H3C R6600 Configuration manual

H3C SR6600/SR6600-X Routers

Network Management and Monitoring

Configuration Guide(V7)

Hangzhou H3C Technologies Co., Ltd.

http://www.h3c.com

Software version: SR6602X-CMW710-R7103

SR6600X-CMW710-R7103-RSE3

SR6600-CMW710-R7103-RPE3

Document version: 20150715-6PW100

No part of this manual may be reproduced or transmitted in any form or by any means without prior

written consent of Hangzhou H3C Technologies Co., Ltd.

Trademarks

H3C, , H3CS, H3CIE, H3CNE, Aolynk, , H

3

Care, , IRF, NetPilot, Netflow,

SecEngine, SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of

Hangzhou H3C Technologies Co., Ltd.

All other trademarks that may be mentioned in this manual are the property of their respective owners

Notice

The information in this document is subject to change without notice. Every effort has been made in the

preparation of this document to ensure accuracy of the contents, but all statements, information, and

recommendations in this document do not constitute the warranty of any kind, express or implied.

Preface

The H3C SR6600/SR6600-X documentation set includes 14 configuration guides, which describe the

software features for the H3C SR6600/SR6600-X Routers and guide you through the software

configuration procedures. These configuration guides also provide configuration examples to help you

apply software features to different network scenarios.

The Network Management and Monitoring Configuration Guide describes technical principles and

configurations applied during the management and maintenance process of routers and networks.

This preface includes:

• Audience

• Conventions

• About the H3C SR6600/SR6600-X documentation set

• Obtaining documentation

• Technical support

• Documentation feedback

Audience

This documentation is intended for:

• Network planners

• Field technical support and servicing engineers

• Network administrators working with the routers

Conventions

This section describes the conventions used in this documentation set.

Command conventions

Convention Descri

p

tion

Boldface Bold text represents commands and keywords that you enter literally as shown.

Italic Italic text represents arguments that you replace with actual values.

[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.

{ x | y | ... }

Braces enclose a set of required syntax choices separated by vertical bars, from which

you select one.

[ x | y | ... ]

Square brackets enclose a set of optional syntax choices separated by vertical bars, from

which you select one or none.

{ x | y | ... } *

Asterisk marked braces enclose a set of required syntax choices separated by vertical

bars, from which you select at least one.

[ x | y | ... ] *

Asterisk marked square brackets enclose optional syntax choices separated by vertical

bars, from which you select one choice, multiple choices, or none.

&<1-n>

The argument or keyword and argument combination before the ampersand (&) sign can

be entered 1 to n times.

# A line that starts with a pound (#) sign is comments.

GUI conventions

Convention Descri

p

tion

Boldface

Window names, button names, field names, and menu items are in Boldface. For

example, the New User window appears; click OK.

> Multi-level menus are separated by angle brackets. For example, File > Create > Folder.

Symbols

Convention Descri

p

tion

WARNING

An alert that calls attention to important information that if not understood or followed can

result in personal injury.

CAUTION

An alert that calls attention to important information that if not understood or followed can

result in data loss, data corruption, or damage to hardware or software.

IMPORTANT

An alert that calls attention to essential information.

NOTE

An alert that contains additional or supplementary information.

TIP

An alert that provides helpful information.

Network topology icons

Represents a generic network device, such as a router, switch, or firewall.

Represents a routing-capable device, such as a router or Layer 3 switch.

Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports

Layer 2 forwarding and other Layer 2 features.

Represents an access controller, a unified wired-WLAN module, or the access controller

engine on a unified wired-WLAN switch.

Represents an access point.

Represents a mesh access point.

Represents omnidirectional signals.

Represents directional signals.

Represents a security product, such as a firewall, UTM, multiservice security gateway, or

load balancing device.



Represents a security card, such as a firewall, load balancing, NetStream, SSL VPN, IPS,

or ACG card.

Port numbering in examples

The port numbers in this document are for illustration only and might be unavailable on your device.

About the H3C SR6600/SR6600-X documentation

set

The H3C SR6600/SR6600-X documentation set includes:

Cate

g

or

y

Documents

Pur

p

oses

Product description and

specifications

Marketing brochures Describe product specifications and benefits.

Technology white papers

Provide an in-depth description of software features

and technologies.

Card datasheets

Describe card specifications, features, and

standards.

Hardware specifications

and installation

Compliance and safety

manual

Provides regulatory information and the safety

instructions that must be followed during installation.

Installation guide

Provides a complete guide to hardware installation

and hardware specifications.

Card manuals Provide the hardware specifications of cards.

H3C N68 Cabinet

Installation and Remodel

Introduction

Guides you through installing and remodeling H3C

N68 cabinets.

Software configuration

Configuration guides

Describe software features and configuration

procedures.

Command references

Provide a quick reference to all available

commands.

Operations and

maintenance

H3C SR6602 Release

notes

Provide information about the product release,

including the version history, hardware and software

compatibility matrix, version upgrade information,

technical support information, and software

upgrading.

H3C SR6608 Release

notes

Obtaining documentation

You can access the most up-to-date H3C product documentation on the World Wide Web

at http://www.h3c.com

.

Click the links on the top navigation bar to obtain different categories of product documentation:

[Technical Support & Documents > Technical Documents]

– Provides hardware installation, software

upgrading, and software feature configuration and maintenance documentation.

[Products & Solutions]

– Provides information about products and technologies, as well as solutions.

[Technical Support & Documents > Software Download] – Provides the documentation released with the

software version.

Technical support

servic[email protected]

http://www.h3c.com

Documentation feedback

You can e-mail your comments about product documentation to info@h3c.com.

We appreciate your comments.

i

Contents

Using ping, tracert, and system debugging ··············································································································· 1

Ping ····················································································································································································· 1

Using a ping command to test network connectivity ···························································································· 1

Ping example ···························································································································································· 1

Tracert ················································································································································································ 3

Prerequisites ······························································································································································ 4

Using a tracert command to identify failed or all nodes in a path ····································································· 4

Tracert example ························································································································································ 5

System debugging ···························································································································································· 6

Debugging information control switches················································································································ 6

Debugging a feature module ·································································································································· 7

Configuring NQA ························································································································································ 8

Overview ············································································································································································ 8

NQA operation ························································································································································ 8

Collaboration ···························································································································································· 9

Threshold monitoring ············································································································································ 10

NQA configuration task list ·········································································································································· 10

Configuring the NQA server ········································································································································ 10

Enabling the NQA client ··············································································································································· 11

Configuring NQA operations on the NQA client ······································································································ 11

NQA operation configuration task list ················································································································ 11

Configuring the ICMP echo operation ················································································································ 12

Configuring the DHCP operation························································································································· 13

Configuring the DNS operation ··························································································································· 14

Configuring the FTP operation ····························································································································· 14

Configuring the HTTP operation ·························································································································· 15

Configuring the UDP jitter operation ··················································································································· 16

Configuring the SNMP operation ························································································································ 18

Configuring the TCP operation ···························································································································· 18

Configuring the UDP echo operation ·················································································································· 19

Configuring the UDP tracert operation ··············································································································· 20

Configuring the voice operation ·························································································································· 22

Configuring the DLSw operation ························································································································· 24

Configuring the path jitter operation ··················································································································· 24

Configuring optional parameters for the NQA operation ················································································ 25

Configuring the collaboration function ··············································································································· 26

Configuring threshold monitoring ························································································································ 27

Configuring the NQA statistics collection function ···························································································· 30

Configuring the saving of NQA history records ································································································ 30

Scheduling the NQA operation on the NQA client ·························································································· 31

Configuring NQA templates on the NQA client ········································································································ 31

Configuring the ICMP template ··························································································································· 32

Configuring the DNS template ····························································································································· 32

Configuring the TCP template ······························································································································ 33

Configuring the HTTP template ···························································································································· 34

Configuring the FTP template ······························································································································· 35

Configuring optional parameters for the NQA template ·················································································· 36

Displaying and maintaining NQA ······························································································································· 37

ii

NQA configuration examples ······································································································································ 38

ICMP echo operation configuration example ···································································································· 38

DHCP operation configuration example ············································································································· 40

DNS operation configuration example ··············································································································· 41

FTP operation configuration example ················································································································· 42

HTTP operation configuration example ··············································································································· 43

UDP jitter operation configuration example ······································································································· 44

SNMP operation configuration example ············································································································ 47

TCP operation configuration example ················································································································ 48

UDP echo operation configuration example ······································································································ 49

UDP tracert operation configuration example ···································································································· 51

Voice operation configuration example ············································································································· 52

DLSw operation configuration example ·············································································································· 55

Path jitter operation configuration example ······································································································· 56

NQA collaboration configuration example········································································································ 57

ICMP template configuration example ················································································································ 60

DNS template configuration example ················································································································· 61

TCP template configuration example ·················································································································· 62

HTTP template configuration example ················································································································· 62

FTP template configuration example ··················································································································· 63

Configuring NTP ························································································································································ 65

Overview ········································································································································································· 65

How NTP works ····················································································································································· 65

NTP architecture ···················································································································································· 66

Association modes ················································································································································ 67

NTP security ··························································································································································· 69

NTP for MPLS L3VPNs ·········································································································································· 70

Protocols and standards ······································································································································· 71

Configuration restrictions and guidelines ···················································································································· 71

Configuration task list ···················································································································································· 71

Enabling the NTP service ·············································································································································· 72

Configuring NTP association modes ···························································································································· 72

Configuring NTP in client/server mode ·············································································································· 72

Configuring NTP in symmetric active/passive mode ························································································ 73

Configuring NTP in broadcast mode ·················································································································· 74

Configuring NTP in multicast mode ····················································································································· 75

Configuring access control rights ································································································································· 76

Configuring NTP authentication ··································································································································· 76

Configuring NTP authentication in client/server mode ····················································································· 76

Configuring NTP authentication in symmetric active/passive mode ······························································· 78

Configuring NTP authentication in broadcast mode ························································································· 80

Configuring NTP authentication in multicast mode ··························································································· 82

Configuring NTP optional parameters ························································································································· 84

Specifying the source interface for NTP messages ···························································································· 85

Disabling an interface from processing NTP messages ···················································································· 85

Configuring the maximum number of dynamic associations ············································································ 86

Configuring a DSCP value for NTP packets ······································································································· 86

Configuring the local clock as a reference source ····································································································· 86

Displaying and maintaining NTP ································································································································· 87

NTP client/server mode configuration example ········································································································· 87

IPv6 NTP client/server mode configuration example ································································································· 88

NTP symmetric active/passive mode configuration example ··················································································· 90

IPv6 NTP symmetric active/passive mode configuration example ··········································································· 91

NTP broadcast mode configuration example ············································································································· 92

iii

NTP multicast mode configuration example ················································································································ 94

IPv6 NTP multicast mode configuration example ······································································································· 97

Configuration example for NTP client/server mode with authentication ······························································· 100

Configuration example for NTP broadcast mode with authentication ··································································· 101

Configuration example for MPLS VPN time synchronization in client/server mode ············································ 104

Configuration example for MPLS VPN time synchronization in symmetric active/passive mode ······················· 106

Configuring SNTP ··················································································································································· 108

Configuration restrictions and guidelines ·················································································································· 108

Configuration task list ·················································································································································· 108

Enabling the SNTP service ·········································································································································· 108

Specifying an NTP server for the device ··················································································································· 109

Configuring SNTP authentication ······························································································································· 109

Displaying and maintaining SNTP ····························································································································· 110

SNTP configuration example ······································································································································ 110

Configuring PTP ······················································································································································· 112

Overview ······································································································································································· 112

Basic concepts ····················································································································································· 112

Synchronization mechanism ······························································································································· 114

Protocols and standards ····································································································································· 116

Feature and hardware compatibility ·························································································································· 117

Configuring clock nodes ············································································································································· 117

Configuration task list ········································································································································· 117

Specifying a PTP standard ·································································································································· 119

Specifying a clock node type ····························································································································· 119

Specifying a PTP domain ···································································································································· 120

Configuring an OC to operate only as a member clock ················································································ 120

Configuring ToD input or output ························································································································ 120

Configuring ToD clock parameters ···················································································································· 121

Configuring a priority for a clock ······················································································································ 121

Configuring the role of a PTP port ····················································································································· 122

Configuring the mode for carrying timestamps ································································································ 122

Specifying a delay measurement mechanism for a BC or an OC ································································· 123

Configuring the port type for a TC+OC ··········································································································· 123

Configuring the interval for sending announce messages ·············································································· 124

Specifying the number of announcement intervals before the receiving node stops receiving announce

messages ······························································································································································ 124



Configuring the interval for sending Pdelay_Req messages ··········································································· 125

Configuring the interval for sending Sync messages ······················································································ 125

Configuring the minimum interval for sending Delay_Req messages ···························································· 125

Configuring the MAC address for non-pdelay messages ··············································································· 126

Specifying the protocol for encapsulating PTP messages as UDP (IPv4) ······················································· 126

Configuring the source IP address for multicast PTP message transmission over UDP (IPv4) ······················ 126

Configuring the destination IP address for unicast PTP message transmission over UDP (IPv4) ················· 127

Configuring the delay correction value············································································································· 127

Configuring the cumulative offset between the UTC and TAI ········································································· 128

Configuring the correction date of the UTC ····································································································· 128

Setting a DSCP value for PTP messages transmitted over UDP (IPv4) ···························································· 128

Specifying the system time source as PTP ········································································································· 129

Enabling PTP on a port ······································································································································· 129

Displaying and maintaining PTP ································································································································· 129

PTP configuration example (IEEE 1588 version 2, IEEE 802.3/Ethernet encapsulation) ···································· 130

PTP configuration example (IEEE 1588 version 2, multicast transmission) ···························································· 132

PTP configuration example (IEEE 1588 version 2, unicast transmission) ······························································· 135

iv

PTP configuration example (IEEE 802.1AS) ·············································································································· 138

Configuring network synchronization ···················································································································· 141

Overview ······································································································································································· 141

Clock sources ······················································································································································· 141

SSM quality levels ··············································································································································· 141

Clock source priority ··········································································································································· 142

Clock reference selection ···································································································································· 142

Clock mode on a port ········································································································································· 142

Feature and hardware compatibility ·························································································································· 143

Network synchronization configuration task list ······································································································· 143

Configuring clock reference selection ························································································································ 144

Setting the Sa bit for the SSM of BITS clocks ············································································································ 144

Configuring the timing direction of a BITS clock ······································································································ 145

Setting the frequency of a BITS clock ························································································································· 145

Specifying a line clock input port ······························································································································· 146

Configuring automatic reference selection parameters ··························································································· 146

Configuring the method to set the SSM quality level of a clock source ························································ 146

Specifying an SSM quality level for a clock source ························································································ 147

Controlling the use of SSM in automatic reference selection ········································································· 147

Setting the priority of a clock source ················································································································· 148

Enabling the reference manually specified on a non-default MDC ········································································ 148

Displaying and maintaining network clock monitoring module configuration ······················································ 149

Network synchronization configuration example ····································································································· 150

Network requirements ········································································································································· 150

Configuration procedure ···································································································································· 150

Verifying the configuration ································································································································· 150

Configuring synchronous Ethernet ························································································································· 151

Overview ······································································································································································· 151

Quality levels of clocks ······································································································································· 151

Clock reference selection and timing distribution ···························································································· 151

Input QL updating on SyncE ports ····················································································································· 152

Protocols and standards ····································································································································· 152

Feature and hardware compatibility ·························································································································· 152

Configuring SyncE on an Ethernet interface ············································································································· 152

Setting the clock mode on a copper SyncE GE port ································································································ 153

Displaying and maintaining SyncE ···························································································································· 153

SyncE configuration example ····································································································································· 153

Network requirements ········································································································································· 153

Configuration procedure ···································································································································· 153

Verifying the configuration ································································································································· 154

Configuring SNMP ·················································································································································· 155

Overview ······································································································································································· 155

SNMP framework ················································································································································ 155

MIB and view-based MIB access control ·········································································································· 155

SNMP operations ················································································································································ 156

Protocol versions ·················································································································································· 156

Access control modes ········································································································································· 156

FIPS compliance ··························································································································································· 157

Security strength ··························································································································································· 157

Configuring SNMP basic parameters ························································································································ 157

Configuring SNMPv1 or SNMPv2c basic parameters ···················································································· 157

Configuring SNMPv3 basic parameters ··········································································································· 159

Configuring SNMP logging ········································································································································ 163

v

Configuring SNMP notifications ································································································································· 164

Enabling SNMP notifications ····························································································································· 164

Configuring the SNMP agent to send notifications to a host ········································································· 164

Displaying the SNMP settings ····································································································································· 166

SNMPv1/SNMPv2c configuration example ············································································································· 167

Network requirements ········································································································································· 167

Configuration procedure ···································································································································· 167

Verifying the configuration ································································································································· 168

SNMPv3 configuration example ································································································································ 168

Network requirements ········································································································································· 168

Configuration procedure ···································································································································· 168

Verifying the configuration ································································································································· 170

Configuring RMON ················································································································································ 172

Overview ······································································································································································· 172

RMON groups ····················································································································································· 172

Sample types for the alarm group and the private alarm group ··································································· 174

Protocols and standards ····································································································································· 174

Configuring the RMON statistics function ················································································································· 174

Creating an RMON Ethernet statistics entry ····································································································· 174

Creating an RMON history control entry·········································································································· 175

Configuring the RMON alarm function ····················································································································· 175

Displaying and maintaining RMON settings ············································································································ 176

Ethernet statistics group configuration example ······································································································· 177

Network requirements ········································································································································· 177

Configuration procedure ···································································································································· 177

History group configuration example ························································································································ 178

Network requirements ········································································································································· 178

Configuration procedure ···································································································································· 178

Alarm function configuration example ······················································································································· 179

Network requirements ········································································································································· 179

Configuration procedure ···································································································································· 180

Configuring EAA ····················································································································································· 182

Overview ······································································································································································· 182

EAA framework ··················································································································································· 182

Elements in a monitor policy ······························································································································ 183

EAA environment variables ································································································································ 184

Configuring a user-defined EAA environment variable ··························································································· 185

Configuring a monitor policy ······································································································································ 186

Configuration restrictions and guidelines ········································································································· 186

Configuring a monitor policy from the CLI ······································································································· 186

Configuring a monitor policy by using Tcl ······································································································· 188

Suspending monitor policies ······································································································································· 189

Displaying and maintaining EAA settings ················································································································· 190

EAA configuration examples ······································································································································ 190

CLI-defined policy configuration example ········································································································ 190

CLI-defined policy with EAA environment variables configuration example ················································ 191

Tcl-defined policy configuration example ········································································································· 192

Monitoring and maintaining processes ················································································································· 194

Displaying and maintaining processes ······················································································································ 194

Displaying and maintaining user processes ·············································································································· 195

Monitoring kernel threads ··········································································································································· 196

Configuring kernel thread deadloop detection ································································································ 196

Configuring kernel thread starvation detection ································································································ 197

vi

Displaying and maintaining kernel threads ······································································································ 198

Configuring samplers ·············································································································································· 200

Creating a sampler ······················································································································································ 200

Displaying and maintaining a sampler ····················································································································· 200

Sampler configuration example ································································································································· 200

Network requirements ········································································································································· 200

Configuration procedure ···································································································································· 201

Verifying the configuration ································································································································· 201

Configuring port mirroring ····································································································································· 202

Overview ······································································································································································· 202

Terminology ························································································································································· 202

Port mirroring implementation ···························································································································· 203

Configuring local port mirroring ································································································································ 203

Local port mirroring configuration task list ······································································································· 203

Creating a local mirroring group ······················································································································ 204

Configuring source ports for the local mirroring group ·················································································· 204

Configuring the monitor port for the local mirroring group ············································································ 205

Displaying and maintaining port mirroring ··············································································································· 205

Local port mirroring configuration example ·············································································································· 206

Network requirements ········································································································································· 206

Configuration procedure ···································································································································· 206

Verifying the configuration ································································································································· 206

Configuring NetStream ··········································································································································· 207

Overview ······································································································································································· 207

NetStream architecture ······································································································································· 207

Flow aging ··························································································································································· 208

NetStream data export ······································································································································· 208

NetStream filtering and sampling ······················································································································ 211

NetStream configuration task list ································································································································ 211

Enabling NetStream ····················································································································································· 212

Configuring NetStream filtering ································································································································· 213

Configuring NetStream sampling ······························································································································· 213

Configuring attributes of the NetStream data export ······························································································· 213

Configuring the NetStream data export format ······························································································· 213

Configuring the refresh rate for NetStream version 9 templates ···································································· 215

Configuring MPLS-aware NetStream ················································································································ 215

Configuring NetStream flow aging ···························································································································· 215

Flow aging methods ············································································································································ 215

Configuration procedure ···································································································································· 216

Configuring the NetStream data export ···················································································································· 217

Configuring the NetStream traditional data export ························································································· 217

Configuring the NetStream aggregation data export ····················································································· 217

Displaying and maintaining NetStream ···················································································································· 218

NetStream configuration examples ···························································································································· 219

NetStream traditional data export configuration example ············································································· 219

NetStream aggregation data export configuration example ········································································· 220

Configuring IPv6 NetStream ·································································································································· 225

Overview ······································································································································································· 225

IPv6 NetStream architecture ······························································································································· 225

Flow aging ··························································································································································· 226

IPv6 NetStream data export ······························································································································· 226

IPv6 NetStream filtering and sampling ············································································································· 227

vii

IPv6 NetStream configuration task list ······················································································································· 228

Enabling IPv6 NetStream ············································································································································ 229

Configuring IPv6 NetStream filtering ························································································································· 229

Configuring IPv6 NetStream sampling ······················································································································ 230

Configuring attributes of the IPv6 NetStream data export ······················································································ 230

Configuring the IPv6 NetStream data export format ······················································································· 230

Configuring the refresh rate for IPv6 NetStream version 9 templates ··························································· 231

Configuring MPLS-aware NetStream ················································································································ 232

Configuring IPv6 NetStream flow aging ··················································································································· 232

Flow aging methods ············································································································································ 232

Configuration procedure ···································································································································· 233

Configuring the IPv6 NetStream data export ············································································································ 233

Configuring the IPv6 NetStream traditional data export ················································································ 233

Configuring the IPv6 NetStream aggregation data export············································································· 234

Displaying and maintaining IPv6 NetStream ············································································································ 235

IPv6 NetStream configuration examples ··················································································································· 236

IPv6 NetStream traditional data export configuration example ····································································· 236

IPv6 NetStream aggregation data export configuration example ································································· 237

Configuring the information center ························································································································ 241

Overview ······································································································································································· 241

Log types ······························································································································································ 241

Log levels ······························································································································································ 241

Log destinations ··················································································································································· 242

Default output rules for logs ································································································································ 242

Default output rules for diagnostic logs ············································································································· 242

Default output rules for security logs ················································································································· 243

Default output rules for hidden logs··················································································································· 243

Default output rules for trace logs ······················································································································ 243

Default output rules for custom logs ··················································································································· 243

Log formats ··························································································································································· 244

FIPS compliance ··························································································································································· 246

Information center configuration task list ··················································································································· 246

Outputting logs to the console ···································································································································· 247

Outputting logs to the monitor terminal ····················································································································· 247

Outputting logs to a log host ······································································································································ 248

Outputting logs to the log buffer ································································································································ 249

Saving logs to a log file ·············································································································································· 249

Managing security logs ··············································································································································· 250

Saving security logs to the security log file ······································································································· 250

Managing the security log file ··························································································································· 251

Saving diagnostic logs to a diagnostic log file ········································································································· 251

Configuring the maximum size of the trace log file ································································································· 252

Outputting custom NAT444 logs to a log host ········································································································· 253

Enabling synchronous information output ················································································································· 253

Enabling duplicate log suppression ··························································································································· 254

Disabling an interface from generating link up or link down logs ········································································· 254

Displaying and maintaining information center ······································································································· 255

Information center configuration examples ··············································································································· 255

Configuration example for outputting logs to the console ·············································································· 255

Configuration example for outputting logs to a UNIX log host ······································································ 256

Configuration example for outputting logs to a Linux log host ······································································· 257

Configuring flow log ··············································································································································· 259

Flow log configuration task list ··································································································································· 261

viii

Configuration prerequisites ········································································································································· 261

Configuring the flow log version ································································································································ 261

Specifying a source IP address for flow log packets ································································································ 261

Enabling load balancing for flow log entries ············································································································ 262

Configuring the timestamp of flow logs ····················································································································· 262

Specifying a flow log export destination ··················································································································· 263

Specifying a log host as the flow log export destination ················································································ 263

Specifying the information center as the flow log export destination ···························································· 263

Displaying and maintaining flow log ························································································································· 263

Flow log configuration example ································································································································· 264

Network requirements ········································································································································· 264

Configuration procedure ···································································································································· 264

Verifying the configuration ································································································································· 264

Index ········································································································································································ 266

1

Using ping, tracert, and system debugging

This chapter covers ping, tracert, and information about debugging the system.

Ping

Use the ping utility to determine if an address is reachable.

Ping sends ICMP echo requests (ECHO-REQUEST) to the destination device. Upon receiving the requests,

the destination device responds with ICMP echo replies (ECHO-REPLY) to the source device. The source

device outputs statistics about the ping operation, including the number of packets sent, number of echo

replies received, and the round-trip time. You can measure the network performance by analyzing these

statistics.

Using a ping command to test network connectivity

Execute ping commands in any view.

Task Command

Determine if an address in an IP network is

reachable.

When you configure the ping command for a low-speed

network, set a larger value for the timeout timer (indicated by the

-t keyword in the command).

• For IPv4 networks:

ping [ ip ] [ -a source-ip | -c count | -f | -h ttl | -i

interface-type interface-number | -m interval | -n | -p pad |

-q | -r | -s packet-size | -t timeout | -tos tos | -v | { -topology

topo-name | -vpn-instance vpn-instance-name } ] * host

• For IPv6 networks:

ping ipv6 [ -a source-ipv6 | -c count | -i interface-type

interface-number | -m interval |-q|-s packet-size | -t timeout

| -v | -tc traffic-class | -vpn-instance vpn-instance-name ] *

host

For more information about the ping mpls command, see MPLS Command Reference.

Ping example

Network requirements

As shown in Figure 1, determine if Device A and Device C can reach each other. If they can reach each

other, get detailed information about routes from Device A to Device C.

2

Figure 1 Network diagram

Configuration procedure

# Use the ping command on Device A to test connectivity to Device C.

Ping 1.1.2.2 (1.1.2.2): 56 data bytes, press CTRL_C to break

56 bytes from 1.1.2.2: icmp_seq=0 ttl=254 time=2.137 ms

56 bytes from 1.1.2.2: icmp_seq=1 ttl=254 time=2.051 ms

56 bytes from 1.1.2.2: icmp_seq=2 ttl=254 time=1.996 ms

56 bytes from 1.1.2.2: icmp_seq=3 ttl=254 time=1.963 ms

56 bytes from 1.1.2.2: icmp_seq=4 ttl=254 time=1.991 ms

--- Ping statistics for 1.1.2.2 ---

5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss

round-trip min/avg/max/std-dev = 1.963/2.028/2.137/0.062 ms

The output shows that:

• Device A sends five ICMP packets to Device C and Device A receives five ICMP packets.

• No ICMP packet is lost.

• The route is reachable.

# Get detailed information about routes from Device A to Device C.

<DeviceA> ping -r 1.1.2.2

Ping 1.1.2.2 (1.1.2.2): 56 data bytes, press CTRL_C to break

56 bytes from 1.1.2.2: icmp_seq=0 ttl=254 time=4.685 ms

RR: 1.1.2.1

1.1.2.2

1.1.1.2

1.1.1.1

56 bytes from 1.1.2.2: icmp_seq=1 ttl=254 time=4.834 ms (same route)

56 bytes from 1.1.2.2: icmp_seq=2 ttl=254 time=4.770 ms (same route)

56 bytes from 1.1.2.2: icmp_seq=3 ttl=254 time=4.812 ms (same route)

56 bytes from 1.1.2.2: icmp_seq=4 ttl=254 time=4.704 ms (same route)

--- Ping statistics for 1.1.2.2 ---

5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss

round-trip min/avg/max/std-dev = 4.685/4.761/4.834/0.058 ms

The test procedure of ping –r is as shown in Figure 1:

3

1. The source device (Device A) sends an ICMP echo request to the destination device (Device C) with

the RR option blank.

2. The intermediate device (Device B) adds the IP address of its outbound interface (1.1.2.1) to the RR

option of the ICMP echo request, and forwards the packet.

3. Upon receiving the request, the destination device copies the RR option in the request and adds the

IP address of its outbound interface (1.1.2.2) to the RR option. Then the destination device sends

an ICMP echo reply.

4. The intermediate device adds the IP address of its outbound interface (1.1.1.2) to the RR option in

the ICMP echo reply, and then forwards the reply.

5. Upon receiving the reply, the source device adds the IP address of its inbound interface (1.1.1.1)

to the RR option. The detailed information of routes from Device A to Device C is formatted as:

1.1.1.1 <-> {1.1.1.2; 1.1.2.1} <-> 1.1.2.2.

Tracert

Tracert (also called Traceroute) enables retrieval of the IP addresses of Layer 3 devices in the path to a

destination. In the event of network failure, use tracert to test network connectivity and identify failed

nodes.

Figure 2 Tracert operation

Tracert uses received ICMP error messages to get the IP addresses of devices. Tracert works as shown

in Figure 2:

1. T

he source device sends a UDP packet with a TTL value of 1 to the destination device. The

destination UDP port is not used by any application on the destination device.

2. The first hop (Device B, the first Layer 3 device that receives the packet) responds by sending a

TTL-expired ICMP error message to the source, with its IP address (1.1.1.2) encapsulated. This

way, the source device can get the address of the first Layer 3 device (1.1.1.2).

3. The source device sends a packet with a TTL value of 2 to the destination device.

4. The second hop (Device C) responds with a TTL-expired ICMP error message, which gives the

source device the address of the second Layer 3 device (1.1.2.2).

5. This process continues until a packet sent by the source device reaches the ultimate destination

device. Because no application uses the destination port specified in the packet, the destination

device responds with a port-unreachable ICMP message to the source device, with its IP address

encapsulated. This way, the source device gets the IP address of the destination device (1.1.3.2).

Device A Device B Device DDevice C

1.1.1.1/24

1.1.1.2/24

Hop Lmit=1

TTL exceeded

1.1.2.1/24

1.1.3.1/24

1.1.2.2/24 1.1.3.2/24

Hop Lmit=2

TTL exceeded

UDP port unreachable

Hop Lmit=n

4

6. The source device thinks that:

{ The packet has reached the destination device after receiving the port-unreachable ICMP

message.

{ T h e p a t h t o t h e d e s t i n a t i o n d evi c e i s 1.1.1. 2 t o 1.1.2. 2 t o 1.1.3. 2.

Prerequisites

Before you use a tracert command, perform the tasks in this section.

For an IPv4 network:

• Enable sending of ICMP timeout packets on the intermediate devices (devices between the source

and destination devices). If the intermediate devices are H3C devices, execute the ip ttl-expires

enable command on the devices. For more information about this command, see Layer 3—IP

Services Command Reference.

• Enable sending of ICMP destination unreachable packets on the destination device. If the

destination device is an H3C device, execute the ip unreachables enable command. For more

information about this command, see Layer 3—IP Services Command Reference.

For an IPv6 network:

• Enable sending of ICMPv6 timeout packets on the intermediate devices (devices between the

source and destination devices). If the intermediate devices are H3C devices, execute the ipv6

hoplimit-expires enable command on the devices. For more information about this command, see

Layer 3—IP Services Command Reference.

• Enable sending of ICMPv6 destination unreachable packets on the destination device. If the

destination device is an H3C device, execute the ipv6 unreachables enable command. For more

information about this command, see Layer 3—IP Services Command Reference.

Using a tracert command to identify failed or all nodes in a

path

Execute tracert commands in any view.

Task Command

Display the routes from source to

destination.

• For IPv4 networks:

tracert [ -a source-ip | -f first-ttl | -m max-ttl | -p port | -q packet-number

| -t tos { -topology topo-name | -vpn-instance vpn-instance-name

[ -resolve-as { global | none | vpn } ] } | -w timeout ] * host

• For IPv6 networks:

tracert ipv6 [ -f first-hop| -m max-hops | -p port | -q packet-number | -t

traffic-class | -vpn-instance vpn-instance-name [ -resolve-as { global |

none | vpn } ] | -w timeout ] * host

For more information about the tracert mpls ipv4 command, see MPLS Command Reference.

5

Tracert example

Network requirements

As shown in Figure 3, Device A failed to Telnet to Device C.

Test the network connectivity between Device A and Device C. If they cannot reach each other, locate the

failed nodes in the network.

Figure 3 Network diagram

Configuration procedure

1. Configure the IP addresses for devices as shown in Figure 3.

2. Configure a static route on Device A.

<DeviceA> system-view

[DeviceA] ip route-static 0.0.0.0 0.0.0.0 1.1.1.2

[DeviceA] quit

3. Use the ping command to test connectivity between Device A and Device C.

<DeviceA> ping 1.1.2.2

Ping 1.1.2.2(1.1.2.2): 56 -data bytes, press CTRL_C to break

Request time out

--- Ping statistics for 1.1.2.2 ---

5 packet(s) transmitted,0 packet(s) received,100.0% packet loss

The output shows that Device A and Device C cannot reach each other.

4. Use the tracert command to identify failed nodes:

# Enable sending of ICMP timeout packets on Device B.

<DeviceB> system-view

[DeviceB] ip ttl-expires enable

# Enable sending of ICMP destination unreachable packets on Device C.

<DeviceC> system-view

[DeviceC] ip unreachables enable

# Execute the tracert command on Device A.

<DeviceA> tracert 1.1.2.2

traceroute to 1.1.2.2 (1.1.2.2) 30 hops at most,40 bytes each packet, press CTRL_C

to break

1 1.1.1.2 (1.1.1.2) 1 ms 2 ms 1 ms

2 * * *

3 * * *

4 * * *

Device A Device B Device C

1.1.1.1/24 1.1.1.2/24 1.1.2.1/24

1.1.2.2/24

6

5

The output shows that Device A can reach Device B but cannot reach Device C. An error has

occurred on the connection between Device B and Device C.

5. Use the debugging ip icmp command on Device A and Device C to verify that they can send and

receive the specific ICMP packets.

Or use the display ip routing-table command to verify that there is a route from Device A to Device

C.

System debugging

The device supports debugging for the majority of protocols and features, and provides debugging

information to help users diagnose errors.

Debugging information control switches

The following switches control the display of debugging information:

• Module debugging switch—Controls whether to generate the module-specific debugging

information.

• Screen output switch—Controls whether to display the debugging information on a certain screen.

Use terminal monitor and terminal logging level commands to turn on the screen output switch. For

more information about these two commands, see Network Management and Monitoring

Command Reference.

As shown in Figure 4, a

ssume that the device can provide debugging for the three modules 1, 2, and 3.

The debugging information can be output on a terminal only when both the module debugging switch

and the screen output switch are turned on.

Debugging information is typically displayed on a console. You can also send debugging information to

other destinations. For more information, see "Configuring the information center."

Figure 4 Relationship between the module and screen output switch

Page is loading ...

H3C R6600, SR6600-X Configuration manual

Related papers

Other documents