01-03 Device Management Commands
01-03 Device Management Commands
Switches
Command Reference 3 Device Management Commands
Format
display compatible-information
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Generally, device versions have matching NMS software. The NMS software needs
to apply to all the devices supported by matching versions. Otherwise, the NMS
cannot manage devices. If the NMS version is an earlier version but the current
device is running a later version that does not match the current NMS version, the
NMS cannot manage the current device.
To decouple the NMS version and device version, a compatible device model
developed based on an earlier version is defined for each device model. If the
NMS cannot manage a device because of version mismatch, obtain information
about the device compatible with the current device. The NMS can then use the
obtained information to manage the current device.
For example:
S5700LI_R7 is a device model newly available in V200R007. The NMS software
version that matches the device software version is V200R007.
S5700LI_R5 is a device model newly available in V200R005. The NMS software
version that matches the device software version is V200R005.
When you use the NMS of V200R005 to manage S5700LI_R7, the device cannot be
managed because of version mismatch. The NMS then obtains compatibility
information about S5700LI_R7 and learns that it is compatible with S5700LI_R5.
Subsequently, the NMS uses information about S5700LI_R5 to manage the current
device.
If the device does not have a compatible version, the system will display a
message, indicating that no compatible information exists after the display
compatible-information command is executed.
Compatible information of stacked devices can also be displayed.
Example
# Display compatible information of a device.
<HUAWEI> display compatible-information
Compatible SysOids : 1.3.6.1.4.1.2011.2.23.117
Compatible Version : V200R003C00
ProductName : S2750-28TP-EI-AC
Item Description
Format
display cpu-usage [ slave | slot slot-id ] [ vcpu vcpu ]
NOTE
The slave parameter is not supported if the switch does not support the stacking function or
does not have the stacking function enabled.
Only the S5720HI supports the vcpu vcpu parameter.
Parameters
Parameter Description Value
slave Displays the CPU usage of slave -
devices in a stack. This parameter is
valid only in a stack system.
vcpu vcpu Displays the usage of a specified Specify the vcpu parameter
virtual CPU. based on the hardware
configuration.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
CPU usage is an important indicator to evaluate device performance. A high CPU
usage will cause service faults, for example, BGP route flapping, frequent VRRP
active/standby switchover, and even failed device login. You can use the display
cpu-usage command to view CPU usage to check whether devices are working
properly.
When the CPU usage is high, rectify the fault according to "Troubleshooting: High
CPU" in Huawei S Series Campus Switches Troubleshooting Guide.
Example
# Display the CPU usage on the device.
<HUAWEI> display cpu-usage
CPU Usage Stat. Cycle: 60 (Second)
CPU Usage Stat. Time Time when the latest CPU usage
statistics are collected.
Item Description
Max CPU Usage Stat. Time Time when the highest CPU usage
statistics are collected.
Function
The display cpu-usage configuration command displays CPU usage
configuration.
Format
display cpu-usage configuration [ slave | slot slot-id ]
NOTE
The slave parameter is not supported if the switch does not support the stacking function or
does not have the stacking function enabled.
Parameters
Parameter Description Value
slave Displays CPU usage configuration of -
standby switches in a stack. This
parameter is valid only when multiple
switches form stack.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
This command displays the alarm threshold and recovery threshold.
● When CPU usage reaches the alarm threshold, the system generates a CPU
usage alarm.
● When CPU usage falls within the recovery threshold, the system generates a
clear alarm.
Example
# Display CPU usage configuration .
<HUAWEI> display cpu-usage configuration
The CPU usage monitor is turned on.
The current monitor cycle is 60 seconds.
The current monitor warning threshold is 95%.
The current monitor restore threshold is 80%.
Item Description
Item Description
The current monitor warning threshold Alarm threshold. To set the CPU usage
alarm threshold, run the 3.2.5 cpu-
usage threshold threshold-value
[ restore restore-threshold-value ]
[ slot slot-id ] command.
The current monitor restore threshold Alarm recovery threshold. To set the
CPU usage alarm recovery threshold,
run the 3.2.5 cpu-usage threshold
threshold-value [ restore restore-
threshold-value ] [ slot slot-id ]
command.
Related Topics
3.2.5 cpu-usage threshold
Function
The display cpu-usage history command displays CPU usage statistics within a
period.
Format
display cpu-usage history [ 1hour | 24hour | 72hour ] [ slave | slot slot-id ]
[ vcpu vcpu ]
NOTE
The slave parameter is not supported if the switch does not support the stacking function or
does not have the stacking function enabled.
Only the S5720HI supports the vcpu vcpu parameter.
Parameters
Parameter Description Value
1hour Displays CPU usage statistics within the -
last one hour.
slot slot-id Displays the CPU usage statistics of a The value varies with
specified slot ID. the device configuration.
vcpu vcpu Displays the CPU usage statistics of a Specify the vcpu
specified virtual CPU. parameter based on the
hardware configuration.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
The system collects CPU usage statistics at a specified interval (usually 60s) and
saves them in the historical record table. To check CPU usage statistics within a
period, run the display cpu-usage history command, and the command output
helps you determine whether the CPU is working properly.
In the display cpu-usage history command output, the x-coordinate indicates the
specified period, and the y-coordinate indicates the CPU usage.
Precautions
If CPU usage is constantly higher than the upper alarm threshold (95% by default)
before the feature is deployed on a large scale, check the device to troubleshoot
the fault.
Example
# Display CPU usage statistics within the last one hour.
<HUAWEI> display cpu-usage history 1hour
100%|
95%|
90%|
85%|
80%|
75%|
70%|
65%|
60%|
55%|
50%|
45%|
40%|
35%| H
30%| H
25%| H
20%| H
15%| H
10%| H
5%|HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH
---------+---------+---------+---------+---------+---------+>
10 20 30 40 50 60
System cpu-usage last 60 minutes(Per Min)
100%|
95%|
90%|
85%|
80%|
75%|*
70%|*
65%|*
60%|*
55%|*
50%|*
45%|*
40%|*
35%|* **
30%|* **
25%|* **
20%|* **
15%|* **
10%|H **
5%|HHHHHHHHHHHHHHHHHHHHHHHHHHHHH
---------+---------+---------+---------+-------->
10 20 30 40
System cpu-usage last 24 hours(Per Halfhour)
* = maximum cpu-usage H = average cpu-usage
100%|
95%|
90%|
85%|
80%|
75%|*
70%|*
65%|*
60%|*
55%|*
50%|*
45%|*
40%|*
35%|* *
30%|* *
25%|* *
20%|* *
15%|* *
10%|* *
5%|HHHHHHHHHHHHHH
---------+---------+---------+---------+---------+---------+---------+-->
10 20 30 40 50 60 70
System cpu-usage last 72 hours(Per Hour)
* = maximum cpu-usage H = average cpu-usage
Item Description
System cpu- CPU usage statistics within the last one hour, with a step of
usage last 60 one minute
minutes(Per Min)
System cpu- CPU usage statistics within the last 24 hours, with a step of
usage last 24 half an hour
hours(Per
Halfhour)
System cpu- CPU usage statistics within the last 72 hours, with a step of
usage last 72 an hour
hours(Per Hour)
Function
The display device command displays the type and status of the components on
a device.
Format
display device [ slot slot-id ]
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
If you need to check whether a switch is working properly, run the display device
command to view hardware information of the components and device
registration status on the switch.
This command can also display the working status of the battery or redundant
power supply (RPS) used for a device.
The following product models support the use of an RPS:
● S5720S-SI: S5720S-28P-SI-AC, S5720S-52X-SI-AC, S5720S-28X-SI-AC,
S5720S-52P-SI-AC, S5720S-28X-SI-DC, S5720S-52X-SI-DC
● S5720SI: S5720-28X-SI-24S-AC, S5720-28X-SI-24S-DC
● S5720EI series: S5720-32X-EI-24S-AC, S5720-50X-EI-46S-AC, S5720-32X-EI-AC,
S5720-52X-EI-AC, S5720-50X-EI-AC, S5720-32P-EI-AC, S5720-52P-EI-AC,
S5720-32X-EI-DC, S5720-50X-EI-DC, S5720-32X-EI-24S-DC, S5720-50X-EI-46S-
DC
● S5700LI series: all models except S5700-10P-LI-AC, S5700-28P-LI-BAT,
S5700-28P-LI-24S-BAT, and S5700-10P-PWR-LI-AC
● S5700S-LI series: all models
● S5710-X-LI series: all models
● S5720LI series: S5720-28X-LI-AC, S5720-28X-LI-DC, S5720-28X-PWR-LI-AC,
S5720-52X-LI-AC, S5720-52X-LI-DC, S5720-52X-PWR-LI-AC, S5720-28X-LI-24S-
AC, S5720-28X-LI-24S-DC, S5720-28X-PWH-LI-AC, S5720-52X-PWR-LI-ACF
● S5720S-LI series: S5720S-28X-LI-24S-AC
● S6720LI series: all models
● S6720S-LI series: all models
The following product models support the use of a battery: S5700-28P-LI-BAT,
S5700-28P-LI-24S-BAT.
Example
# Display information about the components on a device (with a built-in power
supply unit or power module).
<HUAWEI> display device
S5700-52P-LI-AC's Device status:
Slot Sub Type Online Power Register Status Role
-------------------------------------------------------------------------------
0 - S5700-52P-LI Present PowerOn Registered Normal Master
Item Description
Item Description
Item Description
Item Description
Item Description
NOTE
Format
display device capability [ slot slot-id ]
Parameters
Parameter Description Value
slot slot-id ● Specifies a slot ID on a In a stack, the value is an integer and
standalone switch where must be set according to the
stacking is not enabled. configuration in the stack. On a
● Specifies a stack ID in a standalone switch where stacking is
stack. not enabled, the value is fixed as 0.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
Whether a device supports a function depends on whether the hardware has the
capability of the function and whether the running system software provides this
function. You can use this command to check the hardware and software support
for a function and determine whether you need to update the system software or
use other methods to obtain the function.
Precautions
Currently, this command can only display the hardware and software support for
the MPLS feature.
Example
# Display the hardware and software capabilities of a device.
<HUAWEI> display device capability
Slot Feature Hardware Software
--------------------------------------------------------
0 MPLS NO YES
--------------------------------------------------------
Item Description
Function
The display device manufacture-info command displays manufacture
information about the device.
Format
display device manufacture-info [ slot slot-id ]
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display device manufacture-info command to view manufacture
information about the device, including the serial number and manufacture date.
The command output contains information about only service subcards and does
not contain information about fans and power modules.
Example
# Display manufacture information about the device.
<HUAWEI> display device manufacture-info
Slot Sub Serial-number Manu-date
----------------------
0 - 2102353169107C800132 2011-08-24
1 021ESN1234567890 2000-01-01
Item Description
Function
The display diagnostic-information command collects and displays all the
current diagnostic information or saves diagnostic information in a specified file.
Format
display diagnostic-information [ acl | ap | arp | bfd | defend | dhcp | l2adp |
l3adp | lbdt | lldp | mcast | mpls | qos | rrpp | sdk | smlk | srm | sta | stack | stat
| stp | ucm ] [ file-name ]
NOTE
Parameters
Parameter Description Value
ap Displays AP information. -
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
When a fault occurs in the system, you can use the display diagnostic-
information command to collect diagnostic information for fault location.
The display diagnostic-information command output includes the output for
multiple display commands, such as 2.4.6 display clock, 3.1.19 display version,
and 2.8.13 display current-configuration. Running the display diagnostic-
information command is like running these display commands in batches.
Precautions
● If the file-name parameter is not specified, diagnostic information is only
displayed on the screen. If the file-name parameter is specified, diagnostic
information is only stored to a specified file but not displayed on the screen,
and the command level is management level (3).
● If this command displays a long output, press Ctrl+C to abort this command.
● This command displays diagnostic information, which helps locate faults but
may affect system performance. For example, CPU usage may become high.
Therefore, do not use this command when the system is running properly.
● Running the display diagnostic-information command simultaneously on
multiple terminals connected to the device is prohibited. This is because CPU
usage of the device may obviously increase and the device performance may
be degraded.
● When you run this command, the device obtains or uses some personal data
of users, such as the STA MAC address. Delete the personal data immediately
after the command is executed to ensure user data security.
Example
# Display diagnostic information about the device.
<HUAWEI> display diagnostic-information
===========================================================
Related Topics
3.1.19 display version
2.4.6 display clock
2.8.13 display current-configuration
Format
display elabel [ slot slot-id [ subcard-id ] ]
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Electronic labels identify the hardware. You can use the display elabel command
to view the electronic label information.
No electronic label is displayed for an electrical interface or a combo interface
working as an electrical interface.
NOTE
For a new device delivered since V200R011, its electronic label version has been updated to
version 4.0, which has the following changes compared to earlier versions:
● The Model field is added to indicate the hardware external model of the device.
● The ExInfo field is added to indicate the hardware extension information of the device. This
field does not exist in electronic labels of optical modules.
● The ElabelVersion is added to indicate the version of the elabel.
Example
# Display the electronic label of the device with stack ID 0.
<HUAWEI> display elabel slot 0
/$[System Integration Version]
/$SystemIntegrationVersion=3.0
[Slot_0]
/$[Board Integration Version]
/$BoardIntegrationVersion=3.0
[Main_Board]
/$[ArchivesInfo Version]
/$ArchivesInfoVersion=3.0
[Board Properties]
BoardType=S5752S-LI
BarCode=2102353174107C800132
Item=
Description=S5752S-LI Mainframe(48 10/100/1000 BASE-T ports and 4 SFP GE (100/1
000 BASE-X) ports (SFP Req.) and DC -48V)
Manufactured=2011-08-22
VendorName=Huawei
IssueNumber=
CLEICode=
BOM=
[Port_GigabitEthernet0/0/1]
/$[ArchivesInfo Version]
/$ArchivesInfoVersion=3.0
[Board Properties]
BoardType=
BarCode=
Item=
Description=
Manufactured=
/$VendorName=
IssueNumber=
CLEICode=
BOM=
Item Description
Related Topics
3.2.3 backup elabel
NOTE
The S2750EI, S5700LI, S5700S-LI, and S5720EI do not support this command.
Format
display esn
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
An ESN uniquely identifies a device.
In a stack, the display esn command displays the ESNs of all member devices.
Example
# Display the ESN of the device.
<HUAWEI> display esn
ESN of slot 0: 21023586001234567890
Item Description
Function
The display fan command displays the fan status.
Format
display fan
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Devices can run properly when fans are working properly. If proper heat
dissipation cannot be ensured for devices, devices may overheat, damaging the
hardware. You can use the display fan command to view the fan status.
Example
# Display the fan status of the device.
<HUAWEI> display fan
-------------------------------------------------------------------------
Slot FanID Online Status Speed Mode Airflow
-------------------------------------------------------------------------
0 1 Absent - - - -
0 2 Present Normal 100% AUTO Side-to-Side
0 3 Absent - - - -
Format
display memory-usage [ slave | slot slot-id ] [ vcpu vcpu ]
NOTE
The slave parameter is not supported if the switch does not support the stacking function or
does not have the stacking function enabled.
Only the S5720HI supports the vcpu vcpu parameter.
Parameters
Parameter Description Value
slave Displays memory usage of a slave -
switch in a stack. This parameter is
valid only when multiple switches
form a stack.
vcpu vcpu Specifies the virtual CPU number. Specify the vcpu parameter
based on the hardware
configuration.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Memory usage is an important index to evaluate device performance. A high
memory usage will cause service faults. You can use the display memory-usage
command to view memory usage to check whether devices are working properly.
Example
# Display memory usage of the current device.
<HUAWEI> display memory-usage
Memory utilization statistics at 2008-12-15 15:17:42+08:00
System Total Memory Is: 394152720 bytes
Total Memory Used Is: 130975664 bytes
Memory Using Percentage Is: 33%
Item Description
Format
display memory-usage threshold [ slot slot-id ]
Parameters
Parameter Description Value
slot slot-id Displays the memory usage The value is 0 if stacking is not
threshold in a specified slot configured; the value ranges from 0 to
ID. 8 if stacking is configured.
Views
All views
Default Level
2: Configuration level
Usage Guidelines
You can view the memory usage alarm threshold to learn about the conditions for
triggering alarms.
● When memory usage reaches the alarm threshold, the system generates an
alarm.
● When memory usage falls within the alarm threshold, the system generates a
clear alarm.
Example
# Display the memory usage threshold on the main control board.
<HUAWEI> display memory-usage threshold
Current memory threshold of the main board is 95%.
Item Description
Related Topics
3.2.28 set memory-usage threshold
Function
The display power command displays the information of all power supply units
and battery on the device.
Format
display power
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can use this command to check the status of all power supply units and
battery, and their power. The following product models support the use of a
battery: S5700-28P-LI-BAT, S5700-28P-LI-24S-BAT.
Example
# Display the current power supply status.
<HUAWEI> display power
------------------------------------------------------------
Slot PowerID Online Mode State Power(W)
------------------------------------------------------------
0 PWRI Present AC Supply 500.00
0 PWRII Absent - - -
Item Description
Function
The display transceiver command displays information about the optical module
on an interface.
NOTE
Format
display transceiver [ interface interface-type interface-number | slot slot-id ]
[ verbose ]
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run this command to view general information, manufacture information,
and alarm information about an optical module. If you specify the verbose
keyword, diagnostic information is also displayed in addition to the preceding
information.
If a device does not support optical modules, a message will be displayed after
you run this command.
Some parameters including the current and optical power will be displayed for
each lane of the 40GE interfaces.
Example
# Display general information, manufacture information, and alarm information
about the optical module on a specified interface.
<HUAWEI> display transceiver interface gigabitethernet 0/0/1
GigabitEthernet0/0/1 transceiver information:
-------------------------------------------------------------
Common information:
Transceiver Type :1000_BASE_SX_SFP
Connector Type :LC
Wavelength(nm) :850
Transfer Distance(m) :0(9um),300(50um),150(62.5um)
Digital Diagnostic Monitoring :YES
Vendor Name :HUAWEI
Vendor Part Number :02318169
Ordering Name :
-------------------------------------------------------------
Manufacture information:
Manu. Serial Number :CD25HP12M
Manufacturing Date :2013-06-184
Vendor Name :HUAWEI
-------------------------------------------------------------
Connector Type Type of the fiber connector required by the optical module.
The value depends on the protocol related to the optical
module.
Vendor Name Vendor name of the optical module. If the system has not
determined whether the optical module is a Huawei-
customized one, this field displays Judging.
If the vendor name of an optical module is not HUAWEI,
check whether the optical module is a Huawei-certified
optical module. For details, see "How Can I Determine
Whether an Optical Module Is a Huawei-Certified Optical
Module?" in the S1720, S2700, S5700, and S6720
V200R011C10 Configuration Guide - Device Management –
Device Status Query.
Vendor Part The vendor part number or product name. If the system has
Number not determined whether the optical module is a Huawei-
customized one, this field displays Judging.
Ordering Name External name of the optical module. Currently, this field is
not supported and is empty.
Item Description
Bias High Upper threshold for the bias current of the optical module.
Threshold (mA)
Bias Low Lower threshold for the bias current of the optical module.
Threshold (mA)
RX Power (dBM) Input power of the optical module. when the Input power is
0 W, -Inf is displayed.
RX Power High Upper warning threshold for the receive power of the optical
Warning(dBM) module.
RX Power Low Lower warning threshold for the receive power of the optical
Warning(dBM) module.
RX Power High Upper input power threshold for the optical module.
Threshold (dBM)
RX Power Low Lower input power threshold for the optical module.
Threshold (dBM)
TX Power (dBM) Output power of the optical module. when the output
power is 0 W, -Inf is displayed.
TX Power High Upper warning threshold for the transmit power of the
Warning(dBM) optical module.
Item Description
TX Power Low Lower warning threshold for the transmit power of the
Warning(dBM) optical module.
TX Power High Upper output power threshold for the optical module.
Threshold (dBM)
TX Power Low Lower output power threshold for the optical module.
Threshold (dBM)
Function
The display transceiver diagnosis interface command displays the diagnosis
parameters of an optical transceiver.
Format
display transceiver diagnosis interface [ interface-type interface-number ]
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display transceiver diagnosis interface command to check the
digital diagnostic monitoring (DMM) information about an optical module.
Example
# Display the diagnosis parameters of the optical module installed on
GigabitEthernet0/0/4.
<HUAWEI> display transceiver diagnosis interface gigabitethernet 0/0/4
Port GigabitEthernet0/0/4 transceiver diagnostic information:
Parameter Current Low Alarm High Alarm
Type Value Threshold Threshold Status
------------- --------- --------- ---------- --------
TxPower(dBm) -4.64 0.00 0.00 abnormal
RxPower(dBm) -4.37 33.00 0.00 abnormal
Current(mA) 7.42 0.00 0.00 abnormal
Temp.(ºC) 30.00 0.00 0.00 abnormal
Voltage(V) 3.28 0.00 8.19 normal
Item Description
Function
The display temperature command displays the device temperature.
Format
display temperature { all | slot slot-id }
Parameters
slot slot-id Displays temperature of The value is an integer, and the value
the specified slot. must be set according to the device
configuration if stacking is configured.
The value is 0 if stacking is not
configured.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
A high or low device temperature may damage the hardware. This command
displays the current device temperature instead of the operating temperature that
indicates the temperature range of the surrounding environment. When the device
temperature exceeds the upper threshold or falls below the lower threshold, the
device generates an alarm to alert you that the device temperature is abnormal.
Example
# Display the temperature of all slots.
<HUAWEI> display temperature all
-------------------------------------------------------------------------------
Slot Card Sensor Status Current(C) Lower(C) Lower Upper(C) Upper
Resume(C) Resume(C)
-------------------------------------------------------------------------------
0 NA NA Normal 44 0 4 72 68
Item Description
Format
display version [ slot slot-id ]
Parameters
Parameter Description Value
slot slot-id ● Specifies the slot ID if
The value range depends on the
stacking is not configured. actual configuration if stacking is
● Specifies the stack ID if configured. The value is 0 if
stacking is configured. stacking is not configured.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can use the display version command to view the device version to
determine whether the device needs to be upgraded.
Example
# Display the device version.
<HUAWEI> display version
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.170 (S6720
V200R011C10)
Copyright (C) 2000-2017 HUAWEI TECH Co.,
Ltd.
HUAWEI S6720-54C-EI-48S-AC Routing Switch uptime is 0 week, 0 day, 0 hour, 5
minutes
VRP (R) software, Version Versions of the VRP and the software
of the device.
Item Description
Function
The assign resource-mode command configures the resource allocation mode of
the device.
By default, the resource allocation mode of the S5720EI is enhanced-mac and that
of the S6720EI and S6720S-EI is enhanced-arp.
NOTE
Format
assign resource-mode { enhanced-mac | enhanced-ipv4 | enhanced-ipv6 }
[ slot slot-id | all ] (S5720EI)
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
If a device's MAC address entries, FIB entries, or ARP entries are insufficient to
meet service requirements, you can use this command to change the resource
allocation mode so as to extend the entry space.
Resour MAC IPv4 FIB IPv6 FIB IPv6 FIB ARP ND Multic
ce (0-64 (Over 64 ast
Allocat Bits Bits IPv4&
ion Mask) Mask) IPv6
Mode
NOTE
On the S5720EI, IPv4 FIB and IPv6 FIB (0-64 bits mask) share hardware resources. The
specifications listed in the preceding table indicate the maximum number of FIB entries of a
single type. Numbers of the two types of FIB entries cannot reach the maximum value
simultaneously.
On the S5720EI, ARP and ND share hardware resources. The value listed in the preceding
table indicates the maximum number of entries of a single type. Numbers of the two types
of entries cannot reach the maximum value simultaneously.
Resour MAC IPv4 FIB IPv6 FIB IPv6 FIB ARP ND Multi
ce (0-64 (Over 64 cast
Allocat Bits Bits IPv4&
ion Mask) Mask) IPv6
Mode
Resour MAC IPv4 FIB IPv6 FIB IPv6 FIB ARP ND Multi
ce (0-64 (Over 64 cast
Allocat Bits Bits IPv4&
ion Mask) Mask) IPv6
Mode
NOTE
On the S6720EI and S6720S-EI, ARP and ND share hardware resources. The value listed in
the preceding table indicates the maximum number of entries of a single type. Numbers of
the two types of entries cannot reach the maximum value simultaneously.
When the S6720EI and S6720S-EI work in enhanced-arp, enhanced-mac, enhanced-ipv4, or
96k-arp mode, IPv4 FIB and IPv6 FIB (0-64 bits mask) share hardware resources. The value
listed in the preceding table indicates the maximum number of FIB entries of a single type.
Numbers of the two types of FIB entries cannot reach the maximum value simultaneously.
When the S6720EI and S6720S-EI work in ipv4-ipv6 6:1 mode, IPv6 FIB (0-64 bits mask)
and IPv6 FIB (over 64 bits mask) share hardware resources. The value listed in the
preceding table indicates the maximum number of FIB entries of a single type. Numbers of
the two types of FIB entries cannot reach the maximum value simultaneously.
Precautions
The configured resource allocation mode takes effect only after the device is
restarted.
The requirements for different entry spaces will change when service configuration
is adjusted. In this case, you can change the resource allocation mode to meet the
new service requirements. Subsequently, entry spaces in different resource
allocation modes will change. Therefore, before changing the resource allocation
mode, consider the benefit and loss that the new mode will bring.
On the S6720EI and S6720S-EI, if the 3.2.2 assign resource-mode command sets
the resource allocation mode to enhanced-ipv4 or ipv4-ipv6 6:1, and the ipv4
destination-unreachable drop or ipv6 destination-unreachable dropcommand
has been executed, the function that dropping the packets that do not match
routing entries does not take effect.
Example
# Set the resource allocation mode to enhanced-ipv4.
<HUAWEI> system-view
[HUAWEI] assign resource-mode enhanced-ipv4
Info: It is executing, please wait.....
Info: The resource mode in slot 0 has been set to Enhanced-IPv4 successfully.
Warning: It will take effect after rebooting this device.
Related Topics
3.2.10 display resource-mode configuration
Function
The backup elabel command backs up electronic labels of the device to the flash
memory. The default name of the saved file is elabel-slot0.fls.
The backup elabel ftp command backs up electronic labels of the device to a
specified FTP server.
The backup elabel sftp command backs up electronic labels of the device to a
specified SFTP server.
Format
backup elabel [ slot slot-id [ subcard-id ] ]
Parameters
subcard-id Specifies the subcard ID. The value must be set according
to the device configuration.
Views
User view
Default Level
3: Management level
Usage Guidelines
When electronic labels are stored on a device, run the backup elabel command to
save electronic labels to a file. This file can be saved to the flash memory, to the
FTP or SFTP server using FTPor SFTP . FTP cannot ensure secure file transfer. SFTP
is recommended on networks that require high security.
Example
# Save electronic labels of the device to the elabel-slot0.fls file in the flash
memory.
<HUAWEI> backup elabel slot 0
Info: Output information to file: flash:/elabel-slot0.fls. Please wait for a mom
ent...
# Save electronic labels of the device to FTP server 192.168.12.91. Set the FTP user
name to user and password to 123. Save electronic labels in the elabel-slot0.fls
file.
<HUAWEI> backup elabel ftp 192.168.12.91 elabel-slot0.fls user 123
Warning: FTP is not a secure protocol, and it is recommended to use SFTP.
Info: It is executing, please wait...
# Save electronic labels of the device to SFTP server 192.168.12.91. Set the SFTP
user name to client001 and password to Huawei@1234. Save electronic labels in
the elabel-slot0.fls file.
<HUAWEI> backup elabel sftp 192.168.12.91 elabel-slot0.fls client001 Huawei@1234
Info: It is executing, please wait...
Related Topics
3.1.10 display elabel
Format
cpu-usage monitor [ { slot slot-id } | slave ]
undo cpu-usage monitor [ { slot slot-id } | slave ]
NOTE
Devices that do not support the stack function or do not have the stack function enabled do not
support the slave parameter.
Parameters
Parameter Description Value
slot slot-id ● Specifies the slot ID if stacking is
The value is 0 if stacking is
not configured. not configured; the value is
● Specifies the stack ID if stacking is an integer that ranges from 0
configured. to 8 if stacking is configured.
Views
System view
Default Level
3: Management level
Usage Guidelines
If you want to check the status and performance of the device, run the cpu-usage
monitor command to enable the CPU usage monitoring, and then run the display
cpu-usage command to check information about the CPU usage.
Example
# Enable the CPU usage monitoring.
<HUAWEI> system-view
Related Topics
3.1.3 display cpu-usage
Format
cpu-usage threshold threshold-value [ restore restore-threshold-value ] [ slot
slot-id ]
undo cpu-usage threshold [ threshold-value [ restore [ restore-threshold-
value ] ] ] [ slot slot-id ]
Parameters
Parameter Description Value
threshold Specifies the alarm The value is an integer that
threshold-value threshold of CPU usage. ranges from 2 to 100. The default
value is 95.
Views
System view
Default Level
3: Management level
Usage Guidelines
When the CPU usage exceeds the alarm threshold, a log is recorded. When the
CPU usage reduces by equal to or smaller than 5% and exceeds the threshold
again, no log is recorded. A log is recorded only when the CPU usage is reduced by
greater than 5% and reaches the threshold again. Through log information, you
can know the CPU usage more conveniently.
If slot slot-id is not configured, the alarm threshold and alarm recovery threshold
of CPU usage are set. In addition, the system automatically synchronizes
thresholds on the master switch with those on other member switches.
Example
# Set the alarm threshold of CPU usage to 85% and alarm recovery threshold to
70% of the switch.
<HUAWEI> system-view
[HUAWEI] cpu-usage threshold 85 restore 70
Related Topics
3.1.4 display cpu-usage configuration
Function
The display device battery command displays the battery status on a device.
NOTE
Only the S5700-28P-LI-BAT and S5700-28P-LI-24S-BAT support this command.
Format
display device battery
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can use this command to check the real-time status of the battery. When the
battery is working normally, it can supply power to the device in case the external
power supply encounters a power failure.
Example
# Display the battery status.
<HUAWEI> display device battery
--------------------------------------------------------------------------------
SlotID Type State Temperature(L/H) Remain Remain-Time Charge-Times
(c) (%) (mins)
--------------------------------------------------------------------------------
0 BAT-4AHA Charge 29/31 22 54 2
Type Type of the battery or battery board. The value can be:
● BAT-4AHA: lithium battery with a rated capacity of 4
Ah.
● BAT-8AHA: lithium battery with a rated capacity of 8
Ah.
● PBB: lead-acid battery board.
Item Description
Function
The display device battery lifetime threshold command displays the lifetime
expiration alarm threshold for a lithium battery.
NOTE
Only the S5700-28P-LI-BAT and S5700-28P-LI-24S-BAT that have a lithium battery installed
support this command.
Format
display device battery lifetime threshold [ slot slot-id ]
Parameters
Parameter Description Value
slot slot-id Specifies the slot ID of the lithium The value is fixed as 0
battery. currently.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Use Scenario
If a lithium battery discharges too fast, its lifetime is about to expire. During a
discharge, if the time taken to consume 10% of the total power is shorter than the
alarm threshold, the lifetime of the lithium battery is about to expire. When this
occurs, the device generates an alarm. When receiving this alarm, replace the
lithium battery to ensure normal operation of the device in the case of a mains
power outage. You can set the lifetime expiration alarm threshold for a lithium
battery using the set device battery lifetime threshold threshold [ slot slot-id ]
command.
You can use the display device battery lifetime threshold command to check the
lifetime expiration alarm threshold and determine whether the threshold needs to
be changed.
Precautions
Example
# Display the lifetime expiration alarm threshold for the lithium battery.
<HUAWEI> display device battery lifetime threshold
---------------------------------------------
Slot Type Threshold(mins)
---------------------------------------------
0 BAT 20
Table 3-21 Description of the display device battery lifetime threshold command
output
Item Description
Related Topics
3.2.24 set device battery lifetime
Function
The display device fault-light command displays status of fault indicator on a
device.
NOTE
Format
display device fault-light
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
After using the display device fault-light command to check the fault indicator
status, you can determine whether to set the fault indicator on a device to
indicate that the device is faulty using the set device fault-light command.
Example
# Display the fault indicator status.
<HUAWEI> display device fault-light
---------------------------------------------------------------
Slot Status Keeptime(s)
---------------------------------------------------------------
0 UnderRepair 45
---------------------------------------------------------------
Item Description
Item Description
Related Topics
3.2.26 set device fault-light
Function
The display fan speed-adjust threshold minus command displays the
temperature thresholds for fan speed adjustment.
Format
display fan speed-adjust threshold minus [ slot slot-id ]
NOTE
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
This command displays the temperature thresholds for fan speed adjustment,
including the default values and current values.
Example
# Display the temperature thresholds for fan speed adjustment.
<HUAWEI> display fan speed-adjust threshold minus
----------------------------------------------------------- Slot Default Range Current Range
Speed Rate Adjusted -----------------------------------------------------------
0 NA - 56 NA - 56 35% 53 - 58 53 - 58
40% 55 - 58 55 - 58 45% 55 -
58 55 - 58 50% 52 - 57 52 - 57
60% 54 - 56 54 - 56 70% 54 -
57 54 - 57 80% 55 - 58 55 - 58
90% 56 - NA 56 - NA 100%
Table 3-23 Description of the display fan speed-adjust threshold minus command
output
Item Description
Item Description
Related Topics
3.2.27 set fan speed-adjust threshold minus
Function
The display resource-mode configuration command displays the resource
allocation mode configuration on the device.
Format
display resource-mode configuration
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Before configuring or modifying the resource allocation mode, run the display
resource-mode configuration command to check the resource allocation mode
configuration.
Example
# Display the resource allocation mode.
Related Topics
3.2.2 assign resource-mode
Format
display root-key configuration
Parameters
None
Views
User view
Default Level
3: Management level
Usage Guidelines
You can use the display root-key configuration command to check information
about the currently used root key.
Example
# Display information about the currently used root key.
<HUAWEI> display root-key configuration
Master:
Current root-key: User-configured
Next root-key: System default
Item Specification
Related Topics
3.2.29 set root-key
Function
The display service-mode configuration command displays the working mode of
the device.
NOTE
Format
display service-mode configuration
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
To view the working mode of the device, run the display service-mode
configuration command.
Example
# Display the working mode of the device.
<HUAWEI> display service-mode configuration
Service mode status: Normal
Item Description
Related Topics
3.2.30 set service-mode
Function
The display switchover state command displays information about active and
standby switchover, which helps check whether the stack meets switchover
requirements.
Format
display switchover state
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
In a stack containing multiple switches, you can run the display switchover state
command to view the status of master and standby switches to determine
whether to perform an active/standby switchover. When performing active/
standby switchover, ensure that the standby switch is in real-time backup state.
Example
# Display information about active and standby switchover, which helps check
whether the stack meets switchover requirements.
<HUAWEI> display switchover state
Slot 1 HA FSM State(master): waiting for the slave to be inserted.
Related Topics
3.2.32 slave switchover
3.2.33 slave switchover { disable | enable }
NOTE
Format
display system resource-template [ slot slot-id ]
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display system resource-template command to view system
resource template information, including the resource type, currently running
resource template information and resource template for the next startup.
Example
# Display information about the system resource template.
<HUAWEI> display system resource-template
Resource Template Information:
--------------------------------------------------------------
Slot Type RunningTemplate NextTemplate
--------------------------------------------------------------
0 acl-mode dual-ipv4-ipv6 dual-ipv4-ipv6
--------------------------------------------------------------
Item Description
Related Topics
14.1.7 assign resource-template acl-mode
Function
The display snmp-agent trap feature-name entityexttrap all command displays
the status of all traps of the ENTITYEXTTRAP module.
Format
display snmp-agent trap feature-name entityexttrap all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
After the trap function of a specified feature is enabled, to check the status of all
traps of the ENTITYEXTTRAP module, run the display snmp-agent trap feature-
name entityexttrap all command. To enable the trap function for the
ENTITYEXTTRAP module, run the snmp-agent trap enable feature-name
entityexttrap command.
Prerequisites
SNMP has been enabled using the snmp-agent command.
Example
# Display the status of all traps of the ENTITYEXTTRAP module.
<HUAWEI> display snmp-agent trap feature-name entityexttrap all
------------------------------------------------------------------------------
Feature name: ENTITYEXTTRAP
Trap number : 9
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwEntityInputRateThresholdAlarm
on on
hwEntityInputRateThresholdAlarmResume
on on
hwEntityOutputRateThresholdAlarm
on on
hwEntityOutputRateThresholdAlarmResume
on on
hwEntityHigErrorPacketThresholdAlarm
on on
hwEntityHigStateChangeNotify on on
hwEntityHigStateDownNotify on on
hwEntityRuntPacketCheckNotify on on
hwBoardDropRuntPacketNotify on on
Item Description
Related Topics
3.2.34 snmp-agent trap enable feature-name entityexttrap
Function
display snmp-agent trap feature-name entitymib all command displays the
status of all traps on the ENTITYMIB module.
Format
display snmp-agent trap feature-name entitymib all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
After the trap function of a specified feature is enabled, you can run the display
snmp-agent trap feature-name entitymib all command to check the status of
all traps of ENTITYMIB. You can use the snmp-agent trap enable feature-name
entitymib command to enable the trap function of ENTITYMIB.
Prerequisites
Example
# Display all the traps of the ENTITYMIB module.
<HUAWEI>display snmp-agent trap feature-name entitymib all
------------------------------------------------------------------------------
Feature name: ENTITYMIB
Trap number : 1
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
entConfigChange on on
Table 3-30 Description of the display snmp-agent trap feature-name entitymib all
command output
Item Specification
Feature name Name of the module that the trap belongs to.
Item Specification
Related Topics
3.2.35 snmp-agent trap enable feature-name entitymib
Function
display snmp-agent trap feature-name entitytrap all command displays the
status of all traps on the ENTITYTRAP module.
Format
display snmp-agent trap feature-name entitytrap all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
After the trap function of a specified feature is enabled, you can run the display
snmp-agent trap feature-name entitytrap all command to check the status of
all traps of ENTITYTRAP. You can use the snmp-agent trap enable feature-name
entitytrap command to enable the trap function of ENTITYTRAP.
Prerequisites
Example
# Display all the traps of the ENTITYTRAP module.
<HUAWEI>display snmp-agent trap feature-name entitytrap all
------------------------------------------------------------------------------
Feature name: ENTITYTRAP
Trap number : 79
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwChassisRemove on on
hwChassisInsert on on
hwChassisFail on on
hwChassisFailResume on on
hwChassisInvalid on on
hwChassisInvalidResume on on
hwChassisLeaveMaster on on
hwChassisBecomeMaster on on
hwBoardRemove on on
hwBoardInsert on on
hwBoardFail on on
hwBoardFailResume on on
hwBoardInvalid on on
hwBoardInvalidResume on on
hwBoardLeaveMaster on on
hwBoardBecomeMaster on on
hwCardRemove on on
hwCardInsert on on
hwCardFail on on
hwCardFailResume on on
hwCardInvalid on on
hwCardInvalidResume on on
hwOpticalRemove on on
hwOpticalInsert on on
hwOpticalFail on on
hwOpticalFailResume on on
hwOpticalInvalid on on
hwOpticalInvalidResume on on
hwOpticalTunableNotMatch off on
hwOpticalTunableNotMatchResume off on
hwPowerRemove on on
hwPowerInsert on on
hwPowerFail on on
hwPowerFailResume on on
hwPowerInvalid on on
hwPowerInvalidResume on on
hwPowerUnusable on on
hwPowerUnusableResume on on
hwFanRemove on on
hwFanInsert on on
hwFanFail on on
hwFanFailResume on on
hwFanInvalid on on
hwFanInvalidResume on on
hwFanUnusable on on
hwFanUnusableResume on on
hwLCDRemove on on
hwLCDInsert on on
hwLCDInvalid on on
hwLCDInvalidResume on on
hwLCDUnusable on on
hwLCDUnusableResume on on
hwCMURemove on on
hwCMUInsert on on
hwCMUInvalid on on
hwCMUInvalidResume on on
hwCMUUnusable on on
hwCMUUnusableResume on on
hwCommunicateError on on
hwCommunicateResume on on
hwHumidityAlarm on on
hwHumidityResume on on
hwVoltAlarm on on
hwVoltResume on on
hwGateAlarm on on
hwGateResume on on
hwFogAlarm on on
hwFogResume on on
hwUnstableAlarm on on
hwUnstableResume on on
hwBrdTempAlarm on on
hwBrdTempResume on on
hwCPUUtilizationRising on on
hwCPUUtilizationResume on on
hwMemUtilizationRising on on
hwMemUtilizationResume on on
hwBatteryFull on on
hwOpticalMayInvalid on on
hwOpticalMayInvalidResume on on
Table 3-31 Description of the display snmp-agent trap feature-name entitytrap all
command output
Item Specification
Feature name Name of the module that the trap belongs to.
Related Topics
3.2.36 snmp-agent trap enable feature-name entitytrap
Function
display snmp-agent trap feature-name srmtrap all command displays the
status of all traps on the SRMTRAP module.
Format
display snmp-agent trap feature-name srmtrap all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
After the trap function of a specified feature is enabled, you can run the display
snmp-agent trap feature-name srmtrap all command to check the status of all
traps of SRMTRAP. You can use the snmp-agent trap enable feature-name
srmtrap command to enable the trap function of SRMTRAP.
Prerequisites
SNMP has been enabled. For details, see snmp-agent.
Example
# Display all the traps of the SRMTRAP module.
<HUAWEI>display snmp-agent trap feature-name srmtrap all
------------------------------------------------------------------------------
Feature name: SRMTRAP
Trap number : 68
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwPortPhysicalAutoNegotiateFail
on on
hwPortPhysicalEthHalfDuplexAlarm
on on
hwPortPhysicalAutoNegotiateClear
on on
hwPortPhysicalEthFullDuplexClear
on on
hwfanOffline on on
hwfanOnline on on
hwTempRisingAlarm on on
hwTempRisingResume on on
hwTempFallingAlarm on on
hwTempFallingResume on on
hwtempchipexcption on on
hwtempchipexcptionresume on on
hwfanfault on on
hwfanfaultresume on on
hwphychipabnormal on on
hwPHYfaultresume on on
hwtxpowerexceedminor on on
hwtxpowerresume on on
hwrxpowerexceedminor on on
hwrxpowerresume on on
hwPortPhysicalPortTypeChange on on
hwPowerabsent on on
hwPowerabsentresume on on
hwPowerfault on on
hwPowerfaultresume on on
hwTXPowerExceedMajor on on
hwRXPowerExceedMajor on on
hwBIASExceedMajor on on
hwBIASExceedMinor on on
hwBIASResume on on
hwPHYfault on on
hwPCIfault on on
hwPCIfaultResume on on
hwXAUIREFClockFault on on
hwXAUIREFClockFaultResume on on
hwCPICoreClockFault on on
hwCPICoreClockFaultResume on on
hwLanSwitchFault on on
hwLanSwitchFaultResume on on
hwCLPDCheckFault on on
hwCLPDCheckFaultResume on on
hwFPGACheckFault on on
hwFPGACheckFaultResume on on
hwEEPROMCheckFault on on
hwEEPROMCheckFaultResume on on
hwLightFault on on
hwLightFaultResume on on
hwPOEFault on on
hwPOEFaultResume on on
hwUSBFault on on
hwUSBFaultResume on on
hwUSBPlugIn on on
hwUSBPlugOut on on
hwUSBPowerFault on on
hwUSBPowerFaultResume on on
hwI2CFault on on
hwI2CFaultResume on on
hwSubcardPullOut on on
hwSubcardPlugIn on on
hwRTCfault on on
hwRTCfaultresume on on
hwWriteFlashError on on
hwWriteFlashErrorResume on on
hwOpticalPowerAbnormal on on
hwOpticalPowerResume on on
hwEntityHeartbeatTrap on on
hwPoeChipFault on on
hwPoeChipResume on on
Table 3-32 Description of the display snmp-agent trap feature-name srmtrap all
command output
Item Specification
Feature name Name of the module that the trap belongs to.
Item Specification
Item Specification
Item Specification
Related Topics
3.2.37 snmp-agent trap enable feature-name srmtrap
Function
display snmp-agent trap feature-name swithsrvres all command displays the
status of all traps on the SWITHSRVRES module.
Format
display snmp-agent trap feature-name swithsrvres all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
After the trap function of a specified feature is enabled, you can run the display
snmp-agent trap feature-name swithsrvres all command to check the status of
all traps of SWITHSRVRES. You can use the snmp-agent trap enable feature-
name swithsrvres command to enable the trap function of SWITHSRVRES.
Prerequisites
SNMP has been enabled. For details, see snmp-agent.
Example
# Display all the traps of the SWITHSRVRES module.
<HUAWEI>display snmp-agent trap feature-name swithsrvres all
------------------------------------------------------------------------------
Feature name: SWITHSRVRES
Trap number : 3
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwSrvServiceExceedThreshould on on
hwSrvServiceExceedThreshouldResume
on on
hwSrvServiceConfigFailed on on
Item Specification
Feature name Name of the module that the trap belongs to.
Item Specification
Related Topics
3.2.38 snmp-agent trap enable feature-name swithsrvres
Format
display snmp-agent trap feature-name system all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display snmp-agent trap feature-name system all command to
check status of all SYSTEM traps. This status can be configured using the 3.2.39
snmp-agent trap enable feature-name system command.
Example
# Display the status of all the traps of the SYSTEM module.
<HUAWEI> display snmp-agent trap feature-name system all
------------------------------------------------------------------------------
Feature name: SYSTEM
Trap number : 8
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwSysReloadNotification off off
hwSysClockChangedNotification off off
hwPatchErrorTrap off off
hwPatchActiveOverTimeTrap off off
hwPatchMalfunctionComebackTrap off off
hwSysSlaveSwitchFailNotification
off off
hwSysSlaveSwitchSuccessNotification
off off
hwSysIssuNotification off off
Table 3-34 Description of the display snmp-agent trap feature-name system all
command output
Item Description
Related Topics
3.2.39 snmp-agent trap enable feature-name system
Function
The display wavelength-map command displays the mapping between the
wavelength channel, wavelength, and frequency.
NOTE
Format
display wavelength-map
Parameters
None
Views
System view
Default Level
1: Monitoring level
Usage Guidelines
Before using the wavelength-channel command to add an optical module to a
specific wavelength channel, run the display wavelength-map command to view
the mapping between the wavelength channel, wavelength, and frequency.
Example
# Display the mapping between the wavelength channel, wavelength, and
frequency.
<HUAWEI> system-view
[HUAWEI] display wavelength-map
--------------------------------------------
Channel Frequency(THz) Wavelength(nm)
--------------------------------------------
1 192.10 1560.606
2 192.15 1560.200
3 192.20 1559.794
4 192.25 1559.389
5 192.30 1558.983
6 192.35 1558.578
7 192.40 1558.173
8 192.45 1557.768
9 192.50 1557.363
10 192.55 1556.959
11 192.60 1556.555
12 192.65 1556.151
13 192.70 1555.747
14 192.75 1555.344
15 192.80 1554.940
16 192.85 1554.537
17 192.90 1554.134
18 192.95 1553.731
19 193.00 1553.329
20 193.05 1552.927
21 193.10 1552.524
22 193.15 1552.122
23 193.20 1551.721
24 193.25 1551.319
25 193.30 1550.918
26 193.35 1550.517
27 193.40 1550.116
28 193.45 1549.715
29 193.50 1549.315
30 193.55 1548.915
31 193.60 1548.515
32 193.65 1548.115
33 193.70 1547.715
34 193.75 1547.316
35 193.80 1546.917
36 193.85 1546.518
37 193.90 1546.119
38 193.95 1545.720
39 194.00 1545.322
40 194.05 1544.924
41 194.10 1544.526
42 194.15 1544.128
43 194.20 1543.730
44 194.25 1543.333
45 194.30 1542.936
46 194.35 1542.539
47 194.40 1542.142
48 194.45 1541.746
49 194.50 1541.349
50 194.55 1540.953
51 194.60 1540.557
52 194.65 1540.162
53 194.70 1539.766
54 194.75 1539.371
55 194.80 1538.976
56 194.85 1538.581
57 194.90 1538.186
58 194.95 1537.792
59 195.00 1537.397
60 195.05 1537.003
61 195.10 1536.609
62 195.15 1536.216
63 195.20 1535.822
64 195.25 1535.429
65 195.30 1535.036
66 195.35 1534.643
67 195.40 1534.250
68 195.45 1533.858
69 195.50 1533.465
70 195.55 1533.073
71 195.60 1532.681
72 195.65 1532.290
73 195.70 1531.898
74 195.75 1531.507
75 195.80 1531.116
76 195.85 1530.725
77 195.90 1530.334
78 195.95 1529.944
79 196.00 1529.553
80 196.05 1529.163
--------------------------------------------
Item Description
Related Topics
3.2.44 wavelength-channel
Function
The reset cpu-usage record command clears CPU usage records.
Format
reset cpu-usage record [ slot slot-id | slave | all ]
Parameters
Parameter Description Value
slot slot-id Specifies the slot ID. Set the value according to
the device configuration.
Views
System view, User view
Default Level
3: Management level
Usage Guidelines
If the slot slot-id or slave parameter is not specified, CPU usage records of the
master switch is cleared.
Example
# Clear CPU usage records of the master switch.
<HUAWEI> system-view
[HUAWEI] reset cpu-usage record
Waiting for clearing . . . Done
Format
reset slot slot-id
Parameters
Parameter Description Value
slot-id Specifies the stack ID of the The value must be set according
device that needs to be restarted. to the device configuration.
Views
All views
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In a stack, you can restart stack members. Restarting a stack member will
interrupt services on this device, but the configuration of this device still exists.
Precautions
Before commands have been executed, if a master/slave switchover occurs
because the reset slot command is used to reset the master switch, you need to
execute the commands that have not been executed on the new master switch
again after the standby switch becomes the new master switch.
Example
# Restart stack member with stack ID 1.
<HUAWEI> reset slot 1
Warning: Confirm to reset slot 1? [Y/N]:y
Info: The board 1 is reset successfully.
Function
The set device battery lifetime command sets the lifetime expiration alarm
threshold for a lithium battery.
NOTE
Only the S5700-28P-LI-BAT and S5700-28P-LI-24S-BAT that have a lithium battery installed
support this command.
Format
set device battery lifetime threshold threshold [ slot slot-id ]
Parameters
Views
System view
Default Level
3: Management level
Usage Guidelines
Use Scenario
If a lithium battery discharges too fast, its lifetime is about to expire. During a
discharge, if the time taken to consume 10% of the total power is shorter than the
configured alarm threshold, the lifetime of the lithium battery is about to expire.
When this occurs, the device generates an alarm. When receiving this alarm,
replace the lithium battery to ensure normal operation of the device in the case of
a mains power outage.
Precautions
Example
# Set the lifetime expiration alarm threshold for the lithium battery to 50 minutes.
<HUAWEI> system-view
[HUAWEI] set device battery lifetime threshold 50
Related Topics
3.2.7 display device battery lifetime threshold
NOTE
Only the S5700-28P-LI-BAT and S5700-28P-LI-24S-BAT that have a lithium battery installed
support this command.
Format
set device battery off [ slot slot-id ]
Parameters
Parameter Description Value
slot slot-id Specifies the slot ID of the lithium The value is fixed as 0
battery. currently.
Views
System view
Default Level
3: Management level
Usage Guidelines
Use Scenario
If a device has a lithium battery installed, the lithium battery can supply power to
the device after the power supply of the device is turned off. To power off the
device, turn off the lithium battery after powering off the power supply.
Precautions
This command can be executed only if a lithium battery is available and the power
supply of the device has been turned off. If no lithium battery is available or the
power supply of the device is on, the system displays a message indicating that
the command cannot be executed.
Example
# Turn off the lithium battery.
<HUAWEI> system-view
[HUAWEI] set device battery off
Info: The system is now comparing the configuration, please wait.
Warning: The configuration has been modified, and it will be saved to the next startup saved-configuration
file flash:/vrpcfg.zip. Continue? [Y/N]:N
Warning:The battery in slot 0 will be turned off and the device will be powered off. Continue? (Y/N): Y
Function
The set device fault-light command sets the fault indicator status on a device.
The undo set device fault-light command restores the default fault indicator
status.
By default, the fault indicator status of the device is not set. The fault indicator
status is displayed based on the current device running status.
NOTE
Format
set device fault-light { normal | under-repair [ keeptime time ] } [ slot slot-id ]
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
Use Scenario
The fault indicator status of the device is indicated by mode indicators and the
system indicator. When a device becomes faulty, you can configure mode
indicators and the system indicator on the device to blink red fast so that
maintenance personnel can quickly find this device on site.
Precautions
Mode indicators include the STAT indicator, SPED indicator, PoE indicator
(supported only on PoE switches) and STCK indicator. The system indicator is the
SYS indicator, which indicates the system running status.
When the set device fault-light under-repair command is executed, the system
indicator and all mode indicators blink red fast. After these indicators blink red
fast for the time specified by keeptime time, the following situations occur:
● The system indicator restores to the previous status.
● The STAT indicator is steady on.
● When the stack function is enabled, the STCK indicator on the master switch
blinks slowly, while the STCK indicators on the other member devices are off.
● When the stack function is disabled, the STCK indicator is off.
● Other mode indicators are off.
The set device fault-light normal and undo set device fault-light commands
have the same functions. That is, after either of the two commands is executed,
the following situations occur:
● The system indicator restores to the previous status.
● The STAT indicator is steady on.
● When the stack function is enabled, the STCK indicator on the master switch
blinks slowly, while the STCK indicators on the other member devices are off.
Example
# Configure the fault indicator to indicate that the device is faulty.
<HUAWEI> system-view
[HUAWEI] set device fault-light under-repair
Related Topics
3.2.8 display device fault-light
NOTE
Format
set fan speed-adjust threshold minus threshold-value [ slot slot-id ]
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
The device uses fixed temperature thresholds to increase and decrease the fan
speed by default. The fan speed increases when the device temperature exceeds
the upper threshold and decreases when the device temperature falls below the
lower threshold. If you want to keep the device working at a lower temperature,
you can set deduction for the fixed temperature thresholds. The temperature
threshold after modification is lower than the default temperature threshold.
Precautions
● The new thresholds are the fixed temperature thresholds minus threshold-
value. After this command is executed, both the threshold for increasing the
fan speed and the threshold for lowering the fan speed are reduced.
● To view the fixed temperature thresholds, run the display fan speed-adjust
threshold minus command.
NOTE
If a device uses intelligent fan control, this command reduces the temperature thresholds
for starting and stopping the fans. Fans in intelligent heat dissipation mode can only start
and stop rotating at a fixed speed that cannot be increased or reduced.
You can run the display fan speed-adjust threshold minus command to check
temperature thresholds for fan speed adjustment of fans in intelligent heat dissipation
mode. Assume you view that the current temperature threshold of the fans is 40-50, in
which 40°C is the threshold for stopping the fans, and 50°C is the threshold for starting the
fans. When the current device temperature is 45°C, you need to determine whether fans
will rotate according to the fan temperature change:
● When the device temperature is increased to 45°C from a lower temperature (30°C for
example), fans do not rotate because the device temperature does not reach the
threshold for starting the fans.
● When the device temperature is reduced to 45°C from a higher temperature (65°C for
example), fans keep rotating because the device temperature does not fall below the
threshold for stopping the fans.
Example
# Set the deduction to the temperature thresholds to 10.
<HUAWEI> system-view
[HUAWEI] set fan speed-adjust threshold minus 10
Info: Succeeded in setting the fan speed-adjust threshold.
Related Topics
3.2.9 display fan speed-adjust threshold minus
Function
The set memory-usage threshold command sets the memory usage threshold.
The undo set memory-usage threshold command restores the default memory
usage threshold.
By default, the memory usage alarm threshold is 90% and the memory usage
alarm recovery threshold is 85% on the S5720EI. On the S1720GFR, S2750EI,
S5700LI and S5700S-LI , The following describes the memory usage alarm
threshold :
● If the memory capacity on the device is lower than or equal to 256 MB, the
memory usage alarm threshold is 85% and the memory usage alarm recovery
threshold is 80%.
● If the memory capacity on the device is larger than 256 MB and smaller than
or equal to 512 MB, the memory usage alarm threshold is 90% and the
memory usage alarm recovery threshold is 85%.
● If the memory capacity on the device is higher than 512 MB, the memory
usage alarm threshold is 95% and the memory usage alarm recovery
threshold is 90%.
The following describes the memory usage alarm threshold on other switch
models:
● If the memory capacity on the device is lower than or equal to 512 MB, the
memory usage alarm threshold is 85% and the memory usage alarm recovery
threshold is 80%.
● If the memory capacity on the device is larger than 512 MB and smaller than
or equal to 1.5 GB, the memory usage alarm threshold is 90% and the
memory usage alarm recovery threshold is 85%.
● If the memory capacity on the device is higher than 1.5 GB, the memory
usage alarm threshold is 95% and the memory usage alarm recovery
threshold is 90%.
Format
set memory-usage threshold threshold-value [ slot slot-id ]
undo set memory-usage threshold [ threshold-value ] [ slot slot-id ]
Parameters
Parameter Description Value
threshold Specifies the memory usage The value is an integer that
threshold-value threshold. ranges from 75 to 100.
slot slot-id Specifies the memory usage The value is an integer that
threshold of the device. slot-id ranges from 1 to 8.
specifies the stack ID.
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
You can use the set memory-usage threshold command to set the memory
usage threshold. When memory usage exceeds the threshold, the system logs the
event and generates an alarm. By viewing log information, you can learn about
memory usage.
Precautions
You are advised to use the default threshold. If the memory usage threshold is set
too low, the system frequently generates alarms. If the memory usage threshold is
set too high, you cannot learn about memory usage in a timely manner.
Example
# Set the memory usage threshold to 85%.
<HUAWEI> system-view
[HUAWEI] set memory-usage threshold 85
Related Topics
3.1.14 display memory-usage threshold
Format
set root-key
undo set root-key
Parameters
None
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
A root key is located at the bottom of the key management infrastructure to
protect confidentiality of upper-layer keys (such as key encryption key). Therefore,
a root key is important to data security. A switch's root key is often stored in the
system. If attackers illegally obtain the root key, encrypted data will become
insecure. To improve data security and prevent attackers from obtaining encrypted
packets, configure another root key on the switch. The configured root key will
take effect after the switch restarts.
Precautions
● The root key can only be configured when the switch has no service
configuration. If service configuration has been performed on the switch, an
error message will be displayed when you configure the root key.
● If you configure a password (not the administrator password) and key after
configuring the root key, the password and key configuration will not be
restored after the switch software version is changed to V200R009 or an
earlier version.
● After the root key is configured, the configuration file of the switch cannot be
exported and used on other devices.
Example
# Set the root key to huawei.
<HUAWEI> set root-key
Warning: A new root key can take effect only after the device is restarted. Are you sure you want to
configure it. Continue? [Y/N]:y
Please enter a new key of no more than 32 characters:huawei
Please enter the new key again:huawei
Info: Successed in setting next root-key on the master board.
NOTE
Format
set service-mode enhanced
undo set service-mode enhanced
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
By default, S5720HIs work in normal mode, requiring the interval for receiving
BFD packets to be longer than or equal to 100 ms. If the interval cannot meet
requirements, run the set service-mode command to change the working mode
of an S5720HI to enhanced so that the S5720HI supports a minimum of 3 ms
interval.
Precautions
● Running the set service-mode command will reduce the device forwarding
performance. Therefore, confirm the action before you use the command.
● If BFD has been enabled before this command is executed, disable BFD first.
Example
# Set the working mode of the device to enhanced.
<HUAWEI> system-view
[HUAWEI] set service-mode enhanced
Warning: This command will effect forward performance. Continue? [Y/N]:y
Related Topics
3.2.12 display service-mode configuration
NOTE
Devices that do not support the stack function or do not have the stack function enabled do not
support this function.
Format
slave restart
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
To upgrade the system software in-service, first upgrade the software on the
standby device when the master device works normally, and then restart the
NOTICE
The command may interrupt services on the device. Therefore, exercise caution
when using this command.
Example
# Restart the standby device.
<HUAWEI> system-view
[HUAWEI] slave restart
NOTE
Devices that do not support the stack function or do not have the stack function enabled do not
support this function.
Format
slave switchover
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In a stack containing multiple switches, you can manually switch the master and
standby switches during software upgrade or system maintenance. After the
active/standby switchover is complete, the original master switch joins the stack
after restarting, and the original switch becomes the new master switch.
Prerequisites
Precautions
Example
# Perform an active/standby switchover.
<HUAWEI> system-view
[HUAWEI] slave switchover enable
[HUAWEI] slave switchover
Warning: This operation will switch the slave board to the master board. Continue? [Y/N]:y
Related Topics
3.2.13 display switchover state
3.2.33 slave switchover { disable | enable }
Function
The slave switchover { disable | enable } command enables or disables forcible
master/slave switchover.
NOTE
Devices that do not support the stack function or do not have the stack function enabled do not
support this function.
Format
slave switchover { disable | enable }
Parameters
Parameter Description Value
disable Disables forcible master/slave switchover. -
Views
System view
Default Level
2: Configuration level
Usage Guidelines
The slave switchover command takes effect only after forcible master/slave
switchover is enabled. If forcible master/slave switchover is disabled, the 3.2.32
slave switchover command does not take effect.
Example
# Disable forcible master/slave switchover.
<HUAWEI> system-view
[HUAWEI] slave switchover disable
Related Topics
3.2.13 display switchover state
3.2.32 slave switchover
Function
The snmp-agent trap enable feature-name entityexttrap command enables the
trap function for the ENTITYEXTTRAP module.
The undo snmp-agent trap enable feature-name entityexttrap command
disables the trap function for the ENTITYEXTTRAP module.
By default, the trap function is enabled for the ENTITYEXTTRAP module.
Format
snmp-agent trap enable feature-name entityexttrap [ trap-name trap-name ]
undo snmp-agent trap enable feature-name entityexttrap [ trap-name trap-
name ]
Parameters
Parameter Description Value
● hwboarddroprunt-
packetnotify: Some
packets of 64 to 86
bytes or 145 to 193
bytes are discarded.
Views
System view
Default Level
2: Configuration level
Usage Guidelines
After the trap function is enabled on a switch, the switch will generate traps
during operation and send the traps to the NMS through the SNMP module. If the
trap function is disabled on the switch, the switch will not generate traps and not
send traps to the NMS through the SNMP module.
You can specify the parameter trap-name to enable one or more event traps.
Example
# Enable the hwboardsoftwareversionincompatible trap for the ENTITYEXTTRAP
module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name entityexttrap trap-name
hwboardsoftwareversionincompatible
Related Topics
3.2.15 display snmp-agent trap feature-name entityexttrap all
Function
snmp-agent trap enable feature-name entitymib command enables the trap
function for the ENTITYMIB module.
Format
snmp-agent trap enable feature-name entitymib [ trap-name
entconfigchange ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
When the trap function is enabled, the device generates traps during running and
sends traps to the NMS through SNMP. When the trap function is not enabled, the
device does not generate traps and the SNMP module does not send traps to the
NMS.
You can specify trap-name to enable the trap function for one or more events.
Example
# Enable the entconfigchange trap of the ENTITYMIB module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name entitymib trap-name entconfigchange
Related Topics
3.2.16 display snmp-agent trap feature-name entitymib all
Function
snmp-agent trap enable feature-name entitytrap command enables the trap
function for the ENTITYTRAP module.
Format
snmp-agent trap enable feature-name entitytrap [ trap-name trap-name ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
When the trap function is enabled, the device generates traps during running and
sends traps to the NMS through SNMP. When the trap function is not enabled, the
device does not generate traps and the SNMP module does not send traps to the
NMS.
You can specify trap-name to enable the trap function for one or more events.
Example
# Enable the hwentitytrapconflictdetect trap of the ENTITYTRAP module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name entitytrap trap-name hwpowerfail
Related Topics
3.2.17 display snmp-agent trap feature-name entitytrap all
Function
snmp-agent trap enable feature-name srmtrap command enables the trap
function for the SRMTRAP module.
undo snmp-agent trap enable feature-name srmtrap command disables the
trap function for the SRMTRAP module.
By default, the trap function is enabled for the SPMTRAP module.
Format
snmp-agent trap enable feature-name srmtrap [ trap-name trap-name ]
undo snmp-agent trap enable feature-name srmtrap [ trap-name trap-name ]
Parameters
Parameter Description Value
● hwfpgacheckfaultre-
sume: FPGA check
succeeds.
● hwi2cfault: An I2C
fault occurs.
● hwi2cfaultresume: An
I2C fault is rectified.
● hwlanswitchfault: An
LSW chip becomes
faulty.
● hwlanswitchfaultre-
sume: An LSW chip
recovers from a fault.
● hwlightfault: An
indicator becomes
faulty.
● hwlightfaultresume:
An indicator recovers
from a fault.
● hwopticalpowerabnor-
mal: The optical
module power is out
of the normal range.
● hwopticalpowerre-
sume: The optical
module power
restores to the normal
range.
● hwpcifault: A PCI fault
occurs.
● hwpcifaultresume: A
PCI fault is rectified.
● hwphychipabnormal:
A PHY chip is faulty.
● hwphyfault: A PHY
fault occurs.
● hwphyfaultresume: A
PHY fault is rectified.
● hwpoechipfault: A PoE
chip is faulty.
● hwpoechipresume: A
PoE chip recovers
from a fault.
● hwpoefault: The PoE
function is
unavailable.
● hwpoefaultresume: A
PoE function becomes
available.
● hwportphysicalauto-
negotiateclear: Port
auto-negotiation
succeeds.
● hwportphysicalauto-
negotiatefail: Port
auto-negotiation fails.
● hwportphysicalethfull-
duplexclea: A port is
in full-duplex mode.
● hwportphysicaleth-
halfduplexalarm: A
port is in half-duplex
mode.
● hwportphysicalportty-
pechange: The port
type changes.
● hwpowerabsent: A
power module is
unavailable.
● hwpowerabsentre-
sume: A power
module becomes
available.
● hwpowerfault: A
power module is
faulty.
● hwphyfaultresume: A
power module
recovers from a fault.
● hwrtcfault: A real-
time clock (RTC) is
faulty.
● hwrtcfaultresume: A
real-time clock (RTC)
recovers from a fault.
● hwrxpowerexceedma-
jor: The Rx power
exceeds the upper
threshold.
● hwrxpowerexceedmi-
nor: The Rx power
falls below the lower
threshold.
● hwrxpowerresume:
The Rx power restores
to the normal range.
● hwsubcardplugin: A
subcard is installed.
● hwsubcardpullout: A
subcard is removed.
● hwtempchipexcption:
A temperature sensor
chip is faulty.
● hwtempchipexcption-
resume: A
temperature sensor
chip recovers from a
fault.
● hwtempfallingalarm:
The device
temperature is too
low.
● hwtempfallingresume:
The device
temperature restores
to the normal range.
● hwtemprisingalarm:
The device
temperature is too
high.
● hwtemprisingresume:
The device
temperature restores
to the normal range.
● hwtxpowerexceedma-
jor: The Tx power
exceeds the upper
threshold.
● hwtxpowerexceedmi-
nor: The Tx power
falls below the lower
threshold.
● hwtxpowerresume:
The Tx power restores
to the normal range.
● hwusbfault: A USB
flash drive is faulty.
● hwusbfaultresume: A
USB flash drive
recovers from a fault.
● hwusbplugin: A USB
flash drive is installed.
● hwusbplugout: A USB
flash drive is removed.
● hwusbpowerfault: A
USB 5V power module
is faulty.
● hwusbpowerfaultre-
sume: A USB 5V
power module
recovers from a fault.
● hwwriteflasherror: An
error occurs when
data is written to the
flash memory.
● hwwriteflasherrorre-
sume: An error that
occurs when data is
written to the flash
memory is resolved.
● hwxauirefclockfault:
An XAUIREF clock is
faulty.
● hwxauirefclockfaultre-
sume: An XAUIREF
clock recovers from a
fault.
Views
System view
Default Level
2: Configuration level
Usage Guidelines
When the trap function is enabled, the device generates traps during running and
sends traps to the NMS through SNMP. When the trap function is not enabled, the
device does not generate traps and the SNMP module does not send traps to the
NMS.
You can specify trap-name to enable the trap function for one or more events.
Example
# Enable the hwclpdcheckfault trap of the SRMTRAP module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name srmtrap trap-name hwclpdcheckfault
Related Topics
3.2.18 display snmp-agent trap feature-name srmtrap all
Function
snmp-agent trap enable feature-name swithsrvres command enables the trap
function for the SWITHSRVRES module.
Format
snmp-agent trap enable feature-name swithsrvres [ trap-name
{ hwsrvserviceconfigfailed | hwsrvserviceexceedthreshould |
hwsrvserviceexceedthreshouldresume } ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
When the trap function is enabled, the device generates traps during running and
sends traps to the NMS through SNMP. When the trap function is not enabled, the
device does not generate traps and the SNMP module does not send traps to the
NMS.
You can specify trap-name to enable the trap function for one or more events.
Example
# Enable the hwsrvserviceconfigfailed trap of the SWITHSRVRES module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name swithsrvres trap-name hwsrvserviceconfigfailed
Related Topics
3.2.19 display snmp-agent trap feature-name swithsrvres all
Function
The snmp-agent trap enable feature-name system command enables an
SYSTEM trap.
Format
snmp-agent trap enable feature-name system [ trap-name trap-name ]
Parameters
Views
System view
Default Level
2: Configuration level
Usage Guidelines
To enable the NMS to easily manage the SYSTEM module of the device, you can
run the snmp-agent trap enable feature-name system command to enables an
SYSTEM trap. The command configuration ensures that the traps generated during
the device operation are sent to the NMS. Otherwise, SYSTEM traps are not sent
to the NMS.
You can run the 3.2.20 display snmp-agent trap feature-name system all
command to check the configuration result.
Example
# Enable the hwSysReloadNotification trap.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name system trap-name hwSysReloadNotification
Related Topics
3.2.20 display snmp-agent trap feature-name system all
Function
The temperature threshold command sets the temperature alarm thresholds.
By default, the lower temperature threshold is 0°C, and the upper temperature
threshold varies according to hardware of various models, ranging from 44°C to
74°C.
Format
temperature threshold slot { slot-id | all } lower-limit min-temperature upper-
limit max-temperature
Parameters
Parameter Description Value
Views
system view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
The device generates an alarm and records log information when the device
temperature falls below the lower threshold or rises above the upper threshold.
Precautions
● If the configured threshold values are out of the allowed range, the
configuration fails and the upper and lower thresholds are restored to the
maximum values.
Example
# Set the lower temperature alarm threshold to 20°C and upper temperature
alarm threshold to 60°C for all member switches in a stack.
<HUAWEI> system-view
[HUAWEI] temperature threshold slot all lower-limit 20 upper-limit 60
Related Topics
3.1.18 display temperature
Function
The transceiver diagnosis threshold rx-power command sets the upper and
lower thresholds for the receive optical power of the optical transceiver installed in
an interface.
The undo transceiver diagnosis threshold rx-power command restores the upper
and lower thresholds to the default values for the receive optical power of the
optical transceiver installed in an interface.
By default, the optical power upper and lower thresholds vary according to optical
module vendors.
Format
transceiver diagnosis threshold rx-power { default | low-alarm low-alarm high-
alarm high-alarm }
Parameters
Parameter Description Value
Views
GE interface view, XGE interface view, 40GE interface view
Default Level
2: Configuration level
Usage Guidelines
You can run the transceiver diagnosis threshold rx-power command to adjust
the receive optical power of the optical transceiver.
Example
# Set the upper and lower thresholds for the receive optical power of the optical
transceiver installed in GigabitEthernet 0/0/2 to default values.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/2
[HUAWEI-GigabitEthernet0/0/2] transceiver diagnosis threshold rx-power default
Function
The transceiver diagnosis threshold tx-power command sets the upper and
lower thresholds for the transmit optical power of the optical transceiver installed
in an interface.
By default, the optical power upper and lower thresholds vary according to optical
module vendors.
Format
transceiver diagnosis threshold tx-power { default | low-alarm low-alarm high-
alarm high-alarm }
Parameters
Parameter Description Value
Views
GE interface view, XGE interface view, 40GE interface view
Default Level
2: Configuration level
Usage Guidelines
You can run the transceiver diagnosis threshold tx-power command to adjust
the transmit optical power of the optical transceiver.
Example
# Set the upper and lower thresholds for the transmit optical power of the optical
transceiver installed in GigabitEthernet 0/0/2 to default values.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/2
[HUAWEI-GigabitEthernet0/0/2] transceiver diagnosis threshold tx-power default
Function
The transceiver phony-alarm-disable command disables the alarm function for
non-Huawei-certified switch optical modules.
Format
transceiver phony-alarm-disable
undo transceiver phony-alarm-disable
Parameters
None
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Non-Huawei-certified switch optical modules may fail to work normally. If non-
Huawei-certified switch optical modules are used on devices produced since July 1,
2013(January 1, 2016 for QSFP+ 40GE optical modules), the devices generate a
large number of alarms to prompt users to replace these optical modules with
Huawei-certified switch optical modules. However, vendor information of optical
modules early delivered from Huawei may not be recorded. Therefore, non-
Huawei-certified switch optical module alarms are generated. These optical
modules can still be used to protect customer investment. In this case, you can
disable the alarm function for non-Huawei-certified switch optical modules.
Example
# Disable the alarm function for non-Huawei-certified switch optical modules.
<HUAWEI> system-view
[HUAWEI] transceiver phony-alarm-disable
Info:Transceiver-phony-alarm disable.
3.2.44 wavelength-channel
Function
The wavelength-channel command sets the wavelength channel of a
wavelength-tunable optical module.
NOTE
Format
wavelength-channel channelnum
undo wavelength-channel
Parameters
Parameter Description Value
Views
XGE interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
To view the mapping between the wavelength channel, center wavelength, and
frequency, run the display wavelength-map command.
Precautions
Running the wavelength-channel command will open and close the laser,
resulting in interface flapping.
Example
# Add a wavelength-tunable optical module to wavelength channel 20 on
XGigabitEthernet0/0/2.
<HUAWEI> system-view
[HUAWEI] interface XGigabitEthernet 0/0/2
[HUAWEI-XGigabitEthernet0/0/2] wavelength-channel 20
Related Topics
3.2.21 display wavelength-map
Commands provided in this section and all the parameters in the commands are
supported by all switch models by default, unless otherwise specified. For details,
see specific commands.
Function
The display buffer command displays the statistics about logs cached in the
buffer.
Format
display buffer [ feature-name [ buffer-name ] ]
Parameters
Parameter Description Value
feature-name Name of the buffer dedicated to caching logs of a specific -
feature
buffer-name Name of the buffer -
Views
All views
Default Level
3: Management level
Usage Guidelines
On the device, service modules generate logs and control the log volumes. The
information center processes the received logs.
When the number of logs that are generated within a specified period (T) exceeds
the threshold, the service module, with the buffer mechanism, saves extra logs to
the buffer and does not send them to the information center.
You can run the display buffer command to view the statistics about log
information in the buffer.
Example
# View the statistics about logs cached in the buffer on the service module L2IF.
<HUAWEI> display buffer L2IF
Feature name : L2IF
Buffer number : 1
Buffer name : CALLBACKFAIL
Buffer ID : 35
Max length of message : 256
Max number of message :5
Time threshold(s) : 3600
Store lastest message number : 0
Total receive number : 76
Total process number :5
Max rate record : 0 / 3600(s)
Max rate timestamp : 0-00-00 00:00:00
Item Description
Buffer ID Buffer ID
Item Description
Function
The display channel command displays the channel configuration.
Format
display channel [ channel-number | channel-name ]
Parameters
Views
All views
Default Level
3: Management level
Usage Guidelines
The display channel command displays the channel configuration.
Example
# Display the configuration of channel 0.
<HUAWEI> display channel 0
channel number:0, channel name:console
MODU_ID NAME ENABLE LOG_LEVEL ENABLE TRAP_LEVEL ENABLE DEBUG_LEVEL
ffff0000 default Y warning Y debugging Y debugging
Item Description
Item Description
channel name Channel name. Table 3-37 lists default channel names.
To set the channel name, run the 3.3.15 info-center
channel name command.
Related Topics
3.3.14 info-center channel
3.3.15 info-center channel name
3.3.16 info-center enable
3.3.30 info-center source channel
Function
The display debugging command displays debugging messages allowed to be
sent by the device.
Format
display debugging [ interface interface-type interface-number ] [ module-
name ]
display debugging interface all
NOTE
Parameters
Parameter Description Value
interface Specifies the interface type and -
interface-type number.
interface-number
all Display debugging information -
on all interfaces.
module-name Displays debugging messages Enumerated type. The value
sent by a specified module depends on the registered
such as the DHCP module. If module.
this parameter is not specified,
all debugging messages
allowed to be sent are
displayed.
slot slot-id Specifies a slot ID. The value is an integer, and
the value range depends on
the device configuration.
vcpu vcpu Specifies the virtual CPU Specify the vcpu parameter
number. based on the hardware
configuration.
Views
All views
Default Level
3: Management level
Usage Guidelines
Usage Scenario
Using the display debugging command, you can display the enabled debugging.
If no parameters are specified, the display debugging command displays global
debugging information.
Prerequisites
Example
# Display debugging messages allowed to be sent by the Switch.
<HUAWEI> debugging acl4 all
<HUAWEI> display debugging
ACL4 event debugging switch is on
ACL4 packet debugging switch is on
Item Description
Related Topics
3.3.16 info-center enable
3.3.30 info-center source channel
3.3.41 terminal debugging
3.3.44 terminal monitor
Function
The display info-center command displays the output configuration of the
information center.
Format
display info-center
Parameters
None
Views
All views
Default Level
3: Management level
Usage Guidelines
You can run the display info-center command to display all information recorded
in the information center.
When a module is specified, you can view all information about the module
recorded in the information center.
Example
# Display output configuration of the information center.
<HUAWEI> display info-center
Information Center:enabled
Log host:
10.1.1.1, channel number 2, channel name loghost,
language English , host facility local7
Console:
channel number : 0, channel name : console
Monitor:
channel number : 1, channel name : monitor
SNMP Agent:
channel number : 5, channel name : snmpagent
Log buffer:
enabled,max buffer size 1024, current buffer size 512,
current messages 512, channel number : 4, channel name : logbuffer
dropped messages 0, overwritten messages 53
Trap buffer:
enabled,max buffer size 1024, current buffer size 256,
current messages 256, channel number:3, channel name:trapbuffer
dropped messages 0, overwritten messages 6229
Information timestamp setting:
log - date, trap - date, debug - date millisecond
Item Description
Item Description
Item Description
Related Topics
3.3.14 info-center channel
3.3.15 info-center channel name
3.3.16 info-center enable
3.3.19 info-center logbuffer
3.3.20 info-center logbuffer size
3.3.22 info-center loghost
3.3.32 info-center timestamp
3.3.33 info-center trapbuffer
3.3.34 info-center trapbuffer size
Format
display info-center filter-id [ id | bymodule-alias modname alias ]
Parameters
Parameter Description Value
id Displays filtered information The value is in hexadecimal
with the specified ID. notation and is a string of 8
digits. The value can contain
0-9, a-f, and A-F.
Views
All views
Default Level
3: Management level
Usage Guidelines
ID identifies each function module for log registration. An ID filter list is the
aggregation of the shielded IDs.
If id or bymodule-alias is not specified, all information is filtered.
If you do not want to output a specific log to the log file or log buffer, you can
find the ID of the log in the data dictionary and run the 3.3.17 info-center filter-
id command to inject the ID into the filter list. Then, you can run the display info-
center filter-id command to check whether the ID has become the one to be
filtered.
Example
# Display all the IDs in the filter list.
ID : 0x40394018
Module : SHELL
Alias : DISPLAY_CMDRECORD
Content : Recorded display command information. (Task=[string], Ip=[string], VpnName=[string],
User=[string], AuthenticationMethod="[string]",
Command="[string]")
Filtered Number : 1
Filtered Number Number of times that the log to which the log
ID corresponds is filtered.
Related Topics
3.3.17 info-center filter-id
Format
display info-center rate-limit record
Parameters
None
Views
All views
Default Level
3: Management level
Usage Guidelines
You can run the display info-center rate-limit record command to check
suppression information of the log processing rate. Then you can determine
whether service logs are suppressed because there are many logs.
Example
# Display the suppression of the log processing rate in the information center.
<HUAWEI> display info-center rate-limit record
Record No.1
InfoID : 417d5000
Module : 6OVER4
Alias : DESTFAIL
Rate limit threshold : 50
Total receive number : 1872
Total drop number : 922
Total send number : 950
Begin timestamp : 2009-12-21 11:41:28
Item Description
Total receive number Total number of logs that are generated during
the latest suppression period.
Total drop number Total number of logs that are discarded during
the latest suppression period.
Item Description
Related Topics
3.3.29 info-center rate-limit threshold
Format
display info-center rate-limit threshold
Parameters
None
Views
All views
Default Level
3: Management level
Usage Guidelines
You can run the display info-center rate-limit threshold command to check the
log processing rate threshold of each module and then adjust the threshold based
on service requirements.
Example
# Display the threshold of the log processing rate set for the information center.
<HUAWEI> display info-center rate-limit threshold
Rate limit threshold(per second):
Module Alias Default Config
default 30 30
IPC IPCFRGTOOLARGE 5 5
IPC IPCDUMPMEM 5 5
IPC ALLOCINDEXERR 5 5
IPC DRVNOTSTABLE 2 2
IPC NOTIMODFALNOREASM 2 2
IPC SYNRPCGETSMFAL 5 5
IPC SYNRPCMODUNREG 5 5
IPC SYNRPCRETNULL 5 5
IPC MODULENOTREG 5 5
IPC SENDRETURN 5 5
IPC GETMTUFAL 5 5
IPC ALLOCIPCFRGFAL 5 5
IPC RECVINVALIDMSG 5 5
IPC RCVNOTIQUEERR 5 5
IPC NOTIFYQUEERR 5 5
IPC SENDFINISHRETURN 5 5
IPC RECVINVALIDMSGTYPE 5 5
SOURCE UMSGGETSRCOBJFAL 1 1
Item Description
Related Topics
3.3.29 info-center rate-limit threshold
Function
The display info-center statistics command displays statistics on the information
center.
Format
display info-center statistics
Parameters
None
Views
All views
Default Level
3: Management level
Usage Guidelines
You can run the display info-center statistics command to view statistics on the
information center, including logs, traps, and debugging messages of each
module.
Example
# Display statistics on the information center.
<HUAWEI> display info-center statistics
Information statistics data:
ModuleID ModuleName LogSend LogDrop DiagSend DiagDrop TrapSend
TrapDrop DebugSend DebugDrop
0x417d0000 6OVER4 0 0 0 0 0
0 0 0
0x41470000 AAA 0 0 0 0 0
0 0 0
0x406c0000 ACL 0 0 0 0 0
0 0 0
0x40ef0000 ACL6 0 0 0 0 0
0 0 0
0xff060000 ACLE 1 0 0 0 0
0 0 0
0xff380000 ADA_BFD 0 0 0 0 0
0 0 0
0x40e70000 ADDR 0 0 0 0 0
0 0 0
Item Description
Item Description
Related Topics
3.3.5 display info-center
3.3.16 info-center enable
3.3.30 info-center source channel
Format
display logbuffer [ size size | slot slot-id | module module-name | security | level
{ severity | level } ] *
Parameters
Parameter Description Value
Views
All views
Default Level
3: Management level
Usage Guidelines
The display logbuffer command displays the information of recent logs. If the
actual number of logs is smaller than the value specified by size, the system
displays logs of the actual number.
Example
# Display all the logs in the log buffer.
<HUAWEI> display logbuffer
Logging buffer configuration and contents : enabled
Allowed max buffer size : 1024
Actual buffer size : 512
Channel number : 4 , Channel name : logbuffer
Dropped messages : 0
Overwritten messages : 0
Current messages : 43
Item Description
Item Description
Related Topics
3.3.5 display info-center
3.3.14 info-center channel
3.3.15 info-center channel name
3.3.16 info-center enable
3.3.19 info-center logbuffer
3.3.20 info-center logbuffer size
3.3.36 reset logbuffer
Function
The display logfile command displays information about a log file.
Format
display logfile file-name [ offset | hex ] *
Parameters
Parameter Description Value
file-name Specifies the log file name, The value is a string of case-
which can contain the drive insensitive characters, spaces not
and path. supported. If the parameter value
does not contain any path, it is a
string of 1 to 64 bytes. Otherwise, it
is a string of 1 to 160 bytes.
offset Displays the log file with the The value is an integer that ranges
specified offset or byte. from 0 to 2147483647.
Views
All views
Default Level
3: Management level
Usage Guidelines
When encountering problems, you can query log information to know about what
happened during device operation. This is helpful for fault location.
The file name is generated automatically by the system. The file name extension
of the log file is *.log or *.dblg. When the current log file size reaches the specified
upper limit, the system compresses the file into a *.log.zip or *.dblg.zip file.
You can view the *.log files or *.log.zip files. When viewing a *.log.zip file, you can
press Ctrl+C to abort command execution.
When viewing the *.log.zip file, it is recommended that the length of the file name
(including the driver and path) not exceed 62 bytes. Otherwise, the content of the
file may fail to be viewed.
If the files you filter based on the pipe character are large and no qualified log file
is displayed, the command fails to display any output for a long period of time
until the command execution finishes.
For details about the log format, see "Log Message Format Description" in the
S1720, S2700, S5700, and S6720 V200R011C10 Log Reference - Introduction.
Example
# Display log information saved in the log file in a specified path.
<HUAWEI> display logfile logfile/log.log
################################################################
# This logfile is generated at slot 0
################################################################
Related Topics
3.3.16 info-center enable
3.3.38 save logfile
Format
display snmp-agent trap feature-name info all
Parameters
None
Views
All views
Default Level
3: Management level
Usage Guidelines
The display snmp-agent trap feature-name info all command displays whether
all trap functions of the Information Center module are enabled.
Example
# Display all trap messages of the Information Center module.
<HUAWEI> display snmp-agent trap feature-name info all
------------------------------------------------------------------------------
Feature name: INFO
Trap number : 2
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwICLogFileAging on on
hwICLogBufferLose on on
Table 3-47 Description of the display snmp-agent trap feature-name info all
command output
Item Description
Item Description
Related Topics
3.3.40 snmp-agent trap enable feature-name info
Function
The display trapbuffer command displays information recorded in the trap buffer.
Format
display trapbuffer [ size value | slot slot-id | module module-name | level
{ severity | level } ] *
Parameters
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
The display trapbuffer command displays the information of recent traps. If the
number of traps in the trap buffer is smaller than value, traps of the actual
number are displayed.
Example
# Display all traps in the trap buffer.
<HUAWEI> display trapbuffer
Trapping buffer configuration and contents : enabled
Allowed max buffer size : 1024
Actual buffer size : 256
Channel number : 3 , Channel name : trapbuffer
Dropped messages : 0
Overwritten messages : 6248
Current messages : 256
Current messages : 79
Item Description
Related Topics
3.3.5 display info-center
3.3.14 info-center channel
3.3.15 info-center channel name
3.3.16 info-center enable
3.3.33 info-center trapbuffer
3.3.34 info-center trapbuffer size
3.3.37 reset trapbuffer
Function
The info-center channel command configures channels for outputting
information in various directions.
Table 3-49 Default association between the channel number, channel name, and
output direction of information channels
0 console Console
6 channel6 Unspecified
7 channel7 Unspecified
8 channel8 Unspecified
Format
info-center { console | logbuffer | logfile | monitor | snmp | trapbuffer }
channel { channel-number | channel-name }
Parameters
Views
System view
Default Level
3: Management level
Usage Guidelines
You can run the info-center channel command in the following scenarios: The
same information is sent to different directions. For example, the log file and log
host record the same content or the trap buffer and the SNMP agent record the
same content.
NOTE
Example
# Configure the channel used to output information to a console.
<HUAWEI> system-view
[HUAWEI] info-center console channel console
Related Topics
3.3.3 display channel
3.3.5 display info-center
3.3.15 info-center channel name
3.3.16 info-center enable
3.3.19 info-center logbuffer
3.3.22 info-center loghost
3.3.30 info-center source channel
3.3.33 info-center trapbuffer
Function
The info-center channel name command names a channel with a specified
number.
The undo info-center channel command restores the default channel name.
0 console
1 monitor
2 loghost
3 trapbuffer
4 logbuffer
5 snmpagent
6 channel6
7 channel7
8 channel8
9 channel9
Format
info-center channel channel-number name channel-name
undo info-center channel channel-number
Parameters
Parameter Description Value
channel- Specifies the number The value is an integer that ranges from
number of a channel. 0 to 9. That is, the system has 10
channels.
channel-name Specifies the name of The value is a string of 1 to 30 case-
a channel. insensitive characters. The value consists
of letters or numbers and must start with
a letter.
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
You can rename channels, which facilitates memorization and usage.
Precautions
Channel names must be unique. It is recommended that channel names represent
channel functions.
Example
# Name channel 0 execconsole.
<HUAWEI> system-view
[HUAWEI] info-center channel 0 name execconsole
Related Topics
3.3.3 display channel
3.3.5 display info-center
Format
info-center enable
undo info-center enable
info-center disable
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
During device running, the information center records device operation. The
system outputs system information to destinations such as the log host and the
console only after the information center is enabled. Network administrators can
store and query output information to monitor device running and locate faults.
Precautions
Follow-up Procedure
Example
# Enable the information center.
<HUAWEI> system-view
[HUAWEI] info-center enable
Info: Information center is enabled.
Related Topics
3.3.5 display info-center
3.3.10 display logbuffer
3.3.13 display trapbuffer
3.3.14 info-center channel
3.3.15 info-center channel name
3.3.19 info-center logbuffer
3.3.30 info-center source channel
3.3.33 info-center trapbuffer
Function
The info-center filter-id command configures the Switch to filter a specified log
or trap.
The undo info-center filter-id command disables the Switch from filtering a
specified log or trap.
Format
info-center filter-id { id | bymodule-alias modname alias } &<1-50>
Parameters
Parameter Description Value
id Specifies the ID of the log or trap The value is in hexadecimal
to be filtered. notation and contains 8
NOTE digits. The value contains
This parameter indicates the ID of a 0-9, a-f, and A-F.
log. If this parameter fails to be
configured, the log specified by this
ID does not exist.
bymodule- Specifies the module name and Enumerated type. Set the
alias modname alias name corresponding to the value according to the
alias log or trap to be filtered. device configuration.
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
If some logs or traps are unnecessary, configure the Switch not to output the logs
and traps. When the filtering function is enabled, the information center does not
send the traps with a specified ID that satisfy the filtering condition to any
channel. As a result, the trap buffer, console, terminal, or SNMP agent cannot
receive the traps with the specified ID.
Precautions
● Currently, the Switch can filter traps with a maximum of 50 IDs. If there are
more than 50 log IDs, the system displays a message indicating that the
filtering table is full. To configure the filtering function, run the undo info-
center filter-id { id | bymodule-alias modname alias } &<1-50> [ bytime
interval | bynumber number ], or the undo info-center filter-id all
command to delete original IDs and reconfigure the log ID.
● When both the bytime interval and bynumber number parameters are not
specified, all the logs with the specified ID will be discarded.
● When the bytime interval parameter is specified, the interval for sending two
allowed logs must be at least the configured time.
● When the bynumber number parameter is specified, the configured number
of logs between two allowed logs must be discarded.
● To add multiple IDs at a time, use a space to separate every two IDs. The
result of adding each ID is displayed.
● You cannot add the same ID or alias name repeatedly.
● When you add an unregistered or nonexistent ID or alias name, the system
displays a message indicating that the system fails to filter the trap with the
specified ID or alias name.
● During a software upgrade, if the information filtering function is configured
in the old version, but the new version does not support the specified log
module and alias, the information filtering configuration of the specified log
module and alias will be automatically cleared after the upgrade.
● You are advised to use the module name and alias to filter specified log
information. The id parameter can be obtained by running the display info-
center register-info [ module module-name ] log command in the
diagnostic view, and the modname and alias parameters can be obtained
through the command association function.
Example
# Filter information by module names and alias names.
<HUAWEI> system-view
[HUAWEI] info-center filter-id bymodule-alias CMD CMD_PRI_REARRG
Related Topics
3.3.16 info-center enable
3.3.6 display info-center filter-id
Format
info-center local log-counter disable
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
If the device keeps running for a long time, a large number of logs may be
generated.
● You can run the info-center local log-counter disable command to disable
logs sent to the log buffer, log file, console, or terminal from carrying the
sequence number, and run the undo info-centerlocal log-counter disable
command to enable these logs to carry the sequence number.
● You can run the undo info-center local log-counter disable command to
enable logs to carry the incremental sequence number, checking whether all
logs have been sent to the log buffer, log file, console, or terminal.
NOTE
● Logs sent to the log file, console, or terminalconsole or terminal are counted separately
and therefore carry different sequence numbers in ascending order. The sequence
number of the earliest log is 0.
● Logs sent to the log buffer carry sequence numbers in descending order. The sequence
number of the latest log is 0.
Example
# Disable local logs from carrying the sequence number.
<HUAWEI> system-view
[HUAWEI] info-center local log-counter disable
Function
The info-center logbuffer command enables the Switch to send logs to the log
buffer.
The undo info-center logbuffer command disables the Switch from sending logs
to the log buffer.
By default, the Switch is enabled to send logs to the log buffer.
Format
info-center logbuffer
undo info-center logbuffer
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
To log in to a device and check the faults or problems during operation, run the
info-center logbuffer command to enable the function to output logs to the log
buffer. Then, you can view log information in the log buffer.
By configuring the size of the log buffer using the info-center logbuffer size
buffersize command, you can view information about specified logs.
By configuring the number or name of a channel through which a device sends
logs to the log buffer using the info-center logbuffer channel { channel-number
| channel-name } command, you can send log information through a specified
channel to the log buffer.
Example
# Enable the Switch to send logs to the log buffer.
<HUAWEI> system-view
[HUAWEI] info-center logbuffer
Related Topics
3.3.5 display info-center
3.3.10 display logbuffer
3.3.14 info-center channel
3.3.15 info-center channel name
3.3.16 info-center enable
3.3.20 info-center logbuffer size
3.3.36 reset logbuffer
Format
info-center logbuffer size logbuffer-size
undo info-center logbuffer size [ logbuffer-size ]
Parameters
Parameter Description Value
logbuffer-size Specifies the maximum The value is an integer that ranges
number of logs in the log from 0 to 1024. If logbuffer-size is 0,
buffer. logs are not displayed.
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
If the number of logs in the log buffer reaches the maximum value, new logs will
replace the existing logs that were placed earlier in the log buffer until all the new
logs are stored.
Precautions
When you run the info-center logbuffer size command multiple times, only the
latest configuration takes effect.
The info-center logbuffer size command takes effect only after the information
center function has been enabled using the info-center enable command.
Example
# Set the maximum number of logs in the log buffer to 50.
<HUAWEI> system-view
[HUAWEI] info-center logbuffer size 50
Related Topics
3.3.5 display info-center
3.3.10 display logbuffer
3.3.14 info-center channel
3.3.15 info-center channel name
3.3.16 info-center enable
3.3.19 info-center logbuffer
3.3.36 reset logbuffer
Format
info-center logfile size size
undo info-center logfile size
Parameters
Parameter Description Value
size Specifies the log file The value is an integer that is 4, 8, 16, or
size. 32, in MB. The default value is 8 MB.
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
To configure the Switch to export information to a log file, run the info-center
logfile size command to set the log file size.
Precautions
If you configure the device to export information to a log file, exported
information is saved in the log.log or log.dblg file. When the log.log or log.dblg
file exceeds the specified size, the system compresses the file in to a zip package
and names the compressed file date time.log.zip or date time.dblg.zip.
The info-center logfile size command takes effect only after the information
center function has been enabled using the info-center enable command.
Example
# Set the log file size to 32 MB.
<HUAWEI> system-view
[HUAWEI] info-center logfile size 32
Related Topics
3.3.5 display info-center
3.3.11 display logfile
3.3.38 save logfile
Function
The info-center loghost command configures the device to output information to
a log host.
The undo info-center loghost command disables the device from outputting
information to a log host.
Format
info-center loghost ip-address [ channel { channel-number | channel-name } |
facility local-number | language language-name | { vpn-instance vpn-instance-
name | public-net } | local-time | log-counter { disable | enable } | port port |
{ source-ip source-ip-address } | transport { udp | tcp ssl-policy policy-name } ] *
NOTE
Only the S6720EI, S6720S-EI, S5720HI, S5720EI, S6720SI, S6720S-SI, S5730SI, S5730S-EI,
S5720SI, S5720S-SI, S5720LI, S5720S-LI, S6720LI, S6720S-LI, S2720EI, S1720X-E, S1720GW-E,
S1720GWR-E, S1720X, S1720GW, S1720GWR support the vpn-instance vpn-instance-name
parameter.
Parameters
Parameter Description Value
ip-address Specifies the IPv4 address of the The value is in dotted
log host. decimal notation.
channel Specifies the channel used to The value of channel-
{ channel- send information to a log host. number is an integer that
number | ● channel-number: specifies the ranges from 0 to 9.
channel-name } number of a channel.
The value of channel-
● channel-name: specifies the name is a string of 1 to 30
name of a channel. The name case-insensitive characters.
can be the default or user- The value consists of
defined channel name. letters or numbers and
must start with a letter.
facility local- Specifies the tool used by the log The value ranges from
number host to record information. local0 to local7. The
default value is local7.
language Displays the language in which Currently, the value can
language-name logs are recorded. only be English.
ipv6 ipv6-address Specifies the IPv6 address of the The value is a 32-digit
log host. hexadecimal number.
domain domain- Specifies a DNS domain name of The value is a string of 1
name a log host. to 255 case-sensitive
characters, spaces not
supported.
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
To query information generated on the Switch deployed remotely, configure the
Switch to export information to a log host so that you can view device information
on the log host. Run the info-center loghost command to configure the Switch to
export information to a log host.
To configure the Switch to output information to different log hosts using
different channels, specify the channels used to send information to the log hosts.
For example, you can configure the Switch to output information to log hosts at
192.168.0.1 and 192.168.0.2 using channels 7 and 8 respectively.
Precautions
The Switch can output information to eight log hosts including IPv4 and IPv6
hosts to implement backup among log hosts.
To transfer logs to the log hosts using TCP and encrypt logs using SSL, create an
SSL policy first.
If the set net-manager vpn-instance command is run to configure the NMS to
manage network elements through a VPN instance, either of the following
situations occurs.
● If vpn-instance is configured, the system accesses the log host in the VPN
instance.
● If public-net is configured, the system accesses the log host on the public
network.
If the transport tcp ssl-policy policy-name parameters are specified to enable
logs to be transmitted in TCP mode through SSL encryption, perform the following
operations:
● Run the ssl-policy policy-name command to configure an SSL policy and
enter the SSL policy view.
● Run the trusted-ca load command to load trusted-CA files (cacert and
rootcert files) of the SSL client.
● On the log server, load trusted-CA files (serverkey and servercert files) of the
SSL server.
● Run the display tcp status command to check that the TC connection status
of port 6514 is Established.
Example
# Configure a device to use channel 6 to output information to the log host at
10.1.1.1.
<HUAWEI> system-view
[HUAWEI] info-center loghost 10.1.1.1 channel channel6
# Configure the source IP address used to send information to the log host is
Loopback1.
<HUAWEI> system-view
[HUAWEI] info-center loghost source LoopBack1
# Configure the Switch to send information to the host with the IPv4 address
192.168.2.2 and VPN instance name vpn1.
<HUAWEI> system-view
[HUAWEI] info-center loghost 192.168.2.2 vpn-instance vpn1
# Configure a device to send information to a log host with the domain name set
to www.test.com.
<HUAWEI> system-view
[HUAWEI] info-center loghost domain www.test.com
Related Topics
3.3.5 display info-center
3.3.14 info-center channel
3.3.15 info-center channel name
3.3.16 info-center enable
3.3.23 info-center loghost source
Function
The info-center loghost source command configures the source interface used by
the Switch to send information to a log host.
The undo info-center loghost source command restores the default source
interface used by the Switch to send information to a log host.
By default, the source interface for a device to send logs to a log host is the actual
interface that sends the logs.
Format
info-center loghost source interface-type interface-number
Parameters
Parameter Description Value
interface-type interface- Specifies the type and number of an -
number interface.
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
If multiple devices send log messages to the same log host, you can identify the
devices by setting different source interfaces so as to index the received log
messages.
The source interface specified in the info-center loghost source command for a
device to send logs to a log host is not necessarily the actual interface that sends
the logs, but the IP address of the specified source interface is carried in logs.
Prerequisites
There is a reachable route between the source interface and the log host.
Example
# Specify Loopback0 IP address as the source interface address to send
information to a log host.
<HUAWEI> system-view
[HUAWEI] interface loopback 0
[HUAWEI-LoopBack0] ip address 10.1.1.1 255.255.255.0
[HUAWEI-LoopBack0] quit
[HUAWEI] info-center loghost source loopback 0
Related Topics
3.3.5 display info-center
3.3.14 info-center channel
3.3.15 info-center channel name
3.3.16 info-center enable
3.3.22 info-center loghost
Function
The info-center loghost source-port command configures a source interface
through which the device sends information to the log host.
The undo info-center loghost source-port command restores the default source
interface through which the device sends information to the log host.
Format
info-center loghost source-port source-port
Parameters
Views
System view
Default Level
3: Management level
Usage Guidelines
If the device uses the default source interface to send information to the log host,
attackers may keep accessing this interface. As a result, the log host cannot send
information. To improve system security, you can run the info-center loghost
source-port source-port command to change the source interface through which
the device sends information to the log host so that attackers cannot obtain the
new source interface.
Example
# Change the number of the source interface through which the device sends
information to the log host to 1026.
<HUAWEI> system-view
[HUAWEI] info-center loghost source-port 1026
Function
The info-center max-logfile-number command sets the maximum number of log
files to be saved.
Format
info-center max-logfile-number filenumbers
Parameters
Parameter Description Value
filenumbers Specifies the maximum number of The value is an integer that
log files that can be saved. ranges from 3 to 500.
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
If too many log files are saved on the Switch, many disk space resources are
occupied. To view log files generated recently, run the info-center max-logfile-
number command to set the maximum number of log files that can be saved.
Precautions
If the number of log files generated on the Switch exceeds the limit, the system
deletes the oldest log file so that the number of log files is not larger than the
maximum value.
NOTICE
If the number of saved log files is greater than the default value, more system
resources are consumed. The default value is recommended. Excess log files can
be deleted manually or automatically. When the system deletes excess log files,
high CPU usage may last for a short period.
Example
# Set the maximum number of log files to be saved to 100.
<HUAWEI> system-view
[HUAWEI] info-center max-logfile-number 100
Related Topics
3.3.5 display info-center
3.3.21 info-center logfile size
3.3.11 display logfile
3.3.38 save logfile
Format
info-center rate-limit except { byinfoid infoID | bymodule-alias modname
alias }
Parameters
Parameter Description Value
byinfoid infoID Specifies the log ID in The value is a 32-digit hexadecimal
hexadecimal notation. number in the format XXXXXXXX. It
ranges from 0 to ffffffff.
Views
System view
Default Level
3: Management level
Usage Guidelines
When too many logs will never be generated under a specified ID, you can run the
info-center rate-limit except command to avoid the impact of the suppression of
the log processing rate. After this command is run, the configured log processing
rate limit will not be effective for logs with the specified ID or module name.
During a software upgrade, if the function that prevents logs from being
suppressed by the information center is configured in the old version, but the new
version does not support the specified log module and alias, the function
configuration of the specified log module and alias will be automatically cleared
after the upgrade.
Example
# Prevent logs specified by the module name and mnemonic from being
suppressed by the information center.
<HUAWEI> system-view
[HUAWEI] info-center rate-limit except bymodule-alias AAA AUTHEN_ERR_EVENT
# Prevent logs specified by the log ID from being suppressed by the information
center.
<HUAWEI> system-view
[HUAWEI] info-center rate-limit except byinfoid ff011015
# Prevent logs with a specified log ID from being suppressed by the information
center.
<HUAWEI> system-view
[HUAWEI] undo info-center rate-limit except bymodule-alias AAA AUTHEN_ERR_EVENT
Related Topics
3.3.8 display info-center rate-limit threshold
3.3.7 display info-center rate-limit record
Function
The info-center rate-limit global-threshold command sets the total number of
logs that the information center can process every second.
Format
info-center rate-limit global-threshold value
Parameters
Parameter Description Value
value Specifies the maximum number of The value is an integer that
logs that the information center can ranges from 100 to 1000.
process every second.
Views
System view
Default Level
3: Management level
Usage Guidelines
You can run the info-center rate-limit global-threshold command to adjust the
processing capability of the information center. If the number of logs to be
processed exceeds the processing capability of the information center, the extra
logs are discarded.
NOTE
Example
# Set the number of logs that the information center can process every second to
300.
<HUAWEI> system-view
[HUAWEI] info-center rate-limit global-threshold 300
Related Topics
3.3.8 display info-center rate-limit threshold
3.3.7 display info-center rate-limit record
Format
info-center rate-limit monitor-period value
undo info-center rate-limit monitor-period
Parameters
Parameter Description Value
value Specifies the monitoring period for The value is an integer
the information center to suppress ranging from 1 to 60, in
the log processing rate. seconds.
Views
System view
Default Level
3: Management level
Usage Guidelines
In the monitoring period specified by value, if the rate of sending a single log
every second exceeds the threshold configured using the info-center rate-limit
threshold command, the information center will limit the log processing rate. In
this situation, the information center discards logs exceeding the threshold.
In the monitoring period that is five times value, if the number of a single type of
logs that are sent every second is smaller than the threshold configured using the
info-center rate-limit threshold command, the information center does not limit
the log processing rate.
Example
# Set the monitoring period for the information center to suppress the log
processing rate to 5 seconds.
<HUAWEI> system-view
[HUAWEI] info-center rate-limit monitor-period 5
Related Topics
3.3.8 display info-center rate-limit threshold
3.3.7 display info-center rate-limit record
3.3.29 info-center rate-limit threshold
Function
The info-center rate-limit threshold command sets the maximum number of
logs with the same log ID that the information center can process every second.
The undo info-center rate-limit threshold command restores the default setting.
By default, the information center processes a maximum of 30 logs with the same
log ID in every second.
Format
info-center rate-limit threshold value [ byinfoid infoID | bymodule-alias
modname alias ]
undo info-center rate-limit threshold [ value ] [ byinfoid infoID | bymodule-
alias modname alias ]
Parameters
Parameter Description Value
value Specifies the maximum The value is an integer that ranges
number of logs with the from 1 to 500.
same log ID that the
information center can
process every second.
byinfoid infoID Specifies the log ID. The value is a 32-digit
hexadecimal number in the format
XXXXXXXX. It ranges from 0 to
ffffffff.
bymodule- Specifies the log of the The value is a string of 1 to 24
alias modname module name. case-insensitive characters without
spaces.
Views
System view
Default Level
3: Management level
Usage Guidelines
You can run the info-center rate-limit threshold command to set the maximum
number of logs with the same log ID that the information center can process
every second. The information center monitors the number of logs that are
generated every second under the same log ID. When the number of logs that are
generated every second under the same log ID exceeds the threshold in the
monitoring period, the information center decides that too many logs are
generated and suppresses its log processing rate by processing only the
conforming traffic (logs within the threshold) and discarding the non-conforming
traffic (logs exceeding the threshold). When the number of logs that are
generated every second under the same log ID falls below the threshold and
remains below the threshold for five monitoring periods, the information center
removes the suppression.
By default, the information center processes a maximum of 30 logs with the same
log ID in every second. In certain application scenarios, by default, the information
center needs to process more than 50 logs with the same log ID in every second.
You can set thresholds for logs with different log IDs. Generally, the default
threshold is recommended.
● If the threshold is too low, some logs may be discarded.
● If the threshold is too high, the information center cannot identify the log ID
under which too many logs are generated.
NOTE
Example
# Set the maximum number of logs that the information center can process every
second to 60.
<HUAWEI> system-view
[HUAWEI] info-center rate-limit threshold 60
# Set the maximum number of logs identified by the same module name and
mnemonic that the information center can process every second to 30.
<HUAWEI> system-view
[HUAWEI] info-center rate-limit threshold 30 bymodule-alias AAA AUTHEN_ERR_EVENT
# Set the maximum number of logs with the same log ID that the information
center can process every second to 20.
<HUAWEI> system-view
[HUAWEI] info-center rate-limit threshold 20 byinfoid ff011015
# Restore the maximum number of logs that the information center can process
every second to the default value.
<HUAWEI> system-view
[HUAWEI] undo info-center rate-limit threshold
# Cancel the restriction on the maximum number of logs with a specified log ID
that the information center can process every second.
<HUAWEI> system-view
[HUAWEI] undo info-center rate-limit threshold bymodule-alias AAA AUTHEN_ERR_EVENT
Related Topics
3.3.8 display info-center rate-limit threshold
3.3.7 display info-center rate-limit record
Function
The info-center source channel command configures a rule for outputting
information to a channel.
The undo info-center source channel command deletes the rules for outputting
information to a channel.
The following lists the default rule for outputting information to a channel.
Format
info-center source { module-name | default } channel { channel-number |
channel-name } [ log { state { off | on } | level severity } * | trap { state { off |
on } | level severity } * | debug { state { off | on } | level severity } * ] *
Parameters
log { level Specifies the lowest Logs are classified into eight
severity } severity of output logs. severities. The following
NOTE severities are listed in
This field does not take descending order of priority:
effect for diagnostic logs.
● emergencies
● alert
● critical
● error
● warning
● notification
● informational
● debugging
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
To collect and query information generated on the Switch, define severities for
various type of information that is output to different channels. You can run the
info-center source channel command to configure a rule for outputting
information to a channel.
Precautions
Each information channel has a default record with the module name default.
The default settings for logs, traps, and debugging messages in different channels
may differ.
If a module generates a large number of logs, traps, or debugging messages in a
short time, use the following methods to suppress this information:
● Specify level severity to adjust the channel level. Information with lower
severity will be filtered.
● Specify state off to disable information sent by a specified module.
NOTICE
After the lowest severity of output information is specified, information lower than
the severity will be filtered.
Example
# Configure the device to send logs higher than or equal to warning of the CFM
module.
<HUAWEI> system-view
[HUAWEI] info-center source CFM channel snmpagent log level warning
Related Topics
3.3.3 display channel
3.3.5 display info-center
3.3.14 info-center channel
3.3.15 info-center channel name
3.3.16 info-center enable
3.3.19 info-center logbuffer
3.3.22 info-center loghost
3.3.33 info-center trapbuffer
3.3.41 terminal debugging
3.3.43 terminal logging
3.3.44 terminal monitor
3.3.45 terminal trapping
Format
info-center statistic-suppress enable
undo info-center statistic-suppress enable
info-center statistic-suppress disable
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In the system, service modules generate logs and control the volume of generated
logs. The information center processes the received logs.
A large number of repeated logs are generated in a short time in some scenarios,
for example, when ARP and VRRP are enabled. This wastes both the storage space
and CPU resources. Generally, users do not want to view the repeated logs. You
can run the info-center statistic-suppress enable command to suppress statistics
on consecutive repeated logs so that the system can still record other logs.
NOTE
Logs that are generated consecutively and with the identical log ID and parameters can be
regarded as repeatedly generated logs.
Precautions
Statistics about repeatedly generated logs are first output at the 30th seconds
from the time the first log is output, and then statistics about repeatedly
generated logs are output at the 120th seconds. After being output two times,
statistics about repeatedly generated logs are output every 600 seconds.
By default, once receiving a log, the information center outputs the log. If the
information center receives repeatedly generated logs within a period, it outputs
the number of these logs and will output logs only when it receives a new log (a
log with a different log ID). For example, a module sends logs to the information
center in the sequence of A1(T1) A2(T2) A3(T2) B1(T3) B2(T4) B3(T4) C1(T5)
C2(T6) A4(T7) B4(T8) B5(T8) B5(T8) B7(T9) A5(T9) B8(T10) D1(T11) A6(T11)
A7(T12) A8(T12) A9(T13) A10(T14) A11(T15) A12(T16) A13(T17) A14(T18)
B9(T18). A1 to A14 are the same; B1 to B9 are the same; C1, C2 and D1 are
different from others; T1 to T18 are sequence numbers. The log information
output by the information center is as follows:
T1:A1
T3(1): last message repeated 2 times
T3:B1
T5: last message repeated 2 times
T5:C1
T6:C2
T7:A4
T8:B4
T9(1): last message repeated 3 times
T9:A5
T10:B8
T11:D1
T11:A6
T13(2): last message repeated 3 times
T18(2): last message repeated 5 times
T18:B9
Logs of the service module received by the information center show that:
● Statistics about repeatedly generated logs are output when either of the
following conditions is met:
– The next log is a different log, as shown in (1).
– The time period (every 30 seconds, 120 seconds, and 600 seconds) for
outputting log statistics expires, as shown in (2).
● Each time the statistics are output, the service module clears the count and
starts counting again. For example, during the period from T11 to T18, log A
is generated 9 times.
● The information center outputs logs in the same sequence the logs are
generated, making the trace of information and scenario easy.
NOTE
Logs with the sequence being A B A B A B A B are alternate logs; therefore, the info-center
statistic-suppress enable command is unable to suppression the statistics about these
logs.
Example
# Disable suppression of statistics about consecutive repeated logs.
<HUAWEI> system-view
[HUAWEI] undo info-center statistic-suppress enable
Function
The info-center timestamp command sets the timestamp format of logs, traps,
and debugging messages.
By default, the date timestamp is used in traps, logs and debugging messages.
Debugging messages are accurate to milliseconds, and traps and logs are accurate
to seconds.
Format
info-center timestamp { debugging | log | trap } { { date | format-date | short-
date } [ precision-time { second | tenth-second | millisecond } ] | boot }
[ without-timezone ]
Parameters
Views
System view
Default Level
3: Management level
Usage Guidelines
The info-center timestamp command sets the timestamp format of logs, traps,
and debugging messages.
mm Month The value can be Jan, Feb, Mar, Apr, May, Jun,
Jul, Aug, Sep, Oct, Nov, or Dec.
When the precision of the timestamp is accurate to 0.1 second or milliseconds, the
system adds identifiers to the logs generated at the same time based on the
sequence.
Prerequisites
The information center has been enabled by using the 3.3.16 info-center enable
command.
Example
# Set the timestamp format of traps to boot.
<HUAWEI> system-view
[HUAWEI] info-center timestamp trap boot
Related Topics
3.3.5 display info-center
Function
The info-center trapbuffer command enables the Switch to send traps to the trap
buffer.
The undo info-center trapbuffer command disables the Switch from sending
traps to the trap buffer.
Format
info-center trapbuffer
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
To view traps in the trap buffer, run the info-center trapbuffer command to
enable the Switch to send traps to the trap buffer.
The info-center trapbuffer command takes effect only after the information
center function has been enabled using the info-center enable command.
Example
# Enable the Switch to send traps to the trap buffer.
<HUAWEI> system-view
[HUAWEI] info-center trapbuffer
Related Topics
3.3.5 display info-center
3.3.13 display trapbuffer
3.3.14 info-center channel
3.3.15 info-center channel name
3.3.16 info-center enable
3.3.34 info-center trapbuffer size
3.3.37 reset trapbuffer
Format
info-center trapbuffer size trapbuffer-size
undo info-center trapbuffer size [ trapbuffer-size ]
Parameters
Parameter Description Value
trapbuffer-size Specifies the maximum The value is an integer that ranges
number of traps in the from 0 to 1024. If trapbuffer-size is 0,
trap buffer. traps are not displayed.
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
The info-center trapbuffer size command sets the maximum number of traps in
the trap buffer.
Prerequisites
The Switch has been enabled to output traps to the trap buffer by using the 3.3.33
info-center trapbuffer command.
Precautions
When you run the info-center trapbuffer size command multiple times, only the
latest configuration takes effect.
Example
# Set the maximum number of traps in the trap buffer to 30.
<HUAWEI> system-view
[HUAWEI] info-center trapbuffer size 30
Related Topics
3.3.5 display info-center
3.3.13 display trapbuffer
3.3.14 info-center channel
3.3.15 info-center channel name
3.3.16 info-center enable
3.3.33 info-center trapbuffer
3.3.37 reset trapbuffer
Format
reset info-center statistics
Parameters
None
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
To recollect statistics on each module, run the reset info-center statistics
command to clear all historical statistics.
Precautions
The cleared statistics cannot be restored. Exercise caution when you run the reset
info-center statistics command.
Example
# Clear statistics on each module.
<HUAWEI> reset info-center statistics
Related Topics
3.3.5 display info-center
3.3.9 display info-center statistics
Format
reset logbuffer
Parameters
None
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
To record logs in the log buffer again, run the reset logbuffer command to clear
all the information in the log buffer.
Precautions
Statistics cannot be restored after being cleared. Exercise caution when you run
the reset logbuffer command.
Example
# Clear information in the log buffer.
<HUAWEI> reset logbuffer
Warning: This command will reset the log buffer. Logs in the buffer will be lost. Continue? [Y/N]:y
Related Topics
3.3.10 display logbuffer
Function
The reset trapbuffer command clears Trap information in the trap buffer.
Format
reset trapbuffer
Parameters
None
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
To record traps in the trap buffer again, run the reset trapbuffer command to
clear all the information in the trap buffer.
Precautions
Statistics cannot be restored after being cleared. Exercise caution when you run
the reset trapbuffer command.
Example
# Clear information in the trap buffer.
<HUAWEI> reset trapbuffer
Related Topics
3.3.13 display trapbuffer
Format
save logfile
Parameters
None
Views
User view
Default Level
0: Visit level
Usage Guidelines
The system periodically saves log information in the user log buffer to a user log
file. If the log buffer becomes full within the log saving interval, the system
immediately saves logs to the user log file. To view the current logs, run the save
logfile command to save the logs to the user log file.
When you run this command, the device obtains or uses some personal data of
users, such as the STA MAC address. Delete the personal data immediately after
the command is executed to ensure user data security.
Example
# Save logs in the user log file buffer to the user log file.
<HUAWEI> save logfile
Info: Save logfile successfully.
Related Topics
3.3.5 display info-center
3.3.21 info-center logfile size
3.3.11 display logfile
3.3.25 info-center max-logfile-number
Format
save logfile all
Parameters
None
Views
User view
Default Level
3: Management level
Usage Guidelines
The logs in the user log buffer area and diagnostic log buffer area are periodically
saved to the user log file and diagnostic log file, respectively. The log saving
interval varies with the product. To save the logs in the user log buffer area and
diagnostic log buffer area to the user log file and diagnostic log file, respectively,
run the save logfile all command.
A user log file is saved in a log directory (for example, the log or logfile directory)
and named in the log.log format.
A diagnostic log file is saved in a log directory (for example, the log or logfile
directory) and named in the log.dblg format.
Example
# Save the logs in the user log buffer area and diagnostic log buffer area to the
user log file and diagnostic log file, respectively.
<HUAWEI> save logfile all
Info: Save logfile successfully.
Info: Save diagnostic logfile successfully.
Format
snmp-agent trap enable feature-name info [ trap-name { hwiclogbufferlose |
hwiclogfileaging } ]
undo snmp-agent trap enable feature-name info [ trap-name
{ hwiclogbufferlose | hwiclogfileaging } ]
Parameters
Parameter Description Value
trap-name Indicates the trap of a specified event type of the -
information center module. If the trap-name
parameter is not specified, all the traps of the
information center module are enabled.
hwiclogbufferlose Enables or disables the trap generated when some -
logs in the log buffer were lost because of storage
space insufficiency.
hwiclogfileaging Enables or disables the trap generated when a log -
file aged and then was deleted.
Views
System view
Default Level
3: Management level
Usage Guidelines
After the trap function is enabled, the trap about the Information Center module
generated when the device is running will be sent to the NMS. Otherwise, the trap
about the Information Center module will not be sent to the NMS. If you want to
enable a specific trap or several traps, choose the trap-name parameter.
Example
# Enables hwiclogfileaging for the Information Center module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name info trap-name hwiclogfileaging
Related Topics
3.3.12 display snmp-agent trap feature-name info all
Format
terminal debugging
undo terminal debugging
Parameters
None
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
You can run the terminal debugging command to enable debugging message
display on the user terminal to view system debugging message and locate faults.
Prerequisites
The 3.3.44 terminal monitor command has been executed to enable display of
logs, traps, and debugging message output on the user terminal.
Example
# Enable debugging message display on the user terminal.
<HUAWEI> terminal debugging
Info: Current terminal debugging is on.
Related Topics
3.3.16 info-center enable
3.3.30 info-center source channel
3.3.44 terminal monitor
Format
terminal echo synchronous [ level { severity | all } | size size-number ] *
Parameters
Parameter Description Value
level severity Specifies an The value is an integer ranging from 0 to 7.
information The default value is 0.
severity.
The information center classifies
information into the following severities:
● 0: emergency
● 1: alert
● 2: critical
● 3: error
● 4: warning
● 5: notice
● 6: informational
● 7: debug
A smaller value indicates a higher severity.
The information with a severity higher than
a specified severity is displayed
asynchronously.
all Displays –
information of all
severities.
size size- Specifies the total The value is an integer ranging from 1 to
number number of 1024. The default value is 512.
debugging, log,
and trap records.
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
When a device generates debugging, log, or trap information, the information
queues in the device process and is sent to a terminal sequentially. This output is
called a synchronous output.
A synchronous output provides effectively organized output information,
improving user experience. In asynchronous output mode, multiple types of
Example
# Enable a terminal to display debugging information synchronously.
<HUAWEI> terminal monitor
Info: Current terminal monitor is on.
<HUAWEI> terminal debugging
Info: Current terminal debugging is on.
<HUAWEI> terminal echo synchronous
Info: Current terminal synchronization is on.
<HUAWEI> save
The current configuration will be written to the device.
Are you sure to continue?[Y/N]:
Aug 23 2012 12:04:37.790.2 huawei VTY/7/Debug_Stat:
(0)VTY ACCEPT BEGIN !
Aug 23 2012 12:04:37.790.3 huawei VTY/7/Debug_Stat:
(1)SOCKET ACCEPT OK !
Aug 23 2012 12:04:37.790.4 huawei VTY/7/Debug_Stat:
(2)FIND LINE INDEX OK !
[Y/N]:
Related Topics
3.3.44 terminal monitor
3.3.41 terminal debugging
Format
terminal logging
undo terminal logging
Parameters
None
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
To view logs on a terminal, run the terminal logging command to enable log
display on the user terminal.
Prerequisites
The 3.3.44 terminal monitor command has been executed to enable display of
logs, traps, and debugging message output on the user terminal.
Example
# Disable log display on the user terminal.
<HUAWEI> undo terminal logging
Info: Current terminal logging is off.
Related Topics
3.3.16 info-center enable
3.3.30 info-center source channel
3.3.44 terminal monitor
Format
terminal monitor
undo terminal monitor
Parameters
None
Views
User view
Default Level
3: Management level
Usage Guidelines
Prerequisites
The information center has been enabled by using the 3.3.16 info-center enable
command.
Follow-up Procedure
Run the terminal debugging/undo terminal debugging, terminal logging/undo
terminal logging, terminal trapping/undo terminal trapping/ command to
enable or disable terminal debugging message, log, or trap display.
Precautions
Logs, traps, and debugging message are sent to the current terminal only when
the terminal monitor command is used.
Running the undo terminal monitor command is equivalent to running the undo
terminal debugging, undo terminal logging, undo terminal trapping
command.
Example
# Disable display of logs, traps, and debugging message output by the
information center on the user terminal.
Related Topics
3.3.16 info-center enable
3.3.30 info-center source channel
3.3.41 terminal debugging
3.3.43 terminal logging
3.3.45 terminal trapping
Format
terminal trapping
undo terminal trapping
Parameters
None
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
To view traps on a terminal, run the terminal trapping command to enable trap
display on the user terminal.
Prerequisites
The 3.3.44 terminal monitor command has been executed to enable display of
logs, traps, and debugging message output on the user terminal.
Example
# Disable trap display on the user terminal.
Related Topics
3.3.16 info-center enable
3.3.30 info-center source channel
3.3.44 terminal monitor
Commands provided in this section and all the parameters in the commands are
supported by all switch models by default, unless otherwise specified. For details,
see specific commands.
Format
alarm
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
After running the alarm command to enter the alarm view, you can configuration
alarm management functions.
Example
# Enter the alarm view.
<HUAWEI> system-view
[HUAWEI] alarm
[HUAWEI-alarm]
Related Topics
3.4.3 alarm-name severity
3.4.4 clear alarm active
Format
alarm-name alarm-name severity severity
undo alarm-name alarm-name severity
Parameters
Parameter Description Value
Views
Alarm view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
You can run the alarm-name severity command to raise or lower the level of an
alarm based on the severity and emergency of the alarm. However, the level of a
clear alarm cannot be changed unless during the configuration restoration period.
You can configure filtering conditions to allow the NMS to receive only alarms of
specified alarm severity.
Precautions
The default severity of each alarm is different. To view the default severity of an
alarm, run the undo alarm-name severity and 3.4.11 display alarm information
commands in sequence.
Example
# Set the severity of the hwSysSlaveHDError alarm to warning.
<HUAWEI> system-view
[HUAWEI] alarm
[HUAWEI-alarm] alarm-name hwSysSlaveHDError severity warning
Related Topics
3.4.2 alarm (system view)
3.4.11 display alarm information
Function
The clear alarm active command clears active alarms.
Format
clear alarm active { all | sequence-number sequence-number }
Parameters
Parameter Description Value
all Clears all active alarms. -
sequence-number Specifies the sequence The value is an integer
sequence-number number of an active alarm. ranging from 1 to
2147483647.
Views
Alarm view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
Before collecting statistics on alarms generated on the device again, run the clear
alarm active to clear active alarms.
Precautions
After the clear alarm active command is used, all active alarms on the device are
deleted and cannot be restored.
Example
# Clear all active alarms on the device.
<HUAWEI> system-view
[HUAWEI] alarm
[HUAWEI-alarm] clear alarm active all
Related Topics
3.4.2 alarm (system view)
3.4.9 display alarm active
Function
The clear alarm manual-clear command clears the active alarms that are not
reported repeatedly so that these active alarms can be reported again.
Format
clear alarm manual-clear { all | sequence-number sequence-number }
Parameters
Parameter Description Value
all Specifies all the active alarms that are -
not reported repeatedly.
sequence- Specifies the sequence number of the The value is an
number active alarm that is not reported integer that ranges
sequence- repeatedly. from 1 to
number 2147483647.
You can run 3.4.12 display alarm
manual-clear get the sequence
number of the active alarm.
Views
Alarm management view
Default Level
3: Management level
Usage Guidelines
After the mask manual-clear alarm command is executed to prevent manually
cleared active alarms from being reported repeatedly and then the clear alarm
active command or MIB table hwAlarmActiveTable is used to manually clear
active alarms, active alarms will not be reported repeatedly. To view the active
alarms that are not reported repeatedly, run the clear alarm manual-clear
command.
To ensure that the active alarms that are not reported repeatedly can be reported
again, run the clear alarm manual-clear command. After the clear alarm
manual-clear command is executed, running the display alarm manual-clear
command does not display corresponding alarm information.
Example
# Clear the active alarms that are not reported repeatedly.
<HUAWEI> system-view
[HUAWEI] alarm
[HUAWEI-alarm] clear alarm manual-clear all
Related Topics
3.4.4 clear alarm active
3.4.12 display alarm manual-clear
3.4.18 mask manual-clear alarm
Format
clear event all
Parameters
None
Views
Event view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
Before collecting statistics on events generated on the device again, run the clear
event all to clear events.
Precautions
NOTICE
The clear event all command clears events on the device and cleared events
cannot be restored.
Example
# Clear events on the device.
<HUAWEI> system-view
[HUAWEI] event
[HUAWEI-event] clear event all
Related Topics
3.4.17 event
Format
clear record device-alarm [ all | slot slot-id ]
Parameters
Parameter Description Value
Views
User view
Default Level
3: Management level
Usage Guidelines
When current hardware alarms are not required on the device, use the clear
record command to clear the hardware alarms of the device.
Example
# Clear all hardware alarms of the device.
<HUAWEI> clear record device-alarm all
Related Topics
3.4.13 display alarm urgent
NOTE
Only the S5720EI, S5720HI, S6720EI, and S6720S-EI support this command.
Format
delay-suppression enable
Parameters
None
Views
Alarm view or event view
Default Level
3: Management level
Usage Guidelines
In the event that an alarm or an event is repeatedly generated, you can enable
delayed reporting to prevent a large number of repeated alarms or events from
being reported to the NMS. You can choose to enable or disable delayed reporting:
● Run the delay-suppression enable command to enable delayed reporting.
● Run the undo delay-suppression enable command to disable delayed
reporting.
Run the delay-suppression enable command in the alarm view to enable delayed
alarm reporting. Run the delay-suppression enable command in the event view
to enable delayed event reporting.
Example
# Enable delayed alarm reporting.
<HUAWEI> system-view
[HUAWEI] alarm
[HUAWEI-alarm] delay-suppression enable
Related Topics
3.4.2 alarm (system view)
3.4.17 event
3.4.22 suppression alarm-name
3.4.23 suppression event-name
Format
display alarm active
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display alarm active command to view active alarms on the
device to locate faults.
Example
# Display active alarms on the device.
<HUAWEI> display alarm active
A/B/C/D/E/F/G/H/I/J
A=Sequence, B=RootKindFlag(Independent|RootCause|nonRootCause)
C=Generating time, D=Clearing time
E=ID, F=Name, G=Level, H=State
I=Description information for locating(Para info, Reason info)
J=RootCause alarm sequence(Only for nonRootCause alarm)
1/Independent/2015-09-01 09:18:25-05:13/-/0x40c12004/hwEntityInvalid/Critical/
Start/OID 1.3.6.1.4.1.2011.5.25.129.2.1.9 Power is abnormal. (EntityPhysicalInde
x=67108873, BaseTrapSeverity=3, BaseTrapProbableCause=67966, BaseTrapEventType=5
, EntPhysicalContainedIn=5, EntPhysicalName=MPU Board 0, RelativeResource=PWR2 P
OWER, ReasonDescription=PWR2 POWER is abnormal)
E=ID Alarm ID
Item Description
Related Topics
3.4.2 alarm (system view)
3.4.3 alarm-name severity
3.4.4 clear alarm active
Function
The display alarm history command displays historical alarms on the device.
Format
display alarm history
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display alarm history command to view the alarms that are
cleared or generated on the device. The display alarm history command displays
a maximum of 1024 alarm history records.
Example
# Display historical alarms on the device.
<HUAWEI> display alarm history
A/B/C/D/E/F/G/H/I/J
A=Sequence, B=RootKindFlag(Independent|RootCause|nonRootCause)
C=Generating time, D=Clearing time
E=ID, F=Name, G=Level, H=State
I=Description information for locating(Para info, Reason info)
J=RootCause alarm sequence(Only for nonRootCause alarm)
E=ID E=ID
F=Name Alarm ID
Item Description
Related Topics
3.4.2 alarm (system view)
3.4.9 display alarm active
3.4.3 alarm-name severity
Format
display alarm information [ name alarm-name ]
Parameters
Parameter Description Value
name alarm- Displays the configuration of a The value is a string and
name specified alarm. If this parameter is varies according to the
not set, configurations of all alarms registered device type.
are displayed.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
To view alarm configurations on the device, run the display alarm information
command.
If no alarm name is specified, information about all alarms in the system will be
displayed.
In addition, to change the severity level of an alarm, you can run the alarm-name
alarm-name severity severity command.
Example
# Display the configuration of the alarm named linkUp.
<HUAWEI> display alarm information name linkUp
**********************************
AlarmName: linkUp
AlarmType: Resume Alarm
AlarmLevel: Cleared
Suppress Period: NA
CauseAlarmName: linkDown
Match VB Name: ifIndex
**********************************
Item Description
Suppress Period Alarm reporting delay. To set this parameter, run the 3.4.22
suppression alarm-name command.
If this field displays NA, this alarm does not support the
delayed alarm reporting function.
Related Topics
3.4.2 alarm (system view)
3.4.3 alarm-name severity
Function
The display alarm manual-clear command displays the alarms that are not
reported repeatedly after being cleared.
Format
display alarm manual-clear
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
After the mask manual-clear alarm command is executed to prevent manually
cleared active alarms from being reported repeatedly and then the clear alarm
active command or MIB table hwAlarmActiveTable is used to manually clear
active alarms, you can run the display alarm manual-clear command to view the
active alarms that are not reported repeatedly after being cleared.
Example
# Display the alarms that are not reported repeatedly after being cleared.
<HUAWEI> display alarm manual-clear
A/B/C/D/E/F/G/H/I/J
A=Sequence, B=RootKindFlag(Independent|RootCause|nonRootCause)
C=Generating time, D=Clearing time
E=ID, F=Name, G=Level, H=State
I=Description information for locating(Para info, Reason info)
J=RootCause alarm sequence(Only for nonRootCause alarm)
Item Description
Related Topics
3.4.4 clear alarm active
3.4.5 clear alarm manual-clear
3.4.18 mask manual-clear alarm
Format
display alarm urgent [ slot slot-id | time interval ]
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can use the command to view hardware alarms, including alarms about the
abnormality of the temperature, the fan, and the chip.
If no parameter is specified, the command displays all the hardware alarms.
Example
# Display hardware alarms of the device.
<HUAWEI> display alarm urgent
Alarm:
PWR2
Power abnormal 8 2015/10/16 10:19:18 Slot 8
PWR Input Vol Low 8 2015/10/16 10:19:18 Slot 8
PWR2
Power abnormal 8 2015/10/16 10:04:48 Slot 8
PWR Input Vol Low 8 2015/10/16 10:04:48 Slot 8
PWR2
Power abnormal 8 2015/10/16 10:01:45 Slot 8
PWR Input Vol Low 8 2015/10/16 10:01:45 Slot 8
PWR2
Power abnormal 8 2015/10/16 09:58:53 Slot 8
PWR Input Vol Low 8 2015/10/16 09:58:53 Slot 8
PWR2
Power abnormal 8 2015/10/16 09:56:00 Slot 8
PWR Input Vol Low 8 2015/10/16 09:56:00 Slot 8
PWR2
Power abnormal 1 2015/10/16 09:41:40 Slot 1
PWR Input Vol Low 1 2015/10/16 09:41:40 Slot 1 PWR2
Item Description
Related Topics
3.4.7 clear record device-alarm
Function
The display event command displays events on the device.
Format
display event
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
To obtain the contents of events in the system, you can run the display event
command.
Example
# Display events on the device.
<HUAWEI> display event
A/B/C/D/E/F/G/H/I/J
A=Sequence, B=RootKindFlag(Independent|RootCause|nonRootCause)
C=Generating time, D=Clearing time
E=ID, F=Name, G=Level, H=State
I=Description information for locating(Para info, Reason info)
J=RootCause alarm sequence(Only for nonRootCause alarm)
1/Independent/2008-10-12 22:42:28-08:00/-/0x40812000/warmStart/Warning/Start/O
ID 1.3.6.1.6.3.1.1.5.2 warmStart
2/Independent/2008-10-12 22:42:28-08:00/-/0x41132002/hgmpMemberStatusChange/Wa
rning/Start/OID:1.3.6.1.4.1.2011.6.7.1.0.3, DeviceID:0018-8201-0987, Role:17.
3/Independent/2008-10-16 17:50:32-08:00/-/0x41b82000/hwCfgChgNotify/Warning/St
art/OID 1.3.6.1.4.1.2011.5.25.191.3.1 configurations have been changed. The curr
ent change number is 2, the change loop count is 0, and the maximum number of re
cords is 4095.
D=Clearing time Time when the event is cleared (for non-root-cause alarms
only)
E=ID Event ID
Item Description
Related Topics
3.4.6 clear event all
3.4.15 display event information
3.4.17 event
Function
The display event information command displays event configurations.
Format
display event information [ name event-name ]
Parameters
Parameter Description Value
name event- Displays the configuration of a
The value is a string and
name specified event. If this parameter is
varies according to the
not set, configurations of all events
registered device type.
are displayed.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
To view event configurations on the device, run the display event information
command.
If no event name is specified, information about all events in the system will be
displayed.
Example
# Display registration information about the hwCfgManEventlog event.
<HUAWEI> display event information name hwCfgManEventlog
**********************************
EventName: hwCfgManEventlog
EventType: Critical Event
EventLevel: Warning
Suppress Period: NA
Match VB Name: hwCfgLogSrcCmd hwCfgLogSrcData hwCfgLogDesData
**********************************
Item Description
Suppress Period Event report delay period. To set this parameter, run the
3.4.23 suppression event-name command.
If this field displays NA, this event does not support the
delayed event reporting function.
Function
The display snmp-agent trap feature-name fm all command displays the status
of all traps of the fault management module.
Format
display snmp-agent trap feature-name fm all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
The Simple Network Management Protocol (SNMP) is a standard network
management protocol widely used on TCP/IP networks. It uses a central computer
(a network management station) that runs network management software to
manage network elements. The management agent on the network element
automatically reports traps to the network management station. After that, the
network administrator immediately takes measures to resolve the problem.
Example
# Display all trap messages of the fault management module.
<HUAWEI>display snmp-agent trap feature-name fm all
------------------------------------------------------------------------------
Feature name: FM
Trap number : 2
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwAlarmTargetHostDel on on
hwAlarmStorm on on
Item Description
Related Topics
3.4.21 snmp-agent trap enable feature-name fm
3.4.17 event
Function
Using the event command, you can enter the event view.
Format
event
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
After running the event command to enter the event view, you can configure
event management functions.
Example
# Enter the event view.
<HUAWEI> system-view
[HUAWEI] event
[HUAWEI-event]
Related Topics
3.4.14 display event
3.4.15 display event information
Format
mask manual-clear alarm
Parameters
None
Views
Alarm management view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
By default, after the clear alarm active command or MIB table
hwAlarmActiveTable is used to manually clear active alarms, active alarms are
reported repeatedly when being generated again. To prevent manually cleared
active alarms from being reported repeatedly, run the mask manual-clear alarm
command.
After the mask manual-clear alarm command is executed and then the clear
alarm active command or MIB table hwAlarmActiveTable is used, cleared active
alarms will not be reported repeatedly before clear alarms of active alarms are
reported. To view all the active alarms that are not reported repeatedly, run the
display alarm manual-clear command.
Precautions
Before the mask manual-clear alarm command is executed, the active alarms
manually cleared using the clear alarm active command or MIB table
hwAlarmActiveTable will be reported repeatedly.
Example
# Prevent manually cleared active alarms from being reported repeatedly.
<HUAWEI> system-view
[HUAWEI] alarm
[HUAWEI-alarm] mask manual-clear alarm
Related Topics
3.4.4 clear alarm active
3.4.12 display alarm manual-clear
3.4.5 clear alarm manual-clear
Format
reset alarm urgent slot slot-id
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
You can run the reset alarm urgent command to clear all alarm messages.
Confirm the action before you run this command.
Example
# Clear all alarm messages of the device that slot id is 0.
<HUAWEI> system-view
[HUAWEI] reset alarm urgent slot 0
Function
The set alarm resend interval command set the alarm reporting interval.
The undo set alarm resend interval command restores the default alarm
reporting interval.
Format
set alarm resend interval interval-value
Parameters
Parameter Description Value
interval-value Specifies the alarm The value is an integer that ranges from
interval. 0 to 65535, in minutes.
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
The set alarm resend interval command sets the interval at which alarms are
generated. If the periodic alarm reporting function is not required, set the interval
to 0.
Precautions
If the alarm reporting interval is set to 0, the system does not report alarms
periodically.
Example
# Set the alarm reporting interval to 4 minutes.
<HUAWEI> system-view
[HUAWEI] set alarm resend interval 4
Function
The snmp-agent trap enable feature-name fm command enables the trap
function of the fault management module.
The undo snmp-agent trap enable feature-name fm command disables the trap
function of the fault management module.
By default, the trap function is enabled for the fault management module.
Format
snmp-agent trap enable feature-name fm [ trap-name
{ hwalarmtargethostdel | hwalarmstorm } ]
Parameters
Parameter Description Value
trap-name Enables the trap of a specified event. If this -
parameter is not specified, all traps of the fault
management module are enabled.
hwalarmtargethostdel Indicates that the configuration of a target host -
is deleted.
hwalarmstorm Indicates that a trap alarm occurs. -
Views
System view
Default Level
2: Configuration level
Usage Guidelines
The traps of the fault management module generated in the running process of a
device are reported to the NMS only when the trap function is enabled. To enable
the trap function for one or more specific events, configure trap-name in the
command.
Example
# Enable all traps of the fault management module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name fm
Function
The suppression alarm-name command modifies a delay period after which a
generated alarm is reported.
By default, the system defines a delay period after which a generated alarm is
reported. To view this default delay period, run the undo suppression alarm-
name command and then the display alarm information command. If the
Suppress Period field displays NA for an alarm, this alarm does not support the
delayed alarm reporting function.
NOTE
Only the S5720EI, S5720HI, S6720EI, and S6720S-EI support this command.
Format
suppression alarm-name alarm-name { cause-period cause-seconds | clear-
period clear-seconds }
undo suppression alarm-name alarm-name { cause-period | clear-period }
Parameters
Parameter Description Value
alarm-name Specifies the name of The value cannot be the alarm name of
an alarm for which which the Suppress Period field in the
the delay period is set. display alarm information command
output displays NA.
cause-period Specifies the period The value is an integer ranging from 0
cause-seconds after which a to 600, in seconds. If the value is set to
generated alarm is 0s, the alarm management module
reported. sends the alarm to the NMS without
any delay.
clear-period Specifies the period The value is an integer ranging from 0
clear-seconds after which a to 600, in seconds. If the value is set to
generated clear alarm 0s, the alarm management module
is reported. sends the alarm to the NMS without
any delay.
Views
Alarm view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
If a certain alarm is repeatedly generated, you can enable delayed alarm reporting
and set a period after which the alarm is reported to prevent the alarm from
being reported during this period.
After the period is set for a certain alarm:
● If no clear alarm is generated during the period, the alarm is not reported to
the NMS until the period expires.
● If a clear alarm is generated during this period, the alarm and its clear alarm
are both deleted from the alarm queue and will not be reported to the NMS.
If the delay period is too short, alarm reporting is not efficiently delayed. If the
delay period is too long, alarm reporting is postponed and the time when the fault
occurs cannot be correctly obtained. For most alarms, the default delay period is
recommended. For common alarms, such as alarms about hardware and
environment, delayed alarm reporting is not recommended.
Prerequisites
Precautions
● If the delay period is changed when an alarm is being sent, the changed delay
period takes effect on the next alarm to be sent.
● If alarm-name specifies an alarm, you can configure only cause-period cause-
seconds. If it specifies a clear alarm, you can configured only clear-period
clear-seconds.
Example
# Set the hwsysmasterhderror alarm to be reported 5s after it is generated.
<HUAWEI> system-view
[HUAWEI] alarm
[HUAWEI-alarm] delay-suppression enable
[HUAWEI-alarm] suppression alarm-name hwsysmasterhderror cause-period 5
Related Topics
3.4.2 alarm (system view)
3.4.8 delay-suppression enable
Function
The suppression event-name command modifies a delay period after which a
generated event is reported.
By default, the system defines a delay period after which a generated event is
reported. To view this default delay period, run the undo suppression event-
name command and then the display event information command. If the
Suppress Period field displays NA for an alarm, this alarm does not support the
delayed alarm reporting function.
NOTE
Only the S5720EI, S5720HI, S6720EI, and S6720S-EI support this command.
Format
suppression event-name event-name period seconds
Parameters
Parameter Description Value
event-name Specifies the name of The value cannot be the event name of
an event for which the which the Suppress Period field in the
delay period is set. display event information command
output displays NA.
period Specifies the period The value is an integer ranging from 0
seconds after which a to 600, in seconds. If the value is set to
generated event is 0s, the alarm management module
reported. sends the event to the NMS without
any delay.
Views
Event view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In the case where a certain event is repeatedly generated, you can enable delayed
event reporting and set a period after which a generated event is reported.
After the delay period is set for a certain event, if an event is generated several
times during the delay period, the system reports only the first one to the NMS
when the delay period expires and discards the following ones.
Prerequisites
Before running the suppression event-name command, ensure that delayed
alarm reporting has been enabled using the delay-suppression enable command.
Precautions
If the delay period is changed when an event is being sent, the changed delay
period takes effect on the next event to be sent.
Example
# Set the delay period to 5s after which a generated hwFlhSyncFailNotification
event is reported.
<HUAWEI> system-view
[HUAWEI] event
[HUAWEI-event] delay-suppression enable
[HUAWEI-event] suppression event-name hwFlhSyncFailNotification period 5
Related Topics
3.4.17 event
Function
The display ntp-service event clock-unsync command displays the last 10 clock
unsynchronization reasons.
Format
display ntp-service event clock-unsync
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display ntp-service event clock-unsync command to view
information about the last 10 clock unsynchronization reasons in the current
system.
Example
# Display the last 10 clock unsynchronization reasons.
<HUAWEI> display ntp-service event clock-unsync
1. Clock source : 10.1.1.1(vrf1)
Session type : client, configured
Unsync reason : Peer reachability lost
Unsync time : 2012-07-30 12:24:44+00:00
Format
display ntp-service sessions [ verbose ]
Parameters
Parameter Description Value
verbose Displays detailed information about an NTP session. -
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
To monitor or locate faults on NTP sessions, run the display ntp-service sessions
command to obtain status information about NTP sessions so that the fault can
be located efficiently.
Precautions
Example
# Display NTP session information of the local device.
<HUAWEI> display ntp-service sessions
clock source: 224.0.1.1
clock stratum: 1
clock status: configured, insane, valid, unsynced
reference clock ID: LOCAL(0)
reach: 0
current poll: 64
now: 9
offset: 0.0000 ms
delay: 0.00 ms
disper: 0.00 ms
Item Description
current poll Poll interval of NTP packets. The interval for sending two
successive NTP packets, in seconds.
To set the poll interval, run the ntp-service discard min-
interval command.
Item Description
Item Description
root delay Total system delay between the local end and the master
reference clock. The default value is 0.
If the value of root delay or root disper is large, clock
synchronization may fail. A larger value indicates that the
packet takes a longer time to reach the local device from
the master reference clock. Therefore, the local device
cannot determine whether the time in the packet is
correct.
orgtime Time when an NTP packet is sent for the last time.
rcvtime Time when an NTP packet is received for the last time.
xmttime Time when an NTP packet is forwarded for the last time.
filter delay Filter delays of the 8 packets received for the last time.
Item Description
filter offset Filter offsets of the 8 packets received for the last time.
filter disper Filter dispersions of the 8 packets received for the last
time.
Related Topics
3.5.28 ntp-service unicast-peer
3.5.29 ntp-service unicast-server
3.5.11 ntp-service broadcast-client
3.5.12 ntp-service broadcast-server
3.5.21 ntp-service multicast-client
3.5.22 ntp-service multicast-server
Format
display ntp-service statistics packet [ ipv6 | peer [ ip-address [ vpn-instance
vpn-instance-name ] | ipv6 [ ipv6-address [ vpn-instance vpn-instance-
name ] ] ] ]
Parameters
Parameter Description Value
ipv6 Displays statistics about global IPv6 NTP -
packets.
peer Displays statistics on an NTP symmetric -
peer.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
The display ntp-service statistics packet command output includes the following
information, and can help you to debug NTP packets.
Example
# Display the statistics on NTP packets.
<HUAWEI> display ntp-service statistics packet
NTP IPv4 Packet Statistical Information
---------------------------------------
Sent : 100
Send failures : 10
Received : 1000
Processed : 800
Dropped : 200
Validity test failures : 50
Authentication failures : 20
Invalid packets : 50
Access denied : 50
Rate-limited :0
Processing delay : 50
Interface disabled :0
Max dynamic association reached : 0
Server disabled :0
Others :0
Last 2 packets drop reasons:
[2011-11-24 12:19:26-08:00] Global drop: NTP service disabled for interface.
[2011-11-24 12:20:30-08:00] Global drop: NTP service disabled for interface.
Item Description
Validity test failures Number of packets dropped because the packets fail to
pass the validity test.
Last 2 packets drop Reason for dropping the last n packets, where the
reasons maximum value of n can be 10.
Function
The display ntp-service status command displays the status of NTP.
Format
display ntp-service status
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
To monitor or locate faults on the NTP service, run the display ntp-service status
command to obtain status information about the NTP service, such as the
synchronization status of the local clock and the stratum of the clock.
Example
# Display the status of the NTP service.
<HUAWEI> display ntp-service status
clock status: synchronized
clock stratum: 2
reference clock ID: LOCAL(0)
nominal frequency: 60.0002 Hz
actual frequency: 60.0002 Hz
clock precision: 2^18
clock offset: 0.0000 ms
root delay: 0.00 ms
root dispersion: 0.00 ms
peer dispersion: 10.00 ms
reference time: 15:51:36.259 UTC Apr 25 2012(C6179088.426490A3)
synchronization state: spike (clock will be set in 1010 secs)
Item Description
clock stratum Indicates the stratum of the reference clock. The value
ranges from 1 to 15. A lower clock stratum indicates higher
clock precision. When the client gets synchronized to a
session, it is stratum becomes session stratum + 1.
Item Description
actual frequency Indicates the actual frequency of the local clock, in Hz.
clock offset Indicates the offset between the local clock and the NTP
server, in ms.
root delay Indicates the delay between the local clock and the master
reference clock, in ms.
root dispersion Indicates the dispersion between the local clock and the
master reference clock, in ms.
peer dispersion Indicates the dispersion between the local clock and the
peer clock, in ms.
Format
display ntp-service trace
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
When you run the display ntp-service trace command, summary information of
NTP servers for synchronizing time on the link from the local device to the
reference clock source can be displayed.
Example
# Display the summary of each passing NTP server when you trace the reference
clock source from the local device.
<HUAWEI> display ntp-service trace
server 127.0.0.1,stratum 5, offset 0.024099 s, synch distance 0.06337
server 192.168.1.2,stratum 4, offset 0.028786 s, synch distance 0.04575
server 192.168.2.2,stratum 3, offset 0.035199 s, synch distance 0.03075
server 192.168.10.1,stratum 2, offset 0.039855 s, synch distance 0.01096
refid 127.127.1.0
Item Description
3.5.7 ntp-service
Function
The ntp-service command configures the maximum polling interval, the
timestamp difference between packets sent by the clock server and received by
the client, the maximum interval at which the clock of the client is synchronized.
The undo ntp-service command restores the default value.
By default, the maximum polling interval is 217s, the timestamp difference
between packets sent by the clock server and received by the client is 128ms, the
maximum interval at which the clock of the client is synchronized is 600 seconds.
Format
ntp-service { max-sys-poll max-sys-poll-value | spike-offset spike-offset-value |
sync-interval interval } *
undo ntp-service { max-sys-poll | spike-offset | sync-interval } *
NOTE
Parameters
Parameter Description Value
max-sys-poll max- Specifies the maximum The value is an integer
sys-poll-value polling rate. ranging from 6 to 17.
spike-offset spike- Specifies the timestamp The value is an integer
offset-value difference between packets ranging from 32 to 128, in
sent by the clock server and milliseconds.
received by the client.
sync-interval Sets the maximum interval The value is an integer, in
interval for clock synchronization. seconds. The value ranges
from 180 to 600.
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
The NTP polling interval is expressed in nth power of 2.(n is an integer.) For
example, run the ntp-service max-sys-poll 6 command, the system sends polling
packets every 64s. In other words, the device monitors the clock change on the
server every 64s.
To decrease the timestamp difference between packets sent by the clock server
and received by the client, run the ntp-service spike-offset command. If the time
offset of the server is greater than the configured timestamp difference, NTP sets
the system clock after the interval for time synchronization elapses.
When the clock of the server changes, the clock of the client is required to be
synchronized with the clock of the server. If the clock of the server is unstable, you
can run the ntp-service sync-interval command on the client to reduce the
interval.
The ntp-service max-distance command is applied to only the NTP client. The
NTP client calculates the distance with each NTP server, and compares the
calculated distance with the distance threshold configured using the ntp-service
max-distance command. If the calculated distance is longer than the threshold,
the NTP client does not synchronize the clock from this NTP server.
Precautions
The NTP poll interval must be an integer power of 2; therefore, the interval for the
client synchronization is configured as a value closest to the integer power of 2.
For example, if the interval configured by the user is 180 seconds, the client is
synchronized at any time after 128 seconds.
If you run the ntp-service command repeatedly, the latest configuration overrides
the previous configurations.
Example
# Sets the maximum interval to 200 seconds for clock synchronization.
<HUAWEI> system-view
[HUAWEI] ntp-service sync-interval 200
Format
ntp-service access { peer | query | server | synchronization | limited } { acl-
number | ipv6 acl6-number } *
undo ntp-service access { peer | query | server | synchronization | limited }
[ ipv6 | all ]
undo ntp-service access { peer | query | server | synchronization | limited }
[ acl-number | ipv6 acl6-number ] *
Parameters
Parameter Description Value
peer Indicates maximum access authority. Both -
time request and control query can be
performed on the local NTP service, and the
local clock can be synchronized to the remote
server.
query Indicates minimum access. Only control query -
can be performed on the local NTP service.
server Indicates that server access and query are -
permitted. Both time request and control
query can be performed on the local NTP
service, but the local clock cannot be
synchronized to the remote server.
synchronization Indicates that only server access is permitted. -
Only time request can be performed on the
local NTP service.
limited When the rate of NTP packets exceeds the -
upper limit, the incoming NTP packets are
discarded.
acl-number Indicates the number of a basic ACL with IPv4 The value is
address specified. an integer
that ranges
from 2000 to
2999.
ipv6 acl6-number Indicates the number of an ACL with IPv6 The value is
address specified. an integer
that ranges
from 2000 to
2999.
all Indicates all access control authority. -
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
lowest one. The first successfully matched access authority takes effect. The
matching order is: peer, server, synchronization, query and limited.
NTP symmetric peer The two ends are restricted from Symmetric
mode being synchronized with each other active peer
to prevent an unreliable symmetric
passive peer on the network from
synchronizing the client.
NTP broadcast mode The client is restricted from being NTP broadcast
synchronized to a server, so that the client
client will not be synchronized to
an unreliable broadcast NTP server
on the network.
NTP manycast client The client is restricted from being NTP manycast
mode synchronized to a server. client
The ntp-service access command ensures the security to the minimal extent. A
safer method is to perform identity authentication. See the ntp-service
authentication enable command for relevant configuration.
Precautions
Before configuring access control authority in ACL, check ACL rule configurations
as follows:
● If the ACL rule is set to permit or empty, a permit action will be performed.
● If the ACL rule is set to deny or the associated peer is not bound to the ACL
rule, a deny action will be performed.
Example
# Enable the peer matching ACL 2000 to perform time request, query control and
time synchronization on the local device.
<HUAWEI> system-view
[HUAWEI] ntp-service access peer 2000
# Enable the server matching ACL 2002 to perform time request and query control
on the local device.
<HUAWEI> system-view
[HUAWEI] ntp-service access server 2002
Related Topics
3.5.9 ntp-service authentication enable
Function
The ntp-service authentication enable command enables identity authentication
for NTP.
Format
ntp-service authentication enable
Parameters
None
Views
System view
Default Level
2: Configuration level
Usage Guidelines
On networks requiring high security, authentication must be enabled for NTP. The
NTP client authenticates NTP servers using a password and synchronizes time with
only the authenticated server. This improves network security.
Example
# Enable identity authentication for NTP.
<HUAWEI> system-view
[HUAWEI] ntp-service authentication enable
Related Topics
3.5.10 ntp-service authentication-keyid
3.5.25 ntp-service reliable authentication-keyid
Function
The ntp-service authentication-keyid command sets NTP authentication key.
Format
ntp-service authentication-keyid key-id authentication-mode { md5 | hmac-
sha256 } [ cipher ] password
Parameters
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
On a network that requires high security, the NTP authentication must be enabled.
You can configure password authentication between client and server, which
guarantee the client only to synchronize with server successfully authenticated,
and improve network security. If the NTP authentication function is enabled, a
reliable key should be configured at the same time. Keys configured on the client
and the server must be identical.
NOTE
In NTP symmetric peer mode, the symmetric active peer functions as a client and the
symmetric passive peer functions as a server.
Follow-up Procedure
You can configure multiple keys for each device. After the NTP authentication key
is configured, you need to set the key to reliable using the ntp-service reliable
authentication-keyid command. If you do not set the key to reliable, the NTP key
does not take effect.
Precautions
To ensure security, you are advised to use the HMAC-SHA256 algorithm, which is
more secure, for NTP authentication.
You can configure a maximum of 1024 keys for each device.
If the NTP authentication key is a reliable key, it automatically becomes unreliable
when you delete the key. You do not need to run the undo ntp-service reliable
authentication-keyid command.
Example
# Set the HMAC-SHA256 identity authentication key. The key ID number is 10,
and the key is Betterkey.
<HUAWEI> system-view
[HUAWEI] ntp-service authentication-keyid 10 authentication-mode hmac-sha256 BetterKey
Related Topics
3.5.9 ntp-service authentication enable
3.5.25 ntp-service reliable authentication-keyid
Format
ntp-service broadcast-client
undo ntp-service broadcast-client
Parameters
None
Views
Interface view
Default Level
2: Configuration level
Usage Guidelines
On a synchronization subnet, when the IP address of a server or a symmetric peer
is not determined, or when the clocks on a large number of devices need to be
synchronized on the network, you can implement clock synchronization by
configuring the broadcast mode.
On a specified interface on the broadcast client, run the ntp-service broadcast-
client command to configure an interface on the local device to receive NTP
broadcast packets. When the local device automatically runs in the broadcast
client mode, the device can receive the synchronization packets sent by a
broadcast server. For the configuration of the broadcast server, see the ntp-service
broadcast-server command.
When the configuration is complete, you can run the display ntp-service sessions
command to obtain information about sessions between the broadcast server and
the local device.
Example
# Enable VLANIF100 to receive NTP broadcast messages.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] ip address 10.1.1.1 24
[HUAWEI-Vlanif100] ntp-service broadcast-client
Related Topics
3.5.12 ntp-service broadcast-server
Format
ntp-service broadcast-server [ version number | authentication-keyid key-id |
port port-number ] *
undo ntp-service broadcast-server [ version number | authentication-keyid
key-id | port port-number ] *
Parameters
Parameter Description Value
version number Indicates the NTP version The value is an integer that
number. ranges from 1 to 4. The
default value is 3.
If this parameter is not
specified, the version
number is a default value.
Views
Interface view
Default Level
2: Configuration level
Usage Guidelines
On a synchronization subnet, when the IP address of a server or a symmetric peer
is not determined, or when the clocks on a large number of devices need to be
synchronized on the network, you can implement clock synchronization by
configuring the broadcast mode.
On a specified interface on the broadcast server, run the ntp-service broadcast-
server command to configure an interface on the local device to send NTP
broadcast packets. When the local device automatically runs in the broadcast
server mode, the device can send synchronization packets to a broadcast client.
For the configuration of the broadcast client, see the ntp-service broadcast-client
command.
When the configuration is complete, you can run the display ntp-service sessions
command to obtain information about sessions between the broadcast server and
the client.
Example
# Enable VLANIF100 to send NTP broadcast packets, with the NTP version as 2
and the key number as 4.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] ip address 10.1.1.1 24
[HUAWEI-Vlanif100] ntp-service broadcast-server version 2 authentication-keyid 4
Related Topics
3.5.11 ntp-service broadcast-client
Function
The ntp-service disable command disables the IPv4 and IPv6 NTP function.
The undo ntp-service disable command enables the IPv4 and IPv6 NTP function.
Format
ntp-service [ ipv6 ] disable
Parameters
Parameter Description Value
ipv6 Indicates IPv6 NTP services. -
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
Run the ntp-service disable or ntp-service ipv6 disable command in the system
view to disable the IPv4 or IPv6 NTP service function.
You can run the ntp-service disable command in either of the following
situations:
● The device does not need to synchronize clock with IPv4 or IPv6 external
servers or peers.
● The device does not need to provide reference clock source for IPv4 or IPv6
external clients.
Precautions
Disabling of NTP service will not delete the existing configurations.
After the NTP service is enabled, the system listens to IP address 0.0.0.0 by default.
That is, the system listens to all IP addresses, which is prone to security issues. It is
recommended that you run the ntp-service access { peer | query | server |
synchronization | limited } { acl-number | ipv6 acl6-number } * command to
configure access control permission on the local NTP service. You can also run the
ntp-service authentication enable command to configure NTP identify
authentication.
Example
# Disable the IPv4 NTP service.
<HUAWEI> system-view
[HUAWEI] ntp-service disable
Format
ntp-service discard { min-interval min-interval-val | avg-interval avg-interval-
val } *
undo ntp-service discard
Parameters
Parameter Description Value
min-interval Specifies the minimum inter-packet The value of min-
min-interval-val interval of NTP. interval-val is an
integer that ranges
The actual value of the minimum inter- from 1 to 8.
packet interval of NTP is the value
obtained by raising 2 to the power of
min-interval-val, expressed in seconds.
Views
System view
Default Level
2: Configuration level
Usage Guidelines
The minimum inter-packet interval and the average inter-packet interval of NTP
are set using the ntp-service discard command. To generate kiss code RATE, we
need to set the minimum inter-packet interval and the average inter-packet
interval of NTP.
Example
# Set both the minimum inter-packet interval and the average inter-packet
interval of NTP to the fourth power of 2, expressed in seconds, namely, 16
seconds.
<HUAWEI> system-view
[HUAWEI] ntp-service discard min-interval 4 avg-interval 4
Format
ntp-service [ ipv6 ] in-interface disable
Parameters
Parameter Description Value
ipv6 Indicates IPv6 NTP services. -
Views
Interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
You can disable the interface connected to external devices from receiving NTP
packets in either of the following situations:
● An unreliable clock server exists on the interface. By default, all the interfaces
can receive NTP packets after NTP is enabled on the device. However, an
unreliable clock source makes NTP clock data inaccurate.
● The NTP clock data is modified when the interface is attacked maliciously.
Prerequisites
Before an interface is disabled from receiving IPv6 NTP packets, the IPv6 function
must be enabled on the interface.
Example
# Disable VLANIF100 from receiving NTP packets.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] ntp-service in-interface disable
Function
The ntp-service kod-enable command enables the KOD function.
Format
ntp-service kod-enable
Parameters
None
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
The Kiss-o'-Death (KOD) is a brand new access control technology put forward by
NTPv4, and the KOD is mainly used for a server to provide information, such as a
status report and access control, for a client. After the KOD function is enabled on
the server, the server sends the kiss code DENY or RATE to the client according to
the operating status of the system.
When the kiss code is generated in a specific situation, run the ntp-service kod-
enable command.
Follow-up Procedure
After the KOD function is enabled on the server, you can run the ntp-service
access limited command to enable control on the rate of incoming NTP packets.
When the rate of incoming NTP packets reaches the upper threshold, the server
sends the kiss code.
Example
# Enable the KOD function.
<HUAWEI> system-view
[HUAWEI] ntp-service kod-enable
Format
ntp-service manycast-client [ ip-address | ipv6 [ ipv6-address ] ]
[ authentication-keyid key-id | ttl ttl-number | port port-number ] *
Parameters
Parameter Description Value
ip-address Specifies a manycast IPv4 The default IPv4 address
address, which is a class D is 224.0.1.1.
address.
Views
Interface view
Default Level
2: Configuration level
Usage Guidelines
The local device runs in the manycast client mode, and periodically sends
manycast packets to manycast servers. After the local device receives the reply
packet sent by a manycast server, the local device establishes dynamic C/S
association with the server.
NOTE
In the configuration of the manycast client, if the server address is not specified, 224.0.1.1
or FF0E::0101 is adopted as the server address by default.
Example
# Configure VLANIF100 to receive NTP manycast packets.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] ip address 10.1.1.1 24
[HUAWEI-Vlanif100] ntp-service manycast-client
Related Topics
3.5.22 ntp-service multicast-server
Format
ntp-service manycast-server [ ip-address | ipv6 [ ipv6-address ] ]
undo ntp-service manycast-server [ ip-address | ipv6 [ ipv6-address ] ]
Parameters
Parameter Description Value
ip-address Specifies a manycast IPv4 The default IPv4 address
address, which is a class D is 224.0.1.1.
address.
Views
Interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
The manycast server responds to the manycast packets sent by the client. After
the manycast client receives the reply packet, the manycast client establishes
temporary association with the server and enters C/S mode.
Precautions
If the manycast IP address is not specified when the undo ntp-service manycast-
server command is run, the local device searches for the default IP address. In
IPv4 networks, the default IP address of the manycast server is 224.0.1.1. In IPv6
networks, the default IP address of the manycast server is FF0E::0101. If the local
device finds the default IP address, the undo ntp-service manycast-server
command takes effect; otherwise, the undo ntp-service manycast-server does
not take effect.
Example
# Configure VLANIF100 as an interface of the server. The interface is used for
responding to the manycast client request from a manycast address.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] ip address 10.1.1.1 24
[HUAWEI-Vlanif100] ntp-service manycast-server
Related Topics
3.5.17 ntp-service manycast-client
Function
The ntp-service max-distance command configures the maximum distance
threshold value.
Format
ntp-service max-distance max-distance-value
Parameters
Views
System view
Default Level
2: Configuration level
Usage Guidelines
ntp-service max-distance command is used at the client side. At the client side,
NTP will calculate synchronization distance for each server and compare it with
synchronization distance threshold value. If the synchronization distance exceeds
synchronization distance threshold value, the client will not consider that server
for clock synchronization. This command is used in the calculation of
synchronization distance threshold value.
Example
# Set the NTP maximum distance to 16s.
<HUAWEI> system-view
[HUAWEI] ntp-service max-distance 16
Function
The ntp-service max-dynamic-sessions command sets the maximum dynamic
NTP sessions that can be set up.
Format
ntp-service max-dynamic-sessions number
Parameters
Parameter Description Value
number The number of dynamic NTP
Indicates the number of
sessions is an integer that ranges
dynamic sessions allowed to
from 0 to 100.The default value is
be set up.
100.
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
A maximum of 128 sessions can be established on the same device running the
NTP service in the same period, including static and dynamic sessions. In both
unicast server/client mode and symmetric peer mode, command lines are used to
establish static sessions. The dynamic sessions are established in broadcast mode
or multicast mode.
Precautions
● NTP dynamic sessions established are not affected. That is, when the number
of the dynamic sessions exceeds the limit, the dynamic sessions established
are not deleted, but a new dynamic session cannot be established.
● The limit on the number of local dynamic sessions allowed should be
configured on the client because the server does not record the number of the
established NTP sessions.
Example
# Set the maximum NTP dynamic sessions allowed to be set up to 50.
<HUAWEI> system-view
[HUAWEI] ntp-service max-dynamic-sessions 50
Format
ntp-service multicast-client [ ip-address | ipv6 [ ipv6-address ] ]
undo ntp-service multicast-client [ ip-address | ipv6 [ ipv6-address ] ]
Parameters
Parameter Description Value
ip-address Indicates the multicast IP The default IP address is
address. 224.0.1.1.
ipv6 [ ipv6-address ] Indicates the multicast IPv6 The default IPv6 address is
address. FF0E::0101.
Views
Interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
To perform clock synchronization in multicast mode, you can use the ntp-service
multicast-client command to specify the current interface on the local device to
receive NTP multicast packets. The local device runs in the multicast client mode.
If the valid multicast server is configured, the local device gets synchronized with
the multicast server. The local device time is updated with the time of the server.
Follow-up Procedure
NOTE
You can configure more than one multicast client with different multicast IP address on the
same interface. When multiple multicast clients are configured, the device selects the
optimal clock source by selecting a preferred clock.
You can configure a maximum of 1024 multicast clients on the local device, but a
maximum of 128 multicast clients can work simultaneously.
Example
# Configure VLANIF100 to receive NTP multicast packets. The multicast address of
the multicast packets is 224.0.1.2.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] ip address 10.1.1.1 24
[HUAWEI-Vlanif100] ntp-service multicast-client 224.0.1.2
Related Topics
3.5.22 ntp-service multicast-server
3.5.3 display ntp-service sessions
Function
The ntp-service multicast-server command specifies an interface on the local
device to send NTP multicast packets. The local device runs in the multicast server
mode.
Format
ntp-service multicast-server [ ip-address ] [ version number | authentication-
keyid key-id | ttl ttl-number | port port-number ] *
ntp-service multicast-server ipv6 [ ipv6-address ] [ authentication-keyid key-id
| ttl ttl-number | port port-number ] *
undo ntp-service multicast-server [ ip-address ] [ version number |
authentication-keyid key-id | ttl ttl-number | port port-number ] *
undo ntp-service multicast-server ipv6 [ ipv6-address ] [ authentication-keyid
key-id | ttl ttl-number | port port-number ] *
Parameters
Parameter Description Value
ip-address Indicates the multicast IP The default address is
address. 224.0.1.1.
ipv6 [ ipv6-address ] Indicates the multicast IPv6 The default IPv6 address is
address. FF0E::0101.
version number Indicates the NTP version The value is an integer that
number. ranges from 1 to 4. The
default value is 3.
If this parameter is not
specified, the version
number is a default value.
ttl ttl-number Indicates the life span of the The ttl number is an integer
multicast packet. that ranges from 1 to 255.
The default value is 255.
If this parameter is not
specified, the life span of the
multicast packet is a default
value.
Views
Interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
To perform clock synchronization in the multicast mode, run the ntp-service
multicast-server command to specify the current interface on the local device to
send NTP multicast packets. The local device runs in the multicast server mode,
and functions as the multicast server to periodically send multicast packets to the
multicast client.
Follow-up Procedure
When the configuration is complete, run the display ntp-service sessions
command to obtain session information about the multicast server and the local
device.
NOTE
You can configure a maximum of 128 multicast servers on the local device.
Example
# Configure VLANIF100 to send NTP multicast packets. The multicast IPv4 address
is 224.0.1.1, the authentication key ID is 4 and the NTP version number is 3.
<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] ip address 10.1.1.1 24
[HUAWEI-Vlanif100] ntp-service multicast-server 224.0.1.1 authentication-keyid 4 version 3
Related Topics
3.5.21 ntp-service multicast-client
3.5.3 display ntp-service sessions
The undo ntp-service port command restores the default port number.
Format
ntp-service port port-value
Parameters
Parameter Description Value
port-value Specifies the number of the The value is an integer ranging from
port that sends NTP 1025 to 65535.
packets. NOTE
The port-value can be set to the default
port 123.
Views
System view
Default Level
2: Configuration level
Usage Guidelines
To improve security of network packets, run the ntp-service port command to
configure the number of the port that sends NTP packets. Therefore, the user
firewall filters packets based on the port number.
Example
# Set the number of the port that sends NTP packets to 5000.
<HUAWEI> system-view
[HUAWEI] ntp-service port 5000
Function
The ntp-service refclock-master command sets the local clock to be the NTP
primary clock that provides the synchronizing time for other devices.
Format
ntp-service refclock-master [ ip-address ] [ stratum ]
undo ntp-service refclock-master [ ip-address ] [ stratum ]
Parameters
Parameter Description Value
ip-address Specifies the IP address of the The value of ip-address is
local reference clock. 127.127.1.u, and u ranges from 0
to 3, which represents the
When no IP address is assigned, number of the selected local
the local clock whose IP address clock.
is 127.127.1.0 is set as the default
NTP primary clock.
stratum Specifies the stratum of the NTP The value of the stratum is an
primary clock. integer that ranges from 1 to 15.
The default value is 8. Timer is
If this parameter is not specified, accurate if the stratum value is
the stratum is a default value. small.
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
The local clock is the clock of the device itself. Run the ntp-service refclock-
master command to set the local clock as the NTP primary clock that provides the
synchronization time for other devices.
In NTP, the time synchronization in an NTP synchronization subnet is performed
from a smaller level to a larger level, that is, from the 1st level to the 15th level.
An authoritative clock is used as a reference time source for the synchronization
subnet, and is located at the top of the synchronization subnet. The authoritative
clock is stratum0. The current authoritative clock is mostly a Radio Clock or the
Global Positioning System. The time of the authoritative clock is synchronized
through the broadcast UTC time code other than NTP.
Precautions
A device on the network can perform clock synchronization in the following
manners.
● Synchronizing with the local clock: The local clock is used as the reference
clock.
Example
# Set the local clock to be the NTP primary clock, the stratum of which set to 3.
<HUAWEI> system-view
[HUAWEI] ntp-service refclock-master 3
Format
ntp-service reliable authentication-keyid key-id
undo ntp-service reliable authentication-keyid key-id
Parameters
Parameter Description Value
key-id Indicates the key Key ID is an integer and ranges from 1 to
number. 4294967295.
Views
System view
Default Level
2: Configuration level
Usage Guidelines
If the identity authentication is enabled, this command is used to specify that one
or more keys are reliable. That is, the client can only be synchronized with the
server that provides the reliable key. The client cannot be synchronized with the
server that provides unreliable keys.
Example
# Enable the identity authentication in NTP and adopt the HMAC-SHA256
encryption mode with key number as 37 and the key as BetterKey. Specify the key
to be reliable.
<HUAWEI> system-view
[HUAWEI] ntp-service authentication enable
[HUAWEI] ntp-service authentication-keyid 37 authentication-mode hmac-sha256 cipher BetterKey
[HUAWEI] ntp-service reliable authentication-keyid 37
Related Topics
3.5.9 ntp-service authentication enable
3.5.10 ntp-service authentication-keyid
Function
The ntp-service server disable command disables NTP server function.
The undo ntp-service server disable command enables NTP server function.
Format
ntp-service [ ipv6 ] server disable
Parameters
Parameter Description Value
ipv6 Indicates IPv6 NTP services. -
Views
System view
Default Level
2: Configuration level
Usage Guidelines
For the security purpose, NTP server function can be disabled when the device
does not need to act as a server.
If you run the undo ntp-service [ ipv6 ] server disable command alone, the NTP
server function cannot take effect.
Example
# Disable IPv4 NTP server function.
<HUAWEI> system-view
[HUAWEI] ntp-service server disable
Format
ntp-service [ ipv6 ] source-interface interface-type interface-number [ vpn-
instance vpn-instance-name ]
undo ntp-service [ ipv6 ] source-interface [ interface-type interface-number ]
[ vpn-instance vpn-instance-name ]
Parameters
Parameter Description Value
ipv6 Indicates that the network type of -
the local source interface is IPv6.
interface-type Indicates the local interface that -
interface-number sends the NTP packets.
vpn-instance vpn- Indicates the name of the VPN The value must be
instance-name instance. an existing VPN
instance name.
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
Configure the local source interface for sending/receiving NTP packets, so that the
another interface on the device cannot receive the NTP response packets, which is
convenient for a user to subsequently deploy a flow control policy. If the interface
is not specified, the source IP address of the NTP packets is selected according to
the route.
If you have specified vpn-instance when configuring a source IP address with this
command, the source IP address can be used only by the NTP server mapping the
specified VPN instance instead of other VPN instances or NTP servers that do not
have VPN instances specified.
Precautions
For broadcast, multicast, and manycast modes, NTP service is implemented on the
specified interface, and this interface is the source interface. Therefore, the ntp-
service source-interface command is invalid for broadcast, multicast, and
manycast modes.
Example
# Specify VLANIF100 as the source interface to send all the NTP packets.
<HUAWEI> system-view
[HUAWEI] ntp-service source-interface vlanif 100
Function
The ntp-service unicast-peer command configures NTP peer mode.
The undo ntp-service unicast-peer command cancels the NTP peer mode.
Format
ntp-service unicast-peer ip-address [ version number | authentication-keyid
key-id | source-interface interface-type interface-number | preference | vpn-
instance vpn-instance-name | maxpoll max-number | minpoll min-number |
preempt | port port-number ] *
Parameters
Parameter Description Value
ip-address Indicates the IPv4 address of The parameter ip-address is
the remote peer. a host address and cannot
be the broadcast address,
the multicast address or
the IP address of a
reference clock.
ipv6 ipv6-address Indicates the IPv6 address of The value of ipv6-address is
the remote server. a unicast address, but
cannot be a broadcast
address, multicast address,
or reference clock's IP
address.
version number Indicates the NTP version The version number is an
number. If this parameter is integer that ranges from 1
not specified, the default to 4. The default value is 3.
version number is used.
authentication- Indicates the authentication The key ID is an integer
keyid key-id key ID used when that ranges from 1 to
transmitting messages to the 4294967295 when the NTP
remote peer. If this parameter version number is from 1
is not specified, to 3. When the NTP version
authentication is not number is 4, the key ID is
performed. integer that ranges from 1
to 65535. When the remote
server address is an IPv6
address, the key ID is an
integer that ranges from 1
to 65535.
maxpoll max- Indicates the maximum NTP The value is an integer that
number poll interval. ranges from 10 to 17.
minpoll min- Indicates the minimum NTP The value is an integer that
number poll interval. ranges from 3 to 6.
source-interface Indicates the source interface -
interface-type from which the symmetric
interface-number active end sends NTP packets
to the symmetric passive end.
The source IP address of the
NTP packets is the IP address
of this interface.
vpn-instance vpn- Specifies the VPN instance The value must be an
instance-name name. existing VPN instance
name.
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
Precautions
● If the same server is specified in at least two commands that are run in
sequence to configure the NTP server mode, during the configuration
restoration, the last run command takes effect. For example, the ntp-service
unicast-peer 10.10.1.1 source-interface vlanif 10 command and ntp-service
unicast-peer 10.10.1.1 command are run in sequence. During the
configuration restoration, only the ntp-service unicast-peer 10.10.1.1
command takes effect.
● A maximum of 128 peers can be configured for the local device. The optimal
symmetric peer is selected as the synchronization source.
Example
# Configure the peer 10.10.1.1 to provide the synchronizing time for the local
device. The local device can also provide synchronizing time for the peer. The
version number is 3. The IP address of the NTP packets is the address of
VLANIF100.
<HUAWEI> system-view
[HUAWEI] ntp-service unicast-peer 10.10.1.1 version 3 source-interface vlanif 100
Format
ntp-service unicast-server ip-address [ version number | authentication-keyid
key-id | source-interface interface-type interface-number | preference | vpn-
instance vpn-instance-name | maxpoll max-number | minpoll min-number |
burst | iburst | preempt | port port-number ] *
ntp-service unicast-server ipv6 ipv6-address [ authentication-keyid key-id |
source-interface interface-type interface-number | preference | vpn-instance
vpn-instance-name | maxpoll max-number | minpoll min-number | burst | iburst
| preempt | port port-number ] *
undo ntp-service unicast-server { ip-address | ipv6 ipv6-address } [ vpn-instance
vpn-instance-name ]
Parameters
Parameter Description Value
ip-address Indicates the IPv4 address of the The value of ip-address
remote server. must be an IP address of
a host, but cannot be a
broadcast address,
multicast address, or
reference clock's IP
address.
maxpoll max- Indicates the maximum NTP poll The value is an integer
number interval. that ranges from 10 to
17.
minpoll min- Indicates the minimum NTP poll The value is an integer
number interval. that ranges from 3 to 6.
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
When the ntp-service unicast-server command is run, you can also configure the
mode used for the remote server, such as the NTP version, authentication key, and
the polling interval.
Precautions
● A maximum of 128 servers can be configured for the local device. The optimal
symmetric peer is selected as the synchronization source.
● If the local device works in the client mode, the local device can only be
synchronized with the remote server but the remote server cannot be
synchronized with the local device.
● When a PE is synchronized to another PE or CE in a VPN, the parameter vpn-
instance vpn-instance-name needs to be specified.
● When the undo ntp-service unicast-server command is run, if the parameter
vpn-instance vpn-instance-name is specified, cancel the configuration of the
NTP server with the IP address ip-address or ipv6-address in the VPN. If the
parameter vpn-instance vpn-instance-name is not specified, cancel the
configuration of the NTP server with the IP address ip-address or ipv6-address
in the public network.
● Before deleting a VPN instance, check whether the VPN instance is bound to
the NTP server. This confirmation is to ensure that the changed configuration
meets users' requirements. For example:
a. Specify an NTP server and bind a VPN instance to the NTP server. You can
view the following configurations:
<HUAWEI> display current-configuration | begin ntp
ntp-service unicast-server 10.1.1.1 vpn-instance vpn2
ntp-service refclock-master
b. If the VPN instance named vpn2 is deleted, the VPN instance bound to
the NTP server is also deleted.
<HUAWEI> display current-configuration | be ntp
ntp-service unicast-server 10.1.1.1
ntp-service refclock-master
Example
# Configure the server 10.10.1.1 to provide the synchronizing time for the local
device. The NTP version number is 3.
<HUAWEI> system-view
[HUAWEI] ntp-service unicast-server 10.10.1.1 version 3
# Configure the server 10.10.1.1 with VPN instance "abc" to provide the
synchronizing time for the local device.
<HUAWEI> system-view
[HUAWEI] ntp-service unicast-server 10.10.1.1 vpn-instance abc
Format
reset ntp-service statistics packet [ ipv6 | peer [ ip-address [ vpn-instance vpn-
instance-name ] | ipv6 [ ipv6-address [ vpn-instance vpn-instance-name ] ] ] ]
Parameters
Parameter Description Value
ipv6 Clears the statistics about global IPv6 -
NTP packets.
peer Clears statistics related to NTP peers. -
ip-address Specifies the IP address of an NTP peer. -
vpn-instance vpn- Specifies the VPN instance bound to an The value must
instance-name NTP peer. be an existing
VPN instance
name.
ipv6 Clears the packet statistics on IPv6 -
peers.
ipv6-address Clears the NTP packet statistics on the -
specified IPv6 peer.
Views
User view
Default Level
3: Management level
Usage Guidelines
When debugging NTP, you can use this command to clear the statistics on NTP.
NOTICE
The statistics on NTP cannot be recovered after being cleared. Confirm before you
delete the statistics.
Example
# Clear statistics on NTP packets.
<HUAWEI> reset ntp-service statistics packet
Format
als enable
undo als enable
Parameters
None
Views
GE interface view, XGE interface view, 40GE interface view, port group view
Default Level
2: Configuration level
Usage Guidelines
The constraints on ALS are as follows:
● Only optical interfaces support ALS. Electrical interfaces do not support ALS.
● When optical interfaces transmit services unidirectionally, they do not support
ALS.
● When the copper cable or copper module is used on the optical port, the ALS
function is not supported. In addition, after the copper cable is inserted, all
the ALS-related commands configured on this interface are cleared.
Example
# Enable ALS on GigabitEthernet0/0/1.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] als enable
Related Topics
3.6.7 display als configuration
Function
The als restart command manually restarts the laser of an interface.
Format
als restart
Parameters
None
Views
GE interface view, XGE interface view, 40GE interface view, port group view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
You can run this command to manually restart the laser of an optical module.
After the optical link recovers, the laser is started after a certain interval if the
restart mode is automatic restart. To start the laser immediately after the optical
link recovers, set the restart mode of the laser to manual restart and run the als
restart command. If this command is not executed, the laser automatically sends
a pulse after receiving a pulse from the remote end.
Prerequisites
ALS has been enabled on the interface using the 3.6.2 als enable command and
the restart mode of the laser has been set to manual restart mode using the 3.6.4
als restart mode manual command.
Precautions
This command cannot be executed on an interface if the interface has been added
to an interface protection group and is in Protect state.
Example
# Restart lasers on GigabitEthernet0/0/1 manually.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] als enable
[HUAWEI-GigabitEthernet0/0/1] als restart mode manual
[HUAWEI-GigabitEthernet0/0/1] als restart
Related Topics
3.6.2 als enable
3.6.4 als restart mode manual
Format
als restart mode manual
undo als restart mode manual
Parameters
None
Views
GE interface view, XGE interface view, 40GE interface view, port group view
Default Level
2: Configuration level
Usage Guidelines
The laser of an optical module works in automatic restart mode or manual restart
mode.
● In automatic restart mode, the laser sends pulses at the interval set using the
3.6.5 als restart pulse-interval command to detect whether the link is
recovered. The pulse width is set through the 3.6.6 als restart pulse-width
command.
● In manual restart mode, you must manually start the laser using the 3.6.3 als
restart command so that the laser can send a pulse. The ALS pulse width is
set using the 3.6.6 als restart pulse-width command.
If the fiber link recovery is detected in time, you can use the manual restart mode
so that the laser can send pulses immediately. Therefore, data communication can
be recovered rapidly.
Example
# Configure lasers on GigabitEthernet0/0/1 to work in manual restart mode.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] als restart mode manual
Related Topics
3.6.2 als enable
3.6.3 als restart
3.6.5 als restart pulse-interval
3.6.6 als restart pulse-width
3.6.7 display als configuration
Format
als restart pulse-interval pulse-interval
undo als restart pulse-interval
Parameters
Parameter Description Value
pulse-interval Specifies the ALS pulse The value is an integer that ranges
interval of the laser. from 100 to 20000, in seconds.
Views
GE interface view, XGE interface view, 40GE interface view, port group view
Default Level
2: Configuration level
Usage Guidelines
In automatic restart mode, the ALS pulse interval affects the frequency of
detecting the LOS on the interface. A long ALS pulse interval is beneficial for
energy saving, but the fiber link recovery cannot be detected in a timely manner.
In contrary, a short ALS pulse interval wastes power but the fiber link recovery can
be detected immediately.
Example
# Set the ALS pulse interval of lasers on GigabitEthernet0/0/1 to 150s.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] als restart pulse-interval 150
Related Topics
3.6.2 als enable
3.6.7 display als configuration
Format
als restart pulse-width pulse-width
undo als restart pulse-width
Parameters
Parameter Description Value
pulse-width Specifies the ALS pulse width The value is an integer that ranges
of the laser. from 2 to 200, in seconds.
Views
GE interface view, XGE interface view, 40GE interface view, port group view
Default Level
2: Configuration level
Usage Guidelines
The ALS pulse width refers to the period between rising edges of pulses. A short
ALS pulse width is beneficial for energy saving, but the fiber link recovery cannot
be detected immediately. In contrary, a long ALS pulse width consumes more
power but the fiber link recovery can be detected immediately.
Example
# Set the ALS pulse width on GigabitEthernet0/0/1 to 3s.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] als restart pulse-width 3
Related Topics
3.6.2 als enable
3.6.7 display als configuration
Format
display als configuration slot slot-id
Parameters
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
If an optical interface connects to a high-speed cable, this command does not
have command output.
Example
# Display ALS configuration on GigabitEthernet0/0/1.
<HUAWEI> display als configuration interface gigabitethernet 0/0/1
-------------------------------------------------------------------------------
Interface ALS Laser Restart Interval(s) Width(s)
Status Status Mode
-------------------------------------------------------------------------------
GigabitEthernet0/0/1 Disable On Auto 100 2
-------------------------------------------------------------------------------
Item Description
Item Description
Related Topics
3.6.2 als enable
3.6.4 als restart mode manual
3.6.5 als restart pulse-interval
3.6.6 als restart pulse-width
Format
display power manage cycle
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
The average power consumption of a device is the average power consumption
within a period of time. You can use the display power manage cycle command
to view the interval for calculating the average power consumption.
Example
# Display the interval for updating power consumption data.
<HUAWEI> display power manage cycle
3 : 1 hour
Table 3-70 Description of the display power manage cycle command output
Item Description
Related Topics
3.6.16 set power manage cycle
Format
display power manage mode
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display power manage mode command to check the currently
configured energy-saving mode of the device.
Example
# Display the energy-saving mode of the device.
<HUAWEI> display power manage mode
2 (Standard mode)
Table 3-71 Description of the display power manage mode command output
Item Description
Related Topics
3.6.18 set power manage mode
Function
The display power manage power-information command displays the power
consumption information of a device.
Format
display power manage power-information
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
The display power manage power-information command enables you to check
the system power consumption information, including the accumulative power
consumption, average power, real-time power, rated power, and power threshold
of the device.
Example
# Display the system power consumption information.
<HUAWEI> display power manage power-information
The information of net element power:
--------------------------------------------------
The total power consumption (Joule) : 1000
The average power consumption (mW) : 20000
The current power consumption (mW) : 20000
The rated power (mW) : 433000
The threshold of power (mW) : 433000
--------------------------------------------------
Item Description
Item Description
The threshold of Power threshold of the power supply unit, in mW. The value
power (mW) is the rated power supplied to the device by power supply
units.
When there are two power supply units on the device, they
work in redundancy mode to supply power to the system.
The supplied power is not the accumulated power of the
two power supply units. When the rated power of both
power supply units can be obtained, this field displays the
smaller rated power. If the rated power of one power supply
unit cannot be obtained, this field displays the obtained
rated power. If the rated power of both power supply units
cannot be obtained, this field displays the system rated
power.
Function
The display power manage sleep configuration command displays device
dormancy information.
NOTE
Format
display power manage sleep configuration
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
The display power manage sleep configuration command shows device
dormancy information, including the time range, period during which the
awakening port status is detected continuously, awakening mode, and non-
awakening ports.
Example
# Display the device dormancy configuration.
<HUAWEI> display power manage sleep configuration
The device sleep function status: enable
The device sleep time-range: night-time
-----------------------------------------------
Current time is 16:19:45 5-14-2012 Monday
Item Description
Item Description
The device sleep Dormancy time range name. If no dormancy time range is
time-range specified, the whole day takes effect by default.
To set a dormancy time range, run the sleep time-range
command.
The awaken port Period during which the awakening port status is detected
state check continuously.
interval To set the period, run the set power manage interval
(minutes) command.
Related Topics
3.6.17 set power manage interval
3.6.15 set power manage awaken-mode fast
3.6.19 set power manage non-awaken-port
Function
display snmp-agent trap feature-name spmtrap all command displays the
status of all traps on the SPMTRAP module.
NOTE
Format
display snmp-agent trap feature-name spmtrap all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
After the trap function of a specified feature is enabled, you can run the display
snmp-agent trap feature-name spmtrap all command to check the status of all
traps of SPMTRAP. You can use the snmp-agent trap enable feature-name
spmtrap command to enable the trap function of SPMTRAP.
Prerequisites
Example
# Display all the traps of the SPMTRAP module.
<HUAWEI>display snmp-agent trap feature-name spmtrap all
------------------------------------------------------------------------------
Feature name: SPMTRAP
Trap number : 1
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwEnergyDevChangeToSleep on on
Table 3-74 Description of the display snmp-agent trap feature-name spmtrap all
command output
Item Specification
Feature name Name of the module that the trap belongs to.
Related Topics
3.6.21 snmp-agent trap enable feature-name spmtrap
Function
The energy-efficient-ethernet enable command enables the Energy Efficient
Ethernet (EEE) function on an electrical interface.
Format
energy-efficient-ethernet enable
Parameters
None
Views
GE interface view, port group view, MultiGE interface view, XGE interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
The system provides power for each interface. Even though an interface is idle, it
consumes the same power as working interfaces. The energy-efficient-ethernet
enable command enables the system to reduce the power on an interface when
the interface is idle and restore the power when the interface starts to transmit
data. This reduces system power consumption.
Prerequisites
If an electrical interface works in non-auto negotiation mode, run the negotiation
auto command to enable auto-negotiation.
Precautions
The EEE function can be configured only on electrical interfaces (including combo
electrical interfaces). Optical interfaces do not support the EEE function. S2750EI
does not support the EEE function.
If an electrical interface works at 10 Mbit/s after auto-negotiation, the EEE
function does not take effect.
The S6720EI and S6720S-EI do not support the EEE function.
Enabling or disabling EEE on an interface will trigger re-negotiation. During the
negotiation, the interface may change to Down state, which causes short service
interruption. Therefore, determine whether the operation is allowed before you
run this command.
Example
# Enable the EEE function on electrical interface GE0/0/1.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] energy-efficient-ethernet enable
Related Topics
4.2.4 auto speed
4.2.38 negotiation auto
Format
port-auto-sleep enable
Parameters
None
Views
GE interface view, port group view, Ethernet interface view
Default Level
2: Configuration level
Usage Guidelines
The port-auto-sleep enable command enables electrical port dormancy. If this
function is enabled on a port, the port enters the energy-saving mode when no
carrier wave signals are transmitted on the port. When carrier wave signals are
transmitted on the port, the port exits the energy-saving mode. Port sleep does
not affect functioning of the port.
NOTE
This command can be used on electrical interfaces and combo interfaces working as
electrical interfaces.
The port sleeping function is enabled by default on the 2*10GE electrical sub-card
supported by the S5720EI and cannot be disabled.
Example
# Enable the port dormancy function on GigabitEthernet0/0/1.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] port-auto-sleep enable
Function
The set power manage awaken-mode fast command enables the fast awaking
mode to allow the device to restore Layer 2 traffic quickly after exiting the device
sleeping mode.
The undo set power manage awaken-mode fast command disables the fast
awaking mode.
By default, a device cannot restore services quickly after exiting the device
sleeping mode.
NOTE
Format
set power manage awaken-mode fast
undo set power manage awaken-mode fast
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
A device can wake from the deep sleeping state in any of the following conditions:
● A user logs in to the device through the serial port and presses Ctrl+W.
● A user logs in from the awakening port.
● The sleeping time range expires (if a time range is configured).
● A user clicks the mode switching button.
The awaking process takes a relatively long time, and services cannot be restored
quickly. To shorten the awaking time, you can use the set power manage
awaken-mode command to enable the fast awaking mode. This mode enables a
device to restore fast Layer 2 traffic after exiting the device sleeping mode.
Precautions
Before using the set power manage awaken-mode command, run the stp
disable command in the system view to disable STP globally and run the save
command to save the configuration. Loops may occur when STP is disabled;
therefore, monitor the network status to check for loops when using the fast
awaking function.
In a stack, the set power manage awaken-mode fast command cannot enable a
device to fast restore Layer 2 traffic after exiting the device sleeping mode.
However, you can use the undo set power manage awaken-mode fast
command to delete the configuration in standalone mode.
Example
# Enable the fast awaking mode.
<HUAWEI> system-view
[HUAWEI] set power manage awaken-mode fast
Warning: This command will take effect only after disable stp and saving the c
onfiguration. Some service would be affected with this awaken mode after the dev
ice restored from sleep. Continue?[Y/N]:y
Info: Succeeded in setting the configuration.
Format
set power manage cycle cycle-id
undo set power manage cycle
Parameters
Parameter Description Value
cycle-id Sets the interval for The value is an integer that ranges from 1
updating power to 6.
consumption data. ● 1: 15 minutes
● 2: 30 minutes
● 3: 1 hour
● 4: 1 day
● 5: 1 week
● 6: 30 days
Views
System view
Default Level
3: Management level
Usage Guidelines
The average power consumption of a device is the average power consumption
within a period of time. You can use the set power manage cycle command to
set the interval for calculating the average power consumption. To obtain real-
time power consumption, set a short interval.
Example
# Set the interval for updating power consumption data to 15 minutes.
<HUAWEI> system-view
[HUAWEI] set power manage cycle 1
Related Topics
3.6.8 display power manage cycle
Function
The set power manage interval command sets the period during which the
awakening port status is probed continuously.
The undo set power manage interval command restores the default period
during which the awakening port status is probed continuously.
By default, the period is 20 minutes.
NOTE
Format
set power manage interval interval-time
undo set power manage interval
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
When the device does not enter the dormancy state in the specified time range,
the device continuously probes the status of all awakening ports. The device
enters the dormancy state when the device does not probe any awakening port in
Up state within the default 20 minutes. Otherwise, the device continues to probe
the awakening ports status.
If no time range is applied to the device, the device probes the status of all
awakening ports all round the clock. By default, the device enters the dormancy
state when the device does not probe any awakening port in Up state within 20
minutes.
NOTICE
A device enters the dormancy state when the conditions for device dormancy are
met. On the S5700S-28P-LI-AC and S5700S-52P-LI-AC in the S5700S-LI series and
S5700-28P-LI-AC, S5700-28P-LI-DC, S5700-52P-LI-AC, S5700-52P-LI-DC in the
S5700LI series, save the configuration immediately after you run this command.
NOTE
In a stack, the set power manage interval command cannot set the period during which
the awakening port status is detected continuously. However, you can use the undo set
power manage interval command to delete the configuration in standalone mode.
Example
# Set the period during which the awakening port status is probed continuously to
10 minutes.
<HUAWEI> system-view
[HUAWEI] set power manage interval 10
[HUAWEI] quit
<HUAWEI> save
Related Topics
3.6.11 display power manage sleep configuration
Format
set power manage mode mode-id
undo set power manage mode
Parameters
Parameter Description Value
mode-id Specifies the The value is an integer that ranges from 1 to 5:
energy-saving ● 1: indicates the user-defined energy-saving
mode of the mode. This mode is not supported currently.
device.
● 2: indicates the standard energy-saving mode.
● 3: indicates the basic energy-saving mode.
● 4: indicates the deep energy-saving mode.
● 5: indicates the standby energy-saving mode.
NOTE
Only the S5720-16X-PWH-LI supports the standby
energy-saving mode.
Views
System view
Default Level
3: Management level
Usage Guidelines
The set power manage mode command sets the energy-saving mode of the
device.
The device can run in the following energy-saving modes:
● Standard mode
Factory mode and default power saving mode.
● Basic mode
Components not in use are shut down or switched to the sleep mode when
no services are configured or users are not online.
● Deep mode
Power consumption is dynamically adjusted for running services, and
components not in use are shut down or switched to the sleep mode
according to service requirements.
● Standby mode
The device enters the low power consumption mode when it does not need to
provide PoE power to PDs and shuts down all the interfaces except GE0/0/13
and GE0/0/14.
NOTE
● The ALS, EEE, and port dormancy functions are disabled in standard mode by default.
However, the port dormancy function is enabled by default on the 2*10GE electrical sub-
card supported by the S5720EI and cannot be disabled.
● The ALS, EEE, and port dormancy functions are enabled by default in basic or deep
mode.
● The deep mode adds the device dormancy function based on functions of the basic
mode.
● Only the S5720-16X-PWH-LI supports the standby mode. The interfaces that have been
shut down in standby mode cannot be enabled manually using a command. To enable
these interfaces manually, ensure that the switch exits the standby mode.
● Before entering the standby mode, the system forcibly saves the configuration to the
configuration file that is being used by the device.
● The configuration restoration function is not configured in the standby mode. That is,
after the device restarts, the currently configured standby mode of an interface is
automatically restored to the default standard mode.
● On the S5720-16X-PWH-LI XGE0/0/1 and XGE0/0/2, installing optical modules and
configuring the standby mode are mutually exclusive. That is, the two interfaces cannot
have the standby mode configured after they have optical modules installed. When they
work in standby mode, installing optical modules into them will restore them to the
default standard mode or may even restart the device.
After the energy-saving mode is set to basic or deep mode, loopback test on
interfaces is disabled. Therefore, before performing a loopback test, set the
energy-saving mode to standard mode.
NOTE
● The minimum interval between configuring and disabling the standby mode is 15s.
● The standby mode cannot be configured in a stack.
● When the device is switched from the basic or deep mode to the standby mode,
disabling the EEE function may cause interface flapping. Similarly, when the device is
switched from the standby mode to the basic or deep mode, enabling the EEE function
may cause interface flapping.
● Before entering the standby mode, the system forcibly saves the configuration to the
configuration file that is being used by the device.
● The configuration restoration function is not configured in the standby mode. That is,
after the device restarts, the currently configured standby mode of an interface is
automatically restored to the default standard mode.
● On the S5720-16X-PWH-LI XGE0/0/1 and XGE0/0/2, installing optical modules and
configuring the standby mode are mutually exclusive. That is, the two interfaces cannot
have the standby mode configured after they have optical modules installed. When they
work in standby mode, installing optical modules into them will restore them to the
default standard mode or may even restart the device.
Example
# Set the energy-saving mode of the device to basic mode.
<HUAWEI> system-view
[HUAWEI] set power manage mode 3
Warning: Performance of ALS, EEE, Auto sleep will be enabled, and the EEE function may lead to port
flapping. Continue?[Y/N]:y
Info: It will take a few seconds. Please wait...
Related Topics
3.6.9 display power manage mode
Function
The set power manage non-awaken-port command configures a port as a non-
awakening port.
The undo set power manage non-awaken-port command restores a non-
awakening port to be an awakening port.
By default, all ports are awakening ports.
NOTE
Format
set power manage non-awaken-port interface { interface-type interface-
number1 [ to interface-type interface-number2 ] } &<1-10>
undo set power manage non-awaken-port interface { interface-type interface-
number1 [ to interface-type interface-number2 ] } &<1-10>
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
You can use the set power manage non-awaken-port command to configure
some ports as non-awakening ports so that these ports do not affect device
dormancy and awakening. This is because device dormancy and awakening
depend on the awakening port status.
NOTICE
A device enters the dormancy state when the conditions for device dormancy are
met. On the S5700S-28P-LI-AC and S5700S-52P-LI-AC in the S5700S-LI series and
S5700-28P-LI-AC, S5700-28P-LI-DC, S5700-52P-LI-AC, S5700-52P-LI-DC in the
S5700LI series, save the configuration immediately after you run this command.
NOTE
In a stack, the set power manage non-awaken-port command cannot configure a port as
a non-awakening port. However, you can use the undo set power manage non-awaken-
port command to delete the configuration in standalone mode.
Example
# Configure interfaces GigabitEthernet0/0/1 to GigabitEthernet0/0/5 as non-
awakening interfaces.
<HUAWEI> system-view
[HUAWEI] set power manage non-awaken-port interface gigabitethernet 0/0/1 to gigabitethernet
0/0/5
Info: Succeeded in setting the configuration.
[HUAWEI] quit
<HUAWEI> save
Related Topics
3.6.11 display power manage sleep configuration
Function
The sleep time-range command applies a time range to the device in dormancy
state.
NOTE
Format
sleep time-range timerange-name
undo sleep time-range timerange-name
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
A device on an enterprise network is not used at certain time. You can apply a
time range to the device in dormancy mode to save power. When dormancy
conditions are met, the device automatically enters the dormancy state during the
time range. When the time range expires, the device is awakened.
When an awakening interface detects a user, the device in dormancy mode is
awakened. User services on the device are not affected.
The device enters the sleeping mode when the following conditions are met:
● The device works in deep mode. By default, the standard energy-saving mode
is used.
● A time range applies to the device in sleeping mode.
● During the period for continuously detecting awakening port status, the
terminals (switches or PCs) connected to awakening ports are shut down.
NOTE
If the terminal is a PC, the device can enter the dormancy state only when the PC is
shut down and its network adapter is powered off (this can be set in the power
management module of BIOS).
Prerequisites
● The energy-saving mode of the device has been set to deep mode using the
3.6.18 set power manage mode command.
● A time range has been specified using the 14.1.26 time-range command.
NOTICE
A device enters the dormancy state when the conditions for device dormancy are
met. On the S5700S-28P-LI-AC and S5700S-52P-LI-AC in the S5700S-LI series and
S5700-28P-LI-AC, S5700-28P-LI-DC, S5700-52P-LI-AC, S5700-52P-LI-DC in the
S5700LI series, save the configuration immediately after you run this command.
NOTE
In a stack, the sleep time-range command cannot apply a time range to the device in
dormancy state. However, you can use the undo sleep time-range command to delete the
configuration in standalone mode.
Example
# Apply the time range 1:00 to 6:00 am to the device.
<HUAWEI> system-view
[HUAWEI] set power manage mode 4
[HUAWEI] time-range test 1:00 to 6:00 daily
[HUAWEI] sleep time-range test
[HUAWEI] quit
<HUAWEI> save
Related Topics
3.6.18 set power manage mode
14.1.26 time-range
Function
snmp-agent trap enable feature-name spmtrap command enables the trap
function for the SPMTRAP module.
NOTE
Format
snmp-agent trap enable feature-name spmtrap [ trap-name
hwenergydevchangetosleep ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
When the trap function is enabled, the device generates traps during running and
sends traps to the NMS through SNMP. When the trap function is not enabled, the
device does not generate traps and the SNMP module does not send traps to the
NMS.
You can specify trap-name to enable the trap function for one or more events.
Example
# Enable the hwenergydevchangetosleep trap of the SPMTRAP module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name spmtrap trap-name hwenergydevchangetosleep
Related Topics
3.6.12 display snmp-agent trap feature-name spmtrap all
Function
The display poe device command displays information about the device
supporting Power over Ethernet (PoE).
Format
display poe device
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Before using the PoE function, run the display poe device command to check
whether the device supports the PoE function. If the command output is displayed,
the device supports the PoE function.
Example
# Display information about the device supporting PoE.
<HUAWEI> display poe device
slot 0 : PoE
Function
The display poe information command displays PoE running information about
the device.
Format
display poe information [ slot slot-id ]
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
This command displays information including the maximum output power set by
the user, current power consumption, peak power consumption, and power
management mode.
Example
# Display the PoE running information about the device.
<HUAWEI> display poe information
PSE Information of slot 0:
User Set Max Power(mW) : 739200
PoE Power Supply(mW) : 369600
Available Total Power(mW) : 369600
Total Power Consumption(mW): 0
Power Peak Value(mW) :0
Power-Management Mode : auto
Power High Inrush : disable
Port Index Priority : enable
Item Description
Power High Inrush State of power high inrush function, including enabled
and disabled state. By default, the power high inrush
function is in disabled state.
To set the state, run the 3.7.14 poe high-inrush
enable command.
Port Index Priority Whether the device is enabled to power on or off PDs
connected to interfaces based on the interface
numbers. By default, a device powers on or off PDs
connected to interfaces based on the interface
numbers.
To configure this parameter, run the poe power-policy
port-index-priority disable command.
Related Topics
3.7.17 poe max-power
3.7.19 poe power-management
3.7.14 poe high-inrush enable
Function
The display poe power command displays current power information on
interfaces.
Format
display poe power [ slot slot-id | interface interface-type interface-number ]
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
The display poe power command displays information including the current
actual power, maximum output power set for an interface, and class, reference
power, and average power of PDs on the interface.
If this parameter is not specified, the output power of all interfaces on the device
is displayed.
An interface provides 15400 mW power to PDs based on the power class 0 if non-
standard PDs are connected to the interface or forcible power supply is configured
on the interface of the switches except the S5730SI, S5730S-EI, S5720-16X-PWH-
LI-AC, S5720-28X-PWH-LI-AC, and S6720SI. If you run the display poe power
command to check the interface power, the PD class is displayed as 0.
Example
# Display the power information of interfaces on the device whose ID is 0.
<HUAWEI> display poe power slot 0
Codes: REFPW(Reference power), USMPW(User set max power),
CURPW(Current power), PKPW(Peak power), AVGPW(Average power)
Table 3-77 Description of the display poe power slot command output
Item Description
Table 3-78 Description of the display poe power interface command output
Item Description
Item Description
Related Topics
3.7.2 display poe device
3.7.18 poe power
3.7.10 poe enable
Function
The display poe power-state command displays the PoE power supply status of a
device.
Format
display poe power-state [ slot slot-id | interface interface-type interface-
number ]
Parameters
Parameter Description Value
slot slot-id Displays the PoE power The value ranges from 0
supply status of a to 8 if stacking is
specified stack device. configured. The value is
If the parameter is not 0 if stacking is not
specified, the PoE power configured.
supply status of all
devices in a stack system
or the PoE power supply
status of a device in a
non-stack system is
displayed.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
The display poe power-state command displays information including whether
an interface is enabled to check compatibility of non-standard PDs, power supply
status on of an interface, class of PDs on an interface, power supply priority, and
maximum output power of an interface.
Example
# Display the PoE power supply status of GigabitEthernet 0/0/3.
<HUAWEI> display poe power-state interface gigabitethernet 0/0/3
Legacy detect : disable
Table 3-79 Description of the display poe power-state interface command output
Item Description
Item Description
Power status Power supply status of an interface. The status can be:
● Test mode: indicates the testing state.
● Detecting: indicates the detection state.
● Disabled: indicates that PoE is disabled on the
interface.
● Power-deny: indicates that the reference power is
greater than the maximum output power of an
interface.
● Classification overcurrent: indicates that the current
of the PD connected to the interface exceeds the
threshold.
● Unknown: indicates that the class of the PD is
unknown.
● Power overcurrent: indicates that the current of the
PD connected to the interface exceeds the
maximum current of the interface.
● Power-on failed: indicates that the interface fails to
provide power.
● Power-ready: indicates that the interface is ready to
provide power.
● Powering: indicates that the PSE starts to power on
the interface.
● Powered: indicates that the interface is providing
power.
● Overloaded: indicates that the power is overloaded.
● Time-range power-off: indicates that the interface is
in the power-off time range.
● Unstable voltage: indicates that the interface
voltage is unstable.
● Legacy disable: indicates that the PSE does not
check the capability of PDs.
● Class mismatch: indicates that the nterface works in
standard hierarchical power supply mode.
Item Description
Table 3-80 Description of the display poe power-state slot command output
Item Description
Item Description
Item Description
Related Topics
3.7.16 poe legacy enable
3.7.10 poe enable
3.7.25 poe priority
3.7.18 poe power
Function
The display poe-power command displays information about the PoE power
supply.
Format
display poe-power [ slot slot-id ]
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
The display poe-power displays information including the available total PoE
power, percentage of the reserved power, power alarm threshold, and PoE power
module.
If the stack ID is not specified, information about the PoE power supply of all the
stack devices is displayed.
Example
# Display information about the PoE power supply of all the stack member
switches.
<HUAWEI> display poe-power
Slot 0
Total Available PoE Power(mW) : 246400
Reserved PoE Power Percent : 20 %
PoE Power Threshold Percent : 90 %
PoE Power 1
Power Value(mW) : 123200
Type : PSA250-A2
Supported Mode : Redundancy, Balance
PoE Power 2
Power Value(mW) : 123200
Type : PSA250-A2
Supported Mode : Redundancy, Balance
Slot 1
Total Available PoE Power(mW) : 492800
Reserved PoE Power Percent : 20 %
Slot 2
Total Available PoE Power(mW) : 739200
Reserved PoE Power Percent : 20 %
PoE Power Threshold Percent : 90 %
PoE Power 1
Power Value(mW) : 369600
Type : PSA500-A1
Supported Mode : Redundancy, Balance
PoE Power 2
Power Value(mW) : 369600
Type : PSA500-A1
Supported Mode : Redundancy, Balance
Item Description
Total Available PoE Total power that can be provided for PDs.
Power(mW)
Reserved PoE Power Percentage of the reserved power to the total power.
Percent To set the percentage, run the 3.7.23 poe power-
reserved command.
Supported Mode Supported PoE power supply mode. The value can be:
● Redundancy: redundancy backup mode
● Balance: current balance mode
Related Topics
3.7.23 poe power-reserved
3.7.24 poe power-threshold
Function
display snmp-agent trap feature-name poetrap all command displays the
status of all traps on the POETRAP module.
Format
display snmp-agent trap feature-name poetrap all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
After the trap function of a specified feature is enabled, you can run the display
snmp-agent trap feature-name poetrap all command to check the status of all
traps of POETRAP. You can use the snmp-agent trap enable feature-name
poetrap command to enable the trap function of POETRAP.
Prerequisites
SNMP has been enabled. For details, see snmp-agent.
Example
# Display all the traps of the POETRAP module.
<HUAWEI>display snmp-agent trap feature-name poetrap all
------------------------------------------------------------------------------
Feature name: POETRAP
Trap number : 16
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwPoePdConnected on on
hwPoePdDisconnected on on
hwPoePdClassInvalid on on
hwPoePdClassOvercurrent on on
hwPoePowerOff on on
hwPoePowerOn on on
hwPoePdPriorityDifferent on on
hwPoePowerOverUtilizationThreshold
on on
hwPoePowerOverUtilizationThresholdResume
on on
hwPoePowerAbsent on on
hwPoePowerAbsentResume on on
hwPoeRpsPowerOutputAlarm on on
hwPoeRpsPowerOutputAlarmResume on
on
hwPoeCardAbsent on on
hwPoePortFail on on
hwPoePortFailResume on on
Table 3-82 Description of the display snmp-agent trap feature-name poetrap all
command output
Item Specification
Feature name Name of the module that the trap belongs to.
Item Specification
Item Specification
Related Topics
3.7.28 snmp-agent trap enable feature-name poetrap
Format
poe af-inrush enable
undo poe af-inrush enable
Parameters
None
Views
Ethernet interface view, GE interface view, MultiGE interface view, port group view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
Switches that comply with 802.3at cannot power some non-standard PDs that do
not support inrush current. To power these PDs, change the power supply
standards of interfaces from 802.3at to 802.3af.
Precautions
● The poe af-inrush enable command does not take effect on an interface if
the poe force-power command has been executed on the interface.
● The poe af-inrush enable command applies to the scenario where some non-
standard PDs cannot be powered on. After this command is executed, some
PDs requiring high current may be unable to be powered on.
● After running the poe af-inrush enable command, remove non-standard PDs
and then install them so that they can be powered on.
● On the S5730SI, S5730S-EI, S5720-16X-PWH-LI-AC, S5720-28X-PWH-LI-AC,
and S6720SI, the poe af-inrush enable and poe single-class enable
commands are mutually exclusive and cannot be configured on the same
interface.
● In an upgrade to V200R011C10 or later, if the poe af-inrush enable
command is configured in the system view before the upgrade, the poe af-
inrush enable command configuration is automatically generated on all
interfaces after the upgrade.
Example
# Configures the power supply standards of interfaces as 802.3af.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] poe af-inrush enable
Warning: This operation may cause PD to work abnormally. Continue?[Y/N]:y
Function
The poe { at-inrush | pre-bt-inrush | bt-inrush } enable command changes the
power supply mode of interfaces supporting the PoE++ mode.
By default, interfaces supporting the PoE++ mode on devices provide power in PoE
++ mode. That is, the power supply mode is bt-inrush.
NOTE
Only the GE interfaces of S5730SI and S5730S-EI, the GE0/0/1 to GE0/0/12 of S5720-16X-
PWH-LI-AC, the MultiGE interfaces of S5720-28X-PWH-LI-AC, and S6720SI support this
command.
Format
poe { at-inrush | pre-bt-inrush | bt-inrush } enable
Parameters
Parameter Description Value
at-inrush Sets the power supply mode to PoE+. -
Views
MultiGE interface view, GE interface view, port group view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
By default, on the S5720-16X-PWH-LI-AC, S5720-28X-PWH-LI-AC, and S6720SI,
interfaces supporting the PoE++ mode provide power in PoE+ mode. To power the
PDs requiring the standard power supply mode, run the poe at-inrush enable
command. This command changes the power supply mode of the PoE interface to
the PoE+ mode. If most of the parameters supported by the PDs requiring high
power comply with 802.3at, run the poe pre-bt-inrush enable command to
change the power supply mode of these interfaces to PoE++ compatible.
Precautions
● When the poe bt-inrush enable command is configured after the poe af-
inrush enable command is configured in the interface, the poe af-inrush
enable command configuration is automatically overwritten.
● The poe { pre-bt-inrush | bt-inrush } enable and poe single-class enable
commands are mutually exclusive and cannot be configured on the same
interface.
● Changing the power supply mode of a PoE interface will power off the PD
connected to this PoE interface.
● After the power supply mode of an interface is set to bt-inrush, forcible PoE
power supply and PD compatibility check configured on this interface using
the poe force-power and poe legacy enable commands respectively do not
take effect on this interface.
● After the power supply mode of an interface is set to bt-inrush, and the
interface detects that it connects to a non-standard PD, confirm whether this
interface is connected to a PD. If so, run the poe pre-bt-inrush enable
command and the poe legacy enable or poe force-power command to
provide power to this PD.
Example
# Set the power supply mode of GE0/0/1 to PoE+.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
Function
The poe enable command enables the PoE function on an interface.
The undo poe enable command disables the PoE function on an interface.
Format
poe enable
Parameters
None
Views
Ethernet interface view, GE interface view, port group view, MultiGE interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenarios
Before providing power for the PD connected to the interface, ensure the PoE
function on the interface is enabled. IF the PoE function is not enabled, run the
poe enable command to enable the PoE function on the interface.
Precautions
The device only supports PoE power supply on downlink interfaces and does not
support PoE power supply on uplink interfaces.
Example
# Disable the PoE function on GigabitEthernet0/0/3.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/3
[HUAWEI-GigabitEthernet0/0/3] undo poe enable
Related Topics
3.7.5 display poe power-state
The undo poe fast-on enable command disables fast power-on for a PoE
interface.
NOTE
Format
poe fast-on enable
Parameters
None
Views
MultiGE interface view, GE interface view, port group view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
After a PoE switch is powered off and then restarts, interfaces on this device can
be powered on again only after a certain period. As a result, PDs connected to
these interfaces are powered off within this period. To shorten the time during
which the PDs are powered off, you can run the poe fast-on enable command on
the PoE switch. After the PoE switch is powered off and then restarts, PoE
interfaces can rapidly resume power supply to PDs.
Precautions
● This command takes effect only during cold startup of the device.
● The poe fast-on enable command does not generate any configuration but
always takes effect after being executed until the undo poe fast-on enable
command is executed. To determine whether the fast power-on configuration
takes effect, run the display poe power-state command to check the fast-on
field.
Example
# Enable fast power-on for GE0/0/1.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] poe fast-on enable
Warning: This configuration takes effect only after a cold restart. Continue?[Y/N]:y
Function
The poe force-power command enables forcible powering on a PoE interface.
Format
poe force-power
Parameters
None
Views
Ethernet interface view, GE interface view, port group view, MultiGE interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
If the power of the system is sufficient, you can run the poe force-power
command on the interface connected to PDs when the PSE cannot detect the PDs.
Precautions
After the power supply mode of an interface is set to PoE++ using the poe bt-
inrush enable command, the poe force-power command does not take effect on
this interface.
NOTICE
Example
# Enable forcible powering on GigabitEthernet0/0/1.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] poe force-power
Warning: Is there a valid PD connected to this interface? Yes or No?[Y/N]:y
Function
The poe group management enable command enables a PoE device's group
management of PDs.
The undo poe group management enable command disables a PoE device's
group management of PDs.
Format
poe group management enable
Parameters
None
Views
Ethernet interface view, GE interface view, port group view, MultiGE interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
Powering on some PDs may affect other PDs, causing other PDs unable to be
detected by a PoE device. After group management of PDs is enabled, a PoE
device can detect PDs on a per-group basis and power on these PDs in a batch.
Precautions
Example
# Enable group management of PDs on PoE interfaces GE0/0/1 through GE0/0/4.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] poe group management enable
Info: 'Poe group management enable' will be executed on interface GigabitEthernet0/0/1 to
GigabitEthernet0/0/4. Continue?[Y/N]: y
Function
The poe high-inrush enable command configures an interface to allow
generation of the high pulse current during power-on.
The undo poe high-inrush enable command configures an interface not to allow
generation of the high pulse current during power-on.
By default, interfaces do not allow generation of the high pulse current during
power-on.
Format
poe high-inrush enable [ slot slot-id ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
High inrush current is generated when a non-standard PD is powered on. In this
case, the PSE cuts off the power of the PD to protect itself. If the PSE is required to
provide power for the PD, the PSE must allow high inrush current. The high inrush
current may damage device components.
Example
# Enable the device to allow generation of the high pulse current during power-
on.
<HUAWEI> system-view
[HUAWEI] poe high-inrush enable
Related Topics
3.7.3 display poe information
Function
The poe { power-off | power-on } interface command manually powers on or
powers off the PD of an interface.
NOTE
Format
poe { power-off | power-on } interface interface-type interface-number
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenarios
Precautions
When the available power of the device is insufficient and the device cannot
provide power for a new PD, the poe power-on interface command is invalid.
Pre-configuration Tasks
● The power management mode has been in manual mode through running
the 3.7.19 poe power-management command.
● PDs have been connected to the interface.
● The PoE function of the interface has been enabled.
● The classification of the PDs connected to the interface has finished and the
PDs have been ready for being powered on.
Example
# Manually power on PDs connected to GigabitEthernet 0/0/1.
<HUAWEI> system-view
[HUAWEI] poe power-management manual
[HUAWEI] poe power-on interface gigabitethernet 0/0/1
Related Topics
3.7.19 poe power-management
3.7.5 display poe power-state
3.7.4 display poe power
Function
The poe legacy enable command enables the power sourcing equipment (PSE) to
check the compatibility of power devices (PDs).
The undo poe legacy enable command disables the PSE from checking the
compatibility of PDs.
By default, the PSE does not check the capability of PDs.
Format
poe legacy enable
undo poe legacy enable
Parameters
None
Views
Ethernet interface view, GE interface view, port group view, MultiGE interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
After the switch is enabled to check the compatibility of PDs, the switch can
detect and provide power to the PDs that do not comply with the 802.3af or
802.3at standard or the standard PDs that are detected as non-standard PDs
because of the external environment. If compatibility check is disabled, the switch
cannot provide power to the non-standard PDs.
After interfaces are enabled to check the compatibility of PDs, the interfaces can
provide power to both standard and non-standard PDs. This configuration does
not affect the power supply of standard PDs. That is, the interfaces can still
provide power to standard PDs after the poe legacy enable command is
configured.
Precautions
After the power supply mode of an interface is set to PoE++ using the poe bt-
inrush enable command, the poe legacy enable command does not take effect
on this interface.
NOTICE
Example
# Enable GigabitEthernet0/0/1 to check the compatibility of the PD.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] poe legacy enable
Related Topics
3.7.5 display poe power-state
Format
poe max-power max-power [ slot slot-id ]
undo poe max-power [ [ max-power ] slot slot-id ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenarios
When the stacking function is enabled, if the stack ID is not specified, the poe
max-power command is used to set the maximum output power of all member
switches of a stack.
Precautions
● If the maximum output power that you set is smaller than the total power
required by PDs, PDs with lower priority are powered off or cannot be
powered on manually.
● The maximum output power of the device you configured should be smaller
than the remaining power of the device. Otherwise, the configuration may be
invalid.
Example
# Set the maximum output power of the device to 45000 mW.
<HUAWEI> system-view
[HUAWEI] poe max-power 45000 slot 0
Related Topics
3.7.6 display poe-power
3.7.18 poe power
Function
The poe power command sets the maximum output power of an interface.
The undo poe power command restores the default maximum output power of
an interface.
By default, the maximum power of each interface is 30000 mW , except for the
following exceptions: each MultiGE interface of the S5720-14X-PWH-SI-AC
provides a maximum of 90000 mW power; each MultiGE interface of S5720-28X-
PWH-LI-AC, interfaces GE0/0/1 to GE0/0/12 of the S5720-16X-PWH-LI-AC, and
S6720SI provide a maximum of 60000 mW power.
Format
poe power port-max-power
undo poe power
Parameters
Parameter Description Value
Views
Ethernet interface view, GE interface view, port group view, MultiGE interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenarios
The PD negotiation power may be different from the power required by some
non-standard PDs or PDs that cannot be classified. You can run the poe power
command to set the maximum output power of the interface, which prevents
power overload for PDs and saves energy.
Prerequisites
The PoE function has been enabled on the interface using the 3.7.10 poe enable
command.
Example
# Set the maximum output power on GigabitEthernet0/0/1 to 15400 mW.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] poe power 15400
Related Topics
3.7.5 display poe power-state
3.7.17 poe max-power
Function
The poe power-management command sets the power management mode of
the device.
NOTE
Format
poe power-management { auto | manual } [ slot slot-id ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenarios
In automatic power management mode, the device first provides power for the
interfaces with higher priority and powers off the interfaces of lower priority when
the power is insufficient. When the power is sufficient, all interfaces connected to
PDs are powered on. To stop providing power for some interfaces, run the undo
poe enable command to disable the PoE function on the interfaces. If the PoE
function is enabled and disabled frequently, faults may occur on the interfaces. To
prevent the faults, you can set the power management mode to manual mode. In
manual mode, the power-on and power-off of an interface are controlled
manually and not affected by the interface power priority.
Precautions
● If all the interfaces are of the same priority, the power supply priority of the
interface with a smaller interface number is higher in automatic mode.
● You can view the power management mode by running the display poe
information command.
Follow-up Procedures
After setting the power management mode to manual, you need to run the poe
{ power-off | power-on } interface command to manually power on or off the
PDs connected to interfaces of the device. If the device restarts after being
powered off, you need to run the power-on command on the interfaces again to
power on the PDs connected to the interfaces. If the device restarts without being
powered off, you do not need to run the power-on command on the interfaces
again to power on the PDs.
Example
# Set the power management mode of a device to automatic mode.
<HUAWEI> system-view
[HUAWEI] poe power-management auto slot 0
Related Topics
3.7.3 display poe information
Function
The poe power-off time-range command makes a configured PoE power-off
time range effective on an interface.
Format
poe power-off time-range time-range-name
Parameters
Parameter Description Value
Views
Ethernet interface view, GE interface view, port group view, MultiGE interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
The poe power-off time-range command makes a PoE power-off time range set
in the system view effective on an interface. If the current time is within the
specified time range, the PD connected to the interface cannot be powered on.
The undo poe power-off time-range command cancels the configuration. The
time range does not take effect on the PD connected to the interface; however,
the configuration of the time range is still saved.
Pre-configuration Tasks
Before running the poe power-off time-range command, you must ensure a PoE
power-off time range has been configured through running the time-range
command in the system view.
Example
# Configure a PoE power-off time range from 10:00 to 11:00 for PDs connected to
GigabitEthernet0/0/1.
<HUAWEI> system-view
[HUAWEI] time-range PoE 10:00 to 11:00 daily
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] poe power-off time-range PoE
Related Topics
14.1.26 time-range
Function
The poe power-on delay command sets the PoE power supply delay on an
interface.
The undo poe power-on delay command restores the default PoE power supply
delay on an interface.
By default, the PoE power supply delay is 0. That is, the PoE power supply is not
delayed.
Format
poe power-on delay delay-time
undo poe power-on delay
Parameters
Parameter Description Value
Views
Ethernet interface view, GE interface view, port group view, MultiGE interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
To enable the PoE switch to power these non-standard PDs, set the PoE power
supply delay on the appropriate interfaces of the switch so that the switch detects
the maintain power of the PDs after the specified delay.
Precautions
After the PoE power supply delay is configured on an interface, do not replace the
PD connected to this interface within the delay. Otherwise, the new PD cannot
work properly.
Example
# Set the PoE power supply delay to 5 seconds on GigabitEthernet0/0/1.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] poe power-on delay 5
Function
The poe power-policy port-index-priority disable command disables the device
from powering on or off PDs connected to interfaces based on the interface
numbers.
NOTE
Only the S2750EI, S5700LI, S5700S-LI, S5720EI, and S5720HI support this function.
Format
poe power-policy port-index-priority disable [ slot slot-id ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
In automatic power supply management mode, a PoE switch provides power to
PDs connected to interfaces according to the following rules:
1. Preferentially provides power to PDs connected to the interface with a higher
power supply priority.
2. Preferentially provides power to PDs connected to the interface with a smaller
interface number if interfaces have the same power supply priority.
According to the rules, when the PoE power of a device is insufficient and
interfaces connected to PDs have the same power supply priority, the device may
power off PDs connected to the interface with a larger interface number to power
on PDs connected to the interface with a smaller interface number even if these
PDs are connected to the device last.
To prevent this problem, you can run the poe power-policy port-index-priority
disable command to disable the device from powering on PDs connected to
interfaces based on the interface numbers. Subsequently, when the PoE power is
insufficient, the device does not power on the PDs that are connected later
regardless of which interface they are connected to and does not power off the
PDs that have been powered on.
Example
# Disable the device from powering on or off PDs connected to interfaces based
on the port numbers.
<HUAWEI> system-view
[HUAWEI] poe power-policy port-index-priority disable
Function
The poe power-reserved command sets the percentage of the reserved PoE
power against the total PoE power.
The undo poe power-reserved command restores the default percentage of the
reserved PoE power against the total PoE power.
By default, the percentage of the reserved PoE power against the total PoE power
is 20%.
Format
poe power-reserved power-reserved [ slot slot-id ]
undo poe power-reserved power-reserved slot slot-id
undo poe power-reserved [ slot slot-id ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenarios
The device can dynamically allocate power to each interface according to the
power consumption of each interface. The power consumption of a PD keeps
changing when the PD is running. The system periodically calculates the total
power consumption of all the PDs. If the total power consumption exceeds the
upper threshold of the device, the system cuts off the power of the PDs on the
interfaces of low priority to ensure that other PDs can run normally.
Sometimes, however, the power consumption increases sharply and the available
power of the system cannot support the burst increase of power. At this time, the
system has not calculated and found that the total power consumption exceeded
the upper threshold; therefore, the system does not cut off power low-priority
interfaces in time. As a result, the PoE power supply is shut down for overload
protection, and all PDs are powered off.
This problem can be solved by running the poe power-reserved command to set
proper reserved power. When there is a burst increase in power consumption, the
reserved power can support the system running. Then the system has time to
power off interfaces of low priority to ensure stable running of other PDs.
Precautions
● The reserved power should not be set greater than 20%. If the reserved PoE
power is greater than 20% of the total PoE power, the power capacity of the
device is affected.
● To set the maximum output power of a device, run the 3.7.17 poe max-
power command. In this case, the device calculates the reserved power based
on the set maximum output power. If the maximum output power is not set,
the available PoE power is the power provided by the PoE power module.
Example
# Set the percentage of reserved PoE power to the total PoE power to 30%.
<HUAWEI> system-view
[HUAWEI] poe power-reserved 30
Warning: This operation may power off some PDs of slot 0.Continue?[Y/N]:y
Related Topics
3.7.17 poe max-power
3.7.6 display poe-power
Function
The poe power-threshold command sets the alarm threshold of the PoE power
consumption percentage.
The undo poe power-threshold command restores the default alarm threshold of
the PoE power consumption percentage.
By default, the alarm threshold is 90%. That is, an alarm is generated when the
consumed power accounts for 90% of the total power.
Format
poe power-threshold threshold-value [ slot slot-id ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
The poe power-threshold command sets the alarm threshold of the PoE power
consumption percentage. If the total PoE power is 369.6 W and the alarm
threshold is 90%, an alarm is generated when the power consumption is greater
than 332.64 W. When the power consumption falls below 332.64 W, the alarm is
cleared.
Example
# Set the alarm threshold of the PoE power consumption percentage to 80%.
<HUAWEI> system-view
[HUAWEI] poe power-threshold 80
Related Topics
3.7.23 poe power-reserved
Format
poe priority { critical | high | low }
Parameters
Parameter Description Value
Views
Ethernet interface view, GE interface view, port group view, MultiGE interface view
Default Level
2: Configuration level
Usage Guidelines
When the output power of a device is insufficient, the device in automatic power
management mode provides power for the interfaces of the higher power supply
priorities first and cuts off power of the interfaces of the lower power supply
priorities. the S2750EI, S5700LI, S5700S-LI, S5720EI, and S5720HI provide power to
PDs connected to the interfaces in ascending order of interface numbers. Other
series of PoE switches provide power to PDs connected to the interfaces in the
sequence in which PDs are connected to them.
Example
# Set the power supply priority of GigabitEthernet0/0/1 to critical.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] poe priority critical
Related Topics
3.7.19 poe power-management
Format
poe single-class enable
undo poe single-class enable
Parameters
None
Views
Ethernet interface view, GE interface view, port group view, MultiGE interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
By default, a PoE interface works in standard hierarchical power supply mode. If
PoE interfaces provide power to non-standard PDs in standard hierarchical power
supply mode, these PDs cannot initiate power requests using LLDP or CDP and can
only obtain a low power. As a result, these PDs cannot work normally. To address
this issue, run the poe single-class enable command to configure the single-class
power supply mode for PoE interfaces. These non-standard PDs can then initiate
power requests and obtain the standard power supply to work normally.
Precautions
● If a standard PD is connected to the interface, this PD may be unable to work
normally after the poe single-class enable command is run.
● On the S5730SI, S5730S-EI, S5720-16X-PWH-LI-AC, S5720-28X-PWH-LI-AC,
and S6720SI, the poe af-inrush enable and poe single-class enable
commands are mutually exclusive and cannot be configured on the same
interface.
Example
# Configure the single-class power supply mode for GE0/0/1.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] poe single-class enable
NOTE
Format
rps cold-backup [ slot slot-id ]
undo rps cold-backup [ slot slot-id ]
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenarios
S5700LI can use an RPS and its own power modules for power supply. By default,
if a PoE switch connects to an RPS, the RPS and power modules of the switch
supply power to the switch simultaneously. The switch provides 800 W of PoE
power. You can configure the RPS as a backup power supply using the rps cold-
backup command. After you run this command, the switch uses its own power
modules for PoE power supply. If the total power consumption of all PDs
connected to the switch is low, the RPS can be configured as a backup power
supply to save power.
Precautions
● The command is valid only when the RPS has been correctly connected to the
switch and powered on.
● When the AC input voltage is 220 V, the RPS that has one 870 W PoE power
module can provide 800 W PoE power for only one PoE switch. The RPS can
have at most two 870 W PoE power modules configured to provide PoE
power for two PoE switches, 800 W PoE power for each switch.
● When the AC input voltage is 110 V, each 870 W PoE power module can
provide only 400 W PoE power. If you need to use the RPS to provide PoE
power, the RPS must have two 870 W PoE power modules configured and it
can provide only one port to provide 800 W PoE power for one PoE switch.
● If an RPS is not used as a backup power supply, it can provide PoE power
supply to a maximum of two S5700LI switches at the same time.
● When an RPS is configured as a backup power supply, it can provide power
redundancy for a maximum of six switches. If the power modules of a switch
fail, the RPS can provide power supply to the switch immediately to ensure
uninterrupted services. The RPS can ensure seamless power supply switchover
for one switch at a time.
● Switches connected to the same RPS must have the same configuration.
Example
# Set the RPS to the backup PoE power module.
<HUAWEI> system-view
[HUAWEI] rps cold-backup
Warning: The RPS power will change the supply mode! Continue? [Y/N]:y
Info: Succeeded in setting the configuration. This command will take effect only after
RPS has capability for power suppply.
Function
snmp-agent trap enable feature-name poetrap command enables the trap
function for the POETRAP module.
Format
snmp-agent trap enable feature-name poetrap [ trap-name trap-name ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
When the trap function is enabled, the device generates traps during running and
sends traps to the NMS through SNMP. When the trap function is not enabled, the
device does not generate traps and the SNMP module does not send traps to the
NMS.
You can specify trap-name to enable the trap function for one or more events.
Example
# Enable the hwpoepdconnected trap of the POETRAP module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name poetrap trap-name hwpoepdconnected
Related Topics
3.7.7 display snmp-agent trap feature-name poetrap all
Format
display mad [ proxy | verbose ]
Parameters
Parameter Description Value
proxy Displays information about the proxy device. -
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
To check the MAD configuration, run the display mad command. If the verbose
parameter is specified, detailed MAD configuration is displayed, including MAD-
enabled interfaces and interfaces excluded from shutdown.
When MAD in relay mode is configured, you can run the display mad proxy
command on the proxy device to check its MAD configuration.
Example
# Display MAD configuration.
<HUAWEI> display mad
Current MAD domain: 0
MAD direct detection enabled: YES
MAD relay detection enabled: NO
Mad relay detect interfaces configured Interface on which MAD in relay mode
is configured. To configure MAD in
relay mode on an interface, run the
3.8.17 mad detect mode relay
command.
Related Topics
3.8.16 mad detect mode direct
3.8.17 mad detect mode relay
3.8.19 mad exclude
3.8.20 mad relay
Format
display snmp-agent trap feature-name stack all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can use this command to check the status of all stack traps. These traps can
be enabled or disabled using the 3.8.39 snmp-agent trap enable feature-name
stack command.
Example
# Display the status of all stack traps.
<HUAWEI> display snmp-agent trap feature-name stack all
------------------------------------------------------------------------------
Feature name: stack
Trap number : 21
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwStackLinkUp on on
hwStackLinkDown on on
hwStackStandbyChange on on
hwStackSwitchOver on on
hwStackSystemRestart on on
hwStackStackMemberAdd on on
hwStackStackMemberLeave on on
hwStackStackMacChange on on
hwStackLogicStackPortLinkErr on on
hwStackPhyStackPortLinkErr on on
hwPhyStackPortIsDown on on
hwPhyStackPortIsUp on on
hwStackPortConfigureFailed on on
hwStackMemberExceedSpec on on
hwPhyStackPortErrorDown on on
hwPhyStackPortErrorDownRecover on on
hwPhyStackVlanConflict on on
hwStackPortErrorDown on on
hwStackPortErrorDownRecovery on on
hwStackSetUpFailure on on
hwStackAutoConfigFailed on on
Table 3-85 Description of the display snmp-agent trap feature-name stack all
command output
Item Description
Feature name Name of the feature for which the traps are defined.
Item Description
Item Description
Related Topics
3.8.39 snmp-agent trap enable feature-name stack
Function
display snmp-agent trap feature-name mad all command displays the status of
all traps in the MAD module.
Format
display snmp-agent trap feature-name mad all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
After the trap function of the MAD module is enabled using the snmp-agent trap
enable feature-name mad command, you can run the display snmp-agent trap
feature-name mad all command to check the status of all traps in the MAD
module.
Prerequisites
Example
# Display the status of all the traps in the MAD module.
<HUAWEI>display snmp-agent trap feature-name mad all
------------------------------------------------------------------------------
Feature name: MAD
Trap number : 2
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwMadConflictDetect on on
hwMadConflictResume on on
Table 3-86 Description of the display snmp-agent trap feature-name mad all
command output
Item Specification
Feature name Name of the module that the trap belongs to.
Related Topics
3.8.40 snmp-agent trap enable feature-name mad
Function
The display stack command displays information about the member switches in a
stack.
Format
display stack
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
To check stack information, including stack topology and stack member switches,
run the display stack command.
This command can be used only after the stack function is enabled (default
status).
Example
# Display stack information.
<HUAWEI> display stack
Stack mode: Service-port
Stack topology type: Link
Stack system MAC: 0018-82b1-6eb4
MAC switch delay time: 10 min
Stack reserved VLAN: 4093
Slot of the active management port: 0
Slot Role MAC address Priority Device type
-------------------------------------------------------------
0 Master 0018-82b1-6eb4 200 S5700-28P-LI-AC
1 Standby 0018-82b1-6eba 150 S5700-28P-LI-AC
Item Description
Item Description
MAC switch delay time Time after which the system MAC
address of the stack is switched. To
configure this parameter, run the stack
timer mac-address switch-delay
command.
Function
The display stack peers command displays information about the neighbors of a
member switch.
Format
display stack peers
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
To check information about the neighbors of a member switch, run the display
stack peers command.
This command can be used only after the stack function is enabled (default
status).
Example
# Display information about the neighbors of a member switch.
<HUAWEI> display stack peers
Slot Port1 Peer1 Port2 Peer2
---------------------------------------------------------------------------
0 STACK 1 1 STACK 2 None
1 STACK 1 None STACK 2 0
Item Description
Format
display stack port [ brief | slot slot-id ]
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display stack port command to check summary and detailed
information about stack ports.
Example
# Display summary of stack ports on the S5720EI (stack card connection).
<HUAWEI> display stack port brief
PHY :Physical state
Protocol:Stack link protocol state
*down :Administratively down
(r) :Runts trigger error down
(c) :CRC trigger error down
(l) :Link-flapping trigger error down
Stack Port PHY Protocol InUti OutUti InErrors OutErrors
-------------------------------------------------------------------------------
stack-port0/1 up up 0% 0% 0 0
stack-port0/2 up up 0% 0% 0 0
Table 3-89 Description of the display stack port brief command output
Item Description
Item Description
Total Error: 0
CRC: 0, Giants: 0
Jabbers: 0, Fragments: 0
Runts: 0, DropEvents: 0
Alignments: 0, Symbols: 0
Ignoreds: 0
Total Error: 0
Collisions: 0, ExcessiveCollisions: 0
Late Collisions: 0, Deferreds: 0
Buffers Purged: 0
stack-port1/2:
---------------------------------------------
Current state : DOWN
Speed : NA
Total Error: 0
CRC: 0, Giants: 0
Jabbers: 0, Fragments: 0
Runts: 0, DropEvents: 0
Alignments: 0, Symbols: 0
Ignoreds: 0
Total Error: 0
Collisions: 0, ExcessiveCollisions: 0
Late Collisions: 0, Deferreds: 0
Buffers Purged: 0
Table 3-90 Description of the display stack port command output (stack card
connection)
Item Description
Total Error Total number of error packets found by the stack port
during physical layer detection.
Item Description
Late Collisions Number of packets sent by the stack port after a delay
due to conflicts.
Table 3-91 Description of the display stack port command output (service port
connection)
Item Description
Function
The display stack port auto-cable-info command displays information about
dedicated stack cables.
NOTE
Format
display stack port auto-cable-info slot slot-id
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display stack port auto-cable-info command to check interfaces
supporting dedicated stack cables and whether dedicated stack cables have been
connected to interfaces.
Example
# Display information about dedicated stack cables on the switch with the slot ID
0.
<HUAWEI> display stack port auto-cable-info slot 0
Logic Port Phy Port Cable-role
----------------------------------------------------------
stack-port0/1 XGigabitEthernet0/0/1 Slave
stack-port0/1 XGigabitEthernet0/0/2 --
stack-port0/2 XGigabitEthernet0/0/3 --
stack-port0/2 XGigabitEthernet0/0/4 Master
NOTE
Format
display stack port speed
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display stack port speed command to check the stack port's
current working speed and working speed taking effect after a restart. To set the
stack port working speed, run the stack port speed command.
Example
# Display the stack port's current working speed and working speed taking effect
after a restart.
<HUAWEI> display stack port speed
Stack Port Current Speed Next Speed
------------------------------------------------------
stack-port2/1
XGigabitEthernet2/0/1 10G 12G
stack-port2/2
XGigabitEthernet2/0/4 10G 12G
stack-port3/1
XGigabitEthernet3/0/1 10G 12G
XGigabitEthernet3/0/3 10G 12G
stack-port3/2
XGigabitEthernet3/0/28 10G 12G
XGigabitEthernet3/0/30 10G 12G
Table 3-93 Description of the display stack port speed command output
Item Description
Function
The display stack-port load-balance command displays the load balancing
modes of stack ports.
NOTE
Format
display stack-port { global load-balance | load-balance [ slot-id/port-id ] }
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display stack-port load-balance command to check the load
balancing modes of stack ports and then locate data transmission failures
between stack links.
Example
# Display the load balancing modes of stack ports.
<HUAWEI> display stack-port load-balance
Global load balance mode: ENHANCED
Interface stack-port0/1 load balance mode: ENHANCED
Interface stack-port0/2 load balance mode: ENHANCED
Interface stack-port1/1 load balance mode: DST-MAC
Interface stack-port1/2 load balance mode: SRC-MAC
Interface stack-port2/1 load balance mode: DST-IP
Interface stack-port2/2 load balance mode: SRC-DST-IP
Format
display stack configuration [ slot slot-id ]
Parameters
Parameter Description Value
slot slot-id Displays the stack commands The value range depends
configured on a stack member switch. on the device
slot-id specifies the stack ID of the configuration.
member switch.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
When a new device joins a stack, you can run this command to check which stack
commands have been configured in the stack. You can then modify parameter
settings in these commands and issue these commands to the new device in
sequence. During command execution, you may need to restart the device or
confirm your operation as prompted.
Precautions
● This command is valid only when the stack function is enabled and has taken
effect. By default, the stack function is enabled.
● This command displays only the stack commands that have been executed.
The displayed command configuration is not necessarily the running stack
configuration, because most stack configuration commands take effect after a
system restart.
Example
# Display the stack configuration commands that have been executed in a stack.
<HUAWEI> display stack configuration
* : Invalid-configuration
# : Unsaved configuration
---------------Configuration on slot 2
Begin---------------
stack enable
stack slot 0 renumber 2
stack slot 2 priority 150
stack reserved-vlan 4093
stack timer mac-address switch-delay 10
Function
The display stack channel all command displays stack link connections and
status.
Format
display stack channel [ all | slot slot-id ]
Parameters
slot slot-id Displays stack link connections and status The value range depends
of the member switch with a specified on the device
stack ID. configuration.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
To check stack link connections and status, run the display stack channel all
command. If you do not specify all or slot slot-id in the command, this command
displays the stack link connections and status of the master switch.
Example
# Display stack link connections and status of all the member switches.
<HUAWEI> display stack channel all
! : Port have received packets with CRC error.
L-Port: Logic stack port
P-Port: Physical port
Slot L-Port P-Port Speed State || P-Port Speed State L-Port Slot
-------------------------------------------------------------------------------
1 1/2 GE1/0/28 2.5G UP GE2/0/27 2.5G UP 2/1 2
2 2/1 GE2/0/27 2.5G UP GE1/0/28 2.5G UP 1/2 1
------------------------------------------------------------------------------
The following output information shows that the physical member port GE1/0/28
works at 2.5 Gbit/s and is in Up state; it is bound to stack port 1/2 and belongs to
the member switch with stack ID 1; GE1/0/28 is connected to the physical member
port GE2/0/27; GE2/0/27 works at 2.5 Gbit/s and is in Up state; It is bound to
stack port 2/1 and belongs to member switch with stack ID 2.
1 1/2 GE1/0/28 2.5G UP GE2/0/27 2.5G UP 2/1 2
Item Description
Function
The display upgrade area command displays area status and whether a smooth
upgrade can start.
Format
display upgrade area
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
If the stack topology changes after the areas for smooth upgrade are divided,
members in the active and backup areas may change, resulting in a smooth
upgrade failure. To check whether a smooth upgrade can start in these areas, run
the display upgrade area command.
If the areas fail the check, re-define the active and backup areas according to the
current stack topology.
Example
# Display the current area status and whether a smooth upgrade can start.
<HUAWEI> display upgrade area
Slot Area Upgrade-Check
------------------------------------
0 backup passed
3 active passed
4 active passed
8 active passed
Item Description
Item Description
Format
display upgrade state [ slot slot-id ]
Parameters
Parameter Description Value
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
To check the status of member switches in the active and backup areas before or
after a smooth upgrade, run the display upgrade state command.
If you specify the slot slot-id parameter in the command, you can check whether
the member switch with this slot ID has been upgraded successfully.
If the master switch of a stack restarts or experiences a master/standby switchover
after a smooth upgrade, area information will be deleted from the master switch,
and the Area field of the master switch will be displayed as unknown.
Example
# Display the smooth upgrade status of member switches in a stack.
<HUAWEI> display upgrade state
Slot Area Status
-----------------------------
0 backup backup rebooting
3 backup backup rebooting
4 active backup rebooting
8 active backup rebooting
# Display the smooth upgrade status of the member switch with stack ID 4.
<HUAWEI> display upgrade state slot 4
--------------------------------------
Slot :4
Area : backup
Status : successful
ErrorCode : -
Description : -
--------------------------------------
Item Description
Function
The interface stack-port command displays the stack port view.
NOTE
Format
interface stack-port member-id/port-id
Parameters
Parameter Description Value
member-id Specifies the stack ID of a The value is an integer that
member switch. ranges from 0 to 8.
Views
System view
Default Level
3: Management level
Usage Guidelines
Each member switch has two stack ports, which are named Stack-Portn/1 and
Stack-Portn/2. n specifies the stack ID of a member switch. After you run the
interface stack-port command to enter the view of a stack port, you can
configure attributes for the stack port.
Example
# Display the view of Stack-Port1/1.
<HUAWEI> system-view
[HUAWEI] interface stack-port 1/1
[HUAWEI-stack-port1/1]
Function
The mad detect mode direct command configures multi-active detection (MAD)
in direct mode on an interface.
Format
mad detect mode direct
Parameters
None
Views
GE interface view, XGE interface view, 40GE interface view, port group view,
MultiGE interface view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
To ensure that only one switch becomes the master switch after a stack splits,
thereby enhancing stack stability, run the mad detect mode direct command to
configure MAD in direct mode on an interface.
Configuration Impact
Configuring MAD in direct mode on an interface blocks the interface. Disabling
MAD in direct mode on an interface restores the forwarding function of the
interface. If a loop exists on the network, a broadcast storm occurs.
Precautions
The undo mad detect command is not supported in the port group view. You can
only run the undo mad detect mode direct command in the port group view to
disable MAD in direct mode.
Example
# Configure MAD in direct mode on GigabitEthernet0/0/1.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] mad detect mode direct
Warning: This command will block the port, and no other configuration running on
this port is recommended. Continue? [Y/N]:y
Related Topics
3.8.2 display mad
Format
mad detect mode relay
Parameters
None
Views
Eth-Trunk interface view, port group view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
To ensure that only one switch becomes the master switch after a stack splits,
thereby enhancing stability of the stack, run the mad detect mode relay
command to configure MAD in relay mode on an Eth-trunk.
Precautions
The undo mad detect command is not supported in the port group view. You can
only run the undo mad detect mode relay command in the port group view to
disable MAD in relay mode.
Example
# Configure MAD in relay mode on Eth-Trunk 10.
<HUAWEI> system-view
[HUAWEI] interface eth-trunk 10
[HUAWEI-Eth-Trunk10] mad detect mode relay
Related Topics
3.8.2 display mad
Function
The mad domain command sets a MAD domain ID for a stack.
The undo mad domain command restores the default MAD domain ID for a
stack.
Format
mad domain domain-id
undo mad domain
Parameters
Parameter Description Value
domain-id Specifies the MAD domain ID for The value is an integer that
a stack. ranges from 0 to 255.
Views
System view
Default Level
2: Configuration level
Usage Guidelines
In most MAD scenarios, configuring a MAD domain ID for a stack is unnecessary.
When two stack systems function as a proxy of each other to implement MAD,
configure different MAD domain IDs for the stack systems.
Example
# Set the MAD domain ID for a stack to 1.
<HUAWEI> system-view
[HUAWEI] mad domain 1
Related Topics
3.8.2 display mad
Format
mad exclude interface { interface-type interface-number1 [ to interface-type
interface-number2 ] } &<1-10>
Parameters
Parameter Description Value
interface { interface- Specifies the type and number of an The value of
type interface- interface: interface-number2
number1 [ to must be larger
interface-type ● interface-type specifies the type
of the interface. than that of
interface-number2 ] } interface-number1.
● interface-number1 specifies the
number of the first interface.
● interface-number2 specifies the
number of the second interface.
Views
System view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
If MAD detects a stack split, all service ports of the member switch that fails
master switch election must be shut down to prevent network flapping caused by
MAC or IP address flapping. If some interfaces only transparently transmit packets,
they do not affect network operation in a dual-active condition. You can run the
mad exclude command to exclude these interfaces from shutdown before a stack
split occurs.
Precautions
● After an interface is shut down because of MAD, it cannot be enabled if the
mad exclude command is executed to exclude it from shutdown.
● When the to parameter is specified to exclude multiple ports from shutdown,
these ports must reside on the same card and the port number following this
parameter must be larger than the port number followed by this parameter.
Example
# Exclude GigabitEthernet0/0/2 and GigabitEthernet0/0/3 from shutdown.
<HUAWEI> system-view
[HUAWEI] mad exclude interface gigabitethernet 0/0/2 to gigabitethernet 0/0/3
Related Topics
3.8.2 display mad
Format
mad relay
undo mad relay
Parameters
None
Views
Eth-Trunk interface view, port group view
Default Level
2: Configuration level
Usage Guidelines
For MAD working in relay mode, run the mad relay command to configure the
relay function on an Eth-Trunk interface of a proxy device. Member interfaces of
the Eth-Trunk interface exchange MAD packets between member switches.
Example
# Enable the relay function on Eth-Trunk 10 of a proxy device.
<HUAWEI> system-view
[HUAWEI] interface eth-trunk 10
[HUAWEI-Eth-Trunk10] mad relay
Format
mad restore
Parameters
None
Views
System view
Default Level
2: Configuration level
Usage Guidelines
When MAD detects a multi-active event, the member switch elected as the master
switch remains in the Detect state. The elected standby switch enters the Recovery
state, shuts down all its service ports except those excluded from shutdown, and
stops forwarding service packets.
If the switch in the Detect state fails or is removed before the split stack is
restored, run the mad restore command on the switch in the Recovery state to
restore the interfaces in shutdown state. The switch in the Recovery state then
goes to the Detect state. You can then restore the original switch in the Detect
state and rectify the faulty stack links. After the faults are rectified, the two
switches form a stack again.
Example
# Restore all the blocked interfaces of the standby switch that enters the Recovery
state after its stack splits.
<HUAWEI> system-view
[HUAWEI] mad restore
NOTE
Only the switches supporting service port stacking support this command.
Format
port interface { interface-type interface-number1 [ to interface-type interface-
number2 ] } &<1-10> enable
Parameters
Parameter Description Value
interface-type Specifies the type and number of an The value of
interface-number1 interface: interface-number2
[ to interface-type must be larger
interface-number2 ] ● interface-type specifies the type
of the interface. than that of
interface-number1.
● interface-number1 specifies the
number of the first interface.
● interface-number2 specifies the
number of the second interface.
Views
Stack interface view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In service interface connection mode, run the port interface enable command to
configure a service interface as a physical member port to implement the stack
function.
Configuration Impact
A stack physical member port supports only stack-related functions, and other
functions cannot be configured on the interface. All the commands irrelevant to
the stack function are masked in the interface view, and only basic configuration
commands, such as 4.1.4 description (interface view), are retained.
After configuring a service port of a switch as a physical stack member port, you
are advised to save the configuration if this service port has been referenced by
other commands. Otherwise, the commands that reference this service port may
be retained after the switch restarts.
On the S5720SI, S5720S-SI, S5730SI, S5730S-EI, S6720LI, S6720S-LI, S6720SI, and
S6720S-SI, the electrical or optical port stack configuration on the front panel is
mutually exclusive with the SVF client mode configuration. If electrical or optical
ports on the front panel have been configured as stack physical member ports,
SVF management VLAN cannot be configured. If an SVF management VLAN has
been configured, electrical or optical ports on the front panel cannot be
configured as stack physical member ports.
On the S6720EI and S6720S-EI, every four of XGE interfaces from the left are
added to one group. For example, XGE interfaces numbered 1 to 4 can be added
to one group, but XGE interfaces numbered 2 to 5 cannot. That is, the number of
the last XGE interface in each group must be the multiple of 4. If you configure
any interface in each group as a physical member port, configurations on the
other three interfaces in the group will be lost and the three interfaces cannot be
used as service ports.
Precautions
Example
# Configure XGigabitEthernet0/0/28 as a physical member port and add it to stack
port 0/1.
<HUAWEI> system-view
[HUAWEI] interface stack-port 0/1
[HUAWEI-stack-port0/1] port interface xgigabitethernet 0/0/28 enable
Warning: Enabling stack function may cause configuration loss on the interface. Continue? [Y/N]:y
Info: This operation may take a few seconds. Please wait.......
Related Topics
3.8.15 interface stack-port
Function
The reset stack configuration command clears all stack configuration. That is,
this command restores the default stack configuration.
NOTE
Format
reset stack configuration
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
When switches are stacked using dedicated stack cables, to ensure that slot IDs
are automatically generated for the switches based on the sequence in which
dedicated stack cables are connected, run the reset stack configuration
command to clear all stack configuration.
The cleared stack configuration includes: switch slot ID, stack priority, stack
reserved VLAN, stack MAC address switching delay, stack port configuration, and
stack port rate configuration.
Precautions
Running this command will cause the stack to split and member switches to
restart.
Example
# Clear all stack configuration.
<HUAWEI> system-view
[HUAWEI] reset stack configuration
Warning: This operation will clear all stack configurations and may lead to the loss of the slot ID
configuration and cause the device to reset immediately. Are you sure you want to continue? [Y/N]:y
Format
reset stack port statistics [ slot-id/port-id ]
Parameters
Parameter Description Value
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
Before collecting interface traffic statistics in a certain period of time, run the
reset stack port statistics command to clear existing traffic statistics. If you do
not specify the port number, statistics on all stack ports are cleared. If you specify
the port number, only statistics on the specified port are cleared.
Precautions
The cleared statistics cannot be restored. Therefore, exercise caution when you run
the reset stack port statistics command.
This command can be used only after the stack function is enabled (default
status).
Example
# Clear the statistics from all stack ports.
<HUAWEI> reset stack port statistics
Function
The reset stack-port configuration command clears the service port stack
configuration.
NOTE
Format
reset stack-port configuration [ slot slot-id ]
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
● When the current stack connection mode is service port connection, you must
run the reset stack-port configuration command to clear the existing service
port stack configuration before changing the stack connection mode to stack
card connection. After the configuration is cleared, restart the stack and then
the stack card connection mode takes effect.
● If the current stack connection mode is stack card connection, you can run the
reset stack-port configuration command to clear the service port stack
configuration if such configuration already exists. You can run the 3.8.11
display stack configuration command to check the existing service port
stack configuration.
Precautions
● In service port connection mode, after clearing the service port stack
configuration of a member switch, restart the switch to make the
configuration take effect. If you perform the service port stack configuration
on the member switch before restarting, the service port stack configuration
on the member switch is not cleared.
● When the stack is changed from service port connection to stack card
connection, remove the cables connected to service ports to prevent potential
loops.
Example
# Clear the service port stack configuration.
<HUAWEI> system-view
[HUAWEI] reset stack-port configuration
Related Topics
3.8.11 display stack configuration
Function
The save stack configuration command saves the stack configuration
automatically generated for dedicated cable stacking to the flash memory.
NOTE
Format
save stack configuration
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
Precautions
● Removing dedicated stack cables from ports after this command is executed
will cause these ports unable to automatically become service ports.
● No stack configurations can be manually modified before the stack
configuration automatically generated for dedicated cable stacking is saved to
the flash memory.
Example
# Save the stack configuration that is automatically generated for dedicated cable
stacking to the flash memory.
<HUAWEI> system-view
[HUAWEI] save stack configuration
Warning: This operation will save all stack configurations to flash. Are you sure you want to continue? [Y/
N]:y
Function
The set l2-traffic fast-recover enable command enables fast recovery of Layer 2
traffic.
The undo set l2-traffic fast-recover enable command disables fast recovery of
Layer 2 traffic.
Format
set l2-traffic fast-recover enable
Parameters
None
Views
System view
Default Level
2: Configuration level
Usage Guidelines
After fixed switches set up a stack and the standby switch starts, the standby
switch restores configurations and then implements batch backup from the master
switch.
Example
# Enable fast recovery of Layer 2 traffic.
<HUAWEI> system-view
[HUAWEI] set l2-traffic fast-recover enable
Function
The shutdown interface command shuts down a physical member interface.
NOTE
Format
shutdown interface { interface-type interface-number1 [ to interface-type
interface-number2 ] } &<1-10>
Parameters
Views
Stack interface view
Default Level
3: Management level
Usage Guidelines
To restore a physical member interface to being a service interface, run the
shutdown interface command in the stack interface view and then run the undo
port interface enable command.
If there is only one available link on a stack interface, running the shutdown
interface command will change the stack status or split the stack. After you run
the undo shutdown interface command on the stack interface, the stack will be
set up again when a link on the stack interface becomes available.
Example
# Shut down physical member interface XGigabitEthernet0/0/3.
<HUAWEI> system-view
[HUAWEI] interface stack-port 0/1
[HUAWEI-stack-port0/1] shutdown interface XGigabitEthernet0/0/3
Info: This operation may take a few seconds. Please wait...succeeded.
Function
The stack authentication command configures the authentication mode and
authentication information used when a switch needs to join a stack.
The undo stack authentication command deletes the authentication mode and
authentication information used when a switch needs to join a stack.
Format
stack authentication slot slot-id { mac mac-address | esn esn-value }
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
A switch can join a stack without being authenticated. In this situation, an
attacker can add any switch to a stack to obtain the configuration file of the stack
master switch, resulting in information leak. To solve this problem, configure
authentication when a switch needs to join a stack. This configuration ensures
that this switch joins the stack only when it is authenticated successfully.
A switch will be authenticated only when its stack ID is the same as that specified
in the stack authentication command. Otherwise, this switch can join a stack
without being authenticated. Therefore, before adding a switch to a stack, you are
advised to change the slot ID of the switch to an unused stack ID in the stack and
then configure an authentication mode for this stack ID.
Precautions
● This command can be executed only after the stacking function is enabled.
● Only one authentication mode can be configured for a stack ID, and the latest
configuration takes effect.
● If a switch to join a stack fails the authentication, this switch will restart
repeatedly.
Example
# Configure MAC-based authentication to be used when a switch with the stack
ID 4 needs to join a stack.
<HUAWEI> system-view
[HUAWEI] stack authentication slot 4 mac-address 3-3-3
Format
stack led enable [ duration duration-value ]
Parameters
Parameter Description Value
Views
All views
Default Level
2: Configuration level
Usage Guidelines
Stack IDs can be allocated by the master switch when a stack is set up, or you can
configure them yourself. If stack IDs are allocated by the master switch, you
cannot identify which ID a device maps to. To enable a service port indicator to
indicate the stack ID of a stack switch, run the stack led enable command.
The configuration of this command becomes invalid when port indicators show
stack IDs of member switches for the specified time.
Example
# Enable a service port indicator to indicate the stack ID of a stack device for a
period of 30s.
<HUAWEI> stack led enable duration 30
Function
The stack-port load-balance mode command sets a load balancing mode for the
physical member ports of a stack port.
The undo stack-port load-balance mode command restores the default load
balancing mode.
NOTE
Format
stack-port load-balance mode { dst-ip | dst-mac | src-dst-ip | src-dst-mac | src-
ip | src-mac }
Parameters
Parameter Description Value
Views
System view
Logical stack port view (The S5720HI does not support the stack-port load-
balance mode command in this view.)
Default Level
3: Management level
Usage Guidelines
Use Scenario
To transmit traffic from a stack port to a destination over different links, run the
stack-port load-balance mode command to configure an appropriate load
balancing mode for the physical member ports of the stack port. Outgoing traffic
is then properly balanced among the physical links, preventing congestion on
these links. If you run this command multiple times to set different load balancing
modes, the last configuration takes effect. The load balancing mode configured in
the system view takes effect globally, and the load balancing mode configured in
a stack port view takes effect only on the specified stack port. You can run the
display stack-port command to view the load balancing mode on a stack port.
Precautions
● If a non-default load balancing mode is configured on a stack port, the
configured load balancing mode takes effect. If a stack port uses the default
load balancing mode and the global load balancing mode is not the default
one, the global load balancing mode takes effect.
● If the source MAC address-based load balancing mode is used, Layer 3
packets forwarded to a downstream device may fail to be balanced among
the stack links because the source MAC address of the packets is the fixed
system MAC address. If the traffic rate exceeds the bandwidth of a single
stack link, some packets may be dropped.
Example
# Set the global load balancing mode to src-ip.
<HUAWEI> system-view
[HUAWEI] stack-port load-balance mode src-ip
NOTE
Format
stack port speed { 48G | 12G | 2.5G }
undo stack port speed
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
On the S5710-X-LI, S5700S-X-LI, S5720SI, S5720S-SI, S5720-P-LI, S5720-X-LI, and
S5720S-X-LI, if optical ports are used as stack member ports and are connected
using 1 m or 3 m SFP+ passive copper cables, you can use this command to
increase their working speed from 10 Gbit/s to 12 Gbit/s, expanding the stack
bandwidth. After their working speed is increased to 12 Gbit/s, switches using
these ports cannot set up a stack with switches using ports with the working
speed 10 Gbit/s.
On the S5730SI, S5730S-EI, S6720LI, S6720S-LI, S6720SI, and S6720S-SI, if 40GE
optical ports are used as stack member ports and are connected using 1 m, 3 m or
5m QSFP+ passive copper cables, you can use this command to increase their
working speed from 40 Gbit/s to 48 Gbit/s, expanding the stack bandwidth. After
their working speed is increased to 48 Gbit/s, switches using these ports cannot
set up a stack with switches using ports with the working speed 40 Gbit/s.
On the S6720SI, only the rate of 40GE interfaces on the front panel can be
increased to 48 Gbit/s.
If S5720-P-LI, S5720-X-LI and S5720S-X-LI switches use XGE optical ports to stack
with other switches that have GE optical ports, use this command to reduce the
working speed of the XGE optical ports from 10 Gbit/s to 2.5 Gbit/s, so that the
XGE optical ports can work with the remote GE optical ports.
Precautions
After changing the working speed of stack member ports, you need to restart the
switch for the new speed to take effect.
Example
# Set the working speed of stack member ports to 12 Gbit/s.
<HUAWEI> system-view
[HUAWEI] stack port speed 12G
Function
The stack port { crc | link-flap } trigger command sets the stack port error-down
parameters.
The undo stack port { crc | link-flap } trigger command restores the default
settings of the stack port error-down parameters.
By default, the error-down alarm threshold is 10 times per minute, the error-down
check interval is 3 minutes, and the alarm clearance interval is 0 (not cleared
automatically).
Format
stack port { crc | link-flap } trigger { threshold threshold | interval interval } *
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
After the stack port error-down function is enabled, you can run the stack port
{ crc | link-flap } trigger command to adjust the related parameters.
Example
# Set the clearance interval of stack port error-down alarms triggered by CRC
errors to 3 minutes. That is, if the rate of received CRC error packets stays below
the threshold for 3 minutes, the stack port changes to Up state and the error-
down alarm is cleared.
<HUAWEI> system-view
[HUAWEI] stack port crc trigger error-down auto-recovery-interval 3
Format
stack port { crc | link-flap } trigger error-down
undo stack port { crc | link-flap } trigger error-down
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In a stack system, if a stack port continuously receives CRC error packets or flaps
between Up and Down states, the corresponding stack link cannot forward traffic
normally, thereby affecting network services. This command enables the stack port
error-down function. This function can shut down a stack port and switch traffic to
other stack links if the rate of received CRC error packets or the number of Up/
Down transitions on the stack port reaches the specified threshold, reducing the
impact on services. Additionally, the system generates stack port error-down
alarms to help in fault location.
Follow-up Procedure
Run the stack port { crc | link-flap } trigger command to set stack port error-
down parameters.
Precautions
● When one end is a stack port and the other end is a service port, the system
does not set the stack port to error-down state or generate an error-down
alarm even if this stack port continuously receives CRC error packets.
● The stack port error-down alarm OID is 1.3.6.1.4.1.2011.5.25.183.1.22.59.
● The stack port error-down alarm clearance OID is
1.3.6.1.4.1.2011.5.25.183.1.22.60.
Example
# Enable stack port error-down triggered by CRC errors.
<HUAWEI> system-view
[HUAWEI] stack port crc trigger error-down
Function
The stack reserved-vlan command configures a reserved VLAN for a stack.
Format
stack reserved-vlan vlan-id
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
By default, a stack uses VLAN 4093 as the reserved VLAN. A reserved VLAN is used
only to exchange stack protocol packets.
NOTICE
If the reserved VLAN is used for other services, the stack cannot be set up. You
must specify an unused VLAN as the reserved VLAN for a stack.
Example
# Configure VLAN 4000 as the reserved VLAN of a stack.
<HUAWEI> system-view
[HUAWEI] stack reserved-vlan 4000
Function
The stack slot priority command sets a stack priority for a member switch in a
stack.
Format
stack slot slot-id priority priority
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
To set a stack priority for a member switch in a stack, run the stack slot priority
command. A larger priority indicates a higher priority, meaning that a switch is
more likely to be selected as a master switch.
Example
# Set the stack priority of the member switch with stack ID 4 to 150.
<HUAWEI> system-view
[HUAWEI] stack slot 4 priority 150
Warning: Please do not frequently modify Priority because it will make the stack split. Continue? [Y/N]:y
Related Topics
3.8.5 display stack
Format
stack slot slot-id renumber new-slot-id
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
To change the stack ID of a member switch in a stack, run the stack slot
renumber command.
NOTE
● After changing the stack ID of a switch, if you do not restart the switch, the switch continues
to use the original stack ID, and all physical resources are identified by the original stack ID.
● After changing the stack ID of a switch, if you save the current configuration and restarts the
switch, the new stack ID takes effect and all physical resources are identified by the new
stack ID. In the configuration file, only the global stack configuration and stack priority of
the switch continue to take effect. All other configurations related to the old stack ID (such
as interface configuration) become invalid and must be reconfigured.
Example
# Change the stack ID of a member switch from 4 to 5.
<HUAWEI> system-view
[HUAWEI] stack slot 4 renumber 5
Warning: All the configurations related to the slot ID will be lost after the slot ID is modified.
Please do not frequently modify slot ID because it will make the stack split. Continue? [Y/N]:y
Info: Stack configuration has been changed, and the device needs to restart to make the configuration
effective.
Related Topics
3.8.5 display stack
NOTICE
When a stack is configured to switch the system MAC address immediately, the
system begins using the MAC address of the new master switch the moment the
previous master switch fails or leaves the stack. This may cause protocols such as
LACP and STP to flap, thereby affecting services.
Format
stack timer mac-address switch-delay delay-time
undo stack timer mac-address switch-delay
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
When a member switch leaves a stack, if you specify the MAC address of the
leaving switch as the stack MAC address and it does not rejoin the stack within
the time specified by delay-time, the master switch changes the stack MAC
address to its own MAC address.
The stack MAC address switchover delay time of any member switch in a stack is
the same as that of the master switch.
If the value of the MAC address switchover timer is set to 0, no stack MAC address
switchover will be performed.
This command can be used only after the stack function is enabled (default
status).
Example
# Set the MAC address switchover delay of the local switch to 4 minutes.
<HUAWEI> system-view
[HUAWEI] stack timer mac-address switch-delay 4
Warning: Please do not frequently modify MAC switch time because it will make the stack split. Continue?
[Y/N]:y
Format
snmp-agent trap enable feature-name stack [ trap-name trap-name ]
undo snmp-agent trap enable feature-name stack [ trap-name trap-name ]
Parameters
Parameter Description Value
trap-name Specifies the This parameter has enumerated values:
trap-name name of a
trap. ● hwphystackporterrordown: An Error-down event
occurred on a physical member port that was
added to a logical stack port.
● hwphystackporterrordownrecover: The physical
member port that was added to a logical stack
port recovered from the Error-down state.
● hwphystackportisdown: The physical member port
was Down.
● hwphystackportisup: The physical member port
was Down.
● hwphystackvlanconflict: The service VLAN
conflicted with the stack reserved VLAN.
● hwstackautoconfigfailed: After a dedicated stack
cable was connected, the interface did not
automatically become a stack port.
● hwstacklinkdown: A stack port was Down.
● hwstacklinkup: A stack port was Up.
● hwstacklogicstackportlinkerr: A logical stack port
was incorrectly connected.
● hwstackmemberexceedspec: The number of
member switches reached the maximum value.
● hwstackphystackportlinkerr: A physical member
port was incorrectly connected.
● hwstackportconfigurefailed: The stack port
configuration was incorrect.
● hwstackporterrordown: The stack port entered the
Error-down state.
● hwstackporterrordownrecovery: The stack port
recovered from the Error-down state.
● hwstacksetupfailure: The stack failed to be set up.
● hwstackstackmacchange: The stack MAC address
changed.
● hwstackstackmemberadd: A new member switch
joined the stack.
● hwstackstackmemberleave: A new member switch
left the stack.
● hwstackstandbychange: A slave switch was
elected as the standby switch.
● hwstackswitchover: The standby switch became
the master switch.
Views
System view
Default Level
2: Configuration level
Usage Guidelines
By default, all stack traps are enabled. You can learn about stack status changes
from these traps. If you disable a type of stack trap, the switch no longer sends
this trap. Disabling the stack traps is not recommended.
Example
# Enable the hwstackswitchover trap.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name stack trap-name hwstackswitchover
Related Topics
3.8.3 display snmp-agent trap feature-name stack all
Function
snmp-agent trap enable feature-name mad command enables the trap function
for the MAD module.
undo snmp-agent trap enable feature-name mad command disables the trap
function of the MAD module.
Format
snmp-agent trap enable feature-name mad [ trap-name
{ hwmadconflictdetect | hwmadconflictresume } ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
When the trap function is enabled, the device generates traps for failures and
sends traps to the NMS through SNMP. When the trap function is disabled, the
device does not generate traps for failures, and the SNMP module does not send
traps to the NMS.
You can specify trap-name to enable the trap function for one or more events.
Example
# Enable the hwmadconflictdetect trap function of the MAD module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name mad trap-name hwmadconflictdetect
Related Topics
3.8.4 display snmp-agent trap feature-name mad all
Function
The upgrade backup-area slot command defines the active and backup areas in
a stack in preparation for a smooth upgrade.
Format
upgrade backup-area slot slot-id to slot-id
Parameters
Parameter Description Value
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
Precautions
● Member switches in the active and backup areas form the entire stack. When
dividing active and backup areas, note that:
– The active and backup areas cannot have the same member switch, and
both areas must have at least one member switch.
– The backup area cannot contain the master switch of the stack.
– Member switches in each area must be directly connected.
● After this command is run, the member switches with specified stack IDs join
the backup area. The other member switches automatically join the active
area.
● To ensure mutual backup, it is recommended that the two areas have similar
quantities of member switches.
Example
# Add member switches with stack IDs 0 to 3 to the backup area.
<HUAWEI> system-view
[HUAWEI] upgrade backup-area slot 0 to 3
Format
upgrade start
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
Before running this command, run the 3.8.41 upgrade backup-area slot
command to define the active and backup areas and ensure that all member
switches in the stack are running the same system software and support smooth
upgrades.
If an upgrade fails, error codes and displayed message help locate the cause.
Table 3-98 lists the error codes and displayed messages in different upgrade
failure scenarios.
Table 3-98 Error codes and displayed messages in different upgrade failure
scenarios
Example
# Start a smooth upgrade.
<HUAWEI> system-view
[HUAWEI] upgrade start
Function
The arp anti-attack check user-bind enable command configures dynamic ARP
inspection (DAI) in a network enhanced profile.
The undo arp anti-attack check user-bind enable command disables DAI in a
network enhanced profile.
NOTE
Format
arp anti-attack check user-bind enable
Parameters
None
Views
Network enhanced profile view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
After creating a network enhanced profile, you can configure DAI in the profile.
After the profile is bound to an AS port, DAI is automatically enabled on the port.
The following configuration is generated on the AS port:
#
arp anti-attack rate-limit enable
arp anti-attack rate-limit packet 5 interval 1
arp anti-attack check user-bind enable
arp anti-attack check user-bind alarm enable
#
You can configure DAI to prevent Man in The Middle (MITM) attacks and theft on
authorized user information. When a device receives an ARP packet, it compares
the source IP address, source MAC address, interface number, and VLAN ID of the
ARP packet with DHCP snooping binding entries. If the ARP packet matches a
binding entry, the device allows the packet to pass through. If the ARP packet does
not match any binding entry, the device discards the packet.
Prerequisites
DHCP snooping has been enabled in the network enhanced profile using the dhcp
snooping enable command.
Example
# Enable DAI in a network enhanced profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-enhanced-profile name profile_1
[HUAWEI-um-net-enhanced-profile_1] dhcp snooping enable
[HUAWEI-um-net-enhanced-profile_1] arp anti-attack check user-bind enable
Related Topics
3.9.74 network-enhanced-profile name
NOTE
Format
as-admin-profile profile-name
undo as-admin-profile
Parameters
Parameter Description Value
profile-name Specifies the name of an AS The value must have an existing
administrator profile. AS administrator profile name.
Views
AS group view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
You can bind an AS administrator profile to an AS group to deliver the
configurations in the profile to all the member ASs in the AS group.
Prerequisites
The AS administrator profile has been created.
Precautions
AS groups can only be bound to AS administrator profiles. Each AS group can be
bound to only one AS administrator profile.
Example
# Bind an AS administrator profile to an AS group.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as-admin-profile name profile_1
[HUAWEI-um-as-admin-profile_1] quit
[HUAWEI-um] as-group name group_1
[HUAWEI-um-as-group-group_1] as-admin-profile profile_1
Related Topics
3.9.4 as-admin-profile name
3.9.6 as-group name
NOTE
Format
as-admin-profile name profile-name
undo as-admin-profile name profile-name
Parameters
Parameter Description Value
profile-name Specifies the name of an The value is a string of 1 to 31 case-
AS administrator profile. sensitive characters without spaces. The
value can contain letters, digits, and
underscores (_).
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In an AS administrator profile, you can configure AS administrator information
and the rate limit for outgoing ARP and DHCP packets on an uplink fabric port.
Precautions
Example
# Create an AS administrator profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as-admin-profile name profile_1
Related Topics
3.9.111 user password (AS administrator profile view)
3.9.5 as-auth
Function
The as-auth command displays the AS authentication view.
NOTE
Format
as-auth
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
After entering the AS authentication view, you can configure the AS
authentication mode, blacklist, and whitelist.
Example
# Enter the AS authentication view.
<HUAWEI> system-view
[HUAWEI] as-auth
NOTE
Format
as-group name group-name
Parameters
Parameter Description Value
group-name Specifies the name of The value is a string of 1 to 31 case-
an AS group. sensitive characters without spaces. The
value can contain letters, digits, and
underscores (_).
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
Follow-up Procedure
Precautions
Example
# Create an AS group.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as-group name group_1
Related Topics
3.9.12 as name (AS group view)
3.9.3 as-admin-profile (AS group view)
NOTE
Format
as access dtls psk psk-value
undo as access dtls psk
Parameters
Parameter Description Value
psk-value Specifies a pre- The value is a string of 6 to 32 case-sensitive
shared key. characters without spaces. The pre-shared key
must be in plain text and contain at least two
of the following: letters, digits, and special
characters.
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
Precautions
● The default pre-shared key has security risks. You are advised to change the
pre-shared key.
● After an AS has connected to an SVF system, configuring or deleting the pre-
shared key for DTLS encryption is not allowed on the AS.
Example
# Set the pre-shared key for DTLS encryption to test@1234.
<HUAWEI> as access dtls psk test@1234
Function
The as access manage-mac command configures the management MAC address
of an AS.
By default, an AS uses the system MAC address as the management MAC address.
NOTE
Format
as access manage-mac mac-address
Parameters
Parameter Description Value
mac-address Specifies the The value is in H-H-H format, where H is a
management MAC hexadecimal number of 1 to 4 digits.
address of an AS.
The value cannot be all 0s, all Fs, or a
multicast MAC address.
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In a Super Virtual Fabric (SVF) system, each AS has a unique management MAC
address to identify itself. By default, an AS uses its system MAC address as the
management MAC address to connect to an SVF system. When the management
MAC address of an AS conflicts with that of another AS, you can run the as access
manage-mac command to change the management MAC address so as to
prevent MAC address conflicts.
Precautions
● Use of this command is not recommended when no MAC address conflict
occurs, as an improper management MAC address may affect service
operations.
● This command can be used only before an AS connects an SVF system. If an
AS has connected to an SVF system, use of this command is not allowed.
● Before using this command to change the management MAC address of an
AS, you must run the undo as access manage-mac command to delete the
existing management MAC address.
Example
# Configure the management MAC address of an AS.
<HUAWEI> as access manage-mac 4cb1-6c91-52a0
NOTE
Format
as auto-replace enable
undo as auto-replace enable
Parameters
None
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In an SVF system, each AS is identified by its MAC address by default. When a new
device is used to replace an AS, the SVF system considers the new device as a new
AS because their MAC addresses are different. As a result, the new AS does not
inherit services on the previous AS.
Precautions
● An AS can only be replaced by a device of the same model. If the new device
is a different model, the SVF system considers it as a new AS, which then
cannot inherit services on the previous AS.
● Only a standalone AS can be replaced, and a stacked AS cannot be replaced.
● AS automatic replacement is not supported when an AS connects to the
parent through a network.
● To ensure that a replacement AS can be successfully authenticated, run the
auth-mode none command to set the AS authentication mode to none, or
run the whitelist mac-address command to add the management MAC
address of the replacement AS to the whitelist. If the replacement AS has no
management MAC address configured, its system MAC address is used as the
management MAC address.
Example
# Enable AS automatic replacement.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as auto-replace enable
Related Topics
3.9.99 uni-mng
NOTE
Format
as-mode disable
undo as-mode disable
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
The S6720SI, S6720S-SI, S6720EI, and S6720S-EI can function as the parent or AS
in an SVF system. By default, the device works in AS mode and functions only as
an AS. To use the device as the parent, run the as-mode disable command. This
command will change the device working mode to the parent mode.
Precautions
After the working mode of a device is changed, the device does not use any
configuration file at the next startup.
Example
# Change the device working mode to the parent mode.
<HUAWEI> system-view
[HUAWEI] as-mode disable
Warning: Switching the AS mode will clear current configuration and reboot the s
ystem. Continue? [Y/N]:y
Function
The as all command adds all ASs to an AS group.
NOTE
Format
as all
undo as all
Parameters
None
Views
AS group view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After creating an AS group, you need to add the ASs that require the same
configuration to the AS group. This command adds all ASs to the same AS group.
Precautions
An AS can be added to only one AS group. For example, if you run the as all
command in group_1 and then in group_2, the system displays a message, saying
that the ASs need to be deleted from the previous AS group before they can be
added to the new AS group.
Example
# Add all ASs to the AS group group_1.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as-group name group_1
[HUAWEI-um-as-group-group_1] as all
Related Topics
3.9.6 as-group name
Function
The as name command adds an AS with a specified name to an AS group.
NOTE
Format
as name as-name
as name-include string
Parameters
Parameter Description Value
as-name Specifies the name of an AS. The value must have an existing AS
name.
Views
AS group view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After creating an AS group, add the ASs that need to be configured in a batch to
the AS group. You can only add created ASs to an AS group.
Precautions
An AS can be added to one only AS group.
After an AS is added to an AS group, to change the AS group, run the as name
command to add the AS to another AS group.
Example
# Add the AS as_1 to the AS group group_1.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as-group name group_1
[HUAWEI-um-as-group-group_1] as name as_1
Related Topics
3.9.6 as-group name
NOTE
Format
as name as-name interface { { interface-type interface-number1 [ to interface-
number2 ] } &<1-10> | all }
as name-include string interface all
undo as name as-name interface { { interface-type interface-number1 [ to
interface-number2 ] } &<1-10> | all }
Parameters
Parameter Description Value
as-name Specifies the name of an AS. The value must have
an existing AS name.
Views
Port group view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After creating a port group, add the AS ports that need to be configured in a
batch to the port group.
Precautions
A port can be added to only one port group.
After ports on an AS are added to a port group, to change the port group, run the
as name interface command to add the ports to another port group.
Example
# Add ports on the AS as1 to the port group group_1.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] port-group name group_1
[HUAWEI-um-portgroup-group_1] as name as1 interface gigabitethernet 0/0/1 to 0/0/5
Related Topics
3.9.80 port-group name
Function
The as name command configures an AS name or displays the AS view.
By default, system default name-device MAC address is used as the AS name, for
example, huawei-000a-123d-2200.
NOTE
Format
as name as-name [ model as-model mac-address mac-address ]
Parameters
Parameter Description Value
as-name Specifies the name of The value is a string of 1 to 31 case-
an AS. insensitive characters without spaces.
model as- Specifies the device The value is an enumerated type. You
model model of an AS. can enter a question mark (?) and
select a value from the displayed
value range.
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
You can configure a name for an AS and use the name to uniquely identify the AS.
This configuration facilitates AS identification and management.
You can change the name of an AS that has connected to an SVF system when the
following conditions are met:
1. The AS is not bound to any service profile.
2. The AS is not added to any AS group.
3. Ports of the AS are not added to any port group.
Precautions
Example
# Configure an AS name.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as name as1 model S5700-28P-LI-AC mac-address 0200-0000-0022
Related Topics
3.9.99 uni-mng
3.9.15 as reset
Function
The as reset command restarts an AS.
NOTE
Format
as reset { all | name as-name }
Parameters
Parameter Description Value
all Restarts all ASs. -
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
When an AS is upgraded or working abnormally, you can restart the AS.
Example
# Restart the AS as1.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as reset name as1
Related Topics
3.9.99 uni-mng
NOTE
Format
as service-vlan igmp-snooping { vlan-id1 [ to vlan-id2 ] } &<1-16>
undo as service-vlan igmp-snooping { vlan-id1 [ to vlan-id2 ] } &<1-16>
Parameters
Parameter Description Value
vlan-id1 [ to Specifies range of service VLANs: The vlan-id1
vlan-id2 ] and vlan-id2
● vlan-id1 specifies the start VLAN ID. are integers
● vlan-id2 specifies the end VLAN ID. ranging from 1
vlan-id2 must be greater than or equal to to 4094.
vlan-id1. vlan-id1 and vlan-id2 define a
range together.
● If the parameter to vlan-id2 is not
specified, only the VLAN specified by vlan-
id1 is a service VLAN ID.
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
By default, IGMP snooping is disabled for service VLANs on an AS. If IGMP
snooping needs to be enabled on an AS, run the as service-vlan igmp-snooping
command to deliver the configuration to the AS. After the configuration is
delivered successfully, the igmp-snooping enable configuration will be generated
in the corresponding VLAN view of the AS.
Precautions
This VLAN cannot be a stack reserved VLAN, SVF management VLAN, super VLAN,
or RRPP/SEP/ERPS control VLAN.
Example
# Enable IGMP snooping for the service VLAN 10 on an AS.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as service-vlan igmp-snooping 10
NOTE
Format
as service-vlan authorization { vlan-id1 [ to vlan-id2 ] } &<1-16>
Parameters
Parameter Description Value
vlan-id1 [ to Specifies service VLAN IDs in a batch: Values of vlan-
vlan-id2 ] id1 and vlan-id2
● vlan-id1 specifies the first VLAN ID. are integers in a
● vlan-id2 specifies the last VLAN ID. range of 1 to
4094.
vlan-id2 must be larger than or equal to
vlan-id1. vlan-id1 and vlan-id2 together
determine a VLAN range.
● If you do not specify to vlan-id2, only one
service VLAN is specified by vlan-id1.
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
You can run the as service-vlan authorization command to deliver service VLANs
to ASs in a batch. After these service VLANs are delivered successfully,
corresponding VLANs are created on these ASs.
Precautions
This VLAN cannot be a stack reserved VLAN, SVF management VLAN, super VLAN,
or RRPP/SEP/ERPS control VLAN.
Example
# Create the service VLAN 10 for ASs.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as service-vlan authorization 10
3.9.18 as type
Function
The as type command specifies the file to be loaded during the upgrade of an AS
of a specified device type.
The undo as type command deletes the file to be loaded during the upgrade of
an AS of a specified device type.
By default, the file to be loaded is not specified during the upgrade of an AS of a
specified device type.
NOTE
Format
as type as-type { system-software system-software | patch patch } *
Parameters
Parameter Description Value
as-type Specifies the device type The value is an enumerated type. You
of an AS. can enter a question mark (?) and
select a value from the displayed
value range.
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
Example
# Specify the file to be loaded on the AS of the S5700-P-LI type.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as type s5700-p-li system-software s5700-p-li-v200r011c10.cc
Related Topics
3.9.99 uni-mng
3.9.19 attach as
Function
The attach as command allows you to log in to an AS from the parent.
NOTE
Format
attach as name as-name
Parameters
Parameter Description Value
name as-name Specifies the name of an AS for The value must have an
login. existing AS name.
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In addition to local login through a console port, you can log in to an AS from the
parent. This login mode is supported in two service configuration modes:
centralized mode and independent mode.
After you log in to an AS in centralized mode, you can configure only commands
related to file management and service diagnosis for fault location.
After you log in to an AS in independent mode, you can use more commands to
configure services on the AS.
Prerequisites
In centralized mode, an AS administrator profile has been bound to the AS, and an
AS user name and password have been configured.
In independent mode, an AS user name and password have been configured in the
uni-mng view using the independent-as-admin command.
Precautions
After an AS user name and password are configured, you need to enter the correct
user name and password when logging in to an AS through the console port.
When you log in to an AS from the parent using the attach as command, you can
log in to the AS without entering the user name or password.
In versions earlier than V200R011C10, at most one VTY user can log in to an AS at
a time. In V200R011C10 and later versions, at most four VTY users can log in to
an AS at a time.
Example
# In centralized mode, log in to the AS as1 from the parent.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as-admin-profile name profile_1
[HUAWEI-um-as-admin-profile_1] user asuser password Pwd@123456
[HUAWEI-um-as-admin-profile_1] quit
[HUAWEI-um] as-group name group_1
[HUAWEI-um-as-group-group_1] as name as1
[HUAWEI-um-as-group-group_1] as-admin-profile profile_1
[HUAWEI-um-as-group-group_1] quit
[HUAWEI-um] commit as all
Info: Commiting the configuration will take a long time. Are you sure you want to commit the
configuration? [Y/N]: y
[HUAWEI-um] attach as name as1
# In independent mode, log in to the AS as1 from the parent. Before the login, the
independent mode needs to be enabled on the fabric-port connected to the AS
as1. The following uses a level-1 AS as the AS as1.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] independent-as-admin user asuser password Pwd@123456
[HUAWEI-um] interface fabric-port 1
[HUAWEI-um-fabric-port-1] port connect independent-as
[HUAWEI-um-fabric-port-1] quit
[HUAWEI-um] attach as name as1
NOTE
Format
authentication access-user maximum max-num
undo authentication access-user maximum
Parameters
Parameter Description Value
max-num Specifies the The value is an integer that ranges from 1
maximum number of to 512. After the value is delivered to an AS,
access users in a user the effective value depends on the AS
access profile. specifications. For details, see 13.6.5
authentication access-point max-user.
Views
User access profile view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After creating a user access profile, you can configure the maximum number of
access users in the profile. When the profile is bound an AS port, the maximum
number of access users is automatically configured for the port. The following
configuration is generated on the AS port:
#
authentication access-point max-user max-num
#
Precautions
The authentication access-user maximum command configuration takes effect
only for new users.
Example
# Set the maximum number of access users to 100 in the user access profile
profile_1.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] user-access-profile name profile_1
[HUAWEI-um-user-access-profile_1] authentication access-user maximum 100
Related Topics
3.9.108 user-access-profile name
NOTE
Format
auth-mode none
undo auth-mode
Parameters
None
Views
AS authentication view
Default Level
3: Management level
Usage Guidelines
By default, an AS needs to be authenticated using a blacklist or whitelist before
connecting to an SVF system. You can also configure no authentication for ASs. In
Example
# Configure no authentication for ASs to connect to an SVF system.
<HUAWEI> system-view
[HUAWEI] as-auth
[HUAWEI-as-auth] auth-mode none
Related Topics
3.9.5 as-auth
NOTE
Format
authentication-profile authentication-profile-name
undo authentication-profile
Parameters
Parameter Description Value
authentication- Specifies the name of The value is a string of 1-31 case-
profile-name an authentication sensitive characters, which cannot be
profile. configured to - and --. It cannot
contain spaces and the following
symbols: / \ : * ? " < > | @ ' %.
Views
User access profile view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After creating a user access profile, you can bind an authentication profile to the
user access profile. When the user access profile is bound to an AS port, the user
access authentication mode specified in the authentication profile is automatically
configured on the AS port.
NAC provides three user authentication modes: 802.1X authentication, MAC
address authentication, and Portal authentication. To implement user access
authentication, run the dot1x-access-profile name access-profile-name, mac-
access-profile name access-profile-name, and portal-access-profile name
access-profile-name commands in the system view to create an access profile,
bind one or multiple of the three user authentication modes to the authentication
profile, and then bind the authentication profile to the user access profile in an
SVF system.
Precautions
● If Portal authentication is deployed in an SVF system, you must run the web-
auth-server server-name command to specify the Portal server profile used in
Portal authentication in the Portal access profile view. Additionally, only one
Portal server profile can be configured in a Portal access profile.
● If the Portal authentication mode has been set to layer3 in the portal-access-
profile bound to the authentication profile, it is not allowed to bind this
authentication profile to the user access profile. If an authentication profile
has been bound to the user access profile, it is now allowed to set the Portal
authentication mode to layer3.
● Different user access profiles must be bound to the same authentication
profile.
● The authentication-profile and mac-limit maximum max-num as well as
authentication-profile and traffic-limit inbound { arp | dhcp } cir cir-value
commands are mutually exclusive and cannot be configured together in a
user access profile.
● If many users are connected to the port to which a user access profile is
bound, the authentication configuration in the profile may need to take a
certain period of time to complete.
● Before changing the authentication profile on the parent, run the undo
authentication-profile command to delete the existing authentication profile
and then run the commit as { name as-name | all } command to commit the
configuration. You can then create a new authentication profile on the parent.
● After bidirectional flow control is configured in an authentication profile using
the authentication control-direction all command, this authentication
profile cannot be bound to a user access profile.
Example
# Bind an authentication profile to the user access profile.
<HUAWEI> system-view
[HUAWEI] mac-access-profile name 1
[HUAWEI-mac-access-profile-1] quit
[HUAWEI] authentication-profile name test
[HUAWEI-authen-profile-test] mac-access-profile 1
[HUAWEI-authen-profile-test] quit
[HUAWEI] uni-mng
[HUAWEI-um] user-access-profile name huawei
[HUAWEI-um-user-access-huawei] authentication-profile test
Related Topics
3.9.108 user-access-profile name
Function
The blacklist mac-address command adds a specified MAC address to the
blacklist.
The undo blacklist mac-address command deletes a MAC address from the
blacklist.
NOTE
Format
blacklist mac-address mac-address1 [ to mac-address2 ]
Parameters
Parameter Description Value
mac-address1 [ to Specifies the MAC The value is in H-H-H format,
mac-address2 ] address to be added to where H is a hexadecimal number
the blacklist. of 1 to 4 digits. The value cannot
be all 0s, all Fs, or a multicast
MAC address.
Views
AS authentication view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
When an SVF system needs to authenticate an AS, the SVF system allows the AS
to connect to if the MAC address of the AS is in the whitelist and disallows the AS
to connect to if the MAC address is in the blacklist.
Precautions
Example
# Add the MAC address 0025-9e07-8281 to the blacklist.
<HUAWEI> system-view
[HUAWEI] as-auth
[HUAWEI-as-auth] blacklist mac-address 0025-9e07-8281
Related Topics
3.9.5 as-auth
Function
The broadcast-suppression command configures broadcast traffic suppression in
a network enhanced profile.
NOTE
Format
broadcast-suppression packets packets-per-second
undo broadcast-suppression
Parameters
Parameter Description Value
packets Specifies the The value is an integer that ranges from 0
packets-per- packet rate of an to 14881000, in packets per second (PPS).
second interface.
If the configured packet rate on the parent
switch is larger than the maximum value
on the AS port, the maximum value takes
effect on the AS port.
Views
Network enhanced profile view
Default Level
3: Management level
Usage Guidelines
After creating a network enhanced profile, you can configure broadcast traffic
suppression in the profile. After the profile is bound to an AS port, broadcast
traffic suppression is automatically configured on the port. The following
configuration is generated on the AS port:
#
broadcast-suppression packets packets-per-second
#
Example
# Configure broadcast traffic suppression in a network enhanced profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-enhanced-profile name profile_1
[HUAWEI-um-net-enhanced-profile_1] broadcast-suppression packets 148810
Related Topics
3.9.74 network-enhanced-profile name
NOTE
Format
clear direct-command [ slot slot-id ]
Parameters
Parameter Description Value
slot slot-id Specifies the stack ID of a member The value is an integer that
device in an AS. ranges from 0 to 4.
Views
AS view
Default Level
3: Management level
Usage Guidelines
After you run the direct-command command to directly deliver commands to an
AS, you can run the clear direct-command command to delete the commands
from the parent.
You can delete directly delivered commands only when the AS is offline. Do not
run the clear direct-command command when the parent is delivering the
commands to an AS.
Example
# Delete the commands to be directly delivered to AS1 from the parent.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as name as1
[HUAWEI-um-as-as1] clear direct-command
Related Topics
3.9.31 direct-command
3.9.26 commit as
Function
The commit as command delivers the service configuration to ASs.
NOTE
Format
commit as { name as-name | all }
Parameters
Parameter Description Value
name as-name Delivers the service configuration to an The value must have
AS with a specified name. an existing AS name.
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
After configuring or changing services (including service profiles and user
authentication-free rules) on the parent, you need to run the commit as
command to deliver the configuration to ASs to make the configuration take
effect.
Example
# Deliver the service configuration to all ASs.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] commit as all
Related Topics
3.9.48 display uni-mng commit-result
3.9.27 confirm
Function
The confirm command confirms that unauthenticated ASs pass the
authentication.
NOTE
Format
confirm { all | mac-address mac-address }
Parameters
Parameter Description Value
all Confirms that all ASs pass -
the authentication.
Views
AS authentication view
Default Level
3: Management level
Usage Guidelines
When an AS needs to be authenticated before connecting to an SVF system, the
AS fails the authentication if its MAC address is neither in the whitelist nor in the
blacklist. You can run the confirm command to allow all ASs or a specified AS to
pass the authentication.
You can run the 3.9.36 display as unauthorized record command to check
information about the ASs that fail the authentication.
Example
# Confirm that the AS with the MAC address 0025-9e07-8280 passes the
authentication.
<HUAWEI> system-view
[HUAWEI] as-auth
[HUAWEI-as-auth] confirm mac-address 0025-9e07-8280
Related Topics
3.9.5 as-auth
3.9.36 display as unauthorized record
Function
The description command configures the description of a fabric port.
NOTE
Format
description description
undo description
Parameters
Parameter Description Value
description Specifies the The value is a string of 1 to 64 case-
description. sensitive characters with spaces supported.
Views
Fabric-port view
Default Level
2: Configuration level
Usage Guidelines
To facilitate fabric port management and identification, you can configure
descriptions for fabric ports. For example, you can describe the name of an AS
that connects to a fabric port.
Example
# Configure the description of a fabric port.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] interface fabric-port 1
[HUAWEI-um-fabric-port-1] description To_as1
Related Topics
3.9.68 interface fabric-port
Function
The description command configures the description of a port group.
NOTE
Format
description description
undo description
Parameters
Parameter Description Value
description Specifies the The value is a string of 1 to 15 case-
description. sensitive characters with spaces supported.
Views
Port group view
Default Level
2: Configuration level
Usage Guidelines
To facilitate identification and management of terminals connected to a port
group in the web system, configure the description of the port group.
Example
# Configure the description of a specified port group.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] port-group name 1
[HUAWEI-um-portgroup-1] description switch
Related Topics
3.9.80 port-group name
Function
The dhcp snooping enable command configures DHCP snooping in a network
enhanced profile.
The undo dhcp snooping enable command cancels DHCP snooping in a network
enhanced profile.
NOTE
Format
dhcp snooping enable
Parameters
None
Views
Network enhanced profile view
Default Level
3: Management level
Usage Guidelines
After creating a network enhanced profile, you can configure DHCP snooping in
the profile. After the profile is bound to an AS port, DHCP snooping is
automatically enabled on the AS and AS port. The following configuration is
generated on the AS:
#
dhcp enable
#
dhcp snooping enable
#
interface GigabitEthernet0/0/1
dhcp snooping enable
#
You can run the dhcp snooping enable command to enable DHCP snooping on a
port so as to improve DHCP security.
Precautions
Before running the undo dhcp snooping enable command, ensure that the
network enhanced profile view is not configured with IPSG or DAI. To disable IPSG
and DAI, run the undo ip source check user-bind enable (network enhanced
profile view) and undo arp anti-attack check user-bind enable (network
enhanced profile view) commands respectively.
The dhcp snooping enable command configured in the network enhanced profile
can only configure a DHCP dynamic binding table but not a DHCP static binding
table.
Example
# Configure DHCP snooping in a network enhanced profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-enhanced-profile name profile_1
[HUAWEI-um-net-enhanced-profile_1] dhcp snooping enable
Related Topics
3.9.74 network-enhanced-profile name
3.9.31 direct-command
Function
The direct-command command configures ASs on the parent. The parent directly
delivers the configuration to the ASs, and you do not need to run the commit as
command.
The undo direct-command command cancels the configuration for ASs on the
parent.
The following table lists service configurations that can be delivered using this
command. If no configuration dependency and restriction are provided for a
command, see the details in the command reference.
NOTE
Format
direct-command view { system | interface-type interface-number | stack-port
member-id/port-id } command command-text
undo direct-command view { system | interface-type interface-number | stack-
port member-id/port-id } command command-text
Parameters
Parameter Description Value
view { system | Specifies the view in which a command -
interface-type is executed.
interface-number }
● system: system view
● interface-type interface-number:
interface view. It cannot be an Eth-
Trunk interface view.
● stack-port member-id/port-id: stack
interface view
command Specifies the command to be delivered The value is a
command-text to ASs. string of 1 to 64
characters.
Views
AS view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
The following lists the commands that can be directly delivered to ASs. You can
run the undo direct-command view { system | interface-type interface-number }
command command-text command to cancel the configuration or restore default
settings. The command-text parameter specifies the commands listed in the
following table.
fabric
port.
Precautions
● When you configure a directly delivered command on the parent, enter the
complete and correct command instead of the abbreviated form. No info
message is displayed for confirming your input.
● A directly delivered command supports the help and typeahead functions but
not real-time check during input. The system checks the input only after you
complete typing a command and press Enter. No detailed description is
provided in help information. If you fail to configure a command for an AS, an
info message is displayed.
● When you configure a directly delivered command, the AS to which the
command is to be delivered must be online. If you need to specify a port or
slot-id in a command, the corresponding member device must be available. If
the AS is offline, run the clear direct-command command to delete the
completed configuration on the parent.
● If a port has the configuration directly delivered using commands, the port
cannot be configured as a member port of the Eth-Trunk to which a fabric
port is bound. If a port has been configured as a member port of the Eth-
Trunk to which a fabric port is bound, the configuration cannot be directly
delivered to the port using commands.
● Directly delivering configuration using commands and delivering
configuration using service profiles are mutually exclusive and cannot be
performed simultaneously.
● A maximum of 4096 commands can be configured.
Example
# Configure the parent to deliver the loopback-detect enable command to
GigabitEthernet0/0/1 on as1 to enable loopback detection on
GigabitEthernet0/0/1.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as name as1
[HUAWEI-um-as-as1] direct-command view gigabitethernet 0/0/1 command loopback-detect enable
Related Topics
3.9.25 clear direct-command
3.9.32 display as
Function
The display as command displays information about access switches (ASs).
NOTE
Format
display as { all | name as-name | mac-address mac-address | vpn-instance
information }
Parameters
Parameter Description Value
all Displays information -
about all ASs.
name as-name Specifies the name of The value must have an existing
an AS. AS name.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display as command to view information about ASs in an SVF
system, including the AS device type, VPN instance information, and access status.
Example
# Display information about all ASs.
<HUAWEI> display as all
Total: 1, Normal: 1, Fault: 0, Idle: 0, Version mismatch: 0
--------------------------------------------------------------------------------
IP IP address of an AS.
Item Description
Item Description
No. AS number.
AS Name AS name.
Function
The display as access configuration command displays the access configuration
of ASs.
NOTE
Format
display as access configuration
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display as access configuration command on an AS to check the
access configuration of the AS.
Example
# Display the access configuration of an AS.
<HUAWEI> display as access configuration
AS mode : centralized
Access interface : vlanif11
Access controller configuration : --
Current connected access controller : 192.168.11.1(dynamic)
Access management MAC : 0200-0000-0022
Access system MAC : 0200-0000-0022
Current connected state : normal
Item Description
AS mode AS mode:
● disable: The device works in parent mode. To
change the device working mode, run the as-
mode disable command. This field is only
supported on S6720SI, S6720S-SI, S6720EI, and
S6720S-EI.
● enable: The device works in AS mode, but it does
not have the SVF function enabled using the uni-
mng command.
● centralized: The device works in AS mode and the
service configuration mode is centralized mode.
● independent: The device works in AS mode and
the service configuration mode is independent
mode.
Item Description
Function
The display as blacklist command displays blacklist information of an AS.
NOTE
Format
display as blacklist
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display as blacklist command to check blacklist information of
an AS.
Example
# Display blacklist information of an AS.
<HUAWEI> display as blacklist
------------------------------------------------------------------------------
ID MAC
------------------------------------------------------------------------------
0 0025-9e07-8281
------------------------------------------------------------------------------
Total: 1
Item Description
ID ID of a blacklist.
Function
The display as run-info command displays running status information of an AS.
NOTE
Format
display as { name as-name | mac-address mac-address } run-info
Parameters
Parameter Description Value
name as-name Specifies the name of The value must have an existing AS
an AS. name.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display as run-info command to check running status
information of an AS, including the AS access status, CPU usage, and memory
usage.
Example
# Display running status information of an AS.
<HUAWEI> display as name as1 run-info
Info: This operation may take a few seconds. Please wait...
------------------------------------------------------------------------------
Software version : Version 5.160 V200R011C10
Hardware version : VER.A
Patch version : V200R011SPH001
Patch state : running
IP address : 192.168.1.154
IP mask : 255.255.255.0
Gateway : 192.168.1.1
VPN-Instance : --
State : normal
Online time : 1 day, 18 hours, 40 minutes, 0 second
CPU usage : 12%
Memory usage : 52%
Slot 0 : present
------------------------------------------------------------------------------
Item Description
Function
The display as unauthorized record command displays information about the
ASs that fail the authentication.
NOTE
Format
display as unauthorized record
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display as unauthorized record command to check information
about the ASs that fail the authentication.
Example
# Display information about the ASs that fail the authentication.
<HUAWEI> display as unauthorized record
Unauthorized AS record:
--------------------------------------------------------------------------------
AS type : S5720-SI
Host name : huawei-000b-0987-d5aa
AS MAC address : 000b-0987-d5aa
AS IP address : 192.168.1.253
Record time : 2015-05-20 16:06:10 DST
--------------------------------------------------------------------------------
Total: 1
Function
The display as whitelist command displays whitelist information of an AS.
NOTE
Format
display as whitelist
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display as whitelist command to check whitelist information of
an AS.
Example
# Display whitelist information of an AS.
<HUAWEI> display as whitelist
------------------------------------------------------------------------------
ID MAC
------------------------------------------------------------------------------
0 0025-9e07-8282
------------------------------------------------------------------------------
Total: 1
Item Description
ID ID of a whitelist.
Function
display snmp-agent trap feature-name asmngtrap all command displays the
status of all traps for the ASMNGTRAP module.
NOTE
Format
display snmp-agent trap feature-name asmngtrap all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
After the trap function of a specified feature is enabled, you can run the display
snmp-agent trap feature-name asmngtrap all command to check the status of
all traps of the ASMNGTRAP module. You can use the snmp-agent trap enable
feature-name asmngtrap command to enable the trap function of the
ASMNGTRAP module.
Prerequisites
Example
# Display all the traps of the ASMNGTRAP module.
<HUAWEI>display snmp-agent trap feature-name asmngtrap all
------------------------------------------------------------------------------
Feature name: ASMNGTRAP
Trap number : 23
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwAsFaultNotify on on
hwAsNormalNotify on on
hwAsAddOffLineNotify on on
hwAsDelOffLineNotify on on
hwAsPortStateChangeToDownNotify
on on
hwAsPortStateChangeToUpNotify on on
hwAsModelNotMatchNotify on on
hwAsVersionNotMatchNotify on on
hwAsNameConflictNotify on on
hwAsSlotModelNotMatchNotify on on
hwAsFullNotify on on
hwUnimngModelNotMatchNotify on on
hwAsBoardAdd on on
hwAsBoardDelete on on
hwAsBoardPlugIn on on
hwAsBoardPlugOut on on
hwAsInBlacklist on on
hwAsUnconfirmed on on
hwAsComboPortTypeChange on on
hwAsOnlineFailNotify on on
hwAsSlotIdInvalidNotify on on
hwAsSysmacSwitchCfgErrNotify on on
hwAsSlotOnlineFailNotify on on
Item Description
Item Description
Related Topics
3.9.89 snmp-agent trap enable feature-name asmngtrap
Function
display snmp-agent trap feature-name unimbrtrap all command displays the
status of all traps on the UNIMBRTRAP module.
NOTE
Format
display snmp-agent trap feature-name unimbrtrap all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
After the trap function of a specified feature is enabled, you can run the display
snmp-agent trap feature-name unimbrtrap all command to check the status of
all traps of UNIMBRTRAP. You can use the snmp-agent trap enable feature-
name unimbrtrap command to enable the trap function of UNIMBRTRAP.
Prerequisites
SNMP has been enabled. For details, see snmp-agent.
Example
# Display all the traps of the UNIMBRTRAP module.
<HUAWEI>display snmp-agent trap feature-name unimbrtrap all
------------------------------------------------------------------------------
Feature name: UNIMBRTRAP
Trap number : 30
------------------------------------------------------------------------------
Feature name Name of the module that the trap belongs to.
Item Specification
Item Specification
Related Topics
3.9.90 snmp-agent trap enable feature-name unimbrtrap
Function
display snmp-agent trap feature-name uni-topomng all command displays the
status of all traps on the UNI-TOPOMNG module.
NOTE
Format
display snmp-agent trap feature-name uni-topomng all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
After the trap function of a specified feature is enabled, you can run the display
snmp-agent trap feature-name uni-topomng all command to check the status
of all traps of UNI-TOPOMNG. You can use the snmp-agent trap enable feature-
name uni-topomng command to enable the trap function of UNI-TOPOMNG.
Prerequisites
Example
# Display all the traps of the UNI-TOPOMNG module.
<HUAWEI>display snmp-agent trap feature-name uni-topomng all
------------------------------------------------------------------------------
Feature name: uni-topomng
Trap number : 2
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwTopomngLinkNormal on on
hwTopomngLinkAbnormal on on
Item Specification
Feature name Name of the module that the trap belongs to.
Item Specification
Related Topics
3.9.91 snmp-agent trap enable feature-name uni-topomng
Function
display snmp-agent trap feature-name uni-tplm all command displays the
status of all traps on the UNI-TPLM module.
NOTE
Format
display snmp-agent trap feature-name uni-tplm all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
After the trap function of a specified feature is enabled, you can run the display
snmp-agent trap feature-name uni-tplm all command to check the status of all
traps of UNI-TPLM. You can use the snmp-agent trap enable feature-name uni-
tplm command to enable the trap function of UNI-TPLM.
Prerequisites
Example
# Display all the traps of the UNI-TPLM module.
<HUAWEI>display snmp-agent trap feature-name uni-tplm all
------------------------------------------------------------------------------
Feature name: uni-tplm
Trap number : 3
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwTplmCmdExecuteFailedNotify on on
hwTplmCmdExecuteSuccessfulNotify
on on
hwTplmDirectCmdRecoverFail on on
Table 3-110 Description of the display snmp-agent trap feature-name uni-tplm all
command output
Item Specification
Feature name Name of the module that the trap belongs to.
Related Topics
3.9.92 snmp-agent trap enable feature-name uni-tplm
Function
display snmp-agent trap feature-name uni-vermng all command displays the
status of all traps on the UNI-VERMNG module.
NOTE
Format
display snmp-agent trap feature-name uni-vermng all
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
Usage Scenario
After the trap function of a specified feature is enabled, you can run the display
snmp-agent trap feature-name uni-vermng all command to check the status of
all traps of UNI-TPLM. You can use the snmp-agent trap enable feature-name
uni-vermng command to enable the trap function of UNI-TPLM.
Prerequisites
Example
# Display all the traps of the UNI-VERMNG module.
<HUAWEI>display snmp-agent trap feature-name uni-vermng all
------------------------------------------------------------------------------
Feature name: uni-vermng
Trap number : 1
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwVermngUpgradeFail on on
Item Specification
Feature name Name of the module that the trap belongs to.
Item Specification
Related Topics
3.9.93 snmp-agent trap enable feature-name uni-vermng
NOTE
This command can be used on the parent or an AS. After running this command, you can check
AS Discovery packet statistics on a fabric port of the local device.
Format
display uni-mng as-discover packet statistics interface fabric-port port-id
Parameters
Parameter Description Value
interface Specifies the The value is an integer that ranges from 0 to
fabric-port number of a 63 on an AS and the value range on the
port-id fabric port. parent varies depending on the switch model:
● S12700: 0 to 255
● S7712 (SRUE/SRUH)/S7706 (SRUE/SRUH):
0 to 255
● S9312 (SRUE/SRUH)/S9310/S9306(SRUE/
SRUH)/S9310X: 0 to 255
● Other switch models: 0 to 63
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng as-discover packet statistics command to
check AS Discovery packet statistics on a fabric port.
Example
# Display AS Discovery packet statistics on a fabric port.
<HUAWEI> display uni-mng as-discover packet statistics interface fabric-port 1
The statistics of AS Discover packet on Fabric-port1:
Item Description
Item Description
Related Topics
3.9.86 reset uni-mng as-discover packet statistics
Function
The display uni-mng as-group command displays information about AS groups.
NOTE
Format
display uni-mng as-group [ name group-name | verbose ]
Parameters
Parameter Description Value
name group-name Specifies the name of an AS The value must be an
group. existing an AS group
name.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng as-group command to check information about
created AS groups.
Example
# Display brief information about all AS groups.
<HUAWEI> display uni-mng as-group
-------------------------------------------------------------------------------
Number AS-group Name
-------------------------------------------------------------------------------
1 asgroup
-------------------------------------------------------------------------------
Item Description
Item Description
Item Description
Function
The display uni-mng as index command displays the index of an AS.
NOTE
Format
display uni-mng as index
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng as index command to check the index,
management MAC address, and name of an AS.
Example
# Display the index of an AS.
<HUAWEI> display uni-mng as index
------------------------------------------------------------------------------
Index MAC-Current MAC-Saved Name
------------------------------------------------------------------------------
1 aaaa-bbbb-cc92 aaaa-bbbb-cc92 as1
------------------------------------------------------------------------------
Total: 1
Item Description
Function
The display uni-mng as interface brief command displays brief information
about AS ports.
NOTE
Format
display uni-mng as name as-name interface brief
Parameters
Parameter Description Value
name as-name Specifies the name of an AS. The value must have an existing
AS name.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng as interface brief command to check brief
information about AS ports.
When an AS is offline or its version is inconsistent with the parent version, this
command displays default attributes of ports on this AS.
Example
# Display brief information about AS ports.
<HUAWEI> display uni-mng as name as1 interface brief
PHY: Physical
*down: administratively down
--------------------------------------------------------------------------------
Interface Type PHY Online MSTP state
--------------------------------------------------------------------------------
Eth-Trunk1 Fabric Port up present forwarding
Eth-Trunk40 Service Port down present discarding
GigabitEthernet0/0/1 Service Port down present discarding
GigabitEthernet0/0/2 Service Port up present forwarding
GigabitEthernet0/0/3 Service Port down present discarding
GigabitEthernet0/0/4 Service Port down present discarding
GigabitEthernet0/0/5 Service Port down present discarding
GigabitEthernet0/0/6 Service Port down present discarding
GigabitEthernet0/0/7 Service Port down present discarding
GigabitEthernet0/0/8 Service Port down present discarding
GigabitEthernet0/0/9 Service Port down present discarding
Item Description
Function
The display uni-mng as interface eth-trunk command displays information
about an Eth-Trunk interface of an AS.
NOTE
Format
display uni-mng as name as-name interface eth-trunk eth-trunk-id
Parameters
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
After you use the uni eth-trunk command to create an Eth-Trunk on an AS, you
can run the display uni-mng as interface eth-trunk command to view
information including the Eth-Trunk working mode, member interface, and
member interface status.
Example
# Display information about Eth-Trunk 40 on AS as1.
<HUAWEI> display uni-mng as name as1 interface eth-trunk 40
Eth-Trunk40's state information is:
WorkingMode: NORMAL
Operate status: down
--------------------------------------------------------------------------------
PortName Status
GigabitEthernet0/0/10 down
GigabitEthernet0/0/11 down
--------------------------------------------------------------------------------
The Number of Ports in Trunk : 2
The Number of UP Ports in Trunk : 0
Item Description
Item Description
Function
The display uni-mng commit-result command displays the configuration delivery
result.
NOTE
Format
display uni-mng commit-result { profile | free-rule | as-direct-config }
Parameters
Parameter Description Value
profile Displays the delivery result of the service profile -
configuration.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng commit-result command to check the result of
delivering the configuration to an AS, including the service profiles configured on
the parent, user authentication-free rules, and configurations directly delivered to
ASs. This command displays only the latest result but not historical information.
Example
# Display the result of delivering the service profile configuration to an AS.
<HUAWEI> display uni-mng commit-result profile
Result of profile:
--------------------------------------------------------------------------------
AS Name Commit Time Commit/Execute Result
--------------------------------------------------------------------------------
as1 2014-09-16 14:38:03 Success/Success
--------------------------------------------------------------------------------
NOTE
Format
display uni-mng global
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng global command to view the globally
configured service functions of SVF.
Example
# Display the global configuration of SVF.
<HUAWEI> display uni-mng global
Forward-mode : Centralized
Portal url encode : Disable
IGMP snooping VLAN : 10
Item Description
Item Description
Function
The display uni-mng indirect configuration command displays the indirect
connection configuration on ASs.
NOTE
Format
display uni-mng indirect configuration
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng indirect configuration command on an AS to
check the indirect connection configuration on the AS.
Example
# Display the SVF indirect connection configuration on an AS.
<HUAWEI> display uni-mng indirect configuration
Uni-mng configuration information:
Current uni-mng status : disable
Next uni-mng status : enable
Current management VLAN : --
Item Description
Function
The display uni-mng execute-failed-record command displays execution failure
records after the configuration is delivered to an AS.
NOTE
Format
display uni-mng execute-failed-record { profile | as-direct-config } as name as-
name
Parameters
Parameter Description Value
profile Displays records of configurations -
delivered through profiles.
as-direct-config Displays records of configurations -
directly delivered through commands.
as name as-name Specifies the name of an AS. The value must have
an existing AS name.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng execute-failed-record command to check
execution failure records after the configuration is delivered to an AS.
Example
# Display execution failure records after the configuration is delivered to an AS.
<HUAWEI> display uni-mng execute-failed-record as-direct-config as name as1
Info: This operation may take a few seconds. Please wait....done.
--------------------------------------------------------------------------------
View name : system
Command : arp speed-limit source-mac maximum
1
Execute time : 2015-01-19 15:09:23 DST
Failed reason : This device does not support this
command.
--------------------------------------------------------------------------------
Item Description
Function
The display uni-mng interface fabric-port configuration command displays the
fabric port configuration.
NOTE
Format
display uni-mng interface fabric-port configuration [ parent | as name as-
name ]
Parameters
Parameter Description Value
parent Display the parent-side fabric port -
configuration.
as name as- Display the AS-side fabric port The value must
name configuration. have an existing
AS name.
If parent and as-name are not specified,
the configurations of all the fabric ports in
an SVF system are displayed.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng interface fabric-port configuration command
to check the fabric port configuration.
Example
# Display the fabric port configuration.
<HUAWEI> display uni-mng interface fabric-port configuration
Interface Direction Connect-type Member-name
Location
-------------------------------------------------------------------------------
Fabric-port0 Down Direct Eth-Trunk0 Parent
Fabric-port1 Down Direct Eth-Trunk1 Parent
Function
The display uni-mng interface fabric-port state command displays the fabric
port status.
NOTE
This command can be used on the parent or an AS. After running this command, you can check
the fabric port status on the local device.
Format
display uni-mng interface fabric-port [ port-id ] state
Parameters
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng interface fabric-port state command to check
the fabric port status.
Example
# Display the fabric port status on the parent.
<HUAWEI> display uni-mng interface fabric-port state
--------------------------------------------------------------------------------
Fabric-port name : Fabric-port1
Fabric-port direction : Down
Fabric-port member name : Eth-Trunk1
Item Description
Item Description
Peer fabric-port member name Eth-Trunk to which the peer fabric port
is bound.
Table 3-124 Error reasons indicated by the Detail field and solutions
Detail Field Meaning Solution
Startup cfg file exists The AS has a startup Clear the startup
configuration file. configuration file and
restart the AS.
VLAN for VCMP exists The VLAN for VCMP Run the reset vcmp
exists on the AS. command on the AS to
restart the AS.
Linked to multi fabric- The uplink port of the AS Ensure that the AS
port connects to multiple connects to only one
fabric ports of the fabric port of the parent
parent. and disconnect the AS
from other fabric ports.
Parent linked to parent The fabric port of the Disconnect the fabric
parent connects to port from the remote
another parent. parent.
Invalid stack config exists Downlink service port of Clear the stack
AS is configured as a configuration of the
stack port. downlink service port.
NOTE
Format
display uni-mng patch-delete info
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
After patches on a specified AS are deleted using the patch delete as command,
you can use the display uni-mng patch-delete info command to view
information about the operation of deleting the patches.
Example
# Display information about the operation of deleting patches on ASs.
<HUAWEI> display uni-mng patch-delete info
Total: 7
--------------------------------------------------------------------------------
AS Name Result Time
--------------------------------------------------------------------------------
e-10005(1-1) successful 2014-09-04 15:51:05 DST
t-10021(1-s) failed 2014-09-04 15:51:05
m-10018(x-1) deleting 2014-09-04 15:51:05
p-10017(2-2) expired 2014-09-04 15:51:05
6-10016(2-1) successful 2014-09-04 15:51:05
7-10015(2-2) successful 2014-09-04 15:51:05
2-10011(2-1) -- --
--------------------------------------------------------------------------------
Item Description
Related Topics
3.9.77 patch delete as
Function
The display uni-mng port-group command displays information about port
groups.
NOTE
Format
display uni-mng port-group [ name group-name | verbose ]
Parameters
Parameter Description Value
name group-name Specifies the name of a port The value must be an
group. existing a port group
name.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng port-group command to check information
about created port groups.
Example
# Display brief information about all port groups.
<HUAWEI> display uni-mng port-group
-------------------------------------------------------------------------------
Number Port-group Name Port-group Type
-------------------------------------------------------------------------------
1 group1 connect to user
2 ap_group1 connect to AP
-------------------------------------------------------------------------------
Item Description
-------------------------------------------------------------------------------
Port-group name : ap
Port-group type : connect to AP
Interface list :
AS name as1 interface Eth-trunk 5 GigabitEthernet 0/0/2
Network-basic profile : --
-------------------------------------------------------------------------------
Port-group name : group_2
Port-group type : connect to user
Interface list :
AS name as1 interface Eth-trunk 4 GigabitEthernet 0/0/10
Network-basic profile : --
Network-enhanced profile : --
User-access profile : --
-------------------------------------------------------------------------------
Function
The display uni-mng profile command displays service profile information.
NOTE
Format
display uni-mng profile [ { as-admin | network-basic | network-enhanced |
user-access } [ name profile-name ] ]
Parameters
Parameter Description Value
as-admin Displays information about AS -
administrator profiles.
name profile- Specifies the name of a service profile. The profile must
name have an existing
If this parameter is specified, you can profile name.
check information about services
configured in a specified profile.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng profile command to check information about
created service profiles.
Example
# Display brief information about all service profiles.
<HUAWEI> display uni-mng profile
AS-admin profile:
-------------------------------------------------------------------------------
Number Profile Name
-------------------------------------------------------------------------------
1 hehe
2 profile_1
-------------------------------------------------------------------------------
Network-basic profile:
-------------------------------------------------------------------------------
Number Profile Name
-------------------------------------------------------------------------------
1 b_pro
2 p
-------------------------------------------------------------------------------
Network-enhanced profile:
-------------------------------------------------------------------------------
Number Profile Name
-------------------------------------------------------------------------------
1 enp
-------------------------------------------------------------------------------
User-access profile:
-------------------------------------------------------------------------------
Number Profile Name
-------------------------------------------------------------------------------
1 u_pro
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Profile name: basic
User-vlan : 110
Voice-vlan : 114
Pass-vlan : 1 112 to 113
-------------------------------------------------------------------------------
Item Description
Function
The display uni-mng profile as command displays the configuration generated
after an AS is bound to service profiles.
NOTE
Format
display uni-mng profile as name as-name [ interface interface-type interface-
number ]
Parameters
Parameter Description Value
name as-name Specifies the name of an AS. The value
must have an
existing AS
name.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng profile as command to check the configuration
generated after an AS is bound to service profiles.
Example
# Display the configuration generated on an AS.
<HUAWEI> display uni-mng profile as name as1
Global
-------------------------------------------------------------------------------
Centralized forward mode: disable
-------------------------------------------------------------------------------
Portal url-encode: disable
-------------------------------------------------------------------------------
AS-group name: xy
Username: admin
Privilege-level : 3
Service-type : terminal ssh
Traffic-limit outbound ARP(Kbps) : 512
Traffic-limit outbound DHCP(Kbps) : 128
-------------------------------------------------------------------------------
Interface GigabitEthernet0/0/1
-------------------------------------------------------------------------------
Port-group name: --
User-vlan : --
Voice-vlan : --
Pass-vlan : --
Priority-trust : disable
User-access-port : disable
DHCP snooping : disable
IP source check : disable
Authentication : --
Authentication maximum user-num : --
MAC-limit : --
Traffic-limit inbound ARP(Kbps) : --
Traffic-limit inbound DHCP(Kbps) : --
-------------------------------------------------------------------------------
Interface GigabitEthernet0/0/2
-------------------------------------------------------------------------------
Port-group name: --
User-vlan : --
Voice-vlan : --
Pass-vlan : --
Priority-trust : disable
User-access-port : disable
DHCP snooping : disable
IP source check : disable
ARP anti-attack check : disable
Unicast-suppression(pps) : --
Multicast-suppression(pps) : --
Broadcast-suppression(pps) : --
Rate-limit(Kbps) : --
Authentication : --
Authentication maximum user-num : --
MAC-limit : --
Traffic-limit inbound ARP(Kbps) : --
Traffic-limit inbound DHCP(Kbps) : --
-------------------------------------------------------------------------------
......
Item Description
Item Description
Item Description
Item Description
Function
The display uni-mng topology configuration command displays the SVF network
topology collection configuration.
NOTE
Format
display uni-mng topology configuration
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng topology configuration command to check the
SVF network topology collection configuration.
Example
# Display the SVF network topology collection configuration.
<HUAWEI> display uni-mng topology configuration
Explore timer: 10 minutes
Last collection time: 10:03:58 UTC+00:00 2014/09/11
Total time for last collection: 9 ms
Total time for last collection Time taken to collect the SVF network
topology.
Function
The display uni-mng topology information command displays SVF network
topology information.
NOTE
Format
display uni-mng topology information [ by-name ]
Parameters
Parameter Description Value
by-name Displays SVF network topology information based on the -
device name.
If this parameter is not specified, SVF network topology
information is displayed based on the MAC address.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng topology information command to check SVF
network topology information.
Example
# Display SVF network topology information.
<HUAWEI> display uni-mng topology information
The topology information of uni-mng network:
<-->: direct link <??>: indirect link
T: Trunk ID *: independent AS
------------------------------------------------------------------------------
Local MAC Hop Local Port T || T Peer Port Peer MAC
------------------------------------------------------------------------------
00e0-0987-7890 0 GE6/1/0 11 <-->0 GE0/0/26 00e0-0001-0008*
00e0-0001-0008 1 GE0/0/2 -- <-->-- GE0/0/0 00e0-0001-0005
------------------------------------------------------------------------------
Total items displayed : 2
NOTE
Format
display uni-mng unauthen-user [ as name as-name | mac-address mac-
address ]
Parameters
Parameter Description Value
as name as- Specifies the name of The value is a string of 1 to 31 case-
name an AS. insensitive characters without
spaces.
NOTE
This parameter is
supported only on the
parent.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
To view information about non-authenticated users on an AS, run the display uni-
mng unauthen-user command.
Example
# Display information about non-authenticated users on the AS test1.
<HUAWEI> display uni-mng unauthen-user as name test1
Total: 5
--------------------------------------------------------------------------------
NOTE
Format
display uni-mng unauthen-user offline-record [ as name as-name | mac-
address mac-address ]
Parameters
Parameter Description Value
as name as- Specifies the name The value is a string of 1 to 31 case-
name of an AS. insensitive characters without spaces.
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
To view offline records of non-authenticated users on an AS, run the display uni-
mng unauthen-user offline-record command.
Example
# Display offline records of non-authenticated users on the AS test1.
<HUAWEI> display uni-mng unauthen-user offline-record as name test1
Total: 2
--------------------------------------------------------------------------------
AS name : test1
User MAC : 0021-9746-b67c
User VLAN : 212
User access interface : Ge1/0/2
User IP address : 192.168.1.1
User offline time : 2016/01/21 04:59:43
User offline reason : As offline
--------------------------------------------------------------------------------
AS name : test1
User MAC : 0021-9746-b67d
User VLAN : 212
User access interface : Ge1/0/3
User IP address : 192.168.1.2
User offline time : 2016/01/21 05:59:43
User offline reason : User offline
--------------------------------------------------------------------------------
Item Description
Item Description
Function
The display uni-mng upgrade-info command displays AS version upgrade
information.
NOTE
Format
display uni-mng upgrade-info [ as name as-name | verbose ]
Parameters
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng upgrade-info command to check AS version
upgrade information.
Example
# Display AS version upgrade information.
<HUAWEI> display uni-mng upgrade-info
The total number of AS is : 1
--------------------------------------------------------------------------------
Name Method Phase Status Result
--------------------------------------------------------------------------------
as1 -- -- NO-UPGRADE --
--------------------------------------------------------------------------------
Item Description
Item Description
Item Description
Item Description
NOTE
Format
display uni-mng up-direction fabric-port
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display uni-mng up-direction fabric-port command to check the
current and next startup configurations of AS service ports added to an uplink
fabric port.
Example
# Display information about AS service ports added to an uplink fabric port.
<HUAWEI> display uni-mng up-direction fabric-port
Uni-mng up-direction fabric-port configuration:
Current fabric-port members :
GigabitEthernet0/0/1
GigabitEthernet0/0/2
GigabitEthernet0/0/3
GigabitEthernet0/0/4
Next fabric-port members :
GigabitEthernet0/0/1
GigabitEthernet0/0/2
GigabitEthernet0/0/3
GigabitEthernet0/0/4
Item Description
Function
The down-direction fabric-port command configures the fabric port that
connects a level-1 AS to a level-2 AS.
The undo down-direction fabric-port command deletes the fabric port that
connects a level-1 AS to a level-2 AS.
NOTE
Format
down-direction fabric-port port-id member-group interface eth-trunk trunk-id
Parameters
Parameter Description Value
port-id Specifies the number The value is an integer and must be
of a fabric port. set according to the device
configuration.
Views
AS view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
When a level-1 AS needs to connect to a level-2 AS, you need to configure a fabric
port on the level-1 AS to connect to the level-2 AS. A downlink port of a level-1
AS becomes Up only after the parent finishes delivering the configuration. A
level-2 AS begins to go online only after the downlink port of the level-1 AS
becomes Up.
Follow-up Procedure
Example
# Configure the fabric port that connects a level-1 AS to a level-2 AS.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as name as1
[HUAWEI-um-as-as1] down-direction fabric-port 1 member-group interface eth-trunk 1
Related Topics
3.9.14 as name (uni-mng view)
3.9.99 uni-mng
3.9.81 port eth-trunk trunkmember
NOTE
Format
down-direction fabric-port port-id connect independent-as
undo down-direction fabric-port port-id connect
Parameters
Parameter Description Value
port-id Specifies the number of a The value is an integer and must be set
fabric port. according to the device configuration.
Views
AS view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In independent mode, you can log in to an AS to configure this AS using
commands. After the independent mode is enabled on the fabric port that
connects a level-1 AS to a level-2 AS, the level-2 AS can be configured
independently.
Prerequisites
The fabric port used to connect a level-1 AS to a level-2 AS has been created using
the down-direction fabric-port port-id member-group interface eth-trunk
trunk-id command in the AS view.
Precautions
Example
# Enable the independent mode on the fabric port that connects a level-1 AS to a
level-2 AS.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as name as1
[HUAWEI-um-as-as1] down-direction fabric-port 1 member-group interface eth-trunk 1
[HUAWEI-um-as-as1] down-direction fabric-port 1 connect independent-as
Function
The forward-mode centralized command sets the forwarding mode of an SVF
system to centralized forwarding.
NOTE
Format
forward-mode centralized
undo forward-mode
Parameters
None
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
An SVF system uses the distributed forwarding mode by default. You can change
the forwarding mode to centralized mode.
● In centralized forwarding mode, traffic forwarded by the local AS and
forwarded between ASs is sent to the parent for forwarding.
● In distributed forwarding mode, an AS directly forwards local traffic and the
parent forwards traffic between ASs.
Precautions
● After changing the SVF forwarding mode, you must run the commit as
{ name as-name | all } command to commit the configuration so that the
device can deliver it to ASs.
● In centralized forwarding mode, ports of the ASs connected to the same fabric
port of the parent are isolated and so cannot communicate at Layer 2, and
need to have proxy ARP in the corresponding VLAN configured using the arp-
proxy inner-sub-vlan-proxy enable command to communicate at Layer 3.
● After an AS goes offline, downlink ports of the AS are automatically shut
down. As a result, traffic of the AS attached network will be interrupted.
Example
# Set the SVF forwarding mode to centralized forwarding.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] forward-mode centralized
Related Topics
3.9.99 uni-mng
3.9.67 independent-as-admin
Function
The independent-as-admin command creates an administrator for AS login in
independent mode.
NOTE
Format
independent-as-admin user user-name password password
undo independent-as-admin user
Parameters
Parameter Description Value
user-name Specifies a The value is a string of 1 to 64 case-insensitive
user name. characters. It cannot contain spaces, asterisk, double
quotation mark and question mark.
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
If the AS service configuration mode is set to independent mode, you need to use
this command to configure the administrator account used to log in to ASs. After
the configuration is complete, the user name and password used for login are
automatically configured on the AS. The following configuration is generated on
the AS:
#
aaa
local-user user-name password irreversible-cipher password
local-user user-name privilege level 3
local-user user-name service-type terminal ssh
#
After an AS user name and password are configured, you need to enter the correct
user name and password when logging in to an AS through the console port.
When you log in to an AS from the parent using the attach as name as-name
command, you can log in to the AS without entering the user name or password.
Precautions
The user name and password configured using this command take effect after the
configuration is generated on ASs. It takes about 5 minutes for the configuration
to take effect after you run the command. Do not log in to an AS within this
period; otherwise, the configuration may take effect after a longer period of time.
Example
# Create an AS administrator user name and password in independent mode.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] independent-as-admin user test password Pwd@123456
NOTE
Format
interface fabric-port port-id
undo interface fabric-port port-id
Parameters
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
To set up an SVF system, create fabric ports on the parent switches to allow ASs to
connect to the parent switches.
Example
# Create a fabric port and enter the fabric port view.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] interface fabric-port 1
Related Topics
3.9.82 port member-group interface
NOTE
Format
ip source check user-bind enable
undo ip source check user-bind enable
Parameters
None
Views
Network enhanced profile view
Default Level
2: Configuration level
Usage Guidelines
Usage Scenario
After creating a network enhanced profile, you can configure IP packet checking in
the profile. After the profile is bound to the port of an AS, IP packet checking is
automatically enabled on the port. The following configuration is generated on
the AS port:
#
ip source check user-bind enable
ip source check user-bind alarm enable
#
DHCP snooping has been enabled in the network enhanced profile using the dhcp
snooping enable command.
Precautions
When an AS is an S2750EI, S5700-10P-LI, or S5700-10P-PWR-LI and works in
Layer 3 hardware forwarding mode, the ip source check user-bind enable
command does not take effect on the AS. Because an AS performs only Layer 2
forwarding in an SVF system, you are advised to run the undo assign forward-
mode command to cancel the Layer 3 hardware forwarding mode and then
connect the AS to the SVF system.
Example
# Configure IP packet checking in a network enhanced profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-enhanced-profile name profile_1
[HUAWEI-um-net-enhanced-profile_1] dhcp snooping enable
[HUAWEI-um-net-enhanced-profile_1] ip source check user-bind enable
Related Topics
3.9.74 network-enhanced-profile name
NOTE
Format
mac-limit maximum max-num
undo mac-limit
Parameters
Views
User access profile view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After creating a user access profile, you can configure MAC address learning
limiting in the profile. When the profile is bound an AS port, MAC address learning
limiting is automatically configured on the port. The following configuration is
generated on the AS port:
#
mac-limit maximum max-num
#
To control the number of access users and protect the MAC address table against
attacks, you can limit the maximum number of MAC addresses that can be
learned on an interface.
Precautions
The mac-limit and authentication commands are mutually exclusive and cannot
be configured together in a user access profile.
Example
# Configure MAC address learning limiting in a user access profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] user-access-profile name profile_1
[HUAWEI-um-user-access-profile_1] mac-limit maximum 1024
Related Topics
3.9.108 user-access-profile name
NOTE
Format
multicast-suppression packets packets-per-second
undo multicast-suppression
Parameters
Parameter Description Value
packets Specifies the The value is an integer that ranges from 0
packets-per- packet rate of an to 14881000, in packets per second (PPS).
second interface.
If the configured packet rate on the parent
switch is larger than the maximum value
on the AS port, the maximum value takes
effect on the AS port.
Views
Network enhanced profile view
Default Level
3: Management level
Usage Guidelines
After creating a network enhanced profile, you can configure multicast traffic
suppression in the profile. After the profile is bound to an AS port, multicast traffic
suppression is automatically configured on the port. The following configuration is
generated on the AS port:
#
multicast-suppression packets packets-per-second
#
port. When the multicast traffic rate reaches the maximum value, the system
discards excess multicast packets to control the traffic volume within a proper
range.
Example
# Configure multicast traffic suppression in a network enhanced profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-enhanced-profile name profile_1
[HUAWEI-um-net-enhanced-profile_1] multicast-suppression packets 148810
Related Topics
3.9.74 network-enhanced-profile name
Function
The network-basic-profile name command creates a network basic profile.
NOTE
Format
network-basic-profile name profile-name
Parameters
Parameter Description Value
profile-name Specifies the name of a The value is a string of 1 to 31 case-
network basic profile. sensitive characters without spaces. The
value can contain letters, digits, and
underscores (_).
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
You can configure basic user services in a network basic profile, including the
default VLAN, allowed VLAN, and voice VLAN of a port.
Precautions
You can create a maximum of 256 network basic profiles in a version earlier than
V200R011C10.
You can create a maximum of 512 network basic profiles in V200R011C10 and
later versions.
Example
# Create a network basic profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-basic-profile name profile_1
Related Topics
3.9.110 user-vlan (network basic profile view)
3.9.76 pass-vlan (network basic profile view)
3.9.112 voice-vlan (network basic profile view)
NOTE
Format
network-basic-profile profile-name
undo network-basic-profile
Parameters
Parameter Description Value
profile-name Specifies the name of a network The value must have an existing
basic profile. network basic profile name.
Views
Port group view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
You can bind a network basic profile to a port group to deliver the configurations
in the profile to all the member ports in the port group.
Prerequisites
The network basic profile has been created.
Precautions
A port group can be bound to only one network basic profile.
Example
# Bind a network basic profile to a port group.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-basic-profile name profile_1
[HUAWEI-um-net-basic-profile_1] quit
[HUAWEI-um] port-group name group_1
[HUAWEI-um-portgroup-group_1] network-basic-profile profile_1
Related Topics
3.9.72 network-basic-profile name
3.9.80 port-group name
NOTE
Format
network-enhanced-profile name profile-name
undo network-enhanced-profile name profile-name
Parameters
Parameter Description Value
profile-name Specifies the name of a The value is a string of 1 to 31 case-
network enhanced sensitive characters without spaces. The
profile. value can contain letters, digits, and
underscores (_).
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
You can configure value-added services in a network enhanced profile, such as
network security and QoS.
Precautions
● You can create a maximum of 16 network enhanced profiles.
● A network enhanced profile can be bound to only an AS port group but not
an AP port group.
Example
# Create a network enhanced profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-enhanced-profile name profile_1
Related Topics
3.9.24 broadcast-suppression (network enhanced profile view)
3.9.71 multicast-suppression (network enhanced profile view)
NOTE
Format
network-enhanced-profile profile-name
undo network-enhanced-profile
Parameters
Parameter Description Value
profile-name Specifies the name of a The value must have an existing
network enhanced profile. network enhanced profile name.
Views
Port group view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
You can bind a network enhanced profile to a port group to deliver the
configurations in the profile to all the member ports in the port group.
Prerequisites
Example
# Bind a network enhanced profile to a port group.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-enhanced-profile name profile_1
[HUAWEI-um-net-enhanced-profile_1] quit
[HUAWEI-um] port-group name group_1
[HUAWEI-um-portgroup-group_1] network-enhanced-profile profile_1
Related Topics
3.9.74 network-enhanced-profile name
3.9.80 port-group name
NOTE
Format
pass-vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>
undo pass-vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>
Parameters
Views
Network basic profile view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After creating a network basic profile, you can configure allowed VLANs in the
profile. After the profile is bound to an AS port, the port allows packets from these
VLANs to pass through. The following configuration is generated on the AS port:
#
port link-type hybrid
port hybrid tagged vlan vlan-id1 to vlan-id2
#
Precautions
● The default VLAN, allowed VLANs, and voice VLAN in a network basic profile
must be different.
● You can configure a maximum of 32 allowed VLANs in a network basic
profile.
Example
# Configured allowed VLANs in a network basic profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-basic-profile name profile_1
[HUAWEI-um-net-basic-profile_1] pass-vlan 10 to 12
Related Topics
3.9.72 network-basic-profile name
Function
The patch delete as command deletes patches on a specified online AS.
NOTE
Format
patch delete as { all | name patch-name | name-include string }
Parameters
Parameter Description Value
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
If you find errors in the patches loaded to an AS, run this command to delete the
patches to prevent system operation failures.
If non-incremental patches need to be loaded to an AS, you need to run the patch
delete as command to delete the existing patches on the AS first. Otherwise, non-
incremental patches will fail to be loaded.
Precautions
If the patch file to be loaded to an AS type has been specified using the as type
command, patches on this AS type cannot be deleted.
Example
# Delete the patches on as1.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] patch delete as name as1
Warning: This command will start to delete the patch of AS. Continue?[Y/N]:y
Info: This operation will take several seconds, please wait...
Related Topics
3.9.54 display uni-mng patch-delete info
NOTE
Format
port connect independent-as
undo port connect
Parameters
None
Views
Fabric-port view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In independent mode, you can log in to an AS to configure this AS using
commands. After the independent mode is enabled on the fabric port that
connects the parent to a level-1 AS, the level-1 AS can be configured
independently.
Precautions
Command
loopback internal
traffic-policy
traffic-filter
speed
negotiation
port media-type
port split
training disable
wavelength-channel
storm-control action
port-security protect-action
port-security enable
stp root-protection
loop-detection disable
mode lacp
mad relay
trust 8021p
authentication-profile
authentication control-point
Example
# Enable the independent mode on the fabric port that connects the parent to a
level-1 AS.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] interface fabric-port 1
[HUAWEI-um-fabric-port-1] port connect independent-as
Related Topics
3.9.68 interface fabric-port
Function
The port connect-type indirect command configures the indirect connection
mode for a fabric port.
The undo port connect-type command restores the default connection mode for
a fabric port.
NOTE
Format
port connect-type indirect
Parameters
None
Views
Fabric-port view
Default Level
3: Management level
Usage Guidelines
When the parent connects to an AS across a network, you need to run the port
connect-type indirect command to configure the indirect connection mode for
the fabric port that connects the parent to the AS.
Prerequisites
Follow-up Procedure
Example
# Configure the indirect connection mode for a fabric port.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] interface fabric-port 1
[HUAWEI-um-fabric-port-1] port connect-type indirect
Related Topics
3.9.68 interface fabric-port
NOTE
This command can be executed only on a parent switch of models except the S6720EI,
S6720S-EI, S6720SI, and S6720S-SI.
Format
port-group name group-name
port-group connect-ap name group-name
undo port-group name group-name
undo port-group connect-ap name group-name
Parameters
Parameter Description Value
group-name Specifies the name of a The value is a string of 1 to 31 case-
port group. sensitive characters without spaces. The
value can contain letters, digits, and
underscores (_).
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
A port group is a set of AS ports. The purpose of a port group is to facilitate batch
configuration of AS ports.
Port groups are classified into AS port groups and AP port groups.
● Ports in an AS port group are used to connect an AS to a user terminal. An AS
port group can be bound to three types of service profiles (network basic
profile, network enhanced profile, and user access profile), but only one
profile of the same type can be bound.
● Ports in an AP port group are used to connect an AS to an AP. To connect an
AP to an AS, you need to add the port that connects the AS to the AP to an
AP port group. An AP port group can be bound to only a network basic
profile, and only the pass-vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> command
configured in the profile takes effect.
Follow-up Procedure
Precautions
● You can create a maximum of 256 AS port groups in a version earlier than
V200R011C10.
You can create a maximum of 512 AS port groups in V200R011C10 and later
versions.
● You can create a maximum of 1 AP port groups.
Example
# Create a port group.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] port-group name group_1
Related Topics
3.9.13 as name interface (port group view)
3.9.73 network-basic-profile (port group view)
3.9.75 network-enhanced-profile (port group view)
3.9.109 user-access-profile (port group view)
Function
The port eth-trunk trunkmember command adds member ports to the Eth-
Trunk.
The undo port eth-trunk trunkmember command deletes member ports from
an Eth-Trunk.
NOTE
Format
port eth-trunk trunk-id trunkmember interface interface-type interface-
number1 [ to interface-number2 ]
undo port eth-trunk trunk-id trunkmember interface interface-type interface-
number1 [ to interface-number2 ]
Parameters
Parameter Description Value
trunk-id Specifies the ID of an Eth-Trunk. The value is an integer and
the minimum value is 1.
The maximum value varies
according to the switch
model. For a specific switch
model, the maximum value
is the same as that
described in interface eth-
trunk.
Views
AS view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After a downlink fabric port of a level-1 AS is configured using the down-
direction fabric-port port-id member-group interface eth-trunk trunk-id
command, you need to add member ports to the Eth-Trunk to which the fabric
port is bound.
When an Eth-Trunk has been created for an AS using the uni eth-trunk
command, you can run the port eth-trunk trunkmember command to add
member ports to this Eth-Trunk.
Precautions
AS uplink ports can be used to connect to the parent or level-1 AS or set up a
stack and be configured as downlink fabric ports to connect to other ASs.
On the S6720EI and S6720S-EI, 40GE ports and 10GE ports split from 40GE ports
cannot be configured as downlink fabric ports.
Example
# Add member ports to the Eth-Trunk to which a fabric port is bound.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as name as1
[HUAWEI-um-as-as1] down-direction fabric-port 1 member-group interface eth-trunk 1
[HUAWEI-um-as-as1] port eth-trunk 1 trunkmember interface gigabitethernet 0/0/16
Related Topics
3.9.14 as name (uni-mng view)
3.9.64 down-direction fabric-port
3.9.99 uni-mng
NOTE
Format
port member-group interface eth-trunk trunk-id
undo port member-group
Parameters
Parameter Description Value
eth-trunk trunk-id Specifies the ID of the Eth-Trunk The value is an integer
to which a fabric port is bound. that ranges from 0 to
127.
Views
Fabric-port view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After creating a fabric port using the interface fabric-port port-id command, bind
the fabric port to an Eth-Trunk.
Follow-up Procedure
Run the eth-trunk trunk-id command in the interface view to add interfaces to
the bound Eth-Trunk.
Precautions
● A created Eth-Trunk cannot be bound to a fabric port. When a fabric port is
bound to an Eth-Trunk, the system creates the Eth-Trunk.
● You can run the interface eth-trunk command to enter the view of the Eth-
Trunk to which a fabric port is bound and configure services. Currently, the
following commands can be executed in the view of the Eth-Trunk to which a
fabric port is bound: authentication open ucl-policy enable, mac-address
multiport, quit, and all display commands.
● If physical member interfaces have been added to the Eth-Trunk bound to a
fabric port, the undo port member-group command cannot be used to
unbind the fabric port from the Eth-Trunk.
● Running the undo port member-group command will delete the
configuration in the Eth-Trunk interface view and delete the Eth-Trunk.
● When a fabric port is bound to an Eth-Trunk, the system creates the Eth-Trunk
and performs some service configurations on the Eth-Trunk, for example, the
stp root-protection and mad relay command configurations.
Example
# Bind a fabric port to an Eth-Trunk.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] interface fabric-port 1
[HUAWEI-um-fabric-port-1] port member-group interface eth-trunk 11
Related Topics
3.9.99 uni-mng
3.9.68 interface fabric-port
NOTE
Format
portal url-encode disable
undo portal url-encode disable
Parameters
None
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
To improve web application security, data from untrustworthy sources must be
encoded before being sent to clients. URL encoding is most commonly used in web
applications. After URL encoding is enabled for ASs, special characters in
redirected URLs are converted to secure formats, preventing clients from mistaking
them for syntax signs or instructions and unexpectedly modifying the original
syntax. In this way, cross-site scripting attacks and injection attacks are prevented.
By default, URL encoding is enabled in ASs. This function can be disabled using
the portal url-encode disable command.
Precautions
If the system software is upgraded from a version earlier than
V200R009C00SPC500 to V200R009C00SPC500 or a later version, the switch
Example
# Disable URL encoding.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] portal url-encode disable
Function
The rate-limit command configures traffic rate limiting in a network enhanced
profile.
The undo rate-limit command cancels traffic rate limiting in a network enhanced
profile.
NOTE
Format
rate-limit cir-value
undo rate-limit
Parameters
Views
Network enhanced profile view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After creating a network enhanced profile, you can configure traffic rate limiting
in the profile. After the profile is bound to an AS port, traffic rate limiting is
automatically configured on the port. The following configuration is generated on
the AS port:
#
qos lr inbound cir cir-value cbs 125*cir-value
#
If user traffic is not limited, continuous burst data from numerous users can make
the network congested. You can configure traffic rate limiting in inbound direction
on an interface to limit traffic entering from the interface within a specified range.
Precautions
Example
# Configure traffic rate limiting in a network enhanced profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-enhanced-profile name profile_1
[HUAWEI-um-net-enhanced-profile_1] rate-limit 100000
Related Topics
3.9.74 network-enhanced-profile name
Function
The reboot uni-mng command restarts an SVF system.
NOTE
Format
reboot uni-mng
Parameters
None
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
When upgrading or troubleshooting an SVF system, you can restart the SVF
system, including the parent and all ASs.
Precautions
● This command can be used only after the SVF function is enabled.
● The next startup software version of the AS must be V200R011C10 or later,
and the next startup software version of the parent cannot be earlier than
that of the AS.
● Before running this command to restart an SVF system, you must save the
configuration of the parent. If an AS is configured in independent mode, you
also need to save the configuration of the AS.
Example
# Restart an SVF system.
<HUAWEI> reboot uni-mng
Function
The reset uni-mng as-discover packet statistics command clears AS Discovery
packet statistics on a fabric port.
NOTE
This command can be used on the parent or an AS. After running this command, you can clear
AS Discovery packet statistics on a fabric port of the local device.
Format
reset uni-mng as-discover packet statistics interface fabric-port port-id
Parameters
Parameter Description Value
interface Specifies the The value is an integer that ranges from 0 to
fabric-port number of a 63 on an AS and the value range on the
port-id fabric port. parent varies depending on the switch model:
● S12700: 0 to 255
● S7712 (SRUE/SRUH)/S7706 (SRUE/SRUH):
0 to 255
● S9312 (SRUE/SRUH)/S9310/S9306(SRUE/
SRUH)/S9310X: 0 to 255
● Other switch models: 0 to 63
Views
User view
Default Level
3: Management level
Usage Guidelines
Before collecting statistics about AS Discovery packets on a fabric port, clear the
existing statistics.
Example
# Clear AS Discovery packet statistics on a fabric port.
<HUAWEI> reset uni-mng as-discover packet statistics interface fabric-port 1
Related Topics
3.9.43 display uni-mng as-discover packet statistics
Function
The shutdown interface command disables an AS port.
NOTE
Format
shutdown interface interface-type interface-number
undo shutdown interface interface-type interface-number
Parameters
Parameter Description Value
interface-type Specifies the interface type and number. -
interface-number
● interface-type specifies the interface type. The
interface type cannot be an Eth-Trunk interface.
● interface-number specifies the interface number.
Views
AS view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
You can run the shutdown interface command to disable an AS port.
Precautions
Running this command can disable only an AS downlink port but not an AS uplink
port. If an uplink port has been configured as a downlink fabric port, this port can
be disabled.
If the version of an AS is inconsistent with that of the parent, the shutdown
interface and undo shutdown interface commands do not take effect on the
ports of this AS.
If an AS is configured in the independent mode, the shutdown interface and
undo shutdown interface commands do not take effect on the ports of this AS.
Example
# Disable an AS port.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as name as1
[HUAWEI-um-as-as1] shutdown interface gigabitethernet 0/0/1
Related Topics
3.9.99 uni-mng
3.9.14 as name (uni-mng view)
3.9.88 slot
Function
The slot command pre-configures a stack ID or changes the pre-configured device
model.
The undo slot command deletes the pre-configured stack ID or changes the pre-
configured device model.
By default, the pre-configured stack ID is 0.
NOTE
Format
slot slot-id1 replace-model model-name
undo slot slot-id1 replace-model
slot slot-id2 [ to slot-id3 ] [ replace-model model-name ]
undo slot slot-id2 [ to slot-id3 ] [ replace-model ]
Parameters
Parameter Description Value
slot-id1 Specifies the pre-configured The value is 0.
stack ID.
Views
AS view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
The pre-configured stack ID does not affect the actual stack ID. For example, the
pre-configured stack ID is 0 (default value), but the actual stack IDs are 0 and 2.
The actual stack IDs remain 0 and 2 except that no services are configured on the
device with stack ID 2.
An AS can be a stack of the same device series but different device models. If the
stack contains different device models, you need to specify the replace-model
parameter to change the device model that is different from the other device
models in the stack to the actual access device model. If you do not specify the
device model of a specified member, by default, the device model of this member
is consistent with the pre-configured AS type.
Precautions
If the AS does not support stacking, the slot slot-id command configuration takes
effect on the parent only when slot 0 is configured as the stack ID.
Example
# Pre-configure a stack ID.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as name as1
[HUAWEI-um-as-as1] slot 1 to 4
# Change the device model of the switch with stack ID 2 in the AS as1 to
S5720-28X-SI-AC.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as name as1
[HUAWEI-um-as-as1] slot 2 replace-model S5720-28X-SI-AC
Related Topics
3.9.99 uni-mng
3.9.14 as name (uni-mng view)
Function
snmp-agent trap enable feature-name asmngtrap command enables the trap
function for the ASMNGTRAP module.
NOTE
Format
snmp-agent trap enable feature-name asmngtrap [ trap-name trap-name ]
undo snmp-agent trap enable feature-name asmngtrap [ trap-name trap-
name ]
Parameters
Parame Description Value
ter
Views
System view
Default Level
2: Configuration level
Usage Guidelines
When the trap function is enabled, the device generates traps during running and
sends traps to the NMS through SNMP. When the trap function is not enabled, the
device does not generate traps and the SNMP module does not send traps to the
NMS.
You can specify trap-name to enable the trap function for one or more events.
Example
# Enable the hwasaddofflinenotify trap of the ASMNGTRAP module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name asmngtrap trap-name hwasaddofflinenotify
Related Topics
3.9.38 display snmp-agent trap feature-name asmngtrap all
Function
snmp-agent trap enable feature-name unimbrtrap command enables the trap
function for the UNIMBRTRAP module.
NOTE
Format
snmp-agent trap enable feature-name unimbrtrap [ trap-name
{ hwasboardfail | hwasboardfailresume | hwasboardinvalid |
hwasboardinvalidresume | hwasbrdtempalarm | hwasbrdtempresume |
hwascommunicateerror | hwascommunicateresume |
hwascpuutilizationresume | hwascpuutilizationrising | hwasfaninsert |
hwasfaninvalid | hwasfaninvalidresume | hwasfanremove |
hwasmadconflictdetect | hwasmadconflictresume |
hwasmemutilizationresume | hwasmemutilizationrising | hwasopticalinvalid |
hwasopticalinvalidresum | hwaspowerinsert | hwaspowerinvalid |
hwaspowerinvalidresum | hwaspowerremove | hwunimbrasdiscoverattack |
hwunimbrconnecterror | hwunimbrfabricportmemberdelete |
hwunimbrillegalfabricconfig | hwunimbrlinkstatechange |
hwunimbrasserviceabnormal } ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
When the trap function is enabled, the device generates traps during running and
sends traps to the NMS through SNMP. When the trap function is not enabled, the
device does not generate traps and the SNMP module does not send traps to the
NMS.
You can specify trap-name to enable the trap function for one or more events.
Example
# Enable the hwasboardfail trap of the UNIMBRTRAP module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name unimbrtrap trap-name hwasboardfail
Related Topics
3.9.39 display snmp-agent trap feature-name unimbrtrap all
Function
snmp-agent trap enable feature-name uni-topomng command enables the trap
function for the UNI-TOPOMNG module.
undo snmp-agent trap enable feature-name uni-topomng command disables
the trap function for the UNI-TOPOMNG module.
By default, the trap function is enabled for the UNI-TOPOMNG module.
NOTE
Format
snmp-agent trap enable feature-name uni-topomng [ trap-name
{ hwtopomnglinkabnormal | hwtopomnglinknormal } ]
undo snmp-agent trap enable feature-name uni-topomng [ trap-name
{ hwtopomnglinkabnormal | hwtopomnglinknormal } ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
When the trap function is enabled, the device generates traps during running and
sends traps to the NMS through SNMP. When the trap function is not enabled, the
device does not generate traps and the SNMP module does not send traps to the
NMS.
You can specify trap-name to enable the trap function for one or more events.
Example
# Enable the hwtopomnglinkabnormal trap of the UNI-TOPOMNG module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name uni-topomng trap-name hwtopomnglinkabnormal
Related Topics
3.9.40 display snmp-agent trap feature-name uni-topomng all
Function
snmp-agent trap enable feature-name uni-tplm command enables the trap
function for the UNI-TPLM module.
NOTE
Format
snmp-agent trap enable feature-name uni-tplm [ trap-name
{ hwtplmcmdexecutefailednotify | hwtplmcmdexecutesuccessfulnotify |
hwtplmdirectcmdrecoverfail } ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
When the trap function is enabled, the device generates traps during running and
sends traps to the NMS through SNMP. When the trap function is not enabled, the
device does not generate traps and the SNMP module does not send traps to the
NMS.
You can specify trap-name to enable the trap function for one or more events.
Example
# Enable the hwtplmcmdexecutefailednotify trap of the UNI-TPLM module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name uni-tplm trap-name hwtplmcmdexecutefailednotify
Related Topics
3.9.41 display snmp-agent trap feature-name uni-tplm all
Function
snmp-agent trap enable feature-name uni-vermng command enables the trap
function for the UNI-VERMNG module.
undo snmp-agent trap enable feature-name uni-vermng command disables the
trap function for the UNI-VERMNG module.
By default, the trap function is enabled for the UNI-VERMNG module.
NOTE
Format
snmp-agent trap enable feature-name uni-vermng [ trap-name
hwvermngupgradefail ]
undo snmp-agent trap enable feature-name uni-vermng [ trap-name
hwvermngupgradefail ]
Parameters
Parameter Description Value
Views
System view
Default Level
2: Configuration level
Usage Guidelines
When the trap function is enabled, the device generates traps during running and
sends traps to the NMS through SNMP. When the trap function is not enabled, the
device does not generate traps and the SNMP module does not send traps to the
NMS.
You can specify trap-name to enable the trap function for one or more events.
Example
# Enable the hwvermngupgradefail trap of the UNI-VERMNG module.
<HUAWEI> system-view
[HUAWEI] snmp-agent trap enable feature-name uni-vermng trap-name hwvermngupgradefail
Related Topics
3.9.42 display snmp-agent trap feature-name uni-vermng all
NOTE
Format
traffic-limit inbound { arp | dhcp } cir cir-value
Parameters
Parameter Description Value
arp Specifies the ARP packet. -
dhcp Specifies the DHCP packet. -
cir cir-value Specifies the committed information The value is an integer
rate (CIR), which is the allowed average that ranges from 8 to
rate of traffic that can pass through. 128, in kbit/s.
Views
User access profile view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After a user access profile is created, you can configure the rate limit for incoming
ARP and DHCP packets on an AS port. After the user access profile is bound to the
AS port, the following configuration is generated on the AS port:
#
traffic-limit inbound acl 4999 cir cir-value pir pir-value cbs cbs-value pbs pbs-value
traffic-statistic inbound acl 4999
traffic-limit inbound acl 3999 cir cir-value pir pir-value cbs cbs-value pbs pbs-value
traffic-statistic inbound acl 3999
#
Precautions
● This command and the authentication command cannot be both run in the
user access profile view.
● Do not run the traffic-limit inbound dhcp and dhcp snooping enable
(network enhanced profile view) commands simultaneously on the same
port; otherwise, the traffic-limit inbound dhcp command does not take
effect. On an AS of the S2720EI, S2750EI, S5700LI, S5700S-LI, S5720S-LI,
S5720LI, S5720SI, S5720S-SI, S5710-X-LI, S5730SI, S5730S-EI, S6720LI, S6720S-
LI, S6720SI, S6720S-SI, or S600-E model, running the dhcp snooping enable
(network enhanced profile view) command on any port may cause the
traffic-limit inbound dhcp command unable to take effect on all ports. You
are advised to shut down the attacked port after detecting DoS attacks.
● Do not run the traffic-limit inbound arp and arp anti-attack check user-
bind enable (network enhanced profile view) commands simultaneously
on the same port. Otherwise, the traffic-limit inbound arp command may
not take effect. On an AS of the S2720EI, S2750EI, S5700LI, S5700S-LI,
S5720S-LI, S5720LI, S5720SI, S5720S-SI, S5710-X-LI, S5730SI, S5730S-EI,
S6720LI, S6720S-LI, S6720SI, S6720S-SI, or S600-E model, running the arp
Example
# Set the rate limit for incoming ARP packets to 64 on an AS port.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] user-access-profile name profile_1
[HUAWEI-um-user-access-profile_1] traffic-limit inbound arp cir 64
Related Topics
3.9.108 user-access-profile name
NOTE
Format
traffic-limit outbound { arp | dhcp } cir cir-value
undo traffic-limit outbound { arp | dhcp }
Parameters
Parameter Description Value
arp Specifies the ARP packet. -
dhcp Specifies the DHCP packet. -
cir cir-value Specifies the committed information The value is an integer
rate (CIR), which is the allowed average that ranges from 8 to
rate of traffic that can pass through. 512, in kbit/s.
Views
AS administrator profile view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After an AS administrator profile is created, you can configure the rate limit for
outgoing ARP and DHCP packets on an AS uplink fabric port. After the AS goes
online, the following configuration is generated in the AS Eth-Trunk 0 view and
system view, regardless of whether the AS administrator profile is bound to the
AS:
#
acl number 3999
rule 5 permit udp destination-port eq bootps
#
acl number 4998
rule 5 permit vlan-id management-vlan
acl number 4999
rule 5 permit l2-protocol arp destination-mac ffff-ffff-ffff
rule 10 permit l2-protocol arp
#
interface Eth-Trunk0
traffic-filter outbound acl 4998
traffic-statistic outbound acl 3999
traffic-limit outbound acl 3999 cir cir-value pir pir-value cbs cbs-value pbs pbs-value
traffic-statistic outbound acl 4999
traffic-limit outbound acl 4999 cir cir-value pir pir-value cbs cbs-value pbs pbs-value
#
Example
# Set the rate limit for outgoing ARP packets to 64 on an uplink fabric port.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as-admin-profile name profile_1
[HUAWEI-um-as-admin-profile_1] traffic-limit outbound arp cir 64
Related Topics
3.9.4 as-admin-profile name
NOTE
Format
topology explore [ interval interval ]
Parameters
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
You can adjust the interval for collecting SVF network topology information based
on SVF network stability. When the network topology is stable, you can increase
the interval or disable periodic topology information collection. When the network
topology is unstable, you can shorten the interval.
You can also run the topology explore command to trigger SVF network topology
collection immediately.
Example
# Set the SVF network topology collection interval to 30 minutes.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] topology explore interval 30
Related Topics
3.9.99 uni-mng
NOTE
This command can only be executed on an AS. After this command is executed, the AS restarts.
Format
undo uni-mng enable
Parameters
None
Views
User view
Default Level
3: Management level
Usage Guidelines
You can run the undo uni-mng enable command to change an AS from the client
mode to the standalone mode.
Example
# Change an AS from the client mode to the standalone mode.
<HUAWEI> undo uni-mng enable
NOTE
Format
uni eth-trunk trunk-id [ mode lacp ]
Parameters
Parameter Description Value
Views
AS view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
Precautions
Follow-up Procedure
Example
# Create Eth-Trunk 2 in LACP mode for the AS test.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as name test
[HUAWEI-um-as-test] uni eth-trunk 2 mode lacp
Related Topics
3.9.13 as name interface (port group view)
3.9.47 display uni-mng as interface eth-trunk
3.9.55 display uni-mng port-group
3.9.99 uni-mng
Function
The uni-mng command enables SVF or displays the uni-mng view.
NOTE
Format
uni-mng
undo uni-mng
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
When SVF is disabled, the uni-mng command enables SVF and displays the uni-
mng view. When SVF has been enabled, this command displays the uni-mng view.
Prerequisites
● A source interface used to set up a CAPWAP link has been specified using the
capwap source interface vlanif vlan-id command.
● The STP working mode must be STP or RSTP. If the current working mode is
not STP or RSTP, run the stp mode { rstp | stp } command to set the STP
working mode to STP or RSTP before enabling SVF. By default, the STP
working mode is MSTP. You can run the display stp command to check the
current STP working mode.
● The default STP/RSTP port path cost algorithm must be used. If the current
port path cost algorithm is not the default one, run the undo stp pathcost-
standard command to restore the default port path cost algorithm before
enabling SVF. The default STP/RSTP port path cost algorithm is IEEE 802.1t
(dot1t). You can run the display stp command to check the current port path
cost algorithm.
● The default Eth-Trunk specifications are used. If the current Eth-Trunk
specifications are not the default value on S6720EI or S6720S-EI, run the
undo assign trunk command to restore the default Eth-Trunk specifications
before enabling SVF. You can run the display trunk configuration command
to check the default and configured Eth-Trunk specifications.
● The NAC configuration mode must be the unified mode. If the current mode
is not the unified mode, run the authentication unified-mode command to
set the NAC configuration mode to unified mode. The default NAC
configuration mode is unified mode. You can run the display authentication
mode command to check the current NAC configuration mode.
● Remote authorization is not configured in the system. If remote authorization
has been configured, run the undo remote-authorize command to disable
remote authorization before enabling SVF. By default, remote authorization is
not configured in the system. You can run the display current-configuration
command to check whether remote authorization is configured.
Precautions
When SVF is disabled on the parent, the STP priorities of ports change, and STP
recalculates the port role and changes the interface status.
After SVF is enabled on a switch used as the parent, the stack timer mac-address
switch-delay value changes to 0 (not changing system MAC address) and cannot
be changed. After SVF is disabled on this switch, this delay time is still 0, but you
can manually change it.
Example
# Enable SVF (default Eth-Trunk specifications and default NAC configuration
mode).
<HUAWEI> system-view
[HUAWEI] vlan batch 11
[HUAWEI] interface Vlanif 11
[HUAWEI-Vlanif11] ip address 192.168.11.1 24
[HUAWEI-Vlanif11] quit
[HUAWEI] capwap source interface vlanif 11
[HUAWEI] stp mode stp
[HUAWEI] uni-mng
Warning: This operation will switch to the uni-mng system and disconnect all online ASs. Continue? [Y/N]:y
Related Topics
13.4.38 authentication unified-mode
11.1.67 capwap source interface
5.12.47 stp mode (system view)
5.12.49 stp pathcost-standard
Function
The uni-mng indirect fabric-port command configures a member port for an
uplink fabric port that connects an AS to the parent through a network.
By default, no member port is configured for an uplink fabric port that connects
an AS to the parent through a network.
NOTE
Format
uni-mng indirect fabric-port member interface interface-type interface-number
Parameters
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
When an AS connects to the parent through a network, you must run the uni-
mng indirect fabric-port command to configure a member port for an uplink
fabric port of the AS. You can run this command multiple times to add multiple
member ports to the fabric port.
Prerequisites
Precautions
● Only AS uplink ports or subcard ports can be added to an uplink fabric port. If
you have to add AS downlink ports to uplink fabric ports, run the uni-mng
up-direction fabric-port member interface interface-type interface-number
[ to interface-number ] command.
● A maximum of eight member ports can be added to a fabric port.
● Ports used to set up a stack cannot be configured as member ports of a fabric
port.
● The command that configures the stack ID is mutually exclusive with the
command that configures a member port for a fabric port:
– After the stack slot slot-id renumber new-slot-id command is executed
in a specified slot, the port in the slot cannot be configured as a member
port of a fabric port.
– After a port in a slot is configured as a member port of a fabric port, the
stack ID of the slot cannot be configured using the stack slot slot-id
renumber new-slot-id command.
● You need to configure a member port of a fabric port according to the
network configuration. A member port needs to be reconfigured if the stack
ID changes because the stack changes, for example, the stacking function is
disabled, or existing stack IDs conflict after member devices are added to the
stack.
Example
# Configure member ports for an uplink fabric port that connects an AS to the
parent through a network.
<HUAWEI> uni-mng indirect fabric-port member interface gigabitethernet 0/0/27
<HUAWEI> uni-mng indirect fabric-port member interface gigabitethernet 0/0/28
NOTE
Format
uni-mng indirect mng-vlan vlan-id
Parameters
Parameter Description Value
vlan-id Specifies a management VLAN. The value is an integer that
The VLAN must be consistent ranges from 2 to 4094. The VLAN
with the management VLAN cannot be the reserved VLAN
configured on a parent. (VLAN 4093) of a stack.
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
When an AS connects to the parent through a network, you must run the uni-
mng indirect mng-vlan command to configure the AS to work in client mode and
configures a management VLAN.
Precautions
● The VCMP role switching command is mutually exclusive with the command
that configures a device to work in client mode. If the current device is not a
silent switch in a VCMP domain, the device cannot be configured to work in
client mode. You must run the vcmp role silent command in the system view
to set the VCMP role of the device to silent. After a device is configured to
work in client mode, the VCMP role switching command cannot be executed.
That is, the device cannot change from the silent role to another role.
● After running the uni-mng indirect mng-vlan vlan-id command on the
device in standalone mode, you must delete the configuration file of the
device and restart the device to make the configuration take effect.
● If the device has been configured to work in client mode but has not gone
online, you can run the uni-mng indirect mng-vlan vlan-id command
multiple times to change the management VLAN, and the configuration takes
effect immediately.
● If the device has been configured to work in client mode and has gone online,
the uni-mng indirect mng-vlan vlan-id command cannot be executed.
● When an AS is an S5700-10P-LI, S5700-10P-PWR-LI-AC, or S2750EI and Layer
3 hardware forwarding for IPv4 packets has been enabled using the assign
forward-mode ipv4-hardware command in the system view, the
management VLAN cannot be configured. To solve this problem, start the AS
in standalone mode and run the undo assign forward-mode command in
the system view to disable Layer 3 hardware forwarding for IPv4 packets.
● On the S5720SI, S5720S-SI, S5730SI, S5730S-EI, S6720LI, S6720S-LI, S6720SI,
S6720S-SI, S600-E, the electrical port stack configuration on the front panel is
mutually exclusive with the client mode configuration. If electrical ports on
the front panel have been configured as stack physical member ports, no
management VLAN cannot be configured. If a management VLAN has been
configured, electrical ports on the front panel cannot be configured as stack
physical member ports.
● If an AS is configured in the independent mode, its management VLAN
cannot be configured using this command.
Example
# Configure the device to work in client mode and configure a management VLAN
100.
<HUAWEI> uni-mng indirect mng-vlan 100
Function
The uni-mng up-direction fabric-port command configures AS service ports as
an uplink fabric port's members.
By default, AS service ports are not configured as members of uplink fabric ports.
NOTE
Format
uni-mng up-direction fabric-port member interface interface-type interface-
number [ to interface-number ]
undo uni-mng up-direction fabric-port member interface interface-type
interface-number [ to interface-number ]
undo uni-mng up-direction fabric-port member all
Parameters
Parameter Description Value
member interface Specifies the type and number of an AS service -
interface-type interface- port to be configured as a member of an
number uplink fabric port.
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
To configure AS service ports as an uplink fabric port's members, run the uni-mng
up-direction fabric-port command.
Precautions
this case, delete the stack port configuration from the downlink service
interface.
Example
# Configure an AS service port as a member of an uplink fabric port.
<HUAWEI> uni-mng up-direction fabric-port member interface gigabitethernet 0/0/3
Warning: After a service port on an AS is configured as an uplink port, the AS needs to be restarted to
make the configuration take effect.
If the parent has a configuration conflict with the AS, the AS may fail to go online. Continue? [Y/N]:y
NOTE
Format
unicast-suppression packets packets-per-second
undo unicast-suppression
Parameters
Parameter Description Value
packets Specifies the The value is an integer that ranges from 0
packets-per- packet rate of an to 14881000, in packets per second (PPS).
second interface.
If the configured packet rate on the parent
switch is larger than the maximum value
on the AS port, the maximum value takes
effect on the AS port.
Views
Network enhanced profile view
Default Level
3: Management level
Usage Guidelines
After creating a network enhanced profile, you can configure unknown unicast
traffic suppression in the profile. After the profile is bound to an AS port, unknown
unicast traffic suppression is automatically configured on the port. The following
configuration is generated on the AS port:
#
unicast-suppression packets packets-per-second
#
Example
# Configure unknown unicast traffic suppression in a network enhanced profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-enhanced-profile name profile_1
[HUAWEI-um-net-enhanced-profile_1] unicast-suppression packets 148810
Related Topics
3.9.74 network-enhanced-profile name
3.9.104 upgrade as
Function
The upgrade as name command upgrades an AS with a specified name.
The upgrade as name-include command upgrades ASs of which the name
contains a specified string.
The upgrade as type command upgrades ASs of a specified type.
The upgrade as all command upgrades all ASs.
undo upgrade as command rolls back ASs to the previous version.
NOTE
Format
upgrade as name as-name [ reload [ in time ] ]
upgrade as name-include string [ reload [ in time ] ]
upgrade as type as-type [ reload [ in time ] ]
upgrade as all [ reload [ in time ] ]
undo upgrade as { all | name as-name | name-include string | type as-type }
Parameters
Parameter Description Value
as-name Upgrades an AS with a specified The value must have an existing
name. AS name.
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
You can run the upgrade as command to upgrade online ASs. You can upgrade
one AS, ASs of a specified type, or all ASs.
After performing upgrade configuration on an AS, the patch and system software
files for the next startup will be the specified ones. You can run the undo upgrade
as command to cancel the configuration as long as the AS is not restarted. After
this command is executed, the patch and system software files for the next startup
are consistent with the currently running ones. If the patch has taken effect after
upgrade configuration is performed, the patch cannot be rolled back to the
previous version.
Precautions
● The patch and system software files used to upgrade ASs are specified in the
as type command.
● The system software file name or patch file name specified using the as type
command cannot be the same as the current or next startup system software
file or patch file of an AS. Otherwise, the AS cannot be upgraded using the
upgrade as command.
● When you upgrade an AS using the upgrade as command without specifying
reload:
– If you specify patch patch but not system-software system-software in
the as type command, the patch file is activated online immediately.
– If you specify both patch patch and system-software system-software in
the as type command and the specified system software file version is
the version running on the AS, the patch file is activated online
immediately.
– If you specify both patchpatch and system-softwaresystem-software in
the as type command and the specified system software file version is
earlier or later than the version running on the AS, the specified system
software file and patch file will be set as next startup files.
Example
# Perform an in-service upgrade on an AS of the S5700-P-LI type.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] upgrade as type s5700-p-li reload
Related Topics
3.9.99 uni-mng
Function
The upgrade { local-ftp-server | local-sftp-server } command configures a local
file server.
NOTE
Format
upgrade { local-ftp-server | local-sftp-server } username username password
password
undo upgrade { local-ftp-server | local-sftp-server }
Parameters
Parameter Description Value
local-ftp- Specifies the file -
server server type as FTP
server.
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In an AS automatic upgrade or in-service AS batch upgrade, you need to
download the version file or patch file from the parent. Before the upgrade, you
need to configure the parent as an FTP/SFTP server. The AS then can work as a
client to download files from the FTP/SFTP server.
Precautions
● The files used to upgrade an AS are often saved in the root directory unimng/
of the parent. These files can also be saved on an AS when the AS is upgraded
or downgraded to the software version that is consistent with that of the
parent.
● FTP has potential security risks, and so SFTP is recommended. If you want to
use FTP, you are advised to configure ACLs to improve security. For details, see
Configure the FTP ACL in "File Management" in the S1720, S2700, S5700, and
S6720 V200R011C10 Configuration Guide - Basic Configuration.
● When the file server is an FTP server, the FTP service is automatically enabled
and an FTP user is created on the parent, removing the need to perform the
FTP configuration.
● When the file server type is set to SFTP, the SFTP service is not automatically
enabled and no SFTP user is created on the parent. You need to manually pre-
configure SFTP on the parent.
● After the upgrade { local-ftp-server | local-sftp-server } command is
executed, the same user name and password configuration is also generated
in the AAA view. If you modify the configured local user information (the user
password for example) in AAA view, the version management function does
not take effect.
● If information about a user already exists in the AAA view, running this
command to create the same user will change the user password in the AAA
view to the configured password and change the user level to level 3.
Changing the user password is allowed only when the user level of the user
running this command is higher or equal to the user level configured in the
AAA view. Otherwise, the command does not take effect.
● Running this command multiple times to create new users will delete previous
user information. Previous user information can be deleted only when the
user level of the user running this command is higher or equal to the user
level configured in the AAA view. Otherwise, the command does not take
effect.
● If a remote authentication server is used for AAA authentication, the user
name and password configured using this command must also be configured
on the remote authentication server.
● If a remote authentication server is used for AAA authentication and the
remote authentication server does not support FTP or SFTP, ASs will fail to be
authenticated. In this case, run the 13.1.20 authentication-scheme (AAA
view) command in the AAA view to create an authentication scheme and run
the authentication-mode local command in the authentication scheme view
to set the authentication mode to local authentication. Then, run the 13.1.47
domain (AAA view) command in the AAA view to create a domain and run
the 13.1.19 authentication-scheme (AAA domain view) command in the
AAA domain view to apply the created authentication scheme to the domain.
ASs can be authenticated when they use the newly created domain for local
authentication.
Example
# Set the local file server type to FTP server.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] upgrade local-ftp-server username test password Pwd@12345
NOTE
Format
upload config
Parameters
None
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In independent mode, after services are configured on an AS using commands,
you can run the upload config command to save the service configuration and
upload the configuration file to the parent.
Precautions
● After this command is executed, the AS configuration file uploaded to the
parent will be saved to the flash:/unimng/ind-cfg directory or the cfcard:/
unimng/ind-cfg directory on some parent switch models. If the file name
format is unimng-xxxx-xxxx-xxxx.zip (xxxx-xxxx-xxxx indicates the
management MAC address of an AS), and the service configuration mode of
this AS is independent mode, it is not allowed to delete this configuration file.
Example
# Save the AS configuration to the flash memory of the AS and upload the
configuration file of the AS to the parent.
<HUAWEI> upload config
NOTE
Format
user-access-port enable
undo user-access-port enable
Parameters
None
Views
Network enhanced profile view
Default Level
3: Management level
Usage Guidelines
After creating a network enhanced profile, you can configure the edge port
function in the profile. After the profile is bound to an AS port, the port becomes
an edge port. The following configuration is generated on the AS port:
#
stp edged-port enable
#
Example
# Enable the edge port function in a network enhanced profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-enhanced-profile name profile_1
[HUAWEI-um-net-enhanced-profile_1] user-access-port enable
Related Topics
3.9.74 network-enhanced-profile name
NOTE
Format
user-access-profile name profile-name
undo user-access-profile name profile-name
Parameters
Parameter Description Value
profile-name Specifies the name of a The value is a string of 1 to 31 case-
user access profile. sensitive characters without spaces. The
value can contain letters, digits, and
underscores (_).
Views
uni-mng view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
In a user access profile, you can configure authentication services for user access
(for example, the authentication mode), MAC address learning limiting, and the
rate limit for incoming ARP and DHCP packets on an AS port.
Precautions
Example
# Create a user access profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] user-access-profile name profile_1
Related Topics
3.9.22 authentication-profile (user access profile view)
3.9.70 mac-limit (user access profile view)
Function
The user-access-profile command binds a user access profile to a port group.
The undo user-access-profile command unbinds a user access profile from a port
group.
NOTE
Format
user-access-profile profile-name
undo user-access-profile
Parameters
Parameter Description Value
profile-name Specifies the name of a user The value must have an existing
access profile. user access profile name.
Views
Port group view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
You can bind a user access profile to a port group to deliver the configurations in
the profile to all the member ports in the port group.
Prerequisites
The user access profile has been created.
Precautions
● A user access profile can be bound to only an AS port group but not an AP
port group.
● A port group can be bound to only one user access profile.
Example
# Bind a user access profile to a port group.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] user-access-profile name profile_1
[HUAWEI-um-user-access-profile_1] quit
[HUAWEI-um] port-group name group_1
[HUAWEI-um-portgroup-group_1] user-access-profile profile_1
Related Topics
3.9.108 user-access-profile name
NOTE
Format
user-vlan vlan-id
undo user-vlan
Parameters
Parameter Description Value
vlan-id Specifies a VLAN The value is an integer that ranges from 1 to
ID. 4094.
The value cannot be the ID of an SVF
management VLAN, a stack management VLAN,
an ERPS control VLAN, an RRPP control VLAN, an
SEP control VLAN, or a super VLAN.
Views
Network basic profile view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After creating a network basic profile, you can configure the default VLAN in the
profile. After the profile is bound to an AS port, the default VLAN is automatically
configured on the port. The following configuration is generated on the AS port:
#
port link-type hybrid
port hybrid pvid vlan vlan-id
The user-vlan command can only configure the default VLAN for a port. To
enable this port to allow packets of multiple VLANs to pass through, run the pass-
vlan command in a network basic profile.
Precautions
The default VLAN, allowed VLANs, and voice VLAN in a network basic profile must
be different.
Example
# Configure the default VLAN in a network basic profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-basic-profile name profile_1
[HUAWEI-um-net-basic-profile_1] user-vlan 10
Related Topics
3.9.72 network-basic-profile name
Function
The user password command configures an AS administrator in an AS
administrator profile.
NOTE
Format
user user-name password password
Parameters
Parameter Description Value
user-name Specifies a The value is a string of 1 to 64 case-insensitive
user name. characters. It cannot contain spaces, asterisk, double
quotation mark and question mark.
Views
AS administrator profile view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After creating an AS administrator profile, you can configure an AS administrator
in the profile, including the user name and password. After the profile is bound to
an AS, the user name and password for login are automatically configured on the
AS. The following configuration is generated on the AS:
#
aaa
local-user user-name password irreversible-cipher password
local-user user-name privilege level 3
local-user user-name service-type terminal ssh
#
After an AS user name and password are configured, you need to enter the correct
user name and password when logging in to an AS through the console port.
When you log in to an AS from the parent using the attach as name as-name
command, you can log in to the AS without entering the user name or password.
Precautions
When no AS user name and password are configured, you need to enter the
default user name and password when logging in to an AS through the console
port.
The default username and password are available in S Series Switches Default
Usernames and Passwords (Enterprise Network or Carrier). If you have not
obtained the access permission of the document, see Help on the website to find
out how to obtain it.
NOTE
The default password has security risks. You are advised to change the login password.
Example
# Configure the user name and password for an AS administrator.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] as-admin-profile name profile_1
[HUAWEI-um-as-admin-profile_1] user test password Pwd@123456
Related Topics
3.9.4 as-admin-profile name
NOTE
Format
voice-vlan vlan-id [ include-untagged ]
undo voice-vlan
Parameters
Parameter Description Value
vlan-id Specifies a VLAN ID. The value is an integer that ranges from 2
to 4094.
The value cannot be the ID of an SVF
management VLAN, a stack management
VLAN, an ERPS control VLAN, an RRPP
control VLAN, an SEP control VLAN, or a
super VLAN.
Views
Network basic profile view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After creating a network basic profile, you can configure a voice VLAN in the
profile. After the profile is bound to an AS port, the voice VLAN is automatically
configured on the port. The following configuration is generated on the AS port:
● The include-untagged parameter is not specified:
#
port link-type hybrid
port hybrid tagged vlan vlan-id
lldp tlv-enable med-tlv network-policy voice-vlan vlan vlan-id
lldp compliance cdp txrx
#
Precautions
The default VLAN, allowed VLANs, and voice VLAN in a network basic profile must
be different.
Example
# Configure a voice VLAN in a network basic profile.
<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] network-basic-profile name profile_1
[HUAWEI-um-net-basic-profile_1] voice-vlan 10
Related Topics
3.9.72 network-basic-profile name
Function
The whitelist mac-address command adds a specified MAC address to the
whitelist.
The undo whitelist mac-address command deletes a MAC address from the
whitelist.
NOTE
Format
whitelist mac-address mac-address1 [ to mac-address2 ]
Parameters
Parameter Description Value
mac-address1 [ to Specifies MAC addresses The value is in H-H-H format,
mac-address2 ] to be added to a where H is a hexadecimal number
whitelist. of 1 to 4 digits. The value cannot
be all 0s, all Fs, or a multicast
MAC address.
Views
AS authentication view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
When an SVF system needs to authenticate an AS, the SVF system allows the AS
to connect to if the MAC address of the AS is in the whitelist and disallows the AS
to connect to if the MAC address is in the blacklist.
Precautions
● A MAC address cannot exist in both the whitelist and blacklist.
● By default, if the MAC address of an AS is neither in the whitelist nor in the
blacklist, the AS fails the authentication. You can run the confirm { all | mac-
address mac-address } command to allow all ASs or a specified AS to pass
the authentication.
Example
# Add the MAC address 0025-9e07-8280 to the whitelist.
<HUAWEI> system-view
[HUAWEI] as-auth
[HUAWEI-as-auth] whitelist mac-address 0025-9e07-8280
Related Topics
3.9.5 as-auth
Function
The cloud-mng controller ip-address command configures an IP address for the
cloud management platform.
Format
cloud-mng controller ip-address ip-address port port-number
NOTE
This command is supported only after the switch is changed to the cloud-based management
mode.
Parameters
Parameter Description Value
ip-address Specifies an IP address for the The value is in dotted decimal
cloud management platform. notation.
port-number Specifies a port number. The value is an integer that
ranges from 0 to 65535.
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
Precautions
Example
# Configure an IP address for the cloud management platform.
<HUAWEI> system-view
[HUAWEI] cloud-mng controller ip-address 10.1.1.1 port 10020
Function
The cloud-mng controller url command configures a URL for the cloud
management platform.
The undo cloud-mng controller url command deletes the URL configured for the
cloud management platform.
Format
cloud-mng controller url url-string port port-number
NOTE
This command is supported only after the switch is changed to the cloud-based management
mode.
Parameters
Parameter Description Value
url-string Specifies a URL for the The value is a string of 3 to 128 case-
cloud management sensitive characters. If you need to set
platform. one or more consecutive spaces, enclose
the spaces in double quotation marks (").
port-number Specifies a port The value is an integer that ranges from 0
number. to 65535.
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After the switch is changed to the cloud-based management mode, it needs to
register with the cloud management platform for authentication. Before
registration authentication, the switch needs to obtain the cloud management
platform's IP address. The switch can obtain the IP address using DHCP or the
registration query center or obtain the IP address resolved from the URL
configured using the cloud-mng controller url command.
Precautions
● If the switch is configured to obtain the cloud management platform's URL
using DHCP, the registration query center, and commands, the three methods
are used in descending order of priority: DHCP, commands, and the
registration query center.
● If you run this command multiple times, only the latest configuration takes
effect.
● When both the cloud-mng controller ip-address and cloud-mng controller
url commands are configured on the switch, only the latest configured one
takes effect. That is, the switch registers with the cloud management platform
using either the cloud management platform's IP address or URL-resolved IP
address.
● The configuration of this command is saved in the flash memory and
therefore cannot be cleared by running the reset cloud-mng db-
configuration command. To clear the configuration of this command, run the
undo cloud-mng controller url command.
Example
# Configure a URL for the cloud management platform.
<HUAWEI> system-view
[HUAWEI] cloud-mng controller url controller.huawei.com port 10020
Format
cloud-mng management-vlan vlan-id
NOTE
This command cannot be configured on the switch and can only be configured through the
cloud management platform.
Parameters
Parameter Description Value
vlan-id Specifies the ID of the VLAN used by the The value is an integer
switch to communicate with a DHCP that ranges from 1 to
server. 4094.
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After the switch is changed to the cloud-based management mode, it can obtain
the cloud management platform's address information using DHCP. As shown in
Figure 3-1, the switch obtains the cloud management platform's address
information through the DHCP server in step 2. The DHCP request initiated by the
switch is transmitted over VLAN 1. After the switch passes registration
authentication, the controller of the cloud management platform reconfigures the
VLAN used by the switch to communicate with the DHCP server. After the switch
restarts, to ensure that it continues to use the reconfigured VLAN to communicate
with the DHCP server, it records the management VLAN configured by the
controller for communication between the switch and DHCP server into its
configuration file. During the restart of the switch, the management VLAN can
take effect through configuration restoration.
Figure 3-1 Changing the device management mode and obtaining the cloud
management platform's address information through a DHCP server
Cloud management platform
Switch
AP
Precautions
This command cannot be configured on the switch and can only be modified
through the controller.
Function
The cloud-mng redirected-controller ip-address command records the redirected
IP address and port number of the cloud management platform.
By default, the switch does not record the redirected IP address and port number
of the cloud management platform.
Format
cloud-mng redirected-controller ip-address ip-address port port-number
NOTE
This command cannot be configured on the switch and can only be configured through the
cloud management platform.
Parameters
Views
System view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
After the switch is changed to the cloud-based management mode and passes
registration authentication with the cloud management platform, the IP address
and port number of the cloud management platform are redirected on the
controller of the cloud management platform.
After the switch restarts, to ensure that it continues to use the redirected cloud
management platform on the controller, it records the redirected IP address and
port number of the cloud management platform into its configuration file. During
the restart of the switch, the redirected IP address and port number can take
effect through configuration restoration.
Precautions
The switch can obtain the cloud management platform's address information
using different methods (listed in descending order of priority): obtain the cloud
management platform's redirection information recorded in its configuration file,
use DHCP, use commands, and obtain the information from the registration query
center.
Function
The display cloud-mng connect-attribute command displays information about
the connection between a switch and the cloud management platform.
Format
display cloud-mng connect-attribute
NOTE
This command is supported only after the switch is changed to the cloud-based management
mode.
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
This command can display information about the connection between a switch
and the cloud management platform, including the cloud management platform's
URL and port number.
Example
# Display information about the connection between a switch and the cloud
management platform.
<HUAWEI> display cloud-mng connect-attribute
------------------------------------------------------------------------------
Controller address source : Allocated by Register Center
Controller URL : device_naas.huawei.com
Controller IP address :-
Controller port : 10020
Management VLAN :1
Management IP address : 10.10.10.1
------------------------------------------------------------------------------
Item Description
Function
The display cloud-mng configuration command displays cloud management
platform information.
Format
display cloud-mng configuration
NOTE
This command is supported only after the switch is changed to the cloud-based management
mode.
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
To view cloud management platform information (such as an IP address), run the
display cloud-mng configuration command.
Example
# Display cloud management platform information.
<HUAWEI> display cloud-mng configuration
--------------- Cloud-mng configuration begin---------------
cloud-mng controller ip-address 10.1.1.1 port 10020
cloud-mng controller ip-address 192.168.2.2 port 10020 (redirected)
--------------- Cloud-mng configuration end-----------------
Item Description
Function
The display cloud-mng register-fail-record command displays records about
failures to register with the cloud management platform.
Format
display cloud-mng register-fail-record
NOTE
This command is supported only after the switch is changed to the cloud-based management
mode.
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
After this command is executed, a maximum of five registration failure records can
be displayed.
Example
# Display records about failures to register with the cloud management platform.
<HUAWEI> display cloud-mng register-fail-record
------------------------------------------------------------------------------
Time Error Info
------------------------------------------------------------------------------
2016/02/09 22:21:02 Failed to apply IP address
2016/02/09 23:12:13 Failed to create TCP link to controller (192.168.1.1)
------------------------------------------------------------------------------
Item Description
Function
The display cloud-mng register-status command displays the status of
registration with the cloud management platform.
Format
display cloud-mng register-status
NOTE
This command is supported only after the switch is changed to the cloud-based management
mode.
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display cloud-mng register-status command to check the
current registration status and registration phase.
Example
# Display the status of registration with the cloud management platform.
<HUAWEI> display cloud-mng register-status
------------------------------------------------------------------------------
Register status : unregistered
Register phase : DHCP
------------------------------------------------------------------------------
Format
display linux network status
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
You can run the display network status command to view which transport-layer
ports are in use. However, this command does not display the transport-layer ports
used in NETCONF connections set up between the switch and remote device. To
view these ports, run the display linux network status command.
Example
# Display information of transport layer connections.
<HUAWEI> display linux network status
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 192.168.20.102:55800 192.168.10.7:55804 ESTABLISHED
tcp 0 0 192.168.20.103:55801 192.168.10.8:55805 ESTABLISHED
tcp 0 0 192.168.20.104:55803 192.168.10.9:55806 ESTABLISHED
Table 3-145 Description of the display linux network status command output
Item Description
Local Address IP address and TCP port used by the switch to set
up a connection with the remote end.
Item Description
Foreign Address IP address and TCP port used by the remote end to
set up a connection with the switch.
Format
display work-mode
Parameters
None
Views
All views
Default Level
1: Monitoring level
Usage Guidelines
To check whether the current device works in cloud-based management mode,
run the display work-mode command.
Example
# Display the working mode of the current device.
<HUAWEI> display work-mode
Current work-mode: cloud-mng
Item Description
Function
The work-mode cloud-mng command sets the device management mode of a
switch to the cloud-based management mode.
The undo work-mode command restores the default device management mode
of a switch.
Format
work-mode cloud-mng (Supported when the switch is the traditional
management mode)
Parameters
None
Views
User view
Default Level
3: Management level
Usage Guidelines
Usage Scenario
Precautions
After this command is executed, the system asks whether you want to clear all the
configuration and restart the switch. Confirm the action.
After the switch works in cloud-based management mode, pay attention to the
following points:
Example
# Set the device management mode of a switch to the cloud-based management
mode.
<HUAWEI> work-mode cloud-mng
Warning:This command will clear current startup configuration and reboot, the unsaved configuration will
be lost. Continue? [Y/N]: y
Function
The reset cloud-mng db-configuration command clears the database
configuration.
Format
reset cloud-mng db-configuration
Parameters
None
Views
System view
Default Level
3: Management level
Usage Guidelines
To stop providing network services, run the reset cloud-mng db-configuration
command to clear all the database configuration.
NOTICE
Example
# Clear the database configuration.
<HUAWEI> system-view
[HUAWEI] reset cloud-mng db-configuration
Warning: This operation will clear the database configuration and saved configuration file and restart the
device. Continue? [Y/N]:
Function
The reset cloud-mng register-fail-record command clears records about failures
to register with the cloud management platform.
Format
reset cloud-mng register-fail-record
NOTE
This command is supported only after the switch is changed to the cloud-based management
mode.
Parameters
None
Views
All views
Default Level
3: Management level
Usage Guidelines
You can run the reset cloud-mng register-fail-record command to clear records
about failures to register with the cloud management platform. Confirm the
action before running this command.
Example
# Clear records about failures to register with the cloud management platform.
<HUAWEI> reset cloud-mng register-fail-record
Warning: This command will clear the registration failures. Continue? [Y/N]: y