iscom2924gf-4ge_4c configuration guide (a_01).pdf

8/18/2019 ISCOM2924GF-4GE_4C Configuration Guide (A_01).pdf

1/336

www.raisecom.com

ISCOM2924GF-4GE/4C Configuration Guide


2/336

Legal Notices

Raisecom Technology Co., Ltd makes no w arranty of a ny ki nd w ith r egard t o t his manual,

including, but not l imited to, the implied warranties of merchantability and fitness for a pa rticular

purpose. Raisecom Technology Co., Ltd shall not be held liable for errors contained herein or direct,indirect, special, incidental or consequential damages in connection with the furnishing, performance,

or use of this material.

Warranty.

A copy of the specific warranty terms applicable to your Raisecom product and replacement parts

can be obtained from Service Office.

Restricted Rights Legend.

All rights are reserved. No part of this document may be photocopied, reproduced, or t ranslated to

another language w ithout t he pr ior w ritten c onsent of Raisecom Technology Co., Ltd. The

information contained in this document is subject to change without notice.

Copyright Notices.

Copyright ©2007 Raisecom. All rights reserved.

No part of this publication may be excerpted, reproduced, translated or utilized in any form or by any

means, e lectronic or m echanical, i ncluding phot ocopying a nd m icrofilm, w ithout pe rmission i n

Writing from Raisecom Technology Co., Ltd.

Trademark Notices

is the trademark of Raisecom Technology Co., Ltd.

Java™ is a U.S. trademark of Sun Microsystems, Inc.

Microsoft® is a U.S. registered trademark of Microsoft Corporation.

Windows NT® is a U.S. registered trademark of Microsoft Corporation.

Windows® 2000 is a U.S. registered trademark of Microsoft Corporation.

Windows® XP is a U.S. registered trademark of Microsoft Corporation.

Windows® and MS Windows® are U.S. registered trademarks of

Microsoft Corporation.


3/336

Contact Information

Technical Assistance Center

The Raisecom TAC i s av ailable t o all cus tomers w ho need technical as sistance w ith a R aisecom

product, technology, or, solution. You can communicate with us through the following methods:

Address: Building 2, No. 28 of the Shangdi 6th Street, Haidian District, Beijing 100085

Tel: +86-10-82883305

Fax: +86-10-82883056

World Wide Web

You c an a ccess t he m ost c urrent R aisecom pr oduct i nformation on t he World W ide Web a t t he

following URL:

http://www.raisecom.com

Feedback

Comments a nd que stions a bout how t he ISCOM2924GF-4GE/4C system sof tware w orks a re

welcomed. Please review the FAQ in the related manual, and if your question is not c overed, send

email by using the following web page:

http://www.raisecom.com/en/contact-us.html.

If you have comments on the ISCOM2924GF-4GE/4C specification, instead of the web page above,

please send comments to:

[email protected]

We hope to hear from you!

http://www.raisecom.com/http://www.raisecom.com/http://www.raisecom.com/en/contact-us.htmhttp://www.raisecom.com/en/contact-us.htmmailto:[email protected]:[email protected]:[email protected]://www.raisecom.com/en/contact-us.htmhttp://www.raisecom.com/


4/336

CONTENTS

Chapter 1 Function Overview ------------------------------------------------------------------------- 1

Chapter 2

Basic Configuration ----------------------------------------------------------------------- 3

2.1 Login device -------------------------------------------------------------------------------------------------------------- 3 2.1.1

Brief introduction ----------------------------------------------------------------------------------------------------------------------- 3

2.1.2

Login the device from Console port ----------------------------------------------------------------------------------------------- 3

2.1.3 Login the device from Telnet ------------------------------------------------------------------------------------------------------- 5 2.1.4

Login the device from SSHv2 ------------------------------------------------------------------------------------------------------ 7

2.1.5

Manage the login user ---------------------------------------------------------------------------------------------------------------- 8

2.1.6

Check the configuration -------------------------------------------------------------------------------------------------------------- 9

2.2 Command line ----------------------------------------------------------------------------------------------------------- 9 2.2.1

Brief introduction ----------------------------------------------------------------------------------------------------------------------- 9

2.2.2

Command line level ------------------------------------------------------------------------------------------------------------------- 9

2.2.3

Command line mode ---------------------------------------------------------------------------------------------------------------- 10

2.2.4 Command line shortcut -------------------------------------------------------------------------------------------------------------11 2.2.5

Command line help message ---------------------------------------------------------------------------------------------------- 12

2.2.6

Command line display message ------------------------------------------------------------------------------------------------- 14

2.2.7

Command line history message ------------------------------------------------------------------------------------------------- 15

2.2.8

Restore command line default value ------------------------------------------------------------------------------------------- 15

2.3 Manage files ------------------------------------------------------------------------------------------------------------ 16 2.3.1

Management of BootROM files -------------------------------------------------------------------------------------------------- 16

2.3.2

Management of system files ------------------------------------------------------------------------------------------------------ 17

2.3.3 Management of configuration files ---------------------------------------------------------------------------------------------- 17 2.3.4 Checking configuration ------------------------------------------------------------------------------------------------------------- 18

2.4

Upload and upgrade ------------------------------------------------------------------------------------------------- 18

2.4.1

Overview ------------------------------------------------------------------------------------------------------------------------------- 18

2.4.2

Configure TFTP auto-upload method ------------------------------------------------------------------------------------------- 19

2.4.3

Upgrade system software by BootROM --------------------------------------------------------------------------------------- 20

2.4.4

Upgrade system software by FTP/TFTP -------------------------------------------------------------------------------------- 21

2.4.5

Checking configuration ------------------------------------------------------------------------------------------------------------- 22

2.5

Configure clock management ------------------------------------------------------------------------------------ 22

2.5.1

Configure time and time zone ---------------------------------------------------------------------------------------------------- 22

2.5.2 Configure daylight saving time --------------------------------------------------------------------------------------------------- 23 2.5.3 Configure NTP ----------------------------------------------------------------------------------------------------------------------- 23 2.5.4

Configure SNTP --------------------------------------------------------------------------------------------------------------------- 24

2.5.5


2.6 Configure interface management ------------------------------------------------------------------------------- 25 2.6.1

Default configuration of interface ------------------------------------------------------------------------------------------------ 25

2.6.2

Configure basic attributes for interface ----------------------------------------------------------------------------------------- 25

2.6.3

Configure interface statistics ------------------------------------------------------------------------------------------------------ 26

2.6.4 Configure interface flow control -------------------------------------------------------------------------------------------------- 27 2.6.5 Configure interface open/shutdown --------------------------------------------------------------------------------------------- 27 2.6.6


2.7

Configure basic information for device ----------------------------------------------------------------------- 27

2.8

Configure task calling function ---------------------------------------------------------------------------------- 28

2.9 Configure watchdog ------------------------------------------------------------------------------------------------- 29 2.10 Configuration examples -------------------------------------------------------------------------------------------- 29

2.10.1

Configure TFTP auto-loading example ----------------------------------------------------------------------------------------- 29

Chapter 3 Ethernet -------------------------------------------------------------------------------------- 31 3.1 Overview ----------------------------------------------------------------------------------------------------------------- 31

3.1.1

Ethernet interface -------------------------------------------------------------------------------------------------------------------- 31

3.1.2

MAC address forwarding table --------------------------------------------------------------------------------------------------- 32

3.1.3

VLAN ----------------------------------------------------------------------------------------------------------------------------------- 35

3.1.4

QinQ ------------------------------------------------------------------------------------------------------------------------------------ 36

3.1.5 VLAN mapping ----------------------------------------------------------------------------------------------------------------------- 37 3.1.6

STP/RSTP/MSTP ------------------------------------------------------------------------------------------------------------------- 38

3.1.7

Loopback detection ----------------------------------------------------------------------------------------------------------------- 42

3.1.8

Interface protection ------------------------------------------------------------------------------------------------------------------ 43 3.1.9

Interface mirror ----------------------------------------------------------------------------------------------------------------------- 43

3.1.10

Layer-2 protocol transparent transmission ------------------------------------------------------------------------------------ 44

3.2 Configure MAC address forwarding table ------------------------------------------------------------------- 44


5/336

3.2.1

Preparation for configuration ----------------------------------------------------------------------------------------------------- 44

3.2.2

Default configuration of MAC address forwarding table ------------------------------------------------------------------- 45

3.2.3

Configure static MAC address --------------------------------------------------------------------------------------------------- 45

3.2.4 Configure MAC address learning ------------------------------------------------------------------------------------------------ 45 3.2.5 Configure MAC address learning amount limit ------------------------------------------------------------------------------- 46 3.2.6

Configure MAC address aging time --------------------------------------------------------------------------------------------- 46

3.2.7


3.3 Configure VLAN ------------------------------------------------------------------------------------------------------- 47

3.3.1


3.3.2

Default configuration of VLAN ---------------------------------------------------------------------------------------------------- 47

3.3.3

Configure VLAN attributes -------------------------------------------------------------------------------------------------------- 48

3.3.4 Configure interface mode ---------------------------------------------------------------------------------------------------------- 48 3.3.5 Configure VLAN over Access interface ---------------------------------------------------------------------------------------- 48 3.3.6

Configure VLAN over Trunk interface ------------------------------------------------------------------------------------------ 49

3.3.7


3.4 Configure QinQ -------------------------------------------------------------------------------------------------------- 50 3.4.1


3.4.2

Default configuration of QinQ ----------------------------------------------------------------------------------------------------- 50

3.4.3

Configure basic QinQ --------------------------------------------------------------------------------------------------------------- 51

3.4.4

Configure flexible QinQ ------------------------------------------------------------------------------------------------------------ 51

3.4.5 Configure egress interface in Trunk mode ------------------------------------------------------------------------------------ 51 3.4.6


3.5

Configure VLAN mapping ----------------------------------------------------------------------------------------- 52

3.5.1


3.5.2

Configure 1:1 VLAN mapping ---------------------------------------------------------------------------------------------------- 52

3.5.3


3.6 Configure STP --------------------------------------------------------------------------------------------------------- 53 3.6.1


3.6.2

Default configuration of STP ------------------------------------------------------------------------------------------------------ 53

3.6.3

Enable STP function ---------------------------------------------------------------------------------------------------------------- 53

3.6.4 Configure STP parameter --------------------------------------------------------------------------------------------------------- 54 3.6.5


3.7

Configure MSTP------------------------------------------------------------------------------------------------------- 55

3.7.1


3.7.2

Default configuration of MSTP --------------------------------------------------------------------------------------------------- 55

3.7.3

Enable MSTP function-------------------------------------------------------------------------------------------------------------- 55

3.7.4

Configure MST domain and its maximum hop count ----------------------------------------------------------------------- 56

3.7.5

Configure root bridge/backup bridge ------------------------------------------------------------------------------------------- 56

3.7.6 Configure device interface and system priority ------------------------------------------------------------------------------ 57 3.7.7 Configure network diameter for switch network ------------------------------------------------------------------------------ 58 3.7.8

Configure inner path overhead for interface ---------------------------------------------------------------------------------- 58

3.7.9

Configure external path cost for interface ------------------------------------------------------------------------------------- 59

3.7.10

Configure maximum transmitting speed for interface ---------------------------------------------------------------------- 59

3.7.11

Configure MSTP timer -------------------------------------------------------------------------------------------------------------- 59

3.7.12 Configure edge port ----------------------------------------------------------------------------------------------------------------- 60 3.7.13 Configure link type ------------------------------------------------------------------------------------------------------------------ 60 3.7.14

Configure root interface protection ---------------------------------------------------------------------------------------------- 61

3.7.15

Configure loopguard for interface ----------------------------------------------------------------------------------------------- 61

3.7.16

Execute mcheck operation -------------------------------------------------------------------------------------------------------- 62

3.7.17


3.8 Configure loopback detection ----------------------------------------------------------------------------------- 62 3.8.1


3.8.2 Default configuration of loopback detection ----------------------------------------------------------------------------------- 63 3.8.3 Configure loopback detection function ----------------------------------------------------------------------------------------- 63 3.8.4


3.9

Configure interface protection ----------------------------------------------------------------------------------- 64

3.9.1


3.9.2

Default configuration for interface protection --------------------------------------------------------------------------------- 64

3.9.3

Configure interface protection ---------------------------------------------------------------------------------------------------- 64

3.9.4


3.10 Configure interface mirror ----------------------------------------------------------------------------------------- 65 3.10.1


3.10.2 Default configuration for interface mirror -------------------------------------------------------------------------------------- 65 3.10.3 Configure mirror function for local interface ----------------------------------------------------------------------------------- 66 3.10.4


3.11

Configure layer-2 protocol transparent transmission --------------------------------------------------- 66

3.11.1


3.11.2

Default configuration of layer-2 protocol transparent transmission ----------------------------------------------------- 67

3.11.3

Configure transparent transmission parameter ------------------------------------------------------------------------------ 67


6/336

3.11.4

(Optional) Configure transparent transmission speed for message ---------------------------------------------------- 68

3.11.5


3.12 Maintenance ------------------------------------------------------------------------------------------------------------ 68 3.13 Configure examples ------------------------------------------------------------------------------------------------- 69

3.13.1

Configure MAC address forwarding table ------------------------------------------------------------------------------------- 69

3.13.2

Configure VLAN and interface protection ------------------------------------------------------------------------------------- 70

3.13.3

Configure basic QinQ --------------------------------------------------------------------------------------------------------------- 73

3.13.4 Configure flexible QinQ ------------------------------------------------------------------------------------------------------------ 75

3.13.5

Configure VLAN mapping --------------------------------------------------------------------------------------------------------- 77 3.13.6

Configure STP ------------------------------------------------------------------------------------------------------------------------ 79

3.13.7

Configure MSTP --------------------------------------------------------------------------------------------------------------------- 83

3.13.8

Configure loopback detection ---------------------------------------------------------------------------------------------------- 88

3.13.9

Configure interface mirror --------------------------------------------------------------------------------------------------------- 90

3.13.10 Configure layer-2 protocol transparent transmission ----------------------------------------------------------------------- 91

Chapter 4 Routing --------------------------------------------------------------------------------------- 94 4.1 Overview ----------------------------------------------------------------------------------------------------------------- 94

4.1.1

ARP ------------------------------------------------------------------------------------------------------------------------------------- 94

4.1.2

Layer-3 interface --------------------------------------------------------------------------------------------------------------------- 95

4.1.3

Routing --------------------------------------------------------------------------------------------------------------------------------- 95

4.2 Configure ARP --------------------------------------------------------------------------------------------------------- 96 4.2.1


4.2.2 Default configuration of ARP ------------------------------------------------------------------------------------------------------ 96

4.2.3

Configure static ARP table entry ------------------------------------------------------------------------------------------------- 96 4.2.4

Configure dynamic ARP table entry --------------------------------------------------------------------------------------------- 96

4.2.5


4.3 Configure layer-3 interface ---------------------------------------------------------------------------------------- 97 4.3.1


4.3.2

Configure layer-3 interface -------------------------------------------------------------------------------------------------------- 97

4.3.3


4.4 Configure statistic routing ---------------------------------------------------------------------------------------- 98 4.4.1


4.4.2 Configure default gateway -------------------------------------------------------------------------------------------------------- 98 4.4.3 Configure static routing ------------------------------------------------------------------------------------------------------------ 99 4.4.4


4.5 Maintenance ------------------------------------------------------------------------------------------------------------ 99 4.6

Configuration examples -------------------------------------------------------------------------------------------- 99

4.6.1

Configure ARP ----------------------------------------------------------------------------------------------------------------------- 99

4.6.2

Configure layer-3 interface to intercommunicate with host -------------------------------------------------------------- 101

4.6.3

Configure static routing ----------------------------------------------------------------------------------------------------------- 102

Chapter 5 DHCP ----------------------------------------------------------------------------------------- 105 5.1

Overview --------------------------------------------------------------------------------------------------------------- 105

5.1.1 DHCP overview --------------------------------------------------------------------------------------------------------------------- 105 5.1.2

DHCP packet ------------------------------------------------------------------------------------------------------------------------ 106

5.1.3

DHCP Option ------------------------------------------------------------------------------------------------------------------------ 107

5.1.4

DHCP client -------------------------------------------------------------------------------------------------------------------------- 108

5.1.5

DHCP Snooping -------------------------------------------------------------------------------------------------------------------- 109

5.2 Configure DHCP client -------------------------------------------------------------------------------------------- 110 5.2.1

Preparation for configuration ---------------------------------------------------------------------------------------------------- 110

5.2.2

Default configuration of DHCP client ------------------------------------------------------------------------------------------ 110

5.2.3

Configure DHCP client ------------------------------------------------------------------------------------------------------------ 111

5.2.4

Checking configuration ------------------------------------------------------------------------------------------------------------ 111

5.3

Configure DHCP Snooping -------------------------------------------------------------------------------------- 112

5.3.1


5.3.2

Default configuration of DHCP Snooping ------------------------------------------------------------------------------------- 112

5.3.3

Configure DHCP Snooping------------------------------------------------------------------------------------------------------- 112

5.3.4


5.4 Configure DHCP Option ------------------------------------------------------------------------------------------ 114 5.4.1


5.4.2

Default configuration of DHCP Option----------------------------------------------------------------------------------------- 115

5.4.3 Configure DHCP Option field over IPv4--------------------------------------------------------------------------------------- 115 5.4.4 Configure DHCP Option field over IPv6--------------------------------------------------------------------------------------- 116 5.4.5


5.5 Configuring applications ---------------------------------------------------------------------------------------- 116

5.5.1

Configure DHCP clients application-------------------------------------------------------------------------------------------- 116 5.5.2

Configure DHCP Snooping application --------------------------------------------------------------------------------------- 118

Chapter 6 QoS ------------------------------------------------------------------------------------------- 120 6.1

Overview --------------------------------------------------------------------------------------------------------------- 120


7/336

6.1.1

Service model ----------------------------------------------------------------------------------------------------------------------- 120

6.1.2

Priority trust -------------------------------------------------------------------------------------------------------------------------- 122

6.1.3

Traffic classification ---------------------------------------------------------------------------------------------------------------- 122

6.1.4 Traffic policy -------------------------------------------------------------------------------------------------------------------------- 124 6.1.5 Priority mapping --------------------------------------------------------------------------------------------------------------------- 125 6.1.6

Queue schedule -------------------------------------------------------------------------------------------------------------------- 125

6.1.7

Rate limit over interface and VLAN -------------------------------------------------------------------------------------------- 126

6.2 Configure priority trust ------------------------------------------------------------------------------------------- 127

6.2.1


6.2.2

Default configuration of priority trust ------------------------------------------------------------------------------------------- 127

6.2.3

Configure interface priority trust ------------------------------------------------------------------------------------------------ 127

6.2.4 Checking configuration ------------------------------------------------------------------------------------------------------------ 127

6.3

Configure traffic classification and traffic policy -------------------------------------------------------- 128

6.3.1 Preparation for configuration ---------------------------------------------------------------------------------------------------- 128 6.3.2 Default configuration of traffic classification and traffic policy ----------------------------------------------------------- 128 6.3.3 Create and configure traffic classification ------------------------------------------------------------------------------------ 128 6.3.4

Create traffic rate limit rule ------------------------------------------------------------------------------------------------------- 129

6.3.5

Create and configure traffic policy ---------------------------------------------------------------------------------------------- 129

6.3.6


6.4 Configure internal priority and queue schedule --------------------------------------------------------- 131 6.4.1


6.4.2 Configure mapping relationship between DSCP priority and local priority ------------------------------------------- 131

6.4.3

Configure mapping relationship between CoS priority and local priority --------------------------------------------- 131

6.4.4

Configure internal priority over interface -------------------------------------------------------------------------------------- 132

6.4.5

Configure SP queue schedule--------------------------------------------------------------------------------------------------- 132

6.4.6

Configure WRR or SP+WRR queue schedule ------------------------------------------------------------------------------ 132

6.4.7

Configure DRR or SP+DRR queue schedule ------------------------------------------------------------------------------- 133

6.4.8


6.5 Configure traffic rate limit over interface and VLAN --------------------------------------------------- 133 6.5.1


6.5.2 Configure traffic rate limit over interface -------------------------------------------------------------------------------------- 133 6.5.3

Configure traffic rate limit over VLAN or QinQ ------------------------------------------------------------------------------ 134

6.5.4


6.6 Maintenance ---------------------------------------------------------------------------------------------------------- 134 6.7

Configuring applications ---------------------------------------------------------------------------------------- 135

6.7.1

Configure traffic rate limit over traffic policy ---------------------------------------------------------------------------------- 135

6.7.2

Configure queue schedule application ---------------------------------------------------------------------------------------- 137

6.7.3

Configure traffic rate limit over interface application ----------------------------------------------------------------------- 139

Chapter 7 Multicast ------------------------------------------------------------------------------------ 141 7.1

Overview --------------------------------------------------------------------------------------------------------------- 141

7.1.1 Multicast overview ------------------------------------------------------------------------------------------------------------------ 141 7.1.2

Basic functions of IGMP ---------------------------------------------------------------------------------------------------------- 146

7.1.3

IGMP Snooping --------------------------------------------------------------------------------------------------------------------- 147

7.1.4

IGMP MVR --------------------------------------------------------------------------------------------------------------------------- 147

7.1.5

IGMP Proxy -------------------------------------------------------------------------------------------------------------------------- 147

7.1.6 IGMP filtering ------------------------------------------------------------------------------------------------------------------------ 148

7.2 Configure IGMP foundation ------------------------------------------------------------------------------------- 148 7.2.1 Configure basic function of IGMP ---------------------------------------------------------------------------------------------- 148 7.2.2 Check configuration ---------------------------------------------------------------------------------------------------------------- 149

7.3

Configure IGMP Snooping--------------------------------------------------------------------------------------- 149

7.3.1

Configuration preparation -------------------------------------------------------------------------------------------------------- 149

7.3.2

Default configuration of IGMP Snooping-------------------------------------------------------------------------------------- 150

7.3.3

Configure IGMP Snooping function -------------------------------------------------------------------------------------------- 150

7.3.4

Check configuration ---------------------------------------------------------------------------------------------------------------- 150

7.4 Configure IGMP MVR ---------------------------------------------------------------------------------------------- 151 7.4.1


7.4.2

Default configuration of IGMP MVR-------------------------------------------------------------------------------------------- 151

7.4.3

Configure IGMP MVR function -------------------------------------------------------------------------------------------------- 152

7.4.4 Check configuration ---------------------------------------------------------------------------------------------------------------- 152

7.5

Configure IGMP Proxy -------------------------------------------------------------------------------------------- 152

7.5.1 Configuration preparation -------------------------------------------------------------------------------------------------------- 152 7.5.2

Default configuration of IGMP Proxy------------------------------------------------------------------------------------------- 153

7.5.3

Configure IGMP Proxy function ------------------------------------------------------------------------------------------------- 153

7.5.4


7.6

Configure IGMP filtering ----------------------------------------------------------------------------------------- 154

7.6.1


7.6.2

Default configuration of IGMP fi ltering----------------------------------------------------------------------------------------- 154

7.6.3

Configure to enable global IGMP filtering ------------------------------------------------------------------------------------ 154


8/336

7.6.4

Configure IGMP filtering template ---------------------------------------------------------------------------------------------- 155

7.6.5

Configure the maximum multicast group number restriction ------------------------------------------------------------ 155

7.6.6


7.7 Maintenance ---------------------------------------------------------------------------------------------------------- 156 7.8 Configuration application --------------------------------------------------------------------------------------- 156

7.8.1

Configure IGMP Snooping and IGMP Proxy application ----------------------------------------------------------------- 156

7.8.2

Configure IGMP MVR application ---------------------------------------------------------------------------------------------- 158

7.8.3 Configure IGMP filtering example under the interface -------------------------------------------------------------------- 160

7.8.4

Configure ring network multicast application example -------------------------------------------------------------------- 162 Chapter 8

Security ------------------------------------------------------------------------------------- 165

8.1 Overview --------------------------------------------------------------------------------------------------------------- 165 8.1.1

ACL ------------------------------------------------------------------------------------------------------------------------------------ 165

8.1.2

RADIUS ------------------------------------------------------------------------------------------------------------------------------- 165

8.1.3 TACACS+ ----------------------------------------------------------------------------------------------------------------------------- 166 8.1.4

Storm suppression ----------------------------------------------------------------------------------------------------------------- 166

8.2

Configure ACL ------------------------------------------------------------------------------------------------------- 167

8.2.1


8.2.2

Default configuration of ACL ----------------------------------------------------------------------------------------------------- 167

8.2.3

Configure IP ACL ------------------------------------------------------------------------------------------------------------------- 168

8.2.4

Configure IPv6 ACL ---------------------------------------------------------------------------------------------------------------- 168

8.2.5

Configure MAC ACL --------------------------------------------------------------------------------------------------------------- 168

8.2.6 Configure MAP ACL---------------------------------------------------------------------------------------------------------------- 169

8.2.7

ACL application on device -------------------------------------------------------------------------------------------------------- 171 8.2.8


8.3 Configure RADIUS ------------------------------------------------------------------------------------------------- 173 8.3.1


8.3.2

Default configuration of RADIUS ----------------------------------------------------------------------------------------------- 173

8.3.3

Configure RADIUS authentication ---------------------------------------------------------------------------------------------- 173

8.3.4

Configure RADIUS accounting -------------------------------------------------------------------------------------------------- 174

8.3.5 Checking configuration ------------------------------------------------------------------------------------------------------------ 175

8.4

Configure TACACS+ ----------------------------------------------------------------------------------------------- 175

8.4.1 Preparation for configuration ---------------------------------------------------------------------------------------------------- 175 8.4.2 Default configuration of TACACS+ --------------------------------------------------------------------------------------------- 175 8.4.3

Configure TACACS+ authentication ------------------------------------------------------------------------------------------- 175

8.4.4

Configure TACACS+ accountion------------------------------------------------------------------------------------------------ 176

8.4.5


8.5

Configure storm suppression ---------------------------------------------------------------------------------- 177

8.5.1


8.5.2

Default configuration of storm suppression ---------------------------------------------------------------------------------- 177

8.5.3 Configure storm suppression function ----------------------------------------------------------------------------------------- 178 8.5.4 Checking configuration ------------------------------------------------------------------------------------------------------------ 178

8.6

Maintenance ---------------------------------------------------------------------------------------------------------- 178

8.7 Configuring applications ---------------------------------------------------------------------------------------- 178 8.7.1 Configure ACL application -------------------------------------------------------------------------------------------------------- 178 8.7.2 Configure RADIUS application -------------------------------------------------------------------------------------------------- 179 8.7.3

Configure TACACS+ application ------------------------------------------------------------------------------------------------ 181

8.7.4

Configure storm suppressionapplication -------------------------------------------------------------------------------------- 182

Chapter 9 Reliability ----------------------------------------------------------------------------------- 183 9.1 Overview --------------------------------------------------------------------------------------------------------------- 183

9.1.1

Link aggregation -------------------------------------------------------------------------------------------------------------------- 183

9.1.2

Interface backup -------------------------------------------------------------------------------------------------------------------- 184

9.1.3

ELPS ----------------------------------------------------------------------------------------------------------------------------------- 186

9.1.4

ERPS ---------------------------------------------------------------------------------------------------------------------------------- 186

9.1.5

Ethernet ring ------------------------------------------------------------------------------------------------------------------------- 186

9.2 Configure link aggregation -------------------------------------------------------------------------------------- 188 9.2.1


9.2.2

Default configuration of link aggregation ------------------------------------------------------------------------------------- 188

9.2.3 Configure link aggregation in manual mode --------------------------------------------------------------------------------- 189 9.2.4 Configure static LACP link aggregation --------------------------------------------------------------------------------------- 190 9.2.5


9.3 Configure interface backup ------------------------------------------------------------------------------------- 191 9.3.1


9.3.2

Default configuration of interface backup ------------------------------------------------------------------------------------- 192

9.3.3

Configure the basic function of interface backup --------------------------------------------------------------------------- 192

9.3.4

(Optional) Configure interface forced switch --------------------------------------------------------------------------------- 193


9.4

Configure ELPS ----------------------------------------------------------------------------------------------------- 194

9.4.1 Preparation for configuration ---------------------------------------------------------------------------------------------------- 194


9/336

9.4.2

Default configuration of ELPS --------------------------------------------------------------------------------------------------- 194

9.4.3

Create protection line -------------------------------------------------------------------------------------------------------------- 195

9.4.4

Configure ELPS fault detection mode ----------------------------------------------------------------------------------------- 196

9.4.5 (Optional) Configure ELPS switching control -------------------------------------------------------------------------------- 196 9.4.6 Check configuration ---------------------------------------------------------------------------------------------------------------- 197

9.5

Configure ERPS ----------------------------------------------------------------------------------------------------- 197

9.5.1 Preparation for configuration ---------------------------------------------------------------------------------------------------- 197 9.5.2

Default configuration of ERPS -------------------------------------------------------------------------------------------------- 197

9.5.3

Create ERPS protection ring ---------------------------------------------------------------------------------------------------- 198

9.5.4

(Optional) Create ERPS protection sub-ring --------------------------------------------------------------------------------- 200

9.5.5

Configure ERPS fault detection mode ---------------------------------------------------------------------------------------- 201

9.5.6 (Optional) Configure ERPS switching control ------------------------------------------------------------------------------- 201 9.5.7 Checking configuration ------------------------------------------------------------------------------------------------------------ 202

9.6

Configure Ethernet ring ------------------------------------------------------------------------------------------ 202

9.6.1 Preparation for configuration ---------------------------------------------------------------------------------------------------- 202 9.6.2 Default configuration of Ethernet ring ----------------------------------------------------------------------------------------- 203 9.6.3

Create Ethernet ring --------------------------------------------------------------------------------------------------------------- 203

9.6.4

Configure basic function of ring ------------------------------------------------------------------------------------------------- 203

9.6.5


9.7 Maintenance ---------------------------------------------------------------------------------------------------------- 204 9.8 Configuring applications ---------------------------------------------------------------------------------------- 205

9.8.1

Configuring application of link aggregation in manual mode ------------------------------------------------------------ 205

9.8.2

Configuring application of link aggregation in static LACP mode ------------------------------------------------------ 207 9.8.3 Configure interface backup application --------------------------------------------------------------------------------------- 209

9.8.4 Configuring application of ELPS protection in 1:1 mode ----------------------------------------------------------------- 210 9.8.5

Configuring application of ELPS protection in 1+1 mode----------------------------------------------------------------- 212

9.8.6

Configuring application of single ring ERPS protection ------------------------------------------------------------------- 215

9.8.7

Configuring application of double ring ERPS protection ------------------------------------------------------------------ 218

9.8.8

Configure Ethernet ring application -------------------------------------------------------------------------------------------- 222

Chapter 10 OAM ------------------------------------------------------------------------------------------ 225 10.1

Overview --------------------------------------------------------------------------------------------------------------- 225

10.1.1

OAM overview ----------------------------------------------------------------------------------------------------------------------- 225

10.1.2

EFM ------------------------------------------------------------------------------------------------------------------------------------ 226

10.1.3

CFM ------------------------------------------------------------------------------------------------------------------------------------ 226

10.1.4

SLA ------------------------------------------------------------------------------------------------------------------------------------- 228

10.1.5 E-LMI ---------------------------------------------------------------------------------------------------------------------------------- 229

10.2

EFM ---------------------------------------------------------------------------------------------------------------------- 229 10.2.1 Preparation for configuration ---------------------------------------------------------------------------------------------------- 229

10.2.2 Default configuration of EFM ---------------------------------------------------------------------------------------------------- 229 10.2.3

Basic functions of EFM ------------------------------------------------------------------------------------------------------------ 230

10.2.4

Active functions of EFM ----------------------------------------------------------------------------------------------------------- 231

10.2.5

Passive functions of EFM -------------------------------------------------------------------------------------------------------- 232

10.2.6


10.3 CFM --------------------------------------------------------------------------------------------------------------------- 234 10.3.1


10.3.2 Default configuration of CFM ---------------------------------------------------------------------------------------------------- 235 10.3.3 Enable CFM -------------------------------------------------------------------------------------------------------------------------- 236 10.3.4

Basic functions of CFM ----------------------------------------------------------------------------------------------------------- 237

10.3.5

Configure fault detection ---------------------------------------------------------------------------------------------------------- 238

10.3.6

Configure fault acknowledgement ---------------------------------------------------------------------------------------------- 239

10.3.7

Configure fault location ------------------------------------------------------------------------------------------------------------ 240 10.3.8

Configure AIS function ------------------------------------------------------------------------------------------------------------ 241

10.3.9 Configure Ethernet signal lockout function ----------------------------------------------------------------------------------- 241 10.3.10


10.4

SLA ---------------------------------------------------------------------------------------------------------------------- 242

10.4.1


10.4.2

Default configuration of SLA ----------------------------------------------------------------------------------------------------- 243

10.4.3

Basic information of SLA --------------------------------------------------------------------------------------------------------- 243

10.4.4

Configure SLA schedule information and enable schedule -------------------------------------------------------------- 244

10.4.5


10.5 E-LMI -------------------------------------------------------------------------------------------------------------------- 245 10.5.1


10.5.2 Default configuration of E-LMI --------------------------------------------------------------------------------------------------- 245 10.5.3 Configure E-LMI function for PE device -------------------------------------------------------------------------------------- 246

10.5.4

Configure E-LMI function for CE device -------------------------------------------------------------------------------------- 248 10.5.5


10.6 Maintenance ---------------------------------------------------------------------------------------------------------- 249 10.7 Configuring applications ---------------------------------------------------------------------------------------- 249


10/336

10.7.1

Application of EFM ----------------------------------------------------------------------------------------------------------------- 249

10.7.2

Application of CFM ----------------------------------------------------------------------------------------------------------------- 251

10.7.3

Application of SLA ------------------------------------------------------------------------------------------------------------------ 254

10.7.4 Configure E-LMI application ----------------------------------------------------------------------------------------------------- 255

Chapter 11 System Management ------------------------------------------------------------------- 259 11.1 Overview --------------------------------------------------------------------------------------------------------------- 259

11.1.1

SNMP ---------------------------------------------------------------------------------------------------------------------------------- 259

11.1.2

KeepAlive ----------------------------------------------------------------------------------------------------------------------------- 261

11.1.3

RMON --------------------------------------------------------------------------------------------------------------------------------- 261 11.1.4 Cluster management -------------------------------------------------------------------------------------------------------------- 262

11.1.5 LLDP ----------------------------------------------------------------------------------------------------------------------------------- 264 11.1.6

Optical module digital diagnostics ---------------------------------------------------------------------------------------------- 266

11.1.7

System Log -------------------------------------------------------------------------------------------------------------------------- 266

11.1.8

Alarm management ---------------------------------------------------------------------------------------------------------------- 267

11.1.9

Hardware environment monitoring --------------------------------------------------------------------------------------------- 271

11.1.10 Fan monitor -------------------------------------------------------------------------------------------------------------------------- 274 11.1.11 CPU monitor ------------------------------------------------------------------------------------------------------------------------- 274 11.1.12

Ping ------------------------------------------------------------------------------------------------------------------------------------ 274

11.1.13

Traceroute ---------------------------------------------------------------------------------------------------------------------------- 275

11.2 SNMP ------------------------------------------------------------------------------------------------------------------- 276 11.2.1


11.2.2

Default configuration of SNMP -------------------------------------------------------------------------------------------------- 276

11.2.3

Configure basic function for SNMP v1/v2c ----------------------------------------------------------------------------------- 277 11.2.4 Configure basic function for SNMP v3 ---------------------------------------------------------------------------------------- 278

11.2.5 Configure other information of SNMP ----------------------------------------------------------------------------------------- 279 11.2.6

Configure Trap ---------------------------------------------------------------------------------------------------------------------- 279

11.2.7


11.3 KeepAlive ------------------------------------------------------------------------------------------------------------- 280 11.3.1


11.3.2

Defaut configuration of KeepAlive ---------------------------------------------------------------------------------------------- 281

11.3.3

Configure KeepAlive function ---------------------------------------------------------------------------------------------------- 281

11.3.4


11.4 RMON ------------------------------------------------------------------------------------------------------------------- 282 11.4.1 Preparation for configuration ---------------------------------------------------------------------------------------------------- 282 11.4.2 Default configuration of RMON ------------------------------------------------------------------------------------------------- 282 11.4.3

Configure RMON statistics function -------------------------------------------------------------------------------------------- 282

11.4.4

Configure RMON history statistics function ---------------------------------------------------------------------------------- 283

11.4.5

Configure RMON alarm group -------------------------------------------------------------------------------------------------- 283

11.4.6

Configure RMON event group --------------------------------------------------------------------------------------------------- 283

11.4.7


11.5 Cluster management ---------------------------------------------------------------------------------------------- 284 11.5.1


11.5.2 Default configuration of cluster management ------------------------------------------------------------------------------- 284 11.5.3

Configure RNDP function --------------------------------------------------------------------------------------------------------- 285

11.5.4

Configure RTDP function --------------------------------------------------------------------------------------------------------- 285

11.5.5

Configure cluster management function -------------------------------------------------------------------------------------- 286

11.5.6


11.6 LLDP -------------------------------------------------------------------------------------------------------------------- 288 11.6.1


11.6.2

Default configuration of LLDP --------------------------------------------------------------------------------------------------- 288

11.6.3

Configure to enable global LLDP function ------------------------------------------------------------------------------------ 289

11.6.4

Configure to enable interface LLDP function -------------------------------------------------------------------------------- 289

11.6.5

Configure basic LLDP function -------------------------------------------------------------------------------------------------- 289

11.6.6

Configure LLDP alarm function ------------------------------------------------------------------------------------------------- 290

11.6.7


11.7 Optical module digital diagnostics --------------------------------------------------------------------------- 290 11.7.1


11.7.2

Default configuration of optical module digital diagnostics --------------------------------------------------------------- 291

11.7.3 Configure to enable optical module digital diagnostics ------------------------------------------------------------------- 291 11.7.4 Configure optical module digital diagnostics alarm sending Trap ------------------------------------------------------ 291 11.7.5


11.8 System log ------------------------------------------------------------------------------------------------------------ 292 11.8.1


11.8.2

Default configuration of dydtem log -------------------------------------------------------------------------------------------- 292

11.8.3

Configure basic information for system log ---------------------------------------------------------------------------------- 293

11.8.4

Configure system log output ----------------------------------------------------------------------------------------------------- 294


11.9

Alarm management ------------------------------------------------------------------------------------------------ 295

11.9.1 Preparation for configuration ---------------------------------------------------------------------------------------------------- 295


11/336

11.9.2

Default configuration of alarm management --------------------------------------------------------------------------------- 295

11.9.3

Configure basic alarm function -------------------------------------------------------------------------------------------------- 296

11.9.4


11.10 Hardware environment monitoring --------------------------------------------------------------------------- 297 11.10.1


11.10.2 Default configuration of hardware environment monitoring -------------------------------------------------------------- 298 11.10.3 Configure to enable global hardware environment monitoring ---------------------------------------------------------- 298 11.10.4

Configure power monitoring alarm --------------------------------------------------------------------------------------------- 298

11.10.5

Configure temperature monitoring alarm ------------------------------------------------------------------------------------- 299

11.10.6

Configure voltage monitoring alarm -------------------------------------------------------------------------------------------- 299

11.10.7

Configure interface status monitoring alarm --------------------------------------------------------------------------------- 299

11.10.8 Clear all hareware environments monitoring alarm event manually --------------------------------------------------- 300 11.10.9 Check configuration ---------------------------------------------------------------------------------------------------------------- 300

11.11

Fan monitor ----------------------------------------------------------------------------------------------------------- 300

11.11.1 Preparation for configuration ---------------------------------------------------------------------------------------------------- 300 11.11.2 Configure fan monitor function -------------------------------------------------------------------------------------------------- 301 11.11.3


11.12 CPU monitor ---------------------------------------------------------------------------------------------------------- 301 11.12.1


11.12.2

Defaut configuration of CPU monitor ------------------------------------------------------------------------------------------ 302

11.12.3

Check CPU monitor information ------------------------------------------------------------------------------------------------ 302

11.12.4 Configure CPU monitor alarm --------------------------------------------------------------------------------------------------- 302

11.12.5


11.13

Check device information --------------------------------------------------------------------------------------- 303

11.14 Ping --------------------------------------------------------------------------------------------------------------------- 303 11.15 Traceroute ------------------------------------------------------------------------------------------------------------- 303 11.16 Maintenance ---------------------------------------------------------------------------------------------------------- 304 11.17 Configuring applications ---------------------------------------------------------------------------------------- 304

11.17.1

Configure SNMP v1/v2c and Trap application ------------------------------------------------------------------------------ 304

11.17.2

Configure SNMP v3 and Trap application ------------------------------------------------------------------------------------ 306

11.17.3

Configure KeepAlive application ------------------------------------------------------------------------------------------------ 307

11.17.4 Configure RMON alarm group application ----------------------------------------------------------------------------------- 308 11.17.5 Configure cluster management and realize remote access ------------------------------------------------------------- 310 11.17.6

Configure LLDP function application------------------------------------------------------------------------------------------- 312

11.17.7

Configure system log output to log host application ----------------------------------------------------------------------- 315

11.17.8

Configure hardware environment monitoring application ----------------------------------------------------------------- 316

Appendix A Glossary Table ----------------------------------------------------------------------------- 319

Appendix B Acronym ------------------------------------------------------------------------------------- 320


12/336

Preface

About This Manual

This manual introduces primary functions of the configuration management software for RC series

products.

Who Should Read This Manual

This m anual i s a valuable r eference f or s ales and marketing staff, af ter s ervice s taff and

telecommunication ne twork de signers. For those w ho want t o ha ve an overview of t he features,

applications, s tructure a nd s pecifications of ISCOM2924GF-4GE/4C device, this is a lso a

recommended document.

Organization

This manual is an introduction of t he main functions of ISCOM2924GF-4GE/4C. To have a quick

grasp of the using of the ISCOM2924GF-4GE/4C, please read this manual carefully. The manual is

composed of the following chapters:

Chapter 1 Overview

Chapter 2 Basic Configuration

Chapter 3 Ethernet

Chapter 4 Routing

Chapter 5 DHCP

Chapter 6 QoS

Chapter 7 Multicast

Chapter 8 Security

Chapter 9 Reliability

Chapter 10 OAM

Chapter 11 System Management

Appendix A Glossary Table

Appendix B Acronym


13/336

Compliance

The RC series products developed by Raisecom are strictly complied with the following standards as

well a s ITU-T, IEEE, IETF and related standards from other international telecommunication

standard organizations:

YD/T900-1997 SDH Equipment Technical Requirements - Clock

YD/T973-1998 SDH 155Mb/s and 622Mb/s Technical conditions of optical transmitter module and

receiver module

YD/T1017-1999 Network node interface for the Synchronous Digital Hierarchy (SDH)

YD/T1022-1999 Requirement of synchronous digital hierarchy (SDH) equipment function

YD/T1078-2000 S DH Transmission N etwork Technique R equirements-Interworking of N etwork

Protection Architectures

YD/T1111.1-2001 Technical R equirements of S DH Optical Transmitter/Optical R eceiver

Modules——2.488320 Gb/s Optical Receiver Modules

YD/T1111.2- 2001 Technical Requirements of S HD Optical Transmitter/Optical R eceiver

Modules——2.488320 Gb/s Optical Transmitter Modules

YD/T1179- 2002 Technical Specification of Ethernet over SDH

G.703 Physical/electrical characteristics of hierarchical digital interfaces

G.704 Synchronous frame structures used at 1544, 6312, 2048, 8448 and 44 73 6 kbit/s hierarchical

levels

G.707 Network node interface for the synchronous digital hierarchy (SDH)

G.774 Synchronous di gital hi erarchy ( SDH) - Management i nformation m odel f or t he n etwork

element view

G.781 Synchronization layer functions

G.783 Characteristics of synchronous digital hierarchy (SDH) equipment functional blocks

G.784 Synchronous digital hierarchy (SDH) management

G.803 Architecture of transport networks based on the synchronous digital hierarchy (SDH)

G.813 Timing characteristics of SDH equipment slave clocks (SEC)

G.823 The control of j itter and wander within digital networks which are based on the 2048 kbit/shierarchy

G.825 The control of j itter and wander within digital networks which are based on the synchronous

digital hierarchy (SDH)

G.826 E nd-to-end e rror pe rformance pa rameters a nd objectives f or i nternational, constant bi t-rate

digital paths and connections

G.828 Error performance parameters and objectives for international, constant bit-rate synchronous

digital paths

G.829 Error performance events for SDH multiplex and regenerator sections

G.831 M anagement capabilities of t ransport ne tworks based on t he synchronous digital hi erarchy

(SDH)


14/336

G.841 Types and characteristics of SDH network protection architectures

G.842 Interworking of SDH network protection architectures

G.957 Optical interfaces for equipments and systems relating to the synchronous digital hierarchy

G.691 Optical interfaces for single channel STM-64 and other SDH systems with optical amplifiers

G.664 Optical safety procedures and requirements for optical transport systems

I.731 ATM Types and general characteristics of ATM equipment

I.732 ATM Functional characteristics of ATM equipment

IEEE 802.1Q Virtual Local Area Networks (LANs)

IEEE 802.1p Traffic Class Expediting and Dynamic Multicast Filtering

IEEE 802.3 CSMA/CD Access Method and Physical Layer Instruction


15/336

www.raisecom.com User Manual

1

Chapter 1 Function Overview

The f eatures, s tandards a nd s pecifications s upported by ISCOM2924GF-4GE/4C e nhanced

aggregation Ethernet switch are shown in the following table:

Table 1-1 features, standards and specifications

Features Descriptions

Basic features Login device (RJ45 Console/USB Console/Telnet/SHHv2)

Command line

Management files (BootROM/system files/configuration files)

Load and upgrade (TFTP autoloading, BootROM upgrade,FTP/TFTP upgrade)

Time management

Interface management

Basic information (device name, switchover language mode,save/delete configuration, device restart)

Task scheduling

Ethernet MAC address (32!1024)

Jumbo frame (9250 bytes) VLAN (4094)

QinQ (3000 flexible QinQ)

1:1 VLAN switch

STP/RSTP/MSTP

Loopback detection

Interface protection

Interface image

Layer-2 protocol transparent transmission (Dot1x message, GVRPmessage, LACP message, STP message)

Route ARP

Layer-3 interface

Static route and default gateway

DHCP DHCP client

DHCP Snooping

DHCP Option82 / DHCP Option61


16/336


2

Features Descriptions

QoS Trust priority

Flow classification (ToS priority, DSCP priority, CoS priority) andFlow policy (Flow speed limit based on flow policy, redirection,

heavy label) Internal priority and queue scheduling

Flow speed limit based on interface and VLAN (The maximumspeed:10Gbps, the minimum step: 8Kbps)

Multicast Multicast forwarding entries (1024)

IGMP Snooping

IGMP MVR

IGMP Proxy

IGMP filter

Safety ACL (999)

RADIUS authentication

TACACS+

Storm suppression

Reliability Link aggregation (8 aggregation groups)

Ethernet loop

Ethernet linear protection switching ELPS (ITU-T G.8031)

Ethernet ring protection switching ERPS (ITU-T G.8032)

OAM EFM (IEEE 802.3ah)

CFM (IEEE802.1ag/ITU-Y.1731)

E-LMI

SLA

System

management

SNMP

KeepAlive

RMON

Cluster management

LLDP

Extended OAM

Optical module digital diagnosis

System log

Alarm management

Hardware environment monitoring

Fan monitoring

CPU monitoring

Ping and Traceroute

Note: The four functions of STP, loopback detection, interface backup and Ethernet ring on device

may influence each other; it is recommended not to enable them simultaneously.


17/336


3

Chapter 2 Basic Configuration

This chapter i ntroduces t he ba sic c onfiguration and configuration process about I SCOM2924GF

device and provides the related configuration cases.

Login device

Command line

Manage files

Upload and upgrade

Configure clock management

Configure interface management

Configure basic information for device

Configure task calling function

Configure watchdog

Configuration cases

2.1 Login device

2.1.1 Brief introduction

ISCOM2924GF s witch device can be configured and m anaged by the c ommand l ine C LI

(Command-Line Interface) mode or NView NNM network management mode.

ISCOM2924GF switch command-line mode has a variety of configuration modes:

Console mode: it must use Console mode in the first configuration; the device is in support ofRJ-45 Console port and USB Console port.

Telnet mode: log on through the Console mode, open Telnet service on the switch, configureLayer-3 interface IP address, set the user na me and pa ssword and then take remote Telnet

configuration. SSHv2 mode: before logging on the device through SSHv2, you need to login the device and

start the SSHv2 service through the Console interface.

When c onfiguring the device i n network management mode, you must f irst configure Layer-3

interface IP address by the command line mode, and then configure the device through NView NNM

ne

iscom2924gf-4ge_4c configuration guide (a_01).pdf

Documents