90系列串接采集设备用户手册-V1 3_EN

Series 90 Serial-connection Acquisition Equipment User ManualCommunication Data Reconnaissance Station System System Operation Manual Series 90 Serial-connection Acquisition Equipment User Manual CEIECContents 1.Safety Instructions11.1Manual instructions11.2Safety Instructions11.3Symbol instructions22.Equipment introduction32.1Product overview32.2Working principle32.3Service processing board introduction42.4Technical characteristics and equipment parameters53.Introduction of command modes63.1Introduction of command modes63.2Online help73.3Command abbreviation93.4Command history94.Basic equipment use and operation114.1Connection mode114.1.1Serial connection114.1.2Telnet connection124.2Configure basic parameters134.2.1Startup configuration134.2.2Configure the management interface address154.2.3Configure the default route154.2.4Configure the equipment name164.2.5Set system time174.3System information view175.System file management195.1File system management195.1.1Introduction of file system195.1.2Operation of file system195.2Version management205.2.1Version import205.2.2Version export205.2.3Version saving205.2.4Configure file management205.2.5Configure file import205.2.6Configure file export215.3System information view215.3.1Software and hardware version information215.3.2Configuration information currently running215.3.3Display BOOT information226.Introduction of the operating mode of the serial-connection equipment236.1Overview of the application mode of the serial-connection equipment236.2Overview of policy actions of the serial-connection equipment246.3Overview of related interfaces of the serial-connection equipment246.4Overview of the backflow function256.4.1Overview of the backflow function256.4.2Encapsulation format of backflow messages (PPP mode)266.4.3Encapsulation format of backflow messages (Ethernet single-link mode)286.4.4Encapsulation format of backflow messages (Ethernet multilink mode)316.5Overview of alive-keeping protocol336.5.1Overview of ICMP alive-keeping336.5.2Overview of BFD alive-keeping336.5.3MAC encapsulation format of ARP request messages346.5.4MAC encapsulation format of ICMP/BFD request messages347.Port configuration367.1Port type367.2Port naming367.3Port configuration377.3.1Configure the input port377.3.2Configure group rule binding387.3.3Configure the CRC error message processing mode397.3.4Configure traffic control407.3.5Configure the inter-frame space407.3.6Configure port description417.3.7Enable/disable ports417.3.8Configure jumbo frames (ETH)427.3.9Configure MTU (POS)437.3.10Configure scrambling code and CRC (POS)437.3.11Configure the line flag (POS)447.4Monitoring port group configuration467.4.1Configure the monitoring interface group467.5Redirection and backflow port configuration497.5.1Configure redirection and backflow interfaces497.5.2Configure the access control for redirection and backflow interfaces517.5.3 Access control configuration example537.6Port maintenance and diagnostics548.Configure output port groups and server groups578.1Overview of output port groups and server groups578.2Configure output port groups578.3Configure server groups598.4Maintenance and diagnosis of output port groups and server groups619.Configure protection policy629.1Overview of protection policy629.2Configure the protection policy and switching of the optical protection board card629.3Configure service board card protection669.4Maintenance and diagnosis of protection policy6710.Resource management configuration6810.1Overview of resource management6810.2Resource management configuration6810.3Resource release6810.3.1Configure the Tcam mode6910.3.2Configure the total rule capacity7010.3.3Configure the total Hash rule capacity7110.3.4Configure the total TCAM rule capacity7310.3.5Configure the TCAM rule priority and its capacity7410.3.6Configure the service policy rule capacity7610.3.7Resource allocation validation7810.4Resource management maintenance and diagnosis7811.Configure service policy8111.1Overview of service policy8111.2Configure service policy8111.2.1Configure service action policy8111.2.2Configure service policy message encapsulation8311.2.3Configure service policy priority8411.2.4Configure service policy hit rate8511.2.5Configure service policy rule types8611.2.6Configure service policy tuple types8711.3Maintenance and diagnosis of service policy8912.Configure the timer9012.1Overview of the timer9012.2Configure the timer9012.2.1Enable hit refresh9012.2.2SHELL#write9112.2.3Enable rule aging9112.2.4Configure the session timer9212.2.5Configure the rule aging timer9312.3Maintenance and diagnosis of the timer9413.Configure rules9513.1Overview of rules9513.1.1Rule type9513.1.2Rule capacity and priority9613.2Configure L2 VLAN rules9713.2.1Configure L2 VLAN rules9713.3Configure L2 MPLS rules9913.3.1Configure L2 MPLS rules9913.4Configure L3 IPv6 rules10113.4.1Configure L3 IPv6 rules10113.5Configure L4 IPv4 rules10313.5.1Configure L4 IPv4 rules10313.6Configure L4 IPv6 rules10513.6.1Configure L4 IPv6 rules10513.7Configure feature code rules10713.7.1Configure feature code rule configuration10713.8Rules maintenance and diagnostics10914.Processing policy configuration11214.1Overview of processing policy11214.2Configure L2 processing policy11214.2.1Configure L2 processing policy11214.3Configure L3 processing policy11314.3.1Configure L3 processing policy11314.4Configure L4 processing policy11614.4.1Configure L4 processing policy11614.5Configure tunnel policy11714.5.1Configure tunnel policy11814.6Maintenance and diagnosis of processing policy11915.Configure FlowWare12015.1Overview of FlowWare12015.2Configure FlowWare12015.2.1Enable/disable hit rate statistics12015.2.2Configure alive-keeping12115.2.3Configure the output message format12315.2.4Configure transparent transmission of oversized packets12415.2.5Configure the starting matching position of the feature code12415.3FlowWare maintenance and diagnostics12516.Configure FCP protocols12616.1Overview of FCP protocols12616.2Configure FCP12616.2.1Configure fcp12616.3Maintenance and diagnosis of RCP configuration12717.Network management configuration12817.1Overview of network management information12817.2Configure the network management information12817.2.1Configure SNMP12817.3Network management information maintenance and diagnosis13318.Error detection configuration13418.1Overview of error detection13418.2Configure error detection13418.2.1Configure error detection13418.3Maintenance and diagnosis of error detection configuration13619.Data forwarding maintenance and diagnosis13719.1Overview of data maintenance and diagnosis13719.2Data forwarding maintenance and diagnosis13719.2.1Traffic trace13719.2.2Message forwarding port query138 Serial-connection Acquisition Equipment User Manual1. Safety Instructions This chapter contains the following topics: l Manual instructions l Safety Instructions l Symbol instructions 1.1 Manual instructions Special equipment products of Series 90 include 9012, 9005 and 9002. As an information system application platform that is specially developed according to various demands for network information and holds the completely independent intellectual property, the special equipment of Series 90 has the following characteristics: l Support redundant backup of key parts which provides high equipment reliability to ensure uninterrupted equipment running and service upgrading; l Support hardware-based message parsing and filtering to provide higher access rate and capacity as well as more flexible service ability; l Support large-capacity rules and allow multi-user management which greatly reduce construction and maintenance costs of customers. Information on the hardware structure, hardware composition, system configuration, system performance and physical parameters of the special equipment of Series 90 and the single board and optical module it supports. This Manual is suitable for reading by the following personnel: l Equipment installation engineer l Installation supervision engineer l Software debugging engineer l Equipment maintenance engineer 1.2 Safety Instructions The special equipment has high temperature and high pressure, so only trained and qualified professionals are allowed to perform installation, operation and maintenance. During equipment installation, operation and maintenance, local safety specifications and relevant operating procedures must be obeyed; otherwise, personal injury or equipment damage may occur. Safety precautions mentioned in this Manual just act as supplement to the local safety specifications. Our company will not undertake the responsibility for violations of the general operation safety requirements or for violations of equipment design, production and use safety standards. 1.3 Symbol instructions When this Manual describes the equipment installation, operation and maintenance, the following formats shall be adopted to emphasize those in need of special attention of readers and their meanings are as below. Table 1-1 Symbol description Safety symbols Significance Danger Mean that if the safety warning is ignored, a severe accident that results in equipment damage or personal injure may occur Warning Mean that if the safety warning is ignored, a severe accident that results in equipment damage or personal injure may occur Notice Mean that if the safety warning is ignored, a series of consequences such as equipment damage, data loss, equipment performance degradation and other unpredictable ones may occur Hints Mean that this content is special prompt information &Instructions Mean that this content is additional information of the main body 52. Equipment introduction This chapter contains the following topics: l Product overview l Hardware overview l Technical characteristics and parameters 2.1 Product overview Along with the explosive growth of the Internet, security and manageability of the network have to face higher requirements. In the network application process, it is required to provide the normal user service and have controllability, so as to monitor and manage the illegal information on the Internet. Our company has developed Series 90 special equipment relying on rich experience in R&D and production of telecommunications-class network products for the purpose of satisfying the network information supervision demand. Series 90 special equipment is composed of software and hardware: l In terms of hardware, it has three models, namely, 9002, 9005 and 9012 and is able to provide application interfaces of GE, 10GE, POS, 2.5G POS, 10G POS, 40GE and 100GE for various application environments. Be suitable for construction of networks characterized by high reliability and large capacity. Different computer cases are available for selection to be deployed according to the actual capacity demands of users. 2.2 Working principle Series 90 equipment is of a standard 19-inch plug-in box structure and it mainly includes several equipment types as below: l 9012 has 14 slots in total, among which, 2 ones are control switching board slots and 12 ones are slots of the data processing interface board; l 9005 has 7 slots in total, among which, 2 ones are control switching board slots and 5 ones are slots of the data processing interface board. l 9002 has 4 slots in total, among which, 2 ones are control switching board slots, 2 ones are power supply slots and 2 ones are slots of the data processing interface board. Series 90 special equipment is of a distributed design style, so that it is possible to flexibly configure the circuit processing board, the service processing board, the traffic-distributing converging board, the server blade and other single processing boards according to the actual application. The distributed architecture of Series 90 special equipment provides the large-capacity high-density service processing ability and each single service board can access traffic for service processing and analysis. If the service is in need of cross-single board processing, it will be forwarded to the service processing board via the high-speed switching matrix for processing and this matrix can work under the redundancy mode or the load balancing mode. Hardware design of Series 90 special equipment adheres to the principle of system modularization design. According to system functions, it is mainly composed of the control module, the switching module, the packet processing and interface module as well as the power supply module. l Control module: The control module is composed of the main processor and some external functional chips to realize processing and control of various applications by the system. It provides operation interfaces outward for data operation and maintenance. l Switching module: The switching module has multi-channel high-speed bidirectional interfaces, which can complete the line speed data switching between data processing interface boards. l Packet processing and interface module: It could provide one or multiple physical ports, and different circuit interface boards can realize access of service with different rates and different types. In addition, this module includes one or more of the circuit processing board, the service processing board, the traffic-distributing converging board or the blade server. l Power supply module: The power module adopts 220V AC power supply or -48V DC power supply, to supply power required for other parts inside the system. The control switching module achieves switching, protocol processing, system configuration and network management interface functions, and as the core part of the system, it allows redundancy configuration; The control switching board of each type of machine frame is independent, not allowing mixed use with the service board card; The packet processing and interface module covers the traffic access processing and the output service board card, which could be used together and this module supports all types of machine frames. 2.3 Service processing board introduction The service processing board is mainly in charge of message processing, including forwarding, drop, copying and traffic distributing, to achieve line-speed forwarding of service traffic. FlowWare Series 90 special equipment supports service processing boards of different types and port densities. 2.3.1 Technical characteristics and equipment parameters Technical characteristics and equipment parameters of Series 90 special equipment are as below: Table 2-1 Technical properties and equipment parameters Items Description Dimension 9012: 755mm (height) 442mm (width) 470mm (depth) 9005: 440mm (height) 442mm (width) 470mm (depth) 9002: 175mm (height) 442mm (width) 470mm (depth) Weight 9012:Full-configuration complete machine 99kg 9005:Full-configuration complete machine 52kg 9002:Full-configuration complete machine 27kg Power supply AC power supply: 100V240V,50Hz 60HzDC power supply: -57V-40VHigh voltage and DC: 192V 400VPower consumption 9012:Total power consumption of full-configuration complete machine 4,360W 9005:Total power consumption of full-configuration complete machine 1,850W 9002:Total power consumption of full-configuration complete machine 400,000h MTTR:Directly enter after system login View simple information Privilege mode SHELL#enable (user mode) Configure the system parameters Global configuration mode SHELL(conifg)#configure terminal (privilege mode) Configure global service parameters Port configuration mode SHELL(config-if)#interface |byname (global configuration mode) Configure the terminal parameters port group configuration mode SHELL(port-group)#port-group id flowcomb_Id (global configuration mode) Configure port g