H3C S7500E Series Ethernet Switches. Network Management and Monitoring. Configuration Guide. Hangzhou H3C Technologies Co., Ltd.

Transcription

1 H3C S7500E Series Ethernet Switches Network Management and Monitoring Configuration Guide Hangzhou H3C Technologies Co., Ltd. Document Version: C-1.01 Product Version: Release 6613 and Later

2 Copyright 2010, Hangzhou H3C Technologies Co., Ltd. and its licensors All Rights Reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd. Trademarks H3C,, Aolynk,, H 3 Care,, TOP G,, IRF, NetPilot, Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V 2 G, V n G, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners. Notice The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.

3 Preface The H3C S7500E documentation set includes 12 configuration guides, which describe the software features for the H3C S7500E Series Ethernet Switches and guide you through the software configuration procedures. These configuration guides also provide configuration examples to help you apply software features to different network scenarios. The Network Management and Monitoring Configuration Guide describes network management and monitoring fundamentals and configuration. It describes how to view the system information, sample packets, assess the network performance, synchronize time for all devices with clocks in your network, supply power for the attached devices by using PoE, and use the ping, tracert, and debug commands to check and debug the current network connectivity. This preface includes: Audience Document Organization Conventions About the H3C S7500E Documentation Set Obtaining Documentation Documentation Feedback Audience This documentation is intended for: Network planners Field technical support and servicing engineers Network administrators working with the S7500E series Document Organization The Network Management and Monitoring Configuration Guide comprises these parts: System Maintenance and Debugging NQA Configuration NTP Configuration IPC Configuration PoE Configuration SNMP Configuration MIB Style Configuration RMON Configuration Port Mirroring Configuration Traffic Mirroring Configuration sflow Configuration Information Center Configuration Conventions This section describes the conventions used in this documentation set. Command conventions Boldface Convention Bold text represents commands and keywords that you enter literally as shown.

4 Convention italic [ ] { x y... } [ x y... ] { x y... } * [ x y... ] * &<1-n> Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional. Braces enclose a set of required syntax choices separated by vertical bars, from which you select one. Square brackets enclose a set of optional syntax choices separated by vertical bars, from which you select one or none. Asterisk marked braces enclose a set of required syntax choices separated by vertical bars, from which you select at least one. Asterisk marked square brackets enclose optional syntax choices separated by vertical bars, from which you may select multiple choices or none. The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times. # A line that starts with a pound (#) sign is comments. GUI conventions Boldface > Convention Window names, button names, field names, and menu items are in Boldface. For example, the New User window appears; click OK. Multi-level menus are separated by angle brackets. For example, File > Create > Folder. Symbols Convention Means reader be extremely careful. Improper operation may cause bodily injury. Means reader be careful. Improper operation may cause data loss or damage to equipment. Means a complementary description. Network topology icons Convention Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.

5 About the H3C S7500E Documentation Set The H3C S7500E documentation set includes: Category Documents Purposes Product description and specifications Hardware installation Software configuration Operations and maintenance Power configuration Marketing brochures Technology white papers Card datasheets Installation guide H3C N68 Cabinet Installation and Remodel Introduction H3C Pluggable SFP [SFP+][XFP] Transceiver Modules Installation Guide H3C Mid-Range Series Ethernet Switches Pluggable Modules Manual H3C PoE DIMM Module Installation Guide Single PoE DIMM Module Installation Guide Configuration guides Command references Configuration examples Release notes H3C PSR320-A[PSR320-D] Power Module User Manual H3C PSR650-A[PSR650-D] Power Module User Manual H3C PSR1400-A[PSR1400-D] Power Module User Manual H3C PSR2800-ACV Power Module User Manual H3C PSR6000-ACV Power Module User Manual H3C PWR-SPA Power Module Adapter User Manual Describe product specifications and benefits. Provide an in-depth description of software features and technologies. Describe card specifications, features, and standards. Provides a complete guide to hardware installation and hardware specifications. Guides you through installing and remodeling H3C N68 cabinets. Guides you through installing SFP/SFP+/XFP transceiver modules. Describes the hot-swappable modules available for the Mid-Range Series Ethernet Switches, their external views, and specifications. Describes how to install the DIMM (LSBM1POEDIMMH) for PoE master and slave power management. Describes how to install the 24-port DIMM (LSQM1POEDIMMS0) for PoE power management. Describe software features and configuration procedures. Provide a quick reference to all available commands. Describe typical network scenarios and provide configuration examples and instructions. Provide information about the product release, including the version history, hardware and software compatibility matrix, version upgrade information, technical support information, and software upgrading. Describes the appearance, specifications, LEDs, and installation and removal of the H3C PSR320-A/PSR320-D power module. Describes the appearance, specifications, LEDs, and installation and removal of the H3C PSR650-A/PSR650-D power module. Describes the appearance, specifications, LEDs, and installation and removal of the H3C PSR1400-A/PSR1400-D power module. Describes the appearance, specifications, LEDs, and installation and removal of the H3C PSR2800-ACV power module. Describes the appearance, specifications, LEDs, and installation and removal of the H3C PSR6000-ACV power module. Describes the functions and appearance of the H3C PWR-SPA power module adapter, and how to use it with the PSR650 power module.

6 Category Documents Purposes Optional cards H3C S7500E Power Configuration Guide Card manuals Guides you to select power modules in various cases. The S7500E series Ethernet switches support various card models. Each model is provided with a card manual that describes: The type, number, and transmission rate of interfaces Applicable switches of the card Required software version Pluggable modules supported by the card Obtaining Documentation You can access the most up-to-date H3C product documentation on the World Wide Web at Click the links on the top navigation bar to obtain different categories of product documentation: [Technical Support & Documents > Technical Documents] Provides hardware installation, and software feature configuration and maintenance documentation. [Products & Solutions] Provides information about products and technologies, as well as solutions. [Technical Support & Documents > Software Download] Provides the documentation released with the software version. Documentation Feedback You can your comments about product documentation to info@h3c.com. We appreciate your comments.

7 Table of Contents 1 System Maintenance and Debugging Commands 1-1 System Maintenance Commands 1-1 ping 1-1 ping ipv6 1-4 tracert 1-6 tracert ipv6 1-7 System Debugging Commands 1-8 debugging 1-8 display debugging NQA Configuration Commands 2-1 NQA Client Configuration Commands 2-1 advantage-factor 2-1 codec-type 2-1 data-fill 2-2 data-size 2-3 description (any NQA test type view) 2-4 destination ip 2-4 destination port 2-5 display nqa history 2-6 display nqa reaction counters 2-7 display nqa result 2-9 display nqa statistics 2-13 filename 2-19 frequency 2-19 history-record enable 2-20 history-record keep-time 2-21 history-record number 2-21 http-version 2-22 mode 2-23 next-hop 2-23 nqa 2-24 nqa agent enable 2-24 nqa agent max-concurrent 2-25 nqa schedule 2-26 operation (FTP test type view) 2-27 operation (HTTP test type view) 2-27 operation interface 2-28 password (FTP test type view) 2-28 probe count 2-29 probe packet-interval 2-30 probe packet-number 2-30 i

8 probe packet-timeout 2-31 probe timeout 2-32 reaction checked-element icpif 2-32 reaction checked-element { jitter-ds jitter-sd } 2-33 reaction checked-element mos 2-35 reaction checked-element { owd-ds owd-sd } 2-36 reaction checked-element packet-loss 2-37 reaction checked-element probe-duration 2-38 reaction checked-element probe-fail (for trap) 2-39 reaction checked-element probe-fail (for trigger) 2-40 reaction checked-element rtt 2-41 reaction trap 2-43 resolve-target 2-43 route-option bypass-route 2-44 source interface 2-45 source ip 2-45 source port 2-46 statistics hold-time 2-47 statistics max-group 2-47 statistics interval 2-48 tos 2-48 ttl 2-49 type 2-50 url 2-50 username (FTP test type view) 2-51 vpn-instance (ICMP echo test type view) 2-52 NQA Server Configuration Commands 2-52 display nqa server status 2-52 nqa server enable 2-53 nqa server tcp-connect 2-54 nqa server udp-echo NTP Configuration Commands 3-1 NTP Configuration Commands 3-1 display ntp-service sessions 3-1 display ntp-service status 3-5 display ntp-service trace 3-6 ntp-service access 3-7 ntp-service authentication enable 3-8 ntp-service authentication-keyid 3-9 ntp-service broadcast-client 3-10 ntp-service broadcast-server 3-11 ntp-service in-interface disable 3-11 ntp-service max-dynamic-sessions 3-12 ntp-service multicast-client 3-13 ntp-service multicast-server 3-13 ii

9 ntp-service refclock-master 3-14 ntp-service reliable authentication-keyid 3-15 ntp-service source-interface 3-15 ntp-service unicast-peer 3-16 ntp-service unicast-server IPC Configuration Commands 4-1 IPC Configuration Commands 4-1 display ipc channel 4-1 display ipc link 4-2 display ipc multicast-group 4-3 display ipc node 4-4 display ipc packet 4-5 display ipc performance 4-6 display ipc queue 4-7 ipc performance enable 4-9 reset ipc performance PoE Configuration Commands 5-1 PoE Configuration Commands 5-1 apply poe-profile 5-1 apply poe-profile interface 5-1 display poe device 5-2 display poe interface 5-4 display poe interface power 5-7 display poe power-usage 5-8 display poe pse 5-10 display poe pse interface 5-12 display poe pse interface power 5-13 display poe-profile 5-15 display poe-profile interface 5-16 poe enable 5-17 poe enable pse 5-18 poe legacy enable 5-18 poe max-power 5-19 poe max-power (system view) 5-19 poe mode 5-20 poe pd-description 5-21 poe pd-policy priority 5-21 poe power max-value 5-22 poe priority 5-23 poe priority (system view) 5-23 poe pse-policy priority 5-24 poe update 5-25 poe utilization-threshold 5-26 poe-profile 5-27 iii

10 6 SNMP Configuration Commands 6-1 SNMP Configuration Commands 6-1 display snmp-agent community 6-1 display snmp-agent group 6-2 display snmp-agent local-engineid 6-3 display snmp-agent mib-view 6-4 display snmp-agent statistics 6-5 display snmp-agent sys-info 6-7 display snmp-agent trap queue 6-8 display snmp-agent trap-list 6-9 display snmp-agent usm-user 6-10 enable snmp trap updown 6-11 snmp-agent 6-12 snmp-agent calculate-password 6-13 snmp-agent community 6-14 snmp-agent group 6-16 snmp-agent local-engineid 6-17 snmp-agent log 6-18 snmp-agent ifmib long-ifindex enable 6-18 snmp-agent mib-view 6-19 snmp-agent packet max-size 6-20 snmp-agent sys-info 6-21 snmp-agent target-host 6-22 snmp-agent trap enable 6-24 snmp-agent trap if-mib link extended 6-26 snmp-agent trap life 6-27 snmp-agent trap queue-size 6-27 snmp-agent trap source 6-28 snmp-agent usm-user { v1 v2c } 6-29 snmp-agent usm-user v MIB Configuration Commands 7-1 MIB Configuration Commands 7-1 display mib-style 7-1 mib-style RMON Configuration Commands 8-1 RMON Configuration Commands 8-1 display rmon alarm 8-1 display rmon event 8-2 display rmon eventlog 8-3 display rmon history 8-5 display rmon prialarm 8-7 display rmon statistics 8-9 rmon alarm 8-11 rmon event 8-13 rmon history 8-14 iv

11 rmon prialarm 8-15 rmon statistics Port Mirroring Configuration Commands 9-1 Port Mirroring Configuration Commands 9-1 display mirroring-group 9-1 mirroring-group 9-2 mirroring-group mirroring-port 9-3 mirroring-group monitor-egress 9-4 mirroring-group monitor-port 9-5 mirroring-group reflector-port 9-6 mirroring-group remote-probe vlan 9-7 mirroring-port 9-8 monitor-port 9-8 uni mirroring-port 9-9 uni monitor-port Traffic Mirroring Configuration Commands 10-1 mirror-to sflow Configuration Commands 11-1 sflow Configuration Commands 11-1 display sflow 11-1 sflow agent 11-3 sflow collector 11-3 sflow counter interval 11-4 sflow counter collector 11-5 sflow flow collector 11-5 sflow flow max-header 11-6 sflow sampling-mode 11-6 sflow sampling-rate Information Center Configuration Commands 12-1 Information Center Configuration Commands 12-1 display channel 12-1 display info-center 12-2 display logbuffer 12-4 display logbuffer summary 12-6 display logfile buffer 12-8 display logfile summary 12-8 display trapbuffer 12-9 enable log updown info-center channel name info-center console channel info-center enable info-center format unicom info-center logbuffer info-center logfile enable v

12 info-center logfile frequency info-center logfile size-quota info-center logfile switch-directory info-center loghost info-center loghost source info-center monitor channel info-center snmp channel info-center source info-center synchronous info-center timestamp info-center timestamp loghost info-center trapbuffer logfile save reset logbuffer reset trapbuffer security-logfile save terminal debugging terminal logging terminal monitor terminal trapping Index 13-1 vi

13 1 System Maintenance and Debugging Commands System Maintenance Commands ping ping [ ip ] [ -a source-ip -c count -f -h ttl -i interface-type interface-number -m interval -n -p pad -q -r -s packet-size -t timeout -tos tos -v -vpn-instance vpn-instance-name ] * host Any view 0: Visit level ip: Supports IPv4 protocol. If this keyword is not provided, IPv4 is also supported. -a source-ip: Specifies the source IP address of an ICMP echo request (ECHO-REQUEST). It must be an IP address configured on the device. If this parameter is not provided, the source IP address of an ICMP echo request is the primary IP address of the outbound interface of the request. -c count: Specifies the number of times that an ICMP echo request is sent, which ranges from 1 to and defaults to 5. -f: Discards packets larger than the MTU of a given interface, which means the ICMP echo request is not allowed to be fragmented. -h ttl: Specifies the TTL value for an ICMP echo request, which ranges from 1 to 255 and defaults to i interface-type interface-number: Specifies the ICMP echo request sending interface by its type and number. If this parameter is not provided, the ICMP echo request sending interface is determined by searching the routing table or forwarding table according to the destination IP address. -m interval: Specifies the interval (in milliseconds) to send an ICMP echo request, which ranges from 1 to and defaults to 200. If a response from the destination is received within the timeout time, the interval to send the next echo request equals the actual response period plus the value of interval. If no response from the destination is received within the timeout time, the interval to send the next echo request equals the timeout value plus the value of interval. -n: Disables domain name resolution for the host argument. When this keyword is not provided, if the host argument represents the host name of the destination, the device translates host into an address. -p pad: Specifies the value of the pad field in an ICMP echo request, in hexadecimal format, 1 to 8 bits, in the range 0 to ffffffff. If the specified value is less than 8 bits, 0s are added in front of the value to extend it to 8 bits. For example, if pad is configured as 0x2f, then the packets are padded with 0x f repeatedly to make the total length of the packet meet the requirements of the device. By 1-1

14 default, the padded value starts from 0x01 up to 0xff, where another round starts again if necessary, like 0x feff01. -q: Presence of this keyword indicates that only statistics are displayed. Absence of this keyword indicates that all information is displayed. -r: Records routing information. If this keyword is not provided, routes are not recorded. -s packet-size: Specifies length (in bytes) of an ICMP echo request, which ranges from 20 to 8100 and defaults to 56. -t timeout: Specifies the timeout value (in milliseconds) of an ICMP echo reply (ECHO-REPLY). If the source does not receive an ICMP echo reply within the timeout, it considers the ICMP echo reply timed out. The value ranges from 0 to and defaults to tos tos: Specifies type of service (ToS) of an echo request, which ranges from 0 to 255 and defaults to 0. -v: Displays non ICMP echo reply received. If this keyword is not provided, the system does not display non ICMP echo reply. -vpn-instance vpn-instance-name: Specifies the name of an MPLS VPN instance, which is a case sensitive string of 1 to 31 characters. If an MPLS VPN instance is configured on both source and destination, when you execute the ping command, this keyword must be provided; otherwise, the ping operation fails. To check whether two nodes in an MPLS VPN can reach each other, use this keyword to specify the MPLS VPN instance to which the two nodes belong. host: IP address or host name (a string of 1 to 255 characters) of the destination. Use the ping command to verify whether the destination in an IP network is reachable, and to display the related statistics. With the ping command executed, the source sends an ICMP echo request to the destination: If the destination name is unrecognizable, the system outputs Error: Ping: Unknown host host-name. If the source receives an ICMP echo reply from the destination within the timeout, the system outputs the related information of the reply. If the source does not receive an ICMP echo reply from the destination within the timeout, the system outputs Request time out. Only the directly connected segment address can be pinged if the outbound interface is specified with the -i argument. To abort the ping operation during the execution of the command, press Ctrl+C. # Check whether the device with an IP address of is reachable. <Sysname> ping PING : 56 data bytes, press CTRL_C to break Reply from : bytes=56 Sequence=1 ttl=254 time=205 ms Reply from : bytes=56 Sequence=2 ttl=254 time=1 ms Reply from : bytes=56 Sequence=3 ttl=254 time=1 ms Reply from : bytes=56 Sequence=4 ttl=254 time=1 ms Reply from : bytes=56 Sequence=5 ttl=254 time=1 ms ping statistics

15 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 1/41/205 ms The above information shows the following: The destination was reachable. All ICMP echo requests sent by the source got responses. The minimum time, average time, and maximum time for the packet s roundtrip time are 1 ms, 41 ms, and 205 ms respectively. # Check whether the device with an IP address of is reachable. Only the check results are displayed. <Sysname> ping -q PING : 56 data bytes, press CTRL_C to break ping statistics packet(s) transmitted 4 packet(s) received 20.00% packet loss round-trip min/avg/max = 1/12/29 ms # Check whether the device with an IP address of is reachable. The route information is required to be displayed. <Sysname> ping -r PING : 56 data bytes, press CTRL_C to break Reply from : bytes=56 Sequence=1 ttl=254 time=53 ms Record Route: Reply from : bytes=56 Sequence=2 ttl=254 time=1 ms Record Route: Reply from : bytes=56 Sequence=3 ttl=254 time=1 ms Record Route: Reply from : bytes=56 Sequence=4 ttl=254 time=1 ms Record Route: Reply from : bytes=56 Sequence=5 ttl=254 time=1 ms Record Route: 1-3

16 ping statistics packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 1/11/53 ms The above information shows the following: The destination was reachable. The route is <-> { ; } <-> Table 1-1 ping command output description Field PING Check whether the device with IP address is reachable 56 data bytes Number of data bytes in each ICMP echo request press CTRL_C to break Reply from : bytes=56 Sequence=1 ttl=255 time=1 ms Record Route: During the execution of the command, you can press Ctrl+C to abort the ping operation. Received the ICMP reply from the device whose IP address is If no reply is received during the timeout period, Request time out will be displayed. bytes= indicates the number of data bytes in the ICMP reply. Sequence= indicates the packet sequence, used to determine whether a segment is lost, disordered or repeated. ttl= indicates the TTL value in the ICMP reply. time= indicates the response time. The routers through which the ICMP echo request passed. They are displayed in inversed order, that is, the router with a smaller distance to the destination is displayed first ping statistics --- Statistics on data received and sent in the ping operation 5 packet(s) transmitted Number of ICMP echo requests sent 5 packet(s) received Number of ICMP echo requests received 0.00% packet loss Percentage of packets not responded to the total packets sent round-trip min/avg/max = 0/4/20 ms Minimum/average/maximum response time, in ms. The field is not available for failed ping attempts in an IPv4 network. In an IPv6 network, however, the field is available and set to 0/0/0 ms. ping ipv6 ping ipv6 [ -a source-ipv6 -c count -m interval -s packet-size -t timeout ] * host [ -i interface-type interface-number ] Any view 1-4

17 0: Visit level -a source-ipv6: Specifies the source IPv6 address of an ICMP echo request. It must be a legal IPv6 address configured on the device. If this parameter is not provided, the source IPv6 address of an ICMP echo request is the primary IPv6 address of the outbound interface of the request. -c count: Specifies the number of times that an ICMPv6 echo request is sent, which ranges from 1 to and defaults to 5. -m interval: Specifies the interval (in milliseconds) to send an ICMPv6 echo reply, which ranges from 1 to and defaults to 200. If a response from the destination is received within the timeout time, the interval to send the next echo request equals the actual response period plus the value of interval. If no response from the destination is received within the timeout time, the interval to send the next echo request equals the timeout value plus the value of interval. -s packet-size: Specifies length (in bytes) of an ICMPv6 echo request, which ranges from 20 to 8100 and defaults to 56. -t timeout: Specifies the timeout value (in milliseconds) of an ICMPv6 echo reply, which ranges from 0 to and defaults to host: IPv6 address or host name of the destination, which is a string of 1 to 46 characters. -i interface-type interface-number: Specifies an outbound interface by its type and number. This parameter can be used only in case that the destination address is the link local address and the specified outbound interface must have a link local address (For more information about the configuration of link local address, see IPv6 Basics Configuration in the Layer 3 - IP Services Configuration Guide). If this parameter is not provided, the ICMP echo request sending interface is determined by searching the routing table or forwarding table according to the destination IP address. Use the ping ipv6 command to verify whether an IPv6 address is reachable, and display the corresponding statistics. You must use the command in the form of ping ipv6 ipv6 instead of ping ipv6 if the destination name is an ipv6 name. To abort the ping ipv6 operation during the execution of the command, press Ctrl+C. # Verify whether the IPv6 address 2001::1 is reachable. <Sysname> ping ipv6 2001::1 PING 2001::2 : 56 data bytes, press CTRL_C to break Reply from 2001::1 bytes=56 Sequence=1 hop limit=64 time = 62 ms Reply from 2001::1 bytes=56 Sequence=2 hop limit=64 time = 26 ms Reply from 2001::1 bytes=56 Sequence=3 hop limit=64 time = 20 ms Reply from 2001::1 bytes=56 Sequence=4 hop limit=64 time = 4 ms Reply from 2001::1 1-5

18 bytes=56 Sequence=5 hop limit=64 time = 16 ms ::2 ping statistics packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 4/25/62 ms The hop limit field in this prompt information has the same meaning as the ttl field in the prompt information displayed by the IPv4 ping command, indicating the TTL value in the ICMPv6 echo request. For the description on other fields, see Table 1-1. tracert tracert [ -a source-ip -f first-ttl -m max-ttl -p port -q packet-number -vpn-instance vpn-instance-name -w timeout ] * host Any view 0: Visit level -a source-ip: Specifies the source IP address of a tracert packet. It must be a legal IP address configured on the device. If this parameter is not provided, the source IP address of an ICMP echo request is the primary IP address of the outbound interface of the tracert packet. -f first-ttl: Specifies the first TTL, or, the allowed number of hops for the first packet. It ranges from 1 to 255 and defaults to 1, and must be less than the maximum TTL. -m max-ttl: Specifies the maximum TTL, or, the maximum allowed number of hops for a packet. It ranges from 1 to 255 and defaults to 30, and must be greater than the first TTL. -p port: Specifies the UDP port number of the destination, which ranges from 1 to and defaults to You do not need to modify this parameter. -q packet-number: Specifies the number of probe packets sent each time, which ranges from 1 to and defaults to 3. -vpn-instance vpn-instance-name: Specifies the name of an MPLS VPN instance, which is a string of 1 to 31 characters. -w timeout: Specifies the timeout time of the reply packet of a probe packet, which ranges from 1 to milliseconds and defaults to 5000 milliseconds. host: IP address or host name (a string of 1 to 255 characters) of the destination. Use the tracert command to trace the path the packets traverse from source to destination. After having identified network failure with the ping command, use the tracert command to determine the failed node(s). Output information of the tracert command includes IP addresses of all the Layer 3 devices the packets traverse from source to destination. If a device times out, "* * *" will be displayed. 1-6

19 To abort the tracert operation during the execution of the command, press Ctrl+C. # Display the path the packets traverse from source to destination with an IP address of [Sysname] ip ttl-expires enable [Sysname] ip unreachables enable [Sysname] tracert traceroute to ( ) 30 hops max,40 bytes packet, press CTRL_C to break ms 425 ms 30 ms ms 470 ms 80 ms Table 1-2 tracert command output description Field traceroute to ( ) hops max bytes packet press CTRL_C to break ms 425 ms 30 ms Display the route the IP packets traverse from the current device to the device whose IP address is Maximum number of hops of the probe packets, which can be set through the -m keyword Number of bytes of a probe packet During the execution of the command, you can press Ctrl+C to abort the tracert operation. The probe result of the probe packets whose TTL is 1, including the IP address of the first hop and the roundtrip time of three probe packets. The number of packets that can be sent in each probe can be set through the -q keyword. tracert ipv6 tracert ipv6 [ -f first-ttl -m max-ttl -p port -q packet-number -w timeout ] * host Any view 0: Visit level -f first-ttl: Specifies the first TTL, or, the allowed number of hops for the first packet. It ranges from 1 to 255 and defaults to 1, and must be less than the maximum TTL. -m max-ttl: Specifies the maximum TTL, or, the maximum allowed number of hops for a packet. It ranges from 1 to 255 and defaults to 30, and must be greater than the first TTL. -p port: Specifies the UDP port number of the destination, which ranges from 1 to and defaults to It is unnecessary to modify this parameter. -q packet-number: Specifies the number of probe packets sent each time, which ranges from 1 to and defaults to 3. -w timeout: Specifies the timeout time of the reply packet of a probe packet, which ranges from 1 to milliseconds and defaults to 5000 milliseconds. 1-7

20 host: IPv6 address or host name of the destination, which is a string of 1 to 46 characters. Use the tracert ipv6 command to view the path the IPv6 packets traverse from source to destination. After having identified network failure with the ping command, you can use the tracert command to determine the failed node(s). Output information of the tracert ipv6 command includes IPv6 addresses of all the Layer 3 devices the packets traverse from source to destination. If a device times out, "* * *" will be displayed. To abort the tracert operation during the execution of the command, press Ctrl+C. # the path the packets traverse from source to destination with IPv6 address 2001::1. <Sysname> tracert ipv6 2001::1 traceroute to 2001::1 30 hops max,60 bytes packet, press CTRL_C to break ::1 3 ms <1 ms 19 ms For description on the fields in the above output information, see Table 1-2. System Debugging Commands debugging debugging { all [ timeout time ] module-name [ option ] } undo debugging { all module-name [ option ] } User view 1: Monitor level all: All debugging functions. timeout time: Specifies the timeout time for the debugging all command. When all debugging is enabled, the system automatically executes the undo debugging all command after the time. The value ranges from 1 to 1440, in minutes. module-name: Module name, such as arp or device. To display the current module name, use the debugging? command. option: The debugging option for a specific module. Different modules have different debugging options in terms of their number and content. To display the currently supported options, use the debugging module-name? command. Use the debugging command to enable the debugging of a specific module. Use the undo debugging command to disable the debugging of a specific module. By default, debugging functions of all modules are disabled. 1-8

21 Output of the debugging information may degrade system efficiency, so you are recommended to enable the debugging of the corresponding module for diagnosing network failure, and not to enable the debugging of multiple modules at the same time. describes the default level of the debugging all command. Different debugging commands may have different default levels. You must configure the debugging, terminal debugging and terminal monitor commands first to display detailed debugging information on the terminal. For more information about the terminal debugging and terminal monitor commands, see Information Center Configuration Commands in the Network Management and Monitoring Command Reference. Related commands: display debugging. # Enable IP packet debugging. <Sysname> debugging ip packet display debugging display debugging [ interface interface-type interface-number ] [ module-name ] [ { begin exclude include } regular-expression ] Any view 1: Monitor level interface interface-type interface-number: Displays the debugging settings of the specified interface, where interface-type interface-number represents the interface type and number. module-name: Module name. : Filters command output by specifying a regular expression. For more information about regular expressions, see CLI Configuration in the Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays the lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters. Use the display debugging command to display enabled debugging functions. Related commands: debugging. # Display all enabled debugging functions. <Sysname> display debugging IP packet debugging is on 1-9

22 2 NQA Configuration Commands NQA Client Configuration Commands advantage-factor advantage-factor factor undo advantage-factor Voice test type view s factor: Advantage factor, used to count Mean Opinion Scores (MOS) and Calculated Planning Impairment Factor (ICPIF) values. It ranges from 0 to 20. Use the advantage-factor command to configure the advantage factor that is used to count MOS and ICPIF values. Use the undo advantage-factor command to restore the default. By default, the advantage factor is 0. The evaluation of voice quality depends on users tolerance to voice quality, and this factor should be taken into consideration. For users with higher tolerance to voice quality, use the advantage-factor command to configure the advantage factor. When the system calculates the ICPIF value, this advantage factor is subtracted to modify ICPIF and MOS values and thus both the objective and subjective factors are considered when you evaluate the voice quality. # Configure the advantage factor for a voice test as 10. [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type voice [Sysname-nqa-admin-test-voice] advantage-factor 10 codec-type codec-type { g711a g711u g729a } undo codec-type 2-1

23 Voice test type view g711a: G.711 A-law codec type. g711u: G.711 µ-law codec type g729a: G.729 A-law codec type. Use the codec-type command to configure the codec type for a voice test. Use the undo codec-type command to restore the default. By default, the codec type for a voice test is G.711 A-law. # Configure the codec type for a voice test as g729a. [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type voice [Sysname-nqa-admin-test-voice] codec-type g729a data-fill data-fill string undo data-fill ICMP echo, UDP echo, UDP jitter, voice test type view string: A string of 1 to 200 case sensitive characters, used to fill a probe packet. Use the data-fill command to configure the string used to fill a probe packet. Use the undo data-fill command to restore the default. By default, the string used to fill a probe packet is the hexadecimal number If the data field of a probe packet is smaller than the fill data, the system uses only the first part of the character string to encapsulate the packet. If the data field of a probe packet is larger than the fill data, the system fills the character string cyclically to encapsulate the packet until it is full. For example, when the fill data is abcd and the size of the data field of a probe packet is 3 byte, abc is used to fill the packet. When the data field of a probe packet is 6 byte, abcdab is used to fill the packet. 2-2

24 In an ICMP echo test, the configured character string is used to fill the data field in an ICMP echo packet. In a UDP echo test, because the first five bytes of the data field of a UDP packet have some specific usage, the configured character string is used to fill the remaining bytes in the UDP packet. In a UDP jitter test, because the first 68 bytes of the data field of a UDP packet have some specific usage, the configured character string is used to fill the remaining bytes in the UDP packet. In a voice test, because the first 16 bytes of the data field of a UDP packet have some specific usage, the configured character string is used to fill the remaining bytes in the UDP packet. # Configure the string used to fill an ICMP echo packet as abcd. [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] data-fill abcd data-size data-size size undo data-size ICMP echo, UDP echo, UDP jitter, voice test type view size: Size of a probe packet in bytes, which ranges from 20 to 8100 for an ICMP echo or a UDP echo test, ranges from 68 to 8100 for a UDP jitter test, and ranges from 16 to 1500 for a voice test. Use the data-size command to configure the size of a probe packet to be sent. Use the undo data-size command to restore the default. The default values are as shown in Table 2-1. Table 2-1 Default values of the size of test packets sent Test Type Codec type Default value (in bytes) ICMP None 100 UDP echo None 100 UDP jitter None 100 Voice G.711 A-law 172 Voice G.711 µ-law 172 Voice G.729 A-law

25 For an ICMP echo test, the size of a probe packet is the length of the data field in an ICMP echo packet. For a UDP echo test, UDP jitter test and voice test, the size of a probe packet is the length of the data field in a UDP packet. # Configure the size of an ICMP echo packet as 80 bytes. [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] data-size 80 description (any NQA test type view) description text undo description Any NQA test type view text: A string of 1 to 200 case sensitive characters, used to describe a test group. Use the description command to give a brief description of a test group, usually, the test type or test purpose of a test group. Use the undo description command to remove the configured description information. By default, no descriptive string is available for a test group. # Configure the descriptive string for a test group as icmp-probe. [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] description icmp-probe destination ip destination ip ip-address undo destination ip DLSw, FTP, DNS, HTTP, ICMP echo, SNMP, TCP, UDP echo, UDP jitter, voice test type view 2-4

26 ip-address: Destination IP address of a test operation. Use the destination ip command to configure a destination IP address for a test operation. Use the undo destination ip command to remove the configured destination IP address. By default, no destination IP address is configured for a test operation. # Configure the destination IP address of an ICMP echo test operation as [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] destination ip destination port destination port port-number undo destination port TCP, UDP echo, UDP jitter, voice test type view port-number: Destination port number of a test operation, ranges from 1 to Use the destination port command to configure a destination port number for a test operation. Use the undo destination port command to remove the configured destination port number. By default, no destination port number is configured for a test operation. Do not perform a UDP jitter test and a voice test on ports from 1 to 1023 (known ports). Otherwise, the NQA test fails or the corresponding services of this port are unavailable. # Configure the destination port number of a test operation as [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type udp-echo [Sysname-nqa-admin-test-udp-echo] destination port

27 display nqa history display nqa history [ admin-name operation-tag ] [ { begin exclude include } regular-expression ] Any view 1: Monitor level admin-name operation-tag: Displays history records of a test group. If these two arguments are not specified, history records of all test groups are displayed. admin-name represents the name of the NQA test group administrator who creates the NQA operation. It is a case-insensitive string of 1 to 32 characters. operation-tag represents the test operation tag. It is a case-insensitive string of 1 to 32 characters. : Filters command output by specifying a regular expression. For more information about regular expressions, see CLI Configuration in the Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays the lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters. Use the display nqa history command to display history records of NQA tests. The display nqa history command cannot show you the results of voice tests and UDP jitter tests. Therefore, to know the result of a voice test or a UDP jitter test, you are recommended to use the display nqa result command to view the probe results of the latest NQA test, or use the display nqa statistics command to view the statistics of NQA tests. # Display the history records of the NQA test in which the administrator name is administrator, and the operation tag is test. <Sysname> display nqa history administrator test NQA entry (admin administrator, tag test) history record(s): Index Response Status Time Succeeded :54: Succeeded :54: Succeeded :54: Succeeded :54: Succeeded :54: Succeeded :54: Succeeded :54: Succeeded :54: Succeeded :54: Succeeded :54:

28 Table 2-2 display nqa history command output description Field Index Response Status Time History record number Round-trip delay of a test packet in the case of a successful test, timeout time in the case of timeout, or 0 in the case that a test cannot be completed (in milliseconds) Status value of test results, including: Succeeded Unknown error Internal error Timeout Time when the test is completed display nqa reaction counters display nqa reaction counters [ admin-name operation-tag [ item-number ] ] [ { begin exclude include } regular-expression ] Any view 1: Monitor level admin-name operation-tag: Displays current monitoring results of all reaction entries in a test group. If these two arguments are not specified, monitoring results of all reaction entries of all test groups are displayed. admin-name represents the name of the NQA test group administrator who creates the NQA operation. It is a case-insensitive string of 1 to 32 characters. operation-tag represents the test operation tag. It is a case-insensitive string of 1 to 32 characters. item-number: Displays current monitoring results of a specified reaction entry. If this argument is not provided, results of all reaction entries are displayed. item-number represents the ID of the reaction entry, in the range 1 to 10. : Filters command output by specifying a regular expression. For more information about regular expressions, see CLI Configuration in the Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays the lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters. Use the display nqa reaction counters command to display the current monitoring results of reaction entries. 2-7

29 If the threshold type is average value, or the monitored element is ICPIF or MOS in a voice test, the monitoring results are invalid. The monitoring results are accumulated since the test group starts and are not cleared after the test completes. # Display the monitoring results of all reaction entries in an ICMP echo test group, in which the administrator name is admin, and the operation tag is test. <Sysname> display nqa reaction counters admin test NQA entry (admin admin, tag test) reaction counters: Index Checked Element Threshold Type Checked Num Over-threshold Num 1 probe-duration accumulate probe-duration average probe-duration consecutive probe-fail accumulate probe-fail consecutive Table 2-3 display nqa reaction counters command output description Field Index Checked Element Threshold Type Checked Num Over-threshold Num ID of a reaction entry Monitored element Threshold type Number of targets that have been monitored for data collection Number of threshold violations Table 2-4 on the threshold monitoring fields of the display nqa reaction counters command Monitored element Threshold type Collect data in Checked Num Over-threshold Num accumulate Probes since the group starts Number of finished probes since the test group starts Number of probes of which the duration exceeds the threshold since the test group starts probe-duration average consecutive Probes since the test group starts Number of finished probes since the test group starts Number of probes of which the duration exceeds the threshold since the test group starts probe-fail accumulate consecutive Probes since the test group starts Probes since the test group starts Number of finished probes since the test group starts Number of finished probes since the test group starts Number of probe failures since the test group starts Number of probe failures since the test group starts 2-8

30 Monitored element Threshold type Collect data in Checked Num Over-threshold Num RTT accumulate Packets sent since the test group starts Number of packets sent since the test group starts Number of packets of which the round-trip time exceeds the threshold since the test group starts average jitter-ds/jitter-sd accumulate Packets sent since the test group starts Number of packets sent since the test group starts Number of packets of which the one-way delay jitter exceeds the threshold since the test group starts average OWD-DS/OWD-S D Packets sent since the test group starts Number of packets sent since the test group starts Number of packets of which the one-way delay exceeds the threshold since the test group starts packet-loss accumulate Packets sent since the test group starts Number of packets sent since the test group starts Total packet loss since the test group starts ICPIF MOS display nqa result display nqa result [ admin-name operation-tag ] [ { begin exclude include } regular-expression ] Any view 1: Monitor level admin-name operation-tag: Displays results of the last test of a test group. If these two arguments are not specified, results of the last tests of all test groups are displayed. admin-name represents the name of the NQA test group administrator who creates the NQA operation. It is a case-insensitive string of 1 to 32 characters. operation-tag represents the test operation tag. It is a case-insensitive string of 1 to 32 characters. : Filters command output by specifying a regular expression. For more information about regular expressions, see CLI Configuration in the Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays the lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. 2-9

31 regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters. Use the display nqa result command to display results of the last NQA test. # Display the results of the last UDP jitter test. <Sysname> display nqa result admin test NQA entry (admin admin, tag test) test results: Destination IP address: Send operation times: 10 Receive response times: 10 Min/Max/Average round trip time: 15/46/26 Square-Sum of round trip time: 8103 Last succeeded probe time: :56:38.7 Extended results: Packet loss in test: 0% Failures due to timeout: 0 Failures due to disconnect: 0 Failures due to no connection: 0 Failures due to sequence error: 0 Failures due to internal error: 0 Failures due to other errors: 0 Packet(s) arrived late: 0 UDP-jitter results: RTT number: 10 Min positive SD: 8 Min positive DS: 8 Max positive SD: 18 Max positive DS: 8 Positive SD number: 5 Positive DS number: 2 Positive SD sum: 75 Positive DS sum: 32 Positive SD average: 15 Positive DS average: 16 Positive SD square sum: 1189 Positive DS square sum: 640 Min negative SD: 8 Min negative DS: 1 Max negative SD: 24 Max negative DS: 30 Negative SD number: 4 Negative DS number: 7 Negative SD sum: 56 Negative DS sum: 99 Negative SD average: 14 Negative DS average: 14 Negative SD square sum: 946 Negative DS square sum: 1495 One way results: Max SD delay: 22 Max DS delay: 23 Min SD delay: 7 Min DS delay: 7 Number of SD delay: 10 Number of DS delay: 10 Sum of SD delay: 125 Sum of DS delay: 132 Square sum of SD delay: 1805 Square sum of DS delay: 1988 SD lost packet(s): 0 DS lost packet(s): 0 Lost packet(s) for unknown reason: 0 # Display the results of the last voice test. <Sysname> display nqa result admin test NQA entry (admin admin, tag test) test results: Destination IP address: Send operation times: 1000 Receive response times: