HUAWEI S9300 Terabit routing switch Configuration Guide

PDF

নথি

বিজ্ঞাপন

Quidway S9300 Terabit Routing Switch

V100R006C01

Configuration Guide - IP Service

Issue

Date

2011-10-26

HUAWEI TECHNOLOGIES CO., LTD.

No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.

Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.

All other trademarks and trade names mentioned in this document are the property of their respective holders.

Notice

The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the products, services and features described in this document may not be within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information, and recommendations in this document are provided "AS IS" without warranties, guarantees or representations of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.

Address: Huawei Industrial Base

Bantian, Longgang

Shenzhen 518129

People's Republic of China

Website:

Email: http://www.huawei.com

[email protected]

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service About This Document

About This Document

Intended Audience

This document describes the configurations of the IP services of the S9300, including the basic knowledge and configurations of secondary IP addresses, DHCP, DHCPv6, IP performance, IP unicast policy-based routing, UDP Helper, basic IPv6 functions, IPv6 over IPv4 tunnels, IPv4 over IPv6 tunnels, and IP sessions. By reading this document, you can learn the concepts and configuration procedures of IP services.

This document is intended for: l Policy planning engineers l Installation and commissioning engineers l NM configuration engineers l Technical support engineers

Symbol Conventions

The symbols that may be found in this document are defined as follows.

Symbol

DANGER

Description

Indicates a hazard with a high level of risk, which if not avoided, will result in death or serious injury.

Indicates a hazard with a medium or low level of risk, which if not avoided, could result in minor or moderate injury.

WARNING

TIP

NOTE

CAUTION

Indicates a potentially hazardous situation, which if not avoided, could result in equipment damage, data loss, performance degradation, or unexpected results.

Indicates a tip that may help you solve a problem or save time.

Provides additional information to emphasize or supplement important points of the main text.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service About This Document

Command Conventions

The command conventions that may be found in this document are defined as follows.

Convention

Boldface

Italic

[ ]

{ x | y | ... }

[ x | y | ... ]

{ x | y | ... }

[ x | y | ... ]

&<1-n>

Description

The keywords of a command line are in boldface.

Command arguments are in italics.

Items (keywords or arguments) in brackets [ ] are optional.

Optional items are grouped in braces and separated by vertical bars. One item is selected.

Optional items are grouped in brackets and separated by vertical bars. One item is selected or no item is selected.

Optional items are grouped in braces and separated by vertical bars. A minimum of one item or a maximum of all items can be selected.

Optional items are grouped in brackets and separated by vertical bars. Several items or no item can be selected.

The parameter before the & sign can be repeated 1 to n times.

A line starting with the # sign is comments.

Change History

Updates between document issues are cumulative. Therefore, the latest document issue contains all changes made in previous issues.

Changes in Issue 01 (2011-10-26)

Initial commercial release.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

iii

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service Contents

About This Document.....................................................................................................................ii

1 IP Addresses Configuration........................................................................................................1

1.1 Introduction to IP Addresses..............................................................................................................................2

1.2 Features of IP Addresses Supported by the S9300.............................................................................................2

1.3 Configuring IP Addresses for Interfaces............................................................................................................3

1.3.1 Establishing the Configuration Task.........................................................................................................3

1.3.2 Configuring a Primary IP Address for an Interface...................................................................................3

1.3.3 (Optional) Configuring a Secondary IP Address for an Interface.............................................................4

1.3.4 Checking the Configuration.......................................................................................................................4

1.4 Configuring IP Address Unnumbered for Interfaces..........................................................................................5

1.4.1 Establishing the Configuration Task.........................................................................................................5

1.4.2 Configuring the Primary IP Address of the Interface That Lends an IP Address.....................................6

1.4.3 Configuring an Interface That Borrows an IP Address from Another Interface.......................................6

1.4.4 Checking the Configuration.......................................................................................................................7

1.5 Configuration Examples.....................................................................................................................................7

1.5.1 Example for Setting Primary and Secondary IP Addresses......................................................................7

1.5.2 Example for Configuring a Tunnel Interface to Borrow the IP Address of a Loopback Interface...........9

2 ARP Configuration......................................................................................................................12

2.1 Overview of ARP.............................................................................................................................................14

2.2 Features of ARP Supported by the S9300........................................................................................................14

2.3 Configuring Static ARP....................................................................................................................................16

2.3.1 Establishing the Configuration Task.......................................................................................................17

2.3.2 Configuring Common Static ARP Entries...............................................................................................17

2.3.3 Configuring Static ARP Entries in a VLAN...........................................................................................18

2.3.4 Configuring Static ARP Entries in a VPN Instance................................................................................19

2.3.5 Checking the Configuration.....................................................................................................................19

2.4 Optimizing Dynamic ARP................................................................................................................................20

2.4.1 Establishing the Configuration Task.......................................................................................................20

2.4.2 Modify the aging parameters of dynamic ARP.......................................................................................20

2.4.3 Enabling ARP Suppression Function......................................................................................................21

2.4.4 Enabling Layer 2 Topology Detection Function.....................................................................................21

2.4.5 Checking the Configuration.....................................................................................................................22

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

Contents

2.5 Configuring Routed Proxy ARP.......................................................................................................................22

2.5.1 Establishing the Configuration Task.......................................................................................................22

2.5.2 Configure an IP Addresses for the Interface............................................................................................23

2.5.3 Enabling the Routed Proxy ARP Function..............................................................................................23

2.5.4 Checking the Configuration.....................................................................................................................24

2.6 Configuring Proxy ARP Within a VLAN........................................................................................................24

2.6.1 Establishing the Configuration Task.......................................................................................................24

2.6.2 Configure an IP Addresses for the Interface............................................................................................25

2.6.3 Enabling Proxy ARP Within a VLAN....................................................................................................25

2.6.4 Checking the Configuration.....................................................................................................................26

2.7 Configuring Proxy ARP Between VLANs.......................................................................................................26

2.7.1 Establishing the Configuration Task.......................................................................................................26

2.7.2 Configuring an IP Addresses for the Interface........................................................................................27

2.7.3 Enabling Proxy ARP Between VLANs...................................................................................................27

2.7.4 Checking the Configuration.....................................................................................................................28

2.8 Configuring ARP-Ping IP.................................................................................................................................28

2.8.1 Establishing the Configuration Task.......................................................................................................28

2.8.2 Detecting the IP Address by Using the arp-ping ip Command...............................................................29

2.9 Configuring ARP-Ping MAC...........................................................................................................................29

2.9.1 Establishing the Configuration Task.......................................................................................................29

2.9.2 Detecting the MAC Address by Using the arp-ping mac Command......................................................30

2.10 Maintaining ARP............................................................................................................................................30

2.10.1 Clearing ARP Entries............................................................................................................................31

2.10.2 Monitoring Network Operation Status of ARP.....................................................................................31

2.10.3 Debugging ARP.....................................................................................................................................31

2.11 Configuration Examples.................................................................................................................................32

2.11.1 Example for Configuring ARP..............................................................................................................32

2.11.2 Example for Configuring Routed Proxy ARP.......................................................................................35

2.11.3 Example for Configuring Intra-VLAN Proxy ARP..............................................................................37

2.11.4 Example for Configuring Inter-VLAN Proxy ARP..............................................................................39

2.11.5 Example for Configuring Layer 2 Topology Detection........................................................................42

3 DHCP Configuration..................................................................................................................45

3.1 Introduction to DHCP.......................................................................................................................................46

3.2 DHCP Features Supported by the S9300.........................................................................................................46

3.3 Configuring the DHCP Server Based on the Global Address Pool..................................................................48

3.3.1 Establishing the Configuration Task.......................................................................................................48

3.3.2 Configuring an Interface to Use Global Address Pool............................................................................50

3.3.3 Configuring Address Allocation Mode for Global Address Pool...........................................................51

3.3.4 (Optional) Configuring DNS for Global Address Pool...........................................................................52

3.3.5 (Optional) Configuring NetBIOS for Global Address Pool....................................................................53

3.3.6 (Optional) Configuring the Customized DHCP Option for the Global Address Pool............................54

3.3.7 (Optional) Preventing Repetitive Allocation of an IP Address...............................................................55

Issue 01 (2011-10-26) v

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

Contents

3.3.8 (Optional) Configuring Automatic Saving of DHCP Data.....................................................................55

3.3.9 Checking the Configuration.....................................................................................................................56

3.4 Configuring the DHCP Server Based on the VLANIF Interface Address Pool...............................................57

3.4.1 Establishing the Configuration Task.......................................................................................................57

3.4.2 Configuring Address Allocation Mode for Interface Address Pool........................................................59

3.4.3 (Optional) Configuring the DNS Service of the VLANIF Interface Address Pool.................................60

3.4.4 (Optional) Configuring the NetBIOS Service of the VLANIF Interface Address Pool..........................61

3.4.5 (Optional) Configuring the Customized DHCP Option of the VLANIF Interface Address Pool...........62

3.4.6 (Optional) Preventing Repetitive Allocation of an IP Address...............................................................62

3.4.7 (Optional) Configuring Automatic Saving of DHCP Data.....................................................................63

3.4.8 Checking the Configuration.....................................................................................................................64

3.5 Configuring the DHCP Relay Agent................................................................................................................65

3.5.1 Establishing the Configuration Task.......................................................................................................65

3.5.2 Configuring DHCP Relay on an Interface...............................................................................................66

3.5.3 Configuring a Destination DHCP Server Group.....................................................................................67

3.5.4 Binding an Interface to a DHCP Server Group.......................................................................................68

3.5.5 (Optional) Configuring the DHCP Relay Agent to Send DHCP Release Packet...................................69

3.5.6 Checking the Configuration.....................................................................................................................70

3.6 Maintaining DHCP...........................................................................................................................................71

3.6.1 Clearing DHCP Statistics........................................................................................................................71

3.6.2 Monitoring DHCP Operation..................................................................................................................71

3.7 Configuration Examples...................................................................................................................................72

3.7.1 Example for Configuring a DHCP Server Based on the Global Address Pool.......................................72

3.7.2 Example for Configuring the DHCP Server Based on the Interface Address Pool.................................75

3.7.3 Example for Configuring a DHCP Relay Agent.....................................................................................79

3.7.4 Example for Configuring a DHCP Relay Agent for VPN.......................................................................83

4 IP Session Configuration...........................................................................................................89

4.1 Introduction to the IP Session...........................................................................................................................90

4.2 IP Session Supported by the S9300..................................................................................................................90

4.3 Configuring IP Session.....................................................................................................................................91

4.3.1 Establishing the Configuration Task.......................................................................................................91

4.3.2 Enabling the IP Session Function............................................................................................................92

4.3.3 Binding a User Authentication Domain to a Sub-Interface.....................................................................92

4.3.4 (Optional) Setting the Format of DHCP User Name and the Password..................................................93

4.3.5 (Optional) Configuring the S9300 to Process Option Fields...................................................................94

4.3.6 (Optional) Setting ARP Detection Parameters........................................................................................95

4.3.7 (Optional) Setting the Type of a NAS Interface......................................................................................95

4.3.8 (Optional) Binding a VPN Instance to an Interface.................................................................................96

4.3.9 Checking the Configuration.....................................................................................................................96

4.4 Example for Configuring IP Session................................................................................................................97

4.4.1 Example for Configuring IP Session.......................................................................................................97

5 DHCPv6 Configuration............................................................................................................101

Issue 01 (2011-10-26) vi

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

Contents

5.1 Introduction to DHCPv6.................................................................................................................................102

5.2 DHCPv6 Features Supported by the S9300...................................................................................................103

5.3 Configuring DHCPv6 Relay...........................................................................................................................105

5.3.1 Establishing the Configuration Task.....................................................................................................105

5.3.2 Enabling the DHCPv6 Relay Function..................................................................................................105

5.3.3 (Optional) Configuring the Remote ID.................................................................................................106

5.3.4 (Optional) Configuring Rate Limit of DHCPv6 Messages...................................................................108

5.3.5 Checking the Configuration...................................................................................................................108

5.4 Maintaining DHCPv6.....................................................................................................................................109

5.4.1 Clearing the Statistics About DHCPv6 Messages Passing Through the DHCP Relay Agent..............109

5.4.2 Monitoring the Running Status of the DHCPv6 Relay Agent...............................................................109

5.5 Configuration Examples.................................................................................................................................110

5.5.1 Example for Configuring DHCPv6 Relay.............................................................................................110

6 IP Performance Configuration................................................................................................114

6.1 Introduction to IP Performance......................................................................................................................115

6.2 IP Performance Supported by the S9300........................................................................................................115

6.3 Optimizing IP Performance............................................................................................................................115

6.3.1 Establishing the Configuration Task.....................................................................................................115

6.3.2 Enabling an Interface to Check the Source IP Addresses of Packets....................................................116

6.3.3 Configuring Forcible Fragmentation of Outgoing Packets on an Interface..........................................117

6.3.4 Setting ICMP Parameters......................................................................................................................117

6.3.5 Setting TCP Parameters.........................................................................................................................119

6.3.6 (Optional) Setting the Load Balancing Mode of IP Packet Forwarding...............................................120

6.3.7 Checking the Configuration...................................................................................................................121

6.4 Maintaining IP Performance...........................................................................................................................121

6.4.1 Clearing IP Performance Statistics........................................................................................................122

6.4.2 Monitoring the Running Status of IP Performance...............................................................................122

6.4.3 Debugging IP Performance...................................................................................................................123

6.5 Configuration Examples.................................................................................................................................124

6.5.1 Example for Disabling the Sending of ICMP Redirection Packets.......................................................124

6.5.2 Example for Disabling the Sending of ICMP Host Unreachable Packets.............................................127

6.5.3 Example for Optimizing System Performance by Discarding Certain ICMP Packets..........................130

7 UDP Helper Configuration......................................................................................................133

7.1 Introduction to UDP Helper...........................................................................................................................134

7.2 UDP Helper Features Supported by the S9300..............................................................................................134

7.3 Configuring UDP Helper................................................................................................................................135

7.3.1 Establishing the Configuration Task.....................................................................................................135

7.3.2 Enabling the UDP Helper Function.......................................................................................................135

7.3.3 Configuring the UDP Port on Which Packets Are Forwarded..............................................................136

7.3.4 Configuring the Destination Server to Which Packets of the UDP Port Need to Be Forwarded..........136

7.3.5 Checking the Configuration...................................................................................................................137

7.4 Maintaining UDP Helper................................................................................................................................137

Issue 01 (2011-10-26) vii

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

Contents

7.4.1 Clearing UDP Helper Statistics.............................................................................................................137

7.4.2 Monitoring the Running Status of UDP Helper....................................................................................138

7.5 Configuration Examples.................................................................................................................................138

7.5.1 Example for Configuring UDP Helper..................................................................................................138

8 DNS Configuration...................................................................................................................141

8.1 Introduction to DNS.......................................................................................................................................142

8.2 DNS Supported by the S9300.........................................................................................................................142

8.3 Configuring DNS............................................................................................................................................142

8.3.1 Establishing the Configuration Task.....................................................................................................142

8.3.2 Configuring Static DNS Entries............................................................................................................143

8.3.3 Configuring Dynamic DNS...................................................................................................................143

8.3.4 Checking the Configuration...................................................................................................................144

8.4 Maintaining DNS............................................................................................................................................145

8.4.1 Clearing DNS Entries............................................................................................................................145

8.4.2 Monitoring Network Operation Status of DNS.....................................................................................146

8.4.3 Debugging DNS....................................................................................................................................146

8.5 Configuration Examples.................................................................................................................................147

8.5.1 Example for Configuring DNS..............................................................................................................147

9 Basic Configurations of IPv6...................................................................................................151

9.1 Introduction to IPv6........................................................................................................................................152

9.2 IPv6 Features Supported by the S9300...........................................................................................................152

9.3 Configuring an IPv6 Address for an Interface................................................................................................154

9.3.1 Establishing the Configuration Task.....................................................................................................154

9.3.2 Enabling IPv6 Packet Forwarding Capability.......................................................................................155

9.3.3 Configuring an IPv6 Link-Local Address for an Interface....................................................................155

9.3.4 Configuring an IPv6 Global Unicast Address for an Interface..............................................................156

9.3.5 Checking the Configuration...................................................................................................................157

9.4 Configuring IPv6 Neighbor Discovery...........................................................................................................157

9.4.1 Establishing the Configuration Task.....................................................................................................157

9.4.2 Configuring Static Neighbors................................................................................................................158

9.4.3 Enabling RA Message Advertising.......................................................................................................159

9.4.4 Setting the Interval for Advertising RA Messages................................................................................159

9.4.5 Enabling Stateful Auto Configuration...................................................................................................160

9.4.6 Configuring the Address Prefixes to Be Advertised.............................................................................160

9.4.7 Configuring Other Information to Be Advertised.................................................................................161

9.4.8 Checking the Configuration...................................................................................................................162

9.5 Maintaining IPv6............................................................................................................................................163

9.5.1 Clearing IPv6 Statistics.........................................................................................................................163

9.5.2 Monitoring the Running Status of IPv6.................................................................................................164

9.5.3 Debugging IPv6.....................................................................................................................................164

9.6 Configuration Examples.................................................................................................................................165

9.6.1 Example for Setting an IPv6 Address for an Interface..........................................................................165

Issue 01 (2011-10-26) viii

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

Contents

10 IPv6 DNS Configuration........................................................................................................169

10.1 Introduction to IPv6 DNS.............................................................................................................................170

10.2 IPv6 DNS Supported by the S9300..............................................................................................................170

10.3 Configuring IPv6 DNS.................................................................................................................................170

10.3.1 Establishing the Configuration Task...................................................................................................170

10.3.2 Configuring a Static IPv6 DNS Entry.................................................................................................171

10.3.3 Configuring the Dynamic IPv6 DNS Services....................................................................................171

10.3.4 Checking the Configuration.................................................................................................................172

10.4 Maintaining IPv6 DNS.................................................................................................................................173

10.4.1 Clearing IPv6 DNS Entries..................................................................................................................173

10.4.2 Monitoring Network Operation Status of IPv6 DNS..........................................................................174

10.5 Configuration Examples...............................................................................................................................174

10.5.1 Example for Configuring IPv6 DNS...................................................................................................174

11 IPv6 over IPv4 Tunnel Configuration................................................................................. 179

11.1 Introduction to IPv6 over IPv4.....................................................................................................................180

11.2 IPv6 over IPv4 Supported by the S9300......................................................................................................180

11.3 Configuring IPv4/IPv6 Dual Stacks.............................................................................................................185

11.3.1 Establishing the Configuration Task...................................................................................................185

11.3.2 Enabling IPv6 Packet Forwarding.......................................................................................................186

11.3.3 Configuring IPv4 and IPv6 Addresses for the Interface......................................................................187

11.3.4 Checking the Configuration.................................................................................................................188

11.4 Configuring an IPv6 over IPv4 Tunnel........................................................................................................188

11.4.1 Establishing the Configuration Task...................................................................................................188

11.4.2 Enabling the Service Loopback Function on an Eth-Trunk Interface.................................................188

11.4.3 Configuring an IPv6 over IPv4 Manual Tunnel..................................................................................189

11.4.4 Configuring a 6to4 Tunnel..................................................................................................................190

11.4.5 Configuring an ISATAP Tunnel..........................................................................................................191

11.4.6 Configuring Routes in the Tunnel.......................................................................................................192

11.4.7 Checking the Configuration.................................................................................................................193

11.5 Configuring 6PE...........................................................................................................................................193

11.5.1 Establishing the Configuration Task...................................................................................................193

11.5.2 Configuring IPv4/IPv6 Dual Protocol Stacks......................................................................................194

11.5.3 Configuring MPLS..............................................................................................................................195

11.5.4 Enabling 6PE Peer...............................................................................................................................196

11.5.5 Checking the Configuration.................................................................................................................196

11.6 Maintaining IPv6 over IPv4 Tunnels............................................................................................................197

11.6.1 Monitoring the Running Status of IPv6 over IPv4 Tunnel..................................................................197

11.6.2 Debugging IPv6 over IPv4 Tunnel......................................................................................................197

11.7 Configuration Examples...............................................................................................................................198

11.7.1 Example for Configuring an IPv6 over IPv4 Tunnel Manually..........................................................198

11.7.2 Example for Configuring a 6to4 Tunnel..............................................................................................203

11.7.3 Example for Configuring a 6to4 Relay................................................................................................207

Issue 01 (2011-10-26) ix

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service Contents

11.7.4 Example for Configuring an ISATAP Tunnel.....................................................................................211

11.7.5 Example for Configuring 6PE.............................................................................................................214

12 IPv4 over IPv6 Tunnel Configuration.................................................................................222

12.1 Introduction to IPv4 over IPv6.....................................................................................................................223

12.2 IPv4 over IPv6 Supported by the S9300......................................................................................................223

12.3 Configuring an IPv4 over IPv6 Tunnel........................................................................................................224

12.3.1 Establishing the Configuration Task...................................................................................................224

12.3.2 Configuring a Tunnel Interface...........................................................................................................224

12.3.3 Configuring Routes in the Tunnel.......................................................................................................225

12.3.4 Checking the Configuration.................................................................................................................226

12.4 Maintaining IPv4 over IPv6 Tunnels............................................................................................................227

12.4.1 Monitoring the Operation Status of IPv4 over IPv6 Tunnel...............................................................227

12.4.2 Debugging IPv4 over IPv6 Tunnel......................................................................................................227

12.5 Configuration Examples...............................................................................................................................228

12.5.1 Example for Configuring an IPv6 over IPv4 Tunnel..........................................................................228

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 1 IP Addresses Configuration

IP Addresses Configuration

About This Chapter

By assigning IP addresses to network devices, you can enable data communications between the network devices.

1.1 Introduction to IP Addresses

IP is the core of the TCP/IP protocol suite. The packets of the Transmission Control Protocol

(TCP), User Datagram Protocol (UDP), Internet Control Message Protocol (ICMP), and Internet

Group Membership Protocol (IGMP) are all transmitted in the format of IP datagrams. Devices on different networks communicate with each other using their network layer addresses, namely

IP addresses.

1.2 Features of IP Addresses Supported by the S9300

IP addresses can be obtained through static manual configuration or borrowing.

1.3 Configuring IP Addresses for Interfaces

Assigning an IP address to a device on a network enables the device to communicate with the other devices on the network.

1.4 Configuring IP Address Unnumbered for Interfaces

IP address unnumbered refers to the situation that an interface that is not assigned an IP address obtains an IP address by borrowing an IP address from another interface.

1.5 Configuration Examples

This section provides several examples of IP address configuration.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 1 IP Addresses Configuration

1.1 Introduction to IP Addresses

IP is the core of the TCP/IP protocol suite. The packets of the Transmission Control Protocol

(TCP), User Datagram Protocol (UDP), Internet Control Message Protocol (ICMP), and Internet

Group Membership Protocol (IGMP) are all transmitted in the format of IP datagrams. Devices on different networks communicate with each other using their network layer addresses, namely

IP addresses.

To communicate with each other on Internet Protocol (IP) networks, each host must be assigned an IP address.

An IP address is a 32-bit number that is composed of two parts, namely, the network ID and host ID.

The network ID identifies a network and the host ID identifies a host on the network. If the network IDs of hosts are the same, it indicates that the hosts are on the same network regardless of their physical locations.

1.2 Features of IP Addresses Supported by the S9300

IP addresses can be obtained through static manual configuration or borrowing.

The S9300 supports IP address configuration through the following methods: l Manually configuring an IP address for an interface l Borrowing an IP address from other interfaces

The S9300 supports the space overlapping of network segment addresses to save the address space.

l Different IP addresses in the overlapped network segments but not same can be configured on different interfaces of the same device. For example, after an interface on a device is configured with the IP address 20.1.1.1/16, if another interface is configured with the IP address 20.1.1.2/24, the system prompts a message. However, the configuration is still successful; if another interface is configured with the IP address 20.1.1.2/16, the system prompts an IP address conflict. The configuration fails.

l The primary IP address and the secondary IP address in the overlapped network segments but not same can be configured on the same interface. For example, after the interface is configured with a primary IP address 20.1.1.1/24, if the secondary IP address is 20.1.1.2/16 sub, the system prompts a message. However, the configuration is still successful.

l The primary IP address and the secondary IP address in the overlapped network segments but not same can be configured on different interfaces of the same device. However, the primary IP address and the secondary IP address cannot be the same. For example, after an interface on a device is configured with the IP address 20.1.1.1/16, if another interface is configured with the IP address 20.1.1.2/24 sub, the system prompts a message. However, the configuration is still successful.

The S9300 supports 31-bit IP address masks. Therefore, there are only two IP addresses in a network segment, that is, the network address and broadcast address. The two IP addresses can be used as host addresses.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 1 IP Addresses Configuration

1.3 Configuring IP Addresses for Interfaces

Assigning an IP address to a device on a network enables the device to communicate with the other devices on the network.

1.3.1 Establishing the Configuration Task

This section describes the applicable environment, pre-configuration tasks, data preparation, and configuration procedure for assigning an IP address to an interface.

Applicable Environment

To start IP services on an interface, configure the IP address for the interface. You can assign several IP addresses to each interface. Among them, one is the primary IP address and the others are secondary IP addresses.

Generally, you need to configure only a primary IP address for an interface. Secondary IP addresses, however, are required in some cases. For instance, when a device connects to a physical network through an interface, and computers on this network belong to two Class C networks, you need to configure a primary IP address and a secondary IP address for this interface to ensure that the device can communication with all computers on this network.

Pre-configuration Tasks

Before configuring an IP addresses for an interface, complete the following tasks: l Configuring the physical parameters for the interface and ensuring that the physical layer status of the interface is Up l Configuring the link layer parameters for the interface and ensuring that the status of the link layer protocol on the interface is Up

Data Preparation

To configure IP addresses for an interface, you need the following data.

No.

Data

1 Interface number

Primary IP address and subnet mask of the interface

(Optional) Secondary IP address and subnet mask of the interface

1.3.2 Configuring a Primary IP Address for an Interface

An interface can have only one primary IP address.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 1 IP Addresses Configuration

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 3 Run:

ip address ip-address { mask | mask-length }

A primary IP address is configured.

An interface has only one primary IP address. If the interface already has a primary IP address, the newly configured primary IP address replaces the original one.

----End

1.3.3 (Optional) Configuring a Secondary IP Address for an

Interface

To enable an interface to communicate with several networks with different network IDs, you need to assign a secondary IP address to this interface.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 3 Run:

ip address ip-address { mask | mask-length } sub

A secondary IP address is configured.

You can configure a maximum of 255 secondary IP addresses on an interface.

----End

1.3.4 Checking the Configuration

You can view the configuration of the IP address for an interface.

Prerequisite

The configurations of the IP addresses for the interface are complete.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Procedure

1 IP Addresses Configuration l Run the display ip interface [ brief ] [ interface-type [ interface-number ] ] command to check the IP configuration on the interface.

l Run the display interface [ interface-type [ interface-number ] ] command to check interface information.

----End

1.4 Configuring IP Address Unnumbered for Interfaces

IP address unnumbered refers to the situation that an interface that is not assigned an IP address obtains an IP address by borrowing an IP address from another interface.

1.4.1 Establishing the Configuration Task

This section describes the applicable environment, pre-configuration tasks, data preparation, and configuration procedure for configuring IP address unnumbered.

Applicable Environment

To save IP address resources in some cases, configure the IP address unnumbered on the interface. You can also perform this configuration for an interface that is occasionally used rather than making the interface occupy an IP address constantly.

Restrictions on configuring IP address unnumbered on an interface are as follows: l The interface of IP address borrower can not be an Ethernet interface.

l The interface of IP address lender cannot be IP address from other.

l Multiple interfaces can borrow the IP address from the interface of IP address lender.

l If the interface of IP address lender has multiple IP addresses, the IP address lender can only be the primary IP address.

l If the interface of IP address borrower borrows an IP address from the interface with no IP address, the IP address borrower gets the IP adderss 0.0.0.0.

The IP address of the virtual loopback interface can be borrowed by other interfaces. The loopback interface, however, cannot borrow the IP address from other interfaces.

Pre-configuration Tasks

Before configuring IP address unnumbered on an interface, complete the following tasks: l Configuring physical attributes for the IP address borrower and lender l Configuring link layer protocols for the IP address borrower and lender

Data Preparation

To configure IP address unnumbered on an interface, you need the following data.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 1 IP Addresses Configuration

No.

Data

1 Number, IP address, and mask of the interface that lends the IP address to other interfaces

2 Number of the interface that borrows an IP address from another interface

1.4.2 Configuring the Primary IP Address of the Interface That

Lends an IP Address

Only the primary IP address of an interface can be borrowed.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 3 Run:

ip address ip-address { mask | mask-length }

The primary IP address of the interface is configured.

----End

1.4.3 Configuring an Interface That Borrows an IP Address from

Another Interface

An Ethernet interface cannot borrow the IP address of another interface.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface tunnel interface-number

The TUNNEL interface view is displayed.

Step 3 Run:

ip address unnumbered interface interface-type interface-number

The interface is configured to borrow an IP address from the specified interface.

----End

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 1 IP Addresses Configuration

1.4.4 Checking the Configuration

You can view the borrowed IP address of an interface.

Prerequisite

The configurations of IP address unnumbered are complete.

Procedure

l Run the display ip interface [ brief ] [ interface-type [ interface-number ] ] command to check the IP configuration on the interface.

Run the display interface [ interface-type [ interface-number ] ] command to check interface information.

----End

1.5 Configuration Examples

This section provides several examples of IP address configuration.

1.5.1 Example for Setting Primary and Secondary IP Addresses

This section provides a configuration example of setting primary and secondary IP addresses.

Networking Requirements

As shown in

Figure 1-1

, GigabitEthernet 1/0/1 of the Switch is connected to a LAN, in which

hosts belong to two different network segments, that is 172.16.1.0/24 and 172.16.2.0/24. It is required that the Switch can access the two network segments but the host in 172.16.1.0/24 cannot interconnect with the host in 172.16.2.0/24.

Figure 1-1 Networking diagram for setting IP addresses

172.16.1.0/24

Switch

GE 1/0/1

VLANIF 100

172.16.1.1/24

172.16.2.1/24 sub

172.16.2.0/24

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 1 IP Addresses Configuration

Configuration Roadmap

The configuration roadmap is as follows:

Analyze the address of the network segment to which each interface is connected.

Set the secondary IP addresses for an interface.

NOTE

Note that the primary and secondary IP addresses of the same interface or different secondary IP addresses of the same interface cannot be in the same network segment.

Data Preparation

To complete the configuration, you need the following data.

Primary IP address and subnet mask of the interface l Secondary IP address and subnet mask of the interface

Procedure

Step 1 Set the IP address for VLANIF 100 where GigabitEthernet 1/0/1 of the Switch belongs.

<Quidway> system-view

[Quidway] vlan 100

[Quidway-Vlan100] quit

[Quidway] interface gigabitethernet 1/0/1

[Quidway-GigabitEthernet1/0/1] port hybrid pvid vlan 100

[Quidway-GigabitEthernet1/0/1] port hybrid untagged vlan 100

[Quidway-GigabitEthernet1/0/1] quit

[Quidway] interface vlanif 100

[Quidway-Vlanif100] ip address 172.16.1.1 24

[Quidway-Vlanif100] ip address 172.16.2.1 24 sub

Step 2 Verify the configuration.

# Ping a host on network segment 172.16.2.0 from Switch. The ping succeeds.

<Quidway> ping 172.16.1.2

PING 172.16.1.2: 56 data bytes, press CTRL_C to break

Reply from 172.16.1.2: bytes=56 Sequence=1 ttl=128 time=25 ms

Reply from 172.16.1.2: bytes=56 Sequence=2 ttl=128 time=27 ms

Reply from 172.16.1.2: bytes=56 Sequence=3 ttl=128 time=26 ms

Reply from 172.16.1.2: bytes=56 Sequence=4 ttl=128 time=26 ms

Reply from 172.16.1.2: bytes=56 Sequence=5 ttl=128 time=26 ms

--- 172.16.1.2 ping statistics ---

5 packet(s) transmitted

5 packet(s) received

0.00% packet loss

round-trip min/avg/max = 25/26/27 ms

Ping a host on network segment 172.16.2.0 from the Switch. The ping succeeds.

<Quidway> ping 172.16.2.2

PING 172.16.2.2: 56 data bytes, press CTRL_C to break

Reply from 172.16.2.2: bytes=56 Sequence=1 ttl=128 time=25 ms

Reply from 172.16.2.2: bytes=56 Sequence=2 ttl=128 time=26 ms

Reply from 172.16.2.2: bytes=56 Sequence=3 ttl=128 time=26 ms

Reply from 172.16.2.2: bytes=56 Sequence=4 ttl=128 time=26 ms

Reply from 172.16.2.2: bytes=56 Sequence=5 ttl=128 time=26 ms

--- 172.16.2.2 ping statistics ---

5 packet(s) transmitted

5 packet(s) received

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 1 IP Addresses Configuration

0.00% packet loss

round-trip min/avg/max = 25/25/26 ms

----End

Configuration Files

Configuration file of the Switch

sysname Quidway

vlan 100

# interface Vlanif100

ip address 172.16.1.1 255.255.255.0

ip address 172.16.2.1 255.255.255.0 sub

# interface GigabitEthernet1/0/1

port hybrid pvid vlan 100

port hybrid untagged vlan 100

# return

1.5.2 Example for Configuring a Tunnel Interface to Borrow the IP

Address of a Loopback Interface

This section provides a configuration example of tunnel interface borrowing the IP address of a Loopback interface.

Networking Requirements

As shown in

Figure 1-2

, Tunnel 3/0/15 of Switch A is connected to Switch C through a tunnel.

Tunnel 3/0/15 of Switch A is rarely used. To save IP addresses, configure Tunnel 3/0/15 of

Switch A to borrow the IP address of Loopback0 of Switch A. Tunnel 3/0/15 of Switch C borrows the IP address of Loopback0 of Switch C.

Figure 1-2 Networking diagram for configuring a tunnel interface to borrow an IP address of a loopback interface

SwitchB

SwitchA SwitchC

Tunnel

Tunnel 3/0/15

Issue 01 (2011-10-26)

PC 1 PC 2

Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

1 IP Addresses Configuration

Configuration Roadmap

The configuration roadmap is as follows: l Set addresses of the Loopback0 interfaces of Switch A and Switch C.

l Configure OSPF.

l Configure Tunnel 3/0/15 of Switch A to borrow the IP address of Loopback0.

l Configure Tunnel 3/0/15 of Switch C to borrow the IP address of Loopback0.

Data Preparation

To complete the configuration, you need the following data.

l IP address for Loopback0 of Switch A l

IP address for Loopback0 of Switch C l

Index for Loopback0 of Switch A l Index for Loopback0 of Switch C

Procedure

Step 1 # Configure Switch A.

# Set an IP address for Loopback0 of Switch A.

<Quidway> system-view

[Quidway] sysname SwitchA

[SwitchA] interface loopback 0

[SwitchA-LoopBack0] ip address 116.116.116.116 32

[SwitchA-LoopBack0] quit

Configure OSPF.

[SwitchA] ospf

[SwitchA-ospf-1] area 0

[SwitchA-ospf-1-area-0.0.0.0] network 116.116.116.116 0.0.0.0

[SwitchA-ospf-1-area-0.0.0.0] quit

[SwitchA-ospf-1] quit

# Configure Tunnel 3/0/15 to borrow the IP address of Loopback0.

[SwitchA] interface tunnel 3/0/15

[SwitchA-Tunnel3/0/15] ip address unnumbered interface loopback 0

[SwitchA-Tunnel3/0/15] quit

Step 2 Configure Switch C. The configuration procedure is the same as the configuration procedure of

Switch A.

Step 3 Verify the configuration.

# Ping 9.9.9.9 on Switch A.

[SwitchA] ping 9.9.9.9

PING 9.9.9.9: 56 data bytes, press CTRL_C to break

Reply from 9.9.9.9: bytes=56 Sequence=1 ttl=255 time=2 ms

Reply from 9.9.9.9: bytes=56 Sequence=2 ttl=255 time=3 ms

Reply from 9.9.9.9: bytes=56 Sequence=3 ttl=255 time=3 ms

Reply from 9.9.9.9: bytes=56 Sequence=4 ttl=255 time=3 ms

Reply from 9.9.9.9: bytes=56 Sequence=5 ttl=255 time=3 ms

--- 9.9.9.9 ping statistics ---

5 packet(s) transmitted

Issue 01 (2011-10-26) 10

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

5 packet(s) received

0.00% packet loss

round-trip min/avg/max = 2/2/3 ms

----End

Configuration Files

l Configuration file of Switch A

sysname SwitchA

# interface LoopBack0

ip address 116.116.116.116 255.255.225.255

# interface Tunnel3/0/15

ip address unnumbered interface LoopBack0

# ospf 1

area 0.0.0.0

network 116.116.116.116 0.0.0.0

# return l Configuration file of Switch C

sysname SwitchC

# interface LoopBack0

ip address 9.9.9.9 255.255.225.255

# interface Tunnel3/0/15

ip address unnumbered interface LoopBack0

# ospf 1

area 0.0.0.0

network 9.9.9.9 0.0.0.0

# return

1 IP Addresses Configuration

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

ARP Configuration

About This Chapter

Issue 01 (2011-10-26)

ARP can map an IP address to a MAC address and implements transmission of Ethernet frames.

2.1 Overview of ARP

An Ethernet device must support ARP. ARP implements dynamic mapping between Layer 3 IP addresses and Layer 2 MAC addresses.

2.2 Features of ARP Supported by the S9300

ARP can operate in either of two modes: static and dynamic. The extensions of ARP include proxy ARP, gratuitous ARP, and ARP-Ping.

2.3 Configuring Static ARP

Static ARP indicates that there is a fixed mapping between an IP address and a MAC address.

Static ARP needs to be configured by an administrator.

2.4 Optimizing Dynamic ARP

If dynamic ARP is configured, the system automatically resolutes an IP address into an Ethernet

MAC address.

2.5 Configuring Routed Proxy ARP

Proxy ARP enables devices whose IP addresses belong to the same network segment but different physical networks to communicate with each other.

2.6 Configuring Proxy ARP Within a VLAN

By configuring proxy ARP on a VLAN, you can interconnect isolated hosts on a VLAN.

2.7 Configuring Proxy ARP Between VLANs

By configuring inter-VLAN proxy ARP, you can interconnect hosts on different VLANs.

2.8 Configuring ARP-Ping IP

ARP-Ping IP is a method of detecting whether an IP address is used by another device on a local area network (LAN) by sending ARP packets.

2.9 Configuring ARP-Ping MAC

ARP-Ping MAC is a method of detecting whether a MAC address is used by another device on a LAN by sending ICMP packets.

2.10 Maintaining ARP

Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

The operations of ARP maintenance include clearing ARP statistics and monitoring ARP operating status.

2.11 Configuration Examples

This section provides several configuration examples of ARP.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

2.1 Overview of ARP

An Ethernet device must support ARP. ARP implements dynamic mapping between Layer 3 IP addresses and Layer 2 MAC addresses.

Each host or device on the Local Area Network (LAN) can be configured a 32-bit IP address to communicate with others. The assigned IP address is independent of the hardware address.

On the Ethernet, a host or a device transmits and receives Ethernet frames according to a 48-bit

Medium Access Control (MAC) address. The MAC address is also called the physical address or the hardware address, which is assigned to an Ethernet interface when equipment is produced.

Therefore, on an interconnected network, an address resolution mechanism is required to provide the mapping between MAC addresses and IP addresses.

The Address Resolution Protocol (ARP) maps an IP address to the corresponding MAC address.

2.2 Features of ARP Supported by the S9300

ARP can operate in either of two modes: static and dynamic. The extensions of ARP include proxy ARP, gratuitous ARP, and ARP-Ping.

ARP is only used in the IPv4 environment and can only run on Ethernet links.

Introduction to ARP-Ping

ARP-Ping consists of ARP-Ping IP and ARP-Ping MAC. ARP-Ping is developed to maintain the deployed Layer 2 features.

Introduction to ARP-Ping IP

ARP-Ping IP uses ARP packets to check whether an IP address is used by another device on the

LAN.

Before configuring an IP address for a device, you need to check that this IP address is not used by another device on the network by sending the ARP packets. Then, you can take appropriate actions.

You can also run the ping command to check whether the IP address is used by another device on the network. If enabled with the firewall function that does not reply to Ping packets, the destination host and device do not reply to Ping packets and think that the IP address is not in use. ARP is a Layer 2 protocol. In most cases, ARP packets can pass through the firewall. In this way, the preceding situation does not occur.

Principles of ARP-Ping IP

ARP-Ping IP sends ARP Request packets. The following describes how to implement ARP-Ping

IP:

After setting the specified IP address through command lines, you can send ARP Request packets and start the timeout timer.

After receiving an ARP Request packet, each device or host on the LAN replies with an

ARP Reply packet.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

After receiving the ARP Reply packet, the source device compares the source IP address contained in the Reply packet with the IP address input in the command line. If they are consistent, the MAC address corresponding to the input IP address is displayed and the timeout timer of ARP Reply packets is disabled. The operation finishes.

If the timeout timer of ARP Reply packets times out, it means that the IP address is not in use.

As shown in

Figure 2-1

, Switch A and Gigabitethernet A are directly connected. You can run

the arp-ping ip command on Switch A to check whether the IP address 10.1.1.2 is in use.

Figure 2-1 Implementation procedure of ARP-Ping IP

Host B

10.1.1.3/32

Host A

10.1.1.2/32

GE1/0/0

10.1.1.1/24

SwitchA

Gigabitethernet A

Run the arp-ping ip 10.1.1.2 command on Switch A. After receiving the ARP Reply packet from Host A 10.1.1.2 on the network, Switch A displays the MAC address of Host A.Switch A displays the MAC address of Node B.

Through the command output, you can know whether the IP address is used by another host on the network.

NOTE

Introduction to ARP-Ping MAC

ARP-Ping MAC uses ICMP packets to check whether a MAC address is used by another device on the LAN.

When you know a specific MAC address on a network segment but do not know the corresponding IP address, you can obtain the IP address corresponding to the MAC address by sending the broadcast Internet Control Messages Protocol (ICMP) packets through ARP-Ping

MAC. In this way, you can query the IP address corresponding to the specific MAC address on the network segment.

Principles of ARP-Ping MAC

ARP-Ping MAC sends broadcast ICMP Echo Request packets. The following describes how to implement ARP-Ping MAC:

After setting the specified MAC address through the command line, you can send broadcast

ICMP Echo Request packets and start the timeout timer.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

After receiving an ICMP Echo Request packet, each device or host on the LAN replies with an ICMP Echo Reply packet.

After receiving the ICMP Echo Reply packet, the source device compares the source MAC address contained in the Echo Reply packet with the MAC address input in the command line. If they are consistent, the IP address of the Echo Reply packet is displayed. Then the source device prompts you that the MAC address is in use and disables the timeout timer.

The operation finishes.

If the timeout timer of the ICMP Echo Reply packets times out, it means that the MAC address is not in use.

NOTE

If the system denies the request for replying with the network segment address, the sender cannot receive the ICMP Echo Reply packet.

As shown in

Figure 2-2

, Switch A and Gigabitethernet A are directly connected. You can run

the arp-ping mac command on Switch A to check whether the MAC address 0013-46E7-2EF5 is in use.

Figure 2-2 Implementation procedure of ARP-Ping MAC

Host A

0013-46E7-2EF5

GE1/0/0

10.1.1.1/24

SwitchA

Gigabitethernet A

The following describes how to implement ARP-Ping MAC on Switch A:

Run the arp-ping mac 0013-46E7-2EF5 10.1.1.0 or arp-ping mac 0013-46E7-2EF5

gigabitethernet 1/0/0 command on Switch A. After receiving the ICMP Reply packets replied by all the hosts on the network, Switch A displays the IP address of the host with the MAC address 0013-46E7-2EF5.

Through the command output, you can obtain the IP address corresponding to the MAC address.

NOTE

The arp-ping mac command is applicable to the outgoing interface in one of the following types: the

Ethernet interface, Gigabit Ethernet interface, Eth-Trunk interface, and VLANIF interface.

2.3 Configuring Static ARP

Static ARP indicates that there is a fixed mapping between an IP address and a MAC address.

Static ARP needs to be configured by an administrator.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

2.3.1 Establishing the Configuration Task

This section describes the applicable environment, pre-configuration tasks, data preparation, and configuration procedure for configuring static ARP.

Applicable Environment

Static ARP is used in the following situations: l For the packets whose destination IP address is on another network segment, static ARP can help these packets traverse a gateway of the local network segment so that the gateway can forward the packets to their destination.

l When you need to filter out some packets with illegitimate destination IP addresses, static

ARP can bind these illegitimate addresses to a nonexistent MAC address.

Pre-configuration Tasks

Before configuring ARP, complete the following tasks: l Configuring physical parameters for the interface and ensuring that the status of the physical layer of the interface is Up l Configuring link layer protocol parameters for the interface and ensuring that the status of the link layer protocol on the interface is Up l Configuring the network layer protocol for the interface

Data Preparation

To configure ARP, you need the following data.

No.

Data

1 IP address and MAC address of the static ARP entry

2 VPN instance name and VLAN ID to which the static ARP entry belongs

2.3.2 Configuring Common Static ARP Entries

Static ARP entries are required for the communication between common interfaces.

Context

If static ARP and the Virtual Router Redundancy Protocol (VRRP) are enabled on a device simultaneously, the virtual IP address of the VRRP backup group configured on the VLANIF interface cannot be the IP address contained in the static ARP entries; otherwise, incorrect host routes are generated and thus packets cannot be normally forwarded.

Procedure

Step 1 Run:

system-view

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

The system view is displayed.

Step 2 Run:

arp static ip-address mac-address

Configure common static ARP entries.

NOTE

Static ARP entries keep valid when a device works normally.

----End

2.3.3 Configuring Static ARP Entries in a VLAN

In the scenario where two users belong to the same VLAN but user isolation is configured in the VLAN, to implement communications between the two users, you need to enable static ARP within the VLAN on the member interface of the VLAN.

Context

If static ARP and the Virtual Router Redundancy Protocol (VRRP) are enabled on a device simultaneously, the virtual IP address of the VRRP backup group configured on the VLAN interface cannot be the IP address contained in the static ARP entries; otherwise, incorrect host routes are generated and thus packets cannot be normally forwarded.

NOTE

To configure static ARP for the packets with double tags, run the arp static cevid command. For details, see the Quidway S9300 Terabit Routing Switch Command Reference - Ethernet.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Configure static ARP entries in a Virtual Local Area Network (VLAN).

To configure static ARP entries in a VLAN, do as follows: l Run the arp static ip-address mac-address [ vid vlan-id interface interface-type interface-

number ] command.

To configure static ARP entries for VLANIF interfaces, if an ARP entry contains only the

IP address and MAC address, and the VLAN ID and outbound interface of the ARP packet are not specified, the system selects the outbound interface automatically. If the VLAN ID and outbound interface are specified, the system forwards the packet from the specified outbound interface.

If the interface corresponding to the VLAN is bound to a Virtual Private Network (VPN), the device can automatically associate the configured static ARP entry with the VPN. This command is applicable to port-based VLANs.

l Run the arp static ip-address mac-address [ vpn-instance vpn-instance-name ] vid vlan-

id command.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

NOTE

Static ARP entries keep valid when a device works normally.

----End

2.3.4 Configuring Static ARP Entries in a VPN Instance

To implement Layer 2 interworking of the devices in a VPN instance, you can configure static

ARP in the VPN instance.

Context

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

arp static ip-address mac-address vpn-instance vpn-instance-name

Configure static ARP entries in a VPN instance.

NOTE

Static ARP entries keep valid when a device works normally.

----End

2.3.5 Checking the Configuration

You can view the configuration of static ARP.

Prerequisite

The configurations of the ARP function are complete.

Procedure

l Run the display arp vpn-instance vpn-instance-name [ dynamic | static ] command to check information about ARP mapping tables based on VPN instances.

l Run the display arp statistics { all } command to check the statistics for ARP entries.

l Run the display arp trackcommand to check the ARP entries learned by VLANIF interfaces and view detailed information about the change of outbound interfaces.

----End

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

2.4 Optimizing Dynamic ARP

If dynamic ARP is configured, the system automatically resolutes an IP address into an Ethernet

MAC address.

2.4.1 Establishing the Configuration Task

This section describes the applicable environment, pre-configuration tasks, data preparation, and configuration procedure for optimizing dynamic ARP.

Applicable Environment

Dynamic ARP is one of functions owned by a device or host. You do not need to run a command to enable dynamic ARP but you can modify some parameters of dynamic ARP.

Pre-configuration Tasks

None

Data Preparation

Optimizing dynamic ARP, you need the following data.

No.

Data

1 Aging detection times of the dynamic ARP entry

2 Aging time of the dynamic ARP entry

2.4.2 Modify the aging parameters of dynamic ARP

If the device needs to update ARP entries frequently, you can reduce the aging timeout period of ARP entries, increase the number of aging detections for ARP entries, and reduce the aging detection intervals of ARP entries.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 3 Run:

arp detect-times detect-times

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

The number of aging detection times of the dynamic ARP entries is configured.

Step 4 Run:

arp expire-time expire-times

The timeout period for aging dynamic ARP entries is configured.

By default, the aging detection times of the dynamic ARP entries is three, and the aging timeout period is 1200 seconds.

Step 5 Run:

arp detect-mode unicast

The interface is configured to send ARP Aging Detection packets in unicast mode.

By default, an interface sends ARP Aging Detection packets in broadcast mode.

----End

2.4.3 Enabling ARP Suppression Function

If the system receives a great number of ARP packets from the same source at a time, the system needs to update ARP entries repeatedly. To ensure the performance of the system, you can enable

ARP suppression. In this manner, the system only responds to the ARP packets but does not update ARP entries.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

arp-suppress enable

ARP suppression is enabled on the current device.

----End

2.4.4 Enabling Layer 2 Topology Detection Function

After Layer 2 topology detection is enabled, the system updates all the ARP entries corresponding to the VLANs to which a Layer 2 interface belongs, if this Layer 2 interface goes

Up.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

l2-topology detect enable

The Layer 2 topology detection function is enabled.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

By default, this function is not enabled.

----End

2.4.5 Checking the Configuration

You can view the configuration of dynamic ARP.

Prerequisite

The configurations of the ARP function are complete.

Procedure

l Run the display arp interface interface-type interface-number [ vid vlan-id [ cevid cevlan-

id ] ] command to check information about ARP mapping tables based on interfaces.

l Run the display arp vpn-instance vpn-instance-name [ dynamic | static ] command to check information about ARP mapping tables based on VPN instances.

l Run the display arp statistics { all } command to check the statistics for ARP entries.

l Run the display arp trackcommand to check the ARP entries learned by VLANIF interfaces and view detailed information about the change of outbound interfaces.

----End

2.5 Configuring Routed Proxy ARP

Proxy ARP enables devices whose IP addresses belong to the same network segment but different physical networks to communicate with each other.

2.5.1 Establishing the Configuration Task

This section describes the applicable environment, pre-configuration tasks, data preparation, and configuration procedure for configuring routed proxy ARP.

Applicable Environment

The two physical networks of an enterprise are in different subnets of the same IP network, and are separated by a device. You need to enable the proxy ARP on the device interface connected to the physical networks. This enables communication between the two networks.

Network IDs of subnet hosts must be the same. You need not configure default gateways for hosts.

Pre-configuration Tasks

Before configuring routed proxy ARP, complete the following tasks: l Configuring the physical parameters for the interface and ensuring that the status of the physical layer of the interface is Up l Configuring the link layer parameters for the interface and ensuring that the status of the link layer protocol on the interface is Up

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Data Preparation

To configure routed proxy ARP, you need the following data.

No.

Data

1 Number of the interface to be enabled with routed proxy ARP

2 IP address of the interface to be enabled with routed proxy ARP

2 ARP Configuration

2.5.2 Configure an IP Addresses for the Interface

The IP address assigned to a routed proxy ARP-enabled interface must be on the same network segment with the IP address of the host on the LAN to which this interface connects.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Routed proxy ARP can be enabled only on the VLANIF interface of the S9300.

Step 3 Run:

ip address ip-address { mask | mask-length }

The interface is configured with an IP address.

The IP address configured for the interface must be in the same network segment with that of hosts in the LAN connected with this interface.

----End

2.5.3 Enabling the Routed Proxy ARP Function

To interconnect the subnets in the same IP network, you need to enable routed proxy ARP.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

Step 3 Run:

arp-proxy enable

By default, the routed proxy ARP function is disabled on the interface.

After routed proxy ARP is enabled, you must reduce the aging time of ARP entries in the deviece so that the number of packets received but cannot be forwarded by the device is decreased. To configure the aging time of ARP entries.

----End

2.5.4 Checking the Configuration

You can view the configuration of routed proxy ARP.

Prerequisite

The configurations of the routed proxy ARP function are complete.

Procedure

l Run the display arp interface interface-type interface-number [ vid vlan-id [ cevid cevlan-

id ] ] command to check information about ARP mapping tables based on interfaces.

l Run the display arp vpn-instance vpn-instance-name [ dynamic | static ] command to check information about ARP mapping tables based on VPN instances.

l Run the display arp statistics command to check statistics about ARP entries.

----End

2.6 Configuring Proxy ARP Within a VLAN

By configuring proxy ARP on a VLAN, you can interconnect isolated hosts on a VLAN.

2.6.1 Establishing the Configuration Task

This section describes the applicable environment, pre-configuration tasks, data preparation, and configuration procedure for configuring proxy ARP on a VLAN.

Applicable Environment

If two users are in the same VLAN but they are isolated from each other, to ensure the two users can communicate, you need to enable proxy ARP within the VLAN on the interface associated with the VLAN.

Pre-configuration Tasks

Before configuring proxy ARP within a VLAN, complete the following tasks: l Configuring physical attributes for the interface and ensuring that the status of the physical layer of the interface is Up l Configuring the VLAN l Configuring user isolation in the VLAN

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

Data Preparation

To configure proxy ARP within a VLAN, you need the following data.

No.

Data

1 Number of the interface to be enabled with proxy ARP in a VLAN

IP address of the interface to be enabled with proxy ARP in a VLAN

VLAN ID associated with the interface to be enabled with proxy ARP in a VLAN

2.6.2 Configure an IP Addresses for the Interface

The IP address assigned to an interface needs to be in the same network segment with the IP addresses of the users of the VLANs associated to this interface.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Intra-VLAN proxy ARP can be enabled on only the VLANIF interface of the S9300.

Step 3 Run:

ip address ip-address { mask | mask-length }

The interface is configured with an IP address.

The IP address configured for the interface must be in the same network segment with that of hosts in the VLAN associated with this interface.

----End

2.6.3 Enabling Proxy ARP Within a VLAN

To interconnect isolated users on a VLAN, you need to enable intra-VLAN proxy ARP on the interface associated to the VLAN.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface vlanif vlan-id

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

The VLANIF interface view is displayed.

Step 3 Run:

arp-proxy inner-sub-vlan-proxy enable

Proxy ARP within a VLAN is enabled.

----End

2.6.4 Checking the Configuration

You can view the configuration of intra-VLAN proxy ARP.

Prerequisite

The configurations of the proxy ARP within a VLAN function are complete.

Procedure

l Run the display arp interface interface-type interface-number [ vid vlan-id [ cevid cevlan-

id ] ] command to check information about ARP mapping tables based on interfaces.

l Run the display arp vpn-instance vpn-instance-name [ dynamic | static ] command to check information about ARP mapping tables based on VPN instances.

l Run the display arp statistics command to check statistics about ARP entries.

----End

2.7 Configuring Proxy ARP Between VLANs

By configuring inter-VLAN proxy ARP, you can interconnect hosts on different VLANs.

2.7.1 Establishing the Configuration Task

This section describes the applicable environment, pre-configuration tasks, data preparation, and configuration procedure for configuring inter-VLAN proxy ARP.

Applicable Environment

If two users belong to different VLANs and they need to communicate, you need to enable proxy

ARP between VLANs on the sub-interface associated with the VLAN.

IP addresses of hosts in a VLAN must be in the same network segment.

Pre-configuration Tasks

Before configuring proxy ARP between VLANs, complete the following tasks: l Configuring physical attributes for the interface and ensuring that the status of the physical layer of the interface is Up l

Configuring VLAN aggregation

Data Preparation

To configure proxy ARP between VLANs, you need the following data.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

No.

Data

1 Number of the interface to be enabled with proxy ARP between VLANs

IP address of the interface to be enabled with proxy ARP between VLANs

VLAN ID associated with the interface to be enabled with proxy ARP between

VLANs

2.7.2 Configuring an IP Addresses for the Interface

The IP address assigned to an interface needs to be in the same network segment with the IP addresses of the users of all the VLANs associated to this interface.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Inter-VLAN proxy ARP can be enabled only on the VLANIF interface of the S9300.

Step 3 Run:

ip address ip-address { mask | mask-length }

The interface is configured with an IP address.

The IP address configured for the interface must be in the same network segment with that of hosts in the VLAN associated with this interface.

----End

2.7.3 Enabling Proxy ARP Between VLANs

To interconnect users on different VLANs, you need to enable inter-VLAN proxy ARP on the

VLANIF interfaces.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

Step 3 Run:

arp-proxy inter-sub-vlan-proxy enable

Proxy ARP between VLANs is enabled.

----End

2.7.4 Checking the Configuration

You can view the configuration of inter-VLAN proxy ARP.

Prerequisite

The configurations of Proxy ARP Between VLANs are complete.

Procedure

l Run the display arp interface interface-type interface-number [ vid vlan-id [ cevid cevlan-

id ] ] command to check information about ARP mapping tables based on interfaces.

l Run the display arp vpn-instance vpn-instance-name [ dynamic | static ] command to check information about ARP mapping tables based on VPN instances.

l Run the display arp statistics command to check statistics about ARP entries.

----End

2.8 Configuring ARP-Ping IP

ARP-Ping IP is a method of detecting whether an IP address is used by another device on a local area network (LAN) by sending ARP packets.

2.8.1 Establishing the Configuration Task

This section describes the applicable environment, pre-configuration tasks, data preparation, and configuration procedure for configuring ARP-Ping IP.

Applicable Environment

In the LAN, to configure an IP address for a device, you need to use the arp-ping ip command to check whether this IP address is used by another device in the network.

Pre-configuration Tasks

Before configuring ARP-Ping IP, complete the following tasks: l Configuring parameters of the link layer protocol and IP addresses for the interfaces and ensuring that the status of the link layer protocol on the interfaces is Up.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Data Preparation

To configure ARP-Ping IP, you need the following data.

No.

Data

IP address to be checked

2 ARP Configuration

2.8.2 Detecting the IP Address by Using the arp-ping ip Command

ARP-Ping IP detects whether an IP address is used by a device on a LAN by sending ARP requests.

Procedure

Step 1 Run:

Check whether the IP address is in use.

The following information is displayed: l If the following information is displayed, it means that the IP address is not in use.

[Quidway] arp-ping ip 110.1.1.2

ARP-Pinging 110.1.1.2:

Request timed out

The IP address is not used by anyone!

l If the following information is displayed, it means that the IP address is in use.

[Quidway] arp-ping ip 128.1.1.1

ARP-Pinging 128.1.1.1:

128.1.1.1 is used by 00e0-517d-f202

----End

2.9 Configuring ARP-Ping MAC

ARP-Ping MAC is a method of detecting whether a MAC address is used by another device on a LAN by sending ICMP packets.

2.9.1 Establishing the Configuration Task

This section describes the applicable environment, pre-configuration tasks, data preparation, and configuration procedure for configuring ARP-Ping MAC.

Applicable Environment

To check whether a MAC address is in use or query the IP address through the MAC address, you can use the arp-ping mac command.

Pre-configuration Tasks

Before configuring ARP-Ping MAC, complete the following tasks:

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration l Configuring parameters of the link layer protocol and IP addresses for the interfaces and ensuring that the status of the link layer protocol on the interfaces is Up.

Data Preparation

To configure ARP-Ping MAC, you need the following data.

No.

Data

MAC address to be checked

2.9.2 Detecting the MAC Address by Using the arp-ping mac

Command

ARP-Ping MAC detects whether an IP address is used by a device on a LAN by sending ICMP packets.

Procedure

Step 1 Run:

arp-ping mac mac-address { ip-address [ vpn-instance vpn-instance-name ] |

interface interface-type interface-number }

Check whether the MAC address is in use. Alternatively, you can query the IP address through the MAC address.

The following information is displayed: l If the following information is displayed, it means that the MAC address is not in use.

[Quidway] arp-ping mac 00e0-517d-f201 interface gigabitethernet 1/0/0

OutInterface: GigabitEthernet1/0/0 MAC[00-E0-51-7D-F2-01], press CTRL_C to

break

Request timed out

----- ARP-Ping MAC statistics -----

3 packet(s) transmitted

0 packet(s) received

MAC[00-E0-51-7D-F2-01] not be used l If the following information is displayed, it means that the MAC address is in use.

[Quidway] arp-ping mac 00e0-517d-f202 interface gigabitethernet 1/0/0

OutInterface: GigabitEthernet1/0/0 MAC[00-E0-51-7D-F2-02], press CTRL_C to break

----- ARP-Ping MAC statistics -----

1 packet(s) transmitted

1 packet(s) received

IP ADDRESS MAC ADDRESS

128.1.1.1 00-E0-51-7D-F2-02

----End

2.10 Maintaining ARP

The operations of ARP maintenance include clearing ARP statistics and monitoring ARP operating status.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

2.10.1 Clearing ARP Entries

This section describes ARP entries clearance through the reset command.

Context

2 ARP Configuration

CAUTION

l The mapping between the IP and MAC addresses is deleted after you clear ARP entries. So, confirm the action before you use the command.

l The static ARP entries cannot restore after you clear it. So, confirm the action before you use the command.

Procedure

Step 1 Run the reset arp { all | dynamic | interface interface-type interface-number | static } command in the user view to clear the ARP entries in the ARP mapping table.

----End

2.10.2 Monitoring Network Operation Status of ARP

This section describes ARP operation monitoring through the display command.

Context

In routine maintenance, you can run the following command in any view to check the operation of ARP.

Procedure

l Run the display arp interface interface-type interface-number [ vid vlan-id [ cevid cevlan-

id ] ] command in any view to check the information about the ARP mapping table based on interfaces.

l Run the display arp vpn-instance vpn-instance-name [ dynamic | static ] command in any view to check the information about ARP mapping tables based on VPN instances.

l Run the display arp track command in any view to check the information about the outbound interfaces change of ARP entries learned by VLANIF interfaces.

----End

2.10.3 Debugging ARP

This section describes ARP debugging through the debugging command.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Context

2 ARP Configuration

CAUTION

Debugging affects the performance of the system. Thus, after debugging, run the undo

debugging all command to disable debugging immediately. When the CPU usage is close to

100%, debugging ARP may cause the board resetting. So, confirm the action before you use the command.

When faults occur during ARP operation, run the following debugging command in the user view to debug ARP and locate the fault.

For more information, see chapter "Information Center Configuration" in the Quidway S9300

Terabit Routing Switch Configuration Guide-System Management. For descriptions about the

debugging commands, see the Quidway S9300 Terabit Routing Switch Debugging Reference.

Procedure

l Run the debugging arp packet [ interface interface-type interface-number | slot slot-id ] command in the user view to debug ARP.

l Run the debugging arp-proxy [ inner-sub-vlan-proxy | inter-sub-vlan-proxy ]

[ interface interface-type interface-number ] command in the user view to debug proxy

ARP.

l Run the debugging arp process [slot slot-id | interface interface-type interface-number ] command in the user view to debug the processing of ARP packets.

----End

2.11 Configuration Examples

This section provides several configuration examples of ARP.

2.11.1 Example for Configuring ARP

Networking Requirements

As shown in

Figure 2-3

, GE 1/0/1 of the Switch is connected to the host through the LAN switch

(LSW); GE 1/0/2 is connected to the server through the router. It is required that: l GE 1/0/1 should be added to VLAN 2, and GE 1/0/2 should be added to VLAN 3.

To adapt to fast changes of the network and ensure correct forwarding of packets, dynamic

ARP parameters need to be set on VLANIF 2 of the Switch.

l To ensure communication security between hosts and the server, and prevent invalid ARP packets, a static ARP entry needs to be created on GE 1/0/2 of the Switch. In the ARP entry, the IP address of the router is 10.2.2.3 and the MAC address is 00e0-fc01-0000.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Figure 2-3 Networking diagram for configuring ARP

Server

Internet

2 ARP Configuration

Router

GE1/0/2

Switch

GE1/0/1

LSW

PC1

PC2

Configuration Roadmap

The configuration roadmap is as follows:

Create a VLAN and add an interface to the VLAN.

Set dynamic ARP parameters on a VLANIF interface at the user side.

Create a static ARP entry.

Data Preparation

To complete the configuration, you need the following data: l GE 1/0/1 added to VLAN 2 and GE 1/0/2 added to VLAN 3 l VLANIF 2 with the IP address being 2.2.2.2 and subnet mask being 255.255.255.0, aging time of ARP entries being 60s, and number of detection times being 2 l LSW with the IP address being 2.2.2.1 and subnet mask being 255.255.255.0

l Interface connecting the router and the Switch, with the IP address being 10.2.2.3, subnet mask being 255.255.255.0, and MAC address being 00e0-fc01-0000

Procedure

Step 1 Create a VLAN and add an interface to the VLAN.

# Create VLAN 2 and VLAN 3.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

2 ARP Configuration

<Quidway> system-view

[Quidway] vlan batch 2 3

# Add GE 1/0/1 to VLAN 2 and add GE 1/0/2 to VLAN 3.

[Quidway] interface gigabitethernet 1/0/1

[Quidway-GigabitEthernet1/0/1] port hybrid tagged vlan 2

[Quidway-GigabitEthernet1/0/1] quit

[Quidway] interface gigabitethernet 1/0/2

[Quidway-GigabitEthernet1/0/2] port hybrid tagged vlan 3

[Quidway-GigabitEthernet1/0/2] quit

Step 2 Set dynamic ARP parameters on a VLANIF interface.

# Create VLANIF2.

[Quidway] interface vlanif 2

# Assign an IP address to VLANIF 2.

[Quidway-Vlanif2] ip address 2.2.2.2 255.255.255.0

# Set the aging time of ARP entries to 60s.

[Quidway-Vlanif2] arp expire-time 60

# Set the number of detection times before deleting ARP entries to 2.

[Quidway-Vlanif2] arp detect-times 2

[Quidway-Vlanif2] quit

Step 3 Create a static ARP entry.

# Create VLANIF 3.

[Quidway] interface vlanif 3

# Assign an IP address to VLANIF 3.

[Quidway-Vlanif3] ip address 10.2.2.2 255.255.255.0

[Quidway-Vlanif3] quit

# Create a static ARP entry with IP address 10.2.2.3, MAC address 00e0-fc01-0000, VLAN ID

3, and outgoing interface GE 1/0/2.

[Quidway] arp static 10.2.2.3 00e0-fc01-0000 vid 3 interface gigabitethernet 1/0/2

[Quidway] quit

Step 4 Verify the configuration.

# Run the display current-configuration command. You can view the aging time of ARP entries, the number of detection times before deleting ARP entries, and the ARP mapping table.

<Quidway> display current-configuration | include arp

arp expire-time 60

arp detect-times 2

arp static 10.2.2.3 00e0-fc01-0000 vid 3 interface GigabitEthernet1/0/2

----End

Configuration Files

The following is the configuration file of the Switch.

sysname Quidway

# vlan batch 2 to 3

Issue 01 (2011-10-26) 34

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

# interface Vlanif2 ip address 2.2.2.2 255.255.255.0

arp expire-time 60

arp detect-times 2

# interface Vlanif3

ip address 10.2.2.2 255.255.255.0

# interface GigabitEthernet 1/0/1

port hybrid tagged vlan 2

# interface GigabitEthernet 1/0/2

port hybrid tagged vlan 3

arp static 10.2.2.3 00e0-fc01-0000 vid 3 interface GigabitEthernet1/0/2

# return

2.11.2 Example for Configuring Routed Proxy ARP

Networking Requirements

As shown in

Figure 2-4

, GE 1/0/0 and GE 1/0/1 of the Switch are connected to a LAN

respectively, and the network IDs of the two LANs are 172.16.0.0/16. Host A and Host B are not configured with the default gateway. It is required that routed proxy ARP should be enabled on the Switch so that hosts in the two LANs can communicate.

Figure 2-4 Networking diagram for configuring routed proxy ARP

Host A

172.16.1.2/16

0000-5e33-ee20

Host B

172.16.2.2/16

0000-5e33-ee10

Ethernet A

GE1/0/0

172.16.1.1/24

VLAN 2

Switch

GE1/0/1

172.16.2.1/24

VLAN 3

Ethernet B

Configuration Roadmap

The configuration roadmap is as follows:

Assign an IP Address to an interface.

Enable routed proxy ARP on the interface.

Configure the default route.

Data Preparation

To complete the configuration, you need the following data:

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service l IP addresses of the interfaces l Default route l IP addresses of the hosts

Procedure

Step 1 Create VLAN 2 and add GE 1/0/0 to VLAN 2.

<Quidway> system-view

[Quidway] vlan 2

[Quidway-vlan2] quit

[Quidway] interface gigabitethernet 1/0/0

[Quidway-GigabitEthernet1/0/0] port link-type access

[Quidway-GigabitEthernet1/0/0] port default vlan 2

[Quidway-GigabitEthernet1/0/0] quit

Step 2 Create and configure VLANIF 2.

[Quidway] interface vlanif 2

[Quidway-Vlanif2] ip address 172.16.1.1 255.255.255.0

Step 3 Enable routed proxy ARP on VLANIF 2.

[Quidway-Vlanif2] arp-proxy enable

[Quidway-Vlanif2] quit

Step 4 Create VLAN 3 and add GE 1/0/1 to VLAN 3.

[Quidway] vlan 3

[Quidway-vlan3] quit

[Quidway] interface gigabitethernet 1/0/1

[Quidway-GigabitEthernet1/0/1] port link-type access

[Quidway-GigabitEthernet1/0/1] port default vlan 3

[Quidway-GigabitEthernet1/0/1] quit

Step 5 Create and configure VLANIF 3.

[Quidway] interface vlanif 3

[Quidway-Vlanif3] ip address 172.16.2.1 255.255.255.0

Step 6 Enable routed proxy ARP on VLANIF 3.

[Quidway-Vlanif3] arp-proxy enable

[Quidway-Vlanif3] quit

Step 7 Configure the hosts.

# Assign IP address 172.16.1.2/16 to Host A.

# Assign IP address 172.16.2.2/16 to Host B.

Step 8 Verify the configuration.

# Ping Host B from Host A. The ping operation is successful.

----End

Configuration Files

Configuration file of the Switch

sysname Quidway

vlan batch 2 to 3

# interface Vlanif2

ip address 172.16.1.1 255.255.255.0

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

2 ARP Configuration

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

arp-proxy enable

# interface Vlanif3

ip address 172.16.2.1 255.255.255.0

arp-proxy enable

# interface GigabitEthernet1/0/0

port link-type access

port default vlan 2

# interface GigabitEthernet1/0/1

port link-type access

port default vlan 3

# return

2.11.3 Example for Configuring Intra-VLAN Proxy ARP

Networking Requirements

As shown in

Figure 2-5

, GE 1/0/1 and GE 1/0/0 of the Switch belong to sub-VLAN 2. Sub-

VLAN 2 belong to super-VLAN 3. It is required that: l Host A and host B in VLAN 2 should be isolated at Layer 2.

l Host A should communicate with host B at Layer 3 through intra-VLAN proxy ARP.

The IP address and subnet mask of the VLANIF interface in super-VLAN 3 should be 10.10.10.1

and 255.255.255.0.

Figure 2-5 Networking diagram for configuring intra-VLAN proxy ARP

Internet

GE1/0/1

Switch

GE1/0/0 hostB

10.10.10.3/24

00-e0-fc-00-00-03 sub-VLAN2 hostA

10.10.10.2/24

00-e0-fc-00-00-02

Configuration Roadmap

The configuration roadmap is as follows:

Create and configure a super-VLAN and a sub-VLAN.

Add an interface to the sub-VLAN.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

2 ARP Configuration

Create a VLANIF interface of the super-VLAN and assign an IP address to the VLANIF interface.

Enable intra-VLAN proxy ARP on the VLANIF interface of the super-VLAN.

Data Preparation

To complete the configuration, you need the following data: l VLAN IDs of the super-VLAN and sub-VLAN l GE 1/0/1 and GE 1/0/0 belonging to sub-VLAN 2 l IP address and subnet mask of VLANIF 3 of super-VLAN 3 being 10.10.10.1 and

255.255.255.0

Procedure

Step 1 Configure the super-VLAN and sub-VLAN.

# Configure sub-VLAN 2.

<Quidway> system-view

[Quidway] vlan 2

[Quidway-vlan2] quit

# Enable port isolation on GE 1/0/0 and GE 1/0/1.

[Quidway] port-isolate mode l2

[Quidway] interface gigabitethernet 1/0/0

[Quidway-GigabitEthernet1/0/0] port-isolate enable

[Quidway-GigabitEthernet1/0/0] quit

[Quidway] interface gigabitethernet 1/0/1

[Quidway-GigabitEthernet1/0/1] port-isolate enable

[Quidway-GigabitEthernet1/0/1] quit

# Add GE 1/0/0 and GE 1/0/1 to sub-VLAN 2.

[Quidway] interface gigabitethernet 1/0/0

[Quidway-GigabitEthernet1/0/0] port link-type access

[Quidway-GigabitEthernet1/0/0] port default vlan 2

[Quidway-GigabitEthernet1/0/0] quit

[Quidway] interface gigabitethernet 1/0/1

[Quidway-GigabitEthernet1/0/1] port link-type access

[Quidway-GigabitEthernet1/0/1] port default vlan 2

[Quidway-GigabitEthernet1/0/1] quit

# Configure super-VLAN 3 and add sub-VLAN 2 to super-VLAN 3.

[Quidway] vlan 3

[Quidway-vlan3] aggregate-vlan

[Quidway-vlan3] access-vlan 2

[Quidway-vlan3] quit

Step 2 Create and configure VLANIF 3.

# Create VLANIF 3.

[Quidway] interface vlanif 3

# Assign an IP address to VLANIF 3.

[Quidway-Vlanif3] ip address 10.10.10.1 24

Step 3 Enable intra-VLAN proxy ARP on VLANIF 3.

[Quidway-Vlanif3] arp-proxy inner-sub-vlan-proxy enable

[Quidway-Vlanif3] quit

Step 4 Verify the configuration.

Issue 01 (2011-10-26) 38

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

# Run the display current-configuration command. You can view the configurations of the super-VLAN, sub-VLAN, and VLANIF interface. For query results, see the following configuration file.

# Run the display arp command to view all the ARP entries.

<Quidway> display arp

IP ADDRESS MAC ADDRESS EXPIRE(M) TYPE INTERFACE VPN-INSTANCE

VLAN/CEVLAN

------------------------------------------------------------------------------

10.10.10.1 0018-2000-0083 I - Vlanif3

10.10.10.2 00e0-fc00-0002 19 D-0 GE1/0/0

2/-

10.10.10.3 00e0-fc00-0003 19 D-0 GE1/0/1

2/-

------------------------------------------------------------------------------

Total:3 Dynamic:2 Static:0 Interface:1

----End

Configuration Files

The following lists the configuration file of the Switch.

sysname Quidway

vlan batch 2 to 3

# vlan 3

aggregate-vlan

access-vlan 2

# interface Vlanif3

ip address 10.10.10.1 255.255.255.0

arp-proxy inner-sub-vlan-proxy enable

# interface GigabitEthernet1/0/0

port link-type access

port default vlan 2

port-isolate enable group 1

# interface GigabitEthernet1/0/1

port link-type access

port default vlan 2

port-isolate enable group 1

# return

2.11.4 Example for Configuring Inter-VLAN Proxy ARP

Networking Requirements

As shown in

Figure 2-6

, VLAN 2 and VLAN 3 constitute super-VLAN 4. It is required that:

l Hosts in the sub-VLANs 2 and 3 should not be pinged mutually.

l Hosts in VLAN 2 and VLAN 3 should be pinged mutually after inter-VLAN proxy ARP is enabled.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Figure 2-6 Networking diagram for configuring inter-VLAN proxy ARP

Switch

2 ARP Configuration

VLAN2 VLAN3

VLAN4

VLAN2 VLAN3

Configuration Roadmap

The configuration roadmap is as follows:

Configure a super-VLAN and a sub-VLAN.

Add an interface to the sub-VLAN.

Create an VLANIF interface of the super-VLAN and assign an IP address to the VLANIF interface.

Enable inter-VLAN proxy ARP.

Data Preparation

To complete the configuration, you need the following data: l VLAN IDs of the super-VLAN and sub-VLAN l GE 1/0/1 and GE 1/0/0 belonging to sub-VLAN 2 l GE 2/0/0 and GE 2/0/1 belonging to sub-VLAN 3 l IP address and subnet mask of VLANIF 4 in super-VLAN 4 being 10.10.10.1 and

255.255.255.0

Procedure

Step 1 Configure the super-VLAN and sub-VLAN.

# Configure sub-VLAN 2.

<Quidway> system-view

[Quidway] vlan 2

[Quidway-vlan2] quit

# Add GE 1/0/0 and GE 1/0/1 to sub-VLAN 2.

[Quidway] interface gigabitethernet 1/0/0

[Quidway-GigabitEthernet1/0/0] port link-type access

[Quidway-GigabitEthernet1/0/0] port default vlan 2

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

[Quidway-GigabitEthernet1/0/0] quit

[Quidway] interface gigabitethernet 1/0/1

[Quidway-GigabitEthernet1/0/1] port link-type access

[Quidway-GigabitEthernet1/0/1] port default vlan 2

[Quidway-GigabitEthernet1/0/1] quit

# Configure sub-VLAN 3.

<Quidway> system-view

[Quidway] vlan 3

[Quidway-vlan3] quit

# Add GE2/0/0 and GE2/0/1 to sub-VLAN 3.

[Quidway] interface gigabitethernet 2/0/0

[Quidway-GigabitEthernet2/0/0] port link-type access

[Quidway-GigabitEthernet2/0/0] port default vlan 3

[Quidway-GigabitEthernet2/0/0] quit

[Quidway] interface gigabitethernet 2/0/1

[Quidway-GigabitEthernet2/0/1] port link-type access

[Quidway-GigabitEthernet2/0/1] port default vlan 3

[Quidway-GigabitEthernet2/0/1] quit

# Configure super-VLAN 4 and add sub-VLAN 2 to super-VLAN 4.

[Quidway] vlan 4

[Quidway-vlan4] aggregate-vlan

[Quidway-vlan4] access-vlan 2

[Quidway-vlan4] access-vlan 3

[Quidway-vlan4] quit

Step 2 Create and configure VLANIF 4.

# Create VLANIF 4.

[Quidway] interface vlanif 4

# Assign an IP address to VLANIF 4.

[Quidway-Vlanif4] ip address 10.10.10.1 24

Step 3 Enable inter-VLAN proxy ARP on VLANIF 4.

[Quidway-Vlanif4] arp-proxy inter-sub-vlan-proxy enable

[Quidway-Vlanif4] quit

Step 4 Verify the configuration.

# Run the display current-configuration command. You can view the configurations of the super-VLAN, sub-VLAN, and VLANIF interface. For query results, see the following configuration file.

# Run the display arp command to view all the ARP entries.

<Quidway> display arp

IP ADDRESS MAC ADDRESS EXPIRE(M) TYPE INTERFACE VPN-INSTANCE

VLAN/CEVLAN

------------------------------------------------------------------------------

10.10.10.1 0018-2000-0083 I - Vlanif4

10.10.10.2 00e0-fc00-0002 19 D-0 GE1/0/0

2/-

10.10.10.3 00e0-fc00-0003 19 D-0 GE1/0/1

2/-

10.10.10.4 00e0-fc00-0004 19 D-0 GE2/0/0

3/-

10.10.10.5 00e0-fc00-0005 19 D-0 GE2/0/1

3/-

------------------------------------------------------------------------------

Total:5 Dynamic:4 Static:0 Interface:1

----End

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

Configuration Files

The following lists the configuration file of the Switch.

sysname Quidway

vlan batch 2 to 4

# vlan 4

aggregate-vlan

access-vlan 2 to 3

# interface Vlanif4

ip address 10.10.10.1 255.255.255.0

arp-proxy inter-sub-vlan-proxy enable

# interface GigabitEthernet1/0/0

port link-type access

port default vlan 2

# interface GigabitEthernet1/0/1

port link-type access

port default vlan 2

# interface GigabitEthernet2/0/0

port link-type access

port default vlan 3

# interface GigabitEthernet2/0/1

port link-type access

port default vlan 3

# return

2.11.5 Example for Configuring Layer 2 Topology Detection

Networking Requirements

As shown in

Figure 2-7

, two GE interfaces are added to VLAN 100 in default mode and the IP

addresses of the two GE interfaces are shown in the figure.

Figure 2-7 Networking diagram for configuring Layer 2 topology detection

Switch

PC A

10.1.1.1/24

VLANIF100

10.1.1.2/24

VLAN100

PC B

10.1.1.3/24

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

2 ARP Configuration

Configuration Roadmap

The configuration roadmap is as follows:

Add two GE interfaces to VLAN 100 in default mode.

Enable Layer 2 topology detection and view changes of ARP entries.

Data Preparation

To complete the configuration, you need the following data: l Types and numbers of the interfaces to be added to a VLAN l IP addresses of the VLANIF interface and the PCs

Procedure

Step 1 Create VLAN 100 and add the two GE interfaces of the Switch to VLAN 100 in default mode.

# Create VLANIF 100 and assign an IP addresses to VLANIF 100.

<Quidway> system-view

[Quidway] vlan 100

[Quidway-vlan100] quit

[Quidway] interface vlanif 100

[Quidway-vlanif100] ip address 10.1.1.2 24

[Quidway-vlanif100] quit

# Add the two GE interfaces to VLAN 100 in default mode.

[Quidway] interface gigabitethernet 1/0/1

[Quidway-GigabitEthernet1/0/1] port link-type access

[Quidway-GigabitEthernet1/0/1] port default vlan 100

[Quidway-GigabitEthernet1/0/1] quit

[Quidway] interface gigabitethernet 1/0/2

[Quidway-GigabitEthernet1/0/2] port link-type access

[Quidway-GigabitEthernet1/0/2] port default vlan 100

[Quidway-GigabitEthernet1/0/2] quit

Step 2 # Enable Layer 2 topology detection.

[Quidway] l2-topology detect enable

Step 3 Restart GE 1/0/1 and view changes of the ARP entries and aging time.

# View ARP entries on the Switch. You can find that the Switch has learnt the MAC address of the PC.

[Quidway] display arp all

IP ADDRESS MAC ADDRESS EXPIRE(M) TYPE INTERFACE VPN-

INSTANCE

VLAN/CEVLAN

-----------------------------------------------------------------------------

10.1.1.2 00e0-c01a-4900 I - Vlanif100

10.1.1.1 00e0-c01a-4901 20 D-0 GE1/0/1

10.1.1.3 00e0-de24-bf04 20 D-0 GE1/0/2

-----------------------------------------------------------------------------

Total:3 Dynamic:2 Static:0 Interface:1

# Run the shutdown command and then the undoshutdown command on GE 1/0/1 to view the aging time of ARP entries.

[Quidway] interface gigabitethernet 1/0/1

[Quidway-GigabitEthernet1/0/1] shutdown

[Quidway-GigabitEthernet1/0/1] undo shutdown

[Quidway-GigabitEthernet1/0/1] display arp all

Issue 01 (2011-10-26) 43

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 2 ARP Configuration

IP ADDRESS MAC ADDRESS EXPIRE(M) TYPE INTERFACE VPN-INSTANCE

VLAN/CEVLAN

----------------------------------------------------------------------------

10.1.1.2 00e0-c01a-4900 I -

Vlanif100

10.1.1.3 00e0-de24-bf04 0 D-0 GE1/0/2

------------------------------------------------------------------------------

Total:2 Dynamic:1 Static:0 Interface:1

NOTE

According to the displayed information, the ARP entry learned from GE 1/0/1 is deleted after GE 1/0/1 is shut down. The aging time of ARP entries learned from GE 1/0/2 becomes 0 after GE1/0/1 is restored and becomes Up again. When the aging time is 0, the Switch sends an ARP probe packet for updating ARP entries.

[Quidway-GigabitEthernet1/0/1] display arp all

IP ADDRESS MAC ADDRESS EXPIRE(M) TYPE INTERFACE VPN-INSTANCE

VLAN/CEVLAN

----------------------------------------------------------------------------

10.1.1.2 00e0-c01a-4900 I -

Vlanif100

10.1.1.3 00e0-de24-bf04 20 D-0 GE1/0/2

----------------------------------------------------------------------------

Total:2 Dynamic:1 Static:0 Interface:1

NOTE

After the ARP entry is updated, the aging time is restored to the default value, 20 minutes.

----End

Configuration Files

Configuration file of the Switch

sysname Quidway

L2-topolgy detect enable

vlan 100

# interface Vlanif100

ip address 10.1.1.2 255.255.255.0

# interface GigabitEthernet1/0/1

port link-type access

port default vlan 100

# interface GigabitEthernet1/0/2

port link-type access

port default vlan 100

# return

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

DHCP Configuration

About This Chapter

The DHCP technology is applicable to a variety of networks. It ensures proper IP address allocation and saves IP addresses on networks.

3.1 Introduction to DHCP

Dynamic Host Configuration Protocol (DHCP) enables a client to dynamically obtain a valid IP address.

3.2 DHCP Features Supported by the S9300

The S9300 can be used as a DHCP server or a DHCP relay agent.

3.3 Configuring the DHCP Server Based on the Global Address Pool

A DHCP server can allocate IP addresses to clients by using the global address pool.

3.4 Configuring the DHCP Server Based on the VLANIF Interface Address Pool

If a DHCP server based on a VLANIF interface address pool is configured, all the users going online through this interface obtain IP addresses from the VLANIF interface address pool.

3.5 Configuring the DHCP Relay Agent

By using a DHCP relay agent, the DHCP clients on a local area network (LAN) can communicate with the DHCP servers on other network segments, and obtain IP addresses from them. The

DHCP clients on different network segments can also use one DHCP server. This reduces costs and achieves centralized device management.

3.6 Maintaining DHCP

After DHCP configurations are complete, you can clear DHCP statistics and monitor DHCP operation.

3.7 Configuration Examples

DHCP configuration examples explain the networking requirements, networking diagram, configuration notes, configuration roadmap, and configuration procedure. The configuration examples involve various usage scenarios of DHCP.

45 Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

3.1 Introduction to DHCP

Dynamic Host Configuration Protocol (DHCP) enables a client to dynamically obtain a valid IP address.

Overview

Network scales and complexity grow fast, so the network configurations become increasingly complicated. For example, the locations of hosts such as portable computers and wireless network terminals frequently change, and the number of hosts often exceeds the number of available IP addresses. The DHCP is developed to solve the preceding problems.

DHCP works in the client/server model. A DHCP client requests the DHCP server for configurations, and the DHCP server sends the configurations to the client.

The DHCP protocol requires that the DHCP clients and DHCP server be in the same network segment; therefore, each network segment needs a DHCP server. This wastes resources. DHCP relay achieves address allocation between network segments.

Definition

DHCP server

A DHCP server allocates IP addresses to clients. A client sends a packet to the server to request for configurations such as the IP address, subnet mask, and default gateway. After receiving the packet, the server replies with a packet carrying the corresponding configurations according to policies. Both the Request and Reply packets are encapsulated in UDP packets.

DHCP relay agent

A DHCP relay agent transparently transmits DHCP broadcast packets between the DHCP clients and DHCP server that are on different network segments.

3.2 DHCP Features Supported by the S9300

The S9300 can be used as a DHCP server or a DHCP relay agent.

Table 3-1

describes the DHCP usage scenarios where the S9300 is used.

Table 3-1 DHCP usage scenarios

Usage

DHCP server based on the global address pool

DHCP server based on the interface address pool

DHCP relay agent

Scenario

The DHCP clients and DHCP server are on the same network segment or on different network segments.

The DHCP clients and DHCP server are on the same network segment.

The DHCP clients and DHCP server are different network segments.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Using the S9300 as a DHCP Server

The S9300 can function as a DHCP server to allocate IP addresses to clients. A client sends a packet to the server to request for configurations such as the IP address, subnet mask, and default gateway. After receiving the packet, the server replies with a packet carrying the corresponding configurations according to policies. Both the Request and Reply packets are encapsulated in

UDP packets.

The S9300 allocates IP addresses to clients by using the global address pool or an interface address pool.

Using the global address pool: When an interface of the S9300 receives a DHCP packet from a DHCP client, the S9300 allocates an IP address to the client from the global address

pool. For details about configuring the global address pool, see

3.3 Configuring the DHCP

Server Based on the Global Address Pool

l Using an interface address pool: When an interface of the S9300 receives a DHCP packet from a DHCP client, the S9300 allocates an IP address to the client from the interface address pool. If there is no available address in the interface address pool, the S9300 uses the global address pool that contains the addresses in the interface address pool. For details

about configuring the interface address pool, see

3.4 Configuring the DHCP Server Based on the VLANIF Interface Address Pool

NOTE

The S9300 supports the DHCP snooping function. For details about DHCP snooping, see the Quidway

S9300 Terabit Routing Switch Configuration Guide - Security.

Using the S9300 as a DHCP Relay Agent

When functioning as a DHCP relay agent, the S9300 forwards the DHCP packets to the DHCP servers or clients on different network segments. The DHCP clients on different networks can use one DHCP server. The DHCP relay agent saves costs and facilitates device management.

After receiving a DHCP packet from a DHCP client, the S9300 functioning as a DHCP relay agent forwards the DHCP packet to a DHCP server, and then the DHCP server allocates an IP

address to the client. For details about configuring the DHCP relay agent, see

3.5 Configuring the DHCP Relay Agent

Application

The S9300 functions as a DHCP server and is in the same network segment as the DHCP clients.

On this network, the DHCP server can use the global address pool or the interface address pool.

Figure 3-1 DHCP clients and DHCP server are on the same network segment

100.10.10.3/24

100.10.10.4/24

DHCP Server

100.10.10.1/24

Issue 01 (2011-10-26)

100.10.10.2/24

Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

An S9300 functions as a DHCP server and another one functions as a DHCP relay agent. The

DHCP server and DHCP clients are on different network segments. On this network, the DHCP server can use only the global address pool.

Figure 3-2 DHCP clients and DHCP server are on different network segments

Internet

DHCP Server

100.10.10.1/24

SwitchA

DHCP Relay

20.20.20.1/24

SwitchB

DHCP

Client

DHCP

Client

DHCP

Client

3.3 Configuring the DHCP Server Based on the Global

Address Pool

A DHCP server can allocate IP addresses to clients by using the global address pool.

3.3.1 Establishing the Configuration Task

Before configuring the DHCP server based on the global address pool, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the required data.

This helps you complete the configuration task quickly and accurately.

Applicable Environment

On an enterprise network, if the computers are connected to the DHCP server through another network, the global address pool needs to be configured on the S9300 to allocate IP addresses to computers, as shown in

Figure 3-3

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Figure 3-3 Networking diagram for configuring the DHCP server based on the global address pool

NetBIOS server

DHCP client

SwtichB

SwtichC

SwtichA

DHCP server

DNS server

DHCP client

When the S9300 functions as the DHCP server based on the global address pool, it must work with the DHCP relay agent.

Pre-configuration Tasks

Before configuring the DHCP server based on the global address pool, complete the following tasks: l Ensuring that the link between the DHCP clients and the S9300 works properly and the

DHCP clients can communicate with the S9300 l (Optional) Configuring the DNS server l

(Optional) Configuring the NetBIOS server l Configuring routes from the S9300 to the DNS server and the NetBIOS server (The routes are required only when the servers are configured.) l (Optional) Configuring the customized DHCP option

Data Preparation

Before configuring the DHCP server based on the global address pool, you need the following data.

No.

Data

1 Address pool name, IP address range, IP address lease, IP addresses not to be allocated in the IP address pool (optional), and IP address and MAC address that need to be statically bound (optional)

Egress gateway of the DHCP clients

(Optional) IP address of the DNS server and domain name of the DHCP clients

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

No.

Data

4 (Optional) IP address of the NetBIOS server and NetBIOS node type of the DHCP clients

5 (Optional) Code of the customized DHCP option and corresponding ASCII character string, hexadecimal numeral, or IP address

3.3.2 Configuring an Interface to Use Global Address Pool

When a DHCP server receives a DHCP packet from a client, the server can allocate an IP address to the client from the global address pool.

Context

Perform the following steps on the DHCP server.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

dhcp enable

The DHCP function is enabled.

Step 3 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 4 Run:

ip address ip address { mask | mask-length}

An IP address is allocated to the VLANIF interface.

If there is no DHCP relay agent between the DHCP clients and S9300, the S9300 allocates IP addresses that are in the same network segment as the interface address to the clients connected to this interface.

If the VLANIF interface is not configured with an IP address or no address pool is on the same network segment as the interface address, the clients cannot go online.

If there is a DHCP relay agent between the DHCP clients and S9300, the S9300 parses the gateway address in the received DHCP packets forwarded by the DHCP relay agent. If the gateway address does not match an entry in the address pool, the clients cannot go online.

Step 5 Run:

dhcp select global

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

3 DHCP Configuration

The DHCP function is enabled on the interface and the DHCP server allocates IP addresses to clients by using the global address pool.

----End

3.3.3 Configuring Address Allocation Mode for Global Address

Pool

According to the requirements of clients, you can select the static binding mode or the dynamic allocation mode for the address pool, but the two modes cannot be enabled simultaneously for the same IP address in the global address pool.

Context

Up to 256 address pools can be configured on the S9300, including the global address pools and interface address pools. The number of address pools of each type is not limited. To use the dynamic allocation mode, you must specify the range of addresses to be allocated; to use the static binding mode, only one address can be allocated to a client. The global address pool attributes include the IP address range, IP address lease, IP addresses not to be automatically allocated, and IP addresses to be statically bound to MAC addresses.

Perform the following steps on the DHCP server.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

ip pool ip-pool-name

The global address pool view is displayed.

By default, no global address pool exists on the S9300.

Step 3 Run:

network ip-address [ mask { mask | mask-length } ]

The range of IP addresses in the address pool is set.

An address pool can contain only one address segment. The address range of the address pool is set by the mask, and must be within the network segment where the gateway is located.

Step 4 Run:

lease { day day [ hour hour [ minute minute ] ] | unlimited }

The lease of IP addresses is set.

By default, the IP address lease is one day.

Different address pools on a DHCP server can be set with different IP address leases, but the IP addresses in one address pool must be set with the same lease.

Step 5 (Optional) Run:

excluded-ip-address start-ip-address [ end-ip-address ]

Issue 01 (2011-10-26) 51

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

The IP addresses that cannot be automatically allocated in the DHCP address pool are configured.

Some IP addresses are reserved for other services, for example, the IP address of the DNS server cannot be allocated to clients. You can run the excluded-ip-address command to configure the

IP addresses that are not allocated in the DHCP address pool. If you run the excluded-ip-

address command multiple times, you can set multiple IP address ranges that cannot be automatically allocated in the DHCP address pool.

Step 6 (Optional) Run:

static-bind ip-address ip-address mac-address mac-address

An IP address in the address pool is bound to a MAC address.

When a client requires a fixed IP address, bind an idle IP address in the address pool to the MAC address of the client.

Step 7 Run:

gateway-list ip-address &<1-8>

The egress gateway is configured for the global address pool.

NOTE

To load balance the traffic and improve the reliability of the network, you can configure multiple egress gateways. An IP address pool can be configured with up to eight gateway addresses. The gateway address cannot be a broadcast address of a subnet.

When configuring an egress gateway address for the address pool on a DHCP server, ensure that this egress gateway address is the same as the egress gateway address of the DHCP relay agent.

----End

3.3.4 (Optional) Configuring DNS for Global Address Pool

Each client has a domain name. To enable DHCP clients to communicate by using their domain names and prevent IP address conflicts, the DHCP server needs to specify domain names for these clients when allocating IP addresses to them.

Context

On the DHCP server, the domain-name command specifies a domain name for each global address pool. When allocating IP addresses to clients, the DHCP server also sends the domain names to the clients. During domain name resolution, users only need to enter a part of the domain name, and then the system uses a complete domain name for resolution.

Perform the following steps on the DHCP server.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

ip pool ip-pool-name

The IP address pool view is displayed.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Step 3 Run:

domain-name domain-name

The DNS domain name to be allocated to the DHCP client is configured.

On the DHCP server, you can specify a DNS domain name for each address pool. If the DNS domain name is configured, the DNS server used by the DHCP client is also specified.

Step 4 Run:

dns-list ip-address &<1-8>

The IP address of the DNS server is configured for the DHCP client.

To load balance the traffic and improve the reliability of the network, configure multiple DNS servers. Each address pool can be configured with a maximum of eight DNS servers.

----End

3.3.5 (Optional) Configuring NetBIOS for Global Address Pool

DHCP clients running on the Microsoft Windows operating system use the Network Basic Input

Output System (NetBIOS) protocol for communication. The NetBIOS server translates host names to IP addresses for the clients.

Context

Perform the following steps on the DHCP server.

NOTE

NetBIOS: Network Basic Input Output System.

When a DHCP client uses the NetBIOS protocol for communication, the host names must be mapped to IP addresses. Based on the modes of obtaining mapping, NetBIOS nodes are classified into the following types: l b-node: indicates a node in broadcast mode. This node obtains the mappings in broadcast mode.

l p-node: indicates a node in peer-to-peer mode. This node obtains the mappings by communicating with the NetBIOS server.

l m-node: indicates a node in mixed mode, that is, the p-type node with some broadcast features.

l h-node: indicates a node in hybrid mode, that is, a b-type node enabled with the end-to-end communication mechanism.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

ip pool ip-pool-name

The IP address pool view is displayed.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Step 3 Run:

nbns-list ip-address &<1-8>

The NetBIOS server address of the DHCP client is configured.

Each IP address pool can be configured with up to eight NetBIOS server addresses.

Step 4 Run:

netbios-type { b-node | h-node | m-node | p-node }

The NetBIOS type is set for DHCP clients.

By default, the NetBIOS node type is not specified for DHCP clients.

----End

3.3.6 (Optional) Configuring the Customized DHCP Option for the

Global Address Pool

DHCP provides various options. To use these options, add them to the attribute list of the DHCP server manually.

Context

When a DHCP client requests an IP address from the DHCP server, the server returns a DHCP

Reply packet containing the option field.

NOTE

The option command configures basic functions, such as the DNS service, NetBIOS service, and IP address lease. The system also provides commands to configure these functions separately. These commands take precedence over the option command. If no configuration command of these functions is run, the related options configured by using the option command take effect.

Related commands: l DNS service: domain-name and dns-list l NetBIOS service: nbns-list and netbios-type l Lease: lease

Perform the following steps on the DHCP server.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

ip pool ip-pool-name

The IP address pool view is displayed.

Step 3 Run:

option code [ sub-option sub-code ] { ascii ascii-string | hex hex-string &<1-10>

| ip-address ip-address &<1-8> }

The DHCP option is configured.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

After the option command is used, the specified option is carried by the DHCP Reply packet returned by the DHCP server. Before using this command, ensure that you know the functions of the option to be configured. For details on the DHCP options, see RFC 2132.

----End

3.3.7 (Optional) Preventing Repetitive Allocation of an IP Address

To prevent repetitive IP address allocation, the DHCP server pings the IP address to be allocated before allocating it to a client.

Context

Perform the following steps on the DHCP server.

After the dhcp server ping command is executed, the DHCP server can prevent repetitive IP address allocation. The DHCP server pings an IP address to be allocated. If there is no response to the ping packet within a certain period, the DHCP server continues to send ping packets to this IP address until the number of ping packets reaches the maximum value. If there is still no response, this IP address is not in use, and the DHCP server allocates the IP address to a client.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

dhcp server ping packet number

The maximum number of ping packets is set.

By default, the maximum number of ping packets to be sent by the S9300 is 0. That is, the

S9300 does not ping the IP addresses to be allocated.

Step 3 Run:

dhcp server ping timeout milliseconds

The period in which the S9300 waits for the response is set.

By default, the period in which the S9300 waits for the response is 500 ms.

----End

3.3.8 (Optional) Configuring Automatic Saving of DHCP Data

You can configure the S9300 to save DHCP data to the storage device. When a fault occurs, you can restore data from the storage device.

Context

Perform the following steps on the DHCP server.

When the S9300 functions as the DHCP server, you can enable the function of saving DHCP data so that IP address information is saved to the storage device periodically.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

3 DHCP Configuration

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

dhcp server database enable

The S9300 automatically saves DHCP data to the CF card.

After the dhcp server database enable command is executed, the system generates the

lease.txt and conflict.txt files in the CF card. The two files save the address lease information and address conflict information.

Step 3 Run:

dhcp server database write-delay interval

The interval for saving DHCP data is set.

By default, DHCP data is not automatically saved to CF card. After the S9300 is configured to automatically save DHCP data, the S9300 saves data every 7200 seconds by default and the latest data overwrites the previous data.

Step 4 Run:

dhcp server database recover

The DHCP data in the storage device is restored.

After the dhcp server database recover command is executed, the S9300 restores the DHCP data in the CF card.

----End

3.3.9 Checking the Configuration

This section describes how to verify the configurations of the DHCP server based on the global address pool.

Prerequisite

The configurations of the DHCP server based on the global address pool are complete.

Procedure

l Run the display dhcp server statistics command to view the statistics about the DHCP server.

l Run the display ip pool name ip-pool-name [ low-ip-address high-ip-address | all |

expired | conflict | used ] command to view information about the global address pool.

----End

Example

Run the display dhcp server statistics command. The similar information is displayed.

<Quidway> display dhcp server statistics

Server Statistics:

Issue 01 (2011-10-26) 56

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Client Request: 6

Dhcp Discover: 1

Dhcp Request: 4

Dhcp Decline: 0

Dhcp Release: 1

Dhcp Inform: 0

Server Reply: 4

Dhcp Offer: 1

Dhcp Ack: 3

Dhcp Nak: 0

Bad Messages: 0

Run the display ip pool name ip-pool-name command to view the IP address pool named

huawei. The similar information is displayed.

<Quidway> display ip pool name huawei

Pool-Name : huawei

Pool-No : 2

Lease : 3 Days 0 Hours 0 Minutes

Domain-name : -

DNS-Server0 : 10.10.10.5

DNS-Server1 : 10.10.10.6

NBNS-Server0 : 20.20.20.5

Netbios-type : -

Position : Local Status : Unlocked

Gateway-0 : 10.10.10.10

Mask : 255.255.255.0

Vpn instance : --

--------------------------------------------------------------------------

Start End Total Used Idle(Expired) Conflict

Disable

--------------------------------------------------------------------------

10.10.10.1 10.10.10.254 253 0 253 0 0

--------------------------------------------------------------------------

3.4 Configuring the DHCP Server Based on the VLANIF

Interface Address Pool

If a DHCP server based on a VLANIF interface address pool is configured, all the users going online through this interface obtain IP addresses from the VLANIF interface address pool.

3.4.1 Establishing the Configuration Task

Before configuring the DHCP server based on the interface address pool, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the required data. This helps you complete the configuration task quickly and accurately.

Applicable Environment

If the DHCP clients and the DHCP server are on the same network segment, the interface address pool needs to be configured on the S9300 to allocate IP addresses for the clients, as shown in

Figure 3-4

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Figure 3-4 Networking diagram for configuring the DHCP server based on the interface address pool

Client Client

DHCP Server

Client

The interface address pool takes precedence over the global address pool. If an address pool is configured on an interface, the clients connected to the interface obtain IP addresses from the interface address pool even if a global address pool is configured. On an S9300, only VLANIF interfaces can be configured with address pools.

Pre-configuration Tasks

Before configuring the DHCP server based on the VLANIF interface address pool, complete the following tasks: l Ensuring that the link between the DHCP clients and the S9300 works properly and the

DHCP clients can communicate with the S9300 l (Optional) Configuring the DNS server l (Optional) Configuring the NetBIOS server l Configuring routes from the S9300 to the DNS server and the NetBIOS server (The routes are required only when the servers are configured.)

Data Preparation

Before configuring the DHCP server based on the VLANIF interface address pool, you need the following data.

No.

Data

1 Number of the VLANIF interface configured with an address pool, IP address range,

IP address lease, IP addresses not to be allocated in the IP address pool (optional), and IP address and MAC address that need to be statically bound (optional)

(Optional) Egress gateway of the DHCP clients

(Optional) IP address of the DNS server and domain name of the DHCP clients

(Optional) IP address of the NetBIOS server and NetBIOS node type of the DHCP clients

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

No.

Data

5 (Optional) Code of the customized DHCP option and corresponding ASCII character string, hexadecimal numeral, or IP address

3.4.2 Configuring Address Allocation Mode for Interface Address

Pool

According to the requirements of clients, you can select the static binding mode or the dynamic allocation mode for the address pool, but you cannot enable the two modes for the same DHCP address pool.

Context

The interface address pool takes precedence over the global address pool.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

dhcp enable

The DHCP function is enabled.

Step 3 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 4 Run:

ip address ip-address { mask | mask-length }

An IP address is allocated to the VLANIF interface.

Step 5 Run:

dhcp select interface

The S9300 is configured to use the interface address pool.

The interface address pool is actually the network segment to which the interface belongs, and such an interface address pool takes effect only on this interface.

Step 6 Run:

dhcp server lease { day day [ hour hour [ minute minute ] ] | unlimited }

The lease of IP addresses is set.

By default, the IP address lease is one day.

Step 7 (Optional) Run:

dhcp server excluded-ip-address start-ip-address [ end-ip-address ]

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

The IP addresses that cannot be automatically allocated in the DHCP address pool are configured.

Some IP addresses are reserved for other services, for example, the IP address of the DNS server cannot be allocated to clients. You can run the dhcp server excluded-ip-address command to exclude these IP addresses. If you run the dhcp server excluded-ip-address command multiple times, you can set multiple IP address ranges that cannot be automatically allocated in the DHCP address pool.

Step 8 (Optional) Run:

dhcp server static-bind ip-address ip-address mac-address mac-address

An IP address in the address pool is bound to a MAC address.

When a client requires a fixed IP address, bind an idle IP address in the address pool to the MAC address of the client.

----End

3.4.3 (Optional) Configuring the DNS Service of the VLANIF

Interface Address Pool

Context

On the DHCP server, the dhcp server domain-name command specifies a domain name for each interface address pool. When allocating IP addresses to clients, the DHCP server also sends the domain names to the clients. During domain name resolution, users only need to enter a part of the domain name, and then the system uses a complete domain name for resolution.

Perform the following steps on the DHCP server.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 3 Run:

dhcp server domain-name domain-name

The DNS domain name is configured for the DHCP client.

Step 4 Run:

dhcp server dns-list ip-address &<1-8>

The DNS server address is configured for the DHCP client.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

To load balance the traffic and improve the reliability of the network, configure multiple DNS servers. Each address pool can be configured with a maximum of eight DNS servers.

----End

3.4.4 (Optional) Configuring the NetBIOS Service of the VLANIF

Interface Address Pool

DHCP clients running on the Microsoft Windows operating system use the Network Basic Input

Output System (NetBIOS) protocol for communication. The NetBIOS server translates host names to IP addresses for the clients.

Context

Perform the following steps on the DHCP server.

l p-node: indicates a node in peer-to-peer mode. This node obtains the mappings by communicating with the NetBIOS server.

l m-node: indicates a node in mixed mode, that is, the p-type node with some broadcast features.

l h-node: indicates a node in hybrid mode, that is, a b-type node enabled with the end-to-end communication mechanism.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 3 Run:

dhcp server nbns-list ip-address &<1-8>

The NetBIOS server address is configured for the DHCP client.

Each IP address pool can be configured with up to eight NetBIOS server addresses.

Step 4 Run:

dhcp server netbios-type { b-node | h-node | m-node | p-node }

The NetBIOS type is set for DHCP clients.

By default, the NetBIOS node type is not specified for DHCP clients.

----End

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

3.4.5 (Optional) Configuring the Customized DHCP Option of the

VLANIF Interface Address Pool

DHCP provides various options. To use these options, add them to the attribute list of the DHCP server manually.

Context

When a DHCP client requests an IP address from the DHCP server, the server returns a DHCP

Reply packet containing the option field.

NOTE

Related commands: l DNS service: dhcp server domain-name and dhcp server dns-list l NetBIOS service: dhcp server nbns-list and dhcp server netbios-type l Lease: dhcp server lease

Perform the following steps on the DHCP server.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 3 Run:

dhcp server option code [ sub-option sub-code ] { ascii ascii-string | hex hex-

string &<1-10> | ip-address ip-address &<1-8> }

The DHCP option is configured.

After the dhcp server option command is run, the specified option is carried by the DHCP

Reply packet returned by the DHCP server. Before using this command, ensure that you know the functions of the option to be configured. For details on the DHCP options, see RFC 2132.

----End

3.4.6 (Optional) Preventing Repetitive Allocation of an IP Address

To prevent repetitive IP address allocation, the DHCP server pings the IP address to be allocated before allocating it to a client.

Context

Perform the following steps on the DHCP server.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

dhcp server ping packet number

The maximum number of ping packets is set.

By default, the maximum number of ping packets to be sent by the S9300 is 0. That is, the

S9300 does not ping the IP addresses to be allocated.

Step 3 Run:

dhcp server ping timeout milliseconds

The period in which the S9300 waits for the response is set.

By default, the period in which the S9300 waits for the response is 500 ms.

----End

3.4.7 (Optional) Configuring Automatic Saving of DHCP Data

You can configure the S9300 to save DHCP data to the storage device. When a fault occurs, you can restore data from the storage device.

Context

Perform the following steps on the DHCP server.

When the S9300 functions as the DHCP server, you can enable the function of saving DHCP data so that IP address information is saved to the storage device periodically.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

dhcp server database enable

The S9300 automatically saves DHCP data to the CF card.

After the dhcp server database enable command is executed, the system generates the

lease.txt and conflict.txt files in the CF card. The two files save the address lease information and address conflict information.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Step 3 Run:

dhcp server database write-delay interval

The interval for saving DHCP data is set.

Step 4 Run:

dhcp server database recover

The DHCP data in the storage device is restored.

After the dhcp server database recover command is executed, the S9300 restores the DHCP data in the CF card.

----End

3.4.8 Checking the Configuration

This section describes how to view the configuration of the DHCP server based on the VLANIF interface address pool.

Prerequisite

The configurations of the DHCP server based on the VLANIF interface address pool are complete.

Procedure

l Run the display dhcp server statistics command to view the statistics about the DHCP server.

l Run the display ip pool interface interface-name [ start-ip-address high-ip-address | all |

expired | conflict | used ] command to view information about the interface address pool.

----End

Example

Run the display dhcp server statistics command. The similar information is displayed.

<Quidway> display dhcp server statistics

Server Statistics:

Client Request: 6

Dhcp Discover: 1

Dhcp Request: 4

Dhcp Decline: 0

Dhcp Release: 1

Dhcp Inform: 0

Server Reply: 4

Dhcp Offer: 1

Dhcp Ack: 3

Dhcp Nak: 0

Bad Messages: 0

Run the display ip pool interface ip-pool-name command to view interface address pool on

VLANIF 10. The similar information is displayed.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

<Quidway> display ip pool interface vlanif10

Pool-name : vlanif10

Pool-No : 2

Lease : 1 Days 0 Hours 0 Minutes

Domain-name : -

DNS-server0 : -

NBNS-server0 : -

Netbios-type : -

Position : Interface Status : Unlocked

Gateway-0 : 192.168.10.2

Mask : 255.255.255.0

VPN instance : --

-----------------------------------------------------------------------------

Start End Total Used Idle(Expired) Conflict Disable

-----------------------------------------------------------------------------

192.168.10.1 192.168.10.254 253 0 253 0 0 0

-----------------------------------------------------------------------------

3.5 Configuring the DHCP Relay Agent

By using a DHCP relay agent, the DHCP clients on a local area network (LAN) can communicate with the DHCP servers on other network segments, and obtain IP addresses from them. The

DHCP clients on different network segments can also use one DHCP server. This reduces costs and achieves centralized device management.

3.5.1 Establishing the Configuration Task

Before configuring the DHCP relay agent, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the required data. This helps you complete the configuration task quickly and accurately.

Applicable Environment

If no DHCP server is configured on the local network, the DHCP relay function can be enabled on an S9300 to forward DHCP Request packets to the DHCP servers on other networks. To ensure that the DHCP clients obtain IP addresses, the DHCP server must use a global address pool, and no address pool can be configured on the interface connected to the DHCP relay agent.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Figure 3-5 Network diagram of DHCP relay

Internet

DHCP Server

100.10.10.1/24

SwitchA

3 DHCP Configuration

DHCP Relay

20.20.20.1/24

SwitchB

DHCP

Client

DHCP

Client

DHCP

Client

Pre-configuration Tasks

Before configuring the DHCP relay agent, complete the following tasks: l Configuring the DHCP server l Configuring a route from the S9300 to the DHCP server

Data Preparation

To configure the DHCP relay agent, you need the following data.

No.

Data

1 Name of the DHCP server group

IP addresses of the DHCP servers in a DHCP server group

Number and IP address of the interface enabled with the DHCP relay function

3.5.2 Configuring DHCP Relay on an Interface

When the network where a DHCP client resides does not have a DHCP server, a DHCP relay agent can be configured to forward the DHCP packets of the client to a DHCP server.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Context

NOTE

A DHCP packet is forwarded between a DHCP client and a DHCP server at most 16 times, and then the

DHCP packet is discarded.

If DHCP relay is enabled in a super-VLAN, DHCP snooping cannot be enabled in this super-VLAN.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

dhcp enable

DHCP is enabled globally.

Step 3 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 4 Run:

ip address ip-address { mask | mask-length }

An IP address is allocated to the VLANIF interface.

NOTE

When configuring an egress gateway address for the address pool on a DHCP server, ensure that this egress gateway address is the same as the egress gateway address of the DHCP relay agent.

Step 5 Run:

dhcp select relay

The DHCP relay function is enabled for the VLANIF interface.

----End

Follow-up Procedure

When functioning as a DHCP relay agent, the S9300 forwards the DHCP Request packets from

DHCP clients to the DHCP server. After the DHCP relay function is enabled on the VLANIF interface, set the DHCP server address on the VLANIF interface in either of the following ways: l Configure a destination DHCP server group and bind the group to the interface. For details, see

3.5.3 Configuring a Destination DHCP Server Group

and

3.5.4 Binding an

Interface to a DHCP Server Group

l Run the dhcp relay server-ip ip-address command in the VLANIF interface view to configure the destination DHCP server address.

3.5.3 Configuring a Destination DHCP Server Group

Generally, a DHCP relay agent serves multiple DHCP servers. The DHCP servers that share one DHCP relay agent can be added to a server group to facilitate server management. The

DHCP server group allocates IP addresses for the users connected to the DHCP relay agent.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Context

Perform the following steps on the DHCP relay agent.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

dhcp server group group-name

A DHCP server group is created and the DHCP server group view is displayed.

A maximum of 64 DHCP server groups can be configured globally.

Step 3 Run:

dhcp-server ip-address [ ip-address-index ]

A DHCP server is added to the DHCP server group.

Up to 20 DHCP servers can be added to a DHCP server group. If you do not specify the server index, the system allocates an idle index to the server.

Step 4 (Optional) Run:

vpn-instance vpn-instance-name

A VPN instance is bound to the DHCP server group.

----End

3.5.4 Binding an Interface to a DHCP Server Group

Multiple VLANIF interfaces can be bound to a DHCP server group; however, a VLANIF interface can belong to only one DHCP server group. That is, the DHCP Request packets on a

VLANIF interface can be relayed to only one DHCP server group.

Context

Perform the following steps on the DHCP relay agent.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 3 Run:

dhcp relay server-select group-name

The VLANIF interface is bound to a DHCP server group.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

You can also run dhcp relay server-ip command to specify a server for the VLANIF interface.

Step 4 (Optional) Run:

ip binding vpn-instance vpn-instance-name

A VPN instance is bound to the VLANIF interface.

If a user connected to the S9300 interface is in a private network, bind the interface to a VPN instance. The bound VPN instance must be the same as the VPN instance bound to the DHCP

server group. For details on binding a VPN instance to a DHCP server group, see

3.5.3

Configuring a Destination DHCP Server Group

----End

3.5.5 (Optional) Configuring the DHCP Relay Agent to Send DHCP

Release Packet

If a user is forcibly disconnected, the IP address of the user needs to be released manually on the DHCP server.

Context

When the IP address of a user expires, the DHCP server renews the IP address for the user if it does not receive the DHCP Release packet. You can configure the DHCP relay agent to actively send DHCP Release packets to the DHCP server. The DHCP server then releases the expired

IP addresses.

Perform the following steps on the DHCP relay agent.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 (Optional) Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 3 Run:

dhcp relay release client-ip-address mac-address [ server-ip-address ]

The DHCP relay agent is configured to send DHCP Release packets to the DHCP server.

l When you use the dhcp relay release client-ip-address mac-address [ server-ip-address ] command in the system view:

– If no DHCP server is specified, the DHCP relay agent will send DHCP Release packets to the servers in all DHCP server groups bound to the DHCP relay interfaces.

– If a DHCP server is specified, the DHCP relay agent will send DHCP Release packets to the specified DHCP server.

l When you use the dhcp relay release client-ip-address mac-address [ server-ip-address ] command in the VLANIF interface view:

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

– If no DHCP server is specified, the DHCP relay agent will send DHCP Release packets to all the servers in the DHCP server group bound to this VLANIF interface.

– If a DHCP server is specified, the DHCP relay agent will send DHCP Release packets to the specified DHCP server.

----End

3.5.6 Checking the Configuration

After the DHCP relay function is configured, you can use commands to view the configuration result.

Prerequisite

The DHCP relay configurations are complete.

Procedure

l Run the display dhcp relay { all | interface interface-type interface-number } command to view the DHCP server group on a VLANIF interface and the servers in the DHCP server group.

Run the display dhcp relay statistics command to view packet statistics on the DHCP relay agent.

l Run the display dhcp server group group-name command to view the DHCP server group configuration.

----End

Example

Run the display dhcp relay interface interface-type interface-number command to view the

DHCP server group on VLANIF 100 and the servers in the DHCP server group. If the similar information is displayed, the configuration succeeds.

<Quidway> display dhcp relay interface vlanif 100

DHCP relay agent running information of interface Vlanif100 :

Server IP address [01] : 10.2.2.3

Gateway address in use : 10.2.2.2

Run the display dhcp relay statistics command. If the similar information is displayed, the configuration succeeds.

<Quidway> display dhcp relay statistics

The statistics of DHCP RELAY:

DHCP packets received from clients : 0

DHCP DISCOVER packets received : 0

DHCP REQUEST packets received : 0

DHCP RELEASE packets received : 0

DHCP INFORM packets received : 0

DHCP DECLINE packets received : 0

DHCP packets sent to clients : 0

Unicast packets sent to clients : 0

Broadcast packets sent to clients : 0

DHCP packets received from servers : 0

DHCP OFFER packets received : 0

DHCP ACK packets received : 0

DHCP NAK packets received : 0

DHCP packets sent to servers : 0

DHCP Bad packets received : 0

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Run the display dhcp server group group-name command to view the configuration of DHCP server group group1. If the similar information is displayed, the configuration succeeds.

<Quidway> display dhcp server group group1

Group-name : group1

(0) Server-IP : 100.10.10.1

(1) Server-IP : 100.10.10.2

Gateway : --

VPN instance : --

3.6 Maintaining DHCP

After DHCP configurations are complete, you can clear DHCP statistics and monitor DHCP operation.

3.6.1 Clearing DHCP Statistics

During routine maintenance, you can use the reset commands to clear the statistics about the specified DHCP server group.

Context

CAUTION

DHCP statistics cannot be restored after they are cleared. Exercise caution when running the reset commands.

Procedure

l To clear DHCP server statistics, run the reset dhcp server statistics command in the user view.

l To clear DHCP relay agent statistics, run the reset dhcp relay statistics command in the user view.

----End

3.6.2 Monitoring DHCP Operation

During routine maintenance, you can use the following commands in any view to monitor DHCP operation status.

Procedure

Issue 01 (2011-10-26) l Run the display dhcp relay { all | interface interface-type interface-number } command to view the DHCP server group on a VLANIF interface and the servers in the DHCP server group.

l Run the display dhcp relay statistics command to view packet statistics on the DHCP relay agent.

Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration l Run the display dhcp server group [ group-name ] command to view the servers in the

DHCP server group.

----End

3.7 Configuration Examples

3.7.1 Example for Configuring a DHCP Server Based on the Global

Address Pool

This section describes how to configure a global address pool to allocate IP addresses for clients when the clients and DHCP server are in the same network segment.

Networking Requirements

An enterprise has two offices that are in the same network segment. To reduce network construction cost, the enterprise uses one DHCP server to allocate IP addresses for the computers in the two offices.

As shown in

Figure 3-6

, SwitchA functions as the DHCP server, and SwitchB and SwitchC are

user access switches. A global address pool or an interface address pool can be configured on

SwitchA. This section describes how to configure a global address pool. Address pool

10.1.1.0/24 consists of two network segments: 10.1.1.0/25 and 10.1.1.128/25. The IP addresses of the VLANIF interfaces on the DHCP server are 10.1.1.1/25 and 10.1.1.129/25.

There are a few computers in network segment 10.1.1.0/25 and the computer locations are fixed.

The lease of an IP address in 10.1.1.0/25 is 10 days, the DNS address is 10.1.1.2, no NetBIOS address is set, and the IP address of the egress gateway is 10.1.1.126.

There are many computers in network segment 10.1.1.128/25 and the computers are often moved from one place to another. The lease of an IP address in 10.1.1.128/25 is 2 days, the DNS address is 10.1.1.2, the NetBIOS address is 10.1.1.4, and the IP address of the egress gateway is

10.1.1.254.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

GE 1/0/1

VLANIF10

10.1.1.1/25

3 DHCP Configuration

Figure 3-6 Networking diagram for configuring the DHCP server based on the global address pool

NetBIOS server

DHCP client

GE 1/0/2

VLANIF20

10.1.1.129/25

SwtichB

SwtichC

SwtichA

DHCP server

DNS server

DHCP client

Network: 10.1.1.0/25

DHCP client

Network: 10.1.1.128/25

Configuration Roadmap

The configuration roadmap is as follows:

Enable the DHCP server function on SwitchA.

Create a global address pool on SwitchA and set the attributes of the address pool, including the range of the address pool, egress gateway, NetBIOS address, and address lease.

Configure VLANIF interfaces to use the global address pool to allocate IP addresses.

Data Preparation

To complete the configuration, you need the following data:

Number and range of the global address pool on SwitchA

NOTE

The following configurations are performed on SwitchA.

Procedure

Step 1 Enable DHCP.

<Quidway> system-view

[Quidway] dhcp enable

Step 2 Create address pools and set the attributes of the address pools.

# Set the attributes of IP address pool 1, including the address pool range, DNS address, egress gateway address, and address lease.

[Quidway] ip pool 1

[Quidway-ip-pool-1] network 10.1.1.0 mask 255.255.255.128

[Quidway-ip-pool-1] dns-list 10.1.1.2

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

[Quidway-ip-pool-1] gateway-list 10.1.1.126

[Quidway-ip-pool-1] excluded-ip-address 10.1.1.2

[Quidway-ip-pool-1] excluded-ip-address 10.1.1.4

[Quidway-ip-pool-1] lease day 10

[Quidway-ip-pool-1] quit

# Set the attributes of IP address pool 2, including the address pool range, DNS address, egress gateway address, NetBIOS address, and address lease.

[Quidway] ip pool 2

[Quidway-ip-pool-2] network 10.1.1.128 mask 255.255.255.128

[Quidway-ip-pool-2] dns-list 10.1.1.2

[Quidway-ip-pool-2] nbns-list 10.1.1.4

[Quidway-ip-pool-2] gateway-list 10.1.1.254

[Quidway-ip-pool-2] lease day 2

[Quidway-ip-pool-2] quit

Step 3 Set the address allocation mode on the VLANIF interfaces.

# Add GE 1/0/1 to VLAN 10 and GE 1/0/2 to VLAN 20.

[Quidway] vlan batch 10 20

[Quidway] interface gigabitethernet 1/0/1

[Quidway-GigabitEthernet1/0/1] port hybrid pvid vlan 10

[Quidway-GigabitEthernet1/0/1] port hybrid untagged vlan 10

[Quidway-GigabitEthernet1/0/1] quit

[Quidway] interface gigabitethernet 1/0/2

[Quidway-GigabitEthernet1/0/2] port hybrid pvid vlan 20

[Quidway-GigabitEthernet1/0/2] port hybrid untagged vlan 20

[Quidway-GigabitEthernet1/0/2] quit

# Configure the clients on VLANIF 10 to obtain IP addresses from the global address pool.

[Quidway] interface vlanif 10

[Quidway-Vlanif10] ip address 10.1.1.1 255.255.255.128

[Quidway-Vlanif10] dhcp select global

[Quidway-Vlanif10] quit

# Configure the clients on VLANIF 20 to obtain IP addresses from the global address pool.

[Quidway] interface vlanif 20

[Quidway-Vlanif20] ip address 10.1.1.129 255.255.255.128

[Quidway-Vlanif20] dhcp select global

[Quidway-Vlanif20] quit

Step 4 Verify the configuration.

Run the display ip pool command on the S9300, and you can view the configuration of the IP address pool.

[Quidway] display ip pool

-----------------------------------------------------------------------

Pool-name : 2

Pool-No : 0

Position : Local Status : Unlocked

Gateway-0 : 10.1.1.254

Mask : 255.255.255.128

VPN instance : --

-----------------------------------------------------------------------

Pool-name : 1

Pool-No : 2

Position : Local Status : Unlocked

Gateway-0 : 10.1.1.126

Mask : 255.255.255.128

VPN instance : --

Issue 01 (2011-10-26)

IP address Statistic

Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Total :250

Used :0 Idle :248

Expired :0 Conflict :0 Disable :2

----End

Configuration Files

Configuration file of the SwitchA

sysname Quidway

vlan batch 10 20

# dhcp enable

ip pool 1

ip pool 2

# ip pool 1

gateway-list 10.1.1.126

network 10.1.1.0 mask 255.255.255.128

excluded-ip-address 10.1.1.2

excluded-ip-address 10.1.1.4

dns-list 10.1.1.2

lease day 10 hour 0 minute 0

# ip pool 2

gateway-list 10.1.1.254

network 10.1.1.128 mask 255.255.255.128

dns-list 10.1.1.2

nbns-list 10.1.1.4

lease day 5 hour 0 minute 0

# interface Vlanif10

ip address 10.1.1.1 255.255.255.128

dhcp select global

# interface Vlanif20

ip address 10.1.1.129 255.255.255.128

dhcp select global

# interface GigabitEthernet1/0/1

port hybrid pvid vlan 10

port hybrid untagged vlan 10

# interface GigabitEthernet1/0/2

port hybrid pvid vlan 20

port hybrid untagged vlan 20

# return

3.7.2 Example for Configuring the DHCP Server Based on the

Interface Address Pool

A DHCP server can allocate IP addresses for the clients in the same network segment by using an interface address pool.

Networking Requirements

A campus has two equipment rooms, which are in different network segments. A switch needs to be configured as a DHCP server to allocate IP addresses for the computers in the two equipment rooms.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

The DHCP server is connected to the access switches of the two equipment rooms, and allocates

IP addresses for the computers by using two interface address pools.

As shown in

Figure 3-7

, SwitchA functions as the DHCP server, and SwitchB and SwitchC are

the access switches. The two VLANIF interface address pools need to be configured on GE

1/0/1 and GE 1/0/2 of SwitchA.

Figure 3-7 Networking diagram for configuring a DHCP server based on a VLANIF interface address pool

NetBIOS Server

10.1.1.3/24

DHCP

Client

DNS Server

10.1.1.2/24

SwitchB

SwitchC

VLANIF10

10.1.1.1/24

GE1/0/1

GE1/0/2

VLANIF11

10.1.2.1/24

SwitchA

DHCP

Server

DHCP

Client

DHCP

Client

DHCP

Client

Configuration Roadmap

The configuration roadmap is as follows:

Configure SwitchA as a DHCP server.

Create VLANIF interfaces and allocate IP addresses to VLANIF interfaces to determine the range of address pools.

Enable the VLANIF interface address pools.

Set the address pool attributes, including the DNS server address, NetBIOS server address, and IP address lease.

Data Preparation

To complete the configuration, you need the following data: l IP addresses of the interfaces l DNS server address and NetBIOS server address l Address lease in the address pool

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Procedure

Step 1 Enable DHCP.

<Quidway> system-view

[Quidway] dhcp enable

Step 2 Add interfaces to VLANs.

# Add GE 1/0/1 to VLAN 10.

[Quidway] vlan batch 10 to 11

[Quidway] interface gigabitethernet 1/0/1

[Quidway-GigabitEthernet1/0/1] port hybrid pvid vlan 10

[Quidway-GigabitEthernet1/0/1] port hybrid untagged vlan 10

[Quidway-GigabitEthernet1/0/1] quit

# Add GE 1/0/2 to VLAN 11.

[Quidway] interface gigabitethernet 1/0/2

[Quidway-GigabitEthernet1/0/2] port hybrid pvid vlan 11

[Quidway-GigabitEthernet1/0/2] port hybrid untagged vlan 11

[Quidway-GigabitEthernet1/0/2] quit

Step 3 Allocate IP addresses to VLANIF interfaces.

# Allocate an IP address to VLANIF 10.

[Quidway] interface vlanif 10

[Quidway-Vlanif10] ip address 10.1.1.1 24

[Quidway-Vlanif10] quit

# Allocate an IP address to VLANIF 11.

[Quidway] interface vlanif 11

[Quidway-Vlanif11] ip address 10.1.2.1 24

[Quidway-Vlanif11] quit

Step 4 Enable the VLANIF interface address pool.

# Configure the clients on VLANIF 10 to obtain IP addresses from the interface address pool.

[Quidway] interface vlanif 10

[Quidway-Vlanif10] dhcp select interface

[Quidway-Vlanif10] quit

# Configure the clients on VLANIF 11 to obtain IP addresses from the interface address pool.

[Quidway] interface vlanif 11

[Quidway-Vlanif11] dhcp select interface

[Quidway-Vlanif11] quit

Step 5 Configure the DNS service and NetBIOS services of the address pool.

# Configure the DNS service and NetBIOS service of VLANIF 10 address pool.

[Quidway] interface vlanif 10

[Quidway-Vlanif10] dhcp server domain-name huawei.com

[Quidway-Vlanif10] dhcp server dns-list 10.1.1.2

[Quidway-Vlanif10] dhcp server nbns-list 10.1.1.3

[Quidway-Vlanif10] dhcp server excluded-ip-address 10.1.1.2

[Quidway-Vlanif10] dhcp server excluded-ip-address 10.1.1.3

[Quidway-Vlanif10] dhcp server netbios-type b-node

Step 6 Set IP address leases of IP address pools.

# Set the IP address lease of VLANIF 10 address pool to 30 days.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

3 DHCP Configuration

[Quidway] interface vlanif 10

[Quidway-Vlanif10] dhcp server lease day 30

[Quidway-Vlanif10] quit

# Set the IP address lease of VLANIF 11 address pool to 20 days.

[Quidway] interface vlanif 11

[Quidway-Vlanif11] dhcp server lease day 20

[Quidway-Vlanif11] quit

Step 7 Verify the configuration.

Run the display ip pool interface command on SwitchA to view the configuration of the interface address pool.

[Quidway] display ip pool interface vlanif10

Pool-Name : vlanif10

Pool-No : 0

Lease : 30 Days 0 Hours 0 Minutes

Domain-name : huawei.com

DNS-Server0 : 10.1.1.2

NBNS-Server0 : 10.1.1.3

Netbios-type : b-node

Position : Interface Status : Unlocked

Gateway-0 : 10.1.1.1

Mask : 255.255.255.0

VPN instance : --

-----------------------------------------------------------------------------

Start End Total Used Idle(Expired) Conflict Disable

-----------------------------------------------------------------------------

10.1.1.1 10.1.1.254 253 0 251 0 0 2

-----------------------------------------------------------------------------

[Quidway] display ip pool interface vlanif11

Pool-Name : vlanif11

Pool-No : 1

Lease : 20 Days 0 Hours 0 Minutes

Domain-name : -

DNS-Server0 : -

NBNS-Server0 : -

Netbios-type : -

Position : Interface Status : Unlocked

Gateway-0 : 10.1.2.1

Mask : 255.255.255.0

VPN instance : --

-----------------------------------------------------------------------------

Start End Total Used Idle(Expired) Conflict Disable

-----------------------------------------------------------------------------

10.1.2.1 10.1.2.254 253 0 253 0 0 0

-----------------------------------------------------------------------------

----End

Configuration Files

Configuration file of SwitchA

sysname Quidway

vlan batch 10 to 11

# dhcp enable

# interface Vlanif10

ip address 10.1.1.1 255.255.255.0

dhcp select interface

dhcp server excluded-ip-address 10.1.1.2 10.1.1.3

dhcp server dns-list 10.1.1.2

dhcp server netbios-type b-node

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

dhcp server nbns-list 10.1.1.3

dhcp server lease day 30 hour 0 minute 0

dhcp server domain-name huawei.com

# interface Vlanif11

ip address 10.1.2.1 255.255.255.0

dhcp select interface

dhcp server lease day 20 hour 0 minute 0

# interface GigabitEthernet1/0/1

port hybrid pvid vlan 10

port hybrid untagged vlan 10

# interface GigabitEthernet1/0/2

port hybrid pvid vlan 11

port hybrid untagged vlan 11

# return

3.7.3 Example for Configuring a DHCP Relay Agent

When the DHCP server and DHCP clients are in different network segments, a DHCP relay agent is required.

Networking Requirements

An enterprise has multiple offices, which are distributed in different office buildings. The offices in a building belong to the same local area network (LAN), and the buildings belong to different

LANs. The enterprise uses a DHCP server to allocate IP addresses to all clients.

As shown in

Figure 3-8

, the DHCP clients are in the network segment 20.20.20.0/24 and the

DHCP server is in the network segment 100.10.10.0/24. A Switch enabled with DHCP relay is required between the clients and server. By using the DHCP relay agent, the DHCP clients can obtain IP addresses from the DHCP server.

The DHCP server and the clients are in different network segments, and an interface-based address pool cannot allocate IP addresses to the clients in different network segments. A global address pool in the network segment 20.20.20.0/24 is required, and the DHCP server must have a reachable route to the network segment 20.20.20.0/24.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Figure 3-8 DHCP relay agent networking diagram

Internet

GE1/0/0

SwitchB

DHCP Server

VLANIF20

100.10.10.1/24

DHCP Relay

GE1/0/1

SwitchA

VLANIF100

20.20.20.1/24

3 DHCP Configuration

DHCP

Client

DHCP

Client

VLAN100

DHCP

Client

Configuration Roadmap

Configure SwitchA as a DHCP relay agent. The configuration roadmap is as follows:

Configure a DHCP server group on SwitchA and add SwitchB to the DHCP server group.

Enable DHCP relay on VLANIF 100.

Bind the DHCP server group to VLANIF 100 and specify the DHCP server for the DHCP relay agent.

Configure SwitchB as the DHCP server. The configuration roadmap is as follows:

Configure a reachable route from the DHCP server to GE 1/0/1 of the DHCP relay agent.

Enable the DHCP function on the server. Configure the clients connected to GE 1/0/0 of the server to obtain IP addresses from the global address pool.

Create a global address pool on the DHCP server to allocate IP addresses to clients.

Data Preparation

To complete the configuration, you need the following data: l Name of the DHCP server group l IP address of the DHCP server in the DHCP server group l Number and IP address of the interface enabled with DHCP relay

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Procedure

Step 1 Create a DHCP server group and add DHCP servers to the DHCP server group.

# Create a DHCP server group.

<Quidway> system-view

[Quidway] dhcp server group dhcpgroup1

# Add DHCP servers to the DHCP server group.

[Quidway-dhcp-server-group-dhcpgroup1] dhcp-server 100.10.10.1

[Quidway-dhcp-server-group-dhcpgroup1] quit

Step 2 Enable DHCP relay on the VLANIF interface.

# Create a VLAN and add GE 1/0/1 to the VLAN.

[Quidway] vlan 100

[Quidway-Vlan100] quit

[Quidway] interface gigabitethernet 1/0/1

[Quidway-GigabitEthernet1/0/1] port link-type trunk

[Quidway-GigabitEthernet1/0/1] port trunk allow-pass vlan 100

[Quidway-GigabitEthernet1/0/1] quit

# Enable DHCP globally, and then enable DHCP Relay on the VLANIF 100 interface.

[Quidway] dhcp enable

[Quidway] interface vlanif 100

[Quidway-Vlanif100] dhcp select relay

[Quidway-Vlanif100] quit

Step 3 Bind a VLANIF interface to a specified DHCP server group.

# Assign an IP address to the VLANIF interface.

[Quidway] interface vlanif 100

[Quidway-Vlanif100] ip address 20.20.20.1 24

# Bind the VLANIF interface to a specified DHCP server group.

[Quidway-Vlanif100] dhcp relay server-select dhcpgroup1

[Quidway-Vlanif100] quit

Step 4 Configure the DHCP server.

# Create a VLAN and add GE 1/0/0 to the VLAN.

[Quidway] vlan 20

[Quidway-Vlan20] quit

[Quidway] interface gigabitethernet 1/0/0

[Quidway-GigabitEthernet1/0/0] port link-type trunk

[Quidway-GigabitEthernet1/0/0] port trunk allow-pass vlan 20

[Quidway-GigabitEthernet1/0/0] quit

# Enable the DHCP function and configure the clients connected to VLANIF 20 to obtain IP addresses from the global address pool.

<Quidway> system-view

[Quidway] dhcp enable

[Quidway] interface vlanif 20

[Quidway-Vlanif20] ip address 100.10.10.1 24

[Quidway-Vlanif20] dhcp select global

[Quidway-Vlanif20] quit

Configure an IP address pool 20.20.20.0/24 on the DHCP server and configure a static route from the DHCP server to the Switch. Ensure that the route between the DHCP server and network segment 20.20.20.0/24 is reachable.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

3 DHCP Configuration

[Quidway] ip pool 1

[Quidway-ip-pool-1] network 20.20.20.0 mask 24

[Quidway-ip-pool-1] quit

# Configure a static route from the address pool to the DHCP relay agent to ensure that the DHCP server has a reachable route to the network segment 20.20.20.0/24.(The configuration procedure is not provided here.)

Step 5 Verify the configuration.

# Run the display dhcp relay command on SwitchA to view the DHCP relay configuration on the interface.

[Quidway] display dhcp relay interface vlanif100

DHCP relay agent running information of interface Vlanif100 :

Server group name : dhcpgroup1

Gateway address in use : 100.10.10.1

# Run the display ip pool command on SwitchB to view the address pool configuration.

[Quidway] display ip pool

-----------------------------------------------------------------------

Pool-Name : 1

Pool-No : 0

Position : Local Status : Unlocked

Gateway-0 : -

Mask : 255.255.255.0

Vpn instance : --

IP address Statistic

Total :250

Used :0 Idle :248

Expired :0 Conflict :0 Disable :2

----End

Configuration Files

Configuration file of SwitchA

sysname Quidway

vlan 100

dhcp enable

# dhcp server group dhcpgroup1

dhcp-server 100.10.10.1

# interface Vlanif100

ip address 20.20.20.1 255.255.255.0

dhcp select relay

dhcp relay server-select dhcpgroup1

# interface GigabitEthernet1/0/1

port link-type trunk

port trunk allow-pass vlan 100

# return

Configuration file of SwitchB

sysname Quidway

vlan batch 20

# dhcp enable

Issue 01 (2011-10-26) 82

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration ip pool 1

network 20.20.20.0 mask 255.255.255.0

# interface Vlanif20

ip address 100.10.10.1 255.255.255.0

dhcp select global

# interface GigabitEthernet1/0/0

port link-type trunk

port trunk allow-pass vlan 20

# return

3.7.4 Example for Configuring a DHCP Relay Agent for VPN

This section describes how to configure a DHCP relay agent for a VPN.

Networking Requirements

An enterprise establishes a VPN for employees to communicate with each other. The DHCP server is not in the VPN. Users in the VPN need to obtain IP addresses from the DHCP server.

As shown in

Figure 3-9

, the DHCP clients are located in VPNA, which is in network segment

20.20.20.0/24; the DHCP server is located in network segment 10.10.10.0/24. The DHCP packets need to be relayed by the Switch enabled with the DHCP relay function. The DHCP clients on the VPN then can apply for IP addresses from the DHCP server.

An address pool containing network segment 20.20.20.0/24 is configured on the DHCP server.

The DHCP server has a reachable route to 20.20.20.0/24.

Figure 3-9 Networking diagram for configuring the DHCP relay for a VPN

Loopback1

2.2.2.2/32

Loopback1

1.1.1.1/32

Internet

Swtich

DHCP Relay：

GE1/0/0

VLANIF100

20.20.20.1/24

PE：

GE1/0/0

VLANIF101

10.10.10.2/24

DHCP Server：

10.10.10.1/24 vpna

Issue 01 (2011-10-26)

DHCP Client

Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

Configuration Roadmap

The configuration roadmap is as follows:

Create a DHCP server group and add a DHCP server to the group.

Enable DHCP relay on VLANIF 100 so that the Switch functions as the DHCP relay agent.

Create a VPN instance and bind the DHCP server group and VLANIF interface to the VPN instance.

Bind the specified DHCP server group to VLANIF 100 so that the packets passing VLANIF

100 are forwarded to the specified server.

Data Preparation

To complete the configuration, you need the following data: l Name of the DHCP server group l IP addresses of the DHCP servers l Number and IP address of the interface enabled with the DHCP relay function l Name of the VPN instance that the client belongs to

Procedure

Step 1 Create a DHCP server group and add DHCP server to the group.

# Create a DHCP server group.

<Quidway> system-view

[Quidway] sysname Switch

[Switch] dhcp server group dhcpgroup1

# Add a DHCP server to the DHCP server group.

[Switch-dhcp-server-group-dhcpgroup1] dhcp-server 10.10.10.1

[Switch-dhcp-server-group-dhcpgroup1] quit

Step 2 Enable the DHCP relay function on the VLANIF interface.

# Create a VLAN and add GE 1/0/0 to the VLAN.

[Switch] vlan 100

[Switch-Vlan100] quit

[Switch] interface gigabitethernet 1/0/0

[Switch-GigabitEthernet1/0/0] port link-type trunk

[Switch-GigabitEthernet1/0/0] port trunk allow-pass vlan 100

[Switch-GigabitEthernet1/0/0] quit

# Enable global DHCP and enable the DHCP relay function on the VLANIF interface.

[Switch] dhcp enable

[Switch] interface vlanif 100

[Switch-Vlanif100] dhcp select relay

[Switch-Vlanif100] quit

Step 3 Create a VPN instance and bind the DHCP server group and VLANIF interface to the VPN instance.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 3 DHCP Configuration

NOTE

The following lists how to create a VPN instance and bind the VPN instance on the Switch in

Figure

3-9

. The configuration procedure is not mentioned here. For details, see the Quidway S9300 Terabit

Routing Switch Configuration Guide - VPN.

# Create a VPN instance.

[Switch] ip vpn-instance vpna

[Switch-vpn-instance-vpna] route-distinguisher 1:1

[Switch-vpn-instance-vpna] vpn-target 2:2 both

[Switch-vpn-instance-vpna] quit

# Bind the DHCP server group to the VPN instance.

[Switch] dhcp server group dhcpgroup1

[Switch-dhcp-server-group-dhcpgroup1] vpn-instance vpna

[Switch-dhcp-server-group-dhcpgroup1] quit

# Bind the VLANIF interface to the VPN instance.

[Switch] interface vlanif 100

[Switch-Vlanif100] ip binding vpn-instance vpna

Step 4 Bind the VLANIF interface to the specified DHCP server group.

# Set the IP address of the VLANIF interface.

[Switch] interface vlanif 100

[Switch-Vlanif100] ip address 20.20.20.1 24

# Specify a DHCP server for the VLANIF interface.

[Switch-Vlanif100] dhcp relay server-select dhcpgroup1

Step 5 Configure the DHCP server and PE.

# Configure an IP address pool 20.20.20.0/24 on the DHCP server and configure a static route from the DHCP server to the Switch. Ensure that the route between the DHCP server and network segment 20.20.20.0/24 is reachable.

<Quidway> system-view

[Quidway] sysname SERVER

[SERVER] ip pool 1

[SERVER-ip-pool-1] network 20.20.20.0 mask 255.255.255.0

[SERVER-ip-pool-1] gateway-list 20.20.20.1

[SERVER-ip-pool-1] quit

[SERVER] ip route-static 20.20.20.0 255.255.255.0 10.10.10.2

# Configure the PE connected to the DHCP server and the Switch in

Figure 3-9

to be in the same VPN instance and ensure that the VPN target of the DHCP server corresponds to the VPN target of the Switch.

<Quidway> system-view

[Quidway] sysname PE

[PE] vlan 101

[PE-Vlan101] quit

[PE] interface gigabitethernet 1/0/0

[PE-GigabitEthernet1/0/0] port link-type trunk

[PE-GigabitEthernet1/0/0] port trunk allow-pass vlan 101

[PE-GigabitEthernet1/0/0] quit

[PE] ip vpn-instance vpna

[PE-vpn-instance-vpna] route-distinguisher 1:1

[PE-vpn-instance-vpna] vpn-target 2:2 both

[PE-vpn-instance-vpna] quit

[PE] interface vlanif 101

[PE-Vlanif101] ip binding vpn-instance vpna

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

3 DHCP Configuration

[PE-Vlanif101] ip address 10.10.10.2 24

[PE-Vlanif101] quit

Step 6 Configure MP-IBGP to exchange VPN routing information.

NOTE

After configuring the routing and MPLS capability between the PE and Switch, configure MP-IBGP to exchange VPN routing information.

# Configure the PE.

[PE] bgp 100

[PE-bgp] peer 1.1.1.1 as-number 100

[PE-bgp] peer 1.1.1.1 connect-interface loopback 1

[PE-bgp] ipv4-family vpnv4

[PE-bgp-af-vpnv4] peer 1.1.1.1 enable

[PE-bgp-af-vpnv4] quit

[PE-bgp] quit

# Configure the Switch.

[Switch] bgp 100

[Switch-bgp] peer 2.2.2.2 as-number 100

[Switch-bgp] peer 2.2.2.2 connect-interface loopback 1

[Switch-bgp] ipv4-family vpnv4

[Switch-bgp-af-vpnv4] peer 2.2.2.2 enable

[Switch-bgp-af-vpnv4] quit

After the configuration, run the display bgp peer command on the PE, and you can see that the

BGP peer relationship between the PEs is in Established state.

[PE] display bgp peer

BGP local router ID : 2.2.2.2

Local AS number : 100

Total number of peers : 1 Peers in established state : 1

Peer V AS MsgRcvd MsgSent OutQ Up/Down State

PrefRcv

1.1.1.1 4 100 12 6 0 00:02:21 Established

Step 7 Verify the configuration.

Run the display dhcp relay command on the Switch to view the DHCP relay configuration on the interface.

[Switch] display dhcp relay interface vlanif100

DHCP relay agent running information of interface Vlanif100 :

DHCP server group name : dhcpgroup1

DHCP server IP [0] :10.10.10.1

DHCP server IP [1] :255.255.255.255

DHCP server IP [2] :255.255.255.255

DHCP server IP [3] :255.255.255.255

DHCP server IP [4] :255.255.255.255

DHCP server IP [5] :255.255.255.255

DHCP server IP [6] :255.255.255.255

DHCP server IP [7] :255.255.255.255

DHCP server IP [8] :255.255.255.255

DHCP server IP [9] :255.255.255.255

DHCP server IP [10] :255.255.255.255

DHCP server IP [11] :255.255.255.255

DHCP server IP [12] :255.255.255.255

DHCP server IP [13] :255.255.255.255

DHCP server IP [14] :255.255.255.255

DHCP server IP [15] :255.255.255.255

DHCP server IP [16] :255.255.255.255

Issue 01 (2011-10-26) 86

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

DHCP server IP [17] :255.255.255.255

DHCP server IP [18] :255.255.255.255

DHCP server IP [19] :255.255.255.255

----End

Configuration Files

Configuration file of the Switch

sysname Switch

vlan 100

dhcp enable

# ip vpn-instance vpna

route-distinguisher 1:1

vpn-target 2:2 export-extcommunity

vpn-target 2:2 import-extcommunity

# dhcp server group dhcpgroup1

dhcp-server 10.10.10.1 0

vpn-instance vpna

# interface Vlanif100

ip binding vpn-instance vpna

ip address 20.20.20.1 255.255.255.0

dhcp select relay

dhcp relay server-select dhcpgroup1

# interface GigabitEthernet1/0/0

port link-type trunk

port trunk allow-pass vlan 100

# bgp 100

peer 2.2.2.2 as-number 100

peer 2.2.2.2 connect-interface loopback 1

ipv4-family vpnv4

peer 2.2.2.2 enable

# return

Configuration file of the DHCP server

sysname SERVER

# ip pool 1

network 20.20.20.0 mask 255.255.255.0

gateway-list 20.20.20.1

# ip route-static 20.20.20.0 255.255.255.0 10.10.10.2

# return

Configuration file of the PE

sysname PE

vlan 101

# ip vpn-instance vpna

route-distinguisher 1:1

vpn-target 2:2 export-extcommunity

vpn-target 2:2 import-extcommunity

# interface Vlanif101

ip binding vpn-instance vpna

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

3 DHCP Configuration

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

ip address 10.10.10.2 255.255.255.0

# interface GigabitEthernet1/0/0

port link-type trunk

port trunk allow-pass vlan 101

# bgp 100

peer 1.1.1.1 as-number 100

peer 1.1.1.1 connect-interface loopback 1

ipv4-family vpnv4

peer 1.1.1.1 enable

# return

3 DHCP Configuration

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 4 IP Session Configuration

IP Session Configuration

About This Chapter

This chapter describes the basic principle and configuration of the IP session function and provides configuration examples.

4.1 Introduction to the IP Session

This section describes the concepts related to the IP session.

4.2 IP Session Supported by the S9300

The S9300 supports the access of IP sessions to Layer 3 sub-interfaces, but does not support the access to main interfaces.

4.3 Configuring IP Session

This section describes how to create an IP session and set related parameters.

4.4 Example for Configuring IP Session

This section provides an example for configuring the IP Session function.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 4 IP Session Configuration

4.1 Introduction to the IP Session

This section describes the concepts related to the IP session.

IP session, also called DHCP proxy, is an application of the DHCP protocol. It manages DHCP users.

l The DHCP proxy authenticates and authorizes access users with the local, remote (RADIUS or HWTACACS), and non-authentication policies.

l After the status of access users becomes stable, the DHCP proxy is able to manage the specified user, for example, carry out accounting for the user again or disconnect the user from the network.

Typical Application of IP Session

Figure 4-1 Typical application of IP session

DHCP server

SwitchB SwitchA

DHCP clients

AAA server

As shown in

Figure 4-1

, SwitchB is the access device of DHCP users, the IP session service is run on the aggregation switch SwitchA. SwitchA allocates IP addresses to users through the

DHCP server, and the AAA server authenticates and authorizes users. Thus the users can be online once they power on the computer. The DHCP server can be a remote server or a local server. If a local server is used, it indicates that the S9300 functions as the DHCP server.

NOTE

For the configurations of AAA and user management function on the S9300, see the Quidway S9300

Terabit Routing Switch Configuration Guide - Security.

4.2 IP Session Supported by the S9300

The S9300 supports the access of IP sessions to Layer 3 sub-interfaces, but does not support the access to main interfaces.

NOTE

At present, the IP session function is only supported on the G48VA, S24XA, T24XA, G24CFAT.

A board supporting Layer 3 interfaces can be configured with a maximum of 4096 sessions.

Trunk sub-interfaces support IP sessions. The member interfaces of a trunk interface cannot be located on different boards or subcards.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 4 IP Session Configuration

The S9300 can terminate DHCP packets on sub-interfaces. You can configure a remote DHCP server or a local DHCP server to allocate IP addresses. You need to configure the IP session access function on the Layer 3 sub-interface. This indicates that the sub-interface can terminate

DHCP packets. In addition, you need to configure the access domain and authentication mode for the users on this sub-interface. After the IP session function is enabled on the interface, the default values of other parameters are generated automatically. You can change the parameter values through commands.

l The IP sessions can access sub-interfaces.

l The DHCP packets can be sent to the CPU.

l The DHCP packets can be processed, for example, parsed and encapsulated.

l The users can be authenticated.

l The users can be charged based on the online duration.

l The ARP probe can be performed for online users.

If a user goes offline abnormally (that is, the user does not request the server to release the address), the S9300 can detect this user by performing ARP probe on online users. Then the S9300 deletes the data of the offline user to ensure the effective resource usage.

l Users can join multicast groups.

After a DHCP user, maybe IPTV terminal, joins a multicast group, the user can receive the video data normally.

4.3 Configuring IP Session

This section describes how to create an IP session and set related parameters.

4.3.1 Establishing the Configuration Task

This section describes the applicable environment, pre-configuration tasks, and data preparation for configuring IP session.

Applicable Environment

When a user connects to the S9300, the S9300 authenticates the user, performs lease management, and forwards data.

NOTE

To make access users go online successfully, you must configure a static route between the egress gateway and the DHCP server on the S9300. The address of the egress gateway is set according to the actual situation and the configuration of the static route is described in IP Static Route Configuration.

Pre-configuration Tasks

Before configuring IP session, complete the following tasks: l Setting physical parameters of a sub-interface l

Creating a VPN instance

Data Preparation

To configure IP session, you need the following data.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 4 IP Session Configuration

No.

Data

User name and password

Name of the user authentication domain

VLAN ID on the interface, which cannot be an existing one

4.3.2 Enabling the IP Session Function

Before enabling IP session on a sub-interface, you must enable DHCP globally.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

dhcp enable

DHCP is enabled globally.

Step 3 Run:

interface interface-type interface-number.subinterface-number

The sub-interface view is displayed.

Currently, the IP session function can be enabled only in other sub-interfaces view except for the XGE sub-interface.

Step 4 Run:

ip-session enable

The IP session function is enabled.

----End

4.3.3 Binding a User Authentication Domain to a Sub-Interface

If a user authentication domain is bound to a sub-interface, when a user goes online, the

S9300 selects the bound domain to authenticate and authorize the user.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

aaa

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 4 IP Session Configuration

The AAA view is displayed.

Step 3 Run:

domain domain-name

The authentication domain is created.

Step 4 Run:

quit

Return to the AAA view.

Step 5 Run:

quit

Return to the system view.

Step 6 Run:

interface interface-type interface-number.subinterface-number

The sub-interface view is displayed.

Step 7 Run:

authentication-domain domain-name

A user authentication domain is bound to the sub-interface. When a user goes online, the

S9300 selects the bound domain to authenticate and authorize the user.

By default, the user authentication domain bound to a sub-interface is the global default domain.

You can change the domain by running the domain command in the system view.

----End

4.3.4 (Optional) Setting the Format of DHCP User Name and the

Password

The format of the DHCP user name needs to be set in server authentication.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

dhcp user-name format-include { ip-address | mac-address | option82 | sysname }

The format of the DHCP user name and the sequence of elements in the user name are specified.

By default, the DHCP user name is in the following format: system name + "-" + slot ID (two digits, prefixed 0 if it contains only one digit) + subcard ID (one digit, set to 0 if the subcard does not exist) + port number (two digits, prefixed 0 if it contains only one digit) + outer VLAN

ID (four digits, prefixed 0 if it contains less than four digits) + inner VLAN ID (five digits, prefixed 0 if it contains less than five digits) + @ + access domain name, for example,

Quidway-02024000000768@domain1.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 4 IP Session Configuration

If the user name is generated according to the Option 82 field and the user name contains non-

ASCII characters, the non-ASCII characters are displayed as "..." for example, ...session1@domain1.

Step 3 Run:

dhcp user-password { cipher cipher-password | simple simple-password }

The password of DHCP user is set.

By default, the DHCP password is vlan in plain text mode.

----End

4.3.5 (Optional) Configuring the S9300 to Process Option Fields

Through the IP session function, the S9300 can process the Option 82 field of DHCP messages and select the service policy according to the Option 60 field.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface interface-type interface-number.subinterface-number

The sub-interface view is displayed.

Step 3 Run:

dhcp option82 insert enable

The function of appending the Option 82 field to DHCP messages is enabled.

Or, run:

dhcp option82 rebuild enable

The function of forcibly appending the Option 82 field to DHCP messages is enabled.

By default, the S9300 does not process the Option 82 field of DHCP messages.

After the dhcp option82 insert enable or dhcp option82 rebuild enable command is used, the

S9300 replaces the Option 82 field of DHCP messages of the online IP session user. The Option

82 field is generated according to the configuration and is used for sending DHCP messages to the remote DHCP server.

Step 4 Run:

dhcp service-policy option60

The service policy associated with the service scheme for users going online is configured.

By default, users connected to a sub-interface go online through the service scheme in the domain bound to the sub-interface.

After the dhcp service-policy option60 command is used, the S9300 selects the related service policy according to the Option 60 field in DHCP messages.

----End

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

4 IP Session Configuration

4.3.6 (Optional) Setting ARP Detection Parameters

ARP detection is configured on sub-interfaces. If the ARP detection interval is 0, it indicates that ARP detection is disabled.

Context

By using the DHCP protocol, a server leases IP addresses to clients. The clients then need to apply for new IP addresses when the leases expire. In actual applications, the situation that a client that already has a leased IP address is abnormally disconnected but no release packet is sent to the DHCP server is often encountered.

In this case, the S9300 needs to regularly send ARP detection packets to check whether users remain online. Upon the timeout of the ARP detection, users are disconnected. In addition,

DHCP Release packets are constructed and sent to the DHCP server to enable the DHCP server to release the IP address.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface interface-type interface-number.subinterface-number

The sub-interface view is displayed.

Step 3 Run:

dhcp user-detect retransmit times interval interval

The interval and number of detection times are set.

By default, the detection interval is 30 seconds and the number of detection timeout times is 5.

----End

4.3.7 (Optional) Setting the Type of a NAS Interface

When a user is being authenticated, the NAS interface type encapsulated in the RADIUS attribute is reported. By default, the NAS interface type is ethernet.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

interface interface-type interface-number.subinterface-number

The sub-interface view is displayed.

Step 3 Run:

Issue 01 (2011-10-26) 95

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 4 IP Session Configuration

dhcp nas-port-type { 802.11 | adsl-cap | adsl-dmt | async | cable | ethernet | g.3-

sync | virtual | wireless-other | x.25 | x.75 | xdsl }

The NAS interface type is set.

By default, the NAS interface type is ethernet.

----End

4.3.8 (Optional) Binding a VPN Instance to an Interface

A user can go online only when the VPN instance of the IP address pool through which the user connects to the VPN is the same as the VPN instance bound to the sub-interface.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

ip vpn-instance vpn-instance-name

The VPN instance is created.

Step 3 Run:

quit

Return to the system view.

Step 4 Run:

interface interface-type interface-number.subinterface-number

The sub-interface view is displayed.

Step 5 Run:

vpn-instance vpn-instance-name

The VPN instance is bound to the interface.

----End

4.3.9 Checking the Configuration

This section describes how to check the configuration of IP session.

Prerequisite

All configurations of IP session are complete.

Procedure

Run the display session-interface [ interface-type interface-number ] command to check information about the sub-interface enabled with IP session.

----End

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 4 IP Session Configuration

4.4 Example for Configuring IP Session

This section provides an example for configuring the IP Session function.

4.4.1 Example for Configuring IP Session

This section provides a configuration example of IP session.

Networking Requirements

As shown in

Figure 4-2

, STB-A is connected to GE 1/0/1.100 of the Switch; STB-B is connected

to GE 1/0/2.100 of the Switch.

You need to configure IP session on the Switch so that STB-A and STB-B users can be online once they power on STB-A and STB-B.

Figure 4-2 Networking diagram of IPTV

Router

DHCP server

10.10.10.10

Multicast server

Radius server

Swtich

GE1/0/1.100

Loopback0

20.20.20.20/32

GE1/0/2.100

STB-A

STB-B

Configuration Roadmap

The configuration roadmap is as follows:

Enable global DHCP.

Enable the IP session function.

Bind the user authentication domain to a sub-interface.

Set IP session-related parameters for the sub-interface.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

4 IP Session Configuration

Configure a DHCP server group.

Configure an egress gateway.

Configure a static route.

Data Preparation

To complete the configuration, you need the following data: l Physical parameters on the sub-interface l VLAN ID of the interface l Type of the NAS interface l

ARP detection parameter l Name of the DHCP server group: dhcp-group l Gateway address: 20.20.20.20

l IP address of the DHCP server: 10.10.10.10

Context

NOTE

Only IP session-related configurations are involved in this example. The AAA configurations, RADIUS configurations, multicast-related configurations, and router-related configurations are not described in this example.

Procedure

Step 1 Enable DHCP globally.

<Quidway> system-view

[Quidway] dhcp enable

Step 2 Enable the IP session function on sub-interfaces.

# Enable the IP session function on GE1/0/1.100.

[Quidway] interface gigabitethernet 1/0/1.100

[Quidway-GigabitEthernet1/0/1.100] ip-session enable

[Quidway-GigabitEthernet1/0/1.100] quit

# Enable the IP session function on GE1/0/2.100.

[Quidway] interface gigabitethernet 1/0/2.100

[Quidway-GigabitEthernet1/0/2.100] ip-session enable

[Quidway-GigabitEthernet1/0/2.100] quit

Step 3 Bind user authentication domains to sub-interfaces.

# Bind the user authentication domain stb-a to GE 1/0/1.100.

[Quidway] aaa

[Quidway-aaa] domain stb-a

[Quidway-aaa-domain-stb-a] quit

[Quidway-aaa] quit

[Quidway] interface gigabitethernet 1/0/1.100

[Quidway-GigabitEthernet1/0/1.100] authentication-domain stb-a

[Quidway-GigabitEthernet1/0/1.100] quit

# Bind the user authentication domain stb-b to GE 1/0/2.100.

[Quidway] aaa

[Quidway-aaa] domain stb-b

Issue 01 (2011-10-26) 98

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

4 IP Session Configuration

[Quidway-aaa-domain-stb-b] quit

[Quidway-aaa] quit

[Quidway] interface gigabitethernet 1/0/2.100

[Quidway-GigabitEthernet1/0/2.100] authentication-domain stb-b

[Quidway-GigabitEthernet1/0/2.100] quit

Step 4 Set sub-interface-related parameters on the S9300.

# Set the detection interval to 60s and number of detection times to 8 for GE 1/0/1.100.

[Quidway] interface gigabitethernet 1/0/1.100

[Quidway-GigabitEthernet1/0/1.100] control-vid 100 dot1q-termination

[Quidway-GigabitEthernet1/0/1.100] dot1q termination vid 100

[Quidway-GigabitEthernet1/0/1.100] dhcp user-detect retransmit 8 interval 60

[Quidway-GigabitEthernet1/0/1.100] quit

# Set the detection interval to 60s and number of detection times to 8 for GE 1/0/2.100.

[Quidway] interface gigabitethernet 1/0/2.100

[Quidway-GigabitEthernet1/0/2.100] control-vid 100 dot1q-termination

[Quidway-GigabitEthernet1/0/2.100] dot1q termination vid 100

[Quidway-GigabitEthernet1/0/2.100] dhcp user-detect retransmit 8 interval 60

[Quidway-GigabitEthernet1/0/2.100] quit

Step 5 Set the format of the DHCP user name to mac-address and the password in simple mode to stb.

[Quidway] dhcp user-name format-include mac-address

[Quidway] dhcp user-password simple stb

Step 6 Configure a DHCP server group.

[Quidway] dhcp server group dhcp-group

[Quidway-dhcp-server-group-dhcp-group] dhcp-server 10.10.10.10

[Quidway-dhcp-server-group-dhcp-group] gateway 20.20.20.20

[Quidway-dhcp-server-group-dhcp-group] quit

Step 7 Configure an egress gateway.

[Quidway] interface loopback 0

[Quidway-LoopBack0] ip address 20.20.20.20 32

[Quidway-LoopBack0] quit

Step 8 Configure a static route.

[Quidway] ip route-static 10.10.10.0 255.255.255.0 NULL 0

Step 9 Verify the configuration.

# View configuration on GE 1/0/1.100.

<Quidway> display session-interface gigabitethernet 1/0/1.100

Access type : Enable

IPSessIF state : Updated

Authentication default domain : stb-a

Nas port type : ethernet (15)

Vpn Instance :

User detect interval : 60 (s)

User detect retransmit times : 8

Option82 policy : none (0)

Service policy : default (0)

# View configuration on GE 1/0/2.100.

<Quidway> display session-interface gigabitethernet 1/0/2.100

Access type : Enable

IPSessIF state : Updated

Authentication default domain : stb-b

Nas port type : ethernet (15)

Vpn Instance :

User detect interval : 60 (s)

Issue 01 (2011-10-26) 99

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

User detect retransmit times : 8

Option82 policy : none (0)

Service policy : default (0)

----End

Configuration Files

Configuration file of the Switch

sysname Quidway

dhcp enable

# dhcp server group dhcp-group

dhcp user-name format-include mac-address

dhcp user-password simple stb

# dhcp server group dhcp-group

dhcp-server 10.10.10.10 0

gateway 20.20.20.20

# aaa

domain stb-a

domain stb-b

# interface GigabitEthernet1/0/1.100

ip-session enable

authentication-domain stb-a

dhcp user-detect retransmin 8 interval 60

control-vid 100 dot1q-termination

dot1q termination vid 100

# interface GigabitEthernet1/0/2.100

ip-session enable

authentication-domain stb-b

dhcp user-detect retransmin 8 interval 60

control-vid 100 dot1q-termination

dot1q termination vid 100

# interface NULL0

# interface LoopBacl0

ip address 20.20.20.20 255.255.255.255

ip route-static 10.10.10.0 255.255.255.0 NULL0

# return

4 IP Session Configuration

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

100

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 5 DHCPv6 Configuration

DHCPv6 Configuration

About This Chapter

Currently, the S9300 can function as only the DHCP relay agent on IPv6 networks. This document describes how to configure Dynamic Host Configuration Protocol for IPv6 (DHCPv6) relay.

5.1 Introduction to DHCPv6

DHCPv6 is designed for IPv6 addressing and is used to allocate IPv6 addresses and other network configuration parameters to hosts.

5.2 DHCPv6 Features Supported by the S9300

Currently, the S9300 supports only the DHCPv6 relay function, and cannot function as the

DHCPv6 server or client.

5.3 Configuring DHCPv6 Relay

When the DHCPv6 client and the DHCPv6 server are on different links, you need to deploy

DHCPv6 relay agents between the DHCPv6 client and the DHCPv6 server. In this manner, the

DHCPv6 relay agents transmit DHCPv6 messages exchanged between the DHCPv6 client and the DHCPv6 server.

5.4 Maintaining DHCPv6

This section describes how to clear the statistics about DHCPv6 messages passing through the

DHCPv6 relay agent and monitor the running status of the DHCPv6 relay agent.

5.5 Configuration Examples

This section provides a configuration example of DHCPv6 relay.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

101

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 5 DHCPv6 Configuration

5.1 Introduction to DHCPv6

DHCPv6 is designed for IPv6 addressing and is used to allocate IPv6 addresses and other network configuration parameters to hosts.

Advantages of Addresses Allocated by DHCPv6

Compared with other IPv6 address allocation modes (manual configuration and stateless address auto-configuration through the network prefix in router advertisement messages), DHCPv6 has the following advantages: l Controls address allocation better. The device enabled with DHCPv6 can record the address allocated to the host and allocate a special address to the specified host. This facilitates network management.

l Provides network configuration parameters including the IP address of the DNS server and the domain name for hosts in addition to IPv6 addresses.

Basic Concepts of DHCPv6

l Multicast address

In DHCPv6, the client does not need to be configured with the IP address of the DHCPv6 server. Instead, the client locates the DHCPv6 server by sending Solicit messages whose destination address is a multicast address.

DHCPv6 uses the following multicast addresses:

– FF02::1:2 (All_DHCP_Relay_Agents_and_Servers): indicates the multicast address of all the DHCP servers and relay agents. The address is the link-scoped multicast address and is used for communication between a DHCP client and its neighboring server or relay agent on the link. All the DHCP servers and relay agents are members of the multicast group.

–

FF05::1:3 (All_DHCP_Servers): indicates the multicast address of all the DHCP servers. The address is the site-scoped address and is used for communication between

DHCP relay agents and DHCP servers within a site. All DHCP servers within a site are members of this multicast group.

l UDP port number

DHCPv6 messages are transmitted through UDPv6. DHCP clients listen on port 546 for

DHCP messages, and DHCP servers and relay agents listen on port 547 for DHCP messages.

l DUID

The DHCP Unique Identifier (DUID) identifies a DHCPv6-enabled device including the

DHCPv6 client and is used for verification between DHCPv6-enabled devices.

The S9300 uses the DUID Based on hardware type, Link-layer Address and Time (DUID-

LLT) to identify DHCPv6-enabled devices.

Figure 5-1

shows the format of the DUID-LLT.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

102

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Figure 5-1 DUID-LLT format

DUID type Hardware type

5 DHCPv6 Configuration

Time

Link layer address

– DUID type: The value of the DUID type is 0x0001.

– Hardware type: The hardware type supported by the device is Ethernet and the value is

0x0006.

–

Time: time when the DUID is generated. Before the DUID is generated, the system time must be configured or the clock source is available.

–

Link layer address: The value is the link layer address of any interface. The interface has a unique link layer address. The link layer address is the MAC address.

5.2 DHCPv6 Features Supported by the S9300

Currently, the S9300 supports only the DHCPv6 relay function, and cannot function as the

DHCPv6 server or client.

Typical Networking of DHCPv6

Figure 5-2

shows a typical networking of DHCPv6. The DHCPv6 client communicates with the DHCPv6 server through the link-scoped multicast address to obtain the IPv6 address and other network configuration parameters. If the DHCPv6 server and the DHCPv6 client are located on different links, the DHCPv6 relay agent is required to forward messages. In this case, you do not need to deploy a DHCPv6 server on each link. The costs are thus saved and concentrated management is implemented easily.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

103

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Figure 5-2 Typical networking of DHCPv6

DHCPv6 client DHCPv6 client

5 DHCPv6 Configuration

DHCPv6 relay agent

IPv6 network

DHCPv6 client DHCPv6 client

DHCPv6 server

NOTE

Currently, the S9300 supports only the DHCPv6 relay function, and cannot function as the DHCPv6 server or client.

DHCPv6 Relay Function Supported by the S9300

l Forwards messages from DHCPv6 clients.

If the S9300 is the first-hop DHCPv6 relay agent, it receives DHCPv6 messages from

DHCPv6 clients. Then the S9300 resolves, encapsulates, and forwards the received

DHCPv6 messages.

l Forwards messages from DHCPv6 relay agents.

If the S9300 is the non-first-hop DHCPv6 relay agent, it receives DHCPv6 messages from

DHCPv6 relay agents. Then the S9300 resolves, encapsulates, and forwards the received

DHCPv6 messages.

l Forwards messages from DHCPv6 servers.

If the S9300 is the last-hop DHCPv6 relay agent, it receives DHCPv6 messages from

DHCPv6 servers. Then the S9300 resolves, encapsulates, and forwards the received

DHCPv6 messages.

l Appends the remote ID.

The S9300 can append or forcibly append the remote ID in Relay-Forward messages.

l Limits the rate of DHCPv6 messages to be forwarded.

To prevent a large number of messages of clients or relay agents from attacking the device, the S9300 can limit the rate of DHCPv6 messages to be forwarded. An alarm is generated when the number of discarded packets exceeds the threshold.

l Collects statistics on forwarded DHCPv6 messages.

If the S9300 is enabled with the DHCPv6 relay function, the S9300 collects statistics on

DHCPv6 messages passing through the DHCP relay agent.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

104

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 5 DHCPv6 Configuration

5.3 Configuring DHCPv6 Relay

When the DHCPv6 client and the DHCPv6 server are on different links, you need to deploy

DHCPv6 relay agents between the DHCPv6 client and the DHCPv6 server. In this manner, the

DHCPv6 relay agents transmit DHCPv6 messages exchanged between the DHCPv6 client and the DHCPv6 server.

5.3.1 Establishing the Configuration Task

This section describes the applicable environment, pre-configuration tasks, and data preparation for configuring DHCPv6 relay.

Applicable Environment

When the DHCPv6 client applies to the DHCPv6 server on a different link for the IP address, you need to deploy relay agents between the DHCPv6 client and the DHCPv6 server. In this manner, the relay agents transmit DHCPv6 messages exchanged between the DHCPv6 client and the DHCPv6 server.

Pre-configuration Tasks

Before configuring DHCPv6 relay, complete the following tasks: l Configuring the DHCPv6 server l Configuring the route between the S9300 and DHCPv6 server

Data Preparation

To configure DHCPv6 relay, you need the following data.

No.

Data

1 Type and number of the interface where DHCPv6 relay is enabled (the interface type is VLANIF)

Type and number of the interface where the function of appending the remote ID to

DHCPv6 relay messages is enabled (the interface type can be Ethernet, GE, or

XGE)

(Optional) Maximum transmission rate of DHCPv6 messages and alarm threshold of the number of DHCPv6 messages discarded

5.3.2 Enabling the DHCPv6 Relay Function

You can enable the DHCPv6 relay function on a VLANIF interface of the S9300, set the IPv6 address of the DHCPv6 server or the next hop relay agent, and specify the outbound interface of relay messages.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

105

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 5 DHCPv6 Configuration

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

dhcp enable

DHCP is enabled.

Step 3 Run:

ipv6

The IPv6 packet forwarding capability is enabled.

Step 4 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 5 Run:

ipv6 enable

The IPv6 capability is enabled on the interface.

Step 6 Run:

ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length }

The IPv6 address is configured on the interface.

Step 7 Run:

dhcpv6 relay destination ipv6-address [ interface interface-type interface-number ]

The DHCPv6 relay function is enabled on the VLANIF interface, the IPv6 address of the

DHCPv6 server or the next hop relay agent is set, and the outbound interface of relay messages is specified.

By default, the DHCPv6 relay function is disabled on a VLANIF interface.

l If the configured IPv6 address is a global address or a site address, the outbound interface does not need to be specified. The DHCPv6 server sends the relay messages to the IPv6 address by searching for a route.

l If the configured IPv6 address is a local address or a multicast address, the outbound interface of the DHCPv6 server or the next hop relay agent needs to be specified.

On the S9300, up to eight interfaces can be enabled with the DHCPv6 relay function and each interface can be configured with up to eight destination addresses.

----End

5.3.3 (Optional) Configuring the Remote ID

The remote ID carries information about a client and identifies a client.

Context

The DHCPv6 server can make decisions about address allocation, parameter setting, and prefix agent according to the remote ID. The format of the remote ID is defined by the vendor. Usually,

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

106

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 5 DHCPv6 Configuration the remote ID carries the phone number and user name in a dial-up connection, or the peer IP address and access interface in a point-to-point connection. Currently, a remote ID can contain a maximum of 247 bytes.

When the S9300 functions as the DHCPv6 relay agent, it processes the remote ID as follows: l The S9300 directly receives messages from DHCPv6 clients. When constructing a Relay-

Forward message, the S9300 adds the remote ID to the Relay-Forward message according to the configuration.

l If the Relay-Reply message received by the S9300 from the DHCPv6 server contains the remote ID, the S9300 removes the remote ID from the Relay-Reply message before forwarding it to DHCPv6 clients or other relay agents.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

dhcpv6 remote-id format { default | user-defined text }

The format of the remote ID in DHCPv6 messages is set.

By default, the default format of the remote ID in DHCPv6 messages is used.

Step 3 Run:

interface interface-type interface-number

The interface view is displayed.

The interface can be an Ethernet interface, a GE interface or an XGE interface.

Step 4 Run:

dhcpv6 remote-id insert enable

The function of appending the remote ID to DHCPv6 relay messages is enabled.

Or, run:

dhcpv6 remote-id rebuild enable

The function of forcibly appending the remote ID to DHCPv6 relay messages is enabled.

l After the dhcpv6 remote-id insert enable command is used, if the original DHCPv6 messages do not carry the remote ID, the S9300 appends the remote ID to the DHCPv6 messages. If the original DHCPv6 messages carry the remote ID, the S9300 sends the DHCP messages directly.

l After the dhcpv6 remote-id rebuild enable command is used, if the original DHCPv6 messages do not carry the remote ID, the S9300 appends the remote ID to the DHCPv6 messages. If the original DHCPv6 messages carry the remote ID, the S9300 deletes the original remote ID from the DHCP messages and appends a new remote ID to the DHCP messages.

If you run the dhcpv6 remote-id insert enable and dhcpv6 remote-id rebuild enable commands simultaneously on an interface, the command that you run later takes effect.

----End

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

107

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 5 DHCPv6 Configuration

5.3.4 (Optional) Configuring Rate Limit of DHCPv6 Messages

To prevent a large number of messages of clients or relay agents from attacking the device, the

S9300 can limit the rate of DHCPv6 messages to be forwarded.

Context

After rate limit of DHCPv6 messages is enabled, excessive DHCPv6 messages are discarded when the rate of DHCPv6 messages exceeds the limit. When the number of discarded DHCPv6 messages exceeds the threshold, the S9300 supports the log function.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

dhcp enable

DHCP is enabled.

Step 3 Run:

dhcpv6 packet-rate packet-rate

Rate limit of DHCPv6 messages is enabled and the maximum transmission rate of DHCPv6 messages is set.

By default, rate limit of DHCPv6 messages is disabled on the S9300.

Step 4 Run:

dhcpv6 packet-rate drop-alarm enable

The alarm function for DHCPv6 messages discarded when the rate of DHCPv6 messages exceeds rate limit.

After the log function is enabled, if the number of DHCPv6 messages that pass through the

S9300 every second exceeds the rate limit, they are discarded. By default, S9300 sends logs when the number of discarded DHCPv6 messages exceeds 100.

Step 5 Run:

dhcpv6 packet-rate drop-alarm threshold threshold

The log threshold for DHCPv6 messages discarded is set when the rate of DHCPv6 messages exceeds rate limit.

----End

5.3.5 Checking the Configuration

This section describes how to check the configuration of DHCPv6 relay.

Prerequisite

The configurations of DHCPv6 relay are complete.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

108

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Procedure

5 DHCPv6 Configuration l Run the display dhcpv6 relay [ interface interface-type interface-number ] command to check the configuration about the interface enabled with the DHCPv6 relay function.

Currently, the interface type can only be the VLANIF interface.

Run the display dhcpv6 relay statistics [ interface interface-type interface-number ] command to check the statistics about DHCPv6 messages passing through the DHCPv6 relay agent.

Currently, the interface type can only be the VLANIF interface.

----End

5.4 Maintaining DHCPv6

This section describes how to clear the statistics about DHCPv6 messages passing through the

DHCPv6 relay agent and monitor the running status of the DHCPv6 relay agent.

5.4.1 Clearing the Statistics About DHCPv6 Messages Passing

Through the DHCP Relay Agent

If the S9300 is enabled with the DHCPv6 relay function, the system collects statistics about

DHCPv6 messages passing through the DHCP relay agent. To clear the statistics about DHCPv6 messages passing through the DHCPv6 relay agent, you can use the command in the user view or system view.

Context

CAUTION

Statistics cannot be restored after being cleared. So, confirm the action before you use the command.

Procedure

l Run the reset dhcpv6 relay statistics [ interface interface-type interface-number ] command to clear the statistics about DHCPv6 messages passing through the DHCPv6 relay agent.

The interface must be the VLANIF interface. If no interface is specified, all the statistics about DHCPv6 messages are cleared. If the interface is specified, the statistics about

DHCPv6 messages on the specified interface are cleared.

----End

5.4.2 Monitoring the Running Status of the DHCPv6 Relay Agent

This section describes how to use the display commands to monitor the running status of the

DHCPv6 relay agent.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

109

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Procedure

Run the display dhcpv6 relay statistics [ interface interface-type interface-number ] command to check the statistics about DHCPv6 messages passing through the DHCPv6 relay agent.

----End

5.5 Configuration Examples

This section provides a configuration example of DHCPv6 relay.

5.5.1 Example for Configuring DHCPv6 Relay

This section provides a configuration example of DHCPv6 relay.

Networking Requirements

As shown in

Figure 5-3

, the DHCPv6 client address is 2000::/64 and the DHCPv6 server address

is 3000::3/64. The DHCPv6 client and the DHCPv6 server are on different links; therefore, a

DHCPv6 relay agent is required to forward DHCPv6 messages.

It is required that the Switch should function as the DHCPv6 relay agent to forward DHCPv6 messages exchanged between the DHCPv6 client and the DHCPv6 server. In addition, the

Switch functions as the gateway device of the network at 2000::/64. By specifying the M flag bit and O flag bit in RA messages, hosts on the network are enabled to obtain IPv6 addresses and other network configuration parameters through DHCPv6.

Figure 5-3 Networking for configuring DHCPv6 relay

DHCPv6 client DHCPv6 client

GE1/0/1

VLANIF10

2000::1/64

Switch

GE1/0/2

VLANIF20

3000::1/64

DHCPv6 relay agent

DHCPv6 client DHCPv6 client

3000::3/64

DHCPv6 server

Configuration Roadmap

The configuration roadmap is as follows:

Enable DHCP.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

110

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

5 DHCPv6 Configuration

Create VLANIF interfaces and set IPv6 addresses of the VLANIF interfaces.

Enable the DHCPv6 relay function and set the DHCPv6 server address.

Configure the Switch as the gateway.

Data Preparation

To complete the configuration, you need the following data: l IPv6 addresses of the interfaces l IP address of the DHCPv6 server

Procedure

Step 1 Enable DHCP.

<Quidway> system-view

[Quidway] dhcp enable

Step 2 Add interfaces to VLANs.

# Add GigabitEthernet1/0/1 to VLAN 10.

[Quidway] interface gigabitethernet 1/0/1

[Quidway-GigabitEthernet1/0/1] port hybrid pvid vlan 10

[Quidway-GigabitEthernet1/0/1] port hybrid untagged vlan 10

[Quidway-GigabitEthernet1/0/1] quit

# Add GigabitEthernet1/0/2 to VLAN 20.

[Quidway] interface gigabitethernet 1/0/2

[Quidway-GigabitEthernet1/0/2] port hybrid pvid vlan 20

[Quidway-GigabitEthernet1/0/2] port hybrid untagged vlan 20

[Quidway-GigabitEthernet1/0/2] quit

Step 3 Set IPv6 addresses of VLANIF interfaces.

# Enable the IPv6 packet forwarding function.

[Quidway] ipv6

# Set the IPv6 address of VLANIF 10.

[Quidway] vlan batch 10 20

[Quidway] interface vlanif 10

[Quidway-Vlanif10] ipv6 enable

[Quidway-Vlanif10] ipv6 address 2000::1 64

[Quidway-Vlanif10] quit

# Set the IPv6 address of VLANIF 20.

[Quidway] interface vlanif 20

[Quidway-Vlanif20] ipv6 enable

[Quidway-Vlanif20] ipv6 address 3000::1 64

[Quidway-Vlanif20] quit

Step 4 Enable the DHCPv6 relay function.

# Enable the DHCPv6 relay function on VLANIF 10 and set the IP address of the DHCPv6 server.

[Quidway] interface vlanif 10

[Quidway-Vlanif10] dhcpv6 relay destination 3000::3

Step 5 Configure the Switch as the gateway.

Issue 01 (2011-10-26) 111

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

Huawei Proprietary and Confidential

5 DHCPv6 Configuration

# Configure the Switch to send RA messages and configure M and O flag bits.

[Quidway-Vlanif10] undo ipv6 nd ra halt

[Quidway-Vlanif10] ipv6 nd autoconfig managed-address-flag

[Quidway-Vlanif10] ipv6 nd autoconfig other-flag

[Quidway-Vlanif10] quit

Step 6 Verify the configuration.

Run the display dhcpv6 relay command on the Switch, and you can view the configuration of

DHCPv6 relay.

[Quidway] display dhcpv6 relay

Interface Mode Destination

------------------------------------------------------------------

Vlanif10 Relay 3000::3

------------------------------------------------------------------

Run the display dhcpv6 relay statistics on the Switch, and you can view the statistics about

DHCP messages passing through the DHCPv6 relay agent.

[Quidway] display dhcpv6 relay statistics

MessageType Receive Send Error

Solicit 0 0 0

Advertise 0 0 0

Request 0 0 0

Confirm 0 0 0

Renew 0 0 0

Rebind 0 0 0

Reply 0 0 0

Release 0 0 0

Decline 0 0 0

Reconfigure 0 0 0

Information-request 0 0 0

Relay-forward 0 0 0

Relay-reply 0 0 0

UnknownType 0 0 0

----End

Configuration Files

Configuration file of the Switch

sysname Quidway

vlan batch 10 20

ipv6

# dhcp enable

# interface Vlanif10

ipv6 enable

ipv6 address 2000::1/64

undo ipv6 nd ra halt

ipv6 nd autoconfig managed-address-flag

ipv6 nd autoconfig other-flag

dhcpv6 relay destination 3000::3

# interface Vlanif20

ipv6 enable

ipv6 address 3000::1/64

# interface GigabitEthernet1/0/1

port hybrid pvid vlan 10

port hybrid untagged vlan 10

Issue 01 (2011-10-26) 112

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service interface GigabitEthernet1/0/2

port hybrid pvid vlan 20

port hybrid untagged vlan 20

# return

5 DHCPv6 Configuration

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

113

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 6 IP Performance Configuration

IP Performance Configuration

About This Chapter

This chapter describes the basic concepts of IP performance, and provides configuration procedures and examples of IP performance.

6.1 Introduction to IP Performance

On certain networks, you need to change IP parameters to optimize the performance of networks.

Here, IP performance parameters supported by the S9300 are described.

6.2 IP Performance Supported by the S9300

This section describes the IP Performance features supported by the S9300.

6.3 Optimizing IP Performance

This section describes how to optimize IP performance of a certain network by setting IP performance parameters.

6.4 Maintaining IP Performance

This section describes how to maintain IP performance.

6.5 Configuration Examples

This section provides several configuration examples of IP performance.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

114

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 6 IP Performance Configuration

6.1 Introduction to IP Performance

On certain networks, you need to change IP parameters to optimize the performance of networks.

Here, IP performance parameters supported by the S9300 are described.

6.2 IP Performance Supported by the S9300

This section describes the IP Performance features supported by the S9300.

The S9300 supports the following IP performance parameters that can be changed: l Sending of Internet Control Message Protocol (ICMP) host unreachable packets l Sending of ICMP redirection packets l Sending ICMP Port Unreachable packets l Discarding the ICMP packets whose TTL values are 1 l Discarding the ICMP packets that carry options l

Discarding ICMP Destination Unreachable packets l Load balancing mode of IP packet forwarding

NOTE

On the S9300, you can set the load balancing mode for only the packets sent by the CPU.

l Timeout interval of the TCP FIN-Wait timer l Timeout interval of the TCP SYN-Wait timer l Size of the packet receive or transmit buffer of the connection-oriented socket l Forcible fragmentation of packets on an interface at the outbound direction l Statistics on Transmission Control Protocol (TCP), IP, User Datagram Protocol (UDP), and socket monitor traffic

6.3 Optimizing IP Performance

This section describes how to optimize IP performance of a certain network by setting IP performance parameters.

6.3.1 Establishing the Configuration Task

Applicable Environment

On certain networks, you need to change IP performance parameters to optimize the performance. To optimize the performance, you need to set parameters.

Pre-configuration Tasks

Before optimizing IP performance, complete the following tasks: l Connecting interfaces and setting physical parameters of the interfaces to ensure that the physical layer of the interfaces is in the Up state

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

115

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 6 IP Performance Configuration l Setting parameters of the link layer protocol for the interfaces to ensure that the status of the link layer protocol on the interfaces is Up l Assigning IP addresses to interfaces l

Configuring access control lists (ACLs)

Data Preparation

To optimize IP performance, you need the following data.

No.

Data

1 Number of the interface on which the Don't Fragment (DF) field of packets needs to be deleted

Number of the interface on which ICMP redirection and ICMP host unreachable need to be configured

Timeout interval of the TCP SYN-Wait timer, timeout interval of the TCP FIN-Wait timer, receive or transmit buffer of the socket

6.3.2 Enabling an Interface to Check the Source IP Addresses of

Packets

Context

Do as follows on the S9300.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

vlan vlan-id

A VLAN is created.

Step 3 Run:

quit

The system view is displayed.

Step 4 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 5 Run:

ip verify source-address

The interface is enabled to check the source IP addresses.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

116

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

The S9300 only checks the source IP addresses of the packets sent from the interface to the CPU.

----End

6.3.3 Configuring Forcible Fragmentation of Outgoing Packets on an Interface

Context

6 IP Performance Configuration

Do as follows on the S9300.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

vlan vlan-id

A VLAN is created.

Step 3 Run:

quit

The system view is displayed.

Step 4 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

NOTE

The DF field is deleted from the packet sent from an interface; therefore, you need to configure this function on an outgoing interface.

Step 5 Run:

clear ip df

The interface is configured to delete the DF field.

By default, outgoing packets are not fragmented forcibly on an interface.

----End

6.3.4 Setting ICMP Parameters

Context

By default, the S9300 is enabled to send ICMP redirection packets and ICMP host unreachable packets. The fast ICMP reply function is disabled on a S9300.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

117

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 6 IP Performance Configuration

CAUTION

l If the S9300 is disabled from sending ICMP redirection packets, the S9300 does not send

ICMP redirection packets in any case.

l If the S9300 is disabled from sending ICMP host unreachable packets, the S9300 does not send ICMP host unreachable packets in any case.

Do as follows on the S9300.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

icmp-reply fast

The fast ICMP reply function is enabled.

NOTE

After the fast ICMP reply function is enabled on the S9300, the S9300 can respond to ICMP Echo request packets quickly in the following situations: l The S9300 does not have the ARP entry of the device that initiates the ping. However, the S9300 cannot learn the ARP entry of this device in this case.

l The S9300 does not have a route to the device that initiates the ping.

l The checksum of the received ICMP Echo request packet is incorrect.

Step 3 Run:

icmp ttl-exceeded drop { slot slot-id | all }

The LPU is configured to discard the ICMP packets whose TTL values are 1.

Step 4 Run:

icmp with-options drop { slot slot-id | all }

The LPU is configured to discard the ICMP packets that carry options.

Step 5 Run:

icmp unreachable drop

The S9300 is configured to discard the ICMP Destination Unreachable packets.

Step 6 Run:

icmp port-unreachable send

The S9300 is configured to send ICMP Port Unreachable packets.

Step 7 Run:

icmp host-unreachable send

The S9300 is configured to send ICMP Host Unreachable packets.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

118

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service 6 IP Performance Configuration

NOTE

The relationship between the icmp host-unreachable send (system view) and the icmp host-unreachable

send (interface view) commands are as follows: l When the S9300 is disabled from sending ICMP Host Unreachable packets, all the interfaces of the

S9300 do not send the ICMP Host Unreachable packets even if you run the undo icmp host-unreachable

send (interface view) command in the interface view.

l When the S9300 is enabled to send ICMP Host Unreachable packets, all the interfaces of the S9300 can send ICMP Host Unreachable packets, which conforms to the default setting. In this case, you can run the

undo icmp host-unreachable send (interface view) command to disable a specified interface from sending the ICMP Host Unreachable packets.

Step 8 Run:

interface vlanif vlan-id

The VLANIF interface view is displayed.

Step 9 Run:

icmp redirect send

The interface is enabled to send ICMP redirection packets.

Step 10 Run:

icmp host-unreachable send

The interface is enabled to send ICMP host unreachable packets.

----End

6.3.5 Setting TCP Parameters

Context

You can set the following TCP parameters: l SYN-Wait timer: When sending packets with the SYN flag, TCP starts the SYN-Wait timer.

If no response is received before the SYN-Wait timer expires, the TCP connection ends.

The timeout interval of the TCP SYN-Wait timer is an integer that ranges from 2 to 600, in seconds. By default, the value is 75s.

l FIN-Wait timer: When the TCP connection status changes from FIN_WAIT_1 to

FIN_WAIT_2, the FIN-Wait timer is enabled. If no packet with the FIN flag is received before the FIN-Wait timer expires, the TCP connection ends. The timeout interval of the

TCP FIN-Wait timer is an integer that ranges from 76 to 3600, in seconds. By default, the value is 675s.

l Size of the packet receive or transmit buffer: The value is an integer that ranges from 1 to

32, in Kbytes. By default, the value is 8 Kbytes.

If you run the tcp window command repeatedly in the same system view, the latest configuration overrides the previous configuration.

Do as follows on the S9300.

Procedure

Step 1 Run:

system-view

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

119

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

The system view is displayed.

Step 2 Run:

tcp timer syn-timeout interval

The timeout interval of the TCP SYN-Wait timer is set.

Step 3 Run:

tcp timer fin-timeout interval

The timeout interval of the TCP FIN-Wait timer (FIN_WAIT_2) is set.

Step 4 Run:

tcp window window-size

The size of the packet receive or transmit buffer is set.

----End

6.3.6 (Optional) Setting the Load Balancing Mode of IP Packet

Forwarding

Context

6 IP Performance Configuration

NOTE

Currently, the S9300 supports only the flow-based load balancing.

When flow-based load balancing mode is adopted, the S9300 performs the Hash algorithm based on the protocol type, source IP address and mask, destination IP address and mask, source port number, and destination port number, and then selects a route for forwarding packets according to the Hash value.

By default, the flow-based load balancing mode is adopted.

Do as follows on the S9300.

Procedure

Step 1 Run:

system-view

The system view is displayed.

Step 2 Run:

load-balance flow [ all | slot slot-id ]

The load balancing mode is configured for IP packet forwarding.

NOTE

The value of slot-id can only be 0. That is, on the S9300, you can set the load balancing mode for only the packets sent by the CPU.

----End

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

120

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

6.3.7 Checking the Configuration

Prerequisite

The configurations of optimizing IP performance are complete.

6 IP Performance Configuration

Procedure

l Run the display tcp status [ [ task-id task-id ] [ socket-id socket-id ] | [ local-ip ip-

address ] [ local-port local-port-number ] [ remote-ip ip-address ] [ remote-port remote-

port-number ] ] command to check the TCP connection status.

l Run the display tcp statistics command to check the statistics on TCP traffic.

l Run the display udp statistics command to check the statistics on UDP traffic.

l Run the display ip statistics command to check the statistics on IP traffic.

l Run the display ip socket [ monitor ] [ task-id task-id socket-id socket-id | sock-type

socket-type ] command to check information about the created IPv4 socket.

l Run the display icmp statistics command to check the statistics on ICMP traffic.

Run the display rawlink statistics command to check the Rawlink statistics.

l Run the display fib [ slot-id ] command to check the Forwarding Information Base (FIB) table on the Line Processing Unit (LPU).

Run the display fib [ slot-id ] [ vpn-instance vpn-instance-name ] [ verbose ] command to check information about the FIB table.

l Run the display fib [ vpn-instance vpn-instance-name ] acl acl-number [ verbose ] command to check information about the FIB entries that match ACL rules in a certain format.

l Run the display fib [ vpn-instance vpn-instance-name ] interface interface-type interface-

number command to check information about the FIB entries with the outgoing interface as a specified interface.

Run the display fib [ vpn-instance vpn-instance-name ] ip-prefix prefix-name

[ verbose ] command to check information about the FIB entries that match a specified IP prefix list.

l Run the display fib [ slot-id ][ vpn-instance vpn-instance-name ] destination-address1

[ destination-mask1 ] [ longer ] [ verbose ] command to check information about the FIB entries that match destination IP addresses in a specified range.

l Run the display fib [ vpn-instance vpn-instance-name ] next-hop ip-address command to check information about the FIB entries that match the specified next hop address.

Run the display fib [ slot-id ] [ vpn-instance vpn-instance-name ] statistics command to check the total number of FIB entries.

----End

6.4 Maintaining IP Performance

This section describes how to maintain IP performance.

Issue 01 (2011-10-26) Huawei Proprietary and Confidential

121

Quidway S9300 Terabit Routing Switch

Configuration Guide - IP Service

6.4.1 Clearing IP Performance Statistics

Context

6 IP Performance Configuration

CAUTION

The statistics on IP, TCP, or UDP traffic cannot be restored after you clear them. So, confirm the action before you use the command.

Procedure

l Run the reset ip statistics [ interface interface-type interface-number ] command in the user view to clear the statistics on IP traffic.

l Run the reset ip socket monitor [ task-id task-id socket-id socket-id ] command in the user view to clear the information about the socket monitor.

l Run the reset tcp statistics command in the user view to clear the statistics on TCP traffic.

l Run the reset udp statistics command in the user view to clear the statistics on UDP traffic.

l Run the reset rawlink statistics command in the user view to clear the Rawlink statistics.

----End

6.4.2 Monitoring the Running Status of IP Performance

Context

In routine maintenance, you can run the following command in any view to view the running status of IP performance.