Manual h3c Msr20 Msr30 Msr50-Cmw520-r1719p03-Si Release Notes 0 1285 2

H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes
Hangzhou H3C Technologies Co., Ltd.
H3C MSR20_MSR30_MSR50-CMW520-R1719P03-SI Release Notes

Keywords: Version Information Unresolved Problems and Avoidance Measure Abstract: The explication for this version, including Version Information, Unresolved Problems and Avoidance Measure, Version Compatibility, Software Upgrading and so on. Acronyms: Acronym LAN MAC IGMP VLAN STP RMON GMRP ACL DHCP OSPF RIP ARP AAA RSTP PIM LPM QoS UTP SFP GBIC Local Area Network Media Access Control Internet Group Management Protocol Virtual Local Area Network Spanning Tree Protocol Remote Monitor(SNMP) GARP Multicast Registration Protocol Access Control List Dynamic Host Configuration Protocol Open Shortest Path First Routing Information Protocol Address Resolution Protocol Authentication Authorization Accounting Rapid Spanning Tree Protocol Protocol Independent Multicast Longest Prefix Match Quality of Service Unshielded Twisted Paired Small Form-Factor Pluggable Gigabit Interface Converter Full spelling
June 2, 2009
Page 2 of 156
Table of Contents
Version Information 6 Version Number 6 Version History 6 Hardware and Software Compatibility Matrix 8 Restrictions and Cautions 10 Version Usage Limitations 10 Important Notes 10 Feature List 10 Hardware Features 10 Software Features 23 Version Updates 28 Feature Updates 28 Command Line Updates 40 MIB Updates 104 Configuration Changes 107 Open Problems and Workarounds 107 List of Resolved Problems 107 Resolved Problems in CMW520-R1719P03107 Resolved Problems in CMW520-R1719P02108 Resolved Problems in CMW520-E1719P01 110 Resolved Problems in CMW520-R1719P01110 Resolved Problems in CMW520-R1719 112 Resolved Problems in CMW520-R1718 113 Resolved Problems in CMW520-E1713 115 Resolved Problems in CMW520-E1711P01 115 Resolved Problems in CMW520-B1707 115 Resolved Problems in CMW520-B1608 116 Resolved Problems in CMW520-B1606 117 Resolved Problems in CMW520-R1508P02&CMW520-B1508P02 118 Resolved Problems in CMW520-R1508&CMW520-B1508 118 Resolved Problems in CMW520-R1507 119 Resolved Problems in CMW520-B1502 119 Resolved Problems in CMW520-B1501L01 120 Resolved Problems in CMW520-B1204P04 120 Resolved Problems in CMW520-B1204P03 120 Resolved Problems in CMW520-B1204L02 120 Resolved Problems in CMW520-B1204L01 121 Resolved Problems in CMW520-B1203 122 Resolved Problems in CMW520-B1202P02 122
June 2, 2009 Page 3 of 156
Resolved Problems in CMW520-B1202P01 122 Resolved Problems in CMW520-B1202 122 Resolved Problems in CMW520-B1106 123 Related Documentation 124 Documentation Set 124 Obtaining Documentation 124 Downloading Documentation 124 Software Upgrading 125 Introduction 125 Files 125 Software Maintenance Methods 127 Maintaining Application Program and Configuration Through Command Lines 128 Maintaining the Router Through TFTP Server 128 Backing up and restoring application programs and configuration files129 Maintaining the Router Through FTP Server 131 BootWare Menu 135 Main BootWare Menu 135 BootWare Submenus 137 Upgrading an Application Program Through an Ethernet Interface139 Configuring Ethernet Interface Parameters140 Upgrading Procedure 141 Upgrading BootWare Through Ethernet Interface 143 Upgrading BootWare Through Serial Interface 144 XModem Protocol Overview 144 Modifying Serial Interface Parameters 144 Upgrading BootWare 146 Upgrading an Application Program Through a Serial Interface 148 Maintaining Application and Configuration Files 148 Dealing with Password Loss 151 User Password Loss 151 BootWare Password Loss 152 Super Password Loss 152 Backing Up and Restoring BootWare 152 Software Upgrading Through Web 153
June 2, 2009
Page 4 of 156
List of Tables
Table 1 Version history .............................................................................................................................. 6 Table 2 Hardware and software compatibility matrix ................................................................................. 8 Table 3 Follow these steps to register the software: ............................................................................... 10 Table 4 MSR20-1X Series Hardware Features ....................................................................................... 10 Table 5 MSR20 Series Hardware Features............................................................................................. 12 Table 6 MSR30 Series Hardware Features............................................................................................. 13 Table 7 MSR50 Series Hardware Features............................................................................................. 14 Table 8 MSR30-1X Series Hardware Features ....................................................................................... 15 Table 9 MSR20_MSR30_MSR50 series Module List.............................................................................. 16 Table 10 MSR20_MSR30_MSR50 Series Software Features ................................................................ 23 Table 11 Feature updates ........................................................................................................................ 28 Table 12 Command line updates............................................................................................................. 40 Table 13 MIB updates............................................................................................................................ 104 Table 14 Documentation set .................................................................................................................. 124 Table 15 Download documentation from the H3C website ................................................................... 124 Table 16 Default names and types of the boot files .............................................................................. 125 Table 17 Main BootWare menu ............................................................................................................. 136 Table 18 BootWare serial interface submenu........................................................................................ 137 Table 19 Ethernet interface submenu.................................................................................................... 138 Table 20 File control submenu .............................................................................................................. 139 Table 21 BootWare operation submenu ................................................................................................ 139 Table 22 Ethernet parameters settings description ............................................................................... 140
June 2, 2009
Page 5 of 156
Version Information
Version Number
Version Information: MSR 20-20_MSR 20-21_MSR 20-40_MSR30-16_MSR 30-20_MSR 30-40_MSR 30-60_MSR 5040_MSR 50-60_MSR 50-40 MPU-G2_ MSR 50-60 MPU-G2: Comware software, Version 5.20, Release 1719P03, Standard MSR 20-1X_MSR 30-11_MSR 30-1X: Comware software, Version 5.20, Release 1719P03 Note: You can see the version number with the command display version in any view. Please see Note.
Version History
Table 1 Version history Version number CMW520-R1719P03 Last version CMW520-R1719P02 Release Date 2009-05-19 Remarks Support MSR20_30_50 series, include MSR 30-1X Support MSR20_30_50 series(include MSR20-1X and MSR50 MPU-G2) Only support MSR 30-1X Support MSR20_30_50 series(include MSR20-1X and MSR50 MPU-G2) Only support MSR 30-1X First time for MSR 30-1X and only support MSR 30-1X. Support MSR20_30_50 series(include MSR20-1X and MSR50 MPU-G2) Support MSR20_30_50 series(include MSR20-1X and MSR50 MPU-G2) First time for the release version of MPU-G2, and only support MPU-G2 Support MSR20_30_50 series(include MSR20-1X and MSR50 MPU-G2) Support MSR20_30_50 series(include MSR20-1X and
Page 6 of 156
CMW520-R1719P02 CMW520-R1719P02 CMW520-R1719P01 CMW520-E1719P01 CMW520-E1719
CMW520-R1719P01 CMW520-E1719P01 CMW520-R1719 CMW520-E1719 None
2009-04-13 2009-04-13 2009-03-19 2009-03-19 2009-02-16
CMW520-R1719
CMW520-R1718 CMW520-E1713
2009-02-13
CMW520-R1718 CMW520-R1717 CMW520-R1717 CMW520-E1713
2009-01-09
2008-12-18
CMW520-E1713
CMW520-E1711P01
2008-10-23
CMW520-E1711P01
June 2, 2009
CMW520-B1707
2008-09-26
Version number
Last version
Release Date
Remarks MSR50 MPU-G2)
CMW520-B1707
CMW520-B1608
2008-06-23
Support MSR20_30_50 series(include MSR20-1X and MSR50 MPU-G2) Support MSR20_30_50 series(except MSR20-1X) Support MSR20_30_50(except MSR3011/MSR20-1X) Support MSR20_30_50(except MSR3011) Only support MSR3011 Only support MSR3011 None. First time for the release version of MSR3016,and Support MSR20_30_50 (except MSR3011) Only support MSR3011 Only support MSR3011 First time for the release version of MSR3011,and only support MSR3011 First time for the beta version of MSR3016 Limited. None. None. Limited. Limited. Limited. None. None. None. None. None Resolved Problem: Modified OEM manufacturer identification and other problems. The list of problems see 6.2 Resolved Problems in CMW520-B1106. Resolved Problem: When there
Page 7 of 156
CMW520-B1608 CMW520-B1606 CMW520-R1508P02 CMW520-B1508P02 CMW520-B1508 CMW520-R1508
CMW520-B1606 CMW520-R1508P02 CMW520-R1508 CMW520-B1508 CMW520-B1506P02 CMW520-R1507
2007-11-29 2007-10-19 2007-09-24 2007-09-24 2007-09-07 2007-09-03
CMW520-R1507
CMW520-B1502
2007-08-02
CMW520-B1506P02 CMW520-B1506P01 CMW520-B1506
CMW520-B1506P01 CMW520-B1506 CMW520-B1502
2007-08-02 2007-07-05 2007-06-18
CMW520-B1502 CMW520-B1501L01 CMW520-B1204P04 CMW520-B1204P03 CMW520-B1204L02 CMW520-B1204L01 CMW520-B1203P01 CMW520-B1203 CMW520-B1202P02 CMW520-B1202P01 CMW520-B1202 CMW520-B1201 CMW520-B1106
CMW520-B1501L01 CMW520-B1204L01 CMW520-B1204P03 CMW520-B1204L02 CMW520-B1203 CMW520-B1201 CMW520-B1203 CMW520-B1202P02 CMW520-B1202P01 CMW520-B1202 CMW520- B1201 CMW520-B1106 CMW520-B1105P01
2007-04-24 2007-02-06 2007-02-01 2007-01-30 2007-01-25 2007-01-19 2006-12-30 2006-12-27 2006-12-06 2006-11-23 2006-11-10 2006-10-30 2006-09-28
CMW520-B1105P01
June 2, 2009
CMW520-B1105
2006-08-25
Version number
Last version
Release Date
Remarks are 2 USBs and some voice modules on one router, running tpmc voice 0 inter will cause fatal errors.
CMW520-B1105
None
2006-08-09
First time.
Hardware and Software Compatibility Matrix

Table 2 Hardware and software compatibility matrix Item Product family MSR20_30_50 series routers MSR20-1X MSR 20-20_MSR 20-21_MSR 20-40 MSR30-11 Hardware platform MSR 30-16 MSR30-20_MSR 30-40_MSR 30-60 MSR 50-40_MSR 50-60_ MSR 50-40 MPU-G2_ MSR 50-60 MPU-G2 MSR30-10_MSR 30-11E_MSR30-11F MSR20-1X:209 or later MSR 20-20_MSR 20-21_MSR 20-40:308 or later MSR30-11_MSR30-10_MSR 30-11E_MSR30-11F:213 or later MSR30-16:207 or later Boot ROM version MSR 30-20_MSR 30-40_MSR 30-60:307 or later MSR 50-40_MSR 50-60:306 or later MSR 50-40 MPU-G2_ MSR 50-60 MPU-G2:115 or later (Note:This version number can be displayed by command display version under any view. Please see Note) Host software Equipment Model MSR 2020_MSR 2021_MSR 20-40 MSR20-1X series MSR 3011 MSR 3016 Host Software MSR20-CMW520R1719P03-SI.BIN MSR201X-CMW520R1719P03.BIN MSR3011-CMW520R1719P03.BIN MSR3016-CMW520R1719P03-SI.BIN MD5 CheckSum Specifications
9d4a64aecab44d9c759f5e4d574ea3d4
f434e0d084b4709f7d8fc9f515e28e2a b18efe4c6017cbfbd5dbcc915ef7b871 6899e754805468eb5a8e189789713c6e
June 2, 2009
Page 8 of 156
Item MSR 3020_MSR 3040_MSR 30-60 MSR 5040_MSR 50-60 MSR 50-40 MPU-G2_ MSR 50-60 MPU-G2 MSR30-1X
Specifications MSR30-CMW520R1719P03-SI.BIN MSR50-CMW520R1719P03-SI.BIN MSR50-CMW520R1719P03-EPUSI.BIN MSR301X-CMW520R1719P03.BIN 3de997a2a946316bd08722e2ed604010
eb828b1a55ba35ebfab0cf61bd7fd88f
9e346d44285591e05fe1a503a2f28909
b18efe4c6017cbfbd5dbcc915ef7b871
iMC PLAT 3.20-R2602 + P04 iMC version iMC UAM 3.60-E6102 iMC EAD 3.60-E6102 iMC MVM 3.50-E5201 iNode version iNode PC 3.60-E6111
Sample:To see the version number of the software and bootrom of the MSR20_MSR30_MSR50 Series routers:
<H3C> display version H3C Comware Platform Software Comware software, Version 5.20, Release 1719P03, Standard -------
Copyright (c) 2004-2007 Hangzhou H3C Tech Co., Ltd. All rights reserved. H3C MSR50-60 uptime is 0 week, 0 day, 0 hour, 2 minutes
CPU type: FREESCALE MPC8541 833MHz 256M bytes DDR SDRAM Memory 4M bytes Flash Memory Pcb Logic Basic BootROM Version: Version: Version: Version: 3.0 2.0 3.03 3.06 ------ (Driver)1.0, (Driver)1.0, (Driver)1.0, (Driver)1.0, (Driver)2.0, (Cpld)2.0 (Cpld)2.0 (Cpld)2.0 (Cpld)2.0 (Cpld)2.0
Extend BootROM [SLOT [SLOT [SLOT [SLOT 0]CON 0]AUX 0]GE0/0 0]GE0/1
(Hardware)3.0, (Hardware)3.0, (Hardware)3.0, (Hardware)3.0, (Hardware)3.0,
[SLOT 11]FIX-SNDE
June 2, 2009
Page 9 of 156
Restrictions and Cautions

Version Usage Limitations
1. Due to the DSLAMs using the chipset of CONEXANT and with the firmware V5.4/V5.6 reject to connect with CPE designed with NON-CONEXANT chipset, the G.SHDSL.BIS interface on MSR2013 routers will be failed to communicate with those DSLAMs. 2. The versions of MSR30-11 can not boot based on 16M FLASH.
Important Notes
Software register is provided on the device to protect the authorized users legal rights to use the software. Trial period is set on the software with this function and users are required to register the serial number of the software in the trial period. If the software has not been registered until the trial period expires, the system automatically restarts every 30 minutes. You can obtain a registration serial number through buying letter of authorization of the software. You can use the license register serial-number command or log onto the network management interface and then enter the serial number to finish software registration; and you can use the display license command or log onto the network management interface to view the soft registration information of the device. Table 3 Follow these steps to register the software: To do... Register the software Display the information Use the command... license register serialnumber display license Remarks Required Available in user view any view
Caution: H3C MSR 20-1X, MSR 30-11 and MSR 30-1X do not support Software register!
Feature List
Hardware Features
Table 4 MSR20-1X Series Hardware Features Item Dimensions (H x
June 2, 2009
MSR 20-10 44.2mm%300
MSR 20-11 44.2mm%300
MSR 20-12 44.2mm%300
MSR 20-13 44.2mm%300
MSR 20-15 44.2mm%300

Page 10 of 156
W x D) Weight Input AC voltage
mm%240mm 3Kg
mm%240mm 3Kg
mm%240mm 3Kg
mm%240mm 3Kg
mm%240mm 3Kg
Rated voltage: 100 VAC to 240 VAC; 50 Hz/60 Hz Input DC voltage Max power Operating temperature Relative humidity (noncondensing) Processor BootROM FLASH
Memory
Not support DC 25W 0C to 40C 5% to 90% PowerPC 1MB 16MB/32 MB 256MB PowerPC 1MB 16MB/32 MB PowerPC 1MB 16MB/32 MB PowerPC 1MB 16MB/32 MB PowerPC 1MB 16MB/32 MB
Externa l module Internal module
SIC/ DSIC module VPM strip Consol e/AUX USB FE FE switchin g interfac e ADSL G.SHD SL SAE ISDN S/T AM E1/T1
0 1 1 1 electrical interfaces
Fixed interfac e
0 0 0 0 0 0 1
0 0 1 0 0 0 0
0 0 0 0 0 1 1
0 1(G.SHDSL. bis) 0 1 0 0 1
1 0 0 1 1 0 1
optional
Wlan
June 2, 2009
Page 11 of 156
Table 5 MSR20 Series Hardware Features Item Dimensions (H x W x D) Weight Input AC voltage Input DC voltage Max power Operating temperature Relative humidity (noncondensing) Processor BootROM MSR 20-20 44.2mm%360mm%287. 1mm 3.4Kg MSR 20-21 44.2mm%360mm%287.1 mm 3.4Kg MSR 20-40 44.2mm%442mm%407.1 mm 5.4Kg
Rated voltage: 100 VAC to 240 VAC; 50/60 Hz Not support DC 54W 54W 100W
0C to 40C (32oF to 104oF) 5% to 90% PowerPC 4MB SDRAM PowerPC 4MB SDRAM Default: 256MB Maximum: 384MB Default: 256MB Maximum: 1GB 2 PowerPC 4MB SDRAM Default: 256MB Maximum: 384MB Default: 256MB Maximum: 1GB 4
Memory
Default: 256MB Maximum: 384MB Default: 256MB
CF CARD Maximum: 1GB Externa l module SIC module ESM module Internal module VCPM module VPM strip Consol e AUX USB Fixed interfac e FE FE switchin g interfac e 2
1 0 0 1 1 1 Two electrical interfaces
June 2, 2009
Page 12 of 156
Table 6 MSR30 Series Hardware Features Item Dimensions (H x W x D) Weight Input AC voltage 50 Hz/60 Hz Not support DC 54W 0C to 40C 5% to 90% PowerPC 2MB DDR SDRAM Memory Default: 256MB Maximum: 256MB PowerPC 4MB DDR SDRAM Default: 256MB Maximum: 768MB Default: 256MB CF CARD 0 Maximum: 1GB FLASH SIC module DSIC module Externa l module MIM module XMIM module DMIM module Internal module ESM module VCPM module
June 2, 2009
MSR 30-11 442 mm360 mm44.2mm 4.6Kg
MSR 30-16 442mm441. 8mm44.2m m 6Kg
MSR 30-20 442mm441. 8mm44.2m m 6.9Kg
MSR 30-40 442mm422. 3mm88.2m m 11.9Kg
MSR 30-60 442mm421. 8mm132m m 13.6Kg
Rated voltage: 100 VAC to 240 VAC;
Input DC voltage
Not support DC 100W
Rated voltage: -48V d.c.-60V d.c 125W
Max power Operating temperature Relative humidity (noncondensing) Processor BootROM
PowerPC 4MB DDR SDRAM Default: 256MB Maximum: 1GB Default: 256MB Maximum: 1GB 0 4 2 2 0 0 2 1
Page 13 of 156
32MB 2 0 1 1 0 1 0
0 4 2 1 0 0 2 1
VPM strip Consol e AUX Fixed interfac e USB FE GE SAE
0 1 1 0 2 0 1
2 1 1 1 2 0 0
2 1 1 2 0 2 electrical interfaces 0
3 1 1 2 0 2 Combo interfaces 0
3 1 1 2 0 2 Combo interfaces 0
Table 7 MSR50 Series Hardware Features Item Dimensions (H x W x D) Weight Input AC voltage Input DC voltage Max power Operating temperature Relative humidity (noncondensing) Processor BootROM MSR 50-40 MSR 50-40 MPU-G2 MSR 50-60 MSR 50-60 MPU-G2
436.2mm424mm130.7mm 18Kg
436.2mm424mm175.1mm 20Kg
Rated voltage: 100 VAC to 240 VAC; 50/60 Hz Rated voltage: 48 VDC to 60 VDC 350W 0C to 40C (32F to 104F) 5% to 90% PowerPC 4MB DDR SDRAM: DDR SDRAM II: Default: 1GB Max: 2GB PowerPC 4MB DDR SDRAM: Default: 512MB Max: 1GB Default: 256MB Max: 1GB 0 4 6 1 2 0 DDR SDRAM II: Default: 1GB Max: 2GB 350W
Memory
Default: 512MB Max: 1GB Default: 256MB
CF CARD Max: 1GB SIC module Externa l module FIC module MSCA module Internal module
June 2, 2009
4 4 1 2
ESM module
Page 14 of 156
VCPM module VPM strip Consol e AUX USB Fixed interfac e FE switchin g interfac e GE
1 4 1 1 2 0
1 4 1 1 2 0
2 COMBO interfaces
3 COMBO interfaces
2 COMBO interfaces
3 COMBO interfaces
Table 8 MSR30-1X Series Hardware Features Item Dimensions (H x W x D) 44236044.2mm (excluding feet and rack-mounting ear) Weight Input AC voltage 4.8kg Rated voltage: 100V a.c.240V a.c.;50Hz/60Hz Rated voltage:48 VDC to 60 VDC 54W 0C to 40C 5% to 90% PowerPC 2 MB DDR SDRAM: 256MB Not supported 256 MB 2 1 1 2 1 0 2 1 0
Page 15 of 156
MSR 30-10 Description
MSR 30-11E Description
MSR 30-11F Description
44236044.2mm
44236044.2mm
4.5Kg Rated voltage: 100V a.c.240V a.c.;50Hz/60Hz Not supported 54W
4.8Kg Rated voltage: 100V a.c.240V a.c.;50Hz/60Hz Not supported 54W
Input DC voltage Max power Operating temperature Relative humidity (noncondensing) Processor BootROM
Memory
CF CARD FLASH Exte rnal mod ule

June 2, 2009
SIC module MIM module XMIM
module Inter nal mod ule ESM module VPM strip Console AUX Fixe d inter face USB FE switching ports FE SAE
(compatible with 1 MIM) 1 1 1 1 1 0 2 0 1 0 1 1 1 24 2 0 1 0 1 1 1 48 2 0
Table 9 MSR20_MSR30_MSR50 series Module List Module Ethernet interface cards: 1-port 10/100/1000 Mbps Ethernet electrical and optical interface card SIC module (SIC-1GEC) 4-port 10/100 Mbps Ethernet L2 switching module (RJ45) (SIC-4FSW) 1-port 10 Mbps Ethernet electrical SIC interface module (RJ45) (SIC1ETH) 1-port 10/100 Mbps Ethernet electrical SIC interface module (RJ45) (SIC-1FEA) 4-port 10/100 Mbps Ethernet L2 switching module-PoE card(SIC-4FSWPOE) 1-port 100 Mbps Ethernet electrical SIC interface module -SIC-1FEF WAN interface cards: SIC 1-port enhanced synchronous/asynchronous serial SIC interface module (SIC-1SAE) 1-port fractional E1 SIC interface module (SIC-1E1-F) 1-port fractional E1 SIC interface module (SIC-1E1-F-V3) 1-port fractional T1 SIC interface module (SIC-1T1-F) 1-port E1/CE1/PRI SIC interface module (SIC-1EPRI) 1-port T1/CT1/PRI SIC interface module (SIC-1TPRI) 1-port ADSL over ISDN SIC interface module (SIC-1ADSL-I) 1-port ADSL over POTS SIC interface module (SIC-1ADSL) 1-port analog modem SIC interface module (SIC-1AM) 2-port analog modem SIC interface module (SIC-2AM)
June 2, 2009 Page 16 of 156
Description
8-port asynchronous serial interface card (SIC-8AS) 16-port asynchronous serial interface card (SIC-16AS) 1-port ISDN BRI S/T interface card (SIC-1BS) 2-port ISDN BRI S/T interface card (SIC-2BS) 1-port ISDN BRI U interface card (SIC-1BU) 2-port ISDN BRI U interface card (SIC-2BU) 2-port fractional E1 interface module (SIC-2E1-F) Voice interface cards: 1-channel E1 voice SIC interface module (SIC-1VE1) 1-channel T1 voice SIC interface module (SIC-1VT1) 1-port voice module subscriber circuit SIC interface module (SIC-1FXS) 2-port voice module subscriber circuit SIC interface module (SIC-2FXS) 1-port voice module FXO SIC interface module (SIC-1FXO) 2-port voice module FXO SIC interface module (SIC-2FXO) 1-port ISDN BRI S/T voice interface card (SIC-1BSV) 2-port ISDN BRI S/T voice interface card (SIC-2BSV) 2-port voice subscriber circuit & 1-port voice AT0 analog trunk interface card -SIC-2FXS1FXO 9-port 10/100 Mbps Ethernet L2 switching module (RJ45) (DSIC-9FSW) DSIC 9-port 10/100 Mbps Ethernet L2 switching module -PoE card (DSIC9FSW-POE) High-performance network data encryption ESM module (ESM-ANDE) ESM Standard network data encryption ESM module (ESM-SNDE) Ethernet interface cards: 1-port 10M100M Ethernet electrical MIM interface module (RJ45) (MIM1FE) 2-port 10M/100M Ethernet electrical MIM interface module (RJ45) (MIM2FE) 4-port 10M/100M Ethernet electrical MIM interface module (RJ45) (MIM4FE) MIM 1-port 1000M Ethernet electrical MIM interface module (RJ45) (MIM1GBE) 2-port 1000M Ethernet electrical MIM interface module (RJ45) (MIM2GBE) 1-port 1000M Ethernet electrical MIM interface module (RJ45) (MIM1GEF) 2-port 1000M Ethernet electrical MIM interface module (RJ45) (MIM2GEF) 16-port 10M/100M Ethernet L2 switching module (MIM-16FSW) 16-port 10M/100M Ethernet L2 switching module -PoE card (MIMJune 2, 2009 Page 17 of 156
16FSW-POE) WAN interface cards: 2 channel enhanced synchronous/asynchronous interface module (MIM2SAE) 4 channel enhanced synchronous/asynchronous interface module (MIM4SAE) 8 channel enhanced synchronous/asynchronous interface module (MIM8SAE) 8 port asynchronous serial interface panel (RJ45) (MIM-8ASE) 16 port asynchronous serial interface panel (RJ45) (MIM-16ASE) 1 port CE1/PRI interface module (MIM-1E1) 2 port CE1/PRI interface module (MIM-2E1) 4 port CE1/PRI interface module (MIM-4E1) 8 port E1 interface module (120ohm) (MIM-8E1 (120)) 8 port E1 interface module (75ohm) (MIM-8E1 (75)) 1-port fractional E1 interface module (MIM-1E1-F) 2-port fractional E1 interface module (MIM-2E1-F) 4-port fractional E1 interface module (MIM-4E1-F) 8 port E1 interface module (120ohm) (MIM-8E1 (120)-F) 8 port E1 interface module (75ohm) (MIM-8E1 (75)-F) 1 port CT1/PRI interface module (MIM-1T1) 2 port CT1/PRI interface module (MIM-2T1) 4 port CT1/PRI interface module (MIM-4T1) 8 port T1 interface module (MIM-8T1) 1-port fractional T1 interface module MIM-1T1-F) 2-port fractional T1 interface module MIM-2T1-F) 4-port fractional T1 interface module MIM-4T1-F) 8-port fractional T1 interface module MIM-8T1-F) 1-port G.SHDSL interface module (MIM-1G.SHDSL) 4-port enhanced ISDN S/T interface panel (MIM-4BSE) 1-port T3/CT3 compatible interface module (MIM-1CT3) 1-port T3/CT3 compatible interface module (MIM-1CE3) 1-port T3/CT3 compatible interface module (MIM-1CT3-V2) 1-port T3/CT3 compatible interface module (MIM-1CE3-V2) 1-port ATM/155M fiber interface(MIM-1ATM-OC3) 1-port ATM-E3 compatible interface module (MIM-1AE3) 1-port ATM-T3 compatible interface module (MIM-1AT3) 1-port POS interface module (MIM-1POS)
June 2, 2009 Page 18 of 156
1-port ATM/155M multimode fiber interface module (SC)- (MIM1-AMM) 1-port channelized SDH/SONET interface module (E1) (MIM-1CPOS (E)) 1-port channelized SDH/SONET interface module (T1) (MIM-1CPOS (T)) 1-port ATM/155M multimode fiber interface module (SC)- (MIM1-AMM) 1-port ATM/155M multimode long-distance fiber interface module (1310nm, 30km, SC)- (MIM-1ASL) 1-port ATM/155M multimode fiber interface module (1310nm, 15km, SC)- (MIM-1ASM) 8-port E1 ATM inverse multiplexing interface module (MIM-IMA8E1(75/120)) 4-port E1 ATM inverse multiplexing interface module (MIM-IMA4E1(75/120)) 8-port T1 ATM inverse multiplexing interface module (MIM-IMA-8T1) 4-port T1 ATM inverse multiplexing interface module (MIM-IMA-4T1) 1-port dual-pair G.SHDSL interface module (MIM-1SHL-4W) 6-port analog modem MIM interface module (MIM-6AM) 12-port analog modem SIC interface module (MIM-12AM) Open Application Platform-MIM-OAP(MEM-512M+CF-256M+HD-80G) Open Application Platform-MIM-OAP (MEM-1G+CF-256M+HD-80G) Open Application Platform-MIM-OAP (MEM-256M+CF-512M+HD-) Open Service Module-MIM-OSM(MEM-512M+CF-256M+HD-80G) Open Service Module-MIM-OSM (MEM-512M+CF-256M+HD-) Anti-virus Security Module OAP-MIM-ASM (MEM-1G+CF-256M+ HD80G) Open Application Platform-Smart-MIM-OAPS(MEM-1G+CF-256M+HD80G) Voice interface card: 1 channel E1 voice MIM interface module (MIM -1VE1) 1 channel T1 voice MIM interface module (MIM -1VT1) 2 channel E1 voice MIM interface module (MIM -2VE1) 2 channel T1 voice MIM interface module (MIM -2VT1) 2-port voice module subscriber circuit interface board (MIM-2FXS) 4-port voice module subscriber circuit interface board (MIM-4FXS) 16-port voice module subscriber circuit interface board(MIM-16FXS) 2-port voice module FXO interface module (MIM-2FXO) 4-port voice module FXO interface module (MIM-4FXO) 8-port voice module FXS-FXO interface module (MIM-8FXS-8FXO) 2 channel voice processing board E&M trunk interface module (MIMJune 2, 2009 Page 19 of 156
2EM) 4 channel voice processing board E&M trunk interface module (MIM4EM) 2-port ISDN BRI S/T voice interface card (MIM-2BSV) 4-port ISDN BRI S/T voice interface card (MIM-4BSV) Encryption card: Network data encryption processing module (MIM-HNDE) 24-port 10M/100M and 2-port 1000BASE-T/1000BASE-X (COMBO) Ethernet layer 2 switching (DMIM-24FSW) DMIM 24-port 10M/100M and 2-port 1000BASE-T/1000BASE-X (COMBO) Ethernet layer 2 switching-PoE-card (DMIM-24FSW-POE) 48-port 10M/100M Ethernet layer 2 switching (DMIM-48FSW) 16-port 10M/100M Ethernet layer 2 switching (XMIM-16FSW) XMIM 24-port 10M/100M Ethernet layer 2 switching (XMIM-24FSW) Voice co-processing module (RT-VCPM) 8-channel voice processing module (RT-VPM8) VPM / VCPM 16-channel voice processing module (RT-VPM16) 24-channel voice processing module (RT-VPM24) 32-channel voice processing module (RT-VPM32) Ethernet interface cards: 16-port 10/100 Mbps and 1-port 1000BASE-T/1000BASE-X (COMBO) Ethernet L2 switching FIC interface module (FIC-16FSW) 1-port 10/100 Mbps Ethernet electrical FIC interface module (RJ45) (FIC-1FE) 2-port 10/100 Mbps Ethernet electrical FIC interface module (RJ45) (FIC-2FE) 4-port 10Base-T/100Base-TX FE interface card (FIC-4FE) 1-port 1000 Mbps Ethernet electrical FIC interface module (RJ45) (FIC1GBE) FIC 2-port 1000 Mbps Ethernet electrical FIC interface module (RJ45) (FIC2GBE) 1-port 1000 Mbps Ethernet fiber FIC interface module (FIC-1GEF) 2-port 1000 Mbps Ethernet fiber FIC interface module (FIC-2GEF) WAN interface cards: 2-port enhanced synchronous/asynchronous serial FIC interface module (FIC-2SAE) 4-port enhanced synchronous/asynchronous serial FIC interface module (FIC-4SAE) 8-port enhanced synchronous/asynchronous serial FIC interface module (FIC-8SAE) 8-port asynchronous serial FIC interface module (RJ45) (FIC-8ASE)
June 2, 2009 Page 20 of 156
16-port asynchronous serial FIC interface module (RJ45) (FIC-16ASE) 1-port E1/CE1/PRI FIC interface module (FIC-1E1) 2-port E1/CE1/PRI FIC interface module (FIC-2E1) 4-port E1/CE1/PRI FIC interface module (FIC-4E1) 8-port E1/CE1/PRI FIC interface module (75 ohm) (FIC-8E1) (75) 8-port E1/CE1/PRI FIC interface module (120 ohm) (FIC-8E1) (120) 1-port fractional E1 FIC interface module (FIC-1E1-F) 2-port fractional E1 FIC interface module (FIC-2E1-F) 4-port fractional E1 FIC interface module (FIC-4E1-F) 8-port fractional E1 FIC interface module (75 ohm) (enhanced FIC-8E1F) (75) 8-port fractional E1 FIC interface module (120 ohm) (enhanced FIC8E1-F) (120) 1-port T1/CT1/PRI FIC interface module (FIC-1T1) 2-port T1/CT1/PRI FIC interface module (FIC-2T1) 4-port T1/CT1/PRI FIC interface module (FIC-4T1) 8-port T1/CT1/PRI FIC interface module (FIC-8T1) 1-port fractional T1 FIC interface module (FIC-1T1-F) 2-port fractional T1 FIC interface module (FIC-2T1-F) 4-port fractional T1 FIC interface module (FIC-4T1-F) 8-port fractional T1 FIC interface module (FIC-8T1-F) 4-port enhanced ISDN-S/T FIC interface module (FIC-4BSE) 1-port E3/CE3 FIC interface module (FIC-1CE3) 1-port T3/CT3 FIC interface module (FIC-1CT3) 1-port E3/CE3 FIC interface module (FIC-1CE3-V3) 1-port T3/CT3 FIC interface module (FIC-1CT3-V3) 1-port ATM/155M fiber interface(FIC-1ATM-OC3) 1-port ATM/155M single-mode long-haul fiber interface module (FIC1ATM-OC3MM) 1-port ATM/155M multimode fiber interface module (FIC-1ATM-OC3SM) 1-port ATM/155M single-mode fiber interface module (FIC-1ATMOC3SML) 1-port ATM-E3 interface moduel (FIC-1AE3) 1-port ATM-T3 interface module (FIC-1AT3) 1-port POS interface module (FIC-1POS)
1-port channelized SDH/SONET interface card (FIC-1CPOS (E)) 1-port channelized SDH/SONET interface card (FIC-1CPOS (T)) 1-port G.SHDSL interface module (FIC-1G.SHDSL) June 2, 2009 Page 21 of 156
H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes 8-port E1 ATM inverse multiplexing interface card (FIC-IMA-8E1(75/120)) 4-port E1 ATM inverse multiplexing interface card (FIC-IMA-4E1(75/120)) 8-port T1 ATM inverse multiplexing interface card (FIC-IMA-8T1) 4-port T1 ATM inverse multiplexing interface card (FIC-IMA-4T1)
6-port analog modem MIM interface module (FIC-6AME) 12-port analog modem SIC interface module (FIC-12AME)
1-port dual-pair G.SHDSL interface card (FIC-1SHL-4W) Open Application Platform -FIC-OAP(MEM-1G+CF-256M+HD-80G) Open Application Platform -FIC-OAP (MEM-512M+CF-256M+HD-80G) Open Service Module -FIC-OSM(MEM-1G+CF-256M+HD-80G) Open Service Module -FIC-OSM (MEM-512M+CF-256M+HD-80G)
Anti-virus Security Module OAP-FIC-ASM (MEM-1G+CF-256M+ HD80G) Voice interface cards: 1-channel E1 voice FIC interface module (FIC-1VE1) 1-channel T1 voice FIC interface module (FIC-1VT1) 2-channel E1 voice FIC interface module (FIC-2VE1) 2-channel T1 voice FIC interface module (FIC-2VT1) 2-port voice module subscriber circuit FIC interface module (FIC-2FXS) 4-port voice module subscriber circuit FIC interface module (FIC-4FXS)
24-port voice subscriber circuit interface card (FIC-24FXS) 2-port ISDN BRI S/T voice interface card (FIC-2BSV)
4-port ISDN BRI S/T voice interface card (FIC-4BSV) 2-port voice module FXO interface module (FIC-2FXO) 4-port voice module FXO interface module (FIC-4FXO) 2-channel voice process board E&M trunk interface FIC module (FIC2EM) 4-channel voice process board E&M trunk interface FIC module (FIC4EM) Encryption card: High-performance network data encryption FIC interface module (FICHNDE) 24-port 10/100 Mbps and 2-port 1000BASE-T/1000BASE-X (COMBO) Ethernet L2 switching FIC interface module (DFIC-24FSW) D-FIC 24-port 10/100 Mbps Ethernet Layer 2 switching PoE interface module (DFIC-24FSW-POE) 24-port voice subscriber circuit interface card & 24-port voice AT0 analog trunk interface card (DFIC-24FXO24FXS)
June 2, 2009
Page 22 of 156
Caution: The support and restriction of modules on MSR please refer to H3C MSR 20/30/50 Series Routers Interface Card and Interface Module Manual, Appendix A Interface Card and Interface Module Purchase Guide.
Software Features
Table 10 MSR20_MSR30_MSR50 Series Software Features Category Features ARP (proxy ARP, free ARP, authorization ARP) Ethernet_II Ethernet_SNAP VLAN (PORT-BASED VLAN/MAC-BASED VLAN/VLAN-BASED PORT ISOLATE/VLAN VPN/VOICE VLAN) 802.3x LACP(802.3ad) LAN protocol: 802.1p 802.1Q 802.1x RSTP(802.1w) MSTP(802.1s) GVRP PORT MUTILCAST suppression PPPMP PPPoE ClientPPPoE Server PPP/MP over FR FRMFR FR FragmentFR CompressFR over IP FRTS WAN protocols: ATMIPoAIPoEoAPPPoAPPPoEoA DCCDialer Watch HDLC LAPB X25X25 over TCPX25 to TCP X25 PADX25 HuntgroupX25 CUG
June 2, 2009 Page 23 of 156
Category DLSW(V1.0/2.0) ISDNISDN Network ISDN QSIG MODEM
Features
Fast forwarding (unicast/multicast) TCP UDP IP services IP Option IP unnumber Policy routing (unicast/multicast) SNA/DLSw support DLSw Ethernet redundancy backup Non-IP services: IPX Netstream Ping and Trace DHCP Server DHCP Relay DHCP Client DNS client DNS Static NQA IP application IP Accounting UDP Helper NTP Telnet TFTP Client FTP Client FTP Server Static routing management Dynamic routing protocols: RIP/RIPng IP route OSPF OSPFv3 BGP IS-IS
June 2, 2009 Page 24 of 156
Category Multicast routing protocols: IGMP PIM-DM PIM-SM MBGP MSDP Routing policy LDP LSPM MPLS TE MPLS MPLS FW MPLS/BGP VPN L2VPN IPv6 basic functions IPv6 ND IPv6 PMTU IPv6 FIB IPv6 ACL IPv6 transition technologies NAT-PT IPv6 tunneling 6PE IPv6 routing IPv6
Features
IPv6 static routing management Dynamic routing protocols RIPng OSPFv3 IS-ISv6 BGP4+ Multicast routing protocols MLD PIM-DM PIM-SM PIM-SSM
Port security
June 2, 2009
PPPoE Client&Server
Page 25 of 156
Category PORTAL 802.1x Local authentication AAA Radius HWTacacs ASPF ACL Firewall FILTER DDOS IKE IPSec Data security Encryption card Portal/Portal+ L2TP NAT/NAPT PKI RSA Other security technologies SSH V1.5/2.0 SSL URPF GRE DVPN Supports VRRP Reliability Supports the backup center SP WRED(Port) CAR LR Flow-base QOS Policy L2 QoS Port-Based Mirroring Flow-Based Mirroring
Features
Cos-Based HOLB(Head of Line Blocking)Prevention Packet Remarking Flow Redirect Flow Accounting
June 2, 2009 Page 26 of 156
Category Priority Mapping Port Trust Mode Port Priority Flow Filter FlowControl ACL
Features
Supports CAR (Committed Access Rate) Traffic supervision Supports LR (Line Rate) Congestion management Congestion avoidance Traffic shaping FIFOPQCQWFQCBQRTPQ WRED/RED Supports GTSGeneric Traffic Shaping FR QOS MPLS QOS MP QoS/LFI Other QOS technologies cRTP/IPHC ATM QOS Sub-interface QOS FXS FXO Voice Interfaces E&M E1VI/T1VI R2 DSS1 Voice Signaling Q.sig Digital E&M H.225 H.323 H.245 GK Client SIP SIP Operation G.711A law G.711U law Codec G.723R53 G.723R63 G.729a
June 2, 2009 Page 27 of 156
GK Client SIP
Category G.729R8 RTP/cRTP Media Process IPHC Voice Backup FAX FAX Voice RADIUS Other VoFR
Features
Analog voice access and emergency SNMP V1/V2c/V3 MIB Network management SYSLOG RMON Command line management Local management File system management Dual Image Supports console interface login Supports AUX interface login Supports TTY interface login User access management Supports telnet (VTY) login Supports SSH login Supports FTP login Supports X25 PAD login XMODEM
Version Updates
Feature Updates
Table 11 Feature updates Version number Item Changed Hardware Features Changed Software Features Description
None. New Features: 1. Configuring OSPFv3 Network Types and a bandwidth reference value
Page 28 of 156
CMW520 -R1719
June 2, 2009
Version number
Item for the interface
Description
The default OSPFv3 interface network types vary with the link layer protocols of the interfaces, but at some application network, the customer hope the OSPFv3 interface network types can be adjusted according to actual request. This feature can support to configure the OSPFv3 interface network types. OSPFv3 computes the cost automatically based on the bandwidth reference value: Interface OSPFv3 cost = Bandwidth reference value/Interface bandwidth. And this feature can support to Configure a bandwidth reference value for the interface. 2. EAD supporting to set the QoS policy based on each user Firstly, the user is authenticated. After the user passes the authentication, the EAD server sends the User Profile (with the QoS policy) to the user. When the user is off-line, the router will cancel the User Profile automatically. 3. ETelnet terminal access The initiator and receiver of ETelnet terminal access are a router and an FEP respectively. A service terminal is connected to the router (ETelnet client) through an asynchronous serial interface. The router is connected to the FEP (ETelnet server) through a network. Application services run on the FEP. The FEP interacts with the router through encrypted Telnet connection to futher exchange data with the terminal, and two kinds of encryption arithmetic AES and RC4 being supported. 4. BFD for RIP A RIP router sends its routing table to neighbors periodically, if there isnt any route update received for period of time the route will be deleted. BFD for RIP provides a fast failure detection mechanism. BFD detects whether the link is normal, if the link is broken-down, BFD will notify RIP, and then RIP deletes the route from this link and switch to backup route. BFD for RIP supports two kinds of detection mode, single-hop detection in BFD echo packet mode for a directly connected neighbor; Bidirectional detection in BFD control packet mode for an indirectly connected neighbor. 5. QoS Policy-Based Traffic Rate Measuring This feature collects statistics about the average forwarding and drop rates of traffic over an interval on a per-QoS-class. The QoS Policy-Based traffic rate measuring interval can be set using the command. You can use the display qos policy interface command to view the collected traffic rate statistics. 6. SIP Message Waiting Indication
Telephone A
Router A
MWI server
Router B
Telephone B
This feature accords to RFC3842. The message waiting indication (MWI) feature allows a voice gateway to notify a subscriber of messages got from a voice mailbox server. For example, when a call destined to subscriber A is forwarded to the voice mailbox server, the server will notify the state change to the voice gateway. When subscriber A picks up the
June 2, 2009 Page 29 of 156
Version number
Item
Description phone, subscriber A will hear the message waiting tone without needing to query the mailbox. 7. The VLAN interface supporting bridging This feature supports to add the VLAN interface into a bridge set. After the VLAN interface add into a bridge-set, the packets received will be transmit to other interface of the bridge-set according to the bridge table. 8. EtoPPP and EtoFR Ethernet to PPP (EtoPPP) converts on the data link layer between Ethernet and PPP for IP packets. Similarly, Ethernet to Frame Relay (EoFR) converts on the link layer between Ethernet and Frame Relay for IP packets. With EtoPPP or EtoFR, a device encapsulates an IP packet received in Ethernet encapsulation with PPP or FR encapsulation and then forwards the packet rather than performs routing-based forwarding. Thus, high-performance Layer-2 switching between different types of links is achieved. 9. NAT DNS-map To configure an internal server, you need to map an external IP address and port number to the internal server. The external host can access the internal server by using the domain name or the public IP address. With DNS mapping, an internal host also can access an internal server on the same private network by using the domain name of the internal server when the DNS server resides on the public network. 10. SIP Three-Party Conference When user A has a call with user B and holds a call with User C, use A can make user C join the current conversation to implement a three-party conference. During a three-party conference, a passive participant can initiate a new call to create another conversation. In this way, conference chaining is implemented, and each conference initiator serves as a conference bridge. Only the router with VPM slot at the mainboard can support this feature. 11. Call-watch Call-watch enables a voice device to decide whether an E1/T1 interface is available for setting up calls by monitoring the state of the local interface or the IP connectivity to the remote interface connected to the callee. When the local link is detected unavailable, the voice device sets the E1/T1 interface to watch-out state, disabling the interface to respond to calls from the PBX. Detecting that the E1/T1 link is unavailable, the PBX switches to the backup link to forward calls. 12. Enhanced NQA This feature adds the voice test type, supports the TOS option of the servers response packets, one-way delay and the statistic of disordered packets, etc. 13. USB 3G Modem The router can access to the 3G mobile network by attached a USB 3G modem to its USB interface, and the routers cellular interface (3G modem) can support to transmit the data service and work as the backup link. 14. BGP supporting four byte AS number
June 2, 2009
Page 30 of 156
Version number
Item
Description This feature accords to RFC 4893. 15. ARP Detection This feature includes following functions: 1) ARP Detection Based on DHCP Snooping Entries/802.1X Security Entries/Static IP-to-MAC Bindings; 2) ARP Packet Rate Limit; 3) ARP Detection Based on Specified Objects; 4) Source MAC Address Based ARP Attack Detection; 5) ARP Packet Source MAC Address Consistency Check; 6) ARP Active Acknowledgement. 16. FXO CID check enhanced This feature can support several CID, and you can use the cid ring command to configure the time for CID check. The FXO interface can receives the modulation information of the calling number from the PBX before the first rings, between the first and second rings or between the second and the third rings.
Deleted Features: None. Changed Hardware Features None. New Features: 1. Support the PFC and ACFC compression function CMW520 -R1718 This feature supports the PPP LCP negotiation with PFC and ACFC option, and can identify the PFC and ACFC option from the other. Changed Software Features 2. Support to set the ACCM parameter This feature supports to set the ACCM parameter during the PPP negotiation. 3. DNS/DNS Relay/IPSEC/SNMP/Bridge/QOS functions and applications are supported on WEB Deleted Features: None. Changed Hardware Features None. New Features: CMW520 -E1713 1. DDNS Changed Software Features The dynamic domain name system (DDNS) feature updates mappings of domain names to IP addresses dynamically on DNS servers to ensure correct resolution results. 2. Portal on WAN This feature supports portal authentication on WAN interfaces such as
June 2, 2009 Page 31 of 156
Version number
Item serial and E1 interfaces. Deleted Features: None. Changed Hardware Features None. New Features:
Description
1. FXS Impedance Configuration by Country Each country has its own impedance standard. This feature allows you to set analog voice interface electrical impedance by country. 2. Attack Defense This feature can detect and take countermeasures against various types of attacks to ensure normal operation of internal networks. 3. DNS Involved SIP Calls CMW520 E1711P0 1 This feature allows for using domain names during SIP calling and registration processes. Changed Software Features 4. On-hook Delay This feature allows the called party to resume the conversation with the calling party by picking up the phone within a specified time, also known as the calling party control. You can set the on-hook delay time of the called party on an analog FXS voice subscriber line to enable the calling party control service. 5. ISDN 5ESS The ISDN 5ESS protocol is supported. 6. FXO Ring Detection Parameter Configuration This feature allows you to set ring detection parameters for analog FXS voice subscriber lines to detect ring signals of different frequencies and waveforms. Deleted Features: None.
CMW520 -B1707
Changed Hardware Features
New Features: Add new card: RT-SIC-1E1-F-H3(MSR 50-40 MPU-G2_ MSR 50-60 MPUG2 not support ) RT-SIC-2E1-F-H3(MSR 50-40 MPU-G2_ MSR 50-60 MPUG2 not support )
June 2, 2009
RT-MIM-8FXS-8FXO-H3 RT-MIM-16FXS-H3 RT-MIM-1CT3-V2-H3
Page 32 of 156
Version number
Item RT-DMIM-48FSW-H3 RT-FIC-1CE3-V3-H3 RT-FIC-1CT3-V3-H3
Description
RT-FIC-1ATM-OC3-H3
Deleted Features:None. QoS priority marking support on VLAN interfaces This feature allows you to perform priority marking for traffic entering a VLAN interface, so that you can classify the traffic on its outgoing interface based on the marked priority value. Encryption of configuration file Encryption of configuration file on CF card feature realizes saving the configuration file and encrypting it on CF card. If the user want to read the configuration file encrypted on CF card, he must decrypt it by legal encryption key, thus protecting the configuration file well. Now the key has two types: private or public. Enhanced Netstream Besides the functions supported by Netstream, enhanced Netstream supports normal traffic accounting and aggregate traffic accounting for IPv4 and IPv6 traffic, MPLS traffic accounting, and reporting traffic statistics based on the version-9 template. Additionally, enhanced Netstream supports outgoing traffic limiting, traffic filtering, and traffic sampling. Traffic classification and queuing support on PPPoE-enabled interfaces in bridging mode This feature enables an outgoing interface in bridging mode to support QoS. Embedding CBQ in QoS This function allows you to configure a child policy in a parent QoS policy, achieving finer traffic classification. ISDN NAT Backup ISDN NAT supports In a ISDN link backup environment, if the master link fails, the backup link switches to the master state. If this feature is enabled, current NAT entries on the failed link will be aged out immediately, so that new NAT entries can be created for subsequent packets on the new master link, and thus NAT streams can be directed to the new link immediately. Deleted Features: None. Modified Features: None.
Changed Software Features
CMW520 -B1608
New Features: Add 2-port voice subscriber circuit & 1-port voice AT0 analog trunk interface card(SIC-2FXS1FXO);
June 2, 2009
Page 33 of 156
1/2-port ISDN BRI S/T voice interface card can be supported on MSR20/30/50series and MSR30-11/30-16.(the card can not be support on
Version number
Item 2 slot of MSR30-11). Deleted Features:None. New Features:
Description
1.Enhanced Call Recovery Function In the case of SIP call transfer failure, this feature enables the originator to recover the call with the recipient and then re-initiate a call transfer. 2.SIP Extensions for Caller Identity and Privacy This feature implements the SIP extensions for caller identity and privacy. When a PSTN user originates a call to another PSTN user over a SIP network, the caller identity presentation can be restricted at the called side or the caller identity can be transparently transmitted to the called PSTN user by configuring the SIP extension header fields. 3.RIP Metric Control by Route Policy This feature allows you to use a route policy to add an additional metric for the incoming or outgoing RIP routes matching the policy on an interface. 4.IP Terminal Access In the feature, a router acts as the access gateway of an IP terminal. The IP terminal establishes a Telnet connection with the front-end server through the router. You can configure the IP address-to-MAC address binding for the IP terminal on the router, and you can configure data encryption for each TCP connection separately, improving the access security of the IP terminal. 5.Web-Based Network Management Function This feature implements the network management through Web interfaces, including device summary, system file management, device reboot, software upgrade, network diagnosis, and static route management. 6.sFlow Based on packet sampling, Sampled Flow (sFlow) is a traffic monitoring technology mainly used to collect and analyze traffic statistics. Flow supports two sampling mechanisms: 1) Packet-based sampling: Samples one packet out of a specified number of packets from an sFlow-enabled port. 2) Time-based sampling: Samples interface statistics at a specified interval from an sFlow-enabled port. 7.Multicast BGP MBGP supports the multicast address family to allow for both IPv4 and IPv6 inter-AS multicast routing. 8.MPLS TE Tunnel Support for Multiple Explicit Paths An MPLS TE tunnel supports multiple explicit paths, each with a different priority. During CSPFs path calculation, the explicit path with the highest priority will be used first; if the calculation fails, the explicit path with a second-higher priority will be used, and so on, until the calculation
June 2, 2009 Page 34 of 156
Version number
Item succeeds. 9.SSM Mapping
Description
The SSM mapping feature extends the SSM feature. An IGMPv1, IGMPv2 or MLDv1 host can use the SSM function through the configuration of the static SSM mapping feature. 10.IGMP Snooping The IGMP snooping feature implements the Layer 2 multicast. Multicast implements point-to-multipoint data communication in a network, largely saving the network bandwidth and reducing the network load. 11.IP Source Guard By filtering packets on a per-port basis, IP source guard prevents illegal packets from traveling through, thus improving the network security. IP source guard filters packets based on the following types of binding entries: source IP address, source MAC address and VLAN tag. This feature provides static binding and dynamic binding. Static binding entries are configured manually, and dynamic binding entries are provided by DHCP snooping or DHCP Relay. 12.HDLC Compression HDLC compression includes STAC-LZS compression and STAC-LZ compression. Deleted Features:Delete license register function of MSR30-11. Modified Features:None. Changed Hardware Features Changed Software Features None. New Features: 1. ACSEI ACSEI is a private protocol that well supports the ACFP collaboration, ensuring valid information interaction between the ACFP clients and the ACFP server, so that the ACFP server and clients can cooperate to run a service. ACSEI mainly provides the following functions: CMW520 -B1606 (1)Registration and deregistration of an ACSEI client to an ACSEI server. (2)ID assignment. An ACSEI server assigns IDs to ACSEI clients to distinguish them. (3)Mutual monitoring and awareness between an ACSEI client and an ACSEI server. (4)Information interaction between an ACSEI server and ACSEI clients, including clock synchronization. (5)Control of the ACSEI clients from an ACSEI server. For example, you can close ACSEI client, or restart ACSEI client from the ACSEI server. 2. VoiceVLAN support Cisco IP Phone
June 2, 2009 Page 35 of 156
Version number
Item
Description Support auto configuration VLAN information on Cisco IP Phone when connect with such devices. Deleted Features:None. Modified Features:None.
None. New Features: 1.DVPN Dynamic virtual private network (DVPN) can address the issue well. In DVPN, a collection of nodes connected to the public network is regarded as a non-broadcast multi-access (NBMA) network, the public network as the link layer of this NBMA network, and tunnels being the virtual paths between subnets of intranet as the network layer. Branch devices dynamically access the public network. VPN address management (VAM) is a major protocol used in the DVPN solution. It collects, maintains, and distributes dynamic information to help set up internal secured tunnel conveniently. When forwarding a packet for a subnet, the device first obtains its next hop on the private network through a routing protocol and the public network address associated with this next hop; then encapsulates the packet with the public address as the destination address of the tunnel; and finally sends the packet down the tunnel to the destination. 2. Terminal Access
CMW520 -R1508
Changed Software Features
Terminal access refers to the connection of a terminal to a router through an asynchronous interface for data exchange with a front-end processor (FEP) or another terminal through the router. Three types of network devices are used in terminal access: Terminal: A terminal is a character device generally connected to another device through a serial interface cable. A user inputs characters by using the terminal keyboard. Then, the characters are transferred to another device through the serial interface cable. After processing the characters, the device returns the result to the terminal, which then displays the result on its screen. Terminal access initiator (hereinafter referred to as initiator): An initiator sends a TCP connection request and serves as the client of the TCP connection. Generally, a router is used as an initiator. Terminal access receiver (hereinafter referred to as receiver): A receiver responds to a TCP connection request and serves as the server of the TCP connection. A receiver can be an FEP or a router. An FEP is a system installed with an application program for banking, postal service, taxation, customs, civil aviation, and so on. An FEP can be a Unix server or a Linux server. Once a TCP connection is established, the router, functioning as either the terminal access initiator or receiver, can transparently transmit the data from the terminal to the peer over the TCP connection. Transparent means that no manual or extra operation is required.
June 2, 2009
Page 36 of 156
Version number
Item
Description (1) Introduction to TTY Terminal Access The initiator and receiver of TTY terminal access are a router and an FEP. The service terminal is connected to the router through an asynchronous serial interface. The router is connected to the FEP through a network. Application services run on the FEP. The FEP interacts with the router through the ttyd program, and the router pushes the service display to the service terminal. The router transports data transparently between the connected service terminal and FEP to implement service interaction and processing. (2) Introduction to Telnet Terminal Access The initiator and receiver of Telnet terminal access are a router and an FEP. A service terminal is connected to the router (Telnet client) through an asynchronous serial interface. The router is connected to the FEP (Telnet server) through a network. Application services run on the FEP. The FEP interacts with the router through Telnet, thereby implementing data exchange between the terminal and the FEP. 3. Qos WRED support DSCP CBQs BE queue support WRED based on IP priority and DSCP. WFQ support WRED based on DSCP. 4. Call forwarding Call forwarding unconditional: With this feature enabled on a voice subscriber line, incoming calls will be forwarded to the predetermined destination, no matter whether the voice subscriber line is available. Call forwarding busy: With this feature enabled on a voice subscriber line, an incoming call will be forwarded to the predetermined destination when the voice subscriber line is busy. Call forwarding no reply: With this feature enabled on a voice subscriber line, an incoming call will be forwarded to the predetermined destination when the voice subscriber line is not answered within a period of time. Call forwarding unavailable: With this feature enabled on a voice subscriber line, an incoming call will be forwarded to the predetermined destination when the voice subscriber line is shut down. 5. Call waiting If User C calls User A who is already engaged in a call with User B, the new call will not be rejected because the line is busy. Just like a normal call, User C will hear ringback tones, while User A will hear call waiting tones which remind that a call is waiting on the line. If necessary, User A can answer the new call by pressing the flash hook. In this case, User B is held. Or User A can hang up to end the call with user B. In this case, User A is immediately alerted and can pick up the phone to answer the call originated by User C (the waiting call). 6. Call hold If User A in a conversation with User B presses the flash hook, the media channel at User B is temporarily shut down and goes into the silent state. The system plays silent tones or dial tones to User A, depending on the configuration. (The system first plays dial tones and waits for the user to
June 2, 2009
Page 37 of 156
Version number
Item
Description dial. If the user fails to dial within a period of time, the system stops playing dial tones and the line stays on hold.) User A can resume the call with User B by pressing the flash hook again. After pressing the flash hook, User A hears dial tones and can initiate a new call. The setup flow for the new call is completely the same as the one for ordinary calls. 7. Call transfer User A (originator) and User B (recipient) are in a conversation. User A presses the flash hook and the call is put on hold. User A dials another number to originate a call to User C (final recipient) so that the call between User B and User C is established. 8. Call backup After initiating a call to the terminating system, the originating system is unable to receive a response. In this case, if there is another link (PSTN link or VoIP link) to the terminating system, the originating system reinitiates a call to the terminating system along the new route. This is call backup. Currently, the system supports two types of call backup: (1)A PSTN link or VoIP link backs up a PSTN link (2) A PSTN link backs up a VoIP link 9. Hunt group Multiple voice subscriber lines are configured for a called number. If the voice subscriber line with the first priority is unavailable when the terminating system receives a call setup request from the originating system, the call will still be established between them. This is hunt group. 10. Call barring Call barring includes incoming call barring and outgoing call barring. Incoming call barring usually refers to the Do Not Disturb (DND) service. When incoming call barring is enabled on a voice subscribe line, calls originated to the attached phone will fail. When outgoing call barring is enabled on a voice subscriber line, calls originated from the attached phone will fail, too. 11. Extended Portal Extended Portal is also known as portal+. By forcing access devices to implement patches and anti-virus policies, portal+ improves the active virus-defending capability of access devices. The enhancements of portal+ authentication are: Security authentication mechanism is added in addition to portal authentication, which intends to verify anti-virus software is installed, virus bases are updated, unauthorized software is installed, or OS patches are updated on access devices; Compared with identity authentication that users can only access a part of (or restricted) network resources like the virus server or OS patch server after authentication succeeded, security authentication allows users to access more (or unrestricted) network resources.
June 2, 2009
Page 38 of 156
Version number
Item
Description The above figure is the basic structure of a MPLS-based VPN. CE is Customer Edge; PE is Provider Edge, which is placed on the backbone network; PE is responsible for managing and establishing LSP connections among PEs and route assignment among branches of a VPN user. This feature enables CE 1 at the netwok managment side to access PE 1 at the SNMP agent side normally. That is, after the network managemeng address of the managed devices is bound to the same VPN as that of the network managment server, the network management server can send SNMP messages to the managed devices and receive reply messages from the managed device. 12. SNMP support VPN
The above figure is the basic structure of a MPLS-based VPN. CE is Customer Edge; PE is Provider Edge, which is placed on the backbone network; PE is responsible for managing and establishing LSP connections among PEs and route assignment among branches of a VPN user. This feature enables CE 1 at the netwok managment side to access PE 1 at the SNMP agent side normally. That is, after the network managemeng address of the managed devices is bound to the same VPN as that of the network managment server, the network management server can send SNMP messages to the managed devices and receive reply messages from the managed device. Deleted Features:None. Modified Features:None. Changed Hardware Features Changed Software Features New Features:MSR3011, Please make reference to Table4. Deleted Features:None. Modified Features:None. None.
CMW520 -B1506
June 2, 2009
Page 39 of 156
Command Line Updates

Table 12 Command line updates Versio n numb er CMW5 20R1719
Item
Description
New Commands
1.Syntax rip bfd enable undo rip bfd enable View: Interface view Parameters None Description Use the rip bfd enable command to enable BFD on the RIP interface. Use the undo rip bfd enable command to restore the default. Disabling BFD on a RIP interface will notify BFD to delete the corresponding session. By default, a RIP interface is not enabled with BFD. BFD echo-mode detection only works for a RIP neighbor one hop away. Using the undo peer command does not delete the neighbor relationship at once and therefore cannot bring down the BFD session at once. Examples # Enable BFD on RIP interface Ethernet 1/1.
<Sysname> system-view [Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1] rip bfd enable
2.Syntax mwi enable undo mwi enable View Voice subscriber line view Parameters None Description Use the mwi enable command to enable MWI. Use the undo mwi enable command to disable MWI. By default, MWI is disabled.
June 2, 2009 Page 40 of 156
Versio n numb er
Item
Description
This command is only applicable to the FXS voice subscriber line. Examples # Enable MWI for voice subscriber line 3/0.
<Sysname> system-view [Sysname] voice-setup [Sysname-voice] subscriber-line 3/0 [Sysname-voice-line3/0] mwi enable
3.Syntax configuration encrypt { private-key | public-key } undo configuration encrypt View System view Parameters private-key: Encrypts a configuration file with a private key. The encrypted configuration file can only be decrypted and recognized by the local device. public-key: Encrypts a configuration file with a public key. The encrypted configuration file can be decrypted and recognized by all devices supported the configuration file encryption function. Description Use the configuration encrypt command to enable configuration file encryption. Use the undo configuration encrypt command to restore the default. By default, configuration file encryption is disabled, that is, the current valid configurations are directly saved to the configuration file. With this feature enabled, a configuration file is encrypted every time before it is saved (by the save command). If the private-key keyword is provided, the configuration file saved on the AMB can be encrypted by the private key of the AMB, and only the AMB can decrypt the configuration file; the configuration file saved on the SMB can be encrypted by the private key of the SMB, and only the SMB can decrypt the configuration file. (distributed device) If the private-key keyword is provided, the configuration file saved on a member device can be encrypted by its own private key, and only this member device can decrypt the configuration file. (centralized stacking device) If the private-key keyword is provided, the configuration file saved on a main board can be encrypted by its own private key, and only this main board can decrypt the configuration file. (distributed stacking device) Support for this command depends on the device model. Examples
June 2, 2009 Page 41 of 156
Versio n numb er
Item
Description
# Encrypt the configuration file with a public key before saving it.
<Sysname> system-view [Sysname] configuration encrypt public-key
4.Syntax nat dns-map domain domain-name protocol pro-type ip global-ip port global-port undo nat dns-map domain domain-name View System view Parameters domain domain-name: Specifies the domain name of an internal server. A domain name is a string containing no more than 255 case-insensitive characters. It consists of several labels separated by dots (.). Each label has no more than 63 characters that must begin and end with letters or digits; besides, dashes (-) can be included. protocol pro-type: Specifies the protocol type used by the internal server, tcp or udp. ip global-ip: Specifies the public IP address used by the internal server to provide services to the external network. port global-port: Specifies the port number used by the internal server to provide services to the external network. The global-port argument is in the range 1 to 65535. Description Use the nat dns-map command to map the domain name to the public network information of an internal server. Use the undo nat dns-map command to remove a DNS mapping. Currently, the device supports up to 16 DNS mappings. Related commands: display nat dns-map. Support for this command depends on the device model. Examples # A company provides Web service to external users. The domain name of the internal server is www.server.com, and the public IP address is 202.112.0.1. Configure a DNS mapping, so that internal users can access the Web server using its domain name.
<Sysname> system-view [Sysname] nat dns-map domain 202.112.0.1 port www www.server.com protocol tcp ip
5.Syntax call-watch group watch-number { hard | soft } undo call-watch group watch-number [ hard | soft ]
June 2, 2009 Page 42 of 156
Versio n numb er
Item
Description
View E1/T1 interface view Parameters watch-number: Specifies a call-watch group number, in the range of 1 to 255. hard: Specifies the call-watch mode as hard. In hard call-watch mode, the E1/T1 interface is set to watch-out state as soon as all the monitored links are detected down at the network layer regardless of whether calls are present on the interface. An interface in watch-out state does not respond to calls initiated by the connected PBX. soft: Specifies the call-watch mode as soft. In soft call-watch mode, the E1/T1 interface will be set to watch-out state after all the monitored links are detected down at the network layer only if no calls are present on the interface. Description Use the call-watch group command to associate the current E1/T1 interface with a call-watch group in the specified mode. Use the undo call-watch group command to remove the association. By default, an E1/T1 interface is not associated with any call-watch group. You can associate an E1/T1 interface with only one call-watch group, and vice versa. You can associate an E1/T1 interface with a call-watch group that has not been created yet but the configuration does not take effect. Examples # Associate interface E1 1/0 with monitor group 1 in soft mode.
<Sysname> system-view [Sysname] controller e1 1/0 [Sysname-e1 1/0] call-watch group 1 soft
6.Syntax etoppp translate interface interface-type1 interface-number1 interfacetype2 interface-number2 ip-address ip-address1 ip-address2 undo etoppp translate interface interface-type1 interface-number1 View System view Parameters interface-type1 interface-number1: Specifies an interface by its type and number. At present, it can only be a Layer-3 Ethernet interface, Ethernet subinterface, or VLAN interface. interface-type2 interface-number2: Specifies an interface by its type and number. At present, it can only be a synchronous serial interface, MP
June 2, 2009 Page 43 of 156
Versio n numb er
Item
Description group interface, POS interface, or POS subinterface. ip-address1: Remote IP address of the interface specified for interfacetype1 interface-number1. ip-address2: Remote IP address of the PPP interface specified for interface-type2 interface-number2. It must be located on the same network segment where the address for ip-address1 is located. Description Use the etoppp translate command to create an EtoPPP translation mapping. Use the undo etoppp translate command to remove an EtoPPP translation mapping. An EtoPPP translation mapping maps a user-side interface using Ethernet encapsulation to a service provider-side interface using PPP encapsulation for IP packets forwarding. By default, no EtoPPP translation mapping exists. Related commands: display etoppp translate. Examples # Create an EtoPPP translation mapping to map Ethernet 1/1 to Serial 2/0.
<Sysname> system-view [Sysname] etoppp translate interface ethernet 1/1 serial 2/0 ipaddress 1.1.1.1 1.1.1.2
7.Syntax conference enable undo conference enable View Voice subscriber line view Parameters None Description Use the conference enable command to enable the three-party conference function for a voice subscriber line. Use the undo conference enable command to restore the default. By default, the three-party conference function is disabled. The three-party conference function depends on the call hold function. Therefore, you need to enable the call hold function before configuring three-party conference. Enabling the three-party conference service in voice subscriber line view will invalidate the local call identification function. For configuration of the local call identification function, refer to the distinguish-localtalk
June 2, 2009 Page 44 of 156
Versio n numb er
Item
Description command in VoIP Commands in the Voice Volume. Examples # Enable the three-party conference function for voice subscriber line 1/0.
<Sysname> system-view [Sysname] voice-setup [Sysname-voice] subscriber-line 1/0 [Sysname-voice-line1/0] conference enable
8.Syntax codec-type { g711a | g711u | g729a } undo codec-type View Voice test type view Parameters g711a: G.711 A-law codec type. g711u: G.711 -law codec type g729a: G.729 A-law codec type. Description Use the codec-type command to configure the codec type for a voice test. Use the undo codec-type command to restore the default. By default, the codec type for a voice test is G.711 A-law. Examples # Configure the codec type for a voice test as g729a.
<Sysname> system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type voice [Sysname-nqa-admin-test-voice] codec-type g729a
9.Syntax ddns policy policy-name undo ddns policy policy-name View System view Parameters policy-name: DDNS policy name, a case-insensitive string of 1 to 32 characters.
June 2, 2009 Page 45 of 156
Versio n numb er
Item
Description
Description Use the ddns policy command to create a DDNS policy and enter its view. Use the undo ddns policy command to delete the DDNS policy. By default, no DDNS policy is created. Related commands: display ddns policy. Examples # Create a DDNS policy named steven_policy and enter its view.
<Sysname> system-view [Sysname] ddns policy steven_policy [Sysname-ddns-policy-steven_policy]
10.Syntax address sip { dns domain-name [ port port-number ] | ip ip-address [ port port-number ] | proxy } undo address sip { dns | ip | proxy } View VoIP voice entity view Parameters dns domain-name: Domain name of the called entity. The value consists of 1 to 20 characters, which are not case-sensitive and include letters, numbers, hyphens (-), underlines (_), and dots (.). port port-number: Port number of the DNS server, in the range of 1 to 65535. The default port number is 5060. ip ip-address: IP address of the peer VoIP gateway. port port-number: Port number, in the range of 1 to 65535. The default port number is 5060. proxy: Uses the SIP proxy server to implement SIP message exchange. Description Use the address sip command to configure SIP routing for a voice entity. Use the undo address sip command to remove the SIP policy that has been configured. By default, no routing policy is configured for a voice entity. Examples # Configure the IP address of the peer VoIP gateway as 3.3.3.3 for voice entity 10.
<Sysname> system-view [Sysname] voice-setup
June 2, 2009
Page 46 of 156
Versio n numb er
Item
Description
[Sysname-voice-dial] entity 10 voip [Sysname-voice-dial-entity10] address sip ip 3.3.3.3
# Configure the domain name of the called entity as cc.news.com for voice entity 10.
<Sysname> system-view [Sysname] voice-setup [Sysname-voice-dial] entity 10 voip [Sysname-voice-dial-entity10] address sip dns cc.news.com
Please refer to H3C MSR 20/30/50 Series Routers User Manual. Deleted Commands Modified Commands CMW5 20R1718 New Commands None. None. 1.Syntax ppp accm hex-number undo ppp accm View PPP interface view Parameters hex-number: Hexadecimal value of the accm keyword. The value range of this argument is 0 to 0xFFFFFFFF and defaults to 0XA0000. Description Use the ppp accm command to configure the PPP Asynchronous Control Character Map (ACCM) negotiation option. Use the undo ppp accm command to restore the default. This configuration takes effect on asynchronous links only. Examples # Configure the ACCM negotiation option on interface Serial 1/1 as 01010101. <Sysname> system-view [Sysname] interface Serial 1/1 [Sysname-Serial1/1] ppp accm 01010101 2.Syntax ppp acfc local request undo ppp acfc local View
June 2, 2009 Page 47 of 156
Versio n numb er
Item
Description
PPP interface view Parameters request: Specifies that the Address and Control Field Compression (ACFC) option be included in outbound configuration requests during LCP negotiations. Description Use the ppp acfc local command to specify that the local ACFC option be included in outbound configuration requests during LCP negotiations. Use the undo ppp acfc local command to restore the default. By default, the ACFC option is not included in outbound configuration requests during LCP negotiations. Examples # Configure interface Serial 1/1 to include the ACFC option in outbound configuration requests. <Sysname> system-view [Sysname] interface Serial 1/1 [Sysname-Serial1/1] ppp acfc local request 3.Syntax ppp acfc remote { apply | reject | ignore } undo ppp acfc remote View PPP interface view Parameters apply: Specifies that the local device accepts the ACFC options in configuration requests received from the peer and performs ACFC on frames sent to the peer. reject: Specifies that the local device rejects ACFC options received from the peer. ignore: Specifies that the local device accepts the ACFC options in configuration requests received from the peer but does not perform ACFC on frames sent to the peer. Description Use the ppp acfc remote command to configure how the device handles the ACFC options in configuration requests received from the peer. Use the undo ppp acfc remote command to restore the default. By default, the ignore keyword is applied, that is, the device accepts the ACFC options in configuration requests received from the peer but does not perform ACFC on frames sent to the peer. Examples
June 2, 2009 Page 48 of 156
Versio n numb er
Item
Description
# Configure interface Serial 1/1 to accept the ACFC options in configuration requests received from the peer. <Sysname> system-view [Sysname] interface Serial 1/1 [Sysname-Serial1/1] ppp acfc remote apply # Configure interface Serial 1/1 to reject the ACFC options in configuration requests received from the peer. <Sysname> system-view [Sysname] interface Serial 1/1 [Sysname-Serial1/1] ppp acfc remote reject 4.Syntax ppp pfc local request undo ppp pfc local View PPP interface view Parameters request: Specifies that the Protocol Field Compression (PFC) option be included in outbound configuration requests during LCP negotiations. Description Use the ppp pfc local command to specify that the local PFC option be included in outbound configuration requests during LCP negotiations. Use the undo ppp pfc local command to restore the default. By default, the PFC option is not included in outbound configuration requests during LCP negotiations. Examples # Configure interface Serial 1/1 to include the PFC option in outbound configuration requests. <Sysname> system-view [Sysname] interface Serial 1/1 [Sysname-Serial1/1] ppp pfc local request 5.Syntax ppp pfc remote { apply | reject | ignore } undo ppp pfc remote View PPP interface view Parameters
June 2, 2009 Page 49 of 156
Versio n numb er
Item
Description
apply: Specifies that the local device accepts the PFC options in configuration requests received from the peer and performs ACFC on frames sent to the peer. reject: Specifies that the local device rejects PFC options received from the peer. ignore: Specifies that the local device accepts the PFC options in configuration requests received from the peer but does not perform PFC on frames sent to the peer. Description Use the ppp pfc remote command to configure how the device handles the PFC options in configuration requests received from the peer. Use the undo ppp pfc remote command to restore the default. By default, the ignore keyword is applied, that is, the device accepts the PFC options in configuration requests received from the peer but does not perform PFC on frames sent to the peer. Examples # Configure interface Serial 1/1 to accept the PFC options in configuration requests received from the peer. <Sysname> system-view [Sysname] interface Serial 1/1 [Sysname-Serial1/1] ppp pfc remote apply # Configure interface Serial 1/1 to reject the PFC options in configuration requests received from the peer. <Sysname> system-view [Sysname] interface Serial 1/1 [Sysname-Serial1/1] ppp pfc remote reject # Configure interface Serial 1/1 to ignore the PFC options in configuration requests received from the peer. <Sysname> system-view [Sysname] interface Serial 1/1 [Sysname-Serial1/1] ppp pfc remote ignore Deleted Commands Modified Commands CMW5 20E1713 New Commands None. None. 1. Syntax url request-url undo url View
June 2, 2009 Page 50 of 156
Versio n numb er
Item
Description
DDNS policy view Parameters request-url: URL address for DDNS update requests, a case-sensitive string of 1 to 240 characters containing the login ID, password, and other information. Description Use the url command to specify the URL address for DDNS update requests. Use the undo url command to delete the URL address. By default, no URL address is specified for DDNS update requests. The format of the URL address to be specified for DDNS update requests depends on the DDNS server. Specify the URL address for contacting the HTTP-based DDNS server at www.3322.org as follows: http://username:password@members.3322.org/dyndns/update?system=d yndns&hostname=<h>&myip=<a> Specify the URL address for contacting the TCP-based PeanutHull server as follows: oray://username:password@phservice2.oray.net Note that: Replace the parameters username and password in the URL with your actual login ID and password for the DDNS server, respectively. The port number in the URL address is optional. If no port number is specified, the default port number is used. HTTP uses port 80, HTTPS uses port 443, and the PeanutHull server uses port 6060. The system automatically fills <h> with the FQDN that is specified when the DDNS policy is applied to the interface and automatically fills <a> with the primary IP address of the interface to which the DDNS policy is applied. You may also manually specify an FQDN and an IP address in <h> and <a>, respectively. After that, the FQDN that is specified when the DDNS policy is applied becomes ineffective. You cannot specify an FQDN and IP address in the URL address for contacting the PeanutHull server. Instead, you can specify an FQDN when applying the DDNS policy to an interface. The system will automatically use the primary IP address of the interface to which the DDNS policy is applied as the IP address for DDNS update. To avoid ambiguity, it is better that your login ID and password not include colons (:), at signs (@), or question marks (?). If you repeatedly execute the url command with different URL addresses specified, the latest configuration will overwrite the previous one. Related commands: ddns apply policy. Examples
June 2, 2009 Page 51 of 156
Versio n numb er
Item
Description
# Specify for DDNS policy steven_policy the URL address with login ID steven and password nevets. The device contacts www.3322.org for DDNS update. <Sysname> system-view [Sysname] ddns policy steven_policy [Sysname-ddns-policy-steven_policy] url http://steven:nevets@members.3322. org/dyndns/update?system=dyndns&hostname=<h>&myip=<a> 2Syntax ddns apply policy policy-name [ fqdn domain-name ] undo ddns apply policy policy-name View Interface view Parameters policy-name: DDNS policy name, a case-insensitive string of 1 to 32 characters. fqdn domain-name: Specifies the FQDN for update. This keyword and argument combination is used to replace <h> in the URL for the DDNS update. The domain-name is a case-insensitive string of 1 to 127 characters. Description Use the ddns apply policy command to apply the specified DDNS policy to the interface, update the mapping between the specified FQDN and the primary IP address of the interface, and enable DDNS update. Use the undo ddns apply policy command to remove the DDNS policy applied to the interface and stop DDNS update. By default, no DDNS policy is specified for any interface, no FQDN is specified for update, and DDNS update is disabled. Note that: You can apply at most four DDNS policies to an interface. If you repeatedly execute the ddns apply policy command with the same DDNS policy name but different FQDNs specified, the latest configuration will overwrite the previous one, and initiates a DDNS update request immediately. Related commands: url. Examples # Apply the DDNS policy named steven_policy to Ethernet 1/1 to update the host name to IP address mapping for FQDN www.whatever.com and enable DDNS update. <Sysname> system-view
June 2, 2009 Page 52 of 156
Versio n numb er
Item
Description
[Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1] ddns apply policy steven_policy fqdn www.whatever.com 3.Syntax ddns policy policy-name undo ddns policy policy-name View System view Parameters policy-name: DDNS policy name, a case-insensitive string of 1 to 32 characters. Description Use the ddns policy command to create a DDNS policy and enter its view. Use the undo ddns policy command to delete the DDNS policy. By default, no DDNS policy is created. Related commands: display ddns policy. Examples # Create a DDNS policy named steven_policy and enter its view. <Sysname> system-view [Sysname] ddns policy steven_policy [Sysname-ddns-policy-steven_policy] 4. Syntax display ddns policy [ policy-name ] View Any view Parameters policy-name: DDNS policy name, a case-insensitive character of 1 to 32 characters. Description Use the display ddns policy command to display information of the DDNS policy. If no policy-name is specified, all DDNS policies will be displayed. Examples # Display information of the DDNS policy named steven_policy. <Sysname> display ddns policy steven_policy
June 2, 2009 Page 53 of 156
Versio n numb er
Item
Description
DDNS policy: steven_policy URL : http://steven:nevets@members.3322.org/dyndns/update? system=dyndns&hostname=<h>&myip=<a> SSL client policy: Interval 5. Syntax interval days [ hours [ minutes ] ] undo interval View DDNS policy view Parameters days: Days, in the range of 0 to 365. hours: Hours, in the range of 0 to 23. minutes: Minutes, in the range of 0 to 59. Description Use the interval command to specify the interval for sending DDNS update requests after DDNS update is enabled. Use the undo interval command to restore the default value. By default, the DDNS update request interval is one hour. Note that: A DDNS update request is initiated immediately after the primary IP address of the interface changes or the link state of the interface changes from down to up, no matter whether the interval is reached. If you specify the interval as 0, your device will not periodically initiate any DDNS update request, but will initiate a DDNS update request when the primary IP address of the interface is changed or the link state of the interface changes from down to up. If you repeatedly execute the interval command with different time intervals specified, only the latest configuration will take effect. Examples # Set the interval for sending DDNS update requests to one day and one minute for the DDNS policy named steven_policy. <Sysname> system-view [Sysname] ddns policy steven_policy [Sysname-ddns-policy-steven_policy] interval 1 0 1 6. Syntax
June 2, 2009 Page 54 of 156
: 1 days 0 hours 1 minutes
Versio n numb er
Item
Description
ssl client policy policy-name undo ssl client policy View DDNS policy view Parameters policy-name: SSL client policy name, a case-insensitive string of 1 to 16 characters. Description Use the ssl client policy command to associate a specific SSL client policy with a DDNS policy. Use the undo ssl client policy command to cancel the association. By default, no SSL client policy is associated with any DDNS policy. Note that: The SSL client policy is only effective for the HTTPS-based DDNS update requests. If you repeatedly execute the ssl client policy command with different SSL client policies specified, only the latest configuration will take effect. Related commands: ssl client-policy in SSL Commands in the Security Volume. Examples # Associate the SSL client policy named steven_policy with the DDNS policy named steven_policy. <Sysname> system-view [Sysname] ddns policy steven_policy [Sysname-ddns-policy-steven_policy] ssl client policy steven_policy Deleted Commands Modified Commands CMW5 20E1711 P01 New Commands None. None. 1Syntax: ring-detect debounce value undo ring-detect debounce 2Syntax: ring-detect frequency value undo ring-detect frequency 3Syntax:
June 2, 2009 Page 55 of 156
Versio n numb er
Item
Description
address sip { dns domain-name [ port port-number ] | ip ip-address [ port port-number ] | proxy } undo address sip { dns | ip | proxy } 4Syntax: attack-defense apply policy policy-number undo attack-defense apply policy 5Syntax: attack-defense policy policy-number undo attack-defense policy policy-number 6Syntax: blacklist enable undo blacklist enable 7Syntax: blacklist ip source-ip-address [ timeout minutes ] undo blacklist { all | ip source-ip-address [ timeout ] } 8Syntax: defense icmp-flood action drop-packet undo defense icmp-flood action 9Syntax: defense icmp-flood enable undo defense icmp-flood enable 10Syntax: defense icmp-flood ip ip-address [ max-rate rate-number ] undo defense icmp-flood ip ip-address [ max-rate ] 11Syntax: defense icmp-flood max-rate rate-number undo defense icmp-flood max-rate 12Syntax: defense scan { add-to-blacklist | blacklist-timeout minutes | enable | max-rate rate-number } undo defense scan { add-to-blacklist | blacklist-timeout | enable | max-rate } 13Syntax: defense syn-flood { max-half-connections half-connections | max-rate
June 2, 2009 Page 56 of 156
Versio n numb er
Item rate-number } *
Description
undo defense syn-flood { max-half-connections | max-rate } 14Syntax: defense syn-flood action { drop-packet | reset-session } undo defense syn-flood action 15Syntax: defense syn-flood enable undo defense syn-flood enable 16Syntax: defense syn-flood ip ip-address [ max-half-connections halfconnections | max-rate rate-number ] undo defense syn-flood ip ip-address [ max-half-connections | maxrate ] 17Syntax: defense udp-flood action drop-packet undo defense udp-flood action 18Syntax: defense udp-flood enable undo defense udp-flood enable 19Syntax: defense udp-flood ip ip-address [ max-rate rate-number ] undo defense udp-flood ip ip-address [ max-rate ] 20Syntax: defense udp-flood max-rate rate-number undo defense udp-flood max-rate 21Syntax: display attack-defense policy [ policy-number ] 22Syntax: display attack-defense statistics interface interface-type interfacenumber 23Syntax: display blacklist { all | ip source-ip-address } 24Syntax: display flow-statistics statistics { destination-ip dest-ip-address |
June 2, 2009 Page 57 of 156
Versio n numb er
Item
Description source-ip ip-address } [ vpn-instance vpn-instance-name ] 25Syntax: display flow-statistics statistics interface interface-type interfacenumber { inbound | outbound } 26Syntax: flow-statistics enable { destination-ip | source-ip } undo flow-statistics enable { destination-ip | source-ip } 27Syntax: flow-statistics enable { inbound | outbound } undo flow-statistics enable { inbound | outbound } 28Syntax: reset attack-defense statistics interface interface-type interface-number 29Syntax: signature-detect action drop-packet undo signature-detect action 30Syntax: signature-detect { fraggle | icmp-redirect | icmp-unreachable | land | large-icmp | route-record | smurf | source-route | tcp-flag | tracert | winnuke } enable undo signature-detect { fraggle | icmp-redirect | icmp-unreachable | land | large-icmp | route-record | smurf | source-route | tcp-flag | tracert | winnuke } enable 31Syntax: signature-detect large-icmp max-length length undo signature-detect large-icmp max-length 32Syntax: timer called-hookon-delay second sundo called-hookon-delay 33Syntax: debugging voice ss rc { all | error | event | info | timer } undo debugging voice ss rc { all | error | event | info | timer } Please refer to H3C MSR 20/30/50 Series Routers User Manual.
Deleted Commands New Commands

June 2, 2009
None. 1.Original command: registrar ipv4 ip-address [ port port-number ] [ expires seconds ]
Page 58 of 156
Versio n numb er
Item [ slave ] undo registrar ipv4 [ slave ] Modified command:
Description
registrar { dns domain-name | ipv4 ip-address } [ port port-number ] [ expires seconds ] [ slave ] undo registrar ipv4 { dns | ipv4 } [ slave ] Module of the command: VOICE SIP Description: Add dns domain-name to support DNS Involved SIP Calls. Changes in default values: None. 2.Original command: proxy ipv4 ip-address [ port port-number ] undo proxy ipv4 Modified command: proxy { dns domain-name | ipv4 ip-address } [ port port-number ] undo proxy { dns | ipv4 } Module of the command: VOICE SIP Description: Add dns domain-name to support DNS Involved SIP Calls. Changes in default values: None. CMW5 20B1707 New Commands 1. Syntax configuration encrypt { private-key | public-key } undo configuration encrypt
View
System view
Parameters
private-key: Encrypts a configuration file with a private key. public-key: Encrypts a configuration file with a public key.
Description
Use the configuration encrypt command to enable configuration file encryption. Use the undo configuration encrypt command to restore the default. By default, configuration file encryption is disabled, that is, the current valid configurations are directly saved to the configuration file. With this feature enabled, a configuration file is encrypted every time before it is saved (by the save command). Encrypted by a private key, a configuration file can be decrypted and recognized only by the local device; encrypted by a public key, a configuration files can be decrypted and recognized by all devices supporting this feature.
June 2, 2009 Page 59 of 156
Versio n numb er
Item
Description
Examples
# Configure to encrypt the configuration file with a public key before saving it.
<Sysname> system-view [Sysname] configuration encrypt public-key
2Syntax
display sampler [ sampler-name ]
View
Any view
Parameters
sampler-name: Specifies the sampler name, a string of up to 32 characters. slot slot-id: Displays sampler entry of the specified slot.
Description
Use the display sampler command to view configuration and status information about a sampler. Executing the command with no argument, the configuration and status information about all samplers is displayed. On a distributed device, executing the command with the slot-id argument, the configuration and status information about the sampler of the card that resides in the specified slot is displayed.
Examples
# Display the configuration and status information about the specified sampler on a router.
<Sysname> display sampler abc slot 1 Sampler name: abc Index: 1, Mode: Random, Packet-interval: 8
Packet counter: 100,
Random number: 200
Total packet number (processed/selected): 1200/4
# Display the configuration and status information about the specified sampler on a switch.
<Sysname> display sampler abc slot 1 Sampler name: abc Index: 1, Mode: Random, Packet-interval: 8
3Syntax
reset sampler statistics [ sampler-name ]
June 2, 2009 Page 60 of 156
Versio n numb er
Item
Description
View
User view
Parameters
sampler-name: Specifies the sampler name, a string of up to 32 characters.
Description
Use the reset sampler statistics command to clear the running information of a sampler, including the counter, total number of packets processed and number of selected packets. With no sampler-name specified, this command clears the running information of all samplers. On a distributed device, this command is effective for all cards.
Examples
# Clear the running information of the specified sampler.
<Sysname> reset sampler statistics abc
4Syntax
sampler sampler-name mode { fixed | random } packet-interval rate undo sampler sampler-name
View
System view
Parameters
sampler-name: Specifies the sampler name, a string of up to 32 characters. fixed: Sets the sampling mode to fixed. random: Sets the sampling mode to random. rate: Specifies the sampling rate.
Description
Use the sampler command to create or modify a sampler. Use the undo sampler command to delete a sampler. On a distributed device, this command is effective for all cards.
Examples
# Create a random sampler with the sampling rate of 8.
<Sysname> system-view [Sysname] sampler abc mode random packet-interval 8
5.Syntax
display ipv6 netstream cache [ verbose ]
June 2, 2009 Page 61 of 156
Versio n numb er
Item
Description
View
Any view
Parameters
slot slot-id: Displays IPv6 NetStream cache entry of the specified slot.
Description
Use the display ipv6 netstream cache command to view configuration and status information about the IPv6 NetStream cache. On a distributed device, if you provide the slot slot-id argument, the IPv6 NetStream cache information of the board in the slot is displayed; if you do not provide the slot slot-id argument, information of all the IPv6 NetStream caches on the device is displayed.
Examples
# Display information about the IPv6 NetStream cache on a centralized router.
<Sysname> display ipv6 netstream cache IPv6 netstream cache information: Stream active timeout (in minutes) : 60
Stream inactive timeout (in seconds) : 10 Stream max entry number IP active stream entry number MPLS active stream entry number IPL2 active stream entry number IP stream entries been counted MPLS stream entries been counted IPL2 stream entries been counted Last statistics reset time : 1000 : 1 : 2 : 1 : 10 : 20 : 20 : 01/01/2000, 00:01:02
6.Syntax
display ipv6 netstream export
View
Any view
Default Level
1: Monitor level
Parameters
None
Description
Use the display ipv6 netstream export command to view statistics about exported IPv6 NetStream statistics packets.
June 2, 2009 Page 62 of 156
Versio n numb er
Item
Description
Examples
# Display statistics about IPv6 NetStream statistics packets.
<Sysname> display ipv6 netstream export IPv6 export information: Stream source interface Stream destination VPN-instance Stream destination IP (UDP) (30000) Version 9 exported stream number : Ethernet1/0 : VPN1 : 10.10.0.10 : 16
Version 9 exported UDP datagram number (failed) : 16 (0) AS aggregation export information: Stream source interface Stream destination VPN -instance Stream destination IP (UDP) (30000) Version 9 exported stream number : Ethernet1/0 : VPN1 : 10.10.0.10 : 16
Version 9 exported UDP datagram number (failed) : 2 (0)
7.Syntax
display ipv6 netstream template
View
Any view
Parameters
slot slot-id: Displays NetStream template information of the specified slot.
Description
Use the display ipv6 netstream template command to view configuration and status information about the NetStream version 9 template. On a distributed device, if you provide the slot slot-id argument, the NetStream template information of the board in the slot is displayed; if you do not provide the slot slot-id argument, only the configuration information of the template is displayed.
Examples
# Display information about the NetStream template on a distributed router.
<Sysname> display ipv6 netstream template slot 5 Stream template refresh-rate packet : 30
Stream template refresh-rate time (in minutes) : 20 Active stream templates Added stream templates :2 :2
June 2, 2009
Page 63 of 156
Versio n numb er
Item
Description
AS outbound template: Template ID Packets Last template export time Field count Field type : 292 : 0 : 01/01/2008, 00:05:17 : 14 Field length (byte)
-------------------------------------------------------------------Flows Out packets Out bytes First switched Last switched Source AS Destination AS Input SNMP Output SNMP Direction Sampling algorithm PAD PAD Sampling interval AS inbound template: Template ID Packets Last template export time Field count Field type : 292 : 3 : 01/01/2008, 00:01:02 : 14 Field length (byte) 4 8 8 4 4 2 2 2 2 1 1 1 1 4
-------------------------------------------------------------------Flows In packets In bytes First switched Last switched Source AS Destination AS Input SNMP 4 8 8 4 4 2 2 2
June 2, 2009
Page 64 of 156
Versio n numb er
Item
Description
Output SNMP Direction Sampling algorithm PAD PAD Sampling interval
2 1 1 1 1 4
8.Syntax
enable undo enable
View
NetStream aggregation view
Parameters
None
Description
Use the enable command to enable current aggregation mode. Use the undo enable command to disable current aggregation mode. By default, no aggregation mode is enabled. Related commands: ipv6 netstream aggregation.
Examples
# Enable NetStream AS aggregation.
<Sysname> system-view [Sysname] ipv6 netstream aggregation as [Sysname-aggregation-as] enable
9.Syntax
ipv6 netstream [ inbound | outbound ] undo ipv6 netstream [ inbound | outbound ]
View
Interface view, system view
Parameters
inbound: Enables IPv6 NetStream statistics in the inbound direction of an interface. outbound: Enables IPv6 NetStream statistics in the outbound direction of an interface.
Description
June 2, 2009 Page 65 of 156
Versio n numb er
Item
Description
Use the ipv6 netstream command to enable NetStream statistics globally or on the current interface. Use the undo ipv6 netstream command to disable Netstream statistics globally or on the current interface. By default, IPv6 NetStream statistics is disabled both globally and on the current interface.
Examples
# Enable IPv6 NetStream statistics in the inbound direction of interface Ethernet 1/0.
<Sysname> system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] ipv6 netstream inbound
10.Syntax
ipv6 netstream aggregation { as | bgp-nexthop | destination-prefix | prefix | protocol-port | source-prefix }
View
System view
Parameters
as: AS aggregation by combination of source AS number, destination AS number, inbound interface index, and outbound interface index. bgp-nexthop: ToS-BGP next hop aggregation by combination of BGP next hop IPv6 address, and outbound interface index. destination-prefix: Destination-prefix aggregation by destination AS number, destination address mask length, destination prefix, and outbound interface index. prefix: Source and destination prefix aggregation by combination of source AS number, destination AS number, source address mask length, destination address mask length, source prefix, destination prefix, inbound interface index, and outbound interface index. protocol-port: Protocol-port aggregation by combination of protocol number, source port, and destination port. source-prefix: Source-prefix aggregation by combination of source AS number, source address mask length, source prefix, and inbound interface index.
Description
Use the ipv6 netstream aggregation command to enter NetStream aggregation view. In NetStream aggregation view, you can enable or disable the aggregation mode, set information about source interface, destination IP address and destination port number for version 8 NetStream statistics packets. Related commands: enable, ipv6 netstream export host, ipv6 netstream export source.
June 2, 2009 Page 66 of 156
Versio n numb er
Item
Description
Examples
# Enter NetStream AS aggregation view.
<Sysname> system-view [Sysname] ipv6 netstream aggregation as [Sysname-ns6-aggregation-as]
11.Syntax ipv6 netstream aggregation advanced undo ipv6 netstream aggregation advanced View System view Parameters None Description Use the ipv6 netstream aggregation advanced command to enable hardware NetStream aggregation. Use the undo ipv6 netstream aggregation advanced command to disable hardware NetStream aggregation. By default, IPv6 hardware NetStream stream aggregation is disabled. Note that: If you enable hardware NetStream aggregation, the system performs the aggregation based on whether you have configured the export host, and the aggregation type. After hardware NetStream aggregation is enabled, the aged hardware aggregation entries are recorded in the normal stream entry table and then exported. Related commands: ipv6 netstream export host, ipv6 netstream aggregation Examples # Enable IPv6 hardware NetStream aggregation.
<Sysname> system-view [Sysname] ipv6 netstream aggregation advanced
12.Syntax ipv6 netstream export rate rate undo ipv6 netstream export rate View System view Parameters
June 2, 2009 Page 67 of 156
Versio n numb er
Item
Description
rate: Maximum rate for exporting IPv6 NetStream statistics, in the unit of the maximum number of packets per second, in the range 1 to 1000. The value range depends on the device model. Description Use the ipv6 netstream export rate command to enable the packet export limitation, and set the maximum rate for exporting NetStream statistics. Use the undo ipv6 netstream export rate command to disable the packet export limitation. By default, the export rate of IPv6 NetStream statistics is not limited. Note that the export rate on each board is different. As the aging timer is different, the configuration may not be very accurate on a multi-CPU device. Examples # Allow 10 packets at most to be exported per second.
<Sysname> system-view [Sysname] ipv6 netstream export rate 10
13.Syntax ipv6 netstream export host ip-address udp-port [ vpn-instance vpninstance-name ] undo ipv6 netstream export host [ ip-address [ vpn-instance vpninstance-name ] View System view, NetStream aggregation view Parameters ip-address: Destination IP address for IPv6 NetStream statistics packets. At present, only IPv4 addresses are supported. udp-port: Destination port number for NetStream statistics packets, in the range 0 to 65535. vpn-instance vpn-instance-name: Name of the VPN in which routes are to be queried. Description Use the ipv6 netstream export host command to set the destination IP address and port number for NetStream statistics packets, and specify the name of the VPN in which routes are to be queried. Use the undo ipv6 netstream export host command to restore the default. By default, no destination IP address and port number are configured in system view and the IP address and port number in aggregation view are those configured in system view. Note that: If NetStream aggregation is not enabled, the destination IP address
June 2, 2009 Page 68 of 156
Versio n numb er
Item
Description and port number of NetStream statistics packets cannot be displayed. Different destination hosts can be configured in different aggregation views. If no destination host is configured in aggregation view, the configuration in system view is adopted. You can configure up to four different destination hosts, including hosts in different VPNs, in one aggregation view. If you have configured the destination hosts with the same IP addresses but different UDP port numbers, the latest configuration takes effect. If you configure different VPN names, you can configure destination hosts with the same IP address and UDP port number. Statistics packets for a single stream are sent to all destination hosts configured in system view. Aggregation statistics packets are sent to all destination hosts configured in the aggregation view corresponding to the aggregation type. Related commands: ipv6 netstream aggregation, ipv6 netstream export source. Examples # Configure the destination IP address and port number for NetStream statistics packet as 1.1.1.1 and 5000 respectively, and query routes in vpn0.
<Sysname> system-view [Sysname] ipv6 netstream export host 1.1.1.1 5000 vpn-instance vpn0
14.Syntax ipv6 netstream export source interface interface-type interface-number undo ipv6 netstream export source View System view, NetStream aggregation view Parameters interface-type interface-number: Specifies a source interface for NetStream statistics packets by its type and number. Description Use the ipv6 netstream export source interface command to configure the source interface for NetStream statistics packets. Use the undo ipv6 netstream export source command to remove the configured source interface. By default, the outbound interface is adopted as the source interface. Different source interfaces can be configured in different aggregation views. If no source interface is configured in aggregation view, the source interface configured in system view is used.
June 2, 2009 Page 69 of 156
Versio n numb er
Item
Description
Related commands: ipv6 netstream aggregation. Examples # Configure the source interface for IPv6 NetStream statistics packets as Ethernet 1/0.
<Sysname> system-view [Sysname] ipv6 netstream export source interface ethernet 1/0
15.Syntax ipv6 netstream export v9-template refresh-rate packet packets undo ipv6 netstream export v9-template refresh-rate packet View System view Parameters packets: Packet refresh rate of version 9 templates, in the unit of the number of reported packets, namely, the device sends a template every packets packets for template update by XLog. It is in the range 1 to 600 and defaults to 20. Description Use the ipv6 netstream export v9-template refresh-rate packet command to configure the packet refresh rate of version 9 templates. Use the undo ipv6 netstream export v9-template refresh-rate packet command to restore the default. By default, a version 9 template is sent every 20 packets. Due to its capacity limitation, XLog does not save all version 9 templates for ever; therefore, version 9 templates must be refreshed periodically. You can configure the packet refresh rate of version 9 templates to refresh them on time. Related commands: ipv6 netstream export v9-template refresh-rate time. Examples # Set the packet refresh rate for version 9 NetStream statistics packets to 100.
<Sysname> system-view [Sysname] ipv6 netstream export v9-template refresh-rate packet 100
16.Syntax ipv6 netstream export v9-template refresh-rate time minutes undo ipv6 netstream export v9-template refresh-rate time View System view Parameters
June 2, 2009 Page 70 of 156
Versio n numb er
Item
Description
minutes: Specifies the interval to send version 9 templates for IPv6 NetStream statistics packets, in minutes, namely, the device sends a template every minutes minutes for template update by XLog. It is in the range 1 to 3600, and defaults to 30. Description Use the ipv6 netstream export v9-template refresh-rate time command to configure the interval to send version 9 templates for NetStream statistics packets. Use the undo ipv6 netstream export version command to restore the default. By default, a version 9 template is sent every 30 minutes. Due to its capacity limitation, XLog does not save all version 9 templates for ever; therefore, version 9 templates must be refreshed periodically. You can configure the interval to send version 9 templates to refresh them on time. The device sends a version 9 template to Xlog as long as either of refresh rate for the time or for the packets of version 9 template is reached. Related commands: ipv6 netstream export v9-template refresh-rate packet. Examples # Set the interval to send version 9 templates to 60 minutes.
<Sysname> system-view [Sysname] ipv6 netstream export v9-template refresh-rate time 60
17.Syntax ipv6 netstream export version 9 [ origin-as | peer-as ] [ bgp-nexthop ] undo ipv6 netstream export version View System view Parameters origin-as: Sets the type of AS number recorded in IPv6 NetStream cache entries to origin. peer-as: Sets the type of AS number recorded in IPv6 NetStream cache entries to peer. bgp-nexthop: BGP next hops recorded in IPv6 NetStream cache. Description Use the ipv6 netstream export version 9 command to configure IPv6 NetStream statistics packets and the type of AS numbers and BPG next hop information to be recorded in IPv6 NetStream version 9 cache entries. Use the undo ipv6 netstream export version command to restore the default. By default, a single IPv6 stream, IPv6 aggregation statistics information,
June 2, 2009 Page 71 of 156
Versio n numb er
Item
Description and MPLS stream information with IPv6 options are sent in version 9 statistics packets, the AS option is peer-as and BGP next hop address is not recorded. Note that the AS numbers for the source and destination IPv6 addresses of a stream are recorded in the statistics information. And each IPv6 address corresponds with two AS numbers (origin and peer), the system records the AS numbers according to the AS option configured by users. Examples # Set the NetStream statistics packet version number to 9 and the AS option to origin-as.
<Sysname> system-view [Sysname] ipv6 netstream export version 9 origin-as
18.Syntax ipv6 netstream max-entry { max-entries | aging | disable-caching } undo ipv6 netstream max-entry View System view Parameters max-entries: IPv6 NetStream cache size. On a distributed device, this argument is effective on each board. aging: Forcibly ages out the entries when the number of entries in the cache reaches the upper limit. disable-caching: Disables creation of a new entry when the number of entries in the cache reaches the upper limit. Description Use the ipv6 netstream max-entry command to set the NetStream cache size, meaning maximum number of entries that the NetStream cache can accommodate, and configure whether to age out the entries or disable creation of a new entry when the number of entries in the cache reaches the upper limit. Use the undo ipv6 netstream max-entry command to restore the default. For a multi-CPU device, the command is used to set the cache size of a VCPU. Examples # Set the NetStream cache size to 5000.
<Sysname> system-view [Sysname] ipv6 netstream max-entry 5000
# Disable creation of a new entry when the number of entries in the cache reaches the upper limit.
<Sysname> system-view [Sysname] ipv6 netstream max-entry disable-caching
June 2, 2009
Page 72 of 156
Versio n numb er
Item
Description
19.Syntax ipv6 netstream timeout active minutes undo ipv6 netstream timeout active View System view Parameters minutes: Sets the length of the active aging timer for IPv6 NetStream cache entries, in minutes. It is in the range 1 to 60, and defaults to 30. Description Use the ipv6 netstream timeout active command to set the active aging timer for IPv6 NetStream cache entries. Use the undo ipv6 netstream timeout active command to restore the default. The default value is 30 minutes. Related commands: ipv6 netstream timeout inactive. You can configure the active aging timer and inactive aging timer at the same time. When either of them times out, the entry ages out. The time precision is 10 seconds. Examples # Set the active aging timer to 60 minutes.
<Sysname> system-view [Sysname] ipv6 netstream timeout active 60
20.Syntax ipv6 netstream timeout inactive seconds undo ipv6 netstream timeout inactive View System view Parameters seconds: Sets the length of the inactive aging timer for IPv6 NetStream cache entries, in seconds. It is in the range 10 to 600, and defaults to 30. Description Use the ipv6 netstream timeout inactive command to set the inactive aging timer for IPv6 NetStream cache entries. Use the undo ipv6 netstream timeout inactive command to restore the default. The default value is 30 seconds. Related commands: ipv6 netstream timeout active.
June 2, 2009 Page 73 of 156
Versio n numb er
Item
Description
You can configure the active aging timer and inactive aging timer at the same time. When either of them times out, the entry ages out. The time precision is 10 seconds. Examples # Set the inactive aging timer to 60 seconds.
<Sysname> system-view [Sysname] ipv6 netstream timeout inactive 60
21.Syntax reset ipv6 netstream statistics View User view Parameters None Description Use the reset ipv6 netstream statistics command to age and export all stream statistics to clear the IPv6 NetStream cache. The stream statistics are recounted when they age out. Note that when the system is clearing the NetStream cache, it prompts you that the operation may take several minutes, and the system does not perform NetStream statistics during this process. Examples # Age and export all stream statistics to clear the IPv6 NetStream cache.
<Sysname> reset ipv6 netstream statistics This process may take a few minutes. Netstream statistic function is disabled during this process.
22.Syntax ip netstream filter acl acl-number { inbound | outbound } undo ip netstream filter acl acl-number { inbound | outbound } View Interface view Parameters acl-number: ACL number, in the range 2000 to 3999. inbound: Enables NetStream filtering in the inbound direction. outbound: Enables NetStream filtering in the outbound direction. Description Use the ip netstream filter command to enable NetStream filtering based on specified ACL rules.
June 2, 2009 Page 74 of 156
Versio n numb er
Item
Description
Use the undo ip netstream filter to disable the function. If both NetStream sampling and filtering are enabled, NetStream filtering is performed first. By default, NetStream filtering is disabled. Examples # Perform NetStream filter in the outbound direction of interface Ethernet 1/0 based on ACL rule 2003.
<Sysname> system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] ip netstream filter acl 2003 outbound
23.Syntax ip netstream mpls [ label-positions label-position1 [ labelposition2 [ label-position3 ] ] ] [ no-ip-fields ] undo ip netstream mpls View System view Parameters label-positions: Specifies position of the labels to be counted. no-ip-fields: IP options are not counted. label-position1: Position of the first label to be counted, in the range 1 to 6. label-position2: Position of the second label to be counted, in the range 1 to 6. label-position3: Position of the third label to be counted, in the range 1 to 6. Description Use the ip netstream mpls command to count and export MPLS packets. By using the no-ip-fields keyword, you can set whether to carry IP options when exporting MPLS packets. If you do not provide any arguments, the first label is used and IP options are carried in MPLS packets. Use the undo ip netstream mpls command to disable counting and exporting of MPLS packets. By default, counting and exporting of MPLS packets are disabled. Note that this command not only enables IPv4 NetStream MPLS packet statistics, but also enables IPv6 NetStream MPLS packet statistics. Examples # Enable MPLS NetStream statistics, and export MPLS packets using the first label and without IP options.
<Sysname> system-view [Sysname] ip netstream mpls no-ip-fields
June 2, 2009
Page 75 of 156
Versio n numb er
Item
Description
24.Syntax ip netstream sampler sampler-name { inbound | outbound } undo ip netstream sampler sampler-name { inbound | outbound } View Interface view, system view Parameters sampler sampler-name: Sampler name, a string of up to 32 characters. inbound: Enables sampling in the inbound direction. outbound: Enables sampling in the outbound direction. Description Use the ip netstream sampler command to enable NetStream sampling. Use the undo ip netstream sampler command to disable NetStream sampling. NetStream sampling is disabled by default. Examples # Enable sampler abc for NetStream sampling in the inbound direction.
<Sysname> system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] ip netstream sampler abc inbound
25.Syntax nat dns-map domain domain-name protocol pro-type ip global-ip port global-port undo nat dns-map domain domain-name View System view Default Level 2: System level Parameters domain-name: Domain name of an internal server, which is a string containing no more than 255 case-insensitive characters. A domain name consists of several labels separated by dots (.). Each label has no more than 63 characters that must begin and end with letters or digits; besides, dashes (-) can be included. pro-type: Protocol type used by the internal server. global-ip: Public IP address used by the internal server to provide services to the external network. server-port: Port number used by the internal server to provide services to
June 2, 2009 Page 76 of 156
Versio n numb er
Item the external network. Description
Description
Use the nat dns-map command to map the domain name to the public network information of an internal server. Use the undo nat dns-map command to remove a DNS mapping. Currently, the device supports up to 16 DNS mappings. Related commands: display nat dns-map. Examples # A company provides WWW service to external users. The domain name of the internal server is www.server.com, and the public IP address is 202.112.0.1. Configure a DNS mapping, so that internal users can access the WWW server using its domain name.
<Sysname> system-view [Sysname] nat dns-map domain 202.112.0.1 port www www.server.com protocol tcp ip
26.Syntax display nat dns-map View Any view Parameters None Description Use the display nat dns-map command to dispaly NAT DNS mapping configuration information. Examples # Display NAT DNS mapping configuration information.
<Sysname> display nat dns-map NAT DNS mapping information: There are currently 2 NAT DNS mapping(s) Domain-name: www.server.com Global-IP : 202.113.16.117
Global-port: 80(www) Protocol : 6(TCP)
Domain-name: ftp.server.com Global-IP : 202.113.16.100
Global-port: 21(ftp) Protocol : 6(TCP)
27.Syntax
June 2, 2009 Page 77 of 156
Versio n numb er
Item
Description
interface net-stream interface-number View System view Default Level 2: System level Parameters interface-number: Specifies a NetStream interface by its number. Description Use the interface net-stream command to enter specified NetStream interface view. Examples # Enter specified NetStream interface view.
<Sysname> system-view [Sysname] interface net-stream 1/0 [Sysname-Net-Stream1/0]
28.Syntax ip netstream aggregation advanced undo ip netstream aggregation advanced View System view Default Level 3: Manage level Parameters None Description Use the ip netstream aggregation advanced command to enable hardware NetStream aggregation. Use the undo ip netstream aggregation advanced command to disable hardware NetStream aggregation. By default, hardware NetStream aggregation is disabled. Note that: If you enable hardware NetStream aggregation, the system performs the aggregation based on whether you have configured the export host, and the aggregation type. After hardware NetStream aggregation is enabled, the aged hardware aggregation entries are recorded in the normal stream entry table and then exported.
June 2, 2009 Page 78 of 156
Versio n numb er
Item
Description
Related commands: ip netstream export host, ip netstream aggregation Examples # Enable hardware NetStream aggregation.
<Sysname> system-view [Sysname] ip netstream aggregation advanced
29.Syntax nat link-down reset-session enable undo nat link-down reset-session enable View System view Default Level 2: System level Parameters None Description Use the nat link-down reset-session enable command to enable aging out NAT entries upon master link failure. Use the undo nat link-down reset-session enable command to restore the default. By default, this feature is disabled. Examples # Enable aging out NAT entries upon master link failure.
<Sysname> system-view [Sysname] nat link-down reset-session enable
30.Syntax ip netstream export rate limit undo ip netstream export rate View System view Default Level 3: Manage level Parameters limit: Maximum rate for exporting NetStream statistics, in the unit of the maximum number of packets per second, in the range 1 to 1000. The value range depends on the device model.
June 2, 2009 Page 79 of 156
Versio n numb er
Item
Description
Description Use the ip netstream export rate command to enable the packet export limitation, and set the maximum rate for exporting NetStream statistics. Use the undo ip netstream export rate command to disable the packet export limitation. By default, the export rate of NetStream statistics is not limited. Note that the export rate on each board is different. As the aging timer is different, the configuration may not be very accurate on a multi-CPU device. Examples # Allow 10 packets at most to be exported per second.
<Sysname> system-view [Sysname] ip netstream export rate 10
Modified Commands Deleted Commands
None.
Syntax:
ip netstream binding interface interface-type interface-number undo ip netstream binding interface interface-type interface-number The model :IP Info: Delete these two commads.
CMW5 20B1608
New Commands
1.Syntax: authentication-mode { none | password | scheme } View: IP terminal access service view Parameter: none: No authentication. password: Password authentication. scheme: AAA scheme authentication. Description: Use the authentication-mode command to set the IP terminal access authentication mode for the service. The default mode is none, that is, no IP terminal access authentication is performed. Note that the setting can be configured when the service is running but takes effect at the next login. Related commands: set authentication password. Example: # Set the IP terminal access password authentication mode for the
June 2, 2009
Page 80 of 156
Versio n numb er
Item cunkuan service. <Sysname> system-view
Description
[Sysname] ipta service cunkuan [Sysname-ipta-service-cunkuan] authentication-mode password # Set the IP terminal access AAA scheme authentication mode for the cunkuan service. <Sysname> system-view [Sysname] ipta service cunkuan [Sysname-ipta-service-cunkuan] authentication-mode scheme 2.Syntax: bind vpn-instance vpn-name undo bind vpn-instance View: Terminal view Parameter: vpn-name: Name of a VPN instance, a string of 1 to 31 characters. Description: Use the bind vpn-instance command to bind a VPN instance to the terminal. After that, the terminal can access servers in the VPN. Use the undo bind vpn-instance command to remove the binding. No VPN is bound to the terminal by default. Example: # Bind Terminal 1 to VPN 1. <Sysname> system-view [Sysname] ipta terminal 1
[Sysname-terminal-1] bind vpn-instance vpn1
3.Syntax: display ipta { status | statistics } { service [ service-name ] | terminal [ ttyid [ service service-name ] ] } View: Any view Parameter: status: Displays IP terminal access status information. statistics: Displays IP terminal access statistics information. service [ service-name ]: Displays IP terminal access information about the service. The service name is a string of 1 to 15 case-insensitive characters, and can include spaces. terminal [ ttyid [ service service-name ] ]: Displays IP terminal access information about the terminal. ttyid is the number of the terminal, in the
June 2, 2009 Page 81 of 156
Versio n numb er
Item
Description range 0 to 255. The keyword and argument combination terminal ttyid service service-name displays IP terminal access information about the specified service on the specified terminal. Description: Use the display ipta command to display IP terminal access information. Example: # Displays IP terminal access status information about the cunkuan service. <Sysname> display ipta status service cunkuan Service name: cunkuan listen port: 2049 First server IP: 192.168.0.24 Port: 9011 Status: ACTIVE status: INACTIVE
Second server IP: 192.168.0.25 Port: 9011 Third server IP: 0.0.0.0 Port: 0
status: INACTIVE
Idle-timeout disconnect: 300 second(s) Idle-timeout lock: 100 second(s) Encrytion algorithm: aes Source ip: 6.6.6.6 Athentication mode: Scheme TTY-ID IP:Port Server IP:Port Status WaitingPwd
41 192.168.0.168:6058 192.168.0.24:9011
42 192.168.0.12:8524192.168.0.24:9011 WaitingUserName 43 192.168.0.46:8462 192.168.0.24:9011 Normal
56 192.168.0.58:7452 192.168.0.24:9011 MatchingHotKey 4.Syntax: encryption algorithm { aes | quick } undo encryption algorithm View: IP terminal access service view Parameter: aes: AES 128-bit encryption algorithm. quick: Quick encryption algorithm, a proprietary algorithm of Huawei. Description: Use the encryption algorithm command to enable data encryption using the specified encryption algorithm. Use the undo encryption algorithm to restore the default.
June 2, 2009
Page 82 of 156
Versio n numb er
Item
Description
By default, data encryption is not enabled. Note that the new setting takes effect only for connections established after it is configured. Example: # Specify the AES encryption algorithm for the cunkuan service. <Sysname> system-view [Sysname] ipta service cunkuan [Sysname-ipta-service-cunkuan] encryption algorithm aes 5.Syntax: ip ip-address [ mac mac-address ] undo { ip | mac } View: Terminal view Parameter: ip-address: IP address of the terminal, in dotted decimal format. mac mac-address: MAC address of the terminal, in the H-H-H format. Description: Use the ip command to specify the terminals IP-to-MAC binding. Use the undo ip command to restore the default. Use the undo mac command to remove the binding. Note that: To modify the IP address of a binding, use the ip ip-address command. To modify the MAC address of a binding, use the ip ip-address mac macaddress command. After a binding is specified for a terminal, the terminal must use the IP and MAC addresses to login successfully. If the access router is not directly connected to terminals, packets from terminals do not carry their own MAC addresses, and therefore, you dont need to bind MAC addresses for them. Example: # Bind IP address 1.1.1.2 to MAC address 00e0-fc04-1234 for Terminal 1. <Sysname> system-view [Sysname] ipta terminal 1 [Sysname-ipta-terminal-1] ip 1.1.1.2 mac 00e0-fc04-1234 6.Syntax: ipta bind { mac-address interface interface-type interface-number | string string }
June 2, 2009
Page 83 of 156
Versio n numb er
Item
Description
undo ipta bind View: System view Parameter: mac-address interface interface-type interface-number: Specifies the interfaces MAC address to be used for authentication. string string: Specifies a string of 1 to 30 characters to be used for authentication. Description: Use the ipta bind command to specify the MAC address or string for authentication with the server. Use the undo ipta bind command to remove the configuration. By default, no authentication is performed between the access router and server. During authentication, the router sends the specified MAC address or string to the server, which compares it with that locally configured. If they match, the router passes the authentication. If not, the server disconnect from the router. Example: # Specify the MAC address of Ethernet 0/0 for authentication. <Sysname> system-view [Sysname] ipta bind mac-address interface ethernet 0/0 # Specify the string abc for authentication. <Sysname> system-view [Sysname] ipta bind string abc 7. Syntax: ipta bind vpn-instance vpn-name terminal ttyid-list undo ipta bind vpn-instance terminal ttyid-list View: System view Parameters: vpn-name: Name of a VPN instance, a string of 1 to 31 characters. ttyid-list: List of terminals. You can specify up to 10 terminal lists. A ttyid is a terminal number in the range 0 to 255. Description: Use the ipta bind vpn-instance command to bind the specified terminals to the specified VPN. After that, the specified terminals can access servers in the VPN. Use the undo ipta bind vpn-instance command to remove the binding.
June 2, 2009 Page 84 of 156
Versio n numb er
Item
Description
By default, no terminal-VPN binding is configured. Examples: # Bind terminals 1 through 20, 25, and 30 through 50 to VPN 1 <Sysname> system-view [Sysname] ipta bind vpn-instance vpn1 terminal 1 to 20 25 30 to 50 8. Syntax: ipta disconnect { all | service service-name | terminal ttyid [ service service-name ] } View: System view Parameters: all: Disconnects all IP terminal access TCP connections. service service-name: Disconnects the IP terminal access TCP connections of the specified service. The service name is a string of 1 to 15 case-insensitive characters and can include spaces. terminal ttyid [ service service-name ]: Disconnects the IP terminal access TCP connections of the specified terminal. A ttyid is a terminal number in the range 0 to 255. The keyword and argument combination terminal ttyid service service-name disconnects the IP terminal access TCP connections of the specified service on the specified terminal. Description: Use the ipta disconnect command to manually disconnect IP terminal access TCP connections between terminals, the access router and the server. Examples: # Disconnect all IP terminal access TCP connections. <Sysname> system-view [Sysname] ipta disconnect all # Disconnect the IP terminal access TCP connections of the cunkuan service.. <Sysname> system-view [Sysname] ipta disconnect service cunkuan # Disconnect the IP terminal access TCP connections of Terminal 10. <Sysname> system-view [Sysname] ipta disconnect terminal 10 # Disconnect the IP terminal access TCP connections of the cunkuan service of Terminal 10. <Sysname> system-view
June 2, 2009 Page 85 of 156
Versio n numb er
Item
Description
[Sysname] ipta disconnect terminal 10 service cunkuan 9. Syntax: ipta lock-key ascii-code&<1-3> undo ipta lock-key View: System view Parameters: ascii-code&<1-3>: ASCII value of the terminal lock hotkey, in the range 0 to 255. You can specify up to three terminal lock hotkeys. Description: Use the ipta lock-key command to specify IP terminal lock hotkey(s). Use the undo ipta lock-key command to remove IP terminal lock hotkey(s) No IP terminal lock hotkey is specified by default. Note that: The specified IP terminal lock hotkeys cannot be identical to other hotkeys on the access router and the server to avoid conflicts. For example, hotkeys 17 and 19 are flow control hotkeys of Linux. The specified IP terminal lock hotkeys are not effective for terminals using the service that has the none authentication mode specified,. Related commands: authentication-mode. Examples: # Configure lock hotkey 27 for all terminals. <Sysname> system-view [Sysname] ipta lock-key 27 10. Syntax: ipta server enable undo ipta server enable View:System view Parameters: None Description: Use the ipta server enable command to enable IP terminal access. Use the undo ipta server enable command to disable IP terminal access. IP terminal access is disabled by default. Examples:
June 2, 2009 Page 86 of 156
Versio n numb er
Item
Description
# Enable IP terminal access. <Sysname> system-view [Sysname] ipta server enable 11. Syntax: ipta service service-name undo ipta service service-name View:System view Parameters: service-name : Service name, which is a string of 1 to 15 case-insensitive characters can include spaces. Description: Use the ipta service command to create a IP terminal access service and enter its view, or to enter IP terminal access service view if the service has been created. Use the undo ipta service command to remove the specified service and its configurations. Examples: # Create the service named cunkuan. <Sysname> system-view [Sysname] ipta service cunkuan [Sysname-ipta-service-cunkuan] 12. Syntax: ipta terminal ttyid undo ipta terminal { ttyid | all } View:System view Parameters: ttyid: Terminal number, in the range 0 to 255. all: All terminals. Description: Use the ipta terminal command to create an IP terminal and enter its view, or enter its view if the terminal has been created. Use the undo ipta terminal command to remove a terminal and its configuration, or all terminals and their configurations. Examples: # Create Terminal 1. <Sysname> system-view
June 2, 2009 Page 87 of 156
Versio n numb er
Item
Description
[Sysname] ipta terminal 1 [Sysname-ipta-terminal-1] 13. Syntax: listen port port-number undo listen port View:IP terminal access service view Parameters: port-number: Listen port number, in the range 1024 to 50000. Description: Use the listen port command to specify the listen port of the IP terminal access service. The specified port is used by the service to receive connection requests from terminals. Use the undo listen port command to remove the listen port of the service. No listen port is specified for an IP terminal access service. Note that the setting is effective for connections established after it is configured. Examples: # Configure listen port 3000 for the cunkuan service. <Sysname> system-view [Sysname] ipta service cunkuan [Sysname-ipta-service-cunkuan]listen port 3000 14. Syntax: reset ipta statistics { service [ service-name ] | terminal ttyid [ service service-name ] } View:User view Parameters: service [ service-name ]: Clears the IP terminal access statistics of the specified service. The service name is a string of 1 to 15 case-insensitive characters and can include spaces. ttyid: Terminal number, in the range 0 to 255. terminal ttyid [ service service-name ]: Clears the IP terminal access statistics of the specified terminal. A ttyid is a terminal number in the range 0 to 255. The keyword and argument combination terminal ttyid service service-name clears the IP terminal access statistics of the specified service on the specified terminal. Description: Use the reset ipta statistics command to clear IP terminal access statistics.
June 2, 2009 Page 88 of 156
Versio n numb er
Item
Description
Examples: # Clear the IP terminal access statistics of Terminal 1. <Sysname> reset ipta statistics terminal 1 # Clear the IP terminal access statistics of service cunkuan. <Sysname> reset ipta statistics service cunkuan 15. Syntax: server ip ip-address port port-number [ priority priority-level ] undo server priority priority-level View:IP terminal access service view Parameters: ip ip-address: IP address of the server, in dotted decimal notation. port port-number: Port number of the server, in the range 1024 to 50000. priority priority-level: Priority of the server, in the range 0 to 2. A smaller value represents a higher priority. Description: Use the server ip command to specify the IP address, port number and priority of the server providing the service. Use the undo server ip command to remove the configuration of the server with the specified priority. Note that a server can have only one priority configured. Examples # Configure the server with the highest priority for the cunkuan service <Sysname> system-view [Sysname] ipta service cunkuan [Sysname-ipta-service-cunkuan] server ip 1.1.1.2 port 6000 priority 0 16. Syntax: set authentication password { cipher | simple } password undo set authentication password View:IP terminal access service view Parameters: cipher: Configures the password to be displayed in cipher text. simple: Configures the password to be displayed in plain text. password: A case-sensitive character string. If the simple keyword is specified, the password is a string of 1 to 16 characters in plain text.
June 2, 2009 Page 89 of 156
Versio n numb er
Item
Description
If the cipher keyword is specified, the password can be a string of 1 to 16 characters in plain text or a string of 24 characters in cipher text. For example, the plain text password 1234567 corresponds to the cipher text password_(TT8F]Y\5SQ=^Q`MAF4<1!!. Description: Use the set authentication password command to set the authentication password for terminals to log into the service. Use the undo set authentication password command to remove the setting. By default, no authentication password is configured. Note that you can configure the password no matter when the service is running or not. Related commands: authentication-mode. Examples: # Configure 123 as the password for terminals to log into the cunkuan service, and specify the password to be displayed in plain text. <Sysname> system-view [Sysname] ipta service cunkuan [Sysname-ipta-service-cunkuan] set authentication password simple 123 17. Syntax source ip ip-address undo source ip View:IP terminal access service view Parameters: ip-address: Source IP address bound to the service, in dotted decimal notation. Description: Use the source ip command to bind the source IP address to the service. Use the undo source ip command to restore the default. By default, no source IP address is bound to the service. The IP address of the outbound interface is used as the source IP address of TCP connections. You are recommended to specify the IP address of a loopback or dialer interface as the source IP address of TCP connections, and you need to configure a route to the IP address on the server (FEP). Examples: # Bind a source IP address to the cunkuan service. <Sysname> system-view [Sysname] interface loopback 1
June 2, 2009 Page 90 of 156
Versio n numb er
Item
Description
[Sysname-LoopBack1] ip address 1.1.1.2 32 [Sysname-LoopBack1] quit [Sysname] ipta service cunkuan [Sysname-ipta-service-cunkuan] source ip 1.1.1.2 18. Syntax: tcp keepalive time counter undo tcp keepalive View:IP terminal access service view Parameters: time: Interval for sending TCP keepalives, in the range 10 to 7200 seconds. counter: Times for sending TCP keepalives, in the range 1 to 100. Description: Use the tcp keepalive command to configure parameters for sending TCP keepalives. Use the undo tcp keepalive command to restore the default. By default, the interval for sending keepalives is 300 seconds, and the number of keepalive sending times is 3. Keepalives are used to detect the links between the terminal, access router and FEP. Keepalive time = Interval for sending keepalives Times for sending keepalives Note that the keepalive parameters take effect for connections established after they are configured. Examples: # Configure the keepalive sending interval as 1800 seconds, and the keepalive sending times as 2. <Sysname> system-view [Sysname] ipta service cunkuan [Sysname-ipta-service-cunkuan] tcp keepalive 1800 2 19. Syntax tcp recvbuf-size recvsize undo tcp recvbuf-size View:IP terminal access service view Parameters: recvsize: Size of the TCP receive buffer, in the range of 512 to 16384 bytes.
June 2, 2009 Page 91 of 156
Versio n numb er
Item
Description
Description: Use the tcp recvbuf-size command to configure the size of the TCP receive buffer. Use the undo tcp recvbuf-size command to restore the default. By default, the TCP receive buffer size is 2048 bytes. Examples: # Configure the size of the TCP receive buffer size to 512 bytes. <Sysname> system-view [Sysname] ipta service cunkuan [Sysname-ipta-service-cunkuan] tcp recvbuf-size 512 20. Syntax tcp sendbuf-size sendsize undo tcp sendbuf-size View:IP terminal access service view Parameters: sendsize: Size of the TCP send buffer, in the range of 512 to 16384 bytes. Description: Use the tcp sendbuf-size command to configure the size of the TCP send buffer. Use the undo tcp sendbuf-size command to restore the default. By default, the TCP send buffer size is 2048 bytes. Examples: # Configure the size of the TCP send buffer size as 512 bytes. <Sysname> system-view [Sysname] ipta service cunkuan [Sysname-ipta-service-cunkuan] tcp sendbuf-size 512 21. Syntax: telnet negotiation enable undo telnet negotiation enable View:Terminal view Parameters: None Description: Use the telnet negotiation enable command to enable telnet parameters negotiation function with the terminal.
June 2, 2009 Page 92 of 156
Versio n numb er
Item
Description
Use the undo telnet negotiation enable command to restore the default. By default, the telnet parameters negotiation function with the terminal is disabled. Examples: # Enable telnet parameters negotiation with terminal 1. <Sysname> system-view [Sysname] ipta terminal 1 [Sysname-ipta-terminal-1] telnet negotiation enable 22. Syntax terminal ttyid [ to ttyid ] undo terminal { ttyid [ to ttyid ] | all } View:Service view Parameters: ttyid [ to ttyid ]: A ttyid refers to a terminal number, in the range of 0 to 255. ttyid to ttyid specifies a range of terminal numbers. all: Specifies all terminals. Description: Use the terminal command to enable the terminal(s) to use the service. Use the undo terminal command to disable the specified terminal(s) from using the service. Examples: # Enable terminal 1 to use the cunkuan service. <Sysname> system-view [Sysname] ipta service cunkuan [Sysname-ipta-service-cunkuan] terminal 1 23. Syntax timer idle-timeout seconds { disconnect | lock } undo timer idle-timeout { disconnect | lock } View:IP terminal access service view Parameters: seconds: Timeout time, in the range of 0 to 7200 seconds. If the value is set to 0, the corresponding link lock or link disconnection function is disabled. disconnect: Sets the link disconnection timer. lock: Sets the link lock timer. Description:
June 2, 2009 Page 93 of 156
Versio n numb er
Item
Description
Use the timer idle-timeout command to set the link disconnection timer or link lock timer. Use the undo timer idle-timeout command to restore the default. By default, the link disconnection timer and link lock timer are both 600 seconds. If the link lock timer expires and the authentication mode on the router is set to scheme or password, a new authentication interface will replace the service interface on the corresponding terminal; if the link lock timer expires and the authentication mode on the router is set to none, the service interface on the terminal will not be changed. If the link disconnection timer expires, the corresponding link is disconnected. The link lock and link disconnection timers can be set separately, and they do not affect each other. The value of the link lock timer should be smaller than the link disconnection timer; otherwise, a link may be disconnected even if the link lock timer does not expire. Examples: # Set the link lock timer of the cunkuan service to 60 seconds. <Sysname> system-view [Sysname] ipta service cunkuan [Sysname-ipta-service-cunkuan] timer idle-timeout 60 lock 24. Syntax transform enter { cr | crlf } undo transform enter View:Terminal view Parameters: cr: Takes both CR (carriage return ASCII code 0d) and CRLF (new-line ASCII code 0d0a or 0d00) as CR (0d). crlf: Takes both CR and CRLF as CRLF (0d0a). Description: Use the transform enter command to configure the processing approach for CR and CRLF. Use the undo transform enter command to restore the default. By default, the system does not transform CR and CRLF. To enable different terminals to recognize the carriage return and new-line characters of the FEP, the device needs to transform them into a common form. This function only applies to data packets from the FEP.
June 2, 2009 Page 94 of 156
Versio n numb er
Item
Description
Examples: # Transform both CR and CRLF to CR. <Sysname> system-view [Sysname] ipta terminal 1 [Sysname-ipta-terminal-1] transform enter cr # Transform both CR and CRLF to CRLF. <Sysname> system-view [Sysname] ipta terminal 1 [Sysname-ipta-terminal-1] transform enter crlf 25.Syntax: privacy { asserted | preferred } undo privacy View: SIP client view Parameter: asserted: Adds the P-Asserted-Identity header field. When the PAsserted-Identity header field is added, the Privacy header field will be added. The Privacy header field contains the caller identity presentation and screening information, while the P-Asserted-Identity header field contains the caller identity. preferred: Adds the P-Preferred-Identity header field. When the PPreferred-Identity header field is added, the Privacy header field will be added. The Privacy header field contains the caller identity presentation and screening information, while the P-Preferred-Identity header field contains the caller identity. Description: Use the privacy command to add the P-Preferred-Identity or P-AssertedIdentity header field. Use the undo privacy command to remove the configuration. By default, neither the P-Preferred-Identity header field nor the PAsserted-Identity header field is added. Example: # Add the P-Asserted-Identity header field. <Sysname> system-view [Sysname] voice-setup [Sysname-voice] sip [Sysname-voice-sip] privacy asserted 26.Syntax: remote-party-id
June 2, 2009 Page 95 of 156
Versio n numb er
Item
Description
undo remote-party-id View: SIP client view Parameter: None. Description: Use the remote-party-id command to add the Remote-Party-ID header field. Use the remote-party-id command to remove the configuration. By default, the Remote-Party-ID is not added. Example: # Add the Remote-Party-ID header field. <Sysname> system-view [Sysname] voice-setup [Sysname-voice] sip [Sysname-voice-sip] remote-party-id 27.Syntax: ssm-mapping group-address { mask | mask-length } source-address undo ssm-mapping { group-address { mask | mask-length } sourceaddress | all } View: Public instance IGMP view, VPN instance IGMP view Parameter: group-address: Specifies a multicast group by its IP address, in the range of 224.0.0.0 to 239.255.255.255. mask: Subnet mask of the multicast group address. mask-length: Subnet mask length of the multicast group address, in the range of 4 to 32. source-address: Specifies a multicast source by its IP address. all: Removes all IGMP SSM mappings. Description: Use the ssm-mapping command to configure an IGMP SSM mapping. Use the undo ssm-mapping command to remove one or all IGMP SSM mappings. By default, no IGMP SSM mappings are configured. Related commands: igmp ssm-mapping enable, display igmp ssmmapping. Example: # Configure an IGMP SSM mapping in the public instance for multicast
June 2, 2009 Page 96 of 156
Versio n numb er
Item
Description group 225.1.1.1/24 and multicast source 125.1.1.1. <Sysname> system-view [Sysname] igmp [Sysname-igmp] ssm-mapping 225.1.1.1 24 125.1.1.1
28.Syntax: igmp ssm-mapping enable undo igmp ssm-mapping enable View: Interface view/Default Level Parameters: None. Description: Use the igmp ssm-mapping enable command to enable the IGMP SSM mapping feature on the current interface. Use the undo igmp ssm-mapping enable command to disable the IGMP SSM mapping feature on the current interface. By default, the IGMP SSM mapping feature is disabled on all interfaces. Examples: # Enable the IGMP SSM mapping feature on Ethernet 1/0. <Sysname> system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] igmp ssm-mapping enable 29. Syntax: display igmp [ vpn-instance vpn-instance-name | all-instance ] ssmmapping group-address
View: Any view Parameters:

vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. A VPN instance name must not contain any space. all-instance: Specifies all VPN instances. group-address: Specifies a multicast group by its IP address, in the range of 224.0.1.0 to 239.255.255.255.
Description:
Use the display igmp ssm-mapping command to view the configured IGMP SSM mappings for the specified multicast group. Related commands: ssm-mapping.
June 2, 2009 Page 97 of 156
Versio n numb er
Item
Description
Examples:
# View the IGMP SSM mappings for multicast group 232.1.1.1 in the public instance. <Sysname> display igmp ssm-mapping 232.1.1.1 VPN-Instance: public net Group: 232.1.1.1 Source list: 1.2.3.4 5.5.5.5 10.1.1.1 100.1.1.10 30. Syntax display igmp [ vpn-instance vpn-instance-name | all-instance ] ssmmapping group [ group-address | interface interface-type interfacenumber ] [ verbose ]
View: Any view Parameters

vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. A VPN instance name must not contain any space. all-instance: Specifies all VPN instances. group-address: Specifies a multicast group by its IP address, in the range of 224.0.1.0 to 239.255.255.255. interface-type interface-number: Specifies an interface by its type and number. verbose: Displays the detailed multicast group information created based on the configured IGMP SSM mappings.
Description:
Use the display igmp ssm-mapping group command to view the multicast group information created based on the configured IGMP SSM mappings. Note that: If you do not specify a multicast group, this command will display the information of all multicast groups created based on the configured IGMP SSM mappings. If you do not specify an interface, this command will display the multicast group information created based on the configured IGMP SSM mappings on all the interfaces.
Examples
# View the detailed information of multicast group 225.1.1.1 created based
June 2, 2009 Page 98 of 156
Versio n numb er
Item
Description on the configured IGMP SSM mappings in the public instance. <Sysname> display igmp ssm-mapping group 225.1.1.1 verbose Interface group report information of VPN-Instance: public net Ethernet1/0(10.10.10.10): Total 1 IGMP SSM-mapping Group reported Group: 225.1.1.1 Uptime: 00:00:31 Expires: off Last reporter: 1.1.1.1 Version1-host-present-timer-expiry: off Source list(Total 1 source): Source: 1.1.1.1 Uptime: 00:00:31 Expires: 00:01:39 Last-member-query-counter: 0 Last-member-query-timer-expiry: off
Modified Commands
Original command: mpls te path explicit-path pathname undo mpls te path Modified command: mpls te path { dynamic | explicit-path pathname } preference value undo mpls te path { dynamic | explicit-path pathname } Module of the command: MPLS TE Description:Add dynamic and preference value to uses the path that is dynamically calculated and Specifies the preference of the path. Changes in default values:None.
Deleted Commands
Syntax: license register serial-number Module of the command: Equipment management. Description: Delete license register function of MSR 30-11. Syntax: display license Module of the command: Equipment management.
June 2, 2009
Page 99 of 156
Versio n numb er
Item
Description
Description: Delete license register function of MSR 30-11. CMW5 20B1606 New Commands Syntax: lldp compliance cdp undo lldp compliance cdp View: System view Parameters: None Description: Use the lldp compliance cdp command to enable global CDP compatibility. Use the undo lldp compliance cdp command to restore the default. By default, global CDP compatibility is disabled. Note that, as the maximum TTL allowed by CDP is 255 seconds, your TTL configuration, that is, the product of the TTL multiplier and the LLDPDU sending interval, must be less than 255 seconds for CDP-compatible LLDP to work properly with Cisco IP phones. Examples: # Enable LLDP to be compatible with CDP globally. <Sysname> system-view [Sysname] lldp compliance cdp Syntax: lldp compliance admin-status cdp { txrx | disable} View: Ethernet interface view, port group view Parameters: disable: Specifies the disable mode, where CDP-compatible LLDP neither receives nor transmits CDP packets. txrx: Specifies the TxRx mode, where CDP-compatible LLDP can send and receive CDP packets. Description: Use the lldp compliance admin-status cdp command to configure the operation mode of CDP-compatible LLDP on a port or port group. By default, CDP-compatible LLDP operates in disable mode. To have your device work with Cisco IP phones, you must enable CDPcompatible LLDP globally and then configure CDP-compatible LLDP to work in TxRx mode on the specified port(s). Examples: # Configure CDP-compatible LLDP to operate in TxRx mode on Ethernet 1/0.
June 2, 2009 Page 100 of 156
Versio n numb er
Item
Description
<Sysname> system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] lldp compliance admin-status cdp txrx Syntax: acsei-client enable undo acsei-client enable View: Interface view Parameters: None Description: Use the acsei-client enable command to enable ACSEI client. Use the undo acsei-client enable command to disable ACSEI client. By default, ACSEI client is disabled. A system can run only one ACSEI client, that is, ACSEI client can be enabled on only one interface at a time. However, ACSEI client on the Comware platform and that on the OAP module can run simultaneously. Examples: # Enable ACSEI client on interface GigabitEthernet 1/0. <Sysname> system-view [Sysname] interface gigabitethernet 1/0 [Sysname-GigabitEthernet1/0] acsei-client enable Syntax: display acsei-client information View: Any view Parameters: None Description: Use the display acsei-client information command to display information about ACSEI client. Examples: # Display information about the current ACSEI client. <Sysname> display acsei-client information Client Description: SecBlade II Hardware: A.0 System Software: COMWAREV500R002B38D001 Application Software: V300R001B01D006 CPU: RMI XLR732 1000MHz PCB Version: A.0
June 2, 2009 Page 101 of 156
Versio n numb er
Item
Description
CPLD Version: 1.0 Bootrom Version: Basic BootRom Version:1.02,Extend BootRom Version:1.01 CF card: 256M Bytes Compact Flash Storage Device Memory: 1024M Bytes DDR2 SDRAM Memory Harddisk: Syntax: display acsei-client status View: Any view Parameters: None Description: Use the display acsei-client status command to display the current state of ACSEI client. Examples: # Display the current state of ACSEI client. <Sysname> display acsei-client status Client ID: 1 Status: Open Slot Number: 1 Interface: GigabitEthernet 1/1 Deleted Commands Modified Commands CMW5 20R1508 P02 New Commands None. None. 1. Syntax: mib-style [ new | compatible ] View: System view Parameters: new: Specify the MIB style as H3C brand new, that is, both the device sysOID and private MIB are under the enterprise ID of H3C (25506). compatible: Specify the MIB style as H3C compatible, that is, the device sysOID is under the enterprise ID of H3C (25506), and the private MIB is under the enterprise ID 2011. Description: Use the mib-style command to specify the MIB style of a device, including H3C brand new and H3C compatible.
June 2, 2009 Page 102 of 156
Versio n numb er
Item
Description
Examples: You obtain a device ID from the sysObjectID node, and find that the device is an H3C device. However, the device panel cannot be recognized when you use H3C Quidview NMS to manage the device by the device ID, but the MIB node can be obtained by the device ID when you use the MIB browser. To manage the device without the need of upgrading the NMS, you can use this command to switch the device MIB style. <Sysname> system-view [Sysname]mib-style compatible After the setting, restart the device. Use the MIB browser to obtain enterprise ID 2011. Then use H3C Quidview NMS to manage the device. 2. Syntax: display mib-style View: Any view Parameters: None Description: Use the display mib-style command to display the device MIB style. Examples You obtain a device ID from the sysObjectID node, and find that the device is an H3C device. You want to know the current MIB style of the device or the MIB style at next startup of the device. <Sysname> system-view [Sysname]display mib-style Current MIB style: new Next reboot MIB style: new # Use the mib-style command to set the MIB style to compatible. [Sysname]mib-style compatible # Display the device MIB style <Sysname> system-view [Sysname]display mib-style Current MIB style: new Next reboot MIB style: compatible You are recommended to restart the device right after you change the MIB style to make the setting effective immediately.
June 2, 2009 Page 103 of 156
Versio n numb er
Item
Description
You can select appropriate NMS according to the MIB style. Deleted Commands Modified Commands CMW5 20R1508 New Commands Deleted Commands Modified Commands None. None. See <CMW520-R1508 Commands Changes.xls >
MIB Updates
Table 13 MIB updates Version number CMW520 -R1719 Item MIB file Module H3C-ENTITYEXT-MIB IF-MIB H3C-ENTITYEXT-MIB H3C-MPM-MIB HUAWEILswIGSP-MIB H3C-USER-MIB H3C-VOICEDIAL-CONTROLMIB H3C-DOT11CFG-MIB HUAWEI8021PAE-MIB Description Add h3cProcessTable, h3cEntityInsert and h3cEntityRemove Add ifTestTable Add h3cEntityExtSFPPhony Add H3C-MPM-MIB Add hwIgmpSnoopingVlanStatusTable and hwIgmpSnoopingStatsObjects Add huawei-splat-igsp.mib and h3cUserGroup Add H3C-VOICE-DIAL-CONTROLMIB Add h3cDot11PortSecurityTable Add hwdot1xAuthMethod, hwdot1xpaeportMcastTrigStatus and hwdot1xpaeportHandshakeStatus Add hwIgmpSnoopingNonFloodingStatu s
Page 104 of 156
New
h3c-entity-ext.mib rfc2233-if.mib h3c-entity-ext.mib h3c-mpm.mib huawei-splatigsp.mib h3c-user.mib h3c-voice-dialcontrol.mib Hh3c-dot11-cfg.mib
huawei-8021xext.mib
huawei-splatigsp.mib
HUAWEILswIGSP-MIB
June 2, 2009
Version number
Item
MIB file h3c-ui-man.mib h3c-sys-man.mib h3c-net-man.mib h3c-dsp.mib rfc2790-hostresources.mib hh3c-voice-callhistory.mib rfc4133-entity.mib hh3c-ipv6address.mib rfc4444-isis.mib
Module H3C-UI-MANMIB H3C-SYS-MANMIB H3C-NET-MANMIB H3C-DSP-MIB HOSTRESOURCE-MIB H3C-VOICECALL-HISTORYMIB ENTITY-MIB H3C-IPV6ADDRESS-MIB ISIS-MIB H3C-CBQOS2MIB
Description Add h3cUIScalarObjects Add h3cSysCurBtmFileName and h3cSysCurUpdateBtmFileName Add H3C-NET-MAN-MIB Add H3C-DSP-MIB Add HOST-RESOURCE-MIB Add H3C-VOICE-CALL-HISTORYMIB Changed ENTITY-MIB from rfc2737 to rfc4133 Modified description of h3cIpv6AddrReadSourceType Modified description of isisSysLevelOrigLSPBuffSize Modified description of h3cCBQoSIfApplyPolicyEnableDyn amic Modified description of isdnBasicRateIfType and isdnBasicRateIfMode Modify h3cDomainMaxAccessNum Modified the descrition of h3cVoiceVlanEnabledId and h3cVoiceVlanPortEnableList Modified description of eventDescription Modified DISMAN-PING-MIB Modified H3C-NQA-MIB Modified HUAWEI-DISMAN-PINGMIB Modified description of h3cCfgLogTable Modified description of h3cCBQoSMatchRuleType Modified description of hwdot1qTpFdbSetOperate Modified description of
Page 105 of 156
h3c-cbqos2.mib
huawei-isdn.mib
ISDN-MIB H3C-DOMAINMIB H3C-VOICEVLAN-MIB RMON-MIB DISMAN-PINGMIB H3C-NQA-MIB HUAWEIDISMAN-PINGMIB H3C-CONFIGMAN-MIB H3C-CBQOS2MIB HUAWEILswMAM-MIB H3C-SYS-MAN-
h3c-domain.mib
Modi fied
h3c-voice-vlan.mib
rfc2819-rmon.mib rfc2925-dismanping.mib h3c-nqa.mib huawei-ping.mib
h3c-config-man.mib h3c-cbqos2.mib huawei-splatmam.mib h3c-sys-man.mib

June 2, 2009
Version number
Item
MIB file MIB h3c-sys-man.mib
Module
Description h3cSysBtmLoadTable Deleted h3cSysStartUpNotification deleted hwDhcpSecurityTable Deleted HUAWEI-LswARP-MIB Add DIAL-CONTROL-MIB Add h3cProcessTable,h3cEntityInsert and h3cEntityRemove Add h3cVPMStateChange and h3cDSPStateChange Add h3cAal5VccStateChange Add H3C-VOICE-CALL-HISTORYMIB Modify the description of h3cFlhInitTime to Not supported None Added whole module of h3ce1t1vi.mib Add hwDHCPSIPInUseExTable to HUAWEI-DHCPS-MIB Modify descripsion Not supported. When eventType is none(1) or log(2), the value of eventCommunity will not be saved; when eventType is snmptrap(3) or logandtrap(4), the value of eventCommunity will be saved but can take no effect. Modify descripsion Only valid on portbased method. When the value of h3cAclIPAclAdvancedProtocol is ICMP or ICMPV6, h3cAclIPAclAdvancedIcmpType and h3cAclIPAclAdvancedIcmpCode can be set, otherwise it can not. Deleted hwdot1qMacSearchTable None.
Page 106 of 156
H3C-SYS-MANMIB HUAWEILswIGSP-MIB HUAWEILswARP-MIB DIAL-CONTROLMIB H3C-ENTITYEXT-MIB H3C-DSP-MIB H3C-AAL5-MIB H3C-VOICECALL-HISTORYMIB H3C-FLASHMAN-MIB None H3C-E1T1VI-MIB HUAWEIDHCPS-MIB
Delet ed
huawei-splatigsp.mib huawei-splatarp.mib H3c-voice-dialcontrol.mib h3c-entity-ext.mib
New CMW520 E1711P0 1
H3c-dsp.mib H3c-aal5.mib H3c-voice-callhistory.mib
Modi fied Delet ed
H3c-flash-man.mib None h3c-e1t1vi.mib
New huawei-dhcps.mib
rfc2819 MIB.mib
RMON-MIB
CMW520 -B1608
Modi fied
ieee8021x.mib
IEEE8021-PAEMIB
h3c-acl.mib
H3C-ACL-MIB
Delet ed CMW520
June 2, 2009
huawei-splatmam.mib None.
HUAWEILswMAM-MIB None.
New
Version number R1508P0 2
Item
MIB file hh3c-user.mib
Module HH3C-USERMIB HH3C-RADIUSMIB ENTITY-MIB None.
Description Modify h3cUserIndex PDS attribute to "No". Modify h3cRdAccRealTime Description to "As per mib". Modify "AR" to "MSR". None.
Modi fied
hh3c-radius.mib rfc4133-entity.mib
Delet ed
None.
Configuration Changes
None.
Open Problems and Workarounds

RTD33576
First found in CMW520-R1719P02 Condition: Run remove slot xxx command on the DFIC-24FSW card and hot swap it quickly, the router will reboot by exception. Avoidance: When pull out the DFIC-24FSW card, wait 5secs at least before insert it.
Caution: First Found-in Version means that the version on witch the problem was first found, not tracing to its source version.
List of Resolved Problems

Resolved Problems in CMW520-R1719P03
RTD35775
First found in CMW520-R1718 Condition: The customer set the parameter of LAPB timer T4 at the serial interface of the router. Description: When the serial interface receives the LAPB response packets with F bit equal to 1, the serial interface will be up and down.
RTD35545
First found in CMW520-R1718
June 2, 2009 Page 107 of 156
Condition: The serial interface of the router connects with the equipment collecting data and transmits the data to the server collecting data from the routers Ethernet interface. Description: The serial interface of the router increases the latency transmitting the data, and it induces that the data flow received by the server isnt steadily.
RTD35135
First found in CMW520-R1718 Condition: The TC20301 of TBR4 is test at the routers PRI interface. Description: After the timer T310 of the PRI interface times out, the router will sent the Disconnect message with the reason value equal to No.41, and the reason value of No.41 doesnt accord with TBR4.
RTD35044
First found in CMW520-R1718 Condition: The customer sets the command of filter import to filter the OSPF ABR aggregation routes. Description: The routes cant be filtered effectively.
RTD35020
First found in CMW520-R1718 Condition: The customer sets the MTU of ADSL interface. Description: The MAX value of MTU is 1500.
RTD35355
First found in CMW520-R1718 Condition: The customer sets master SIP server and slaver SIP server, and the router receives the SIP 301 redirection packets when the router registers. Description: The router can register on the new address server successfully, but the voice call from the router will fail.
RTD35385
First found in CMW520-R1718 Condition: The MSR30 and MSR50 router run BFD function. Description: The each router establishes 10 BFD sessions at best.
RTD32930
First found in CMW520-E1719 Condition: There are MSR3011E and MSR3011F routers. Description: The fan runs at high speed continually at normal temperature.

RTD33374
First found in CMW520-R1718 Condition: Modify the IP address and mask of the WAN interface using TR069 protocol.
June 2, 2009 Page 108 of 156
Description: Firstly the router modifies the IP address, mask and the gateway of the interface, then responses the SetParameterValuesResponse packet, and thus cant be consistent with ACS.
RTD34337
First found in CMW520-R1718 Condition: Configure the ACS URL at the router and reboot the router or power on again. Description: The router sends the inform packet to ACS with eventcode parameter equaling to nonzero BOOTSTRAP when the router connects to ACS firstly.
RTD34338
First found in CMW520-R1718 Condition: Set the CPE password at the router, and the password is different with the ACSs CPE password. Description: The router still can initiate the TR069 connection to the ACS.
RTD34446
First found in CMW520-R1719P01 Condition: Set the VLAN ID at the routers Ethernet sub-interface, and modify the VLAN ID by TR069. Description: The operation to set VLAN ID node fails by TR069.
RTD34495
First found in CMW520-R1719P01 Condition: The two routers of R1 and R2 establish GRE tunnel with keepalive checking, and the two routers' software are R1719P01. Description: Once the GRE tunnel is down, it can't be up again.
RTD34735
First found in CMW520-R1718 Condition: Set the virtual-template interface at the router. Description: Cant bind the VPN instance at the virtual-template.
RTD34785
First found in CMW520-R1719P01 Condition: The router establishes the L3VPN using LDP protocol, and there are several equal routes between the router to other PE. Description: When some or other equal route is invalid the LDP label cant be refreshed automatically, it will take on a long time to updating the status of the network.
RTD34136
First found in CMW520-R1719P01 Condition: Using two ADSL2+ modules and the data flow is on the both ports. Description: The uplink is blocking after a while.
June 2, 2009
Page 109 of 156
RTD34290
First found in CMW520-E1719 Condition: Apply the local certificate and then reboot the device. Description: the local certificate not import when the device start-up.
RTD34392
First found in CMW520-E1719P01 Condition: When unicast packets flow are transmitted to Virtual-template on MSR 30-10. Description: The flow is considered multicast in Ethernet0/1.
Resolved Problems in CMW520-E1719P01

RTD33738
First found in CMW520-E1719 Condition: Set the Fixed FE switching port of the router to half-duplex with mix flow. Description: The port don't transmit packet rightly.

RTD33397
First found in CMW520-R1718 Condition: 1) The router running the terminal server, the terminal connects the front end processor (FEP) by the router, and the user of the terminal selects a menu entry to establish an unreachable VTY link at the MENU interface; 2) The router running the terminal server, the terminal connects the front end processor (FEP) by the router, the user of the terminal selects a error menu entry at the MENU interface; 3) The router running the terminal server, the terminal connects the front end processor (FEP) by the router, the user of the terminal enters the command of EXIT to quit the application. Description: 1) The router prompts the error information to the terminal, but the router cant return to the MENU interface automatically; 2) The router cant prompt the error information to the terminal and also cant return to the MENU interface automatically; 3) The router doesnt disconnect the TCP link established with the FEP.
RTD33465
First found in CMW520-R1718 Condition: The two routers of R1 and R2 establish the GRE tunnel, and the link from R2 to R1 is broken but the link from R1 to R2 is normal, the physical interfaces of R1 and R2 to establish the GRE tunnel are up. Description: The tunnel of R1 is down and the tunnel of R2 is up.
RTD33866
First found in CMW520-R1718
June 2, 2009 Page 110 of 156
Condition:
The
router
supports
the
TR069
node
of
InternetGatewayDevice.X_CT-
COM_Firewall.DDoSEnabled, and the node is used to enable firewall function at the router. Description: This TR069 node doesnt belong to the criterion of CT (China Telecom), according to the criterion of CT the TR069 node to enable firewall is InternetGatewayDevice.X_CTCOM_Firewall.DDoSEnabled.
RTD33896
First found in CMW520-R1718 Condition: The router startups the NAT function, and the router do NAT ALG conversion to the SIP packets with compression format; Description: The router will reboot abnormally.
RTD34108
First found in CMW520-R1718 Condition: Set the parameter of hookflash timer of FXS at the router. Description: The router doesnt support the command to set the minimum of the hookflash timer.
RTD33111
First found in CMW520-R1718 Condition: The router does the TC10008 of TBR3 test. Description: The router replies the RELEASE message with the reason value NO44 when the router receives the ISDN SETUP message with incomplete bear capability, and this reduces to the TC1008 test failed.
RTD33706
First found in CMW520-R1718 Condition: The router startups the DLSw function, and the serial interface receives the abnormal SDLC packets. Description: The routers memories leak.
RTD32147
First found in CMW520-R1718 Condition: Configure the Policy Routing at the router. Description: Each Policy Routing can only include 20 nodes, and this cant satisfy the customers requirement to support 256 nodes each policy routing.
RTD33564
First found in CMW520-R1718 Condition: The router does the TC20301 of TBR3 test. Description: The router sends the ISDN DISCONNECT message without the cause parameter, and this reduces to the TC20301 test failed.
RTD33778
First found in CMW520-R1718 Condition: Set the MTU of the VT interface at the router. Description: The maximum of MTU at the VT interface is 1500.
June 2, 2009 Page 111 of 156
RTD33867
First found in CMW520-R1718 Condition: Enable the telecom manager accounts using TR069 protocol at the router. Description: The router doesnt support the TR069 node of InternetGatewayDevice.DeviceInfo.X_CT-COM_TeleComAccount.Enable, so the router cant set the telecom manager accounts.
RTD33862
First found in CMW520-R1718 Condition: Modify the notify attribute of TR069 node at the router. Description: The router doesnt report the value change message.
RTD33375
First found in CMW520-R1718 Condition: At the same time modify the TR069 WANIPConnections DNSServers node, and set the IP address/mask node. Description: The operation to set TR069 node fails.
RTD33171
First found in CMW520-R1718 Condition: When the serial interface of the router runs at the flow mode, pull out and insert into the cable of the serial. Description: The router doesnt prompt any information.
RTD33613
First found in CMW520-R1718 Condition: Set the password of the user to special character, then login the web management page using this user. Description: The user cant visit the web page resource after the user logins.
Resolved Problems in CMW520-R1719

RTD32154
First found in CMW520-R1718 Condition: Set the ETH0/0 and VLAN-interface of the MSR20-1X with WLAN to the same bridgegroup. Description: The packets which are transmit through the ETH-0/0 and VLAN-interface will be lost.
RTD32324
First found in CMW520-R1718 Condition: Set the portal function at the router, and the portal server sends request info packets to the router. Description: If the status of the user at the router is online, the router will discard the request info packet.
June 2, 2009
Page 112 of 156
RTD31926
First found in CMW520-R1718 Condition: Turn on the function of info-center at the router, then configure the SNMP community parameter. Description: The SNMP community strings will be displayed in the log.
HSD44946
First found in CMW520-R1718 Condition: Do TBR3 test at the ISDN interface of the router. Description: The TBR3 Layer 3 test case TC12501 failed.
HSD44947
First found in CMW520-R1718 Condition: Do TBR4 test at the ISDN interface of the router. Description: The router received STATUS ENQUIRY message, then replied the STATUS message, that didnt accord with TBR4 standard, and some TBR4 test case failed.
RTD32392
First found in CMW520-R1718 Condition: The VLAN interface of the router joined the bridge-set and set the DLSw function. Description: The DLSw circuit cant be established by the VLAN interface.

RTD30327
First Found-in Version: CMW520-E1713 Condition: When upgrade to E1713 version. Description: The configuration in the SIP client view is lost.
HSD36094
First Found-in Version: CMW520-E1713 Condition: When the entries of Fast Forwarding table exceeding 130000 on the router. Description: The router will reboot.
RTD32157
First Found-in Version: CMW520-E1713 Condition: Configure the static NAT at the router. Description: The max. of static NAT is 100, and it should be changed to 500.
RTD31964
First Found-in Version: CMW520-E1713 Condition: Connect the routers E1VI interface with PBX and set the caller-group at the router. Description: The max. of caller-group is 5, and it should be changed to 10.
June 2, 2009
Page 113 of 156
RTD31958
First Found-in Version: CMW520-E1713 Condition: The router acting as Terminal Server established the TCP connection with the UNIX/Linux Server, if the link between the router and the UNIX/Linux Server is broken down more then 160s. Description: The application between the terminal and the UNIX/Linux Server failed.
RTD31645
First Found-in Version: CMW520-E1713 Condition: The routers fiber interface, including GEF, M/SFX, ATM, POS and CPOS interface, is inserted into the SFP which can support two kinds speed of OC3 and 100BASELX. Description: The router cant identify this kind of SFP.
RTD32225
First found in CMW520-E1713 Condition: To set the same caller-group and hunt-group at several voice entity at the router. Description: Some calls from VOIP can match several voice entities, but if the first entity is busy, the next entity cant be selected.
RTD32247
First Found-in Version: CMW520-E1713 Condition: Doing the TBR3 test at the MSR routers. Description: The CPF6PHARa and CPF8PHARa test procedure of the TBR3 cant pass.
RTD32334
First Found-in Version: CMW520-E1713 Condition: Insert the SIC-1BU card at the router, then the router runs at the low temperature period of time. Description: The router halts sometime.
RTD32254
First Found-in Version: CMW520-E1713 Condition: Measure the pulse wave of T1 interface. Description: The pulse wave doesnt measure up the G.703 standard.
RTD32258
First Found-in Version: CMW520-E1713 Condition: To set the command of tcp mss at the VLAN interface. Description: The command is supported.
RTD32379
First Found-in Version: CMW520-E1713 Condition: The sub-interface of Ethernet of the router sends the small packet less than 64byte and with VLAN tag.
June 2, 2009
Page 114 of 156
Description: The router only can fill in the small packet to 62 byte, so the small packet is discarded by other transmitting equipments.
Resolved Problems in CMW520-E1713

RTD29771
First Found-in Version: CMW520-E1711P01 Condition: Using "reset counters interface" to clean the outbound state of interface WLAN-Radio. Description: It can not be cleaned.
RTD29819
First Found-in Version: CMW520-E1711P01 Condition: Configuring ftp or telnet on the EF queue. Description: The queue of EF has no effect on FTP or Telnet packets.
RTD29920
First Found-in Version: CMW520-E1711P01 Condition: There is on FIC-16ASE card in slot 10 on MSR50 series, and running display userinterface on it. Description: There is no user-interface tty on interface 10/15 and interface 10/16.
Resolved Problems in CMW520-E1711P01

RTD28582
First Found-in Version: CMW520-B1707 Condition: If implemented Policy-based routing and out-interface is Dialer interface for pppoe client. Description: Some packet will dropped because the wrong payload-length.
Resolved Problems in CMW520-B1707

RTD21682
First Found-in Version: CMW520-B1606 Condition: Running shutdown on BRI interface or physical interface of PRI, then configuring ISDN Leased Line on it. Description: PPP will send negotiated packets from this interface anyway.
RTD21683
First Found-in Version: CMW520-B1606 Condition: Configuring one Ethernet interface as PPPoE Client by pppoe-client dial-bundlenumber 101 idle-timeout 1, despite there are packets received during 1 second. Description: the connection will always break down when 1 second is time out.
HSD33072
First Found-in Version: CMW520-B1608 Condition: Reboot router when implemented the Interface-backup feature.
June 2, 2009 Page 115 of 156
Description: The backup interface will flap (up/down) one time.
LSD26984
First Found-in Version: CMW520-B1608 Condition: If the connect with the TACACS is lost. Description: The fallback authentication will not happen.
RTD27056
First Found-in Version: CMW520-B1608 Condition: Implemented MPLS TE tunnel and keep the reservable-bandwidth equal to tunnel BC0. Description: The tunnel can't up.

RTD21639
First Found-in Version: CMW520-B1606 Condition: Input shutdown on one Encrypt interface. Description: RM will print some redundant information.
RTD21642
First Found-in Version: CMW520-B1606 Condition: Enable IPV6 and configure IPV6 address on one interface, then get the statistic of interfaces packets after it received some IPV6 packets by display ipv6 interface XXX verbose. After that, reset ipv6 statistic and display ipv6 interface XXX verbose again. Description: The statistic doesnt clean.
RTD20985
First Found-in Version: CMW520-B1606 Condition: Create PVC on the ATM interface and configure map bridge-group broadcast on it, then configure atm-class and apply class on the interface. Description: System will print error info that PVC on the ATM interface has been deleted.
RTD21516
First Found-in Version: CMW520-B1606 Condition: Configuring more than 4251 mboundarys on routers interface, then reset some of them with high speed packets received by the interface. Description: The reset operation will fail.
RTD21151
First Found-in Version: CMW520-B1606 Condition: When dhcp-snooping is enable, print dhcp-snooping to get the prompt info, then run undo dhcp-snooping and dhcp-snooping again, to get the debug info. Description: The syntax of prompt info and debug info are not identical.
June 2, 2009
Page 116 of 156
RTD21384
First Found-in Version: CMW520-B1606 Condition: Configuring router as SFTP server, setting its idle time by sftp server idle-timeout several. Description: When the client accesses the server with not idlesse, the server will always disconnect it.
RTD21352
First Found-in Version: CMW520-B1606 Condition: Enable flow control on GEC interface and get the info by display interface. Description: The flow control is not shown in the result.
RTD21406
First Found-in Version: CMW520-B1606 Condition: Get voice and fax default value by display voice default all. Description: It doesnt contain default value of transparent transmission on modem.
RTD21577
First Found-in Version: CMW520-B1606 Condition: During the boot if the interface 0/0 is up. Description: The default IP address by product will lose.

RTD16324
First Found-in Version: CMW520-R1507 Condition: To download software from FTP server to overwrite the file with same name. Description: The router will reboot with exception notification.
RTD16521
First Found-in Version: CMW520-R1507 Condition: In the network of MPLS, to change the timer value of PE which is worked as NTP server. Description: Ce as the NTP client can't synchronize with PE.
RTD17038
First Found-in Version: CMW520-B1502 Condition: To set t1 x set fdl ansi on T1 channel of local side, and set t1 x set fdl att on the same T1 channel of remote side, then sent loopback code on local side with command t1 x sendloopcode fdl-ansi-payload-up. Description: The remote interface receives the loopback code and is set as mode of loopback payload.
RTD17152
First Found-in Version: CMW520-R1507
June 2, 2009 Page 117 of 156
Condition: Two routers are connected with transmission equipments and try to telnet from the VLAN interfaces of the two routers. Description: Telnet is failed.
RTD17375
First Found-in Version: CMW520-R1508 Condition: Two routers are connected to each other with VE1 and VT1, to launch call and delete R2 configuration of VE1 or VT1 on one router during call processing. Description: The call process will be failed.
Resolved Problems in CMW520-R1508P02&CMW520-B1508P02

RTD20541
First Found-in Version: CMW520-R1508 Condition: The calling number less than 6, and the Q931 section of SETUP message from calling device does not include CALLED PARTY NUMBER and CALLing PARTY NUMBER. Description: The calling will fail.
RTD19553
First Found-in Version: CMW520-B1502 Condition: Configuring flow-control on the interface of SIC-1GEC, and send high speed data to it. Description: The flow-control function doesnt take effect.
RTD20307
First Found-in Version: CMW520-R1508 Condition: walk iso ---> mgmt ---> entityMIB ---> entPhysicalEntry ---> entPhysicalSoftwareRevs sub-node entPhysicalEntry and get value of entPhysicalSoftwareRev by MIB Browser, then _display version to get the version number. Description: The value of entPhysicalSoftwareRev not matches the version number exactly.
Resolved Problems in CMW520-R1508&CMW520-B1508

RTD18997
First Found-in Version: CMW520-B1506L02 Condition: The VE1 interface connected to switch with PRI signaling and received FACILITY information from remote switch. Description: The route will reboot.
RTD18437
First Found-in Version: CMW520-B1505L01 Condition: The user call a telephone with the VoIP system of H3C and the called telephone has been set call forward. Description: The call cannot be established.
June 2, 2009
Page 118 of 156
RTD19880
First Found-in Version: CMW520-R1206P01 Condition: The user set reserve telnet and disable auto-negotiation. Description: The data transmit forward by the ASE interface is error.
RTD19991
First Found-in Version: CMW520-B1506L02 Condition: The 4BS interface works in the mode of BRI leased line. Description: The default idle code is not 0x7e.
RTD19852
First Found-in Version: CMW520-R1507 Condition: Using the English version of hyper terminal. Description: The user can not configure the router by com or telnet.

RTD18219
First Found-in Version: CMW520-B1502 Condition: The mode of 2GE module is 100M/full duplex and forwards the packets. The length of packets is random. Description: The 2GE port halts receiving and transmitting data.

RTD13802
First Found-in Version: CMW520-B1204L01 Condition: Configuring hookoff-time 36000 in a FXO interface and then resetting this card. Description: The hookoff configuration in the FXO interface will lose.
RTD13055
First Found-in Version: CMW520-B1501L01 Condition: The user enables loopback-detection and configures loopback internalin a L2 port when stp function has been enabled. Description: The configuration of Ioopback internal will be unsuccessful.
RTD14199
First Found-in Version: CMW520-B1501L01 Condition: A sub-interface in an IMA-group has been set up. The user hot-plugs this IMA card and then inserts it to the same slot. Description: All commands can not be identified.
HSD14531
First Found-in Version: CMW520-B1501L01
June 2, 2009
Page 119 of 156
Condition: A DCE cable has been inserted in a SAE interface, but not connected to remote terminal. The user configure asynchronous physical mode and display information of this interface. Description: The information of DCD, DTR, DSR, RTS and CTS is error.
RTD15139
First Found-in Version: CMW520-B1501L01 Condition: None. Description: VI(Visual Identity) modified from Huawei-3com to H3C.
Resolved Problems in CMW520-B1501L01

RTD13013
First Found-in Version: CMW520-B1204L01 Condition: Hunt-group function has been enabled when call connection is set up by IVA(ISDN Voice Application) . The matched voice entity is unavailable. Description: The information table for current calls (shown by command display voice call-info) will not be clear.
Resolved Problems in CMW520-B1204P04

RTD12924
First Found-in Version: CMW520-B1204P03 Condition: 8E1 ports communicate through fiber network. When one ports remote fiber terminal is turned off. Description: The port will receive too many incorrect packets and 8E1 ports can not work normally.

RTD12559
First Found-in Version: CMW520-B1204P03 Condition: The Ethernet L2 switching module receives ISIS Hello packets. Description: These packets can not be transmitted in VLAN.
RTD12700
First Found-in Version: CMW520-B1204P03 Condition: Applying Netstream on both inbound and outbound of one interface . Description: The stream statistic doubles on the device, and the stream log is send to XLOG server.

RTD12640
First Found-in Version: CMW520-B1204L01 Condition: Configuring VRRP on the MRS50 device.
June 2, 2009 Page 120 of 156
Description: VRRP can not support tracking MP-group ports.

RTD07017
First Found-in Version: CMW520-B1202P01 Condition: Upgrade the router by Quidview. Description: The grading will fail.
RTD11696
First Found-in Version: CMW520-B1204L01 Condition: Keeping data flux on 4FSW in MSR routers. Description: The data can not be transmitted and the configuration on the VLAN will lose.
LSD08869
First Found-in Version: CMW520-B1203 Condition: DHCP client has no IP address in free poolbut there is available IP address in the overdue pool. Description: It can not get IP address in the overdue pool.
RTD11776
First Found-in Version: CMW520-B1204L01 Condition: The user configures network command in an ospf interface and then displays this interface information. Description: The system will hint OSPF Interface Not enabled.
RTD11378
First Found-in Version: CMW520-B1204L01 Condition: The user configures fast-forwarding by encryption cards and runs ping command. Description: The value of TTL is error.
RTD11954
First Found-in Version: CMW520-B1204L01 Condition: Enabling Radius and DPL, and then running one time dialing and two times dialing operation. Description: The first calling number and the second one are not identical.
RTD11646
First Found-in Version: CMW520-B1204L01 Condition: Connecting MSR routers with Cisco devices, setting both interfaces ISIS
type p2p and configuring bridge on MSR routers interface. Description: It can not set up ISIS.
June 2, 2009
Page 121 of 156

RTD10154
First Found-in Version: CMW520-B1202P02 Condition: Connecting SIC-E1 interfaces between two MSR20 serious routers, and enable using e1. Description: The interfaces states can not be up.

RTD11296
First Found-in Version: CMW520-B1202P01 Condition: configuring the router and its connecter in G711U coding mode, and turning on VoIP. Description: Only the calling from the router to its connecter is success, the other direction calling is not normal.

HWD05620
First Found-in Version: CMW520-B1202 Condition: Keeping one ESM and one VCPM on the MSR30-20. Description: It can not boot.

RTD09176
First Found-in Version: CMW520-B1105 Condition: Keeping on changing R2 country mode for a long time. Description: The call will fail.
RTD09518
First Found-in Version: CMW520-B1105 Condition: While configuring R2 CAS, if you execute follow commands in order: renew 0011, reverse 0101, undo renew, and undo reverse. Description: The default value of dl-bits will not be renewed.
RTD07543
First Found-in Version: CMW520-B1105 Condition: If you apply global ATM-CLASS under ATM interface, and configure ATM-MAP under this interfaces ATM-PVC view, then delete the ATM-MAP. Description: That will result in the configuration of ATM-CLASS under this interface invalid.
RTD09212
First Found-in Version: CMW520-B1106 Condition: Configuring the IP address of WAN on the LAN server equaling to the address of NAT interface.
June 2, 2009 Page 122 of 156
Description: The FTP server function on NAT can not work.
RTD10006
First Found-in Version: CMW520-B1106 Condition: The router is configured as TFTP client and PC as server. The user configures a source file name with memory path. Description: The system will hint Unable to open file.
RTD09918
First Found-in Version: CMW520-B1106 Condition: Ripng default-route has been configured. The user deletes this configuration and displays the routing information of Ripng. Description: The default routing can not be deleted immediately.
RTD09832
First Found-in Version: CMW520-B1106 Condition: If you configuring sequentially voice bandwidth and cir with equal value, and then saving it and rebooting the router. Description: The voice bandwidth will loss and the call can not success.

RTD09261
First Found-in Version: CMW520-B1105 Condition: Input command display mpls te cspf tedb node. Description: After you input display mpls te cspf tedb node, the router will reboot.
RTD08380
First Found-in Version: CMW520-B1105 Condition: Input a parameter with excess length on the ATM service. Description: When configuring ATM CLASS UBR on ATM-CLASS, if the parameter has excess length, the parameter can work actually and the router will print abnormal info and then reboot.
RTD08839
First Found-in Version: CMW520-B1105 Condition: Apply QoS on one port and match FTP packets, and then run DAR statistic. Description: Can not get correct statistic of some FTP packets.
RTD08764
First Found-in Version: CMW520-B1105 Condition: Enable STP and keeping one bridge port with learning state, and send packets with different source MAC address to this port. Description: This port can not learn MAC address with learning state.
RTD08536
First Found-in Version: CMW520-B1105
June 2, 2009 Page 123 of 156
Condition: when the MAC tables is full on one port, and then apply VRP on it. Description: The virtual VRRP MAC address can not be loaded on this ports MAC table and then cause packets with it can not be transferred.
RTD08326
First Found-in Version: CMW520-B1105 Condition: Apply MPoFR on a 4E1 board, and transferring 10M speed data on it. Description: VTs state will change up and down repeatedly.
RTD06971
First Found-in Version: CMW520-B1105 Condition: Configure DHCP under the interface view, and then change the interfaces IP address. Description: All the configuration of DHCP on this interface will be lost.
Related Documentation
Documentation Set
Table 14 Documentation set Manual H3C MSR 20 Series Routers Installation Manual H3C MSR 30 Series Routers Installation Manual H3C MSR 50 Series Routers Installation Manual H3C MSR 20/30/50 Series Routers User Manual H3C MSR 20/30/50 Series Routers Interface Card and Interface Module Manual Low-End and Mid-Range Series Routers Cable Manual H3C MSR Series Routers OAP Module Manual H3C MSR 20-1X Series Routers Installation Manual H3C MSR Series Routers Web-Based Configuration Manual H3C MSR 20-1X Series Routers Quick Start H3C MSR 30-1X Series Routers Quick Start
V1.03
Version
V1.03
V1.03 V1.04 V1.04 V1.02 (CH&EN,V1.01) V1.02 V1.01 V1.00 V2.00
Obtaining Documentation
Downloading Documentation
Take the following steps to get related documents from the H3C website at www.h3c.com. Table 15 Download documentation from the H3C website How to apply for an account
June 2, 2009
Access the homepage of H3C at http://www.h3c.com and click Registration at the top right. In the displayed page, provide your information and click Submit to register.
Page 124 of 156
Approach 1: In the homepage of H3C at http://www.h3c.com, select Technical Support & Document > Technical Documents from the navigation bar at the top. Then select a product for its documents. Approach 2: In the Support area of the H3C homepage at http://www.h3c.com, select Technical Documents. Then select a product for its documents.
How to get documentation
Software Upgrading
Introduction
Files
BootWare program file
The file is stored in the flash memory to boot an application. A complete BootWare file includes two segments: basic and extended. The basic section is used for the basic initialization of the system. The extended section provides abundant human-computer interaction (HCI) functions and is used to initialize interfaces and update the applications and the boot system. After the basic section is loaded, you can load and update the extended section through the menu of the basic section.
Application files
The router is available with Dual Image function. By default, the system defines and attempts to boot in order with three boot files: main, backup, and secure, provided they are available with CF card. If the router fails to boot with the secure boot file, it prompts the boot failure. For more information about the boot files, refer to Maintaining Application and Configuration Files on page 148. The following table gives default names and types of boot files. Table 16 Default names and types of the boot files Boot file Main boot file Backup boot file Secure boot file main.bin backup.bin secure.bin File name M B S File type
June 2, 2009
Page 125 of 156
The application programs for system boot can be type M, B and S, but not type N. You can store them in Flash memory, but only one for each. For example, if an M+B file exists, it is impossible to have another M or B file. If you change the file type of another file to B, the M+B file becomes a type M file. You can modify the name of an application file in storage after the application file is loaded. You cannot modify the file type of a type S application file, but you can modify the file type of type M/B and N application files in the BootWare menu or using commands after the application program boots. Secure boot file is the last resort for system boot. You can download it in the BootWare menu and must name it secure.bin. However, you cannot modify this file or change the type of another file to S. If you change the name of the secure boot file with the rename command after the system boots, the file is removed from CF card. To use the secure boot file after that, you need to download it again. You can store type M, B, S files in storage media, but only one for each type in each storage medium. For example, if a type M+B file exists in the Flash memory, there will be no type M or B file. If you change the type of a file to B, the M+B file will become a type M file.
Configuration file
The file stores configuration information of the router. By default, the system defines three configuration files for booting: main, backup, and default file. If the three configuration files are loaded in a storage medium, the system selects them in sequence until the router is successfully loaded. To change the sequence of these configuration files or modify them, refer to Maintaining Application and Configuration Files on page 148. The details about the three configuration files and file selection sequence are as follows: Main configuration file: The configuration file used for booting by default. The file type is M. Backup configuration file: The file type is B. The system uses the backup configuration file when it fails to boot using the main configuration file. Default configuration file: The file type can be M, B, or N. The system uses the default configuration file when it fails to boot using the backup configuration file. If the system fails to boot using the default configuration file, it boots with null configuration. The name of the default configuration file varies with router brands. The main and backup configuration operations on the default configuration file are the same as those on common configuration files.
June 2, 2009
Page 126 of 156
The configuration files for system boot can be type M, B and default configuration file of type N, but not non-default configuration file of type N (i.e. neither M nor B). You can modify the file name of a configuration file in a storage medium using the command after the configuration file is loaded. You cannot modify the type of the default configuration file, but you can modify the file type of type M/B and N configuration files in the BootWare menu or using commands after the configuration file is loaded.
The file name cannot be longer than 64 characters (including drive letter and a string terminator. If the drive letter is CFA0: /, the file name can be at most [ 64-1-6 ] = 57 characters in length; or, errors will occur in file operation. Typically, the file name is recommended to be not more than 16 characters. The extension ASCII characters (ASCII>=128) and invisible characters (ASCII<33) cannot be included in the file name. The following characters cannot be included in the file name: , , ?, \, space, *, |, <, /, :, >, ~. The character . can be included in the file name, but cannot be the first or last character of the file name. Two consecutive .s are not allowed.
Software Maintenance Methods

Upgrade BootWare and an application using the XModem protocol through a serial port. Upgrade an application from a TFTP/FTP server through an Ethernet interface in BootWare. Upload/download an application and configuration file from a TFTP/FTP server via command lines.
The BootWare program is upgraded together with the Blinux application program. You do not need to upgrade the BootWare separately. When upgrading the Blinux program, the system checks whether the running BootWare version is consistent with that in the updating host application program. If inconsistent, the system asks whether to upgrade the BootWare. If you make no choice within one second, the system upgrades the BootWare automatically. When the flexible interface platform (FIP) starts, it automatically checks the running BootWare version. If the current version is inconsistent with the version used on the FIP, the system upgrades the BootWare automatically. Check the current version of BootWare and application program before upgrade. For the version configuration information, see the corresponding Release Notes.
June 2, 2009 Page 127 of 156
Upgrade flowchart for BootWare and Comware under Comware V5 environment
Start
Comware version
Upgrade Comware ?
Y
Choose correct Comware Choose upgrade mode
Via network interface Xmodem upgrade
TFTP upgrade
FTP upgrade
Upgrade
End
Maintaining Application Program and Configuration Through Command Lines

After the router is booted, you can upgrade and back up an application program, and back up and restore configurations through command lines.
Maintaining the Router Through TFTP Server

In the TFTP service, the router is TFTP client and the file server is the TFTP server. You can enter commands on the terminal to upload or download configuration files or application programs to or from the file server.
Setting up a configuration environment

Set up a hardware environment (refer to Upgrading an Application Program Through an Ethernet Interface on page 139 for details), and point the server path to the directory where the file is stored.
June 2, 2009
Page 128 of 156
Network diagram for maintenance through command lines
Configure the IP addresses of both sides on the same network. For example, the IP address of the TFTP server is set to 192.168.0.1, and that of the Ethernet interface connected to it (GigabitEthernet 0/0 in this example) is set to 192.168.0.2. Use the ping command to check whether the connection successful.
Backing up and restoring application programs and configuration files

After setting up the environment, perform the following operations on the console terminal: Use the dir command to view the files in the current file system:
<SYSTEM>dir Directory of cfa0:/ 0 1 2 4 drw-rw-rw-rw22165484 1181 22165484 Dec 20 2007 09:18:22 Dec 20 2007 09:18:10 Dec 20 2007 09:42:54 Dec 20 2007 09:42:28 logfile update.bin startup.cfg main.bin
252904 KB total (208940 KB free)
File system type of cfa0: FAT16
<SYSTEM>
Use the following command to upload the startup.cfg file to the TFTP server and save it as config.bak:
<SYSTEM>tftp 192.168.1.1 put startup.cfg config.bak File will be transferred in binary mode Sending file to remote tftp server. Please wait... \ TFTP: 1045 bytes sent in 0 second(s).
File uploaded successfully.
Use the following command to download the startup.cfg file from the server to the router:
June 2, 2009 Page 129 of 156
<SYSTEM>tftp 192.168.1.1 get startup.cfg startup.cfg The file startup.cfg exists. Overwrite it?[Y/N]:y Verifying server file... Deleting the old file, please wait... File will be transferred in binary mode Downloading file from remote tftp server, please wait...\ TFTP: 1045 bytes received in 0 second(s)
File downloaded successfully.
If a startup.cfg file already exists in the router, the system prompts you whether to overwrite it. You can type Y or y to overwrite it.
Upgrading the application programs

After setting up the environment, perform the following operations on the device (the application name is msr.bin for example): Use the save command to save the current configuration:
<SYSTEM>save The current configuration will be written to the device. Are you sure? [Y/N]:y Please input the file name(*.cfg)[cfa0:/startup.cfg] (To leave the existing filename unchanged press the enter key):
Use the dir command to view the application files and the available space of the CF card (ensure that the CF card has enough space to store a new application):
<SYSTEM>dir Directory of cfa0:/ 0 1 2 4 drw-rw-rw-rw22165484 1181 22165484 Dec 20 2007 09:18:22 Dec 20 2007 09:18:10 Dec 20 2007 09:42:54 Dec 20 2007 09:42:28 logfile update.bin startup.cfg main.bin
252904 KB total (208940 KB free) File system type of cfa0: FAT16 <SYSTEM>
Download the application msr.bin to the CF card of the device through TFTP:
<SYSTEM>tftp 192.168.1.2 get msr.bin
File will be transferred in binary mode Downloading file from remote TFTP server please wait...\ TFTP: 15054340 bytes received in 34 second(s) File downloaded successfully.
Use the boot-loader command to set the startup file for the next startup to msr.bin:
<SYSTEM>boot-loader file cfa0:/msr.bin main This command will set the boot file. Continue? [Y/N]:y The specified file will be used as the main boot file at the next reboot on slot 0! <SYSTEM>
June 2, 2009
Page 130 of 156
Use the display boot-loader command to view the startup file information of the device:
<SYSTEM>dis boot-loader The boot file used at this reboot:cfa0:/main.bin attribute: main The boot file used at the next reboot:cfa0:/msr.bin attribute: main Failed to get the backup boot file used at the next reboot! Failed to get the secure boot file used at the next reboot! <SYSTEM>
Make sure that the configured startup file is correct, and then use the reboot command to reboot the device:
<SYSTEM>reboot Start to check configuration with next startup configuration file please
wait.........DONE! This command will reboot the device. Current configuration may be lost in next startup if you continue. Continue? [Y/N]:y
After the device is rebooted, use the display boot-loader command to view the startup file information of the device to make sure that the current application of the device is msr.bin.
When you back up a file, the file will directly overwrite the one with the same name on the server. The above operations are performed in user view. The backup configuration file can be modified by a text editor. You can change the configuration by downloading the modified configuration file and the modification takes effect after you reboot the router. Similarly, you can also upgrade the main application file by downloading a new application file to overwrite the original main application file. The above operations are performed in user view. Before upgrading an application, save the current configuration of the device. When upgrading an application, use the dir command to view the size of the downloaded file and whether the file is the same as that on the server to ensure that the application is complete and correct.
Maintaining the Router Through FTP Server

Maintaining the router serving as the FTP server
File Transfer Protocol (FTP) is an application-layer protocol in the TCP/IP protocol suite. It is mainly used for file transfer between remote hosts. Over TCP, FTP provides reliable and connection-oriented data transfer service, but does not provide any access authorization and authentication mechanism. In the FTP service, the router can serve as the FTP server. You can run the FTP client to log in to the router access files on the router.
June 2, 2009
Page 131 of 156
Before using FTP, you need to install the FTP client. No FTP client is shipped with the MSR 30 series routers. In the following example, the FTP client application program is the built-in Windows XP FTP client. Set up a hardware maintenance environment, as shown in the following figure: Maintain the router serving as the server
Ethernet cable
Router TFTP/FTP Server
Console cable
PC TFTP/FTP Client
Configure the IP addresses of both sides on the same network. In this section, the IP address of the FTP client (PC) is set to 192.168.1.1, and that of the connected Ethernet interface on the router (Ethernet 0/0) is set to 192.168.1.2. Use the ping command to check the connectivity. Enable the FTP service. After configuring authentication and authorization, you can enable the FTP service. The FTP server supports multi-user access. Upon receiving the request from a remote FTP client, the FTP server executes an action accordingly and returns the execution result to the client. Use the following command to enable the FTP service:
[SYSTEM]ftp server enable % Start FTP server
Add an authorized username and password:

[SYSTEM]local-user guest [SYSTEM-luser- guest]service-type ftp [SYSTEM-luser- guest]password simple 123456
Maintain the router. After enabling the FTP service and configuring the username and password, you can enable the FTP client on the PC. In the following example, the FTP client application program is the built-in Windows XP FTP client. Type ftp in the DOS window, and the system prompt is changed to ftp>:
C:\Documents and Settings\Administrator>ftp ftp>
June 2, 2009
Page 132 of 156

ftp> open 192.168.1.2 Connected to 192.168.1.2. 220 FTP service ready.
User (192.168.0.2:(none)): guest 331 Password required for guest Password: 230 User logged in.
After you correctly enter the username and password, the system prompts login success. You can then maintain the router, for example, modify transmission mode and local path, and back up files. In this example, the main.bin file on the router is copied to the PC.
ftp> binary 200 Type set to I. ftp> lcd c:\temp Local directory now C:\temp. ftp> get main.bin main.bin 200 Port command okay. 150 Opening BINARY mode data connection for main.bin. 226 Transfer complete. ftp: 14323376 bytes received in 16.81Seconds 851.87Kbytes/sec.
Use the following command to recover the backup file to the router:
ftp> put main.bin main.bin 200 Port command okay. 150 Opening BINARY mode data connection for main.bin. 226 Transfer complete. ftp: 14323376 bytes sent in 8.29Seconds 1727.37Kbytes/sec. ftp> quit 221 Server closing.
Maintaining the router serving as a client

You can also maintain the router file system by setting up an FTP environment where the router serves as an FTP client. Set up a maintenance environment.
June 2, 2009
Page 133 of 156
Maintain the router serving as a client
The router serves as the client, while the PC running FTP server program serves as the FTP server. Set the FTP server path and add username and password for the router. Configure the IP addresses of both sides on the same network. In this section, the IP address of the FTP server is set to 192.168.1.1, and that of the connected Ethernet interface on the router (Ethernet 0/0 in this example) is set to 192.168.1.2. Use the ping command to check the connectivity. Maintain the router through the terminal connected with the console interface of the router. The following gives an example:
<SYSTEM>ftp 192.168.1.1 Trying 192.168.1.1 ... Press CTRL+K to abort Connected to 192.168.1.1. 220 3Com 3CDaemon FTP Server Version 2.0 User(192.168.1.1:(none)):guest 331 User name ok, need password Password: 230 User logged in
[ftp]
Use the following commands to maintain the router. Here, the get and put commands are used to restore and back up files.
[ftp]get main.bin main.bin flashcfa0:/main.bin has been existing. Overwrite it?[Y/N]:y 200 PORT command successful. 150 File status OK ; about to open data connection 226 Closing data connection; File transfer successful. FTP: 14323376 byte(s) received in 69.256 second(s) 206.00K byte(s)/sec.
June 2, 2009
Page 134 of 156

[ftp]put main.bin main.bin 200 PORT command successful.
150 File status OK ; about to open data connection 226 Closing data connection; File transfer successful. FTP: 14323376 byte(s) sent in 15.974 second(s) 896.00Kbyte(s)/sec. [ftp]quit 221 Service closing control connection
After an application is uploaded to the device, you can use the boot-loader command to upgrade the device. For the upgrade procedure, refer to Upgrading the application on page 130.
BootWare Menu
Main BootWare Menu
When the router is powered on and reboots, the console terminal displays:
System application is starting... Booting Normal Extend BootWare........ The Extend BootWare is self-decompressing................. Done!
************************************************************************** * * * ************************************************************************** MSR30-20 BootWare, Version 3.00 * * *
Compiled Date CPU Type CPU L1 Cache CPU Clock Speed Memory Type Memory Size Memory Speed BootWare Size Flash Size cfa0 Size CPLD Version PCB Version
: May 27 2008 : MPC8349E : 32KB : 533MHz : DDR SDRAM : 256MB : 264MHz : 4096KB : 4MB : 256MB : 2.0 : 3.0
BootWare Validating... Press Ctrl+B to enter extended boot menu...
June 2, 2009
Page 135 of 156
The extended BootWare menu is referred to as main BootWare menu hereinafter in this manual unless otherwise specified. The sample output above may vary on your device.
If you press Ctrl+B when the system displays Press Ctrl+B to enter extended boot menu..., the system prompts for the BootWare password:
Please input BootWare password:
After you enter the correct password, the system enters the main BootWare menu. (The initial password is null. You have three chances to provide the correct BootWare password. If you have tried three times but failed, you need to reboot the system).
Note: The current operating device is cfa0 Enter < Storage Device Operation > to select device.
==========================<EXTEND-BOOTWARE MENU>========================== |<1> Boot System |<2> Enter Serial SubMenu |<3> Enter Ethernet SubMenu |<4> File Control |<5> Modify BootWare Password |<6> Skip Current System Configuration |<7> BootWare Operation Menu |<8> Clear Super Password |<9> Storage Device Operation |<0> Reboot ========================================================================== Enter your choice(0-9): | | | | | | | | | |
This menu is described as follows: Table 17 Main BootWare menu Item <1> Boot System <2> Enter Serial SubMenu Bootstrap Enter the serial interface submenu. For details about the submenu, refer to Serial interface submenu on page 137. Enter the Ethernet interface submenu. For details about the submenu, refer to Ethernet interface submenu on page 138. File control submenu. For details about the submenu, refer to File control submenu on page 138. Description
<3> Enter Ethernet SubMenu
<4> File Control
June 2, 2009
Page 136 of 156
<5> Modify BootWare Password
Modify the BootWare password. Boot the system with the default setting, instead of the current system configuration file. This function takes effect only for this startup. It is usually used after you lose your password. BootWare operation submenu. For details about the submenu, refer to BootWare operation submenu on page 139. Remove the super password.
<6> Skip Current System Configuration
<7> BootWare Operation Menu
<8> Clear Super Password
You need to use the super password when switching the user level. After you select the option, the super password will be cleared only at the first reboot. At the next reboot, the super password will restore. The storage medium operation menu, where you can select a storage medium. Reboot the router.
<9> Storage Device Operation <0> Reboot
BootWare Submenus
Serial interface submenu
Through this submenu, you can upgrade an application program, change the baud rate of a serial interface, and perform other operations. Enter 2 in the main BootWare menu to enter the serial interface submenu:
==========================<Enter Serial SubMenu>========================== |Note:the operating device is cfa0 |<1> Download Application Program To SDRAM And Run |<2> Update Main Application File |<3> Update Backup Application File |<4> Update Secure Application File |<5> Modify Serial Interface Parameter |<0> Exit To Main Menu ========================================================================== Enter your choice(0-5): | | | | | | |
The submenu is described as follows: Table 18 BootWare serial interface submenu Item <1> Download Application Program To SDRAM And Run <2> Update Main Application File <3> Update Backup Application File <4> Update Secure Application File
June 2, 2009
Description Download an application program to SDRAM and run it. Upgrade the main application program. Upgrade the backup application program. Upgrade the secure application program.
Page 137 of 156
<5> Modify Serial Interface Parameter <0> Exit To Main Menu
Modify serial interface parameters. Return to the main BootWare menu.
Ethernet interface submenu

Enter 3 in the main BootWare menu to enter the Ethernet interface submenu. The system displays:
=========================<Enter Ethernet SubMenu>========================= |Note:the operating device is cfa0 |<1> Download Application Program To SDRAM And Run |<2> Update Main Application File |<3> Update Backup Application File |<4> Update Secure Application File |<5> Modify Ethernet Parameter |<0> Exit To Main Menu |<Ensure The Parameter Be Modified Before Downloading!> ========================================================================== Enter your choice(0-5): | | | | | | | |
The Ethernet interface submenu is described as follows: Table 19 Ethernet interface submenu Item <1> Download Application Program To SDRAM And Run <2> Update Main Application File <3> Update Backup Application File <4> Update Secure Application File <5> Modify Ethernet Parameter <0> Exit To Main Menu Description Download the application program to SDRAM and run it. Upgrade the main application program. Upgrade the backup application program. Upgrade the secure application program. Modify Ethernet interface parameters. Return to the main BootWare menu.
File control submenu

Enter 4 in the main BootWare menu to enter the file control submenu. Through this submenu, you can view application program file type in the memory, modify a file name, and delete a file.
==============================<File CONTROL>============================== |Note:the operating device is cfa0 |<1> Display All File(s) |<2> Set Application File type |<3> Set Configuration File type |<4> Delete File |<0> Exit To Main Menu ========================================================================== | | | | | |
June 2, 2009
Page 138 of 156

Enter your choice(0-4):
The submenu is described as follows: Table 20 File control submenu Item <1> Display All File <2> Set Application File type <3> Set Configuration File type <4> Delete File <0> Exit To Main Menu Display all files. Set an application file type. Set a configuration file type. Delete a file. Return to the main BootWare menu. Description
BootWare operation submenu

Enter 7 in the main BootWare menu to enter the BootWare operation submenu:
========================<BootWare Operation Menu>========================= |Note:the operating device is cfa0 |<1> Backup Full BootWare |<2> Restore Full BootWare |<3> Update BootWare By Serial |<4> Update BootWare By Ethernet |<0> Exit To Main Menu | | | | | |
========================================================================== Enter your choice(0-4):
The submenu is described as follows: Table 21 BootWare operation submenu Item <1> Backup Full BootWare <2> Restore Full BootWare <3> Update BootWare By Serial <4> Update BootWare By Ethernet <0> Exit To Main Menu Description Back up the full BootWare. Restore the full BootWare. Upgrade BootWare through a serial interface Upgrade BootWare through an Ethernet interface Return to the Main BootWare menu
Upgrading an Application Program Through an Ethernet Interface

Enter 3 in the BootWare menu to enter the Ethernet interface submenu. For details about the submenu, refer to BootWare Submenus on page 137.
June 2, 2009
Page 139 of 156
Configuring Ethernet Interface Parameters

Before upgrading an application program through an Ethernet interface, we need to configure the Ethernet interface on the router as follows: Enter 3 in the BootWare menu to enter the Ethernet interface submenu. Then, enter 5 to enter the change Ethernet parameter submenu:
=========================<ETHERNET PARAMETER SET>========================= |Note: | | '.' = Clear field. '-' = Go to previous field. Ctrl+D = Quit. | | |
========================================================================== Protocol (FTP or TFTP) :tftp ftp Load File Name :host : Target File Name :target : Server IP Address Local IP Address Gateway IP Address FTP User Name FTP User Password :192.168.1.1 :192.168.1.253 :0.0.0.0 :user :password
Table 22 Ethernet parameters settings description Parameter '.' = Clear field '-' = Go to previous field Ctrl+D = Quit Protocol (FTP or TFTP) Load File Name Target File Name Description To clear the current field, input a (.) and then press Enter. To go to the previous field, input a hyphen (-) and then press Enter. The shortcut key combination for exiting the parameter configuration page is Ctrl+D. Select a transmission protocol, FTP or TFTP. Name of the source file, which must be consistent with the actual name of the file to be downloaded. Name for the target file to be saved. By default, it is the same as the name of the source file on the server. IP address of the FTP/TFTP server. To set a mask, separate the IP address from the mask with a colon (:), for example, 192.168.80.10:24. IP address of the local end, that is, the IP address of the FTP/TFTP client. Configure the gateway IP address if the server and the client are not on the same network segment. This option is not available for TFTP. This option is not available for TFTP.
Server IP Address
Local IP Address Gateway IP Address FTP User Name FTP User Password
June 2, 2009
Page 140 of 156
Upon upgrade failure, the system prompts Loading failed. In this case, please reboot the router to validate the reset IP address. Only FE0 can be used for upgrading an application program through an Ethernet interface on the MSR 20 series routers and GE0 can be used on the MSR 30 and MSR 50 series routers.
Upgrading Procedure
Trivial File Transfer Protocol (TFTP), a protocol in the TCP/IP protocol suite, is used to transfer trivial files between clients and the server. It provides not-so-complex and low-cost file transfer services. TFTP provides unreliable data transfer services over UDP and does not provide any access authorization and authentication mechanism. It employs timeout and retransmission to guarantee the successful delivery of data. The TFTP software is much smaller than the FTP software in size: File Transfer Protocol (FTP) is an application-layer protocol in the TCP/IP protocol suite. It mainly transfers files among remote hosts. Over TCP, FTP provides reliable and connection-oriented data transfer service but does not provide access authorization and authentication mechanism. Set up an upgrade environment. Set up a TFTP/FTP upgrade environment
Connect GigabitEthernet 0/0 to a PC with a crossover cable. Start the TFTP/FTP program on the PC, and set the path of TFTP/FTP server to directory of the application program. You need to set username and password if FTP server is used.
June 2, 2009
Page 141 of 156
No TFTP/FTP Server is shipped with the MSR 30 series routers.
Modify Ethernet interface parameters. For details, refer to Configuring Ethernet Interface Parameters on page 140. Enter 3 in the main BootWare menu to enter the Ethernet Interface submenu. For example, when upgrading the main application program, enter 2:
Loading................................................................... .......................................................................... ..........Done! 22165484 bytes downloaded! Updating File cfa0:/update.bin
After downloading the file, enter the file name to start the upgrade process:
Updating File main.bin........ Update Success!
Enter 0 to return to the main BootWare menu. Enter 1 to boot the system from the Flash memory. Set the upgraded application program to the main application file, namely, the default boot file of the system. Enter 4 when the above information appears.
==============================<File CONTROL>============================== |Note:the operating device is cfa0 |<1> Display All File(s) |<2> Set Application File type |<3> Set Configuration File type |<4> Delete File |<0> Exit To Main Menu | | | | | |
========================================================================== Enter your choice(0-4):2
Enter the file control submenu and enter 2 to set the application file type.
'M' = MAIN 'B' = BACKUP 'S' = SECURE 'N/A' = NOT ASSIGNED
========================================================================== |NO. Size(B) |1 |2 |0 22165484 22165484 Exit Time Type Name cfa0:/update.bin cfa0:/main.bin | | | |
Dec/20/2007 09:18:10 S Dec/20/2007 09:42:28 M
========================================================================== Enter file No:1
Enter the number of the file name to be modified.

Modify the file attribute: ==========================================================================
June 2, 2009
Page 142 of 156

|<1> +Main |<2> -Main |<3> +Backup |<4> -Backup |<0> Exit

| | | | |
========================================================================== Enter your choice(0-4):1
Enter 1 to set the selected application program to the main application file, namely, the default boot file of the system. Enter 0 to return to the main BootWare menu. Enter 1 to boot the system.
If the input file name is the same as the original one in the CF card or the flash memory, the system prompts that The file is exist, will you overwrite it? [Y/N]. Enter Y to overwrite the original file. The new application program file will then overwrite the original file of this type, ensuring the uniqueness of the application program on the device. Make sure the available space in the memory is sufficient. Or, the system prompts The free space isn't enough! The file updated will directly overwrite the original file of this type to become the only application program. The file downloaded here will overwrite the original M file and become the main boot program. For details of file types, refer to Files on page 125. You can set the main or backup attribute only for the startup file in the root directory of the device.
Upgrading BootWare Through Ethernet Interface

You can also upgrade the BootWare through Ethernet interface. Enter 4 in the BootWare submenu, and the system displays:
==================<BOOTWARE OPERATION ETHERNET SUB-MENU>================== |<1> Update Full BootWare |<2> Update Extend BootWare |<3> Update Basic BootWare |<4> Modify Ethernet Parameter |<0> Exit To Main Menu ========================================================================== Enter your choice(0-4): | | | | |
Before upgrading, enter 4 in the menu to configuring Ethernet parameters. For details, refer to Configuring Ethernet Interface Parameters on page 140. Then you can select to upgrade full BootWare, extended BootWare, or basic BootWare.
June 2, 2009
Page 143 of 156
Upgrading BootWare Through Serial Interface

Use XModem to upgrade BootWare through a serial interface.
XModem Protocol Overview

To upgrade the BootWare and application program through a serial interface, use the XModem protocol. XModem is a file transfer protocol widely used for its simplicity and good performance. Modem transfers files through serial interfaces. It supports transmission of packets in 128 bytes and 1 KB, error check (checksum and CRC), and error retransmission (generally the maximum number of retransmission attempts is 10). XModem transmission is completed by the cooperation of a receiver and a sender. The receiver sends a negotiation message to the sender to negotiate an error check method. After the negotiation, the sender starts to transmit data packets. After a complete packet is received, the receiver checks the packet using the agreed method. If the check is passed, the receiver sends an acknowledgement message to the sender. Upon receiving the message, the sender continues to send the next packet. If the check fails, the receiver sends a negative acknowledgement message to the sender. Upon receiving the message, the sender retransmits the packet.
Modifying Serial Interface Parameters

Sometimes, we need to increase the baud rate of a serial interface to save software upgrade time, or lower the baud rate to guarantee transmission reliability. This section describes how to adjust the baud rate of a serial interface. Enter 2 in the main BootWare menu to enter the serial interface submenu. Then, enter 5 and the system prompts for changing a baud rate.
==============================<BAUDRATE SET>============================== |Note:'*'indicates the current baudrate | Change The HyperTerminal's Baudrate Accordingly | |
|--------------------------<Baudrate Avaliable>--------------------------| |<1> 9600(Default)* |<2> 19200 |<3> 38400 |<4> 57600 |<5> 115200 |<0> Exit | | | | | |
Select a proper baud rate, 5 for 115200 bps for example. The following prompt appears:
Baudrate has been changed to 115200 bps. Please change the terminal's baudrate to 115200 bps, press ENTER when ready.
June 2, 2009
Page 144 of 156
Since the baud rate of the serial interface on the router is changed to 115200 bps, whereas the terminal baud rate remains 9600 bps, they cannot communicate with each other. Change the baud rate on the console terminal to the one selected for downloading software. Perform the following configurations on the console terminal: Disconnect terminal
Select File > Properties, and press Configure to change the baud rate to 115200 bps: Modify baud rate
Select Call > Call to establish a new connection.
June 2, 2009
Page 145 of 156
Establish a new connection
Press Enter to view the current baud rate and return to the previous menu. The system displays:
The current baudrate is 115200 bps
Restore the baud rate in the HyperTerminal to 9600 bps after upgrading the BootWare. This ensures that the information can be displayed on the console terminal after system boot or reboot.
Upgrading BootWare
First, enter 7 in the main BootWare menu (refer to Main BootWare Menu on page 135) to enter the BootWare operation submenu, through which all BootWare operations are performed. For details, refer to BootWare Submenus on page 137. The following example illustrates how to upgrade the full BootWare: First, change the baud rate of the serial interface to speed up upgrading (refer to Main BootWare Menu on page 135 for details), and then enter 3 in the BootWare operation menu. The system displays:
===================<BOOTWARE OPERATION SERIAL SUB-MENU>=================== |<1> Update Full BootWare |<2> Update Extend BootWare |<3> Update Basic BootWare |<4> Modify Serial Interface Parameter |<0> Exit To Main Menu | | | | |
Enter 4 in the BootWare operation menu to set the baud rate. For details about this menu, refer to BootWare operation submenu on page 139. Enter 1, and the system displays:
Please Start To Transfer File, Press <Ctrl+C> To Exit.
June 2, 2009
Page 146 of 156

Waiting ...CC
Select Transfer > Send file in the HyperTerminal window. The following window appears: Send file dialog box
Click Browse to select the application program file to be downloaded, and select XModem for the Protocol field. Then click Send. The following interface appears: Sending file interface
Upon completion of downloading, the following information appears, indicating that download and upgrade succeeds:
Download successfully! 425045 bytes downloaded!
Change the baud rate of the console terminal from 115200 bps to 9600 bps, and then reboot the router.
June 2, 2009
Page 147 of 156
The file name, size and path vary in different situations. Before upgrading, check the current version of BootWare and application program. Restore the baud rate in the HyperTerminal to 9600 bps after upgrading the BootWare. This ensures that the information can be displayed on the console terminal after system boot or reboot. Upgrading the extended BootWare involves only a segment of BootWare. Once an error occurs, you can re-upgrade BootWare.
Upgrading an Application Program Through a Serial Interface

Upgrading an application program through a serial interface is implemented under the serial submenu. Enter 2 in the main BootWare menu to enter the serial interface submenu: For details, refer to BootWare Submenus on page 137. The following example illustrates how to upgrade a main application program. First, change the baud rate of the serial interface to speed up upgrading (refer to Modifying Serial Interface Parameters on page 144 for details). Then enter 2 in the serial interface submenu. The system displays:
Please Start To Transfer File, Press <Ctrl+C> To Exit. Waiting ...CC
Select an application program file and send it. The procedure for upgrading an application program through a serial interface is similar to that for upgrading BootWare. For the detailed procedure, see Upgrading BootWare on page 146.
Generally an application program is more than 10 MB in size. Even if the baud rate is changed to 115200 bps, it usually takes about 30 minutes to upgrade an application program. Therefore, you are recommended to upgrade an application program through an Ethernet interface.
Maintaining Application and Configuration Files

You can view and modify a file type in the file control submenu: Enter 4 in the main BootWare menu to enter the file control submenu. The system displays:
==============================<File CONTROL>============================== |Note:the operating device is cfa0 |<1> Display All File(s) |<2> Set Application File type | | |
June 2, 2009
Page 148 of 156

| | |
|<3> Set Configuration File type |<4> Delete File |<0> Exit To Main Menu
Displaying all files

Enter 1, and the system displays:
Display all file(s) in cfa0 'M' = MAIN 'B' = BACKUP 'S' = SECURE 'N/A' = NOT ASSIGNED
========================================================================== |NO. Size(B) |1 |2 |3 |4 640199 22165484 1181 22165484 Time Type Name cfa0:/logfile/logfile.log cfa0:/update.bin cfa0:/startup.cfg cfa0:/main.bin | | | | |
Dec/20/2007 09:53:16 N/A Dec/20/2007 09:18:10 B+S Dec/20/2007 09:42:54 N/A Dec/20/2007 09:42:28 M
==========================================================================
Setting the application file type

Enter 2 in the file control submenu to enter the set application file type submenu:
========================================================================== |NO. Size(B) |1 |2 |0 22165484 22165484 Exit Time Type Name cfa0:/update.bin cfa0:/main.bin | | | |
Dec/20/2007 09:18:10 B+S Dec/20/2007 09:42:28 M
======================================================================== Enter file No:
Enter the number of the file to be modified and press Enter, the system will prompt you to modify the file type:
Modify the file attribute: ========================================================================== |<1> +Main |<2> -Main |<3> +Backup |<4> -Backup |<0> Exit | | | | |
You can set the file type to M (main) or B (backup) or cancel the setting by entering digits 1 to 4. Refer to Introduction on page 125 for details.
June 2, 2009
Page 149 of 156
Setting the configuration file type

Enter 3 in the file control submenu to enter the configuration file type submenu:
========================================================================== |NO. Size(B) |1 |0 1181 Exit Time Type Name cfa0:/startup.cfg | | |
Dec/20/2007 09:42:54 N/A
========================================================================== Enter file No:
Enter the number of the file to be modified and press Enter, the system prompts you to modify the file type:
Modify the file attribute: ========================================================================== |<1> +Main |<2> -Main |<3> +Backup |<4> -Backup |<0> Exit | | | | |
You can set the file type to M (main) or B (backup) or cancel the setting by entering digits 1 to 4. Refer to Introduction on page 125 for details.
Deleting files
Enter 4 in the file control submenu to delete files:
Deleting the file in cfa0: 'M' = MAIN 'B' = BACKUP 'S' = SECURE 'N/A' = NOT ASSIGNED
========================================================================== |NO. Size(B) |1 |2 |3 |4 |0 640199 22165484 1181 22165484 Exit Time Type Name cfa0:/logfile/logfile.log cfa0:/update.bin cfa0:/startup.cfg cfa0:/main.bin | | | | | |
Dec/20/2007 09:53:16 N/A Dec/20/2007 09:18:10 B+S Dec/20/2007 09:42:54 N/A Dec/20/2007 09:42:28 M
========================================================================== Enter file No:
Enter the number of the file to be deleted and press Enter, and then the system displays:
The file you selected is cfa0:/backup.bak,Delete it? [Y/N]Y Deleting........Done!
June 2, 2009
Page 150 of 156
You can set the main or backup attribute only for the application and configuration file in the root directory, and the full filename (including the path) of the application file must not exceed 63 characters.
Returning to the main BootWare menu

Return to the main BootWare menu.
Dealing with Password Loss

Use the following solutions when your BootWare password, user password or Super Password is lost.
User Password Loss

You cannot enter the system if you lose your user password. In this case, you can boot the system by ignoring the system configuration. Perform the following operations to set a new user password: Enter the main BootWare menu, and enter 6 to boot the system by ignoring the system configuration. The system displays:
Flag Set Success.
The system prompts the setting succeeds. When the main BootWare menu appears again, enter 0 to reboot the system. Set a new password in system view.
[SYSTEM]user-interface console 0 [SYSTEM-ui-console0]authentication-mode password [SYSTEM-ui-console0]set authentication password simple 123456
The above information indicates that the password authentication is adopted on the console interface and the password is set to 123456 and stored in plain text.
After reboot, the system runs the initial default configuration, but the original configuration file is stored in the Flash memory. To restore the original configuration, you can use the display saved-configuration command to display it, and then copy and execute it. If the password is stored in plain text, you can use the display current-configuration command to view the password in the current configuration. If you use the set authentication password cipher 123456 command to set a password, the password is stored in cipher text.
June 2, 2009
Page 151 of 156
Save the new configuration.

[SYSTEM] save
Use the save command to save your new password.
BootWare Password Loss

Contact the agent or the technical support personnel to set a new BootWare password in the event of BootWare password loss. You can modify the BootWare password under the main BootWare menu. Enter 5 in the main BootWare menu to modify the password: The console terminal displays:
please input old password: Please input new password: Please input new password again: Password Set Successfully.
The password modification fails when the old password is not correct or new password is inconsistent. Then the system will exit this operation.
Super Password Loss

The super password enables you to switch between four super levels. In the event of super password loss, you cannot perform higher level operations. You can clear the super password by entering 8 in the main BootWare menu. After you clear the super password, quit the menu and reboot the router, you can directly enter system view. The setting is valid for the first reboot of the router only. The super password will be restored after a second reboot.
Backing Up and Restoring BootWare

Enter 7 under the main BootWare menu to enter the BootWare operation submenu. Refer to BootWare operation submenu on page 139 for details. Enter 1 under the menu, and the system starts to backup the entire BootWare. The system prompts:
Will you backup the Basic BootWare? [Y/N]Y
June 2, 2009
Page 152 of 156
Begin to backup the Basic BootWare................................Done! Will you backup the Extend BootWare? [Y/N]Y Begin to backup the Extend BootWare................................Done!
Now, the entire BootWare is backed up to the memory. Enter 2 under the menu to restore the BootWare in the memory to the system:
Will you restore the Basic BootWare? [Y/N]Y Begin to restore Normal Basic BootWare................................Done! Will you restore the Extend BootWare? [Y/N]Y Begin to restore Normal Extend BootWare................................Done!
Note that the MSR 30-11 does not support backup and restoration of the extended BootWare. When you perform the backup operation, the system displays the following information:
The function of backuping Extended BootWare is not support!
When you perform the restoration operation, the system displays:

The function of restore Extended BootWare is not support!
Software Upgrading Through Web

The device obtains the target application file in the user-defined path through HTTP and has the system upgraded to the target version at the next reboot. Select System Management > Software Upgrade from the navigation tree to enter the page as shown below.
Click Browse. On the dialog box displayed, select the target application file in the local path, and specify the name of the application file to be stored on the device. Then select the If the file with same name exists, overwrite it out remind check box. Click Apply to upgrade the software, as shown in the following figure.
June 2, 2009
Page 153 of 156
The upgrade process takes about three to five minutes. During this process, ensure that the network connection is normal and do not power off or restart the device.
After the upgrade is complete, the system displays the following information and you need to restart the device.
June 2, 2009
Page 154 of 156
Before restarting the device, follow these steps to save the current system configuration: select System Management > Configuration from the navigation tree to enter the default Save page, and then click Save Current Settings, as shown in the following figure.
Click Yes in the pop-up dialog box.
After saving the configuration information, select System Management > Reboot from the navigation tree to enter the page shown below. Click Apply to reboot the device.
June 2, 2009 Page 155 of 156
Copyright 2009 Hangzhou H3C Technologies Co., Ltd. All rights reserved. No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd. The information in this document is subject to change without notice.
June 2, 2009
Page 156 of 156

Manual h3c Msr20 Msr30 Msr50-Cmw520-r1719p03-Si Release Notes 0 1285 2

Încărcat de

Informații document

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Manual h3c Msr20 Msr30 Msr50-Cmw520-r1719p03-Si Release Notes 0 1285 2

Încărcat de

Drepturi de autor:

Formate disponibile

H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes

Hangzhou H3C Technologies Co., Ltd.

Hangzhou H3C Technologies Co., Ltd.

H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes

H3C MSR20_MSR30_MSR50-CMW520-R1719P03-SI Release Notes

Hangzhou H3C Technologies Co., Ltd.

H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes

Hangzhou H3C Technologies Co., Ltd.

H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes

Hangzhou H3C Technologies Co., Ltd.

H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes

Hangzhou H3C Technologies Co., Ltd.

H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes

CMW520-R1719P02 CMW520-R1719P02 CMW520-R1719P01 CMW520-E1719P01 CMW520-E1719

CMW520-R1719P01 CMW520-E1719P01 CMW520-R1719 CMW520-E1719 None

2009-04-13 2009-04-13 2009-03-19 2009-03-19 2009-02-16

CMW520-R1718 CMW520-R1717 CMW520-R1717 CMW520-E1713

Hangzhou H3C Technologies Co., Ltd.

H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes

Remarks MSR50 MPU-G2)

CMW520-B1608 CMW520-B1606 CMW520-R1508P02 CMW520-B1508P02 CMW520-B1508 CMW520-R1508

CMW520-B1606 CMW520-R1508P02 CMW520-R1508 CMW520-B1508 CMW520-B1506P02 CMW520-R1507

2007-11-29 2007-10-19 2007-09-24 2007-09-24 2007-09-07 2007-09-03

CMW520-B1506P02 CMW520-B1506P01 CMW520-B1506

CMW520-B1506P01 CMW520-B1506 CMW520-B1502

2007-08-02 2007-07-05 2007-06-18

Hangzhou H3C Technologies Co., Ltd.

H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes

Hardware and Software Compatibility Matrix

f434e0d084b4709f7d8fc9f515e28e2a b18efe4c6017cbfbd5dbcc915ef7b871 6899e754805468eb5a8e189789713c6e

Hangzhou H3C Technologies Co., Ltd.

H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes

Specifications MSR30-CMW520R1719P03-SI.BIN MSR50-CMW520R1719P03-SI.BIN MSR50-CMW520R1719P03-EPUSI.BIN MSR301X-CMW520R1719P03.BIN 3de997a2a946316bd08722e2ed604010

(Hardware)3.0, (Hardware)3.0, (Hardware)3.0, (Hardware)3.0, (Hardware)3.0,

Hangzhou H3C Technologies Co., Ltd.

H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes

Restrictions and Cautions

MSR 20-10 44.2mm%300

MSR 20-11 44.2mm%300

MSR 20-12 44.2mm%300

MSR 20-13 44.2mm%300

MSR 20-15 44.2mm%300

Hangzhou H3C Technologies Co., Ltd.

H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes

W x D) Weight Input AC voltage

Externa l module Internal module

Hangzhou H3C Technologies Co., Ltd.

H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes

Default: 256MB Maximum: 384MB Default: 256MB

1 0 0 1 1 1 Two electrical interfaces

1 0 0 1 1 1 Two electrical interfaces

2 1 2 1 1 1 Two electrical interfaces

Hangzhou H3C Technologies Co., Ltd.

H3C MSR20_MSR30_MSR50-CMW520R1719P03-SI Release Notes

MSR 30-11 442 mm360 mm44.2mm 4.6Kg

MSR 30-16 442mm441. 8mm44.2m m 6Kg

MSR 30-20 442mm441. 8mm44.2m m 6.9Kg

MSR 30-40 442mm422. 3mm88.2m m 11.9Kg

MSR 30-60 442mm421. 8mm132m m 13.6Kg

Rated voltage: 100 VAC to 240 VAC;

Not support DC 100W

Rated voltage: -48V d.c.-60V d.c 125W

Rated voltage: -48V d.c.-60V d.c 210W

Rated voltage: -48V d.c.-60V d.c 210W