agent sys-info location The physical location of this node Beijing China



8583



Table 16-13 Description of the display snmp-agent sys-info command output

Item Description

The contact person for this managed node Contact person of the managed device Byspecifying this parameter you can store theimportant information to the router forconvenient query

The physical location of this node Location of the managed device

SNMP version running in the system SNMP version running in the currentsystem The value can bel SNMPv1l SNMPv2cl SNMPv3

Related Topics16144 snmp-agent sys-info


Function

The display snmp-agent target-host command displays information about all destinationhosts including the IP address of each destination host VPN instance name modes ofsending traps the security name used to send traps protocol version and security level

Format

display snmp-agent target-host

Parameters

None

Views

All views

Default Level

3 Management level

Usage Guidelines

You can use the display snmp-agent target-host command to view the configurations of alldestination hosts At present the system can save the configuration of a maximum of 20destination hosts Therefore the display snmp-agent target-host command can view theconfiguration of a maximum of 20 destination hosts



8584



Example Display the configurations of all destination hosts in the system

ltHUAWEIgt display snmp-agent target-hostTarget-host NO 1----------------------------------------------------------- IP-address 10121 Source interface - VPN instance - Security name ^uqYZfvW4vf[~C|ClUqS(vXdwwqR~5M(rU^ Port 162 Type trap Version v2c Level No authentication and privacy NMS type HW NMS With ext-vb No-----------------------------------------------------------

Table 16-14 Description of the display snmp-agent target-host command output


IP-address Indicates the IP address of a destination host

Source interface Indicates the source interface

VPN instance Indicates the VPN instance to which a destination hostbelongs

Security name Indicates the security name

Port Indicates the UDP port number that sends requests

Type Indicates the requested method of propagating alarmsThe method can be Trap or Inform

Version Indicates the SNMP version number

Level Indicates security levels which includesl Authentication indicates that packets must be

authenticated rather than encryptedl Privacy indicates that packets must be authenticated

and encryptedl No authentication and privacy indicates that packets

need not be authenticated nor encrypted

NMS type Indicates the type of the NMSl NSM indicates the network management system

which can be either a Huawei NMS or the NMS ofanother manufacturer

l HW NMS indicates the Huawei NMS The alarmmessage sent to the HW NMS can contain moredetailed information



8585




With ext-vb Indicates whether an SNMP trap sent to a destination hostcarries extended private VB informationl No indicates that no extended private VB information

is carriedl Yes indicates that extended private VB information is

carried

Related Topics16145 snmp-agent target-host inform16146 snmp-agent target-host trap


FunctionThe display snmp-agent trap all command checks current and default status of all traps inall features

Formatdisplay snmp-agent trap all

ParametersNone

ViewsAll views


Usage GuidelinesYou can run the display snmp-agent trap all command to check current and default status ofall traps in all features You can configure the trap status by running snmp-agent trap enablesnmp-agent trap enable feature-name and snmp-agent trap disable

Example Check the default status of all traps in all features

ltHUAWEIgt display snmp-agent trap all------------------------------------------------------------------------------Feature name TRUNK Trap number 4



8586



------------------------------------------------------------------------------Trap name Default switch status Current switch status hwExtLinkDown off off hwExtLinkUp off off hwExtAllMemberDownNotify off off hwExtAllMemberDownResume off off ---------------------------------------------------------------------------------- More ----

Table 16-15 Description of the display snmp-agent trap all command output

Item Description

Feature name Module name

Trap number Number of traps corresponding to a module

Trap name Trap name

Current switch status Current enabling or disabling status of atrapThis status can be configured using thesnmp-agent trap enable feature-namecommand

Default switch status Default enabling or disabling status of atrap

Related Topics16148 snmp-agent trap disable16149 snmp-agent trap enable16150 snmp-agent trap enable feature-name


FunctionThe display snmp-agent trap feature-name all command displays whether the router isenabled to send alarms of specified features to the NM station

Formatdisplay snmp-agent trap feature-name feature-name all

Parameters


feature-name Specifies the feature that generates alarms -

ViewsAll views



8587




Usage GuidelinesAfter the router is enabled to send alarms to the NM station you can run the display snmp-agent trap feature-name all command to check whether the alarm function is enabled forspecified features You can use the snmp-agent trap enable feature-name command toenable the alarm function of specified features The following table lists the alarm informationof related features

FeatureName



ACL snmp-agent trap enable feature-name acle

display snmp-agent trap feature-nameacle all

ARP snmp-agent trap enable feature-name arp

display snmp-agent trap feature-namearp all

ASMNGTRAP

snmp-agent trap enable feature-name asmngtrap

display snmp-agent trap feature-nameasmngtrap all

BFD snmp-agent trap enable feature-name bfd

display snmp-agent trap feature-namebfd all

BGP snmp-agent trap enable feature-name bgp

display snmp-agent trap feature-namebgp all

CONFIGURATION

snmp-agent trap enable feature-name configuration

display snmp-agent trap feature-nameconfiguration all

DATASYNC

snmp-agent trap enable feature-name datasync

display snmp-agent trap feature-namedatasync all

DHCP snmp-agent trap enable feature-name dhcp

display snmp-agent trap feature-namedhcp all

DLDP snmp-agent trap enable feature-name dldp

display snmp-agent trap feature-namedldp all

EASYOPERATRAP

snmp-agent trap enable feature-name easyoperatrap

display snmp-agent trap feature-nameeasyoperatrap all

EFM snmp-agent trap enable feature-name efm

display snmp-agent trap feature-nameefm all

ENTITYMIB

snmp-agent trap enable feature-name entitymib

display snmp-agent trap feature-nameentitymib all

ENTITYTRAP

snmp-agent trap enable feature-name entitytrap

display snmp-agent trap feature-nameentitytrap all



8588



FeatureName



EOAM-1AG

snmp-agent trap enable feature-name eoam-1ag

display snmp-agent trap feature-nameeoam-1ag all

Eoam-Y1731

snmp-agent trap enable feature-name eoam-y1731

display snmp-agent trap feature-nameeoam-y1731 all

ERPS snmp-agent trap enable feature-name erps

display snmp-agent trap feature-nameerps all

ERROR-DOWN

snmp-agent trap enable feature-name error-down

display snmp-agent trap feature-nameerror-down all

ETRUNK snmp-agent trap enable feature-name etrunk

display snmp-agent trap feature-nameetrunk all

FM snmp-agent trap enable feature-name fm

display snmp-agent trap feature-namefm all

Ftp_Server

snmp-agent trap enable feature-name ftp_server

display snmp-agent trap feature-nameftp_server all

GTL snmp-agent trap enable feature-name gtl

display snmp-agent trap feature-namegtl all

HGMP snmp-agent trap enable feature-name hgmp

display snmp-agent trap feature-namehgmp all

IFNET snmp-agent trap enable feature-name ifnet

display snmp-agent trap feature-nameifnet all

IFPDT snmp-agent trap enable feature-name ifpdt

display snmp-agent trap feature-nameifpdt all

INFO snmp-agent trap enable feature-name info

display snmp-agent trap feature-nameinfo all

IP snmp-agent trap enable feature-name ip

display snmp-agent trap feature-nameip all

IPFPM snmp-agent trap enable feature-name ipfpm

display snmp-agent trap feature-nameipfpm all

IPLPM snmp-agent trap enable feature-name iplpm

display snmp-agent trap feature-nameiplpm all

IPV6 snmp-agent trap enable feature-name ipv6

display snmp-agent trap feature-nameipv6 all

ISIS snmp-agent trap enable feature-name isis

display snmp-agent trap feature-nameisis all

L2BPTNL

snmp-agent trap enable feature-name l2bptnl

display snmp-agent trap feature-namel2bptnl all



8589



FeatureName



L2IF snmp-agent trap enable feature-name l2if

display snmp-agent trap feature-namel2if all

L2IFPPI snmp-agent trap enable feature-name l2ifppi

display snmp-agent trap feature-namel2ifppi all



L3MB snmp-agent trap enable feature-name l3mb

display snmp-agent trap feature-namel3mb all



LACP snmp-agent trap enable feature-name lacp

display snmp-agent trap feature-namelacp all

LBDT snmp-agent trap enable feature-name lbdt

display snmp-agent trap feature-namelbdt all

LDP snmp-agent trap enable feature-name ldp

display snmp-agent trap feature-nameldp all

LINE snmp-agent trap enable feature-name line

display snmp-agent trap feature-nameline all

LLDPTRAP

snmp-agent trap enable feature-name lldptrap

display snmp-agent trap feature-namelldptrap all

MAD snmp-agent trap enable feature-name mad

display snmp-agent trap feature-namemad all

MCAST snmp-agent trap enable feature-name mcast

display snmp-agent trap feature-namemcast all

Mid_Eapol

snmp-agent trap enable feature-name mid_eapol

display snmp-agent trap feature-namemid_eapol all

Mid_Web snmp-agent trap enable feature-name mid_web

display snmp-agent trap feature-namemid_web all

MPLS snmp-agent trap enable feature-name mpls

display snmp-agent trap feature-namempls all

Mpls_Lspm

snmp-agent trap enable feature-name mpls_lspm

display snmp-agent trap feature-namempls_lspm all

Mpls_Rsvp

snmp-agent trap enable feature-name mpls_rsvp

display snmp-agent trap feature-namempls_rsvp all

MSTP snmp-agent trap enable feature-name mstp

display snmp-agent trap feature-namemstp all



8590



FeatureName



OSPF snmp-agent trap enable feature-name ospf

display snmp-agent trap feature-nameospf all

OSPFV3 snmp-agent trap enable feature-name ospfv3

display snmp-agent trap feature-nameospfv3 all

PM snmp-agent trap enable feature-name pm

display snmp-agent trap feature-namepm all

POETRAP

snmp-agent trap enable feature-name poetrap

display snmp-agent trap feature-namepoetrap all

RADIUS snmp-agent trap enable feature-name radius

display snmp-agent trap feature-nameradius all

RIP snmp-agent trap enable feature-name rip

display snmp-agent trap feature-namerip all

RM snmp-agent trap enable feature-name rm

display snmp-agent trap feature-namerm all

RMON snmp-agent trap enable feature-name rmon

display snmp-agent trap feature-namermon all

RRPP snmp-agent trap enable feature-name rrpp

display snmp-agent trap feature-namerrpp all

SECURITYTRAP

snmp-agent trap enable feature-name securitytrap

display snmp-agent trap feature-namesecuritytrap all

SINDEX snmp-agent trap enable feature-name sindex

display snmp-agent trap feature-namesindex all

SNMP snmp-agent trap enable feature-name snmp

display snmp-agent trap feature-namesnmp all

SPMTRAP

snmp-agent trap enable feature-name spmtrap

display snmp-agent trap feature-namespmtrap all

SRMTRAP

snmp-agent trap enable feature-name srmtrap

display snmp-agent trap feature-namesrmtrap all

STACK snmp-agent trap enable feature-name stack

display snmp-agent trap feature-namestack all

SWITHSRVRES

snmp-agent trap enable feature-name swithsrvres

display snmp-agent trap feature-nameswithsrvres all

SYSTEM snmp-agent trap enable feature-name system

display snmp-agent trap feature-namesystem all

TCP snmp-agent trap enable feature-name tcp

display snmp-agent trap feature-nametcp all



8591



FeatureName



TRUNK snmp-agent trap enable feature-name trunk

display snmp-agent trap feature-nametrunk all

Uni-Topomng

snmp-agent trap enable feature-name uni-topomng

display snmp-agent trap feature-nameuni-topomng all

Uni-Tplm snmp-agent trap enable feature-name uni-tplm

display snmp-agent trap feature-nameuni-tplm all

Uni-Vermng

snmp-agent trap enable feature-name uni-vermng

display snmp-agent trap feature-nameuni-vermng all

UNIMBRTRAP

snmp-agent trap enable feature-name unimbrtrap

display snmp-agent trap feature-nameunimbrtrap all

USBLOADTRAP

snmp-agent trap enable feature-name usbloadtrap

display snmp-agent trap feature-nameusbloadtrap all

VBST snmp-agent trap enable feature-name vbst

display snmp-agent trap feature-namevbst all

VCMP snmp-agent trap enable feature-name vcmp

display snmp-agent trap feature-namevcmp all

VFS snmp-agent trap enable feature-name vfs

display snmp-agent trap feature-namevfs all

VPLSOAM

snmp-agent trap enable feature-name vplsoam

display snmp-agent trap feature-namevplsoam all

VRRP snmp-agent trap enable feature-name vrrp

display snmp-agent trap feature-namevrrp all

WLAN snmp-agent trap enable feature-name wlan

display snmp-agent trap feature-namewlan all

Example Display the status of the ARP alarms

ltHUAWEIgt display snmp-agent trap feature-name arp all------------------------------------------------------------------------------ Feature name ARP Trap number 4 ------------------------------------------------------------------------------ Trap name Default switch status Current switch status hwEthernetARPSpeedLimitAlarm on on hwEthernetARPThresholdExceedAlarm on on hwEthernetARPThresholdResumeAlarm on on hwEthernetARPIPConflictEvent on on



8592



Table 16-16 Description of the display snmp-agent trap feature-name all command output

Item Description

Feature name Name of the feature that generates alarms

Trap number Number of alarms generated by this feature

Trap name Name of the alarm

Default switch status Status of the default trap switchl on The trap function is enabledl off The trap function is disabled

Current switch status Status of the current trap switchl on The trap function is enabledl off The trap function is disabledThis status can be configured using the snmp-agent trap enable feature-name command

Related Topics16150 snmp-agent trap enable feature-name


FunctionThe display snmp-agent trap feature-name snmp all command displays whether all SNMPtraps are enabled

Formatdisplay snmp-agent trap feature-name snmp all

ParametersNone

ViewsAll views


Usage GuidelinesYou can run the display snmp-agent trap feature-name snmp all command to check statusof all SNMP traps This status can be configured using the snmp-agent trap enable feature-name snmp command



8593



Example View whether all SNMP traps are enabled

ltHUAWEIgtdisplay snmp-agent trap feature-name snmp all------------------------------------------------------------------------------ Feature name SNMP Trap number 5 ------------------------------------------------------------------------------ Trap name Default switch status Current switch status coldStart on on warmStart on on authenticationFailure off off hwSNMPLockThreshold on on hwSNMPLockThresholdResume on on

Table 16-17 Description of the display snmp-agent trap feature-name snmp all commandoutput

Item Description

Feature name Name of the module where the trap is generated


Trap name Name of trap includingl coldStart This trap is generated when the device is

powered off and restartedl warmStart This trap is generated when the status of

SNMP agent is changed from disable to enablel authenticationFailure This trap is generated when a user

uses an incorrect community name and is unable to login to the device

l hwSNMPLockThreshold This trap is generated whenthe number of users who were locked due to anauthentication failure reached the upper threshold

l hwSNMPLockThresholdResume This trap is generatedwhen the number of users who were locked due to anauthentication failure fell below the lower threshold

Default switch status Default status of a trapl on The trap function is enabledl off The trap function is disabled

Current switch status Current status of a trapl on The trap function is enabledl off The trap function is disabledThis status can be configured using the snmp-agent trapenable feature-name snmp command

Related Topics16151 snmp-agent trap enable feature-name snmp



8594




Function

The display snmp-agent usm-user command displays information about an SNMPv3 user

Format

display snmp-agent usm-user [ engineid engineid | group group-name | username user-name ]

Parameters


engineid engineid Displays information about an SNMPv3 user with a specifiedengine ID

This parameter is specified using the snmp-agent local-engineid command

-

group group-name Displays the SNMPv3 user belonging to a specified group

This parameter is specified using the snmp-agent groupcommand

-

username user-name

Displays information about a specified SNMPv3 user

This parameter is specified using the snmp-agent usm-usercommand

-

Views

All views

Default Level

3 Management level

Usage Guidelines

Usage Scenario

You can run the display snmp-agent usm-user command to display the SNMPv3 userinformation configured through the snmp-agent usm-user command The SNMPv3 user hererefers to the remote user that carries out SNMPv3 management

The displayed information about an SNMPv3 user includesl User namel Local engine ID of the user The SNMPv3 engine ID uniquely identifies an SNMPv3

agent in a management domain The SNMPv3 engine ID is an important component of



8595



the SNMPv3 agent It schedules and processes SNMPv3 messages and implementssecurity authentication and access control

Precautions

The display snmp-agent usm-user command is applicable only to SNMPv3 users

Example

Display information about all current SNMPv3 users

ltHUAWEIgt display snmp-agent usm-user User name myuser Engine ID 800007DB03360102101100 active Authentication Protocol sha Privacy Protocol aes256 Group name mygroup

Table 16-18 Description of the display snmp-agent usm-user command output

Item Description

User name A string used to identify an SNMPv3 user

Engine ID Engine ID of an SNMPv3-enabled deviceThis parameter is specified using the snmp-agent local-engineid command

active Status of an SNMPv3 user

Authentication Protocol Type of the authentication protocol

Privacy Protocol Type of the privacy protocol

Group name Name of the SNMPv3 group

Related Topics16126 snmp-agent group16131 snmp-agent local-engineid16159 snmp-agent usm-user


Function

The enable snmp trap updown command enables an interface to send a trap to the NMSwhen the protocol status of the interface changes

The undo enable snmp trap updown command disables an interface from sending a trap tothe NMS when the protocol status of the interface changes

By default an interface sends a Trap message to the NMS when the protocol status of theinterface changes



8596



Format

enable snmp trap updown

undo enable snmp trap updown

Parameters

None

Views

Interface view

Default Level


Usage Guidelines

Usage Scenario

The enable snmp trap updown command is used to enable an interface to send a Trapmessage to the NMS when the protocol status of the interface changes which helps the NMSmonitor the interface status in real time

Precautions

By default the function of sending a Trap message to the NMS when the protocol status ofthe interface changes is enabled If an interface alternates between Up and Down it willfrequently send Trap messages to the NMS causing the NMS to be busy processing theseTrap messages In this case you can run the undo enable snmp trap updown command todisable the interface from sending trap messages to the NMS

Example

Disable an interface from sending a trap to the NMS when the protocol status of theinterface changesltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] undo enable snmp trap updown


Function

The reset snmp-agent statistics mib command clears statistics about the NMSs operationson MIB objects

NOTE




8597



Format

reset snmp-agent statistics mib [ address ipv4-address | ipv6 ipv6-address | vpn-instancevpn-instance-name address ipv4-address ]

Parameters







Views

User view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

An NMS performs operations on MIB objects to manage devices You can run the displaysnmp-agent statistics mib command to check the operation statistics


If no NMS is specified the reset snmp-agent statistics mib command clears statistics aboutthe operations performed by all NMSs (that is IPv4+VPN IPv6+VPN IPv4 and IPv6NMSs) on MIB objects

Precautions

Operation statistics cannot be restored after they are cleared Exercise caution when runningthe reset snmp-agent statistics mib command

Example

Clear all statistics about the NMSs operations on MIB objects

ltHUAWEIgt reset snmp-agent statistics mib

Related Topics16112 display snmp-agent statistics mib16143 snmp-agent statistics mib disable



8598



16121 snmp-agent

FunctionThe snmp-agent command enables the SNMP agent function

The undo snmp-agent command disables the SNMP agent function

By default the SNMP agent function is disabled

Formatsnmp-agent

undo snmp-agent

ParametersNone

ViewsSystem view



Before configuring SNMP you need to enable the SNMP agent function

By executing the snmp-agent command with any parameter enables the SNMP agentfunction For example if you execute the snmp-agent community command the communityname gets created and also SNMP agent function is enabled

Precautions

After the snmp-agent command is executed both the IPv4 and IPv6 services are enabled forthe SNMP agent By default the switch listens on the IP address 0000 that is all IPaddresses This default setting is a threat to data confidentiality You are advised to run thesnmp-agent protocol source-interface interface-type interface-number command to specifythe source interface that receives and responds to SNMP requests from the NMS

Example Enable the SNMP agent function

ltHUAWEIgt system-view[HUAWEI] snmp-agent

Disable the SNMP agent function

ltHUAWEIgt system-view[HUAWEI] undo snmp-agent



8599




Function

The snmp-agent acl command configures an SNMP ACL

The undo snmp-agent acl command deletes the configured SNMP ACL

By default no SNMP ACL is configured

Format

snmp-agent acl acl-number | acl-name

undo snmp-agent acl

Parameters


acl-number Specifies an ACL number The value is an integer ranging from 2000 to3999

acl-name Specifies the name of abasic Named ACL

The value is a string of 1 to 64 case-sensitivecharacters without spaces The value must startwith a letter (a to z or A to Z case sensitive)

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

When using the NMS to manage devices you can run the snmp-agent acl command toconfigure an SNMP ACL on the devices and restrict the NMSs access to the devices toenhance network security

Precautions

The SNMP ACLs take precedence over ACLs based on SNMP community names SNMPgroups and SNMP users

Example

Configure SNMP ACL 2000 to allow NM stations that match rules defined in ACL 2000 toaccess the device using SNMP

ltHUAWEIgt system-view[HUAWEI] acl 2000



8600



[HUAWEI-basic-2000] rule permit source 1921681010 0[HUAWEI-basic-2000] quit[HUAWEI] snmp-agent acl 2000


FunctionThe snmp-agent community command configures the SNMPv1 or SNMPv2c read-writecommunity name

The undo snmp-agent community command is used to delete the configuration of thecommunity name

By default the community name is not configured

Formatsnmp-agent community read | write community-name | cipher community-name [ mib-view view-name | acl acl-number | alias alias-name ]

undo snmp-agent community community-name

undo snmp-agent community read | write [ cipher ] community-name

Parameters


read Indicates that thecommunity with aspecified name has theread-only rights in thespecified view

-

write Indicates that thecommunity with aspecified name has theread-write rights in thespecified view

-



8601




community-name

Specifies the name of acommunity

The community name isdisplayed in cipher text inthe configuration file






If the complexity check of a community name isdisabled by using the snmp-agent communitycomplexity-check disable command the length ofcommunity-name ranges from 1 to 32



8602




ciphercommunity-name

Specifies the communityname in plain text or incipher text

The value is a string of 8 to 32 32 44 56 80or 88 case-sensitive characters without spacesWhen double quotation marks are used aroundthe string spaces are allowed in the stringl When the community name is a string of 8

to 32 characters the string is processed asplain text by default and will be encrypted

l When the community name is a string of32 44 56 80 or 88 characters the string isprocessed as cipher text by default and thesystem will determine whether the stringcan be parsed





If the complexity check of a community name isdisabled by using the snmp-agent communitycomplexity-check disable command the length ofcipher community-name is 80 or ranges from 1 to32

mib-viewview-name Specifies a MIB view that

the community name canaccess

It is a string of 1 to 32 case-sensitive characterswithout spaces When double quotation marksare used around the string spaces are allowedin the string

acl acl-number

Specifies the ACLcorresponding to thecommunity nameNOTE

Currently SNMP supportsonly basic ACLs

The ACL configured by theacl acl-number parametertakes effect on both IPv4 andIPv6 networks




8603




alias alias-name

Specifies the alias namefor a community

The alias names ofcommunities are stored inplain text in theconfiguration file


Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

When running the snmp-agent community command you can select parameters based onthe networking requirementsl To grant the NMS read-only permission in the specified view configure readl To grant the NMS read-write permission in the specified view configure writel To allow specified NMSs using this community name have the rights of ViewDefault

omit mib-view view-namel To allow all NMSs using this community name to manage specified objects on a

managed device omit acl acl-numberl To allow specified NMSs using this community name to manage specified objects on a

managed device configure mib-view and acll The community name will be saved in encrypted format in the configuration file To

facilitate identification of community names specify the alias alias-name parameter toset the alias names for the communities The alias names are stored in plain text in theconfiguration file

NOTE

When both community name and ACL are configured the NMS verifies the community name beforeaccessing the device and then checks the ACL rules If the community name does not exist the pacektis discarded and a log indicating that the community name is wrong is printed The ACL rule is notchecked That is the ACL rule is checked only when the community name exists

You can run the display snmp-agent community command to view the current communityname

The device supports a maximum of 25 community names

Precautions

If you specify the parameter mib-view or acl when running the snmp-agent communitycommand configure the MIB view and ACL rule If the default MIB view is deleted the



8604



NMS using this community name cannot communicate with managed devices To continue touse this community name specify an existing MIB view


Example

Set the name of a community to comaccess1 and configure the read-only rights for thecommunity

ltHUAWEIgt system-view[HUAWEI] snmp-agent community read comaccess1

Set the name of a community to comaccess2 and configure the read-write rights for thecommunity

ltHUAWEIgt system-view[HUAWEI] snmp-agent community write comaccess2

Related Topics1613 display snmp-agent community


Function

The snmp-agent community complexity-check disable command disables the complexitycheck of a community name

The undo snmp-agent community complexity-check disable command enables thecomplexity check of a community name

By default the complexity check is enabled for a community name

Format

snmp-agent community complexity-check disable

undo snmp-agent community complexity-check disable

Parameters

None

Views

System view

Default Level

3 Management level



8605



Usage Guidelines

The device has the following requirements for community name complexity

l By default the minimum length of a community name is eight characters The setpassword min-length command determines the minimum length of a community name

l The community name includes at least two kinds of characters uppercase letterslowercase letters numbers and special characters (excluding )

To ensure the security of SNMP community names enable the complexity check forcommunity names If a community name fails the complexity check the community namecannot be configured The complexity check can also be disabled for a community nameHowever disabling the complexity check will weaken the security

If complexity check of community names is not enabled the system does not check thecomplexity of community names when they are configured However if a community name issimple and does not meet complexity requirements it is prone to be attacked and cracked byunauthorized users which affects device security Therefore enabling complexity check ofcommunity names is recommended

Example

Disable the complexity check for community names

ltHUAWEIgt system-view[HUAWEI] snmp-agent community complexity-check disable

Related Topics16123 snmp-agent community2521 set password min-length


Function

The snmp-agent extend error-code enable command enables the function of sendingextended error codes to the NMS on the device

The undo snmp-agent extend error-code enable command disables the function of sendingextended error codes to the NMS

By default the function of sending extended error codes to the NMS is disabled

Format

snmp-agent extend error-code enable

undo snmp-agent extend error-code enable

Parameters

None



8606



Views

System view

Default Level

3 Management level

Usage Guidelines

If the NMS and managed device are Huawei devices error codes are extended and morescenarios are defined after the function of sending extended error codes is enabled As aresult users are enabled to locate and troubleshoot faults quickly and accurately

Support of the MIB for the extended error code

l For the MIB that supports the extended error code you can enable the SNMP extendederror code function and use Huawei NMS to provide the NMS with various error codes

l For the MIB that does not support the extended error code after the SNMP extendederror code function is enabled NMS of either Huawei or other vendors can obtain onlythe standard error code

Example

Enable the function of sending extended error codes to the NMS on the device

ltHUAWEIgt system-view[HUAWEI] snmp-agent extend error-code enableInfo Succeeded in enabling the error-code status

Related Topics1614 display snmp-agent extend error-code status


Function

The snmp-agent group command creates an SNMP group by mapping SNMP users toSNMP views

The undo snmp-agent group command deletes a specified SNMP user group

By default no SNMP group is configured

Format

snmp-agent group v3 group-name authentication | privacy | noauthentication [ read-view read-view | write-view write-view | notify-view notify-view ] [ acl acl-number | acl-name ]

undo snmp-agent group v3 group-name authentication | privacy | noauthentication



8607



Parameters


v3 Indicates that the SNMP groupuses the security mode inSNMPv3

-

group-name Specifies the name of anSNMP group


authentication |privacy |noauthentication

Indicates the security level ofthe SNMP groupl authentication

authenticates SNMPmessages withoutencryption

l privacy authenticates andencrypts SNMP messages

l noauthentication notauthenticate or encryptSNMP messages

To ensure security it isrecommended that you set thesecurity level of the SNMP group toprivacy

read-view read-view Specifies a read-only view The value is a string of 1 to 32 case-sensitive characters spaces notsupported When double quotationmarks are used around the stringspaces are allowed in the string

read-view specified by the snmp-agent mib-view command

write-view write-view

Specifies a read-write view The value is a string of 1 to 32 case-sensitive characters spaces notsupported When double quotationmarks are used around the stringspaces are allowed in the string

write-view is specified by thesnmp-agent mib-view command

notify-view notify-view

Specifies a notify view The value is a string of 1 to 32 case-sensitive characters spaces notsupported When double quotationmarks are used around the stringspaces are allowed in the string

notify-view is specified by thesnmp-agent mib-view command



8608




acl acl-number |acl-name

NOTE

The specified ACL takes effectfor both IPv4 and IPv6 networks

Specifies the ACL

l acl-number specifies thenumber of the ACL

l acl-name specifies thename of an ACL

l The value of acl-number is aninteger that ranges from 2000 to3999

l The value of acl-name is a stringof 1 to 32 case-sensitivecharacters without spaces Thevalue must start with a letter (ato z or A to Z case sensitive)and can contain numbershyphens (-) or underlines (_)

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario


By adopting the user-based security model SNMPv3 eradicates the security defects inSNMPv1 and SNMPv2c and provides two services authentication and privacy The SNMPgroup name and security name determine an SNMP group SNMPv3 defines the followingsecurity levels

l noAuthNoPrivl AuthNoPrivl AuthPriv

NOTE

The security authentication level noAuthPriv does not exist This is because the generation of a key isbased on the authentication information and product information

The snmp-agent group command can be used to configure the following

l Authenticationl Privacyl Access rights for users of SNMP groupl Bind the SNMP group to a MIB view

Parameters are selected based on the following rulesl To enhance security configure the parameter authentication or privacy



8609



ndash If the noauthentication parameter is set SNMP messages are not authenticated orencrypted This applies to the environment that is secure and has a fixedadministrator

ndash To authenticate SNMP messages without encryption configure the parameterauthentication This mode is applicable to secure networks managed by manyadministrators who may frequently perform operations on the same deviceAuthentication allows only the administrators with permission to access the device

ndash To authenticate and encrypt SNMP messages configure the parameter privacyThis mode is applicable to insecure networks managed by many administrators whomay frequently perform operations on the same device Authentication andencryption allow only specified administrators to access the device and encryptsdata before the transmission This prevents data from being tampered or leaked

l To grant the NMS read-only permission in the specified view configure read-view Togrant the NMS read-write permission in the specified view configure write-view

To filter unnecessary alarms configure notify-view After this parameter is configuredonly alarms generated on MIB objects specified by notify-view are delivered to theNMS

By default the read-only view of an SNMP group is the ViewDefault view and thenames of the read-write view and inform view are not specified

l To allow specified NMSs in the same SNMPv3 group to access the device configure acl

The device supports a maximum of 20 user gruop


When you run the undo snmp-agent group command to delete an SNMP user group youdelete all SNMP users in the SNMP user group

Precautions

To receive trap messages specified in notify-view you need to ensure the target host forreceiving SNMP traps is specified through the snmp-agent target-host trap command

To configure security levels of a user and an alarm host after the security level for an SNMPgroup is configured the following two requirements must be met

l The security level of a user must not be lower than that of an SNMP group Otherwisecommunication will fail

l The alarm host security level must not be lower than the security level of the SNMPgroup Otherwise alarms will fail to be sent

If non authentication and non encryption or authentication and non encryption is configuredfor an SNMPv3 group these modes bring security risks To improve system security deletethe group and create a group with authentication and encryption

Example

Create an SNMPv3 group named Johngroup authenticate and encrypt SNMP messagesand configure the view that the SNMPv3 group can read only to public

ltHUAWEIgt system-view[HUAWEI] snmp-agent[HUAWEI] snmp-agent mib-view excluded public 136121[HUAWEI] snmp-agent group v3 Johngroup privacy read-view public



8610



Create an SNMPv3 group named Johngroup authenticate and encrypt SNMP messagesand configure the view that the SNMPv3 group write-view to private

ltHUAWEIgt system-view[HUAWEI] snmp-agent[HUAWEI] snmp-agent mib-view included private 136121[HUAWEI] snmp-agent group v3 Johngroup privacy write-view private

Related Topics16132 snmp-agent mib-view16159 snmp-agent usm-user1615 display snmp-agent group


Function

The snmp-agent heartbeat enable command enables the device to send heartbeat traps to theNMS

The undo snmp-agent heartbeat enable command disables the device from sendingheartbeat traps to the NMS

By default the device does not send heartbeat traps to the NMS

Format

snmp-agent heartbeat enable

undo snmp-agent heartbeat enable

Parameters

None

Views

System view

Default Level


Usage Guidelines

When the NMS cannot initiatively obtain the status of the device run the snmp-agentheartbeat enable command to enable the device to send heartbeat traps to the NMS Thedevice then periodically sends heartbeat trap messages to the NMS to notify the NMS of itsstatus

Example

Enable the device to send heartbeat traps to the NMS



8611



ltHUAWEIgt system-view[HUAWEI] snmp-agent heartbeat enableInfo Snmp-agent heartbeat trap has been enabled successfully

Related Topics1616 display snmp-agent heartbeat configuration


Function

The snmp-agent heartbeat interval command sets the interval at which the device sendsheartbeat trap messages to the NMS

The undo snmp-agent heartbeat interval command restores the default interval

By default the device sends heartbeat trap messages to the NMS at an interval of 60 seconds

Format

snmp-agent heartbeat interval interval

undo snmp-agent heartbeat interval

Parameters


interval Specifies the interval at which the devicesends heartbeat trap messages to theNMS


Views

System view

Default Level


Usage Guidelines

Usage Scenario

After enabling the device to send heartbeat trap messages to the NMS you can use the snmp-agent heartbeat interval command to set the interval at which heartbeat trap messages aresent On a stable network increase the interval to reduce the bandwidth consumed forperiodic transmission of heartbeat trap messages

Prerequisites

The device has been enabled to send heartbeat trap messages to the NMS using the snmp-agent heartbeat enable command



8612



Example

Configure the device to send heartbeat trap message to the NMS at an interval of 180seconds

ltHUAWEIgt system-view[HUAWEI] snmp-agent heartbeat interval 180Info Snmp-agent heartbeat trap sending interval has been changed to 180s

Related Topics1616 display snmp-agent heartbeat configuration16127 snmp-agent heartbeat enable


Function

The snmp-agent inform command sets global parameters of informs including the timeoutperiod for waiting for inform ACK messages number of times to retransmit informs andmaximum number of informs to be confirmed in the inform buffer

The undo snmp-agent inform command restores the default setting

By default the timeout waiting period for inform ACK messages is 15 seconds the number oftimes to retransmit informs is 3 and the maximum number of informs in the inform buffer is39

Format

snmp-agent inform timeout seconds | resend-times times | pending number

undo snmp-agent inform timeout | resend-times | pending

Parameters


timeout seconds Specifies the timeout period forwaiting for inform ACK messagesfrom the NMS

The value is an integer rangingfrom 1 to 1800 in seconds Thedefault value is 15 seconds

resend-timestimes

Specifies the times to retransmitinforms in the case that no informACK message is returned from theNMS

The value is an integer rangingfrom 0 to 10 The default value is3

pending number Specifies the maximum number ofinforms to be confirmed in theinform buffer

The value is an integer rangingfrom 1 to 2048 The default valueis 39

Views

System view



8613



Default Level

3 Management level

Usage Guidelines

Usage Scenario

After sending an inform the SNMP agent waits for an inform ACK message from the NMSYou can run the snmp-agent inform command to set parameters timeout resend-times andpending of the inform

These three parameters mutually affect each other For example if the timeout period forwaiting for inform ACK messages prolongs or the times to retransmit informs increase butthe maximum number of informs to be confirmed is not changed the number of informs to beconfirmed is increased causing the inform buffer to be quickly filled up

Once the inform buffer is filled up the earliest inform in the inform buffer is deleted eachtime a new inform enters the queue The deleted informs are not retransmitted to the NMS Toavoid this problem you can increase the maximum number of informs to be confirmed in theinform buffer

You can configure the snmp-agent inform command to contain the parameter timeoutresend-times or pending according to the network condition

l When a large number of informs are dropped on the network you can run the snmp-agent inform pending number command to increase the inform buffer

l When the transmission speed on the network is low you can increase the timeout periodIncreasing the timeout period will increase the waiting time of informs in the informbuffer You can also run the snmp-agent inform timeout seconds | pending number command to increase the inform

l When the transmission speed on the network is high you can run the snmp-agentinform timeout seconds command to reduce the timeout period

l When informs are transmitted on an unreliable network you can increase theretransmission times In this case the informs in the inform buffer need to wait for alonger time to be confirmed You can run the snmp-agent inform resend-times times |pending number command to increase the inform buffer

Prerequisites


Precautions

You need to configure only parameters for sending informs using the snmp-agent informcommand you do not need to configure parameters for sending traps

You must set the parameters timeout resend-times and pending according to the networkcondition Otherwise the SNMP working efficiency is greatly affected

Example

Set the times to retransmit an inform to 5 and the maximum number of informs waiting tobe confirmed in the inform buffer to 100



8614



ltHUAWEIgt system-view[HUAWEI] snmp-agent inform resend-times 5 pending 100

Related Topics1617 display snmp-agent inform16130 snmp-agent inform address16149 snmp-agent trap enable


FunctionThe snmp-agent inform address command sets parameters for sending informs includingthe timeout period for waiting for inform ACK messages from the NMS and times toretransmit an inform

The undo snmp-agent inform address command restores the default setting for a particularinform host

By default the timeout waiting period for inform ACK messages is 15 seconds and thenumber of times to retransmit informs is 3

Format

snmp-agent inform timeout seconds | resend-times times address udp-domain ip-address [ vpn-instance vpn-instance-name ] params securityname security-name | ciphersecurity-name

undo snmp-agent inform timeout [ seconds ] | resend-times [ times ] address udp-domain ip-address [ vpn-instance vpn-instance-name ] params securityname security-name | cipher security-name

Parameters


timeout seconds Specifies the timeout period forwaiting for inform ACKmessages from the NMS

The value is an integer ranging from 1to 1800 in seconds The default valueis 15 which is equal to the globaltimeout period configured using thesnmp-agent inform command

resend-timestimes

Specifies the number of timesthat informs are retransmittedwhen no inform ACK messageis returned from the NMS

The value is an integer ranging from 0to 10 The default value is 3 which isequal to the global retransmissiontimes configured using the snmp-agentinform command



8615




address Indicates the address of thetarget host for receiving SNMPtrapsNOTE




Specifies the IP address of aspecified target host with thetransmission domain based onUDP




The value is a string of 1 to 31 case-sensitive characters spaces notsupported When double quotationmarks are used around the stringspaces are allowed in the string Theparameter vpn-instance is optional Ona VPN network you need to use theVPN instance specified by vpn-instance IP address and securityname to identify a target host

params Indicates information about thetarget host that generates SNMPnotifications

-


Displays the name of the targethost for receiving informs onthe NMS

For SNMPv3 securitynamemust be configured as the username securityname configuredon the host needs to be the sameas that configured on the NMSor the NMS cannot receive thetrap messages sent from thehost

For SNMPv1 and SNMPv2cthe NMS can receive trapmessages from all hosts withouthaving securitynameconfigured securityname isused to distinguish multiplehosts that generate trapmessages




8616









ViewsSystem view



For example if the snmp-agent inform address command is executed on the target host afterthe global inform parameters are configured only the parameter configured using the snmp-agent inform address command takes effect

You can use both the snmp-agent inform address command and the snmp-agent informcommand to set parameters according to the network condition

l When a large number of Inform messages are dropped on the network you arerecommended to run the snmp-agent inform pending number command to lengthen thetrap queue and then the snmp-agent inform address command to specify the destinationIP address and name of the target host

l When the transmission speed on the network is low you are recommended to increasethe timeout period Increasing the timeout period will surely increase the waiting time ofinforms in the trap queue for confirmation In this case you are also recommended to runthe snmp-agent inform timeout seconds | pending number command to lengthenthe trap queue and then the snmp-agent inform address command to specify thedestination address and the displayed user name

l When the transmission speed on the network is high you are recommended to run thesnmp-agent inform timeout seconds address udp-domain ip-address paramssecurityname security-name command to reduce the timeout period

l When informs are transmitted on an unreliable network you are recommended toincrease the retransmission times In this case the informs in the trap queue need to wait



8617



for a longer time to be confirmed This requires you to run the snmp-agent inform resend-times times | pending number command to lengthen the trap queue andthen the snmp-agent inform address command to specify the destination address andthe displayed user name

Prerequisites


Precautions

You must set the parameters timeout and resend-times according to the network conditionOtherwise the SNMP working efficiency is greatly affected

NOTE

You need to configure only parameters for sending informs using the snmp-agent inform addresscommand you do not need to configure parameters for sending traps

The priority set for the timeout and resend-times parameters using the snmp-agent informaddress command is higher than that set for the timeout and resend-times parameters usingthe snmp-agent inform command If both parameters in Inform mode and parameters usingthe snmp-agent inform address command are configured parameters using the snmp-agentinform address command take effect for a specified destination host


Example

Set the times to retransmit an inform to the target host (with the IP address of 10111 andthe security name of ABC) to 10

ltHUAWEIgt system-view[HUAWEI] snmp-agent inform resend-times 10 address udp-domain 10111 params securityname ABC

Related Topics1617 display snmp-agent inform16129 snmp-agent inform


Function

The snmp-agent local-engineid command sets an engine ID for the local SNMP agent

The undo snmp-agent local-engineid command restores the engine ID of the local SNMPagent to the default value

By default the device uses an internal algorithm to automatically generate an engine ID for adevice The engine ID consists of the enterprise number and the device information



8618



Format

snmp-agent local-engineid engineid

undo snmp-agent local-engineid

Parameters


engineid Specifies the engine ID of thelocal SNMP agent

The value is string of 10 to 64 hexadecimaldigits It cannot be all 0s or all Fs

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

You can run the snmp-agent local-engineid command to set an engine ID for the localSNMP agent for identification

The SNMP engine ID uniquely identifies an SNMP agent in a management domain TheSNMP engine ID is an important component of the SNMP agent It schedules and processesSNMP messages and implements security authentication and access control You can use thedisplay snmp-agent local-engineid command to check the engine ID of the local SNMPentity

When setting an engine ID you need to comply with the following rules

l The length of the octet strings varies The first four octets are set to the binary equivalentof the agent which is SNMP management private enterprise number and is assigned bythe Internet Assigned Numbers Authority (IANA)The engine ID of Huawei devices is2011 in decimal notation The first digit is in binary format and has a fixed value 1Therefore the engine ID in hexadecimal format is 800007DB

l The device information can be configured manually It is recommended that the IPaddress or MAC address of the device be used as the device information to uniquelyidentify the device

Precautions

If the local engine ID is set or changed the existing SNMPv3 user with this engine ID isdeleted If the original engine ID is restored the corresponding user configuration is restored

After the SNMP agent function is enabled using the snmp-agent command the systemautomatically adopts the default engine ID for the local SNMP agent

The password summary used by SNMPv3 users is calculated using MD5 or SHA based on theuser password and engine ID of the local SNMP agent If the engine ID of the local SNMP



8619



agent is changed the generated password summary becomes invalid As a result a newpassword summary needs to be generated for SNMPv3 users

Example

Set the engine ID of the local SNMP agent to 800007DB03360102101100

ltHUAWEIgt system-view[HUAWEI] snmp-agent local-engineid 800007DB03360102101100

Related Topics1612 display snmp-agent16159 snmp-agent usm-user


Function

The snmp-agent mib-view command creates or updates a MIB view

The undo snmp-agent mib-view command cancels the configuration of the current MIBview

By default the MIB view name is ViewDefault and the MIB subtree includes all internetsubnodes except for snmpVacmMIB snmpUsmMIB and snmpCommunityMIB

Format

snmp-agent mib-view excluded | included view-name oid-tree

undo snmp-agent mib-view view-name [ oid-tree ]

undo snmp-agent mib-view [ excluded | included ] view-name [ oid-tree ]

Parameters


excluded Excludes the MIB subtree -

included Includes the MIB subtree -

view-name Specifies the view name The value is a string of 1 to 32 case-sensitive characters spaces notsupported When double quotation marksare used around the string spaces areallowed in the string

oid-tree Specifies the OID for the MIBsubtree oid-tree can be the OID(such as 14531) or the name(such as system) of the subtree

It is a string of 1 to 255 case-sensitivecharacters without spaces

NOTEIt must be a valid MIB subtree



8620



Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

Most SNMP configuration commands contain the parameter view-name The snmp-agentmib-view command is used to create or update a view You cannot modify or delete thedefault ViewDefault MIB view

In the snmp-agent mib-view command the parameter view-name can be displayed as an OIDor an object name

l Displaying the parameter view-name as an OID snmp-agent mib-view includedmyview 136121

l Displaying the parameter view-name as an object name snmp-agent mib-viewexcluded myview system7

NOTETo uniquely identify object identifiers in SNMP messages SNMP uses a hierarchical naming structureto distinguish object identifiers from each other This is a tree-like structure with the nodes (such as136121) representing object identifiers The MIB is a collection of standard variables on monitorednetwork devices

You can select parameters based on the following rules

l excluded If a few MIB objects on the device or some objects in the current MIB viewdo not or no longer need to be managed by the NM station excluded needs to bespecified in the command to exclude these MIB objects

l included If a few MIB objects on the device or some objects in the current MIB viewneed to be managed by the NM station included needs to be specified in the commandto include these MIB objects

If you forget which information you have configured for a MIB view you can run the displaysnmp-agent mib-view command to check it

Precautions

When you run the snmp-agent mib-view command for multiple times to define the MIBview the new configuration overwrites the original configuration if the values of view-nameand oid-tree are the same the new and original configurations both take effect if the values ofview-name and oid-tree are different The system can store a maximum of 256 MIB viewconfigurations among which there are four default views

If both the include and exclude parameters are configured for MIB objects that have aninclusion relationship whether to include or exclude the lowest MIB object will bedetermined by the parameter configured for the lowest MIB object For example the snmpV2snmpModules and snmpUsmMIB objects are from top down in the MIB table If the excludeparameter is configured for snmpUsmMIB objects and include is configured for snmpV2snmpUsmMIB objects will still be excluded



8621



Example

Create MIB view mib2view that includes all mib-2 objects and the subtree with the OID as136121

ltHUAWEIgt system-view[HUAWEI] snmp-agent mib-view included mib2view 136121

Related Topics1618 display snmp-agent mib-view16123 snmp-agent community16126 snmp-agent group


Function

The snmp-agent notification-log command sets the aging time of trap logs and the maximumnumber of trap logs that can be saved in the trap log buffer

The undo snmp-agent notification-log command restores the default configuration

By default the aging time of trap logs is 24 hours and a maximum of 500 trap logs can besaved in the trap log buffer

Format

snmp-agent notification-log global-ageout ageout | global-limit limit

undo snmp-agent notification-log global-ageout [ ageout ] | global-limit [ limit ]

Parameters


global-ageoutageout

Specifies the aging time oftrap logs

The value can be 0 or an integer thatranges from 12 to 36 in hours Thedefault value is 24 The value 0indicates that trap logs are never agedout

global-limit limit Specifies the maximumnumber of trap logs that canbe saved in the trap log buffer


Views

System view

Default Level

3 Management level



8622



Usage Guidelines

Usage Scenario

If notification logs in the log buffer do not need to be aged you can set the aging time of thesenotification logs to 0

If the number of notification logs saved to the log buffer within the aging time exceeds thelimit new notification logs can still be saved but overwrites the earlier logs in the log buffer

Precautions

If the size of the log buffer is excessively large more network resources are consumed Youare therefore recommended to set the size of the log buffer to a reasonable value

NOTE

Only Inform logs are saved to the log buffer trap logs are not saved to the log buffer

Example

Set the aging time of trap logs to 36 hours

ltHUAWEIgt system-view[HUAWEI] snmp-agent notification-log global-ageout 36

Set the maximum number of trap logs that can be saved in the trap log buffer to 1000

ltHUAWEIgt system-view[HUAWEI] snmp-agent notification-log global-limit 1000

Related Topics1619 display snmp-agent notification-log16134 snmp-agent notification-log enable


Function

The snmp-agent notification-log enable command enables the notification logging function

The undo snmp-agent notification-log enable command disables the notification loggingfunction

By default the notification logging function is disabled

Format

snmp-agent notification-log enable

undo snmp-agent notification-log enable

Parameters

None



8623



Views

System view

Default Level

3 Management level

Usage Guidelines

When the route from a network element to the NMS is unreachable because of a link failurebetween the network element and NMS the network element does not send any SNMPnotifications to the NMS If the notification logging function is enabled the network elementrecords trap logs When the link between the network element and NMS recovers the NMScan obtain the trap logs recorded when the link was faulty

Only informs are recorded in trap logs and traps are not recorded

After the notification logging function is enabled the system records informs in trap logs ineither of the following conditions

l No ACK message is received after an inform in the notification queue is retransmittedthe specified number of times

l Earliest informs are discarded because the number of notifications in the notificationqueue exceeds the limit The system records the discarded informs in trap logs

Example

Enable the notification logging function

ltHUAWEIgt system-view[HUAWEI] snmp-agent notification-log enable



Function

The snmp-agent notify-filter-profile command creates or updates a trap filter profile

The undo snmp-agent notify-filter-profile command deletes a trap filter profile

By default no trap is filtered

Format

snmp-agent notify-filter-profile included | excluded profile-name oid-tree

undo snmp-agent notify-filter-profile [ included | excluded ] profile-name



8624



Parameters


included Includes the specified MIB subtree -

excluded Excludes the specified MIB subtree -

profile-name Specifies the name of a trap filterprofile


oid-tree Specifies the OID for the MIBsubtree oid-tree can be the OID(such as 14531) or the name (suchas system) of the subtree

The value is a string of 1 to 255 case-sensitive characters without spacesNOTE

It must be a valid MIB subtree

ViewsSystem view


Usage GuidelinesTo filter the traps sent to a destination host run the snmp-agent notify-filter-profilecommand to configure a trap filter profile and specify the MIB object to be filtered in theprofile

The snmp-agent notify-filter-profile command creates or updates a trap filter profile Thevalue of oid-tree can be an OID or a subtree name An OID can contain asterisks () aswildcards An asterisk () cannot be placed at the beginning or end of the OID string

NOTEIf no trap filter profile is configured all traps are sent to the destination host

Example Configure a trap filter profile named tmpltHUAWEIgt system-view[HUAWEI] snmp-agent notify-filter-profile included tmp 13614

Related Topics16110 display snmp-agent notify-filter-profile



8625




FunctionThe snmp-agent packet contextengineid-check enable command enables the device tocheck consistency between the contextEngineID on the NMS and the local engine ID

The undo snmp-agent packet contextengineid-check enable command disables the devicefrom checking consistency between the contextEngineID on the NMS and the local engineID

By default the device does not check consistency between the contextEngineID on the NMSand the local engine ID

Formatsnmp-agent packet contextengineid-check enable

undo snmp-agent packet contextengineid-check enable

ParametersNone

ViewsSystem view



If the device does not check consistency between the contextEngineID on the NMS and thelocal engine ID the NMS can connect to the device even if the contextEngineID is differentfrom the local engine ID

To improve system security run the snmp-agent packet contextengineid-check enablecommand to enable the device to check consistency between the contextEngineID on theNMS and the local engine ID


After this function is enabled an NMS cannot connect to the device if the contextEngineIDon the NMS is different from the local engine ID

Precautions

This consistency check function applies only to SNMPv3

Example Enable the consistency check between the contextEngineID and local engine ID



8626



ltHUAWEIgt system-view[HUAWEI] snmp-agent packet contextengineid-check enable


FunctionThe snmp-agent packet max-size command sets the maximum size of an SNMP message

The undo snmp-agent packet max-size command restores the default setting

By default the maximum size of an SNMP message is 12000 bytes

Formatsnmp-agent packet max-size byte-count

undo snmp-agent packet max-size

Parameters


byte-count Specifies the maximum size of anSNMP message that the SNMP agentcan receive and send

The value is an integer that rangesfrom 484 to 17940 in bytes Thedefault value is 12000

ViewsSystem view



You are recommended to run the snmp-agent packet max-size command to set the maximumsize of an SNMP message that the SNMP agent receives or sends according to the networkcondition

By increasing the maximum size of an SNMP message you can prevent the NMS fromobtaining the incomplete information about the device status

By decreasing the maximum size of an SNMP message you can prevent the NMS or devicefrom discarding an SNMP message because its size exceeds the processing capability of theNMS or device

Precautions

You need to increase the size of an SNMP message according to the network conditionOtherwise the transmission efficiency of SNMP messages is affected

You are advised to use the default value



8627



The maximum size set through the snmp-agent packet max-size command takes effect forthe SNMP messages of all SNMP versions

Example

Set the maximum size of an SNMP message that the SNMP agent can receive or send to1042 bytes

ltHUAWEIgt system-view[HUAWEI] snmp-agent packet max-size 1042


Function

The snmp-agent packet-priority command sets the priority of SNMP messages

The undo snmp-agent packet-priority command restores the default priority of SNMPmessages

By default the priority of SNMP messages is 6

Format

snmp-agent packet-priority snmp | trap priority-level

undo snmp-agent packet-priority snmp | trap

Parameters


snmp Sets the priority of common SNMPmessages (excluding trap messages)includingl Get-Response packetsl Set-Response packets

-

trap Sets the priority of SNMP trap messagesincludingl Trap packetsl Inform packets

-

priority-level Specifies the priority of SNMPmessages

The value is an integer that rangesfrom 0 to 7 The default value is6 The value 0 indicates the lowestpriority and the value 7 indicatesthe highest priority

Views

System view



8628



Default Level

3 Management level

Usage Guidelines

This command sets the priority of SNMP messages in transmission The priority determinesthe priority of IP packets in which SNMP messages are encapsulated This command can beused in the following situations

l To prevent traps from being discarded increase the priority of SNMP trap messages sothat traps can be successfully sent to the NMS

l To improve reliability of MIB operations performed on the device by the NMS increasethe priority of common SNMP messages excluding SNMP trap messages

l When the network is severely congested and traps are generated frequently reduce thepriority of all SNMP messages including SNMP trap messages

Example

Set the priority of common SNMP messages to 5ltHUAWEIgt system-view[HUAWEI] snmp-agent packet-priority snmp 5


Function

The snmp-agent protocol get-bulk timeout command configures a get-bulk operationtimeout period

The undo snmp-agent protocol get-bulk timeout command restores the default get-bulkoperation timeout period

The default get-bulk operation timeout period is 2 seconds

Format

snmp-agent protocol get-bulk timeout time

undo snmp-agent protocol get-bulk timeout

Parameters


time Specifies a get-bulkoperation timeout period

The value is an integer ranging from 0 to 600 inseconds

NOTEThe value 0 indicates that a get-bulk operation neverexpires



8629



Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

A get-bulk operation allows an NMS to query information about multiple managed devices ata time equaling multiple get-next operations

If an NMS requests many data through a get-bulk operation a long time is required to obtainthe data You can run the snmp-agent protocol get-bulk timeout command to change theget-bulk operation timeout period

Precautions

You are not advised to change the get-bulk operation timeout period The default get-bulkoperation timeout period is recommended To reconfigure a get-bulk operation timeout periodyou must ensure that the configured period is less than an NMSs timeout period

Example

Set the get-bulk operation timeout period to 10 seconds

ltHUAWEIgt system-view[HUAWEI] snmp-agent protocol get-bulk timeout 10


Function

The snmp-agent protocol server disable command disables the SNMP IPv4 or IPv6listening port

The undo snmp-agent protocol server disable command enables the SNMP IPv4 or IPv6listening port

By default the SNMP IPv4 or IPv6 listening port is disabled

Format

snmp-agent protocol server [ ipv4 | ipv6 ] disable

undo snmp-agent protocol server [ ipv4 | ipv6 ] disable

Parameters





8630





Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

To enable alarm sending to the NMS without performing the GetSet operation SNMP portlistening is not required To disable the SNMP IPv4 or IPv6 listening port run the snmp-agent protocol server disable command

This command helps separately manage and control SNMP IPv4 and IPv6 listening ports

If ipv4 or ipv6 is not selected both SNMP IPv4 and IPv6 listening ports are disabled

Precautions

After you disable the SNMP IPv4 or IPv6 listening port using the snmp-agent protocolserver disable command SNMP no longer processes SNMP packets Exercise caution whenyou disable the SNMP IPv4 or IPv6 listening port

Example

Disable the SNMP IPv4 listening portltHUAWEIgt system-view[HUAWEI] snmp-agent protocol server ipv4 disable


Function

The snmp-agent protocol source-interface command configures a source interface forreceiving and responding to NM station requests

The undo snmp-agent protocol source-interface command restores the defaultconfiguration

By default the source interface is not configured for receiving and responding to NM stationrequests

Format

snmp-agent protocol source-interface interface-type interface-number

undo snmp-agent protocol source-interface



8631



Parameters



Specifies an interface type andnumber

Currently only loopbackinterfaces are supported

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

By default a source interface is randomly selected for receiving and responding to NM stationrequests which is inconvenient for unified data management To resolve this problem run thesnmp-agent protocol source-interface command to configure a source interface forreceiving and responding to NM station requests

Prerequisites

The interface to be configured as the source interface must have been created and a valid IPaddress must have been assigned to this interface If the interface to be configured as thesource interface is not created or a valid IP address is not assigned to the interface the snmp-agent protocol source-interface command will not take effect If a valid IP address isassigned to the interface the snmp-agent protocol source-interface command will takeeffect automatically

Precautions

If the interface on which the snmp-agent protocol source-interface command is configuredis deleted or an address is changed or deleted on the interface SNMP configurations will notbe affected

After SNMP is bound to the source interface SNMP listens only this interface through whichthe NMS communicates with the device If the source interface or its IP address is deletedSNMP will stop receiving IP packets and therefore communication between the NMS anddevices will interrupt After the source interfaces IP address is changed the NMS cancommunicate with devices only through the new IP address

Example

Configure loopback 1 as a source interface for receiving and responding to NM stationrequestsltHUAWEIgt system-view[HUAWEI] snmp-agent protocol source-interface Loopback 1



8632




FunctionThe snmp-agent protocol server message queue command configures the size of a packetqueue that can be received by an SNMP agent

The snmp-agent protocol server message queue command restores the default size

By default the packet queue that can be received by an SNMP agent contains 30 packets

Formatsnmp-agent protocol server message queue message-queue

undo snmp-agent protocol server message queue

Parameters


message-queue Specifies the size of a packet queue The value is an integer ranging from10 to 100

ViewsSystem view


Usage GuidelinesIf some packets are discarded when the number of packets in the packet queue that can bereceived by an SNMP agent has reached the upper limit run the snmp-agent protocol servermessage queue command to adjust the queue size

Example Configure the packet queue that can be received by an SNMP agent to contain 50 packets atmost

ltHUAWEIgt system-view[HUAWEI] snmp-agent protocol server message queue 50


FunctionThe snmp-agent statistics mib disable command disables the statistics function about theNMSs operations on MIB objects

The undo snmp-agent statistics mib disable command restores the default statistics status



8633



By default the statistics function about the NMSs operations on MIB objects is enabled

NOTE


Formatsnmp-agent statistics mib disable

undo snmp-agent statistics mib disable

ParametersNone

ViewsSystem view



An NMS performs operations on MIB objects to manage devices Currently SNMP supportsthe statistics function about these operations

By default the statistics function is enabled To disable this function due to some reasons forexample high CPU usage caused by collecting statistics about the NMS accessing MIBobjects run the snmp-agent statistics mib disable command

Follow-up Procedure

Run the display snmp-agent statistics mib command to check statistics about the NMSsoperations on MIB objects


Precautions

After you run the snmp-agent statistics mib disable command the statistics function isdisabled but statistics that have been collected are not deleted

Example Disable the statistics function about the NMSs operations on MIB objects

ltHUAWEIgt system-view[HUAWEI] snmp-agent statistics mib disable

Related Topics16112 display snmp-agent statistics mib



8634





Function

The snmp-agent sys-info command sets the SNMP system information

The undo snmp-agent sys-info command restores the default setting

By default the system maintenance information is RampD Beijing Huawei TechnologiescoLtd the system location is Beijing China and the version is SNMPv3

Format

snmp-agent sys-info contact contact | location location | version v1 | v2c | v3 |all

undo snmp-agent sys-info contact | location | version v1 | v2c | v3 | all

Parameters


contact contact Indicates contact information ofsystem maintenance

The value is a string of 1 to225 case-sensitive charactersthat can contain spaces

location location Indicates the location of a device The value is a string of 1 to255 case-sensitive charactersthat can contain spaces

version v1 | v2c |v3 | all

Indicates the SNMP versionl v1 SNMPv1 is enabledl v2c SNMPv2c is enabledl v3 SNMPv3 is enabledl all SNMPv1 SNMPv2c and

SNMPv3 are enabled

-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario



8635



To configure the contact information for the managed node you can run the snmp-agent sys-info contact command in the system If a device fails maintenance personnel can contact thevendor for device maintenance

To configure the physical location of the node you can run the snmp-agent sys-info locationcommand in the system

To configure features in a specified version you can run the snmp-agent sys-info versioncommand to set the corresponding SNMP version in the system SNMPv1 or SNMPv2c is notsecure enough Using SNMPv3 is recommended

SNMPv1l Community-name-based access controll MIB-view-based access control

SNMPv2cl Community-name-based access controll MIB-view-based access controll Supporting Inform messages

Besides inheriting basic SNMPv2c operations SNMPv3 defines a management architecturewhich introduces a User-based Security Model (USM) to provide users with a more secureaccess mechanisml User groupl Group-based access controll User-based access controll Authentication and encryption mechanisms

NOTE

Use display snmp-agent sys-info command to view the information of the system maintenance thephysical location of the node and the SNMP version

Precautions

A lack of authentication capabilities in SNMPv1 and SNMPv2c results in vulnerability tosecurity threats so SNMPv3 is recommended

Example Set the contact information of the system maintenance as call Operator at 010-12345678

ltHUAWEIgt system-view[HUAWEI] snmp-agent sys-info contact call Operator at 010-12345678

Set the location of a device as shanghai China

ltHUAWEIgt system-view[HUAWEI] snmp-agent sys-info location shanghai China

Set the current SNMP version used by the system to v2c

ltHUAWEIgt system-view[HUAWEI] snmp-agent sys-info version v2c

Related Topics16113 display snmp-agent sys-info



8636




Function

The snmp-agent target-host inform command sets the target host for receiving Informmessages

The undo snmp-agent target-host command cancels the target host set to receive Informmessages

By default the target host for receiving Inform messages is not set

Format


params securityname security-name | cipher security-name v2c [ notify-filter-profileprofile-name | ext-vb ]


params securityname security-name v3 [ authentication | privacy ] [ notify-filter-profileprofile-name | ext-vb ]


undo snmp-agent target-host inform address udp-domain ip-address [ udp-port port-number | source interface-type interface-number | [ vpn-instance vpn-instance-name |public-net ] ] params securityname security-name | cipher security-name

Parameters


address Indicates the address of the target host forreceiving SNMP Inform messagesNOTE


-



It is dotted decimal notation


Specifies the number of the UDP port forreceiving Inform messages



Specifies the source interface for sendingInform messages

-



8637






On a VPN network you need to use the VPNinstance specified by vpn-instance IPaddress and security name to identify a targethost



-

params Indicates information about the targethost that generates SNMP notifications

-


Specifies the user security namedisplayed on the NMS

For SNMPv3 securityname must beconfigured as the user namesecurityname configured on the hostneeds to be the same as that configuredon the NMS or the NMS cannot receivethe trap messages sent from the host

For SNMPv1 and SNMPv2c the NMScan receive trap messages from all hostswithout having securitynameconfigured securityname is used todistinguish multiple hosts that generatetrap messages




The value is a string of 1 to32 32 48 56 or 68 case-sensitive characters withoutspaces When doublequotation marks are usedaround the string spaces areallowed in the stringl When the community

name is a string of 1 to32 characters the stringis processed as plain textby default and will beencrypted

l When the communityname is a string of 32 4856 or 68 characters thestring is processed ascipher text by defaultand the system willdetermine whether thestring can be parsed



8638




v2c Indicates the SNMP version v2c indicates SNMPv2c

v3 Indicates the SNMP version v3 indicates SNMPv3


Specifies the security model authentication authenticates SNMP

messages without encryptionl privacy authenticates and encrypts

SNMP messages


-


Specifies the filtering view name The value is a string of 1 to32 case-sensitive charactersspaces not supported Whendouble quotation marks areused around the stringspaces are allowed in thestring



8639





If a Huawei data communication deviceextends the trap objects defined in thepublic MIB you can configure thisparameter to determine whether trapssent to the NMS carry extended boundvariables

l If this parameter is not configured thetraps sent from the Huawei datacommunication device do not carryextended bound variablesIf you are using a third-party NMStool you are not advised to configurethis parameter which ensures that theNMS tool can receive alarms sentfrom the Huawei deviceBy default a trap sent from a Huaweidata communication device does notcarry extended bound variables


-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

To set the target host to receive SNMP notifications you can run the snmp-agent target-hostinform command When informs are sent to notify the NMS of the network status you canconfigure the engine ID for the NMS to ensure that the NMS can receive informs The NMSreceives an inform and returns an ACK message to the SNMP agent only if the engine IDcontained in the Inform message and actual engine ID are the same If the IDs areinconsistent the NMS discards the inform



8640



If there are multiple target hosts you need to run the snmp-agent target-host informcommand on each target host If the snmp-agent target-host inform command is executedfor multiple times on the target host only the last successful operation takes effect Forexample if you run the snmp-agent target-host inform command twice on a target host thesecond operation overwrites the previous one


The descriptions of the command parameters are as followsl udp-port The default UDP port number is 162 In some special cases (for example port

mirroring is configured to prevent a well-known port from being attacked) the parameterudp-port can be used to specify a non-well-known UDP port number This ensurescommunication between the NMS and managed device

l vpn-instance If the alarms sent from the managed device to the NMS need to betransmitted over a private network the parameter vpn-instance vpn-instance-nameneeds to be configured to specify a VPN that takes over the sending task

l securityname Identifies the alarm sender which helps you learn the alarm source

NOTE




After the snmp-agent target-host inform command is executed the SNMP agent aftersending an Inform message waits for an Inform ACK message from the NMS and willretransmit the same Inform message only when no Inform ACK message is received from theNMS within the specified period If the SNMP agent does not receive the inform ACKmessage from the NMS during the retransmission period the SNMP agent deletes this informmessage from the trap queue This ensures that the NMS can receive the SNMP Informmessages to the maximum extent The transmission of Inform messages however consumesmore resources than that of traps

Precautions

To enable a switch to propagate Inform messages you need to run at least one of the twocommands namely snmp-agent target-host inform on the switch




user must also be privacy



8641



l If the security level of the user group is authentication the security level of the trap hostmust also be authentication and the security level of the user can be authentication orprivacy






Example Configure alarms to be sent in inform mode set the security name of the host to 123 andprotocol version to SNMPv2c and send alarms to the NMS host with the IP address of19216801

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable[HUAWEI] snmp-agent target-host inform address udp-domain 19216801 params securityname 123 v2c



FunctionThe snmp-agent target-host trap command configures the target host for receiving SNMPtraps

The undo snmp-agent target-host command deletes the target host configuration forreceiving SNMP traps

By default the target host is not set

Formatsnmp-agent target-host trap address udp-domain ip-address [ udp-port port-number |source interface-type interface-number | [ public-net | vpn-instance vpn-instance-name ] ] params securityname security-name [ [ v1 | v2c | v3 [ authentication | privacy ] ] | private-netmanager | notify-filter-profile profile-name | ext-vb ]

snmp-agent target-host trap address udp-domain ip-address [ udp-port port-number |source interface-type interface-number | [ public-net | vpn-instance vpn-instance-name ] ]



8642



params securityname cipher security-name [ [ v1 | v2c ] | private-netmanager | notify-filter-profile profile-name | ext-vb ]


undo snmp-agent target-host trap address udp-domain ip-address [ udp-port port-number | source interface-type interface-number | [ public-net | vpn-instance vpn-instance-name ] ] params securityname security-name | cipher security-name

Parameters


address Specifies the address of the target host thatreceives SNMP trapsNOTE


-



-


Specifies the number of ports that receiveSNMP traps



Specifies the source interface for sendingtraps

-


-



On a VPN network you need to use the VPNinstance specified by vpn-instance IP addressand security name to identify a target host




8643





Specifies the user security name displayedon the NMS

For SNMPv3 securityname must beconfigured as the user namesecurityname configured on the hostneeds to be the same as that configured onthe NMS or the NMS cannot receive thetrap messages sent from the host

For SNMPv1 and SNMPv2c the NMScan receive trap messages from all hostswithout having securityname configuredsecurityname is used to distinguishmultiple hosts that generate trap messages




The value is a string of 1 to32 32 48 56 or 68 case-sensitive characterswithout spaces Whendouble quotation marks areused around the stringspaces are allowed in thestringl When the community

name is a string of 1 to32 characters the stringis processed as plaintext by default and willbe encrypted

l When the communityname is a string of 3248 56 or 68 charactersthe string is processedas cipher text bydefault and the systemwill determine whetherthe string can beparsed

v1 | v2c | v3 Indicates the SNMP versionl v1 SNMPv1l v2c SNMPv2cl v3 SNMPv3If this parameter is not specified thedefault version is SNMPv1

-



8644





Specifies the security model authentication authenticates packets

without encryptionl privacy authenticates and encrypts

SNMP messages


-

private-netmanager

Indicates the Huawei NMS as the targethost receiving a trap When a HuaweiNMS is deployed and this parameter isconfigured a trap sent to the NMScontains more information such as thetrap type sequence of the trap andsending time

-


Specifies the filtering view name The value is a string of 1 to32 case-sensitivecharacters spaces notsupported When doublequotation marks are usedaround the string spacesare allowed in the string



8645





If a Huawei data communication deviceextends the trap objects defined in thepublic MIB you can configure thisparameter to determine whether traps sentto the NMS carry extended boundvariables

l If this parameter is not configured thetraps sent from the Huawei datacommunication device do not carryextended bound variablesIf you are using a third-party NMStool you are not advised to configurethis parameter which ensures that theNMS tool can receive alarms sent fromthe Huawei deviceBy default a trap sent from a Huaweidata communication device does notcarry extended bound variables


-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

SNMP notifications can be classified into traps and inform messages Trap messages are lessreliable than inform messages because the NMS does not send any acknowledgment when itreceives a trap In this case the sender cannot verify whether the trap has been receivedInforms are configured with an acknowledgment mechanism and therefore are reliable

To configure multiple target hosts you must run the snmp-agent target-host trap commandon each target host If you run the snmp-agent target-host trap command for multiple times



8646



on a host only the latest configuration takes effect For example if you configure the trapfunction for a host that has been configured with trap the second configuration takes effect


You can select parameters based on the following rulesl The default destination UDP port number is 162 Upon special needs such as prventing

well-known ports from being attacked configure the parameter udp-port to change theUDP port number to a non-well-known port number This ensures secure communicationbetween the NMS and managed devices

l If you want the managed devices to send traps to the NMS through the VPN networkconfigure the parameter vpn-instance vpn-instance-name and specify a VPN instance

l The parameter securityname identifies devices that send traps on the NMS

NOTE




After the snmp-agent target-host inform command is executed the SNMP agent aftersending an inform waits for an inform ACK message from the NMS and the same inform isretransmitted only when no inform ACK message is received from the NMS within thespecified period If the SNMP agent does not receive the inform ACK message from the NMSduring the retransmission period the SNMP agent deletes this inform from the trap queueThis ensures that the NMS can receive the SNMP traps to the maximum extent Thetransmission of traps however consumes fewer resources than that of informs

Precautions










8647





Before traps are filtered using the snmp-agent target-host trap command run the snmp-agent notify-filter-profile command to define the parameter notify-filter-profile The snmp-agent notify-filter-profile command creates or updates the trap filtering rules A devicefilters traps to be sent to the destination host and sends only the traps that meet the filteringrules to the destination host

NOTEIf the trap filtering is not configured using the parameter notify-filter-profile all traps will be sent to thedestination host

After you run the set net-manager vpn-instance command to configure a VPN instance usedby the NMS note the followingl If public-net or vpn-instance is not configured the system accesses the NMS host in the

VPN instance used by the NMSl If public-net is configured the system accesses a host generating traps on a public

networkThe VPN instance configured for the NMS host that must be the same as the VPN instancebound to the source interface on the NMS host Otherwise traps may fail to be sent


Example Allow the SNMP agent to send SNMP traps to the target host with the IP address of10111

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable[HUAWEI] snmp-agent target-host trap address udp-domain 10111 params securityname comaccess

Allow the SNMP agent to send SNMP traps to the Huawei NMS with the IP address of10111

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable[HUAWEI] snmp-agent target-host trap address udp-domain 10111 params securityname comaccess private-netmanager




8648




FunctionThe snmp-agent target-host trap ipv6 command configures a target host to receive SNMPtrap messages

The undo snmp-agent target-host ipv6 command deletes the configuration of a target host toreceive SNMP trap messages

By default the target host that receives SNMP trap messages is not set

Formatsnmp-agent target-host trap ipv6 address udp-domain ipv6-address [ udp-port port-number ] params securityname security-name [ [ v1 | v2c | v3 [ authentication | privacy ] ] |private-netmanager | notify-filter-profile profile-name | ext-vb ]

snmp-agent target-host trap ipv6 address udp-domain ipv6-address [ udp-port port-number ] params securityname cipher security-name [ [ v1 | v2c ] | private-netmanager |notify-filter-profile profile-name | ext-vb ]

undo snmp-agent target-host ipv6 ipv6-address securityname security-name | ciphersecurity-name

undo snmp-agent target-host trap ipv6 address udp-domain ipv6-address [ udp-port port-number ] params securityname security-name | cipher security-name

Parameters


ipv6 address Sets the IPv6 address of the target host usedto receive SNMP trap messages

-

udp-domain Indicates that trap messages are sent to thetarget host through the User DatagramProtocol (UDP)

-

ipv6-address Specifies the IPv6 address of the targethost

-


Specifies the port number used to receivetrap messages

The value is an integerthat ranges from 0 to65535 The default valueis 162



8649





Specifies the SNMP security name that isdisplayed as the user name on the NMS

For SNMPv3 securityname must beconfigured as the user name securitynameconfigured on the host needs to be the sameas that configured on the NMS or the NMScannot receive the trap messages sent fromthe host

For SNMPv1 and SNMPv2c the NMS canreceive trap messages from all hostswithout having securityname configuredsecurityname is used to distinguishmultiple hosts that generate trap messages

The value is a string of 1to 32 case-sensitivecharacters spaces notsupported When doublequotation marks are usedaround the string spacesare allowed in the string



The value is a string of 1to 32 32 48 56 or 68case-sensitive characterswithout spaces Whendouble quotation marksare used around the stringspaces are allowed in thestringl When the community

name is a string of 1 to32 characters thestring is processed asplain text by defaultand will be encrypted

l When the communityname is a string of 3248 56 or 68characters the string isprocessed as ciphertext by default and thesystem will determinewhether the string canbe parsed

v1 | v2c | v3 Specifies the SNMP versionl v1 indicates SNMPv1l v2c indicates SNMPv2cl v3 indicates SNMPv3If no SNMP version is specified SNMPv1is used by default

-



8650





Specifies the security mode for SNMP trapmessagesl authentication indicates that the

SNMP trap messages are authenticatedbut not encrypted

l privacy indicates that SNMP trapmessages are authenticated andencrypted

-

private-netmanager

Indicates that the target host is a HuaweiNMS Specify this parameter when aHuawei NMS is used This parameterenables trap messages sent to the NMS tocontain more information including typessequence numbers and transmission timeof trap messages

-


Specifies the name of a trap filter profile The value is a string of 1to 32 case-sensitivecharacters spaces notsupported When doublequotation marks are usedaround the string spacesare allowed in the string



8651




ext-vb Indicates that trap messages sent to a targethost carry extended bound variables

If alarm objects defined in public MIBs areextended on a Huawei data communicationdevice you can use ext-vb to determinewhether the trap messages sent to the NMScarry extended bound variables

l If ext-vb is not specified trap messagessent from the device do not carryextended bound variablesWhen a third-party NMS is used youare advised not to specify the ext-vbparameter so that the third-party NMScan receive trap messages from Huaweidata communication devicesBy default trap messages sent from aHuawei data communication device donot carry extended bound variables

l If ext-vb is specified trap messagessent from the device carry extendedbound variablesThis parameter is recommended when aHuawei NMS is used so that moreinformation can be transmitted in trapmessages

-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

This command is used to configure an IPv6 NMS host so that traps can be sent to the hostusing the IPv6 protocol


Precautions

The S1720ampS2700ampS5700ampS6720 cannot send traps to a VPN interface using the IPv6protocol



8652













Example

Configure an IPv6 NMS host that uses SNMP v3 Set the security name to Huawei andconfigure traps to be authenticated and encrypted

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enableWarning All switches of SNMP trapnotification will be open Continue [YN]y[HUAWEI] snmp-agent target-host trap ipv6 address udp-domain FC001 params securityname Huawei v3 privacy


Function

The snmp-agent trap disable command disables the trap function for all features

The undo snmp-agent trap disable command restores the trap function for all features to thedefault status

By default the display snmp-agent trap all command can be used to view the status of thetrap function for all features



8653



Format

snmp-agent trap disable

undo snmp-agent trap disable

Parameters

None

Views

System view

Default Level


Usage Guidelines

To enable the trap function for all modules run the snmp-agent trap enable command Toenable the trap function for a specified module run the snmp-agent trap enable feature-name command


l To restore the trap function for all features to the default status run the undo snmp-agent trap disable or undo snmp-agent trap enable command

NOTE

To disable the trap function for a specified module run the undo snmp-agent trap enable feature-name command

Example

Disable the trap function for all features

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap disable



Function

The snmp-agent trap enable command enables the switch to send traps

The undo snmp-agent trap enable command restores the default setting

The default configuration of the snmp-agent trap enable command can be checked by thedisplay snmp-agent trap all command



8654



Format

snmp-agent trap enable

undo snmp-agent trap enable

Parameters

None

Views

System view

Default Level


Usage Guidelinesl To enable the trap function for all modules run the snmp-agent trap enable command


l To enable the trap function for a specified module run the snmp-agent trap enablefeature-name feature-name command

l To disable the trap function for a specified module run the undo snmp-agent trapenable feature-name feature-name command

l To enable a specified trap for a specified module run the snmp-agent trap enablefeature-name feature-name trap-name trap-name command

l To disable a specified trap for a specified module run the undo snmp-agent trapenable feature-name feature-name trap-name trap-name command

l To restore the default trap status of all modules run the undo snmp-agent trap disableor undo snmp-agent trap enable command

To enable a device to send traps you need to run at least the snmp-agent target-host informcommand or snmp-agent target-host trap command on the device to specify the destinationaddress of the traps

Example

Enable the switch to send traps

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable




8655




Function

The snmp-agent trap enable feature-name command enables a specified trap for a specifiedfeature

The undo snmp-agent trap enable feature-name command disables a specified trap for aspecified feature

The default configuration of the snmp-agent trap enable feature-name command can bechecked using the display snmp-agent trap all command

Format

snmp-agent trap enable feature-name feature-name [ trap-name trap-name ]

undo snmp-agent trap enable feature-name feature-name [ trap-name trap-name ]

Parameters


feature-name Specifies the name of the feature that generates traps -

trap-name trap-name Specifies the name of a trap -

Views

System view

Default Level


Usage Guidelines

If trap-name trap-name is not specified the switch enables all traps about a specified featureafter the snmp-agent trap enable feature-name feature-name command is used

You can run the display snmp-agent trap feature-name all command to check theconfiguration result

Example

Enable the switch to send the fallingalarm trap about RMON to the NMS


Related Topics16115 display snmp-agent trap all16116 display snmp-agent trap feature-name all



8656




FunctionThe snmp-agent trap enable feature-name snmp command enables an SNMP trap

The undo snmp-agent trap enable feature-name snmp command disables an SNMP trap

By default the coldStart and warmStart traps are enabled and the authenticationFailure trap isdisabled

Formatsnmp-agent trap enable feature-name snmp [ trap-name trap-name ]

undo snmp-agent trap enable feature-name snmp [ trap-name trap-name ]

Parameters


trap-name trap-name Specifies the name of a trap The traps are as followsl authenticationFailurel coldstartl hwsnmplockthresholdl hwsnmplockthresholdresumel warmstart

ViewsSystem view


Usage GuidelinesThe snmp-agent trap enable feature-name snmp command is used to enable an SNMP trapAfter that the trap generated during the device running will be sent to the NMS At presentthe following SNMP traps are supportedl coldStart This trap is generated when the device is powered off and restartedl warmStart This trap is generated when the status of SNMP agent is changed from

disable to enablel authenticationFailure This trap is generated when a user uses an incorrect community

name and is unable to log in to the devicel hwSNMPLockThreshold This trap is generated when the number of users who were

locked due to an authentication failure reached the upper thresholdl hwSNMPLockThresholdResume This trap is generated when the number of users who

were locked due to an authentication failure fell below the lower threshold



8657



You can run the display snmp-agent trap feature-name snmp all command to check theconfiguration result

Example

Enable the SNMP authenticationFailure trap

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable feature-name snmp trap-name authenticationFailure

Related Topics16117 display snmp-agent trap feature-name snmp all


Function

The snmp-agent trap life command sets the lifetime of trap messages When the lifetimeexpires the trap messages are discarded

The undo snmp-agent trap life command cancels the current settings

By default the lifetime of trap messages is 300 seconds

Format

snmp-agent trap life seconds

undo snmp-agent trap life

Parameters


seconds Specifies the lifetime of trapmessages

The value is an integer that ranges from 1 to2592000 in seconds The default value is 300

Views

System view

Default Level

3 Management level

Usage Guidelines

When the lifetime expires the trap messages are discarded

Example

Set the lifetime of trap messages to 60 seconds



8658



ltHUAWEIgt system-view[HUAWEI] snmp-agent trap life 60



Function

The snmp-agent trap queue-size command sets the queue length of the trap messages sent toa target host

The undo snmp-agent trap queue-size command cancels the current settings

The default value is 1000

Format

snmp-agent trap queue-size size

undo snmp-agent trap queue-size

Parameters


size Specifies the queue length oftrap messages


Views

System view

Default Level

3 Management level

Usage Guidelines

When a large number of trap messages need to be sent in a certain period of time packets willbe lost if the queue length of trap messages is insufficient The queue length can be adjustedto reduce the packet loss ratio

When the lifetime of trap messages is long the queue length of trap messages needs to belengthened If the queue length is not lengthened packet loss will occur

Example

Set the queue length of the trap messages sent to the target host to 200



8659



ltHUAWEIgt system-view[HUAWEI] snmp-agent trap queue-size 200

Related Topics16149 snmp-agent trap enable16146 snmp-agent target-host trap16145 snmp-agent target-host inform16152 snmp-agent trap life


Function

The snmp-agent trap start-trap resend disable command disables the function of resendingdevice cold-start or warm-start traps

The undo snmp-agent trap start-trap resend disable command restores the default status ofthe function of resending device cold-start or warm-start traps

By default the function of resending device cold-start or warm-start traps is enabled

Format

snmp-agent trap start-trap resend disable

undo snmp-agent trap start-trap resend disable

Parameters

None

Views

System view

Default Level

3 Management level

Usage Guidelines

SNMP uses the resending mechanism for device cold-start or warm-start traps Thismechanism works in the following wayl The system resends a cold-start or warm-start trap for three consecutive times to ensure

that the trap can be sent to the destinationl The first trap that the device sends must be a cold-start or warm-start trap If another

alarm is generated before the cold-start or warm-start trap the system buffers that alarmand sends it only after the cold-start or warm-start trap is sent The system also resendsthe buffered alarm for three consecutive times

If the function of resending device cold-start or warm-start traps is not required any more runthe snmp-agent trap start-trap resend disable command to disable it



8660



Example

Disable the function of resending device cold-start or warm-start traps

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap start-trap resend disable


Function

The snmp-agent trap source command sets the source interface from which traps are sent

The undo snmp-agent trap source command removes the set source interface configuration

By default source interface is not set

Format

snmp-agent trap source interface-type interface-number

undo snmp-agent trap source

Parameters



Specifies the type and number of the sourceinterface that sends traps

-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

You can run the snmp-agent trap source command to specify the type and number of theinterface on the device from which traps are sent The system specifies the IP address of thisinterface as the source IP address of traps In this way the trap source can be identified on theNMS

Precautions

The source interface that sends traps must have an IP address otherwise the commands willfail to take effect To ensure device security it is recommended that you set the source IPaddress to the local loopback address

The source interface in traps on the device must be the same as the source interface specifiedon the NM station Otherwise the NM station cannot receive traps



8661



Example Specify the IP address of VLANIF100 as the source address of traps

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap source vlanif 100



FunctionThe snmp-agent trap source-port command configures the number of the source port thatsends trap messages

The undo snmp-agent trap source-port command restores the default number of the sourceport that sends trap messages

By default the source port that sends trap messages is a random port

Formatsnmp-agent trap source-port port-num

undo snmp-agent trap source-port

Parameters


port-num Specifies the number of the source portthat sends trap messages


ViewsSystem view



To improve security of network packets run the snmp-agent trap source-port command toconfigure the source port that sends trap messages Therefore the user firewall filters packetsbased on the port number

Precautions



8662



By default a random port is used to send trap messages and no configuration file isgenerated After you configure a specific source port the corresponding configuration file isgenerated If you delete the specified source port no configuration file is generated

If a device sends packets to the NMS in Inform mode and the snmp-agent trap source-portcommand is run to change the source port number SNMP uses the new source port instead ofthe original port to receive response packets from the NMS As a result packets areretransmitted

Example Set the number of the source port that sends SNMP agent trap messages to 1057

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap source-port 1057


FunctionThe snmp-agent trap type command configures the device to send ENTITYTRAP traps orBASETRAP traps

The undo snmp-agent trap type command restores the default configuration

By default the device sends BASETRAP traps

Formatsnmp-agent trap type base-trap | entity-trap

undo snmp-agent trap type

ParametersParameter Description Settings

base-trap Configures the device tosend BASETRAP traps

-

entity-trap Configures the device tosend ENTITYTRAP traps

-

ViewsSystem view





8663



There are two types of traps for the hardware of the switch BASETRAP and ENTITYTRAP

l The BASETRAP traps are sent when faults occur so they are classified based on faulttypes For example the same BASETRAP trap is sent when a board or a fan is removed

l The ENTITYTRAP traps are classified based on hardware types For example differentENTITYTRAP traps are sent when a board is removed and when a fan is removed

The functions of the two types of traps are similar Select one type of traps based on yourrequirements

Precautions

The following conditions must be met otherwise the device does not send BASETRAP trapsto the NMS

l The trap type is set to base-trap using the snmp-agent trap type command

l The BASETRAP trap function is enabled

The following conditions must be met otherwise the device does not send ENTITYTRAPtraps to the NMS

l The trap type is set to entity-trap using the snmp-agent trap type command

l The ENTITYTRAP trap function is enabled

Example

Configure the device to send BASETRAP traps

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap type base-trap

Related Topics16116 display snmp-agent trap feature-name all16115 display snmp-agent trap all


Function

The snmp-agent udp-port command sets the listening port of the SNMP agent

The undo snmp-agent udp-port command restores the default listening port of the SNMPagent

By default the listening port of the SNMP agent is 161

Format

snmp-agent udp-port port-num

undo snmp-agent udp-port



8664



Parameters


port-num Specifies the listening port of theSNMP agent

The value is 161 or an integer that rangesfrom 1025 to 65535

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

The SNMP agent is a proxy process running on a network device By default the SNMPagent listens on port 161 to respond to instructions sent from the NMS In this manner theNMS can manage the network device Fixing the listing port may threaten network securityFor example if all attack packets are sent to this listening port the network is congested

To improve device security run the snmp-agent udp-port command to change the listeningport of the SNMP agent


After you run this command the SNMP agent listens on the new port number The originalSNMP connection with the NMS is torn down and the NMS must use the new port number toconnect to the device

Precautions

The listening port configured on the NMS must be the same as that specified by the snmp-agent udp-port command Otherwise the NMS cannot connect to the device

Example

Set the listening port of the SNMP agent to 1057

ltHUAWEIgt system-view[HUAWEI] snmp-agent udp-port 1057


Function

The snmp-agent usm-user command adds a user to an SNMP user group

The undo snmp-agent usm-user command deletes a user from an SNMP user group

By default the SNMP user group has no users added



8665



Formatsnmp-agent [ remote-engineid engineid ] usm-user v3 user-name [ group group-name | aclacl-number ]

snmp-agent [ remote-engineid engineid ] usm-user v3 user-name authentication-mode md5 | sha [ localized-configuration cipher password | cipher password ]

snmp-agent [ remote-engineid engineid ] usm-user v3 user-name privacy-mode des56 |aes128 | aes192 | aes256 | 3des [ localized-configuration cipher password | cipherpassword ]

undo snmp-agent [ remote-engineid engineid ] usm-user v3 user-name [ group | acl |authentication-mode | privacy-mode ]

Parameters


remote-engineidengineid

Specifies the ID of the engine associated with auser

NOTEremote-engineid engineid must be set to the engineID of the destination host that receives alarms Theengine IDs of the source and destination hosts mustbe different

The value is string of10 to 64 hexadecimaldigits It cannot be all0s or all Fs

v3 Indicates that the security mode in v3 isadopted

-

user-name Specifies the name of a user The value is a stringof 1 to 32 case-sensitive charactersspaces not supportedWhen doublequotation marks areused around thestring spaces areallowed in the string

group group-name Specifies the name of the group to which a userbelongs

The value is a stringof 1 to 32 case-sensitive charactersspaces not supportedWhen doublequotation marks areused around thestring spaces areallowed in the string



8666




authentication-mode

Sets the authentication modeNOTE

Authentication is a process in which the SNMPagent (or the NMS) confirms that the message isreceived from an authorized NMS (or SNMP agent)and the message is not changed during transmissionRFC 2104 defines Keyed-Hashing for MessageAuthentication Code (HMAC) an effective tool thatuses the security hash function and key to generatethe message authentication code This tool is widelyused in the Internet HMAC used in SNMP includesHMAC-MD5-96 and HMAC-SHA-96 The hashfunction of HMAC-MD5-96 is MD5 that uses 128-bit authKey to generate the key The hash function ofHMAC-SHA-96 is SHA-1 that uses 160-bit authKeyto generate the key

-

md5 | sha Indicates the authentication protocoll md5 Specifies HMAC-MD5-96 as the

authentication protocoll sha Specifies HMAC-SHA-96 as the

authentication protocol

NOTEThe calculation speed of the HMAC-MD5-96algorithm is faster than that of the HMAC-SHA-96algorithm the HMAC-SHA-96 algorithm is moresecure than the HMAC-MD5-96 algorithm Toensure high security please use the HMAC-SHA-96algorithm

-

privacy-mode Specifies the authentication with encryption

The system adopts the cipher block chaining(CBC) code of the data encryption standard(DES) and uses 128-bit privKey to generate thekey The NMS uses the key to calculate theCBC code and then adds the CBC code to themessage while the SNMP agent fetches theauthentication code through the same key andthen obtains the actual information Like theidentification authentication the encryptionrequires the NMS and the SNMP agent to sharethe same key to encrypt and decrypt themessage

-

des56 | aes128 |aes192 | aes256 |3des

Indicates 3DES AESndash128 AESndash192 AESndash256 or DESndash56 as the encryption protocol

-



8667




localized-configuration

Specifies the localized password configurationmodeNOTE

After authentication and encryption passwords areconfigured through MIB this keyword is displayedin the commands recorded in configuration files

After authentication and encryption passwords areconfigured through command line you are notadvised to use this keyword If this keyword is usedthe cipher text passwords configured later use thelocal format

As a password with the localized-configurationkeyword is related to the engine ID copyingconfigurations with this keyword from one device toanother causes the password to be invalid

-

cipher password Specifies the password The value is a case-insenstive stringwithout spaces Itmust be in cipher textformat with 32 to 108characters Whendouble quotationmarks are usedaround the stringspaces are allowed inthe string

acl acl-number Specifies the ACL numberNOTE

The ACL configured by the acl acl-numberparameter takes effect on both IPv4 and IPv6networks


ViewsSystem view




By adopting the user-based security model SNMPv3 eradicates the security defects inSNMPv1 and SNMPv2c and provides two services authentication and encryption The user-



8668



based security model defines three security authentication levels noAuthNoPriv AuthNoPrivand AuthPriv

NOTEThe security authentication level noAuthPriv does not exist This is because the generation of a key isbased on the authentication information and product information

Different from SNMPv1 and SNMPv2c SNMPv3 can implement access control identityauthentication and data encryption through the local processing model and user securitymodel SNMPv3 can provide higher security and confidentiality than SNMPv1 andSNMPv2c The following table lists the difference between SNMPv1 SNMPv2c andSNMPv3

Table 16-19 Comparison in the security of SNMP of different versions

Protocol version User Checksum Encryption Authentication

v1 Adopts thecommunity name

None None

v2c Adopts thecommunity name

None None

v3 Adopts user name-based encryptiondecryption

Yes Yes

The snmp-agent group command can be used to configure the authentication encryptionand access rights for an SNMP group The snmp-agent group command can be used toconfigure the rights for users in a specified SNMP group and bind the SNMP group to a MIBview The MIB view is created through the snmp-agent mib-view command For details seethe usage guideline of this command After an SNMP user group is configured the MIB-view-based access control is configured for the SNMP user group Users cannot accessobjects in the MIB view through the SNMP user group The purpose of adding SNMP usersto an SNMP user group is to ensure that SNMP users in an SNMP user group have the samesecurity level and access control list When you run the snmp-agent usm-user command toconfigure a user in an SNMP user group you configure the MIB-view-based access rights forthe user If an SNMP user group is configured with the AuthPriv access rights you canconfigure the authentication mode and encryption mode when configuring SNMP users Notethat the authentication keys and encryption passwords configured on the NMS and the SNMPagent should be the same otherwise authentication fails

To ensure that the NMS correctly receives the alarm in Inform mode sent by the switch runthe snmp-agent remote-engineid engineid usm-user v3 user-name command to specify theNMS engine ID on the host After the command is run the host encapsulates the NMS engineID in the Authoritative Engine ID field of the SNMPv3 alarm packet before sending the alarmin Inform mode After receiving the alarm the NMS compares the engine ID carried in thereceived packet with its own engine ID If the two IDs match the NMS sends a response tothe alarm host If the two IDs do not match the NMS discards the packet

When the NMS and device are in an insecure network environment for example a networkprone to attacks it is recommended that you configure different authentication password andencryption password to improve security

The device supports a maximum of 20 users



8669




If an SNMP agent is configured with a remote user the engine ID is required during theauthentication If the engine ID changes after the remote user is configured the remote userbecomes invalid

Precautions

The user security level must be higher than or equal to the security level of the SNMP usergroup to which the user is added

The security level of an SNMP user group can be (in descending order)

l Level 1 privacy (authentication and encryption)

l Level 2 authentication (without encryption)

l Level 3 none (neither authentication nor encryption)

The user security level must be higher than the user group level For example if the securitylevel of an SNMP user group is level 1 the security level of the user that is added to the groupmust be level 1 if the security level of an SNMP user group is level 2 the security level ofthe user that is added to the group can be level 1 or level 2

If the user security level is set to neither authentication nor encryption the user only has theread-only permission within MIB-2 (OID 136121)

To add an SNMP user to an SNMP group ensure that the SNMP user group is valid

If you run the snmp-agent usm-user command multiple times only the latest configurationtakes effect

Keep your user name and plain-text password well when creating the user The plain-textpassword is required when the NMS accesses the device

The passwords have the following characteristics

l The password is a string of 8 to 64 case-sensitive characters

l The password must contain at least two of the following characters upper-case characterlower-case character digit and special character

Special characters do not include the question mark () and space

l The password should not contain repeated character strings such as abc123abc123abc123and 123abc123abc

l The password entered in interactive mode is not displayed on the screen

Users of the same name can only belong to one user group If you add a user to a user groupdelete a user from a user group or change a user to another group the operation takes effectfor other users with the same name

To ensure high security do not use the MD5 algorithm for SNMPv3 authentication or use theDES56 or 3DES168 algorithm for SNMPv3 encryption




8670



Example Configure an SNMPv3 user with user name u1 group name g1 authentication mode shaauthentication password 8937561bc encryption mode aes128 and encryption password68283asd

ltHUAWEIgt system-view[HUAWEI] snmp-agent usm-user v3 u1 group g1[HUAWEI] snmp-agent usm-user v3 u1 authentication-mode shaPlease configure the authentication password (8-64) Enter Password Confirm Password [HUAWEI] snmp-agent usm-user v3 u1 privacy-mode aes128Please configure the privacy password (8-64) Enter Password Confirm Password[HUAWEI]

Related Topics16118 display snmp-agent usm-user16126 snmp-agent group

162 RMON and RMON2 Configuration CommandsNOTE

Only S5720EI S5720HI S6720EI and S6720S-EI support RMON2


FunctionThe display rmon alarm command displays information about RMON alarm function

Formatdisplay rmon alarm [ entry-number ]

Parameters


entry-number Displays information about the RMON alarmentry with the specified index If no index isspecified information about all alarms isdisplayed


ViewsAll views




8671



Usage Guidelines

After configuring the RMON alarm thresholds using the rmon alarm command you can runthis command to view the configured alarm variables sampling interval thresholds alarmtriggering condition and last sampled value

Example

Display the RMON alarm configurations

ltHUAWEIgt display rmon alarmAlarm table 1 owned by creator is valid Samples delta value 1361211611141ltetherStatsOctets1gt Sampling interval 5(sec) Rising threshold 1000 (linked with event 1) Falling threshold 100(linked with event 1) When startup enables risingOrFallingAlarm Latest value 0

Table 16-20 Description of the display rmon alarm command output

Item Description

Alarm table entry-number ownedby owner is status

The current status of the alarm entry entry-numbercreated by owner is statusl entry-number alarm entry index corresponding

to the alarmIndex object in alarmTablel owner creator of the entry corresponding to the

alarmOwner object in alarmTablel status row status of the alarm entry with the

specified index corresponding to the alarmStatusin alarmTablendash undercreation invalidndash valid validndash invalid invalid due to hot swapping of the

LPU

Samples delta value Alarm variable namely monitored MIB objectcorresponding to the alarmVariable object inalarmTable

Sampling interval Sampling interval in seconds corresponding to thealarmInterval object in alarmTable

Rising threshold Rising threshold of the alarm table corresponding tothe alarmRisingThreshold object in alarmTableWhen the sampled value reaches or exceeds therising threshold an alarm is generated

Falling threshold Falling threshold of the alarm table correspondingto the alarmFallingThreshold object in alarmTableWhen the sampled value reaches or falls below thefalling threshold an alarm is generated



8672



Item Description

When startup enables Condition that triggers alarms corresponding to thealarmStartupAlarm object in alarmTable When thesampled value exceeds the rising threshold or fallsbelow the falling threshold an alarm is generatedThe values arel risingOrFallingAlarm generating an alarm when




Latest value Latest sampled value corresponding to thealarmValue object in alarmTable

Related Topics16211 rmon alarm


Function

The display rmon event command displays information about RMON events

Format

display rmon event [ entry-number ]

Parameters


entry-number Displays the configuration of the RMON eventwith the specified index If no index is specifiedinformation about all events is displayed


Views

All views

Default Level

1 Monitoring level



8673



Usage GuidelinesAfter configuring the trap or log function for RMON events you can run this command toview the configured event description whether events trigger traps and logs and latest event

Example Display the RMON event configurations

ltHUAWEIgt display rmon eventEvent table 1 owned by Huawei is valid Description null Will cause log when triggered last triggered at 0days 00h24m10s69th

Table 16-21 Description of the display rmon event command output

Item Description


The current status of the event entry entry-number created by owner is statusl entry-number event entry index

corresponding to the eventIndex object ineventTable



the LPU

Description Event description corresponding to theeventDescription object in eventTable

Will cause log when triggered Whether events trigger traps or logscorresponding to the eventType object ineventTableThe actions associated with events are asfollowsl none no action is takenl log a log is recorded when an event is

triggeredl trap a trap is sent to the NMS when an

event is triggeredl log-trap a log is recorded and a trap is sent

to the NMS when an event is triggered

last triggered at Latest event time corresponding to theeventLastTimeSent object in eventTable



8674



Related Topics16212 rmon event


Function

The display rmon eventlog command displays details about RMON event logs

Format

display rmon eventlog [ entry-number ]

Parameters


entry-number Displays the log with the specified index If noindex is specified information about all eventlogs is displayed


Views

All views

Default Level

1 Monitoring level

Usage Guidelines

If you use the rmon event command to specify that a log is recorded for a certain event theevent record is stored in the LogTable The command output includes event index currentevent status time the event triggers a log (calculated based on the number of seconds elapsedsince system initialization or startup) and event description

Example

Display the log of RMON event 1

ltHUAWEIgt display rmon eventlog 1Event table 1 owned by User is valid Generates eventLog 11 at 0days 00h00m07s43th Description The 1361211611141 defined in alarm table 1 less than or equal to 100 with alarm value 0 Alarm sample type is delta Generates eventLog 12 at 0days 00h02m26s43th Description The 1361211611141 defined in alarm table 1 greater than or equal to 1000 with alarm value 10443 Alarm sample type is delta



8675



Table 16-22 Description of the display rmon eventlog command output

Item Description


The current status of the event entry entry-number created by owner is statusl entry-number event log entry index

corresponding to the logEventIndex objectin LogTable



the LPU

Generates eventLog at Log creation time (time elapsed since systemstartup) corresponding to the logTime object inLogTable

Description Event description corresponding to thelogDescription object in LogTable

Related Topics1622 display rmon event16212 rmon event


Function

The display rmon history command displays RMON history sampling information

Format

display rmon history [ interface-type interface-number ]

Parameters



Displays RMON history sampling information on thespecified Ethernet interface If this parameter is notspecified RMON history sampling information on allinterfaces is displayed

-



8676



ViewsAll views


Usage GuidelinesAfter configuring RMON history statistics on an interface using the rmon history commandthe system samples packets on the interface periodically The display rmon history commandcan display history sampling information including the number of sampled packets historysampling interval latest sampling information Ethernet interface usage number of CRC errorpackets and total number of packets

Example Display RMON history sampling information

ltHUAWEIgt display rmon historyHistory control entry 1 owned by Creator is valid Samples interface GigabitEthernet001ltifIndex402653698gt Sampling interval 30(sec) with 10 buckets max Last Sampling time 0days 00h09m43s00th Latest sampled values octets 645 packets 7 broadcast packets 7 multicast packets 0 undersize packets 6 oversize packets 0 fragments packets 0 jabbers packets 0 CRC alignment errors 0 collisions 0 Dropped packet 0 utilization 0

Display RMON history sampling information on the specified interface

ltHUAWEIgt display rmon history gigabitethernet 001History control entry 1 owned by Creator is valid Samples interface GigabitEthernet001ltifIndex402653698gt Sampling interval 30(sec) with 10 buckets max Last Sampling time 0days 00h09m43s00th Latest sampled values octets 645 packets 7 broadcast packets 7 multicast packets 0 undersize packets 6 oversize packets 0 fragments packets 0 jabbers packets 0 CRC alignment errors 0 collisions 0 Dropped packet 0 utilization 0 History record Record No1 (Sample time 0days 00h02m30s01th) octets 0 packets 0 broadcast packets 0 multicast packets 0 undersize packets 0 oversize packets 0 fragments packets 0 jabbers packets 0 CRC alignment errors 0 collisions 0 Dropped packet 0 utilization 0



8677



Table 16-23 Description of the display rmon history command output

Item Description

History control entry entry-numberowned by owner is status

The current status of the event entry entry-number created by owner is statusl entry-number history control table entry

index corresponding to thehistoryControlIndex object inhistoryControlTable

l owner creator of the entry correspondingto the historyControlOwner object inhistoryControlTable

l status row status of the history control tableentry with the specified indexcorresponding to the historyControlStatus inhistoryControlTablendash undercreation invalidndash valid validndash invalid invalid due to hot swapping of

the LPU

Samples interface Sampled interface

Sampling interval Sampling interval in seconds corresponding tothe historyControlInterval object inhistoryControlTable The system samplespackets on the interface at this interval

Last Sampling time Latest sampling time corresponding to theetherHistoryIntervalStart object inetherHistoryTable

Latest sampled values Latest sampling result

octets Number of bytes received in a samplinginterval corresponding to theetherHistoryOctets object in etherHistoryTable

packets Number of packets received in a samplinginterval corresponding to the etherHistoryPktsobject in etherHistoryTable

broadcast packets Number of broadcast packets received in asampling interval corresponding to theetherHistoryBroadcastPkts object inetherHistoryTable

multicast packets Number of multicast packets received in asampling interval corresponding to theetherHistoryMulticastPkts object inetherHistoryTable



8678



Item Description

undersize packets Number of undersize packets received in asampling interval corresponding to theetherHistoryUndersizePkts object inetherHistoryTable

oversize packets Number of large packets received in a samplinginterval corresponding to theetherHistoryOversizePkts object inetherHistoryTable

fragments packets Number of undersize and CRC error packetsreceived in a sampling interval correspondingto the etherHistoryFragments object inetherHistoryTable

jabbers packets Number of large and CRC error packetsreceived in a sampling interval correspondingto the etherHistoryJabbers object inetherHistoryTable

CRC alignment errors Number of CRC error packets received in asampling interval corresponding to theetherHistoryCRCAlignErrors object inetherHistoryTable

collisions Number of collision packets received in asampling interval corresponding to theetherHistoryCollisions object inetherHistoryTable

Dropped packet Number of packets discarded in a samplinginterval corresponding to the etherHistoryDro-pEvents object in etherHistoryTable

utilization Bandwidth usage in a sampling intervalcorresponding to the etherHistoryUtilizationobject in etherHistoryTable

History record History sampling result

Related Topics16213 rmon history


FunctionThe display rmon prialarm command displays information about RMON extended alarmfunction



8679



Formatdisplay rmon prialarm [ entry-number ]

Parameters


entry-number Displays information about the RMON extendedalarm entry with the specified index If thisparameter is not specified all RMON extendedalarm information is displayed


ViewsAll views


Usage GuidelinesAfter configuring RMON extended alarm function using the rmon prialarm command youcan run this command to view sampling interval rising and falling thresholds alarmtriggering condition and latest sampled value

Example Display the RMON extended alarm configurations

ltHUAWEIgt display rmon prialarmPrialarm table 1 owned by Huawei is valid Samples absolute value 1361211611161+1361211611171 Sampling interval 30(sec) Rising threshold 1000(linked with event 3) Falling threshold 100(linked with event 3) When startup enables risingOrFallingAlarm This entry will exist forever Latest value 557



8680



Table 16-24 Description of the display rmon prialarm command output

Item Description

Prialarm table entry-number ownedby owner is status

The current status of the extended alarm entry entry-number created by owner is statusl entry-number extended alarm entryl owner creator of the entryl status row status of the extended alarm entry

with the specified indexndash undercreation invalidndash valid validndash invalid invalid due to hot swapping of the

LPU

Samples type value The sampling type is type The value of type can bel absolute absolute value samplingl delta variable value samplingl changeratio change rate of sampled values

(Change rate = Value changeSampling interval)This field is followed by an alarm variable

Sampling interval Interval at which traffic is sampled

Rising threshold Alarm rising threshold

Falling threshold Alarm falling threshold

linked with event entry-number Associate with the row with index entry-number

When startup enables Condition that triggers alarms (exceed the risingthreshold or falls below the falling threshold) Thevalues arel risingOrFallingAlarm generating an alarm when




This entry will exist Aging time of the extended alarm entry An entrymay be valid permanently or in a certain period

Latest value Latest sampling result

Related Topics16214 rmon prialarm



8681




Function

The display rmon statistics command displays RMON Ethernet statistics

Format

display rmon statistics [ interface-type interface-number ]

Parameters



Displays RMON Ethernet statistics on the specifiedEthernet interface If this parameter is not specifiedRMON Ethernet statistics on all interfaces are displayed

-

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

After you configure Ethernet statistics using the rmon statistics command the systemcollects packet statistics on Ethernet interfaces The command output includes communicationinformation generated since statistics function is enabled The command output helps youlocate faults

When the device restarts all statistics are cleared

Example

Display RMON Ethernet statistics

ltHUAWEIgt display rmon statisticsStatistics entry 1 owned by Creator is valid Interface GigabitEthernet001ltifIndex402653698gt Received octets 142915224 packets 1749151 broadcast packets 11603 multicast packets756252 undersize packets 0 oversize packets 0 fragments packets 0 jabbers packets 0 CRC alignment errors0 collisions 0 Dropped packet (insufficient resources)1795 Packets received according to length (octets) 64 150183 65-127 150183 128-255 1383 256-5113698 512-10230 1024-15180



8682



Table 16-25 Description of the display rmon statistics command output

Item Description

Statistics entry entry-number owned byowner is status

The current status of the event entry entry-number created by owner is statusl entry-number Ethernet statistics entry

corresponding to the etherStatsIndex objectin etherStatsTable

l owner creator of the entry correspondingto the etherStatsOwner object inetherStatsTable

l status row status of the Ethernet statisticsentry with the specified indexcorresponding to the etherStatsStatus inetherStatsTablendash undercreation invalidndash valid validndash invalid invalid due to hot swapping of

the LPU

Interface Interface where statistics are collectedcorresponding to the etherStatsDataSourceobject in etherStatsTable followed by theinterface OID

Received Number of received packets

octets Number of received octets

packets Number of received packets corresponding tothe etherStatsPkts object in etherStatsTable

broadcast packets Number of received broadcast packetscorresponding to the etherStatsBroadcastPktsobject in etherStatsTable

multicast packets Number of received multicast packetscorresponding to the etherStatsMulticastPktsobject in etherStatsTable

undersize packets Number of received undersize packetscorresponding to the etherStatsUndersizePktsobject in etherStatsTable

oversize packets Number of received large packetscorresponding to the etherStatsOversizePktsobject in etherStatsTable

fragments packets Number of received undersize and CRC errorpackets corresponding to theetherStatsFragments object in etherStatsTable



8683



Item Description

jabbers packets Number of received large and CRC errorpackets corresponding to the etherStatsJabbersobject in etherStatsTable

CRC alignment errors Number of received CRC error packetscorresponding to the etherStatsCRCAlignEr-rors object in etherStatsTable

collisions Number of received collision packetscorresponding to the etherStatsCollisionsobject in etherStatsTable

Dropped packet Number of discarded packets corresponding tothe etherStatsDropEvents object inetherStatsTable

Packets received according to length Number of received packets with differentlengths corresponding to theetherStatsPkts64OctetsetherStatsPkts65to127OctetsetherStatsPkts128to255OctetsetherStatsPkts256to511OctetsetherStatsPkts512to1023Octets andetherStatsPkts1024to1518Octets objects inetherStatsTableNOTE

In classified packet statistics on the S1720 S2720S2750 S5700S-LI S5700LI S5710-X-LI S5720SIand S5720S-SI 1024-1518 includes the packetslonger than 1518



FunctionThe display rmon2 hlhostcontroltable command displays information about entries inhlHostControlTable

Formatdisplay rmon2 hlhostcontroltable [ index ctrl-index ] [ verbose ]



8684



Parameters




verbose Displays details about the host control table -

ViewsAll views


Usage GuidelinesAfter you use the rmon2 hlhostcontroltable command to create a protocol directory tableyou can run the display rmon2 hlhostcontroltable command to view the configurations

If no entry index is specified the configuration of the entire table is displayed

Example Display information about the entry with index 123 in the host control table

ltHUAWEIgt display rmon2 hlhostcontroltable index 123Abbreviationindex - hlhostcontrolindexdatasource - hlhostcontroldatasourcedroppedfrm - hlhostcontrolnldroppedframesinserts - hlhostcontrolnlinsertsDeletes - hlHostControlNlDeletesmaxentries - hlhostcontrolnlmaxdesiredentriesstatus - hlhostcontrolstatus

index datasource droppedfrm inserts Deletes maxentries status123 Vlanif10 0 0 0 50 active

Display detailed information about the entry with index 123 in the host control tableltHUAWEIgt display rmon2 hlhostcontroltable index 123 verboseAbbreviationindex - hlhostcontrolindexdatasource - hlhostcontroldatasourcedroppedfrm - hlhostcontrolnldroppedframesinserts - hlhostcontrolnlinsertsDeletes - hlHostControlNlDeletesmaxentries - hlhostcontrolnlmaxdesiredentriesowner - hlhostcontrolownerstatus - hlhostcontrolstatusindex 123datasource Vlanif10droppedfrm 0inserts 0Deletes 0maxentries 50owner chinastatus active



8685



Table 16-26 Description of the display rmon2 hlhostcontroltable command output

Item Description

index Index of hlHostControlTable

datasource Source interface of data

droppedfrm Number of the frames that are received on the statisticsinterface but not added into nlHost entries

inserts Times add nlHost entries are added to nlHostTable

Deletes Times nlHost entries are deleted from nlHostTable

maxentries Maximum number of entries that nlHostTable contains

owner Owner of entries

status Status of entries in the hlHostControlTablel active running normallyl not in service invalid

Related Topics16216 rmon2 hlhostcontroltable


FunctionThe display rmon2 nlhosttable command displays information about entries in thenlHostTable

Formatdisplay rmon2 nlhosttable [ hostcontrolindex ctrl-index ] [ timemark time-value ][ protocoldirlocalindex protocol-local-index ] [ hostaddress ip-address ]

Parameters


hostcontrolindex ctrl-index Specifies the index number Actrl-index uniquely identifies anentry in thehlHostControlTable

It is an integer rangingfrom 1 to 65535



8686




timemark time-value Enables the time filter The value is in the range of0 to 4294967295 Theentries in the nlHostTablewith the ChgTm valuebeing larger than this valueare displayed

protocoldirlocalindexprotocol-local-index

Identifies the network layerprotocol of the nlHostAddress

Its value ranges from 1 to2147483647

hostaddress ip-address Checks the traffic on a specifiedhost

-

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

After statistics function is configured on an interface you can view traffic statistics using thiscommand A maximum of 5000 rows can be displayed for each protocol on an interface

Example

Display information about the entry with index 1 in the host table

ltHUAWEIgt display rmon2 nlhosttable hostcontrolindex 1 protocoldirlocalindex 2 hostaddress 1011094177AbbreviationHIdx - hlHostControlIndexPIdx - ProtocolDirLocalIndexAddr - nlHostAddressInPkts - nlHostInPktsOutPkts - nlHostOutPktsInOctes - nlHostInOctetsOutOctes - nlHostOutOctetsOutMac - nlHostOutMacNonUnicastPktsChgTm - nlHostTimeMarkCrtTm - nlHostCreateTimeHIdx PIdx Addr InPkts OutPkts InOctes OutOctes OutMac ChgTm CrtTm1 2 1011094177 59 68 3240 3821 0 0 days 00h01m29s09th(8909) 0 days 00h01m01s13th(6113)

Table 16-27 Description of the display rmon2 nlhosttable command output

Item Description

HIdx Index of the host control table

PIdx Protocol directory index



8687



Item Description

Addr Host address It is the source address of theincoming IP packets on the monitored interfaceand destination address of the outgoing IPpackets on the interface

InPkts Number of incoming packets on the monitoredinterface

OutPkts Number of outgoing packets on the monitoredinterface

InOctes Number of incoming bytes on the monitoredinterface

OutOctes Number of outgoing bytes on the monitoredinterface

OutMac Number of outgoing non-unicast packets on themonitored interface

ChgTm Entry time filter in the host control table

CrtTm Customized time filter


Function

The display rmon2 protocoldirtable command displays all entries in the protocolDirTable

Format

display rmon2 protocoldirtable

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

After you use the rmon2 protocoldirtable command to configure statistics on IP packetsyou can run the display rmon2 protocoldirtable command to view the configurations



8688



Example Display entries in the protocolDirTable

ltHUAWEIgt display rmon2 protocoldirtableprotocolDirId 800010080protocolDirParameters 200protocolDirLocalIndex 2protocolDirDescr wwprotocolDirAddressMapConfig not supportedprotocolDirHostConfig supported onprotocolDirMatrixConfig not supportedprotocolDirOwner huaweiprotocolDirStatus active

Table 16-28 Description of the display rmon2 protocoldirtable command output

Item Description

protocolDirId Protocol directory ID Currently RMON2 onlysupports IP protocol so the protocol directoryID is fixed at 800010080

protocolDirParameters Protocol directory parameter The value is fixedat 200

protocolDirLocalIndex Local protocol directory index

protocolDirDescr Protocol directory description

protocolDirAddressMapConfig Whether protocol directory address mapping issupported This function is not supportedcurrently

protocolDirHostConfig Whether the protocol directory host issupportedl not supported The device does not monitor

the network-layer host table of the protocoland this value cannot be changed

l supported on The device can monitor thenetwork-layer host table of the protocol andthe monitoring function is enabled

l supported off The device can monitor thenetwork-layer host table of the protocol butthe monitoring function is disabled

protocolDirMatrixConfig Whether protocol directory matrix is supportedThis function is not supported currently

protocolDirOwner Protocol directory owner

protocolDirStatus Protocol directory statusl active running normallyl not in service invalid



8689



Related Topics16217 rmon2 protocoldirtable


Function

The display snmp-agent trap feature-name rmon all command displays the status of alltraps about the RMON module

Formatdisplay snmp-agent trap feature-name rmon all

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

None

Example

Display the status of all traps about the RMON module

ltHUAWEIgt display snmp-agent trap feature-name rmon all------------------------------------------------------------------------------Feature name RMONTrap number 4------------------------------------------------------------------------------Trap name Default switch status Current switch statusrisingalarm on onfallingalarm on onrmon_pri_risingalarm on onrmon_pri_fallingalarm on on

Table 16-29 Description of the display snmp-agent trap feature-name rmon all commandoutput

Item Description

Feature name Name of the module to which a trap message belongs


Trap name Name of a trap message of the RMON module



8690



Item Description

Default switch status Default status of the trap functionl on indicates that the trap function is enabledl off indicates that the trap function is disabled

Current switch status Current status of the trap functionl on indicates that the trap function is enabledl off indicates that the trap function is disabled

risingalarm Indicates that the current sampled value is greater than orequal to the set threshold specified by the alarm table

fallingalarm Indicates that the current sampled value is less than or equalto the set threshold specified by the alarm table

rmon_pri_risingalarm Indicates that the current sampled value is greater than orequal to the set threshold specified by the pri_alarm table

rmon_pri_fallingalarm Indicates that the current sampled value is less than or equalto the set threshold specified by the pri_alarm table

Related Topics16219 snmp-agent trap enable feature-name rmon

16211 rmon alarm

FunctionThe rmon alarm command adds an entry to the alarm table

The undo rmon alarm command deletes an entry from the alarm table

Formatrmon alarm entry-number alarm-OID sampling-time absolute | changeratio | delta rising-threshold threshold-value1 event-entry1 falling-threshold threshold-value2 event-entry2 [ startup-alarm falling | rising | risingorfalling ] [ owner owner-name ]

undo rmon alarm entry-number

Parameters






8691




alarm-OID Specifies the alarm OID The name is a string of 1 to256 case-sensitivecharacters without spacesWhen quotation marks areused around the stringspaces are allowed in thestring

sampling-time Specifies the sampling interval The value is an integer thatranges from 5 to 65535 inseconds

absolute Indicates that the sample type isabsolute The value is the sampled valueat the end of the period

-

changeratio Indicates that the sample type ischangeratio The value is ChangingvalueSampling interval

-

delta Indicates that the sample type is deltaThe value is the difference between thesamples at the beginning and end of theperiod

-


Specifies the rising threshold ofsampled value


event-entry1 Indicates the event index correspondingto the rising threshold



Specifies the falling threshold ofsampled value


event-entry2 Indicates the event index correspondingto the falling threshold


startup-alarm falling | rising |risingorfalling

Indicates the trap flagl falling indicates that the system

sends a trap or log about an eventonly when a falling alarm istriggered

l rising indicates that the systemsends a trap or log about an eventonly when a raising alarm istriggered

l risingorfalling indicates that thesystem sends a trap or log about anevent when a raising alarm or fallingis triggered

-



8692




owner owner-name Indicates the owner of the alarm The name is a string of 1 to127 case-sensitivecharacters without spacesWhen quotation marks areused around the stringspaces are allowed in thestring

Views

System view

Default Level


Usage Guidelines

Usage Scenario

To monitor system running status run the rmon alarm command to configure an alarm tableand add an entry to the alarm table After the command is executed the RMON alarmfunction is enabled The system obtains information about the monitored object at thespecified interval and compares the obtained value with the configured threshold Then thesystem triggers the event according to the following table and records log or sends a trap tothe NMS

Situation Action

The sampled value is larger than or equal tothe configured rising threshold threshold-value1


The sampled value is smaller than or equalto the configured falling thresholdthreshold-value2


Prerequisites

Before configuring alarm function for the specified object run the rmon event command todefine the associated events Otherwise events cannot be triggered even if alarms aregenerated

If the alarm variables configured in RMON alarm function are MIB variables defined in thestatistics group or history group the Ethernet statistics function or history statistics functionmust be configured on the monitored Ethernet interface first Otherwise alarm entries cannotbe created



8693



Example

Monitor alarm thresholds for etherStatsBroadcastPkts (alarm OID is1361211611161) Set the sampling interval to 30 seconds and sample type to absoluteWhen the sampled value reaches or exceeds 500 event 1 is triggered When the sampledvalue reaches or falls below 100 event 2 is triggered The owner is creator

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] rmon statistics 1 owner creator[HUAWEI-GigabitEthernet001] quit[HUAWEI] rmon event 1 log[HUAWEI] rmon event 2 trap public[HUAWEI] rmon alarm 1 1361211611161 30 absolute rising-threshold 500 1 falling-threshold 100 2 owner creator

Related Topics1621 display rmon alarm

16212 rmon event

Function

The rmon event command adds an entry to the event table

The undo rmon event command deletes an entry from the event table

Format

rmon event entry-number [ description string ] log | trap object | log-trap object | none [ owner owner-name ]

undo rmon event entry-number

Parameters




description string Specifies the event description The value is a string of 1 to 127characters

log Records a log for the event -

trap Sends a trap to the NMS -

object Specifies the community name of theNMS receiving the trap


log-trap Records a log and sends a trap to theNMS for the event

-

none Indicates that no action is taken forthe event

-



8694




owner owner-name

Indicates the creator of the evententry

The name is a string of 1 to 127case-sensitive characters withoutspaces When quotation marksare used around the string spacesare allowed in the string

ViewsSystem view



This command specifies whether to record a log or send a trap for events When an erroroccurs in the system the RMON alarm function triggers the corresponding event You can runthe rmon event command to configure an event table and add an entry to the table The entryspecifies whether to record a log or send a trap to the NMS for the event

Prerequisites

The rmon alarm command is executed to configure the alarm objects Otherwise no alarmwill trigger the event

Example Send a trap to the NMS for event 10

ltHUAWEIgt system-view[HUAWEI] rmon event 10 trap public

Related Topics1622 display rmon event

16213 rmon history

FunctionThe rmon history command adds an entry to the history control table

The undo rmon history command deletes an entry from the history control table

Formatrmon history entry-number buckets number interval sampling-interval [ owner owner-name ]

undo rmon history entry-number



8695



Parameters


entry-number Specifies the index of the entryto be added or deleted


buckets number Indicates the maximumnumber of records in thehistory control table


intervalsampling-interval

Specifies the samplinginterval


owner owner-name

Indicates the owner of theentry in the history controltable

The name is a string of 1 to 127 case-sensitive characters without spacesWhen quotation marks are used aroundthe string spaces are allowed in thestring

Views


Default Level


Usage Guidelines

Usage Scenario

To collect statistics on the specified interface at an interval and save the statistics for futureretrieval run the rmon history command to configure a history control table and add an entryto the table The system can periodically collect statistics on each type of traffic includingbandwidth usage number of error packets and total number of packets

Precautions

The number of stored records is determined by the buckets number parameter When thenumber of records in the table reaches the maximum the system overwrites the old recordswith new ones Statistics include the number of packets broadcast packets and multicastpackets received by the interface within a sampling interval You can run the display rmonhistory command to view history sampling results

Example

Configure a history control table and add an entry with index 1 to the table Set themaximum number of entries in the table to 10 sampling interval to 5 seconds and creator touser1

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] rmon history 1 buckets 10 interval 5 owner user1



8696



Related Topics1624 display rmon history

16214 rmon prialarm

Function

The rmon prialarm command adds an entry to the extended alarm table

The undo rmon prialarm command deletes an entry from the extended alarm table

Format

rmon prialarm entry-number prialarm-formula description-string sampling-interval absolute | changeratio | delta rising-threshold threshold-value1 event-entry1 falling-threshold threshold-value2 event-entry2 entrytype cycle entry-period | forever [ ownerowner-name ]

undo rmon prialarm entry-number

Parameters


entry-number Specifies the index of the entry to be added ordeleted


prialarm-formula

Specifies the formula for calculating an alarmvariable The alarm variable in the formula isidentified by an OID The OID value startswith a dot for example (13612121101)8 The calculationformula is defined by user The calculationresult is a long integer Ensure that the lengthof calculation result in each step cannotexceed the limit otherwise the calculationresult is incorrect

The value is a string of 1to 256 characters

description-string

Specifies the alarm description The value is a string of 1to 256 characters

sampling-interval

Specifies the sampling interval The value is an integerthat ranges from 10 to65535 in seconds

absolute Indicates that the sample type is absolute Thevalue is the sampled value at the end of theperiod

-

changeratio Indicates that the sample type is changeratioThe value is Changing valueSamplinginterval

-



8697




delta Indicates that the sample type is delta Thevalue is the difference between the samples atthe beginning and end of the period

-


Specifies the alarm rising threshold The value is an integerthat ranges from 1 to2147483647

event-entry1 Indicates the entry number of the eventcorresponding to the rising threshold in theevent table



Specifies the alarm falling threshold The value is an integerthat ranges from 0 to2147483646

event-entry2 Indicates the entry number of the eventcorresponding to the falling threshold in theevent table


entrytype Indicates the lifetime type of an alarm entry -

cycle entry-period

Indicates the lifetime of an alarm entry The value is an integerthat ranges from 11 to2147483646

forever Indicates that the alarm entry is validpermanently

-

owner owner-name

Indicates the owner of the extended alarmvariable

The value is a string of 1to 127 case-sensitivecharacters without spaces

ViewsSystem view



The extended alarm function can compute the alarm variables and compare the result with thespecified threshold

After the extended alarm function is enabled the system performs the following operations

1 Samples the alarm variables in the extended alarm formula at the specified samplinginterval

2 Calculates the sampled value using the defined formula3 Compares the calculation result with the thresholds and takes actions according to the

following table



8698



Situation Action

The sampled value is larger than or equalto the configured rising thresholdthreshold-value1


The sampled value is smaller than orequal to the configured falling thresholdthreshold-value2


To use more alarm functions run the rmon prialarm command to configure the extendedalarm table and add an entry to the table

Prerequisites

Before configuring extended alarm function for the specified object run the rmon eventcommand to define the associated events Otherwise events cannot be triggered even ifalarms are generated When the sampled value exceeds the rising threshold or falls below thefalling threshold whether to record a log or send a trap to the NMS is determined by thermon event command

Example

Monitor broadcast and multicast packets Set the sampling interval to 10 seconds andsample type to absolute Trigger event 3 when the sample value reaches or exceeds 100000and when the sample value reaches or falls below 100 Set the lifetime of the entry to foreverand the owner to Huawei

ltHUAWEIgt system-view[HUAWEI] rmon prialarm 1 11361211611161+1361211611171 sumofbroadandmulti 10 absolute rising-threshold 100000 3 falling-threshold 100 3 entrytype forever owner Huawei

Related Topics1625 display rmon prialarm


Function

The rmon statistics command adds an entry to the statistics table

The undo rmon statistics command deletes an entry from the statistics table

Format

rmon statistics entry-number [ owner owner-name ]

undo rmon statistics entry-number



8699



Parameters


entry-number Indicates the row indexcorresponding to the entry tobe added or deleted


owner owner-name

Indicates the owner name The name is a string of 1 to 127 case-sensitive characters without spaces Whenquotation marks are used around thestring spaces are allowed in the string

Views


Default Level


Usage Guidelines

Usage Scenario

To keep collecting statistics on the current interface run the rmon statistics command toconfigure a statistics table and add an entry to the table This command monitors usage ofEthernet interfaces and collects statistics on errors including the number of collision packetsCRC error packets undersize and large packets timeout packets fragments broadcastpackets multicast packets and unicast packets

Prerequisites

The rmon-statistics enable command is executed to enable RMON statistics function on theinterface If the command is not executed the statistics result is 0

Example

Configure a statistics table on GigabitEthernet001 and add an entry with index 20 to thetable

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] rmon statistics 20 owner creater

Related Topics1626 display rmon statistics16218 rmon-statistics enable



8700




Function

The rmon2 hlhostcontroltable command creates or changes an entry in thehlHostControlTable

The undo rmon2 hlhostcontroltable command deletes an entry from the hlHostControlTableor from the whole table

Format

rmon2 hlhostcontroltable index ctrl-index [ datasource interface interface-type interface-number ] [ maxentry maxentry-value ] [ owner owner-name ] [ status active | inactive ]

undo rmon2 hlhostcontroltable [ index ctrl-index ]

Parameters




datasourceinterfaceinterface-typeinterface-number

Identifies an interface and a subnetcorresponding to hlHostControlDataSourceThe parameter value namely the interfaceindex is the data source defining the entry Inthis command the data source is representedby interface type and number

-

maxentrymaxentry-value

Indicates the maximum number of entries inthe host table

The value is an integerthat ranges from 1 to100000 The default valueis 50If the host tablecontains too many entriessystem performance isdegraded The defaultsettings of host table arerecommended

owner owner-name

Indicates the owner The value is a string of 1to 127 characters andcannot be empty

status Indicates the status of an entry in the hostcontrol table corresponding tohlHostControlStatus

-

active Indicates that the hlHostControlStatus value inthe host control table is active and this entry isavailable

-



8701




inactive Indicates that the hlHostControlStatus value inthe host control table is not in service and thisentry is inactive and unavailable

-

Views

System view

Default Level


Usage Guidelines

Usage Scenario

To monitor traffic on the subnet connected to an interface of the managed device run thermon2 hlhostcontroltable command and specify the interface

Precautions

When creating an entry specify the datasource interface parameter to identify the interfacewhich specifies the subnet The parameter value namely the interface index is the datasource defining the entry Enter the interface type and number in the command Only oneentry can be created for each interface in the host control table

The parameter status in the display rmon2 hlhostcontroltable command output matches thehlhostcontrolstatus value which indicates the entry status

l When the hlhostcontrolstatus value is set to inactive all related entries in the host tableare deleted automatically

l When the hlhostcontrolstatus value is set to active you cannot change thehlhostcontroldatasource and hlhostcontrolnlmaxdesiredentries values

l If an interface that corresponds to the hlhostcontroldatasource in an entry is deleted theentry is deleted at the same time

Example

Create an entry in the host control table

ltHUAWEIgt system-view[HUAWEI] rmon2 hlhostcontroltable index 1 datasource interface gigabitethernet 001 maxentry 100 owner huawei status active

Set the hlHostControlStatus value in the host control table to not in service

ltHUAWEIgt system-view[HUAWEI] rmon2 hlhostcontroltable index 1 status inactive

Related Topics1627 display rmon2 hlhostcontroltable



8702




Function

The rmon2 protocoldirtable command creates or modifies an entry in the protocolDirTable

The undo rmon2 protocoldirtable command deletes an entry from the protocolDirTable Ifoptional parameters are not specified the entire table is deleted

Format

rmon2 protocoldirtable protocoldirid protocol-id parameter parameter-value [ descrdescription-string ] [ host notsupported | supportedon | supportedoff ] [ owner owner-name ] [ status active | inactive ]

undo rmon2 protocoldirtable [ protocoldirid protocol-id parameter parameter-value ]

Parameters


protocol-id Indicates the protocol ID Only IP protocol issupported currently

The value is fixed at800010080

parameter-value Indicates the protocol parameter The value is fixed at200

description-string

Indicates the description of the protocoldirectory table

The value is a string of1 to 64 characters

host Indicates the configuration of protocoldirectory host corresponding toprotocolDirHostConfig in the display rmon2protocoldirtable command output

-

notsupported Indicates that the device does not monitor thenetwork-layer host table of the protocol andthis value cannot be changed

-

supportedon Indicates that the device can monitor thenetwork-layer host table of the protocol andthe monitoring function is enabled

-

supportedoff Indicates that the device can monitor thenetwork-layer host table of the protocol but themonitoring function is disabled

-

owner owner-name

Indicates the owner The value is a string of1 to 127 characters

status Indicates the entry status corresponding to theprotocolDirStatus value in the display rmon2protocoldirtable command output

-

active Indicates that the protocolDirStatus value in thehost control table is active and this entry isavailable

-



8703




inactive Indicates that the protocolDirStatus value in thehost control table is notinservice and this entryis inactive and unavailable

-

ViewsSystem view



To monitor statistics on IP packets run this command

RMON2 supports only statistics on IP packets on an Ethernet interface A protocol occupiesan entry so there is only one entry in the table

Precautions

When running the rmon2 protocoldirtable command you must set the description andprotocols supported by the host That is the descr and host parameters are mandatory

The parameter status in the display rmon2 protocoldirtable command output matches theprotocolDirStatus value which indicates the entry status

l When the status parameter is set to active the descr value cannot be modified Thevalue of host (corresponding to the protocolDirHostConfig value indicating the protocoldirectory host configuration) can be modified This parameter indicates whether tomonitor the network-layer host table of the protocolndash If the host value is set to notsupported the host value cannot be modifiedndash If the host value is not notsupported the value can be switched between

supportedon and supportedoffndash When the host value is changed from supportedon to supportedoff the

corresponding entry in the host control table is deletedl When the status is inactive all related entries in the host table are deleted

Example Create an entry in the protocol directory table

ltHUAWEIgt system-view[HUAWEI] rmon2 protocoldirtable protocoldirid 800010080 parameter 200 descr huawei host supportedon owner huawei status active

Set the protocolDirStatus value in the protocol directory table to notinservice

ltHUAWEIgt system-view[HUAWEI] rmon2 protocoldirtable protocoldirid 800010080 parameter 200 status inactive

Set the protocolDirHostConfig value in the protocol directory table to supportedoff



8704



ltHUAWEIgt system-view[HUAWEI] rmon2 protocoldirtable protocoldirid 800010080 parameter 200 host supportedoff

Related Topics1629 display rmon2 protocoldirtable


FunctionThe rmon-statistics enable command enables RMON statistics function on an interface

The undo rmon-statistics command disables RMON statistics function on an interface

By default RMON statistics function is disabled on interfaces

Formatrmon-statistics enable

undo rmon-statistics

ParametersNone

ViewsEthernet interface view GE interface view XGE interface view MultiGE interface view40GE interface view


Usage GuidelinesIf the statistics function is not enabled on an interface statistics in the statistics table andhistory table are 0

NOTE

After the interface mode is changed from Layer 2 to Layer 3 by using the undo portswitch command thedevice does not support the rmon-statistics enable command

Example Enable RMON statistics function on GigabitEthernet001

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] rmon-statistics enable




8705




Function

The snmp-agent trap enable feature-name rmon command enables the alarm function forthe RMON module

The undo snmp-agent trap enable feature-name rmon command disables the alarmfunction for the RMON module

By default the alarm function is enabled for the RMON module

Format

snmp-agent trap enable feature-name rmon [ trap-name fallingalarm | risingalarm |rmon_pri_fallingalarm | rmon_pri_risingalarm ]

undo snmp-agent trap enable feature-name rmon [ trap-name fallingalarm |risingalarm | rmon_pri_fallingalarm | rmon_pri_risingalarm ]

Parameters


trap-name Enables or disables the alarm function for the specifiedevent

If no event type is specified using the trap-nameparameter all types of alarms are enabled or disabled forthe RMON module

-

fallingalarm Indicates that the current sampled value is smaller than orequal to the threshold configured in the alarmTable

-

risingalarm Indicates that the current sampled value is larger than orequal to the threshold configured in the alarmTable

-

rmon_pri_fallingalarm Indicates that the current sampled value is smaller than orequal to the threshold configured in the prialarmTable

-

rmon_pri_risingalarm Indicates that the current sampled value is larger than orequal to the threshold configured in the prialarmTable

-

Views

System view

Default Level




8706



Usage GuidelinesA device managed by the NMS can send traps to the NMS if the alarm function is enabled forthe RMON module on the device By default all alarms for the RMON module are enabled Ifonly one or some event alarms need to be enabled run the snmp-agent trap enable feature-name rmon trap-name command

Example Enable the fallingalarm for the RMON module


163 LLDP Configuration Commands1631 cdp clear neighbor

FunctionThe cdp clear neighbor command clears statistics about Cisco Discovery Protocol (CDP)packets on all interfaces or a specified interface

Formatcdp clear neighbor [ interface interface-type interface-number ]



Clears CDP packet statisticson a specified interfacel interface-type specifies

the type of the interfacel interface-number

specifies the number ofthe interface

If no interface is specifiedthis command clears CDPpacket statistics on allinterfaces

-

ViewsUser view




8707



Usage Guidelines

None

Example

Clear CDP packet statistics on all the interfaces

ltHUAWEIgt cdp clear neighborWarning This command will clear CDP neighbor information of all the ports Continue [YN]y

Related Topics16317 lldp enable (system view)16316 lldp enable (interface view)16313 lldp compliance cdp receive


Function

The display cdp local command displays CDP local information on a specified interface orall interfaces

Format

display cdp local [ interface interface-type interface-number ]

Parameters



Displays the CDP local information on a specified interfacel interface-type specifies the interface typel interface-number specifies the interface number

If this parameter is not specified the command displays CDPlocal information on all the interfaces

-

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

Usage Scenario



8708



To check CDP information on a specified interface or all interfaces run the display cdp localinformation

Prerequisites


Example

Display CDP local information on all the interfaces

ltHUAWEIgt display cdp localSystem configuration-------------------------------------------------------------------------- CDP Notification Interval 5 (default is 5s) CDP Notification Enable enabled (default is enabled)

Remote Table Statistics-------------------------------------------------------------------------- Remote Table Last Change Time 0 days 23 hours 21 minutes 37 secondsRemote Neighbors Added 0Remote Neighbors Deleted 0Remote Neighbors Dropped 0Remote Neighbors Aged 0Total Neighbors 1

Port information-------------------------------------------------------------------------- Interface GigabitEthernet001CDP Status enabled (default is disabled) Total Neighbors 1 Interface GigabitEthernet002CDP Status enabled (default is disabled) Total Neighbors 0 ---- More ----

Table 16-30 Description of the display cdp local command output

Item Description

System configuration System configuration information

CDP Notification Interval Delay in sending a notification when theCDP neighbor information changes

CDP Notification Enable Status of the CDP notification functionl enabledl disabled

Remote Table Statistics Statistics about remote neighbors

Remote Table Last Change Time Time that elapsed since the last modificationof neighbor information





8709



Item Description

Remote Neighbors Dropped Number of remote neighbors of which theinformation is deleted because ofinsufficient storage memory

Remote Neighbors Aged umber of remote neighbors of which theinformation is deleted by the agingmechanism

Total Neighbors Total number of remote neighbors

Port information Total number of CDP neighbors of thedevice

CDP Status Whether LLDP compatibility with CDP isenabled on the interfacel enabledl disabled

Total Neighbors Number of CDP neighbors of the interface


Function

The display cdp neighbor command displays information about CDP neighbors of allinterfaces or a specified interface

Format

display cdp neighbor [ interface interface-type interface-number ]

Parameters



Displays information about CDP neighbors of a specifiedinterfacel interface-type specifies the interface typel interface-number specifies the interface number

If this parameter is not specified the command displaysinformation about CDP neighbors of all interfaces

-

Views

All views



8710



Default Level

1 Monitoring level

Usage Guidelines

Usage Scenario

This command enables you to know which CDP neighbors the local device has Layer 2information about the neighbors and to which interfaces the neighbors connect You can alsouse this command to check whether the Layer 2 information is configured correctly on theneighbors

Prerequisites


Example

Display information about CDP neighbors of all the interfaces

ltHUAWEIgt display cdp neighborGigabitEthernet001 has 1 neighbor(s) Neighbor index 1 Device ID ME3400 Port ID GigabitEthernet04 Version SCCP758-3-3SR2SPlatform cisco ME-3400EG-2CS-AMacAddress b4a4-e3cf-e984Discovered time 0 days 22 hours 33 minutes 36 seconds Expired time 122 Power drawn 12000 mw Power request ID 39308 Power management ID 2 Power request levels 12000 mw 0 mw ---- More ----

Table 16-31 Description of the display cdp neighbor command output

Item Description

Neighbor index Index of a CDP neighbor

Device ID ID of the CDP neighbor

Port ID ID of the interface connecting to the CDPneighbor

Version Version of the CDP neighbor

Platform Software platform of the CDP neighbor

MacAddress MAC address of the CDP neighbor

Discovered time Time when the CDP neighbor wasdiscovered



8711



Item Description

Expired time Aging time of CDP neighbor information inseconds

Power drawn Power set on the source

Power request ID Requested power ID

Power management ID ID used to manage power The ID is thenumber of times the power is changed

Power request levels Requested power level The maximumpower among the negotiated power values isselected


1634 display cdp neighbor brief

Function

The display cdp neighbor brief command displays brief information about CDP neighborsof the device

Format

display cdp neighbor brief

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

Usage Scenario

To quickly check information about CDP neighbors run the display cdp neighbor briefcommand

Prerequisites



8712




Example Display brief information about CDP neighbors

ltHUAWEIgt display cdp neighbor briefLocal Intf Neighbor Dev Neighbor Intf Exptime(s) GE001 ME3400 GE004 144

Table 16-32 Description of the display cdp neighbor brief command output

Item Description

Local Intf Local interface name

Neighbor Dev Name of a CDP neighbor

Neighbor Intf Neighbor interface name

Exptime(s) Aging time of CDP neighbor information inseconds

Related Topics16317 lldp enable (system view)16313 lldp compliance cdp receive


FunctionThe display cdp statistics command displays statistics about CDP packets sent and receivedby all interfaces or a specified interface

Formatdisplay cdp statistics [ interface interface-type interface-number ]



8713



Parameters


interfaceinterface-typeinterface-number

Displays statistics about CDP packets sent and received by aspecified interfacel interface-type specifies the interface typel interface-number specifies the interface number

If this parameter is not specified the command displaysstatistics about CDP packets sent and received by all theinterfaces

-

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

Usage Scenario

When you need to locate an LLDP fault on a device according to statistics about CDP packetssent and received by the device run the display cdp statistics command

NOTE

To check statistics about CDP packets sent and received in a specified period of time run the reset cdpstatistics command to clear the historical CDP packet statistics Wait for the specified period of timeand then run the display cdp statistics command to check the new CDP packet statistics

Prerequisites


Example

Display statistics about CDP packets received by all interfaces

ltHUAWEIgt display cdp statisticsCDP statistics global InformationStatistics for GigabitEthernet001Total frames received 30 Total frames discarded 0 Total frames error 0 Last cleared time never



8714



Table 16-33 Description of the display cdp statistics command output

Item Description

CDP statistics global Information Statistics about CDP packets and receivedby the device

Total frames received Number of received CDP packets

Total frames discarded Number of discarded CDP packets

Total frames error Number of received CDP error packets

Last cleared Time Time when the CDP packet statistics werecleared last time

Related Topics16317 lldp enable (system view)16329 reset cdp statistics


Function

The display lldp local command displays global LLDP information or the LLDP informationon a specified interface

Format

display lldp local [ interface interface-type interface-number ]

Parameters



Displays the LLDP information on a specified interfacel interface-type specifies the interface typel interface-number specifies the interface number

If no interface is specified the command displays LLDPinformation on all the interfaces with LLDP enabled

-

Views

All views

Default Level

1 Monitoring level



8715




The display lldp local command displays the global LLDP information or the LLDPinformation on an interfacel The global LLDP information includes system information MED system information

system configuration and data statistics on the peer devicel The LLDP information on an interface includes the interface information and MED

interface information

To verify the LLDP information and Layer 2 information of the system and interfaces runthis command

Prerequisites


Example Display the global LLDP information

ltHUAWEIgt display lldp localSystem information --------------------------------------------------------------------------Chassis type MAC address Chassis ID 00e0-11fc-1710 System name HUAWEI System description HUAWEI S5700-28P-LI Huawei Versatile Routing Platform Software VRP (R) softwareVersion 5160 (S5700 V200R009C00 ) Copyright (C) 2000-2015 HUAWEI TECH CO LTDSystem capabilities supported bridge router System capabilities enabled bridge router LLDP Up time 2015-01-22 132926 MED system information --------------------------------------------------------------------------Device class Network Connectivity (MED inventory information of master board) HardwareRev VER B FirmwareRev NA SoftwareRev Version 5160 V200R009C00 SerialNum NA Manufacturer name HUAWEI TECH CO LTD Model name NA Asset tracking identifier NA System configuration--------------------------------------------------------------------------LLDP Status enabled (default is disabled)LLDP Message Tx Interval 30 (default is 30s)LLDP Message Tx Hold Multiplier 4 (default is 4)LLDP Refresh Delay 2 (default is 2s)LLDP Tx Delay 2 (default is 2s)LLDP Notification Interval 5 (default is 5s)LLDP Notification Enable enabled (default is enabled)Management Address IP 1010101 MAC000b-09e6-3da1

Remote Table Statistics--------------------------------------------------------------------------Remote Table Last Change Time 0 days 0 hours 4 minutes 15



8716



seconds Remote Neighbors Added 5 Remote Neighbors Deleted 0 Remote Neighbors Dropped 0 Remote Neighbors Aged 0 Total Neighbors 5 Port information --------------------------------------------------------------------------

Interface GigabitEthernet001 LLDP Enable Status enabled (default is disabled) Total Neighbors 1 Port ID subtype Interface name Port ID GigabitEthernet001 Port description GigabitEthernet001 Port and protocol VLAN ID(PPVID) 0 Port and protocol VLAN supported NoPort and protocol VLAN enabled No Port VLAN ID(PVID) 1 VLAN name of VLAN 1 VLAN1 Protocol identity STP RSTPMSTP LACP EthOAM CFM Auto-negotiation supported Yes Auto-negotiation enabled Yes OperMau speed(1000)duplex(Full) Power port class PD PSE power supported No PSE power enabled No PSE pairs control abilityNo Power pairs Unknown Port power classificationUnknown Link aggregation supportedYes Link aggregation enabled No Aggregation port ID 0 Maximum frame Size 1526

EEE support YesTransmit Tw 36Receive Tw 36Fallback Receive Tw 36Echo Transmit Tw 36Echo Receive Tw 36 MED port information Media policy type Unknown Unknown Policy Yes VLAN tagged No Media policy VlanID 0 Media policy L2 priority 0 Media policy Dscp 0



8717



Power Type Unknown PoE PSE power source Unknown Port PSE Priority Unknown Port Available power value02(w) ---- More ----

Table 16-34 Description of the display lldp local command output

Item Description

System information

Chassis type Device ID sub-typel Chassis component chassis aliasl Interface alias interface aliasl Port component interface or backplane aliasl MAC address MAC addressl Network address network addressl Interface name name of the interfacel Locally assigned name of the local device

Chassis ID Device ID

System name Name of the device

System description Device description

System capabilities supported Capabilities of the local device includingl repeater repeaterl bridge bridge devicel wlanAccessPoint wireless access pointl router routerl telephone wireless devicel docsisCableDevice management stationl stationOnly base stationl other other capabilities

System capabilities enabled Capabilities enabled on the local device includingl repeater repeaterl bridge bridge devicel wlanAccessPoint wireless access pointl router routerl telephone wireless devicel docsisCableDevice management stationl stationOnly base stationl other other capabilities

LLDP Up time Time when LLDP is enabled



8718



Item Description

MED system information


HardwareRev Hardware version of the device


SoftwareRev Software version of the device





System configuration

LLDP Status LLDP statusl Enabledl DisabledThis parameter is configured using the lldp enable(system view) command

LLDP Message Tx Interval Interval for sending LLDP packetsThis parameter is configured using the lldp message-transmission interval command

LLDP Message Tx HoldMultiplier

Multiplier of the period in which the message is heldThis parameter is configured using the lldp message-transmission hold-multiplier command

LLDP Refresh Delay Delay in re-initializing the LLDP moduleThis parameter is configured using the lldp restart-delaycommand

LLDP Tx Delay Delay in sending the LLDP packetsThis parameter is configured using the lldp message-transmission delay command

LLDP Notification Interval Delay in sending the notification after the remoteinformation changesThis parameter is configured using the lldp trap-intervalcommand

LLDP Notification Enable Status of the notification functionl Enabledl Disabled



8719



Item Description

Management Address Management addressThis parameter is configured using the lldp management-address commandIf an invalid management address is used the inactivefield is added for this address For example if 10111 isan invalid management address the displayed informationis as follows Management Address IP101010110111 (inactive) MAC000b-09e6-3da1

Remote Table Statistics

Remote Table Last ChangeTime

Time that elapsed since the latest modification of remotedata



Remote Neighbors Dropped Number of packets discarded after the buffer is used up

Remote Neighbors Aged Number of neighbors that are aged out and deleted


Port information

LLDP Enable Status LLDP statusl Enabledl Disabled


Port ID subtype Subtypes of a port IDl Interface alias interface aliasl Port component interface or backplane aliasl MAC address MAC addressl Network address network addressl Interface name name of the interfacel Agent circuit ID circuit ID of the DHCP agentl Locally assigned name of the local device

Port ID Interface ID

Port description Interface description

Port VLAN ID(PVID) VLAN ID of the interface





8720



Item Description

Auto-negotiation supported Whether the interface supports auto-negotiationl Yesl No

Auto-negotiation enabled Whether the interface is enabled with auto-negotiationl Yesl No

OperMau Auto-sensing rate and duplex mode of the interface




PSE pairs control ability Whether the PSE twisted pair control is supportedl Yes PSE twisted pair control is supportedl No PSE twisted pair control is not supported


Port power classification PD power control level on the interfacel Class0 indicates level 1l Class1 indicates level 2l Class2 indicates level 3l Class3 indicates level 4l Class4 indicates level 5l Unknown indicates an unknown level

Link aggregation supported Whether the interface supports link aggregationl Yes The interface supports link aggregationl No The interface does not support link aggregation



8721



Item Description

Link aggregation enabled Whether link aggregation is enabled on the interfacel Yes enabledl No disabled









MED port information


unknown

Unknown Policy Whether the type of the media policy is unknownl Yes unknownl Defined known

VLAN tagged Whether to add tag to the packets of the voice VLANl Yes Adds a VLAN tag to packets of the voice VLANl No Not to add a VLAN tag to packets of the voice

VLAN



8722



Item Description




Power Type Power supply type






FunctionThe display lldp neighbor command displays information about neighboring device of allinterfaces or a specified interface

Formatdisplay lldp neighbor [ interface interface-type interface-number ]



8723





Displays information aboutneighboring devices of aspecified interfacel interface-type specifies



If no interface is specifiedthe command displaysinformation aboutneighboring devices of allinterfaces with LLDPenabled

-

ViewsAll views



Using this command you can know which neighboring devices are connected to the localdevice to which interfaces the neighboring devices are connected layer 2 information aboutthe neighbors and whether LLDP configuration is correct

Prerequisites


Example Display information about neighbor devices of interfaces GigabitEthernet001

ltHUAWEIgt display lldp neighbor interface gigabitethernet001GigabitEthernet001 has 1 neighbor(s) Neighbor index 1 Chassis type MAC address Chassis ID 00e0-11fc-1710 Port ID type Interface name Port ID GigabitEthernet001 Port description GigabitEthernet001 System name HUAWEI System description HUAWEI S5700-28P-LIHuawei Versatile Routing Platform Software



8724



VRP (R) softwareVersion 5160 (S5700 V200R009C00) Copyright (C) 2000-2015 HUAWEI TECH CO LTDSystem capabilities supported bridge router System capabilities enabled bridge router Management address type ipv4 Management address value 127001 OID 061543614120115254112111Expired time 104s Port VLAN ID(PVID) 1 VLAN name of VLAN 1 VLAN 0001 Protocol identity Auto-negotiation supported Yes Auto-negotiation enabled Yes OperMau speed(1000)duplex(Full) Power port class PD PSE power supported No PSE power enabled No PSE pairs control abilityNo Power pairs Unknown Port power classificationUnknown Link aggregation supportedYes Link aggregation enabled No Aggregation port ID 0 Maximum frame Size 9216

EEE support YesTransmit Tw 36Receive Tw 36Fallback Receive Tw 36Echo Transmit Tw 36Echo Receive Tw 36 MED Device information Device class Network Connectivity HardwareRev VERA FirmwareRev NA SoftwareRev Version 5160 V200R009C00 SerialNum NA Manufacturer name HUAWEI TECH CO LTD Model name NA Asset tracking identifier NA Media policy type Voice Unknown Policy Defined VLAN tagged Yes Media policy VlanID 0 Media policy L2 priority 6 Media policy Dscp 46 Power Type Unknown PoE PSE power source Unknown Port PSE Priority Unknown Port Available power value02(w)



8725



Table 16-35 Description of the display lldp neighbor command output

Item Description

Neighbor index Index of a neighbor

Chassis type ID sub-types of a neighboring devicel Chassis component chassis aliasl Interface alias interface aliasl Port component interface or backplane aliasl MAC address MAC addressl Network address network addressl Interface name name of the interfacel Locally assigned name of the local device

Chassis Id ID of a neighboring device

Port ID type ID sub-type of a neighboring interfacel Interface alias interface aliasl Port component interface or backplane aliasl MAC address MAC addressl Network address network addressl Interface name name of the interfacel Agent circuit ID circuit ID of the DHCP agentl Locally assigned name of the local device

Port Id ID of a neighbor interface

Port description Description of a neighboring interface

System name System name of a neighboring device

System description Description of a neighboring device

System capabilities supported Capabilities of a neighboring device (at least onecapability is supported)l other other capabilitiesl repeater repeaterl bridge bridge devicel wlanAccessPoint wireless access pointl router routerl telephone wireless devicel docsisCableDevice management stationl stationOnly base station



8726



Item Description

System capabilities enabled Capabilities enabled on a neighboring device (This field isa subset of the system capabilities supported field and atleast one capability must be enabled)l other other capabilitiesl repeater repeaterl bridge bridge devicel wlanAccessPoint wireless access point (AP)l router routerl telephone wireless devicel docsisCableDevice management stationl stationOnly base station

Management address value Management address of a neighbor

Management address Management address of a neighbor

OID Neighbor management address OID

Expired time Aging time of a neighbor

Port VLAN ID(PVID) VLAN ID of an interface



Auto-negotiation supported Whether the interface supports auto-negotiationl Yes Auto-negotiation is supportedl No Auto-negotiation is not supported

Auto-negotiation enabled Whether the interface is enabled with auto-negotiationl Yes enabledl No disabled

OperMau Transmission rate and duplex mode of the interface






8727



Item Description

PSE pairs control ability Whether the PSE control is supportedl Yes PSE control is supportedl No PSE control is not supported


Port power classification PD power control level on the interfacel Class0 indicates level 1l Class1 indicates level 2l Class2 indicates level 3l Class3 indicates level 4l Class4 indicates level 5l Unknown indicates an unknown control level

Link aggregation supported Whether link aggregation is supported on the interfacel Yes The interface supports link aggregationl No The interface does not support link aggregation

Link aggregation enabled Whether link aggregation is enabled on an interfacel Yes The interface supports link aggregationl No The interface does not support link aggregation












8728



Item Description

HardwareRev Hardware version of the product


SoftwareRev Software version of the product






unknown

Unknown Policy Whether the type of the media policy is unknown Yesindicates that the media policy type is unknown Noindicates that the media policy type is known

VLAN tagged Whether to add tag to the packets of the voice VLAN




Power Type Power supply typel PSE power-sourcing equipmentl PD powered device




8729



Item Description





FunctionThe display lldp neighbor brief command displays brief information about neighbors of thedevice

Formatdisplay lldp neighbor brief

ParametersNone

ViewsAll views



To quickly view the neighbors of the local device and the interfaces connected to neighborsrun this command

Prerequisites


Example Display information about neighbor devices



8730



ltHUAWEIgt display lldp neighbor briefLocal Intf Neighbor Dev Neighbor Intf Exptime(s)GE001 Huawei GE001 103

Table 16-36 Description of the display lldp neighbor brief command output

Item Description

Local Intf Local interface

Neighbor Dev Name of neighbor device

Neighbor Intf Neighboring interface

Exptime Aging time of a neighbor in seconds

Related Topics1637 display lldp neighbor16317 lldp enable (system view)


Function

The display lldp statistics command displays statistics about LLDP packets sent and receivedby all or a specified interface

Format

display lldp statistics [ interface interface-type interface-number ]

Parameters



Displays statistics aboutLLDP packet sent andreceived by a specifiedinterfacel interface-type specifies



If no interface is specifiedthe command displaysstatistics about LLDPpackets on all interfaces

-



8731



Views

All views

Default Level

1 Monitoring level

Usage Guidelines

Usage Scenario

The display lldp statistics command displays the statistics about sent and received LLDPpackets

To display the LLDP packet statistics within a specified period of time run the reset lldpstatistics command to clear the existing statistics first and then run the display lldp statisticscommand to display the new statistics

Prerequisites


Precautions

If the LLDP function is enabled globally but disabled on an interface the packet statistics onthe interface are 0

Example

Display the statistics about sent and received LLDP packets on all interfacesltHUAWEIgt display lldp statisticsLLDP statistics global Information Statistics for GigabitEthernet001 Transmitted Frames Total 2839 Received Frames Total 2728 Frames Discarded Total 0 Frames Error Total 0 TLVs Discarded Total 0 TLVs Unrecognized Total 0 Neighbors Expired Total 0

Table 16-37 Description of the display lldp statistics command output

Item Description

Transmitted Frames Total Number of sent LLDP packets

Received Frames Total Number of received LLDP packets

Frames Discarded Total Number of discarded LLDP packets

Frames Error Total Number of received errored LLDP packets

TLVs Discarded Total Number of discarded TLVs

TLVs Unrecognized Total Number of unknown TLVs

Neighbors Expired Total Number of aged-out neighbors



8732



Related Topics16317 lldp enable (system view)16330 reset lldp statistics


FunctionThe display lldp tlv-config command displays optional TLVs that can be sent with LLDPpackets on all or a specified interface

Formatdisplay lldp tlv-config [ interface interface-type interface-number ]



Displays optional TLVssupported by a specifiedinterfacel interface-type specifies



If no interface is specifiedthe command displaysoptional TLVs on allinterfaces

-

ViewsAll views



The display lldp tlv-config command displays the TLVs supported by the specified interfaceor all interfaces and thus you can know whether the required TLVs are enabled and unneededTLVs are disabled

Prerequisites




8733



Example

Display Optional TLVs that can be sent with LLDP packets on GigabitEthernet001

ltHUAWEIgt display lldp tlv-config interface gigabitethernet 001LLDP tlv-config of port [GigabitEthernet001]---------------------------------------------------- Name Status Default ---------------------------------------------------- Basic optional TLV ---------------------------------- Port Description TLV Yes Yes System Name TLV Yes Yes System Description TLV Yes Yes System Capabilities TLV Yes Yes Management Address TLV Yes Yes IEEE 8021 extend TLV ---------------------------------- Port VLAN ID TLV Yes Yes Port And Protocol VLAN ID TLV Yes Yes VLAN Name TLV Yes Yes Protocol identity TLV No No IEEE 8023 extend TLV ---------------------------------- MAC-Physic TLV Yes Yes Power Via MDI TLV Yes Yes Link Aggregation TLV Yes Yes Maximum Frame Size TLV Yes Yes EEE TLV Yes Yes LLDP-MED extend TLV ---------------------------------- Capabilities TLV Yes Yes Extended Power Via MDI TLV Yes Yes Inventory TLV Yes Yes Network Policy TLV Yes Yes Location Identification TLV No No

Table 16-38 Description of the display lldp tlv-config command output

Item Description

Name Type of TLV

Status Whether the interface is configured to send theTLVs of the specified type

Default Whether the TLVs of the specified types are senton an interface by default

Basic optional TLV Basic TLVs that can be sent on an interface

Port Description TLV Interface description TLV

System Name TLV System name TLV

System Description TLV System description TLV

System Capabilities TLV TLV indicating the system capability set

Management Address TLV Management address TLV



8734



Item Description

IEEE 8021 extend TLV Type of the IEEE 8021 organizational-specificTLVs that can be sent on an interface

Port VLAN ID TLV PVID TLV

Port And Protocol VLAN ID TLV Port and protocol VLAN ID TLV

VLAN Name TLV VLAN name TLV

Protocol identity TLV Protocol ID TLV

IEEE 8023 extend TLV IEEE 8023 organizational-specific TLVs that canbe sent on an interface

MAC-Physic TLV TLV indicating physical attributes of an interface

Power Via MDI TLV Power capability TLV

Link Aggregation TLV Link aggregation TLV

Maximum Frame Size TLV Maximum frame length TLV

LLDP-MED extend TLV LLDP MED TLV

Capabilities TLV TLV indicating MED capability sets

Extended Power Via MDI TLV TLV indicating the extended power supplycapabilities

Inventory TLV Inventory information including HardwareRevision TLV Firmware Revision TLV SoftwareRevision TLV Serial Number TLV ManufacturerName TLV Model name TLV and Asset id TLV

Network Policy TLV Network policy TLV

Location Identification TLV Location ID TLV

EEE TLV EEE capability TLV


FunctionThe display snmp-agent trap feature-name lldptrap all command displays the status of alltraps on the LLDP module

Formatdisplay snmp-agent trap feature-name lldptrap all

ParametersNone



8735



ViewsAll views


Usage GuidelinesBefore running the display snmp-agent trap feature-name lldptrap all command run thesnmp-agent command to enable the SNMP Agent function

Example Display the status of all traps on the LLDP module

ltHUAWEIgt display snmp-agent trap feature-name lldptrap all------------------------------------------------------------------------------ Feature name LLDPTRAP Trap number 5 ------------------------------------------------------------------------------ Trap name Default switch status Current switch status lldpRemTablesChange on on hwLldpEnabled on on hwLldpDisabled on on hwLldpLocManIPAddrChange on onhwLldpRateExcessive on on

Table 16-39 Description of the display snmp-agent trap feature-name lldptrap allcommand output

Item Description

Feature name Name of the module to which a trap belongs


Trap name Names of a trap traps of the LLDP module includel lldpRemTablesChange Sends a trap when LLDP

neighbor information changesl hwLldpEnabled Sends a Huawei proprietary trap when

the LLDP function is enabled globallyl hwLldpDisabled Sends a Huawei proprietary trap when

the LLDP function is disabled globallyl hwLldpLocManIPAddrChange Sends a Huawei

proprietary trap when the LLDP management address ofthe device changes

l hwLldpRateExcessive Sends a Huawei proprietary trapwhen the rate of LLDPDUs received by an interfaceexceeds the alarm threshold



8736



Item Description


Current switch status Status of a trapl on The trap is enabledl off The trap is disabled

Related Topics16331 snmp-agent trap enable feature-name lldptrap


Function

The lldp clear neighbor command clears neighbor information in the system or on aninterface

Format

lldp clear neighbor [ interface interface-type interface-number ]

Parameters



Indicates the type andnumber of the interfacewhose neighbor informationto be cleared In thecommandl interface-type specifies



If no interface is specifiedneighbor information of allinterfaces is cleared

-

Views

User view



8737



Default Level


Usage Guidelines

Usage Scenario

If you want to obtain the latest neighbor information of interfaces use the lldp clearneighbor command to clear existing neighbor information When an interface receives newpackets new neighbor information is generated

Prerequisites


Example

Clear neighbor information of all interfaces

ltHUAWEIgt lldp clear neighborWarning This command will clear the neighbor information of all the ports Continue [YN]y

Related Topics1636 display lldp local1637 display lldp neighbor1638 display lldp neighbor brief16316 lldp enable (interface view)16317 lldp enable (system view)


Function

The lldp compliance cdp receive command enables CDP-compatible LLDP on an interface

The undo lldp compliance cdp receive command disables CDP-compatible LLDP on aninterface

By default CDP-compatible LLDP is disabled on an interface

Format

lldp compliance cdp receive

undo lldp compliance cdp receive

ParametersNone



8738






Neighbors may use other proprietary protocols but LLDP for example CDP To ensure thatthe local device can discover and identify the neighbors you can use this command to enableCDP-compatible LLDP on an interface

Prerequisites


Precautions

An Ethernet interface supports the LLDP configuration no matter whether it works in Layer 2or Layer 3 mode

Example Enable CDP-compatible LLDP on GigabitEthernet001

ltHUAWEIgt system-view[HUAWEI] interface GigabitEthernet 001[HUAWEI-GigabitEthernet001] lldp compliance cdp receive

Related Topics16317 lldp enable (system view)16316 lldp enable (interface view)


FunctionThe lldp compliance cdp txrx command enables an interface to exchange information withCDP-capable devices

The undo lldp compliance cdp txrx command disables an interface from exchanginginformation with CDP-capable devices

By default an interface cannot exchange information with CDP-capable devices

Formatlldp compliance cdp txrx

undo lldp compliance cdp txrx



8739



Parameters

None

Views


Default Level


Usage Guidelines

Usage Scenario

Some IP phones send proprietary protocol packets but not DHCP packets to apply for IPaddresses After you run the lldp compliance cdp txrx command on an interface the switchcan identify proprietary protocol packets sent from such the IP phone connected to theinterface and respond to the proprietary protocol packets In addition the switch assigns thevoice VLAN configured on the LLDP module to the IP phone

Prerequisites


Precautions

The lldp compliance cdp txrx command can only be configured on the physical Ethernetinterface working in Layer 2 mode

When a switch connects the IP phones of some vendors you are advised to run the lldp tlv-enable med-tlv network-policy voice-vlan vlan vlan-id command to specify the voiceVLAN ID in the MED TLVs advertised from the interface

Example

Enable GigabitEthernet001 to exchange information with CDP-capable voice devices

ltHUAWEIgt system-view[HUAWEI] interface GigabitEthernet 001[HUAWEI-GigabitEthernet001] lldp tlv-enable med-tlv network-policy voice-vlan vlan 10[HUAWEI-GigabitEthernet001] lldp compliance cdp txrx


Function

The lldp dot3-tlv power command sets the standard to which the 8023 Power via MDI TLVsent by an interface conforms

The undo lldp dot3-tlv power command restores the default configuration

By default the 8023 Power via MDI TLV conforms to 8021 ab



8740



Format

lldp dot3-tlv power 8021ab | 8023at

undo lldp dot3-tlv power 8023at


8021ab Indicates that the 8023Power via MDI TLV sent bythe interface conforms to8021 ab

-

8023at Indicates that the 8023Power via MDI TLV sent bythe interface conforms to8023 at

-

Views


Default Level


Usage Guidelines

Usage Scenario

The 8023 Power via MDI TLV has the following formatsl 8021 ab format [ TLV type | TLV information string length | 8023 OUI | MDI power

support | PSE power pair | power class ]l 8023 at format [ TLV type | TLV information string length | 8023 OUI | MDI power

support | PSE power pair | power class | typesourcepriority | PD requested power value |PSE allocated power value ]

Based on 8021 ab 8023 at extends three fields typesourcepriority PD requested powervalue and PSE allocated power value

Prerequisites


Precautions

After the global LLDP is disabled the LLDP configuration is deleted from all interfaces

Before selecting a format of the 8023 Power via MDI TLV you must know the TLV formatsupported by the neighbors The TLV format on the local device must be the same as that onthe neighbors



8741



An Ethernet interface supports the lldp dot3-tlv power command no matter whether it worksin Layer 2 or Layer 3 mode

Example

Configure the interface to send the 8023 Power via MDI TLV conforming to 8023 at

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] lldp dot3-tlv power 8023at

Related Topics1636 display lldp local16317 lldp enable (system view)16316 lldp enable (interface view)

16316 lldp enable (interface view)

Function

The lldp enable command enables LLDP on an interface

The undo lldp enable command disables LLDP on an interface

After LLDP is enabled in the system view all interfaces are enabled with LLDP

Format

lldp enable

undo lldp enable

Parameters

None

Views

Ethernet interface view GE interface view XGE interface view MultiGE interface view40GE interface view port group view MEth interface view

Default Level


Usage Guidelines

Usage Scenario

After LLDP is enabled on an interface the interface exchanges LLDP packets with LLDP-enabled neighbors The interface receives status information from the neighbors and sends thelocal status information to the neighbors The NMS then obtains the status information fortopology discovery



8742



Prerequisites


Precautions





l If LLDP needs to be disabled on some interfaces enable LLDP globally first and run theundo lldp enable command on these interfaces To re-enable LLDP on these interfacesrun the lldp enable command in the views of these interfaces

NOTE

l LLDP can be enabled and disabled only on the physical interfaces but cannot be used on logicalinterfaces such as VLANIF interface and Eth-Trunk

l On an Eth-Trunk LLDP can only be enabled on member interfaces LLDP status of a memberinterface does not affect that of another

l An Ethernet interface supports the LLDP configuration no matter whether it works in Layer 2 orLayer 3 mode

Example

Disable LLDP on GigabitEthernet001

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] undo lldp enableInfo The LLDP is disabled on the port successfully



Function

The lldp enable command enables LLDP globally

The undo lldp enable command disables LLDP globally

By default LLDP is disabled globally

Format

lldp enable



8743



undo lldp enable

Parameters

None

Views

System view

Default Level


Usage Guidelines

Usage Scenario

To view the Layer 2 link status or analyze network topology run the lldp enable command


After LLDP is enabled globally the device sends its own status information to LLDP-enabledneighbors and receives the status information from the neighbors

Precautions

The interval between enabling LLDP globally and disabling LLDP cannot be shorter than 10seconds otherwise an error message is displayed





Example

Enable LLDP globally

ltHUAWEIgt system-view[HUAWEI] lldp enableInfo Global LLDP is enabled successfully

Disable LLDP globally

ltHUAWEIgt system-view[HUAWEI] undo lldp enableWarning This command will delete the configurations of LLDP on all the portsContinue[YN]yInfo Global LLDP is disabled successfully



8744




Function

The lldp management-address command configures the LLDP management IP address

The undo lldp management-address command restores the default setting

By default the system automatically obtains the management IP address

Format

lldp management-address ip-address

undo lldp management-address


ip-address Specifies the managementIP address


Views

System view

Default Level


Usage Guidelines

Usage Scenario

The management IP address is carried in the management address TLV field of the LLDPpacket It is used by the NMS to identify and manage devices A management addressidentifies a device facilitating the layout of the network topology and network managementTo allocate a management address to a neighbor run the lldp management-addresscommand

Prerequisites


The management IP address to be allocated must be a valid IP address existing on the device


After the configuration the management IP address is added to the management address TLVfield of the LLDP packet The NMS then identifies the device according to the managementIP address

Precautions



8745



If the configured management IP address is invalid or no management IP address isconfigured the system sets an IP address in the address list as the management IP addressThe system selects the IP address in the following sequence loopback interface addressmanagement port address VLANIF interface address Layer 3 Ethernet interface address andSub-interface Among the IP addresses of the same type the system selects the smallest oneIf the system does not find a management IP address the bridge MAC address is used as themanagement IP address

Example

Set the LLDP management IP address to 1010101

ltHUAWEIgt system-view[HUAWEI] lldp management-address 1010101


16319 lldp message-transmission delay

Function

The lldp message-transmission delay command sets the LLDP packet transmission delay

The undo lldp message-transmission delay command restores the default LLDP packettransmission delay

By default the LLDP packet transmission delay is 2 seconds

Format

lldp message-transmission delay delay

undo lldp message-transmission delay [ delay ]


delay Specifies the LLDP packettransmission delay

The value is an integerranging from 1 to 8192 inseconds The default valueis 2 secondsThe delay value depends onthe interval value in lldpmessage-transmissioninterval The delay valuemust be equal to or smallerthan a quarter of the intervalvalue



8746



Views

System view

Default Level


Usage Guidelines

Usage Scenario

There is a delay before the interface sends an LLDP packet to the neighbor when the devicestatus changes frequently After the LLDP packet transmission delay is set on the device theLLDP-enabled interfaces send LLDP packets to neighbors after a delay (the delay is the sameas or longer than the delay you specified) The interfaces may send LLDP packets at differenttime points

If the device status changes frequently extend the delay in preventing the device fromfrequently sending packets to the neighbors A delay suppresses the network topologyflapping

Prerequisites



The LLDP packet transmission delay must be set properly and adjusted according to networkloads

l A large value reduces the LLDP packet transmission frequency when the local devicestatus frequently changes This helps save system resources However if the value is toolarge the device cannot notify neighbors of its status in a timely manner and the NMScannot discover the network topology changes in real time

l A small value increases the LLDP packet transmission frequency and enables the NMSto discover network topology changes in real time when the local device statusfrequently changes However if the value is too small LLDP packets are exchangedfrequently increasing the system load


Precautions

Consider the value of interval when adjusting the value of delay because it is restricted by thevalue of intervall The value of delay ranges from 1 to 8192l The value of delay must be smaller than or equal to a quarter of interval Therefore if

you want to set delay to be greater than a quarter of interval first increase the intervalvalue to four times the new delay value and then increase the delay value

NOTE

If the interval value is smaller than four times the delay value the system displays an error messagewhen you run the undo lldp message-transmission delay command To run the undo lldp message-transmission delay command in this case increase the interval value to at least four times the delayvalue first



8747



Example

Set the LLDP packet transmission delay to 5 second

ltHUAWEIgt system-view[HUAWEI] lldp message-transmission delay 5



Function

The lldp message-transmission hold-multiplier command sets the hold time multiplier ofdevice information stored on neighbors

The undo lldp message-transmission hold-multiplier command restores the default holdtime multiplier of device information stored on neighbors

The default hold time multiplier is 4

Format

lldp message-transmission hold-multiplier hold

undo lldp message-transmission hold-multiplier [ hold ]


hold Specifies the hold timemultiplier of deviceinformation on neighbors

The value is an integerranging from 2 to 10 Thedefault value is 4

Views

System view

Default Level


Usage Guidelines

Usage Scenario



8748



The time multiplier is used to calculate how long a packet can be saved on a neighboringnode After receiving an LLDP packet a neighbor updates the aging time of the deviceinformation from the sender based on the TTL

The storage time calculation formula is TTL = Min (65535 (interval x hold))

TTL is the device information storage time It is the smaller value between 65535 and(interval x hold)

interval indicates the interval at which the device sends LLDP packets to neighbors Thisparameter is set by lldp message-transmission interval hold indicates the hold timemultiplier of device information on neighbors

After the LLDP function is disabled on the device its neighbors wait until the TTL of thedevice information expires and then delete the device information This prevents networktopology flapping

Prerequisites



The hold time multiplier of device information on neighbors must be set to a proper valuel A large value of hold prevents network topology flapping However if the value is too

large the device cannot notify neighbors of its status in a timely manner and the NMScannot discover the network topology changes in real time

l A small value of hold enables the NMS to discover topology change in time However ifthe value is too small the neighbors update device information too frequently Thisincreases the load on the system and wastes resources


Example

Set the hold time multiplier of device information on neighbors to 5

ltHUAWEIgt system-view[HUAWEI] lldp message-transmission hold-multiplier 5


16321 lldp message-transmission interval

Function

The lldp message-transmission interval command sets the LLDP transmission interval

The undo lldp message-transmission interval command restores the default LLDPtransmission interval

The default LLDP transmission interval is 30 seconds



8749



Formatlldp message-transmission interval interval

undo lldp message-transmission interval [ interval ]


interval Specifies the LLDPtransmission interval

The value is an integerranging from 5 to 32768 inseconds The default valueis 30 secondsThe interval value dependson the delay value in lldpmessage-transmissiondelay The value of intervalmust be equal to or greaterthan four times the value ofdelay Otherwise an erroroccurs in the configuration

ViewsSystem view



When the LLDP status of the device keeps unchanged or the device does not discover newneighbors the interface sends LLDP packets to the neighbors at a certain interval After theLLDP transmission interval is set on the device the LLDP enabled interfaces send LLDPpackets to neighbors at this interval The interfaces may send LLDP packets at different timepoints

If you want to change the network topology detection frequency run the lldp message-transmission interval command to change the LLDP transmission interval

Prerequisites



The LLDP transmission interval must be set properly and adjusted according to networkloadsl A large value reduces the LLDP packet transmission frequency This helps save system

resources However if the value is too large the device cannot notify neighbors of its



8750



status in a timely manner and the NMS cannot discover the network topology changes inreal time

l A short interval increases the LLDP packet transmission frequency and enables the NMSto discover network topology changes in real time However if the interval is too shortLLDP packets are exchanged frequently increasing the system load


Precautions

Consider the value of delay when adjusting the value of interval because it is restricted by thevalue of delayl The value of interval ranges from 5 to 32768l The value of interval must be equal to or greater than four times the value of delay

Therefore if you want to set interval to be smaller than four times the value of delayfirst reduce the delay value to be equal to or smaller than a quarter of the new intervalvalue and then reduce the interval value

NOTE

If the delay value is greater than a quarter of the interval value the system displays an error messagewhen you run the undo lldp message-transmission interval command To run the undo lldp message-transmission interval command in this case reduce the delay value to be equal to or smaller than aquarter of interval first

Example

Set the LLDP transmission interval to 35 seconds

ltHUAWEIgt system-view[HUAWEI] lldp message-transmission interval 35

Related Topics1636 display lldp local16317 lldp enable (system view)16319 lldp message-transmission delay


Function

The lldp restart-delay command sets the delay in re-enabling the LLDP function on aninterface

The undo lldp restart-delay command restores the default delay in re-enabling the LLDPfunction on an interface

The default delay is 2 seconds

Format

lldp restart-delay delay

undo lldp restart-delay [ delay ]



8751



Parameters


delay Specifies the delay in re-enabling the LLDP functionon an interface

The value is an integerranging from 1 to 10 inseconds The default valueis 2 seconds

Views

System view

Default Level


Usage Guidelines

Usage Scenario

There is a delay before LLDP is re-enabled on an interface The delay suppresses the topologyflapping caused by the frequent LLDP status changes

Prerequisites



The delay in re-enabling the LLDP function on an interface must be set properly

l A large value of delay prevents network topology flapping However if the value is toolarge the device cannot notify neighbors of its status in a timely manner and the NMScannot discover the network topology changes in real time

l A small value of delay enables the NMS to discover topology change in time Howeverif the value is too small the neighbors update device information too frequently Thisincreases the load on the system and wastes resources


Example

Set the delay in re-enabling the LLDP function on an interface to 3 second

ltHUAWEIgt system-view[HUAWEI] lldp restart-delay 3




8752




Function

The lldp tlv-enable command sets the TLVs that can be sent by the MEth interface

The undo lldp tlv-enable command sets the TLVs disabled on the MEth interface

By default the MEth interface can advertise all TLVs except the Location Identification TLV

Format


lldp tlv-enable med-tlv all | capability | inventory | location-id civic-address device-type country-code ca-type ca-value amp lt1-10gt | elin-address Tel-Number


undo lldp tlv-enable med-tlv all | capability | inventory | location-id [ civic-address |elin-address ]

Parameters


all Indicates to advertise all basic TLV -


-


-


-


-


-

all Indicates to advertise all MED TLVsexcept the Location Identification TLV

-


-


-



8753





-






-



ViewsMEth interface view






8754



Devices exchange LLDPDUs carrying TLVs to obtain neighbor information LLDPPDUssupported by the management interface includes basic TLVs and MED TLVs


Prerequisites


Precautions

l If the all parameter is not specified all the available TLVs of the specified type can beadvertised except the Location Identification TLV If the all parameter is not specifiedonly one type of TLV can be advertised To advertise multiple types of TLVs run thiscommand multiple times

l You can specify the other types of MED TLVs only after specifying the MEDCapabilities TLVTo disable the MED Capabilities TLV first disable the other types of MED TLVs

Example

Configure The MEth interface to advertise the MED Capabilities TLV

ltHUAWEIgt system-view[HUAWEI] interface meth 001[HUAWEI-MEth001] lldp tlv-enable med-tlv capability



Function

The lldp tlv-enable basic-tlv command sets the basic TLVs that can be sent by an interface

The undo lldp tlv-enable basic-tlv command set the basic TLVs disabled on an interface

By default an interface can advertise all basic TLVs

Format



Parameters


all Indicates to advertise all basic TLVs -



8755





-


-


-


-


-








Prerequisites


Precautions




8756



NOTE

An Ethernet interface working in Layer 3 mode also supports the basic TLV

Example

Configure GigabitEthernet001 to advertise all basic TLVs

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] lldp tlv-enable basic-tlv all



Function

The lldp tlv-enable dot1-tlv command sets to advertise TLVs defined by the IEEE 8021working group



Format

lldp tlv-enable dot1-tlv all | port-vlan-id | protocol-vlan-id [ vlan-id ] | vlan-name [ vlan-id ] | protocol-identity

undo lldp tlv-enable dot1-tlv all | port-vlan-id | protocol-vlan-id [ vlan-id ] | vlan-name[ vlan-id ] | protocol-identity

Parameters



-

port-vlan-id Indicates to advertise port VLAN TLVThe VLAN ID is the default VLAN IDon the interface

-

protocol-vlan-id [ vlan-id ]

Indicates to advertise port protocolVLAN TLV If vlan-id is not specifiedthe interface does not support protocolVLAN TLVs




8757




vlan-name [ vlan-id ] Indicates to advertise VLAN NameTLV If vlan-id is not specified thedefault VLAN ID is used


protocol-identity Indicates to advertise protocol identityTLV

-

Views


Default Level


Usage Guidelines

Usage Scenario





Prerequisites


Precautions


NOTE

An Ethernet interface working in Layer 3 mode does not support the TLVs defined in IEEE8021



8758



Example

Configure GigabitEthernet001 to advertise the port VLAN TLV in the IEEE 8021 formatltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] lldp tlv-enable dot1-tlv port-vlan-id



Function

The lldp tlv-enable dot3-tlv command sets to advertise the TLVs defined by the IEEE 8023working group



Format

lldp tlv-enable dot3-tlv all | eee | link-aggregation | mac-physic | max-frame-size |power

undo lldp tlv-enable dot3-tlv all | eee | link-aggregation | mac-physic | max-frame-size |power

Parameters



-

eee Indicates to advertise EEE (Energy-Efficient Ethernet) TLVThe S6720EI and S6720S-EI do notsupport the EEE functionEEE is supported only when the switchhas only one neighbor

-

link-aggregation Indicates to advertise Link AggregationTLV

-

mac-physic Indicates to advertise MACPHYConfigurationStatus TLV

-

max-frame-size Indicates to advertise Maximum FrameSize TLV

-



8759




power Indicates to advertise Power Via MDITLV

-

Views


Default Level


Usage Guidelines

Usage Scenario





Prerequisites


Precautions


NOTE

An Ethernet interface working in Layer 3 mode also supports the TLVs defined by the IEEE 8023 workinggroup

Example

Configure GigabitEthernet001 to advertise the Link Aggregation TLV in the IEEE 8023format



8760



ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] lldp tlv-enable dot3-tlv link-aggregation



Function

The lldp tlv-enable med-tlv command sets to advertise the MED TLVs

The undo lldp tlv-enable med-tlv command sets the MED TLVs disabled on an interface

By default an interface advertises all types of MED TLVs except the Location IdentificationTLV and Network Policy TLV

NOTE

Although the interface does not advertise Network Policy TLV Network Policy TLV is still enabled

Format

lldp tlv-enable med-tlv all | capability | inventory | location-id civic-address device-type country-code ca-type ca-value amplt1-10gt | elin-address Tel-Number | network-policy [ voice-vlan vlan vlan-id [ cos cvalue | dscp dvalue ] | 8021p [ cos cvalue | dscpdvalue ] | untagged ] | power-over-ethernet

undo lldp tlv-enable med-tlv all | capability | inventory | location-id [ civic-address |elin-address ] | network-policy [ voice-vlan vlan | cos | dscp | 8021p | untagged ] |power-over-ethernet

Parameters


all Indicates that all MED TLVs exceptLocation Identification TLV andNetwork Policy TLV are advertisedNOTE

After the all parameter is specified theNetwork Policy TLV is enabled but notadvertised

-


-


-



8761





-






-



network-policy Advertises Network Policy TLVNetwork Policy TLV is used toexchange VLAN configurationsbetween network devices and terminaldevices A switch uses the TLV toadvertise voice VLAN ID and voicestream priority to an IP phone Then theIP phone forwards packets according tothe received voice VLAN ID andpriority ensuring the voice qualityNOTE

An Ethernet interface working in Layer 3mode does not support the Network PolicyTLV

-

voice-vlan Encapsulates the voice VLAN ID whenadvertising Network Policy TLV

-



8762




vlan vlan-id Specifies the voice VLAN ID The value is aninteger that rangesfrom 1 to 4094

cos cvalue Specifies the CoS priorityThe CoS priority is the PRI (Priority)field in an 8021Q VLAN frame Thisfield is 3 bits long and ensures thathigh-priority data packets areforwarded first when congestionoccurs

The value is aninteger that rangesfrom 0 to 7 Thedefault value is 5A larger valueindicates a higherpriority

dscp dvalue Sets the DSCP priorityThe first six bits of the Type of Service(ToS) field in an IPv4 packet header areused as the DiffServ Code Point(DSCP) DSCP is used in the DiffServmodel to provide QoS guarantee on anIP network The operations performedby the traffic controller on the gatewayare determined only by these six bits

The value is aninteger that rangesfrom 0 to 63 Thedefault value is 46

8021p Sets the voice VLAN ID to VLAN 0 -

untagged Configures voice devices to senduntagged voice data packets

-

power-over-ethernet Advertises Extended Power via MDITLV

-








8763





Prerequisites


Precautions

l When the supported TLVs are MED TLVs the lldp tlv-enable command with the allparameter advertises all TLVs except Location Identification TLV If the all parameter isnot specified only one type of TLV can be advertised To advertise multiple types ofTLVs run this command multiple times

l You can specify the other types of MED TLVs only after specifying the MEDCapabilities TLV

To disable the MED Capabilities TLV first disable the other types of MED TLVs

To disable the MACPHY ConfigurationStatus TLVs first disable the MED CapabilitiesTLV

l The 8023 MACPHY ConfigurationStatus TLVs are automatically advertised after theMED Capabilities TLV is advertised

l If you disable the MED TLVs using the command with the all parameter the 8023MACPHY ConfigurationStatus TLVs are not disabled automatically

Example

Configure GigabitEthernet001 to advertise the MED Capabilities TLV

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] lldp tlv-enable med-tlv capability



Function

The lldp trap-interval command sets the delay in sending neighbor change traps to the NMS

The undo lldp trap-interval command restores the default delay in sending neighbor changetraps to the NMS

By default the device sends a neighbor change trap to the NMS after a 5-second delay



8764



Format

lldp trap-interval interval

undo lldp trap-interval [ interval ]

Parameters


interval Specifies the delay insending traps

The value is an integerranging from 5 to 3600 inseconds The default valueis 5 secondsThe default value isrecommended

Views

System view

Default Level


Usage Guidelines

Usage Scenario

There is a delay before the device sends LLDP traps about neighbor information changes tothe NMS When neighbor information changes frequently you can prolong the delay In thisway the device will not frequently send traps to the NMS and the network topology flappingis suppressed

Prerequisites



After the delay is set on the device LLDP-enabled interfaces send LLDP traps to neighborsafter a delay (the delay is the same as or longer than the delay you specified) The interfacesmay send LLDP traps at different time points

Precautions

The configured delay applies only to the trap which reports changes in neighbor informationincluding the number of added neighbors number of deleted neighbors number of neighborsthat are aged out and number of neighbors of which the information is deleted

Example

Set the delay in sending neighbor change traps to 6 seconds



8765



ltHUAWEIgt system-view[HUAWEI] lldp trap-interval 6



FunctionThe reset cdp statistics command clears statistics about CDP packets that all interfacesreceive and send or CDP packets that a specified interface receives and sends

Formatreset cdp statistics [ interface interface-type interface-number ]

Parameters



Interface on which statistics about CDP packets are to beclearedl interface-type specifies the interface typel interface-number specifies the interface number

If this parameter is not specified CDP packet informationabout all interfaces is cleared

-

ViewsUser view



If you want to quickly locate and process a CDP fault you must calculate the numbers ofCDP packets sent and received by a device for a specified period Before collecting specificCDP packet statistics you can run the reset cdp statistics command to clear existing statisticsabout CDP packets

Prerequisites

LLDP has been globally enabled using the lldp enable command in the system view andLLDP has been configured to be compatible with CDP on interfaces using the lldpcompliance cdp receive command



8766



Follow-up Procedure

After running the reset cdp statistics command to clear existing statistics about CDP packetsyou can run the display cdp statistics command to check statistics about CDP packets sentand received by a device for a specific period

Precautions

If you do not set the interface parameter when running the reset cdp statistics commandstatistics about CDP packets sent and received by all interfaces are cleared Exercise cautionwhen running this command

Example

Display statistics about CDP packets that all interfaces receive and send

ltHUAWEIgt reset cdp statistics

Related Topics16317 lldp enable (system view)1635 display cdp statistics


Function

The reset lldp statistics command clears LLDP packet statistics on all interfaces or on aspecified interface

Format

reset lldp statistics [ interface interface-type interface-number ]

Parameters



Specifies the type andnumber of the interfacewhere the LLDP statisticsyou want to reset In thecommandl interface-type specifies



If no interface is specifiedLLDP packet statistics of allinterfaces are cleared

-



8767



Views

User view

Default Level


Usage Guidelines

Usage Scenario

To troubleshoot LLDP faults you may need to view LLDP packet statistics within a certainperiod of time In this case you must run the reset lldp statistics command to clear existingLLDP packet statistics and run the display lldp statistics command to view the new LLDPpacket statistics

Prerequisites


Example

Clear LLDP packet statistics on all interfaces

ltHUAWEIgt reset lldp statisticsWarning This Command will clear LLDP statistics of all the ports Continue [YN]y

Clear LLDP packet statistics of GigabitEthernet001

ltHUAWEIgt reset lldp statistics interface gigabitethernet 001

Related Topics1639 display lldp statistics16317 lldp enable (system view)


Function

The snmp-agent trap enable feature-name lldptrap command enables the LLDP trapfunction on the device

The undo snmp-agent trap enable feature-name lldptrap command disables the LLDP trapfunction on the device

By default the LLDP trap function is enabled

Format

snmp-agent trap enable feature-name lldptrap [ trap-name hwlldpdisabled |hwlldpenabled | hwlldplocmanipaddrchange | hwlldprateexcessive |lldpremtableschange ]



8768



undo snmp-agent trap enable feature-name lldptrap [ trap-name hwlldpdisabled |hwlldpenabled | hwlldplocmanipaddrchange | hwlldprateexcessive |lldpremtableschange ]

Parameters


trap-name Enables or disables the trapfunction for the specifiedevent

-

hwlldpdisabled Sends a Huawei proprietarytrap when the LLDPfunction is disabled globally

-

hwlldpenabled Sends a Huawei proprietarytrap when the LLDPfunction is enabled globally

-

hwlldplocmanipaddrch-ange

Sends a Huawei proprietarytrap when the LLDPmanagement address of thedevice changes

-

hwlldprateexcessive Sends a Huawei proprietarytrap when the rate ofLLDPDUs received by aninterface exceeds the alarmthresholdThe alarm threshold is 5That is a trap is sent if morethan 5 LLDPDUs arereceived by an interfacewithin one second

-

lldpremtableschange Sends a trap when LLDPneighbor informationchanges

-

Views

System view

Default Level


Usage Guidelines

Usage Scenario



8769



To enable the device to send traps when the LLDP status changes run the snmp-agent trapenable feature-name lldptrap command

Prerequisites

A reachable route exists between the device and the NMS and the SNMP parameters are set


After the LLDP trap function is enabled the device sends traps to the NMS in one of thefollowing casesl The LLDP function is enabled or disabled globallyl The local management address changesl The rate of LLDPDUs received by an interface exceeds the alarm thresholdl A neighbor is added deleted discarded or aged out

Precautions

The LLDP trap function applies to all interfaces

If the network topology is unstable disable the LLDP trap function to prevent frequent trapsending

To set the interval between sending neighbor change traps to the NMS run the lldp trap-interval command If neighbor information changes frequently extend the interval to reducethe number of traps

Example

Enable the LLDP trap function on the device

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable feature-name lldptrap

Related Topics16311 display snmp-agent trap feature-name lldptrap all

164 Performance Management CommandsNOTE

Only the S5720HI supports performance management commands

1641 binding

Function

The binding command binds an instance to a performance statistics collection task

The undo binding command unbinds an instance from a performance statistics collectiontask

By default no instance is bound to a performance statistics collection task



8770



Formatbinding instance-type instance-type all

binding instance-type instance-type instance instance-name amplt1-5gt

undo binding instance-type instance-type all | instance instance-name amplt1-5gt

Parameters



Specifies the type ofan instance bound toa performancestatistics collectiontask

The enumerated values includel ipfpm collects IP FPM statisticsl uni-mng-as-port collects statistics on an AS portl wlan-ap collects AP statisticsl wlan-radio collects statistics about a specified



wired port

all Binds all instances

When all isspecified instance-type can only beipfpm

-



8771





Specifies the nameof an instance of aspecific type






l When instance-type is wlan-ssid the instance-name value is ap-idradio-idSSID namelengthSSID name ASCII code For example1059899100101102 indicates the SSID withthe name bcdef and name length 5 of radio 0 of AP1





After you bind an instance to a performance statistics collection task the system collectsperformance data of the instance Multiple instances can be bound to a performance statisticscollection task

Example Bind all instances in IP FPM to performance statistics collection task task1

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] quit[HUAWEI-nqa-ipfpm-mcp] quit



8772



[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] binding instance-type ipfpm all



Function

The display pm brief command displays brief PM information

Format

display pm brief

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

After PM is configured you can run the display pm brief command to view brief PMinformation such as the PM status number of performance statistics tasks number ofperformance statistics files

Example

Display brief PM information

ltHUAWEIgt display pm briefStatistics Status disableStatistics Start Time -Number of Statistics Tasks 2Number of Active Statistics Objects 0Number of Configured Pm Servers 0Number of Statistics Files 0Statistics Files Saved Directory pmdata



8773



Table 16-40 Description of the display pm brief command output

Item Description

Statistics Status Whether PM is enabled The value can bel enablel disable

Statistics StartTime

Time when the performance statistics function starts

Number ofStatistics Tasks

Number of performance statistics tasks

Number of ActiveStatistics Objects

Number of current performance statistics objects

Number ofConfigured PmServers

Number of configured PM servers

Number ofStatistics Files

Number of performance statistics files

Statistics FilesSaved Directory

Path where performance statistics files are saved


FunctionThe display pm measure-info command displays information about performance statisticscounters

Formatdisplay pm measure-info [ instance-type instance-type ]



8774



Parameters



Specifies the type ofan instance bound toa performancestatistics task

The enumerated values includel ipfpm collects IP FPM statisticsl uni-mng-as-port collects statistics on an AS

portl wlan-ap collects AP statisticsl wlan-radio collects statistics about a specified



wired port

ViewsAll views


Usage GuidelinesBefore running the measure disable command to configure performance statistics countersfor instances of a specific type run the display pm measure-info command to viewinformation about available performance statistics counters including the name typemaximum value and minimum value of each counter

Example Display information about performance statistics counters of the instance of the IPFPMtype

ltHUAWEIgt display pm measure-infoTotal instance types 1 total measures 10--------------------------------------------------------------------------------Instance Type ipfpm Measures Count 10 Measure Name forward-loss-ratio-max Measure Type Maximum Measure Counter Size(bits) 32 Measure MaxValue 100000000 Measure MinValue -100000000

Measure Name forward-loss-ratio-min Measure Type Minimum Measure Counter Size(bits) 32 Measure MaxValue 100000000 Measure MinValue -100000000

Measure Name forward-loss-pkts-inc Measure Type Increase Measure Counter Size(bits) 64



8775



Measure MaxValue 9223372036854775807 Measure MinValue -9223372036854775808

Table 16-41 Description of the display pm measure-info command output

Item Description

Instance Type Type of an instance

Measures Count Number of a performance statistics counter


Measure Type Type of a performance statistics counter The value can bel Increase Accumulated performance statistics are compared with

the counterl Actual The currently collected performance statistics are

compared with the counterl Maximum The maximum performance statistics are compared

with the counterl Minimum The minimum performance statistics are compared

with the counterl Average The average performance statistics are compared with

the counter

Measure CounterSize(bits)

Size of a performance statistics counter 32 bits or 64 bits

Measure MaxValue Maximum value of a performance statistics counter

Measure MinValue Minimum value of a performance statistics counter


FunctionThe display pm statistics command displays the collected performance statistics

Formatdisplay pm statistics task-name data-index index [ instance-type instance-type [ measuremeasure-name | instance instance-name amplt1-5gt ] ]



8776



Parameters


task-name Displays theperformancestatistics of aspecifiedperformancestatisticscollection task

The value is a string of 1 to 31 case-insensitivecharacters spaces not supported The string containsletters digits and underscores (_) and must start withletters or digits

data-indexindex

Displays theperformancestatistics collectedat a specifiedinterval

The value is an integer that ranges from 0 to 16

l If the value is 0 the current performance statistics aredisplayed

l If the value is larger than 0 the performance statisticscollected in one or more cycles are displayed Thesmaller the value the latest the statisticsndash If a short performance statistics collection cycle

(5 10 15 30 or 60 minutes) is set the value ofindex ranges from 1 to 16

ndash If a long performance statistics collection cycle(1440 minutes) is set the value of index rangesfrom 1 to 3


Specifies the typeof an instancebound to aperformancestatisticscollection task

The enumerated values includel ipfpm collects IP FPM statisticsl uni-mng-as-port collects statistics on an AS portl wlan-ap collects AP statisticsl wlan-radio collects statistics about a specified AP

radiol wlan-ssid collects statistics about a service set


wired port

measuremeasure-name

Specifies thename of astatistics counter




8777





Specifies thename of aninstance



l When instance-type is uni-mng-as-port theinstance-name value is AS name+interface numberfor example as1 gigabitethernet001



l When instance-type is wlan-ssid the instance-namevalue is ap-idradio-idSSID name lengthSSID nameASCII code For example 1059899100101102indicates the SSID with the name bcdef and namelength 5 of radio 0 of AP 1

l When instance-type is wlan-ap-wiredport theinstance-name value is ap-idport type x 100+portnumber For example 0101 indicates FE port 1 ofAP 0 The port type can be 1 (an FE port) or 2 (a GEport) The port number ranges from 0 to 99

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

To view the current or historical performance statistics run the display pm statisticscommand The system can display the current performance statistics and historicalperformance statistics collected in a maximum of 16 cycles

Example

Display the current performance statistics of the performance statistics collection task task1

ltHUAWEIgt display pm statistics task1 data-index 0Total measures count 10--------------------------------------------------------------------------------Instance Type ipfpmInstance Name 1Measure Name forward-loss-ratio-maxMeasure Data 0Valid Flag no statistics



8778



Timestamp 2014-04-15 111700

Table 16-42 Description of the display pm statistics command output

Item Description

Total measurescount

Number of a performance statistics counter

Instance Type Type of an instance bound to a performance statistics collection task

Instance Name Name of an instance bound to a performance statistics collectiontask


Measure Data Statistics counter

Valid Flag Valid flag of the performance statistics The value can bel no statistics The performance statistics are not collectedl valid The performance statistics are validl incredible value The performance statistics are not reliablel measure not configured The statistics counter is disabled

Timestamp Time when the performance statistics are collected


Function

The display pm statistics-file command displays performance statistics files

Format

display pm statistics-file [ task-name ]

Parameters


task-name Displays the performancestatistics files generated fora performance statisticstask


Views

All views



8779




Usage GuidelinesAfter a performance statistics task starts the system automatically generates performancestatistics files for the task To view the performance statistics files generated for theperformance statistics task run the display pm statistics-file command

Example Display performance statistics files for all performance statistics tasks

ltHUAWEIgt display pm statistics-fileTotal files count 1 --------------------------------------------------------------------------------Task Name test test20130701150001txt

Table 16-43 Description of the display pm statistics-file command output

Item Description

Total files count Number of performance statistics files

Task Name Name of a performance statistics task


FunctionThe display pm statistics-task command displays information about a performance statisticscollection task

Formatdisplay pm statistics-task [ task-name ]

Parameters


task-name Displays the informationabout a specifiedperformance statisticscollection task


ViewsAll views



8780



Default Level

1 Monitoring level

Usage Guidelines

You can use this command to check information about a performance statistics collection taskincluding the running status of the task statistics collection cycle and type of the instancebound to the task

Example

Display information about performance statistics collection tasks

ltHUAWEIgt display pm statistics-taskTotal task count 1--------------------------------------------------------------------------------Task Name task1Task State readyRecord-file Status enableThreshold Alarm Status disableTask Cycle 15 minutesSample Interval 3 minutesInstance Type -Record Interval(cycle) 4File Format textFile Name Prefix task1File Transfer Mode passiveCurrent File Name -

Table 16-44 Description of the display pm statistics-task command output

Item Description

Total task count Number of performance statistics collection tasks

Task Name Name of a performance statistics collection taskThe task name is specified in the 16421 statistics-task task-namecommand

Task State Running status of a performance statistics collection task

Record-file Status Whether performance statistics file generation is enabled The valuecan bel enable This function is enabledl disable This function is not enabledThis function is configured using the 16413 record-file disablecommand

Threshold AlarmStatus

Whether the threshold alarm function is enabled The value can bel enable This function is enabledl disable This function is not enabledThis function is configured using the 16422 threshold-alarmenable command



8781



Item Description

Task Cycle Performance statistics collection cycle configured in a performancestatistics collection taskThis parameter is configured using the 16420 statistics-cycle cyclecommand

Sample Interval Sampling interval configured in a performance statistics collectiontaskThis parameter is configured using the 16417 sample-intervalinterval command

Instance Type Type of an instance bound to a performance statistics collection taskThis parameter is configured using the 1641 binding instance-typeinstance-type all | instance instance-name amplt1-5gt command

RecordInterval(cycle)

Interval at which the system generates performance statistics filesThis parameter is configured using the 16414 record-intervalinterval command

File Format Format of performance statistics files

File Name Prefix Name prefix of a performance statistics file

File Transfer Mode Mode in which statistics files are uploaded to the performancemanagement server The value can bel active The device automatically uploads statistics files to the

performance management serverl passive The device uploads statistics files to the performance

management server following the instructions from the commandline interface or network management system

Current File Name Name of the current performance statistics file

Related Topics1641 binding16413 record-file disable16414 record-interval16417 sample-interval16420 statistics-cycle16421 statistics-task


Function

The display snmp-agent trap feature-name pm all command displays the status of all trapsrelated to the PM module



8782



Formatdisplay snmp-agent trap feature-name pm all

ParametersNone

ViewsAll views


Usage GuidelinesYou can use this command to check the status of all traps related to the PM module Thesetraps can be enabled or disabled using the 16418 snmp-agent trap enable feature-namepm command

Example Display the status of all traps related to the PM module

ltHUAWEIgtdisplay snmp-agent trap feature-name pm all------------------------------------------------------------------------------Feature name PMTrap number 2------------------------------------------------------------------------------Trap name Default switch status Current switch statushwPMStatisticsTaskThresholdTriggerAlarm on onhwPMStatisticsTaskThresholdClearAlarm on on

Table 16-45 Description of the display snmp-agent trap feature-name pm all commandoutput

Item Description

Feature name Name of a module to which a trap message belongs



Default switch status Whether the trap function is enabled by defaultl on The trap function is enabledl off The trap function is disabled

Current switch status Whether the trap function is enabled currentlyl on The trap function is enabledl off The trap function is disabled



8783



Related Topics16418 snmp-agent trap enable feature-name pm


FunctionThe measure disable command disables statistics indicators in a performance statistics task

The undo measure disable or measure enable command enables statistics indicators in aperformance statistics task

By default all statistics counters of the instance bound to the performance statistics collectiontask are measured

Formatmeasure disable [ measure-name ]

undo measure disable [ measure-name ]

measure enable [ measure-name ]

Parameters


measure-name Specifies the name of astatistics counter in aperformance statisticscollection task

The value is a string of 1 to 63 case-insensitive characters without spacesSelect statistics counters according to thedevice configuration




If the type of the instance bound to a performance statistics task is specified statisticsindicators of instances of the specified type are enabled by default The indicator disablecommand can be used to disable some or all statistics indicators

After you run the measure disable [ measure-name ] command some or all statisticsindicators are disabled To add one or more indicators that have been disabled to theperformance statistics task again run the measure enable [ measure-name ] or undomeasure disable [ measure-name ] command to enable these indicators

Prerequisites



8784



An instance has been bound to a performance statistics task using the binding instance-typeinstance-type-name instance instance-name command

The performance statistics function has been enabled using the statistics enable command

Example Disable measurement of the forward-loss-ratio-max counter for ipfpm instances

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] binding instance-type ipfpm all[HUAWEI-pm-statistics-task1] measure disable forward-loss-ratio-max

Related Topics1643 display pm measure-info1641 binding16410 pm16421 statistics-task

1649 path

FunctionThe path command configures the destination path to save performance statistics files on thePM server

The undo path command deletes the configured destination path

By default performance statistics files are uploaded to the default path on a PM server

Formatpath destination-path

undo path

Parameters


destination-path Specifies the destination path to saveperformance statistics files on the PMserver


ViewsPM server view




8785



Usage Guidelines

Usage Scenario

To upload performance statistics files to a specific path on the PM server run the pathcommand to specify the destination path

Precautions

The specified destination path must exist in the performance management server Otherwisethe statistics file cannot be uploaded to the server

Example

Specify the destination path to save performance statistics on the PM server

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server server1[HUAWEI-pm-server-server1] path dpmdata


16410 pm

Function

The pm command displays the PM view

Format

pm

Parameters

None

Views

System view

Default Level


Usage Guidelines

To enable the performance statistics function of PM run the pm command to display the PMview



8786



Example Display the PM view

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm]

16411 pm-server

FunctionThe pm-server command creates a process serving the PM server and displays the view ofthe PM server created in the process If there is an existing PM server view the pm-servercommand displays the PM server view without creating a process

The undo pm-server command deletes the created process

By default no process serving the PM server is created

Formatpm-server server-name

undo pm-server server-name

Parameters


server-name Specifies the name of theprocess serving the PMserver


ViewsPM view



To upload generated performance statistics files to the PM server run the pm-servercommand to create a process serving the PM server

Follow-up Procedure

Configure the IP address and port number for the PM server and user name and password forlogging in to the PM server Performance statistics files are uploaded to the PM server usingFTP or SFTP



8787



Precautions

If a device is enabled to upload performance statistics files to a PM server the process servingthe PM server cannot be deleted

Example

Create a process named server1 to serve the PM server

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server server1[HUAWEI-pm-server-server1]

16412 protocol

Function

The protocol command configures the parameters for connecting to a PM server

The undo protocol command deletes the parameters for connecting to a PM server

By default no PM server connection parameter is configured

Format

protocol ftp | sftp ip-address ip-address [ port port-number | net-manager-vpn | vpn-instance vpn-instance-name ]

undo protocol

Parameters


ftp Uses the FTP protocol toupload performance statisticsfiles

-

sftp Uses the SFTP protocol toupload performance statisticsfiles

-


Specifies the IP address of thePM server


port port-number Specifies the port number The value is an integer that rangesfrom 1 to 65535 The default portnumber is 21 (using FTP) or 22(using SFTP)

net-manager-vpn Indicates the networkmanagement VPN

-



8788







Views

PM server view

Default Level


Usage Guidelines

Usage Scenario

To upload statistics files to a PM server use this command to configure connectionparameters including the transfer protocol IP address and port number of the PM server

Precautions

Using FTP to upload performance statistics files is insecure Therefore using SFTP isrecommended

Example

Configure the device to upload performance statistics files to the SFTP server with the IPaddress 10111

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server server1[HUAWEI-pm-server-server1] protocol sftp ip-address 10111



Function

The record-file disable command disables performance statistics file generation

The undo record-file disable command restores performance statistics file generation

By default a performance statistics file is automatically generated and saved on the device Amaximum of four performance statistics files can be generated for each performance statisticscollection task



8789



Formatrecord-file disable

undo record-file disable

ParametersNone



Usage GuidelinesTo save system resources reduce system cost and operations on storage devices and prolongthe lifespan of storage devices during performance statistics collection run the record-filedisable command to prevent performance statistics files from being generated

The system-generated file name is named in the format of name of a performance statisticstask+time that a performance statistics file is generated and is saved in the text format Eachperformance statistics collection task can generate a maximum of four statistics files If morethan four statistics files are generated the new file replaces the earliest one

Example Disable performance statistics file generation

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] record-file disable



FunctionThe record-interval command sets the number of performance statistics collection cyclesafter which the system generates a statistics file

The undo record-interval command restores the default number of performance statisticscollection cycles

By defaultl If a short performance statistics collection cycle (5 10 15 30 or 60 minutes) is set the

system generates a statistics file after four cycles



8790



l If a long performance statistics collection cycle (1440 minutes) is set the systemgenerates a statistics file after one cycle

Format

record-interval interval

undo record-interval

Parameters


interval Specifies thenumber ofperformancestatistics collectioncycles

The value is an integer The value range depends on theperformance statistics collection cyclel If a short performance statistics collection cycle is set

the value of interval ranges from 1 to 16 and thedefault value is 4

l If a long performance statistics collection cycle is setthe value of interval ranges from 1 to 3 and thedefault value is 1

Views


Default Level


Usage Guidelines

After you configure a performance statistics collection task the system periodically savescollected performance data to statistics files To set the interval at which the system generatesstatistics files run the record-interval command Then the system generates performancestatistics files every cycle x interval minutes and automatically saves the performance data inthe files The system generates a maximum of four statistics files for each performancestatistics collection task and saves performance statistics files to the path flash pmdata bydefault

Example

Configure the system to save performance data to a statistics file every three performancestatistics collection cycles If the performance statistics collection cycle is 5 minutes thesystem saves a performance data to a statistics file every 15 minutes

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] statistics-cycle 5Warning All data of the statistics task will be deleted Continue [YN] y[HUAWEI-pm-statistics-task1] record-interval 3Warning This operation will cause some data to be lost Continue [YN] y



8791



Related Topics16410 pm16414 record-interval16420 statistics-cycle16421 statistics-task


FunctionThe reset pm current-data command deletes the collected performance statistics

Formatreset pm current-data [ instance-type instance-type [ measure measure-name | instanceinstance-name amplt1-5gt ] ]

Parameters



Deletes theperformancestatistics aboutinstances of aspecified type

If instance-typeinstance-type is notspecified the systemdeletes theperformancestatistics aboutinstances of alltypes

The enumerated values include

l ipfpm collects IP FPM statistics

l uni-mng-as-port collects statistics on an ASport

l wlan-ap collects AP statistics

l wlan-radio collects statistics about a specifiedAP radio

l wlan-ssid collects statistics about a service setbound to a specific AP radio

l wlan-ap-wiredport collects statistics on an APwired port

measuremeasure-name

Deletes theperformancestatistics about aspecified counter




8792





Deletes theperformancestatistics about aspecified instance




l When instance-type is wlan-ap the instance-name value is ap-id For example 1 indicates AP1


l When instance-type is wlan-ssid the instance-name value is ap-idradio-idSSID namelengthSSID name ASCII code For example1059899100101102 indicates the SSID withthe name bcdef and name length 5 of radio 0 ofAP 1





To delete the collected performance statistics and collect new performance statistics run thereset pm current-data command

Precautions

Performance statistics cannot be restored after being deleted Confirm your action beforeusing this command

Example Delete the collected performance statistics



8793



ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] reset pm current-data


16416 retry

Function

The retry command sets the number of retransmissions for a performance statistics file

The undo retry command restores the number of retransmissions for a performance statisticsfile to the default value

The default number of retransmissions for a performance statistics file is 3

Format

retry retry-times

undo retry

Parameters


retry-times Sets the number of retransmissionsfor a performance statistics file

The value is an integer ranging from 1to 3 The default value is 3

Views

PM server view

Default Level


Usage Guidelines

The system generates performance statistics files and transmits these files to a PM server Toset the number of retransmissions for a performance statistics file run the retry command

Example

Set the number of retransmissions for a performance statistics file to 2

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server server1[HUAWEI-pm-server-server1] retry 2



8794





FunctionThe sample-interval command configures the sampling interval for a performance statisticstask

The undo sample-interval command restores the default setting

By default the sampling interval varies with the performance statistics interval as follows

l If the interval at which the performance statistics are collected is 5 minutes the defaultsampling interval is 1 minute





l If the interval at which the performance statistics are collected is 1440 minutes thedefault sampling interval is 15 minutes

Formatsample-interval interval

undo sample-interval



8795



Parameters


interval Specifies theinterval at whichthe performancestatistics collectedin a performancestatistics task issampled

The value can be 1 2 3 5 10 15 30 or 60 in minutes

l If the interval at which performance statistics arecollected is 5 minutes the sampling interval is 1minute by default and can be set to 1 minute or 5minutes



l If the interval at which performance statistics arecollected is 30 minutes the sampling interval is 5minutes by default and can be set to 1 2 3 5 10 15or 30 minutes





Usage GuidelinesAfter the statistics task is configured the system collects statistics at a specified samplinginterval The shorter the sampling interval the more accurate the statistics However moresystem resources are consumed

Example Set the sampling interval to 5 minutesltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] sample-interval 5



8796





FunctionThe snmp-agent trap enable feature-name pm command enables the trap function of thePM module

The undo snmp-agent trap enable feature-name pm command disables the trap function ofthe PM module

By default the trap function of the PM module is enabled

Formatsnmp-agent trap enable feature-name pm [ trap-name trap-name ]

undo snmp-agent trap enable feature-name pm [ trap-name trap-name ]

Parameters


trap-name trap-name Specifies the name of a trap This parameter has enumeratedvalues Select one from the displayedvalues

ViewsSystem view


Usage GuidelinesThe snmp-agent trap enable feature-name pm command is used to enable a PM trap Afterthat the trap generated during the device running will be sent to the NMS

You can run the 1647 display snmp-agent trap feature-name pm all command to checkthe configuration result

Example Enable hwpmstatisticstaskthresholdtriggeralarm for the PM module

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable feature-name pm trap-name hwpmstatisticstaskthresholdtriggeralarm



8797



Related Topics1647 display snmp-agent trap feature-name pm all


Function

The statistics enable command enables the performance statistics function

The undo statistics enable command disables the performance statistics function

By default the performance statistics function is disabled

Format

statistics enable

undo statistics enable

Parameters

None

Views

PM view

Default Level


Usage Guidelines

Usage Scenario

To collect performance statistics run the statistics enable command to enable theperformance statistics function

Precautions

After the undo statistics enable command is run the performance statistics task that isrunning will be stopped Therefore exercise caution when you run this command

Example

Enable the performance statistics function

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics enable




8798




FunctionThe statistics-cycle command configures the performance statistics collection interval for aperformance statistics task

The undo statistics-cycle command restores the default setting

The default interval is 15 minutes

Formatstatistics-cycle cycle

undo statistics-cycle

Parameters


cycle Specifies theperformance statisticscollection interval for aperformance statisticstask

The value can be 5 10 15 30 60 or 1440 inminutes The default value is 15 minutes

The system defines the interval 1440 minutes as along interval and the interval 5 10 15 30 or 60minutes as a short interval




A specific performance statistics collection interval is set for each performance statistics taskAfter the performance statistics collection interval is set bind an instance to the performancestatistics task and enable statistics counter measurement so that the system can collectperformance statistics at the specified interval If the statistics interval is set to a small valuethe obtained performance statistics are more accurate but more system resources areconsumed


Running the statistics-cycle command in the performance statistics task view has thefollowing impactsl Performance statistics of the performance statistics task are deletedl The default interval at which the system generates performance statistics files is used In

the case of a short statistics collection interval the system generates a performance



8799



statistics file every four performance statistics collection intervals in the case of a longstatistics collection interval the system generates a performance statistics file every oneperformance statistics collection interval

Example

Set the performance statistics collection interval for the performance statistics task namedtask1 to 5 minutes

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] statistics-cycle 5Warning All data of the statistics task will be deleted Continue [YN] y



Function

The statistics-task command creates a performance statistics task or displays the performancestatistics task view

The undo statistics-task command deletes a performance statistics task

By default no performance statistics task is created

Format

statistics-task task-name

undo statistics-task task-name

Parameters


task-name Specifies the name of aperformance statisticstask


Views

PM view

Default Level




8800



Usage Guidelines

Usage Scenario

A performance statistics task is the minimum statistics collection unit of PM Beforeconfiguring the performance statistics function run the statistics-task command to create aperformance statistics task Only one performance statistics collection interval can beconfigured for each performance statistics task After a performance statistics task isconfigured enable statistics counter measurement for the task

Precautions

l A maximum of 16 performance statistics tasks can be configuredl After the undo statistics-task command is run to delete a performance statistics task

performance statistics and performance statistics files of the task are deleted

Example

Configure a performance statistics task named task1

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1]



Function

The threshold-alarm enable command enables the threshold alarm

The undo threshold-alarm enable command disables the threshold alarm

By default the threshold alarm function is disabled

Format

threshold-alarm enable

undo threshold-alarm enable

Parameters

None

Views


Default Level




8801




The threshold alarm function enables users to learn the device operating status in a timelymanner so that the device maintenance level can be promoted To monitor the running datarun the command to enable the threshold alarm

Precautions

After the undo threshold-alarm enable command is run the threshold alarm function will bedisabled and threshold alarms will be cleared Exercise caution before operation

Follow-up Procedure

After the command is run run the 16423 threshold-alarm measure command to configuremonitoring rules for the threshold alarm Otherwise the threshold alarm function will not takeeffect

Example Enable the threshold alarm function

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] threshold-alarm enable

Related Topics16423 threshold-alarm measure


FunctionThe threshold-alarm measure command creates monitoring rules for threshold alarms

The undo threshold-alarm measure command deletes monitoring rules for threshold alarms

By default no monitoring rules are created for threshold alarms about performance statisticstasks

Formatthreshold-alarm measure measure-name operation ge | le trigger-value trigger-value-val clear-value clear-value-val

undo threshold-alarm measure measure-name operation ge | le



8802



Parameters


measure-name Specifies the thresholdmonitoring indicator Theindicator name ispredefined by eachfeature

The value is a string of 1 to 63 case-insensitive characters without spaces Selectstatistics counters according to the deviceconfiguration

operation ge |le

Specifies the type oftriggering a thresholdalarm

Enumerated value ge or lel ge the system triggers an alarm if the

monitored indicator value is greater thanor equal to the threshold value

l le the system triggers an alarm if themonitored indicator value is less than orequal to the threshold value

trigger-valuetrigger-value-val

Specifies the thresholdinformation when thealarm is triggered


clear-value clear-value-val

Specifies the thresholdinformation when thealarm is cleared


Views


Default Level


Usage Guidelines

Usage Scenario

The threshold alarm function is used for the system to periodically monitor the deviceoperating status If an alarm condition is triggered the alarm will be sent to the NMS andcleared after the alarm condition is cleared

The threshold-alarm measure command configures threshold monitoring rules for currentperformance statistics tasks The threshold-alarm measure command configures the alarmtriggering type threshold for triggering an alarm and threshold for clearing an alarm based onthe instance type and indicators of the threshold monitoring instance

Prerequisites

Before the threshold-alarm measure command is run run the binding instance-typeinstance-type all | instance instance-name amplt1-5gt command to bind a thresholdmonitoring instance and run the threshold-alarm enable command to enable the thresholdalarm function Otherwise alarms will not be sent



8803



Example

Create threshold monitoring rules

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] binding instance-type ipfpm all[HUAWEI-pm-statistics-task1] threshold-alarm enable[HUAWEI-pm-statistics-task1] threshold-alarm measure forward-loss-ratio-max operation ge trigger-value 1000 clear-value 10

Related Topics1641 binding16422 threshold-alarm enable

16424 upload

Function

The upload command configures the device to upload performance statistics files to a PMserver

Format

upload request-name file filename amplt1-16gt

Parameters




file filename Specifies the name of aperformance statisticsfile

The value is a string of 1 to 255 case-insensitivecharacters without spaces

The file name can contain the file path Ifmultiple files are specified separate them withspaces

Views

PM view

Default Level

3 Management level



8804



Usage Guidelines

Usage Scenario

The system periodically generates performance statistics files based on the collectedperformance statistics You can manually upload the statistics files to a PM server

Prerequisites


Example

Configure the device to upload performance statistics file to the PM server

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server ftpserver[HUAWEI-pm-server-ftpserver] quit[HUAWEI-pm] upload-config req1 server ftpserver[HUAWEI-pm] upload req1 file stream20130703103001txt


16425 upload auto

Function

The upload auto command enables a device to automatically upload performance statisticsfiles to a server

The undo upload auto command disables a device from automatically uploadingperformance statistics files to a server

By default a device does not automatically upload performance statistics files to a server

Format

upload auto request-name

undo upload auto

Parameters


request-name Specifies the name of arequest for uploadingperformance statistics files toa server




8805



Views


Default Level


Usage Guidelines

Usage Scenario

The system periodically generates performance statistics files based on the collectedperformance statistics To enable the device to automatically upload performance statisticsfiles to the PM server at a specific interval run the upload auto command

Prerequisites


Example

Configure the device to automatically upload statistics files to a PM server

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server ftpserver[HUAWEI-pm-server-ftpserver] quit[HUAWEI-pm] upload-config req1 server ftpserver[HUAWEI-pm] statistics-task task1[HUAWEI-pm-statistics-task1] upload auto req1


16426 upload-config

Function

The upload-config command creates a request for uploading performance statistics files to aspecified PM server

The undo upload-config command deletes a request for uploading performance statisticsfiles to a specified PM server

By default no request for uploading performance statistics files is available on a device

Format

upload-config request-name server server-name

undo upload-config request-name



8806



Parameters




server server-name

Specifies the name of theprocess serving the PMserver


Views

PM view

Default Level


Usage Guidelines

Usage Scenario

To enable a device to upload performance statistics files to a PM server run the upload-config command to create a file uploading request

Prerequisites

A PM server process has been created using the pm-server server-name command

Follow-up Procedure

Enable the device to upload performance statistics files to the PM server

l Run the upload request-name file filename amplt1-16gt command in the PM view tomanually upload statistics files to the PM server

l Run the upload auto request-name command in the performance statistics collectiontask view to configure the device to automatically upload statistics files to the PM server

Example

Create a request for uploading statistics files to a PM server

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server ftpserver[HUAWEI-pm-server-ftpserver] quit[HUAWEI-pm] upload-config req1 server ftpserver




8807



16411 pm-server16424 upload16426 upload-config


FunctionThe username password command configures the user name and password for logging in tothe PM server

The undo username command deletes the user name and password for logging in to the PMserver

By default no user name and password for logging in to the PM server are configured

Formatusername user-name password password

undo username

Parameters


user-name Specifies the username for logging into a PM server

The name is a string of 1 to 255 case-sensitivecharacters without spaces

password Specifies thepassword for loggingin to a PM server

The value is a string of 1 to 128 characters or a stringof 32 to 200 characters The password can be in plainor cipher textl The password in plain text is a string of 1 to 128

case-sensitive characters without spacesl The password in cipher text is a string of 32 to 200

characters

The password is displayed in ciphertext in theconfiguration file regardless of whether it is input inplaintext or cipher text

NOTEA 24-character ciphertext password configured in an earlierversion is also supported in this version

ViewsPM server view




8808



Usage Guidelines

To log in to a PM server for upload performance statistics files to the PM server run theusername password command to configure the user name and password

Example

Configure the user name and password for logging in to the PM server

ltHUAWEIgt system-view[HUAWEI] pm[HUAWEI-pm] pm-server server1[HUAWEI-pm-server-server1] username admin password Pwd123



NOTE

Only the S5720HI supports iPCA

1651 ach

Function

The ach command creates an Atomic Closed Hop (ACH) and displays the ACH view If theACH already exists the command displays the ACH view directly

The undo ach command deletes an ACH and all configurations in the ACH view

By default no ACH is created

Format

ach ach-id

undo ach ach-id

Parameters


ach-id Specifies an ACH ID The value is an integer ranging from 1 to 2147483647

Views




8809



Default Level


Usage Guidelines

Usage Scenario

An ACH consists of two target logical ports (TLPs) and is used to identify a segment betweentwo specified devices on the network In IP FPM hop-by-hop measurement you need tospecify the ACH for the target flow in a measurement instance and configure the direction andmeasurement points for the target flow in the ACH view You can create an ACH and enterthe ACH view by running the ach command

Prerequisites

The instance command has been run to configure an IP FPM instance on an MCP

Example

Create an ACH

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] ach 1

Related Topics16540 mcp (IPFPM-DCP instance view)16545 out-group16523 in-group


Function

The authentication-mode command configures the authentication mode and password on aData Collecting Point (DCP)

The undo authentication-mode command deletes the authentication mode and password ona DCP

By default no authentication mode or password is configured on a DCP

Format





8810



Parameters



-

key-id key-id Specifies the ID of theauthentication password configuredon a DCP


cipher Specifies the cipher-textauthentication password on a DCP

-

password Specifies the authenticationpassword on a DCP




Views

IPFPM-DCP view

Default Level


Usage Guidelines

Usage Scenario

After the same authentication mode and password are configured on the MCP and DCPs theMCP accepts the packets only from authenticated DCPs This improves statistics data securityand reliability

Prerequisites


Example

Configure the authentication mode and password on a DCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] authentication-mode hmac-sha256 key-id 1 cipher huawei

Related Topics16543 nqa ipfpm dcp1654 authentication-mode (IPFPM-MCP view)1653 authentication-mode (IPFPM-DCP instance view)



8811




Function

The authentication-mode command configures the authentication mode and password for ameasurement instance on a DCP

The undo authentication-mode command deletes the authentication mode and password of ameasurement instance on a DCP

By default no authentication mode or password is configured for a measurement instance ona DCP

Format



Parameters



-

key-id key-id Specifies the ID of theauthentication password configuredfor a measurement instance


cipher Specifies the cipher-textauthentication password for ameasurement instance

-

password Specifies the authenticationpassword for a measurementinstance




Views


Default Level


Usage Guidelines

Usage Scenario



8812



On a network demanding high security when iPCA is used to measure network-level packetloss enable authentication After the same authentication mode and password are configuredon the MCP and DCPs the MCP accepts the packets only from authenticated DCPs Thisimproves network security and reliability of packet loss measurement The authentication-mode command configures the authentication mode and password for a measurement instanceon a DCP

Prerequisites


Precautions

If the authentication-mode command is not used to configure the authentication mode andpassword all measurement instances of the DCP use the authentication mode and passwordconfigured by the authentication-mode (IPFPM-DCP view) command

Example Configure the authentication mode and password for a measurement instance

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] authentication-mode hmac-sha256 key-id 1 cipher huawei

Related Topics16524 instance (IPFPM-DCP view)1654 authentication-mode (IPFPM-MCP view)1652 authentication-mode (IPFPM-DCP view)


FunctionThe authentication-mode command configures the authentication mode and password on theMeasurement Control Point (MCP)

The undo authentication-mode command deletes the authentication mode and password onthe MCP

By default no authentication mode or password is configured on the MCP

Formatauthentication-mode hmac-sha256 key-id key-id [ cipher ] password

undo authentication-mode hmac-sha256 key-id key-id



8813



Parameters


hmac-sha256 Uses HMAC-SHA256 to decryptand authenticate packets sent by aDCP to the MCP

-

key-id key-id Specifies the ID of theauthentication password configuredon the MCP


cipher Specifies the cipher-textauthentication password configuredon the MCP

-

password Specifies the authenticationpassword configured on the MCP




ViewsIPFPM-MCP view



On a network demanding high security when iPCA is used to measure network-level packetloss enable authentication After the same authentication mode and password are configuredon the MCP and DCPs the MCP accepts the packets only from authenticated DCPs Thisimproves network security and reliability of packet loss measurement The authentication-mode command configures the authentication mode and password on the MCP

Prerequisites


Precautions

The MCP and DCP must be configured with the same authentication mode and passwordotherwise the MCP cannot obtain packet loss measurement from the DCP

Example Configure the authentication mode and password on the MCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] authentication-mode hmac-sha256 key-id 1 huawei



8814



Related Topics16544 nqa ipfpm mcp1652 authentication-mode (IPFPM-DCP view)1653 authentication-mode (IPFPM-DCP instance view)


Function

The color-flag loss-measure command configures the color bit used in network-level packetloss measurement

The undo color-flag command restores the default color bit used in network-level packet lossmeasurement

By default bit 6 in the ToS field is used as the color bit for network-level packet lossmeasurement The default configuration is recommended

Format

color-flag loss-measure tos-bit tos-bit | flags-bit0

undo color-flag

Parameters


tos-bit tos-bit Specifies a bit in the range of bits 3 to 7 in the ToS fieldof IP packets as the color bit for network-level packetloss measurement


flags-bit0 Specifies bit 0 in the Flags field of IP packets as thecolor bit for network-level packet loss measurement

-

Views

IPFPM-DCP view

Default Level


Usage Guidelines

Usage Scenario

Before deploying Packet Conservation Algorithm for Internet (iPCA) to implement network-level packet loss measurement run this command to configure the color bit You can select acolor bit according to the actual situation and network planning

Prerequisites



8815




Precautions

All devices on a network must use the same color bit setting When the DS field is used toprovide differentiated service it is not recommended that you configure bits 3-5 as color bitsbecause the measurement result may be inaccurate


Example

Configure bit 3 in the ToS field as the color bit for network-level packet loss measurement

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] color-flag loss-measure tos-bit 3

Related Topics16543 nqa ipfpm dcp

1656 dcp

Function

The dcp command associates the DCP ID with a measurement instance on the MCP

The undo dcp command disassociates the DCP ID from a measurement instance on the MCP

By default no DCP ID is associated with a measurement instance on the MCP

Format

dcp dcp-id

undo dcp [ dcp-id ]

Parameters


dcp-id Specifies the DCP ID to be associated with ameasurement instance


Views


Default Level




8816



Usage Guidelines

Usage Scenario

Each measurement instance of the MCP contains one or more DCP IDs The MCP checkswhether the statistics data is complete based on the DCP ID so the DCP ID must be specifiedfor a measurement instance created on the MCP The dcp command associates the DCP IDwith a measurement instance on the MCP

Prerequisites

A measurement instance has been created on the MCP using the instance command

Precautions

The DCP ID associated with the measurement instance on the MCP must be the same as theDCP ID configured by the dcp id command on the DCP

The undo dcp command without dcp-id specified deletes all DCP IDs associated with ameasurement instance

Example

Associate a DCP ID with measurement instance 1 on the MCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] dcp 10111

Related Topics16544 nqa ipfpm mcp16525 instance (IPFPM-MCP view)

1657 dcp id

Function

The dcp id command sets the DCP ID

The undo dcp id command deletes the DCP ID

By default no DCP ID is configured

Format

dcp id dcp-id

undo dcp id

Parameters


dcp-id Specifies the DCP ID It is recommended that youconfigure the router ID of the device as the DCP ID




8817



Views

IPFPM-DCP view

Default Level


Usage Guidelines

Usage Scenario

When the MCP communicates with a DCP the DCP encapsulates statistics data collectedfrom Target Logical Ports (TLPs) in a packet and sends the packet with the DCP ID as thesource IP address After receiving the packet sent from the DCP the MCP compares the DCPID in the packet with the DCP ID configured by the dcp command

l If the two DCP IDs are the same the MCP accepts the packet and then summarizes andcalculates the statistics data

l If the two DCP IDs are different the MCP considers the packet invalid and discards it

Prerequisites


Precautions

Each DCP has a unique ID on the network It is recommended that you configure the routerID of the device as the DCP ID The DCP ID must be the same as the DCP ID in themeasurement instance configured by the dcp command on the MCP

Example

Set the DCP ID

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] dcp id 10111

Related Topics16543 nqa ipfpm dcp16541 mcp id1656 dcp


Function

The description command configures the description for a measurement instance on a DCP

The undo description command deletes the description of a measurement instance on a DCP

By default no description is configured for a measurement instance on a DCP



8818




undo description

Parameters










Example Configure the description for measurement instance 1

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] description NanJinToHeFei

Related Topics1659 description (IPFPM-MCP instance view)


FunctionThe description command configures the description for a measurement instance on theMCP

The undo description command deletes the description of a measurement instance on theMCP



8819



By default no description is configured for a measurement instance on the MCP


undo description

Parameters




ViewsIPFPM-MCP instance view






Example Configure the description for measurement instance 1 on the MCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] description NanJinToHeFei

Related Topics1658 description (IPFPM-DCP instance view)


FunctionThe display ipfpm dcp command displays the DCP configuration in the IP FlowPerformance Measurement (FPM) system



8820



Format

display ipfpm dcp

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

You can run this command to check the DCP configuration

Example

Display the DCP configuration

ltHUAWEIgt display ipfpm dcp

Specification Information(Main Board) Max Instance Number 512 Max 10s Instance Number 512 Max 1s Instance Number 1 Max TLP Number 512 Max TLP Number Per Instance 8

Configuration Information DCP ID 10111 Loss-measure Flag tos-bit6(default) Authentication Mode -- Test Instances MCP ID 10222 Test Instances MCP Port 65030(default) Current Instance Number 1

Table 16-46 Description of the display ipfpm dcp command output

Item Description

Specification Information(MainBoard)

Specification information of the main board

Max Instance Number Maximum number of measurement instancessupported



Max TLP Number Maximum number of TLPs supported



8821



Item Description

Max TLP Number Per Instance Maximum number of TLPs supported by eachmeasurement instance

Configuration Information DCP configuration

DCP ID DCP ID

Loss-measure Flag Color bit used in packet loss measurementl tos-bit3 bit 3 in the ToS fieldl tos-bit4 bit 4 in the ToS fieldl tos-bit5 bit 5 in the ToS fieldl tos-bit6 bit 6 in the ToS fieldl tos-bit7 bit 7 in the ToS fieldl flag-bit0 bit 0 in the Flags fieldTo configure the color bit run the 1655 color-flag loss-measure command

Authentication Mode Authentication mode on the DCPl hmac-sha256 HMAC-SHA256 encrypted

authenticationl -- non-authenticationTo configure the authentication mode on a DCPrun the 1652 authentication-mode (IPFPM-DCP view) command

Test Instances MCP ID MCP ID To associate an MCP ID with ameasurement instance of a DCP run the 16540mcp (IPFPM-DCP instance view) command

Test Instances MCP Port MCP Port To configure the UDP port numberthrough which the DCP and MCP communicatewith each other run the 16540 mcp (IPFPM-DCP instance view) command

Current Instance Number Number of measurement instances

Related Topics16511 display ipfpm mcp


FunctionThe display ipfpm mcp command displays the MCP configuration and status in the IP FlowPerformance Measurement (FPM) system



8822



Format

display ipfpm mcp

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

You can run this command to check the MCP configuration and status

Example

Display the MCP configuration

ltHUAWEIgt display ipfpm mcpSpecification Information Max Instance Number 128 Max DCP Number Per Instance 128 Max ACH Number Per Instance 16 Max TLP Number Per ACH 16

Configuration Information MCP ID 10111 Status Active Protocol Port 65030(default) Current Instance Number 1

Table 16-47 Description of the display ipfpm mcp command output

Item Description

Specification Information Specifications of the MCP

Max Instance Number Maximum number of measurement instancessupported by the MCP

Max DCP Number Per Instance Maximum number of DCPs supported by eachmeasurement instance on the MCP

Max ACH Number Per Instance Maximum number of ACHs supported by eachmeasurement instance on the MCP

Max TLP Number Per ACH Maximum number of TLPs supported by ACHon the MCP

Configuration Information MCP configuration



8823



Item Description

MCP ID MCP ID To set the MCP ID run the 16541mcp id command on the MCP

Status MCP statusl Active The MCP works properlyl Deleting The undo nqa ipfpm mcp

command is being used to disable globalMCP

Protocol Port UDP port number through which the DCP andMCP communicate with each other To configurethe UDP port number through which the DCPand MCP communicate with each other run the16546 protocol udp port command

Current Instance Number Total number of measurement instances

Related Topics16510 display ipfpm dcp


Function

The display ipfpm statistic-type command displays packet loss statistics of a specifiedmeasurement instance in the IP Flow Performance Measurement (FPM) system

Format

display ipfpm statistic-type loss instance instance-id [ ach ach-id ]

Parameters


loss Displays packet loss statistics -

instance instance-id Displays packet loss statistics of aspecified measurement instance


ach ach-id Displays hop-by-hop performancestatistics for an Atomic Closed Hop(ACH)


Views

All views



8824





The packet loss statistics of a specified measurement instance include the indicators such asthe number of discarded packets number of discarded bytes and packet loss ratio To viewpacket loss statistics of a specified measurement instance run the display ipfpm statistic-type command

To locate and diagnose network faults when network performance deteriorates run thedisplay ipfpm statistic-type command with ach configured to check statistics for a specifiedACH

Precautions

This command can be only executed on the MCP

The first statistics record obtained through the IP FPM may be inaccurate so do not use thefirst statistics record to determine network performance

If the packet loss ratio is a negative value the service packets may be unknown unicastpackets or the color bits on devices participating in measurement may be different

Example Display packet loss statistics of measurement instance 1

ltHUAWEIgt display ipfpm statistic-type loss instance 1Latest loss statistics of forward flowUnit p - packet b - byte ------------------------------------------------------------------------------------------ Period Loss(p) LossRatio(p) Loss(b) LossRatio(b) ------------------------------------------------------------------------------------------ 136118757 20 20000000 2000 20000000 136118756 20 20000000 2000 20000000 136118755 20 20000000 2000 20000000 136118753 20 20000000 2000 20000000 136118752 20 20000000 2000 20000000 136118751 20 20000000 2000 20000000 136118750 20 20000000 2000 20000000 136118749 20 20000000 2000 20000000 136118748 20 20000000 2000 20000000 136118747 20 20000000 2000 20000000 136118746 20 20000000 2000 20000000 136118745 20 20000000 2000 20000000



8825



Latest loss statistics of backward flowUnit p - packet b - byte ------------------------------------------------------------------------------------------ Period Loss(p) LossRatio(p) Loss(b) LossRatio(b) ------------------------------------------------------------------------------------------ 136118757 20 20000000 2000 20000000 136118756 20 20000000 2000 20000000 136118755 20 20000000 2000 20000000 136118753 20 20000000 2000 20000000 136118752 20 20000000 2000 20000000 136118751 20 20000000 2000 20000000 136118750 20 20000000 2000 20000000 136118749 20 20000000 2000 20000000 136118748 20 20000000 2000 20000000 136118747 20 20000000 2000 20000000 136118746 20 20000000 2000 20000000 136118745 20 20000000 2000 20000000

Table 16-48 Description of the display ipfpm statistic-type command output

Item Description

Period Measurement interval

Loss(p) Number of discarded packets

LossRatio(p) Packet loss ratio

Loss(b) Number of discarded bytes

LossRatio(b) Packet loss ratio of bytes


Function

The display iplpm configuration brief command displays the brief configuration of device-level packet loss measurement (including measurement on the entire device and direct link)

Format

display iplpm configuration brief



8826



Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

To view parameters of device-level packet loss measurement run this command

Example

Display the brief configuration of device-level packet loss measurement

ltHUAWEIgt display iplpm configuration briefConfiguration information----------------------------------------------------------------Loss-measure flag flags-bit0(default)Global loss-measure interval(s) 10(default)Global loss-measure status disableGlobal loss-measure alarm disableLoss-measure board number 1Loss-measure board list 0Loss-measure port number 9Loss-measure port list GigabitEthernet001 GigabitEthernet002 GigabitEthernet003 GigabitEthernet004 GigabitEthernet005 GigabitEthernet006 GigabitEthernet007 GigabitEthernet008 GigabitEthernet009----------------------------------------------------------------

Table 16-49 Description of the display iplpm configuration brief command output

Item Description

Loss-measure flag Color bit for packet loss measurement Toconfigure the color bit run the iplpm loss-measure color-flag commandl tos-bit6 bit 6 in the ToS fieldl tos-bit7 bit 7 in the ToS fieldl flags-bit0 bit 0 in the Flags fieldThe value default indicates that the defaultcolor bit is used



8827



Item Description

Global loss-measure interval(s) Measurement interval of packet lossmeasurement on the device To set themeasurement interval run the iplpm globalloss-measure interval commandThe value default indicates that the defaultmeasurement interval is used

Global loss-measure status Whether packet loss measurement on thedevice is enabled To packet lossmeasurement for a device run the iplpmglobal loss-measure enable commandl enablel disable

Global loss-measure alarm Whether the alarm and clear alarm of packetloss ratio are enabled To enable the alarmand clear alarm of packet loss ratio run theiplpm global loss-measure alarm enablecommandl enablel disable

Loss-measure board number Number of cards that support device-levelpacket loss measurement

Loss-measure board list List of slot numbers of cards that supportdevice-level packet loss measurement Thevalue -- indicates that no card supportsdevice-level packet loss measurement

Loss-measure port number Number of interfaces where packet lossmeasurement for direct links is enabled

Loss-measure port list List of interfaces where packet lossmeasurement for direct links is enabled Thevalue -- indicates that no interface isenabled with packet loss measurement fordirect links

Related Topics16535 iplpm loss-measure color-flag16530 iplpm global loss-measure interval16529 iplpm global loss-measure enable16528 iplpm global loss-measure alarm enable



8828




Function

Run the display iplpm loss-measure statistics global command displays the packet lossmeasurement result on a device

Format

display iplpm loss-measure statistics global

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

You can run this command to view the packet loss measurement result on a device includingthe number of discarded packets packet loss ratio and error information

Example

Display the packet loss measurement result on a device

ltHUAWEIgt display iplpm loss-measure statistics global Latest global loss statistics-------------------------------------------------------------------------------- StartTime(DST) Loss Packets LossRatio ErrorInfo -------------------------------------------------------------------------------- 2014-06-12 184730 344127 4513519 OK 2014-06-12 184720 381085 4513196 OK 2014-06-12 184710 381192 4513290 OK 2014-06-12 184700 381339 4513341 OK 2014-06-12 184650 381465 4513392 OK 2014-06-12 184640 381444 4513487 OK 2014-06-12 184630 381129 4513309 OK --------------------------------------------------------------------------------

Table 16-50 Description of the display iplpm loss-measure statistics global command output

Item Description


Loss Packets Number of discarded packets in the currentmeasurement interval



8829



Item Description

LossRatio Packet loss ratio in the current measurementinterval

ErrorInfo Error code about packet loss measurementin the current measurement intervall OK There is no error and the packet

loss measurement result is normall Incomplete The statistics data is

incomplete An exception may occur inthe inter-card channel or the statisticsdata on a card cannot be sent


FunctionThe display iplpm loss-measure statistics history-record command displays the historyrecords of packet loss measurement on a device and a direct link

Formatdisplay iplpm loss-measure statistics history-record global | interface interface-typeinterface-number

Parameters


global Displays the history records of packet lossmeasurement on a device

-


Displays the history records of packet lossmeasurement on a direct link

-

ViewsAll views


Usage GuidelinesWhen the measurement interval is 1s 10s or 60s the system summarizes statistics results ineach measurement interval every 5 minutes to obtain the maximum and minimum packet lossratios within 5 minutes When the measurement interval is 600s the system summarizesstatistics results in each measurement interval every 60 minutes to obtain the maximum and



8830



minimum packet loss ratios within 60 minutes The system saves a maximum of foursummarized records You can run this command to view history records

Example

Display the history records of packet loss measurement on a device

ltHUAWEIgt display iplpm loss-measure statistics history-record globalLatest global history record(every 5 minutes)------------------------------------------------------------------------ Record no 29 Period(DST) 2014-03-19 162010 to 2014-03-19 162510 Valid statistic data number 30 Maximum loss ratio 0000000 Minimum loss ratio 0000000 Total loss packets 0 Total receive packets 0




------------------------------------------------------------------------

Display the history records of packet loss measurement on a direct link of GE001

ltHUAWEIgt display iplpm loss-measure statistics history-record interface gigabitethernet 001Latest history record of interface GigabitEthernet001(every 5 minutes)---------------------------------------------------------------------------- Record no 29 Period(DST) 2014-03-19 162010 to 2014-03-19 162510 Valid statistic data number 30 Maximum forward loss ratio 0000000 Minimum forward loss ratio 0000000 Total forward loss packets 0 Total forward receive packets 0 Maximum backward loss ratio 20000000 Minimum backward loss ratio 19980020 Total backward loss packets 6000 Total backward receive packets 30001

Record no 28 Period(DST) 2014-03-19 161510 to 2014-03-19 162010 Valid statistic data number 30 Maximum forward loss ratio 0000000 Minimum forward loss ratio 0000000 Total forward loss packets 0



8831



Total forward receive packets 0 Maximum backward loss ratio 20079920 Minimum backward loss ratio 19980020 Total backward loss packets 6001 Total backward receive packets 30003

Record no 27 Period(DST) 2014-03-19 161010 to 2014-03-19 161510 Valid statistic data number 30 Maximum forward loss ratio 0000000 Minimum forward loss ratio 0000000 Total forward loss packets 0 Total forward receive packets 0 Maximum backward loss ratio 20039880 Minimum backward loss ratio 19960080 Total backward loss packets 6001 Total backward receive packets 30005

Record no 26 Period(DST) 2014-03-19 160510 to 2014-03-19 161010 Valid statistic data number 30 Maximum forward loss ratio 0000000 Minimum forward loss ratio 0000000 Total forward loss packets 0 Total forward receive packets 0 Maximum backward loss ratio 20059880 Minimum backward loss ratio 19980020 Total backward loss packets 6001 Total backward receive packets 30004---------------------------------------------------------------------------------

Table 16-51 Description of the display iplpm loss-measure statistics history-record commandoutput

Item Description

Record no History record ID

Period(DST) Time history records were generated (standard DST)

Valid statisticdata number

Number of valid history statistics records

Maximum lossratio

Maximum packet loss ratio of the device

Minimum lossratio

Minimum packet loss ratio of the device

Total loss packets Total number of packets discarded by the device

Total receivepackets

Total number of packets received by the device

Maximumforward loss ratio

Maximum packet loss ratio of a forward flow (a forward flow is sentby the local device interface and received by the remote deviceinterface)

Minimumforward loss ratio

Minimum packet loss ratio of a forward flow (a forward flow is sentby the local device interface and received by the remote deviceinterface)



8832



Item Description

Total forward losspackets

Total number of discarded packets of a forward flow (a forward flowis sent by the local device interface and received by the remote deviceinterface)

Total forwardreceive packets

Total number of received packets (including the number of discardedpackets) of a forward flow (a forward flow is sent by the local deviceinterface and received by the remote device interface)

Maximumbackward lossratio

Maximum packet loss ratio of a backward flow (a backward flow issent by the remote device interface and received by the local deviceinterface)

Minimumbackward lossratio

Minimum packet loss ratio of a backward flow (a backward flow issent by the remote device interface and received by the local deviceinterface)

Total backwardloss packets

Total number of discarded packets of a backward flow (a backwardflow is sent by the remote device interface and received by the localdevice interface)

Total backwardreceive packets

Total number of received packets (including the number of discardedpackets) of a backward flow (a backward flow is sent by the remotedevice interface and received by the local device interface)


FunctionThe display iplpm loss-measure statistics interface command displays the packet lossmeasurement result on the direct link of a specified interface

Formatdisplay iplpm loss-measure statistics interface interface-type interface-number [ forward |backward ]

Parameters



Displays the packet loss measurement result on the direct link ofa specified interface

-

forward Displays the packet loss measurement result of a forward flowon the direct link of a specified interface A forward flow is sentby the local device interface and received by the remote deviceinterface

-



8833




backward Displays the packet loss measurement result of a backward flowon the direct link of a specified interface A backward flow issent by the remote device interface and received by the localdevice interface

-

ViewsAll views


Usage GuidelinesYou can run this command to view the packet loss measurement result in the forward andbackward directions including the number of discarded packets and packet loss ratio

Example Display the packet loss measurement result on the direct link of GE001

ltHUAWEIgt display iplpm loss-measure statistics interface gigabitethernet 001Latest forward loss statistics of interface GigabitEthernet001------------------------------------------------------------------------------------------------------- StartTime(DST) Forward Loss Packets Forward LossRatio ErrorInfo ------------------------------------------------------------------------------------------------------- 2014-03-19 155050 200 19980020 OK 2014-03-19 155040 200 20000000 OK 2014-03-19 155030 200 19980020 OK 2014-03-19 155020 200 20020020 OK 2014-03-19 155010 200 20000000 OK 2014-03-19 155000 200 19980020 OK--------------------------------------------------------------------------------------------------------Latest backward loss statistics of interface GigabitEthernet001 --------------------------------------------------------------------------------------------------------- StartTime(DST) Backward Loss Packets Backward LossRatio ErrorInfo --------------------------------------------------------------------------------------------------------- 2014-03-19 155050 0 0000000 OK 2014-03-19 155040 0 0000000 OK 2014-03-19 155030 0 0000000 OK 2014-03-19 155020 0 0000000 OK



8834



2014-03-19 155010 0 0000000 OK 2014-03-19 155000 0 0000000 OK------------------------------------------------------------------------------------------------------------

Table 16-52 Description of the display iplpm loss-measure statistics interface commandoutput

Item Description


Forward Loss Packets Number of discarded packets of a forwardflow (a forward flow is sent by the localdevice interface and received by the remotedevice interface) in the current measurementinterval

Forward LossRatio Packet loss ratio of a forward flow (aforward flow is sent by the local deviceinterface and received by the remote deviceinterface) in the current measurementinterval

Backward Loss Packets Number of discarded packets of a backwardflow (a backward flow is sent by the remotedevice interface and received by the localdevice interface) in the current measurementinterval

Backward LossRatio Packet loss ratio of a backward flow (abackward flow is sent by the remote deviceinterface and received by the local deviceinterface) in the current measurementinterval



8835



Item Description

ErrorInfo Error code about packet loss measurementin the current measurement intervall Init The device is in initialized state and

there is no statistics datal OK There is no error and the packet

loss measurement result is normall NoRecvData The local end does not

receive statistics data from the remoteend The possible causes are as followsndash The packet loss measurement on a

direct link is not enabled on theremote device

ndash The direct link becomes faulty orthere is a forwarding node on thelink

l DataErr The local end receives errorstatistics data from the remote end

l DiffAuth The authentication modes orpasswords on both ends are different

l DiffIntvl The measurement intervals onboth ends are different

l ASynClock The time on both ends isasynchronous When this code occurscheck the NTP configuration

l PortIsDown The interface is Down


Function

The display iplpm loss-measure statistics port-flow interface command displays statisticsabout discarded packets on an interface

Format

display iplpm loss-measure statistics port-flow interface interface-type interface-number

Parameters


interface-type interface-number Displays statistics about discarded packets on aspecified interface

-



8836



Views

All views

Default Level

1 Monitoring level

Usage Guidelines

When you find packet loss on an interface in the packet loss measurement result on the directlink in the display iplpm loss-measure statistics interface command output you can run thedisplay iplpm loss-measure statistics port-flow interface command to check the statisticsdata Then you can check whether the fault on the local interface causes packet loss

Example

Display statistics about discarded packets on GE001

ltHUAWEIgt display iplpm loss-measure statistics port-flow interface gigabitethernet 001Latest port loss statistics of interface GigabitEthernet001-------------------------------------------------------------------------------- StartTime(DST) Output Packets Loss Ratio Input Packets Loss Ratio -------------------------------------------------------------------------------- 2014-04-01 180940 0000000 0000000 2014-04-01 180930 0000000 0000000 2014-04-01 180920 0000000 0000000 2014-04-01 180910 0000000 0000000 ---------------------------------------------------------------------------------

Table 16-53 Description of the display iplpm loss-measure statistics port-flow interfacecommand output

Item Description


Output Packets Loss Ratio Packet loss ratio of packets sent by theinterface in the current measurementinterval which is used for reference only

Input Packets Loss Ratio Packet loss ratio of packets received by theinterface in the current measurementinterval which is used for reference only


Function

The display iplpm loss-measure statistics qos-queue interface command displays statisticsabout sent packets in QoS queues on an interface



8837



Formatdisplay iplpm loss-measure statistics qos-queue interface interface-type interface-number

Parameters



Displays statistics about sent packets in QoSqueues on a specified interface

-

ViewsAll views


Usage GuidelinesWhen you find packet loss on an interface in the packet loss measurement result on the directlink in the display iplpm loss-measure statistics interface command output you can run thedisplay iplpm loss-measure statistics qos-queue interface command to check the statisticsabout sent packets in QoS queues on an interface Then you can check whether congestion inqueues causes packet loss

Example Display statistics about sent packets in QoS queues on GE001

ltHUAWEIgt display iplpm loss-measure statistics qos-queue interface gigabitethernet 001Latest qos queue loss statistics of interface GigabitEthernet001 --------------------------------------------------------------------------------- StartTime(DST) 2014-03-19 162510 Queue0 0000000 Queue1 0000000 Queue2 0000000 Queue3 0000000 Queue4 0000000 Queue5 0000000 Queue6 0000000 Queue7 0000000 UserQueue 0000000 StartTime(DST) 2014-03-19 162500 Queue0 0000000 Queue1 0000000 Queue2 0000000 Queue3 0000000



8838



Queue4 0000000 Queue5 0000000 Queue6 0000000 Queue7 0000000 UserQueue 0000000 ---------------------------------------------------------------------------------

Table 16-54 Description of the display iplpm loss-measure statistics qos-queue interfacecommand output

Item Description


Queue0-Queue7 Packet loss ratios of queues 0 to 7 in themeasurement interval which is used forreference only

UserQueue Packet loss ratio of the subscriber queue onthe interface in the current measurementinterval The value of this field can beobtained only when HQoS is configuredand is used for reference only


Function

The display snmp-agent trap feature-name ipfpm all command displays all traps of the IPFlow Performance Measurement (FPM) module

Formatdisplay snmp-agent trap feature-name ipfpm all

Parameters

None

Views

All views

Default Level

1 Monitoring level



8839



Usage GuidelinesWhen you need to check the status of the IP FPM module but do not determine whether thetrap function of the IP FPM module is enabled run the display snmp-agent trap feature-name ipfpm all command to check the status of all traps of the IP FPM module

Example Display all traps of the IP FPM module

ltHUAWEIgt display snmp-agent trap feature-name ipfpm all------------------------------------------------------------------------------ Feature name IPFPM Trap number 4 ------------------------------------------------------------------------------ Trap name Default switch status Current switch status hwIpfpmLossRatioExceed off on hwIpfpmLossRatioRecovery off on hwIpfpmTlpExceed off on hwIpfpmTlpRecovery off on

Table 16-55 Description of the display snmp-agent trap feature-name ipfpm all commandoutput

Item Description



Trap name Trap name Traps of the IP FPM module includel hwIpfpmLossRatioExceed The packet loss ratio exceeds

the thresholdl hwIpfpmLossRatioRecovery The default packet loss

ratio is restoredl hwIpfpmTlpExceed The number of TLPs exceeds the

limitl hwIpfpmTlpRecovery The default number of TLPs is

restored



Related Topics16547 snmp-agent trap enable feature-name ipfpm



8840




Function

The display snmp-agent trap feature-name iplpm all command displays all traps of the IPLocal Performance Measurement (LPM) module

Formatdisplay snmp-agent trap feature-name iplpm all

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

When you need to check the status of the IP LPM module but do not determine whether thetrap function of the IP LPM module is enabled run the display snmp-agent trap feature-name iplpm all command to check the status of all traps of the IP LPM module

Example

Display all traps of the IP LPM module

ltHUAWEIgt display snmp-agent trap feature-name iplpm all------------------------------------------------------------------------------Feature name iplpm Trap number 4 ------------------------------------------------------------------------------Trap name Default switch status Current switch status hwIplpmGlobalLossRatioExceed on on hwIplpmGlobalLossRatioRecovery on on hwIplpmLinkForwardLossRatioExceed on on hwIplpmLinkForwardLossRatioRecovery on on

Table 16-56 Description of the display snmp-agent trap feature-name iplpm all commandoutput

Item Description





8841



Item Description

Trap name Trap name Traps of the IP LPM module includel hwIplpmGlobalLossRatioExceed The packet loss ratio

of the entire device exceeds the upper limitl hwIplpmGlobalLossRatioRecovery The packet loss

ratio of the entire device falls below the upper limitl hwIplpmLinkForwardLossRatioExceed The packet loss

ratio of the link between directly connected devicesexceeds the upper limit

l hwIplpmLinkForwardLossRatioRecovery The packetloss ratio of the link between directly connected devicesfalls below the upper limit



Related Topics16548 snmp-agent trap enable feature-name iplpm


FunctionThe flow command configures a target flow in a measurement instance on a DCP

The undo flow command deletes the target flow from a measurement instance on a DCP

By default no target flow is configured in a measurement instance on a DCP

Format Define a unidirectional flowl When the protocol of a target flow is TCP or UDP run the following command

flow forward | backward protocol tcp | udp source-port src-port-number1[ to src-port-number2 ] | destination-port dest-port-number1 [ to dest-port-number2 ] | dscp dscp-value | source src-ip-address [ src-mask-length ] | destination dest-ip-address [ dest-mask-length ]

l When the protocol of a target flow is not TCP or UDP run the following commandflow forward | backward protocol protocol-number | dscp dscp-value | sourcesrc-ip-address [ src-mask-length ] | destination dest-ip-address [ dest-mask-length ]

Define a bidirectional symmetrical flow



8842



l When the protocol of a target flow is TCP or UDP run the following command

flow bidirectional protocol tcp | udp source-port src-port-number1 [ to src-port-number2 ] | destination-port dest-port-number1 [ to dest-port-number2 ] | dscpdscp-value | source src-ip-address [ src-mask-length ] | destination dest-ip-address[ dest-mask-length ]

l When the protocol of a target flow is not TCP or UDP run the following command

flow bidirectional protocol protocol-number | dscp dscp-value | source src-ip-address[ src-mask-length ] | destination dest-ip-address [ dest-mask-length ]

Cancel the configured target flow

undo flow forward | backward | bidirectional

Parameters


forward Indicates the forward flow -

backward Indicates the backward flow -

protocol tcp |udp

Indicates that the protocol of a targetflow is TCP or UDP

-

source-port src-port-number1

Specifies the start source portnumber of a target flow


src-port-number2 Specifies the end source portnumber of a target flow

The value is an integer thatranges from 1 to 65535 src-port-number2 must be largerthan src-port-number1

destination-portdest-port-number1

Specifies the start destination portnumber of a target flow


dest-port-number2 Specifies the end destination portnumber of a target flow

The value is an integer thatranges from 1 to 65535 dest-port-number2 must be largerthan dest-port-number1

dscp dscp-value Specifies the value of aDifferentiated Services CodePoint(DSCP) of a target flow


source src-ip-address Specifies the source IP address of atarget flow


src-mask-length Specifies the mask length of thesource IP address of a target flow


destination dest-ip-address

Specifies the destination IP addressof a target flow


dest-mask-length Specifies the mask length of thedestination IP address of a targetflow




8843




protocol protocol-number

Specifies the protocol type of atarget flow

The value is an integerranging from 1 to 5 7 to 16or 18 to 255NOTE

The value 6 indicates TCP andthe value 17 indicates UDP

bidirectional Indicates the bidirectionalsymmetrical flowNOTE

If the target flow is symmetricalbidirectional set src-ip-address tospecify a source IP address and dest-ip-address to specify a destination IPaddress for the target flow

-




A target flow is the objective in iPCA measurement and can be defined by any combinationsof source IP address destination IP address protocol type DSCP value source port numberand destination port number Specifying more attributes can make the target flow accurateTherefore it is recommended that you specify more attributes to improve precision ofmeasurement results

Precautions

A target flow has the direction feature If a target flow is unidirectional only a forward flowor a backward flow needs to be configured If a target flow is bidirectional (the source anddestination addresses of forward and backward flows mirror to each other) only abidirectional symmetrical flow needs to be configured The system then automaticallygenerates two symmetrical unidirectional flows If the source and destination addresses arenot mirrored two unidirectional flows need to be configured

A measurement instance can contain only one unidirectional flow or bidirectional flow (twounidirectional flows logically) Different measurement instances cannot contain the sametarget flow That is a target flow cannot belong to both instance A and instance B and theforward flow and backward flow in the same measurement instance cannot be the same

When you define a bidirectional symmetrical flow you must specify the source anddestination IP addresses

Example Configure a target flow of measurement instance 1 on a DCP



8844



ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] flow bidirectional protocol udp source-port 1025 source 10111 destination 10222

Related Topics16543 nqa ipfpm dcp16524 instance (IPFPM-DCP view)


Function

The flow command configures the target flow direction in the Atomic Closed Hop (ACH)view

The undo flow command deletes the target flow direction in the ACH view

By default no direction is configured for target flows in the ACH view

Format

flow forward | backward

undo flow

Parameters




Views

IPFPM-MCP-ACH view

Default Level


Usage Guidelines

Usage Scenario

Run the flow command in IP FPM hop-by-hop performance statistics scenarios

Prerequisites




8845



Example

Configure the forward target flow in the ACH view

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] ach 1[HUAWEI-nqa-ipfpm-mcp-instance-1-ach-1] flow forward

Related Topics16544 nqa ipfpm mcp16525 instance (IPFPM-MCP view)1651 ach

16523 in-group

Function

The in-group command creates a Target Logical Port (TLP) in-group for the target flow

The undo in-group command deletes a TLP in-group or deletes a TLP from a TLP in-group

By default no TLP in-group is configured for the target flow

Format

in-group dcp dcp-id tlp tlp-id

undo in-group [ dcp dcp-id tlp tlp-id ]

Parameters


dcp dcp-id Specifies a DCP to which TLPs in a TLPin-group belongs


tlp tlp-id Indicates a TLP in a TLP in-group The value is an integer ranging from1 to 16777215

Views

IPFPM-MCP-ACH view

Default Level


Usage Guidelines

Usage Scenario



8846



To measure the packet loss or delay of service packets entering a network run the in-groupcommand In IP FPM hop-by-hop performance statistics scenarios a hop is a set of links andinterfaces that service packets travel through from one measurement point or group to thenext measurement point or group and therefore is represented by (TLP in-group TLP out-group) Performance statistics are implemented on the TLP in-point or in-group throughwhich service packets enter a network and the TLP out-point or out-group through whichservice packets leave the network

Prerequisites


Example

Create a TLP in-group for the target flow

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] ach 1[HUAWEI-nqa-ipfpm-mcp-instance-1-ach-1] in-group dcp 10111 tlp 100



Function

The instance command creates an IPFPM-DCP instance and displays the IPFPM-DCPinstance view or directly displays the view of an existing IPFPM-DCP instance

The undo instance command deletes an IPFPM-DCP instance

By default no IPFPM-DCP instance is created on a DCP

Format



Parameters


instance-id Specifies the ID of an IPFPM-DCPinstance


Views

IPFPM-DCP view



8847



Default Level


Usage Guidelines

Usage Scenario


Prerequisites


Follow-up Procedure

Run the flow command to configure a target flow run the tlp command to configure the TLPsof the measurement instance and run the interval command to configure the measurementinterval

Precautions


Example

Create IPFPM-DCP instance 1

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1

Related Topics16543 nqa ipfpm dcp1658 description (IPFPM-DCP instance view)16525 instance (IPFPM-MCP view)16521 flow (IPFPM-DCP instance view)16549 tlp16526 interval (IPFPM-DCP instance view)


Function

The instance command creates an IPFPM-MCP instance and displays the IPFPM-MCPinstance view or directly displays the view of an existing IPFPM-MCP instance

The undo instance command deletes an IPFPM-MCP instance

By default no IPFPM-MCP instance is created on the MCP



8848



Format



Parameters


instance-id Specifies the ID of an IPFPM-MCPinstance


Views

IPFPM-MCP view

Default Level


Usage Guidelines

Usage Scenario


Prerequisites


Precautions


Example

Create IPFPM-MCP instance 1

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1

Related Topics16544 nqa ipfpm mcp1659 description (IPFPM-MCP instance view)16524 instance (IPFPM-DCP view)



8849




FunctionThe interval command sets the measurement interval of a measurement instance on a DCP

The undo interval command restores the default measurement interval of a measurementinstance on a DCP

By default the measurement interval of a measurement instance on a DCP is 10 seconds

Formatinterval interval

undo interval

Parameters


interval Specifies the measurementinterval of a measurement instanceon a DCP

The value is of the enumerated type andcan be 1 10 60 or 600 in seconds




The measurement interval of a measurement instance on a DCP is the interval at which a TLPcollects statistics on packets or bytes and records the timestamp of packet receiving orsending It is also the interval at which a DCP reports statistics data to the MCP A shorterinterval indicates a higher frequency at which a DCP reports statistics data to the MCP so theinterval adjustment affects the performance of the DCP and MCP

Considering factors such as the clock synchronization offset maximum transmission delayand device performance you can run this command to change the measurement interval

Precautions

The measurement intervals of the same measurement instances on all DCPs must be the sameotherwise the statistics data will be empty

To ensure accuracy of statistics data disable the statistics collection in the IPFPM-DCPinstance view before changing the measurement interval

The measurement interval of a measurement instance cannot be changed when themeasurement instance is running If the measurement interval of a running measurement



8850



instance is changed the statistics reported by MCP may be inaccurate To change themeasurement interval run the measure disable command in the IPFPM-MCP instance viewto disable the measurement and then run the measure enable command to enable themeasurement

Example Set the measurement interval of measurement instance 1 to 60s

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] interval 60

Related Topics16543 nqa ipfpm dcp16524 instance (IPFPM-DCP view)16521 flow (IPFPM-DCP instance view)

16527 ipfpm tlp

FunctionThe ipfpm tlp command binds a Target Logical Port (TLP) to an interface in a measurementinstance on a DCP

The undo ipfpm tlp command unbinds a TLP from an interface in a measurement instance ona DCP

By default an interface is not bound to a TLP in a measurement instance on a DCP

Formatipfpm tlp tlp-id

undo ipfpm tlp tlp-id | all

Parameters


tlp-id Specifies the ID of a TLP The value is an integer that rangesfrom 1 to 16777215

all Cancels the binding between all TLPs andinterfaces

-

ViewsGE interface view XGE interface view Eth-Trunk interface view




8851



Usage Guidelines

Usage Scenario

Before performing packet loss measurement run this command to bind a TLP to an interface

Prerequisites

A Layer 2 or Layer 3 interface can be bound to a TLP If you want to bind a Layer 2 interfaceto a TLP the undo portswitch command must have been executed in the interface view toswitch the interface to Layer 3 mode

Precautions

On a DCP one TLP is bound to one interface

Example

Bind GE001 to TLP 100

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] undo portswitch[HUAWEI-GigabitEthernet001] ipfpm tlp 100

Related Topics16549 tlp


Function

The iplpm global loss-measure alarm enable command enables the alarm and clear alarm ofthe packet loss ratio for device-level packet loss measurement

The undo iplpm global loss-measure alarm enable command restores the default setting

By default the alarm and clear alarm of the packet loss ratio are disabled

Format

iplpm global loss-measure alarm enable

undo iplpm global loss-measure alarm enable

Parameters

None

Views

System view

Default Level




8852



Usage Guidelines

After this command is used the alarm threshold and clear alarm threshold of the packet lossratio are 5 and 1l If the packet loss ratio in five consecutive measurement intervals exceeds the alarm

threshold the device reports the hwIpfpmLossRatioExceed alarm to the NMS to notifythe link fault in real time

l If the packet loss ratio in five consecutive measurement intervals falls below or isequivalent to the clear alarm threshold the device reports thehwIpfpmLossRatioRecovery alarm to the NMS to notify link recovery in real time

Example

Enable the alarm and clear alarm of the packet loss ratio for device-level packet lossmeasurement

ltHUAWEIgt system-view[HUAWEI] iplpm global loss-measure alarm enable


Function

The iplpm global loss-measure enable command enables packet loss measurement for adevice

The undo iplpm global loss-measure enable command disables packet loss measurement fora device

By default packet loss measurement for a device is disabled

Format

iplpm global loss-measure enable

undo iplpm global loss-measure enable

Parameters

None

Views

System view

Default Level


Usage Guidelines

To measure the packet loss of a switch run this command to enable packet loss measurementfor the switch



8853



Example

Enable packet loss measurement for a device

ltHUAWEIgt system-view[HUAWEI] iplpm global loss-measure enable


Function

The iplpm global loss-measure interval command configures the device-level packet lossmeasurement interval

The undo iplpm global loss-measure interval command restores the default device-levelpacket loss measurement interval

By default the device-level packet loss measurement interval is 10s

Format

iplpm global loss-measure interval interval

undo iplpm global loss-measure interval

Parameters


interval Specifies the device-levelpacket loss measurementinterval

The value is of the enumerated type and canbe 1 10 60 or 600 in seconds

Views

System view

Default Level


Usage Guidelines

The device-level packet loss measurement interval refers to the period from received packetstatistics collection to sent packet statistics collection To ensure accuracy of statistics datarun the undo iplpm global loss-measure enable command to disable device-level packet lossmeasurement in the system view before changing the measurement interval

Example

Set the device-level packet loss measurement interval to 60s

ltHUAWEIgt system-view[HUAWEI] iplpm global loss-measure interval 60



8854



Related Topics16529 iplpm global loss-measure enable


FunctionThe iplpm link authentication-mode command configures the authentication mode andpassword for packet loss measurement on a direct link

The undo iplpm link authentication-mode command deletes the authentication mode andpassword

By default no authentication mode or password is configured for packet loss measurement ona direct link

Formatiplpm link authentication-mode hmac-sha256 key-id key-id [ cipher ] password

undo iplpm link authentication-mode

Parameters


hmac-sha256 Uses HMAC-SHA256 toauthenticate packets betweendevices

-

key-id key-id Specifies the ID of theauthentication password


cipher Specifies the cipher-textauthentication password

-

password Specifies the authenticationpassword

The value is a character string withoutspacesl The value is a string of 1 to 255








8855



After packet loss measurement is configured on a direct link statistics data on received andsent packets on an interface at one end is sent to an interface at the other end and summarizedfor packet loss measurement This command is used to authenticate communication packetson the direct link improving security

Precautions

When the authentication mode and password are configured on an interface packetsencapsulated with local statistics data sent from the interface are authenticated Thereforeboth interfaces of the direct link must be configured with the same authentication mode andpassword

Example Set the authentication mode to hmac-sha256 and password to huawei in cipher text forpacket loss measurement on a direct link on the GE001

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] iplpm link authentication-mode hmac-sha256 key-id 1 cipher huawei


FunctionThe iplpm link loss-measure alarm enable command enables the alarm and clear alarm ofthe packet loss ratio for packet loss measurement on a direct link

The undo iplpm link loss-measure alarm enable command restores the default setting

By default the packet loss alarm and clear alarm are disabled for packet loss measurement ona direct link

Formatiplpm link loss-measure alarm enable

undo iplpm link loss-measure alarm enable

ParametersNone



Usage GuidelinesAfter this command is used the alarm threshold and clear alarm threshold of the packet lossratio are 5 and 1



8856



l If the packet loss ratio in five consecutive measurement intervals exceeds the alarmthreshold the device reports the hwIpfpmLossRatioExceed alarm to the NMS to notifythe link fault in real time

l If the packet loss ratio in five consecutive measurement intervals falls below the clearalarm threshold the device reports the hwIpfpmLossRatioRecovery alarm to the NMS tonotify link recovery in real time

Example

On the GE001 enable the alarm and clear alarm of the packet loss ratio for packet lossmeasurement on a direct link

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] iplpm link loss-measure alarm enable


Function

The iplpm link loss-measure enable command enables packet loss measurement on thedirect link

The undo iplpm link loss-measure enable command disables packet loss measurement onthe direct link

By default packet loss measurement is disabled on the direct link

Format

iplpm link loss-measure enable

undo iplpm link loss-measure enable

Parameters

None

Views

GE interface view XGE interface view

Default Level


Usage Guidelines

To accurately locate packet loss on a link run the iplpm link loss-measure enable commandto enable packet loss measurement on the direct link between two devices

This function must be enabled on both device interfaces of the direct link



8857



Example On the GE001 enable packet loss measurement on the direct link

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] iplpm link loss-measure enable


FunctionThe iplpm link loss-measure interval command configures the interval for packet lossmeasurement on the direct link

The undo iplpm link loss-measure interval command restores the default interval for packetloss measurement on the direct link

By default the interval for packet loss measurement on the direct link is 10s

Formatiplpm link loss-measure interval interval

undo iplpm link loss-measure interval

Parameters


interval Specifies the interval for packet lossmeasurement on the direct link

The value is an integer that can be 110 60 or 600 in seconds



Usage GuidelinesThe interval for packet loss measurement on the direct link refers to the period from receivedpacket statistics collection to sent packet statistics collection on a specified interface Toensure accuracy of statistics data run the undo iplpm link loss-measure enable command todisable packet loss measurement on the direct link in the interface view before changing themeasurement interval

Example On the GE001 set the interval for packet loss measurement on the direct link to 60s

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] iplpm link loss-measure interval 60



8858



Related Topics16533 iplpm link loss-measure enable


FunctionThe iplpm loss-measure color-flag command configures the color bit used in device-levelpacket loss measurement

The undo iplpm loss-measure color-flag command restores the default color bit used indevice-level packet loss measurement

By default bit 0 in the Flags field is used as the color bit for device-level packet lossmeasurement The default configuration is recommended

Formatiplpm loss-measure color-flag tos-bit tos-bit | flags-bit0

undo iplpm loss-measure color-flag

Parameters


tos-bit tos-bit Specifies bit 6 or 7 in the ToS field of IP packets as thecolor bit for device-level packet loss measurement

The value is 6or 7

flags-bit0 Specifies bit 0 in the Flags field of IP packets as the colorbit for device-level packet loss measurement

-

ViewsSystem view



Device-level packet loss measurement contains measurement on the entire device and directlink Before deploying Packet Conservation Algorithm for Internet (iPCA) to implementdevice-level packet loss measurement run this command to configure the color bit You canselect a color bit according to the actual situation and network planning

Precautions

Before changing the color bit for device-level packet loss measurement run the undo iplpmglobal loss-measure enable command in the system view to disable device-level packet lossmeasurement If packet loss measurement is configured on the direct link run the undo iplpm



8859



link loss-measure enable command in the interface view to disable packet loss measurementon the direct link and ensure that the color bits on both devices of the direct link are changedto be the same


Example

Configure bit 7 in the ToS field as the color bit for device-level packet loss measurement

ltHUAWEIgt system-view[HUAWEI] iplpm loss-measure color-flag tos-bit 7

Related Topics16529 iplpm global loss-measure enable16533 iplpm link loss-measure enable


Function

The loss-measure enable command enables statistics collection based on the time range for ameasurement instance on a DCP

The undo loss-measure enable command disables statistics collection based on the timerange for a measurement instance on a DCP

By default statistics collection based on the time range is disabled for a measurement instanceon a DCP

Format

loss-measure enable [ mid-point ] [ time-range time-range ]

undo loss-measure enable [ [ mid-point ] time-range [ time-range ] ]

Parameters


mid-point Enables on-demand packet loss measurement formid-points

If this parameter is configured on-demand packetloss measurement is enabled for all mid-points Ifthis parameter is not configured on-demand packetloss measurement is enabled for all measurementpoints

NOTEThe mid-point is only applied to hop-by-hopmeasurement

-



8860




time-rangetime-range

Specifies the time range for statistics collection The value is 5 1015 or 30 inminutes Thedefault value is 10minutes

Views


Default Level


Usage Guidelines

Usage Scenario

The IP FPM performance statistics serve as a reliable reference for assessing IP networkperformance and therefore are useful for fault diagnosis and service statistics To monitor on-demand packet loss performance in a specified period or diagnose network faults and locatefaulty nodes when network performance deteriorates run the loss-measure enable command

Prerequisites


Precautions

This command is not recorded in the configuration file after being executed After devicerestart statistics collection based on the time range becomes invalid and needs to bereconfigured

Statistics collection based on the time range and continual statistics collection cannot beenabled simultaneously

Example

Enable statistics collection based on the time range for a measurement instance on a DCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] loss-measure enable time-range 30

Related Topics16543 nqa ipfpm dcp16524 instance (IPFPM-DCP view)16537 loss-measure enable continual



8861




Function

The loss-measure enable continual command enables continual statistics collection for ameasurement instance on a DCP

The undo loss-measure enable command disables continual statistics collection for ameasurement instance on a DCP

By default continual statistics collection is disabled for a measurement instance on a DCP

Format

loss-measure enable continual

undo loss-measure enable [ continual ]

Parameters

None

Views


Default Level


Usage Guidelines

Usage Scenario

If you are unaware of network performance degrading and want to continuously monitorpacket loss on the network run the loss-measure enable continual command to enablecontinual statistics collection

Prerequisites


Precautions

Continual statistics collection and statistics collection based on the time range cannot beenabled simultaneously

Example

Enable continual statistics collection for a measurement instance on a DCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] loss-measure enable continual



8862



Related Topics16543 nqa ipfpm dcp16524 instance (IPFPM-DCP view)16536 loss-measure enable


Function

The loss-measure ratio-threshold command configures the alarm and clear alarm thresholdsof the packet loss ratio for a measurement instance on the MCP

The undo loss-measure ratio-threshold command restores the default setting

By default the alarm and clear alarm thresholds of the packet loss ratio are not configured fora measurement instance on the MCP That is no alarm is generated for packet loss

Format

loss-measure ratio-threshold upper-limit upper-limit lower-limit lower-limit

undo loss-measure ratio-threshold

Parameters


upper-limitupper-limit

Specifies the alarmthreshold for the packetloss ratio

The value is a string of 1 to 10 digits and in therange of 0000001 to 100 The value isaccurate to six decimal places in percentage

lower-limitlower-limit

Specifies the clearalarm threshold for thepacket loss ratio

The value is a string of 1 to 10 digits and in therange of 0000001 to 100 The value isaccurate to six decimal places in percentagelower-limit must be smaller than or equal toupper-limit

Views


Default Level


Usage Guidelines

Usage Scenario

After the alarm and clear alarm thresholds of the packet loss ratio are configured for ameasurement instance on the MCP



8863



l If the packet loss ratio in five consecutive measurement intervals exceeds the alarmthreshold the MCP reports the hwIpfpmLossRatioExceed alarm to the NMS to notifythe link fault in real time

l If the packet loss ratio in five consecutive measurement intervals falls below the clearalarm threshold the MCP reports the hwIpfpmLossRatioRecovery alarm to the NMS tonotify link recovery in real time

To facilitate operation and maintenance you are advised to run this command to configure thealarm and clear alarm thresholds of the packet loss ratio for a measurement instance on theMCP according to network performance

Precautions

If you run the loss-measure ratio-threshold command multiple times only the latestconfiguration takes effect

This command only configures the alarm and clear alarm thresholds of the packet loss ratiofor a measurement instance on the MCP The hwIpfpmLossRatioExceed andhwIpfpmLossRatioRecovery alarms are triggered only when the alarm and clear alarmfunctions are enabled and the packet loss ratio in five consecutive measurement intervalsreaches the threshold

Example

Set the alarm and clear alarm thresholds of the packet loss ratio to 10 and 55 formeasurement instance 1

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] loss-measure ratio-threshold upper-limit 10 lower-limit 55

Related Topics16544 nqa ipfpm mcp16525 instance (IPFPM-MCP view)16547 snmp-agent trap enable feature-name ipfpm


Function

The mcp command associates the MCP ID with all measurement instances of a DCP

The undo mcp command disassociates the MCP ID from all measurement instances of aDCP


Format

mcp mcp-id [ port port-number ] [ vpn-instance vpn-instance-name | net-manager-vpn ]

undo mcp



8864



Parameters


mcp-id Specifies the MCP ID associatedwith all measurement instances of aDCP It is recommended that youconfigure the router ID of the deviceas the MCP ID


port port-number

Specifies the UDP port numberthrough which the DCP and MCPcommunicate with each other

The value is an integer that rangesfrom 1024 to 65535 The defaultvalue is 65030 and isrecommended


Specifies the VPN instance where theDCP and MCP communicate witheach other


net-manager-vpn

Specifies the manager VPN wherethe DCP and MCP communicatewith each other

-

ViewsIPFPM-DCP view



In the IP Flow Performance Measurement (FPM) system each measurement instance belongsto an MCP Before a DCP sends statistics data of a measurement instance from TLPs to theMCP you must associate the MCP ID with the measurement instance The mcp commandassociates the MCP ID with all measurement instances of a DCP

A DCP encapsulates statistics data collected from Target Logical Ports (TLPs) and MCP IDassociated with all measurement instances on the DCP in a packet and sends the packet withthe MCP ID as the destination IP address After receiving the packet sent from the DCP theMCP compares the MCP ID in the packet with the MCP ID configured by the mcp idcommandl If the two MCP IDs are the same the MCP accepts the packet and then summarizes and


Prerequisites




8865



NOTEIf the DCP is required to send statistics data to the MCP through a specified VPN instance or managerVPN the VPN instance must have been created on the DCP before you run the mcp command withvpn-instance vpn-instance-name or net-manager-vpn specified

Precautions



The mcp command associates the MCP ID with all measurement instances on the DCPHowever if some measurement instances on the DCP have been associated with the MCP IDconfigured by the mcp command the measurement instances still use the MCP ID in theIPFPM-DCP instance view

Example Associate the MCP ID with all measurement instances of a DCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] mcp 10111

Related Topics16543 nqa ipfpm dcp16546 protocol udp port16540 mcp (IPFPM-DCP instance view)16541 mcp id


FunctionThe mcp command associates the MCP ID with a measurement instance of a DCP

The undo mcp command disassociates the MCP ID from a measurement instance of a DCP


Formatmcp mcp-id [ port port-number ] [ vpn-instance vpn-instance-name | net-manager-vpn ]

undo mcp



8866



Parameters


mcp-id Specifies the MCP ID associated with ameasurement instance of a DCP It isrecommended that you configure therouter ID of the device as the MCP ID


port port-number Specifies the UDP port number throughwhich the DCP and MCP communicatewith each other

The value is an integer thatranges from 1024 to 65535The default value 65030 isrecommended


Specifies the VPN instance where theDCP and MCP communicate with eachother


net-manager-vpn

Specifies the manager VPN where theDCP and MCP communicate with eachother

-




Before a DCP sends statistics data of a measurement instance from TLPs to the MCP youmust associate the MCP ID with the measurement instance The mcp command associates theMCP ID with a measurement instance of a DCP

A DCP encapsulates statistics data collected from Target Logical Ports (TLPs) and MCP IDassociated with a measurement instance of the DCP in a packet and sends the packet with theMCP ID as the destination IP address After receiving the packet sent from the DCP the MCPcompares the MCP ID in the packet with the MCP ID configured by the mcp id commandl If the two MCP IDs are the same the MCP accepts the packet and then summarizes and


Prerequisites


Precautions





8867



Example

Associate the MCP ID with a measurement instance of a DCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] mcp 10111

Related Topics16543 nqa ipfpm dcp16524 instance (IPFPM-DCP view)16539 mcp (IPFPM-DCP view)16541 mcp id

16541 mcp id

Function

The mcp id command configures the MCP ID in the IP Flow Performance Measurement(FPM) system

The undo mcp id command deletes the MCP ID

By default no MCP ID is configured

Format

mcp id mcp-id

undo mcp id

Parameters


mcp-id Specifies the MCP ID It is recommended that youconfigure the router ID of the device as the MCP ID


Views

IPFPM-MCP view

Default Level


Usage Guidelines

Usage Scenario

When the MCP communicates with a DCP the DCP encapsulates statistics data collectedfrom TLPs and MCP ID associated with a measurement instance by the mcp command in a



8868



packet and sends the packet with the MCP ID as the destination IP address After receivingthe packet sent from the DCP the MCP compares the MCP ID in the packet with the MCP IDof the device

l If the two MCP IDs are the same the MCP accepts the packet and then summarizes andcalculates the statistics data

l If the two MCP IDs are different the MCP considers the packet invalid and discards it

This command configures the MCP ID

Prerequisites


Precautions

The MCP ID must be an IP address that a DCP can reach and must be the same as the MCPID configured by the mcp command on the DCP If you have changed the MCP ID you mustchange the MCP ID associated with measurement instances on the DCP otherwise the DCPcannot communicate with the MCP

Example

Set the MCP ID

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] mcp id 10111

Related Topics1657 dcp id16544 nqa ipfpm mcp16540 mcp (IPFPM-DCP instance view)


Function

The measure disable command disables measurement of all indicators in a measurementinstance on the MCP

Both the undo measure disable and measure enable commands enable measurement of allindicators in a measurement instance on the MCP

By default measurement of all indicators is enabled in a measurement instance on the MCP

Format

measure disable

measure enable

undo measure disable



8869



Parameters

None

Views


Default Level


Usage Guidelines

If the MCP receives error data during the DCP configuration update you can run the measuredisable command to disable measurement of all indicators in a measurement instance on theMCP When the DCP configuration update is complete run the undo measure disable ormeasure enable command to enable measurement of all indicators in a measurement instanceon the MCP so that data of the measurement instance is more accurate

Example

Disable measurement of all indicators in measurement instance 1 on the MCP

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] measure disable

Related Topics16544 nqa ipfpm mcp

16543 nqa ipfpm dcp

Function

The nqa ipfpm dcp command enables global DCP and displays the IPFPM-DCP view ordirectly displays the IPFPM-DCP view if global DCP has been enabled

The undo nqa ipfpm dcp command disables global DCP

By default global DCP is disabled

Format

nqa ipfpm dcp

undo nqa ipfpm dcp

Parameters

None



8870



Views

System view

Default Level


Usage Guidelines

Usage Scenario

Before performing packet loss measurement for service traffic run the nqa ipfpm dcpcommand to enable global DCP and enter the IPFPM-DCP view

Follow-up Procedure

Run the dcp id command to set the DCP ID

Precautions

DCP and MCP functions can be configured on the same device

Example

Enable global DCP and enter the IPFPM-DCP view

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp]

Related Topics1657 dcp id16544 nqa ipfpm mcp

16544 nqa ipfpm mcp

Function

The nqa ipfpm mcp command enables global MCP and displays the IPFPM-MCP view ordirectly displays the IPFPM-MCP view if global MCP has been enabled

The undo nqa ipfpm mcp command disables global MCP

By default global MCP is disabled

Format

nqa ipfpm mcp

undo nqa ipfpm mcp

Parameters

None



8871



Views

System view

Default Level


Usage Guidelines

Usage Scenario

Before performing packet loss measurement for service traffic run the nqa ipfpm mcpcommand to enable global MCP and enter the IPFPM-MCP view

Follow-up Procedure

Run the mcp id command to set the MCP ID

Precautions

MCP and DCP functions can be configured on the same device

Example

Enable global MCP and enter the IPFPM-MCP view

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp]

Related Topics16541 mcp id16543 nqa ipfpm dcp

16545 out-group

Function

The out-group command creates a Target Logical Port (TLP) out-group for the target flow

The undo out-group command deletes a TLP out-group or deletes a TLP from a TLP out-group

By default no TLP out-group is configured for the target flow

Format

out-group dcp dcp-id tlp tlp-id

undo out-group [ dcp dcp-id tlp tlp-id ]



8872



Parameters


dcp dcp-id Indicates a DCP to which TLPs in a TLPout-group belongs


tlp tlp-id Indicates a TLP in a TLP out-group The value is an integer ranging from1 to 16777215

Views

IPFPM-MCP-ACH view

Default Level


Usage Guidelines

Usage Scenario

To measure the packet loss or delay of service packets leaving a network run the out-groupcommand In IP FPM hop-by-hop performance statistics scenarios a hop is a set of links andinterfaces that service packets travel through from one measurement point or group to thenext measurement point or group and therefore is represented by (TLP in-group TLP out-group) Performance statistics are implemented on the TLP in-point or in-group throughwhich service packets enter a network and the TLP out-point or out-group through whichservice packets leave the network

Prerequisites


Example

Create a TLP out-group for the target flow

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] instance 1[HUAWEI-nqa-ipfpm-mcp-instance-1] ach 1[HUAWEI-nqa-ipfpm-mcp-instance-1-ach-1] out-group dcp 10111 tlp 100




8873




Function

The protocol udp port command configures the UDP port number through which the DCPand MCP communicate with each other

The undo protocol udp port command restores the default UDP port number through whichthe DCP and MCP communicate with each other

By default the DCP and MCP communicate with each other through UDP port 65030 Thedefault configuration is recommended

Format

protocol udp port port-number

undo protocol udp port

Parameters


port-number Specifies the UDP port number throughwhich the DCP and MCP communicate witheach other


Views

IPFPM-MCP view

Default Level


Usage Guidelines

Usage Scenario

The DCP uses UDP and default port 65030 to send statistics data to the MCP To change theUDP port number run this command

Prerequisites


Precautions

The UDP port number of the DCP must be the same as the UDP port number configured bythe mcp (IPFPM-DCP instance view) command on the DCP

Example

Specify UDP port 1024 through which the DCP and MCP communicate with each other



8874



ltHUAWEIgt system-view[HUAWEI] nqa ipfpm mcp[HUAWEI-nqa-ipfpm-mcp] protocol udp port 1024

Related Topics16541 mcp id16544 nqa ipfpm mcp16543 nqa ipfpm dcp


FunctionThe snmp-agent trap enable feature-name ipfpm command enables the trap function forthe IP Flow Performance Measurement (FPM) module

The undo snmp-agent trap enable feature-name ipfpm command disables the trap functionfor the IP FPM module

By default the trap function is disabled for the IP FPM module

Formatsnmp-agent trap enable feature-name ipfpm [ trap-name hwipfpmlossratioexceed |hwipfpmlossratiorecovery | hwipfpmtlpexceed | hwipfpmtlprecovery ]

undo snmp-agent trap enable feature-name ipfpm [ trap-name hwipfpmlossratioexceed | hwipfpmlossratiorecovery | hwipfpmtlpexceed |hwipfpmtlprecovery ]

Parameters


trap-name Enables the trap function for the specified event -

hwipfpmlossratioexceed Enables the trap function about the packet loss ratioexceeding the threshold

-

hwipfpmlossratiorecovery Enables the trap function about the packet loss ratiorestoration

-

hwipfpmtlpexceed Enables the trap function for TLPs exceeding thespecifications

-

hwipfpmtlprecovery Enables the trap function for TLP specificationrestoration

-

ViewsSystem view




8875



Usage Guidelines

Usage Scenario


The snmp-agent trap enable feature-name ipfpm command enables the trap function forthe IP FPM module

Precautions

To enable the trap function for one or several events specify trap-name If trap-name is notspecified all trap functions are enabled for the IP FPM module

Example

Enable the trap function about the packet loss ratio exceeding the threshold

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable feature-name ipfpm trap-name hwipfpmlossratioexceed

Related Topics16519 display snmp-agent trap feature-name ipfpm all


Function

The snmp-agent trap enable feature-name iplpm command enables the trap function forthe IP Local Performance Measurement (LPM) module

The undo snmp-agent trap enable feature-name iplpm command disables the trap functionfor the IP LPM module

By default the trap function is disabled for the IP LPM module

Format

snmp-agent trap enable feature-name iplpm [ trap-name hwiplpmgloballossratioexceed | hwiplpmgloballossratiorecovery |hwiplpmlinkforwardlossratioexceed | hwiplpmlinkforwardlossratiorecovery ]

undo snmp-agent trap enable feature-name iplpm [ trap-name hwiplpmgloballossratioexceed | hwiplpmgloballossratiorecovery |hwiplpmlinkforwardlossratioexceed | hwiplpmlinkforwardlossratiorecovery ]



8876



Parameters


trap-name Enables the trap function for the specifiedevent

-

hwiplpmgloballossratioexceed Enables the trap function about the packetloss ratio exceeding the threshold on thedevice

-

hwiplpmgloballossratiorecovery Enables the trap function about the packetloss ratio restoration on the device

-

hwiplpmlinkforwardlossratioexceed Enables the trap function about the packetloss ratio exceeding the threshold on thedirect link

-

hwiplpmlinkforwardlossratiorecovery Enables the trap function about the packetloss ratio restoration on the direct link

-

Views

System view

Default Level


Usage Guidelines

Usage Scenario


The snmp-agent trap enable feature-name iplpm command enables the trap function forthe IP LPM module

Precautions

To enable the trap function for one or several events specify trap-name If trap-name is notspecified all trap functions are enabled for the IP LPM module

Example

Enable the trap function about the packet loss ratio exceeding the threshold on the directlink

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable feature-name iplpm trap-name hwiplpmlinkforwardlossratioexceed



8877



Related Topics16520 display snmp-agent trap feature-name iplpm all

16549 tlp

Function

The tlp command configures Target Logical Ports (TLPs) of an IP FPM instance and theirroles

The undo tlp command deletes TLPs of a measurement instance

By default no TLP of a measurement instance is configured

Format

tlp tlp-id in-point | out-point ingress | egress

tlp tlp-id mid-point flow forward | backward | bidirectional ingress | egress

undo tlp tlp-id

Parameters


tlp-id Specifies the ID of a TLP The value is aninteger that rangesfrom 1 to 16777215

in-point Indicates the in-point TLP An in-point TLP colors atarget flow

-

out-point Indicates the out-point TLP An out-point TLPremoves the color flag from a target flow

-

ingress Indicates the ingress TLP An ingress TLP onlyreceives packets

-

egress Indicates the egress TLP An egress TLP only sendspackets

-

mid-point Indicates the TLP as a mid-point -

flow Indicates the target flow -



bidirectional Indicates the bidirectional target flows -



8878



Views


Default Level


Usage Guidelines

Usage Scenario

To locate faults in IP FPM performance statistics scenarios run the tlp command to configureTLPs in an IP FPM instance TLPs are measurement points along the path of the target flowand compile and output the statistics TLPs can be in-points mid-points or out-points

Precautions

A TLP that functions as the in-point for the forward target flow is the out-point for thebackward target flow The TLP role specified in the tlp command applies only to the forwardtarget flow and the reverse of the specified role is used for the backward target flow

Mid-points apply only to IP FPM hop-by-hop performance statistics scenarios Therefore youmust configure flow to specify the target flow direction when specifying a TLP as a mid-point

A TLP cannot function as both the in-point and out-point for the same unidirectional targetflow

Example

Configure TLP 100 and its role for measurement instance 1

ltHUAWEIgt system-view[HUAWEI] nqa ipfpm dcp[HUAWEI-nqa-ipfpm-dcp] instance 1[HUAWEI-nqa-ipfpm-dcp-instance-1] tlp 100 in-point ingress

Related Topics16543 nqa ipfpm dcp16524 instance (IPFPM-DCP view)16527 ipfpm tlp


NOTE

Only the S5720EI S5720HI S6720EI and S6720S-EI support the LSP Ping LSP Jitter LSP TracePWE3 Ping and PWE3 Trace test instances The S1720GFR does not support the MAC Ping testinstances



8879



1661 agetime

FunctionThe agetime command sets the aging time of an NQA test instance

The undo agetime command restores the default aging time of an NQA test instance

The default aging time of an NQA test instance is 0 indicating that the test instance is notaged

Formatagetime hhmmss

undo agetime

Parameters


hhmmss Specifies the aging time hh ranges from 0 to 23 mm ranges from 0 to 59 ssranges from 0 to 59

ViewsNQA view



To prevent endless running of a test instance you need to age the test instance periodicallyThe agetime command can be used to configure the aging time to change the survival time ofa test instance in the system

l The aging time is started when the NQA test instance is in the inactive state When theaging time expires the system deletes the NQA test instance automatically

l The aging time is reset when the NQA test instance is in the active state

Prerequisites


Precautions

The aging time of a running test instance cannot be changed

Example Set the aging time of NQA test instance user test



8880



ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] agetime 100


1662 clear-records

Function

The clear-records command clears statistics on NQA test instances

Format

clear-records

Parameters

None

Views

NQA view

Default Level


Usage Guidelines

Clearing statistics on the ongoing test is forbidden

Before running the command ensure that the test type specified by the test-type commandexists

Example

Clear all statistics on NQA test instance user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] clear-records

Related Topics16639 nqa16658 test-type1669 display nqa history16610 display nqa results



8881




Function

The community read cipher command configures the community name for SNMP test

The undo community command deletes the community name of SNMP test

By default the community name for SNMP test is public

Format

community read cipher community-name

undo community

Parameters


community-name

Specifies thecommunity namefor SNMP test

The value is a string of case-sensitive characterswithout command line characters such as spaces andquestion marks The length ranges from 1 to 32 forplain text and ranges from 32 to 68 for cipher textNOTE


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

A community uniquely identified by a community name defines administrative relationshipsbetween NMSs and SNMP agents The community name acts like a password to regulateaccess to an SNMP agent An NMS can access an SNMP agent only if the community namecarried in the SNMP request sent by the NMS is the same as the community name configuredon the SNMP agent

When the SNMP versions on agents are SNMPv1 or SNMPv2c the community name must beconfigured using the community read cipher command and the community name must be aread-only community name on SNMP agents When the SNMP versions on agents areSNMPv3 the community name does not need to be configured because SNMPv3 does notsupport community names

Prerequisites



8882



The NQA test instance has been configured using the nqa command and the test instancetype has been set to SNMP using the test-type command

Example

Set the community name for SNMP test

ltHUAWEIgt system-view [HUAWEI] nqa test-instance user test1[HUAWEI-nqa-user-test1] test-type snmp[HUAWEI-nqa-user-test1] community read cipher Huawei-123

1664 datafill

Function

The datafill command configures pad characters in an NQA test instance

The undo datafill command deletes the pad characters in an NQA test instance

By default there are no padding characters in an NQA test instance

Format

datafill fillstring

undo datafill

Parameters


fillstring Specifies the padcharacters for NQA testpackets

The value is a string of 1 to 230 case-sensitivecharacters with spaces supported The questionmark () is not supported The default value is 0 (anempty pad character)

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

In an NQA test you need to simulate actual datagrams to obtain more accurate statistics Thedatasize command can be used to set the size of the Data field To differentiate packets sentfrom different test instances add the specified characters to identify the test packets

Prerequisites



8883



The type of a test instance has been specified using the test-type command The type can beone of the following

l UDPl Jitterl ICMPl Tracel Path Jitter


After the datafill command is run the following situations may occur

l If the length of the data packet sent from the test instance is shorter than the configuredpad character only the forepart of the pad character can be used

l If the length of the data packet sent from the test instance is larger than the configuredpad character the pad character is repeated in sequence until the data packet issuccessfully padded

For example the pad character is set to abcd If the length of the test packet is 3 only abc isused to pad the test packet If the length of the test packet is 6 abcdab is used to pad the testpacket

Precautions

The pad character of a running test instance cannot be changed

Example

Set the pad characters of the test named user test to abcd

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] datafill abcd

Related Topics16639 nqa16658 test-type1665 datasize

1665 datasize

Function

The datasize command sets the size of the NQA test packet

The undo datasize command restores the size of the NQA test packet

The default size is 0 which indicates that the test packet does not carry data information

Format

datasize size



8884



undo datasize


size Specifies the size of theNQA test packet

The value is an integer thatranges from 0 to 8100 inbytes If the configured sizeof a packet is smaller thanthe default size of a packetthe configured size is invalidand the packet is forwardedbased on its default sizeNOTE

Only for MAC ping testinstancethe value ranges from95 to 9000 in bytes

ViewsNQA view



You can run the datasize command to set the size of the data field of a test packet Thisensures that the size of the test packet is closer to the size of the actual data packet and theobtained statistics are more accurate

For example if a UDP jitter test instance is used to detect voice over IP (VoIP) services youcan run the datasize command to set the size of the NQA test packet to the same size as theactual voice packet This enables a simulation of the actual traffic that occurs in a period oftime

To simulate a voice data flow with the transmission rate of 64 kbits you can set the size ofthe voice packet to 172 bytes (160-byte payload + 12-byte RTP header + 28-byte IP headerand UDP header) and set the interval for sending the voice packet to 20 ms In this manner3000 packets can be sent in one minute

Prerequisites

The test type has been specified using the test-type command

The datasize command is applicable only to the PWE3 ping ICMP UDP LSP jitter pathjitter trace LSP ping MAC ping and jitter test instances

Precautions

You cannot change the size of the running test packets



8885



Example Set the size of the packets to 100 bytes in the test instance named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] datasize 100

Related Topics16639 nqa16658 test-type16624 interval (NQA view)1664 datafill


FunctionThe description command configures description of an NQA test instance

The undo description command deletes the description of an NQA test instance

By default no description is configured for an NQA test instance

Formatdescription string

undo description

Parameters


string Specifies the description of anNQA test instance

The value is a string of 1 to 230 case-sensitive characters with spaces

ViewsNQA view



The description command can be used to briefly describe the test instance to helpmaintenance Generally the test item or the test objective of a test instance is described

Prerequisites



8886





If the description of a test instance has been configured running the description commandwill override the previous configuration

Precautions

The description of a running test instance cannot be changed

Example

Set the description of the test named user test to fortest

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] description fortest



Function

The destination-address command specifies the destination address of an NQA test instance

The undo destination-address command deletes the destination address of an NQA testinstance

By default destination address is not configured for an NQA test instance

Format

destination-address ipv4 ipv4-address [ lsp-masklen masklen | lsp-loopback loopback-address ] [ vpn-frr-path ]

destination-address ipv4 ipv4-address

destination-address mac mac-address

destination-address remote-mep mep-id rmep-id

destination-address url urlstring

undo destination-address

Parameters


ipv4 ipv4-address Specifies an IPv4 destinationaddress

The IPv4 address is in dotteddecimal notation



8887




lsp-masklen masklen Specifies the mask length of anLSPs IPv4 address prefix


lsp-loopbackloopback-address

Specifies a 1278 IP address inthe MPLS echo request packetheader

-

vpn-frr-path Indicates that the connectivityof the backup VPN FRR LSPwill be checked

-

mac mac-address Specifies a unicast MACaddress

The value is in H-H-H format inwhich H is a 16-bit binary number

remote-mep mep-idrmep-id

Specifies the ID of a remoteMEP


url urlstring Specifies a destination URLaddress

The value is a string of 1 to 230case-insensitive characters withoutspaces When quotation marks areused around the string spaces areallowed in the string

ViewsNQA view



You can run the destination-address command to specify the destination address of an NQAtest instance

Precautions

l The Label Switched Path (LSP) parameters can be configured only for the LSP testinstances

l The mac and remote-mep mep-id parameters can be configured only for MAC ping testinstances

l Only the destination addresses of HTTP trace and DNS test instances can be URLaddresses For the HTTP test instances only absolute URL addresses are supported

l The destination addresses of DNS test instances cannot be IPv4 addresses and thedestination URL addresses must contain dots () otherwise the test may fail

l You cannot change the destination address of a running test instance

Example Configure the destination address for test instance user test



8888



ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] destination-address ipv4 10111



FunctionThe destination-port command configures the destination port number for an NQA test

The undo destination-port command restores the default setting

The default port numbers for test instances of different types are as followsl TCP and UDP 7l HTTP 80l FTP 21l Trace 33434l Jitter No default value is available and the destination port number must be configured

NOTE

A port number larger than 10000 is recommended for a jitter test instance A small port number may beconflict with the default port number of a protocol causing a test failure

Formatdestination-port port-number

undo destination-port


port-number Specifies the destinationport number

The value is integer thatranges from 1 to 65535 Theconfigured port cannot be awell-known port or used byother modules

ViewsNQA view




8889




This command applies to only the FTP HTTP Jitter TCP UDP and Trace test instances

Precautions

You cannot change the destination port number of the test that is being performed

Example Set the destination port number to 2020 for the test instance named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] destination-port 2020



FunctionThe display nqa history command displays the history records about an NQA test

Formatdisplay nqa history [ test-instance admin-name test-name ]

Parameters


test-instance Indicates NQA test instances -





ViewsAll views




8890



Usage Guidelines

Usage Scenario

NQA provides NQA test instances to test network operation conditions to export statisticsand to effectively cut costs NQA measures the performance of different protocols running onthe network

The display nqa history command helps you understand the network status by displaying theoperation statistics about each test packet including the status and round-trip delay

NOTE

No history record about the failed jitter test instances exist

Precautions

If no optional parameter is specified all history records of an NQA test instance aredisplayed

When NQA test result table and historical table are displayed in a split screen latest resultsare displayed to improve user experience

Example

Display the history records about an NQA test

ltHUAWEIgt display nqa history NQA entry(admin ftp) history Index THP Response Status Address Time 1 111 1157ms success 10212 2012-07-15 101638188 2 211 3000ms timeout UnKnow 2012-07-15 10182922 NQA entry(admin http) history Index THP Response Status Address Time 1 111 0ms busy UnKnow 2012-07-15 111639915 2 112 0ms busy UnKnow 2012-07-15 111639978 3 113 0ms busy UnKnow 2012-07-15 11163940

Table 16-57 Description of the display nqa history command output

Item Description

NQA entry(admin ftp) NQA test itemsl admin indicates the name of the administrator for

an NQA test instancel ftp indicates the name of the NQA test instance

Index Index of a test record

THP l T Times which indicates the sequence of the testfor a test instance

l H Hop which indicates the sequence of the hopl P Probe which indicates the sequence of the

probe

Response Period from the time when a probe packet is sent to thetime when a response packet is received



8891



Item Description

Status Probe statusl success indicates that the probe succeedsl timeout indicates that the probe times out and no

response packet is receivedl busy indicates that the resources are insufficient

and the probe packet fails to be sent When Statusis busy the value of the Response field is 0 ms

l drop indicates that the probe packet is discardedbecause of no link is available When Status isbusy the value of the Response field is 0 ms

Address Destination IP address of an NQA test instance

Time Time when the response packet is received

Related Topics1662 clear-records16645 records


Function

The display nqa results command displays NQA test results

Format

display nqa results [ test-instance admin-name test-name ]

Parameters


test-instance Indicates an NQA test instance -





Views

All views



8892



Default Level

1 Monitoring level

Usage Guidelines

Usage Scenario

NQA test results cannot be displayed automatically on the terminal To view NQA test resultsrun the display nqa results command

If no test instance is specified the test result of the test instance is displayed in thecorresponding test instance view and the test result of all test instances is displayed in thesystem view or other views irrelevant to test instances If a test instance is specified the testresult of only this test instance is displayed

The display nqa results command displays the results of a test instance that has beencomplete

The output of the display nqa results command contains the following two parts

l Universal test results This part does not vary according to the test instance type

l Detailed statistics of each test Statistics items in this part vary according to the testinstance type

Precautions

If no optional parameter is specified all NQA test results are displayed

Example

Display the results of an NQA ICMP test

ltHUAWEIgt display nqa results test-instance admin icmp NQA entry(admin icmp) testflag is inactive testtype is icmp 1 Test 1 result The test is finished Send operation times 3 Receive response times 3 Completionsuccess RTD OverThresholds number 0 Attempts number1 Drop operation number0 Disconnect operation number0 Operation timeout number0 System busy operation number0 Connection fail number0 Operation sequence errors number0 RTT Status errors number0 Destination ip address101387721 MinMaxAverage Completion Time 222 SumSquare-Sum Completion Time 612 Last Good Probe Time 2012-07-02 1709181 Lost packet ratio 0

Table 16-58 Description of the display nqa results test-instance admin icmp command output

Item Description

NQA entry(admin icmp) NQA test itemsl admin indicates the administrator or creator

of the NQA test instancel icmp indicates the name of the NQA test

instance



8893



Item Description

testflag Test flagl active indicates that the test is

runningChecking the result of a running testis invalid

l inactive indicates that the test iscompleteAt this time the actual test resultis displayed

testtype Test type

1 Test 1 result Sequence number of test results Test results arenumbered based on the time when the tests arecomplete

The test is finished Test statusl finished indicates that the test is completel running indicates that the test is running

Send operation times Number of sent packets

Receive response times Number of received response packets




RTD OverThresholds number Number of times that the round-trip delay(RTD) threshold is exceeded

Attempts number Test times


Disconnect operation number Number of forcible disconnections



Connection fail number Number of times that the local end fails toestablish connections with the peer

Operation sequence errors number Number of received disordered packets

RTT Status errors number Number of RTT status errors

Destination ip address Destination IP address of the test

MinMaxAverage Completion Time MinimumMaximumAverage time taken tocomplete the test



8894



Item Description

SumSquare-Sum Completion Time Sum and square sum of the time taken tocomplete the test

Last Good Probe Time Time at which the last probe is complete

Lost packet ratio Packet loss ratio

Display the result of an NQA jitter test

ltHUAWEIgt display nqa results test-instance admin jitter NQA entry(admin jitter) testflag is inactive testtype is jitter 1 Test 1 result The test is finished SendProbe60 ResponseProbe0 Completionfailed RTD OverThresholds number0 MinMaxAvgSum RTT0000 RTT Square Sum0 NumOfRTT0 Drop operation number0 Operation sequence errors number0 RTT Stats errors number0 System busy operation number0 Operation timeout number60 Min Positive SD0 Min Positive DS0 Max Positive SD0 Max Positive DS0 Positive SD Number0 Positive DS Number0 Positive SD Sum0 Positive DS Sum0 Positive SD Square Sum0 Positive DS Square Sum0 Min Negative SD0 Min Negative DS0 Max Negative SD0 Max Negative DS0 Negative SD Number0 Negative DS Number0 Negative SD Sum0 Negative DS Sum0 Negative SD Square Sum0 Negative DS Square Sum0 Min Delay SD0 Min Delay DS0 Avg Delay SD0 Avg Delay DS0 Max Delay SD0 Max Delay DS0 Packet Loss SD0 Packet Loss DS0 Packet Loss Unknown0 Average of Jitter0 Average of Jitter SD0 Average of Jitter DS0 Jitter out value00000000 Jitter in value00000000 NumberOfOWD0 OWD SD Sum0 OWD DS Sum0 TimeStamp unit ms Packet Rewrite Number 0 Packet Rewrite Ratio 0 Packet Disorder Number 0 Packet Disorder Ratio 0 Fragment-disorder Number 0 Fragment-disorder Ratio 0 Start time 2014-09-01 104757+0800 End time 2014-09-01 104801+0800

Table 16-59 Description of the display nqa results test-instance admin jitter command output

Item Description

NQA entry(admin jitter) NQA test itemsl admin indicates the name of the

administrator for an NQA test instancel jitter indicates the name of the NQA test

instance



8895



Item Description

testflag Test flagl active indicates that the test is running

Checking the test result during the operationis invalid

l inactive indicates that the test is completeAt this time the actual test result isdisplayed

testtype Test type

SendProbe Number of sent probes

ResponseProbe Number of received response probes




RTD OverThresholds number Number of times that the RTD threshold isexceeded

MinMaxAvgSum RTT MinimumMaximumAverageSum of the RTT

RTT Square Sum RTT square sum of the probes

NumOfRTT Number of RTTs


Operation sequence errors number Serial number of the error packets received bythe client

RTT Stats errors number Number of RTT status errors



Min Positive SD Minimum positive jitter from the source to thedestination

Min Positive DS Minimum positive jitter from the destination tothe source

Max Positive SD Maximum positive jitter from the source to thedestination

Max Positive DS Maximum positive jitter from the destination tothe source



8896



Item Description

Positive SD Number Number of the positive jitter from the source tothe destination

Positive DS Number Number of the positive jitter from thedestination to the source

Positive SD Sum Sum of the positive jitter from the source to thedestination

Positive DS Sum Sum of the positive jitter from the destination tothe source

Positive SD Square Sum Square sum of the positive jitter from the sourceto the destination

Positive DS Square Sum Square sum of the positive jitter from thedestination to the source

Min Negative SD Minimum negative jitter from the source to thedestination

Min Negative DS Minimum negative jitter from the destination tothe source

Max Negative SD Maximum negative jitter from the source to thedestination

Max Negative DS Maximum negative jitter from the destination tothe source

Negative SD Number Number of the negative jitter from the source tothe destination

Negative DS Number Number of the negative jitter from thedestination to the source

Negative SD Sum Sum of the negative jitter from the source to thedestination

Negative DS Sum Sum of the negative jitter from the destinationto the source

Negative SD Square Sum Square sum of the negative jitter from thesource to the destination

Negative DS Square Sum Square sum of the negative jitter from thedestination to the source

Min Delay SD Minimum delay from the source to thedestination

Min Delay DS Minimum delay from the destination to thesource

Avg Delay SD Average delay from the source to thedestination



8897



Item Description

Avg Delay DS Average delay from the destination to thesource

Max Delay SD Maximum delay from the source to thedestination

Max Delay DS Maximum delay from the destination to thesource

Packet Loss SD Maximum number of lost packets from thesource to the destination

Packet Loss DS Maximum number of lost packets from thedestination to the source

Packet Loss Unknown Number of packets lost at an unknowndirection

Average of Jitter Average jitter

Average of Jitter SD Average jitter from the source to thedestination

Average of Jitter DS Average jitter from the destination to thesource

Jitter out value Jitter in sending packets

Jitter in value Jitter in receiving packets

NumberOfOWD Number of OWD packets

OWD SD Sum Sum of OWD from the source to thedestination

OWD DS Sum Sum of OWD from the destination to thesource

TimeStamp unit Unit of the timestamp

Packet Rewrite Number Number of rewritten packets

Packet Rewrite Ratio Percentage of rewritten packets to total packets

Packet Disorder Number Number of out-of-order packets

Packet Disorder Ratio Percentage of out-of-order packets to totalpackets

Fragment-disorder Ratio Percentage of out-of-order fragmented packetsto total packets

Start time Time when the test began

End time Time when the test ended



8898



Related Topics1662 clear-records


Function

The display nqa-agent command displays test status and configuration on an NQA client

Format

display nqa-agent [ admin-name test-name ] [ verbose ]

Parameters


admin-name Specifies the administrator of an NQA testinstance




verbose Indicates detailed information about theclient status of an NQA test

-

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

None

Example

Display the client status of an NQA test

ltHUAWEIgt display nqa-agentnqa test-instance admin ftp test-type ftp ftp-operation get nqa status normal nqa test-instance admin icmp nqa status normal nqa test-instance admin jitter test-type jitter destination-address ipv4 10101010 destination-port 100 nqa status normal



8899



Table 16-60 Description of the display nqa-agent command output

Item Description

NQA Tests Max Maximum number of supported NQA test instances

NQA Tests Number Number of current NQA test instances

NQA Flow Max Maximum number of concurrent NQA test instances

NQA Flow Remained Maximum number of concurrent and performable NQAtest instances

test-type Test type

destination-address destination address of a test

nqa status Status of NQA

Related Topics16639 nqa16658 test-type16655 start


Function

The display nqa-server command displays information about NQA servers

Format

display nqa-server

Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

None



8900



Example Display the information about NQA servers

ltHUAWEIgt display nqa-server NQA Server Max100 NQA Server Num3NQA Concurrent TCP Server1 NQA Concurrent UDP Server2 nqa-server tcpconnect 10111 2000 ACTIVE nqa-server udpecho 10111 2000 ACTIVE nqa-server udpecho 10111 6000 ACTIVE

Table 16-61 Description of the display nqa-server command output

Item Description

NQA Server Max Maximum number of NQA servers that can be configured

NQA Server Num Number of current NQA servers

NQA Concurrent TCP Server Number of the configured TCP servers

NQA Concurrent UDPServer

Number of the configured UDP servers

nqa-server Running servers

ACTIVE Status of the NQA server

Related Topics16641 nqa-server tcpconnect16642 nqa-server udpecho

16613 dns-server

FunctionThe dns-server command configures the IP address of the domain name service (DNS) serverin the NQA test

The undo dns-server command deletes the configured IP address of the DNS server

By default the IP address of the DNS server is not configured

Formatdns-server ipv4 ip-address

undo dns-server



8901



Parameters


ipv4 ip-address Specifies an IPv4 address for the DNSserver


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

Before using a DNS test instance to detect the rate of resolving a given DNS name to an IPaddress configure a DNS server first

Prerequisites

The type of a test instance has been specified using the test-type command The test instancecan only be a DNS or HTTP test instance

Precautions

The DNS server configuration of a running test instance cannot be changed

Example

Set the IP address of the DNS server to 10111 in the test named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type dns[HUAWEI-nqa-user-test] dns-server ipv4 10111

Related Topics16639 nqa16658 test-type1667 destination-address

16614 fail-percent

Function

The fail-percent command sets the failure percentage for the NQA test instance

The undo fail-percent command deletes the configured failure percentage for the NQA testinstance



8902



By default the failure percentage is 100 That is the test is regarded as a failure only whenall the probes fail

Format

fail-percent percent

undo fail-percent

Parameters


percent Specifies the percentage of failedprobes


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

In an NQA test instance multiple probes are sent to test probe packets Statistics obtainedfrom multiple probe tests show the network quality

In actual scenarios however a probe test may fail because of interference in the network Inaddition a failure in a probe test does not mean that the NQA test fails The fail-percentcommand can be used to set failure percentage to check whether an NQA test fails or not Ifthe number of failure probe packets to the total number of probe packets reaches a specifiedpercentage the NQA test is considered as a failure

For example the number of sent packets set in the probe-count command is 10 but seven ofthem are lost during the probe test the following situations occurl If the failure percentage is set to 80 the probe test is considered a successl If the failure percentage is set to 60 the probe test is considered a failure

Prerequisites

The type of a test instance has been specified using the test-type command The type of testinstances that are not supported is as followsl FTPl Tracel LSP Tracel PWE3 Tracel DNSl Path Jitter



8903



Precautions

The failure percentage of a running test instance cannot be changed

Example

Set the percentage of the failed probes to 10 in the test named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] fail-percent 10

Related Topics16643 probe-count

16615 frequency

Function

The frequency command sets the interval at which an NQA test instance is automaticallyperformed

The undo frequency command deletes the configured interval at which an NQA test instanceis automatically performed

By default the interval at which an NQA test instance is automatically performed is notconfigured That is the test is performed for one time

Format

frequency interval

undo frequency

Parameters


interval Specifies the interval at which an NQAtest instance is automatically performed


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario



8904



You can run the start command to set the start time and end time of an NQA test If you needto perform period test from the start time to the end time in a test instance run the frequencycommand to set the interval at which an NQA test instance is automatically performed Afterthat the NQA test is automatically performed one time at each configured interval

Configuring the interval of periodic NQA test avoid time-consuming manual operations

Prerequisites


Precautions

In a trace LSP trace or PWE3 trace test the configured frequency must be greater than orequal to 60s

If the configured frequency is smaller than or equal to (probe-count - 1) x interval + timeout+ 1 the test result may be no result For the test instance supporting the jitter-packetnumparameter the number of sent packets is probe-count x jitter-packetnum packets

In an FTP test instance the configured frequency must be 2s greater than the timeout valueotherwise the FTP test instance may fail

If the masterslave switchover is performed on the NQA client before the test instance (group)is complete the following situations may occur

l If the interval for automatically performing the test is not set the test stops after themasterslave switchover

l If the interval for automatically performing the test instance is set the test is performedfrom the next period after the masterslave switchover

For trace LSP trace and PWE3 trace test instances the interval must be larger than or equalto 60 seconds

If no end time is configured the test cannot stop automatically You need to stop it manuallyThe frequency of a running test instance cannot be changed

Example

Set the interval at which test instance user test is automatically performed to 20 seconds

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] frequency 20

16616 ftp-filename

Function

The ftp-filename command configures the file name and file path for an NQA FTP testinstance

The undo ftp-filename command deletes the file name and file path for an NQA FTP testinstance

By default no file name and file path are configured



8905



Format

ftp-filename file-name

undo ftp-filename

Parameters


file-name Specifies the name and path of theoperation file in an FTP test instance


Views

NQA view

Default Level

3 Management level

Usage Guidelines

The ftp-filename command is valid only for FTP test instances

You cannot change the file path and file name of a running test instance

If no file path is specified the system searches for the file in the current path

The file name cannot end with any forward slashes () or backward slashes ()

The file name includes but is not limited to the extension name such as txt

NOTE

Various FTP servers may support files with the file name in different length ranges Before youconfigure this command ensure that the target FTP server supports the length of the specified file nameOtherwise NQA test results may fail to be transmitted using FTP

Example

Set the FTP path and file name of test instance user test to Dabc and abctxt respectively

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type ftp[HUAWEI-nqa-user-test] ftp-filename Dabcabctxt

Related Topics16639 nqa16618 ftp-operation16658 test-type



8906



16617 ftp-filesize

FunctionThe ftp-filesize command sets the size of the file used in an NQA FTP test instance

The undo ftp-filesize command restores the default size of the file used in an NQA FTP testinstance

By default the size of the file used in the FTP test is 1000 Kbytes

Formatftp-filesize size

undo ftp-filesize

Parameters


size Specifies the size of the file used in theFTP test

The value is an integer that rangesfrom 1 to 10000 in Kbytes

ViewsNQA view


Usage GuidelinesYou cannot change the configured size of the file when the test is running

If specifying the size of the upload file is adopted the FTP client automatically generates thefile name nqa-ftp-testtxt If the test is performed several times the newly uploaded filereplaces the previous one


Example Set the size of the file to 1024 bytes in the FTP upload test named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type ftp[HUAWEI-nqa-user-test] ftp-filesize 1024

Related Topics16618 ftp-operation16658 test-type



8907



16618 ftp-operation

Function

The ftp-operation command sets the operation mode for an NQA FTP test instance

The undo ftp-operation command restores the default operation mode of an NQA FTP testinstance

By default the operation mode of an FTP test instance is get

Format

ftp-operation get | put

undo ftp-operation put

Parameters


get Indicates that the client downloads a file from the server and thedownload speed is recorded

-

put Indicates that the client uploads a local file or a created file to theserver and the upload speed is recorded

-

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

In the FTP download test the local device functions as an FTP client to downloadupload thespecified file fromto the FTP server Statistics about each FTP phase are displayed includingthe time to set up an FTP control connection and the time to transmit data

The ftp-operation command can be used to specify the FTP operation mode as put or get Aconnection with the FTP server is set up using the IP address the user name and thepassword of the FTP server and the time to set up FTP connection is recorded

Prerequisites


Precautions

The operation mode of a running test instance cannot be changed



8908



Example

Perform a test named user test to obtain the FTP download speed

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type ftp[HUAWEI-nqa-user-test] ftp-operation get

Related Topics16617 ftp-filesize16616 ftp-filename16658 test-type

16619 ftp-password

Function

The ftp-password command sets a password for logging in to the FTP server in an NQA FTPtest instance

The undo ftp-password command deletes the configured password for logging in to the FTPserver

By default no password is set for FTP test instances

Format

ftp-password password | cipher cipher-password

undo ftp-password

Parameters


password Specifies the password forlogging in to the FTP serverin an FTP test instance

The value is a string of 1 to32 or 32 to 68 case-sensitivecharacters without spacesl The length of a plaintext






8909




cipher cipher-password Specifies the password forlogging in to the FTP serverin an FTP test instance

The value is a string of 1 to3232 to 68case-sensitivecharacters without spacesl The length of a plaintext



l If the password length is32 and the configuredciphertext password canbe decryptedsuccessfully theconfigured ciphertextpassword takes effect Ifthe configured ciphertextpassword cannot bedecrypted the plaintextpassword is used afterpassing the validitycheck


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario


To ensure test security and prevent unauthorized users from accessing the network you needto enable identity authentication The ftp-password command can be used to set the specifieduser and password Only the user who enters the authorized user name and password isauthorized to access the network

Prerequisites



8910




Precautions

The password of a running test instance cannot be changed

Example

Set the password for logging in to the FTP server to Huawei-123

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type ftp[HUAWEI-nqa-user-test] ftp-password Huawei-123

Related Topics16620 ftp-username16658 test-type

16620 ftp-username

Function

The ftp-username command sets the user name for logging in to the FTP server in an FTPtest instance

The undo ftp-username command deletes the configured user name for logging in to the FTPserver

By default no user name is set for FTP test instances

Format

ftp-username name

undo ftp-username

Parameters


name Specifies the user name forlogging in to the FTP server

The value is a string of 1 to 255 case-sensitivecharacters without spacesNOTE

When quotation marks are used around the stringspaces are allowed in the string

Views

NQA view

Default Level




8911



Usage Guidelines

Usage Scenario


To ensure test security and prevent unauthorized users from accessing the network you needto enable identity authentication The ftp-username command can be used to set the specifieduser in an FTP test Only the user who enters the authorized user name and password isauthorized to access the network

Prerequisites


Precautions

The user name of a running test instance cannot be changed

Example

Set the user name for logging in to the FTP server to user1

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type ftp[HUAWEI-nqa-user-test] ftp-username user1

Related Topics16619 ftp-password16658 test-type


Function

The http-operation command sets the operation mode for an NQA HTTP test instance

By default the operation mode of the HTTP test instance is GET

Format

http-operation get

Parameters


get Obtains data from the HTTP server -

Views

NQA view



8912



Default Level


Usage Guidelines

This command applies only to the HTTP test

You cannot change the operation mode of a running HTTP test instance

Example

Set the operation mode of HTTP test instance user test to get

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type http[HUAWEI-nqa-user-test] http-operation get

Related Topics16622 http-url16658 test-type

16622 http-url

Function

The http-url command configures the uniform resource locator (URL) and versioninformation for an HTTP test instance

The undo http-url command deletes the configured URL and version information

By default no URL or version information is configured for an HTTP test instance

Format

http-url deststring [ verstring ]

undo http-url

Parameters


deststring Specifies the name of theweb page used for anHTTP test

The value is a string of 1 to 230 case-insensitivecharacters without spacesNOTE


verstring Specifies the HTTPversion

The total length of verstring should be equal to orshorter than 7 characters It can be set to v10 or11 The default HTTP version is v10



8913



Views

NQA view

Default Level



HTTP10 and HTTP11 are supported in this test instance

Precautions

The http-url command applies only to HTTP test instances You cannot change the URL of arunning HTTP test instance

The URL of a HTTP test instance must be a URL that is displayed in a browser

Example

Set the URL of HTTP test instance user test to httpwwwexamplecom

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type http[HUAWEI-nqa-user-test] http-url httpwwwexamplecom

Related Topics16621 http-operation16658 test-type


Function

The icmp-jitter-mode command specifies the mode of an ICMP jitter test

The undo icmp-jitter-mode command restores the default mode of an ICMP jitter test

By default the ICMP jitter test is in icmp-timestamp mode

Format

icmp-jitter-mode icmp-echo | icmp-timestamp

undo icmp-jitter-mode

Parameters


icmp-echo Configures the ICMP jitter test to use ICMP Echo messages -



8914




icmp-timestamp Configures the ICMP jitter test to use ICMP Timestampmessages

-

Views

NQA view

Default Level


Usage Guidelines

The icmp-jitter-mode command can only be used to configure the mode for ICMP jitter orpath jitter tests

Example

Configure the ICMP jitter test to use ICMP Echo messages

ltHUAWEIgt system-view[HUAWEI] nqa test-instance admin icmpjitter[HUAWEI-nqa-admin-icmpjitter] test-type icmpjitter[HUAWEI-nqa-admin-icmpjitter] icmp-jitter-mode icmp-echo



Function

The interval command sets the interval at which NQA test packets are sent

The undo interval command restores the default setting

By default the intervals for sending test packets in various tests are as follows

l For jitter path jitter and ICMP jitter test instance the interval is 100 milliseconds on theS1720GFR S2720 S2750EI S5700LI S5700S-LI and S5710-X-LI and is 50milliseconds on the S5720S-SI S5720SI S5720EI S5720HI S6720EI and S6720S-EI

l The interval is 4 seconds for other test instances

Format

interval milliseconds interval | seconds interval

undo interval



8915




milliseconds interval Sets the interval at whichpackets are sent inmillisecondsNOTE

If the configured interval is amultiple of 1000 millisecondsthe system will automaticallyconvert milliseconds intoseconds


seconds interval Sets the interval at whichpackets are sent in seconds

The value is an integer thatranges from 1 to 60 inseconds

ViewsNQA view



In an NQA test instance multiple probes are sent Statistics obtained from multiple probetests show the network quality Probe packets (or probes) are sent at a specified interval

l If the network quality is poor the interval at which packets are sent must be increasedOtherwise the network performance may deteriorate

l If the network quality is good the interval at which are sent can be decreased to shortenthe waiting time

Prerequisites

The type of a test instance has been specified using the test-type command The intervalcommand is valid only for the jitter ICMP jitter path jitter ICMP SNMP LSP ping PWE3ping TCP UDP and LSP jitter test instances


l If the configured interval is a multiple of 1000 milliseconds the system willautomatically convert milliseconds into seconds

l Packets can be sent at interval of milliseconds only in jitter path jitter or ICMP jitter testinstances The interval at which packets are sent must be greater than the timeout periodset using the timeout command in all test instances except the jitter path jitter or ICMPjitter test instance

l If the interval for sending packets has been configured running the interval commandwill override the previous configuration



8916



Precautions

The interval for sending packets of a running test instance cannot be changed

Example Set the interval for sending test packets to 1000 milliseconds

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] interval milliseconds 1000

16625 ip-forwarding

FunctionThe ip-forwarding command configures packets to be forcibly forwarded using IP on thefirst node

The undo ip-forwarding command disables packets from being forcibly forwarded using IPon the first node

Formatip-forwarding

undo ip-forwarding

ParametersNone

ViewsNQA view


Usage GuidelinesWhen a fault occurs on the network you can first run the ping command to check networkconnectivity

NOTE

Currently only NQA ICMP test instances support this configuration

Example Configure packets to be forwarded using IPltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] ip-forwarding



8917





FunctionThe jitter-packetnum command sets the number of packets sent in each probe test instance

The undo jitter-packetnum command restores the default number of packets sent in eachprobe test instance

By default 20 test packets are sent in each probe

Formatjitter-packetnum number

undo jitter-packetnum

Parameters


number Specifies the number of test packets sentin each probe in the jitter test (probe-count)

The value is an integer that rangesfrom 1 to 3000 The default valueis 20

ViewsNQA view



In an NQA test instance the jitter-packetnum command can be used to set the number ofconsecutive packets to simulate the actual traffic of a data in a specified period of time Thishelps simulate services more accurately

For example the jitter-packetnum command can be used to set the number of consecutivepackets to 3000 and an interval of 20 ms to send packets In this way G711 traffic can besimulated within one minute to detect VoIP services in UDP jitter test instances

Prerequisites

The type of a test instance has been specified using the test-type command The number ofsent packets can be configured only for jitter LSP jitter path jitter and ICMP jitter testinstances




8918



l In jitter LSP jitter path jitter and ICMP jitter test instances the number of sent packets= jitter-packetnum x probe-count but the product cannot exceed 3000

l If the number of probe packets has been set running the jitter-packetnum commandwill override the previous configuration

Precautions

The number of probe packets of a running test instance cannot be changed

Example Perform 3 probes in the test named user test and send 1000 packets in each probe

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] probe-count 3[HUAWEI-nqa-user-test] jitter-packetnum 1000

Related Topics16624 interval (NQA view)16643 probe-count

16627 local-pw-id

FunctionUsing the local-pw-id command you can set the ID of the local end of a PW or a VC

Using the undo local-pw-id command you can delete the configured ID of the local end of aPW or a VC

By default local-pw-id is not configured

Formatlocal-pw-id local-pw-id

undo local-pw-id



8919



Parameters


local-pw-id Specifies the ID ofthe local end of aPW or a VC


l When the test instance is of PWE3Ping the value oflocal-pw-id is an integer that ranges from 1 to4294967295 and only the VC type of LDP issupported

l When the test instance is of PWE3Tracendash When the VC type is LDP the value of local-pw-id

is an integer that ranges from 1 to 4294967295ndash When the VC type is BGP the value of local-pw-id

is an integer that ranges from 0 to 65534

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

PWE3 ping and PWE3 trace test instances can be used in the following scenarios

Connectivity and faulty node detections for a single-hop PW After the local-pw-id commandis run in the NQA view to configure the local PW ID or VC ID you can specify a PW for thedetection

Connectivity and faulty node detections for a multi-hop PW After the local-pw-id commandis run in the NQA view to configure the local PW ID or VC ID you need to specify thedestination addressl If the label-type parameter is set to control-word run the remote-pw-id remote-pw-id

command to configure the remote PW IDl If the label-type parameter is set to label-alert run the destination-address ipv4 ipv4-

address [ lsp-masklen masklen | lsp-masklen masklen lsp-loopback loopback-address |lsp-loopback loopback-address lsp-masklen masklen ] command to configure thedestination address for PWE3 ping and PWE3 trace test instances

l If the label-type parameter is set to normal run the destination-address ipv4 ipv4-address [ lsp-masklen masklen | lsp-masklen masklen lsp-loopback loopback-address |lsp-loopback loopback-address lsp-masklen masklen ] command to configure thedestination address for PWE3 ping and PWE3 trace test instances

Precautions

Before running the local-pw-id command you must set the NQA test type to PWE3 Trace orPWE3 Ping in the NQA view



8920



Example

Set the ID of the local end of a PW to 100 in the NQA view

ltHUAWEIgt system-view[HUAWEI] nqa test-instance admin pwe3[HUAWEI-nqa-admin-pwe3] test-type pwe3trace[HUAWEI-nqa-admin-pwe3] local-pw-id 100

Related Topics16646 remote-pw-id16668 vc-type

16628 local-pw-type

Function

Using the local-pw-type command you can configure the PW type of the local end

Using the undo local-pw-type command you can cancel setting the PW type of the local end

By default the PW type of the local end is Ethernet

Format

local-pw-type local-pw-type

undo local-pw-type

Parameters


local-pw-type Specifies the PW type of thelocal end

Currently encapsulation types ethernet ip-interworking and vlanare supported By thedefault the value is ethernet

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

The local-pw-type command is used to configure a PW encapsulation type for the local PEThe PW encapsulation type configured for the local PE must be the same as the PWencapsulation type for the remote PE

Prerequisites



8921



Before configuring the local-pw-type command configure the test type of NQA test instancesas PWE3 trace or PWE3 ping in the NQA view

Example In the NQA view configure the local pw-type as VLAN

ltHUAWEIgt system-view[HUAWEI] nqa test-instance admin pwe3[HUAWEI-nqa-admin-pwe3] test-type pwe3trace[HUAWEI-nqa-admin-pwe3] local-pw-type vlan


16629 label-type

FunctionUsing the label-type command you can configure the label type

Using the undo label-type command you can cancel the operation of configuring the labeltype

By default the label type is control-word

Formatlabel-type control-word | label-alert | normal [ no-control-word ]

undo label-type

Parameters


control-word Indicates that the control word option is encapsulated in MPLSEcho Request packets

-

label-alert Indicates that the router alert option is encapsulated in MPLSEcho Request packets

-

normal Indicates that neither control words nor router alert options areencapsulated in MPLS Echo Request packets

-

no-control-word Indicates that the control word option is not encapsulated inMPLS Echo Request packets This parameter can be used inNQA PWE3 ping and NQA PWE3 trace tests

-

ViewsNQA view




8922



Usage Guidelines

Usage Scenario

The usage scenarios of the label types are as follows

l control-wordndash If the encapsulation type is set to control-word at a switch node on a multi-hop

PW the MPLS Echo Request packets are not delivered to the CPU for processinguntil the TTL of the label times out In this case the source obtains little PWinformation This type however ensures system performance and the source cannotlearn information on the downstream interfaces of the switch node You should usethis type when there are a great number of packets

ndash Only control-word is supported when the vc-type is BGP and lsp-version is draft6l label-alert

ndash If the encapsulation type is set to label-alert at a switch node on a multi-hop PWthe MPLS Echo Request packets are delivered to the CPU for processing In thiscase the source can obtain more PW information The system performance isgreatly affected when there are a great number of packets You can use this type toobtain details about the switch node when test instances are few

ndash Only control-word or label-alert is supported when the vc-type is BGP and lsp-version is rfc4379

l In the case that a device communicates with Huawei devices running earlier versions andthe label alert or normal mode is adopted the no-control-word option must be carried inthe test packets

Prerequisites

Before running the label-type command you must set the test type to PWE3 trace or PWE3ping in the NQA view otherwise label-type cannot be specified

Example

Configure the encapsulation type of test packets as label-alert in the NQA view

ltHUAWEIgt system-view[HUAWEI] nqa test-instance admin pwe3[HUAWEI-nqa-admin-pwe3] test-type pwe3trace[HUAWEI-nqa-admin-pwe3] label-type label-alert

Related Topics16628 local-pw-type

16630 lsp-exp

Function

The lsp-exp command configures the LSP EXP value of MPLS Echo Request packets in anNQA test instance

Using the undo lsp-exp command you can restore the default setting

By default LSP EXP is 0



8923



Format

lsp-exp exp

undo lsp-exp

Parameters


exp Specifies the LSP EXP value of anNQA test instance


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

The MPLS experimental bits (EXP) field is a 3-bit field in the MPLS header used to mark theprecedence of MPLS packets

Test packets are added to different queues according to their LSP EXP values so that

l Congestion on the link can be avoided

l Specified queue can be detected

Precautions

This command applies to only the LSP test

You cannot change the configured LSP EXP value when the test is performed

Example

Set the LSP EXP value to 5

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type lspping[HUAWEI-nqa-user-test] lsp-exp 5




8924



16631 lsp-nexthop

Function

The lsp-nexthop command is used to configure the IP address of the next hop in the case thatload balancing is enabled

Using the undo lsp-nexthop command you can cancel the current setting

By default the next-hop IP address of any link that participates in load balancing

Format

lsp-nexthop nexthop-ip-address

undo lsp-nexthop

Parameters


nexthop-ip-address Specifies the next hop address It is in dotted decimal notation

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

Two conditions must be meet before you use the commandl lsp-type is IPv4l lsp-version is RFC4379You can use the lsp-nexthop command to configure the IP address of the next hop Testinstance type supported as followingl LSP Pingl LSP Tracel LSP Jitter

Precautions

A running test instance cannot be configured with the next hop address

Example

Specify the next hop address for the LSP Ping test instance whose LSP type is IPv4 and lsp-version is rfc4379



8925



ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type lspping[HUAWEI-nqa-user-test] lsp-type ipv4[HUAWEI-nqa-user-test] lsp-version rfc4379[HUAWEI-nqa-user-test] lsp-nexthop 101220


16632 lsp-replymode

Function

Using the lsp-replymode command you can set the reply mode for the LSP test

Using the undo lsp-replymode command you can restore the default setting

By default UDP packets are used

Format

lsp-replymode no-reply | udp

undo lsp-replymode

Parameters


no-reply Indicates that the LSP testis not responded

If the no-reply parameter is specified in thecommand the destination does not respond toNQA probe packets This configuration is used tocollect the statistics on or process received probepackets on the destination host and no responsepackets need to be sent Meanwhile the NQA testinstance fails because the client does not receiveresponse packets

udp Indicates that IPv4 UDPpackets are used torespond to the LSP test

-

Views

NQA view

Default Level




8926



Usage Guidelines

Usage Scenario

Using the lsp-replymode command you can set the reply mode for the LSP test Thesupported test instance arel LSP Pingl LSP Tracel LSP Jitterl PWE3 Pingl PWE3 Trace

Precautions

lsp-replymode no-reply indicates the unidirectional test If the client displays timeout itindicates that the test succeeds

You cannot change the reply mode of the currently performed LSP test

Example

Set the reply mode of the test named user test to sending UDP packets

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type lspping[HUAWEI-nqa-user-test] lsp-replymode udp


16633 lsp-tetunnel

Function

The lsp-tetunnel command configures the TE tunnel used in an NQA LSP test

The undo lsp-tetunnel command deletes the configured TE tunnel

By default no TE tunnel is configured for an LSP test instance

Format

lsp-tetunnel tunnel interface-number [ hot-standby | primary ]

undo lsp-tetunnel

Parameters


tunnel interface-number Specifies the tunnel interface number -

hot-standby Indicates the hot-standby tunnel of the TE tunnel -



8927




primary Indicates the primary tunnel of the TE tunnel -

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

Hot standby An ordinary backup CR-LSP is set up immediately after a primary CR-LSP isset up The ordinary backup CR-LSP takes over traffic if the primary CR-LSP fails After theprimary CR-LSP recovers traffic switches back

CR-LSP backup can be configured to allow traffic to switch from a primary CR-LSP to abackup CR-LSP providing end-to-end protection

An NQA LSP test instance can check the reachability of the following LSPs and collect SLAstatisticsl MPLS TE tunnel Run the lsp-tetunnel interface-type interface-number command to

configure an interface number for an MPLS TE tunnell Hot-standby MPLS CR-LSP Run the lsp-tetunnel interface-type interface-number hot-

standby command to configure an interface number for a hot-standby MPLS CR-LSPl Primary MPLS TE tunnel Run the lsp-tetunnel interface-type interface-number

primary command to configure an interface number for a primary MPLS TE tunnel

Prerequisites

Before using the lsp-tetunnel command to configure the TE tunnel in an NQA LSP testinstance run the lsp-type te command to specify the NQA LSP test type to TE

LSP jitter test instances cannot test the hot-standby tunnel of a TE tunnel

You cannot change the TE tunnel when the LSP test is performed

Example

Configure the TE tunnel of the test named user test

ltHUAWEIgt system-view[HUAWEI] interface tunnel 1[HUAWEI-Tunnel1] quit[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type lspping[HUAWEI-nqa-user-test] lsp-type te[HUAWEI-nqa-user-test] lsp-tetunnel tunnel 1

Configure the CR-LSP hot-standby tunnel of the test named user testltHUAWEIgt system-view[HUAWEI] interface tunnel 1[HUAWEI-Tunnel1] quit



8928



[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type lspping[HUAWEI-nqa-user-test] lsp-type te[HUAWEI-nqa-user-test] lsp-tetunnel tunnel 1 hot-standby


16634 lsp-type

Function

Using the lsp-type command you can configure the LSP test type

Using the undo lsp-type command you can cancel configuring the LSP test type

By the default the value of lsp-type is ipv4

Format

lsp-type ipv4 | te | ipv4-vpn

undo lsp-type

Parameters


ipv4 Sets the test type to Ipv4 LSP pingtracejitter -

te Sets the type to LSP pingtracejitter of the TE tunnel -

ipv4-vpn Sets the LSP test type to IPv4 L3VPN -

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

The lsp-type command can be used to configure the LSP test type of an NQA test instance todetect an LDP or a TE tunnel

l If ipv4 is configured the NQA test instance is used to detect the connectivity of aspecified LDP LSP The destination address of the test instance is configured using thedestination-address command



8929



l If te is configured the NQA test instance is used to detect the connectivity of a specifiedTE tunnel The destination address of the test instance is configured using the lsp-tetunnel command

l If the ipv4-vpn parameter is set the NQA test case is used to test LSPs on a BGP-basedL3VPN network

ndash To test a primary LSP on a BGP-based L3VPN network specify the destinationaddress using the destination-address lsp-masklen masklen command

ndash To test a primary LSP on a BGP-based L3VPN network specify the destinationaddress using the destination-address lsp-masklen masklen vpn-frr-pathcommand

Prerequisites

l If the LSP test type is set to IPv4 the NQA test instance type must be set to LSP pingLSP trace or LSP jitter

l If the LSP test type is set to TE the NQA test instance type must be set to LSP pingLSP trace or LSP jitter

l If the LSP test type is set to IPv4 L3VPN the NQA test instance type must be set to LSPping

Precautions

The type of an LSP test that is running cannot be changed

Example

Set the type of the test named user test to Ipv4 LSP ping

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type lspping[HUAWEI-nqa-user-test] lsp-type ipv4


16635 lsp-version

Function

Using the lsp-version command you can configure the protocol that is used by the LSP testinstance

Using the undo lsp-version command you can restore the default setting

By default draft6 is adopted

Format

lsp-version rfc4379 | draft6

undo lsp-version



8930



Parameters


rfc4379 Indicates that the protocol defined in RFC 4379 is adopted -

draft6 Indicates that Draft-ietf-mpls-lsp-ping-06 is adopted -

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

The lsp-version command can be used to specify the protocol that is used by the LSP testinstance

Prerequisites

If draft6 or rfc4379 is specified in the lsp-version command specify lspping lsptracelspjitter pwe3ping or pwe3trace in the test-type command

NOTEThe protocol adopted by a running LSP test instance cannot be changed

Example

Configure the LSP test instance to use the protocol defined in RFC 4379

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type lspping[HUAWEI-nqa-user-test] lsp-version rfc4379


16636 md

Function

Using the md command you can specified the Maintenance Domain (MD) and MaintenanceAssociation (MA) of the NQA test packet to be sent This command takes effect only in theMAC Ping test instance

Using the undo md command you can remove the specified MD from the NQA test packetto be sent

By default no MD is specified



8931



NOTE


Formatmd md-name ma ma-name

undo md

Parameters


md-name Specifies an MD The value is a string of 1 to 43 case-sensitive characterswithout spaces

ma-name Specifies an MA The value is a string of 1 to 43 case-sensitive characterswithout spaces

ViewsNQA view


Usage GuidelinesYou can use this command to specify the MD and MA of an MAC Ping test instance Thiscommand has the same effect as the operation of checking the connectivity fault in the MAview Before running this command you need to create an MD and MA and set the test typeto macping

You cannot modify the MD and MA when the test instance is running

Example Set the test type of an NQA test instance to MAC Ping and specify the MD name tomdcustome and the MA name to macustomer

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type macping[HUAWEI-nqa-user-test] md mdcustomer ma macustomer


16637 mep

FunctionUsing the mep command you can configure the MEP ID for an NQA test instance



8932



Using the undo mep command you can delete the MEP ID configured for an NQA testinstance

By default the MEP ID for an NQA test instance is 0

NOTE


Formatmep mep-id mep-id

undo mep

Parameters


mep-id Specifies the MEP ID of an NQA testinstance

The value is an integer ranging from1 to 8191

ViewsNQA view


Usage GuidelinesBefore starting an NQA test instance you need to run the mep-id mep-id command toconfigure the EOAM module Otherwise the normal operation of the NQA test instance willbe affected

This command is available for NQA MAC ping test instances

Example Set the MEP ID of an NQA MAC ping test instance to 1

ltHUAWEIgt system-view[HUAWEI] nqa test-instance test macping[HUAWEI-nqa-test-macping] test-type macping[HUAWEI-nqa-test-macping] mep mep-id 1

Related Topics12730 mep mep-id

16638 nexthop

FunctionThe nexthop configures a next hop address for NQA test packets



8933



The undo nexthop deletes the configured next hop address for the NQA test packets

By default the next hop address for the NQA test packets is obtained by searching the routingtable

Format

nexthop ipv4 ip-address

undo nexthop

Parameters


ipv4 ip-address Specifies a next hopaddress for NQA testpackets

The value is in dotted decimal notation

NOTEThe specified next hop must be the physicalinterface directly connected to the device thatsends the NQA test packets

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

In the scenario that an NQA test instance is associated with static routes if a link becomesfaulty the NQA test instance detects this fault and then the static routes associated with theNQA test instance become Down After the link recovers the NQA test instance attempts tosend ICMP test packets over the static routes Because these static routes are still Down theNQA test instance still fails to detect link connectivity Traffic fails to be forwarded

The nexthop command configures a next hop address for the NQA test packets whichensures that the packets are forwarded when the link recovers from the fault and the staticroutes associated with the NQA test instance are Up

Prerequisites

Only the NQA ICMP test instance allows you to specify a next hop address for NQA testpackets

Precautions

After you configure a next hop address for an NQA ICMP test instance the test instancepackets will be sent based on the address



8934



You can also run the source-interface command to specify an outbound interface throughwhich the NQA ICMP test instance packets are sent to the specified next hop address Toguarantee that the test packets are sent the following two conditions must be met

l The specified next hop address matches the outbound interfacel The specified outbound interface cannot be the member interface of a logical interface

Example Configure a next hop address for NQA ICMP test packets

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] nexthop ipv4 10111

16639 nqa

FunctionThe nqa command creates an NQA test instance and enters the NQA view

The undo nqa command deletes an NQA test instance

Formatnqa test-instance admin-name test-name

undo nqa test-instance admin-name test-name | all-test-instance

Parameters


admin-name Specifies the administratorof an NQA test instance


test-name Specifies the name of anNQA test instance


all-test-instance Specifies all NQA testinstances

-

ViewsSystem view




8935



Usage Guidelines

Usage Scenario

The NQA is an integrated network test function NQA test instances can accurately detectnetwork running status collect test statistics and reduce costs

NQA measures the performance of different protocols running on the network NQA allowsenterprise users to collect network operation indexes in real time such as total delay of theHTTP TCP connection delay DNS resolution delay file transmission delay FTP connectiondelay and DNS resolution error ratio

To check these performance indexes you can create NQA test instances The two ends of anNQA test are called the NQA client and NQA server The NQA client is responsible forinitiating an NQA test After receiving packets the NQA server sends response messages tothe NQA client You can learn about the running status of a corresponding network accordingto the returned packets


After the undo nqa all-test-instance command is run all NQA test instances except therunning test instance will be deleted

Precautions

A running test instance cannot be deleted

Example

Create a test named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test]



Function

The nqa-jitter tag-version command sets the packet version for a jitter test instance

The undo nqa-jitter tag-version command restores the default packet version for a jitter testinstance

By default the packet version of a jitter test instance is 1

Format

nqa-jitter tag-version version-number

undo nqa-jitter tag-version



8936



Parameters


version-number Specifies the packet version for a jitter testinstance

The value can be 1 or 2

Views

System view

Default Level


Usage Guidelines

Usage Scenario

Version 1 does not support unidirectional packet loss statistics

Version 2 produces more accurate packet statistics which helps network administrators tolocate network faults and detect malicious attacks towards the network After version 2 andcollecting the packet loss across a unidirectional link are enabled you can view the packetloss across the link from the source end to the destination end from the destination end to thesource end or in an unknown direction in the test results

Therefore configuring version 2 is recommended


If the packet version of a jitter test instance has been configured running the nqa-jitter tag-version command will override the previous configuration

Precautions

l If the packet version for the jitter test is 1 configuring the UDP server is optionall If the packet version of the jitter test is 2 configuring UDP server is mandatory You

need to run the nqa-server udpecho command to configure the UDP server If thecommand is not configured the UDP jitter test instance on the ingress will fail due totimeout

Example

Set the packet version of a jitter test instance to 2

ltHUAWEIgt system-view[HUAWEI] nqa-jitter tag-version 2


Function

The nqa-server tcpconnect command configures the IP address and port number for the TCPserver in an NQA TCP test instance



8937



The undo nqa-server tcpconnect command deletes the IP address and port numberconfigured for the TCP server in an NQA TCP test instance

By default no IP address or port number is configured for the TCP server in an NQA TCPtest instance

Formatnqa-server tcpconnect [ vpn-instance vpn-instance-name ] ip-address port-number

undo nqa-server tcpconnect all | [ vpn-instance vpn-instance-name ] ip-address port-number

NOTE




Specifies the name of the VPNinstance to which the TCP serverbelongsNOTE

This parameter is invalid when aloopback address is specified as theTCP server address

The value is a stringof 1 to 31 case-sensitive charactersspaces notsupported Whendouble quotationmarks are usedaround the stringspaces are allowed inthe string

all Indicates all TCP listeningaddresses and port numbers

-

ip-address Specifies the IP address of the TCPserver for monitoring TCP services

The value is indotted decimalnotation

port-number Specifies the port number of theTCP server for monitoring TCPservices

The value is aninteger that rangesfrom 1 to 65535 Theconfigured portcannot be a well-known port or usedby other modules

ViewsSystem view




8938



Usage Guidelines

Usage Scenario

The NQA TCP test is used to detect the rate at which a TCP connection is set up between anNQA client and a TCP server through the three-way handshake In a TCP test instance a TCPserver needs to be configured on the server end to respond to probe packets

Perform the following steps on the client to configure TCP server parametersl Run the destination-address command to configure the destination address of an NQA

test instance or the IP address of the TCP serverl Run the destination-port command to configure the destination port number of an NQA

test instance or the port number of the TCP server



Running the undo nqa-server tcpconnect all command will delete the IP address and portnumber of the TCP server

Precautions

A TCP server is configured only in a TCP test instance

Example

Create a TCP server for an NQA test instance with the IP address as 1010101 and the portnumber as 5000

ltHUAWEIgt system-view[HUAWEI] nqa-server tcpconnect 1010101 5000

Related Topics1667 destination-address1668 destination-port


Function

The nqa-server udpecho command configures the IP address and port number for the UDPserver in an NQA test

The undo nqa-server udpecho command deletes the IP address and port number configuredfor the UDP server in an NQA test

By default no IP address or port number is configured for the UDP server in an NQA test

Format





8939



undo nqa-server udpecho [ vpn-instance vpn-instance-name ] ip-address port-number |all

Parameters



Specifies the name of the VPN instanceto which the server belongsNOTE

This parameter is invalid when a loopbackaddress is specified as the UDP serveraddress


all Specifies a server for all NQA testinstances

-

ip-address Specifies the IP address of the serverfor monitoring UDP services


port-number Specifies the port number of the serverfor monitoring UDP services

The value is an integer thatranges from 1 to 65535 Theconfigured port cannot be awell-known port or used byother modules

Views

System view

Default Level


Usage Guidelines

Usage Scenario

This command is used on a UDP server

UDP packets are transmitted in a jitter test The test is used to obtain the packet delay jitterand packet loss ratio by comparing timestamps in the request and response packets A UDPserver needs to be configured for an NQA test to respond to probe packets



Running the undo nqa-server udpecho all command will delete the IP address and portnumber of the UDP server for all NQA UDP test instances

Precautions

l If the version number of the jitter test packets is 1 the command is optional



8940



l If the version number of the jitter test packets is 2 the command is mandatory If thecommand is not configured the jitter test instance on the ingress will fail due to timeout

Example

Create an NQA UDP monitoring server with the IP address 1010102 and the port number6000

ltHUAWEIgt system-view[HUAWEI] nqa-server udpecho 1010102 6000

16643 probe-count

Function

The probe-count command sets the number of probes for an NQA test instance

The undo probe-count command restores the default number of probes for an NQA testinstance

By default the number of probes for an NQA test instance is 3

Format

probe-count number

undo probe-count

Parameters


number Specifies the number ofprobes in an NQA testinstance

The value is an integer that ranges from 1 to 15The default value is 3NOTE

The number of probes in a trace test instance cannotbe more than 10

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

An NQA test consists of multiple probes By default if one or more probes are successful inan NQA test the test is considered successful If all probes fail the test is considered a failureThe number of probes in an NQA test is based on the network quality



8941



l If the network to be tested is a reliable network the number of probes can be setrelatively small because the probe can be successful after a small number of probepackets are sent

l If the network to be tested is an unreliable network the number of probes can be setrelatively large because the probe can be successful only after a large number of probepackets are sent

You can also detect the network quality based on statistics obtained from multiple probes Forexamplel If the probe test is successful after a small number of probes packets are sent the

network quality is goodl If the probe test is successful after a large number of probes packets are sent the network

quality is poor

Prerequisites

The type of a test instance has been specified using the test-type command The type of testinstances that are not supported is as followsl FTPl DNS


l In jitter test instances ICMP jitter test instances path jitter test instances LSP jitter testinstances the number of sent packets = probe-count x jitter-packetnum but theproduct cannot exceed 3000

l If the number of probes has been configured running the probe-count command willoverride the previous configuration

Precautions

The number of probes of a running test instance cannot be changed

Example Set the number of probes to 6 in NQA test instance user testltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] probe-count 6

Related Topics16626 jitter-packetnum16644 probe-failtimes


FunctionThe probe-failtimes command sets the threshold for the number of traps to be sent when theNQA test fails That is test packet fragmentation is not allowed

The undo probe-failtimes command restores the default threshold for the number of traps tobe sent when the NQA test fails



8942



By default one trap is sent for each probe failure

Formatprobe-failtimes times

undo probe-failtimes

Parameters


times Specifies the threshold for the number of trapsto be sent when the NQA test fails that is thenumber of continuous probe failures


ViewsNQA view



The NQA probe test is used to check whether response packets are received in a probe If thenumber of continuous probe failures reaches the specified value the system sends a trap to thespecified NMS

Prerequisites



Follow-up Procedure

Run the send-trap probefailure command to enable the system to send a trap to the NMSafter a probe fails Otherwise the trap cannot be sent to the NMS after a probe fails

Precautions


If the test instance does not support probe-count you are advised to set probe-failtimes to 1otherwise traps cannot be sent

If the test instance supports probe-count you are advised to set probe-failtimes to be smalleror equivalent to probe-count otherwise traps cannot be sent

Example Set the number of continuous probe failures to 10 in the test named user test



8943



ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type tcp[HUAWEI-nqa-user-test] probe-failtimes 10

Related Topics16658 test-type16649 send-trap

16645 records

FunctionThe records command sets the maximum number of history records and the maximumnumber of test results for NQA test instances

The undo records command restores the default maximum number of history records and thedefault maximum number of test results for NQA test instances

By default the number of history records is 50 and the number of test results is 5

Formatrecords history number | result number

undo records history | result


history number Specifies the maximumnumber of history records


result number Specifies the maximumnumber of test results


ViewsNQA view



You can run the records command to set the maximum number of history records and themaximum number of test results for NQA test instances



8944



By default a test instance supports 50 history records You need to limit the number of historyrecords on the device In addition you need to set the number of allowed remaining historyrecords that can be added The configured maximum number of history records cannot exceedthe sum of the total default number of history records and the remaining number of historyrecords

Precautions



Example Set the maximum number of history records to 30 for test instance user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] records history 30

Related Topics1669 display nqa history16610 display nqa results

16646 remote-pw-id

FunctionUsing the remote-pw-id command you can configure the ID of the remote end of a PW or aVC

Using the undo remote-pw-id command you can remove the configured ID of the remoteend of a PW or a VC

When the VC type is LDP remote-pw-id defaults to be 0

Formatremote-pw-id remote-pw-id

undo remote-pw-id



8945



Parameters


remote-pw-id

Specifies the IDof the remote endof a PW or a VC


l In the case of a PWE3 ping test instance the value ofremote-pw-id is an integer that ranges from 1 to4294967295 and only the VC type of LDP issupported The default value is 0 indicating that theID of the remote end of a PW is not configured

l In the case of a PWE3 tracendash if the VC type is LDP the value of remote-pw-id is

an integer that ranges from 1 to 4294967295 Thedefault value is 0

ndash if the VC type is BGP the value of remote-pw-idis an integer that ranges from 0 to 65534

Views

NQA view

Default Level


Usage Guidelines

Before running the remote-pw-id command you must set the test type to PWE3 Trace orPWE3 Ping in the NQA view

Example

In the NQA view configure the ID of the remote end of a PW to 100 the administrator toadmin and the test type to PWE3 trace

ltHUAWEIgt system-view[HUAWEI] nqa test-instance admin pwe3[HUAWEI-nqa-admin-pwe3] test-type pwe3trace[HUAWEI-nqa-admin-pwe3] remote-pw-id 100



Function

The restart command restarts the current running test instance



8946



Formatrestart

ParametersNone

ViewsNQA view


Usage GuidelinesFunction of the restart command is the same as that of the start now command

Example Restart the test instance named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] destination-port 8000[HUAWEI-nqa-user-test] destination-address ipv4 10111[HUAWEI-nqa-user-test] restart

Related Topics16655 start16656 stop


FunctionThe sendpacket passroute command enables test packets to be sent without searching therouting table

The undo sendpacket passroute command restores the default setting

By default the test packet is sent according to the routing table

Formatsendpacket passroute

undo sendpacket passroute

ParametersNone



8947



Views

NQA view

Default Level


Usage Guidelines

The type of a test instance has been specified using the test-type command The type of testinstances that are supported is as follows

l ICMP

l TCP

l UDP

l HTTP

l Jitter

l FTP

l SNMP

l Trace


After the sendpacket passroute command is executed the device sends test packets withoutsearching the routing table However the configurations of ttl and ip-forwarding becomeinvalid

Example

Enable test packets to be sent without searching the routing table

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] sendpacket passroute


16649 send-trap

Function

The send-trap command configures conditions for sending traps

The undo send-trap command deletes the previous configuration

By default the device is disabled from sending traps



8948



Format

send-trap all | probefailure | rtd | testcomplete | testfailure | testresult-change

undo send-trap all | probefailure | rtd | testcomplete | testfailure | testresult-change

Parameters


all Indicates that a trap is sent in any of the following situationsl The RTD exceeds the thresholdl NQA probes faill An NQA test succeedsl NQA tests fail

-

probefailure Indicates that a trap is sent when the number of probe failuresreaches the threshold

NOTEThis parameter does not apply to the jitter and ICMP jitter test instances

-

rtd Indicates that a trap is sent when the RTD exceeds the threshold -

testcomplete Indicates that a trap is sent when a test succeeds -

testfailure Indicates that a trap is sent when the number of test failuresreaches the threshold

-

testresult-change Indicates that a trap is sent when the probe result changesNOTE

This function supports only ICMP test instances

-

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

Traps are generated no matter whether the NQA test succeeds or fails You can determinewhether traps are sent to the NMS by enabling or disabling the trap function

The device sends traps to the NMS in any of the following situationsl The RTD exceeds the threshold

If the RTD exceeds the threshold the device sends a trap to the NMS using theconfigured address



8949



l NQA probes failWhen no response packet is received after a specified number of continuous test packetsare sent the device sends a trap to the NMS using the configured address

l An NQA test succeedsWhen the device receives a response packet from a destination address the device sendsa trap to the NMS using the configured address

l NQA tests failWhen the number of continuous test failures reaches the maximum number the devicesends a trap to the NMS using the configured address

You can run the send-trap command to configure conditions for sending traps When acondition is met the device sends a trap to the NMS

Prerequisites


The route between the device and NMS is reachable and related configurations are completeThe host where traps are sent is configured using the snmp-agent target-host trapcommand otherwise traps cannot be sent to the NMS

Precautions


Example Configure the test instance user test to send a trap when the test fails

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] send-trap testfailure

Related Topics16644 probe-failtimes16657 test-failtimes


FunctionThe sender-address command configures the source IP address in the multi-hop PWscenario

The undo sender-address command restores the default setting

By default no source IP address is configured

Formatsender-address ipv4 ip-address

undo sender-address



8950



Parameters


ipv4 ip-address Specifies a source IPv4 address -

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

When PWE3 ping is performed in the multi-hop PW scenario and the lsp-version is rfc4379the sender-address command specifies a source IP address The value is a routable addresson the same public network with the address of the destination PE Usually the source IPaddress is the address of the adjacent SPE or UPE

Precautions

After the sender-address command is run the LSP version cannot be set to draft6

Example

Set the source IP address of the PWE3 ping test instance in the multi-hop PW scenario to10111

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type pwe3ping[HUAWEI-nqa-user-test] lsp-version rfc4379[HUAWEI-nqa-user-test] sender-address ipv4 10111

16651 set-df

Function

The set-df command configures the DF (Dont Fragment) field of the test packet This fieldprevents packets from being fragmented

The undo set-df command restores the default setting

By default packet fragmentation is allowed

Format

set-df

undo set-df



8951



ParametersNone

ViewsNQA view



If two hosts need to communicate with each other over multiple networks the smallest MTUvalue of the networks is the path MTU value Packets can be transmitted normally overmultiple networks only after the path MTU value is obtained

If the DF bit of a packet is not configured and the length of the packet is longer than theMTU value the packet will be fragmented into several fragments that are shorter than thepath MTU value As a result the path MTU cannot be detected by sending packets withincreasing lengths To detect the path MTU value run the set-df command to prohibit packetfragmentation Then increase the length of packets sent along the path to find the path MTUvalue

Prerequisites

The type of a test instance has been set to Trace using the test-type trace command

Precautions

The configuration of the DF bit for packets in a running test instance cannot be changed

Example Set the test packet sent without being fragmented

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type trace[HUAWEI-nqa-user-test] set-df



FunctionThe source-address command sets the source IP address for a test instance

The undo source-address command restores the default setting

By default the IP address of the interface where packets are sent functions as the source IPaddress of a test instance



8952



Format

source-address ipv4 ipv4-address

undo source-address

Parameters


ipv4 ipv4-address Specifies the IPv4 source address for theNQA test instance


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

After the test packets are transmitted to the destination address the source address of theNQA test instance The source-address command is used to configure the source IP addressfor the NQA test If no source IP address is configured the system specifies the IP addressthat sends test packets as the source IP address

Prerequisites

The type of a test instance has been specified using the test-type command However the testtype cannot be PWE3 trace PWE3 ping or MAC ping

Precautions

The configuration of the source IP address of the running test instance cannot be changed

Example

Set the source IP address to 10111 for test instance user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] source-address ipv4 10111

Related Topics16658 test-type16653 source-interface16654 source-port



8953




Function

The source-interface command configures the source interface for an NQA test instance

The undo source-interface command cancels the configuration

By default no source interface is configured for an NQA test instance

Format

source-interface interface-type interface-number

undo source-interface

Parameters



Specifies the type and number of the source interfacefor an NQA test instance

-

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

After test packets reach the destination address the destination end sends response packets tothe client end After the source-interface command is used to configure the source interfacefor an NQA test instance there are the following scenariosl If the source-address command is run to specify the source IP address the test packets

are sent from the specified source interface but the response packets are received fromthe configured source IP address

l If no source IP address is specified for an NQA test instance the IP address of the sourceinterface will be used as the source IP address of the NQA test instance In this scenariothe initiated and responded packets are both transmitted over the outbound interfacespecified by the source-interface command

Prerequisites

The type of a test instance has been specified using the test-type command The sourceinterface can be configured only for ICMP ICMP jitter Jitter and MAC ping test instances

Precautions

The configuration of the source interface of a running test instance cannot be changed



8954



The source interface of an NQA test instance must be an interface with an IP addressconfigured otherwise the command cannot take effect

The source interface cannot be a link aggregation interface or a member interface in loadbalancing scenario otherwise the command cannot take effect

Example

Set the source interface of test instance user test to vlanif 100

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] source-interface vlanif 100

Related Topics16658 test-type16654 source-port16652 source-address

16654 source-port

Function

The source-port command configures the source port for an NQA test instance

The undo source-port command restores the default setting

No default source port number is specified port numbers are randomly allocated by thesystem

Format

source-port port-number

undo source-port

Parameters


port-number Specifies the source portnumber for an NQA testinstance

The value is an integer that ranges from 1 to65535 The configured port cannot be a well-known port or used by other modules

Views

NQA view

Default Level




8955



Usage Guidelines

Usage Scenario

If a source port number is specified in an NQA test instance NQA test packets can beregulated more accurately which prevents the probe packets from being filtered by rules suchACL The source-port command can be used to configure the source port for this NQA testinstancel If no source port number is specified for an NQA test instance a port number is selected

at random to receive or send NQA test packetsl If source port number is specified for an NQA test instance the specified port number is

used to receive and send NQA test packets

Prerequisites

The test instance type has been specified using the test-type command The source portcannot be configured for LSP ping LSP trace LSP jitter PWE3 ping PWE3 trace mac pingpath jitter DNS ICMP ICMP jitter or trace test instances

Precautions

The port specified in the source-port command must be available otherwise the probe fails


Example

Set the source port number of test instance user test to 3000

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type tcp[HUAWEI-nqa-user-test] source-port 3000

Related Topics16658 test-type16653 source-interface16652 source-address

16655 start

Function

The start command sets the start mode and end mode for an NQA test instance

The undo start command stops a running NQA test instance or restores the configuration ofstart mode and end mode of an unperformed NQA test instance

By default the test instance stops automatically after test packets are sent

Format

start at [ yyyymmdd ] hhmmss [ end at [ yyyymmdd ] hhmmss | delay secondssecond | hhmmss | lifetime seconds second | hhmmss ]



8956



start delay seconds second | hhmmss [ end at [ yyyymmdd ] hhmmss | delay seconds second | hhmmss | lifetime seconds second | hhmmss ]

start now [ end at [ yyyymmdd ] hhmmss | delay seconds second | hhmmss |lifetime seconds second | hhmmss ]

undo start

Parameters


start at[ yyyymmdd ]hhmmss

Performs a test instance at aspecified timeNOTE

The configured time must belater than the time on thedevice

-

start delay seconds second |hhmmss

Specifies a delay inperforming a test instance

l seconds second specifies a delay inperforming a test instance The valueis an integer ranging from 1 to86399 in seconds

l hhmmss specifies a delay inperforming a test instance Ifhhmmss is specified the systemautomatically sets the moment inseconds For example 100indicates that a test instance starts inone hour (3600 seconds)

start now Performs a test instanceimmediately

-

end at[ yyyymmdd ]hhmmss

Stops a test instance at aspecified time

-

end delay seconds second |hhmmss

Specifies a delay in stoppinga test instance This delay isset based on the currentsystem time For example Ifstart at 90000 end delayseconds 60 is run at 85940then a test instance starts at90000 and ends at 90040

l seconds second specifies a delay instopping a test instance The value isan integer ranging from 6 to 86399in seconds

l hhmmss specifies a delay instopping a test instance Forexample 100 stands for a 3600-second delay from the currentsystem time till the time that the testinstance stops

NOTEThe delay in stopping a test instance must beset to at least 6s later than the delay inperforming the test instance



8957




end lifetime seconds second |hhmmss

Specifies the lifetime of anNQA test instance (startingfrom the moment that theNQA test instance starts) Forexample If start delayseconds 60 end lifetimeseconds 120 is run at90000 then a test instancelasts for 120s as it starts at090100 and ends at090300

l seconds second sets the life time ofa test instance in seconds The valueis an integer ranging from 6 to86399 in seconds

l hhmmss sets the lifetime of a testinstance For example 100indicates that the lifetime of a testinstance is 3600s starting from themoment a test instance starts

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

After configuring test instances and relevant attributes you need to manually set the start andend modes for the test instances The types of start and end modes are as followsl Start modes

ndash Starting a test instance at a specified timendash Starting a test instance immediatelyndash Starting a test instance after a certain delay

l End modesndash Ending a test instance at a specified timendash Ending a test instance immediatelyndash Ending a test instance after a certain delayndash Ending a test instance after all test packets are sent

You can set the start and end modes as required

Precautions

If the number of the running test instances reaches the maximum value defined by the systemthe start command is invalid

For the same test instance the start now command can be used again only when the previousconfiguration is complete Although this command has been run and configurations have beensaved this start now command will not be restored and needs to be run again after the deviceis restarted

When starting a test instance at a specified time the time must be later than the current timeon the device



8958



Example

Perform the test 10 hours later

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] destination-address ipv4 10111[HUAWEI-nqa-user-test] destination-port 4000[HUAWEI-nqa-user-test] start delay 100000

Related Topics16658 test-type16611 display nqa-agent

16656 stop

Function

The stop command stops an NQA test instance

Format

stop

Parameters

None

Views

NQA view

Default Level


Usage Guidelines

You can run this command to stop only the running NQA test instances that is test instancesin active state

Example

Stop the test instance named user test

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] stop

Related Topics16655 start16615 frequency



8959




Function

The test-failtimes command sets the number of consecutive test failures in an NQA test

The undo test-failtimes command restores the default setting

By default a trap message is sent for each test failure

Format

test-failtimes times

undo test-failtimes

Parameters


times Specifies the number of consecutivetest failures in an NQA test


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

An NQA test consists of multiple probe tests By default if one or more probe tests aresuccessful in an NQA test the test is considered successful If all probe tests fail the test isconsidered failed If the number of consecutive test failures reaches the specified value thesystem will send a trap to the specified NMS

Prerequisites


Follow-up Procedure

Run the send-trap testfailure command to send a trap to the NMS after an NQA test failsOtherwise the trap cannot be sent to the NMS after an NQA test fails

Precautions




8960



Example

Set the number of consecutive test failures to 10

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] test-failtimes 10

Related Topics16614 fail-percent16649 send-trap

16658 test-type

Function

The test-type command configures the test type for an NQA test instance

The undo test-type command cancels the test type configured for an NQA test instance

By default no test type is configured

Format

test-type dns | ftp | http | icmp | icmpjitter | jitter | lspjitter | lspping | lsptrace | macping| pathjitter | pwe3ping | pwe3trace | snmp | tcp | trace | udp

undo test-type

NOTE

The S1720GFR does not support macping

Parameters


dns Specifies a DNS test -

ftp Specifies an FTP service test -

http Specifies an HTTP service test -

icmp Specifies an ICMP test -

icmpjitter Specifies an ICMP jitter test which can detect the jitter on thenetwork

-

jitter Specifies a jitter test which can detect the jitter during UDP packettransmission

-

lspjitter Specifies an LSP jitter test -

lspping Specifies an LSP ping test -

lsptrace Specifies an LSP trace route test -

macping Specifies a MAC ping test -



8961




pathjitter Specifies a path jitter test which can detect the hop-by-hop jitterduring the ICMP packet transmission

-

snmp Specifies an SNMP test -

tcp Specifies a TCP test -

trace Specifies a trace test -

udp Specifies a UDP test -

Views

NQA view

Default Level


Usage Guidelines


Example

Configure the test type of an NQA test instance as TCP

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type tcp



Function

The timestamp-unit command sets the unit of timestamp for an NQA test instance

The undo timestamp-unit command restores the default setting

By default the unit of timestamp for an NQA test instance is millisecond

Format

timestamp-unit millisecond | microsecond

undo timestamp-unit microsecond



8962



Parameters


millisecond Sets the unit of timestamp for an NQA test instance to millisecond -

microsecond Sets the unit of timestamp for an NQA test instance to microsecond -

ViewsNQA view



The timestamp-unit millisecond command sets the unit of timestamp for an NQA testinstance to millisecond

The timestamp-unit microsecond command sets the unit of timestamp for an NQA testinstance to microsecond

Precautions

This command applies to the ICMP Jitter and Jitter tests

Example Set the unit of timestamp for an NQA test instance to microsecondltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] timestamp-unit microsecond


16660 threshold

FunctionThe threshold command sets the RTD threshold

The undo threshold command deletes the RTD threshold

By default no threshold is set

Formatthreshold rtd rtd-value

undo threshold rtd



8963



Parameters


rtd rtd-value Sets the RTDthreshold

The value is an integer that ranges from 1 to 60000The unit of this value is the same as that of thetimestamp set using the timestamp-unit command

Views

NQA view

Default Level


Usage Guidelines


Example

Set the RTD threshold to 2 ms

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] threshold rtd 2

Related Topics16649 send-trap

16661 timeout

Function

The timeout command sets the timeout period for a probe of an NQA test instance

The undo timeout command restores the default timeout period for a probe of an NQA testinstance

By default the timeout period for FTP test instances is 15 seconds and that for other testinstances is 3 seconds

Format

timeout time

undo timeout



8964



Parameters


time Specifies the timeout period for aprobe

The value is an integer that ranges from 1to 60 in seconds

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

The timeout period refers to the waiting time after a probe is sent If no response packet isreceived when the timeout period expires the test fails The timeout period is set based on theactual networking If the value is too small the NQA test instance fails

On an unstable network with a low transmission rate you need to prolong the timeout periodfor sending probe packets to ensure that response packets can be received

Prerequisites


Precautions

l You are advised to set the timeout period based on the round-trip time (RTT) valueEnsure that the timeout period set by the timeout command is longer than the RTTvalue

l In all test instances except jitter and ICMP jitter test instances the timeout period set bythe timeout command must be smaller than or equal to the interval of automatic tests setby the interval command Otherwise the tests fail due to timeout of test packets

Precautions


In an ICMP test instance if the following conditions are met the Completion field in the testresults will be displayed as no resultl The system CPU usage exceeds 90 and the configured timeout period is less than 6sl frequency configured le (probe-count - 1) times interval + 6

Example

Set the timeout period of the test instance named user test to 20 seconds

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type jitter[HUAWEI-nqa-user-test] timeout 20



8965



Related Topics16615 frequency16624 interval (NQA view)

16662 tos

Function

The tos command sets the ToS value for an NQA test packet

The undo tos command restores the default ToS value of an NQA test packet

By default the ToS value is 0

Format

tos value

undo tos

Parameters


value Specifies the ToS value of apacket


Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

The ToS field contains a precedence sub-field and a ToS sub-field The precedence sub-fieldindicates the priority of a packet and the ToS sub-field is seldom used All the bits in the ToSsub-field must be set to 0 You can set the priority of probe packets by setting the ToS valueWhen a large number of packets are received packets of high priorities are processedpreferentially

Prerequisites

The type of a test instance has been specified using the test-type command The followingtypes of test instances are supportedl FTPl HTTPl ICMP



8966



l ICMP Jitter

l Jitter

l SNMP

l TCP

l UDP


If you run the tos command multiple times only the latest configuration takes effect

Precautions

The ToS value of a running test instance cannot be changed

Example

Set the ToS value for the test instance named user test to 10

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] tos 10



Function

The tracert-hopfailtimes command sets the number of consecutive failed hops indicating afailed trace test instance

The undo tracert-hopfailtimes command restores the default number of consecutive failedhops indicating a failed trace test instance

By default five consecutive failed hops indicates a failed trace test instance

Format

tracert-hopfailtimes times

undo tracert-hopfailtimes

Parameters


times Specifies the number of consecutive failedhops indicating a failed trace test instance




8967



Views

NQA view

Default Level


Usage Guidelines

The tracert-hopfailtimes command only takes effect for trace test instances


Example

Set the number of consecutive failed hops indicating a failed trace test instance to 6

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type trace[HUAWEI-nqa-user-test] tracert-hopfailtimes 6



Function

The tracert-livetime command sets the time to live (TTL) value for trace test instances in anNQA test

The undo tracert-livetime command restores the default TTL value for trace test instances inan NQA test

The tracert-livetime command sets the time to live (TTL) value for LSP Trace test instancein an NQA test

The undo tracert-livetime command restores the default TTL value for LSP trace testinstance in an NQA test

By default the initial TTL value is 1 and the maximum TTL value is 30

Format

tracert-livetime first-ttl first-ttl max-ttl max-ttl

undo tracert-livetime



8968



Parameters


first-ttl first-ttl Specifies the initial TTLvalue of a packet


max-ttl max-ttl Specifies the maximumTTL value of a packet

The value is an integer that ranges from 1 to255 The value of max-ttl must be greater thanthe value of first-ttl By default the maximumTTL value is 30

Views

NQA view

Default Level


Usage Guidelines

The tracert-livetime command takes effect only for trace test instances


Example

Set the initial TTL value of the test instance named user test to 5 and the maximum TTLvalue to 20

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type trace[HUAWEI-nqa-user-test] tracert-livetime first-ttl 5 max-ttl 20


16665 ttl

Function

The ttl command sets the TTL value for the test packets of an NQA test instance

The undo ttl command restores the default setting

The default TTL value is 30

Format

ttl number

undo ttl



8969



Parameters


number Specifies the TTL value The value is an integer that ranges from 1 to 255The default TTL value is 30

Views

NQA view

Default Level


Usage Guidelines

Usage Scenario

To prevent test packets from being transmitted endlessly the test instance must be performedwithin certain hops

When a test packet is created you can run the ttl command to set the TTL value When thetest packet is transmitted along Layer 3 routing devices each Layer 3 routing devicedecrements the TTL value by one when the packet arrives When the TTL value is 0 theLayer 3 routing device discards the test packet and sends an error message to the sending endThis prevents test packets from being transmitted endlessly

Prerequisites

The type of a test instance has been specified using the test-type command The type of testinstances that are not supported is as follows

l DNS

l Trace

l MAC Ping

l Path Jitter


If you run the ttl command multiple times only the latest configuration takes effect

Precautions


Example

Set the TTL value for the test packets of a test instance named user test to 10

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] ttl 10



8970




16666 ttl-copymode

Function

Using the ttl-copymode command you can specify the TTL propagation mode (pipe oruniform) for a multi-hop PW detection

Using the undo ttl-copymode command you can cancel the TTL propagation modeconfigured in the NQA view

By default the TTL propagation mode varies with products

Format

ttl-copymode pipe | uniform

undo ttl-copymode

Parameters


pipe Sets the TTL propagation mode to pipe -

uniform Sets the TTL propagation mode to uniform -

Views

NQA view

Default Level


Usage Guidelines

During the detection of a multi-hop PW if the default TTL propagation mode on differentdevices is different you need to specify the TTL propagation mode on the first hop of the PWThis command is used to detect PWE3 networks and BGPMPLS IP VPN networks

The TTL propagated in pipe and uniform modes is processed in different manners

l When receiving a packet carrying the TTL propagated in pipe mode the system stripsthe outer tag of the packet decreases the TTL in the inner tag by 1 and then sets theTTL in the outer tag to 255

l When receiving a packet carrying the TTL propagated in uniform mode the systemmaps the TTL in the outer tag to the inner tag decreases the TTL in the inner tag by 1and then sets the TTL in the outer tag to the value of the TTL in the inner tag



8971



NOTEThe ttl-copymode command makes sense only in the trace test instances In the case of an trace test instanceyou need to first run the vpn-instance vpn-instance-name command to bind the NQA trace test instance witha VPN instance

Example Configure the TTL propagation mode of packets in the NQA trace test instance as pipe

ltHUAWEIgt system-view[HUAWEI] nqa test-instance admin trace[HUAWEI-nqa-admin-trace] test-type trace[HUAWEI-nqa-admin-trace] vpn-instance voice[HUAWEI-nqa-admin-trace] ttl-copymode pipe



FunctionUsing the undo no-control-word command you can enable the control-word option

By default the control-word is used in packet encapsulation

Formatundo no-control-word

ParametersNone

ViewsNQA view



The control-word option carries control-word information in each encapsulated packet Theinformation is used for packet sequence verification packet fragmentation and packetreassembling on the forwarding plane

By default the control-word is used in packet encapsulation If a non-huawei device does notsupport control-word information in the packet structure the label-type label-alert |normal no-control-word command can be used on the Huawei device to remove thecontrol-word option from each packet sent to the non-huawei device to facilitate theirinterworking



8972



If a non-huawei device supports control-word information in the packet structure the undono-control-word command can be used on the Huawei device to restore the Huawei packetstructure

NOTE

Only NQA PWE3 ping and tracert test instances support the undo no-control-word command

Example

Enable the control-word option

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type pwe3ping[HUAWEI-nqa-user-test] label-type label-alert no-control-word[HUAWEI-nqa-user-test] undo no-control-word

Related Topics16629 label-type

16668 vc-type

Function

Using the vc-type command you can configure the type of the protocol used for setting up anL2VPN VC in the NQA view

Using the undo vc-type command you can delete the protocol type configured in the NQAview

By default the type of the protocol used for setting up an L2VPN VC is LDP

Format

vc-type ldp | bgp

undo vc-type

Parameters


ldp Propagates inner labels by using LDP as the signaling protocol -

bgp Propagates inner labels by using BGP as the signaling protocol -

Views

NQA view

Default Level




8973



Usage Guidelines

Usage Scenario

The vc-type command is used to configure the signaling protocol for an NQA test instance tobe identical with that for the PW on the network to be tested

Prerequisites

For the vc-type ldp command ensure that the test instance is of the following type

l PWE3 Ping

l PWE3 Trace

For the vc-type bgp command ensure that the test instance is of the following type

l PWE3 Trace

Precautions

The signaling type of a running test instance cannot be changed

Example

In the NQA view configure BGP to be the type of the protocol used for setting up anL2VPN VC

ltHUAWEIgt system-view[HUAWEI] nqa test-instance admin pwe3[HUAWEI-nqa-admin-pwe3] test-type pwe3trace[HUAWEI-nqa-admin-pwe3] vc-type bgp


16669 vpn-instance

Function

The vpn-instance command configures the VPN instance that an NQA test instance belongsto

The undo vpn-instance command deletes the configured VPN instance

By default no VPN instance is configured

NOTE

Only S5720SI S5720S-SI S5720EI S5720HI S6720EI and S6720S-EI support this command

Format


undo vpn-instance



8974



Parameters


vpn-instance-name

Specifies the VPN instancethat an NQA test instancebelongs to

The value is a string of 1 to 31 case-sensitivecharacters spaces not supported Whendouble quotation marks are used around thestring spaces are allowed in the string

Views

NQA view

Default Level


Usage Guidelines

The vpn-instance command applies to FTP HTTP ICMP ICMP jitter Path jitter SNMPTCP trace UDP and UDP jitter test instances


Example

Set the VPN instance for an NQA test instance named user test to vrf1

ltHUAWEIgt system-view[HUAWEI] nqa test-instance user test[HUAWEI-nqa-user-test] test-type icmp[HUAWEI-nqa-user-test] vpn-instance vrf1




Function

The display trace information command displays information about service diagnosis

Format

display trace information



8975



Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

After configuring service diagnosis you can run this command to view global informationabout service diagnosis for example the counts of diagnosis instances and objects created onthe device

Example

Display information about service diagnosis

ltHUAWEIgt display trace informationTrace Information------------------------------------------------------------Trace Enable EnableDebug info level BriefDebug fill-instance OffDebug quit-instance OffDebug output information OffSyslog Source IP Address -

The sum of all the instances 0The startID of the instance table -Alloc instance times 9Free instance times 9The sum of all the objects 2------------------------------------------------------------

Table 16-62 Description of the display trace information command output

Item Description

Trace Information Information about service diagnosis

Trace Enable Status of service diagnosisl Disable Service diagnosis is disabledl Enable Service diagnosis is enabledThis field can be modified using the trace enablecommand

Debug info level Output level of service diagnosis informationl Brief brief service diagnosis informationl Detail detailed service diagnosis informationThis field can be modified using the trace enablecommand



8976



Item Description

Debug fill-instance Debugging status of the fill-instance modulel Off disabledl On enabled

Debug quit-instance Debugging status of the quit-instance modulel Off disabledl On enabled

Debug output information Debugging status of the output information modulel Off disabledl On enabled

Syslog Source IP Address IP address of the interface for exporting diagnosisinformation to the log server To set the IP address of theinterface for exporting diagnosis information to a logserver run the trace syslog source command

The sum of all the instances Total number of diagnosis instances

The startID of the instancetable

Start ID of the instance table

Alloc instance times Number of the allocated diagnosis instances

Free instance times Number of the release diagnosis instances

The sum of all the objects Total number of diagnosis objects

Related Topics1676 trace enable1678 trace syslog source


FunctionThe display trace instance command displays diagnosis instances on a device

Formatdisplay trace instance [ instance-start-id [ instance-end-id ] | mac-address mac-address | ip-address ip-address [ vpn-instance vpn-instance-name ] | interface interface-type interface-number | cid cid ] [ process-wlan ]



8977



Parameters


instance-start-id Specifies the ID of the firstinstance whose information isdisplayed that is start ID


instance-end-id Specifies the ID of the lastinstance whose information isdisplayed that is end ID

The value varies according todifferent devicesNOTE

The instance-end-id value must belarger than the instance-start-id value


Specifies a MAC address The value is in the format of H-H-H in which H is a hexadecimalnumber of 1 to 4 digits


Specifies an IP address The value is in dotted decimalnotation






-

cid cid Specifies the diagnosis instanceCID



NOTEOnly the S5720HI supports theprocess-wlan

-

ViewsAll views


Usage GuidelinesIf you specify no parameter all diagnosis instances are displayed in sequence Each time yourun this command 10 diagnosis instances are displayed For example all diagnosis instanceshave been created on the device When you run the display trace instance command for thefirst time information about diagnosis instances 0 to 9 is displayed When you run this



8978



command again information about instances 10 to 19 is displayed This process is repeateduntil information about all the diagnosis instances is displayed If you specify the value ofinstance-start-id information about 10 diagnosis instances from this ID is displayed

To view information about diagnosis instances within a specified range run the display traceinstance instance-start-id instance-end-id command to specify the start and end IDs ofdiagnosis instances

Example

Display information about diagnosis instances on the interface with the IP address of1010101

ltHUAWEIgt display trace instance ip-address 1010101Trace Instance------------------------------------------------------------ ID 0 MAC Address 0101-0101-0101 IP Flag - Session ID - IP Address 1010101 VRF Index - CID 100 User Name - Interface - QinQ VLAN ID - User VLAN ID - Access Mode dot1x Modules online EAPoL 0 WEBS 0 WEB 0 AAA 0 CM 0 TM 0 SAM 0 RADIUS 1 DHCPS 0 DHCPC 0 DHCPR 0 DHCPP 0 TACACS 0 AM 0 SAVI 0 WLAN_AC0 ------------------------------------------------------------ Total 1 1 printed

Table 16-63 Description of the display trace instance command output

Item Description

ID ID of the diagnosis instance

MAC Address MAC address of the interface



IP Address IP address of the interface


CID User connect ID

User Name User name

Interface Interface index

QinQ VLAN ID QinQ VLAN ID

User VLAN ID User VLAN ID

Access Mode User access mode



8979



Item Description

Modules online User status on a module User status can bel 0 The user is offline on the modulel 1 The user is online on the module



FunctionThe display trace object command displays the configuration about a service diagnosisobject

Formatdisplay trace object [ service-object-id ] [ process-wlan ]

Parameters


service-object-id Specifies the ID of a diagnosis object The value is an integer thatranges from 0 to 3



-

ViewsAll views


Usage GuidelinesIf you do not specify the parameter service-object-id configurations about all diagnosisobjects are displayed

Example Display configurations about all diagnosis objects



8980



ltHUAWEIgt display trace objectTrace Object------------------------------------------------------------ Object ID 0 Slot - MAC Address - IP Flag - Session ID - IP Address 10111 VRF Index - CID - User Name - Interface - QinQ VLAN ID - User VLAN ID - Access Mode - Output command line ( User-Intf 4 )

Object ID 1 Slot - MAC Address 0101-0101-0101 IP Flag - Session ID - IP Address - VRF Index - CID - User Name - Interface - QinQ VLAN ID - User VLAN ID - Access Mode - Output file ( flashatxt )

Object ID 2 Slot - MAC Address 0101-0101-0101 IP Flag - Session ID - IP Address 10222 VRF Index - CID - User Name - Interface - QinQ VLAN ID - User VLAN ID - Access Mode - Output server ( 10101010 )

------------------------------------------------------------ Total 3 3 printed

Table 16-64 Description of the display trace object command output

Item Description

Object ID ID of the diagnosis object This parameter isautomatically generated from 0 in sequence of creationtime

Slot Slot ID of the interface board

MAC Address MAC address of the interface To set the MAC addressof an interface run the trace object command




8981



Item Description


IP Address IP address of the interface To set the IP address of aninterface run the trace object command


CID User connect ID

User Name User name To set the user name run the trace objectcommand

Interface Interface index To set the interface index run the traceobject command

QinQ VLAN ID QinQ VLAN ID To set the QinQ VLAN ID run thetrace object command

User VLAN ID User VLAN ID To set the user VLAN ID run the traceobject command

Access Mode User access mode including dot1x mac-authen portaland wlan To set the user access mode run the traceobject commandNOTE

Only S5720HI supports portal and wlan

Output Direction in which the device exports diagnosisinformation To set the direction run the trace objectcommandl Command line (User-Intf X) Diagnosis information

is displayed on the screen of a configuration terminalNOTE

When the configuration terminal is online X displays theabsolute number of the user interface (the absolute numbercan be checked using the display users command) Whenthe configuration terminal is offline X displays offline

l file Diagnosis information is exported to filesl server Diagnosis information is exported to a log

server

Total 3 3 printed Total number of created diagnosis objects and count ofdisplayed objects





8982



Function

The reset trace instance command clears all the diagnosis instances on a device

Format

reset trace instance

Parameters

None

Views

System view

Default Level

3 Management level

Usage Guidelines

After service diagnosis is enabled and a diagnosis object is created on a device the devicecreates a diagnosis instance when a user matching the attributes of the diagnosis object getsonline If the device diagnoses services of multiple users it creates a diagnosis instance foreach user which occupies a large amount of system resources Therefore the deviceautomatically deletes diagnosis instances when corresponding users get offline The servicediagnosis module may fail to detect that some users are offline because these users got offlineabnormally The diagnosis instances created for these users are not deleted and occupy systemresources The device provides an aging mechanism for service diagnosis When the agingtime is reached the device automatically deletes diagnosis instances to reclaim resources

In addition to the preceding two methods for automatically clearing diagnosis instances youcan run the reset trace instance command to clear all the diagnosis instances

NOTICEAfter all the diagnosis instances are cleared using the reset trace instance commandproperly running diagnosis instances are also deleted Exercise caution when you run thereset trace instance command

Example

Clear all diagnosis instances on the device

ltHUAWEIgt system-view[HUAWEI] reset trace instance

Related Topics1672 display trace instance



8983




Function

The save trace information command saves diagnosis information in the buffer area as a file

Format

save trace information

Parameters

None

Views

System view

Default Level


Usage Guidelines

Usage scenario

After you specify the parameter file file-name in the trace object command to save diagnosisinformation as files to the default root directory on the storage device the system savesdiagnosis information in the buffer area until the buffer is full To prevent data loss thesystem automatically saves diagnosis information in the buffer area as the file file-nameBefore the buffer becomes full to view real-time diagnosis information run the save traceinformation command to save diagnosis information in the buffer area as a file

Prerequisites

The device has been configured to export diagnosis information as a file using the traceobject command

Example

Save diagnosis information as a file

ltHUAWEIgt system-view[HUAWEI] save trace information


1676 trace enable



8984



Function

The trace enable command enables service diagnosis

The undo trace enable command disables service diagnosis

By default service diagnosis is disabled

Format

trace enable [ brief ]

undo trace enable

Parameters


brief Configures the device tooutput brief servicediagnosis information

-

Views

System view

Default Level


Usage Guidelines

Usage scenario

It is difficult to locate problems during user access based on debugging information onexisting networks because multiple users may get online or offline simultaneously anddebugging information about a specified user cannot be displayed Service diagnosis providedby the switch allows maintenance personnel to customize attributes and create diagnosisobjects to diagnose information about services of specified users To enable service diagnosisrun the trace enable command

Service diagnosis information can be displayed in two methodsl The trace enable brief command configures the device to output brief service diagnosis

informationl The trace enable command configures the device to output detailed service diagnosis

information

Follow-up Procedure

After service diagnosis is enabled run the trace object command to create a diagnosis objectAfter an ID is generated for the diagnosis object the system starts diagnosis services

Precautions



8985



Service diagnosis affects system performance Therefore enable service diagnosis only whenfault locating is required After locating faults immediately run the undo trace enablecommand to disable service diagnosis

The trace enable command is not recorded in the configuration file Therefore run the traceenable command again after the device restarts to make service diagnosis take effect

Example

Enable the service diagnosis function and configure the device to output brief servicediagnosis information

ltHUAWEIgt system-view[HUAWEI] trace enable brief


1677 trace object

Function

The trace object command creates a diagnosis object

The undo trace object command deletes a diagnosis object

By default no diagnosis object is created If you do not specify the direction at whichinformation is exported the default direction is the CLI

Format

trace object mac-address mac-address | ip-address ip-address [ vpn-instance vpn-instance-name ] | interface interface-type interface-number | user-vlan user-vlan-id [ qinq-vlan qinq-vlan-id ] | user-name user-name | access-mode dot1x | mac-authen | portal |wlan [ process-wlan ] [ output command-line | file file-name | syslog-server syslog-server-ip ]

undo trace object mac-address mac-address | ip-address ip-address [ vpn-instance vpn-instance-name ] | interface interface-type interface-number | user-vlan user-vlan-id [ qinq-vlan qinq-vlan-id ] | user-name user-name | access-mode dot1x | mac-authen | portal |wlan [ process-wlan ] [ output command-line | file file-name | syslog-server syslog-server-ip ]

undo trace object service-object-id | all

Parameters



Creates a diagnosis object based on theMAC address

The value is in the format ofH-H-H in which H is ahexadecimal number of 1 to4 digits



8986





Creates a diagnosis object based on theIP address



Specifies the name of a VPN instance The value is a string of 1 to31 case-sensitive characterswithout spaces


Creates a diagnosis object based on theinterface

-

user-vlan user-vlan-id

Creates a diagnosis object based on theuser VLAN


qinq-vlan qinq-vlan-id

Creates a diagnosis object based on theQinQ VLAN ID


user-name user-name Creates a diagnosis object based on the

user name

The value is a string of 1 to64 case-insensitivecharacters without spaces

access-mode Creates a diagnosis object based on theaccess mode

-

dot1x Creates a diagnosis object based on thedot1x access mode

-

mac-authen Creates a diagnosis object based on themac-authen access mode

-

portal Creates a diagnosis object based on theportal access mode

-

wlan Creates a diagnosis object based on thewlan access mode

NOTEOnly S5720HI supports access-mode wlan

-



-

output Specifies the direction in which thedevice exports diagnosis information

-



8987




command-line Exports diagnosis information to theCLI

-

file file-name Exports diagnosis information as a file

NOTEIt is recommended that you export thediagnosis information to a specified file

The value of file-name is astring of 1 to 63 case-insensitive characterswithout spaces

syslog-serversyslog-server-ip

Exports diagnosis information to a logserver

syslog-server-ip specifiesthe IP address of the logserver in dotted decimalnotation

service-object-id Specifies the ID of a diagnosis object tobe deleted

NOTEDiagnosis object IDs are generated based onsequence in which the diagnosis objects arecreated The ID starts from 0

To view all created diagnosis objects run thedisplay trace object command


all Deletes all diagnosis objects -

ViewsSystem view



When locating faults of DHCP AAA or NAC service during user access maintenancepersonnel can create diagnosis objects to trace services and locate the faults

Users with different services have different attributes Create diagnosis objects for differentservices based on different attributes

l DHCP service based on the MAC addressl AAA and NAC services based on the MAC address IP address user name user VLAN

ID access mode or interface number

NOTE

To ensure that you can diagnose the entire DHCP service process create a diagnosis object based on theMAC address You can run the trace object mac-address mac-address [ output command-line | file file-name | syslog-server syslog-server-ip ] command to create a diagnosis object for the DHCP serviceService diagnosis supports only common AAA users



8988



Prerequisites

Service diagnosis has been enabled using the trace enable command

Precautions

If a diagnosis object is created based on the MAC address or IP address various serviceprocesses can be diagnosed generally If a diagnosis object is created based on otherparameters service diagnosis may fail to be performed because the parameters may not beobtained in service processes Therefore you are advised to create a diagnosis object based onthe MAC address or IP address

The diagnosis output file cannot exceed 1 MB The excessive diagnosis information is notrecorded

You can run the undo trace object command to delete diagnosis objects in any of thefollowing modesl Delete diagnosis objects based on the object attributes Run the undo trace object

mac-address mac-address | ip-address ip-address [ vpn-instance vpn-instance-name ]| interface interface-type interface-number | user-vlan user-vlan-id [ qinq-vlan qinq-vlan-id ] | user-name user-name | access-mode dot1x | mac-authen | portal | wlan [ output command-line | file file-name | syslog-server syslog-server-ip ]command For example diagnosis objects 1 (1010101) and 2 (1010101+0025-9efb-be78) have been created To delete diagnosis objects based on the IP address run theundo trace object ip-address 1010101 command Diagnosis objects 1 and 2 aredeleted

l Delete diagnosis objects based on the object ID Run the undo trace object service-object-id command to delete a specified diagnosis object You can view the object IDusing the display trace object command

l Delete all diagnosis objects using the undo trace object all command

Example

Create a diagnosis instance on the interface with the IP address of 1010101

ltHUAWEIgt system-view[HUAWEI] trace object ip-address 1010101

Related Topics1673 display trace object1676 trace enable


Function

The trace syslog source command sets the source interface from which the device exportsdiagnosis information to a log server

The undo trace syslog source command cancels the configuration of the source interfacefrom which the device exports diagnosis information to a log server

By default no interface is specified to export diagnosis information to the log server



8989



Format

trace syslog source interface-type interface-number

undo trace syslog source

Parameters


interface-type interface-number Specifies the type and number of an interface -

Views

System view

Default Level


Usage Guidelines

Usage scenario

After you specify an interface for exporting diagnosis information to a log server the systemspecifies the IP address of this interface as the source IP address of service diagnosis packetsIn this way the log server can identify the source of diagnosis information

Prerequisites

The device has been configured to export diagnosis information to a log server using the traceobject command

Precautions

The trace syslog source command is not recorded in the configuration file After the devicerestarts the configured source interface for exporting diagnosis information is invalid To setthe source interface run the trace syslog source command again

Example

Set VLANIF100 as the source interface for exporting diagnosis information to the logserver

ltHUAWEIgt system-view[HUAWEI] trace syslog source vlanif 100




8990



168 Mirroring Configuration CommandsNOTE

The device supports the mirroring function which is mainly used for network monitoring and faultmanagement and may use user communication information Huawei will not collect or save usercommunication information independently You must use this function in compliance with applicablelaws and regulations Ensure that your customers privacy is protected when you are using or savingcommunication information


FunctionThe display observe-port command displays the observing port configuration

Formatdisplay observe-port

ParametersNone

ViewsAll views



Example Display the observing port configuration

ltHUAWEIgt display observe-port ---------------------------------------------------------------------- Index 1 Untag-packet No Interface GigabitEthernet001 Vlan 10 ----------------------------------------------------------------------



8991



Table 16-65 Description of the display observe-port command output

Item Description

Index Index of an observing port This parameteris configured using the 1686 observe-port(local observing port) or 1687 observe-port (remote observing port) command

Untag-packet Whether to remove VLAN tags of mirroredpackets This parameter is configured usingthe 1686 observe-port (local observingport) commandNOTE

VLAN tags of mirrored packets can be removedonly when local observing ports are configuredon an S5720HI Each mirrored packet can haveat most two VLAN tags removed

Interface Observing ports configured one by oneThis parameter is configured using the1686 observe-port (local observing port)or 1687 observe-port (remote observingport) command

Vlan ID of the VLAN to which an observing portbelongs This parameter is configured usingthe 1687 observe-port (remote observingport) command


Function

The display port-mirroring command displays the mirroring configuration

Format

display port-mirroring

Parameters

None

Views

All views

Default Level

1 Monitoring level



8992




Example Display the mirroring configuration

ltHUAWEIgt display port-mirroring ---------------------------------------------------------------------- Observe-port 1 GigabitEthernet002 ---------------------------------------------------------------------- Port-mirror ---------------------------------------------------------------------- Mirror-port Direction Observe-port ---------------------------------------------------------------------- 1 GigabitEthernet0015 Inbound Observe-port 1 ---------------------------------------------------------------------- Stream-mirror ---------------------------------------------------------------------- Behavior Direction Observe-port ---------------------------------------------------------------------- b1 - Observe-port 1 ---------------------------------------------------------------------- Vlan-mirror ---------------------------------------------------------------------- Mirror-vlan Direction Observe-port ---------------------------------------------------------------------- 10 Inbound Observe-port 1 ---------------------------------------------------------------------- Mac-mirror ---------------------------------------------------------------------- Mirror-mac Vlan Direction Observe-port ---------------------------------------------------------------------- 0001-0001-0001 10 Inbound Observe-port 1 ----------------------------------------------------------------------

Table 16-66 Description of the display port-mirroring command output

Item Description

Port-mirror Port mirroring configuration

Mirror-port Mirrored port This parameter is configuredusing the 1688 port-mirroring toobserve-port command

Direction Direction of mirrored packetsl Inboundl Outbound

Observe-port Observing port to which mirrored packetsare sent This parameter is configured usingthe 1686 observe-port (local observingport) or 1687 observe-port (remoteobserving port) command

Stream-mirror Traffic mirroring configuration



8993



Item Description

Behavior Traffic behavior of traffic mirroringl In MQC-based traffic mirroring this

parameter is configured using the 1685mirroring to observe-port (trafficbehavior view) command

l In ACL-based traffic mirroring thisparameter is configured using the 1589traffic-mirror (system view) or 1588traffic-mirror (interface view)command

Vlan-mirror VLAN mirroring configuration

Mirror-vlan VLAN ID in VLAN mirroring Thisparameter is configured using the 1684mirroring to observe-port (VLAN view)command

Mac-mirror MAC address mirroring configuration

Mirror-mac MAC address in MAC address mirroringThis parameter is configured using the1683 mac-mirroring command

Vlan VLAN in which MAC address mirroring isused

1683 mac-mirroring

FunctionThe mac-mirroring command copies packets with a specified MAC address to observingports

The undo mac-mirroring command cancels copying packets with a specified MAC addressto observing ports

By default packets with a specified MAC address are not copied to observing ports

NOTE


Formatmac-mirroring mac-address to observe-port observe-port-index inbound

undo mac-mirroring mac-address [ to observe-port observe-port-index ] inbound



8994



Parameters


mac-address Specifies the MAC addressof mirrored packets

The value is in H-H-Hformat where H is ahexadecimal number of 1 to4 digits




-

Views

VLAN view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

In MAC address mirroring you can run the mac-mirroring command to copy packetsmatching a specified source or destination MAC address in a VLAN to observing ports

Prerequisites


Precautions

Currently in MAC address mirroring only the packets that are received by all the active portsin a VLAN and contain a specified MAC address can be copied to observing ports

Example

Copy inbound packets of which the source or destination MAC address is 0000-0000-0001on the active ports in VLAN 3 to observing ports with index 1




8995



[HUAWEI] vlan 3[HUAWEI-vlan3] mac-mirroring 0000-0000-0001 to observe-port 1 inbound



FunctionThe mirroring to observe-port command copies packets on all the active ports in a VLAN toobserving ports

The undo mirroring command cancels copying packets on all the active ports in a VLAN toobserving ports

By default packets on all the active ports in a VLAN are not copied to observing ports

NOTE


Formatmirroring to observe-port observe-port-index inbound

undo mirroring [ to observe-port observe-port-index ] inbound





-

ViewsVLAN view




8996




In VLAN mirroring you can run the mirroring to observe-port command to copy packetson all the active ports in a specified VLAN to observing ports

Prerequisites


Precautions

Currently in VLAN mirroring only the packets that are received by all the active ports in aVLAN can be copied to observing ports

Example Copy inbound packets on the active ports in VLAN 10 to observing ports with index 1

ltHUAWEIgt system-view[HUAWEI] observe-port 1 interface gigabitethernet 001[HUAWEI] vlan 10[HUAWEI-vlan10] mirroring to observe-port 1 inbound



FunctionThe mirroring to observe-port command copies traffic matching rules to observing ports

The undo mirroring command cancels copying traffic matching rules to observing ports

By default traffic matching rules is not copied to observing ports

Formatmirroring to observe-port observe-port-index

undo mirroring



8997



Parameters



The value is an integer Thevalue ranges from 1 to 8 onan S5720EI S5720HIS6720S-EI or S6720EI Thevalue is 1 on an S1720GFRS2720 S2750 S5700LIS5700S-LI S5710-X-LIS5720S-SI or S5720SI

Views

Traffic behavior view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

In traffic mirroring you can run the mirroring to observe-port command to configure a copytraffic matching rules to specified observing ports

Prerequisites


Precautions

If both the alarm of IP packet check and traffic mirroring are configured on the S5700S-28X-LI-AC S5700S-52X-LI-AC S5710-X-LI S5720S-SI and S5720SI only one function cantake effect

Example

Copy traffic matching rules to observing ports with index 1

ltHUAWEIgt system-view[HUAWEI] observe-port 1 interface gigabitethernet 001[HUAWEI] traffic behavior tb1[HUAWEI-behavior-tb1] mirroring to observe-port 1




8998




FunctionThe observe-port command configures local observing ports

The undo observe-port command deletes local observing ports

By default no local observing ports are configured

Formatobserve-port [ observe-port-index ] interface interface-type interface-number [ untag-packet ] (single configuration)

observe-port [ observe-port-index ] interface-range interface-type interface-number [ tointerface-type interface-number ] amplt1-ngt [ untag-packet ] (batch configuration notsupported by S1720GFR S2720 S2750 S5700LI S5700S-LI S5710-X-LI S5720S-SI andS5720SI n in amplt1-ngt is 4 on an S5720EI S6720S-EI or S6720EI and 8 on an S5720HI)



Parameters


observe-port-index

Specifies the index of observing ports The value is an integer Thevalue ranges from 1 to 8 on anS5720EI S5720HI S6720S-EI or S6720EI The value is 1on an S1720GFR S2720S2750 S5700LI S5700S-LIS5710-X-LI S5720S-SI orS5720SI


Specifies the type and number of aninterface

-

add Adds observing ports to the observingports configured in a batch

-

delete Deletes observing ports from theobserving ports configured in a batch

-



8999




untag-packet Removes VLAN tags of mirroredpackets

NOTEThis parameter is supported only on anS5720HI Each mirrored packet can have atmost two VLAN tags removed

-

ViewsSystem view



When an observing port is directly connected to a monitoring host you can run the observe-port command to configure a local observing port Observing ports can be configured one byone or in a batch The single configuration and batch configuration modes can be usedsimultaneously If multiple observing ports are configured in a batch these observing portsare bound to the same mirrored port Therefore batch configuration is often used to simplifythe configuration of 1N mirroring

Precautions







Example Configure GigabitEthernet001 as a local observing port



9000




Configure GigabitEthernet001 through GigabitEthernet003 as local observing ports in abatchltHUAWEIgt system-view[HUAWEI] observe-port 1 interface-range gigabitethernet 001 to gigabitethernet 003

Related Topics1681 display observe-port1687 observe-port (remote observing port)


Function

The observe-port command configures remote observing ports

The undo observe-port command deletes remote observing ports

By default no remote observing ports are configured

Format

observe-port [ observe-port-index ] interface interface-type interface-number vlan vlan-id(Layer 2 remote observing port configured one by one)

observe-port [ observe-port-index ] interface-range interface-type interface-number [ tointerface-type interface-number ] amplt1-ngt vlan vlan-id (Layer 2 remote observing portsconfigured in a batch not supported by S1720GFR S2720 S2750 S5700LI S5700S-LIS5710-X-LI S5720S-SI and S5720SI n in amplt1-ngt is 4 on an S5720EI S6720S-EI orS6720EI and 8 on an S5720HI)



Parameters


observe-port-index


The value is an integer The valueranges from 1 to 8 on an S5720EIS5720HI S6720S-EI or S6720EIThe value is 1 on an S1720GFRS2720 S2750 S5700LI S5700S-LI S5710-X-LI S5720S-SI orS5720SI



-



9001




add Adds observing ports to theobserving ports configured in abatch

-

delete Deletes observing ports from theobserving ports configured in abatch

-

vlan vlan-id Specifies the VLAN IDencapsulated into mirroredpackets


Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

In remote mirroring a monitoring device and monitored device where an observing portresides are connected through a Layer 2 network The monitored device adds a specifiedVLAN tag to mirrored packets and then the observing port broadcasts the mirrored packets ina specified VLAN so that the mirrored packets can be sent to the monitoring device

Observing ports can be configured one by one or in a batch The single configuration andbatch configuration modes can be used simultaneously If multiple observing ports areconfigured in a batch these observing ports are bound to the same mirrored port Thereforebatch configuration is often used to simplify the configuration of 1N mirroring

Precautions







9002





Example

Configure GigabitEthernet001 as a Layer 2 remote observing port and bind the port toVLAN 10

ltHUAWEIgt system-view[HUAWEI] observe-port 1 interface gigabitethernet 001 vlan 10

Configure GigabitEthernet001 through GigabitEthernet003 as Layer 2 remote observingports in a batch and bind these ports to VLAN 10ltHUAWEIgt system-view[HUAWEI] observe-port 2 interface-range gigabitethernet 001 to gigabitethernet 003 vlan 10

Related Topics1681 display observe-port1686 observe-port (local observing port)


Function

The port-mirroring to observe-port command copies packets on a mirrored port toobserving ports

The undo port-mirroring command cancels copying packets on a mirrored port to observingports

By default packets on a mirrored port are not copied to observing ports

Format

port-mirroring to observe-port observe-port-index both | inbound | outbound

undo port-mirroring [ to observe-port observe-port-index ] both | inbound | outbound

Parameters


observe-port-index


The value is an integer The valueranges from 1 to 8 on an S5720EIS5720HI S6720S-EI or S6720EIThe value is 1 on an S1720GFRS2720 S2750 S5700LI S5700S-LIS5710-X-LI S5720S-SI orS5720SI



9003




both Copies inbound and outboundpackets on a mirrored port toobserving ports

-

inbound Copies inbound packets on amirrored port to observing ports

-

outbound Copies outbound packets on amirrored port to observing ports

-

Views

MultiGE interface view Ethernet interface view GE interface view XGE interface view40GE interface view Eth-Trunk interface view port group view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

In port mirroring you can run the port-mirroring to observe-port command to copy packetsthat pass through a mirrored port to specified observing ports

Prerequisites


Precautions

To prevent mirrored packets from being lost ensure that mirrored and monitoring ports havethe same port type and bandwidth

Both Ethernet ports and Eth-Trunks can be configured as mirrored ports If an Eth-Trunk isconfigured as a mirrored port its member ports cannot be configured as observing ports

Example

Configure port mirroring for inbound packets on GigabitEthernet001

ltHUAWEIgt system-view[HUAWEI] observe-port 1 interface gigabitethernet 002[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] port-mirroring to observe-port 1 inbound




9004



169 Packet Capture Configuration CommandNOTE

Based on your requirements to detect failures in telecom transmission this feature may collect or storesome communication information about specific customers Huawei cannot offer services to collect orstore this information unilaterally Before enabling the function ensure that it is performed within theboundaries permitted by applicable laws and regulations Effective measures must be taken to ensurethat information is securely protected

1691 capture-packet

Function

The capture-packet command captures service packets matching specified rules displayscaptured packet information on the terminal

Format

capture-packet interface interface-type interface-number | acl acl-number [ vlan vlan-id | cvlan cvlan-id ] destination terminal [ car cir car-value | time-out time-out-value |packet-num number | packet-len length | total-packet ]

NOTE

Only S5720EI S5720HI S6720EI and S6720S-EI support the car cir car-value parameter OnlyS5720EI S5720HI S6720EI and S6720S-EI capture packets based on inner VLAN IDs that is thedevice supports the cvlan cvlan-id parameter

Parameters



Captures packets on aspecified interfacel interface-type specifies



-





cvlan cvlan-id Captures packets with aspecified inner VLAN ID



-



9005





-

car cir car-value Specifies the rate at whichpackets are captured

The value is an integer thatranges from 8 to 256 inkbits The default value is64 kbits


The value is an integer thatranges from 1 to 300 inseconds By default thetimeout period is 60s




The value is an integer thatranges from 20 to 1518 inbytes The default value is64 bytes


-

ViewsSystem view



If an error occurs in service traffic forwarding (for example the traffic status does not matchthe traffic model) it is recommended that you configure the device to capture service packetsfor analysis so that the device can quickly identify invalid packets This function ensurescorrect data transmission on the network

Precautions


The device can capture only incoming packets and cannot capture outgoing packets



9006



Before using the capture-packet command again wait until the last command execution iscomplete

The system limits the rate of captured packets The default rate limit is 64 kbits If the rate ofpackets exceeds the limit some packets may be discarded

The device cannot capture the packets of BFD 8021ag and VBST

When an S1720GFR S2720 S2750EI S5700LI S5700S-LI S5710-X-LI S5720SI orS5720S-SI discards the packets that it cannot forward packets may not be captured in somesituations It is recommended that you obtain packets in other ways such as mirroring

Example

Capture packets on the interface GigabitEthernet001 and display them on the terminal

ltHUAWEIgt system-view[HUAWEI] capture-packet interface gigabitethernet 001 destination terminal[HUAWEI] Packet 1 ------------------------------------------------------- 01 80 c2 00 00 00 00 e0 09 87 78 90 81 00 00 01 00 69 42 42 03 00 00 03 02 7c 80 00 00 e0 09 87 78 90 00 00 00 00 80 00 00 e0 09 87 78 90 80 23 00 00 14 00 02 00 0f 00 00 00 40 00 72 67 31 00 ------------------------------------------------------- Packet 2 ------------------------------------------------------- 01 80 c2 00 00 00 00 e0 09 87 78 90 81 00 00 01 00 69 42 42 03 00 00 03 02 7c 80 00 00 e0 09 87 78 90 00 00 00 00 80 00 00 e0 09 87 78 90 80 23 00 00 14 00 02 00 0f 00 00 00 40 00 72 67 31 00 -------------------------------------------------------

------------------packet getting report----------------------- file NULL packets getting interface GigabitEthernet001 acl - vlan - cvlan - car 64kbps timeout 60s packets 100 (expected) 0 (actual) length 64 (expected) -------------------------------------------------------

Table 16-67 Description of the capture-packet command output

Item Description


packets getting Interface where packets are captured

acl ACL number






9007



Item Description





FunctionThe capture-packet cpu command captures packets sent to the CPU

Format

capture-packet cpu [ vlan vlan-id | acl acl-number ] destination terminal [ time-out time-out-value | packet-num number | packet-len length | total-packet ]







-


-


The value of time-out-valueis an integer that rangesfrom 1 to 300 in secondsBy default the timeoutperiod is 60s


The value of number is aninteger that ranges from 1 to1000 The default value is100



9008





The value of length is aninteger that ranges from 20to 1518 in bytes Thedefault value is 64 bytes


-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

When a CPU fault occurs such as the CPU usage is high configure the packet capturefunction to capture packets sent to the CPU for analysis This allows the device to processinvalid packets in time ensuring that the CPU works properly

Precautions


Before using the capture-packet cpu command again wait until the last command executionis complete

When the CPU usage is above 80 executing this command will keep the CPU usageincreasing

Example

Capture the packets to be sent to the CPU and display them on the terminalltHUAWEIgt system-view[HUAWEI] capture-packet cpu destination terminal [HUAWEI] Packet 1 ------------------------------------------------------- 01 80 c2 00 00 0e 00 e0 09 87 78 90 81 00 00 01 88 cc 02 07 04 00 e0 09 87 78 90 04 16 05 47 69 67 61 62 69 74 45 74 68 65 72 6e 65 74 34 2f 30 2f 32 36 06 02 00 78 08 15 47 69 67 61 62 69 74 ------------------------------------------------------- Packet 2 ------------------------------------------------------- 01 80 c2 00 00 0e 00 e0 09 87 78 90 81 00 00 01 88 cc 02 07 04 00 e0 09 87 78 90 04 16 05 47 69 67 61 62 69 74 45 74 68 65 72 6e 65 74 34 2f 30 2f 32 36 06 02 00 78 08 15 47 69 67 61 62 69 74



9009



------------------------------------------------------- ------------------packet getting report----------------------- file NULL packets getting cpu acl - vlan - cvlan - car -- timeout 60s packets 100 (expected) 0 (actual) length 64 (expected) -------------------------------------------------------

Table 16-68 Description of the capture-packet cpu command output

Item Description


packets getting The system captures the packets to be sent to the CPU

acl ACL number







1610 NetStream Configuration CommandsNOTE

The NetStream function conforms to IETF RFC3954 For security risks see IETF RFC3954 Thisfunction involves analyzing the communications information of terminal customers Before enabling thefunction ensure that it is performed within the boundaries permitted by applicable laws and regulationsEffective measures must be taken to ensure that information is securely protected

Only the S5720HI supports NetStream


Function

The collect counter command allows the flexible flow statistics exported to the NetStreamCollector (NSC) to contain the number of bytes and packets

The undo collect counter command restores the default setting

By default the flexible flow statistics exported to the NSC do not contain the number of bytesor packets



9010



Formatcollect counter bytes | packets

undo collect counter bytes | packets


bytes Indicates that the flexibleflow statistics exported toNSC contain the number ofbytes

-

packets Indicates that the flexibleflow statistics exported toNSC contain the number ofpackets

-

ViewsFlexible flow statistics template view



To obtain richer flow statistics configure whether flexible flow statistics contain the numberof bytes and packets

Prerequisites


Precaution


Example Configure the flexible flow statistics template record1 to export the flexible flow statisticscontaining the number of packets to the NSC

ltHUAWEIgt system-view[HUAWEI] ip netstream record record1[HUAWEI-record-record1] collect counter packets




9011




Function

The collect interface command allows the flexible flow statistics exported to the NSC tocontain the indexes of inbound and outbound interfaces

The undo collect interface command restores the default setting

By default the flexible flow statistics exported to the NSC do not contain the index ofinbound or outbound interface

Format

collect interface input | output

undo collect interface input | output

Parameters


input Indicates that the flexibleflow statistics exported tothe NSC contain the indexof inbound interface

-

output Indicates that the flexibleflow statistics exported tothe NSC contain the indexof outbound interface

-

Views


Default Level

3 Management level

Usage Guidelines

Usage Scenario

To obtain richer flow statistics configure whether flexible flow statistics exported to the NSCcontain indexes of inbound and outbound interfaces

Prerequisites


Precaution



9012




Example

Configure the flexible flow statistics template record1 to export the flexible flow statisticscontaining the inbound interface index to the NSC

ltHUAWEIgt system-view[HUAWEI] ip netstream record record1[HUAWEI-record-record1] collect interface input



Function

The display ip netstream record command displays the configuration of a flexible flowstatistics template

Format

display ip netstream record all | name record-name


all Displays configurations ofall flexible flow statisticstemplates

-

name record-name Displays the configurationof a flexible flow statisticstemplate specified byrecord-name

NOTEThe parameter record-name isdetermined by the templatename configured using the ipnetstream record command

Views

All views

Default Level

3 Management level

Usage Guidelines

None



9013



Example Display the configuration of the flexible flow statistics template test0

ltHUAWEIgt display ip netstream record name test0ip netstream record test0 match ip source-address match ip destination-address

Table 16-69 Description of the display ip netstream record command output

Item Description

ip netstream record test0 The flexible flow statistics template is test0

match ip source-address According to the template test0 flows are aggregatedbased on the source IP address This field is configuredusing the match ip command

match ip destination-address According to the template test0 flows are aggregatedbased on the destination IP address This field isconfigured using the match ip command



FunctionThe display ip netstream statistics command displays the NetStream flow statistics

Formatdisplay ip netstream statistics slot slot-id



ViewsAll views




9014




Example Display the NetStream flow statistics in slot 0

ltHUAWEIgt display ip netstream statistics slot 0 =====Netstream statistics===== OriginFlexible ingress entries 572 OriginFlexible ingress packets 56122 OriginFlexible ingress octets 6762976 OriginFlexible egress entries 57 OriginFlexible egress packets 3588 OriginFlexible egress octets 394680 OriginFlexible total entries 629 Handle origin entries 620 Handle As aggre entries 12 Handle ProtPort aggre entries 11 Handle SrcPrefix aggre entries 10 Handle DstPrefix aggre entries 15 Handle Prefix aggre entries 7 Handle AsTos aggre entries 6 Handle ProtPortTos aggre entries 5 Handle SrcPreTos aggre entries 5 Handle DstPreTos aggre entries 4 Handle PreTos aggre entries 1 Record test handle entries 0

Table 16-70 Description of the display ip netstream statistics command output

Item Description

OriginFlexible ingress entries Total number of incoming original flows or flexibleflows

OriginFlexible ingress packets Total number of packets in incoming original flows orflexible flows

OriginFlexible ingress octets Total number of bytes in incoming original flows orflexible flows

OriginFlexible egress entries Total number of outgoing original flows or flexibleflows

OriginFlexible egress packets Total number of packets in outgoing original flows orflexible flows

OriginFlexible egress octets Total number of bytes in outgoing original flows orflexible flows

OriginFlexible total entries Total number of original flows or flexible flows

Handle origin entries Number of processed incoming and outgoing originalflows

Handle As aggre entries Number of processed incoming and outgoing ASaggregation flows



9015



Item Description

Handle ProtPort aggre entries Number of processed incoming and outgoing protocol-port aggregation flows

Handle SrcPrefix aggre entries Number of processed incoming and outgoing source-prefix aggregation flows

Handle DstPrefix aggre entries Number of processed incoming and outgoingdestination-prefix aggregation flows

Handle Prefix aggre entries Number of processed incoming and outgoing prefixaggregation flows

Handle AsTos aggre entries Number of processed incoming and outgoing AS-ToSaggregation flows

Handle ProtPortTos aggreentries

Number of processed incoming and outgoing protocol-port-ToS aggregation flows

Handle SrcPreTos aggre entries Number of processed incoming and outgoing source-prefix-ToS aggregation flows

Handle DstPreTos aggre entries Number of processed incoming and outgoingdestination-prefix-ToS aggregation flows

Handle PreTos aggre entries Number of processed incoming and outgoing prefix-ToSaggregation flows

Record test handle entries Number of flows processed using the flexible flowstatistics template test


FunctionThe display netstream command displays the NetStream configurations

Formatdisplay netstream all | global | interface interface-type interface-number



9016



Parameters


all Displays all the NetStreamconfigurations includingl NetStream




l NetStreamconfigurations in theinterface view

-

global Displays the globalNetStream configurationsincludingl NetStream




-


Displays the NetStreamconfigurations on aspecified interfaceThe parameter interface-type interface-numberspecifies the interface typeand number

-

Views

All views

Default Level

3 Management level



9017



Usage GuidelinesThis command displays the NetStream configurations for both IPv4 and IPv6 flows

Example Display all the NetStream configurations

ltHUAWEIgt display netstream allsystem ip netstream export version 9 ip netstream export source 10111 ip netstream export host 10002 6000 ip netstream export host 10555 6000 ipv6 netstream export version 9 ipv6 netstream export host 10003 6000 ip netstream record test ip netstream aggregation destination-prefix enable export version 9 ip netstream aggregation protocol-port export version 9 slot 0 GigabitEthernet001 ip netstream inbound

Table 16-71 Description of the display netstream all command output

Item Description

ip netstream export version version The field version indicates the version of theexported packets carrying IPv4 originalflow statistics This field is displayed onlywhen the 161019 ip netstream exportversion command has been executed If theversion retains the default setting this fieldis not displayed


The field ip-address indicates thedestination address of the exported packetscarrying IPv4 flow statistics and port-number is the UDP port This field isdisplayed only when the 161016 ipnetstream export host command has beenexecuted in the system view

ip netstream export source ip-address The field ip-address indicates the sourceaddress of the exported packets carryingIPv4 flow statistics This field is displayedonly when the 161018 ip netstreamexport source command has been executedIf the source address is not specified theoutbound interface IP address is used



9018



Item Description

ipv6 netstream export version version The field version indicates the version of theexported packets carrying IPv6 originalflow statistics This field is displayed onlywhen the 161029 ipv6 netstream exportversion command has been executed If theversion retains the default setting this fieldis not displayed


The field ip-address indicates thedestination address of the exported packetscarrying IPv6 flow statistics and port-number is the UDP port This field isdisplayed only when the 161026 ipv6netstream export host command has beenexecuted in the system view

ip netstream record Name of the flexible flow statisticstemplate

ip netstream aggregation destination-prefix Destination-prefix aggregation method Thisfield is displayed only when the 161015 ipnetstream aggregation command has beenexecuted to set the aggregation methodCurrently the following aggregationmethods are supportedl as AS aggregationl as-tos AS-ToS aggregationl destination-prefix destination-prefix

aggregationl destination-prefix-tos destination-

prefix-ToS aggregationl prefix prefix aggregationl prefix-tos prefix-ToS aggregationl protocol-port protocol-port aggregationl protocol-port-tos protocol-port-ToS

aggregationl source-prefix source-prefix aggregationl source-prefix-tos source-prefix-ToS

aggregation

enable The destination-prefix aggregation methodis enabled This field is displayed only whenthe enable command has been executed inthe aggregation view



9019



Item Description

export version version The field version indicates the versionformat of the exported packets carryingaggregation flow statistics If the versionretains the default setting this field is notdisplayed This field is displayed only whenthe 161013 export version command hasbeen executed

ip netstream inbound The flow statistics function is enabled forincoming packets on GE001 This field isdisplayed only when the 161014 ipnetstream command has been executed inthe interface view

Related Topics161015 ip netstream aggregation161016 ip netstream export host161019 ip netstream export version161018 ip netstream export source161026 ipv6 netstream export host161029 ipv6 netstream export version161028 ipv6 netstream export source161021 ip netstream sampler (interface view)161012 enable


FunctionThe display netstream cache ip aggregation command displays details about IPv4aggregation flow statistics on a device

Formatdisplay netstream cache ip aggregation as | as-tos | destination-prefix | destination-prefix-tos | prefix | prefix-tos | protocol-port | protocol-port-tos | source-prefix | source-prefix-tos slot slot-id



9020



Parameters


as Specifies the AS aggregation It classifies flows basedon source AS number destination AS numberinbound interface index and outbound interfaceindex

-

as-tos Specifies the AS-ToS aggregation It classifies flowsbased on source AS number destination AS numberinbound interface index outbound interface indexand ToS

-

destination-prefix

Specifies the destination-prefix aggregation Itclassifies flows based on destination AS numberdestination mask length destination prefix andoutbound interface index

-

destination-prefix-tos

Specifies the destination-prefix-ToS aggregation Itclassifies flows based on destination AS numberdestination mask length destination prefix outboundinterface index and ToS

-

prefix Specifies the prefix aggregation It classifies flowsbased on source AS number destination AS numbersource mask length destination mask length sourceprefix destination prefix inbound interface indexand outbound interface index

-

prefix-tos Specifies the prefix-ToS aggregation It classifiesflows based on source AS number destination ASnumber source mask length destination mask lengthsource prefix destination prefix inbound interfaceindex outbound interface index and ToS

-

protocol-port Specifies the protocol-port aggregation It classifiesflows based on protocol number source port anddestination port

-

protocol-port-tos

Specifies the protocol-port-ToS aggregation Itclassifies flows based on protocol number sourceport destination port ToS inbound interface indexand outbound interface index

-

source-prefix Specifies the source-prefix aggregation It classifiesflows based on source AS number source masklength source prefix and inbound interface index

-

source-prefix-tos

Specifies the source-prefix-ToS aggregation Itclassifies flows based on source AS number sourcemask length source prefix ToS and inboundinterface index

-

slot slot-id Specifies the slot ID The valuedepends on thedeviceconfiguration



9021



Views

All views

Default Level

3 Management level

Usage Guidelines

Usage Scenario

This command displays real-time statistics on IPv4 aggregation flows on the device

Precaution


Example

Display detailed statistics about flows aggregated based on protocol and port on the device

ltHUAWEIgt display netstream cache ip aggregation protocol-port slot 0Info The operation may take a long time Please wait for a moment or press Ctrl+C to abortNetStream cache information-------------------------------------------------------------------------------- Protocol SrcPort DstPort Direction Streams Packets Octets-------------------------------------------------------------------------------- 114 0 0 IN 200 50688 5271552--------------------------------------------------------------------------------

Table 16-72 Description of the display netstream cache ip aggregation command output

Item Description

Protocol Protocol number of packets

SrcPort Source port number of packets

DstPort Destination port number of packets


Streams Number of flows





9022




Function

The display netstream cache ip record command displays details about IPv4 flexible flowstatistics on a device

Format

display netstream cache ip record record-name [ inbound | outbound | destinationinterface interface-type interface-number | destination ip ip-address | destination port port-number | source interface interface-type interface-number | source ip ip-address | sourceport port-number | protocol protocol-type | tos tos-number ] slot slot-id [ verbose ]








-


-






-


-









-



9023



Views

All views

Default Level

3 Management level

Usage Guidelines

Usage Scenario


Precaution


Example


ltHUAWEIgt display netstream cache ip record record1 slot 0 verboseInfo The operation may take a long time Please wait for a moment or press Ctrl+C to abortNOTE L4 Info Source PortDestination PortProtocol TCP Flags Ack Flush Push Reset Syn UrgentNetStream cache information-------------------------------------------------------------------------------- SrcIP DstIP L4 Info DstAS Direction SrcIf DstIf TCP Flags SrcAS ToS NextHop BGPNextHop Octets Packets-------------------------------------------------------------------------------- 10112 10111 00114 -- IN GE005 -- 000000 -- 0 -- -- 4784 46--------------------------------------------------------------------------------

Table 16-73 Description of the display netstream cache ip record command output

Item Description

SrcIP Source IP address of packets

DstIP Destination IP address of packets






9024



Item Description





ToS ToS field of packets






Function

The display netstream cache ip origin command displays details about IPv4 original flowstatistics on a device

Format

display netstream cache ip origin [ inbound | outbound | destination interfaceinterface-type interface-number | destination ip ip-address | destination port port-number |source interface interface-type interface-number | source ip ip-address | source port port-number | protocol protocol-type | tos tos-number ] slot slot-id [ verbose ]

Parameters






-


-






9025






-


-









-

ViewsAll views




Precaution



ltHUAWEIgt display netstream cache ip origin slot 0 verboseInfo The operation may take a long time Please wait for a moment or press Ctrl+C to abortNOTE L4 Info Source PortDestination PortProtocol TCP Flags Ack Flush Push Reset Syn UrgentNetStream cache information-------------------------------------------------------------------------------- SrcIf SrcIPMask DstIPMask L4 Info ToS Direction SrcAS DstAS DstIf TCP Flags Octets Packets NextHop BGPNextHop



9026



-------------------------------------------------------------------------------- GE005 10112-- 10111-- 00114 0 IN -- -- -- 000000 5200 50 -- ----------------------------------------------------------------------------------

Table 16-74 Description of the display netstream cache ip origin command output

Item Description


SrcIPMask Source IP address and mask of packets

DstIPMask Destination IP address and mask of packets













FunctionThe display netstream cache ipv6 record command displays details about IPv6 flexible flowstatistics on a device

Formatdisplay netstream cache ipv6 record record-name [ inbound | outbound | destinationinterface interface-type interface-number | destination ipv6 ipv6-address | destination portport-number | source interface interface-type interface-number | source ipv6 ipv6-address |



9027



source port port-number | flowlabel flowlabel | protocol protocol-type | tos tos-number ] slot slot-id [ verbose ]








-



-






-


-











-

ViewsAll views




9028



Usage Guidelines

Usage Scenario


Precaution


Example


ltHUAWEIgt display netstream cache ipv6 record test slot 0 verboseInfo The operation may take a long time Please wait for a moment or press Ctrl+C to abortNOTE L4 Info Source PortDestination PortProtocol TCP Flags Ack Flush Push Reset Syn UrgentNetStream cache information-------------------------------------------------------------------------------- SrcIP SrcIf L4 Info DstIP DstIf ToS NextHop SrcAS DstAS BGPNextHop FlowLabel Direction TCP Flags Octets Packets-------------------------------------------------------------------------------- FEC08012000A01102 GE005 0059 FEC08012000C108101 -- 0 -- -- -- -- 0 IN 000000 232648 2237--------------------------------------------------------------------------------

Table 16-75 Description of the display netstream cache ipv6 record command output

Item Description

SrcIP Source IPv6 address of packets



DstIP Destination IPv6 address of packets


ToS ToS of packets





FlowLabel IPv6 flow label



9029



Item Description






Function

The display netstream cache ipv6 origin command displays details about IPv6 original flowstatistics on a device

Format

display netstream cache ipv6 origin [ inbound | outbound | destination interfaceinterface-type interface-number | destination ipv6 ipv6-address | destination port port-number | source interface interface-type interface-number | source ipv6 ipv6-address |source port port-number | flowlabel flowlabel | protocol protocol-type | tos tos-number ] slot slot-id [ verbose ]

Parameters






-



-






-


-



9030














-

ViewsAll views




Precaution



ltHUAWEIgt display netstream cache ipv6 origin slot 0 verboseInfo The operation may take a long time Please wait for a moment or press Ctrl+C to abortNOTE L4 Info Source PortDestination PortProtocol TCP Flags Ack Flush Push Reset Syn UrgentNetStream cache information-------------------------------------------------------------------------------- SrcIf TCP Flags SrcIPMask DstIf ToS DstIPMask L4 Info FlowLable NextHop SrcAS DstAS BGP NextHop Direction Octets Packets-------------------------------------------------------------------------------- GE005 000000 FEC08012000A01102-- -- 0 FEC08012000C108101--



9031



0059 0 -- -- -- -- IN 3821896 36749--------------------------------------------------------------------------------

Table 16-76 Description of the display netstream cache ipv6 origin command output

Item Description



SrcIPMask Source IPv6 address and mask of packets



DstIPMask Destination IPv6 address and mask of packets


FlowLable IPv6 flow label









Function

The display snmp-agent trap feature-name sindex all command displays the status of alltraps on the SINDEX module

Formatdisplay snmp-agent trap feature-name sindex all



9032



Parameters

None

Views

All views

Default Level

1 Monitoring level

Usage Guidelines

You can run the display snmp-agent trap feature-name sindex all command to check thestatus of all traps on the SINDEX module This status can be configured using the snmp-agent trap enable feature-name sindex command

Example

Display the status of all traps on the SINDEX module

ltHUAWEIgt display snmp-agent trap feature-name sindex all------------------------------------------------------------------------------ Feature name SINDEX Trap number 1 ------------------------------------------------------------------------------ Trap name Default switch status Current switch status hwNetStreamIndexUsedUp on on

Table 16-77 Description of the display snmp-agent trap feature-name sindex all commandoutput

Item Description

Feature name Name of the module that a trap message belongs




Current switch status Status of a trapl on The trap is enabledl off The trap is disabledThis status can be configured using the snmp-agent trapenable feature-name sindex command

hwNetStreamIndexUsedUp The NetStream interface indexes are all allocated



9033



Related Topics161037 snmp-agent trap enable feature-name sindex

161012 enable

Function

The enable command enables the aggregation function in the aggregation view

The undo enable command disables the aggregation function in the aggregation view

By default the aggregation function is disabled

Format

enable

undo enable

Parameters

None

Views


Default Level

3 Management level

Usage Guidelines

The enable command takes effect only in the NetStream aggregation view Flow statistics areexported according to the configured aggregation method only after you run the enablecommand in the aggregation view

Example

Enable destination address prefix aggregation

ltHUAWEIgt system-view[HUAWEI] ip netstream aggregation destination-prefix[HUAWEI-aggregation-dstpre] enable





9034



FunctionThe export version command configures the version of exported packets carryingaggregation flow statistics

The undo export version command restores the default setting

By default the aggregation flow statistics are exported in the version of V8

Formatexport version version

undo export version


version Specifies the versionnumber of exported packetscarrying aggregation flowstatistics

The value of version is set to8 or 9 The default is 8

ViewsNetStream aggregation view


Usage GuidelinesThe NDE exports NetStream flow statistics to the NSC The version of exported packets mustbe the same as that configured on the NSC so that the NSC can parse the exported packets



Example Set the version number of exported packets carrying aggregation flow statistics to V9

ltHUAWEIgt system-view[HUAWEI] ip netstream aggregation as[HUAWEI-aggregation-as] export version 9




9035



161014 ip netstream

FunctionThe ip netstream command enables IPv4 flow statistics collection on the inbound andoutbound interfaces

The undo ip netstream command restores the default setting


Formatip netstream inbound | outbound

undo ip netstream inbound | outbound


inbound Enables flow statisticscollection on the inboundinterface

-

outbound Enables flow statisticscollection on the outboundinterface

-




To export IPv4 flow statistics you must run the ip netstream command to enable the IPv4flow statistics collection function on the interface

Precautions

After the statistics collection function is enabled for IPv4 and IPv6 flows the statistics areindependent of each other

Currently the flow statistics collection function can be enabled only on the main interface

If the NetStream function is enabled on the main interface but you do not set a sampling ratiousing the 161021 ip netstream sampler (interface view) command the main interface uses



9036



the sampling ratio of 11000 If you set the sampling ratio the interface uses this samplingratio

Example

Enable the flow statistics collection function for the incoming IPv4 packets on GE001

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] ip netstream inbound

Related Topics161021 ip netstream sampler (interface view)


Function

The ip netstream aggregation command configures the aggregation method and displays theaggregation view

Format

ip netstream aggregation as | as-tos | destination-prefix | destination-prefix-tos | prefix |prefix-tos | protocol-port | protocol-port-tos | source-prefix | source-prefix-tos

Parameters


as Specifies the ASaggregation It classifiesflows based onl Source AS numberl Destination AS numberl Inbound interface indexl Outbound interface index

-

as-tos Specifies the AS-ToSaggregation It classifiesflows based onl Source AS numberl Destination AS numberl Inbound interface indexl Outbound interface indexl ToS

-



9037




destination-prefix Specifies the destination-prefix aggregation Itclassifies flows based onl Destination AS numberl Destination mask lengthl Outbound interface indexl Destination prefix

-

destination-prefix-tos Specifies the destination-prefix-ToS aggregation Itclassifies flows based onl Destination AS numberl Destination mask lengthl Destination prefixl ToSl Outbound interface index

-

prefix Specifies the prefixaggregation It classifiesflows based onl Source and destination



prefixesl Inbound interface indexl Outbound interface index

-

prefix-tos Specifies the prefix-ToSaggregation It classifiesflows based onl Source and destination



prefixesl ToSl Inbound interface indexl Outbound interface index

-



9038




protocol-port Specifies the protocol-portaggregation It classifiesflows based onl Protocol numberl Source port numberl Destination port number

-

protocol-port-tos Specifies the protocol-port-ToS aggregation Itclassifies flows based onl Protocol numberl Source port numberl Destination port numberl ToSl Inbound interface indexl Outbound interface index

-

source-prefix Specifies the source-prefixaggregation It classifiesflows based onl Source AS numberl Source mask lengthl Source prefixl Inbound interface index

-

source-prefix-tos Specifies the source-prefix-ToS aggregation Itclassifies flows based onl Source AS numberl Source mask lengthl Source prefixl ToSl Inbound interface index

-

ViewsSystem view





9039



NetStream aggregation groups the original flows with the same attributes together Theaggregation flow statistics collection and original flow statistics collection are different Theoriginal flow statistics collection is on the basis of sampled packets while the aggregationflow statistics collection is on the basis of original flows Therefore the aggregation flowstatistics collection generates less data

Follow-up Procedure

Run the enable command in the aggregation view to enable the device to export flowstatistics according to the configured aggregation method

Example

Configure the NetStream AS aggregation method

ltHUAWEIgt system-view[HUAWEI] ip netstream aggregation as[HUAWEI-aggregation-as]

Configure the NetStream destination-prefix aggregation method

ltHUAWEIgt system-view[HUAWEI] ip netstream aggregation destination-prefix[HUAWEI-aggregation-dstpre]

Related Topics161012 enable


Function

The ip netstream export host command configures the destination IP address and destinationUDP port number for the exported packets carrying IPv4 flow statistics

The undo ip netstream export host command deletes the configured destination IP addressand destination UDP port number for the exported packets carrying IPv4 flow statistics

By default no destination IP address and destination UDP port number are configured in thesystem view or aggregation view for the exported packets carrying IPv4 flow statistics

Format


undo ip netstream export host ip-address port-number

Parameters



-



9040




port-number Specifies the destinationUDP port number of theexported packets carryingIPv4 flow statistics


Views

System view NetStream aggregation view

Default Level

3 Management level

Usage Guidelines

Usage Scenario


Precautions

When you run the ip netstream export host command in the system view this commandconfigures the destination address for the exported packets carrying IPv4 original flowstatistics and IPv4 flexible flow statistics when you run this command in the aggregationview this command configures the destination address for the exported packets carrying IPv4aggregation flows The exported packets carrying aggregation flow statistics preferentially usethe destination address configured in the aggregation view If the destination address is notconfigured in the aggregation view the exported packets carrying aggregation flow statisticsuse the destination address configured in the system view

You can configure two destination addresses in the system view or aggregation view toimplement NSC backup To configure a third destination IP address run the undo netstreamexport ip host command to delete an existing one first otherwise the system displays amessage indicating that the maximum number of addresses is exceeded and the configurationfails

Example

Set the destination IP address for the exported packets carrying original flow statistics to10111 and UDP port number to 222

ltHUAWEIgt system-view[HUAWEI] ip netstream export host 10111 222

Set the destination IP address for the exported packets carrying aggregation flow statistics to10221 and UDP port number to 255

ltHUAWEIgt system-view[HUAWEI] ip netstream aggregation as[HUAWEI-aggregation-as] ip netstream export host 10221 255



9041





FunctionThe ip netstream export index-switch command sets the number of digits in the interfaceindex contained in an exported packet carrying IPv4 flow statistics

By default the number of digits in interface indexes is 16

Formatip netstream export index-switch index-switch

undo ip netstream export index-switch


index-switch Specifies the number ofdigits in the index of aspecified interface

The value is 16 or 32 Thedefault value is 16

ViewsSystem view



You can run the ip netstream export index-switch command to set the number of digits inthe interface index to 16 or 32

The number of digits in an interface index contained in exported packets must be the same asthe number of digits in an interface index that can be parsed by the NMS For example if theNMS can parse the 32-digit interface index set the number of digits in an interface indexcontained in exported packets to 32

Precautions

The number of digits in the interface index can be changed to 32 only when the NMSsupports 32-digit interface index If the number of digits in an interface index contained inexported packets is different from the number of digits in an interface index supported by theNMS the NMS cannot identify NetStream packets sent by the device



9042



This command is valid for V9 Before changing 16-digit interface indexes to 32-digitinterface indexes ensure that

l The version of exported packets of original flows is V9

l The version of exported packets carrying aggregation flow statistics is V9

When the 32-digit interface index is used the version of exported packets of original flowscannot be changed from V9 to V5 and the version of exported packets carrying aggregationflow statistics cannot be changed from V9 to V8

Example

Change the number of digits in the interface index contained in an exported packet carryingIPv4 flow statistics from 16 to 32

ltHUAWEIgt system-view[HUAWEI] ip netstream export version 9[HUAWEI] ip netstream export index-switch 32

Related Topics161019 ip netstream export version161013 export version


Function

The ip netstream export source command configures the source address for the exportedpackets carrying IPv4 flow statistics

The undo ip netstream export source command deletes the configured source address forthe exported packets carrying IPv4 flow statistics


Format

ip netstream export source ip-address

undo ip netstream export source

Parameters



The parameter must be setto an existing IP address onthe device



9043



ViewsSystem view NetStream aggregation view




Precautions

NetStream prefers the source IP address configured in the aggregation view If no sourceaddress is specified in an aggregation method the source address configured in the systemview is used

Example In the system view set the source address for the exported packets carrying IPv4 flowstatistics to 10111

ltHUAWEIgt system-view[HUAWEI] ip netstream export source 10111

In the aggregation view set the source address for the exported packets carrying IPv4 flowstatistics to 10222

ltHUAWEIgt system-view[HUAWEI] ip netstream aggregation as[HUAWEI-aggregation-as] ip netstream export source 10222


161019 ip netstream export version

FunctionThe ip netstream export version command configures the version number and AS option ofthe exported packets carrying IPv4 flow statistics

The undo ip netstream export version command restores the default setting

By default the version number of the exported packets carrying IPv4 original flow statistics is5 and no AS option is used The version number of the exported packets carrying IPv4flexible flow statistics is 9 Packets of V9 have no AS option and do not carry BGP next hopinformation

Formatip netstream export version version [ origin-as | peer-as ] [ bgp-nexthop ]



9044



undo ip netstream export version


version Specifies the versionnumber of exported packetscarrying IPv4 flow statistics

The value of version is set to5 or 9


-


-

bgp-nexthop Configures the statistics tocarry BGP next hopinformation Currently onlyV9 supports the exportedpackets carrying BGP nexthop information

-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario




Precautions

Only one version can be specified on a device The versions configured on all the devices onthe network must be the same as the version configured on the NMS

The AS option is used according to the actual situation of the AS configured on each deviceThe AS option affects only the packet statistics result but does not affect the flows The AS



9045



option is encapsulated in the AS option field carried in the NetStream packets sent to theNMS The exported packets of V5 do not support BGP next hop information

Example

Set the version of the exported packets carrying IPv4 flow statistics to V9 and AS option topeer-as

ltHUAWEIgt system-view[HUAWEI] ip netstream export version 9 peer-as



Function

The ip netstream record command creates a new flexible flow statistics template or displaysthe view of an existing flexible statistics template

The undo ip netstream record command deletes a specified flexible flow statistics template

By default no flexible flow statistics template exists

Format

ip netstream record record-name

undo ip netstream record record-name


record-name Specifies the name of theflexible flow statisticstemplate

The value is a string of 1 to32 case-insensitivecharacters without spacesThe name of the flexibleflow statistics templatecannot contain specialcharacters such as or

Views

System view

Default Level

3 Management level



9046




You need to create the flexible flow statistics template before exporting flexible flowstatistics

Precautions

A maximum of 16 flexible flow statistics templates can be configured on one device Toconfigure a third flexible flow statistics template run the undo ip netstream recordcommand to delete an existing one first

The flexible flow statistics template that has been applied to an interface cannot be modifiedor deleted To delete this flexible flow statistics template run the undo port ip netstreamrecord command on the interface and then modify or delete the template

Example Create the flexible flow statistics template named abc

ltHUAWEIgt system-view[HUAWEI] ip netstream record abc Info Creating the new record succeeded[HUAWEI-record-abc]

Related Topics161033 port ip netstream record16103 display ip netstream record


FunctionThe ip netstream sampler command configures the packet sampling function for IPv4packets on an interface

The undo ip netstream sampler command restores the default setting


Formatip netstream sampler fix-packets packet-interval inbound | outbound

undo ip netstream sampler [ fix-packets packet-interval ] inbound | outbound



9047



Parameters



Its value is an integer thatranges from 1 to 65535


-


-

Views


Default Level

3 Management level

Usage Guidelines

Usage Scenario

You can set an interval for sampling packets so that only statistics about sampled packets arecollected The statistics show the flow status on the entire network The sampling functionreduces NetStream impact on device performance

Precautions

You must run the ip netstream sampler command together with the 161014 ip netstreamcommand If you run only the ip netstream sampler command the command does not takeeffect

If you run the ip netstream sampler command multiple times in the same view only thelatest configuration takes effect

Example

Set the packet-based regular sampling ratio for the incoming packets on GE001 to 1200

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] ip netstream sampler fix-packets 1200 inbound[HUAWEI-GigabitEthernet001] ip netstream inbound

Related Topics161014 ip netstream




9048



FunctionThe ip netstream tcp-flag enable command configures the aging of NetStream trafficaccording to the FIN flag or the RST flag in the TCP packet header

The undo ip netstream tcp-flag enable command restores the default setting

By default NetStream flows are not aged according to the FIN or RST flag in the TCP packetheader

Formatip netstream tcp-flag enable

undo ip netstream tcp-flag enable

ParametersNone

ViewsSystem view



The FIN or RST flag in a TCP packet indicates that the TCP connection is terminated Whenreceiving a packet with the FIN or RST flag the device immediately ages the correspondingNetStream flow If the ip netstream tcp-flag enable command is not run NetStream flowsare aged by following other criteria for example inactive aging time or bytes overflow

Precautions


Only original flows can be aged according to the FIN or RST flag in the TCP packet header

Example Configure the aging of original flows according to the FIN or RST flag in the TCP packetheader

ltHUAWEIgt system-view[HUAWEI] ip netstream tcp-flag enable


FunctionThe ip netstream timeout active command configures the active flow aging time



9049



The undo ip netstream timeout active command restores the default setting

By default the active flow aging time is 200 seconds

Format

ip netstream timeout active active-interval

undo ip netstream timeout active

Parameters


active-interval Specifies the active agingtime

The value is an integer that ranges from 1 to300 in seconds The default is 200

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario


When the active time (from flow creation time to the current time) of a flow exceeds thespecified active aging time the flow is exported to the destination

To quickly detect the status of an active flow set the active time to a small value howeverthis setting increases the frequency at which NetStream packets are sent To reduce thefrequency at which NetStream packets are exported and improve statistics collectingefficiency set the active time to a large value

Precautions


Example

Set the active aging time to 240 secondsltHUAWEIgt system-view[HUAWEI] ip netstream timeout active 240




9050



Function

The ip netstream timeout inactive command configures the inactive aging time

The undo ip netstream timeout inactive command restores the default setting

By default the inactive aging time is 30 seconds

Format

ip netstream timeout inactive inactive-interval

undo ip netstream timeout inactive

Parameters


inactive-interval Specifies the inactive agingtime

The value is an integer thatranges from 1 to 300 inseconds The default is 30

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario


When the inactive time (from the last packet receiving time to the current time) of an originalor flexible flow exceeds the specified inactive aging time the flow is exported to thedestination

To quickly detect the status of an inactive flow set the inactive time to a small valuehowever this setting increases the frequency at which NetStream packets are sent To reducethe frequency at which NetStream packets are exported and improve statistics collectingefficiency set the inactive time to a large value

Precautions

The inactive aging time that is configured using the ip netstream timeout inactive commandapplies to both IPv4 and IPv6 flows




9051



Example

Set the inactive aging time to 20 seconds

ltHUAWEIgt system-view[HUAWEI] ip netstream timeout inactive 20


Function

The ipv6 netstream command enables IPv6 flow statistics collection on the inbound andoutbound interfaces

The undo ipv6 netstream command restores the default setting


Format

ipv6 netstream inbound | outbound

undo ipv6 netstream inbound | outbound


inbound Enables IPv6 flow statisticscollection on the inboundinterface

-

outbound Enables IPv6 flow statisticscollection on the outboundinterface

-

Views


Default Level

3 Management level

Usage Guidelines

Usage Scenario

To export IPv6 flow statistics you must run the ipv6 netstream command to enable IPv6flow statistics collection on the inbound interface

Precautions



9052



When you enable IPv6 flow statistics collection on the inbound interface enable statisticscollection on unicast and multicast packets

After statistics collection is enabled for IPv4 and IPv6 flows the statistics are independent ofeach other

Currently flow statistics collection can be enabled only on main interfaces

If statistics collection is enabled on an interface but you do not set a sampling ratio using the161030 ipv6 netstream sampler command the interface uses the sampling ratio of 11000If you have set the sampling ratio the interface uses this sampling ratio

Example

Enable statistics collection for the incoming IPv6 flows on GE001

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] ipv6 netstream inbound

Related Topics161030 ipv6 netstream sampler


Function

The ipv6 netstream export host command configures the destination IP address anddestination UDP port number for the exported packets carrying IPv6 flow statistics

The undo ipv6 netstream export host command deletes the configured destination IPaddress and destination UDP port number for the exported packets carrying IPv6 flowstatistics

By default no destination IP address or destination UDP port number is configured in thesystem view for the exported packets carrying IPv6 flow statistics

Format


undo ipv6 netstream export host ip-address port-number

Parameters



-



9053




port-number Specifies the destinationUDP port number of theexported packets


Views

System view




Precautions

The netstream export ipv6 host command configures the destination address for theexported packets carrying IPv6 original flows and flexible flows

You can configure two destination IP addresses to implement NSC backup To configure athird destination IP address run the undo ipv6 netstream export host command to delete anexisting one first otherwise the system displays a message indicating that the maximumnumber of addresses is exceeded and the configuration fails

Example Set the destination IP address for the exported packets carrying IPv6 original flows to10111 and UDP port number to 222

ltHUAWEIgt system-view[HUAWEI] ipv6 netstream export host 10111 222


FunctionThe ipv6 netstream export index-switch command sets the number of digits in the interfaceindex contained in an exported packet carrying IPv6 flow statistics

The undo ipv6 netstream export index-switch command restores the default setting

By default an interface index contains 16 digits

Formatipv6 netstream export index-switch index-switch



9054



undo ipv6 netstream export index-switch

Parameters


index-switch Specifies the digit of theinterface index

The value is an integer thatcan be 16 or 32 The defaultis 16

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

You can run the ipv6 netstream export index-switch command to set the number of digits inthe interface index to 16 or 32

Set the type of the interface index contained in exported packets the same as the type of theinterface index that can be parsed by the NMS For example if the NMS can parse the 32-digit interface index set the type of the interface index contained in exported packets to 32-digit interface index

Prerequisites

The interface index length in exported packets can be set to 32 bits only when the NMSsupports 32-bit interface index otherwise the NMS cannot identify the NetStream packets

Example

Change the interface index type of the exported packets carrying IPv6 flow statistics from16-digit to 32-digit

ltHUAWEIgt system-view[HUAWEI] ipv6 netstream export index-switch 32


Function

The ipv6 netstream export source command configures the source address for the exportedpackets carrying IPv6 flow statistics

The undo ipv6 netstream export source command deletes the configured source address forthe exported packets carrying IPv6 flow statistics



9055




Format

ipv6 netstream export source ip-address

undo ipv6 netstream export source



-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario


Example

In the system view set the source address for the exported packets carrying IPv6 flowstatistics to 10111

ltHUAWEIgt system-view[HUAWEI] ipv6 netstream export source 10111


Function

The ipv6 netstream export version command configures the version number and AS optionof the exported packets carrying IPv6 flow statistics

The undo ipv6 netstream export version command restores the default setting

By default the version number of the exported packets carrying IPv6 flow statistics is notspecified



9056



Format

ipv6 netstream export version version [ origin-as | peer-as ]

undo ipv6 netstream export version

Parameters


version Specifies the version ofexported packets

Only V9 is supported


-


-

Views

System view

Default Level

3 Management level

Usage Guidelines

Usage Scenario


Precautions

The AS option is used according to the actual situation of the AS configured on each deviceThe AS option affects only the packet statistics result but does not affect the flows The ASoption is encapsulated in the AS option field carried in the NetStream packets sent to theNMS

Example

Set the version of exported packets carrying IPv6 flow statistics to V9 and AS to peer-as

ltHUAWEIgt system-view[HUAWEI] ipv6 netstream export version 9 peer-as




9057



Function

The ipv6 netstream sampler command configures packet sampling for IPv6 packets on aninterface

The undo ipv6 netstream sampler command restores the default setting


Format

ipv6 netstream sampler fix-packets packet-interval inbound | outbound

undo ipv6 netstream sampler [ fix-packets packet-interval ] inbound | outbound





-


-

Views


Default Level

3 Management level

Usage Guidelines

Usage Scenario

You can set an interval for sampling packets so that only statistics about sampled packets arecollected The statistics show the flow status on the entire network The sampling functionreduces impact of NetStream on device performance

Precautions

You must run the ipv6 netstream sampler command together with the 161025 ipv6netstream command If you run only the ipv6 netstream sampler command the commanddoes not take effect

If you run the ipv6 netstream sampler command multiple times in the same view only thelatest configuration takes effect



9058



Example

Set the packet-based regular sampling interval for the incoming packets on GE001 to1200

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] ipv6 netstream inbound[HUAWEI-GigabitEthernet001] ipv6 netstream sampler fix-packets 1200 inbound

Related Topics161025 ipv6 netstream

161031 mask

Function

The mask command sets the aggregation mask length

The undo mask command restores the default setting

By default no aggregation mask is configured

Format

mask source | destination minimum mask-length

undo mask source | destination

Parameters


source Indicates the aggregation mask of the source address Itis used in the following aggregation methods prefixprefix-ToS source-prefix and source-prefix-ToS

-

destination Indicates the aggregation mask of the destinationaddress It is used in the following aggregation methodsprefix prefix-ToS destination-prefix or destination-prefix-ToS

-

mask-length Specifies the aggregation mask length The value is aninteger that rangesfrom 1 to 32

Views


Default Level

3 Management level



9059




The system uses the larger value between the set mask and the largest mask in the FIB tableIf the aggregation mask is not configured the system uses the mask in the FIB table foraggregation

Precaution

Aggregation masks are applied to six aggregation methods destination-prefix destination-prefix-tos prefix prefix-tos source-prefix and source-prefix-tos

Example Set the aggregation mask length in the source-prefix aggregation method to 24

ltHUAWEIgt system-view[HUAWEI] ip netstream aggregation source-prefix[HUAWEI-aggregation-srcpre] mask source minimum 24

161032 match ip

FunctionThe match ip command configures aggregation keywords in a flexible flow statisticstemplate

The undo match ip command deletes aggregation keywords from a flexible flow statisticstemplate

By default no aggregation keyword is configured in a flexible flow statistics template

Formatmatch ip protocol | dscp | source-address | destination-address | source-port |destination-port | flow-label

undo match ip protocol | dscp | source-address | destination-address | source-port |destination-port | flow-label


protocol Indicates the IP protocolaggregation of IPv4 andIPv6 flows

-

dscp Indicates the DSCP priorityaggregation of IPv4 andIPv6 flows

-

source-address Indicates the source IPaddress aggregation of IPv4and IPv6 flows

-



9060




destination-address Indicates the destinationaddress aggregation of IPv4and IPv6 flows

-

source-port Indicates the source portnumber aggregation of IPv4and IPv6 flows

-

destination-port Indicates the destinationport number aggregation ofIPv4 and IPv6 flows

-

flow-label Indicates the IPv6 flow labelaggregation Thisaggregation method appliesonly to IPv6 flows

-

Views


Default Level

3 Management level

Usage Guidelines

Usage Scenario

During NetStream implementation you can run the match ip command to configureaggregation keywords in a flexible flow statistics template

Prerequisites

A flexible flow statistics template has been created using the 161020 ip netstream recordcommand

Precautions

When you run the match ip command to configure the aggregation keywords only onekeyword can be configured each time If you run this command multiple times in the sameview a set of multiple aggregation keywords is configured If a template has been applied toan interface you cannot modify or delete aggregation keywords from the template

Example

Set the flexible flow statistics template abc123 to aggregate flows based on the source port

ltHUAWEIgt system-view[HUAWEI] ip netstream record abc123[HUAWEI-record-abc123] match ip source-port



9061




FunctionThe port ip netstream record command applies the flexible flow statistics template to aninterface

The undo port ip netstream record command deletes a specified flexible flow statisticstemplate on an interface

By default no flexible flow statistics template is applied to an interface

Formatport ip netstream record record-name

undo port ip netstream record



The value is a string of 1 to32 case-insensitivecharacters without spacesThe value is the same as theIPv4 flexible flow statisticstemplate name configuredusing the ip netstreamrecord command




After a flexible flow statistics template is configured run the port ip netstream recordcommand to apply the template to an interface

The interface then aggregates flows based on the configured aggregation keywords collectsflow statistics and exports aged flows to the NSC

Prerequisites

The flexible flow statistics template has been created and at least one aggregation keywordhas been configured using the match ip command



9062



Precautions

Each interface can be configured with only one flexible flow statistics template Beforemodifying the flexible flow statistics template in the same interface view run the undo portip netstream record command to delete the existing configuration

If the flexible flow statistics template has been applied to an interface the templateconfiguration cannot be modified or deleted

When flow statistics collection is enabled both on the inbound and outbound interfaces theport ip netstream record command does not take effect

Example

Configure the flexible flow statistics template abc1 (aggregating flows based on the sourceand destination IP addresses collecting statistics about the number of packets and exportingthe inbound interface index) Apply such configurations to GE001

ltHUAWEIgt system-view[HUAWEI] ip netstream record abc1[HUAWEI-record-abc1] match ip source-address[HUAWEI-record-abc1] match ip destination-address[HUAWEI-record-abc1] collect counter packets[HUAWEI-record-abc1] collect interface input[HUAWEI-record-abc1] quit[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] port ip netstream record abc1 Info Configuring a record on the interface succeeded

Related Topics161020 ip netstream record161014 ip netstream161025 ipv6 netstream


Function

The refresh netstream template command immediately refreshes the NetStream outputtemplate

By default the template is refreshed every 30 minutes

Format

refresh netstream template

Parameters

None

Views

User view



9063



Default Level

3 Management level

Usage Guidelines

After a NetStream server restarts you need to run this command to enable the device toimmediately resend the NetStream output template Only the V9 template supports thiscommand

Example

Refresh the NetStream output template

ltHUAWEIgt refresh netstream template


Function

The reset ip netstream cache command forcibly ages all the flows in the cache

Format

reset ip netstream cache slot slot-id

Parameters



Views

System view

Default Level

3 Management level

Usage Guidelines

Forced aging is used when you require the latest statistics but you do not satisfy with theexisting aging conditions or some flows fail to age out due to an anomaly You can forciblyage out all the original flows in the cache and export the flow statistics

NOTE

If you run the reset ip netstream cache command on an interface card before the inactive aging time isreached the NDE does not export the flow statistics to the NSC



9064



Example

Age all the flows forcibly in slot 0

ltHUAWEIgt system-view[HUAWEI] reset ip netstream cache slot 0


Function

The reset ip netstream statistics command deletes NetStream flow statistics

Format

reset ip netstream statistics slot slot-id

Parameters



Views

User view

Default Level

3 Management level

Usage Guidelines

Usage Scenario

When diagnosing and locating network faults collect flow statistics in a specified periodBefore statistics collection starts you can run this command to delete historical statistics

Precautions

The reset ip netstream statistics command deletes all NetStream statistics The statisticscannot be restored after being deleted Therefore confirm the action before running thiscommand

You can run this command multiple times at any interval

Example

Delete NetStream statistics in slot 0

ltHUAWEIgt reset ip netstream statistics slot 0



9065




Function

The snmp-agent trap enable feature-name sindex command enables the trap function forthe SINDEX module

The undo snmp-agent trap enable feature-name sindex command disables the trap functionfor the SINDEX module

By default the trap function is enabled for the SINDEX module

Format

snmp-agent trap enable feature-name sindex [ trap-name hwnetstreamindexusedup ]

undo snmp-agent trap enable feature-name sindex [ trap-namehwnetstreamindexusedup ]

Parameters


trap-name Specifies the name of thetrap for a specified event onthe SINDEX module

-

hwnetstreamindexusedup Sends Huawei-proprietarytrap messages when allinterface indexes areallocated

-

Views

System view

Default Level


Usage Guidelines

None

Example

Enable the trap function for the SINDEX module

ltHUAWEIgt system-view[HUAWEI] snmp-agent trap enable feature-name sindex



9066



1611 sFlow Configuration CommandsNOTE

The sFlow function conforms to RFC3176 and sFloworg standard For security risks see sFloworg standardThis function involves analyzing the communications information of terminal customers Before enabling thefunction ensure that it is performed within the boundaries permitted by applicable laws and regulationsEffective measures must be taken to ensure that information is securely protected

The S1720GFR and S5720HI do not support sFlow

16111 display sflow

Function

The display sflow command displays the sFlow configuration in the system or on a specifiedLPU

Format

display sflow [ slot slot-id ]

Parameters


slot slot-id Displays the sFlowinformation on an LPUwhere slot-id specifies theslot ID of the LPUIf this parameter is notconfigured the global sFlowconfiguration is displayed


Views

All views

Default Level

3 Management level

Usage Guidelines

After configuring the sFlow function you can use the display sflow command to verify theconfiguration

The display sflow command shows the sFlow configuration which helps you locate faults inthe system or on an interface



9067



Example

Display the sFlow configuration on a specified LPU

ltHUAWEIgt display sflow slot 0sFlow Version 5 Information -------------------------------------------------------------------------- Agent Information

IP Address 1921681206 Address family IPV4 Vpn-instance NA -------------------------------------------------------------------------- Collector Information

Collector ID 1 IP Address 1921681194 Address family IPV4 Vpn-instance NA Port 6343 Datagram size 1500 Time out NA Description zjm-pc -------------------------------------------------------------------------- Port on slot 0 Information

Interface GE001 Flow-sample collector 1 Counter-sample collector 1 Flow-sample rate(1x) 2048 Counter-sample interval(s) 10 Flow-sample maxheader 128 Flow-sample direction INOUT

Table 16-78 Description of the display sflow command output

Item Description

Agent Information

IP Address IP address of the sFlow agent To set this value see sflow agent

Address family Address family of the sFlow agent includingl IPv4 IPv4 address familyl IPv6 IPv6 address familyTo set this value see sflow agent

Vpn-instance VPN instance of the sFlow agent

Collector Information

Collector ID ID of the sFlow collector To set this value see sflow collector

IP Address IP address of the sFlow collector To set this value see sflowcollector

Address family Address family of the sFlow collector includingl IPv4 IPv4 address familyl IPv6 IPv6 address familyTo set this value see sflow collector

Vpn-instance VPN instance of the sFlow collector



9068



Item Description

Port Port number of the sFlow collector To set this value see sflowcollector

Description Description of the sFlow collector To set this value see sflowcollector

Datagram size Maximum length of sFlow packets sent to the sFlow collector Toset this value see sflow collector

Time out Aging time of the sFlow collector

Port on slot 0 Information

Interface sFlow-enabled interface

Flow-sample direction Flow sampling directionl IN Enable flow sampling in the inbound directionl OUT Enable flow sampling in the outbound directionl INOUT Enable flow sampling in both inbound direction and

outbound directionTo set this value see sflow flow-sampling

Flow-sample collector Target collector that receives flow sampling data To set thisvalue see sflow flow-sampling collector

Counter-samplecollector

Target collector that receives counter sampling data To set thisvalue see sflow counter-sampling collector

Flow-sample rate(1x) Flow sampling rate To set this value see sflow flow-samplingrate

Flow-samplemaxheader

The maximum bytes of data that can be copied from a sampledpacket in flow sampling To set this value see sflow flow-sampling max-header

Counter-sampleinterval(s)

Counter sampling interval To set this value see sflow counter-sampling interval

Related Topics16113 sflow agent16114 sflow collector16115 sflow counter-sampling collector16116 sflow counter-sampling interval16117 sflow flow-sampling16118 sflow flow-sampling collector16119 sflow flow-sampling max-header161110 sflow flow-sampling rate16112 display sflow statistics



9069




FunctionThe display sflow statistics command displays sFlow statistics

Formatdisplay sflow statistics [ slot slot-id | interface interface-type interface-number ]


slot slot-id Specifies the slot ID of anLPU



Specifies the type andnumber of an interface

-

ViewsAll views


Usage GuidelinesThe display sflow statistics command displays sFlow statistics including the sampling modenumber of sampled packets sequence number of sent packets and number of discarded sFlowpackets because of expiration You can use the command output to locate faults

Example Display sFlow statistics

ltHUAWEIgt display sflow statisticssFlow Version 5 statistic Information -------------------------------------------------------------------------- Collector 1 Current sample sequence22388 -------------------------------------------------------------------------- Port on slot 0 statistic Information Interface GE001 Flow-sample sequence 7 Counter-sample sequence 44778 Flow-sample inbound pool 28000 Flow-sample outbound pool



9070



4000

--------------------------------------------------------------------------

Table 16-79 Description of the display sflow statistics command output

Item Description

Collector 1 Current samplesequence

Sampling sequence number of the sFlow collector

Flow-sample sequence Sequence number for flow sampling on an interface

Counter-sample sequence Sequence number for counter sampling on an interface

Flow-sample inbound pool Number of incoming packets that are sampled on aninterface

Flow-sample outboundpool

Number of outgoing packets that are sampled on an interface

Related Topics16113 sflow agent16114 sflow collector16115 sflow counter-sampling collector16116 sflow counter-sampling interval16117 sflow flow-sampling16118 sflow flow-sampling collector16119 sflow flow-sampling max-header161110 sflow flow-sampling rate16111 display sflow

16113 sflow agent

FunctionThe sflow agent command creates an sFlow agent and specifies an IP address for the sFlowagent or updates the IP address of the existing sFlow agent

The undo sflow agent command deletes the IP address of an sFlow agent

By default an sFlow agent uses the IP address of the outbound interface in the route to thesFlow collector as the sFlow agent IP address of sFlow packets

Formatsflow agent ip [ vpn-instance vpn-instance-name ] ip-address | ipv6 [ vpn-instance vpn-instance-name ] ipv6-address

undo sflow agent ip [ vpn-instance vpn-instance-name ] ip-address | ipv6 [ vpn-instancevpn-instance-name ] ipv6-address



9071




ip ip-address Specifies the IPv4 addressof an sFlow agent

The value is in dotteddecimal notation and is avalid unicast address except127XXX

ipv6 ipv6-address Specifies an IPv6 address ofthe sFlow agent

The value is an IPv6 unicastaddress which is a 32-digithexadecimal number




ViewsSystem view



sFlow is a traffic monitoring technique that collects and analyzes traffic statistics An sFlowagent encapsulates traffic statistics into sFlow packets and sends the sFlow packets tospecified sFlow collectors To send the sFlow packets to a certain sFlow collector configurean IP address for the sFlow agent as the source address of sFlow packets The sFlow collectoranalyzes and displays the traffic statistics based on the traffic in the received sFlow packetsNetwork administrators can view the traffic statistics on a specified interface based on the IPaddress of the sFlow agent and interface number

Prerequisites

l The IP address configured as the source address must exist on the devicel A VPN instance has been created if the sFlow agent is located on a private network

Precautions

A maximum of two sFlow agents can be configured in the system and each VPN instance ofan address family supports only one agent The IP address of an agent must be a valid unicastIP address of an interface If an IPv6 address is specified for an agent the IPv6 address mustbe a global unicast address but cannot be a link-local address

Example Configure an IPv4 address for the sFlow agent

ltHUAWEIgt system-view[HUAWEI] sflow agent ip 19216810010



9072



Related Topics16114 sflow collector16115 sflow counter-sampling collector16116 sflow counter-sampling interval16117 sflow flow-sampling16118 sflow flow-sampling collector16119 sflow flow-sampling max-header161110 sflow flow-sampling rate16111 display sflow16112 display sflow statistics


Function

The sflow collector command creates an sFlow collector and sets or modifies optionalparameters for the sFlow collector

The undo sflow collector command restores default values of optional parameters of thesFlow collector or deletes the sFlow collector

By default no sFlow collector is configured

Format

sflow collector collector-id ip [ vpn-instance vpn-instance-name ] ip-address | ipv6 [ vpn-instance vpn-instance-name ] ipv6-address [ datagram-size datagram-size | port port-num| time-out time ] [ description description ]

sflow collector collector-id datagram-size datagram-size | port port-num [ descriptiondescription ]

undo sflow collector collector-id [ datagram-size | port | description ]


collector-id Specifies the ID of an sFlowcollector This ID is usedwhen you specify thecollector in subsequentsFlow configuration







9073




ip-address Specifies an IPv4 address ofthe sFlow collector

The value is a value unicastIP address in XXXXformat dotted decimalnotation The value cannotbe 127XXX

ipv6-address Specifies an IPv6 addressfor the sFlow collector

The value is a 32-digithexadecimal number in theformat ofXXXXXXXX and is avalid global IPv6 unicastaddress

datagram-size datagram-size

Specifies the maximumlength of sFlow packets sentfrom an sFlow agent to ansFlow collector

The value is an integer inbytes It ranges from 1024 to8100 The default value is1400

port port-num Specifies the UDPdestination port number ofsFlow packets


description description Specifies the description ofan sFlow collector

The value is a string of 1 to255 case-sensitivecharacters without spaces

time-out time Specifies the aging time ofan sFlow collector

The value is an integer thatranges from 0 to 3600 inseconds The default valueis 0 indicating that thesFlow collector is not agedout If the default value isused the aging time cannotbe changed

ViewsSystem view



sFlow is a traffic monitoring technique that collects and analyzes traffic statistics An sFlowagent encapsulates traffic statistics into sFlow packets and sends the sFlow packets to allsFlow collectors To send the sFlow packets to a certain sFlow collector configure an sFlowcollector used to receive sFlow packets and analyze traffic of sFlow packets When both flow



9074



sampling and counter sampling are configured on an interface of an sFlow agent the sFlowagent sends the flow sampling data and counter sampling data to one or two sFlow collectorsBecause sFlow packets are sampled quickly and the number of sFlow packets sent everysecond is limited run the sflow collector command with datagram-sizelength specified toset the maximum length of sFlow packets so that an sFlow packet carries more sampled dataThis reduces the number of sent sFlow packets

NOTE

When you create an sFlow collector specify the ID and IP address for the sFlow collector If the agingtime of the sFlow collector is not set the sFlow collector is not aged out by default and the aging timecannot be changed

Prerequisites

l There is a reachable route between an sFlow agent and an sFlow collector

l A VPN instance has been created if the sFlow collector is located on a private network

Precautions

A maximum of two sFlow collectors can be configured in the system

Example

Configure an IPv4 address for the sFlow collector and set the aging time of the sFlowcollector to 100s

ltHUAWEIgt system-view[HUAWEI] sflow collector 1 ip 19216810010 time-out 100

Related Topics16113 sflow agent16115 sflow counter-sampling collector16116 sflow counter-sampling interval16117 sflow flow-sampling16118 sflow flow-sampling collector16119 sflow flow-sampling max-header161110 sflow flow-sampling rate16111 display sflow16112 display sflow statistics


Function

The sflow counter-sampling collector command specifies the target sFlow collector thatreceives counter sampling data

The undo sflow counter-sampling collector command deletes the target sFlow collector




9075



Formatsflow counter-sampling collector collector-id | all

undo sflow counter-sampling collector collector-id | all


collector-id Specifies the ID of the targetsFlow collector that receivescounter sampling data

The value is an integer thatcan be 1 or 2NOTE

The value of collector-id is setusing the sflow collectorcommand


-




Counter sampling is based on time An sFlow agent periodically obtains traffic statistics on aninterface encapsulates the traffic statistics into sFlow packets and sends them to an sFlowcollector When multiple sFlow collectors are configured you can run the sflow counter-sampling collector command to specify the target sFlow collector to receive the countersampling data Each interface can send sFlow sampling data to a maximum of two sFlowcollectors

When you run the sflow counter-sampling collector command to specify the first targetsFlow collector on an interface counter sampling is enabled on the interface When you runthe undo sflow counter-sampling collector command to delete the last target sFlow collectoron an interface counter sampling is disabled on the interface

Prerequisites


Precautions




9076



Example Specify sFlow collector 1 to receive counter sampling data

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] sflow counter-sampling collector 1

Configure a port group pg1 that has member ports GE002 and GE003 and specify sFlowcollector 1 to receive counter sampling data for the port group pg1[HUAWEI] port-group pg1[HUAWEI-port-group-pg1] group-member gigabitethernet 002[HUAWEI-port-group-pg1] group-member gigabitethernet 003[HUAWEI-port-group-pg1] sflow counter-sampling collector 1

Related Topics16113 sflow agent16114 sflow collector16116 sflow counter-sampling interval16111 display sflow16112 display sflow statistics


FunctionThe sflow counter-sampling interval command sets the counter sampling interval on aninterface

The undo sflow counter-sampling interval command restores the default counter samplinginterval on an interface

By default the counter sampling interval on an interface is 10s

Formatsflow counter-sampling interval interval

undo sflow counter-sampling interval


interval interval Specifies the countersampling interval

The value is an integer thatranges from 2 to 3600 inseconds The default valueis 10




9077



Default Level

3 Management level

Usage Guidelines

Usage scenario

Counter sampling is based on time An sFlow agent periodically obtains traffic statistics on aninterface encapsulates the traffic statistics into sFlow packets and sends them to an sFlowcollector You can run the sflow counter-sampling interval command to set an appropriatecounter sampling interval

Precautions


Example

Set the counter sampling interval to 100s

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] sflow counter-sampling interval 100

Configure a port group pg1 that has member ports GE002 and GE003 and set thecounter sampling interval to 100s for the port group pg1[HUAWEI] port-group pg1[HUAWEI-port-group-pg1] group-member gigabitethernet 002[HUAWEI-port-group-pg1] group-member gigabitethernet 003[HUAWEI-port-group-pg1] sflow counter-sampling interval 100

Related Topics16113 sflow agent16114 sflow collector16115 sflow counter-sampling collector16111 display sflow16112 display sflow statistics


Function

The sflow flow-sampling command enables flow sampling in a specified direction on aninterface

The undo sflow flow-sampling command disables flow sampling in a specified direction onan interface

By default flow sampling is enabled in both directions on an interface



9078



Format

sflow flow-sampling inbound | outbound

undo sflow flow-sampling inbound | outbound

Parameters


inbound Enables flow sampling inthe inbound direction

-

outbound Enables flow sampling inthe outbound direction

-

Views


Default Level

3 Management level

Usage Guidelines

Usage scenario

You can specify the direction in which flow sampling is performed Flow sampling can beperformed in both inbound and outbound directions

Precautions


Example

Enable flow sampling in the inbound direction

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] sflow flow-sampling inbound

Configure a port group pg1 that has member ports GE002 and GE003 and enable flowsampling in the inbound direction of the port group pg1[HUAWEI] port-group pg1[HUAWEI-port-group-pg1] group-member gigabitethernet 002[HUAWEI-port-group-pg1] group-member gigabitethernet 003[HUAWEI-port-group-pg1] sflow flow-sampling inbound



9079



Related Topics16113 sflow agent16114 sflow collector16118 sflow flow-sampling collector16119 sflow flow-sampling max-header161110 sflow flow-sampling rate16111 display sflow16112 display sflow statistics


FunctionThe sflow flow-sampling collector command specifies the target sFlow collector thatreceives flow sampling data

The undo sflow flow-sampling collector command deletes the target sFlow collector thatreceives flow sampling data


Formatsflow flow-sampling collector collector-id | all

undo sflow flow-sampling collector collector-id | all


collector-id Specifies the ID of the targetsFlow collector that receivesflow sampling data



-






9080



An sFlow agent samples packets in a direction of an interface based on a sampling rateanalyzes packets encapsulates sampled packets and analysis result into sFlow packets andthen sends the sFlow packets to an sFlow collector When multiple sFlow collectors areconfigured you can run the sflow flow-sampling collector command to specify one or two toreceive sFlow packets Each interface can send sFlow sampling packets to a maximum of twocollectors

When you run the sflow flow-sampling collector command to specify the first target sFlowcollector on an interface flow sampling is enabled on the interface When you run the undosflow flow-sampling collector command to delete the last target sFlow collector on aninterface flow sampling is disabled on the interface

Prerequisites


Precautions


Example

Specify sFlow collector 1 to receive the flow sampling data

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] sflow flow-sampling collector 1

Configure a port group pg1 that has member ports GE002 and GE003 and specify sFlowcollector 1 to receive flow sampling data for the port group pg1[HUAWEI] port-group pg1[HUAWEI-port-group-pg1] group-member gigabitethernet 002[HUAWEI-port-group-pg1] group-member gigabitethernet 003[HUAWEI-port-group-pg1] sflow flow-sampling collector 1

Related Topics16113 sflow agent16114 sflow collector16117 sflow flow-sampling16119 sflow flow-sampling max-header161110 sflow flow-sampling rate16111 display sflow16112 display sflow statistics


Function

The sflow flow-sampling max-header command sets the maximum bytes of data that can becopied from a sampled packet in flow sampling



9081



The undo sflow flow-sampling max-header command restores the default maximum bytesof data

By default a maximum of 128 bytes of data can be copied from a sampled packet in flowsampling

Formatsflow flow-sampling max-header length

undo sflow flow-sampling max-header


length Specifies the maximumbytes of data that can becopied from a sampledpacket

The unit is byte The valueis an integer that rangesfrom 128 to 512 The defaultvalue is 128




An sFlow agent samples packets in a direction of an interface based on a sampling rateanalyzes packets encapsulates sampled packets and analysis result into sFlow packets andthen sends the sFlow packets to an sFlow collector The datagram size of sFlow packets is setusing the sflow collector [ datagram-size datagram-size ] command If only the informationcarried in the packet header is required run the sflow flow-sampling max-header commandto set the maximum length of data starting from the original packet header that can be copiedfrom a sampled packet

Precautions


Example Set the maximum length of data starting from the original packet header that can be copiedfrom a sampled packet to 256 bytes



9082



ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] sflow flow-sampling max-header 256

Configure a port group pg1 that has member ports GE002 and GE003 and set themaximum length of data starting from the original packet header that can be copied from asampled packet to 256 bytes for the port group pg1[HUAWEI] port-group pg1[HUAWEI-port-group-pg1] group-member gigabitethernet 002[HUAWEI-port-group-pg1] group-member gigabitethernet 003[HUAWEI-port-group-pg1] sflow flow-sampling max-header 256

Related Topics16113 sflow agent16114 sflow collector16117 sflow flow-sampling16118 sflow flow-sampling collector161110 sflow flow-sampling rate16111 display sflow16112 display sflow statistics


FunctionThe sflow flow-sampling rate command sets the sampling rate on an interface

The undo sflow flow-sampling rate command restores the default sampling rate on aninterface

By default the sampling rate on a 40GE interface is 120480 and on other types of interfacesis 12048

Formatsflow flow-sampling rate rate

undo sflow flow-sampling rate


rate rate Specifies the sampling ratein the format of 1rate ratespecifies the number ofpackets out of which theinterface will sample apacket

The rate is an integer thatranges from 256 to 1048576The maximum value forS6720EI and S6720S-EI are1048576 and for othermodels is 8192 The defaultvalue for a 40GE port is20480 and for other types ofports is 2048



9083






An sFlow agent samples packets in a direction of an interface based on a sampling rateanalyzes packets encapsulates sampled packets and analysis result into sFlow packets andthen sends the sFlow packets to an sFlow collector You can run the sflow flow-sampling ratecommand to set the sampling rate to limit the number of sampled packets

Precautions


Example Set the sampling rate to 13072

ltHUAWEIgt system-view[HUAWEI] interface gigabitethernet 001[HUAWEI-GigabitEthernet001] sflow flow-sampling rate 3072

Configure a port group pg1 that has member ports of GE002 and GE003 and set thesampling rate to 13072 for the port group pg1[HUAWEI] port-group pg1[HUAWEI-port-group-pg1] group-member gigabitethernet 002[HUAWEI-port-group-pg1] group-member gigabitethernet 003[HUAWEI-port-group-pg1] sflow flow-sampling rate 3072

Related Topics16113 sflow agent16114 sflow collector16117 sflow flow-sampling16118 sflow flow-sampling collector16119 sflow flow-sampling max-header16111 display sflow16112 display sflow statistics



9084



1612 Ping and Tracert Configuration Commands16121 ping

FunctionThe ping command checks whether a specified IPv4 address is reachable and exportscorresponding statistics

Formatping [ ip ] [ -a source-ip-address | -c count | -d | -f | ignore-mtu | -h ttl-value | -nexthopnexthop-ip-address | -i interface-type interface-number | -m time | -n | -name | -p pattern | -q |-r | -s packetsize | -range [ min min-size | max max-size | step step-size ] | -system-time |-t timeout | -tos tos-value | -v | -vpn-instance vpn-instance-name ] host [ ip-forwarding ]

Parameters


ip Indicates the IPv4 protocol If ip is notspecified the IPv4 protocol is used

-


Specifies the source IP address of theICMP Echo Request message If thesource IP address is not specified the IPaddress of the outbound interface is usedas the source IP address of the ICMPEcho Request message


-c count Specifies the number of times forsending ICMP Echo Request messages

The ping command labels each ICMPEcho Request message with a sequenceID that starts from 1 and is increased by1 By default five ICMP Echo Requestmessages are sent You can set thenumber of ICMP Echo Requestmessages to send by specifying theparameter count

In the case of poor network quality youcan set this parameter to a comparativelylarge value to check the network qualitybased on the packet loss rate


-d Indicates that the socket works in debugmode

By default the socket works innon-debug mode



9085




-f Indicates that packets are not fragmentedduring transmissionNOTE

After this parameter is specified ICMPpackets are not fragmented If the ICMPpacket size exceeds the link MTU the ICMPpacket is discarded If you do not want ICMPpackets to be discarded do not specify thisparameter or increase the link MTU

-


If the TTL field is reduced to 0 duringmessage forwarding the Layer 3 devicethat the message reaches sends an ICMPtimeout message to the source hostindicating that the destination host isunreachable


-nexthopnexthop-ip-address

Specifies an IP address for the next hop

If you have specified this parameter thedevice no longer searches the routingtable before sending ICMP EchoResponse packets This process preventsping failures caused by incorrect routingentries


NOTE

l The specified next hop addressmust be the next hop address ofa directly connected physicalinterface

l When you specify a next hopaddress you can configure -iinterface-type interface-numberto specify an outboundinterface The followingconditions must be met toensure a test success

l The specified next hopaddress must match theoutbound interface

l The specified outboundinterface cannot be a logicalinterfaces memberinterface

l If you have specified a next hopaddress you cannot specify aVPN


Specifies the outbound interface forsending ICMP Echo Request messages

-



9086




-m time Specifies the time to wait before sendingthe next ICMP Echo Request message

Each time the source sends an ICMPEcho Request message using the pingcommand the source waits a period oftime (500 ms by default) before sendingthe next ICMP Echo Request messageYou can set the time to wait beforesending the next ICMP Echo Requestmessage using the parameter time In thecase of poor network condition thevalue should be equal to or larger than500 in milliseconds


-n Uses the value of host as the IP addressto spare domain name resolution

-


-

-p pattern Specifies pad characters for ICMP EchoRequest messages

By configuring pad characters for ICMPEcho Request messages you canidentify a specific message among thelarge number of received ICMP EchoReply messages

The value is a hexadecimalinteger that ranges from 0 toFFFFFFFF By default thepadding starts from 0x01 andcontinues in ascending order

-q Displays only the statistics If the pingcommand carries this parameter thesystem displays only the statisticsinformation such as the number of sentand received packets packet loss rateand minimum average and maximumRTTs of the packet

By default the system displaysall statistics information



9087




-r Records the route along which an IPpacket is forwarded

When -r is specified during thetransmission of an IP packet the IPaddress of each Layer 3 device that theIP packet passes through is added to theOptions field When the IP packetreaches the destination all IP addressesrecorded in the Options field are copiedto the ICMP Echo Reply message Inaddition the IP address of each Layer 3device that the returned IP packet passesthrough is added to the message Whenthe ping program receives the ICMPEcho Reply message IP addresses of thepassed Layer 3 devices are displayed

By default the route alongwhich an IP packet is forwardedis not recorded

-s packetsize Specifies the length of an ICMP EchoRequest message excluding the IPheader and ICMP header

The value is an integer thatranges from 20 to 9600 in bytesThe default value is 56



9088




-range Enables the device to send ICMP EchoRequest messages with variable payloadlengths

l If the -range parameter is notspecified the payload lengthof an ICMP Echo Requestmessage is equal to thelength specified by the -spacketsize parameter Thedefault value is 56 in bytes

l If the -range parameter isspecified the payload lengthof the first ICMP EchoRequest message is min min-size and that of the secondICMP Echo Request messageis min min-size plus stepstep-size The payload lengthincreases incrementally bystep step-size for subsequentICMP Echo Requestmessages until max max-sizeis reached After that thedevice will not send ICMPEcho Request messages anymoreBy default the payloadlength of an ICMP EchoRequest message ranges from56 to 9600 bytes and the steplength is 1 byteNOTE

l The command executiontakes a long period if alarge number of ICMPEcho Request messagesneed to be sent If you wantto terminate the commandexecution press Ctrl+C

l To change the number ofICMP Echo Requestmessages to be sent changethe values of min min-sizeand max max-size Thevalue of min min-size mustbe smaller than that of maxmax-size

l If both the -range and -ccount parameters arespecified the device sendsICMP Echo Requestmessages of the samepayload length for thenumber of times specifiedby the -c count parameter



9089




min min-size Specifies the minimum payload lengthof an ICMP Echo Request message


max max-size Specifies the maximum payload lengthof an ICMP Echo Request message


step step-size Specifies the step length of an ICMPEcho Request message


-system-time Displays the system time when the pingpacket is sent

-

-t timeout Specifies the timeout period to wait foran ICMP Echo Reply message after anICMP Echo Request message is sent

After the ping command is run thesource sends an ICMP Echo Requestmessage to a destination and waits for anICMP Echo Reply message If thedestination after receiving the ICMPEcho Request message returns an ICMPEcho Reply message to the sourcewithin the period specified by theparameter timeout the destination isreachable If the destination does notreturn an ICMP Echo Reply messagewithin the specified period the sourcedisplays that the message times out

Normally the source receives an ICMPEcho Reply message within 1 to 10seconds after sending an ICMP EchoRequest message If the transmissionspeed is low properly prolong thetimeout period


-tos tos-value Specifies the ToS value of the sentICMP Echo Request messages The ToSvalue is used to set the packet priority


-v Displays all received ICMP Echo Replymessagesl If -v is not specified the system

displays only the ICMP Echo Replymessages received by the local user

l If -v is specified the system displaysall received ICMP Echo Replymessages

By default only ICMP EchoReply messages for the localuser are displayed



9090





Specifies the name of a VPN instance The value is a string of 1 to 31case-sensitive characters spacesnot supported When doublequotation marks are used aroundthe string spaces are allowed inthe string

ignore-mtu Indicates that the system does not checkthe interface MTU when a packet is sent

-

host Specifies the domain name or IP addressof the destination host

The value is a string of 1 to 255case-sensitive characters withspaces not supported Whendouble quotation marks are usedaround the string spaces areallowed in the stringAlternatively the value can be avalid IPv4 address in dotteddecimal notation

ip-forwarding Indicates that the ping packets areforcibly forwarded through IP on thefirst node

-

Views

All views

Default Level

0 Visit level

Usage Guidelines

Usage Scenario

The ping command is a common debugging tool for testing the network connectivity bytransmitting ICMP Echo messages It can detect the following items



l Packet loss rate

You can run the ping command to check the network connectivity or line quality in thefollowing scenarios

l Check the protocol stack on the local device You can run the ping loopback-addresscommand to check whether the TCPIP protocol stack works properly on the localdevice

l Check whether the destination host is reachable on an IP network You can run the pinghost command to send an ICMP Echo Request message to the destination host If a replyis received the destination host is reachable



9091



l Check whether the peer is reachable on a Layer 3 VPN On a Layer 3 VPN devices maynot have routing information about each other Therefore you cannot use the ping hostcommand to check whether the peer is reachable When a VPN instance name isspecified you can run the ping -vpn-instance vpn-instance-name host command to sendan ICMP Echo Request message to the peer If the peer returns an ICMP Echo Replymessage the peer is reachable

l In the case of an unstable network you can run the ping -c count -t timeout hostcommand to check the quality of the network between the local device and the peer Byanalyzing the packet loss rate and average delay in the command output you canevaluate the network quality If the network is unreliable set the packet transmissioncount (-c) and timeout (-t) to the upper limits This makes the test result accurate

l Check the path You can run the ping -r host command to obtain information aboutnodes along the path from the local device to the peer

Prerequisite

l Before running the ping command ensure that the ICMP module is working properlyl If -vpn-instance is specified ensure that the VPN module is working properly

Precautions

l If an intermediate device is disabled from responding to ICMP messages detection onthis node fails

l If a fault occurs in the ping process you can press Ctrl+C to terminate the pingoperation

l To ensure security do not ping the broadcast address such as XXXXXX255l When the destination host is unreachable the system displays Request time out which

indicates that the ICMP Echo Request message times out

Example


ltHUAWEIgt ping 10112 PING 10112 56 data bytes press CTRL_C to break Reply from 10112 bytes=56 Sequence=1 ttl=255 time=2 ms Reply from 10112 bytes=56 Sequence=2 ttl=255 time=1 ms Reply from 10112 bytes=56 Sequence=3 ttl=255 time=1 ms Reply from 10112 bytes=56 Sequence=4 ttl=255 time=1 ms Reply from 10112 bytes=56 Sequence=5 ttl=255 time=1 ms --- 10112 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 000 packet loss round-trip minavgmax = 112 ms

Check whether the host at 10114 is reachable set the transmission count to 8 and set theperiod for waiting for an ICMP Echo Reply message to 4000 ms

ltHUAWEIgt ping -c 8 -t 4000 10114 PING 10114 56 data bytes press CTRL_C to break Reply from 10114 bytes=56 Sequence=1 ttl=255 time=32 ms Reply from 10114 bytes=56 Sequence=2 ttl=255 time=32 ms Reply from 10114 bytes=56 Sequence=3 ttl=255 time=32 ms Reply from 10114 bytes=56 Sequence=4 ttl=255 time=32 ms Reply from 10114 bytes=56 Sequence=5 ttl=255 time=32 ms Reply from 10114 bytes=56 Sequence=6 ttl=255 time=32 ms Reply from 10114 bytes=56 Sequence=7 ttl=255 time=32 ms Reply from 10114 bytes=56 Sequence=8 ttl=255 time=32 ms



9092




Enable the device to send ICMP Echo Request messages with variable payload lengths

ltHUAWEIgt ping -range min 56 max 60 19216819 PING 19216819 56-60 data bytes press CTRL_C to break Reply from 19216819 bytes=56 Sequence=1 ttl=255 time=80 ms Reply from 19216819 bytes=57 Sequence=2 ttl=255 time=60 ms Reply from 19216819 bytes=58 Sequence=3 ttl=255 time=80 ms Reply from 19216819 bytes=59 Sequence=4 ttl=255 time=80 ms Reply from 19216819 bytes=60 Sequence=5 ttl=255 time=50 ms



ltHUAWEIgt ping 101110ping 101110 PING 101110 56 data bytes press CTRL_C to break Reply from 101110 bytes=56 Sequence=1 ttl=128 time=1 ms Reply from 101110 bytes=56 Sequence=1 ttl=64 time=1 ms (DUP) Reply from 101110 bytes=56 Sequence=2 ttl=128 time=1 ms Reply from 101110 bytes=56 Sequence=2 ttl=64 time=1 ms (DUP) Reply from 101110 bytes=56 Sequence=3 ttl=128 time=1 ms Reply from 101110 bytes=56 Sequence=3 ttl=64 time=1 ms (DUP) Reply from 101110 bytes=56 Sequence=4 ttl=128 time=1 ms Reply from 101110 bytes=56 Sequence=4 ttl=64 time=1 ms (DUP) Reply from 101110 bytes=56 Sequence=5 ttl=128 time=1 ms --- 101110 ping statistics --- 5 packet(s) transmitted 9 packet(s) received 4 duplicates -- somebodys printing up packets round-trip minavgmax = 101 ms



9093



Table 16-80 Description of the ping command output

Item Description

PING xxxx Reachability of the destination host with the IP address as xxxxis tested

x data bytes Length of a sent ICMP Echo Request message


The ongoing ping test is terminated after you press Ctrl+C

Reply from xxxx The destination host responds to the ICMP Echo Requestmessage with an ICMP Echo Reply message that contains thefollowing itemsl bytes indicates the length of the ICMP Echo Reply messagel Sequence indicates the sequence number of the ICMP Echo

Reply messagel ttl indicate the TTL value of the ICMP Echo Reply messagel time indicates the RTT in millisecondsIf no ICMP Echo Reply message is received after the timeoutperiod the system displays Request time outNOTE

If a received packet ends with (DUP) the device has received the EchoReply messages with repeated sequence number

xxxx ping statistics Statistics collected after the ping test on the destination host Thestatistics include the following informationl packet(s) transmitted indicates the number of sent ICMP

Echo Request messagesl packet(s) received indicates the number of received ICMP

Echo Reply messagesl duplicates indicates that the device has received the Echo

Reply messages with repeated sequence numberl packet loss indicates the percentage of unresponded

messages to total sent messagesl -- somebodys printing up packets indicates that the number

of received Echo Reply messages is larger than the number ofsend Echo Request messages

l round-trip minavgmax indicates the minimum average andmaximum RTTs The unit is ms (On an IPv4 network round-trip minavgmax is not displayed if the ping fails On an IPv6network round-trip minavgmax = 000 ms is displayed ifthe ping fails)

Related Topics16122 ping ipv616123 tracert16124 tracert ipv6



9094



16122 ping ipv6

FunctionThe ping ipv6 command checks whether a specified IPv6 address is reachable and exportscorresponding statistics

Formatping ipv6 [ -a source-ipv6-address | -c count | -h ttl-value | -m time | -name | -s packetsize | -ttimeout | -tc traffic-class-value | vpn-instance vpn-instance-name ] host [ -i interface-typeinterface-number ]

Parameters



Specifies a source IPv6 address forsending ICMPv6 Echo Requestmessages

If no source IPv6 address is specifiedthe IPv6 address of the outboundinterface is used as the source addressfor sending ICMPv6 Echo Requestmessages


-c count Specifies the number of times forsending ICMPv6 Echo Requestmessages

You can increase the number of outgoingpackets to detect the network qualitybased on the packet loss rate



If the TTL field is reduced to 0 duringmessage forwarding the Layer 3 switchthat the message reaches sends anICMPv6 timeout message to the sourcehost indicating that the destination hostis unreachable




9095




-m time Specifies the time to wait before sendingthe next ICMPv6 Echo Requestmessage

Each time the source sends an ICMPv6Echo Request message using the pingipv6 command the source waits a periodof time (2000 ms by default) beforesending the next ICMPv6 Echo Requestmessage You can set the time to waitbefore sending the next ICMPv6 EchoRequest message using the parametertime In the case of poor networkcondition the value should be equal toor larger than 2000 in milliseconds



-



-t timeout Specifies the timeout period to wait foran ICMPv6 Echo Reply message after anICMPv6 Echo Request message is sent

After the ping ipv6 command is run thesource sends an ICMPv6 Echo Requestmessage to a destination and waits for anICMPv6 Echo Reply message If thedestination after receiving the ICMPv6Echo Request message returns anICMPv6 Echo Reply message to thesource within the period specified by theparameter timeout the destination isreachable If the destination does notreturn an ICMPv6 Echo Reply messagewithin the specified period the sourcedisplays that the message times outNormally the source receives anICMPv6 Echo Reply message within 1to 10 seconds after sending an ICMPv6Echo Request message If thetransmission speed is low properlyprolong the timeout period




9096




-tc traffic-class-value

Specifies the traffic classification in theICMPv6 Echo Request message

To configure traffic control for ICMPv6packets set the parameter traffic-class-value








Specifies the outbound interface forsending ICMPv6 Echo Requestmessages

-

Views

All views

Default Level

0 Visit level

Usage Guidelines

Usage Scenario

The ping ipv6 command is a widely used debugging tool for checking network connectivityand host reachability on an IPv6 network by transmitting ICMPv6 messages It can detect thefollowing items



l Packet loss rate

You can run the ping ipv6 command to check the IPv6 network connectivity or line quality inthe following scenarios



9097



l Check the protocol stack on the local device You can run the ping ipv6 IPv6-loopback-address command to check whether the TCPIP protocol stack works properly on thelocal device

l Check whether the destination IPv6 host is reachable on an IPv6 network You can runthe ping ipv6 host command to send an ICMPv6 Echo Request message to thedestination host If a reply is received the destination host is reachable

l Check whether the peer is reachable on a Layer 3 VPN On a Layer 3 VPN devices maynot have routing information about each other Therefore you cannot use the ping ipv6host command to check whether the peer is reachable When a VPN instance name isspecified you can run the ping ipv6 vpn-instance vpn-instance-name host command tosend an ICMPv6 Echo Request message to the peer If the peer returns an ICMPv6 EchoReply message the peer is reachable

l In the case of an unstable network you can run the ping ipv6 -c count -t timeout hostcommand to check the quality of the network between the local device and the peer Byanalyzing the packet loss rate and average delay in the command output you canevaluate the network quality If the network is unreliable set the packet transmissioncount (-c) and timeout (-t) to the upper limits This makes the test result accurate

Prerequisites

l Before running the ping ipv6 command ensure that the ICMPv6 module is workingproperly

l If -vpn-instance is specified ensure that the VPN module is working properly

Precautions

l If an intermediate device is disabled from responding to ICMPv6 messages detection onthis node fails

l If the IPv6 address of the destination host maps the local address specify the name of thelocal outbound interface through which the ICMPv6 Echo Request message is sentOtherwise reply to the ping ipv6 command times out

l When the destination host is unreachable the system displays Request time outindicating that the ICMPv6 Echo Request message times out and displays statisticscollected by the IPv6 ping test

l If a fault occurs in the IPv6 ping process you can press Ctrl+C to terminate the IPv6ping operation

Example

Check whether the host with the IPv6 address as FC001 is reachable

ltHUAWEIgt ping ipv6 FC001 PING FC001 56 data bytes press CTRL_C to break Reply from FC001 bytes=56 Sequence=1 hop limit=64 time=115 ms Reply from FC001 bytes=56 Sequence=2 hop limit=64 time=1 ms Reply from FC001 bytes=56 Sequence=3 hop limit=64 time=1 ms Reply from FC001 bytes=56 Sequence=4 hop limit=64 time=1 ms Reply from FC001 bytes=56 Sequence=5 hop limit=64 time=1 ms ---FC001 ping statistics--- 5 packet(s) transmitted 5 packet(s) received



9098



000 packet loss round-trip minavgmax=123115 ms

Table 16-81 Description of the ping ipv6 command output

Item Description

PING HHHHHHH IPv6 address of the destination host

x data bytes Length of a sent ICMPv6 Echo Request message


The ongoing IPv6 ping test is terminated after you press Ctrl+C

Reply fromHHHHHHH

The destination host responds to the ICMPv6 Echo Requestmessage with an ICMPv6 Echo Reply message that contains thefollowing itemsl bytes indicates the length of the ICMPv6 Echo Reply

messagel sequence indicates the sequence number of the ICMPv6

Echo Reply messagel hop limit indicates the TTL of the ICMPv6 Echo Reply

messagel time indicates the RTT in millisecondsIf no ICMPv6 Echo Reply message is received after the timeoutperiod the system displays Request time out

HHHHHHH pingstatistics

Statistics collected after the IPv6 ping test on the destinationhost The statistics include the following informationl packet(s) transmitted indicates the number of sent ICMPv6

Echo Request messagesl packet(s) received indicates the number of received ICMPv6

Echo Reply messagesl packet loss indicates the percentage of unresponded

messages to total sent messagesl round-trip minavgmax indicates the minimum average and

maximum RTTs

Related Topics16124 tracert ipv6

16123 tracert

FunctionThe tracert command checks the path of packets from the source to the destination checksnetwork connectivity and locates a network fault



9099



Formattracert [ -a source-ip-address | -f first-ttl | -m max-ttl | -name | -p port | -q nqueries | -v | -vpn-instance vpn-instance-name [ pipe ] | -w timeout | -s packetsize ] host

NOTE

Only S5720SI S5720S-SI S5720EI S5720HI S6720EI and S6720S-EI support the -v and -vpn-instancevpn-instance-name parameter

Parameters



Specifies the source address of a probepacket

If this parameter is not specified the IPaddress of the outbound interface is used asthe source IP address for sending tracertpackets


-f first-ttl Specifies the initial TTL The TTL field iscarried in the IP header It indicates thelifetime of packets and specifies themaximum hops that packets can passthrough The TTL value is set on the sourceand reduced by 1 each time the packet passesthrough a hop When the TTL value isreduced to 0 the packet is discarded At thesame time an ICMP Timeout message is sentto notify the source host If first-ttl isspecified and the number of hops is smallerthan the value of first-ttl no ICMP Timeoutpacket is sent to the source host when thepacket passes through these hops If max-ttlis specified the value of first-ttl must besmaller than the value of max-ttl


-m max-ttl Specifies the maximum TTL Usually themaximum TTL is set to the number of hopsthe packet passes through You need to usethis parameter to change the TTL If first-ttlis specified the value of max-ttl must begreater than the value of first-ttl


-name Displays the host name of each hop -



9100




-p port Specifies the UDP port number of thedestinationl If no UDP port number is specified for the

destination when you run the tracertcommand a port with the port numbergreater than 32768 is randomly chosen forthe destination to receive tracert packets

l Before specifying the UDP port numberfor the destination ensure that the port isnot in use otherwise the tracert fails


-q nqueries Specifies the number of probe packets to besent each time In the case of poor networkquality you can set this parameter to acomparatively large value to ensure that theprobe packet can reach the destination


-v Displays the MPLS label carried in the ICMPTime Exceeded packet

By default the MPLS labelcarried in the ICMP TimeExceeded is not displayedInstead only the pathinformation carried in theICMP Time Exceeded andPort-Unreachable packets isdisplayed


Specifies the name of the VPN instance towhich the destination address belongs


pipe Specifies the pipe mode When a probepacket passes through the MPLS domain theentire MPLS domain is considered as onehop and the IP TTL of the probe packet isreduced by one on the ingress node andegress node respectively

-

-w timeout Specifies the timeout period to wait for areply If a tracert packet times out whenreaching a gateway an asterisk () isdisplayed

In the case of poor network quality and a lownetwork transmission rate you are advised toprolong the timeout period

The value is an integer thatranges from 0 to 65535 inmilliseconds The defaultvalue is 5000



9101




-s packetsize Specifies the length of an ICMP EchoRequest message excluding the IP headerand ICMP header

The value is an integer thatranges from 12 to 9600 inbytes The default value is12

host Indicates the domain name or IPv4 address ofthe destination host

The value is a string of 1 to255 case-sensitivecharacters with spaces notsupported When doublequotation marks are usedaround the string spaces areallowed in the stringAlternatively the value canbe a valid IPv4 address indotted decimal notation

Views

All views

Default Level

0 Visit level

Usage Guidelines

Usage Scenario

During routine system maintenance you can run the ping command to check networkconnectivity If the ping fails run the tracert command to locate the fault on the network

You can specify different parameters in the tracert command for different scenarios

l To check information about nodes between the source and the destination run thetracert host command

l To check information about nodes between the source and the destination on a Layer 3VPN run the tracert -vpn-instance vpn-instance-name host command On a Layer 3VPN devices may not have routing information about each other Therefore you cannotuse the tracert host command to check whether the peer is reachable To checkinformation about nodes between the source and the destination in a specified VPNinstance run the tracert -vpn-instance vpn-instance-name host command

l On an unstable network you can run the tracert -q nqueries -w timeout host commandto check information about nodes between the source and the destination If the networkis unreliable set the packet transmission count (-q) and timeout (-w) to the upper limitsThis makes the test result accurate

l To check information about nodes along a segment of a path run the tracert -f first-ttl -m max-ttl host command that has initial TTL and maximum TTL specified

Prerequisite

l The UDP module of each node is working properly otherwise the tracert operation fails



9102



l If -vpn-instance is specified ensure that the VPN module of each node is workingproperly

l The ICMP module of each node is working properly otherwise is displayed

Procedure

The execution process of the tracert command is as follows

1 The source sends a packet with the TTL being 1 After the TTL times out the first hopsends an ICMP Error message to the source indicating that the packet cannot beforwarded

2 The source sends a packet with the TTL being 2 After the TTL times out the secondhop sends an ICMP Error message to the source indicating that the packet cannot beforwarded

3 The source sends a packet with the TTL being 3 After the TTL times out the third hopsends an ICMP Error message to the source indicating that the packet cannot beforwarded

4 The preceding process proceeds until the packet reaches the destination

When receiving a packet each destination hop cannot find the port specified in the packetand returns an ICMP Port Unreachable message indicating that the destination port isunreachable and the tracert ends In this manner the result of each probe is displayed on thesource according to which you can find the path from the source to the destination


If a fault occurs when you run the tracert command the following information may bedisplayedl H The host is unreachablel N The network is unreachablel The port is unreachablel P The protocol type is incorrectl F The packet is incorrectly fragmentedl S The source route is incorrect

Precautions

Once -r is specified the outputs of both the tracert and ping commands show informationabout nodes between the source and the destination Differences between the outputs of thetracert and ping commands are as follows

l If the ping command times out on a transit node a timeout packet is returned and thecommand output displays no path information

l If the tracert command times out on a transit node the command output displays indicating that the tracert times out on the node but the tracert is not interrupted

Example

Tracert the gateways from the source host to the destination host with the IP address being101111

ltHUAWEIgt tracert 101111traceroute to 101111 (101111) max hops 30 packet length 40 press CTRL_C to break



9103



1 1031121 10 ms 10 ms 10 ms2 10322161 19 ms 19 ms 19 ms3 4 5 6 7 101111 339 ms 279 ms 279 ms

Table 16-82 Description of the tracert command output

Item Description

traceroute to Tracert to a destination IP address

max hops Maximum TTL value

packet length Length of a sent packet

1031121 10 ms 10 ms 10 ms The integer 1 indicates the first hop gatewayEach hop increments the hop count By defaultthe maximum hop count is 301031121 is the gateway address of the firsthop The IPv4 address following the serialnumber of each hop is the gateway address of thehop10 ms 10 ms 10 ms indicates the differencebetween the time when the three UDP packets aresent and when corresponding ICMP TimeExceeded or ICMP Port Unreachable messagesare received By default each hop sends threeUDP probe packets

No ICMP Time Exceeded message or ICMP PortUnreachable message is returned within aspecified period on the Nth hop By default anICMP Time Exceeded message or ICMP Port-unreachable message should be returned within5000 ms

Related Topics16121 ping16122 ping ipv616124 tracert ipv6

16124 tracert ipv6

FunctionThe tracert ipv6 command checks the path of packets from the source to the destinationchecks IPv6 network connectivity and locates a network fault



9104



Formattracert ipv6 [ -a source-ipv6-address | -f first-hop-limit | -m max-hop-limit | -name | -p port-number | -q probes | -s packetsize | -w timeout | vpn-instance vpn-instance-name ] host

Parameters



Specifies the source address of a tracertpacket

If this parameter is not specified the IPaddress of the outbound interface is usedas the source IP address for sendingtracert packets


-f first-hop-limit

Specifies the initial hop-limit

Carried in the IPv6 header the hop-limit(time to live) indicates the lifetime ofIPv6 packets and specifies the maximumnumber of hops that the IPv6 packets canpass through The hop-limit field in IPv6packets is similar to the TTL field in theIPv4 packets The hop-limit value is seton the source and reduced by 1 each timethe packet passes through a Layer 3device When the hop-limit value isreduced to 0 on a Layer 3 device theLayer 3 device discards the packet andsends an ICMPv6 Timeout message tothe source

If first-hop-limit is specified and thenumber of hops is smaller than thespecified value the hop-limit value willbe greater than 0 after the packet passesthrough all the nodes Therefore noICMPv6 Timeout message is sent to thesource

If max-hop-limit is specified the value offirst-hop-limit must be smaller than thevalue of max-hop-limit




9105




-m max-hop-limit

Specifies the maximum hop-limit

Usually the maximum hop-limit is set tothe number of hops that a packet passesthrough To change the hop-limit valueyou need to use this parameter

If first-hop-limit is specified the value ofmax-hop-limit must be greater than thevalue of first-hop-limit


-name Displays the name of the destination host -

-p port-number

Specifies the UDP port number of thedestinationl If no UDP port number is specified

for the destination when you run thetracert ipv6 command a port withthe port number greater than 32768 israndomly chosen for the destinationto receive tracert packets

l Before specifying the UDP portnumber for the destination ensurethat the port is not in use otherwisethe tracert fails


-q probes Specifies the number of tracert packetssent each time

In the case of poor network quality youcan set probes to a comparatively largevalue to ensure that tracert packets canreach the destination




-w timeout Sets the timeout period to wait for areply

If a tracert packet times out whenreaching a gateway an asterisk () isdisplayed

In the case of poor network quality and alow network transmission rate you areadvised to prolong the timeout period




9106









Views

All views

Default Level

0 Visit level

Usage Guidelines

Usage Scenario

When a fault occurs on the network and the peer is an IPv6 device you can run the ping ipv6command to check network connectivity based on the reply message and then run the tracertipv6 command to locate the fault

You can specify different parameters in the tracert ipv6 command for different scenariosl To check information about nodes between the source and the IPv6 destination run the

tracert ipv6 host commandl To check information about nodes between the source and the IPv6 destination on a

Layer 3 VPN run the tracert ipv6 vpn-instance vpn-instance-name host command Ona Layer 3 VPN devices may not have routing information about each other Thereforeyou cannot use the tracert ipv6 host command to check whether the peer is reachableTo check information about nodes between the source and the IPv6 destination in aspecified VPN instance run the tracert ipv6 vpn-instance vpn-instance-name hostcommand

l On an unstable network you can run the tracert ipv6 -q probes -w timeout hostcommand to check information about nodes between the source and the IPv6 destinationIf the network is unreliable set the packet transmission count (-q) and timeout (-w) tothe upper limits This makes the test result accurate

l To check information about nodes along a segment of a path run the tracert ipv6 -ffirst-hop-limit -m max-hop-limit host command that has initial hop-limit and maximumhop-limit specified



9107



Prerequisites

l The UDP module of each node is working properly otherwise the IPv6 tracert operationfails

l The VPN module of each node is working properly if vpn-instance is specified

l The ICMPv6 module of each node is working properly otherwise is displayed

Procedure

The execution process of the tracert ipv6 command is as follows

l The source sends a packet with the hop-limit being 1 After the hop-limit times out thefirst hop sends an ICMPv6 Error message to the source indicating that the packet cannotbe forwarded

l The source sends a packet with the hop-limit being 2 After the hop-limit times out thesecond hop sends an ICMPv6 Error message to the source indicating that the packetcannot be forwarded

l The source sends a packet with the hop-limit being 3 After the hop-limit times out thethird hop sends an ICMPv6 Error message to the source indicating that the packetcannot be forwarded

l The preceding process proceeds until the packet reaches the destination

When receiving an IPv6 packet each destination hop cannot find the port specified in theIPv6 packet and therefore returns an ICMPv6 Port Unreachable message indicating that thedestination port is unreachable and the IPv6 tracert ends In this manner the result of eachprobe is displayed on the source according to which you can find the path from the source tothe destination


If a fault occurs when you run the tracert ipv6 command the following information may bedisplayed

l H The host is unreachable

l N The network is unreachable

l The port is unreachable

l P The protocol type is incorrect

l F The packet is incorrectly fragmented

l S The source route is incorrect

Precautions

By default the ICMPv6 module is automatically enabled after you enable the IPv6 module

Example

Set the number of packets to be sent to 5 and timeout period to 8000 ms and tracert thegateways from the source to the destination at FC003

ltHUAWEIgt tracert ipv6 -q 5 -w 8000 FC003traceroute to FC003 30 hops max60 bytes packet1 FC0013 26 ms 23 ms 26 ms 30 ms 29 ms 2 FC003 3020 ms 3024 ms 4040 ms 6820 ms 5584 ms



9108



Table 16-83 Description of the tracert ipv6 command output

Item Description

traceroute to HHHHHHH IPv6 address of the destination host

x hops max Maximum hop-limit value

x bytes packet Length of a tracert packet

12

Sequence number of the received ICMPv6Echo Reply message

HHHHHHH Address of the IPCMPv6 Echo Replymessage

26 ms 23 ms 26 ms 30 ms 29 ms RTT in milliseconds

Related Topics16122 ping ipv6



9109



16 Network Management and Monitoring Commands






















16121 snmp-agent


















































16211 rmon alarm

16212 rmon event

16213 rmon history

16214 rmon prialarm







1631 cdp clear neighbor



1634 display cdp neighborbrief












16316 lldp enable (interfaceview)



16319 lldp message-transmissiondelay


16321 lldp message-transmissioninterval












1641 binding








1649 path

16410 pm

16411 pm-server

16412 protocol




16416 retry








16424 upload

16425 upload auto

16426 upload-config



1651 ach





1656 dcp

1657 dcp id
















16523 in-group




16527 ipfpm tlp














16541 mcp id


16543 nqa ipfpm dcp

16544 nqa ipfpm mcp

16545 out-group




16549 tlp


1661 agetime

1662 clear-records


1664 datafill

1665 datasize








16613 dns-server

16614 fail-percent

16615 frequency

16616 ftp-filename

16617 ftp-filesize

16618 ftp-operation

16619 ftp-password

16620 ftp-username


16622 http-url



16625 ip-forwarding


16627 local-pw-id

16628 local-pw-type

16629 label-type

16630 lsp-exp

16631 lsp-nexthop

16632 lsp-replymode

16633 lsp-tetunnel

16634 lsp-type

16635 lsp-version

16636 md

16637 mep

16638 nexthop

16639 nqa




16643 probe-count


16645 records

16646 remote-pw-id



16649 send-trap


16651 set-df



16654 source-port

16655 start

16656 stop


16658 test-type


16660 threshold

16661 timeout

16662 tos



16665 ttl

16666 ttl-copymode


16668 vc-type

16669 vpn-instance







1676 trace enable

1677 trace object





1683 mac-mirroring







1691 capture-packet














161012 enable


161014 ip netstream





161019 ip netstream exportversion












161031 mask

161032 match ip







16111 display sflow


16113 sflow agent









16121 ping

16122 ping ipv6

16123 tracert

16124 tracert ipv6

S1720&S2700&S5700&S6720 Series Ethernet Switches Commands

Documents

Transcript of S1720&S2700&S5700&S6720 Series Ethernet Switches Commands