3Com MSR 20-20 manuale d’uso

H3C MSR 20/30/50 Series Routers User Manual (v1.00) MSR 20-20 MSR 20-21 MSR 20-40 MSR 30-11 MSR 30-16 MSR 30-20 MSR 30-40 MSR 30-60 MSR 50-40 MSR 50-60 www.3Com.com Part Number 10016322 Rev. AA August 2007[...]

3Com Corporation 350 Campus Drive Marlbor ough, MA USA 01752-3064 Copyright © 2007, 3Com Corporati on. All rights re served. No part of this documentat ion may be repr oduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from 3Com Corpo ration. 3Com C[...]

C ONTENTS A BOUT T HIS G UIDE Intr oduction to th e Manual 5 Conventions 5 Related Docum entation 6 1 I NTRODUCTION V olume Introduction 7 2 F EATURE D ESCRIPTION Overview 9 Functional Modules Index of Basic 9 Functional Modules Index of Stan dard 10 Feature Description 11 3 L OGGING ONTO MSR S ERIES R OUTERS Logging onto an MSR Series Rou ter 29 I[...]

[...]

A BOUT T HIS G UIDE Introduction to the Manual Y ou can get a brief idea of the contents of this manual by reading the following: ■ “Feature Description” on page 9: Introduc es the main featur es of each module presented in this manual. ■ “Logging onto MSR Series Routers” on page 29: Help s you know about the user interfaces supported o[...]

6 A BOUT T HIS G UIDE Related Documentation The following manuals offer additional infor mation necessary for managing your MSR 20/30/50 Series routers: ■ H3C MSR 20/30/50 Series Ro uters Installation Manuals — Covers settin g up and initializing your router . ■ H3C MSR 20/30/50 Series Ro uters Configuration Guid e — Describes how to operat[...]

1 I NTR ODUCTION V olume Introduction Softwares on MSR series r outers fall into two versions: basic and standard. Y ou can find lists of features supported on the two versions and the corresponding volumes of protocols or features you are inter ested in through feature indexes for these two versions respectively . ■ “Access V olume” on page [...]

8 C HAPTER 1: I NTRODUCTION[...]

2 F EATUR E D ESCRIPTION Overview H3C MSR Series Routers can be divided into three series: MSR 20, MSR 30 and MSR 50, which are positioned in ascending order . MSR 20 and MSR 30 series can be used as the edge acc ess equipmen t of large networks or carrier networks, and the core of branches or small businesses; MSR 50 series can be used as the core[...]

10 C HAPTER 2: F EATURE D ESCRIPTION Functional Modules Index of Standard “Security Volume” on page 21 802.1x AAA RADIUS HWTACACS Firewall NAT PKI PORTAL Rsh SSH 1.5 ACL SSH2.0 “System Volume” on page 23 GR Backup Center VRRP Device Management NQA NetStream NTP RMON SNMP File System Management System Maintaining and Debugging Basic System C[...]

Feature Description 11 Featur e Description n In the PDF version of this manual, you can click the hyperlink in the “Operation Manual” an d “Command Manual” to a ccess the operation and command manual you are interested in. Pr ess <Alt + ← > to return to [ Feature Description ]. Access V olume “QoS Volume” on page 20 QoS “Secu[...]

12 C HAPTER 2: F EATURE D ESCRIPTION WAN Interface WAN Interface Configuration WAN Interface Commands Introduction to WAN in terfaces such as Synchronous/asynchronous serial interface, AUX, AM, ISDN BRI, E1-F, T1-F, CE1/PRI, CT1/PRI, CE3 and CT3 ATM ATM Configuration ATM Commands ■ Configuration of ATM, ATM subinterface and PVC and VP monitoring [...]

Feature Description 13 Bridging Bridging Configuration Bridging Commands Isolation group configuration ISDN ISDN Configuration ISDN Commands ISDN configuration MSTP MSTP Configuration MSTP Commands ■ Root bridge configuration ■ Leaf node configuratio n ■ Performing mCheck ■ Digest snooping configuration ■ No Agreement Check configuration [...]

14 C HAPTER 2: F EATURE D ESCRIPTION IP Services V o lume Ta b l e 4 Features in IP services volume Feature Operation an d command manual Feature description ARP ARP Configuration ARP Commands Address resolution protoco l, mainly used for resolution from IP address to Ethernet MAC address. ■ ARP configuration ■ Gratuitous ARP configuration ■ [...]

Feature Description 15 Fast Forwarding Fast Forwarding Configuration Fast Forwarding Commands Fast forwarding employs cache and data-flow-based technology to handle packet forwarding. ■ Fast forwarding configuratio n IPv6 Basics IPv6 Basics Configuration IPv6 Basics Commands Internet protocol version 6 (IPv6) was designed by the Internet Engineer[...]

16 C HAPTER 2: F EATURE D ESCRIPTION IP Routing V olume Terminal Access Terminal Access Configuration Terminal Access Commands ■ Introduction to Terminal Access ■ TTY Terminal Access Configuration ■ Telnet Terminal Access Configuration ■ RTC Terminal Access Configuratio n Return to “Functional Modules Index of Basic” on pag e 9 Ta b l e[...]

Feature Description 17 IP Multicast V olume Static Routing Static Routing Configur ation Static Routing Commands A special route that is manually configured by the network administrator. The proper configuration and usage of static routes can improve a network’s performance and ensure bandwidth for important network applications. ■ Configuring [...]

18 C HAPTER 2: F EATURE D ESCRIPTION Multicast Routing and Forwarding Multicast Routing and Forwarding Configuration Multicast Routing and Forwarding Commands Policies used for filterin g the routing information used in the RPF check ■ Multicast policy overview ■ Configuring a multicast policy IGMP IGMP Configuration IGMP Commands Internet grou[...]

Feature Description 19 MPLS&VPN V olume Ta b l e 7 Features in MPLS&VPN volume Feature Operation and command manual Featu re descriptio n MPLS Basics Configuratio n MPLS Basics Configur ation MPLS Basics Commands ■ MPLS config uration basi cs ■ LDP overview ■ Configuring MPLS basic capab ility ■ Configuring PHP ■ Configuring a sta[...]

20 C HAPTER 2: F EATURE D ESCRIPTION QoS V olume DVPN DVPN Configuration DVPN Commands DVPN overview and DVPN configuration ■ Configuring AAA ■ Configuring the VAM Server ■ Configuring the VAM Cli ent ■ Configuring an IPSec Profile ■ Configuring the DVPN Tunnel Parameters ■ Configuring a DVPN Route GRE GRE Configuration GRE Commands A p[...]

Feature Description 21 Security V olume Ta b l e 9 Features in security volume Feature Operation and command manual Featu re descriptio n 802.1x 802.1x Configuration 802.1x Commands 802.1x is a port-based ac cess control protocol. It authenticates and controls accessing devices at the level of port. ■ 802.1 basic configuration ■ 802.1x advanced[...]

22 C HAPTER 2: F EATURE D ESCRIPTION PKI PKI Configuration PKI Commands Public key infrastructure (PKI) is a system which uses public key technology and digi tal certificate to protect system security a nd authenticate digital certificate users. ■ Generating an RSA pair for PKI ■ Configuring PKI certificate registration ■ Submitting a PKI cer[...]

Feature Description 23 System V olume SSH2.0 SSH2.0 Configuration SSH2.0 Commands Security shell. When routers are connected by remote users across insecur e networks, secure shell (SSH) can provide them authentication and security. ■ Configuring the SSH server ■ Configuring the SSH client ■ Configuring the device as an SSH client SSL SSL Con[...]

24 C HAPTER 2: F EATURE D ESCRIPTION NetStream NetStream Configuration NetStream Commands NetStream provides the packet statistics function. ■ Configuring NetStream Statistics ■ Configuring NetStream Aggregation Statistics ■ Configuring Attributes of NetStream UDP Packets ■ Configuring NetStream Statistics Aging NTP NTP Configuration NTP Co[...]

Feature Description 25 User Interface User Interface Configuration User Interface Commands User interface view is a feature that allows you to manage asynchronous serial interfaces that work in flow mode. By operating under user interface view, you can centralize the management of various c onfigurations. ■ Configuring asynchronous interface attr[...]

26 C HAPTER 2: F EATURE D ESCRIPTION IPX V olume Vo i c e Vo l u m e T able 11 Features in IPX volume Feature Operation and command manual Feature description IPX IPX Configuration IPX Commands IPX is a connectionless protocol. Such functions as confirma tion of forwarding success and connection control are provided by the protocol at the layer abo[...]

Feature Description 27 H.323 H.323 Configuration H.323 Commands GK (gate keeper) conf iguration for H.323 voice gateway, combining the voice gateway with GK, thus implementing the VoIP function. ■ Introduction ■ H.323 architecture ■ H.323 gateway co nfiguration SIP SIP Configuration SIP Commands Session initiation p rotocol, an applicati on l[...]

28 C HAPTER 2: F EATURE D ESCRIPTION[...]

3 L OGGING ONTO MSR S ERIES R OUTERS Logging onto an MSR Series Router Y ou can log onto th e MSR 20/30/50 s eries routers in the following ways: ■ Local login through Console port ■ T elneting to the router through an Ethernet interface ■ Remote login through AUX port or TTY port using Modem dialup ■ Login through NMS Local login through C[...]

30 C HAPTER 3: L OGGING ONTO MSR S ERIES R OUTERS Figure 2 Setting ser ial interface parameters Select the terminal emulation ty pe to be VT100 or auto detect.[...]

Logging onto an MSR Series Router 31 Figure 3 Setting t erminal type After setting all parameters, click [Ent er], and you can configure the router . T elneting to the Router Through the Eth ernet Interface Setting up configuration envir onment Connect the router to a network thr ough the Ethernet interface. Figure 4 T elnet to the server Configuri[...]

32 C HAPTER 3: L OGGING ONTO MSR S ERIES R OUTERS # Enable T elnet server . [H3C]telnet server enable % Start Telnet server # Configure the IP address of the interface that connects to the Inter net. Y o u can change this IP address to what is in use. [H3C]interface ethernet0/0 [H3C-ethernet0/0]ip address 192.16 8.0.1 24 # Enter vty interface view [...]

Introduction to User Interface 33 User Interface Numbering for the Router User interface of the system fa lls into four cat egories, and is ar ranged in cer tain ord er: They are Console (CON), Auxiliary port ( AUX), virtual interface (VTY) and physical terminal interface (TTY).There is only one user interface for console and auxiliary port, while [...]

34 C HAPTER 3: L OGGING ONTO MSR S ERIES R OUTERS[...]

4 R EGISTERING THE S OFTWAR E Software r egister is pr ovided on the devi ce to pr otect the authorized users’ legal rights to use the software. T rial period is set on the software with this function and users are r equired to r egister the serial number of the software in the trial period. If the software has not been r egistered until the tria[...]

36 C HAPTER 4: R EGISTERING THE S OFTWARE[...]

5 S OFTWAR E M AINTENANCE n This manual uses H3C MSR 50 series routers as an example. Introduction Files BootROM program file The file is used for booting application at boo t. A complete BootROM file includes two segments: basic and extended. Application prog ram file The router is available with Dual Image function. By defaul t, the system define[...]

38 C HAPTER 5: S OFTWARE M AINTENANCE Configuration file The file stores configuration information of the router . By default, the system defines and attempts to boo t in order with three configuration files: main, ba ckup, and default, provided they are available with CF card. If the router fails to boot with the secure boot file, it prompts the b[...]

BootROM Menu 39 Software Maintenance Methods Upgrading BootROM and application pr ogram us ing XMODEM pr otocol through an serial interface. Upgrading application program fr om TF TP/F T P server through an Ethernet interface in BootROM. Uploading/downloading application pr ogr am and configuration file from TF TP/F TP server vi a command lines. n [...]

40 C HAPTER 5: S OFTWARE M AINTENANCE ************************************ ******************* ** * H3C MSR50-40 BOOTROM, Vers ion 2.11 * ** ************************************ ******************* Copyright(c) 2004-2007 Hangzhou H3C Technology Co., Ltd. Compiled date: Apr 09 2007, 08:52:28 CPU type : MPC8541 CPU L1 Cache : 32KB CPU L2 Cache : 256K[...]

BootROM Menu 41 BootROM Submenus Enter serial submenu This submenu can be used for upgrading applicatio n program, changing serial baud rate, and other operations. Enter <2> under the main BootROM me nu to enter the serial submenu: ======================<SERIAL SUB-MENU> ====================== |Note:the operating device is CF Card | | &[...]

42 C HAPTER 5: S OFTWARE M AINTENANCE Enter Ether net interface submenu Enter <3> in BootROM menu t o enter the Ether net interface submenu . The system displays: ====================<ETHERNET SUB- MENU>====================== |Note:the operating device is CF C ard | | <1> Download Application Program To SDRAM And Run | | <2>[...]

Upgrading BootROM Th rough Serial Interface 43 BootROM operation submenu Enter <7> under the main BootROM menu to enter the BootROM operation menu: =====================<BOOT ROM OPERATION>=============== ===== |Note:the operating device is CF Card | | <1> Backup Full Boot ROM | | <2> Restore Full Boot ROM | | <3> Upda[...]

44 C HAPTER 5: S OFTWARE M AINTENANCE | <3> 38400 | | <4> 57600 | | <5> 115200 | | <6> Exit | ================================== =========================== Enter Your Choice(1-6): Select a baud rate, <5> for 115200 bps for example. The following prompt appears: Change the baudrate on PC side fir st! Since the router s[...]

Upgrading BootROM Th rough Serial Interface 45 Figure 7 Modify baud rate Click [Call/Call] to establish new connection. Figure 8 Establish new connection Then, press <Enter> to prompt curr ent c onfiguration baud rate and re turn to the previous menu. The system prompts: The current baudrate is 115200 n Restore the baud rate in the HyperT erm[...]

46 C HAPTER 5: S OFTWARE M AINTENANCE operations are completed. Refer to “Bo otROM operation submenu ” on page 43 for detailed descriptions. For example, when you upgrade full BootROM: First, change serial baud rate to speed up upgrading (refer to “Modifying Serial Interface Parameters” o n page 43 for d etails), and then enter <3> un[...]

Upgrading Application Program Through Serial Interface 47 After completing download, the followin g information appears on term inal interface to indicate download and upgrade success: Download successfully! 434432 bytes downloaded! Updating Extend BTM Updating Extended BootRom. n ■ The file name, size and path vary in different situations. Check[...]

48 C HAPTER 5: S OFTWARE M AINTENANCE TFTP/FTP server. It has nothing to do with port IP add ress of the router. inet on backplane (b): No need to set. host inet (h) : 192.168.80.200 IP address of FTP/TFTP server. gateway inet (g) : Gateway IP address. No need to set. user (u) : guest User name FTP downloaded is used in this setting. No need to con[...]

Upgrading Applicati on Program Through Ethernet Interface 49 the address of application program. Y ou need to set user name and password if F TP server is used. c CAUTION: No TF TP/F TP Se rver is available with the H3C MSR 50 series . Y ou must install one yourself. Step 2: Modify Ether net parameters. Refer to “Confi guring Ether net Parameters[...]

50 C HAPTER 5: S OFTWARE M AINTENANCE Please set application file type in cf: M=MAIN B=BACKUP S=SECURE N=NOTYPE ************************************************************************** NO. Size(B) Time Type Name 0 15561860 Jul-10-2006 14:14 N cf:/main.bin ************************************************************************** Enter File Name:c[...]

Maintaining Application Program and Conf iguring Through Command Lines 51 Configuring environment Step 1: Set up hardwar e envir onment (r efer to “Upgrading Application Program Through Ethernet Inter face” on page 48 for details), and point the server pat h to the folder where the file is put. Figure 12 Networking diagram for maintenance under[...]

52 C HAPTER 5: S OFTWARE M AINTENANCE <H3C>tftp 192.168.0.1 get config.cfg config.cfg The file config.cfg exists. Overwrite it?[Y/N]:y Verifying server file... Deleting the old file, please wait... File will be transferred in binary mode Downloading file from remote tftp server, please wait...<HardReturn TFTP: 1045 bytes rec eived in 0 sec[...]

Maintaining Application Program and Conf iguring Through Command Lines 53 set to 192.168.0.2. Both can u se the ping command to check if the connection is successful. Step 2: Boot F TP service. Y ou can boot F TP service after configuring F TP server authentication and authorization. F TP server supports multiuser access. The remote F TP user sends[...]

54 C HAPTER 5: S OFTWARE M AINTENANCE ftp> quit Quit the FTP 221 Server closing. Maintaining the r outer when it serves as the client Y ou can also maintain the router file syst em by building F TP ser ver and making the router serve as the client. Step 1: Build maintenance envir onment as follows: Figure 14 Router maintenance when it serves as [...]

Maintaining Applicati on Program and Configuration F ile 55 200 PORT command successful. 150 File status OK ; about to open data connection 226 Closing data connection; File transfer successful. FTP: 14323376 byte(s) sent in 15.974 second(s) 896.00Kbyte(s)/sec. [ftp]quit Quit the FTP 221 Service closing control connection Maintaining Application Pr[...]

56 C HAPTER 5: S OFTWARE M AINTENANCE 2. -Main 3. +Backup 4. -Backup 5. Exit Enter your choice(1-5): Y ou can set th e file type to +M, -M, +B and -B by entering 1 to 4. Refer to “Introduction” on page 37 for details. Set configuration file type Enter <3> under the file control submenu to enter the configurat ion file type menu. Please se[...]

Dealing with Router Password Loss 57 c CAUTION: Confirm the file to be deleted be fore deleting since the system does not prompt you to c onfirm when deleting f iles. Exit to the main menu Exit to the main BootROM menu. Dealing with Router Password Loss Do as follows when your BootROM p assword, user passwor d or Super Password is lost. User Passwo[...]

58 C HAPTER 5: S OFTWARE M AINTENANCE BootROM Password Loss Contact the ag ent or our technical support personnel in the event of BootROM password loss. They can help you set a new passwor d. Modify the BootROM password under the main BootRO M menu. Enter <5> to modify the password following the pr ompt. The console terminal displays: Change [...]

6 S LOT P OSITION OF H3C MSR S ERIES R OUTERS Slot Position of H3C MSR 20 Series Routers Figure 15 Slot position of the MSR 20-20 Figure 16 Slot position of the MSR 20-21 Figure 17 Slot position of the MSR 20-40 Slot Position of H3C MSR 30 Series Routers Figure 18 Slot position of the MSR 30-11 Figure 19 Slot position of the MSR 30-16 Figure 20 Slo[...]

60 C HAPTER 6: S LOT P OSITION OF H3C MSR S ERIES R OUTERS Figure 21 Slot position of the MSR 30-40 Figure 22 Slot position of the MSR 30-60 Slot Position of H3C MSR 50 Series Routers Figure 23 Slot position of the MSR 50-40 Figure 24 Slot position of the MSR 50-60[...]