H3C R6600 Configuration manual

Category
Software
Type
Configuration manual

This manual is also suitable for

H3C SR6600/SR6600-X Routers
Network Management and Monitoring
Configuration Guide(V7)
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Software version: SR6602X-CMW710-R7103
SR6600X-CMW710-R7103-RSE3
SR6600-CMW710-R7103-RPE3
Document version: 20150715-6PW100
Copyright © 2007-2015, Hangzhou H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior
written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , H3CS, H3CIE, H3CNE, Aolynk, , H
3
Care, , IRF, NetPilot, Netflow,
SecEngine, SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of
Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their respective owners
Notice
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute the warranty of any kind, express or implied.
Preface
The H3C SR6600/SR6600-X documentation set includes 14 configuration guides, which describe the
software features for the H3C SR6600/SR6600-X Routers and guide you through the software
configuration procedures. These configuration guides also provide configuration examples to help you
apply software features to different network scenarios.
The Network Management and Monitoring Configuration Guide describes technical principles and
configurations applied during the management and maintenance process of routers and networks.
This preface includes:
• Audience
• Conventions
• About the H3C SR6600/SR6600-X documentation set
• Obtaining documentation
• Technical support
• Documentation feedback
Audience
This documentation is intended for:
• Network planners
• Field technical support and servicing engineers
• Network administrators working with the routers
Conventions
This section describes the conventions used in this documentation set.
Command conventions
Convention Descri
p
tion
Boldface Bold text represents commands and keywords that you enter literally as shown.
Italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars, from
which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select at least one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n>
The argument or keyword and argument combination before the ampersand (&) sign can
be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.
GUI conventions
Convention Descri
p
tion
Boldface
Window names, button names, field names, and menu items are in Boldface. For
example, the New User window appears; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create > Folder.
Symbols
Convention Descri
p
tion
WARNING
An alert that calls attention to important information that if not understood or followed can
result in personal injury.
CAUTION
An alert that calls attention to important information that if not understood or followed can
result in data loss, data corruption, or damage to hardware or software.
IMPORTANT
An alert that calls attention to essential information.
NOTE
An alert that contains additional or supplementary information.
TIP
An alert that provides helpful information.
Network topology icons
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports
Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access controller
engine on a unified wired-WLAN switch.
Represents an access point.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security gateway, or
load balancing device.




Represents a security card, such as a firewall, load balancing, NetStream, SSL VPN, IPS,
or ACG card.
Port numbering in examples
The port numbers in this document are for illustration only and might be unavailable on your device.
About the H3C SR6600/SR6600-X documentation
set
The H3C SR6600/SR6600-X documentation set includes:
Cate
g
or
y
Documents
Pur
p
oses
Product description and
specifications
Marketing brochures Describe product specifications and benefits.
Technology white papers
Provide an in-depth description of software features
and technologies.
Card datasheets
Describe card specifications, features, and
standards.
Hardware specifications
and installation
Compliance and safety
manual
Provides regulatory information and the safety
instructions that must be followed during installation.
Installation guide
Provides a complete guide to hardware installation
and hardware specifications.
Card manuals Provide the hardware specifications of cards.
H3C N68 Cabinet
Installation and Remodel
Introduction
Guides you through installing and remodeling H3C
N68 cabinets.
Software configuration
Configuration guides
Describe software features and configuration
procedures.
Command references
Provide a quick reference to all available
commands.
Operations and
maintenance
H3C SR6602 Release
notes
Provide information about the product release,
including the version history, hardware and software
compatibility matrix, version upgrade information,
technical support information, and software
upgrading.
H3C SR6608 Release
notes
Obtaining documentation
You can access the most up-to-date H3C product documentation on the World Wide Web
at http://www.h3c.com
.
Click the links on the top navigation bar to obtain different categories of product documentation:
[Technical Support & Documents > Technical Documents]
– Provides hardware installation, software
upgrading, and software feature configuration and maintenance documentation.
[Products & Solutions]
– Provides information about products and technologies, as well as solutions.
[Technical Support & Documents > Software Download] – Provides the documentation released with the
software version.
Technical support
http://www.h3c.com
Documentation feedback
You can e-mail your comments about product documentation to info@h3c.com.
We appreciate your comments.
i
Contents
Using ping, tracert, and system debugging ··············································································································· 1
Ping ····················································································································································································· 1
Using a ping command to test network connectivity ···························································································· 1
Ping example ···························································································································································· 1
Tracert ················································································································································································ 3
Prerequisites ······························································································································································ 4
Using a tracert command to identify failed or all nodes in a path ····································································· 4
Tracert example ························································································································································ 5
System debugging ···························································································································································· 6
Debugging information control switches················································································································ 6
Debugging a feature module ·································································································································· 7
Configuring NQA ························································································································································ 8
Overview ············································································································································································ 8
NQA operation ························································································································································ 8
Collaboration ···························································································································································· 9
Threshold monitoring ············································································································································ 10
NQA configuration task list ·········································································································································· 10
Configuring the NQA server ········································································································································ 10
Enabling the NQA client ··············································································································································· 11
Configuring NQA operations on the NQA client ······································································································ 11
NQA operation configuration task list ················································································································ 11
Configuring the ICMP echo operation ················································································································ 12
Configuring the DHCP operation························································································································· 13
Configuring the DNS operation ··························································································································· 14
Configuring the FTP operation ····························································································································· 14
Configuring the HTTP operation ·························································································································· 15
Configuring the UDP jitter operation ··················································································································· 16
Configuring the SNMP operation ························································································································ 18
Configuring the TCP operation ···························································································································· 18
Configuring the UDP echo operation ·················································································································· 19
Configuring the UDP tracert operation ··············································································································· 20
Configuring the voice operation ·························································································································· 22
Configuring the DLSw operation ························································································································· 24
Configuring the path jitter operation ··················································································································· 24
Configuring optional parameters for the NQA operation ················································································ 25
Configuring the collaboration function ··············································································································· 26
Configuring threshold monitoring ························································································································ 27
Configuring the NQA statistics collection function ···························································································· 30
Configuring the saving of NQA history records ································································································ 30
Scheduling the NQA operation on the NQA client ·························································································· 31
Configuring NQA templates on the NQA client ········································································································ 31
Configuring the ICMP template ··························································································································· 32
Configuring the DNS template ····························································································································· 32
Configuring the TCP template ······························································································································ 33
Configuring the HTTP template ···························································································································· 34
Configuring the FTP template ······························································································································· 35
Configuring optional parameters for the NQA template ·················································································· 36
Displaying and maintaining NQA ······························································································································· 37
ii
NQA configuration examples ······································································································································ 38
ICMP echo operation configuration example ···································································································· 38
DHCP operation configuration example ············································································································· 40
DNS operation configuration example ··············································································································· 41
FTP operation configuration example ················································································································· 42
HTTP operation configuration example ··············································································································· 43
UDP jitter operation configuration example ······································································································· 44
SNMP operation configuration example ············································································································ 47
TCP operation configuration example ················································································································ 48
UDP echo operation configuration example ······································································································ 49
UDP tracert operation configuration example ···································································································· 51
Voice operation configuration example ············································································································· 52
DLSw operation configuration example ·············································································································· 55
Path jitter operation configuration example ······································································································· 56
NQA collaboration configuration example········································································································ 57
ICMP template configuration example ················································································································ 60
DNS template configuration example ················································································································· 61
TCP template configuration example ·················································································································· 62
HTTP template configuration example ················································································································· 62
FTP template configuration example ··················································································································· 63
Configuring NTP ························································································································································ 65
Overview ········································································································································································· 65
How NTP works ····················································································································································· 65
NTP architecture ···················································································································································· 66
Association modes ················································································································································ 67
NTP security ··························································································································································· 69
NTP for MPLS L3VPNs ·········································································································································· 70
Protocols and standards ······································································································································· 71
Configuration restrictions and guidelines ···················································································································· 71
Configuration task list ···················································································································································· 71
Enabling the NTP service ·············································································································································· 72
Configuring NTP association modes ···························································································································· 72
Configuring NTP in client/server mode ·············································································································· 72
Configuring NTP in symmetric active/passive mode ························································································ 73
Configuring NTP in broadcast mode ·················································································································· 74
Configuring NTP in multicast mode ····················································································································· 75
Configuring access control rights ································································································································· 76
Configuring NTP authentication ··································································································································· 76
Configuring NTP authentication in client/server mode ····················································································· 76
Configuring NTP authentication in symmetric active/passive mode ······························································· 78
Configuring NTP authentication in broadcast mode ························································································· 80
Configuring NTP authentication in multicast mode ··························································································· 82
Configuring NTP optional parameters ························································································································· 84
Specifying the source interface for NTP messages ···························································································· 85
Disabling an interface from processing NTP messages ···················································································· 85
Configuring the maximum number of dynamic associations ············································································ 86
Configuring a DSCP value for NTP packets ······································································································· 86
Configuring the local clock as a reference source ····································································································· 86
Displaying and maintaining NTP ································································································································· 87
NTP client/server mode configuration example ········································································································· 87
IPv6 NTP client/server mode configuration example ································································································· 88
NTP symmetric active/passive mode configuration example ··················································································· 90
IPv6 NTP symmetric active/passive mode configuration example ··········································································· 91
NTP broadcast mode configuration example ············································································································· 92
iii
NTP multicast mode configuration example ················································································································ 94
IPv6 NTP multicast mode configuration example ······································································································· 97
Configuration example for NTP client/server mode with authentication ······························································· 100
Configuration example for NTP broadcast mode with authentication ··································································· 101
Configuration example for MPLS VPN time synchronization in client/server mode ············································ 104
Configuration example for MPLS VPN time synchronization in symmetric active/passive mode ······················· 106
Configuring SNTP ··················································································································································· 108
Configuration restrictions and guidelines ·················································································································· 108
Configuration task list ·················································································································································· 108
Enabling the SNTP service ·········································································································································· 108
Specifying an NTP server for the device ··················································································································· 109
Configuring SNTP authentication ······························································································································· 109
Displaying and maintaining SNTP ····························································································································· 110
SNTP configuration example ······································································································································ 110
Configuring PTP ······················································································································································· 112
Overview ······································································································································································· 112
Basic concepts ····················································································································································· 112
Synchronization mechanism ······························································································································· 114
Protocols and standards ····································································································································· 116
Feature and hardware compatibility ·························································································································· 117
Configuring clock nodes ············································································································································· 117
Configuration task list ········································································································································· 117
Specifying a PTP standard ·································································································································· 119
Specifying a clock node type ····························································································································· 119
Specifying a PTP domain ···································································································································· 120
Configuring an OC to operate only as a member clock ················································································ 120
Configuring ToD input or output ························································································································ 120
Configuring ToD clock parameters ···················································································································· 121
Configuring a priority for a clock ······················································································································ 121
Configuring the role of a PTP port ····················································································································· 122
Configuring the mode for carrying timestamps ································································································ 122
Specifying a delay measurement mechanism for a BC or an OC ································································· 123
Configuring the port type for a TC+OC ··········································································································· 123
Configuring the interval for sending announce messages ·············································································· 124
Specifying the number of announcement intervals before the receiving node stops receiving announce
messages ······························································································································································ 124

Configuring the interval for sending Pdelay_Req messages ··········································································· 125
Configuring the interval for sending Sync messages ······················································································ 125
Configuring the minimum interval for sending Delay_Req messages ···························································· 125
Configuring the MAC address for non-pdelay messages ··············································································· 126
Specifying the protocol for encapsulating PTP messages as UDP (IPv4) ······················································· 126
Configuring the source IP address for multicast PTP message transmission over UDP (IPv4) ······················ 126
Configuring the destination IP address for unicast PTP message transmission over UDP (IPv4) ················· 127
Configuring the delay correction value············································································································· 127
Configuring the cumulative offset between the UTC and TAI ········································································· 128
Configuring the correction date of the UTC ····································································································· 128
Setting a DSCP value for PTP messages transmitted over UDP (IPv4) ···························································· 128
Specifying the system time source as PTP ········································································································· 129
Enabling PTP on a port ······································································································································· 129
Displaying and maintaining PTP ································································································································· 129
PTP configuration example (IEEE 1588 version 2, IEEE 802.3/Ethernet encapsulation) ···································· 130
PTP configuration example (IEEE 1588 version 2, multicast transmission) ···························································· 132
PTP configuration example (IEEE 1588 version 2, unicast transmission) ······························································· 135
iv
PTP configuration example (IEEE 802.1AS) ·············································································································· 138
Configuring network synchronization ···················································································································· 141
Overview ······································································································································································· 141
Clock sources ······················································································································································· 141
SSM quality levels ··············································································································································· 141
Clock source priority ··········································································································································· 142
Clock reference selection ···································································································································· 142
Clock mode on a port ········································································································································· 142
Feature and hardware compatibility ·························································································································· 143
Network synchronization configuration task list ······································································································· 143
Configuring clock reference selection ························································································································ 144
Setting the Sa bit for the SSM of BITS clocks ············································································································ 144
Configuring the timing direction of a BITS clock ······································································································ 145
Setting the frequency of a BITS clock ························································································································· 145
Specifying a line clock input port ······························································································································· 146
Configuring automatic reference selection parameters ··························································································· 146
Configuring the method to set the SSM quality level of a clock source ························································ 146
Specifying an SSM quality level for a clock source ························································································ 147
Controlling the use of SSM in automatic reference selection ········································································· 147
Setting the priority of a clock source ················································································································· 148
Enabling the reference manually specified on a non-default MDC ········································································ 148
Displaying and maintaining network clock monitoring module configuration ······················································ 149
Network synchronization configuration example ····································································································· 150
Network requirements ········································································································································· 150
Configuration procedure ···································································································································· 150
Verifying the configuration ································································································································· 150
Configuring synchronous Ethernet ························································································································· 151
Overview ······································································································································································· 151
Quality levels of clocks ······································································································································· 151
Clock reference selection and timing distribution ···························································································· 151
Input QL updating on SyncE ports ····················································································································· 152
Protocols and standards ····································································································································· 152
Feature and hardware compatibility ·························································································································· 152
Configuring SyncE on an Ethernet interface ············································································································· 152
Setting the clock mode on a copper SyncE GE port ································································································ 153
Displaying and maintaining SyncE ···························································································································· 153
SyncE configuration example ····································································································································· 153
Network requirements ········································································································································· 153
Configuration procedure ···································································································································· 153
Verifying the configuration ································································································································· 154
Configuring SNMP ·················································································································································· 155
Overview ······································································································································································· 155
SNMP framework ················································································································································ 155
MIB and view-based MIB access control ·········································································································· 155
SNMP operations ················································································································································ 156
Protocol versions ·················································································································································· 156
Access control modes ········································································································································· 156
FIPS compliance ··························································································································································· 157
Security strength ··························································································································································· 157
Configuring SNMP basic parameters ························································································································ 157
Configuring SNMPv1 or SNMPv2c basic parameters ···················································································· 157
Configuring SNMPv3 basic parameters ··········································································································· 159
Configuring SNMP logging ········································································································································ 163
v
Configuring SNMP notifications ································································································································· 164
Enabling SNMP notifications ····························································································································· 164
Configuring the SNMP agent to send notifications to a host ········································································· 164
Displaying the SNMP settings ····································································································································· 166
SNMPv1/SNMPv2c configuration example ············································································································· 167
Network requirements ········································································································································· 167
Configuration procedure ···································································································································· 167
Verifying the configuration ································································································································· 168
SNMPv3 configuration example ································································································································ 168
Network requirements ········································································································································· 168
Configuration procedure ···································································································································· 168
Verifying the configuration ································································································································· 170
Configuring RMON ················································································································································ 172
Overview ······································································································································································· 172
RMON groups ····················································································································································· 172
Sample types for the alarm group and the private alarm group ··································································· 174
Protocols and standards ····································································································································· 174
Configuring the RMON statistics function ················································································································· 174
Creating an RMON Ethernet statistics entry ····································································································· 174
Creating an RMON history control entry·········································································································· 175
Configuring the RMON alarm function ····················································································································· 175
Displaying and maintaining RMON settings ············································································································ 176
Ethernet statistics group configuration example ······································································································· 177
Network requirements ········································································································································· 177
Configuration procedure ···································································································································· 177
History group configuration example ························································································································ 178
Network requirements ········································································································································· 178
Configuration procedure ···································································································································· 178
Alarm function configuration example ······················································································································· 179
Network requirements ········································································································································· 179
Configuration procedure ···································································································································· 180
Configuring EAA ····················································································································································· 182
Overview ······································································································································································· 182
EAA framework ··················································································································································· 182
Elements in a monitor policy ······························································································································ 183
EAA environment variables ································································································································ 184
Configuring a user-defined EAA environment variable ··························································································· 185
Configuring a monitor policy ······································································································································ 186
Configuration restrictions and guidelines ········································································································· 186
Configuring a monitor policy from the CLI ······································································································· 186
Configuring a monitor policy by using Tcl ······································································································· 188
Suspending monitor policies ······································································································································· 189
Displaying and maintaining EAA settings ················································································································· 190
EAA configuration examples ······································································································································ 190
CLI-defined policy configuration example ········································································································ 190
CLI-defined policy with EAA environment variables configuration example ················································ 191
Tcl-defined policy configuration example ········································································································· 192
Monitoring and maintaining processes ················································································································· 194
Displaying and maintaining processes ······················································································································ 194
Displaying and maintaining user processes ·············································································································· 195
Monitoring kernel threads ··········································································································································· 196
Configuring kernel thread deadloop detection ································································································ 196
Configuring kernel thread starvation detection ································································································ 197
vi
Displaying and maintaining kernel threads ······································································································ 198
Configuring samplers ·············································································································································· 200
Creating a sampler ······················································································································································ 200
Displaying and maintaining a sampler ····················································································································· 200
Sampler configuration example ································································································································· 200
Network requirements ········································································································································· 200
Configuration procedure ···································································································································· 201
Verifying the configuration ································································································································· 201
Configuring port mirroring ····································································································································· 202
Overview ······································································································································································· 202
Terminology ························································································································································· 202
Port mirroring implementation ···························································································································· 203
Configuring local port mirroring ································································································································ 203
Local port mirroring configuration task list ······································································································· 203
Creating a local mirroring group ······················································································································ 204
Configuring source ports for the local mirroring group ·················································································· 204
Configuring the monitor port for the local mirroring group ············································································ 205
Displaying and maintaining port mirroring ··············································································································· 205
Local port mirroring configuration example ·············································································································· 206
Network requirements ········································································································································· 206
Configuration procedure ···································································································································· 206
Verifying the configuration ································································································································· 206
Configuring NetStream ··········································································································································· 207
Overview ······································································································································································· 207
NetStream architecture ······································································································································· 207
Flow aging ··························································································································································· 208
NetStream data export ······································································································································· 208
NetStream filtering and sampling ······················································································································ 211
NetStream configuration task list ································································································································ 211
Enabling NetStream ····················································································································································· 212
Configuring NetStream filtering ································································································································· 213
Configuring NetStream sampling ······························································································································· 213
Configuring attributes of the NetStream data export ······························································································· 213
Configuring the NetStream data export format ······························································································· 213
Configuring the refresh rate for NetStream version 9 templates ···································································· 215
Configuring MPLS-aware NetStream ················································································································ 215
Configuring NetStream flow aging ···························································································································· 215
Flow aging methods ············································································································································ 215
Configuration procedure ···································································································································· 216
Configuring the NetStream data export ···················································································································· 217
Configuring the NetStream traditional data export ························································································· 217
Configuring the NetStream aggregation data export ····················································································· 217
Displaying and maintaining NetStream ···················································································································· 218
NetStream configuration examples ···························································································································· 219
NetStream traditional data export configuration example ············································································· 219
NetStream aggregation data export configuration example ········································································· 220
Configuring IPv6 NetStream ·································································································································· 225
Overview ······································································································································································· 225
IPv6 NetStream architecture ······························································································································· 225
Flow aging ··························································································································································· 226
IPv6 NetStream data export ······························································································································· 226
IPv6 NetStream filtering and sampling ············································································································· 227
vii
IPv6 NetStream configuration task list ······················································································································· 228
Enabling IPv6 NetStream ············································································································································ 229
Configuring IPv6 NetStream filtering ························································································································· 229
Configuring IPv6 NetStream sampling ······················································································································ 230
Configuring attributes of the IPv6 NetStream data export ······················································································ 230
Configuring the IPv6 NetStream data export format ······················································································· 230
Configuring the refresh rate for IPv6 NetStream version 9 templates ··························································· 231
Configuring MPLS-aware NetStream ················································································································ 232
Configuring IPv6 NetStream flow aging ··················································································································· 232
Flow aging methods ············································································································································ 232
Configuration procedure ···································································································································· 233
Configuring the IPv6 NetStream data export ············································································································ 233
Configuring the IPv6 NetStream traditional data export ················································································ 233
Configuring the IPv6 NetStream aggregation data export············································································· 234
Displaying and maintaining IPv6 NetStream ············································································································ 235
IPv6 NetStream configuration examples ··················································································································· 236
IPv6 NetStream traditional data export configuration example ····································································· 236
IPv6 NetStream aggregation data export configuration example ································································· 237
Configuring the information center ························································································································ 241
Overview ······································································································································································· 241
Log types ······························································································································································ 241
Log levels ······························································································································································ 241
Log destinations ··················································································································································· 242
Default output rules for logs ································································································································ 242
Default output rules for diagnostic logs ············································································································· 242
Default output rules for security logs ················································································································· 243
Default output rules for hidden logs··················································································································· 243
Default output rules for trace logs ······················································································································ 243
Default output rules for custom logs ··················································································································· 243
Log formats ··························································································································································· 244
FIPS compliance ··························································································································································· 246
Information center configuration task list ··················································································································· 246
Outputting logs to the console ···································································································································· 247
Outputting logs to the monitor terminal ····················································································································· 247
Outputting logs to a log host ······································································································································ 248
Outputting logs to the log buffer ································································································································ 249
Saving logs to a log file ·············································································································································· 249
Managing security logs ··············································································································································· 250
Saving security logs to the security log file ······································································································· 250
Managing the security log file ··························································································································· 251
Saving diagnostic logs to a diagnostic log file ········································································································· 251
Configuring the maximum size of the trace log file ································································································· 252
Outputting custom NAT444 logs to a log host ········································································································· 253
Enabling synchronous information output ················································································································· 253
Enabling duplicate log suppression ··························································································································· 254
Disabling an interface from generating link up or link down logs ········································································· 254
Displaying and maintaining information center ······································································································· 255
Information center configuration examples ··············································································································· 255
Configuration example for outputting logs to the console ·············································································· 255
Configuration example for outputting logs to a UNIX log host ······································································ 256
Configuration example for outputting logs to a Linux log host ······································································· 257
Configuring flow log ··············································································································································· 259
Flow log configuration task list ··································································································································· 261
viii
Configuration prerequisites ········································································································································· 261
Configuring the flow log version ································································································································ 261
Specifying a source IP address for flow log packets ································································································ 261
Enabling load balancing for flow log entries ············································································································ 262
Configuring the timestamp of flow logs ····················································································································· 262
Specifying a flow log export destination ··················································································································· 263
Specifying a log host as the flow log export destination ················································································ 263
Specifying the information center as the flow log export destination ···························································· 263
Displaying and maintaining flow log ························································································································· 263
Flow log configuration example ································································································································· 264
Network requirements ········································································································································· 264
Configuration procedure ···································································································································· 264
Verifying the configuration ································································································································· 264
Index ········································································································································································ 266
1
Using ping, tracert, and system debugging
This chapter covers ping, tracert, and information about debugging the system.
Ping
Use the ping utility to determine if an address is reachable.
Ping sends ICMP echo requests (ECHO-REQUEST) to the destination device. Upon receiving the requests,
the destination device responds with ICMP echo replies (ECHO-REPLY) to the source device. The source
device outputs statistics about the ping operation, including the number of packets sent, number of echo
replies received, and the round-trip time. You can measure the network performance by analyzing these
statistics.
Using a ping command to test network connectivity
Execute ping commands in any view.
Task Command
Determine if an address in an IP network is
reachable.
When you configure the ping command for a low-speed
network, set a larger value for the timeout timer (indicated by the
-t keyword in the command).
• For IPv4 networks:
ping [ ip ] [ -a source-ip | -c count | -f | -h ttl | -i
interface-type interface-number | -m interval | -n | -p pad |
-q | -r | -s packet-size | -t timeout | -tos tos | -v | { -topology
topo-name | -vpn-instance vpn-instance-name } ] * host
• For IPv6 networks:
ping ipv6 [ -a source-ipv6 | -c count | -i interface-type
interface-number | -m interval |-q|-s packet-size | -t timeout
| -v | -tc traffic-class | -vpn-instance vpn-instance-name ] *
host
For more information about the ping mpls command, see MPLS Command Reference.
Ping example
Network requirements
As shown in Figure 1, determine if Device A and Device C can reach each other. If they can reach each
other, get detailed information about routes from Device A to Device C.
2
Figure 1 Network diagram
Configuration procedure
# Use the ping command on Device A to test connectivity to Device C.
Ping 1.1.2.2 (1.1.2.2): 56 data bytes, press CTRL_C to break
56 bytes from 1.1.2.2: icmp_seq=0 ttl=254 time=2.137 ms
56 bytes from 1.1.2.2: icmp_seq=1 ttl=254 time=2.051 ms
56 bytes from 1.1.2.2: icmp_seq=2 ttl=254 time=1.996 ms
56 bytes from 1.1.2.2: icmp_seq=3 ttl=254 time=1.963 ms
56 bytes from 1.1.2.2: icmp_seq=4 ttl=254 time=1.991 ms
--- Ping statistics for 1.1.2.2 ---
5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss
round-trip min/avg/max/std-dev = 1.963/2.028/2.137/0.062 ms
The output shows that:
• Device A sends five ICMP packets to Device C and Device A receives five ICMP packets.
• No ICMP packet is lost.
• The route is reachable.
# Get detailed information about routes from Device A to Device C.
<DeviceA> ping -r 1.1.2.2
Ping 1.1.2.2 (1.1.2.2): 56 data bytes, press CTRL_C to break
56 bytes from 1.1.2.2: icmp_seq=0 ttl=254 time=4.685 ms
RR: 1.1.2.1
1.1.2.2
1.1.1.2
1.1.1.1
56 bytes from 1.1.2.2: icmp_seq=1 ttl=254 time=4.834 ms (same route)
56 bytes from 1.1.2.2: icmp_seq=2 ttl=254 time=4.770 ms (same route)
56 bytes from 1.1.2.2: icmp_seq=3 ttl=254 time=4.812 ms (same route)
56 bytes from 1.1.2.2: icmp_seq=4 ttl=254 time=4.704 ms (same route)
--- Ping statistics for 1.1.2.2 ---
5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss
round-trip min/avg/max/std-dev = 4.685/4.761/4.834/0.058 ms
The test procedure of ping –r is as shown in Figure 1:
3
1. The source device (Device A) sends an ICMP echo request to the destination device (Device C) with
the RR option blank.
2. The intermediate device (Device B) adds the IP address of its outbound interface (1.1.2.1) to the RR
option of the ICMP echo request, and forwards the packet.
3. Upon receiving the request, the destination device copies the RR option in the request and adds the
IP address of its outbound interface (1.1.2.2) to the RR option. Then the destination device sends
an ICMP echo reply.
4. The intermediate device adds the IP address of its outbound interface (1.1.1.2) to the RR option in
the ICMP echo reply, and then forwards the reply.
5. Upon receiving the reply, the source device adds the IP address of its inbound interface (1.1.1.1)
to the RR option. The detailed information of routes from Device A to Device C is formatted as:
1.1.1.1 <-> {1.1.1.2; 1.1.2.1} <-> 1.1.2.2.
Tracert
Tracert (also called Traceroute) enables retrieval of the IP addresses of Layer 3 devices in the path to a
destination. In the event of network failure, use tracert to test network connectivity and identify failed
nodes.
Figure 2 Tracert operation
Tracert uses received ICMP error messages to get the IP addresses of devices. Tracert works as shown
in Figure 2:
1. T
he source device sends a UDP packet with a TTL value of 1 to the destination device. The
destination UDP port is not used by any application on the destination device.
2. The first hop (Device B, the first Layer 3 device that receives the packet) responds by sending a
TTL-expired ICMP error message to the source, with its IP address (1.1.1.2) encapsulated. This
way, the source device can get the address of the first Layer 3 device (1.1.1.2).
3. The source device sends a packet with a TTL value of 2 to the destination device.
4. The second hop (Device C) responds with a TTL-expired ICMP error message, which gives the
source device the address of the second Layer 3 device (1.1.2.2).
5. This process continues until a packet sent by the source device reaches the ultimate destination
device. Because no application uses the destination port specified in the packet, the destination
device responds with a port-unreachable ICMP message to the source device, with its IP address
encapsulated. This way, the source device gets the IP address of the destination device (1.1.3.2).
Device A Device B Device DDevice C
1.1.1.1/24
1.1.1.2/24
Hop Lmit=1
TTL exceeded
1.1.2.1/24
1.1.3.1/24
1.1.2.2/24 1.1.3.2/24
Hop Lmit=2
TTL exceeded
UDP port unreachable
Hop Lmit=n
4
6. The source device thinks that:
{ The packet has reached the destination device after receiving the port-unreachable ICMP
message.
{ T h e p a t h t o t h e d e s t i n a t i o n d evi c e i s 1.1.1. 2 t o 1.1.2. 2 t o 1.1.3. 2.
Prerequisites
Before you use a tracert command, perform the tasks in this section.
For an IPv4 network:
• Enable sending of ICMP timeout packets on the intermediate devices (devices between the source
and destination devices). If the intermediate devices are H3C devices, execute the ip ttl-expires
enable command on the devices. For more information about this command, see Layer 3—IP
Services Command Reference.
• Enable sending of ICMP destination unreachable packets on the destination device. If the
destination device is an H3C device, execute the ip unreachables enable command. For more
information about this command, see Layer 3—IP Services Command Reference.
For an IPv6 network:
• Enable sending of ICMPv6 timeout packets on the intermediate devices (devices between the
source and destination devices). If the intermediate devices are H3C devices, execute the ipv6
hoplimit-expires enable command on the devices. For more information about this command, see
Layer 3—IP Services Command Reference.
• Enable sending of ICMPv6 destination unreachable packets on the destination device. If the
destination device is an H3C device, execute the ipv6 unreachables enable command. For more
information about this command, see Layer 3—IP Services Command Reference.
Using a tracert command to identify failed or all nodes in a
path
Execute tracert commands in any view.
Task Command
Display the routes from source to
destination.
• For IPv4 networks:
tracert [ -a source-ip | -f first-ttl | -m max-ttl | -p port | -q packet-number
| -t tos { -topology topo-name | -vpn-instance vpn-instance-name
[ -resolve-as { global | none | vpn } ] } | -w timeout ] * host
• For IPv6 networks:
tracert ipv6 [ -f first-hop| -m max-hops | -p port | -q packet-number | -t
traffic-class | -vpn-instance vpn-instance-name [ -resolve-as { global |
none | vpn } ] | -w timeout ] * host
For more information about the tracert mpls ipv4 command, see MPLS Command Reference.
5
Tracert example
Network requirements
As shown in Figure 3, Device A failed to Telnet to Device C.
Test the network connectivity between Device A and Device C. If they cannot reach each other, locate the
failed nodes in the network.
Figure 3 Network diagram
Configuration procedure
1. Configure the IP addresses for devices as shown in Figure 3.
2. Configure a static route on Device A.
<DeviceA> system-view
[DeviceA] ip route-static 0.0.0.0 0.0.0.0 1.1.1.2
[DeviceA] quit
3. Use the ping command to test connectivity between Device A and Device C.
<DeviceA> ping 1.1.2.2
Ping 1.1.2.2(1.1.2.2): 56 -data bytes, press CTRL_C to break
Request time out
Request time out
Request time out
Request time out
Request time out
--- Ping statistics for 1.1.2.2 ---
5 packet(s) transmitted,0 packet(s) received,100.0% packet loss
The output shows that Device A and Device C cannot reach each other.
4. Use the tracert command to identify failed nodes:
# Enable sending of ICMP timeout packets on Device B.
<DeviceB> system-view
[DeviceB] ip ttl-expires enable
# Enable sending of ICMP destination unreachable packets on Device C.
<DeviceC> system-view
[DeviceC] ip unreachables enable
# Execute the tracert command on Device A.
<DeviceA> tracert 1.1.2.2
traceroute to 1.1.2.2 (1.1.2.2) 30 hops at most,40 bytes each packet, press CTRL_C
to break
1 1.1.1.2 (1.1.1.2) 1 ms 2 ms 1 ms
2 * * *
3 * * *
4 * * *
Device A Device B Device C
1.1.1.1/24 1.1.1.2/24 1.1.2.1/24
1.1.2.2/24
6
5
<DeviceA>
The output shows that Device A can reach Device B but cannot reach Device C. An error has
occurred on the connection between Device B and Device C.
5. Use the debugging ip icmp command on Device A and Device C to verify that they can send and
receive the specific ICMP packets.
Or use the display ip routing-table command to verify that there is a route from Device A to Device
C.
System debugging
The device supports debugging for the majority of protocols and features, and provides debugging
information to help users diagnose errors.
Debugging information control switches
The following switches control the display of debugging information:
• Module debugging switch—Controls whether to generate the module-specific debugging
information.
• Screen output switch—Controls whether to display the debugging information on a certain screen.
Use terminal monitor and terminal logging level commands to turn on the screen output switch. For
more information about these two commands, see Network Management and Monitoring
Command Reference.
As shown in Figure 4, a
ssume that the device can provide debugging for the three modules 1, 2, and 3.
The debugging information can be output on a terminal only when both the module debugging switch
and the screen output switch are turned on.
Debugging information is typically displayed on a console. You can also send debugging information to
other destinations. For more information, see "Configuring the information center."
Figure 4 Relationship between the module and screen output switch
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25
  • Page 26 26
  • Page 27 27
  • Page 28 28
  • Page 29 29
  • Page 30 30
  • Page 31 31
  • Page 32 32
  • Page 33 33
  • Page 34 34
  • Page 35 35
  • Page 36 36
  • Page 37 37
  • Page 38 38
  • Page 39 39
  • Page 40 40
  • Page 41 41
  • Page 42 42
  • Page 43 43
  • Page 44 44
  • Page 45 45
  • Page 46 46
  • Page 47 47
  • Page 48 48
  • Page 49 49
  • Page 50 50
  • Page 51 51
  • Page 52 52
  • Page 53 53
  • Page 54 54
  • Page 55 55
  • Page 56 56
  • Page 57 57
  • Page 58 58
  • Page 59 59
  • Page 60 60
  • Page 61 61
  • Page 62 62
  • Page 63 63
  • Page 64 64
  • Page 65 65
  • Page 66 66
  • Page 67 67
  • Page 68 68
  • Page 69 69
  • Page 70 70
  • Page 71 71
  • Page 72 72
  • Page 73 73
  • Page 74 74
  • Page 75 75
  • Page 76 76
  • Page 77 77
  • Page 78 78
  • Page 79 79
  • Page 80 80
  • Page 81 81
  • Page 82 82
  • Page 83 83
  • Page 84 84
  • Page 85 85
  • Page 86 86
  • Page 87 87
  • Page 88 88
  • Page 89 89
  • Page 90 90
  • Page 91 91
  • Page 92 92
  • Page 93 93
  • Page 94 94
  • Page 95 95
  • Page 96 96
  • Page 97 97
  • Page 98 98
  • Page 99 99
  • Page 100 100
  • Page 101 101
  • Page 102 102
  • Page 103 103
  • Page 104 104
  • Page 105 105
  • Page 106 106
  • Page 107 107
  • Page 108 108
  • Page 109 109
  • Page 110 110
  • Page 111 111
  • Page 112 112
  • Page 113 113
  • Page 114 114
  • Page 115 115
  • Page 116 116
  • Page 117 117
  • Page 118 118
  • Page 119 119
  • Page 120 120
  • Page 121 121
  • Page 122 122
  • Page 123 123
  • Page 124 124
  • Page 125 125
  • Page 126 126
  • Page 127 127
  • Page 128 128
  • Page 129 129
  • Page 130 130
  • Page 131 131
  • Page 132 132
  • Page 133 133
  • Page 134 134
  • Page 135 135
  • Page 136 136
  • Page 137 137
  • Page 138 138
  • Page 139 139
  • Page 140 140
  • Page 141 141
  • Page 142 142
  • Page 143 143
  • Page 144 144
  • Page 145 145
  • Page 146 146
  • Page 147 147
  • Page 148 148
  • Page 149 149
  • Page 150 150
  • Page 151 151
  • Page 152 152
  • Page 153 153
  • Page 154 154
  • Page 155 155
  • Page 156 156
  • Page 157 157
  • Page 158 158
  • Page 159 159
  • Page 160 160
  • Page 161 161
  • Page 162 162
  • Page 163 163
  • Page 164 164
  • Page 165 165
  • Page 166 166
  • Page 167 167
  • Page 168 168
  • Page 169 169
  • Page 170 170
  • Page 171 171
  • Page 172 172
  • Page 173 173
  • Page 174 174
  • Page 175 175
  • Page 176 176
  • Page 177 177
  • Page 178 178
  • Page 179 179
  • Page 180 180
  • Page 181 181
  • Page 182 182
  • Page 183 183
  • Page 184 184
  • Page 185 185
  • Page 186 186
  • Page 187 187
  • Page 188 188
  • Page 189 189
  • Page 190 190
  • Page 191 191
  • Page 192 192
  • Page 193 193
  • Page 194 194
  • Page 195 195
  • Page 196 196
  • Page 197 197
  • Page 198 198
  • Page 199 199
  • Page 200 200
  • Page 201 201
  • Page 202 202
  • Page 203 203
  • Page 204 204
  • Page 205 205
  • Page 206 206
  • Page 207 207
  • Page 208 208
  • Page 209 209
  • Page 210 210
  • Page 211 211
  • Page 212 212
  • Page 213 213
  • Page 214 214
  • Page 215 215
  • Page 216 216
  • Page 217 217
  • Page 218 218
  • Page 219 219
  • Page 220 220
  • Page 221 221
  • Page 222 222
  • Page 223 223
  • Page 224 224
  • Page 225 225
  • Page 226 226
  • Page 227 227
  • Page 228 228
  • Page 229 229
  • Page 230 230
  • Page 231 231
  • Page 232 232
  • Page 233 233
  • Page 234 234
  • Page 235 235
  • Page 236 236
  • Page 237 237
  • Page 238 238
  • Page 239 239
  • Page 240 240
  • Page 241 241
  • Page 242 242
  • Page 243 243
  • Page 244 244
  • Page 245 245
  • Page 246 246
  • Page 247 247
  • Page 248 248
  • Page 249 249
  • Page 250 250
  • Page 251 251
  • Page 252 252
  • Page 253 253
  • Page 254 254
  • Page 255 255
  • Page 256 256
  • Page 257 257
  • Page 258 258
  • Page 259 259
  • Page 260 260
  • Page 261 261
  • Page 262 262
  • Page 263 263
  • Page 264 264
  • Page 265 265
  • Page 266 266
  • Page 267 267
  • Page 268 268
  • Page 269 269
  • Page 270 270
  • Page 271 271
  • Page 272 272
  • Page 273 273
  • Page 274 274
  • Page 275 275
  • Page 276 276
  • Page 277 277
  • Page 278 278
  • Page 279 279
  • Page 280 280
  • Page 281 281
  • Page 282 282

H3C R6600 Configuration manual

Category
Software
Type
Configuration manual
This manual is also suitable for

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI