2. H3C
  3. S9500 Series

H3C S9500 Series Operating instructions

  • Hello! I am an AI chatbot trained to assist you with the H3C S9500 Series Operating instructions. I’ve already reviewed the document and can help you find the information you need or explain it in simple terms. Just ask your questions, and providing more details will help me assist you more effectively!
Operation Manual – ACSEI
H3C S9500 Series Routing Switches Table of Contents
i
Table of Contents
Chapter 1 ACSEI Configuration...................................................................................................1-1
1.1 Introduction to ACSEI ........................................................................................................1-1
1.1.1 Functions of ACSEI.................................................................................................1-1
1.1.2 ACSEI Timers..........................................................................................................1-2
1.1.3 ACSEI Startup and Running ...................................................................................1-2
1.2 ACSEI Server Configuration..............................................................................................1-3
1.2.1 Enabling ACSEI Server...........................................................................................1-3
1.2.2 Configuring the Clock Synchronization Timer.........................................................1-3
1.2.3 Configuring the Monitoring Timer............................................................................1-3
1.2.4 Closing an ACSEI Client.........................................................................................1-4
1.2.5 Restarting an ACSEI Client.....................................................................................1-4
1.2.6 Displaying and Maintaining ACSEI Server..............................................................1-4
Operation Manual – ACSEI
H3C S9500 Series Routing Switches Chapter 1 ACSEI Configuration
1-1
Chapter 1 ACSEI Configuration
When configuring ACSEI, go to these sections for information you are interested in:
z Introduction to ACSEI
z ACSEI Server Configuration
1.1 Introduction to ACSEI
As a private protocol, ACSEI provides a method for exchanging information between
ACFP clients and ACFP server. It well supports Application Control Forwarding
Protocol (ACFP) collaboration, ensuring valid information interaction between the
ACFP clients and the ACFP server, so that the ACFP server and clients can cooperate
to run a service.
As a supporting protocol of ACFP, ACSEI has two entities: server and client.
z ACSEI server is integrated into the software system (Comware) of the device and
is supported by the device.
z ACSEI client is implemented in two ways. One way is to integrate it into the system
software (Comware) of the device. In this way it is a function supported by the
device. The other way is to integrate it into the software system of the OAP module.
In this way it is a function supported by the OAP module. Hardware and
configurations needed in the two implementations are different. This chapter will
introduce them respectively.
Note:
z ACFP is designed based on the Open Application Architecture (OAA). The
collaborating IDS (Intrusion Detection System) cards or IDS devices serve as the
ACFP clients which run applications of other vendors and support the IPS (Intrusion
Prevention System)/IDS services.
z The open application platform (OAP) is designed for new services. On OAP module
runs the Linux operating system. You can load various service software, such as
security, voice, and so on as needed.
1.1.1 Functions of ACSEI
ACSEI mainly provides the following functions:
z Registration and deregistration of an ACSEI client to the ACSEI server.
Operation Manual – ACSEI
H3C S9500 Series Routing Switches Chapter 1 ACSEI Configuration
1-2
z ID assignment. The ACSEI server assigns IDs to ACSEI clients to distinguish
between them.
z Mutual monitoring and awareness between an ACSEI client and the ACSEI
server.
z Information interaction between the ACSEI server and ACSEI clients, including
clock synchronization.
z Control of the ACSEI clients on the ACSEI server. For example, you can close
ACSEI client, or restart ACSEI client on the ACSEI server.
An ACSEI server can register multiple ACSEI clients. The maximum number of ACSEI
clients that an ACSEI server allows to register varies with devices.
1.1.2 ACSEI Timers
An ACSEI server uses two timers, the clock synchronization timer and the monitoring
timer.
z The clock synchronization timer is used to periodically trigger the ACSEI server to
send clock synchronization advertisements to ACSEI clients. You can set this
timer through command lines.
z The monitoring timer is used to periodically trigger the ACSEI server to send
monitoring requests to ACSEI clients. You can set this timer through command
lines.
An ACSEI client starts two timers, the registration timer and the monitoring timer.
z The registration timer is used to periodically trigger the ACSEI client to multicast
registration requests (with the multicast MAC address being 010F-E200-0021).
You cannot set this timer.
z The monitoring timer is used to periodically trigger the ACSEI client to send
monitoring requests to the ACSEI server. You cannot set this timer.
1.1.3 ACSEI Startup and Running
ACSEI starts up and runs in the following procedures:
1) Run the ACSEI client application to enable ACSEI client.
2) Start up the device and enable the ACSEI server function on it.
3) The ACSEI client multicasts registration requests.
4) After the ACSEI server receives a valid registration request, it negotiates
parameters with the ACSEI client and establishes connection with the client if the
negotiation succeeds.
5) The ACSEI server and the ACSEI client mutually monitor the connection.
6) If detecting the disconnection of the ACSEI client, the ACFP server will remove the
configuration and policies associated with the client.
Operation Manual – ACSEI
H3C S9500 Series Routing Switches Chapter 1 ACSEI Configuration
1-3
1.2 ACSEI Server Configuration
The section covers these topics:
z Enabling ACSEI Server
z Configuring the Clock Synchronization Timer
z Configuring the Monitoring Timer
z Closing an ACSEI Client
z Restarting an ACSEI Client
z Displaying and Maintaining ACSEI Server
1.2.1 Enabling ACSEI Server
Follow these steps to enable ACSEI server:
To do… Use the command… Remarks
Enter system view
system-view
—
Enable ACSEI server
acsei server enable
Required
Disabled by default.
1.2.2 Configuring the Clock Synchronization Timer
Follow these steps to configure the clock synchronization timer:
To do… Use the command… Remarks
Enter system view
system-view
—
Enable the ACSEI server
function
acsei server enable
Required
Enter ACSEI server view
acsei server
—
Configure the clock
synchronization timer
from ACSEI server to
ACSEI client
acsei timer clock-sync
minutes
Optional
Five minutes by default.
1.2.3 Configuring the Monitoring Timer
Follow theses steps to configure the monitoring timer:
To do… Use the command… Remarks
Enter system view
system-view
—
Enable the ACSEI server
function
acsei server enable
Required
Operation Manual – ACSEI
H3C S9500 Series Routing Switches Chapter 1 ACSEI Configuration
1-4
To do… Use the command… Remarks
Enter ACSEI server view
acsei server
—
Configure the monitoring
timer for ACSEI server to
monitor ACSEI client
acsei timer monitor
seconds
Optional
Five seconds by default.
1.2.4 Closing an ACSEI Client
Follow these steps to close an ACSEI client:
To do… Use the command… Remarks
Enter system view
system-view
—
Enable the ACSEI server
function
acsei server enable
Required
Enter ACSEI server view
acsei server
—
Close the specified
ACSEI client
acsei client close
client-id
Required
1.2.5 Restarting an ACSEI Client
Follow these steps to restart an ACSEI client:
To do… Use the command… Remarks
Enter system view
system-view
—
Enable the ACSEI server
function
acsei server enable
Required
Enter ACSEI server view
acsei server
—
Restart the specified
ACSEI client
acsei client reboot
client-id
Required
1.2.6 Displaying and Maintaining ACSEI Server
To do… Use the command… Remarks
Display ACSEI client
summary
display acsei client
summary [ client-id ]
Display ACSEI client
information
display acsei client info
[ client-id ]
Available in any view
/