Showing posts with label Huawei S3700 Switch. Show all posts
Showing posts with label Huawei S3700 Switch. Show all posts

Sunday, April 10, 2016

Creating a VLANIF Interface

Creating a VLANIF Interface
VLANIF interfaces are Layer 3 logical interfaces. After creating VLANIF interfaces on Layer 2 devices, you can configure Layer 3 features on these interfaces.

Establishing the Configuration Task

Before creating a VLANIF interface, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the data required for the configuration. This will help you complete the configuration task quickly and accurately.

Applicable Environment

Layer 3 switching combines routing and switching techniques to implement routing on a switch, thus improving the overall network performance. After sending the first data flow, a Layer 3 switch generates mappings between MAC addresses and IP addresses. To send the same data flow, the switch directly sends the data flow at Layer 2 but not Layer 3 based on this mapping table.
To allow that new data flows are correctly forwarded based on the routing table, be sure that the routing table's routing entries are correct. Therefore, VLANIF interfaces and routing protocols must be configured on Layer 3 switches for reachable Layer 3 routes.

Pre-configuration Tasks

Before creating a VLANIF interface, complete the following task:
· Creating a VLAN

Data Preparation

To create a VLANIF interface, you need to the following data.
No.
Data
1
VLAN ID
2
IP address to be assigned to the VLANIF interface
3
(Optional) Delay after which the VLANIF interface goes Down
4
(Optional) MTU of the VLANIF interface



Creating a VLANIF Interface

Before configure Layer 3 features on a Layer 2 device, you must create a VLANIF interface on the device.

Procedure

1. Run:
system-view
The system view is displayed.
2. Run:
interface vlanif vlan-id
A VLANIF interface is created and the VLAIF interface view is displayed.
The VLAN ID specified in this command must be the ID of an existing VLAN.
 NOTE:
A VLANIF interface is Up only when at least one physical port added to the corresponding VLAN is Up.
Parent

Assigning an IP Address to a VLANIF Interface

As a VLANIF interface is a Layer 3 logical interface, it can communicate with other interfaces at the network layer only after being assigned an IP address.

Procedure

1. Run:
system-view
The system view is displayed.
2. Run:
interface vlanif vlan-id
The VLANIF interface view is displayed.
The VLAN ID specified in this command must be the ID of an existing VLAN.
3. Run:
ip address ip-address { mask | mask-length } [ sub ]
An IP address is assigned to the VLANIF interface for communication at the network layer.

 

Checking the Configuration

After a VLANIF interface is configured for communication at the network layer, you can check the IP address and status of a specified VLANIF interface.

Prerequisites

The configurations of a VLANIF interface are complete.

Procedure

· Run the display interface vlanif  [ vlan-id ] command to check the physical status, link protocol status, description, and IP address of the VLANIF interface.

As a world leading Huawei networking products supplier, Thunder-link.com wholesales original new

Huawei networking equipments, including Huawei switches(S2300 switch,S2700 switch,S3300 switch,S3700 switch,S5700 switch), Huawei routers, Huawei symantec security

products, Huawei IAD, Huawei SFP and other Huawei networking products. Our customers include telecom

operators, Huawei resellers, ISP and system integrators. If you have such requirement please contact

your sales person, if you are new customer, please feel free to contact Sales@Thunder-Link.com. Our

HCIE headed technical team can provide network design, products installation and configuration,

trouble shooting etc.

The most popular Huawei S2700EI switch as below:

LS-S2700-9TP-SI-AC

Tuesday, April 5, 2016

The Characteristics of Huawei S3700

The S3700 switch (S3700 for short) is an enterprise networks access device that provides access and data transport functions. The S3700 is developed by Huawei to meet the requirements for reliable access, aggregation, and high-quality transmission of multiple services on an enterprise networks. The S3700 functions as the access device of the enterprise networks. The S3700 provides large capacity, high port density, and cost-effective packet forwarding capabilities. The S3700 also provides multi-service access capabilities, excellent extensibility, quality of service (QoS) guarantee, powerful multicast replication, and carrier-class security, and can be used to build high-reliability ring topologies.

Huawei S3700 Characteristics

Energy-Saving Design
The S3700 saves energy in the following ways:
l Some models adopt natural heat dissipation, so fans are not required.Natural heat
dissipation has the following advantages:
– Product reliability is high.
– There is no noise pollution.
– Fans do not need to be maintained periodically, which saves the maintenance cost.
– The system does not have additional power consumption generated by fans, which
improves the power efficiency.
–        Boards are prevented from being eroded.
NOTE
Currently, the S3700-28TP-EI-MC-ACS3700-28TP-SI-ACS3700-28TP-SI-DC, S3700-28TP-EI-AC, and S3700-28TP-EI-DC adopt natural heat dissipation.
l The interface chip switches to the power saving mode when an interface is idle, which
means that no peer device is connected to the interface.
l It uses advanced highly-integrated and energy-saving chips. With the help of the intelligent device management system, the chips improve system performance and also reduce system power consumption.

Advanced Surge Protection Technique
The S3700 uses the Huawei patented built-in surge protection technique. This technique protects devices against lightning in terrible weather and increases device security.
Convenient PoE Power Supply
The S3700 PoE model has the Power over Ethernet (PoE) function. It provides centralized power supply for IP phones, wireless access points (APs), portable device chargers, POS machines, cameras, and data collectors by using twisted pairs.
Complying with IEEE 802.3af and IEEE 802.3at, the S3700 PoE model is able to remotely
provide power for the devices of different vendors. IEEE 802.3at delivers a maximum of 30 W power. This allows IEEE 802.3at to support IP video phones, dualband WiFi APs, IP cameras, multi-function STBs, and RFIDs, and simplifies the network.
The S3700 PoE model has the ability to control power supply based on time range, which
effectively manages network devices, reduces power consumption, and lowers the OPEX.
Note:
The S3700 series Ethernet switches are class A products. Customers should take preventative measures as the operating devices may cause radio interference.
Telephone: 852-30623083
           Supports@Thunder-link.com            

The way to mange the traffic on S3700-52P-SI-AC

Question:
How to manage internet traffic on Huawei S3700-52P-SI-AC
company want to limit the Internet speed so as to avoid movie and music download during working hour, switch is Huawei S3700-52P-SI-AC
First Input:
<Quidway>system-view
[Quidway]inter gigabitethernet 0/0/1
[Quidway -inter gigabitethernet 0/0/1]qos lr outbound cir 200 cbs 25000
[Quidway -inter gigabitethernet 0/0/1]qos lr inbound cir 100 cbs 12500
[Quidway -inter gigabitethernet 0/0/1]quit
# I paln to limit gigabitethernet 0/0/1 download speed 200kbps,upload speed 100kbps,then computer even can not communicate with outside。
then I changed to:
qos lr outbound cir 2000 cbs 20000
qos lr inbound cir 2000 cbs 20000
everything back to track, my question is if I want to limit the port speed, what speed will be the suitable one?
Answer:
Better use IP to limit the speed, configure it on the gateway router so it will only affect the Internet traffic not the working traffic
CIR 2000 means 2Mbps
Telephone: 852-30623083
           Supports@Thunder-link.com            

Huawei S3700: DHCP Feature and Stacking Rules

DHCP Feature of Huawei S3700:
DHCP Client and DHCP Server
DHCP adopts the client/server mode, that is, the DHCP client sends request messages to the DHCP server. Then, the DHCP server returns the reply messages according to the address pool policy.
The DHCP server assigns an IP address to the client by using an address pool. When the client sends a DHCP request to the server, the DHCP server selects a proper address pool, finds an idle IP address from the pool, and delivers the IP address along with other related parameters, such as the gateway address, the DNS address and the address lease, to the client.
To dynamically allocate IP addresses to clients, you need to first configure the address pool range on the DHCP server. Currently, an address pool can be configured with only one address range and the address range is determined by the mask length.
DHCP Snooping
The S3700 can be deployed between the DHCP server and the DHCP client and it monitors the DHCP messages between the DHCP server and the DHCP client. The S3700 creates the IP +MAC+PORT+VLAN binding table according to the monitoring result to filter out invalid packets.
The S3700 also supports Option 82.
l After receiving a Request message from the DHCP client, the S3700 appends the Option
82 field to the Request message. The DHCP server enforces the IP address allocation policy according to the Option 82 field.
l The DHCP server appends the Option 82 field to a Response message. The S3700 analyzes the Option 82 field, determines a forwarding interface, removes the Option 82 field, and then forwards the message to a user.
Option 82 can be implemented in two modes on the S3700, Option 82 insert and Option 82 rebuild.
The Option 82 field contains the user circuit IDs. The user circuit IDs include user device name, outer VLAN ID, inner VLAN ID and port number etc. This can effectively prevent attackers from modifying the DHCP messages.

DHCP Relay
The DHCP client and the DHCP server send broadcast packets during the allocation of IP
addresses. Therefore, DHCP can be applied only when the DHCP client and DHCP server are in the same subnet. It is a waste of resource to deploy a DHCP server in each network segment.
The DHCP relay is introduced to solve this problem. Through DHCP relay, a DHCP client in a subnet can communicate with the DHCP server in another subnet and finally obtains an IP address. In this manner, the DHCP clients on different network segments can use the same DHCP server. This reduces costs and achieves centralized management.

Stacking means that the switches located in the same place are connected through the stacking cable or high-speed uplink interfaces, and thus the switches form a reliable switch group. In as switch group, the S3700s are connected through the stack interfaces multiplexed with uplink GE interfaces. Through stacking, the user can manage and maintain the switches uniformly; therefore, the stacking reduces the maintenance cost of the user.The stacked switches must be of the same type.
The stacked switches have three roles:
Master switch
A stack has only one master switch. The master switch manages the entire stack system by assigning stack IDs to member switches, collecting information about the stack topology, and notifying all the member switches of the information.
Backup switch
As the backup of the master switch, the backup switch becomes the master if the master
switch is faulty and takes over the work of the master switch.
Slave switch
A slave switch only processes service traffic on the network and is managed by the master switch.
Telephone: 852-30623083
           Supports@Thunder-link.com            

Wednesday, March 23, 2016

Huawei S3700 Switch: IPv4 and Ipv6 Features

IPv4 Features of Huawei S3700 Switch:
(1) The S3700 supports the following IPv4 features:
l TCP/IP protocol stack, including ICMP, IP, TCP, UDP, socket (TCP/UDP/Raw IP), and
ARP
l Static DNS and specified DNS server
l FTP server/client, TFTP client, and SSH
l Ping, tracert, and Network Quality Analysis (NQA): NQA can detect the status of ICMP,
TCP, UDP, DHCP, FTP, HTTP and SNMP services and test the response time of various
Services
l DHCP Server, DHCP Relay, DHCP Client, and DHCP Snooping
l BFD, including BFD for OSPF, BFD for ISIS, BFD for BGP, and BFD for PIM

NOTE
The BFD functions are not available on S3700SI.

(2) Unicast Routing Features
NOTE
The static routes, RIP and RIPng are available on S3700SI. But the other routing protocols and routing policy are not available
.
The S3700 supports the following unicast routing features:
l IPv4 unicast forwarding at line speed through bottom-layer ASIC chips
l IPv4 routing protocols, including RIP v1/v2, OSPF, IS-IS, and BGPv4
l Virtual Routing Forwarding (VRF)
l Static routes that are manually configured by the administrator, which simplify network
configuruations and improve network performance
l Selection of the optimal route through the perfect routing policy
(3) Multicast Routing Features
NOTE
The multicast routing features are not available on S3700SI, available on S3700EI.
The S3700 supports the multicast function. This saves network bandwidth and reduces network load. The S3700 also guarantees QoS of multicast traffic and forwards multicast traffic at line speed. It supports the following multicast routing features:
l IPv4 multicast forwarding at line speed through the bottom-layer ASIC chips
l Multicast protocols, including IGMP, PIM-SM
l ASM and SSM
l Multicast static routes
l Routing policy used for receiving, importing, and advertising multicast routes. When
forwarding IP multicast packets, the S3700 can filter and forward the packets based on
policies.
l PIM BFD
l RPF check
IPv4 routing protocols:
– Open Shortest Path First version 2 (OSPFv2)
– Intermediate System-to-Intermediate System (IS-IS)
– Border Gateway Protocol version 4 (BGPv4)
– Routing Information Protocol (RIP)
IPv6 Features of Huawei S3700 Switch:
The OSPFv3 and VRRP6 are not available on S3700SI switches.
The S3700 provides the IPv6 host function, which protects the investment of customers and prevents repeat investment during network upgrade.
The IPv6 functions supported by the S3700 include:
l IPv6 protocol stack
l Unicast routing protocols: RIPng and OSPFv3
l VRRP6
l IPv4/IPv6 transition technologies

IPv6 routing protocols:
– OSPFv3
– RIPng
Telephone: 852-30623083
           Supports@Thunder-link.com            

Monday, March 14, 2016

Configuring an SNMP Query Test Instance on Huawei Switch

How to Configure an SNMP Query Test Instance on Huawei Switch
Context
Before configuring an SNMP query test instance, configure an SNMP agent and ensue reachable routes between the NQA client and the SNMP agent.
You can obtain the statistics about communication between the NQA client and the SNMP agent.
Perform the following steps on the NQA client.
The configuration overview:
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
nqa test-instance admin-name test-name
An NQA test instance is created, and the NQA view is displayed.
Step 3 Run:
test-type snmp
The test type is set to SNMP.
Step 4 Run:
destination-address ipv4 ipv4-address
The destination IP address (IP address of the SNMP agent) is configured.
The SNMP function must be enabled on the destination host, otherwise, the NQA client cannot receive response packets.
Step 5 (Optional) Run the following commands as required to configure parameters for the SNMP test.
 Run:
description string
A description is configured for the test instance.
 Run:
frequency interval
The test period is set for the NQA test instance.
 Run:
timeout time
The timeout period of a probe is set for the NQA test instance.
 Run:
source-address ipv4 ipv4-address
The source IP address is configured.
 Run:
source-port port-number
The source port number is configured.
 Run:
ttl number
The TTL value in the NQA test packet is set.
 Run:
sendpacket passroute
The NQA test instance is configured to send packets without searching the routing table.
 Run:
probe-count number
The number of probes in a test is set.
 Run:
tos value
Type of Service (ToS) is set for the test packet.
 Run:
fail-percent percent
The failure percentage is set for the NQA test instance.
 Run:
interval seconds interval
The interval at which test packets are sent is configured.
 Run:
vpn-instance vpn-instance-name
The VPN instance name is configured.
 Run:
records history number
The maximum number of historical records is set for the NQA test instance.
 Run:
records result number
The maximum number of result records is set for the NQA test instance.
 Run:
agetime hh:mm:ss
The aging time is set for the NQA test instance.
—-End
Note: this configuration also works for the Huawei s2700Quidway S5700, s6700, Huawei S3700.
Telephone: 852-30623083
           Supports@Thunder-link.com