Well known feature from JunOS, now implemented by Huawei in Cloud Engines switches like CE12800, CE7800, CE6800 and CE5800. This feature will be implemented in NE routers as well, starting from V8R6 software version.
We have opportunity to choose wheter changes can be saved automatically or must wait for administrator’s confirmation:
system-view
In this case, the configuration takes effect after you run the commit command (two-phase validation mode).
system-view immediately
Network administrators often need to capture packets, on switches or routers, to locate faults. Some devices do not support remote mirroring, that’s why administrators have to go on-site to capture packets, using local mirroring.
We have a useful command (capture-packet …), on some devices, to catch packets remotely. When taking S5700 switch into consideration, we can capture all packets from an interface (port mirroring) or packets matching specified rules (traffic mirroring). These capture packets can be sent to FTP or TFTP servers and displayed on terminal screen. CX600 and NE40E routers with V6R3 software version can send capture packets to local CF card (name.cap file).
Let’s look at this command:
[Huawei]capture-packet ? acl Acl cpu Packet send to cpu interface Ingress Interface
As you can see you can use port or traffic mirroring. You can also catch packets sent to CPU.
[Huawei]capture-packet interface GigabitEthernet 0/0/1 destination ? ftp-server Send to ftp server terminal Output terminal tftp-server Send to tftp server
Sometimes we can meet such situation on a router or a switch:
[labnario]display users User-Intf Delay Type Network Address AuthenStatus AuthorcmdFlag + 34 VTY 0 00:00:00 TEL 172.29.12.226 pass no Username : huawei 35 VTY 1 00:08:01 TEL 172.29.12.226 pass no Username : labnario 36 VTY 2 00:07:38 TEL 172.29.12.226 pass no Username : killer 37 VTY 3 00:07:00 TEL 172.29.12.226 pass no Username : killer 38 VTY 4 00:01:34 TEL 172.29.12.226 pass no Username : labnario
By default, on Huawei device, there are 5 vty lines available. If all these lines are occupied by users, no other user is able to access the device. Such situation can appear in 2 cases:
The first case is normal and it can often happen. Sessions will be deleted when users log out from the device or their sessions’ idle-timeout expires. By default idle-timeout is set to 10 minutes.
#ospf 1 router-id 1.1.1.1 area 0.0.0.0 authentication-mode simple plain labnario network 10.0.0.0 0.0.0.3 network 1.1.1.1 0.0.0.0 #
Labnario Huawei From Scratch
[NE40E-1]display ospf peer
OSPF Process 1 with Router ID 1.1.1.1
Neighbors
Area 0.0.0.0 interface 10.0.0.1(GigabitEthernet3/0/0)'s neighbors
Router ID: 2.2.2.2 Address: 10.0.0.2
State: Full Mode:Nbr is Master Priority: 1
DR: 10.0.0.2 BDR: 10.0.0.1 MTU: 0
Dead timer due in 34 sec
Retrans timer interval: 5
Neighbor is up for 00:33:07
Authentication Sequence: [ 0 ]
How to manage storage devices, directories and files on Huawei’s equipment?
I will try to introduce the file system based on NE40E routers.
NE40E, as most of carrier class Huawei’s devices, has two MPU boards. Each board is equipped with two CFcards. The first CFcard, inside the board, is used for storing software and configuration’s files. The second one, at the front panel of the board, stores log files. Some of Huawei’s devices use flash memory to store all necessary files.
The file system manages files and directories in the storage device by creating, deleting, modifying, renaming files or directories and displaying contents of the files.
Let’s do an example: