Manual h3c Msr20 Msr30 Msr50-Cmw520-r1719p03-Si Release Notes 0 1285 2

H3C MSR20_MSR30_MSR50-CMW520-R1719P03-SI

Release Notes Hangzhou H3C Technologies Co., Ltd.

Hangzhou H3C Technologies Co., Ltd. H3C MSR20_MSR30_MSR50-CMW520-

R1719P03-SI Release Notes

June 2, 2009 of 156

H3C MSR20_MSR30_MSR50-CMW520-R1719P03-SI

Release Notes

Keywords: Version Information Unresolved Problems and Avoidance Measure

Abstract: The explication for this version, including Version Information, Unresolved Problems and

Avoidance Measure, Version Compatibility, Software Upgrading and so on.

Acronyms:

Acronym Full spelling

LAN Local Area Network

MAC Media Access Control

IGMP Internet Group Management Protocol

VLAN Virtual Local Area Network

STP Spanning Tree Protocol

RMON Remote Monitor(SNMP)

GMRP GARP Multicast Registration Protocol

ACL Access Control List

DHCP Dynamic Host Configuration Protocol

OSPF Open Shortest Path First

RIP Routing Information Protocol

ARP Address Resolution Protocol

AAA Authentication Authorization Accounting

RSTP Rapid Spanning Tree Protocol

PIM Protocol Independent Multicast

LPM Longest Prefix Match

QoS Quality of Service

UTP Unshielded Twisted Paired

SFP Small Form-Factor Pluggable

GBIC Gigabit Interface Converter



June 2, 2009 of 156

Table of Contents

Version Information·········································································································································6 Version Number ·········································································································································6 Version History···········································································································································6 Hardware and Software Compatibility Matrix·····························································································8

Restrictions and Cautions ····························································································································10 Version Usage Limitations ·······················································································································10 Important Notes········································································································································10

Feature List ····················································································································································10 Hardware Features ··································································································································10 Software Features····································································································································23

Version Updates ············································································································································28 Feature Updates ······································································································································28 Command Line Updates ··························································································································40 MIB Updates ··········································································································································104 Configuration Changes ··························································································································107

Open Problems and Workarounds ············································································································107

List of Resolved Problems ·························································································································107 Resolved Problems in CMW520-R1719P03··························································································107 Resolved Problems in CMW520-R1719P02··························································································108 Resolved Problems in CMW520-E1719P01··························································································110 Resolved Problems in CMW520-R1719P01··························································································110 Resolved Problems in CMW520-R1719 ································································································112 Resolved Problems in CMW520-R1718 ································································································113 Resolved Problems in CMW520-E1713 ································································································115 Resolved Problems in CMW520-E1711P01··························································································115 Resolved Problems in CMW520-B1707 ································································································115 Resolved Problems in CMW520-B1608 ································································································116 Resolved Problems in CMW520-B1606 ································································································117 Resolved Problems in CMW520-R1508P02&CMW520-B1508P02 ······················································118 Resolved Problems in CMW520-R1508&CMW520-B1508···································································118 Resolved Problems in CMW520-R1507 ································································································119 Resolved Problems in CMW520-B1502 ································································································119 Resolved Problems in CMW520-B1501L01 ··························································································120 Resolved Problems in CMW520-B1204P04··························································································120 Resolved Problems in CMW520-B1204P03··························································································120 Resolved Problems in CMW520-B1204L02 ··························································································120 Resolved Problems in CMW520-B1204L01 ··························································································121 Resolved Problems in CMW520-B1203 ································································································122 Resolved Problems in CMW520-B1202P02··························································································122



June 2, 2009 of 156

Resolved Problems in CMW520-B1202P01··························································································122 Resolved Problems in CMW520-B1202 ································································································122 Resolved Problems in CMW520-B1106 ································································································123

Related Documentation·······························································································································124 Documentation Set·································································································································124 Obtaining Documentation ······················································································································124

Downloading Documentation ·········································································································124

Software Upgrading·····································································································································125 Introduction ············································································································································125

Files ················································································································································125 Software Maintenance Methods·····································································································127

Maintaining Application Program and Configuration Through Command Lines····································128 Maintaining the Router Through TFTP Server ···············································································128 Backing up and restoring application programs and configuration files·········································129 Maintaining the Router Through FTP Server ·················································································131

BootWare Menu ·····································································································································135 Main BootWare Menu·····················································································································135 BootWare Submenus ·····················································································································137

Upgrading an Application Program Through an Ethernet Interface·······················································139 Configuring Ethernet Interface Parameters····················································································140 Upgrading Procedure ·····················································································································141

Upgrading BootWare Through Ethernet Interface ·················································································143 Upgrading BootWare Through Serial Interface······················································································144

XModem Protocol Overview···········································································································144 Modifying Serial Interface Parameters ···························································································144 Upgrading BootWare······················································································································146

Upgrading an Application Program Through a Serial Interface ·····························································148 Maintaining Application and Configuration Files····················································································148 Dealing with Password Loss ··················································································································151

User Password Loss·······················································································································151 BootWare Password Loss ··············································································································152 Super Password Loss·····················································································································152

Backing Up and Restoring BootWare ····································································································152

Software Upgrading Through Web ············································································································153



June 2, 2009 of 156

List of Tables

Table 1 Version history .............................................................................................................................. 6

Table 2 Hardware and software compatibility matrix ................................................................................. 8

Table 3 Follow these steps to register the software: ............................................................................... 10

Table 4 MSR20-1X Series Hardware Features ....................................................................................... 10

Table 5 MSR20 Series Hardware Features............................................................................................. 12



Table 8 MSR30-1X Series Hardware Features ....................................................................................... 15

Table 9 MSR20_MSR30_MSR50 series Module List.............................................................................. 16

Table 10 MSR20_MSR30_MSR50 Series Software Features ................................................................ 23

Table 11 Feature updates ........................................................................................................................ 28

Table 12 Command line updates............................................................................................................. 40

Table 13 MIB updates............................................................................................................................ 104

Table 14 Documentation set .................................................................................................................. 124

Table 15 Download documentation from the H3C website ................................................................... 124

Table 16 Default names and types of the boot files .............................................................................. 125

Table 17 Main BootWare menu ............................................................................................................. 136

Table 18 BootWare serial interface submenu........................................................................................ 137

Table 19 Ethernet interface submenu.................................................................................................... 138

Table 20 File control submenu .............................................................................................................. 139

Table 21 BootWare operation submenu ................................................................................................ 139

Table 22 Ethernet parameters settings description ............................................................................... 140



June 2, 2009 of 156

Version Information

Version Number Version Information:

MSR 20-20_MSR 20-21_MSR 20-40_MSR30-16_MSR 30-20_MSR 30-40_MSR 30-60_MSR 50-40_MSR 50-60_MSR 50-40 MPU-G2_ MSR 50-60 MPU-G2:

Comware software, Version 5.20, Release 1719P03, Standard

MSR 20-1X_MSR 30-11_MSR 30-1X:

Comware software, Version 5.20, Release 1719P03

Note: You can see the version number with the command display version in any view. Please see Note①.

Version History

Table 1 Version history

Version number Last version Release Date Remarks

CMW520-R1719P03 CMW520-R1719P02 2009-05-19 Support MSR20_30_50 series, include MSR 30-1X

CMW520-R1719P02 CMW520-R1719P01 2009-04-13 Support MSR20_30_50 series(include MSR20-1X and MSR50 MPU-G2)

CMW520-R1719P02 CMW520-E1719P01 2009-04-13 Only support MSR 30-1X

CMW520-R1719P01 CMW520-R1719 2009-03-19 Support MSR20_30_50 series(include MSR20-1X and MSR50 MPU-G2)

CMW520-E1719P01 CMW520-E1719 2009-03-19 Only support MSR 30-1X

CMW520-E1719 None 2009-02-16 First time for MSR 30-1X and only support MSR 30-1X.

CMW520-R1719 CMW520-R1718 2009-02-13 Support MSR20_30_50 series(include MSR20-1X and MSR50 MPU-G2)

CMW520-E1713 CMW520-R1718

CMW520-R1717 2009-01-09

Support MSR20_30_50 series(include MSR20-1X and MSR50 MPU-G2)

CMW520-R1717 CMW520-E1713 2008-12-18 First time for the release version of MPU-G2, and only support MPU-G2

CMW520-E1713 CMW520-E1711P01 2008-10-23 Support MSR20_30_50 series(include MSR20-1X and MSR50 MPU-G2)

CMW520-E1711P01 CMW520-B1707 2008-09-26 Support MSR20_30_50 series(include MSR20-1X and



June 2, 2009 of 156

Version number Last version Release Date Remarks MSR50 MPU-G2)

CMW520-B1707 CMW520-B1608 2008-06-23 Support MSR20_30_50 series(include MSR20-1X and MSR50 MPU-G2)

CMW520-B1608 CMW520-B1606 2007-11-29 Support MSR20_30_50 series(except MSR20-1X)

CMW520-B1606 CMW520-R1508P02 2007-10-19 Support MSR20_30_50(except MSR3011/MSR20-1X)

CMW520-R1508P02 CMW520-R1508 2007-09-24 Support MSR20_30_50(except MSR3011)

CMW520-B1508P02 CMW520-B1508 2007-09-24 Only support MSR3011

CMW520-B1508 CMW520-B1506P02 2007-09-07 Only support MSR3011

CMW520-R1508 CMW520-R1507 2007-09-03 None.

CMW520-R1507 CMW520-B1502 2007-08-02

First time for the release version of MSR3016,and Support MSR20_30_50 (except MSR3011)

CMW520-B1506P02 CMW520-B1506P01 2007-08-02 Only support MSR3011

CMW520-B1506P01 CMW520-B1506 2007-07-05 Only support MSR3011

CMW520-B1506 CMW520-B1502 2007-06-18 First time for the release version of MSR3011,and only support MSR3011

CMW520-B1502 CMW520-B1501L01 2007-04-24 First time for the beta version of MSR3016

CMW520-B1501L01 CMW520-B1204L01 2007-02-06 Limited.

CMW520-B1204P04 CMW520-B1204P03 2007-02-01 None.

CMW520-B1204P03 CMW520-B1204L02 2007-01-30 None.

CMW520-B1204L02 CMW520-B1203 2007-01-25 Limited.

CMW520-B1204L01 CMW520-B1201 2007-01-19 Limited.

CMW520-B1203P01 CMW520-B1203 2006-12-30 Limited.

CMW520-B1203 CMW520-B1202P02 2006-12-27 None.

CMW520-B1202P02 CMW520-B1202P01 2006-12-06 None.

CMW520-B1202P01 CMW520-B1202 2006-11-23 None.

CMW520-B1202 CMW520- B1201 2006-11-10 None.

CMW520-B1201 CMW520-B1106 2006-10-30 None

CMW520-B1106 CMW520-B1105P01 2006-09-28 Resolved Problem: Modified OEM manufacturer identification and other problems. The list of problems see 6.2 Resolved Problems in CMW520-B1106.

CMW520-B1105P01 CMW520-B1105 2006-08-25 Resolved Problem: When there



June 2, 2009 of 156

Version number Last version Release Date Remarks are 2 USBs and some voice modules on one router, running tpmc voice 0 inter will

cause fatal errors.

CMW520-B1105 None 2006-08-09 First time.

Hardware and Software Compatibility Matrix

Table 2 Hardware and software compatibility matrix

Item Specifications

Product family MSR20_30_50 series routers

Hardware platform

MSR20-1X

MSR 20-20_MSR 20-21_MSR 20-40

MSR30-11

MSR 30-16

MSR30-20_MSR 30-40_MSR 30-60

MSR 50-40_MSR 50-60_ MSR 50-40 MPU-G2_ MSR 50-60 MPU-G2

MSR30-10_MSR 30-11E_MSR30-11F

Boot ROM version

MSR20-1X:209 or later

MSR 20-20_MSR 20-21_MSR 20-40:308 or later

MSR30-11_MSR30-10_MSR 30-11E_MSR30-11F:213 or later

MSR30-16:207 or later

MSR 30-20_MSR 30-40_MSR 30-60:307 or later

MSR 50-40_MSR 50-60:306 or later

MSR 50-40 MPU-G2_ MSR 50-60 MPU-G2:115 or later

(Note:This version number can be displayed by command display version under any view. Please see Note②)

Equipment Model Host Software MD5 CheckSum

MSR 20-20_MSR 20-21_MSR 20-40

MSR20-CMW520-R1719P03-SI.BIN 9d4a64aecab44d9c759f5e4d574ea3d4

MSR20-1X series

MSR201X-CMW520-R1719P03.BIN f434e0d084b4709f7d8fc9f515e28e2a

MSR 3011 MSR3011-CMW520-R1719P03.BIN b18efe4c6017cbfbd5dbcc915ef7b871

Host software

MSR 3016 MSR3016-CMW520-R1719P03-SI.BIN 6899e754805468eb5a8e189789713c6e



June 2, 2009 of 156

Item Specifications

MSR 30-20_MSR 30-40_MSR 30-60

MSR30-CMW520-R1719P03-SI.BIN 3de997a2a946316bd08722e2ed604010

MSR 50-40_MSR 50-60

MSR50-CMW520-R1719P03-SI.BIN eb828b1a55ba35ebfab0cf61bd7fd88f

MSR 50-40 MPU-G2_ MSR 50-60 MPU-G2

MSR50-CMW520-R1719P03-EPUSI.BIN 9e346d44285591e05fe1a503a2f28909

MSR30-1X MSR301X-CMW520-R1719P03.BIN b18efe4c6017cbfbd5dbcc915ef7b871

iMC version

iMC PLAT 3.20-R2602 + P04

iMC UAM 3.60-E6102

iMC EAD 3.60-E6102

iMC MVM 3.50-E5201

iNode version iNode PC 3.60-E6111

Sample:To see the version number of the software and bootrom of the MSR20_MSR30_MSR50 Series routers:

<H3C> display version

H3C Comware Platform Software

Comware software, Version 5.20, Release 1719P03, Standard ------- 注①

Copyright (c) 2004-2007 Hangzhou H3C Tech Co., Ltd. All rights reserved.

H3C MSR50-60 uptime is 0 week, 0 day, 0 hour, 2 minutes

CPU type: FREESCALE MPC8541 833MHz

256M bytes DDR SDRAM Memory

4M bytes Flash Memory

Pcb Version: 3.0

Logic Version: 2.0

Basic BootROM Version: 3.03

Extend BootROM Version: 3.06 ------ 注②

[SLOT 0]CON (Hardware)3.0, (Driver)1.0, (Cpld)2.0

[SLOT 0]AUX (Hardware)3.0, (Driver)1.0, (Cpld)2.0

[SLOT 0]GE0/0 (Hardware)3.0, (Driver)1.0, (Cpld)2.0

[SLOT 0]GE0/1 (Hardware)3.0, (Driver)1.0, (Cpld)2.0

[SLOT 11]FIX-SNDE (Hardware)3.0, (Driver)2.0, (Cpld)2.0



June 2, 2009 of 156

Restrictions and Cautions

Version Usage Limitations 1. Due to the DSLAMs using the chipset of CONEXANT and with the firmware V5.4/V5.6 reject to connect with CPE designed with NON-CONEXANT chipset, the G.SHDSL.BIS interface on MSR20-13 routers will be failed to communicate with those DSLAMs.

2. The versions of MSR30-11 can not boot based on 16M FLASH.

Important Notes Software register is provided on the device to protect the authorized users’ legal rights to use the software. Trial period is set on the software with this function and users are required to register the serial number of the software in the trial period. If the software has not been registered until the trial period expires, the system automatically restarts every 30 minutes.

You can obtain a registration serial number through buying letter of authorization of the software.

You can use the license register serial-number command or log onto the network management interface and then enter the serial number to finish software registration; and you can use the display license command or log onto the network management interface to view the soft registration information of the device.

Table 3 Follow these steps to register the software:

To do... Use the command... Remarks

Register the software license register serial-number

Required

Available in user view

Display the information display license any view

Caution:

H3C MSR 20-1X, MSR 30-11 and MSR 30-1X do not support Software register!

Feature List

Hardware Features

Table 4 MSR20-1X Series Hardware Features

Item MSR 20-10 MSR 20-11 MSR 20-12 MSR 20-13 MSR 20-15

Dimensions (H x 44.2mm%300 44.2mm%300 44.2mm%300 44.2mm%300 44.2mm%300



June 2, 2009 of 156

W x D) mm%240mm mm%240mm mm%240mm mm%240mm mm%240mm

Weight 3Kg 3Kg 3Kg 3Kg 3Kg

Input AC voltage Rated voltage: 100 VAC to 240 VAC;

50 Hz/60 Hz

Input DC voltage Not support DC

Max power 25W

Operating temperature 0°C to 40°C

Relative humidity (noncondensing) 5% to 90%

Processor PowerPC PowerPC PowerPC PowerPC PowerPC

BootROM 1MB 1MB 1MB 1MB 1MB

FLASH 16MB/32 MB 16MB/32 MB 16MB/32 MB 16MB/32 MB 16MB/32 MB

Memory 256MB

External module

SIC/ DSIC module

1 1 1 1 1

Internal module

VPM strip 0 0 1 0 1

Console/AUX 1 1 1 1 1

USB 1 1 1 1 1

FE 1 electrical interfaces

1 electrical interfaces




FE switching interface

4 4 4 4 4

ADSL 0 0 0 0 1

G.SHDSL 0 0 0 1(G.SHDSL.

bis) 0

SAE 0 1 0 0 0

ISDN S/T 0 0 0 1 1

AM 0 0 0 0 1

Fixed

interface

E1/T1 0 0 1 0 0

optional Wlan 1 0 1 1 1



June 2, 2009 of 156

Table 5 MSR20 Series Hardware Features

Item MSR 20-20 MSR 20-21 MSR 20-40

Dimensions (H x W x D)

44.2mm%360mm%287.1mm

44.2mm%360mm%287.1mm

44.2mm%442mm%407.1mm

Weight 3.4Kg 3.4Kg 5.4Kg

Input AC voltage Rated voltage: 100 VAC to 240 VAC; 50/60 Hz


Max power 54W 54W 100W

Operating temperature 0°C to 40°C (32oF to 104oF)


Processor PowerPC PowerPC PowerPC

BootROM 4MB 4MB 4MB

Memory

SDRAM

Default: 256MB

Maximum: 384MB

SDRAM

Default: 256MB

Maximum: 384MB

SDRAM

Default: 256MB

Maximum: 384MB

CF CARD Default: 256MB

Maximum: 1GB

Default: 256MB

Maximum: 1GB

Default: 256MB

Maximum: 1GB

External module

SIC module 2 2 4

ESM module 1 1 2

VCPM module 0 0 1 Internal

module

VPM strip 0 0 2

Console 1 1 1

AUX 1 1 1

USB 1 1 1

FE Two electrical interfaces Two electrical interfaces Two electrical interfaces

Fixed interface


0 8 0



June 2, 2009 of 156


Item MSR 30-11 MSR 30-16 MSR 30-20 MSR 30-40 MSR 30-60


442 mm×360 mm×44.2mm

442mm×441.8mm×44.2mm

442mm×441.8mm×44.2mm

442mm×422.3mm×88.2mm

442mm×421.8mm×132mm

Weight 4.6Kg 6Kg 6.9Kg 11.9Kg 13.6Kg

Input AC voltage Rated voltage: 100 VAC to 240 VAC;

50 Hz/60 Hz


Not support DC

Rated voltage: -48V d.c.～-60V d.c



Max power 54W 100W 125W 210W 210W



Processor PowerPC PowerPC PowerPC PowerPC PowerPC

BootROM 2MB 4MB 4MB 4MB 4MB

Memory

DDR SDRAM

Default: 256MB

Maximum: 256MB

DDR SDRAM

Default: 256MB

Maximum: 768MB

DDR SDRAM

Default: 256MB

Maximum: 1GB

DDR SDRAM

Default: 256MB

Maximum: 1GB

DDR SDRAM

Default: 256MB

Maximum: 1GB

CF CARD 0

Default: 256MB

Maximum: 1GB

Default: 256MB

Maximum: 1GB

Default: 256MB

Maximum: 1GB

Default: 256MB

Maximum: 1GB

FLASH 32MB 0 0 0 0

SIC module 2 4 4 4 4

DSIC module 0 2 2 2 2

MIM module 1 1 2 4 6

XMIM module 1 0 0 0 0

External module

DMIM module 0 0 0 1 2

ESM module 1 2 2 2 2 Internal

module

VCPM module 0 1 1 1 1



June 2, 2009 of 156

VPM strip 0 2 2 3 3

Console 1 1 1 1 1

AUX 1 1 1 1 1

USB 0 1 2 2 2

FE 2 2 0 0 0

GE 0 0 2 electrical interfaces

2 Combo interfaces

2 Combo interfaces

Fixed

interface

SAE 1 0 0 0 0


Item MSR 50-40 MSR 50-40

MPU-G2 MSR 50-60

MSR 50-60

MPU-G2

Dimensions (H x W x D) 436.2mm×424mm×130.7mm 436.2mm×424mm×175.1mm

Weight 18Kg 20Kg

Input AC voltage Rated voltage: 100 VAC to 240 VAC; 50/60 Hz

Input DC voltage Rated voltage: –48 VDC to –60 VDC

Max power 350W 350W

Operating temperature 0°C to 40°C (32°F to 104°F)


Processor PowerPC PowerPC

BootROM 4MB 4MB

Memory

DDR SDRAM:

Default: 512MB

Max: 1GB

DDR SDRAM II:

Default: 1GB

Max: 2GB

DDR SDRAM:

Default: 512MB

Max: 1GB

DDR SDRAM II:

Default: 1GB

Max: 2GB

CF CARD Default: 256MB

Max: 1GB

Default: 256MB

Max: 1GB

SIC module 4 0 4 0

FIC module 4 6

External module

MSCA module 1 1

Internal module

ESM module 2 2



June 2, 2009 of 156

VCPM module 1 1

VPM strip 4 0 4 0

Console 1 1

AUX 1 1

USB 2 2


0 0

Fixed interface

GE 2 COMBO interfaces

3 COMBO interfaces

2 COMBO interfaces

3 COMBO interfaces

Table 8 MSR30-1X Series Hardware Features

Item MSR 30-10 Description

MSR 30-11E Description

MSR 30-11F Description


(excluding feet and rack-mounting ear)

442×360×44.2mm 442×360×44.2mm 442×360×44.2mm

Weight 4.8kg 4.5Kg 4.8Kg

Input AC voltage Rated voltage: 100V a.c.～240V a.c.;50Hz/60Hz

Rated voltage: 100V a.c.～240V a.c.;50Hz/60Hz

Rated voltage: 100V a.c.～240V a.c.;50Hz/60Hz

Input DC voltage Rated voltage:–48 VDC to –60 VDC Not supported Not supported

Max power 54W 54W 54W



Processor PowerPC

BootROM 2 MB

Memory DDR SDRAM: 256MB

CF CARD Not supported

FLASH 256 MB

SIC module 2 2 2

MIM module 1 1 1

External module XMIM 1 0 0



June 2, 2009 of 156

module (compatible with 1 MIM)

ESM module 1 1 1 Inter

nal module VPM strip 1 0 0

Console 1 1 1

AUX 1 1 1

USB 1 1 1

FE switching ports

0 24 48

FE 2 2 2

Fixed

interface

SAE 0 0 0

Table 9 MSR20_MSR30_MSR50 series Module List

Module Description

SIC

Ethernet interface cards:

1-port 10/100/1000 Mbps Ethernet electrical and optical interface card SIC module (SIC-1GEC)

4-port 10/100 Mbps Ethernet L2 switching module (RJ45) (SIC-4FSW)

1-port 10 Mbps Ethernet electrical SIC interface module (RJ45) (SIC-1ETH)

1-port 10/100 Mbps Ethernet electrical SIC interface module (RJ45) (SIC-1FEA)

4-port 10/100 Mbps Ethernet L2 switching module-PoE card(SIC-4FSW-POE)

1-port 100 Mbps Ethernet electrical SIC interface module -SIC-1FEF

WAN interface cards:

1-port enhanced synchronous/asynchronous serial SIC interface module (SIC-1SAE)

1-port fractional E1 SIC interface module (SIC-1E1-F)

1-port fractional E1 SIC interface module (SIC-1E1-F-V3)

1-port fractional T1 SIC interface module (SIC-1T1-F)

1-port E1/CE1/PRI SIC interface module (SIC-1EPRI)

1-port T1/CT1/PRI SIC interface module (SIC-1TPRI)

1-port ADSL over ISDN SIC interface module (SIC-1ADSL-I)

1-port ADSL over POTS SIC interface module (SIC-1ADSL)

1-port analog modem SIC interface module (SIC-1AM)

2-port analog modem SIC interface module (SIC-2AM)



June 2, 2009 of 156

8-port asynchronous serial interface card (SIC-8AS)

16-port asynchronous serial interface card (SIC-16AS)

1-port ISDN BRI S/T interface card (SIC-1BS)

2-port ISDN BRI S/T interface card (SIC-2BS)

1-port ISDN BRI U interface card (SIC-1BU)

2-port ISDN BRI U interface card (SIC-2BU)

2-port fractional E1 interface module (SIC-2E1-F)

Voice interface cards:

1-channel E1 voice SIC interface module (SIC-1VE1)

1-channel T1 voice SIC interface module (SIC-1VT1)

1-port voice module subscriber circuit SIC interface module (SIC-1FXS)

2-port voice module subscriber circuit SIC interface module (SIC-2FXS)

1-port voice module FXO SIC interface module (SIC-1FXO)

2-port voice module FXO SIC interface module (SIC-2FXO)

1-port ISDN BRI S/T voice interface card (SIC-1BSV)

2-port ISDN BRI S/T voice interface card (SIC-2BSV)

2-port voice subscriber circuit & 1-port voice AT0 analog trunk interface card -SIC-2FXS1FXO

DSIC 9-port 10/100 Mbps Ethernet L2 switching module (RJ45) (DSIC-9FSW)

9-port 10/100 Mbps Ethernet L2 switching module -PoE card (DSIC-9FSW-POE)

ESM High-performance network data encryption ESM module (ESM-ANDE)

Standard network data encryption ESM module (ESM-SNDE)

MIM


1-port 10M100M Ethernet electrical MIM interface module (RJ45) (MIM-1FE)

2-port 10M/100M Ethernet electrical MIM interface module (RJ45) (MIM-2FE)

4-port 10M/100M Ethernet electrical MIM interface module (RJ45) (MIM-4FE)

1-port 1000M Ethernet electrical MIM interface module (RJ45) (MIM-1GBE)

2-port 1000M Ethernet electrical MIM interface module (RJ45) (MIM-2GBE)

1-port 1000M Ethernet electrical MIM interface module (RJ45) (MIM-1GEF)

2-port 1000M Ethernet electrical MIM interface module (RJ45) (MIM-2GEF)

16-port 10M/100M Ethernet L2 switching module (MIM-16FSW)

16-port 10M/100M Ethernet L2 switching module -PoE card (MIM-



June 2, 2009 of 156

16FSW-POE)


2 channel enhanced synchronous/asynchronous interface module (MIM-2SAE)



8 port asynchronous serial interface panel (RJ45) (MIM-8ASE)

16 port asynchronous serial interface panel (RJ45) (MIM-16ASE)

1 port CE1/PRI interface module (MIM-1E1)



8 port E1 interface module (120ohm) (MIM-8E1 (120))

8 port E1 interface module (75ohm) (MIM-8E1 (75))

1-port fractional E1 interface module (MIM-1E1-F)



8 port E1 interface module (120ohm) (MIM-8E1 (120)-F)

8 port E1 interface module (75ohm) (MIM-8E1 (75)-F)

1 port CT1/PRI interface module (MIM-1T1)



8 port T1 interface module (MIM-8T1)

1-port fractional T1 interface module MIM-1T1-F)




1-port G.SHDSL interface module (MIM-1G.SHDSL)

4-port enhanced ISDN S/T interface panel (MIM-4BSE)

1-port T3/CT3 compatible interface module (MIM-1CT3)

1-port T3/CT3 compatible interface module (MIM-1CE3)

1-port T3/CT3 compatible interface module (MIM-1CT3-V2)

1-port T3/CT3 compatible interface module (MIM-1CE3-V2)

1-port ATM/155M fiber interface(MIM-1ATM-OC3)

1-port ATM-E3 compatible interface module (MIM-1AE3)

1-port ATM-T3 compatible interface module (MIM-1AT3)

1-port POS interface module (MIM-1POS)



June 2, 2009 of 156

1-port ATM/155M multimode fiber interface module (SC)- (MIM1-AMM)

1-port channelized SDH/SONET interface module (E1) (MIM-1CPOS (E))

1-port channelized SDH/SONET interface module (T1) (MIM-1CPOS (T))

1-port ATM/155M multimode fiber interface module (SC)- (MIM1-AMM)

1-port ATM/155M multimode long-distance fiber interface module (1310nm, 30km, SC)- (MIM-1ASL)

1-port ATM/155M multimode fiber interface module (1310nm, 15km, SC)- (MIM-1ASM)

8-port E1 ATM inverse multiplexing interface module (MIM-IMA-8E1(75/120))

4-port E1 ATM inverse multiplexing interface module (MIM-IMA-4E1(75/120))

8-port T1 ATM inverse multiplexing interface module (MIM-IMA-8T1)

4-port T1 ATM inverse multiplexing interface module (MIM-IMA-4T1)

1-port dual-pair G.SHDSL interface module (MIM-1SHL-4W)

6-port analog modem MIM interface module (MIM-6AM)

12-port analog modem SIC interface module (MIM-12AM)

Open Application Platform-MIM-OAP(MEM-512M+CF-256M+HD-80G)

Open Application Platform-MIM-OAP (MEM-1G+CF-256M+HD-80G)

Open Application Platform-MIM-OAP (MEM-256M+CF-512M+HD-无)

Open Service Module-MIM-OSM(MEM-512M+CF-256M+HD-80G)

Open Service Module-MIM-OSM (MEM-512M+CF-256M+HD-无)

Anti-virus Security Module OAP-MIM-ASM (MEM-1G+CF-256M+ HD-80G)

Open Application Platform-Smart-MIM-OAPS(MEM-1G+CF-256M+HD-80G)

Voice interface card:

1 channel E1 voice MIM interface module (MIM -1VE1)

1 channel T1 voice MIM interface module (MIM -1VT1)

2 channel E1 voice MIM interface module (MIM -2VE1)

2 channel T1 voice MIM interface module (MIM -2VT1)

2-port voice module subscriber circuit interface board (MIM-2FXS)

4-port voice module subscriber circuit interface board (MIM-4FXS)

16-port voice module subscriber circuit interface board(MIM-16FXS)

2-port voice module FXO interface module (MIM-2FXO)

4-port voice module FXO interface module (MIM-4FXO)

8-port voice module FXS-FXO interface module (MIM-8FXS-8FXO)

2 channel voice processing board E&M trunk interface module (MIM-



June 2, 2009 of 156

2EM)

4 channel voice processing board E&M trunk interface module (MIM-4EM)

2-port ISDN BRI S/T voice interface card (MIM-2BSV)

4-port ISDN BRI S/T voice interface card (MIM-4BSV)

Encryption card:

Network data encryption processing module (MIM-HNDE)

DMIM

24-port 10M/100M and 2-port 1000BASE-T/1000BASE-X (COMBO) Ethernet layer 2 switching (DMIM-24FSW)

24-port 10M/100M and 2-port 1000BASE-T/1000BASE-X (COMBO) Ethernet layer 2 switching-PoE-card (DMIM-24FSW-POE)

48-port 10M/100M Ethernet layer 2 switching (DMIM-48FSW)

XMIM 16-port 10M/100M Ethernet layer 2 switching (XMIM-16FSW)

24-port 10M/100M Ethernet layer 2 switching (XMIM-24FSW)

VPM / VCPM

Voice co-processing module (RT-VCPM)

8-channel voice processing module (RT-VPM8)




FIC


16-port 10/100 Mbps and 1-port 1000BASE-T/1000BASE-X (COMBO) Ethernet L2 switching FIC interface module (FIC-16FSW)

1-port 10/100 Mbps Ethernet electrical FIC interface module (RJ45) (FIC-1FE)

2-port 10/100 Mbps Ethernet electrical FIC interface module (RJ45) (FIC-2FE)

4-port 10Base-T/100Base-TX FE interface card (FIC-4FE)

1-port 1000 Mbps Ethernet electrical FIC interface module (RJ45) (FIC-1GBE)

2-port 1000 Mbps Ethernet electrical FIC interface module (RJ45) (FIC-2GBE)

1-port 1000 Mbps Ethernet fiber FIC interface module (FIC-1GEF)

2-port 1000 Mbps Ethernet fiber FIC interface module (FIC-2GEF)


2-port enhanced synchronous/asynchronous serial FIC interface module (FIC-2SAE)



8-port asynchronous serial FIC interface module (RJ45) (FIC-8ASE)



June 2, 2009 of 156

16-port asynchronous serial FIC interface module (RJ45) (FIC-16ASE)

1-port E1/CE1/PRI FIC interface module (FIC-1E1)



8-port E1/CE1/PRI FIC interface module (75 ohm) (FIC-8E1) (75)

8-port E1/CE1/PRI FIC interface module (120 ohm) (FIC-8E1) (120)

1-port fractional E1 FIC interface module (FIC-1E1-F)



8-port fractional E1 FIC interface module (75 ohm) (enhanced FIC-8E1-F) (75)

8-port fractional E1 FIC interface module (120 ohm) (enhanced FIC-8E1-F) (120)

1-port T1/CT1/PRI FIC interface module (FIC-1T1)




1-port fractional T1 FIC interface module (FIC-1T1-F)




4-port enhanced ISDN-S/T FIC interface module (FIC-4BSE)

1-port E3/CE3 FIC interface module (FIC-1CE3)

1-port T3/CT3 FIC interface module (FIC-1CT3)

1-port E3/CE3 FIC interface module (FIC-1CE3-V3)

1-port T3/CT3 FIC interface module (FIC-1CT3-V3)

1-port ATM/155M fiber interface(FIC-1ATM-OC3)

1-port ATM/155M single-mode long-haul fiber interface module (FIC-1ATM-OC3MM)

1-port ATM/155M multimode fiber interface module (FIC-1ATM-OC3SM)

1-port ATM/155M single-mode fiber interface module (FIC-1ATM-OC3SML)

1-port ATM-E3 interface moduel (FIC-1AE3)

1-port ATM-T3 interface module (FIC-1AT3)

1-port POS interface module (FIC-1POS)

1-port channelized SDH/SONET interface card (FIC-1CPOS (E))

1-port channelized SDH/SONET interface card (FIC-1CPOS (T))

1-port G.SHDSL interface module (FIC-1G.SHDSL)



June 2, 2009 of 156

8-port E1 ATM inverse multiplexing interface card (FIC-IMA-8E1(75/120))

4-port E1 ATM inverse multiplexing interface card (FIC-IMA-4E1(75/120))

8-port T1 ATM inverse multiplexing interface card (FIC-IMA-8T1)

4-port T1 ATM inverse multiplexing interface card (FIC-IMA-4T1)

6-port analog modem MIM interface module (FIC-6AME)

12-port analog modem SIC interface module (FIC-12AME)

1-port dual-pair G.SHDSL interface card (FIC-1SHL-4W)

Open Application Platform -FIC-OAP(MEM-1G+CF-256M+HD-80G)

Open Application Platform -FIC-OAP (MEM-512M+CF-256M+HD-80G)

Open Service Module -FIC-OSM(MEM-1G+CF-256M+HD-80G)

Open Service Module -FIC-OSM (MEM-512M+CF-256M+HD-80G)

Anti-virus Security Module OAP-FIC-ASM (MEM-1G+CF-256M+ HD-80G)

Voice interface cards:

1-channel E1 voice FIC interface module (FIC-1VE1)

1-channel T1 voice FIC interface module (FIC-1VT1)

2-channel E1 voice FIC interface module (FIC-2VE1)

2-channel T1 voice FIC interface module (FIC-2VT1)

2-port voice module subscriber circuit FIC interface module (FIC-2FXS)

4-port voice module subscriber circuit FIC interface module (FIC-4FXS)

24-port voice subscriber circuit interface card (FIC-24FXS)

2-port ISDN BRI S/T voice interface card (FIC-2BSV)

4-port ISDN BRI S/T voice interface card (FIC-4BSV)

2-port voice module FXO interface module (FIC-2FXO)

4-port voice module FXO interface module (FIC-4FXO)

2-channel voice process board E&M trunk interface FIC module (FIC-2EM)

4-channel voice process board E&M trunk interface FIC module (FIC-4EM)

Encryption card:

High-performance network data encryption FIC interface module (FIC-HNDE)

D-FIC

24-port 10/100 Mbps and 2-port 1000BASE-T/1000BASE-X (COMBO) Ethernet L2 switching FIC interface module (DFIC-24FSW)

24-port 10/100 Mbps Ethernet Layer 2 switching PoE interface module (DFIC-24FSW-POE)

24-port voice subscriber circuit interface card & 24-port voice AT0 analog trunk interface card (DFIC-24FXO24FXS)



June 2, 2009 of 156

Caution:

The support and restriction of modules on MSR please refer to H3C MSR 20/30/50 Series Routers Interface Card and Interface Module Manual, Appendix A Interface Card and Interface Module Purchase Guide.

Software Features

Table 10 MSR20_MSR30_MSR50 Series Software Features

Category Features

LAN protocol:

ARP (proxy ARP, free ARP, authorization ARP)

Ethernet_II

Ethernet_SNAP

VLAN (PORT-BASED VLAN/MAC-BASED VLAN/VLAN-BASED PORT ISOLATE/VLAN VPN/VOICE VLAN)

802.3x

LACP(802.3ad)

802.1p

802.1Q

802.1x

RSTP(802.1w)

MSTP(802.1s)

GVRP

PORT MUTILCAST suppression

WAN protocols:

PPP、MP

PPPoE Client、PPPoE Server

PPP/MP over FR

FR、MFR

FR Fragment、FR Compress、FR over IP

FRTS

ATM（IPoA、IPoEoA、PPPoA、PPPoEoA）

DCC、Dialer Watch

HDLC

LAPB

X25、X25 over TCP、X25 to TCP

X25 PAD、X25 Huntgroup、X25 CUG



June 2, 2009 of 156

Category Features

DLSW(V1.0/2.0)

ISDN、ISDN Network

ISDN QSIG

MODEM

IP services

Fast forwarding (unicast/multicast)

TCP

UDP

IP Option

IP unnumber

Policy routing (unicast/multicast)

Non-IP services:

SNA/DLSw support

DLSw Ethernet redundancy backup

IPX

Netstream

IP application

Ping and Trace

DHCP Server

DHCP Relay

DHCP Client

DNS client

DNS Static

NQA

IP Accounting

UDP Helper

NTP

Telnet

TFTP Client

FTP Client

FTP Server

IP route

Static routing management

Dynamic routing protocols:

RIP/RIPng

OSPF

OSPFv3

BGP

IS-IS



June 2, 2009 of 156

Category Features

Multicast routing protocols:

IGMP

PIM-DM

PIM-SM

MBGP

MSDP

Routing policy

MPLS

LDP

LSPM

MPLS TE

MPLS FW

MPLS/BGP VPN

L2VPN

IPv6

IPv6 basic functions

IPv6 ND

IPv6 PMTU

IPv6 FIB

IPv6 ACL

IPv6 transition technologies

NAT-PT

IPv6 tunneling

6PE

IPv6 routing

IPv6 static routing management

Dynamic routing protocols

RIPng

OSPFv3

IS-ISv6

BGP4+

Multicast routing protocols

MLD

PIM-DM

PIM-SM

PIM-SSM

Port security PPPoE Client&Server



June 2, 2009 of 156

Category Features

PORTAL

802.1x

AAA

Local authentication

Radius

HWTacacs

Firewall

ASPF

ACL

FILTER

DDOS

Data security

IKE

IPSec

Encryption card

Portal/Portal+

Other security technologies

L2TP

NAT/NAPT

PKI

RSA

SSH V1.5/2.0

SSL

URPF

GRE

DVPN

Reliability Supports VRRP

Supports the backup center

L2 QoS

SP

WRED(Port)

CAR

LR

Flow-base QOS Policy

Port-Based Mirroring

Flow-Based Mirroring

Cos-Based HOLB(Head of Line Blocking)Prevention

Packet Remarking

Flow Redirect

Flow Accounting



June 2, 2009 of 156

Category Features

Priority Mapping

Port Trust Mode

Port Priority

Flow Filter

FlowControl

ACL

Traffic supervision Supports CAR (Committed Access Rate)

Supports LR (Line Rate)

Congestion management FIFO、PQ、CQ、WFQ、CBQ、RTPQ

Congestion avoidance WRED/RED

Traffic shaping Supports GTS（Generic Traffic Shaping）

Other QOS technologies

FR QOS

MPLS QOS

MP QoS/LFI

cRTP/IPHC

ATM QOS

Sub-interface QOS

Voice Interfaces

FXS

FXO

E&M

E1VI/T1VI

Voice Signaling

R2

DSS1

Q.sig

Digital E&M

H.323 H.225

H.245

GK Client GK Client

SIP SIP

SIP Operation

Codec

G.711A law

G.711U law

G.723R53

G.723R63

G.729a



June 2, 2009 of 156

Category Features

G.729R8

Media Process

RTP/cRTP

IPHC

Voice Backup

FAX FAX

Other

Voice RADIUS

VoFR

Analog voice access and emergency

Network management

SNMP V1/V2c/V3

MIB

SYSLOG

RMON

Local management

Command line management

File system management

Dual Image

User access management

Supports console interface login

Supports AUX interface login

Supports TTY interface login

Supports telnet (VTY) login

Supports SSH login

Supports FTP login

Supports X25 PAD login

XMODEM

Version Updates

Feature Updates

Table 11 Feature updates

Version number Item Description

Changed Hardware Features

None. CMW520-R1719 Changed

Software Features

New Features:

1. Configuring OSPFv3 Network Types and a bandwidth reference value



June 2, 2009 of 156


for the interface

The default OSPFv3 interface network types vary with the link layer protocols of the interfaces, but at some application network, the customer hope the OSPFv3 interface network types can be adjusted according to actual request. This feature can support to configure the OSPFv3 interface network types.

OSPFv3 computes the cost automatically based on the bandwidth reference value: Interface OSPFv3 cost = Bandwidth reference value/Interface bandwidth. And this feature can support to Configure a bandwidth reference value for the interface.

2. EAD supporting to set the QoS policy based on each user

Firstly, the user is authenticated. After the user passes the authentication, the EAD server sends the User Profile (with the QoS policy) to the user. When the user is off-line, the router will cancel the User Profile automatically.

3. ETelnet terminal access

The initiator and receiver of ETelnet terminal access are a router and an FEP respectively. A service terminal is connected to the router (ETelnet client) through an asynchronous serial interface. The router is connected to the FEP (ETelnet server) through a network. Application services run on the FEP. The FEP interacts with the router through encrypted Telnet connection to futher exchange data with the terminal, and two kinds of encryption arithmetic AES and RC4 being supported.

4. BFD for RIP

A RIP router sends its routing table to neighbors periodically, if there isn’t any route update received for period of time the route will be deleted. BFD for RIP provides a fast failure detection mechanism. BFD detects whether the link is normal, if the link is broken-down, BFD will notify RIP, and then RIP deletes the route from this link and switch to backup route.

BFD for RIP supports two kinds of detection mode, single-hop detection in BFD echo packet mode for a directly connected neighbor; Bidirectional detection in BFD control packet mode for an indirectly connected neighbor.

5. QoS Policy-Based Traffic Rate Measuring

This feature collects statistics about the average forwarding and drop rates of traffic over an interval on a per-QoS-class. The QoS Policy-Based traffic rate measuring interval can be set using the command. You can use the display qos policy interface command to view the collected traffic rate statistics.

6. SIP Message Waiting Indication

This feature accords to RFC3842. The message waiting indication (MWI) feature allows a voice gateway to notify a subscriber of messages got from a voice mailbox server. For example, when a call destined to subscriber A is forwarded to the voice mailbox server, the server will notify the state change to the voice gateway. When subscriber A picks up the

Telephone A Router A Router B Telephone BMWI serverTelephone A Router A Router B Telephone BMWI server



June 2, 2009 of 156


phone, subscriber A will hear the message waiting tone without needing to query the mailbox.

7. The VLAN interface supporting bridging

This feature supports to add the VLAN interface into a bridge set. After the VLAN interface add into a bridge-set, the packets received will be transmit to other interface of the bridge-set according to the bridge table.

8. EtoPPP and EtoFR

Ethernet to PPP (EtoPPP) converts on the data link layer between Ethernet and PPP for IP packets. Similarly, Ethernet to Frame Relay (EoFR) converts on the link layer between Ethernet and Frame Relay for IP packets. With EtoPPP or EtoFR, a device encapsulates an IP packet received in Ethernet encapsulation with PPP or FR encapsulation and then forwards the packet rather than performs routing-based forwarding. Thus, high-performance Layer-2 switching between different types of links is achieved.

9. NAT DNS-map

To configure an internal server, you need to map an external IP address and port number to the internal server. The external host can access the internal server by using the domain name or the public IP address. With DNS mapping, an internal host also can access an internal server on the same private network by using the domain name of the internal server when the DNS server resides on the public network.

10. SIP Three-Party Conference

When user A has a call with user B and holds a call with User C, use A can make user C join the current conversation to implement a three-party conference. During a three-party conference, a passive participant can initiate a new call to create another conversation. In this way, conference chaining is implemented, and each conference initiator serves as a conference bridge.

Only the router with VPM slot at the mainboard can support this feature.

11. Call-watch

Call-watch enables a voice device to decide whether an E1/T1 interface is available for setting up calls by monitoring the state of the local interface or the IP connectivity to the remote interface connected to the callee. When the local link is detected unavailable, the voice device sets the E1/T1 interface to watch-out state, disabling the interface to respond to calls from the PBX. Detecting that the E1/T1 link is unavailable, the PBX switches to the backup link to forward calls.

12. Enhanced NQA

This feature adds the voice test type, supports the TOS option of the server’s response packets, one-way delay and the statistic of disordered packets, etc.

13. USB 3G Modem

The router can access to the 3G mobile network by attached a USB 3G modem to it’s USB interface, and the router’s cellular interface (3G modem) can support to transmit the data service and work as the backup link.

14. BGP supporting four byte AS number



June 2, 2009 of 156


This feature accords to RFC 4893.

15. ARP Detection

This feature includes following functions:

1) ARP Detection Based on DHCP Snooping Entries/802.1X Security Entries/Static IP-to-MAC Bindings;

2) ARP Packet Rate Limit;

3) ARP Detection Based on Specified Objects;

4) Source MAC Address Based ARP Attack Detection;

5) ARP Packet Source MAC Address Consistency Check;

6) ARP Active Acknowledgement.

16. FXO CID check enhanced

This feature can support several CID, and you can use the cid ring command to configure the time for CID check. The FXO interface can receives the modulation information of the calling number from the PBX before the first rings, between the first and second rings or between the second and the third rings.

Deleted Features: None.


None.

CMW520-R1718 Changed

Software Features

New Features:

1. Support the PFC and ACFC compression function

This feature supports the PPP LCP negotiation with PFC and ACFC option, and can identify the PFC and ACFC option from the other.

2. Support to set the ACCM parameter

This feature supports to set the ACCM parameter during the PPP negotiation.

3. DNS/DNS Relay/IPSEC/SNMP/Bridge/QOS functions and applications are supported on WEB



None.

CMW520-E1713 Changed

Software Features

New Features:

1. DDNS

The dynamic domain name system (DDNS) feature updates mappings of domain names to IP addresses dynamically on DNS servers to ensure correct resolution results.

2. Portal on WAN

This feature supports portal authentication on WAN interfaces such as



June 2, 2009 of 156


serial and E1 interfaces.



None.

CMW520-E1711P01

Changed Software Features

New Features:

1. FXS Impedance Configuration by Country

Each country has its own impedance standard. This feature allows you to set analog voice interface electrical impedance by country.

2. Attack Defense

This feature can detect and take countermeasures against various types of attacks to ensure normal operation of internal networks.

3. DNS Involved SIP Calls

This feature allows for using domain names during SIP calling and registration processes.

4. On-hook Delay

This feature allows the called party to resume the conversation with the calling party by picking up the phone within a specified time, also known as the calling party control. You can set the on-hook delay time of the called party on an analog FXS voice subscriber line to enable the calling party control service.

5. ISDN 5ESS

The ISDN 5ESS protocol is supported.

6. FXO Ring Detection Parameter Configuration

This feature allows you to set ring detection parameters for analog FXS voice subscriber lines to detect ring signals of different frequencies and waveforms.


CMW520-B1707 Changed

Hardware Features

New Features:

Add new card:

RT-SIC-1E1-F-H3(MSR 50-40 MPU-G2_ MSR 50-60 MPU-

G2 not support )

RT-SIC-2E1-F-H3(MSR 50-40 MPU-G2_ MSR 50-60 MPU-

G2 not support )

RT-MIM-8FXS-8FXO-H3

RT-MIM-16FXS-H3

RT-MIM-1CT3-V2-H3

RT MIM 1CE3 V2 H3



June 2, 2009 of 156


RT-DMIM-48FSW-H3

RT-FIC-1CE3-V3-H3

RT-FIC-1CT3-V3-H3

RT-FIC-1ATM-OC3-H3

Deleted Features:None.


QoS priority marking support on VLAN interfaces

This feature allows you to perform priority marking for traffic entering a VLAN interface, so that you can classify the traffic on its outgoing interface based on the marked priority value.

Encryption of configuration file

Encryption of configuration file on CF card feature realizes saving the configuration file and encrypting it on CF card. If the user want to read the configuration file encrypted on CF card, he must decrypt it by legal encryption key, thus protecting the configuration file well. Now the key has two types: private or public.

Enhanced Netstream

Besides the functions supported by Netstream, enhanced Netstream supports normal traffic accounting and aggregate traffic accounting for IPv4 and IPv6 traffic, MPLS traffic accounting, and reporting traffic statistics based on the version-9 template. Additionally, enhanced Netstream supports outgoing traffic limiting, traffic filtering, and traffic sampling.

Traffic classification and queuing support on PPPoE-enabled interfaces in bridging mode

This feature enables an outgoing interface in bridging mode to support QoS.

Embedding CBQ in QoS

This function allows you to configure a child policy in a parent QoS policy, achieving finer traffic classification.

ISDN NAT Backup

ISDN NAT supports In a ISDN link backup environment, if the master link fails, the backup link switches to the master state. If this feature is enabled, current NAT entries on the failed link will be aged out immediately, so that new NAT entries can be created for subsequent packets on the new master link, and thus NAT streams can be directed to the new link immediately.


Modified Features: None.

CMW520-B1608 Changed

Hardware Features

New Features:

Add 2-port voice subscriber circuit & 1-port voice AT0 analog trunk interface card(SIC-2FXS1FXO);

1/2-port ISDN BRI S/T voice interface card can be supported on MSR20/30/50series and MSR30-11/30-16.(the card can not be support on



June 2, 2009 of 156


2 slot of MSR30-11).


New Features:

1.Enhanced Call Recovery Function

In the case of SIP call transfer failure, this feature enables the originator to recover the call with the recipient and then re-initiate a call transfer.

2.SIP Extensions for Caller Identity and Privacy

This feature implements the SIP extensions for caller identity and privacy.

When a PSTN user originates a call to another PSTN user over a SIP network, the caller identity presentation can be restricted at the called side or the caller identity can be transparently transmitted to the called PSTN user by configuring the SIP extension header fields.

3.RIP Metric Control by Route Policy

This feature allows you to use a route policy to add an additional metric for the incoming or outgoing RIP routes matching the policy on an interface.

4.IP Terminal Access

In the feature, a router acts as the access gateway of an IP terminal. The IP terminal establishes a Telnet connection with the front-end server through the router.

You can configure the IP address-to-MAC address binding for the IP terminal on the router, and you can configure data encryption for each TCP connection separately, improving the access security of the IP terminal.

5.Web-Based Network Management Function

This feature implements the network management through Web interfaces, including device summary, system file management, device reboot, software upgrade, network diagnosis, and static route management.

6.sFlow

Based on packet sampling, Sampled Flow (sFlow) is a traffic monitoring technology mainly used to collect and analyze traffic statistics. Flow supports two sampling mechanisms:

1) Packet-based sampling: Samples one packet out of a specified number of packets from an sFlow-enabled port.

2) Time-based sampling: Samples interface statistics at a specified interval from an sFlow-enabled port.

7.Multicast BGP

MBGP supports the multicast address family to allow for both IPv4 and IPv6 inter-AS multicast routing.

8.MPLS TE Tunnel Support for Multiple Explicit Paths

An MPLS TE tunnel supports multiple explicit paths, each with a different priority. During CSPF’s path calculation, the explicit path with the highest priority will be used first; if the calculation fails, the explicit path with a second-higher priority will be used, and so on, until the calculation



June 2, 2009 of 156


succeeds.

9.SSM Mapping

The SSM mapping feature extends the SSM feature. An IGMPv1, IGMPv2 or MLDv1 host can use the SSM function through the configuration of the static SSM mapping feature.

10.IGMP Snooping

The IGMP snooping feature implements the Layer 2 multicast. Multicast implements point-to-multipoint data communication in a network, largely saving the network bandwidth and reducing the network load.

11.IP Source Guard

By filtering packets on a per-port basis, IP source guard prevents illegal packets from traveling through, thus improving the network security. IP source guard filters packets based on the following types of binding entries: source IP address, source MAC address and VLAN tag. This feature provides static binding and dynamic binding. Static binding entries are configured manually, and dynamic binding entries are provided by DHCP snooping or DHCP Relay.

12.HDLC Compression

HDLC compression includes STAC-LZS compression and STAC-LZ compression.

Deleted Features:Delete license register function of MSR30-11.

Modified Features:None.


None.

CMW520-B1606


New Features:

1. ACSEI

ACSEI is a private protocol that well supports the ACFP collaboration, ensuring valid information interaction between the ACFP clients and the ACFP server, so that the ACFP server and clients can cooperate to run a service.

ACSEI mainly provides the following functions:

(1)Registration and deregistration of an ACSEI client to an ACSEI server.

(2)ID assignment. An ACSEI server assigns IDs to ACSEI clients to distinguish them.

(3)Mutual monitoring and awareness between an ACSEI client and an ACSEI server.

(4)Information interaction between an ACSEI server and ACSEI clients, including clock synchronization.

(5)Control of the ACSEI clients from an ACSEI server. For example, you can close ACSEI client, or restart ACSEI client from the ACSEI server.

2. VoiceVLAN support Cisco IP Phone



June 2, 2009 of 156


Support auto configuration VLAN information on Cisco IP Phone when connect with such devices.




None.

CMW520-R1508 Changed

Software Features

New Features:

1.DVPN

Dynamic virtual private network (DVPN) can address the issue well.

In DVPN, a collection of nodes connected to the public network is regarded as a non-broadcast multi-access (NBMA) network, the public network as the link layer of this NBMA network, and tunnels being the virtual paths between subnets of intranet as the network layer. Branch devices dynamically access the public network.

VPN address management (VAM) is a major protocol used in the DVPN solution. It collects, maintains, and distributes dynamic information to help set up internal secured tunnel conveniently. When forwarding a packet for a subnet, the device first obtains its next hop on the private network through a routing protocol and the public network address associated with this next hop; then encapsulates the packet with the public address as the destination address of the tunnel; and finally sends the packet down the tunnel to the destination.

2. Terminal Access

Terminal access refers to the connection of a terminal to a router through an asynchronous interface for data exchange with a front-end processor (FEP) or another terminal through the router.

Three types of network devices are used in terminal access:

Terminal: A terminal is a character device generally connected to another device through a serial interface cable. A user inputs characters by using the terminal keyboard. Then, the characters are transferred to another device through the serial interface cable. After processing the characters, the device returns the result to the terminal, which then displays the result on its screen.

Terminal access initiator (hereinafter referred to as initiator): An initiator sends a TCP connection request and serves as the client of the TCP connection. Generally, a router is used as an initiator.

Terminal access receiver (hereinafter referred to as receiver): A receiver responds to a TCP connection request and serves as the server of the TCP connection. A receiver can be an FEP or a router. An FEP is a system installed with an application program for banking, postal service, taxation, customs, civil aviation, and so on. An FEP can be a Unix server or a Linux server.

Once a TCP connection is established, the router, functioning as either the terminal access initiator or receiver, can transparently transmit the data from the terminal to the peer over the TCP connection. Transparent means that no manual or extra operation is required.



June 2, 2009 of 156


(1) Introduction to TTY Terminal Access

The initiator and receiver of TTY terminal access are a router and an FEP. The service terminal is connected to the router through an asynchronous serial interface. The router is connected to the FEP through a network. Application services run on the FEP. The FEP interacts with the router through the ttyd program, and the router pushes the service display to the service terminal. The router transports data transparently between the connected service terminal and FEP to implement service interaction and processing.

(2) Introduction to Telnet Terminal Access

The initiator and receiver of Telnet terminal access are a router and an FEP. A service terminal is connected to the router (Telnet client) through an asynchronous serial interface. The router is connected to the FEP (Telnet server) through a network. Application services run on the FEP. The FEP interacts with the router through Telnet, thereby implementing data exchange between the terminal and the FEP.

3. Qos WRED support DSCP

CBQ’s BE queue support WRED based on IP priority and DSCP.

WFQ support WRED based on DSCP.

4. Call forwarding

Call forwarding unconditional: With this feature enabled on a voice subscriber line, incoming calls will be forwarded to the predetermined destination, no matter whether the voice subscriber line is available.

Call forwarding busy: With this feature enabled on a voice subscriber line, an incoming call will be forwarded to the predetermined destination when the voice subscriber line is busy.

Call forwarding no reply: With this feature enabled on a voice subscriber line, an incoming call will be forwarded to the predetermined destination when the voice subscriber line is not answered within a period of time.

Call forwarding unavailable: With this feature enabled on a voice subscriber line, an incoming call will be forwarded to the predetermined destination when the voice subscriber line is shut down.

5. Call waiting

If User C calls User A who is already engaged in a call with User B, the new call will not be rejected because the line is busy. Just like a normal call, User C will hear ringback tones, while User A will hear call waiting tones which remind that a call is waiting on the line.

If necessary, User A can answer the new call by pressing the flash hook. In this case, User B is held.

Or User A can hang up to end the call with user B. In this case, User A is immediately alerted and can pick up the phone to answer the call originated by User C (the waiting call).

6. Call hold

If User A in a conversation with User B presses the flash hook, the media channel at User B is temporarily shut down and goes into the silent state. The system plays silent tones or dial tones to User A, depending on the configuration. (The system first plays dial tones and waits for the user to



June 2, 2009 of 156


dial. If the user fails to dial within a period of time, the system stops playing dial tones and the line stays on hold.) User A can resume the call with User B by pressing the flash hook again.

After pressing the flash hook, User A hears dial tones and can initiate a new call. The setup flow for the new call is completely the same as the one for ordinary calls.

7. Call transfer

User A (originator) and User B (recipient) are in a conversation. User A presses the flash hook and the call is put on hold. User A dials another number to originate a call to User C (final recipient) so that the call between User B and User C is established.

8. Call backup

After initiating a call to the terminating system, the originating system is unable to receive a response. In this case, if there is another link (PSTN link or VoIP link) to the terminating system, the originating system re-initiates a call to the terminating system along the new route. This is call backup.

Currently, the system supports two types of call backup:

(1)A PSTN link or VoIP link backs up a PSTN link

(2) A PSTN link backs up a VoIP link

9. Hunt group

Multiple voice subscriber lines are configured for a called number. If the voice subscriber line with the first priority is unavailable when the terminating system receives a call setup request from the originating system, the call will still be established between them. This is hunt group.

10. Call barring

Call barring includes incoming call barring and outgoing call barring.

Incoming call barring usually refers to the Do Not Disturb (DND) service. When incoming call barring is enabled on a voice subscribe line, calls originated to the attached phone will fail.

When outgoing call barring is enabled on a voice subscriber line, calls originated from the attached phone will fail, too.

11. Extended Portal

Extended Portal is also known as portal+.

By forcing access devices to implement patches and anti-virus policies, portal+ improves the active virus-defending capability of access devices.

The enhancements of portal+ authentication are:

Security authentication mechanism is added in addition to portal authentication, which intends to verify anti-virus software is installed, virus bases are updated, unauthorized software is installed, or OS patches are updated on access devices;

Compared with identity authentication that users can only access a part of (or restricted) network resources like the virus server or OS patch server after authentication succeeded, security authentication allows users to access more (or unrestricted) network resources.



June 2, 2009 of 156


The above figure is the basic structure of a MPLS-based VPN. CE is Customer Edge; PE is Provider Edge, which is placed on the backbone network; PE is responsible for managing and establishing LSP connections among PEs and route assignment among branches of a VPN user.

This feature enables CE 1 at the netwok managment side to access PE 1 at the SNMP agent side normally. That is, after the network managemeng address of the managed devices is bound to the same VPN as that of the network managment server, the network management server can send SNMP messages to the managed devices and receive reply messages from the managed device.

12. SNMP support VPN

The above figure is the basic structure of a MPLS-based VPN. CE is Customer Edge; PE is Provider Edge, which is placed on the backbone network; PE is responsible for managing and establishing LSP connections among PEs and route assignment among branches of a VPN user.

This feature enables CE 1 at the netwok managment side to access PE 1 at the SNMP agent side normally. That is, after the network managemeng address of the managed devices is bound to the same VPN as that of the network managment server, the network management server can send SNMP messages to the managed devices and receive reply messages from the managed device.




New Features:MSR3011, Please make reference to Table4.


Modified Features:None. CMW520-B1506


None.



June 2, 2009 of 156

Command Line Updates

Table 12 Command line updates

Version

number

Item Description

1.Syntax

rip bfd enable

undo rip bfd enable

View: Interface view

Parameters

None

Description

Use the rip bfd enable command to enable BFD on the RIP interface.

Use the undo rip bfd enable command to restore the default.

Disabling BFD on a RIP interface will notify BFD to delete the corresponding session.

By default, a RIP interface is not enabled with BFD.

BFD echo-mode detection only works for a RIP neighbor one hop away.

Using the undo peer command does not delete the neighbor relationship at once and therefore cannot bring down the BFD session at once.

Examples

# Enable BFD on RIP interface Ethernet 1/1.

<Sysname> system-view

[Sysname] interface ethernet 1/1

[Sysname-Ethernet1/1] rip bfd enable

CMW520-R1719

New Commands

2.Syntax

mwi enable

undo mwi enable

View

Voice subscriber line view

Parameters

None

Description

Use the mwi enable command to enable MWI.

Use the undo mwi enable command to disable MWI.

By default, MWI is disabled.



June 2, 2009 of 156

Version

number

Item Description

This command is only applicable to the FXS voice subscriber line.

Examples

# Enable MWI for voice subscriber line 3/0.


[Sysname] voice-setup

[Sysname-voice] subscriber-line 3/0

[Sysname-voice-line3/0] mwi enable

3.Syntax

configuration encrypt { private-key | public-key }

undo configuration encrypt

View

System view

Parameters

private-key: Encrypts a configuration file with a private key. The encrypted configuration file can only be decrypted and recognized by the local device.

public-key: Encrypts a configuration file with a public key. The encrypted configuration file can be decrypted and recognized by all devices supported the configuration file encryption function.

Description

Use the configuration encrypt command to enable configuration file encryption.

Use the undo configuration encrypt command to restore the default.

By default, configuration file encryption is disabled, that is, the current valid configurations are directly saved to the configuration file.

With this feature enabled, a configuration file is encrypted every time before it is saved (by the save command).

If the private-key keyword is provided, the configuration file saved on the AMB can be encrypted by the private key of the AMB, and only the AMB can decrypt the configuration file; the configuration file saved on the SMB can be encrypted by the private key of the SMB, and only the SMB can decrypt the configuration file. (distributed device)

If the private-key keyword is provided, the configuration file saved on a member device can be encrypted by its own private key, and only this member device can decrypt the configuration file. (centralized stacking device)

If the private-key keyword is provided, the configuration file saved on a main board can be encrypted by its own private key, and only this main board can decrypt the configuration file. (distributed stacking device)

Support for this command depends on the device model.

Examples



June 2, 2009 of 156

Version

number

Item Description

# Encrypt the configuration file with a public key before saving it.


[Sysname] configuration encrypt public-key

4.Syntax

nat dns-map domain domain-name protocol pro-type ip global-ip port global-port

undo nat dns-map domain domain-name

View

System view

Parameters

domain domain-name: Specifies the domain name of an internal server. A domain name is a string containing no more than 255 case-insensitive characters. It consists of several labels separated by dots (.). Each label has no more than 63 characters that must begin and end with letters or digits; besides, dashes (-) can be included.

protocol pro-type: Specifies the protocol type used by the internal server, tcp or udp.

ip global-ip: Specifies the public IP address used by the internal server to provide services to the external network.

port global-port: Specifies the port number used by the internal server to provide services to the external network. The global-port argument is in the range 1 to 65535.

Description

Use the nat dns-map command to map the domain name to the public network information of an internal server.

Use the undo nat dns-map command to remove a DNS mapping.

Currently, the device supports up to 16 DNS mappings.

Related commands: display nat dns-map.

Support for this command depends on the device model.

Examples

# A company provides Web service to external users. The domain name of the internal server is www.server.com, and the public IP address is 202.112.0.1. Configure a DNS mapping, so that internal users can access the Web server using its domain name.


[Sysname] nat dns-map domain www.server.com protocol tcp ip 202.112.0.1 port www

5.Syntax

call-watch group watch-number { hard | soft }

undo call-watch group watch-number [ hard | soft ]



June 2, 2009 of 156

Version

number

Item Description

View

E1/T1 interface view

Parameters

watch-number: Specifies a call-watch group number, in the range of 1 to 255.

hard: Specifies the call-watch mode as hard. In hard call-watch mode, the E1/T1 interface is set to watch-out state as soon as all the monitored links are detected down at the network layer regardless of whether calls are present on the interface. An interface in watch-out state does not respond to calls initiated by the connected PBX.

soft: Specifies the call-watch mode as soft. In soft call-watch mode, the E1/T1 interface will be set to watch-out state after all the monitored links are detected down at the network layer only if no calls are present on the interface.

Description

Use the call-watch group command to associate the current E1/T1 interface with a call-watch group in the specified mode.

Use the undo call-watch group command to remove the association.

By default, an E1/T1 interface is not associated with any call-watch group.

You can associate an E1/T1 interface with only one call-watch group, and vice versa.

You can associate an E1/T1 interface with a call-watch group that has not been created yet but the configuration does not take effect.

Examples

# Associate interface E1 1/0 with monitor group 1 in soft mode.


[Sysname] controller e1 1/0

[Sysname-e1 1/0] call-watch group 1 soft

6.Syntax

etoppp translate interface interface-type1 interface-number1 interface-type2 interface-number2 ip-address ip-address1 ip-address2

undo etoppp translate interface interface-type1 interface-number1

View

System view

Parameters

interface-type1 interface-number1: Specifies an interface by its type and number. At present, it can only be a Layer-3 Ethernet interface, Ethernet subinterface, or VLAN interface.

interface-type2 interface-number2: Specifies an interface by its type and number. At present, it can only be a synchronous serial interface, MP



June 2, 2009 of 156

Version

number

Item Description

group interface, POS interface, or POS subinterface.

ip-address1: Remote IP address of the interface specified for interface-type1 interface-number1.

ip-address2: Remote IP address of the PPP interface specified for interface-type2 interface-number2. It must be located on the same network segment where the address for ip-address1 is located.

Description

Use the etoppp translate command to create an EtoPPP translation mapping.

Use the undo etoppp translate command to remove an EtoPPP translation mapping.

An EtoPPP translation mapping maps a user-side interface using Ethernet encapsulation to a service provider-side interface using PPP encapsulation for IP packets forwarding.

By default, no EtoPPP translation mapping exists.

Related commands: display etoppp translate.

Examples

# Create an EtoPPP translation mapping to map Ethernet 1/1 to Serial 2/0.


[Sysname] etoppp translate interface ethernet 1/1 serial 2/0 ip-address 1.1.1.1 1.1.1.2

7.Syntax

conference enable

undo conference enable

View

Voice subscriber line view

Parameters

None

Description

Use the conference enable command to enable the three-party conference function for a voice subscriber line.

Use the undo conference enable command to restore the default.

By default, the three-party conference function is disabled.

The three-party conference function depends on the call hold function. Therefore, you need to enable the call hold function before configuring three-party conference.

Enabling the three-party conference service in voice subscriber line view will invalidate the local call identification function. For configuration of the local call identification function, refer to the distinguish-localtalk



June 2, 2009 of 156

Version

number

Item Description

command in VoIP Commands in the Voice Volume.

Examples

# Enable the three-party conference function for voice subscriber line 1/0.



[Sysname-voice] subscriber-line 1/0

[Sysname-voice-line1/0] conference enable

8.Syntax

codec-type { g711a | g711u | g729a }

undo codec-type

View

Voice test type view

Parameters

g711a: G.711 A-law codec type.

g711u: G.711 µ-law codec type

g729a: G.729 A-law codec type.

Description

Use the codec-type command to configure the codec type for a voice test.

Use the undo codec-type command to restore the default.

By default, the codec type for a voice test is G.711 A-law.

Examples

# Configure the codec type for a voice test as g729a.


[Sysname] nqa entry admin test

[Sysname-nqa-admin-test] type voice

[Sysname-nqa-admin-test-voice] codec-type g729a

9.Syntax

ddns policy policy-name

undo ddns policy policy-name

View

System view

Parameters

policy-name: DDNS policy name, a case-insensitive string of 1 to 32 characters.



June 2, 2009 of 156

Version

number

Item Description

Description

Use the ddns policy command to create a DDNS policy and enter its view.

Use the undo ddns policy command to delete the DDNS policy.

By default, no DDNS policy is created.

Related commands: display ddns policy.

Examples

# Create a DDNS policy named steven_policy and enter its view.


[Sysname] ddns policy steven_policy

[Sysname-ddns-policy-steven_policy]

10.Syntax

address sip { dns domain-name [ port port-number ] | ip ip-address [ port port-number ] | proxy }

undo address sip { dns | ip | proxy }

View

VoIP voice entity view

Parameters

dns domain-name: Domain name of the called entity. The value consists of 1 to 20 characters, which are not case-sensitive and include letters, numbers, hyphens (-), underlines (_), and dots (.).

port port-number: Port number of the DNS server, in the range of 1 to 65535. The default port number is 5060.

ip ip-address: IP address of the peer VoIP gateway.

port port-number: Port number, in the range of 1 to 65535. The default port number is 5060.

proxy: Uses the SIP proxy server to implement SIP message exchange.

Description

Use the address sip command to configure SIP routing for a voice entity.

Use the undo address sip command to remove the SIP policy that has been configured.

By default, no routing policy is configured for a voice entity.

Examples

# Configure the IP address of the peer VoIP gateway as 3.3.3.3 for voice entity 10.





June 2, 2009 of 156

Version

number

Item Description

[Sysname-voice-dial] entity 10 voip

[Sysname-voice-dial-entity10] address sip ip 3.3.3.3

# Configure the domain name of the called entity as cc.news.com for voice entity 10.



[Sysname-voice-dial] entity 10 voip

[Sysname-voice-dial-entity10] address sip dns cc.news.com

Please refer to H3C MSR 20/30/50 Series Routers User Manual.

Deleted Commands

None.

Modified Commands

None.

1.Syntax

ppp accm hex-number

undo ppp accm

View

PPP interface view

Parameters

hex-number: Hexadecimal value of the accm keyword. The value range of this argument is 0 to 0xFFFFFFFF and defaults to 0XA0000.

Description

Use the ppp accm command to configure the PPP Asynchronous Control Character Map (ACCM) negotiation option.

Use the undo ppp accm command to restore the default.

This configuration takes effect on asynchronous links only.

Examples

# Configure the ACCM negotiation option on interface Serial 1/1 as 01010101.


[Sysname] interface Serial 1/1

[Sysname-Serial1/1] ppp accm 01010101

CMW520-R1718

New Commands

2.Syntax

ppp acfc local request

undo ppp acfc local

View



June 2, 2009 of 156

Version

number

Item Description

PPP interface view

Parameters

request: Specifies that the Address and Control Field Compression (ACFC) option be included in outbound configuration requests during LCP negotiations.

Description

Use the ppp acfc local command to specify that the local ACFC option be included in outbound configuration requests during LCP negotiations.

Use the undo ppp acfc local command to restore the default.

By default, the ACFC option is not included in outbound configuration requests during LCP negotiations.

Examples

# Configure interface Serial 1/1 to include the ACFC option in outbound configuration requests.



[Sysname-Serial1/1] ppp acfc local request

3.Syntax

ppp acfc remote { apply | reject | ignore }

undo ppp acfc remote

View

PPP interface view

Parameters

apply: Specifies that the local device accepts the ACFC options in configuration requests received from the peer and performs ACFC on frames sent to the peer.

reject: Specifies that the local device rejects ACFC options received from the peer.

ignore: Specifies that the local device accepts the ACFC options in configuration requests received from the peer but does not perform ACFC on frames sent to the peer.

Description

Use the ppp acfc remote command to configure how the device handles the ACFC options in configuration requests received from the peer.

Use the undo ppp acfc remote command to restore the default.

By default, the ignore keyword is applied, that is, the device accepts the ACFC options in configuration requests received from the peer but does not perform ACFC on frames sent to the peer.

Examples



June 2, 2009 of 156

Version

number

Item Description

# Configure interface Serial 1/1 to accept the ACFC options in configuration requests received from the peer.



[Sysname-Serial1/1] ppp acfc remote apply

# Configure interface Serial 1/1 to reject the ACFC options in configuration requests received from the peer.



[Sysname-Serial1/1] ppp acfc remote reject

4.Syntax

ppp pfc local request

undo ppp pfc local

View

PPP interface view

Parameters

request: Specifies that the Protocol Field Compression (PFC) option be included in outbound configuration requests during LCP negotiations.

Description

Use the ppp pfc local command to specify that the local PFC option be included in outbound configuration requests during LCP negotiations.

Use the undo ppp pfc local command to restore the default.

By default, the PFC option is not included in outbound configuration requests during LCP negotiations.

Examples

# Configure interface Serial 1/1 to include the PFC option in outbound configuration requests.



[Sysname-Serial1/1] ppp pfc local request

5.Syntax

ppp pfc remote { apply | reject | ignore }

undo ppp pfc remote

View

PPP interface view

Parameters



June 2, 2009 of 156

Version

number

Item Description

apply: Specifies that the local device accepts the PFC options in configuration requests received from the peer and performs ACFC on frames sent to the peer.

reject: Specifies that the local device rejects PFC options received from the peer.

ignore: Specifies that the local device accepts the PFC options in configuration requests received from the peer but does not perform PFC on frames sent to the peer.

Description

Use the ppp pfc remote command to configure how the device handles the PFC options in configuration requests received from the peer.

Use the undo ppp pfc remote command to restore the default.

By default, the ignore keyword is applied, that is, the device accepts the PFC options in configuration requests received from the peer but does not perform PFC on frames sent to the peer.

Examples

# Configure interface Serial 1/1 to accept the PFC options in configuration requests received from the peer.



[Sysname-Serial1/1] ppp pfc remote apply

# Configure interface Serial 1/1 to reject the PFC options in configuration requests received from the peer.



[Sysname-Serial1/1] ppp pfc remote reject

# Configure interface Serial 1/1 to ignore the PFC options in configuration requests received from the peer.



[Sysname-Serial1/1] ppp pfc remote ignore

Deleted Commands

None.

Modified Commands

None.

CMW520-E1713

New Commands

1. Syntax

url request-url

undo url

View



June 2, 2009 of 156

Version

number

Item Description

DDNS policy view

Parameters

request-url: URL address for DDNS update requests, a case-sensitive string of 1 to 240 characters containing the login ID, password, and other information.

Description

Use the url command to specify the URL address for DDNS update requests.

Use the undo url command to delete the URL address.

By default, no URL address is specified for DDNS update requests.

The format of the URL address to be specified for DDNS update requests depends on the DDNS server.

Specify the URL address for contacting the HTTP-based DDNS server at www.3322.org as follows:

http://username:[email protected]/dyndns/update?system=dyndns&hostname=<h>&myip=<a>

Specify the URL address for contacting the TCP-based PeanutHull server as follows:

oray://username:[email protected]

Note that:

Replace the parameters username and password in the URL with your actual login ID and password for the DDNS server, respectively.

The port number in the URL address is optional. If no port number is specified, the default port number is used. HTTP uses port 80, HTTPS uses port 443, and the PeanutHull server uses port 6060.

The system automatically fills <h> with the FQDN that is specified when the DDNS policy is applied to the interface and automatically fills <a> with the primary IP address of the interface to which the DDNS policy is applied. You may also manually specify an FQDN and an IP address in <h> and <a>, respectively. After that, the FQDN that is specified when the DDNS policy is applied becomes ineffective.

You cannot specify an FQDN and IP address in the URL address for contacting the PeanutHull server. Instead, you can specify an FQDN when applying the DDNS policy to an interface. The system will automatically use the primary IP address of the interface to which the DDNS policy is applied as the IP address for DDNS update.

To avoid ambiguity, it is better that your login ID and password not include colons (:), at signs (@), or question marks (?).

If you repeatedly execute the url command with different URL addresses specified, the latest configuration will overwrite the previous one.

Related commands: ddns apply policy.

Examples



June 2, 2009 of 156

Version

number

Item Description

# Specify for DDNS policy steven_policy the URL address with login ID steven and password nevets. The device contacts www.3322.org for DDNS update.



[Sysname-ddns-policy-steven_policy] url http://steven:[email protected].

org/dyndns/update?system=dyndns&hostname=<h>&myip=<a>

2．Syntax

ddns apply policy policy-name [ fqdn domain-name ]

undo ddns apply policy policy-name

View

Interface view

Parameters


fqdn domain-name: Specifies the FQDN for update. This keyword and argument combination is used to replace <h> in the URL for the DDNS update. The domain-name is a case-insensitive string of 1 to 127 characters.

Description

Use the ddns apply policy command to apply the specified DDNS policy to the interface, update the mapping between the specified FQDN and the primary IP address of the interface, and enable DDNS update.

Use the undo ddns apply policy command to remove the DDNS policy applied to the interface and stop DDNS update.

By default, no DDNS policy is specified for any interface, no FQDN is specified for update, and DDNS update is disabled.

Note that:

You can apply at most four DDNS policies to an interface.

If you repeatedly execute the ddns apply policy command with the same DDNS policy name but different FQDNs specified, the latest configuration will overwrite the previous one, and initiates a DDNS update request immediately.

Related commands: url.

Examples

# Apply the DDNS policy named steven_policy to Ethernet 1/1 to update the host name to IP address mapping for FQDN www.whatever.com and enable DDNS update.


http://www.3322.org/



June 2, 2009 of 156

Version

number

Item Description


[Sysname-Ethernet1/1] ddns apply policy steven_policy fqdn www.whatever.com

3.Syntax

ddns policy policy-name

undo ddns policy policy-name

View

System view

Parameters


Description

Use the ddns policy command to create a DDNS policy and enter its view.

Use the undo ddns policy command to delete the DDNS policy.

By default, no DDNS policy is created.

Related commands: display ddns policy.

Examples

# Create a DDNS policy named steven_policy and enter its view.



[Sysname-ddns-policy-steven_policy]

4. Syntax

display ddns policy [ policy-name ]

View

Any view

Parameters

policy-name: DDNS policy name, a case-insensitive character of 1 to 32 characters.

Description

Use the display ddns policy command to display information of the DDNS policy.

If no policy-name is specified, all DDNS policies will be displayed.

Examples

# Display information of the DDNS policy named steven_policy.

<Sysname> display ddns policy steven_policy



June 2, 2009 of 156

Version

number

Item Description

DDNS policy: steven_policy

URL : http://steven:[email protected]/dyndns/update?

system=dyndns&hostname=<h>&myip=<a>

SSL client policy:

Interval : 1 days 0 hours 1 minutes

5. Syntax

interval days [ hours [ minutes ] ]

undo interval

View

DDNS policy view

Parameters

days: Days, in the range of 0 to 365.

hours: Hours, in the range of 0 to 23.

minutes: Minutes, in the range of 0 to 59.

Description

Use the interval command to specify the interval for sending DDNS update requests after DDNS update is enabled.

Use the undo interval command to restore the default value.

By default, the DDNS update request interval is one hour.

Note that:

A DDNS update request is initiated immediately after the primary IP address of the interface changes or the link state of the interface changes from down to up, no matter whether the interval is reached.

If you specify the interval as 0, your device will not periodically initiate any DDNS update request, but will initiate a DDNS update request when the primary IP address of the interface is changed or the link state of the interface changes from down to up.

If you repeatedly execute the interval command with different time intervals specified, only the latest configuration will take effect.

Examples

# Set the interval for sending DDNS update requests to one day and one minute for the DDNS policy named steven_policy.



[Sysname-ddns-policy-steven_policy] interval 1 0 1

6. Syntax



June 2, 2009 of 156

Version

number

Item Description

ssl client policy policy-name

undo ssl client policy

View

DDNS policy view

Parameters

policy-name: SSL client policy name, a case-insensitive string of 1 to 16 characters.

Description

Use the ssl client policy command to associate a specific SSL client policy with a DDNS policy.

Use the undo ssl client policy command to cancel the association.

By default, no SSL client policy is associated with any DDNS policy.

Note that:

The SSL client policy is only effective for the HTTPS-based DDNS update requests.

If you repeatedly execute the ssl client policy command with different SSL client policies specified, only the latest configuration will take effect.

Related commands: ssl client-policy in SSL Commands in the Security Volume.

Examples

# Associate the SSL client policy named steven_policy with the DDNS policy named steven_policy.



[Sysname-ddns-policy-steven_policy] ssl client policy steven_policy

Deleted Commands

None.

Modified Commands

None.

1．Syntax:

ring-detect debounce value

undo ring-detect debounce

2．Syntax:

ring-detect frequency value

undo ring-detect frequency

CMW520-E1711P01

New Commands

3．Syntax:



June 2, 2009 of 156

Version

number

Item Description

address sip { dns domain-name [ port port-number ] | ip ip-address [ port port-number ] | proxy }

undo address sip { dns | ip | proxy }

4．Syntax:

attack-defense apply policy policy-number

undo attack-defense apply policy

5．Syntax:

attack-defense policy policy-number

undo attack-defense policy policy-number

6．Syntax:

blacklist enable

undo blacklist enable

7．Syntax:

blacklist ip source-ip-address [ timeout minutes ]

undo blacklist { all | ip source-ip-address [ timeout ] }

8．Syntax:

defense icmp-flood action drop-packet

undo defense icmp-flood action

9．Syntax:

defense icmp-flood enable

undo defense icmp-flood enable

10．Syntax:

defense icmp-flood ip ip-address [ max-rate rate-number ]

undo defense icmp-flood ip ip-address [ max-rate ]

11．Syntax:

defense icmp-flood max-rate rate-number

undo defense icmp-flood max-rate

12．Syntax:

defense scan { add-to-blacklist | blacklist-timeout minutes | enable | max-rate rate-number }

undo defense scan { add-to-blacklist | blacklist-timeout | enable | max-rate }

13．Syntax:

defense syn-flood { max-half-connections half-connections | max-rate



June 2, 2009 of 156

Version

number

Item Description

rate-number } *

undo defense syn-flood { max-half-connections | max-rate }

14．Syntax:

defense syn-flood action { drop-packet | reset-session }

undo defense syn-flood action

15．Syntax:

defense syn-flood enable

undo defense syn-flood enable

16．Syntax:

defense syn-flood ip ip-address [ max-half-connections half-connections | max-rate rate-number ]

undo defense syn-flood ip ip-address [ max-half-connections | max-rate ]

17．Syntax:

defense udp-flood action drop-packet

undo defense udp-flood action

18．Syntax:

defense udp-flood enable

undo defense udp-flood enable

19．Syntax:

defense udp-flood ip ip-address [ max-rate rate-number ]

undo defense udp-flood ip ip-address [ max-rate ]

20．Syntax:

defense udp-flood max-rate rate-number

undo defense udp-flood max-rate

21．Syntax:

display attack-defense policy [ policy-number ]

22．Syntax:

display attack-defense statistics interface interface-type interface-number

23．Syntax:

display blacklist { all | ip source-ip-address }

24．Syntax:

display flow-statistics statistics { destination-ip dest-ip-address |



June 2, 2009 of 156

Version

number

Item Description

source-ip ip-address } [ vpn-instance vpn-instance-name ]

25．Syntax:

display flow-statistics statistics interface interface-type interface-number { inbound | outbound }

26．Syntax:

flow-statistics enable { destination-ip | source-ip }

undo flow-statistics enable { destination-ip | source-ip }

27．Syntax:

flow-statistics enable { inbound | outbound }

undo flow-statistics enable { inbound | outbound }

28．Syntax:

reset attack-defense statistics interface interface-type interface-number

29．Syntax:

signature-detect action drop-packet

undo signature-detect action

30．Syntax:

signature-detect { fraggle | icmp-redirect | icmp-unreachable | land | large-icmp | route-record | smurf | source-route | tcp-flag | tracert | winnuke } enable

undo signature-detect { fraggle | icmp-redirect | icmp-unreachable | land | large-icmp | route-record | smurf | source-route | tcp-flag | tracert | winnuke } enable

31．Syntax:

signature-detect large-icmp max-length length

undo signature-detect large-icmp max-length

32．Syntax:

timer called-hookon-delay second

sundo called-hookon-delay

33．Syntax:

debugging voice ss rc { all | error | event | info | timer }

undo debugging voice ss rc { all | error | event | info | timer }

Please refer to H3C MSR 20/30/50 Series Routers User Manual.

Deleted Commands

None.

New Commands

1.Original command:

registrar ipv4 ip-address [ port port-number ] [ expires seconds ]



June 2, 2009 of 156

Version

number

Item Description

[ slave ]

undo registrar ipv4 [ slave ]

Modified command:

registrar { dns domain-name | ipv4 ip-address } [ port port-number ] [ expires seconds ] [ slave ]

undo registrar ipv4 { dns | ipv4 } [ slave ]

Module of the command: VOICE SIP

Description: Add dns domain-name to support DNS Involved SIP Calls.

Changes in default values: None.

2.Original command:

proxy ipv4 ip-address [ port port-number ]

undo proxy ipv4

Modified command:

proxy { dns domain-name | ipv4 ip-address } [ port port-number ]

undo proxy { dns | ipv4 }

Module of the command: VOICE SIP

Description: Add dns domain-name to support DNS Involved SIP Calls.

Changes in default values: None.

CMW520-B1707

New Commands

1. Syntax

configuration encrypt { private-key | public-key }

undo configuration encrypt

View

System view

Parameters

private-key: Encrypts a configuration file with a private key.

public-key: Encrypts a configuration file with a public key.

Description

Use the configuration encrypt command to enable configuration file encryption.

Use the undo configuration encrypt command to restore the default.

By default, configuration file encryption is disabled, that is, the current valid configurations are directly saved to the configuration file.

With this feature enabled, a configuration file is encrypted every time before it is saved (by the save command). Encrypted by a private key, a configuration file can be decrypted and recognized only by the local device; encrypted by a public key, a configuration files can be decrypted and recognized by all devices supporting this feature.



June 2, 2009 of 156

Version

number

Item Description

Examples

# Configure to encrypt the configuration file with a public key before saving it.


[Sysname] configuration encrypt public-key

2．Syntax

display sampler [ sampler-name ]

View

Any view

Parameters

sampler-name: Specifies the sampler name, a string of up to 32 characters.

slot slot-id: Displays sampler entry of the specified slot.

Description

Use the display sampler command to view configuration and status information about a sampler.

Executing the command with no argument, the configuration and status information about all samplers is displayed.

On a distributed device, executing the command with the slot-id argument, the configuration and status information about the sampler of the card that resides in the specified slot is displayed.

Examples

# Display the configuration and status information about the specified sampler on a router.

<Sysname> display sampler abc slot 1

Sampler name: abc

Index: 1, Mode: Random, Packet-interval: 8

Packet counter: 100, Random number: 200

Total packet number (processed/selected): 1200/4

# Display the configuration and status information about the specified sampler on a switch.

<Sysname> display sampler abc slot 1

Sampler name: abc

Index: 1, Mode: Random, Packet-interval: 8

3．Syntax

reset sampler statistics [ sampler-name ]



June 2, 2009 of 156

Version

number

Item Description

View

User view

Parameters


Description

Use the reset sampler statistics command to clear the running information of a sampler, including the counter, total number of packets processed and number of selected packets.

With no sampler-name specified, this command clears the running information of all samplers.

On a distributed device, this command is effective for all cards.

Examples

# Clear the running information of the specified sampler.

<Sysname> reset sampler statistics abc

4．Syntax

sampler sampler-name mode { fixed | random } packet-interval rate

undo sampler sampler-name

View

System view

Parameters


fixed: Sets the sampling mode to fixed.

random: Sets the sampling mode to random.

rate: Specifies the sampling rate.

Description

Use the sampler command to create or modify a sampler.

Use the undo sampler command to delete a sampler.

On a distributed device, this command is effective for all cards.

Examples

# Create a random sampler with the sampling rate of 8.


[Sysname] sampler abc mode random packet-interval 8

5.Syntax

display ipv6 netstream cache [ verbose ]



June 2, 2009 of 156

Version

number

Item Description

View

Any view

Parameters

slot slot-id: Displays IPv6 NetStream cache entry of the specified slot.

Description

Use the display ipv6 netstream cache command to view configuration and status information about the IPv6 NetStream cache.

On a distributed device, if you provide the slot slot-id argument, the IPv6 NetStream cache information of the board in the slot is displayed; if you do not provide the slot slot-id argument, information of all the IPv6 NetStream caches on the device is displayed.

Examples

# Display information about the IPv6 NetStream cache on a centralized router.

<Sysname> display ipv6 netstream cache

IPv6 netstream cache information:

Stream active timeout (in minutes) : 60

Stream inactive timeout (in seconds) : 10

Stream max entry number : 1000

IP active stream entry number : 1

MPLS active stream entry number : 2

IPL2 active stream entry number : 1

IP stream entries been counted : 10

MPLS stream entries been counted : 20

IPL2 stream entries been counted : 20

Last statistics reset time : 01/01/2000, 00:01:02

6.Syntax

display ipv6 netstream export

View

Any view

Default Level

1: Monitor level

Parameters

None

Description

Use the display ipv6 netstream export command to view statistics about exported IPv6 NetStream statistics packets.



June 2, 2009 of 156

Version

number

Item Description

Examples

# Display statistics about IPv6 NetStream statistics packets.

<Sysname> display ipv6 netstream export

IPv6 export information:

Stream source interface : Ethernet1/0

Stream destination VPN-instance : VPN1

Stream destination IP (UDP) : 10.10.0.10 (30000)

Version 9 exported stream number : 16

Version 9 exported UDP datagram number (failed) : 16 (0)

AS aggregation export information:

Stream source interface : Ethernet1/0

Stream destination VPN -instance : VPN1

Stream destination IP (UDP) : 10.10.0.10 (30000)

Version 9 exported stream number : 16

Version 9 exported UDP datagram number (failed) : 2 (0)

7.Syntax

display ipv6 netstream template

View

Any view

Parameters

slot slot-id: Displays NetStream template information of the specified slot.

Description

Use the display ipv6 netstream template command to view configuration and status information about the NetStream version 9 template.

On a distributed device, if you provide the slot slot-id argument, the NetStream template information of the board in the slot is displayed; if you do not provide the slot slot-id argument, only the configuration information of the template is displayed.

Examples

# Display information about the NetStream template on a distributed router.

<Sysname> display ipv6 netstream template slot 5

Stream template refresh-rate packet : 30

Stream template refresh-rate time (in minutes) : 20

Active stream templates :2

Added stream templates :2



June 2, 2009 of 156

Version

number

Item Description

AS outbound template:

Template ID : 292

Packets : 0

Last template export time : 01/01/2008, 00:05:17

Field count : 14

Field type Field length (byte)

---------------------------------------------------------------------

Flows 4

Out packets 8

Out bytes 8

First switched 4

Last switched 4

Source AS 2

Destination AS 2

Input SNMP 2

Output SNMP 2

Direction 1

Sampling algorithm 1

PAD 1

PAD 1

Sampling interval 4

AS inbound template:

Template ID : 292

Packets : 3

Last template export time : 01/01/2008, 00:01:02

Field count : 14

Field type Field length (byte)

---------------------------------------------------------------------

Flows 4

In packets 8

In bytes 8

First switched 4

Last switched 4

Source AS 2

Destination AS 2

Input SNMP 2



June 2, 2009 of 156

Version

number

Item Description

Output SNMP 2

Direction 1

Sampling algorithm 1

PAD 1

PAD 1

Sampling interval 4

8.Syntax

enable

undo enable

View

NetStream aggregation view

Parameters

None

Description

Use the enable command to enable current aggregation mode.

Use the undo enable command to disable current aggregation mode.

By default, no aggregation mode is enabled.

Related commands: ipv6 netstream aggregation.

Examples

# Enable NetStream AS aggregation.


[Sysname] ipv6 netstream aggregation as

[Sysname-aggregation-as] enable

9.Syntax

ipv6 netstream [ inbound | outbound ]

undo ipv6 netstream [ inbound | outbound ]

View

Interface view, system view

Parameters

inbound: Enables IPv6 NetStream statistics in the inbound direction of an interface.

outbound: Enables IPv6 NetStream statistics in the outbound direction of an interface.

Description



June 2, 2009 of 156

Version

number

Item Description

Use the ipv6 netstream command to enable NetStream statistics globally or on the current interface.

Use the undo ipv6 netstream command to disable Netstream statistics globally or on the current interface.

By default, IPv6 NetStream statistics is disabled both globally and on the current interface.

Examples

# Enable IPv6 NetStream statistics in the inbound direction of interface Ethernet 1/0.



[Sysname-Ethernet1/0] ipv6 netstream inbound

10.Syntax

ipv6 netstream aggregation { as | bgp-nexthop | destination-prefix | prefix | protocol-port | source-prefix }

View

System view

Parameters

as: AS aggregation by combination of source AS number, destination AS number, inbound interface index, and outbound interface index.

bgp-nexthop: ToS-BGP next hop aggregation by combination of BGP next hop IPv6 address, and outbound interface index.

destination-prefix: Destination-prefix aggregation by destination AS number, destination address mask length, destination prefix, and outbound interface index.

prefix: Source and destination prefix aggregation by combination of source AS number, destination AS number, source address mask length, destination address mask length, source prefix, destination prefix, inbound interface index, and outbound interface index.

protocol-port: Protocol-port aggregation by combination of protocol number, source port, and destination port.

source-prefix: Source-prefix aggregation by combination of source AS number, source address mask length, source prefix, and inbound interface index.

Description

Use the ipv6 netstream aggregation command to enter NetStream aggregation view.

In NetStream aggregation view, you can enable or disable the aggregation mode, set information about source interface, destination IP address and destination port number for version 8 NetStream statistics packets.

Related commands: enable, ipv6 netstream export host, ipv6 netstream export source.



June 2, 2009 of 156

Version

number

Item Description

Examples

# Enter NetStream AS aggregation view.


[Sysname] ipv6 netstream aggregation as

[Sysname-ns6-aggregation-as]

11.Syntax

ipv6 netstream aggregation advanced

undo ipv6 netstream aggregation advanced

View

System view

Parameters

None

Description

Use the ipv6 netstream aggregation advanced command to enable hardware NetStream aggregation.

Use the undo ipv6 netstream aggregation advanced command to disable hardware NetStream aggregation.

By default, IPv6 hardware NetStream stream aggregation is disabled.

Note that:

If you enable hardware NetStream aggregation, the system performs the aggregation based on whether you have configured the export host, and the aggregation type.

After hardware NetStream aggregation is enabled, the aged hardware aggregation entries are recorded in the normal stream entry table and then exported.

Related commands: ipv6 netstream export host, ipv6 netstream aggregation

Examples

# Enable IPv6 hardware NetStream aggregation.


[Sysname] ipv6 netstream aggregation advanced

12.Syntax

ipv6 netstream export rate rate

undo ipv6 netstream export rate

View

System view

Parameters



June 2, 2009 of 156

Version

number

Item Description

rate: Maximum rate for exporting IPv6 NetStream statistics, in the unit of the maximum number of packets per second, in the range 1 to 1000. The value range depends on the device model.

Description

Use the ipv6 netstream export rate command to enable the packet export limitation, and set the maximum rate for exporting NetStream statistics.

Use the undo ipv6 netstream export rate command to disable the packet export limitation.

By default, the export rate of IPv6 NetStream statistics is not limited.

Note that the export rate on each board is different. As the aging timer is different, the configuration may not be very accurate on a multi-CPU device.

Examples

# Allow 10 packets at most to be exported per second.


[Sysname] ipv6 netstream export rate 10

13.Syntax

ipv6 netstream export host ip-address udp-port [ vpn-instance vpn-instance-name ]

undo ipv6 netstream export host [ ip-address [ vpn-instance vpn-instance-name ]

View

System view, NetStream aggregation view

Parameters

ip-address: Destination IP address for IPv6 NetStream statistics packets. At present, only IPv4 addresses are supported.

udp-port: Destination port number for NetStream statistics packets, in the range 0 to 65535.

vpn-instance vpn-instance-name: Name of the VPN in which routes are to be queried.

Description

Use the ipv6 netstream export host command to set the destination IP address and port number for NetStream statistics packets, and specify the name of the VPN in which routes are to be queried.

Use the undo ipv6 netstream export host command to restore the default.

By default, no destination IP address and port number are configured in system view and the IP address and port number in aggregation view are those configured in system view.

Note that:

If NetStream aggregation is not enabled, the destination IP address



June 2, 2009 of 156

Version

number

Item Description

and port number of NetStream statistics packets cannot be displayed.

Different destination hosts can be configured in different aggregation views.

If no destination host is configured in aggregation view, the configuration in system view is adopted.

You can configure up to four different destination hosts, including hosts in different VPNs, in one aggregation view. If you have configured the destination hosts with the same IP addresses but different UDP port numbers, the latest configuration takes effect. If you configure different VPN names, you can configure destination hosts with the same IP address and UDP port number. Statistics packets for a single stream are sent to all destination hosts configured in system view. Aggregation statistics packets are sent to all destination hosts configured in the aggregation view corresponding to the aggregation type.

Related commands: ipv6 netstream aggregation, ipv6 netstream export source.

Examples

# Configure the destination IP address and port number for NetStream statistics packet as 1.1.1.1 and 5000 respectively, and query routes in vpn0.


[Sysname] ipv6 netstream export host 1.1.1.1 5000 vpn-instance vpn0

14.Syntax

ipv6 netstream export source interface interface-type interface-number

undo ipv6 netstream export source

View

System view, NetStream aggregation view

Parameters

interface-type interface-number: Specifies a source interface for NetStream statistics packets by its type and number.

Description

Use the ipv6 netstream export source interface command to configure the source interface for NetStream statistics packets.

Use the undo ipv6 netstream export source command to remove the configured source interface.

By default, the outbound interface is adopted as the source interface.

Different source interfaces can be configured in different aggregation views.

If no source interface is configured in aggregation view, the source interface configured in system view is used.



June 2, 2009 of 156

Version

number

Item Description

Related commands: ipv6 netstream aggregation.

Examples

# Configure the source interface for IPv6 NetStream statistics packets as Ethernet 1/0.


[Sysname] ipv6 netstream export source interface ethernet 1/0

15.Syntax

ipv6 netstream export v9-template refresh-rate packet packets

undo ipv6 netstream export v9-template refresh-rate packet

View

System view

Parameters

packets: Packet refresh rate of version 9 templates, in the unit of the number of reported packets, namely, the device sends a template every packets packets for template update by XLog. It is in the range 1 to 600 and defaults to 20.

Description

Use the ipv6 netstream export v9-template refresh-rate packet command to configure the packet refresh rate of version 9 templates.

Use the undo ipv6 netstream export v9-template refresh-rate packet command to restore the default.

By default, a version 9 template is sent every 20 packets.

Due to its capacity limitation, XLog does not save all version 9 templates for ever; therefore, version 9 templates must be refreshed periodically. You can configure the packet refresh rate of version 9 templates to refresh them on time.

Related commands: ipv6 netstream export v9-template refresh-rate time.

Examples

# Set the packet refresh rate for version 9 NetStream statistics packets to 100.


[Sysname] ipv6 netstream export v9-template refresh-rate packet 100

16.Syntax

ipv6 netstream export v9-template refresh-rate time minutes

undo ipv6 netstream export v9-template refresh-rate time

View

System view

Parameters



June 2, 2009 of 156

Version

number

Item Description

minutes: Specifies the interval to send version 9 templates for IPv6 NetStream statistics packets, in minutes, namely, the device sends a template every minutes minutes for template update by XLog. It is in the range 1 to 3600, and defaults to 30.

Description

Use the ipv6 netstream export v9-template refresh-rate time command to configure the interval to send version 9 templates for NetStream statistics packets.

Use the undo ipv6 netstream export version command to restore the default.

By default, a version 9 template is sent every 30 minutes.

Due to its capacity limitation, XLog does not save all version 9 templates for ever; therefore, version 9 templates must be refreshed periodically. You can configure the interval to send version 9 templates to refresh them on time.

The device sends a version 9 template to Xlog as long as either of refresh rate for the time or for the packets of version 9 template is reached.

Related commands: ipv6 netstream export v9-template refresh-rate packet.

Examples

# Set the interval to send version 9 templates to 60 minutes.


[Sysname] ipv6 netstream export v9-template refresh-rate time 60

17.Syntax

ipv6 netstream export version 9 [ origin-as | peer-as ] [ bgp-nexthop ]

undo ipv6 netstream export version

View

System view

Parameters

origin-as: Sets the type of AS number recorded in IPv6 NetStream cache entries to origin.

peer-as: Sets the type of AS number recorded in IPv6 NetStream cache entries to peer.

bgp-nexthop: BGP next hops recorded in IPv6 NetStream cache.

Description

Use the ipv6 netstream export version 9 command to configure IPv6 NetStream statistics packets and the type of AS numbers and BPG next hop information to be recorded in IPv6 NetStream version 9 cache entries.

Use the undo ipv6 netstream export version command to restore the default.

By default, a single IPv6 stream, IPv6 aggregation statistics information,



June 2, 2009 of 156

Version

number

Item Description

and MPLS stream information with IPv6 options are sent in version 9 statistics packets, the AS option is peer-as and BGP next hop address is not recorded.

Note that the AS numbers for the source and destination IPv6 addresses of a stream are recorded in the statistics information. And each IPv6 address corresponds with two AS numbers (origin and peer), the system records the AS numbers according to the AS option configured by users.

Examples

# Set the NetStream statistics packet version number to 9 and the AS option to origin-as.


[Sysname] ipv6 netstream export version 9 origin-as

18.Syntax

ipv6 netstream max-entry { max-entries | aging | disable-caching }

undo ipv6 netstream max-entry

View

System view

Parameters

max-entries: IPv6 NetStream cache size. On a distributed device, this argument is effective on each board.

aging: Forcibly ages out the entries when the number of entries in the cache reaches the upper limit.

disable-caching: Disables creation of a new entry when the number of entries in the cache reaches the upper limit.

Description

Use the ipv6 netstream max-entry command to set the NetStream cache size, meaning maximum number of entries that the NetStream cache can accommodate, and configure whether to age out the entries or disable creation of a new entry when the number of entries in the cache reaches the upper limit.

Use the undo ipv6 netstream max-entry command to restore the default.

For a multi-CPU device, the command is used to set the cache size of a VCPU.

Examples

# Set the NetStream cache size to 5000.


[Sysname] ipv6 netstream max-entry 5000

# Disable creation of a new entry when the number of entries in the cache reaches the upper limit.


[Sysname] ipv6 netstream max-entry disable-caching



June 2, 2009 of 156

Version

number

Item Description

19.Syntax

ipv6 netstream timeout active minutes

undo ipv6 netstream timeout active

View

System view

Parameters

minutes: Sets the length of the active aging timer for IPv6 NetStream cache entries, in minutes. It is in the range 1 to 60, and defaults to 30.

Description

Use the ipv6 netstream timeout active command to set the active aging timer for IPv6 NetStream cache entries.

Use the undo ipv6 netstream timeout active command to restore the default.

The default value is 30 minutes.

Related commands: ipv6 netstream timeout inactive.

You can configure the active aging timer and inactive aging timer at the same time. When either of them times out, the entry ages out. The time precision is 10 seconds.

Examples

# Set the active aging timer to 60 minutes.


[Sysname] ipv6 netstream timeout active 60

20.Syntax

ipv6 netstream timeout inactive seconds

undo ipv6 netstream timeout inactive

View

System view

Parameters

seconds: Sets the length of the inactive aging timer for IPv6 NetStream cache entries, in seconds. It is in the range 10 to 600, and defaults to 30.

Description

Use the ipv6 netstream timeout inactive command to set the inactive aging timer for IPv6 NetStream cache entries.

Use the undo ipv6 netstream timeout inactive command to restore the default.

The default value is 30 seconds.

Related commands: ipv6 netstream timeout active.



June 2, 2009 of 156

Version

number

Item Description

You can configure the active aging timer and inactive aging timer at the same time. When either of them times out, the entry ages out. The time precision is 10 seconds.

Examples

# Set the inactive aging timer to 60 seconds.


[Sysname] ipv6 netstream timeout inactive 60

21.Syntax

reset ipv6 netstream statistics

View

User view

Parameters

None

Description

Use the reset ipv6 netstream statistics command to age and export all stream statistics to clear the IPv6 NetStream cache. The stream statistics are recounted when they age out.

Note that when the system is clearing the NetStream cache, it prompts you that the operation may take several minutes, and the system does not perform NetStream statistics during this process.

Examples

# Age and export all stream statistics to clear the IPv6 NetStream cache.

<Sysname> reset ipv6 netstream statistics

This process may take a few minutes.

Netstream statistic function is disabled during this process.

22.Syntax

ip netstream filter acl acl-number { inbound | outbound }

undo ip netstream filter acl acl-number { inbound | outbound }

View

Interface view

Parameters

acl-number: ACL number, in the range 2000 to 3999.

inbound: Enables NetStream filtering in the inbound direction.

outbound: Enables NetStream filtering in the outbound direction.

Description

Use the ip netstream filter command to enable NetStream filtering based on specified ACL rules.



June 2, 2009 of 156

Version

number

Item Description

Use the undo ip netstream filter to disable the function.

If both NetStream sampling and filtering are enabled, NetStream filtering is performed first.

By default, NetStream filtering is disabled.

Examples

# Perform NetStream filter in the outbound direction of interface Ethernet 1/0 based on ACL rule 2003.



[Sysname-Ethernet1/0] ip netstream filter acl 2003 outbound

23.Syntax

ip netstream mpls [ label-positions label-position1 [ label-position2 [ label-position3 ] ] ] [ no-ip-fields ]

undo ip netstream mpls

View

System view

Parameters

label-positions: Specifies position of the labels to be counted.

no-ip-fields: IP options are not counted.

label-position1: Position of the first label to be counted, in the range 1 to 6.

label-position2: Position of the second label to be counted, in the range 1 to 6.

label-position3: Position of the third label to be counted, in the range 1 to 6.

Description

Use the ip netstream mpls command to count and export MPLS packets. By using the no-ip-fields keyword, you can set whether to carry IP options when exporting MPLS packets. If you do not provide any arguments, the first label is used and IP options are carried in MPLS packets.

Use the undo ip netstream mpls command to disable counting and exporting of MPLS packets.

By default, counting and exporting of MPLS packets are disabled.

Note that this command not only enables IPv4 NetStream MPLS packet statistics, but also enables IPv6 NetStream MPLS packet statistics.

Examples

# Enable MPLS NetStream statistics, and export MPLS packets using the first label and without IP options.


[Sysname] ip netstream mpls no-ip-fields



June 2, 2009 of 156

Version

number

Item Description

24.Syntax

ip netstream sampler sampler-name { inbound | outbound }

undo ip netstream sampler sampler-name { inbound | outbound }

View

Interface view, system view

Parameters

sampler sampler-name: Sampler name, a string of up to 32 characters.

inbound: Enables sampling in the inbound direction.

outbound: Enables sampling in the outbound direction.

Description

Use the ip netstream sampler command to enable NetStream sampling.

Use the undo ip netstream sampler command to disable NetStream sampling.

NetStream sampling is disabled by default.

Examples

# Enable sampler abc for NetStream sampling in the inbound direction.



[Sysname-Ethernet1/0] ip netstream sampler abc inbound

25.Syntax

nat dns-map domain domain-name protocol pro-type ip global-ip port global-port

undo nat dns-map domain domain-name

View

System view

Default Level

2: System level

Parameters

domain-name: Domain name of an internal server, which is a string containing no more than 255 case-insensitive characters. A domain name consists of several labels separated by dots (.). Each label has no more than 63 characters that must begin and end with letters or digits; besides, dashes (-) can be included.

pro-type: Protocol type used by the internal server.

global-ip: Public IP address used by the internal server to provide services to the external network.

server-port: Port number used by the internal server to provide services to



June 2, 2009 of 156

Version

number

Item Description

the external network.

Description

Use the nat dns-map command to map the domain name to the public network information of an internal server.

Use the undo nat dns-map command to remove a DNS mapping.

Currently, the device supports up to 16 DNS mappings.

Related commands: display nat dns-map.

Examples

# A company provides WWW service to external users. The domain name of the internal server is www.server.com, and the public IP address is 202.112.0.1. Configure a DNS mapping, so that internal users can access the WWW server using its domain name.


[Sysname] nat dns-map domain www.server.com protocol tcp ip 202.112.0.1 port www

26.Syntax

display nat dns-map

View

Any view

Parameters

None

Description

Use the display nat dns-map command to dispaly NAT DNS mapping configuration information.

Examples

# Display NAT DNS mapping configuration information.

<Sysname> display nat dns-map

NAT DNS mapping information:

There are currently 2 NAT DNS mapping(s)

Domain-name: www.server.com

Global-IP : 202.113.16.117

Global-port: 80(www)

Protocol : 6(TCP)

Domain-name: ftp.server.com

Global-IP : 202.113.16.100

Global-port: 21(ftp)

Protocol : 6(TCP)

27.Syntax



June 2, 2009 of 156

Version

number

Item Description

interface net-stream interface-number

View

System view

Default Level

2: System level

Parameters

interface-number: Specifies a NetStream interface by its number.

Description

Use the interface net-stream command to enter specified NetStream interface view.

Examples

# Enter specified NetStream interface view.


[Sysname] interface net-stream 1/0

[Sysname-Net-Stream1/0]

28.Syntax

ip netstream aggregation advanced

undo ip netstream aggregation advanced

View

System view

Default Level

3: Manage level

Parameters

None

Description

Use the ip netstream aggregation advanced command to enable hardware NetStream aggregation.

Use the undo ip netstream aggregation advanced command to disable hardware NetStream aggregation.

By default, hardware NetStream aggregation is disabled.

Note that:

If you enable hardware NetStream aggregation, the system performs the aggregation based on whether you have configured the export host, and the aggregation type.

After hardware NetStream aggregation is enabled, the aged hardware aggregation entries are recorded in the normal stream entry table and then exported.



June 2, 2009 of 156

Version

number

Item Description

Related commands: ip netstream export host, ip netstream aggregation

Examples

# Enable hardware NetStream aggregation.


[Sysname] ip netstream aggregation advanced

29.Syntax

nat link-down reset-session enable

undo nat link-down reset-session enable

View

System view

Default Level

2: System level

Parameters

None

Description

Use the nat link-down reset-session enable command to enable aging out NAT entries upon master link failure.

Use the undo nat link-down reset-session enable command to restore the default.

By default, this feature is disabled.

Examples

# Enable aging out NAT entries upon master link failure.


[Sysname] nat link-down reset-session enable

30.Syntax

ip netstream export rate limit

undo ip netstream export rate

View

System view

Default Level

3: Manage level

Parameters

limit: Maximum rate for exporting NetStream statistics, in the unit of the maximum number of packets per second, in the range 1 to 1000. The value range depends on the device model.



June 2, 2009 of 156

Version

number

Item Description

Description

Use the ip netstream export rate command to enable the packet export limitation, and set the maximum rate for exporting NetStream statistics.

Use the undo ip netstream export rate command to disable the packet export limitation.

By default, the export rate of NetStream statistics is not limited.

Note that the export rate on each board is different. As the aging timer is different, the configuration may not be very accurate on a multi-CPU device.

Examples

# Allow 10 packets at most to be exported per second.


[Sysname] ip netstream export rate 10

Modified Commands

None.

Deleted Commands

Syntax:

ip netstream binding interface interface-type interface-number

undo ip netstream binding interface interface-type interface-number

The model :IP

Info: Delete these two commads.

CMW520-B1608

New Commands

1.Syntax:

authentication-mode { none | password | scheme }

View: IP terminal access service view

Parameter:

none: No authentication.

password: Password authentication.

scheme: AAA scheme authentication.

Description:

Use the authentication-mode command to set the IP terminal access authentication mode for the service.

The default mode is none, that is, no IP terminal access authentication is performed.

Note that the setting can be configured when the service is running but takes effect at the next login.

Related commands: set authentication password.

Example:

# Set the IP terminal access password authentication mode for the



June 2, 2009 of 156

Version

number

Item Description

cunkuan service.


[Sysname] ipta service cunkuan

[Sysname-ipta-service-cunkuan] authentication-mode password

# Set the IP terminal access AAA scheme authentication mode for the cunkuan service.



[Sysname-ipta-service-cunkuan] authentication-mode scheme

2.Syntax:

bind vpn-instance vpn-name

undo bind vpn-instance

View: Terminal view

Parameter:

vpn-name: Name of a VPN instance, a string of 1 to 31 characters.

Description:

Use the bind vpn-instance command to bind a VPN instance to the terminal. After that, the terminal can access servers in the VPN.

Use the undo bind vpn-instance command to remove the binding.

No VPN is bound to the terminal by default.

Example:

# Bind Terminal 1 to VPN 1.


[Sysname] ipta terminal 1

[Sysname-terminal-1] bind vpn-instance vpn1

3.Syntax:

display ipta { status | statistics } { service [ service-name ] | terminal [ ttyid [ service service-name ] ] }

View: Any view

Parameter:

status: Displays IP terminal access status information.

statistics: Displays IP terminal access statistics information.

service [ service-name ]: Displays IP terminal access information about the service. The service name is a string of 1 to 15 case-insensitive characters, and can include spaces.

terminal [ ttyid [ service service-name ] ]: Displays IP terminal access information about the terminal. ttyid is the number of the terminal, in the



June 2, 2009 of 156

Version

number

Item Description

range 0 to 255. The keyword and argument combination terminal ttyid service service-name displays IP terminal access information about the specified service on the specified terminal.

Description:

Use the display ipta command to display IP terminal access information.

Example:

# Displays IP terminal access status information about the cunkuan service.

<Sysname> display ipta status service cunkuan

Service name: cunkuan

listen port: 2049

First server IP: 192.168.0.24 Port: 9011 Status: ACTIVE

Second server IP: 192.168.0.25 Port: 9011 status: INACTIVE

Third server IP: 0.0.0.0 Port: 0 status: INACTIVE

Idle-timeout disconnect: 300 second(s)

Idle-timeout lock: 100 second(s)

Encrytion algorithm: aes

Source ip: 6.6.6.6

Athentication mode: Scheme

TTY-ID IP:Port Server IP:Port Status

41 192.168.0.168:6058 192.168.0.24:9011 WaitingPwd

42 192.168.0.12:8524192.168.0.24:9011 WaitingUserName

43 192.168.0.46:8462 192.168.0.24:9011 Normal

56 192.168.0.58:7452 192.168.0.24:9011 MatchingHotKey

4.Syntax:

encryption algorithm { aes | quick }

undo encryption algorithm

View: IP terminal access service view

Parameter:

aes: AES 128-bit encryption algorithm.

quick: Quick encryption algorithm, a proprietary algorithm of Huawei.

Description:

Use the encryption algorithm command to enable data encryption using the specified encryption algorithm.

Use the undo encryption algorithm to restore the default.



June 2, 2009 of 156

Version

number

Item Description

By default, data encryption is not enabled.

Note that the new setting takes effect only for connections established after it is configured.

Example:

# Specify the AES encryption algorithm for the cunkuan service.



[Sysname-ipta-service-cunkuan] encryption algorithm aes

5.Syntax:

ip ip-address [ mac mac-address ]

undo { ip | mac }

View: Terminal view

Parameter:

ip-address: IP address of the terminal, in dotted decimal format.

mac mac-address: MAC address of the terminal, in the H-H-H format.

Description:

Use the ip command to specify the terminal’s IP-to-MAC binding.

Use the undo ip command to restore the default.

Use the undo mac command to remove the binding.

Note that:

To modify the IP address of a binding, use the ip ip-address command. To modify the MAC address of a binding, use the ip ip-address mac mac-address command.

After a binding is specified for a terminal, the terminal must use the IP and MAC addresses to login successfully.

If the access router is not directly connected to terminals, packets from terminals do not carry their own MAC addresses, and therefore, you don’t need to bind MAC addresses for them.

Example:

# Bind IP address 1.1.1.2 to MAC address 00e0-fc04-1234 for Terminal 1.



[Sysname-ipta-terminal-1] ip 1.1.1.2 mac 00e0-fc04-1234

6.Syntax:

ipta bind { mac-address interface interface-type interface-number | string string }



June 2, 2009 of 156

Version

number

Item Description

undo ipta bind

View: System view

Parameter:

mac-address interface interface-type interface-number: Specifies the interface’s MAC address to be used for authentication.

string string: Specifies a string of 1 to 30 characters to be used for authentication.

Description:

Use the ipta bind command to specify the MAC address or string for authentication with the server.

Use the undo ipta bind command to remove the configuration.

By default, no authentication is performed between the access router and server.

During authentication, the router sends the specified MAC address or string to the server, which compares it with that locally configured. If they match, the router passes the authentication. If not, the server disconnect from the router.

Example:

# Specify the MAC address of Ethernet 0/0 for authentication.


[Sysname] ipta bind mac-address interface ethernet 0/0

# Specify the string abc for authentication.


[Sysname] ipta bind string abc

7. Syntax:

ipta bind vpn-instance vpn-name terminal ttyid-list

undo ipta bind vpn-instance terminal ttyid-list

View:

System view

Parameters:

vpn-name: Name of a VPN instance, a string of 1 to 31 characters.

ttyid-list: List of terminals. You can specify up to 10 terminal lists. A ttyid is a terminal number in the range 0 to 255.

Description:

Use the ipta bind vpn-instance command to bind the specified terminals to the specified VPN. After that, the specified terminals can access servers in the VPN.

Use the undo ipta bind vpn-instance command to remove the binding.



June 2, 2009 of 156

Version

number

Item Description

By default, no terminal-VPN binding is configured.

Examples:

# Bind terminals 1 through 20, 25, and 30 through 50 to VPN 1


[Sysname] ipta bind vpn-instance vpn1 terminal 1 to 20 25 30 to 50

8. Syntax:

ipta disconnect { all | service service-name | terminal ttyid [ service service-name ] }

View:

System view

Parameters:

all: Disconnects all IP terminal access TCP connections.

service service-name: Disconnects the IP terminal access TCP connections of the specified service. The service name is a string of 1 to 15 case-insensitive characters and can include spaces.

terminal ttyid [ service service-name ]: Disconnects the IP terminal access TCP connections of the specified terminal. A ttyid is a terminal number in the range 0 to 255. The keyword and argument combination terminal ttyid service service-name disconnects the IP terminal access TCP connections of the specified service on the specified terminal.

Description:

Use the ipta disconnect command to manually disconnect IP terminal access TCP connections between terminals, the access router and the server.

Examples:

# Disconnect all IP terminal access TCP connections.


[Sysname] ipta disconnect all

# Disconnect the IP terminal access TCP connections of the cunkuan service..


[Sysname] ipta disconnect service cunkuan

# Disconnect the IP terminal access TCP connections of Terminal 10.


[Sysname] ipta disconnect terminal 10

# Disconnect the IP terminal access TCP connections of the cunkuan service of Terminal 10.




June 2, 2009 of 156

Version

number

Item Description

[Sysname] ipta disconnect terminal 10 service cunkuan

9. Syntax:

ipta lock-key ascii-code&<1-3>

undo ipta lock-key

View:

System view

Parameters:

ascii-code&<1-3>: ASCII value of the terminal lock hotkey, in the range 0 to 255. You can specify up to three terminal lock hotkeys.

Description:

Use the ipta lock-key command to specify IP terminal lock hotkey(s).

Use the undo ipta lock-key command to remove IP terminal lock hotkey(s)

No IP terminal lock hotkey is specified by default.

Note that:

The specified IP terminal lock hotkeys cannot be identical to other hotkeys on the access router and the server to avoid conflicts. For example, hotkeys 17 and 19 are flow control hotkeys of Linux.

The specified IP terminal lock hotkeys are not effective for terminals using the service that has the none authentication mode specified,.

Related commands: authentication-mode.

Examples:

# Configure lock hotkey 27 for all terminals.


[Sysname] ipta lock-key 27

10. Syntax:

ipta server enable

undo ipta server enable

View:System view

Parameters:

None

Description:

Use the ipta server enable command to enable IP terminal access.

Use the undo ipta server enable command to disable IP terminal access.

IP terminal access is disabled by default.

Examples:



June 2, 2009 of 156

Version

number

Item Description

# Enable IP terminal access.


[Sysname] ipta server enable

11. Syntax:

ipta service service-name

undo ipta service service-name

View:System view

Parameters:

service-name : Service name, which is a string of 1 to 15 case-insensitive characters can include spaces.

Description:

Use the ipta service command to create a IP terminal access service and enter its view, or to enter IP terminal access service view if the service has been created.

Use the undo ipta service command to remove the specified service and its configurations.

Examples:

# Create the service named cunkuan.



[Sysname-ipta-service-cunkuan]

12. Syntax:

ipta terminal ttyid

undo ipta terminal { ttyid | all }

View:System view

Parameters:

ttyid: Terminal number, in the range 0 to 255.

all: All terminals.

Description:

Use the ipta terminal command to create an IP terminal and enter its view, or enter its view if the terminal has been created.

Use the undo ipta terminal command to remove a terminal and its configuration, or all terminals and their configurations.

Examples:

# Create Terminal 1.




June 2, 2009 of 156

Version

number

Item Description


[Sysname-ipta-terminal-1]

13. Syntax:

listen port port-number

undo listen port

View:IP terminal access service view

Parameters:

port-number: Listen port number, in the range 1024 to 50000.

Description:

Use the listen port command to specify the listen port of the IP terminal access service. The specified port is used by the service to receive connection requests from terminals.

Use the undo listen port command to remove the listen port of the service.

No listen port is specified for an IP terminal access service.

Note that the setting is effective for connections established after it is configured.

Examples:

# Configure listen port 3000 for the cunkuan service.



[Sysname-ipta-service-cunkuan]listen port 3000

14. Syntax:

reset ipta statistics { service [ service-name ] | terminal ttyid [ service service-name ] }

View:User view

Parameters:

service [ service-name ]: Clears the IP terminal access statistics of the specified service. The service name is a string of 1 to 15 case-insensitive characters and can include spaces.

ttyid: Terminal number, in the range 0 to 255.

terminal ttyid [ service service-name ]: Clears the IP terminal access statistics of the specified terminal. A ttyid is a terminal number in the range 0 to 255. The keyword and argument combination terminal ttyid service service-name clears the IP terminal access statistics of the specified service on the specified terminal.

Description:

Use the reset ipta statistics command to clear IP terminal access statistics.



June 2, 2009 of 156

Version

number

Item Description

Examples:

# Clear the IP terminal access statistics of Terminal 1.

<Sysname> reset ipta statistics terminal 1

# Clear the IP terminal access statistics of service cunkuan.

<Sysname> reset ipta statistics service cunkuan

15. Syntax:

server ip ip-address port port-number [ priority priority-level ]

undo server priority priority-level


Parameters:

ip ip-address: IP address of the server, in dotted decimal notation.

port port-number: Port number of the server, in the range 1024 to 50000.

priority priority-level: Priority of the server, in the range 0 to 2. A smaller value represents a higher priority.

Description:

Use the server ip command to specify the IP address, port number and priority of the server providing the service.

Use the undo server ip command to remove the configuration of the server with the specified priority.

Note that a server can have only one priority configured.

Examples

# Configure the server with the highest priority for the cunkuan service



[Sysname-ipta-service-cunkuan] server ip 1.1.1.2 port 6000 priority 0

16. Syntax:

set authentication password { cipher | simple } password

undo set authentication password


Parameters:

cipher: Configures the password to be displayed in cipher text.

simple: Configures the password to be displayed in plain text.

password: A case-sensitive character string.

If the simple keyword is specified, the password is a string of 1 to 16 characters in plain text.



June 2, 2009 of 156

Version

number

Item Description

If the cipher keyword is specified, the password can be a string of 1 to 16 characters in plain text or a string of 24 characters in cipher text. For example, the plain text password 1234567 corresponds to the cipher text password_(TT8F]Y\5SQ=^Q`MAF4<1!!.

Description:

Use the set authentication password command to set the authentication password for terminals to log into the service.

Use the undo set authentication password command to remove the setting.

By default, no authentication password is configured.

Note that you can configure the password no matter when the service is running or not.

Related commands: authentication-mode.

Examples:

# Configure 123 as the password for terminals to log into the cunkuan service, and specify the password to be displayed in plain text.



[Sysname-ipta-service-cunkuan] set authentication password simple 123

17. Syntax

source ip ip-address

undo source ip


Parameters:

ip-address: Source IP address bound to the service, in dotted decimal notation.

Description:

Use the source ip command to bind the source IP address to the service.

Use the undo source ip command to restore the default.

By default, no source IP address is bound to the service. The IP address of the outbound interface is used as the source IP address of TCP connections.

You are recommended to specify the IP address of a loopback or dialer interface as the source IP address of TCP connections, and you need to configure a route to the IP address on the server (FEP).

Examples:

# Bind a source IP address to the cunkuan service.


[Sysname] interface loopback 1



June 2, 2009 of 156

Version

number

Item Description

[Sysname-LoopBack1] ip address 1.1.1.2 32

[Sysname-LoopBack1] quit


[Sysname-ipta-service-cunkuan] source ip 1.1.1.2

18. Syntax:

tcp keepalive time counter

undo tcp keepalive


Parameters:

time: Interval for sending TCP keepalives, in the range 10 to 7200 seconds.

counter: Times for sending TCP keepalives, in the range 1 to 100.

Description:

Use the tcp keepalive command to configure parameters for sending TCP keepalives.

Use the undo tcp keepalive command to restore the default.

By default, the interval for sending keepalives is 300 seconds, and the number of keepalive sending times is 3.

Keepalives are used to detect the links between the terminal, access router and FEP.

Keepalive time = Interval for sending keepalives × Times for sending keepalives

Note that the keepalive parameters take effect for connections established after they are configured.

Examples:

# Configure the keepalive sending interval as 1800 seconds, and the keepalive sending times as 2.



[Sysname-ipta-service-cunkuan] tcp keepalive 1800 2

19. Syntax

tcp recvbuf-size recvsize

undo tcp recvbuf-size


Parameters:

recvsize: Size of the TCP receive buffer, in the range of 512 to 16384 bytes.



June 2, 2009 of 156

Version

number

Item Description

Description:

Use the tcp recvbuf-size command to configure the size of the TCP receive buffer.

Use the undo tcp recvbuf-size command to restore the default.

By default, the TCP receive buffer size is 2048 bytes.

Examples:

# Configure the size of the TCP receive buffer size to 512 bytes.



[Sysname-ipta-service-cunkuan] tcp recvbuf-size 512

20. Syntax

tcp sendbuf-size sendsize

undo tcp sendbuf-size


Parameters:

sendsize: Size of the TCP send buffer, in the range of 512 to 16384 bytes.

Description:

Use the tcp sendbuf-size command to configure the size of the TCP send buffer.

Use the undo tcp sendbuf-size command to restore the default.

By default, the TCP send buffer size is 2048 bytes.

Examples:

# Configure the size of the TCP send buffer size as 512 bytes.



[Sysname-ipta-service-cunkuan] tcp sendbuf-size 512

21. Syntax:

telnet negotiation enable

undo telnet negotiation enable

View:Terminal view

Parameters:

None

Description:

Use the telnet negotiation enable command to enable telnet parameters negotiation function with the terminal.



June 2, 2009 of 156

Version

number

Item Description

Use the undo telnet negotiation enable command to restore the default.

By default, the telnet parameters negotiation function with the terminal is disabled.

Examples:

# Enable telnet parameters negotiation with terminal 1.



[Sysname-ipta-terminal-1] telnet negotiation enable

22. Syntax

terminal ttyid [ to ttyid ]

undo terminal { ttyid [ to ttyid ] | all }

View:Service view

Parameters:

ttyid [ to ttyid ]: A ttyid refers to a terminal number, in the range of 0 to 255. ttyid to ttyid specifies a range of terminal numbers.

all: Specifies all terminals.

Description:

Use the terminal command to enable the terminal(s) to use the service.

Use the undo terminal command to disable the specified terminal(s) from using the service.

Examples:

# Enable terminal 1 to use the cunkuan service.



[Sysname-ipta-service-cunkuan] terminal 1

23. Syntax

timer idle-timeout seconds { disconnect | lock }

undo timer idle-timeout { disconnect | lock }


Parameters:

seconds: Timeout time, in the range of 0 to 7200 seconds. If the value is set to 0, the corresponding link lock or link disconnection function is disabled.

disconnect: Sets the link disconnection timer.

lock: Sets the link lock timer.

Description:



June 2, 2009 of 156

Version

number

Item Description

Use the timer idle-timeout command to set the link disconnection timer or link lock timer.

Use the undo timer idle-timeout command to restore the default.

By default, the link disconnection timer and link lock timer are both 600 seconds.

If the link lock timer expires and the authentication mode on the router is set to scheme or password, a new authentication interface will replace the service interface on the corresponding terminal; if the link lock timer expires and the authentication mode on the router is set to none, the service interface on the terminal will not be changed.

If the link disconnection timer expires, the corresponding link is disconnected.

The link lock and link disconnection timers can be set separately, and they do not affect each other.

The value of the link lock timer should be smaller than the link disconnection timer; otherwise, a link may be disconnected even if the link lock timer does not expire.

Examples:

# Set the link lock timer of the cunkuan service to 60 seconds.



[Sysname-ipta-service-cunkuan] timer idle-timeout 60 lock

24. Syntax

transform enter { cr | crlf }

undo transform enter

View:Terminal view

Parameters:

cr: Takes both CR (carriage return ASCII code 0d) and CRLF (new-line ASCII code 0d0a or 0d00) as CR (0d).

crlf: Takes both CR and CRLF as CRLF (0d0a).

Description:

Use the transform enter command to configure the processing approach for CR and CRLF.

Use the undo transform enter command to restore the default.

By default, the system does not transform CR and CRLF.

To enable different terminals to recognize the carriage return and new-line characters of the FEP, the device needs to transform them into a common form.

This function only applies to data packets from the FEP.



June 2, 2009 of 156

Version

number

Item Description

Examples:

# Transform both CR and CRLF to CR.



[Sysname-ipta-terminal-1] transform enter cr

# Transform both CR and CRLF to CRLF.



[Sysname-ipta-terminal-1] transform enter crlf

25.Syntax:

privacy { asserted | preferred }

undo privacy

View: SIP client view

Parameter:

asserted: Adds the P-Asserted-Identity header field. When the P-Asserted-Identity header field is added, the Privacy header field will be added. The Privacy header field contains the caller identity presentation and screening information, while the P-Asserted-Identity header field contains the caller identity.

preferred: Adds the P-Preferred-Identity header field. When the P-Preferred-Identity header field is added, the Privacy header field will be added. The Privacy header field contains the caller identity presentation and screening information, while the P-Preferred-Identity header field contains the caller identity.

Description:

Use the privacy command to add the P-Preferred-Identity or P-Asserted-Identity header field.

Use the undo privacy command to remove the configuration.

By default, neither the P-Preferred-Identity header field nor the P-Asserted-Identity header field is added.

Example:

# Add the P-Asserted-Identity header field.



[Sysname-voice] sip

[Sysname-voice-sip] privacy asserted

26.Syntax:

remote-party-id



June 2, 2009 of 156

Version

number

Item Description

undo remote-party-id

View: SIP client view

Parameter:

None.

Description:

Use the remote-party-id command to add the Remote-Party-ID header field.

Use the remote-party-id command to remove the configuration.

By default, the Remote-Party-ID is not added.

Example:

# Add the Remote-Party-ID header field.



[Sysname-voice] sip

[Sysname-voice-sip] remote-party-id

27.Syntax:

ssm-mapping group-address { mask | mask-length } source-address

undo ssm-mapping { group-address { mask | mask-length } source-address | all }

View: Public instance IGMP view, VPN instance IGMP view

Parameter: group-address: Specifies a multicast group by its IP address, in the range of 224.0.0.0 to 239.255.255.255.

mask: Subnet mask of the multicast group address.

mask-length: Subnet mask length of the multicast group address, in the range of 4 to 32.

source-address: Specifies a multicast source by its IP address.

all: Removes all IGMP SSM mappings.

Description:

Use the ssm-mapping command to configure an IGMP SSM mapping.

Use the undo ssm-mapping command to remove one or all IGMP SSM mappings.

By default, no IGMP SSM mappings are configured.

Related commands: igmp ssm-mapping enable, display igmp ssm-mapping.

Example:

# Configure an IGMP SSM mapping in the public instance for multicast



June 2, 2009 of 156

Version

number

Item Description

group 225.1.1.1/24 and multicast source 125.1.1.1.


[Sysname] igmp

[Sysname-igmp] ssm-mapping 225.1.1.1 24 125.1.1.1

28.Syntax:

igmp ssm-mapping enable

undo igmp ssm-mapping enable

View: Interface view/Default Level

Parameters:

None.

Description:

Use the igmp ssm-mapping enable command to enable the IGMP SSM mapping feature on the current interface.

Use the undo igmp ssm-mapping enable command to disable the IGMP SSM mapping feature on the current interface.

By default, the IGMP SSM mapping feature is disabled on all interfaces.

Examples:

# Enable the IGMP SSM mapping feature on Ethernet 1/0.



[Sysname-Ethernet1/0] igmp ssm-mapping enable

29. Syntax:

display igmp [ vpn-instance vpn-instance-name | all-instance ] ssm-mapping group-address

View: Any view

Parameters:

vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. A VPN instance name must not contain any space.

all-instance: Specifies all VPN instances.

group-address: Specifies a multicast group by its IP address, in the range of 224.0.1.0 to 239.255.255.255.

Description:

Use the display igmp ssm-mapping command to view the configured IGMP SSM mappings for the specified multicast group.

Related commands: ssm-mapping.



June 2, 2009 of 156

Version

number

Item Description

Examples:

# View the IGMP SSM mappings for multicast group 232.1.1.1 in the public instance.

<Sysname> display igmp ssm-mapping 232.1.1.1

VPN-Instance: public net

Group: 232.1.1.1

Source list:

1.2.3.4

5.5.5.5

10.1.1.1

100.1.1.10

30. Syntax

display igmp [ vpn-instance vpn-instance-name | all-instance ] ssm-mapping group [ group-address | interface interface-type interface-number ] [ verbose ]

View: Any view

Parameters

vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. A VPN instance name must not contain any space.

all-instance: Specifies all VPN instances.

group-address: Specifies a multicast group by its IP address, in the range of 224.0.1.0 to 239.255.255.255.

interface-type interface-number: Specifies an interface by its type and number.

verbose: Displays the detailed multicast group information created based on the configured IGMP SSM mappings.

Description:

Use the display igmp ssm-mapping group command to view the multicast group information created based on the configured IGMP SSM mappings.

Note that:

If you do not specify a multicast group, this command will display the information of all multicast groups created based on the configured IGMP SSM mappings.

If you do not specify an interface, this command will display the multicast group information created based on the configured IGMP SSM mappings on all the interfaces.

Examples

# View the detailed information of multicast group 225.1.1.1 created based



June 2, 2009 of 156

Version

number

Item Description

on the configured IGMP SSM mappings in the public instance.

<Sysname> display igmp ssm-mapping group 225.1.1.1 verbose

Interface group report information of VPN-Instance: public net

Ethernet1/0(10.10.10.10):

Total 1 IGMP SSM-mapping Group reported

Group: 225.1.1.1

Uptime: 00:00:31

Expires: off

Last reporter: 1.1.1.1

Version1-host-present-timer-expiry: off

Source list(Total 1 source):

Source: 1.1.1.1

Uptime: 00:00:31

Expires: 00:01:39

Last-member-query-counter: 0

Last-member-query-timer-expiry: off

Modified Commands

Original command:

mpls te path explicit-path pathname

undo mpls te path

Modified command:

mpls te path { dynamic | explicit-path pathname } preference value

undo mpls te path { dynamic | explicit-path pathname }

Module of the command: MPLS TE

Description:Add dynamic and preference value to uses the path that is dynamically calculated and Specifies the preference of the path.

Changes in default values:None.

Syntax: license register serial-number

Module of the command:

Equipment management.

Description:

Delete license register function of MSR 30-11.

Deleted Commands

Syntax: display license

Module of the command:

Equipment management.



June 2, 2009 of 156

Version

number

Item Description

Description:

Delete license register function of MSR 30-11.

Syntax:

lldp compliance cdp

undo lldp compliance cdp

View: System view

Parameters: None

Description:

Use the lldp compliance cdp command to enable global CDP compatibility.

Use the undo lldp compliance cdp command to restore the default.

By default, global CDP compatibility is disabled.

Note that, as the maximum TTL allowed by CDP is 255 seconds, your TTL configuration, that is, the product of the TTL multiplier and the LLDPDU sending interval, must be less than 255 seconds for CDP-compatible LLDP to work properly with Cisco IP phones.

Examples:

# Enable LLDP to be compatible with CDP globally.


[Sysname] lldp compliance cdp

CMW520-B1606

New Commands

Syntax:

lldp compliance admin-status cdp { txrx | disable}

View: Ethernet interface view, port group view

Parameters:

disable: Specifies the disable mode, where CDP-compatible LLDP neither receives nor transmits CDP packets.

txrx: Specifies the TxRx mode, where CDP-compatible LLDP can send and receive CDP packets.

Description:

Use the lldp compliance admin-status cdp command to configure the operation mode of CDP-compatible LLDP on a port or port group.

By default, CDP-compatible LLDP operates in disable mode.

To have your device work with Cisco IP phones, you must enable CDP-compatible LLDP globally and then configure CDP-compatible LLDP to work in TxRx mode on the specified port(s).

Examples:

# Configure CDP-compatible LLDP to operate in TxRx mode on Ethernet 1/0.



June 2, 2009 of 156

Version

number

Item Description



[Sysname-Ethernet1/0] lldp compliance admin-status cdp txrx

Syntax:

acsei-client enable

undo acsei-client enable

View: Interface view

Parameters: None

Description:

Use the acsei-client enable command to enable ACSEI client.

Use the undo acsei-client enable command to disable ACSEI client.

By default, ACSEI client is disabled.

A system can run only one ACSEI client, that is, ACSEI client can be enabled on only one interface at a time. However, ACSEI client on the Comware platform and that on the OAP module can run simultaneously.

Examples:

# Enable ACSEI client on interface GigabitEthernet 1/0.


[Sysname] interface gigabitethernet 1/0

[Sysname-GigabitEthernet1/0] acsei-client enable

Syntax:

display acsei-client information

View: Any view

Parameters: None

Description: Use the display acsei-client information command to display information about ACSEI client.

Examples:

# Display information about the current ACSEI client.

<Sysname> display acsei-client information

Client Description: SecBlade II

Hardware: A.0

System Software: COMWAREV500R002B38D001

Application Software: V300R001B01D006

CPU: RMI XLR732 1000MHz

PCB Version: A.0



June 2, 2009 of 156

Version

number

Item Description

CPLD Version: 1.0

Bootrom Version: Basic BootRom Version:1.02,Extend BootRom Version:1.01

CF card: 256M Bytes Compact Flash Storage Device

Memory: 1024M Bytes DDR2 SDRAM Memory

Harddisk:

Syntax:

display acsei-client status

View: Any view

Parameters: None

Description:

Use the display acsei-client status command to display the current state of ACSEI client.

Examples:

# Display the current state of ACSEI client.

<Sysname> display acsei-client status

Client ID: 1

Status: Open

Slot Number: 1

Interface: GigabitEthernet 1/1

Deleted Commands

None.

Modified Commands

None.

CMW520-R1508P02

New Commands

1. Syntax:

mib-style [ new | compatible ]

View:

System view

Parameters:

new: Specify the MIB style as H3C brand new, that is, both the device sysOID and private MIB are under the enterprise ID of H3C (25506).

compatible: Specify the MIB style as H3C compatible, that is, the device sysOID is under the enterprise ID of H3C (25506), and the private MIB is under the enterprise ID 2011.

Description:

Use the mib-style command to specify the MIB style of a device, including H3C brand new and H3C compatible.



June 2, 2009 of 156

Version

number

Item Description

Examples:

You obtain a device ID from the sysObjectID node, and find that the device is an H3C device. However, the device panel cannot be recognized when you use H3C Quidview NMS to manage the device by the device ID, but the MIB node can be obtained by the device ID when you use the MIB browser. To manage the device without the need of upgrading the NMS, you can use this command to switch the device MIB style.


[Sysname]mib-style compatible

After the setting, restart the device.

Use the MIB browser to obtain enterprise ID 2011. Then use H3C Quidview NMS to manage the device.

2. Syntax:

display mib-style

View:

Any view

Parameters:

None

Description:

Use the display mib-style command to display the device MIB style.

Examples

You obtain a device ID from the sysObjectID node, and find that the device is an H3C device. You want to know the current MIB style of the device or the MIB style at next startup of the device.


[Sysname]display mib-style

Current MIB style: new

Next reboot MIB style: new

# Use the mib-style command to set the MIB style to compatible.

[Sysname]mib-style compatible

# Display the device MIB style


[Sysname]display mib-style

Current MIB style: new

Next reboot MIB style: compatible

You are recommended to restart the device right after you change the MIB style to make the setting effective immediately.



June 2, 2009 of 156

Version

number

Item Description

You can select appropriate NMS according to the MIB style.

Deleted Commands

None.

Modified Commands

None.

New Commands

Deleted Commands

CMW520-R1508

Modified Commands

See <CMW520-R1508 Commands Changes.xls >

MIB Updates

Table 13 MIB updates

Version number Item MIB file Module Description

h3c-entity-ext.mib H3C-ENTITY-EXT-MIB

Add h3cProcessTable, h3cEntityInsert and h3cEntityRemove

rfc2233-if.mib IF-MIB Add ifTestTable

h3c-entity-ext.mib H3C-ENTITY-EXT-MIB Add h3cEntityExtSFPPhony

h3c-mpm.mib H3C-MPM-MIB Add H3C-MPM-MIB

huawei-splat-igsp.mib

HUAWEI-LswIGSP-MIB

Add hwIgmpSnoopingVlanStatusTable and hwIgmpSnoopingStatsObjects

h3c-user.mib H3C-USER-MIB Add huawei-splat-igsp.mib and h3cUserGroup

h3c-voice-dial-control.mib

H3C-VOICE-DIAL-CONTROL-MIB

Add H3C-VOICE-DIAL-CONTROL-MIB

Hh3c-dot11-cfg.mib H3C-DOT11-CFG-MIB Add h3cDot11PortSecurityTable

huawei-8021x-ext.mib

HUAWEI-8021PAE-MIB

Add hwdot1xAuthMethod, hwdot1xpaeportMcastTrigStatus and hwdot1xpaeportHandshakeStatus

CMW520-R1719 New


HUAWEI-LswIGSP-MIB

Add hwIgmpSnoopingNonFloodingStatus



June 2, 2009 of 156


h3c-ui-man.mib H3C-UI-MAN-MIB Add h3cUIScalarObjects

h3c-sys-man.mib H3C-SYS-MAN-MIB

Add h3cSysCurBtmFileName and h3cSysCurUpdateBtmFileName

h3c-net-man.mib H3C-NET-MAN-MIB Add H3C-NET-MAN-MIB

h3c-dsp.mib H3C-DSP-MIB Add H3C-DSP-MIB

rfc2790-host-resources.mib

HOST-RESOURCE-MIB Add HOST-RESOURCE-MIB

hh3c-voice-call-history.mib

H3C-VOICE-CALL-HISTORY-MIB

Add H3C-VOICE-CALL-HISTORY-MIB

rfc4133-entity.mib ENTITY-MIB Changed ENTITY-MIB from rfc2737 to rfc4133

hh3c-ipv6-address.mib

H3C-IPV6-ADDRESS-MIB

Modified description of h3cIpv6AddrReadSourceType

rfc4444-isis.mib ISIS-MIB Modified description of isisSysLevelOrigLSPBuffSize

h3c-cbqos2.mib H3C-CBQOS2-MIB

Modified description of h3cCBQoSIfApplyPolicyEnableDynamic

huawei-isdn.mib ISDN-MIB Modified description of isdnBasicRateIfType and isdnBasicRateIfMode

h3c-domain.mib H3C-DOMAIN-MIB Modify h3cDomainMaxAccessNum

h3c-voice-vlan.mib H3C-VOICE-VLAN-MIB

Modified the descrition of h3cVoiceVlanEnabledId and h3cVoiceVlanPortEnableList

rfc2819-rmon.mib RMON-MIB Modified description of eventDescription

rfc2925-disman-ping.mib

DISMAN-PING-MIB Modified DISMAN-PING-MIB

h3c-nqa.mib H3C-NQA-MIB Modified H3C-NQA-MIB

huawei-ping.mib HUAWEI-DISMAN-PING-MIB

Modified HUAWEI-DISMAN-PING-MIB

h3c-config-man.mib H3C-CONFIG-MAN-MIB

Modified description of h3cCfgLogTable

h3c-cbqos2.mib H3C-CBQOS2-MIB

Modified description of h3cCBQoSMatchRuleType

huawei-splat-mam.mib

HUAWEI-LswMAM-MIB

Modified description of hwdot1qTpFdbSetOperate

Modified

h3c-sys-man.mib H3C-SYS-MAN- Modified description of



June 2, 2009 of 156


MIB h3cSysBtmLoadTable

h3c-sys-man.mib H3C-SYS-MAN-MIB Deleted h3cSysStartUpNotification


HUAWEI-LswIGSP-MIB deleted hwDhcpSecurityTable Delet

ed

huawei-splat-arp.mib

HUAWEI-LswARP-MIB Deleted HUAWEI-LswARP-MIB

H3c-voice-dial-control.mib

DIAL-CONTROL-MIB Add DIAL-CONTROL-MIB

h3c-entity-ext.mib H3C-ENTITY-EXT-MIB

Add h3cProcessTable,h3cEntityInsert and h3cEntityRemove

H3c-dsp.mib H3C-DSP-MIB Add h3cVPMStateChange and h3cDSPStateChange

H3c-aal5.mib H3C-AAL5-MIB Add h3cAal5VccStateChange

New

H3c-voice-call-history.mib

H3C-VOICE-CALL-HISTORY-MIB

Add H3C-VOICE-CALL-HISTORY-MIB

Modified H3c-flash-man.mib H3C-FLASH-

MAN-MIB Modify the description of h3cFlhInitTime to Not supported

CMW520-E1711P01

Deleted None None None

h3c-e1t1vi.mib H3C-E1T1VI-MIB Added whole module of h3c-e1t1vi.mib

New huawei-dhcps.mib HUAWEI-

DHCPS-MIB Add hwDHCPSIPInUseExTable to HUAWEI-DHCPS-MIB

rfc2819 MIB.mib RMON-MIB

Modify descripsion Not supported. When eventType is none(1) or log(2), the value of eventCommunity will not be saved; when eventType is snmptrap(3) or logandtrap(4), the value of eventCommunity will be saved but can take no effect.

ieee8021x.mib IEEE8021-PAE-MIB

Modify descripsion Only valid on portbased method.

Modified

h3c-acl.mib H3C-ACL-MIB

When the value of h3cAclIPAclAdvancedProtocol is ICMP or ICMPV6, h3cAclIPAclAdvancedIcmpType and h3cAclIPAclAdvancedIcmpCode can be set, otherwise it can not.

CMW520-B1608

Deleted

huawei-splat-mam.mib

HUAWEI-LswMAM-MIB Deleted hwdot1qMacSearchTable

CMW520 New None. None. None.



June 2, 2009 of 156


hh3c-user.mib HH3C-USER-MIB

Modify h3cUserIndex PDS attribute to "No".

hh3c-radius.mib HH3C-RADIUS-MIB

Modify h3cRdAccRealTime Description to "As per mib".

Modified

rfc4133-entity.mib ENTITY-MIB Modify "AR" to "MSR".

-R1508P02

Deleted None. None. None.

Configuration Changes None.

Open Problems and Workarounds

RTD33576

First found in CMW520-R1719P02 Condition: Run remove slot xxx command on the DFIC-24FSW card and hot swap it quickly,

the router will reboot by exception. Avoidance: When pull out the DFIC-24FSW card, wait 5secs at least before insert it.

Caution:

“First Found-in Version” means that the version on witch the problem was first found, not tracing to its source version.

List of Resolved Problems

Resolved Problems in CMW520-R1719P03

RTD35775

First found in CMW520-R1718 Condition: The customer set the parameter of LAPB timer T4 at the serial interface of the router. Description: When the serial interface receives the LAPB response packets with F bit equal to 1,

the serial interface will be up and down.

RTD35545

First found in CMW520-R1718



June 2, 2009 of 156

Condition: The serial interface of the router connects with the equipment collecting data and transmits the data to the server collecting data from the router’s Ethernet interface.

Description: The serial interface of the router increases the latency transmitting the data, and it induces that the data flow received by the server isn’t steadily.

RTD35135

First found in CMW520-R1718 Condition: The TC20301 of TBR4 is test at the router’s PRI interface. Description: After the timer T310 of the PRI interface times out, the router will sent the

Disconnect message with the reason value equal to No.41, and the reason value of No.41 doesn’t accord with TBR4.

RTD35044

First found in CMW520-R1718 Condition: The customer sets the command of “filter import” to filter the OSPF ABR aggregation

routes. Description: The routes can’t be filtered effectively.

RTD35020

First found in CMW520-R1718 Condition: The customer sets the MTU of ADSL interface. Description: The MAX value of MTU is 1500.

RTD35355

First found in CMW520-R1718 Condition: The customer sets master SIP server and slaver SIP server, and the router receives

the SIP 301 redirection packets when the router registers. Description: The router can register on the new address server successfully, but the voice call

from the router will fail.

RTD35385

First found in CMW520-R1718 Condition: The MSR30 and MSR50 router run BFD function. Description: The each router establishes 10 BFD sessions at best.

RTD32930

First found in CMW520-E1719 Condition: There are MSR3011E and MSR3011F routers. Description: The fan runs at high speed continually at normal temperature.


RTD33374

First found in CMW520-R1718 Condition: Modify the IP address and mask of the WAN interface using TR069 protocol.



June 2, 2009 of 156

Description: Firstly the router modifies the IP address, mask and the gateway of the interface, then responses the SetParameterValuesResponse packet, and thus can’t be consistent with ACS.

RTD34337

First found in CMW520-R1718 Condition: Configure the ACS URL at the router and reboot the router or power on again. Description: The router sends the inform packet to ACS with eventcode parameter equaling to

nonzero BOOTSTRAP when the router connects to ACS firstly.

RTD34338

First found in CMW520-R1718 Condition: Set the CPE password at the router, and the password is different with the ACS’s

CPE password. Description: The router still can initiate the TR069 connection to the ACS.

RTD34446

First found in CMW520-R1719P01 Condition: Set the VLAN ID at the router’s Ethernet sub-interface, and modify the VLAN ID by

TR069. Description: The operation to set VLAN ID node fails by TR069.

RTD34495

First found in CMW520-R1719P01 Condition: The two routers of R1 and R2 establish GRE tunnel with keepalive checking, and the

two routers' software are R1719P01. Description: Once the GRE tunnel is down, it can't be up again.

RTD34735

First found in CMW520-R1718 Condition: Set the virtual-template interface at the router. Description: Can’t bind the VPN instance at the virtual-template.

RTD34785

First found in CMW520-R1719P01 Condition: The router establishes the L3VPN using LDP protocol, and there are several equal

routes between the router to other PE. Description: When some or other equal route is invalid the LDP label can’t be refreshed

automatically, it will take on a long time to updating the status of the network.

RTD34136

First found in CMW520-R1719P01 Condition: Using two ADSL2+ modules and the data flow is on the both ports. Description: The uplink is blocking after a while.



June 2, 2009 of 156

RTD34290

First found in CMW520-E1719 Condition: Apply the local certificate and then reboot the device. Description: the local certificate not import when the device start-up.

RTD34392

First found in CMW520-E1719P01 Condition: When unicast packets’ flow are transmitted to Virtual-template on MSR 30-10. Description: The flow is considered multicast in Ethernet0/1.

Resolved Problems in CMW520-E1719P01

RTD33738

First found in CMW520-E1719 Condition: Set the Fixed FE switching port of the router to half-duplex with mix flow. Description: The port don't transmit packet rightly.


RTD33397

First found in CMW520-R1718 Condition: 1) The router running the terminal server, the terminal connects the front end processor (FEP) by

the router, and the user of the terminal selects a menu entry to establish an unreachable VTY link at the MENU interface;

2) The router running the terminal server, the terminal connects the front end processor (FEP) by the router, the user of the terminal selects a error menu entry at the MENU interface;

3) The router running the terminal server, the terminal connects the front end processor (FEP) by the router, the user of the terminal enters the command of “EXIT” to quit the application.

Description: 1) The router prompts the error information to the terminal, but the router can’t return to the

MENU interface automatically; 2) The router can’t prompt the error information to the terminal and also can’t return to the MENU

interface automatically; 3) The router doesn’t disconnect the TCP link established with the FEP.

RTD33465

First found in CMW520-R1718 Condition: The two routers of R1 and R2 establish the GRE tunnel, and the link from R2 to R1 is

broken but the link from R1 to R2 is normal, the physical interfaces of R1 and R2 to establish the GRE tunnel are up.

Description: The tunnel of R1 is down and the tunnel of R2 is up.

RTD33866

First found in CMW520-R1718



June 2, 2009 of 156

Condition: The router supports the TR069 node of InternetGatewayDevice.X_CT-COM_Firewall.DDoSEnabled, and the node is used to enable firewall function at the router.

Description: This TR069 node doesn’t belong to the criterion of CT (China Telecom), according to the criterion of CT the TR069 node to enable firewall is InternetGatewayDevice.X_CT-COM_Firewall.DDoSEnabled.

RTD33896

First found in CMW520-R1718 Condition: The router startups the NAT function, and the router do NAT ALG conversion to the

SIP packets with compression format; Description: The router will reboot abnormally.

RTD34108

First found in CMW520-R1718 Condition: Set the parameter of hookflash timer of FXS at the router. Description: The router doesn’t support the command to set the minimum of the hookflash timer.

RTD33111

First found in CMW520-R1718 Condition: The router does the TC10008 of TBR3 test. Description: The router replies the RELEASE message with the reason value NO44 when the

router receives the ISDN SETUP message with incomplete bear capability, and this reduces to the TC1008 test failed.

RTD33706

First found in CMW520-R1718 Condition: The router startups the DLSw function, and the serial interface receives the abnormal

SDLC packets. Description: The router’s memories leak.

RTD32147

First found in CMW520-R1718 Condition: Configure the Policy Routing at the router. Description: Each Policy Routing can only include 20 nodes, and this can’t satisfy the customer’s

requirement to support 256 nodes each policy routing.

RTD33564

First found in CMW520-R1718 Condition: The router does the TC20301 of TBR3 test. Description: The router sends the ISDN DISCONNECT message without the cause parameter,

and this reduces to the TC20301 test failed.

RTD33778

First found in CMW520-R1718 Condition: Set the MTU of the VT interface at the router. Description: The maximum of MTU at the VT interface is 1500.



June 2, 2009 of 156

RTD33867

First found in CMW520-R1718 Condition: Enable the telecom manager accounts using TR069 protocol at the router. Description: The router doesn’t support the TR069 node of

InternetGatewayDevice.DeviceInfo.X_CT-COM_TeleComAccount.Enable, so the router can’t set the telecom manager accounts.

RTD33862

First found in CMW520-R1718 Condition: Modify the notify attribute of TR069 node at the router. Description: The router doesn’t report the value change message.

RTD33375

First found in CMW520-R1718 Condition: At the same time modify the TR069 WANIPConnection’s DNSServers node, and set

the IP address/mask node. Description: The operation to set TR069 node fails.

RTD33171

First found in CMW520-R1718 Condition: When the serial interface of the router runs at the flow mode, pull out and insert into

the cable of the serial. Description: The router doesn’t prompt any information.

RTD33613

First found in CMW520-R1718 Condition: Set the password of the user to special character, then login the web management

page using this user. Description: The user can’t visit the web page resource after the user logins.

Resolved Problems in CMW520-R1719

RTD32154

First found in CMW520-R1718 Condition: Set the ETH0/0 and VLAN-interface of the MSR20-1X with WLAN to the same bridge-

group. Description: The packets which are transmit through the ETH-0/0 and VLAN-interface will be lost.

RTD32324

First found in CMW520-R1718 Condition: Set the portal function at the router, and the portal server sends request info packets

to the router. Description: If the status of the user at the router is online, the router will discard the request info

packet.



June 2, 2009 of 156

RTD31926

First found in CMW520-R1718 Condition: Turn on the function of info-center at the router, then configure the SNMP community

parameter. Description: The SNMP community strings will be displayed in the log.

HSD44946

First found in CMW520-R1718 Condition: Do TBR3 test at the ISDN interface of the router. Description: The TBR3 Layer 3 test case TC12501 failed.

HSD44947

First found in CMW520-R1718 Condition: Do TBR4 test at the ISDN interface of the router. Description: The router received STATUS ENQUIRY message, then replied the STATUS

message, that didn’t accord with TBR4 standard, and some TBR4 test case failed.

RTD32392

First found in CMW520-R1718 Condition: The VLAN interface of the router joined the bridge-set and set the DLSw function. Description: The DLSw circuit can’t be established by the VLAN interface.


RTD30327

First Found-in Version: CMW520-E1713 Condition: When upgrade to E1713 version. Description: The configuration in the SIP client view is lost.

HSD36094

First Found-in Version: CMW520-E1713 Condition: When the entries of Fast Forwarding table exceeding 130000 on the router. Description: The router will reboot.

RTD32157

First Found-in Version: CMW520-E1713 Condition: Configure the static NAT at the router. Description: The max. of static NAT is 100, and it should be changed to 500.

RTD31964

First Found-in Version: CMW520-E1713 Condition: Connect the router’s E1VI interface with PBX and set the caller-group at the router. Description: The max. of caller-group is 5, and it should be changed to 10.



June 2, 2009 of 156

RTD31958

First Found-in Version: CMW520-E1713 Condition: The router acting as Terminal Server established the TCP connection with the

UNIX/Linux Server, if the link between the router and the UNIX/Linux Server is broken down more then 160s.

Description: The application between the terminal and the UNIX/Linux Server failed.

RTD31645

First Found-in Version: CMW520-E1713 Condition: The router’s fiber interface, including GEF, M/SFX, ATM, POS and CPOS interface, is

inserted into the SFP which can support two kinds speed of OC3 and 100BASELX. Description: The router can’t identify this kind of SFP.

RTD32225

First found in CMW520-E1713 Condition: To set the same caller-group and hunt-group at several voice entity at the router. Description: Some calls from VOIP can match several voice entities, but if the first entity is busy,

the next entity can’t be selected.

RTD32247

First Found-in Version: CMW520-E1713 Condition: Doing the TBR3 test at the MSR routers. Description: The CPF6PHARa and CPF8PHARa test procedure of the TBR3 can’t pass.

RTD32334

First Found-in Version: CMW520-E1713 Condition: Insert the SIC-1BU card at the router, then the router runs at the low temperature

period of time. Description: The router halts sometime.

RTD32254

First Found-in Version: CMW520-E1713 Condition: Measure the pulse wave of T1 interface. Description: The pulse wave doesn’t measure up the G.703 standard.

RTD32258

First Found-in Version: CMW520-E1713 Condition: To set the command of “tcp mss” at the VLAN interface. Description: The command is supported.

RTD32379

First Found-in Version: CMW520-E1713 Condition: The sub-interface of Ethernet of the router sends the small packet less than 64byte

and with VLAN tag.



June 2, 2009 of 156

Description: The router only can fill in the small packet to 62 byte, so the small packet is discarded by other transmitting equipments.

Resolved Problems in CMW520-E1713

RTD29771

First Found-in Version: CMW520-E1711P01 Condition: Using "reset counters interface" to clean the outbound state of interface WLAN-Radio. Description: It can not be cleaned.

RTD29819

First Found-in Version: CMW520-E1711P01 Condition: Configuring ftp or telnet on the EF queue. Description: The queue of EF has no effect on FTP or Telnet packets.

RTD29920

First Found-in Version: CMW520-E1711P01 Condition: There is on FIC-16ASE card in slot 10 on MSR50 series, and running “display user-

interface” on it. Description: There is no user-interface tty on interface 10/15 and interface 10/16.

Resolved Problems in CMW520-E1711P01

RTD28582

First Found-in Version: CMW520-B1707 Condition: If implemented Policy-based routing and out-interface is Dialer interface for pppoe

client. Description: Some packet will dropped because the wrong payload-length.

Resolved Problems in CMW520-B1707

RTD21682

First Found-in Version: CMW520-B1606 Condition: Running shutdown on BRI interface or physical interface of PRI, then configuring

ISDN Leased Line on it. Description: PPP will send negotiated packets from this interface anyway.

RTD21683

First Found-in Version: CMW520-B1606 Condition: Configuring one Ethernet interface as PPPoE Client by pppoe-client dial-bundle-

number 101 idle-timeout 1, despite there are packets received during 1 second. Description: the connection will always break down when 1 second is time out.

HSD33072

First Found-in Version: CMW520-B1608 Condition: Reboot router when implemented the Interface-backup feature.



June 2, 2009 of 156

Description: The backup interface will flap (up/down) one time.

LSD26984

First Found-in Version: CMW520-B1608 Condition: If the connect with the TACACS is lost. Description: The fallback authentication will not happen.

RTD27056

First Found-in Version: CMW520-B1608 Condition: Implemented MPLS TE tunnel and keep the reservable-bandwidth equal to tunnel

BC0. Description: The tunnel can't up.


RTD21639

First Found-in Version: CMW520-B1606 Condition: Input shutdown on one Encrypt interface. Description: RM will print some redundant information.

RTD21642

First Found-in Version: CMW520-B1606 Condition: Enable IPV6 and configure IPV6 address on one interface, then get the statistic of

interface’s packets after it received some IPV6 packets by display ipv6 interface XXX verbose. After that, reset ipv6 statistic and display ipv6 interface XXX verbose again.

Description: The statistic doesn’t clean.

RTD20985

First Found-in Version: CMW520-B1606 Condition: Create PVC on the ATM interface and configure map bridge-group broadcast on it,

then configure atm-class and apply class on the interface. Description: System will print error info that PVC on the ATM interface has been deleted.

RTD21516

First Found-in Version: CMW520-B1606 Condition: Configuring more than 4251 mboundarys on router’s interface, then reset some of

them with high speed packets received by the interface. Description: The reset operation will fail.

RTD21151

First Found-in Version: CMW520-B1606 Condition: When dhcp-snooping is enable, print dhcp-snooping to get the prompt info, then run

undo dhcp-snooping and dhcp-snooping again, to get the debug info. Description: The syntax of prompt info and debug info are not identical.



June 2, 2009 of 156

RTD21384

First Found-in Version: CMW520-B1606 Condition: Configuring router as SFTP server, setting it’s idle time by sftp server idle-timeout

several. Description: When the client accesses the server with not idlesse, the server will always

disconnect it.

RTD21352

First Found-in Version: CMW520-B1606 Condition: Enable flow control on GEC interface and get the info by display interface. Description: The flow control is not shown in the result.

RTD21406

First Found-in Version: CMW520-B1606 Condition: Get voice and fax default value by display voice default all. Description: It doesn’t contain default value of transparent transmission on modem.

RTD21577

First Found-in Version: CMW520-B1606 Condition: During the boot if the interface 0/0 is up. Description: The default IP address by product will lose.


RTD16324

First Found-in Version: CMW520-R1507 Condition: To download software from FTP server to overwrite the file with same name. Description: The router will reboot with exception notification.

RTD16521

First Found-in Version: CMW520-R1507 Condition: In the network of MPLS, to change the timer value of PE which is worked as NTP

server. Description: Ce as the NTP client can't synchronize with PE.

RTD17038

First Found-in Version: CMW520-B1502 Condition: To set t1 x set fdl ansi on T1 channel of local side, and set t1 x set fdl att on the

same T1 channel of remote side, then sent loopback code on local side with command t1 x sendloopcode fdl-ansi-payload-up.

Description: The remote interface receives the loopback code and is set as mode of loopback payload.

RTD17152

First Found-in Version: CMW520-R1507



June 2, 2009 of 156

Condition: Two routers are connected with transmission equipments and try to telnet from the VLAN interfaces of the two routers.

Description: Telnet is failed.

RTD17375

First Found-in Version: CMW520-R1508 Condition: Two routers are connected to each other with VE1 and VT1, to launch call and delete

R2 configuration of VE1 or VT1 on one router during call processing. Description: The call process will be failed.

Resolved Problems in CMW520-R1508P02&CMW520-B1508P02

RTD20541

First Found-in Version: CMW520-R1508 Condition: The calling number less than 6, and the Q931 section of SETUP message from

calling device does not include CALLED PARTY NUMBER and CALLing PARTY NUMBER. Description: The calling will fail.

RTD19553

First Found-in Version: CMW520-B1502 Condition: Configuring flow-control on the interface of SIC-1GEC, and send high speed data to

it. Description: The flow-control function doesn’t take effect.

RTD20307

First Found-in Version: CMW520-R1508 Condition: walk iso ---> mgmt ---> entityMIB ---> entPhysicalEntry ---> entPhysicalSoftwareRev’s

sub-node entPhysicalEntry and get value of entPhysicalSoftwareRev by MIB Browser, then _display version to get the version number.

Description: The value of entPhysicalSoftwareRev not matches the version number exactly.

Resolved Problems in CMW520-R1508&CMW520-B1508

RTD18997

First Found-in Version: CMW520-B1506L02 Condition: The VE1 interface connected to switch with PRI signaling and received FACILITY

information from remote switch. Description: The route will reboot.

RTD18437

First Found-in Version: CMW520-B1505L01 Condition: The user call a telephone with the VoIP system of H3C and the called telephone has

been set call forward. Description: The call cannot be established.



June 2, 2009 of 156

RTD19880

First Found-in Version: CMW520-R1206P01 Condition: The user set reserve telnet and disable auto-negotiation. Description: The data transmit forward by the ASE interface is error.

RTD19991

First Found-in Version: CMW520-B1506L02 Condition: The 4BS interface works in the mode of BRI leased line. Description: The default idle code is not 0x7e.

RTD19852

First Found-in Version: CMW520-R1507 Condition: Using the English version of hyper terminal. Description: The user can not configure the router by com or telnet.


RTD18219

First Found-in Version: CMW520-B1502 Condition: The mode of 2GE module is 100M/full duplex and forwards the packets. The length of

packets is random. Description: The 2GE port halts receiving and transmitting data.


RTD13802

First Found-in Version: CMW520-B1204L01 Condition: Configuring ‘hookoff-time 36000’ in a FXO interface and then resetting this card. Description: The hookoff configuration in the FXO interface will lose.

RTD13055

First Found-in Version: CMW520-B1501L01 Condition: The user enables loopback-detection and configures ‘loopback internal’in a L2 port

when stp function has been enabled. Description: The configuration of Ioopback internal will be unsuccessful.

RTD14199

First Found-in Version: CMW520-B1501L01 Condition: A sub-interface in an IMA-group has been set up. The user hot-plugs this IMA card

and then inserts it to the same slot. Description: All commands can not be identified.

HSD14531

First Found-in Version: CMW520-B1501L01



June 2, 2009 of 156

Condition: A DCE cable has been inserted in a SAE interface, but not connected to remote terminal. The user configure asynchronous physical mode and display information of this interface.

Description: The information of DCD, DTR, DSR, RTS and CTS is error.

RTD15139

First Found-in Version: CMW520-B1501L01 Condition: None. Description: VI(Visual Identity) modified from Huawei-3com to H3C.

Resolved Problems in CMW520-B1501L01

RTD13013

First Found-in Version: CMW520-B1204L01 Condition: Hunt-group function has been enabled when call connection is set up by IVA(ISDN

Voice Application) . The matched voice entity is unavailable. Description: The information table for current calls (shown by command display voice call-info)

will not be clear.

Resolved Problems in CMW520-B1204P04

RTD12924

First Found-in Version: CMW520-B1204P03 Condition: 8E1 ports communicate through fiber network. When one port’s remote fiber terminal

is turned off. Description: The port will receive too many incorrect packets and 8E1 ports can not work

normally.


RTD12559

First Found-in Version: CMW520-B1204P03 Condition: The Ethernet L2 switching module receives ISIS Hello packets. Description: These packets can not be transmitted in VLAN.

RTD12700

First Found-in Version: CMW520-B1204P03 Condition: Applying Netstream on both inbound and outbound of one interface . Description: The stream statistic doubles on the device, and the stream log is send to XLOG

server.


RTD12640

First Found-in Version: CMW520-B1204L01 Condition: Configuring VRRP on the MRS50 device.



June 2, 2009 of 156

Description: VRRP can not support tracking MP-group ports.


RTD07017

First Found-in Version: CMW520-B1202P01 Condition: Upgrade the router by Quidview. Description: The grading will fail.

RTD11696

First Found-in Version: CMW520-B1204L01 Condition: Keeping data flux on 4FSW in MSR routers. Description: The data can not be transmitted and the configuration on the VLAN will lose.

LSD08869

First Found-in Version: CMW520-B1203 Condition: DHCP client has no IP address in free pool，but there is available IP address in the

overdue pool. Description: It can not get IP address in the overdue pool.

RTD11776

First Found-in Version: CMW520-B1204L01 Condition: The user configures network command in an ospf interface and then displays this

interface information. Description: The system will hint ‘OSPF Interface Not enabled’.

RTD11378

First Found-in Version: CMW520-B1204L01 Condition: The user configures fast-forwarding by encryption cards and runs ping command. Description: The value of TTL is error.

RTD11954

First Found-in Version: CMW520-B1204L01 Condition: Enabling Radius and DPL, and then running one time dialing and two times dialing

operation. Description: The first calling number and the second one are not identical.

RTD11646

First Found-in Version: CMW520-B1204L01 Condition: Connecting MSR routers with Cisco devices, setting both interfaces’ ISIS

type p2p and configuring bridge on MSR router’s interface. Description: It can not set up ISIS.



June 2, 2009 of 156


RTD10154

First Found-in Version: CMW520-B1202P02 Condition: Connecting SIC-E1 interfaces between two MSR20 serious routers, and enable using

e1. Description: The interfaces states can not be up.


RTD11296

First Found-in Version: CMW520-B1202P01 Condition: configuring the router and it’s connecter in G711U coding mode, and turning on VoIP. Description: Only the calling from the router to it’s connecter is success, the other direction

calling is not normal.


HWD05620

First Found-in Version: CMW520-B1202 Condition: Keeping one ESM and one VCPM on the MSR30-20. Description: It can not boot.


RTD09176

First Found-in Version: CMW520-B1105 Condition: Keeping on changing R2 country mode for a long time. Description: The call will fail.

RTD09518

First Found-in Version: CMW520-B1105 Condition: While configuring R2 CAS, if you execute follow commands in order: renew 0011,

reverse 0101, undo renew, and undo reverse. Description: The default value of dl-bits will not be renewed.

RTD07543

First Found-in Version: CMW520-B1105 Condition: If you apply global ATM-CLASS under ATM interface, and configure ATM-MAP under

this interface’s ATM-PVC view, then delete the ATM-MAP. Description: That will result in the configuration of ATM-CLASS under this interface invalid.

RTD09212

First Found-in Version: CMW520-B1106 Condition: Configuring the IP address of WAN on the LAN server equaling to the address of

NAT’ interface.



June 2, 2009 of 156

Description: The FTP server function on NAT can not work.

RTD10006

First Found-in Version: CMW520-B1106 Condition: The router is configured as TFTP client and PC as server. The user configures a

source file name with memory path. Description: The system will hint ‘Unable to open file’.

RTD09918

First Found-in Version: CMW520-B1106 Condition: Ripng default-route has been configured. The user deletes this configuration and

displays the routing information of Ripng. Description: The default routing can not be deleted immediately.

RTD09832

First Found-in Version: CMW520-B1106 Condition: If you configuring sequentially voice bandwidth and cir with equal value, and then

saving it and rebooting the router. Description: The voice bandwidth will loss and the call can not success.


RTD09261

First Found-in Version: CMW520-B1105 Condition: Input command display mpls te cspf tedb node. Description: After you input display mpls te cspf tedb node, the router will reboot.

RTD08380

First Found-in Version: CMW520-B1105 Condition: Input a parameter with excess length on the ATM service. Description: When configuring ATM CLASS UBR on ATM-CLASS, if the parameter has excess

length, the parameter can work actually and the router will print abnormal info and then reboot.

RTD08839

First Found-in Version: CMW520-B1105 Condition: Apply QoS on one port and match FTP packets, and then run DAR statistic. Description: Can not get correct statistic of some FTP packets.

RTD08764

First Found-in Version: CMW520-B1105 Condition: Enable STP and keeping one bridge port with learning state, and send packets with

different source MAC address to this port. Description: This port can not learn MAC address with learning state.

RTD08536

First Found-in Version: CMW520-B1105



June 2, 2009 of 156

Condition: when the MAC tables is full on one port, and then apply VRP on it. Description: The virtual VRRP MAC address can not be loaded on this port’s MAC table and

then cause packets with it can not be transferred.

RTD08326

First Found-in Version: CMW520-B1105 Condition: Apply MPoFR on a 4E1 board, and transferring 10M speed data on it. Description: VT’s state will change up and down repeatedly.

RTD06971

First Found-in Version: CMW520-B1105 Condition: Configure DHCP under the interface view, and then change the interface’s IP address. Description: All the configuration of DHCP on this interface will be lost.

Related Documentation

Documentation Set

Table 14 Documentation set

Manual Version

H3C MSR 20 Series Routers Installation Manual V1.03



H3C MSR 20/30/50 Series Routers User Manual V1.04

H3C MSR 20/30/50 Series Routers Interface Card and Interface Module Manual V1.04

Low-End and Mid-Range Series Routers Cable Manual V1.02

H3C MSR Series Routers OAP Module Manual (CH&EN,V1.01)

H3C MSR 20-1X Series Routers Installation Manual V1.02

H3C MSR Series Routers Web-Based Configuration Manual V1.01

H3C MSR 20-1X Series Routers Quick Start V1.00

H3C MSR 30-1X Series Routers Quick Start V2.00

Obtaining Documentation

Downloading Documentation

Take the following steps to get related documents from the H3C website at www.h3c.com.

Table 15 Download documentation from the H3C website

How to apply for an account

Access the homepage of H3C at http://www.h3c.com and click Registration at the top right. In the displayed page, provide your information and click Submit to register.



June 2, 2009 of 156

How to get documentation

Approach 1:

In the homepage of H3C at http://www.h3c.com, select Technical Support & Document > Technical Documents from the navigation bar at the top. Then select a product for its documents.

Approach 2:

In the Support area of the H3C homepage at http://www.h3c.com, select Technical Documents. Then select a product for its documents.

Software Upgrading

Introduction

Files

BootWare program file

The file is stored in the flash memory to boot an application. A complete BootWare file includes two segments: basic and extended.

The basic section is used for the basic initialization of the system. The extended section provides abundant human-computer interaction (HCI) functions and is

used to initialize interfaces and update the applications and the boot system. After the basic section is loaded, you can load and update the extended section through the

menu of the basic section.

Application files

The router is available with Dual Image function. By default, the system defines and attempts to boot in order with three boot files: main, backup, and secure, provided they are available with CF card. If the router fails to boot with the secure boot file, it prompts the boot failure. For more information about the boot files, refer to Maintaining Application and Configuration Files on page 148.

The following table gives default names and types of boot files.

Table 16 Default names and types of the boot files

Boot file File name File type

Main boot file main.bin M

Backup boot file backup.bin B

Secure boot file secure.bin S



June 2, 2009 of 156

The application programs for system boot can be type M, B and S, but not type N. You can store them in Flash memory, but only one for each. For example, if an M+B file exists, it is impossible to have another M or B file. If you change the file type of another file to B, the M+B file becomes a type M file.

You can modify the name of an application file in storage after the application file is loaded. You cannot modify the file type of a type S application file, but you can modify the file type of type M/B and N application files in the BootWare menu or using commands after the application program boots.

Secure boot file is the last resort for system boot. You can download it in the BootWare menu and must name it secure.bin. However, you cannot modify this file or change the type of another file to S. If you change the name of the secure boot file with the rename command after the system boots, the file is removed from CF card. To use the secure boot file after that, you need to download it again.

You can store type M, B, S files in storage media, but only one for each type in each storage medium. For example, if a type M+B file exists in the Flash memory, there will be no type M or B file. If you change the type of a file to B, the M+B file will become a type M file.

Configuration file

The file stores configuration information of the router.

By default, the system defines three configuration files for booting: main, backup, and default file. If the three configuration files are loaded in a storage medium, the system selects them in sequence until the router is successfully loaded. To change the sequence of these configuration files or modify them, refer to Maintaining Application and Configuration Files on page 148.

The details about the three configuration files and file selection sequence are as follows:

Main configuration file: The configuration file used for booting by default. The file type is M. Backup configuration file: The file type is B. The system uses the backup configuration file when

it fails to boot using the main configuration file. Default configuration file: The file type can be M, B, or N. The system uses the default

configuration file when it fails to boot using the backup configuration file. If the system fails to boot using the default configuration file, it boots with null configuration. The name of the default configuration file varies with router brands. The main and backup configuration operations on the default configuration file are the same as those on common configuration files.



June 2, 2009 of 156

The configuration files for system boot can be type M, B and default configuration file of type N, but not non-default configuration file of type N (i.e. neither M nor B).

You can modify the file name of a configuration file in a storage medium using the command after the configuration file is loaded. You cannot modify the type of the default configuration file, but you can modify the file type of type M/B and N configuration files in the BootWare menu or using commands after the configuration file is loaded.

The file name cannot be longer than 64 characters (including drive letter and a string terminator. If the drive letter is “CFA0: /”, the file name can be at most [ 64-1-6 ] = 57 characters in length; or, errors will occur in file operation. Typically, the file name is recommended to be not more than 16 characters.

The extension ASCII characters (ASCII>=128) and invisible characters (ASCII<33) cannot be included in the file name.

The following characters cannot be included in the file name: ”, ‘, ?, \, space, *, |, <, /, :, >, ~. The character “.” can be included in the file name, but cannot be the first or last character of the

file name. Two consecutive “.”s are not allowed.

Software Maintenance Methods Upgrade BootWare and an application using the XModem protocol through a serial port. Upgrade an application from a TFTP/FTP server through an Ethernet interface in BootWare. Upload/download an application and configuration file from a TFTP/FTP server via command

lines.

The BootWare program is upgraded together with the Blinux application program. You do not need to upgrade the BootWare separately. When upgrading the Blinux program, the system checks whether the running BootWare version is consistent with that in the updating host application program. If inconsistent, the system asks whether to upgrade the BootWare. If you make no choice within one second, the system upgrades the BootWare automatically.

When the flexible interface platform (FIP) starts, it automatically checks the running BootWare version. If the current version is inconsistent with the version used on the FIP, the system upgrades the BootWare automatically.

Check the current version of BootWare and application program before upgrade. For the version configuration information, see the corresponding Release Notes.



June 2, 2009 of 156

Upgrade flowchart for BootWare and Comware under Comware V5 environment

Comware version

Start

End

Upgrade Comware ?

Choose upgrade mode

Xmodem upgrade

TFTP upgrade

FTP upgrade

Choose correct Comware

N

Y

Upgrade

Via network interface

Maintaining Application Program and Configuration Through Command Lines

After the router is booted, you can upgrade and back up an application program, and back up and restore configurations through command lines.

Maintaining the Router Through TFTP Server

In the TFTP service, the router is TFTP client and the file server is the TFTP server. You can enter commands on the terminal to upload or download configuration files or application programs to or from the file server.

Setting up a configuration environment

Set up a hardware environment (refer to Upgrading an Application Program Through an Ethernet Interface on page 139 for details), and point the server path to the directory where the file is stored.



June 2, 2009 of 156

Network diagram for maintenance through command lines

Configure the IP addresses of both sides on the same network. For example, the IP address of the TFTP server is set to 192.168.0.1, and that of the Ethernet interface connected to it (GigabitEthernet 0/0 in this example) is set to 192.168.0.2. Use the ping command to check whether the connection successful.

Backing up and restoring application programs and configuration files

After setting up the environment, perform the following operations on the console terminal:

Use the dir command to view the files in the current file system:

<SYSTEM>dir

Directory of cfa0:/

0 drw- - Dec 20 2007 09:18:22 logfile

1 -rw- 22165484 Dec 20 2007 09:18:10 update.bin

2 -rw- 1181 Dec 20 2007 09:42:54 startup.cfg

4 -rw- 22165484 Dec 20 2007 09:42:28 main.bin

252904 KB total (208940 KB free)

File system type of cfa0: FAT16

<SYSTEM>

Use the following command to upload the startup.cfg file to the TFTP server and save it as config.bak:

<SYSTEM>tftp 192.168.1.1 put startup.cfg config.bak

File will be transferred in binary mode

Sending file to remote tftp server. Please wait... \

TFTP: 1045 bytes sent in 0 second(s).

File uploaded successfully.

Use the following command to download the startup.cfg file from the server to the router:



June 2, 2009 of 156

<SYSTEM>tftp 192.168.1.1 get startup.cfg startup.cfg

The file startup.cfg exists. Overwrite it?[Y/N]:y

Verifying server file...

Deleting the old file, please wait...


Downloading file from remote tftp server, please wait...\

TFTP: 1045 bytes received in 0 second(s)

File downloaded successfully.

If a startup.cfg file already exists in the router, the system prompts you whether to overwrite it. You can type Y or y to overwrite it.

Upgrading the application programs

After setting up the environment, perform the following operations on the device (the application name is msr.bin for example):

Use the save command to save the current configuration:

<SYSTEM>save

The current configuration will be written to the device. Are you sure? [Y/N]:y

Please input the file name(*.cfg)[cfa0:/startup.cfg]

(To leave the existing filename unchanged， press the enter key):

Use the dir command to view the application files and the available space of the CF card (ensure that the CF card has enough space to store a new application):

<SYSTEM>dir

Directory of cfa0:/

0 drw- - Dec 20 2007 09:18:22 logfile

1 -rw- 22165484 Dec 20 2007 09:18:10 update.bin

2 -rw- 1181 Dec 20 2007 09:42:54 startup.cfg

4 -rw- 22165484 Dec 20 2007 09:42:28 main.bin

252904 KB total (208940 KB free)

File system type of cfa0: FAT16

<SYSTEM>

Download the application msr.bin to the CF card of the device through TFTP:

<SYSTEM>tftp 192.168.1.2 get msr.bin


Downloading file from remote TFTP server， please wait...\

TFTP: 15054340 bytes received in 34 second(s)

File downloaded successfully.

Use the boot-loader command to set the startup file for the next startup to msr.bin:

<SYSTEM>boot-loader file cfa0:/msr.bin main

This command will set the boot file. Continue? [Y/N]:y

The specified file will be used as the main boot file at the next reboot on slot 0!

<SYSTEM>



June 2, 2009 of 156

Use the display boot-loader command to view the startup file information of the device:

<SYSTEM>dis boot-loader

The boot file used at this reboot:cfa0:/main.bin attribute: main

The boot file used at the next reboot:cfa0:/msr.bin attribute: main

Failed to get the backup boot file used at the next reboot!

Failed to get the secure boot file used at the next reboot!

<SYSTEM>

Make sure that the configured startup file is correct, and then use the reboot command to reboot the device:

<SYSTEM>reboot

Start to check configuration with next startup configuration file ， please

wait.........DONE!

This command will reboot the device. Current configuration may be lost in next

startup if you continue. Continue? [Y/N]:y

After the device is rebooted, use the display boot-loader command to view the startup file information of the device to make sure that the current application of the device is msr.bin.

When you back up a file, the file will directly overwrite the one with the same name on the server. The above operations are performed in user view. The backup configuration file can be modified by a text editor. You can change the configuration

by downloading the modified configuration file and the modification takes effect after you reboot the router. Similarly, you can also upgrade the main application file by downloading a new application file to overwrite the original main application file.

The above operations are performed in user view. Before upgrading an application, save the current configuration of the device. When upgrading an application, use the dir command to view the size of the downloaded file

and whether the file is the same as that on the server to ensure that the application is complete and correct.

Maintaining the Router Through FTP Server

Maintaining the router serving as the FTP server

File Transfer Protocol (FTP) is an application-layer protocol in the TCP/IP protocol suite. It is mainly used for file transfer between remote hosts. Over TCP, FTP provides reliable and connection-oriented data transfer service, but does not provide any access authorization and authentication mechanism.

In the FTP service, the router can serve as the FTP server. You can run the FTP client to log in to the router access files on the router.



June 2, 2009 of 156

Before using FTP, you need to install the FTP client. No FTP client is shipped with the MSR 30 series routers. In the following example, the FTP client application program is the built-in Windows XP FTP client.

Set up a hardware maintenance environment, as shown in the following figure:

Maintain the router serving as the server

Ethernet cable

Router

PCConsole cable

TFTP/FTP Server

TFTP/FTP Client

Configure the IP addresses of both sides on the same network. In this section, the IP address of the FTP client (PC) is set to 192.168.1.1, and that of the connected Ethernet interface on the router (Ethernet 0/0) is set to 192.168.1.2. Use the ping command to check the connectivity.

Enable the FTP service.

After configuring authentication and authorization, you can enable the FTP service. The FTP server supports multi-user access. Upon receiving the request from a remote FTP client, the FTP server executes an action accordingly and returns the execution result to the client. Use the following command to enable the FTP service:

[SYSTEM]ftp server enable

% Start FTP server

Add an authorized username and password:

[SYSTEM]local-user guest

[SYSTEM-luser- guest]service-type ftp

[SYSTEM-luser- guest]password simple 123456

Maintain the router.

After enabling the FTP service and configuring the username and password, you can enable the FTP client on the PC. In the following example, the FTP client application program is the built-in Windows XP FTP client.

Type ftp in the DOS window, and the system prompt is changed to ftp>:

C:\Documents and Settings\Administrator>ftp

ftp>



June 2, 2009 of 156

ftp> open 192.168.1.2

Connected to 192.168.1.2.

220 FTP service ready.

User (192.168.0.2:(none)): guest

331 Password required for guest

Password:

230 User logged in.

After you correctly enter the username and password, the system prompts login success. You can then maintain the router, for example, modify transmission mode and local path, and back up files. In this example, the main.bin file on the router is copied to the PC.

ftp> binary

200 Type set to I.

ftp> lcd c:\temp

Local directory now C:\temp.

ftp> get main.bin main.bin

200 Port command okay.

150 Opening BINARY mode data connection for main.bin.

226 Transfer complete.

ftp: 14323376 bytes received in 16.81Seconds 851.87Kbytes/sec.

Use the following command to recover the backup file to the router:

ftp> put main.bin main.bin

200 Port command okay.

150 Opening BINARY mode data connection for main.bin.

226 Transfer complete.

ftp: 14323376 bytes sent in 8.29Seconds 1727.37Kbytes/sec.

ftp> quit

221 Server closing.

Maintaining the router serving as a client

You can also maintain the router file system by setting up an FTP environment where the router serves as an FTP client.

Set up a maintenance environment.



June 2, 2009 of 156

Maintain the router serving as a client

The router serves as the client, while the PC running FTP server program serves as the FTP server. Set the FTP server path and add username and password for the router.

Configure the IP addresses of both sides on the same network. In this section, the IP address of the FTP server is set to 192.168.1.1, and that of the connected Ethernet interface on the router (Ethernet 0/0 in this example) is set to 192.168.1.2. Use the ping command to check the connectivity.

Maintain the router through the terminal connected with the console interface of the router.

The following gives an example:

<SYSTEM>ftp 192.168.1.1

Trying 192.168.1.1 ...

Press CTRL+K to abort

Connected to 192.168.1.1.

220 3Com 3CDaemon FTP Server Version 2.0

User(192.168.1.1:(none)):guest

331 User name ok, need password

Password:

230 User logged in

[ftp]

Use the following commands to maintain the router.

Here, the get and put commands are used to restore and back up files.

[ftp]get main.bin main.bin

flashcfa0:/main.bin has been existing. Overwrite it?[Y/N]:y

200 PORT command successful.

150 File status OK ; about to open data connection

226 Closing data connection; File transfer successful.

FTP: 14323376 byte(s) received in 69.256 second(s) 206.00K byte(s)/sec.



June 2, 2009 of 156

[ftp]put main.bin main.bin

200 PORT command successful.

150 File status OK ; about to open data connection

226 Closing data connection; File transfer successful.

FTP: 14323376 byte(s) sent in 15.974 second(s) 896.00Kbyte(s)/sec.

[ftp]quit

221 Service closing control connection

After an application is uploaded to the device, you can use the boot-loader command to upgrade the device. For the upgrade procedure, refer to Upgrading the application on page 130.

BootWare Menu

Main BootWare Menu

When the router is powered on and reboots, the console terminal displays:

System application is starting...

Booting Normal Extend BootWare........

The Extend BootWare is self-decompressing.................

Done!

**************************************************************************

* *

* MSR30-20 BootWare, Version 3.00 *

* *

**************************************************************************

Compiled Date : May 27 2008

CPU Type : MPC8349E

CPU L1 Cache : 32KB

CPU Clock Speed : 533MHz

Memory Type : DDR SDRAM

Memory Size : 256MB

Memory Speed : 264MHz

BootWare Size : 4096KB

Flash Size : 4MB

cfa0 Size : 256MB

CPLD Version : 2.0

PCB Version : 3.0

BootWare Validating...

Press Ctrl+B to enter extended boot menu...



June 2, 2009 of 156

The extended BootWare menu is referred to as main BootWare menu hereinafter in this manual unless otherwise specified.

The sample output above may vary on your device.

If you press Ctrl+B when the system displays “Press Ctrl+B to enter extended boot menu...”, the system prompts for the BootWare password:

Please input BootWare password:

After you enter the correct password, the system enters the main BootWare menu. (The initial password is null. You have three chances to provide the correct BootWare password. If you have tried three times but failed, you need to reboot the system).

Note: The current operating device is cfa0

Enter < Storage Device Operation > to select device.

==========================<EXTEND-BOOTWARE MENU>==========================

|<1> Boot System |

|<2> Enter Serial SubMenu |

|<3> Enter Ethernet SubMenu |

|<4> File Control |

|<5> Modify BootWare Password |

|<6> Skip Current System Configuration |

|<7> BootWare Operation Menu |

|<8> Clear Super Password |

|<9> Storage Device Operation |

|<0> Reboot |

==========================================================================

Enter your choice(0-9):

This menu is described as follows:

Table 17 Main BootWare menu

Item Description

<1> Boot System Bootstrap

<2> Enter Serial SubMenu Enter the serial interface submenu. For details about the submenu, refer to Serial interface submenu on page 137.

<3> Enter Ethernet SubMenu Enter the Ethernet interface submenu. For details about the submenu, refer to Ethernet interface submenu on page 138.

<4> File Control File control submenu. For details about the submenu, refer to File control submenu on page 138.



June 2, 2009 of 156

<5> Modify BootWare Password Modify the BootWare password.

<6> Skip Current System Configuration

Boot the system with the default setting, instead of the current system configuration file. This function takes effect only for this startup. It is usually used after you lose your password.

<7> BootWare Operation Menu BootWare operation submenu. For details about the submenu, refer to BootWare operation submenu on page 139.

<8> Clear Super Password

Remove the super password.

You need to use the super password when switching the user level. After you select the option, the super password will be cleared only at the first reboot. At the next reboot, the super password will restore.

<9> Storage Device Operation The storage medium operation menu, where you can select a storage medium.

<0> Reboot Reboot the router.

BootWare Submenus

Serial interface submenu

Through this submenu, you can upgrade an application program, change the baud rate of a serial interface, and perform other operations.

Enter 2 in the main BootWare menu to enter the serial interface submenu:

==========================<Enter Serial SubMenu>==========================

|Note:the operating device is cfa0 |

|<1> Download Application Program To SDRAM And Run |

|<2> Update Main Application File |

|<3> Update Backup Application File |

|<4> Update Secure Application File |

|<5> Modify Serial Interface Parameter |

|<0> Exit To Main Menu |

==========================================================================


The submenu is described as follows:

Table 18 BootWare serial interface submenu

Item Description

<1> Download Application Program To SDRAM And Run

Download an application program to SDRAM and run it.

<2> Update Main Application File Upgrade the main application program.

<3> Update Backup Application File Upgrade the backup application program.

<4> Update Secure Application File Upgrade the secure application program.



June 2, 2009 of 156

<5> Modify Serial Interface Parameter Modify serial interface parameters.

<0> Exit To Main Menu Return to the main BootWare menu.

Ethernet interface submenu

Enter 3 in the main BootWare menu to enter the Ethernet interface submenu. The system displays:

=========================<Enter Ethernet SubMenu>=========================


|<1> Download Application Program To SDRAM And Run |

|<2> Update Main Application File |

|<3> Update Backup Application File |

|<4> Update Secure Application File |

|<5> Modify Ethernet Parameter |


|<Ensure The Parameter Be Modified Before Downloading!> |

==========================================================================


The Ethernet interface submenu is described as follows:

Table 19 Ethernet interface submenu

Item Description

<1> Download Application Program To SDRAM And Run

Download the application program to SDRAM and run it.

<2> Update Main Application File Upgrade the main application program.

<3> Update Backup Application File Upgrade the backup application program.

<4> Update Secure Application File Upgrade the secure application program.

<5> Modify Ethernet Parameter Modify Ethernet interface parameters.


File control submenu

Enter 4 in the main BootWare menu to enter the file control submenu. Through this submenu, you can view application program file type in the memory, modify a file name, and delete a file.

==============================<File CONTROL>==============================


|<1> Display All File(s) |

|<2> Set Application File type |

|<3> Set Configuration File type |

|<4> Delete File |


==========================================================================



June 2, 2009 of 156



Table 20 File control submenu

Item Description

<1> Display All File Display all files.

<2> Set Application File type Set an application file type.

<3> Set Configuration File type Set a configuration file type.

<4> Delete File Delete a file.


BootWare operation submenu

Enter 7 in the main BootWare menu to enter the BootWare operation submenu:

========================<BootWare Operation Menu>=========================


|<1> Backup Full BootWare |

|<2> Restore Full BootWare |

|<3> Update BootWare By Serial |

|<4> Update BootWare By Ethernet |


==========================================================================



Table 21 BootWare operation submenu

Item Description

<1> Backup Full BootWare Back up the full BootWare.

<2> Restore Full BootWare Restore the full BootWare.

<3> Update BootWare By Serial Upgrade BootWare through a serial interface

<4> Update BootWare By Ethernet Upgrade BootWare through an Ethernet interface

<0> Exit To Main Menu Return to the Main BootWare menu

Upgrading an Application Program Through an Ethernet Interface

Enter 3 in the BootWare menu to enter the Ethernet interface submenu. For details about the submenu, refer to BootWare Submenus on page 137.



June 2, 2009 of 156

Configuring Ethernet Interface Parameters

Before upgrading an application program through an Ethernet interface, we need to configure the Ethernet interface on the router as follows:

Enter 3 in the BootWare menu to enter the Ethernet interface submenu. Then, enter 5 to enter the change Ethernet parameter submenu:

=========================<ETHERNET PARAMETER SET>=========================

|Note: '.' = Clear field. |

| '-' = Go to previous field. |

| Ctrl+D = Quit. |

==========================================================================

Protocol (FTP or TFTP) :tftp ftp

Load File Name :host

:

Target File Name :target

:

Server IP Address :192.168.1.1

Local IP Address :192.168.1.253

Gateway IP Address :0.0.0.0

FTP User Name :user

FTP User Password :password

Table 22 Ethernet parameters settings description

Parameter Description

'.' = Clear field To clear the current field, input a (.) and then press Enter.

'-' = Go to previous field To go to the previous field, input a hyphen (-) and then press Enter.

Ctrl+D = Quit The shortcut key combination for exiting the parameter configuration page is Ctrl+D.

Protocol (FTP or TFTP) Select a transmission protocol, FTP or TFTP.

Load File Name Name of the source file, which must be consistent with the actual name of the file to be downloaded.

Target File Name Name for the target file to be saved. By default, it is the same as the name of the source file on the server.

Server IP Address IP address of the FTP/TFTP server. To set a mask, separate the IP address from the mask with a colon (:), for example, 192.168.80.10:24.

Local IP Address IP address of the local end, that is, the IP address of the FTP/TFTP client.

Gateway IP Address Configure the gateway IP address if the server and the client are not on the same network segment.

FTP User Name This option is not available for TFTP.

FTP User Password This option is not available for TFTP.



June 2, 2009 of 156

Upon upgrade failure, the system prompts “Loading failed”. In this case, please reboot the router to validate the reset IP address.

Only FE0 can be used for upgrading an application program through an Ethernet interface on the MSR 20 series routers and GE0 can be used on the MSR 30 and MSR 50 series routers.

Upgrading Procedure

Trivial File Transfer Protocol (TFTP), a protocol in the TCP/IP protocol suite, is used to transfer trivial files between clients and the server. It provides not-so-complex and low-cost file transfer services. TFTP provides unreliable data transfer services over UDP and does not provide any access authorization and authentication mechanism. It employs timeout and retransmission to guarantee the successful delivery of data. The TFTP software is much smaller than the FTP software in size:

File Transfer Protocol (FTP) is an application-layer protocol in the TCP/IP protocol suite. It mainly transfers files among remote hosts. Over TCP, FTP provides reliable and connection-oriented data transfer service but does not provide access authorization and authentication mechanism.

Set up an upgrade environment.

Set up a TFTP/FTP upgrade environment

Connect GigabitEthernet 0/0 to a PC with a crossover cable. Start the TFTP/FTP program on the PC, and set the path of TFTP/FTP server to directory of the application program. You need to set username and password if FTP server is used.



June 2, 2009 of 156

No TFTP/FTP Server is shipped with the MSR 30 series routers.

Modify Ethernet interface parameters. For details, refer to Configuring Ethernet Interface Parameters on page 140.

Enter 3 in the main BootWare menu to enter the Ethernet Interface submenu. For example, when upgrading the main application program, enter 2:

Loading...................................................................

..........................................................................

..........Done!

22165484 bytes downloaded!

Updating File cfa0:/update.bin

After downloading the file, enter the file name to start the upgrade process:

Updating File main.bin........

Update Success!

Enter 0 to return to the main BootWare menu. Enter 1 to boot the system from the Flash memory.

Set the upgraded application program to the main application file, namely, the default boot file of the system. Enter 4 when the above information appears.

==============================<File CONTROL>==============================





|<4> Delete File |


==========================================================================

Enter your choice(0-4):2

Enter the file control submenu and enter 2 to set the application file type.

'M' = MAIN 'B' = BACKUP 'S' = SECURE 'N/A' = NOT ASSIGNED

==========================================================================

|NO. Size(B) Time Type Name |

|1 22165484 Dec/20/2007 09:18:10 S cfa0:/update.bin |

|2 22165484 Dec/20/2007 09:42:28 M cfa0:/main.bin |

|0 Exit |

==========================================================================

Enter file No:1

Enter the number of the file name to be modified.

Modify the file attribute:

==========================================================================



June 2, 2009 of 156

|<1> +Main |

|<2> -Main |

|<3> +Backup |

|<4> -Backup |

|<0> Exit |

==========================================================================

Enter your choice(0-4):1

Enter 1 to set the selected application program to the main application file, namely, the default boot file of the system.

Enter 0 to return to the main BootWare menu. Enter 1 to boot the system.

If the input file name is the same as the original one in the CF card or the flash memory, the system prompts that “The file is exist, will you overwrite it? [Y/N]”. Enter Y to overwrite the original file. The new application program file will then overwrite the original file of this type, ensuring the uniqueness of the application program on the device.

Make sure the available space in the memory is sufficient. Or, the system prompts “The free space isn't enough!”

The file updated will directly overwrite the original file of this type to become the only application program. The file downloaded here will overwrite the original M file and become the main boot program.

For details of file types, refer to Files on page 125. You can set the main or backup attribute only for the startup file in the root directory of the device.

Upgrading BootWare Through Ethernet Interface You can also upgrade the BootWare through Ethernet interface. Enter 4 in the BootWare submenu, and the system displays:

==================<BOOTWARE OPERATION ETHERNET SUB-MENU>==================

|<1> Update Full BootWare |

|<2> Update Extend BootWare |

|<3> Update Basic BootWare |

|<4> Modify Ethernet Parameter |


==========================================================================


Before upgrading, enter 4 in the menu to configuring Ethernet parameters. For details, refer to Configuring Ethernet Interface Parameters on page 140. Then you can select to upgrade full BootWare, extended BootWare, or basic BootWare.



June 2, 2009 of 156

Upgrading BootWare Through Serial Interface Use XModem to upgrade BootWare through a serial interface.

XModem Protocol Overview

To upgrade the BootWare and application program through a serial interface, use the XModem protocol.

XModem is a file transfer protocol widely used for its simplicity and good performance. Modem transfers files through serial interfaces. It supports transmission of packets in 128 bytes and 1 KB, error check (checksum and CRC), and error retransmission (generally the maximum number of retransmission attempts is 10).

XModem transmission is completed by the cooperation of a receiver and a sender. The receiver sends a negotiation message to the sender to negotiate an error check method. After the negotiation, the sender starts to transmit data packets. After a complete packet is received, the receiver checks the packet using the agreed method.

If the check is passed, the receiver sends an acknowledgement message to the sender. Upon receiving the message, the sender continues to send the next packet.

If the check fails, the receiver sends a negative acknowledgement message to the sender. Upon receiving the message, the sender retransmits the packet.

Modifying Serial Interface Parameters

Sometimes, we need to increase the baud rate of a serial interface to save software upgrade time, or lower the baud rate to guarantee transmission reliability. This section describes how to adjust the baud rate of a serial interface.

Enter 2 in the main BootWare menu to enter the serial interface submenu. Then, enter 5 and the system prompts for changing a baud rate.

==============================<BAUDRATE SET>==============================

|Note:'*'indicates the current baudrate |

| Change The HyperTerminal's Baudrate Accordingly |

|--------------------------<Baudrate Avaliable>--------------------------|

|<1> 9600(Default)* |

|<2> 19200 |

|<3> 38400 |

|<4> 57600 |

|<5> 115200 |

|<0> Exit |

==========================================================================


Select a proper baud rate, 5 for 115200 bps for example. The following prompt appears:

Baudrate has been changed to 115200 bps.

Please change the terminal's baudrate to 115200 bps, press ENTER when ready.



June 2, 2009 of 156

Since the baud rate of the serial interface on the router is changed to 115200 bps, whereas the terminal baud rate remains 9600 bps, they cannot communicate with each other. Change the baud rate on the console terminal to the one selected for downloading software.

Perform the following configurations on the console terminal:

Disconnect terminal

Select File > Properties, and press Configure… to change the baud rate to 115200 bps:

Modify baud rate

Select Call > Call to establish a new connection.



June 2, 2009 of 156

Establish a new connection

Press Enter to view the current baud rate and return to the previous menu.

The system displays:

The current baudrate is 115200 bps

Restore the baud rate in the HyperTerminal to 9600 bps after upgrading the BootWare. This ensures that the information can be displayed on the console terminal after system boot or reboot.

Upgrading BootWare

First, enter 7 in the main BootWare menu (refer to Main BootWare Menu on page 135) to enter the BootWare operation submenu, through which all BootWare operations are performed. For details, refer to BootWare Submenus on page 137.

The following example illustrates how to upgrade the full BootWare:

First, change the baud rate of the serial interface to speed up upgrading (refer to Main BootWare Menu on page 135 for details), and then enter 3 in the BootWare operation menu. The system displays:

===================<BOOTWARE OPERATION SERIAL SUB-MENU>===================

|<1> Update Full BootWare |

|<2> Update Extend BootWare |

|<3> Update Basic BootWare |

|<4> Modify Serial Interface Parameter |


==========================================================================


Enter 4 in the BootWare operation menu to set the baud rate. For details about this menu, refer to BootWare operation submenu on page 139.

Enter 1, and the system displays:

Please Start To Transfer File, Press <Ctrl+C> To Exit.



June 2, 2009 of 156

Waiting ...CC

Select Transfer > Send file in the HyperTerminal window. The following window appears:

Send file dialog box

Click Browse… to select the application program file to be downloaded, and select XModem for the Protocol field. Then click Send. The following interface appears:

Sending file interface

Upon completion of downloading, the following information appears, indicating that download and upgrade succeeds:

Download successfully!

425045 bytes downloaded!

Change the baud rate of the console terminal from 115200 bps to 9600 bps, and then reboot the router.



June 2, 2009 of 156

The file name, size and path vary in different situations. Before upgrading, check the current version of BootWare and application program.

Restore the baud rate in the HyperTerminal to 9600 bps after upgrading the BootWare. This ensures that the information can be displayed on the console terminal after system boot or reboot.

Upgrading the extended BootWare involves only a segment of BootWare. Once an error occurs, you can re-upgrade BootWare.

Upgrading an Application Program Through a Serial Interface Upgrading an application program through a serial interface is implemented under the serial submenu. Enter 2 in the main BootWare menu to enter the serial interface submenu: For details, refer to BootWare Submenus on page 137.

The following example illustrates how to upgrade a main application program.

First, change the baud rate of the serial interface to speed up upgrading (refer to Modifying Serial Interface Parameters on page 144 for details). Then enter 2 in the serial interface submenu. The system displays:

Please Start To Transfer File, Press <Ctrl+C> To Exit.

Waiting ...CC

Select an application program file and send it. The procedure for upgrading an application program through a serial interface is similar to that for upgrading BootWare. For the detailed procedure, see Upgrading BootWare on page 146.

Generally an application program is more than 10 MB in size. Even if the baud rate is changed to 115200 bps, it usually takes about 30 minutes to upgrade an application program. Therefore, you are recommended to upgrade an application program through an Ethernet interface.

Maintaining Application and Configuration Files

You can view and modify a file type in the file control submenu:

Enter 4 in the main BootWare menu to enter the file control submenu. The system displays:

==============================<File CONTROL>==============================






June 2, 2009 of 156


|<4> Delete File |


==========================================================================


Displaying all files

Enter 1, and the system displays:

Display all file(s) in cfa0


==========================================================================


|1 640199 Dec/20/2007 09:53:16 N/A cfa0:/logfile/logfile.log |

|2 22165484 Dec/20/2007 09:18:10 B+S cfa0:/update.bin |

|3 1181 Dec/20/2007 09:42:54 N/A cfa0:/startup.cfg |

|4 22165484 Dec/20/2007 09:42:28 M cfa0:/main.bin |

==========================================================================

Setting the application file type

Enter 2 in the file control submenu to enter the set application file type submenu:


==========================================================================



|2 22165484 Dec/20/2007 09:42:28 M cfa0:/main.bin |

|0 Exit |

========================================================================

Enter file No:

Enter the number of the file to be modified and press Enter, the system will prompt you to modify the file type:


==========================================================================

|<1> +Main |

|<2> -Main |

|<3> +Backup |

|<4> -Backup |

|<0> Exit |

==========================================================================


You can set the file type to M (main) or B (backup) or cancel the setting by entering digits 1 to 4. Refer to Introduction on page 125 for details.



June 2, 2009 of 156

Setting the configuration file type

Enter 3 in the file control submenu to enter the configuration file type submenu:


==========================================================================



|0 Exit |

==========================================================================

Enter file No:

Enter the number of the file to be modified and press Enter, the system prompts you to modify the file type:


==========================================================================

|<1> +Main |

|<2> -Main |

|<3> +Backup |

|<4> -Backup |

|<0> Exit |

==========================================================================


You can set the file type to M (main) or B (backup) or cancel the setting by entering digits 1 to 4. Refer to Introduction on page 125 for details.

Deleting files

Enter 4 in the file control submenu to delete files:

Deleting the file in cfa0:


==========================================================================


|1 640199 Dec/20/2007 09:53:16 N/A cfa0:/logfile/logfile.log |



|4 22165484 Dec/20/2007 09:42:28 M cfa0:/main.bin |

|0 Exit |

==========================================================================

Enter file No:

Enter the number of the file to be deleted and press Enter, and then the system displays:

The file you selected is cfa0:/backup.bak,Delete it? [Y/N]Y

Deleting........Done!



June 2, 2009 of 156

You can set the main or backup attribute only for the application and configuration file in the root directory, and the full filename (including the path) of the application file must not exceed 63 characters.

Returning to the main BootWare menu

Return to the main BootWare menu.

Dealing with Password Loss

Use the following solutions when your BootWare password, user password or Super Password is lost.

User Password Loss

You cannot enter the system if you lose your user password. In this case, you can boot the system by ignoring the system configuration. Perform the following operations to set a new user password:

Enter the main BootWare menu, and enter 6 to boot the system by ignoring the system configuration.

The system displays:

Flag Set Success.

The system prompts the setting succeeds.

When the main BootWare menu appears again, enter 0 to reboot the system.

Set a new password in system view.

[SYSTEM]user-interface console 0

[SYSTEM-ui-console0]authentication-mode password

[SYSTEM-ui-console0]set authentication password simple 123456

The above information indicates that the password authentication is adopted on the console interface and the password is set to 123456 and stored in plain text.

After reboot, the system runs the initial default configuration, but the original configuration file is stored in the Flash memory. To restore the original configuration, you can use the display saved-configuration command to display it, and then copy and execute it.

If the password is stored in plain text, you can use the display current-configuration command to view the password in the current configuration. If you use the set authentication password cipher 123456 command to set a password, the password is stored in cipher text.



June 2, 2009 of 156

Save the new configuration.

[SYSTEM] save

Use the save command to save your new password.

BootWare Password Loss

Contact the agent or the technical support personnel to set a new BootWare password in the event of BootWare password loss.

You can modify the BootWare password under the main BootWare menu.

Enter 5 in the main BootWare menu to modify the password: The console terminal displays:

please input old password:

Please input new password:

Please input new password again:

Password Set Successfully.

The password modification fails when the old password is not correct or new password is inconsistent. Then the system will exit this operation.

Super Password Loss

The super password enables you to switch between four super levels. In the event of super password loss, you cannot perform higher level operations.

You can clear the super password by entering 8 in the main BootWare menu.

After you clear the super password, quit the menu and reboot the router, you can directly enter system view. The setting is valid for the first reboot of the router only. The super password will be restored after a second reboot.

Backing Up and Restoring BootWare

Enter 7 under the main BootWare menu to enter the BootWare operation submenu. Refer to BootWare operation submenu on page 139 for details.

Enter 1 under the menu, and the system starts to backup the entire BootWare. The system prompts:

Will you backup the Basic BootWare? [Y/N]Y



June 2, 2009 of 156

Begin to backup the Basic BootWare................................Done!

Will you backup the Extend BootWare? [Y/N]Y

Begin to backup the Extend BootWare................................Done!

Now, the entire BootWare is backed up to the memory.

Enter 2 under the menu to restore the BootWare in the memory to the system:

Will you restore the Basic BootWare? [Y/N]Y

Begin to restore Normal Basic BootWare................................Done!

Will you restore the Extend BootWare? [Y/N]Y

Begin to restore Normal Extend BootWare................................Done!

Note that the MSR 30-11 does not support backup and restoration of the extended BootWare.

When you perform the backup operation, the system displays the following information:

The function of backuping Extended BootWare is not support!

When you perform the restoration operation, the system displays:

The function of restore Extended BootWare is not support!

Software Upgrading Through Web The device obtains the target application file in the user-defined path through HTTP and has the system upgraded to the target version at the next reboot.

Select System Management > Software Upgrade from the navigation tree to enter the page as shown below.

Click Browse. On the dialog box displayed, select the target application file in the local path, and specify the name of the application file to be stored on the device. Then select the If the file with same name exists, overwrite it out remind check box. Click Apply to upgrade the software, as shown in the following figure.



June 2, 2009 of 156

The upgrade process takes about three to five minutes. During this process, ensure that the network connection is normal and do not power off or restart the device.

After the upgrade is complete, the system displays the following information and you need to restart the device.



June 2, 2009 of 156

Before restarting the device, follow these steps to save the current system configuration: select System Management > Configuration from the navigation tree to enter the default Save page, and then click Save Current Settings, as shown in the following figure.

Click Yes in the pop-up dialog box.

After saving the configuration information, select System Management > Reboot from the navigation tree to enter the page shown below. Click Apply to reboot the device.



June 2, 2009 of 156

Copyright © 2009 Hangzhou H3C Technologies Co., Ltd. All rights reserved.

No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C

Technologies Co., Ltd.

The information in this document is subject to change without notice.

Manual h3c Msr20 Msr30 Msr50-Cmw520-r1719p03-Si Release Notes 0 1285 2

Documents

Transcript of Manual h3c Msr20 Msr30 Msr50-Cmw520-r1719p03-Si Release Notes 0 1285 2