99-Comware v3 Command Manual PDF

Comware V3
Command Manual
Hangzhou Huawei-3Com Technology Co., Ltd.

http://www.huawei-3com.com
Manual Version: T2-08192H-20060927-C-3.01

Copyright © 2006, Hangzhou Huawei-3Com Technology Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means
without prior written consent of Hangzhou Huawei-3Com Technology Co., Ltd.
Trademarks
H3C, Aolynk, , IRF, H3Care, , Neocean, , TOP G, SecEngine,

2 n
SecPath, COMWARE, VVG, V G, V G, PSPT, NetPilot, and XGbus are trademarks of
Hangzhou Huawei-3Com Technology Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their
respective owners.
Notice
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
the warranty of any kind, express or implied.
To obtain the latest information, please access:
Technical Support
customer_service@huawei-3com.com
About This Manual
Related Documentation
In addition to this manual, each related documentation set includes the following:
Manual Description
The manual is a guide for the user to
perform the operations correctly. It is
organized into the parts of getting
started, system management, interface,
Comware V3 Operation Manual link layer protocol, network protocol,
routing protocol, multicast protocol,
security, VPN, reliability, QoS, MPLS,
dial-up and Non-IP Architecture, as well
as acronyms used in the manual.
The manual gives the user a guide and
Low-End and Mid-Range Series Routers
related commands to operate terminal
Terminal Access User Manual
access.
Organization
Comware V3 Command Manual is organized as follows:
Part Contents
introduces Comware V3 user interface
1 Getting Started
configuration commands.
introduces the configuration commands
of system maintenance management,
2 System Management file management, user interface
configuration, NTP configuration, SNMP
configuration and terminal services.
of LAN interface,
synchronous/asynchronous serial
3. Interface
interface, CE1 interface, subinterface,
virtual interface template and virtual
Ethernet interface.
of PPP, MP, PPPoE, SLIP, ISDN, VLAN,
4. Link Layer Protocol
HDLC, Frame Relay, ATM, LAPB and
X.25.
Part Contents
IP address, static address resolution,
5. Network Protocol domain name resolution, IP
performance, IP unicast policy routing,
IP multicast policy routing and DLSw.
of static routing, RIP, OSPF, IS-IS, BGP,
6. Routing Protocol
MBGP, IP routing policy and IP route
capacity.
of common multicast, IGMP, PIM DM,
7. Multicast Protocol
PIM SM, MSDP, MBGP and multicast
static routing.
introduces MPLS configuration
8. MPLS
commands.
9. Security of AAA, RADIUS, firewall, NAT, IPSec
and IKE.
10. VPN of L2TP, GRE, BGP/MPLS VPN and
MPLS L2VPN.
of traffic classification, traffic policing,
11. QoS
traffic shaping, congestion management
and congestion avoidance.
12. Reliability
of standby center and VRRP.
13. Dial-up
of DCC and modem.
for implementing voice and fax services
14. Voice on IP networks, such as VoIP, E1/T1,
fax, voice RADIUS, GK client, and SIP
client.
15. Non-IP Architecture
of OSI, IPX and DLSw.
lists all the commands that appear in the
16. Command Index
manuals.
Conventions
The manual uses the following conventions:

I. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.

Items (keywords or arguments) in square brackets [ ] are
[]
optional.
Alternative items are grouped in braces and separated by
{ x | y | ... }
vertical bars. One is selected.
Optional alternative items are grouped in square brackets
[ x | y | ... ]
and separated by vertical bars. One or none is selected.
Alternative items are grouped in braces and separated by
{ x | y | ... } * vertical bars. A minimum of one or a maximum of all can be
selected.
Optional alternative items are grouped in square brackets
[ x | y | ... ] * and separated by vertical bars. Many or none can be
selected.
# A line starting with the # sign is comments.
II. GUI conventions
Button names are inside angle brackets. For example, click
<>
<OK>.
Window names, menu items, data table and field names
[] are inside square brackets. For example, pop up the [New
User] window.
Multi-level menus are separated by forward slashes. For
/
example, [File/Create/Folder].
III. Symbols
Means reader be extremely careful. Improper operation
Warning may cause bodily injury.
Means reader be careful. Improper operation may cause

Caution data loss or damage to equipment.
Note Means a complementary description.

Getting Started
Command Manual – Getting Started
Comware V3 Table of Contents
Table of Contents
Chapter 1 Basic Configuration Commands................................................................................ 1-1

1.1 Basic Configuration Commands ........................................................................................ 1-1
1.1.1 authentication super hwtacacs-scheme.................................................................. 1-1
1.1.2 clock datetime ......................................................................................................... 1-1
1.1.3 clock summer-time .................................................................................................. 1-2
1.1.4 clock timezone......................................................................................................... 1-4
1.1.5 command-privilege .................................................................................................. 1-4
1.1.6 cpu-usage cycle ...................................................................................................... 1-5
1.1.7 display clipboard...................................................................................................... 1-6
1.1.8 display clock ............................................................................................................ 1-7
1.1.9 display cpu-usage ................................................................................................... 1-7
1.1.10 display cpu-usage history...................................................................................... 1-8
1.1.11 display history-command .................................................................................... 1-10
1.1.12 display log startup ............................................................................................... 1-11
1.1.13 display memory ................................................................................................... 1-11
1.1.14 display version..................................................................................................... 1-12
1.1.15 free unused porttag ............................................................................................. 1-13
1.1.16 header ................................................................................................................. 1-14
1.1.17 hotkey.................................................................................................................. 1-15
1.1.18 language-mode ................................................................................................... 1-17
1.1.19 lock ...................................................................................................................... 1-18
1.1.20 log startup............................................................................................................ 1-18
1.1.21 quit....................................................................................................................... 1-19
1.1.22 return ................................................................................................................... 1-20
1.1.23 super ................................................................................................................... 1-20
1.1.24 super password................................................................................................... 1-21
1.1.25 super authentication-mode.................................................................................. 1-22
1.1.26 sysname .............................................................................................................. 1-23
1.1.27 system-view......................................................................................................... 1-23
1.1.28 vrbd ..................................................................................................................... 1-24
1.2 Command-Alias Configuration Commands ..................................................................... 1-24
1.2.1 command-alias enable .......................................................................................... 1-24
1.2.2 command-alias mapping ....................................................................................... 1-25
1.2.3 display command-alias.......................................................................................... 1-26
i
Comware V3 Chapter 1 Basic Configuration Commands
Chapter 1 Basic Configuration Commands
1.1 Basic Configuration Commands

1.1.1 authentication super hwtacacs-scheme
Syntax
authentication super hwtacacs-scheme hwtacacs-scheme-name

undo authentication super hwtacacs-scheme
View
ISP domain view
Parameter
hwtacacs-scheme-name: Name of the HWTACACS scheme configured on the router.
Description
Use the authentication super hwtacacs-scheme command to configure super

authentication scheme for a domain.
Use the undo authentication super command to delete super authentication scheme
for a domain.
Example
# Configure the super authentication scheme for system domain to sup.

<H3C> system-view
[H3C] domain system
[H3C-isp-system] authentication super hwtacacs-scheme sup
1.1.2 clock datetime
Syntax
clock datetime time date
View
User view
Parameter
time: Current time in the format of HH:MM:SS, where HH is hours in the range 0 to 23,
MM is minutes in the range 0 to 59, and SS is seconds in the range 0 to 59.
1-1
date: Current date in the format of MM/DD/YYYY or YYYY/MM/DD. MM is the month of

the year in the range 1 to 12, DD is the day of the month in the range 1 to 31, and YYYY
is a year in the range 2000 to 2099.
Description
Use the clock datetime command to set the current time and date of the router.
The current time and date of the router must be set in an environment that requires the
acquisition of absolute time.
You may choose not to provide seconds when inputting the time parameters.
Related command: display clock.
Example
# Set the current system time to 00:00:00 01/01/2006.

<H3C> clock datetime 0:0:0 01/01/2006
1.1.3 clock summer-time
Syntax
clock summer-time zone_name { one-off | repeating } start-time start-date end-time

end-date add-time
clock summer-time zone_name { one-off | repeating } start-time start-year
start-month sequence start-day end-year end-month sequence end-day add-time
undo clock summer-time
View
System view
Parameter
zone_name: Name of the daylight saving time, a character string of 1 to 32 characters.

one-off: Only sets the daylight saving time of some year.
repeating: Sets the daylight saving time of every year starting from some year.
start-time: In the format of HH:MM:SS (hours/minutes/seconds).
start-date: In the format of MM/DD/YYYY (months/days/years), YYYY/MM/DD, or
YYYY MM week-of-month day-of-week, where YYYY ranges from 2000 to 2099.
end-time: In the format of HH:MM:SS (hours/minutes/seconds).
end-date: In the format of MM/DD/YYYY (months/days/years), YYYY/MM/DD, or YYYY
MM week-of-month day-of-week, where YYYY ranges from 2000 to 2099.
start-year: Ranges from 2000 to 2099.
1-2
start-month: It can be January, February, March, April, May, June, July, August,
September, October, November, or December.
sequence: It can be first, second, third, fourth, fifth, or last.
start-day: It can be Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, or
Saturday.
end-year: Ranges from 2000 to 2099, and must be greater than the value of start year.
end-month: It can be January, February, March, April, May, June, July, August,
September, October, November, or December.
end-day: It can be Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, or
Saturday.
add-time: The daylight saving time, in the format of HH:MM:SS
(hours/minutes/seconds).
Description
Use the clock summer-time command to set the name, starting and ending time of the
daylight saving time.
Use the undo clock summer-time command to cancel the configuration of the
daylight saving time.
After the configuration takes effect, you can use the display clock command to view it.
Besides, the time of the log or debug information is the local time of which the time zone
and daylight saving time has been adjusted.
Related command: clock timezone.
Example
# For daylight saving time in z2 between 06:00:00 on 2002/06/08 and 06:00:00 on

2002/09/01, set the system clock ahead one hour.
[H3C] clock summer-time z2 one-off 06:00:00 06/08/2002 06:00:00 09/01/2002
01:00:00
# For daylight saving time in z2 between 06:00:00 on 06/08 and 06:00:00 on 09/01
every year since 2002, set the system clock ahead one hour.
[H3C] clock summer-time z2 repeating 06:00:00 06/08/2002 06:00:00 09/01/2002
01:00:00
# Set the system clock ahead one hour for daylight saving time starting at one o’clock
on Sunday of the last week of March in 2006 and ended at one o’clock on Sunday of the
last week of October in 2006.
[H3C] clock summer-time z2 repeating 01:00:00 2006 March last Sunday 07:00:00
2006 October last Sunday 01:00:00
1-3
1.1.4 clock timezone
Syntax
clock timezone zone_name { add | minus } time

undo clock timezone
View
System view
Parameter
zone_name: Time zone name, a string of 1 to 32 characters.

add: Positive offset to universal time coordinated (UTC) time.
minus: Negative offset to UTC time.
time: In the format of HH/MM/SS (hours/minutes/seconds).
Description
Use the clock timezone command to set the local time zone.
Use the undo clock timezone command to restore the local time zone to the default
UTC time zone.
After the configuration takes effect, you can view it by executing the display clock
command. The time applied to the log and debug information is the local time with time
zone and daylight saving time adjustment.
Related command: clock summer-time.
Example
# Set the name of the local time zone to Z5, five hours ahead of UTC time.
[H3C] clock timezone z5 add 05:00:00
1.1.5 command-privilege
Syntax
command-privilege level level view view command-key

undo command-privilege view view command-key
View
System view
Parameter
level level: Command level ranging from 0 to 3.
1-4
view view: Specifies a view.

commandkey: Command to be set in the specified view.
Description
Use the command-privilege command to assign a command level to the commands in

the specified view.
Use the undo command-privilege view command to restore the default.
Command privilege falls into four levels: visit, monitor, system, and manage, which are
identified by 0 through 3.
For a user logs onto the router from a user interface, the command level that the user
can access can be the one administratively assigned to the user or the one assigned to
the user interface, whichever is smaller. For more information on how to assign
command level to a user interface, refer to “Chapter 4 User Interface Configuration
Commands” in Comware V3 Command Manual – System Management.
The following table describes the default level of the commands.
Table 1-1 Default level of the commands
Command level Commands

Visit (0) ping, tracert, telnet
Monitor (1) display, debugging

System (2) Configuration commands
Key settings, FTP, Xmodem, user authentication mode and
Manage (3)
privilege level, TFTP, file system operation commands
Example
# Set the command level of the interface command to 0.

[H3C] command-privilege level 0 view system interface
1.1.6 cpu-usage cycle
Syntax
cpu-usage cycle { 5sec | 1min | 5min | 72min } [ slave | slot slot-num ]
View
System view
Parameter
5sec: Sets the statistic interval to five seconds.
1-5
1min: Sets the CPU usage statistic interval to one minute.

5min: Sets the CPU usage statistic interval to five minutes.
72min: Sets the CPU usage statistic interval to 72 minutes.
slave: Given a dual-RPU/ERPU supported device, sets the usage statistic interval of
the CPU on the slave RPU/ERPU.
slot slot-num: Given a distributed device, sets the usage statistic interval of the CPU on
the interface board specified by its slot number.
Description
Use the cpu-usage cycle command to set the CPU usage statistic interval.
Depending on the specified interval, the statistical period displayed by executing the
display cpu-usage history command is different.
The default CPU usage statistic interval is 60 seconds.
Example
# Set the CPU usage statistic interval to five seconds.

[H3C] cpu-usage cycle 5Sec
1.1.7 display clipboard
Syntax
display clipboard
View
Any view
Parameter
None
Description
Use the display clipboard command to view the contents of the clipboard.
Example
# Display the contents of the clipboard.

<H3C> display clipboard
-----------------clipboard -----------------
ip route 10.1.0.0 255.0.0.0 eth 0
1-6
1.1.8 display clock
Syntax
display clock
View
Any view
Parameter
None
Description
Use the display clock command to view the current system time and date.
If the displayed system time and date are incorrect, use the clock datetime command
to adjust them.
Example
# Display the current time and date.

<H3C> display clock
15:50:45 UTC Mon 02/12/2005
1.1.9 display cpu-usage
Syntax
display cpu-usage [ configuration | number [ offset ] [ verbose ] [ from-device ] ]
View
Any view
Parameter
configuration: Displays the configuration about CPU usage statistics, such as whether
CPU usage statistics is enabled, statistic interval, and CPU usage alarm thresholds.
number: Number of CPU usage statistics queries.
offset: Offset of the starting entry to be displayed to the last statistic entry.
verbose: Displays the detailed information.
from-device: Displays information stored on an external storage device such as a
Flash memory or hard disk. (Not available yet.)
Description
Use the display cpu-usage command to view statistics about CPU usage.
1-7
The function of both display cpu-usage and display cpu-usage 1 0 verbose is to

display detailed information on the last CPU usage statistics.
Example
# Display detailed information on CPU usage statistics.

[Router] display cpu-usage
===== Current CPU usage info =====
CPU Usage Stat. Cycle: 1 (Second)
CPU Usage : 1%
CPU Usage Stat. Time : 2006-01-15 15:51:48
CPU Usage Stat. Tick : 0x27(CPU Tick High) 0x88cf18e4(CPU Tick Low)
Actual Stat. Cycle : 0x0(CPU Tick High) 0x2264cc2(CPU Tick Low)
TaskName CPU Runtime(CPU Tick High/CPU Tick Low)

VIDL 99% 0/ 222de39
TICK 0% 0/ 88d8
co0 0% 0/ 6e5
SRM 0% 0/ 1da
ROUT 0% 0/ 1d6c
SOCK 0% 0/ 3c65
VTYD 0% 0/ 1074
IPSP 0% 0/ 28b
TAC 0% 0/ 15ac
SC 0% 0/ 10de
RDS 0% 0/ e71
ACM 0% 0/ 180a
LSSO 0% 0/ 3a2
TRAP 0% 0/ 2d0
NTPT 0% 0/ 1082a
PIMT 0% 0/ 2f8
LSPM 0% 0/ 90c
L2V 0% 0/ 1066
IPS 0% 0/ 7575
SIP 0% 0/ 6b87
DHCP 0% 0/ 33d
HOT 0% 0/ fca
DHCC 0% 0/ 414
1.1.10 display cpu-usage history
Syntax
display cpu-usage history [ task task-id ] [ slave | slot slot-num ]
1-8
View
Any view
Parameter
task task-id: Specifies a task ID.

slave: Given a dual-RPU/ERPU supported device, sets the usage statistic interval of
the CPU on the slave RPU/ERPU.
slot slot-num: Given a distributed device, sets the usage statistic interval of the CPU on
the interface board specified by its slot number.
Description
Use the display cpu-usage history command to view in graphics the CPU usage
statistic history of the entire system, the specified task, or the interface board in the
specified slot.
Example
# Display the CPU usage statistic history of the entire system.

[H3C] display cpu-usage history
100%|
95%|
90%|
85%|
80%|
75%|
70%|
65%|
60%|
55%|
50%|
45%|
40%|
35%|
30%|
25%|
20%|
15%|
10%|
5%|
------------------------------------------------------------
10 20 30 40 50 60 (minutes)
cpu-usage last 60 minutes(SYSTEM)
1-9
# Display the CPU usage statistic history of task 6.

[H3C] display cpu-usage history task 6
100%|
95%|
90%|
85%|
80%|
75%|
70%|
65%|
60%|
55%|
50%|
45%|
40%|
35%|
30%|
25%|
20%|
15%|
10%|
5%|
------------------------------------------------------------
10 20 30 40 50 60 (minutes)
cpu-usage last 60 minutes(T03M)
1.1.11 display history-command
Syntax
display history-command
View
Any view
Parameter
None
Description
Use the display history-command command to view the history commands.

The terminal automatically saves the commands that are input and each ended with a
carriage return.
1-10
Example
# Display history commands.

<H3C> display history-command
display interface
displayinterface e 1/0/0
interface e 1/0/0
1.1.12 display log startup
Syntax
display log startup
View
User view
Parameter
None
Description
Use the display log startup command to display the state of the configuration
restoration log switch.
Example
# Display the state of the configuration restoration log switch.

<H3C> log startup
<H3C> display log startup
Log startup switch is on.
<H3C> undo log startup
<H3C> display log startup
Log startup switch is off.
1.1.13 display memory
Syntax
display memory
View
Any view
Parameter
None
1-11
Description
Use the display memory command to view information on system memory load.
Example
# Display information on the current system memory load.

[H3C] display memory
System Total Memory(bytes): 41918976
Total Used Memory(bytes): 15949136
Used Rate: 38%
1.1.14 display version
Syntax
display version
View
Any view
Parameter
None
Description
Use the display version command to view system version information.

By viewing system version information, you can learn about the current software
version, rack type and the information related to the main control board and interface
boards.
Example
# Display system version information of the AR 46-40.

<H3C> display version
Copyright (c) 2004-2006 Notice:SK_VSIR_NAME crea
All rights reserved (2004-2006).rule 1 de icmp ?create...

H3C Comware Platform Software
Comware(R) software, Version 3.4, Release 0001SP03
Copyright (c) 2004-2006 Hangzhou Huawei-3Com Tech. Co.,Ltd. All rights
reserved
Copyright (c) 2004-2004 Huawei-3Com Tech. Co.,Ltd. All rights reserved.

H3C Series Router AR46-40 uptime is 0 week, 0 day, 0 hour, 22 minutes
1-12
Rpu's version information:

H3C AR46-40 with 1 PowerPC 750 Processor
256M bytes SDRAM
32M bytes FLASH
512K bytes NVRAM
Pcb Version : RTM1RPUA.1
RPE Logic Version : RPE3.4
SBG Logic Version : 012
Small BootROM Version : 3.04
Big BootROM Version : 5.03
Config Register points to FLASH
[SLOT 0] AUX0 (Hardware)A.1, (Driver)1.0, (Cpld)3.4

[SLOT 0] ETH0 (Hardware)A.1, (Driver)1.0, (Cpld)3.4
[SLOT 0] ETH1 (Hardware)A.1, (Driver)1.0, (Cpld)3.4
1.1.15 free unused porttag
Syntax
free unused porttag
View
System view
Parameter
None
Description
Use the free unused porttag command to release the port tag resources used by
removed interfaces for creating new interfaces.
The port tag resources currently available only support up to 65,535 interfaces. If all
port tag resources are depleted, no interface can be created any longer. To do that, use
the free unused porttag command to release the port tag resources assigned to the
removed interfaces first.
Example
# Release the port tag resources used by removed interfaces.

[H3C] free unused porttag
1-13
1.1.16 header
Syntax
header [ incoming | login | motd | shell ] text

undo header { incoming | login | motd | shell }
View
System view
Parameter
motd: Banner displayed before the login interface.

incoming: Banner displayed when a user logs onto a terminal user interface.
login: Login banner at authentication.
shell: Banner displayed for entering user view.
text: Banner message, with the first character being the start and ending delimiters.
After the ending delimiter is input, the system quits automatically.
Description
Use the header command to create a banner.

Use the undo header command to clear a banner.
The motd banner is displayed when a user just logs in from a user interface. If
password or scheme authentication is set, the banner is displayed before login
authentication.
The login banner is displayed only when login authentication is set to password or
scheme. It is displayed after the motd banner is displayed and before login
authentication.
The shell banner is displayed after a user session is established.
Two ways are available for inputting a banner message:
1) Input the message in one line. This allows 255 characters including the command
keyword.
2) Input the message in separate lines each ended with a carriage return. This allows
1024 characters (including those invisible) in addition to the command keyword.
If no keyword, incoming, login, motd, or shell, is specified, the configured banner is
taken as a login banner by default. Therefore, if no text is provided after you input one
of these keywords, incoming, for example, it will be taken as the text for a login banner
rather than a keyword.
You may do the following to have the start delimiter as part of the banner message or
not:
1-14
z To have the start delimiter excluded from the banner message, input a carriage
return immediately after it or make sure that the start and ending delimiters are in
the same line.
z To have the start delimiter being part of the banner message, make sure that the
start and ending delimiters are in different lines and the start delimiter is not
immediately followed by a carriage return.
Example
# Configure banner information.

[H3C] header login %login text%
[H3C] header shell %shell text%
[H3C] header motd %motd text%
<H3C> quit
*********************************************************
* All rights reserved (2004-2006) *
* Without the owner's prior written consent, *
*no decompiling or reverse-engineering shall be allowed.*
*********************************************************
User interface aux0 is available.
Please press ENTER.
motd text
login text
Login authentication
Username:admin
Password:
shell text
<H3C>
1.1.17 hotkey
Syntax
hotkey { CTRL_G | CTRL_L | CTRL_O | CTRL_T | CTRL_U } command_text

undo hotkey { CTRL_G | CTRL_L | CTRL_O | CTRL_T | CTRL_U }
1-15
View
System view
Parameter
CTRL_G: Assigns the hot key <CTRL+G> to a command.

CTRL_L: Assigns the hot key <CTRL+L> to a command.
CTRL_O: Assigns the hot key <CTRL+O> to a command.
CTRL_T: Assigns the hot key <CTRL+T> to a command.
CTRL_U: Assigns the hot key <CTRL+U> to a command.
command_text: The command line associated with the hot key.
Description
Use the hotkey command to assign a hot key to a command line.

Use the undo hotkey command to restore the default assignment scheme of the
system: <CTRL_G> to display current-configuration, <CTRL_L> to display ip
routing-table, <CTRL_O> to undo debugging all, and null to other two hot keys.
You can customize this scheme however.
Example
# Assign the hot key < CTRL_T> to the display tcp status command.
[H3C] hotkey ctrl_t display tcp status
[H3C] display hotkey
----------------- HOTKEY -----------------
=Defined hotkeys=
Hotkeys Command
CTRL_G display current-configuration
CTRL_L display ip routing-table
CTRL_O undo debug all
CTRL_T display tcp status
=Undefined hotkeys=
Hotkeys Command
CTRL_U NULL
=System hotkeys=
Hotkeys Function
CTRL_A Move the cursor to the beginning of the current line.
CTRL_B Move the cursor one character left.
CTRL_C Stop current command function.
CTRL_D Erase current character.
1-16
CTRL_E Move the cursor to the end of the current line.

CTRL_F Move the cursor one character right.
CTRL_H Erase the character left of the cursor.
CTRL_K Kill outgoing connection.
CTRL_N Display the next command from the history buffer.
CTRL_P Display the previous command from the history buffer.
CTRL_R Redisplay the current line.
CTRL_V Paste text from the clipboard.
CTRL_W Delete the word left of the cursor.
CTRL_X Delete all characters up to the cursor.
CTRL_Y Delete all characters after the cursor.
CTRL_Z Return to the user view.
CTRL_] Kill incoming connection or redirect connection.
ESC_B Move the cursor one word back.
ESC_D Delete remainder of word.
ESC_F Move the cursor forward one word.
ESC_N Move the cursor down a line.
ESC_P Move the cursor up a line.
ESC_< Specify the beginning of clipboard.
ESC_> Specify the end of clipboard.
1.1.18 language-mode
Syntax
language-mode { chinese | english }
View
User view
Parameter
None
Description
Use the language-mode command to toggle the display language of the command line
interface (CLI) between English and Chinese.
The default language is English.
Example
# Toggle the language from English to Chinese.

<H3C> language-mode chinese
Change language mode, confirm? [Y/N]y
%Switch to Chinese mode.
1-17
1.1.19 lock
Syntax
lock
View
User view
Parameter
None
Description
Use the lock command to lock the illegitimate users out of the active user interface,
which can be console, AUX, or VTY.
After entering the lock command, you are prompted to enter and confirm the
screensaver's password. If you en
ter the same password twice, the interface is locked. To unlock and access the system
after that, you must press <Enter> first and enter the password you just set.
Example
# Log in through the console port and lock the active user interface.
<H3C> lock
Password:
Again:
1.1.20 log startup
Syntax
log startup
undo log startup
View
User view
Parameter
None
Description
Use the log startup command to turn on the configuration restoration log switch.
Use the undo log startup command to turn off the configuration restoration log switch.
1-18
By default, the configuration restoration log switch is turned on.

When the configuration restoration log switch is turned on, the commands executed for
the configuration file to be recovered at startup are logged and the log information is
output in the following format:
%May 31 06:46:58:015 2005 5500G-EI SHELL/5/CMD:- 1 -task:CFM ip:** user:**
command:sysname 5500G-EI
As the log information may occupy a large space, you are recommended to turn off the
switch in normal cases.
Example
# Turn off the configuration restoration log switch.

<H3C> undo log startup
1.1.21 quit
Syntax
quit
View
Any view
Parameter
None
Description
Use the quit command to quit to a lower-level view (if the current view is user view, you
exit the system).
The views fall into three levels, in ascending order:
z User view (for user level 0)
z System view (for user level 3)
z Configuration view (such as routing protocol view, interface view, and L2TP group
view)
Related command: return.
Example
# Switch from Ethernet1/0/0 interface view to system view, and then to user view.
[H3C-Ethernet1/0/0] quit
[H3C] quit
<H3C>
1-19
1.1.22 return
Syntax
return
View
Any view except for user view
Parameter
None
Description
Use the return command to return to user view from any other view, as you would with
the hot key <Ctrl+Z>.
Related command: quit.
Example
# Return to user view from system view.

[H3C] return
<H3C>
1.1.23 super
Syntax
super [ level ]
View
User view
Parameter
level: User level ranging from 0 to 3.
Description
Use the super command to switch from current user level to a specified user level, or
the command level that the user can access.
If no level parameter is configured, switch to the third level user by default.
There are four levels of commands:
z Visit: involves commands for network diagnosis (such as ping and tracert),
commands for accessing an external device (such as Telnet client, SSH client,
RLOGIN). Saving the configuration file is not allowed at this level.
1-20
z Monitor: includes the display and debugging commands for system maintenance,
service fault diagnosis. Saving the configuration file is not allowed at this level.
z System: provides service configuration commands, including routing and
commands at each level of the network for providing services.
z Manage: influences the basic operation of the system and the system support
modules for service support. Commands at this level involve file system, FTP,
TFTP, Xmodem download and configuration file switch, power control, standby
board control, user management, level setting, as well as parameter setting within
a system (the last case involves those non-protocol or non RFC provisioned
commands).
Login users are also classified into four levels that correspond to the four command
levels. After users at different levels log in, they can only use commands at their own, or
lower, levels.
To fence off intrusion of illegitimate users, users are required to provide the correct
super password, if one has been configured using the super password command,
when they switch from a lower level to a higher level. For privacy sake, the entered
password is not displayed on the screen. Users have three chances to provide the
correct password. Only after the correct password is entered can they switch to the
higher level. Otherwise, the original user level remains unchanged.
Related command: super password.
Example
<H3C> super 3
Password:
User privilege changes to 3 level, just equal or less this level's
commands can be used.
Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE
1.1.24 super password
Syntax
super password [ level user-level ] { simple | cipher } password

undo super password [ level user-level ]
View
System view
Parameter
user-level: User level in the range 1 to 3.

simple: Plain text password, a string of up to 16 consecutive characters.
1-21
cipher: Ciphertext password. You can define it in plain text, or a string of up to 16

consecutive characters. The system will automatically generate the corresponding
ciphertext, for example, 7-CZB#/YX]KQ=^Q`MAF4<1!! for 123. Alternatively, you can
define the password directly in ciphertext, a string of up to 24 characters. Whichever
method is used, you must provide the password in plain text at authentication time. For
this reason, you are recommended to define a ciphertext password in plain text.
Description
Use the super password command to set the password needed to switch from a lower
user level to a higher one.
Use the undo super password command to cancel the current setting.
If no user-level parameter is configured, the password of the third level user is adopted
by default.
Example
# Set the password to zbr for switching the user level to three.
[H3C] super password level 3 simple zbr
1.1.25 super authentication-mode
Syntax
super authentication-mode { super-password | scheme }*
View
User interface view
Parameter
super-password: Adopts super-password authentication

scheme: Adopts scheme configured by a user for authentication
Description
Use the super authentication-mode command to configure authentication mode for

the super command, which can be configured to the following four modes:
z super-password
z scheme
z super-password + scheme
z scheme + super-password
By default, super-password authentication is adopted.
Example
# Configure Console user to adopt scheme authentication
1-22
<H3C> system-view
[H3C] user-interface console 0
[H3C-ui-con0] super authentication-mode scheme
1.1.26 sysname
Syntax
sysname sysname
View
System view
Parameter
sysname: Name of the router, a string containing 1 to 30 characters.
Description
Use the sysname command to set the name of the router.

The router name defaults to H3C.
Modifying router name affects the prompt of the CLI. For example, if the router's name
is H3C, the prompt of user view is <H3C>.
Example
# Set the name of the router to R1760.

[H3C] sysname R1760
[R1760]
1.1.27 system-view
Syntax
system-view
View
User view
Parameter
None
Description
Use the system-view command to enter system view from current user view.
Related command: quit, return.
1-23
Example
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C]
1.1.28 vrbd
Syntax
vrbd
View
Any view
Parameter
None
Description
Use the vrbd command to view software version details, including product software
version and the matched platform software version.
Example
# Display the internal version information.

[H3C] vrbd
Routing Platform Software
Version AR46XX 8040V300R003B01D009 (COMWAREV300R002B11D001), RELEASE
SOFTWARE
Compiled Sep 13 2004 15:36:51 by sunyu
1.2 Command-Alias Configuration Commands

1.2.1 command-alias enable
Syntax
command-alias enable
undo command-alias enable
View
System view
Parameter
None
1-24
Description
Use the command-alias enable command to enable the command alias function.
Use the undo command-alias enable command to disable the command alias
function.
By default, the command alias function is disabled.
Example
# Enable the command alias function.

[H3C] command-alias enable
# Disable the command alias function.

[H3C] undo command-alias enable
1.2.2 command-alias mapping
Syntax
command-alias mapping cmdkey alias

undo command-alias mapping alias
View
System view
Parameter
cmdkey: The first keyword to be substituted in current commands by the alias. You
must provide the complete keyword name.
alias: Alias assigned by the user. It must not conflict with the first keyword in any current
command.
Description
Use the command-alias mapping command to map an alias to a keyword.

Use the undo command-alias mapping command to cancel the alias setting.
By default, no command alias is configured.
Example
# Assign the alias show to the keyword display.

[H3C] command-alias mapping display show
# Cancel the configured alias show.

[H3C] undo command-alias mapping show
1-25
1.2.3 display command-alias
Syntax
display command-alias
View
Any view
Parameter
None
Description
Use the display command-alias command to view the current command alias
settings.
Example
# Display the current command alias settings.

[H3C] display command-alias
Command alias is enabled
index alias command key
1 show display
1-26
System Management
Command Manual – System Management
Table of Contents
Chapter 1 System Maintenance and Management Commands................................................ 1-1

1.1 Auto-Config Commands .................................................................................................... 1-1
1.1.1 auto-config............................................................................................................... 1-1
1.1.2 auto-config enable................................................................................................... 1-3
1.1.3 display auto-config .................................................................................................. 1-3
1.2 Network Test Tool Commands .......................................................................................... 1-4
1.2.1 debugging................................................................................................................ 1-4
1.2.2 display debugging ................................................................................................... 1-5
1.2.3 display diagnostic-information................................................................................. 1-5
1.2.4 icmp unreach send .................................................................................................. 1-8
1.2.5 ip df-check enable ................................................................................................... 1-8
1.2.6 ip option source-routing........................................................................................... 1-9
1.2.7 ip source-address-check ....................................................................................... 1-10
1.2.8 ping........................................................................................................................ 1-10
1.2.9 reboot .................................................................................................................... 1-13
1.2.10 tracert .................................................................................................................. 1-13
1.3 Information Processing Commands................................................................................. 1-15
1.3.1 display channel...................................................................................................... 1-15
1.3.2 display info-center ................................................................................................. 1-17
1.3.3 display logbuffer .................................................................................................... 1-19
1.3.4 display logbuffer summary .................................................................................... 1-20
1.3.5 display trapbuffer................................................................................................... 1-21
1.3.6 info-center channel................................................................................................ 1-23
1.3.7 info-center console channel .................................................................................. 1-23
1.3.8 info-center enable ................................................................................................. 1-24
1.3.9 info-center logbuffer .............................................................................................. 1-25
1.3.10 info-center logfile................................................................................................. 1-25
1.3.11 info-center loghost............................................................................................... 1-26
1.3.12 info-center loghost source................................................................................... 1-27
1.3.13 info-center monitor channel................................................................................. 1-28
1.3.14 info-center snmp channel.................................................................................... 1-28
1.3.15 info-center source ............................................................................................... 1-29
1.3.16 info-center synchronous...................................................................................... 1-31
1.3.17 info-center timestamp.......................................................................................... 1-32
1.3.18 info-center timestamp loghost ............................................................................. 1-33
1.3.19 info-center trapbuffer........................................................................................... 1-33
1.3.20 reset logbuffer ..................................................................................................... 1-34
1.3.21 reset trapbuffer .................................................................................................... 1-35
i
1.3.22 terminal debugging.............................................................................................. 1-35

1.3.23 terminal logging ................................................................................................... 1-36
1.3.24 terminal monitor .................................................................................................. 1-36
1.3.25 terminal trapping ................................................................................................. 1-37
1.4 System Operating Management Commands (Only for AR46 Series) ............................. 1-38
1.4.1 display alarm urgent.............................................................................................. 1-38
1.4.2 display environment .............................................................................................. 1-39
1.4.3 display device........................................................................................................ 1-40
1.4.4 display schedule reboot ........................................................................................ 1-41
1.4.5 remove slot............................................................................................................ 1-41
1.4.6 reset alarm urgent ................................................................................................. 1-42
1.4.7 schedule reboot at................................................................................................. 1-42
1.4.8 schedule reboot delay ........................................................................................... 1-43
1.4.9 upgrade ................................................................................................................. 1-44
1.4.10 undo schedule reboot.......................................................................................... 1-45
1.5 System Maintenance Upgrade Commands (Only for AR28/18 Series) .......................... 1-45
1.5.1 boot bootrom ......................................................................................................... 1-45
Chapter 2 Auto Detect Configuration Commands ..................................................................... 2-1

2.1 Basic Auto Detect Configuration Commands .................................................................... 2-1
2.1.1 debugging detect-group .......................................................................................... 2-1
2.1.2 detect-group ............................................................................................................ 2-1
2.1.3 detect-list ................................................................................................................. 2-2
2.1.4 display detect-group................................................................................................ 2-3
2.1.5 option....................................................................................................................... 2-4
2.1.6 retry ......................................................................................................................... 2-5
2.1.7 timer loop................................................................................................................. 2-6
2.1.8 timer wait ................................................................................................................. 2-6
2.2 Auto Detect Application Commands .................................................................................. 2-7
2.2.1 ip route-static detect-group ..................................................................................... 2-7
2.2.2 standby detect-group .............................................................................................. 2-8
2.2.3 vrrp vrid track detect-group ..................................................................................... 2-9
Chapter 3 HWPing Commands .................................................................................................... 3-1

3.1 HWPing Client Commands ................................................................................................ 3-1
3.1.1 adv-factor ................................................................................................................ 3-1
3.1.2 count........................................................................................................................ 3-1
3.1.3 datafill ...................................................................................................................... 3-2
3.1.4 datasize ................................................................................................................... 3-3
3.1.5 debugging hwping ................................................................................................... 3-4
3.1.6 description ............................................................................................................... 3-4
3.1.7 destination-ip ........................................................................................................... 3-5
3.1.8 destination-port........................................................................................................ 3-5
3.1.9 display hwping......................................................................................................... 3-6
ii
3.1.10 display hwping statistics........................................................................................ 3-8

3.1.11 filename............................................................................................................... 3-11
3.1.12 frequency............................................................................................................. 3-11
3.1.13 ftp-operation ........................................................................................................ 3-12
3.1.14 history keep-time ................................................................................................. 3-13
3.1.15 history-record enable .......................................................................................... 3-13
3.1.16 history-records..................................................................................................... 3-14
3.1.17 http-operation ...................................................................................................... 3-15
3.1.18 hwping ................................................................................................................. 3-16
3.1.19 hwping-agent enable........................................................................................... 3-16
3.1.20 hwping-agent max-requests................................................................................ 3-17
3.1.21 jitter-interval......................................................................................................... 3-17
3.1.22 jitter-packetnum................................................................................................... 3-18
3.1.23 password ............................................................................................................. 3-19
3.1.24 probe-failtimes..................................................................................................... 3-20
3.1.25 send-trap ............................................................................................................. 3-20
3.1.26 sendpacket passroute ......................................................................................... 3-21
3.1.27 source-interface .................................................................................................. 3-22
3.1.28 source-ip.............................................................................................................. 3-22
3.1.29 source-port .......................................................................................................... 3-23
3.1.30 statistics............................................................................................................... 3-23
3.1.31 statistics keep-time.............................................................................................. 3-24
3.1.32 test-time begin..................................................................................................... 3-25
3.1.33 test-type............................................................................................................... 3-26
3.1.34 test-enable........................................................................................................... 3-27
3.1.35 test-failtimes ........................................................................................................ 3-27
3.1.36 timeout................................................................................................................. 3-28
3.1.37 tos........................................................................................................................ 3-28
3.1.38 ttl.......................................................................................................................... 3-29
3.1.39 username ............................................................................................................ 3-30
3.1.40 vpninstance ......................................................................................................... 3-30
3.2 HWPing Server Commands............................................................................................. 3-31
3.2.1 hwping-server enable............................................................................................ 3-31
3.2.2 hwping-server tcpconnect ..................................................................................... 3-32
3.2.3 hwping-server udpecho......................................................................................... 3-32
Chapter 4 File Management Commands ..................................................................................... 4-1

4.1 File System Commands..................................................................................................... 4-1
4.1.1 bootfile dir................................................................................................................ 4-1
4.1.2 bootfile main ............................................................................................................ 4-2
4.1.3 bootfile backup ........................................................................................................ 4-4
4.1.4 cd............................................................................................................................. 4-5
4.1.5 copy......................................................................................................................... 4-6
iii
4.1.6 delete....................................................................................................................... 4-7

4.1.7 dir ............................................................................................................................ 4-8
4.1.8 execute.................................................................................................................... 4-9
4.1.9 file prompt.............................................................................................................. 4-10
4.1.10 fixdisk .................................................................................................................. 4-11
4.1.11 format .................................................................................................................. 4-11
4.1.12 mkdir.................................................................................................................... 4-12
4.1.13 more .................................................................................................................... 4-13
4.1.14 move.................................................................................................................... 4-13
4.1.15 pwd...................................................................................................................... 4-15
4.1.16 rename ................................................................................................................ 4-15
4.1.17 reset recycle-bin .................................................................................................. 4-16
4.1.18 rmdir .................................................................................................................... 4-17
4.1.19 undelete............................................................................................................... 4-18
4.2 FTP Server Configuration Commands............................................................................. 4-19
4.2.1 display ftp-server ................................................................................................... 4-19
4.2.2 display ftp-user ...................................................................................................... 4-19
4.2.3 display ftp-server source-ip ................................................................................... 4-20
4.2.4 ftp server enable.................................................................................................... 4-21
4.2.5 ftp-server source-interface .................................................................................... 4-21
4.2.6 ftp-server source-ip ............................................................................................... 4-22
4.2.7 ftp timeout.............................................................................................................. 4-23
4.2.8 ftp update .............................................................................................................. 4-24
4.3 FTP Client Commands .................................................................................................... 4-25
4.3.1 ascii ....................................................................................................................... 4-25
4.3.2 binary..................................................................................................................... 4-25
4.3.3 bye......................................................................................................................... 4-26
4.3.4 cd........................................................................................................................... 4-26
4.3.5 cdup....................................................................................................................... 4-27
4.3.6 close ...................................................................................................................... 4-27
4.3.7 debugging.............................................................................................................. 4-28
4.3.8 delete..................................................................................................................... 4-28
4.3.9 dir .......................................................................................................................... 4-29
4.3.10 disconnect ........................................................................................................... 4-29
4.3.11 display ftp source-ip ............................................................................................ 4-30
4.3.12 ftp ........................................................................................................................ 4-30
4.3.13 ftp host source-interface...................................................................................... 4-31
4.3.14 ftp host source-ip................................................................................................. 4-32
4.3.15 ftp source-interface ............................................................................................. 4-32
4.3.16 ftp source-ip......................................................................................................... 4-33
4.3.17 get ....................................................................................................................... 4-34
4.3.18 lcd........................................................................................................................ 4-34
iv
4.3.19 ls.......................................................................................................................... 4-35

4.3.20 mkdir.................................................................................................................... 4-35
4.3.21 open .................................................................................................................... 4-36
4.3.22 passive ................................................................................................................ 4-36
4.3.23 put ....................................................................................................................... 4-37
4.3.24 pwd...................................................................................................................... 4-37
4.3.25 quit....................................................................................................................... 4-38
4.3.26 remotehelp .......................................................................................................... 4-38
4.3.27 rename ................................................................................................................ 4-39
4.3.28 rmdir .................................................................................................................... 4-39
4.3.29 user ..................................................................................................................... 4-40
4.3.30 verbose................................................................................................................ 4-40
4.4 TFTP Client Configuration Commands............................................................................ 4-41
4.4.1 display tftp source-ip ............................................................................................. 4-41
4.4.2 tftp ......................................................................................................................... 4-41
4.4.3 tftp host source-interface....................................................................................... 4-42
4.4.4 tftp host source-ip.................................................................................................. 4-43
4.4.5 tftp-server acl......................................................................................................... 4-44
4.4.6 tftp source-interface .............................................................................................. 4-44
4.4.7 tftp source-ip.......................................................................................................... 4-45
4.4.8 tftp vpn-instance .................................................................................................... 4-46
4.5 TFTP Server Configuration Commands .......................................................................... 4-47
4.5.1 debugging tftp-server ............................................................................................ 4-47
4.5.2 display tftp-server .................................................................................................. 4-47
4.5.3 tftp-server directory ............................................................................................... 4-48
4.5.4 tftp-server enable .................................................................................................. 4-49
4.5.5 tftp-server max-users ............................................................................................ 4-50
4.5.6 tftp-server retry-times ............................................................................................ 4-50
4.5.7 tftp-server timeout ................................................................................................. 4-51
4.5.8 tftp-server update .................................................................................................. 4-51
4.6 xmodem Configuration Commands ................................................................................. 4-52
4.6.1 xmodem get........................................................................................................... 4-52
4.7 Configuration File Management Commands ................................................................... 4-53
4.7.1 display current-configuration ................................................................................. 4-53
4.7.2 display saved-configuration................................................................................... 4-56
4.7.3 display startup ....................................................................................................... 4-58
4.7.4 display this............................................................................................................. 4-58
4.7.5 reset saved-configuration...................................................................................... 4-59
4.7.6 save....................................................................................................................... 4-60
4.7.7 startup saved-configuration................................................................................... 4-61
4.7.8 upgrade ................................................................................................................. 4-62
v
Chapter 5 User Interface Configuration Commands ................................................................. 5-1

5.1 User Interface Configuration Commands .......................................................................... 5-1
5.1.1 accounting commands ............................................................................................ 5-1
5.1.2 acl............................................................................................................................ 5-2
5.1.3 activation-key .......................................................................................................... 5-2
5.1.4 authentication-mode................................................................................................ 5-3
5.1.5 auto-execute command........................................................................................... 5-5
5.1.6 databits.................................................................................................................... 5-6
5.1.7 debugging vty .......................................................................................................... 5-6
5.1.8 display user-interface .............................................................................................. 5-7
5.1.9 display users ........................................................................................................... 5-8
5.1.10 escape-key ............................................................................................................ 5-9
5.1.11 flow-control .......................................................................................................... 5-10
5.1.12 free user-interface ............................................................................................... 5-11
5.1.13 history-command max-size ................................................................................. 5-11
5.1.14 idle-timeout.......................................................................................................... 5-12
5.1.15 modem ................................................................................................................ 5-13
5.1.16 modem auto-answer ........................................................................................... 5-13
5.1.17 modem timer answer........................................................................................... 5-14
5.1.18 parity.................................................................................................................... 5-15
5.1.19 protocol inbound.................................................................................................. 5-15
5.1.20 re-authentication ................................................................................................. 5-16
5.1.21 screen-length....................................................................................................... 5-17
5.1.22 screen-width ........................................................................................................ 5-18
5.1.23 send..................................................................................................................... 5-18
5.1.24 set authentication password................................................................................ 5-19
5.1.25 shell ..................................................................................................................... 5-20
5.1.26 shell priority high ................................................................................................. 5-21
5.1.27 speed................................................................................................................... 5-21
5.1.28 stopbits ................................................................................................................ 5-22
5.1.29 terminal type........................................................................................................ 5-23
5.1.30 user privilege ....................................................................................................... 5-23
5.1.31 user-interface ...................................................................................................... 5-24
Chapter 6 NTP Configuration Commands .................................................................................. 6-1

6.1 NTP Configuration Commands.......................................................................................... 6-1
6.1.1 debugging ntp-service............................................................................................. 6-1
6.1.2 display ntp-service sessions ................................................................................... 6-2
6.1.3 display ntp-service status........................................................................................ 6-3
6.1.4 display ntp-service trace ......................................................................................... 6-4
6.1.5 ntp-service access .................................................................................................. 6-5
6.1.6 ntp-service authentication enable ........................................................................... 6-6
6.1.7 ntp-service authentication-keyid.............................................................................. 6-6
vi
6.1.8 ntp-service broadcast-client .................................................................................... 6-7

6.1.9 ntp-service broadcast-server................................................................................... 6-8
6.1.10 ntp-service max-dynamic-sessions ....................................................................... 6-8
6.1.11 ntp-service multicast-client.................................................................................... 6-9
6.1.12 ntp-service multicast-server ................................................................................ 6-10
6.1.13 ntp-service refclock-master ................................................................................. 6-11
6.1.14 ntp-service reliable authentication-keyid............................................................. 6-11
6.1.15 ntp-service source-interface................................................................................ 6-12
6.1.16 ntp-service unicast-peer...................................................................................... 6-13
6.1.17 ntp-service unicast-server ................................................................................... 6-14
Chapter 7 SNMP Configuration Commands ............................................................................... 7-1

7.1 SNMP Configuration Commands....................................................................................... 7-1
7.1.1 debugging snmp-agent ........................................................................................... 7-1
7.1.2 display snmp-agent ................................................................................................. 7-1
7.1.3 display snmp-agent community............................................................................... 7-2
7.1.4 display snmp-agent group....................................................................................... 7-3
7.1.5 display snmp-agent mib-view.................................................................................. 7-4
7.1.6 display snmp-agent statistics .................................................................................. 7-5
7.1.7 display snmp-agent sys-info.................................................................................... 7-7
7.1.8 display snmp-agent trap-list .................................................................................... 7-8
7.1.9 display snmp-agent usm-user ................................................................................. 7-9
7.1.10 snmp-agent ......................................................................................................... 7-10
7.1.11 snmp-agent community....................................................................................... 7-10
7.1.12 snmp-agent group ............................................................................................... 7-11
7.1.13 snmp-agent local-engineid .................................................................................. 7-13
7.1.14 snmp-agent mib-view .......................................................................................... 7-13
7.1.15 snmp-agent packet max-size .............................................................................. 7-14
7.1.16 snmp-agent sys-info............................................................................................ 7-15
7.1.17 snmp-agent target-host ....................................................................................... 7-16
7.1.18 snmp-agent trap enable ...................................................................................... 7-17
7.1.19 snmp-agent trap life ............................................................................................ 7-18
7.1.20 snmp-agent trap queue-size ............................................................................... 7-19
7.1.21 snmp-agent trap source ...................................................................................... 7-20
7.1.22 snmp-agent usm-user ......................................................................................... 7-20
Chapter 8 BIMS Configuration Commands ................................................................................ 8-1

8.1 BIMS Configuration Commands ........................................................................................ 8-1
8.1.1 bims boot request.................................................................................................... 8-1
8.1.2 bims device-id ......................................................................................................... 8-1
8.1.3 bims enable ............................................................................................................. 8-2
8.1.4 bims interval ............................................................................................................ 8-2
8.1.5 bims ip address ....................................................................................................... 8-3
8.1.6 bims request............................................................................................................ 8-4
vii
8.1.7 bims sharekey ......................................................................................................... 8-4

8.1.8 bims source ip-address ........................................................................................... 8-5
8.1.9 bims specify-time..................................................................................................... 8-5
8.1.10 debugging bims all ................................................................................................ 8-6
Chapter 9 RMON Configuration Commands .............................................................................. 9-1

9.1 RMON Configuration Commands ...................................................................................... 9-1
9.1.1 display rmon alarm.................................................................................................. 9-1
9.1.2 display rmon event .................................................................................................. 9-2
9.1.3 display rmon eventlog ............................................................................................. 9-3
9.1.4 display rmon history ................................................................................................ 9-4
9.1.5 display rmon prialarm.............................................................................................. 9-5
9.1.6 display rmon statistics ............................................................................................. 9-7
9.1.7 rmon alarm .............................................................................................................. 9-7
9.1.8 rmon event .............................................................................................................. 9-8
9.1.9 rmon history............................................................................................................. 9-9
9.1.10 rmon prialarm ...................................................................................................... 9-10
9.1.11 rmon statistics ..................................................................................................... 9-11
Chapter 10 Terminal Service Commands ................................................................................. 10-1

10.1 Telnet and Telnet Redirect ............................................................................................ 10-1
10.1.1 debugging telnet.................................................................................................. 10-1
10.1.2 direct listen-port................................................................................................... 10-1
10.1.3 display tcp status................................................................................................. 10-2
10.1.4 display telnet-server source-ip ............................................................................ 10-3
10.1.5 redirect bind vpn-instance ................................................................................... 10-3
10.1.6 redirect enable..................................................................................................... 10-4
10.1.7 redirect listen-port ............................................................................................... 10-4
10.1.8 redirect timeout.................................................................................................... 10-5
10.1.9 redirect return-deal from-telnet............................................................................ 10-5
10.1.10 redirect return-deal from-terminal...................................................................... 10-6
10.1.11 redirect refuse-negotiation ................................................................................ 10-7
10.1.12 redirect disconnect ............................................................................................ 10-7
10.1.13 telnet.................................................................................................................. 10-8
10.1.14 telnet-server source-interface ........................................................................... 10-9
10.1.15 telnet-server source-ip ...................................................................................... 10-9
10.1.16 telnet source-interface..................................................................................... 10-10
10.1.17 telnet source-ip................................................................................................ 10-11
10.2 SSH Server Configuration Commands........................................................................ 10-11
10.2.1 debugging ssh server........................................................................................ 10-11
10.2.2 display rsa local-key-pair public ........................................................................ 10-12
10.2.3 display rsa peer-public-key ............................................................................... 10-14
10.2.4 display ssh server ............................................................................................. 10-14
10.2.5 display ssh-server source-ip ............................................................................. 10-15
viii
10.2.6 display ssh user-information ............................................................................. 10-16

10.2.7 peer-public-key end........................................................................................... 10-17
10.2.8 public-key-code begin ....................................................................................... 10-17
10.2.9 public-key-code end .......................................................................................... 10-18
10.2.10 rsa local-key-pair create.................................................................................. 10-18
10.2.11 rsa local-key-pair destroy ................................................................................ 10-20
10.2.12 rsa peer-public-key.......................................................................................... 10-20
10.2.13 ssh authentication-type default ....................................................................... 10-21
10.2.14 ssh server authentication-retries ..................................................................... 10-22
10.2.15 ssh server compatible_ssh1x enable.............................................................. 10-23
10.2.16 ssh server rekey-interval ................................................................................. 10-23
10.2.17 ssh-server source-interface............................................................................. 10-24
10.2.18 ssh-server source-ip........................................................................................ 10-25
10.2.19 ssh server timeout........................................................................................... 10-26
10.2.20 ssh user........................................................................................................... 10-26
10.2.21 ssh user assign ............................................................................................... 10-27
10.2.22 ssh user authentication-type ........................................................................... 10-28
10.2.23 ssh user service-type ...................................................................................... 10-29
10.3 SSH Client Configuration Commands ......................................................................... 10-30
10.3.1 debugging ssh client ......................................................................................... 10-30
10.3.2 display ssh server-info ...................................................................................... 10-30
10.3.3 display ssh2 source-ip....................................................................................... 10-31
10.3.4 quit..................................................................................................................... 10-31
10.3.5 ssh client assign rsa-key ................................................................................... 10-32
10.3.6 ssh client first-time enable................................................................................. 10-32
10.3.7 ssh2................................................................................................................... 10-33
10.3.8 ssh2 source-interface........................................................................................ 10-35
10.3.9 ssh2 source-ip ................................................................................................... 10-35
10.4 SFTP Server Configuration Commands ...................................................................... 10-36
10.4.1 sftp server enable.............................................................................................. 10-36
10.5 SFTP Client Configuration Commands ....................................................................... 10-37
10.5.1 bye..................................................................................................................... 10-37
10.5.2 cd....................................................................................................................... 10-37
10.5.3 cdup................................................................................................................... 10-38
10.5.4 delete................................................................................................................. 10-38
10.5.5 dir ...................................................................................................................... 10-39
10.5.6 display sftp source-ip ........................................................................................ 10-39
10.5.7 exit..................................................................................................................... 10-40
10.5.8 get ..................................................................................................................... 10-41
10.5.9 help.................................................................................................................... 10-41
10.5.10 ls...................................................................................................................... 10-42
10.5.11 mkdir................................................................................................................ 10-42
ix
10.5.12 put ................................................................................................................... 10-43

10.5.13 pwd.................................................................................................................. 10-43
10.5.14 quit................................................................................................................... 10-44
10.5.15 remove ............................................................................................................ 10-44
10.5.16 rename ............................................................................................................ 10-45
10.5.17 rmdir ................................................................................................................ 10-45
10.5.18 sftp................................................................................................................... 10-46
10.5.19 sftp source-interface........................................................................................ 10-47
10.5.20 sftp source-ip................................................................................................... 10-48
10.6 RSH Commands .......................................................................................................... 10-48
10.6.1 rsh ..................................................................................................................... 10-48
10.6.2 debugging rsh.................................................................................................... 10-50
10.7 Rlogin Configuration Commands................................................................................. 10-51
10.7.1 debugging rlogin................................................................................................ 10-51
10.7.2 rlogin.................................................................................................................. 10-51
Chapter 11 POS Terminal Access Configuration Commands ................................................ 11-1

11.1 POS Terminal Access Configuration Commands.......................................................... 11-1
11.1.1 async mode padpos ............................................................................................ 11-1
11.1.2 async mode pos .................................................................................................. 11-1
11.1.3 async mode posapp ............................................................................................ 11-3
11.1.4 debugging pos..................................................................................................... 11-3
11.1.5 debugging pos-app ............................................................................................. 11-4
11.1.6 debugging pos-interface...................................................................................... 11-5
11.1.7 display fcm .......................................................................................................... 11-5
11.1.8 display pos-app ................................................................................................... 11-6
11.1.9 display pos-interface ........................................................................................... 11-7
11.1.10 pad-mode pos enable ....................................................................................... 11-8
11.1.11 pos-server app tcp ............................................................................................ 11-9
11.1.12 pos-server app x25 ......................................................................................... 11-10
11.1.13 pos-server checkschar .................................................................................... 11-11
11.1.14 pos-server enable ........................................................................................... 11-11
11.1.15 pos-server fcm................................................................................................. 11-12
11.1.16 pos-server map ............................................................................................... 11-13
11.1.17 pos-server padmode ....................................................................................... 11-14
11.1.18 pos-server source-ip ....................................................................................... 11-15
11.1.19 pos-server wait-time........................................................................................ 11-16
11.1.20 reset fcm.......................................................................................................... 11-17
11.1.21 reset pos.......................................................................................................... 11-17
11.1.22 x29 timer idleclear ........................................................................................... 11-18
x
Command Manual – System Management Chapter 1 System Maintenance and Management
Comware V3 Commands
Chapter 1 System Maintenance and Management

Commands
1.1 Auto-Config Commands

1.1.1 auto-config
Syntax
auto-config
View
System view
Parameter
None
Description
Use the auto-config command to implement the auto-config operation.

Enabling auto-config is equivalent to executing commands in batch.
Caution:
The auto-config command is usually used at initial boot to execute commands in batch.
As this changes the current configurations and no undo form is available, you must
take caution when using it on a network where configuration is completed.
Although the auto-config function is available with config.def, the default configuration
file, you cannot save the configuration of the auto-config command.
The auto-config command runs these commands:

1) Enabling FTP and configuring the VTY (Telnet) and TTY (through AM interface)
users to adopt local authentication
ftp server enable
user-interface vty 0 4
authentication-mode scheme
user-interface tty user-interface-number
1-1
Comware V3 Commands
modem call-in
authentication-mode scheme
2) Configuring the default user name and password, enabling Telnet, FTP, and
terminal services for the default user
local-user admin password cipher admin
level 3
service-type ftp
service-type terminal telnet
By default, the user name and password are both “admin”.
3) Detecting all the controller interfaces, including E1/T1/E3/T3 interfaces, setting
their operating status to non-channelized, generating the corresponding serial
interfaces. On the T1 interface, use the channel-set command to bundle all the
timeslots into one serial interface.
using e1
using e3
using t3
channel-set 0 timeslot-list 1-24
4) Detecting all the serial interfaces (including the logical interfaces generated by the
controller interface), encapsulating the interfaces with PPP, using PPP negotiation
to get IP addresses, and setting the interface state to UP.
link-protocol ppp
ip address ppp-negotiate
undo shutdown
5) Detecting all the Ethernet interfaces, enabling the dhcp client function, and setting
the interface state to UP.
ip address dhcp-alloc
undo shutdown
6) Detecting all the AM interfaces, setting the operating mode to flow, configuring
modem coding format (setting CountryCode to UK if there is an E1/E3 module and
if otherwise to US), and setting the interface state to UP.
async mode flow
country-code { united-kingdom | united-states }
undo shutdown
Related command: auto-config enable.
1-2
Comware V3 Commands
Example
# Start the auto-config operation.

[H3C] auto-config
1.1.2 auto-config enable
Syntax
auto-config enable
undo auto-config
View
System view
Parameter
None
Description
Use the auto-config enable command to enable auto-config.

Use the undo auto-config command to disable auto-config.
By default, auto-config is enabled.
Use the display auto-config command to check if auto-config is enabled.
Related command: display auto-config.
Example
# Enable auto-config.
[H3C] auto-config enable
# Disable auto-config.
[H3C] undo auto-config
1.1.3 display auto-config
Syntax
display auto-config
View
Any view
Parameter
None
1-3
Comware V3 Commands
Description
Use the display auto-config command to view the status of auto-config.
Example
# Display the status of auto-config.

<H3C> display auto-config
auto-config enable
<H3C> display auto-config
auto-config disable
1.2 Network Test Tool Commands

1.2.1 debugging
Syntax
debugging { all [ timeout minutes ] | module-name [ debug-option1 ]

[ debug-option2 ] …}
undo debugging { all | module-name [ debug-option1 ] [ debug-option2 ] … }
View
User view
Parameter
all: Enables or disables all debugging switches.

timeout minutes: The duration that the debugging all command takes effect. It is in
the range 1 to 1440 minutes.
module-name: Module name.
debug-option: Debugging option.
Description
Use the debugging command to enable system debugging.

Use the undo debugging command to disable system debugging.
By default, the system disables all debugging switches.
The router provides rich debugging functions for troubleshooting networks.
Enabling debugging generates a large amount of debugging information resulting in
decreased efficiency, especially when the debugging all command is executed. An
aftermath of doing so is system crash. For these reasons, you are not encouraged to
use the debugging all command. The undo debugging all command, on the contrary,
is helpful when you want to disable all debugging switches at a time.
1-4
Comware V3 Commands
Related command: display debugging.
Example
# Enable IP packet debugging.

<H3C> debugging ip packet
IP packet debugging switch is on.
1.2.2 display debugging
Syntax
display debugging [ interface interface-type interface-number] [ module-name ]
View
Any view
Parameter

interface-type: Interface type.
interface-number: Interface number.
Description
Use the display debugging command to view the enabled debugging switches.
By default, no parameters are defined and all the enabled debugging switches are
displayed.
Related command: debugging.
Example
# Display all the enabled debugging switches.

<H3C> display debugging
IP packet debugging switch is on.
1.2.3 display diagnostic-information
Syntax
display diagnostic-information
View
Any view
Parameter
None
1-5
Comware V3 Commands
Description
Use the display diagnostic-information command to view the operating information

about the active modules in the system.
When fault occurs to the system, you need to collect lots of information in order to
addressing the issue. It is rather difficult, however, for you to collect all the information
at a time as this involves many display commands. To do that, you can use the display
diagnostic-information command.
Example
# Display the technical support information.

<H3C> display diagnostic-information
<H3C> display diagnostic-information
=================================================
===============display clock===============
=================================================
14:04:23 UTC Thu 09/16/2005
===================================================
===============display version====
===================================================
… …
==========================
===============vrbd===============
========================================
… …
==================================================
===============display device===============
==================================================
… …
=================================================================
===============display current-configuration===============
=================================================================
… …
===============================================================
===============display saved-configuration=====
===============================================================
… …
1-6
Comware V3 Commands
=====================================================
===============display interface===============
=====================================================
… …
======================================================
===============display controller===============
======================================================
========================================================
===============display ip interface===============
========================================================
… …
=========================================================
===============display ip statistics===============
=========================================================
… …
========================================================
===============display exception 20===============
========================================================
… …
===============================================================
===============display exception 3 verbose===============
===============================================================
=====================================================
===============display logbuffer===============
=====================================================
… …
========================================================
===============_display history all===============
========================================================
… …
The contents are omitted.
1-7
Comware V3 Commands
1.2.4 icmp unreach send
Syntax
icmp unreach send

undo icmp unreach send
View
System view
Parameter
None
Description
Use the icmp unreach send command to configure the router to send ICMP
unreachable messages.
Use the undo unreach send command to configure the router not to send ICMP
unreachable messages (except for protocol unreachable, port unreachable, and
fragmentation needed and DF-set)
By default, ICMP unreachable messages are sent.
After the configuration of the undo icmp unreach send command, the router does not
send the ICMP unreachable messages resulted from failing in checking routing (except
for protocol unreachable, port unreachable, and fragmentation needed and DF-set).
Example
# Configure the router not to send ICMP unreachable messages.

[H3C] undo icmp unreach send
1.2.5 ip df-check enable
Syntax
ip df-check enable
undo ip df-check enable
View
System view
Parameter
None
1-8
Comware V3 Commands
Description
Use the ip df-check enable command to enable don’t fragment bit (DF-bit) check for IP
packets.
Use the undo ip df-check enable command to disable DF-bit check for IP packets.
By default, DF-bit check is enabled for IP packets.
With DF-bit check enabled, the router checks the DF bit in the IP header. If an arriving
packet with the DF bit set to 1 is greater than the MTU of the outgoing interface, the
router does not fragment the packet; instead, it drops the packet and sends back an
ICMP message carrying the code of fragmentation needed and DF set.
Before disabling DF-bit check for IP packets, you must ensure that it is disabled on all
the devices along the link.
Example
# Enable DF-bit check for IP packets.

[H3C] ip df-check enable
1.2.6 ip option source-routing
Syntax
ip option source-routing
undo ip option source-routing
View
System view
Parameter
None
Description
Use the ip option source-routing command to enable IP source routing, allowing the
router to handle the packets with the IP source-route option.
Use the undo ip option source-routing command to disable IP source routing.
By default, IP source routing is disabled to decrease the risk of attacks. You may enable
and use it in conjunction with the ping or tracert command executed on other devices
when troubleshooting network path faults or transmitting some special service.
Example
# Enable IP source routing.

[H3C] ip option source-routing
1-9
Comware V3 Commands
# Disable IP source routing.

[H3C] undo ip option source-routing
1.2.7 ip source-address-check
Syntax
ip source-address-check
undo ip source-address-check
View
System view
Parameter
None
Description
Use the ip source-address-check command to enable source address check function

for IP packets.
Use the undo ip source-address check command to disable source address check
function for IP packets.
When the source address check function for IP packets is enabled, the system checks
the validity of the source address of IP packets. If the source address is not an A class,
B class or C class address, the packet will be discarded.
Related command: debugging ip packet.
By default, the source address check function for IP packets is disabled.
Example
# Enable source address check function for an IP packet.

[H3C] ip source-address-check
1.2.8 ping
Syntax
ping [ -a X.X.X.X | -c count | -d | -f | -h ttl_value | -i { interface-type interface-number } |

ip | -n | -p pattern | -q | -r | -s packetsize | -t timeout | tos | -v | vpn-instance
vpn-instance-name ] * host
View
Any view
1-10
Comware V3 Commands
Parameter
-a X.X.X.X: Sets the source IP address in the ICMP ECHO-REQUEST packets.

-c count: Number of ICMP ECHO-REQUEST transmissions, in the range 1 to
4294967295.
-d: Sets socket to debug mode.
-f: Discards the packets larger than the interface MTU without fragmentation.
-h ttl_value: Sets TTL value in the range 1 to 255.
-i: Sets the interface for sending ICMP ECHO-REQUEST packets. It sets the TTL in
packets to 1. Use this keyword when testing directly connected devices. The -i and
-vpn options cannot be specified in the same command.
-n: Directly uses the host parameter as IP address without domain name resolution.
-p pattern: The byte for padding ICMP ECHO-REQUEST packets. It is in hexadecimal
format and in the range 0 to FFFFFFFF. For example, if the parameter is set to -p ff, the
entire packet is padded by ff.
-q: Displays statistic figures rather than details.
-r: Records routes.
-s packetsize: Size of the data field of ECHO-REQUEST packets (excluding IP and
ICMP headers), in the range 20 to 8100 bytes. The packets larger than the interface
MTU are sent after fragmented.
-t timeout: Time to wait for ECHO-RESPONSE, in the range 0 to 65535 milliseconds.
tos: TOS value in ECHO-REQUEST packets.
-v: Displays the received ICMP packets other than ECHO-RESPONSE packets.
vpn-instance vpn-instance-name: Sets the vpn-instance name of MPLS VPN,
specifying the VPN attribute configured in this ping command, that is, name of the
associated vpn-instance created locally. The -i and -vpn options cannot be specified in
the same command.
host: Name or IP address of the destination host.
ip: Adopts the IP protocol.
Description
Use the ping command to test connectivity of an IP network and reachability of a host.
The following are the default settings apply when none of the parameters is specified:
An ECHO-REQUEST packet is sent five times at most.
Socket is non-debug mode.
1-11
Comware V3 Commands
Host is regarded an IP address. If it is not, domain name resolution is performed.

Padding begins at 0x01 and increments until 0x09 and then repeats.
All information including statistics is displayed.
Routes are not recorded.
The length of ECHO-REQUEST packets is 56 bytes.
The time to wait for an ECHO-RESPONSE packet is 2000 ms.
The ICMP packets other than ECHO-RESPONSE packets are not displayed.
The parameter vpn-instance is not defined.
The following is the process of executing the ping command:
A host sends an ICMP ECHO-REQUEST. If the connection to the destination network is
normal, the destination host will be able to receive the ICMP ECHO-REQUEST and
send an ICMP ECHO-REPLY packet back to the source host.
You can use the ping command to test network connectivity or line quality. Its output
includes:
z Information on the reply to each ECHO-REQUEST, including data bytes, packet
sequence number, TTL, and the roundtrip time. If no reply is received upon
timeout, “Request time out” is displayed.
z The final statistics, including the number of the packets sent and received, packet
loss ratio, roundtrip time in its minimum value, mean value and maximum value.
If network transmission is slow, you can appropriately extend the time to wait for reply.
For related command, see tracert.
Example
# Check reachability of the host at 202.38.160.244.

<H3C> ping 202.38.160.244
ping 202.38.160.244 : 56 data bytes , press CTRL-C to break
Reply from 202.38.160.244 : bytes=56 sequence=1 ttl=255 time = 1ms
--202.38.160.244 ping statistics--
5 packets transmitted
5 packets received
0% packet loss
round-trip min/avg/max = 1/2/3 ms
1-12
Comware V3 Commands
1.2.9 reboot
Syntax
reboot
View
User view
Parameter
None
Description
Use the reboot command to have the router reboot.

Executing this command is equal to powering up the router after a power-down, except
that you do not have to go to the site where the router is located.
Executing this command may halt network operation transiently; use it with caution. In
addition, save the configuration file before rebooting the router, because the
configurations you just made cannot survive a reboot.
Example
# Reboot the device.

<H3C> reboot
This command will reboot the system. The current configuration has not been
saved and will be lost if you continue. Continue? [Y/N]
1.2.10 tracert
Syntax
tracert [ -a X.X.X.X | -f first_TTL | -m max_TTL | -p port | -q nqueries | vpn-instance

vpn-instance-name | -w timeout ] * host
View
Any view
Parameter
-a X.X.X.X: Specifies the source IP address in this trace. It is in the format of X.X.X.X
and must be the address of a local interface.
-f first_TTL: Tests the correctness of the –f switch. first_TTL specifies an initial TTL in
the range 0 to maximum TTL.
-m max_TTL: Tests the correctness of the –m switch. max_TTL specifies a maximum
TTL, which can be any TTL larger than the initial TTL.
1-13
Comware V3 Commands
-p port: Tests the correctness of the –p switch. port is an integer specifying a port on the
destination host. Normally, you need not to change this option.
-q nqueries: Tests the correctness of the –q switch with nqueries specifying the number
of the query packets sent each time. It can be any integer greater than zero.
vpn-instance vpn-instance-name: Sets the vpn-instance name of MPLS VPN,
specifying the VPN attribute configured in this tracert command, that is, name of the
associated vpn-instance created locally.
-w timeout: Tests the correctness of the -w switch. timeout specifies the timeout time of
IP packets. It is in seconds and can be any integer larger than zero.
host: IP address of the destination host.
Description
Use the tracert command to trace the gateways by which a packet passes from source
to destination for network connectivity test and fault location.
The following are the default settings that apply when none of the parameters is
specified:
The parameters -a and vpn-instance are not specified.
first_TTL is 1.
max_TTL is 30.
port is 33434.
nqueries is 3.
timeout is 5 seconds.
The following is how a tracert operates:
1) Tracert sends a packet with TTL value of 1.
2) The fist hop sends back an ICMP TTL Expired message.
3) Tracert resends the packet with TTL value of 2.
4) The second hop sends back an ICMP TTL Expired message when the packet
arrives.
This process continues until the packet reaches its destination. By doing this, the
source station obtains the source address in every returned ICMP TTL Expired
message to draw the path for the IP packet to reach its destination.
After detecting a fault with the ping command, you can use the tracert command to
locate the problem.
The output of the command tracert includes IP addresses of all the gateways along the
path to the destination. If a gateway times out, asterisks (***) are output.
If the destination is unreachable or too many hops, you can use CTRL_C to terminate
the test.
1-14
Comware V3 Commands
Example
<H3C> tracert 18.26.0.115

tracert to allspice.lcs.mit.edu (18.26.0.115), 30 hops max, press CTRL C to
break
1 helios.ee.lbl.gov (128.3.112.1) 0 ms 0 ms 0 ms
2 lilac-dmc.Berkeley.EDU (128.32.216.1) 19 ms 19 ms 19 ms
3 lilac-dmc.Berkeley.EDU (128.32.216.1) 39 ms 19 ms 19 ms
4 ccngw-ner-cc.Berkeley.EDU (128.32.136.23) 19 ms 39 ms 39 ms
5 ccn-nerif22.Berkeley.EDU (128.32.168.22) 20 ms 39 ms 39 ms
6 128.32.197.4 (128.32.197.4) 59 ms 119 ms 39 ms
7 131.119.2.5 (131.119.2.5) 59 ms 59 ms 39 ms
8 129.140.70.13 (129.140.70.13) 80 ms 79 ms 99 ms
9 129.140.71.6 (129.140.71.6) 139 ms 139 ms 159 ms
10 129.140.81.7 (129.140.81.7) 199 ms 180 ms 300 ms
11 129.140.72.17 (129.140.72.17) 300 ms 239 ms 239 ms
12 * * *
13 128.121.54.72 (128.121.54.72) 259 ms 499 ms 279 ms
14 * * *
15 * * *
16 * * *
17 * * *
18 ALLSPICE.LCS.MIT.EDU (18.26.0.115) 339 ms 279 ms 279 ms
1.3 Information Processing Commands

1.3.1 display channel
Syntax
display channel [ channel-number | channel-name ]
View
Any view
Parameter
channel-number: Channel number in the range 0 to 9. The system has 10 channels.

channel-name: Channel name.
Table 1-1 Channel names and their associated channel numbers
Channel name Information channel number

channel6 6
channel7 7
1-15
Comware V3 Commands
Channel name Information channel number

channel8 8
channel9 9
console 0
logbuffer 4
loghost 2
monitor 1
snmpagent 5
trapbuffer 3
Description
Use the display channel command to view the contents in an information channel.
When executed without any parameter specified, this command displays the settings of
all channels.
Example
# Display the contents in information channel 0.

<H3C> display channel 0
channel number:0, channel name:console
MODU_ID NAME ENABLE LOG_LEVEL ENABLE TRAP_LEVEL ENABLE
DEBUG_LEVEL
ffff0000 all Y warning Y debugging Y debugging
Table 1-2 Description on the fields of the display channel command
Field Description
channel number:0 Channel number
channel name:console Channel name
MODU_ID Module ID
NAME Module name
ENABLE LOG_LEVEL State of log-level log is enable
ENABLE TRAP_LEVEL State of trap-level log is enable
ENABLE DEBUG_LEVEL State of debug-level log is enable
1-16
Comware V3 Commands
1.3.2 display info-center
Syntax
display info-center
View
Any view
Parameter
None
Description
Use the display info-center command to view all the information recorded in the
info-center.
Related command: info-center enable, info-center loghost, info-center logbuffer,
info-center trapbuffer, info-center console channel, info-center monitor channel.
Example
# Display the information recorded in the info-center.

<H3C> display info-center
Information Center: enabled
Log host:
Console:
channel number : 0, channel name : console
Monitor:
channel number : 1, channel name : monitor
SNMP Agent:
channel number : 5, channel name : snmpagent
Trap buffer:
enabled,max buffer size 1024, current buffer size : 256,
current messages 0, channel number:3, channel name:trapbuffer
dropped messages 0, overwrote messages 0
Log buffer:
enabled,max buffer size 1024, current buffer size 256,
current messages 89, channel number : 4, channel name : logbuffer
dropped messages 0, overwrote messages 0
logfile:
channel number:9, channel name:channel9, language:English
Information timestamp setting:
log - date, trap - date, debug – boot
1-17
Comware V3 Commands
Table 1-3 Description on the fields of the display info-center command
Field Description
Information Center: enabled Information center is enabled
Information about the log host direction.
If configured, the following information
will be displayed:
Log host: IP address of log host, name and
number of information channel,
language, and level of output
information
Console: Information about the console port
channel number : 0, channel name : direction, including name and number of
console its information channel
Monitor: Information about the monitor direction,

channel number : 1, channel name : including name and number of its
monitor information channel
SNMP Agent: Information about the SNMP agent

channel number : 5, channel name : direction, including name and number of
snmpagent its information channel
Trap buffer:
enabled,max buffer size 1024, Information about the trap buffer,
current buffer size : 256, including its state, maximum size,
current messages 0, channel number:3, current size, current messages, channel
channel name:trapbuffer number, channel name, dropped
messages, and overwritten messages
dropped messages 0, overwrote
messages 0
Log buffer:
enabled,max buffer size 1024, current Information about the log buffer
buffer size 256, direction, including state of the log buffer
(enabled or disabled), its maximum size,
current messages 89, channel number : current size, information channel name
4, channel name : logbuffer and number, dropped messages, and
dropped messages 0, overwrote overwritten messages
messages 0
logfile: Information about the log file direction,
channel number:9, channel including information channel number
name:channel9, language:English and name, and language
Timestamp format:
Information timestamp setting:
Date for both log-level and trap-level
log - date, trap - date, debug - boot
logs and boot for debug-level log
1-18
Comware V3 Commands
1.3.3 display logbuffer
Syntax
display logbuffer [ size size-value | summary ] [ level level-number ] [ | { begin |

include | exclude } string ]
View
Any view
Parameter
size: Specifies the number of to-be-displayed entries in the logbuffer.

size-value: The number of entries to be displayed.
summary: A summary for the logbuffer.
level: Displays only the information entries at a specified level.
level-number: Specifies the information level, an integer in the range 1 to 8.
|: Uses a regular expression to filter output.
begin: Displays the information beginning with the specified characters (string).
include: Displays the information that includes the specified characters (string).
exclude: Displays the information that excludes the specified characters (string).
string: Defines a regular expression.
Description
Use the display logbuffer command to view the information recorded in the log buffer.
By default, the display logbuffer command is executed without any parameter
specified to display all information in the log buffer.
If the number of information entries in the current log buffer is smaller than the specified
size-value, all the entries are displayed.
Related command: info-center enable, info-center logbuffer, display info-center.
Example
# Display the information in the log buffer.

<H3C> display logbuffer
Logging buffer configuration and contents:enabled
Allowed max buffer size : 1024
Actual buffer size : 256
Channel number : 4 , Channel name : logbuffer
Dropped messages : 0
Overwritten messages : 0
Current messages : 96
1-19
Comware V3 Commands
%8/28/2101 5:34:48-IC-7-SYS_RESTART:
System restarted --
H3C Platform Software
%Dec 3 09:04:38:723 2005 r2 RM/5/RTLOG:
rtbit_set_vrf:127.0.0.0/8(n_bitsset=0) public vpn-instance(1) -> KRT
%Dec 3 09:04:38:772 2005 r2 SHELL/5/CMD:task:CFM ip:** user:**
command:interfac
e Aux0
command:interfac
e Ethernet0/0
command:interfac
e Serial0/0
command:interfac
e Serial1/0
command:interfac
e Serial1/1
Table 1-4 Description on the fields of the display logbuffer command
Field Description
Logging buffer configuration and
Log buffer is enabled
contents:enabled
Maximum size of the log buffer is 1024
entries
Actual size of the log buffer is 256
entries
Channel number : 4 , Channel name : Number and name of the information
logbuffer channel for the log buffer
Dropped messages : 0 Number of dropped messages
Overwritten messages : 0 Number of overwritten messages
Current messages : 96 Number of current messages
1.3.4 display logbuffer summary
Syntax
display logbuffer summary [ level severity ]
1-20
Comware V3 Commands
View
Any view
Parameter
level severity: Information level, in the range 1 to 8.
Table 1-5 Definition of information level
Severity level Severity value Description

emergencies 1 The extremely emergent errors
alerts 2 The errors that need to be corrected
critical 3 Critical errors
errors 4 The errors that need concerns but not critical
warnings 5 Warning, there might exist some kinds of errors
notifications 6 The information should be concerned
informational 7 Common prompt information
debugging 8 Debugging information
Description
Use the display logbuffer summary command to display a summary about the log
buffer on the router.
Example
# Display a summary about the log buffer on the router.

<H3C> display logbuffer summary
EMERG ALERT CRIT ERROR WARN NOTIF INFO DEBUG
0 0 0 0 94 0 1 0
The command output shows the number of log entries for each information level in the
log buffer.
1.3.5 display trapbuffer
Syntax
display trapbuffer [ size sizeval ]
View
Any view
Parameter
size: Specifies the number of information entries in the trap buffer.
1-21
Comware V3 Commands
sizeval: Number of entries to be displayed.
Description
Use the display trapbuffer command to view the information entries in the trap buffer.
By default, the command is executed without any parameter specified to display all
information in the trap buffer.
If the number of entries in the current trap buffer is smaller than the specified sizeval, all
entries are displayed.
Related command: info-center enable, info-center trapbuffer, display info-center.
Example
# Display the information in the trap buffer.

<H3C> display trapbuffer
Trapping Buffer Configuration and contents:
enabled
allowed max buffer size : 1024
actual buffer size : 256
channel number : 3 , channel name : trapbuffer
dropped messages : 0
overwrote messages : 0
current messages : 0
# Display 23 entries in the trap buffer.

<H3C> display trapbuffer size 23
Trapping Buffer Configuration and contents:
enabled
allowed max buffer size : 1024
actual buffer size : 256
channel number : 3 , channel name : trapbuffer
dropped messages : 0
overwrote messages : 0
current messages : 0
Table 1-6 Description on the fields of the display trapbuffer command
Field Description
Trapping Buffer Configuration and
Trap buffer is enabled
contents: enabled
Maximum size of the trap buffer is 1024
entries
Actual size of the trap buffer is 256
entries
1-22
Comware V3 Commands
Field Description
channel number : 3 , channel name : Number and name of the information
trapbuf channel for the trap buffer
Dropped messages : 0 Number of dropped messages
Overwritten messages : 0 Number of overwritten messages
Current messages : 0 Number of current messages
1.3.6 info-center channel
Syntax
info-center channel channel-number name channel-name
View
System view
Parameter

channel-name: A string of up to 30 characters excluding minus signs (-), forward
slashes (/) and backslashes (\).
Description
Use the info-center channel command to assign a name to the information channel
specified by channel-number.
Note that the assigned name must be unique.
Example
# Name Channel 0 as execconsole.

[H3C] info-center channel 0 name execconsole
1.3.7 info-center console channel
Syntax
info-center console channel { channel-number | channel-name }

undo info-center console channel
View
System view
1-23
Comware V3 Commands
Parameter

Description
Use the info-center console channel command to have the info-center output
information to the console over the specified channel.
Use the undo info-center console channel command to disable the current settings.
By default, no system information is output to the console.
This command becomes valid only when the syslog function is enabled.
Related command: info-center enable and display info-center.
Example
# Output information to the console and set the output channel.

[H3C] info-center console channel console
1.3.8 info-center enable
Syntax
info-center enable
undo info-center enable
View
System view
Parameter
None
Description
Use the info-center enable command to enable the info-center.

Use the undo info-center enable command to disable the info-center.
By default, the info-center is enabled.
Only when the info-center is enabled can the system output information.
Related command: info-center loghost, info-center logbuffer, info-center
trapbuffer, info-center console channel, info-center monitor channel, display
info-center.
Example
# Enable the info-center.
1-24
Comware V3 Commands
[H3C] info-center enable

%Information center is enabled
1.3.9 info-center logbuffer
Syntax
info-center logbuffer [ channel { channel-number | channel-name } | size buffersize ]

*
undo info-center logbuffer [ channel | size ]
View
System view
Parameter
channel: Sets the channel for outputting information to the log buffer.
size: Sets log buffer size.
buffersize: Size of the log buffer (the message entries that can be accommodated).
Description
Use the info-center logbuffer command to enable the log buffer and specify the
channel for system information output as well as the size of the log buffer.
Use the undo info-center logbuffer command to cancel the current settings.
By default, information output to the log buffer is allowed and log buffer size is 512.
Only when the info-center is enabled can this command become effective.
By setting channel number after enabling log buffer, you can specify information output
direction.
Related command: info-center enable, display info-center.
Example
# Enable the info-center to send information to the log buffer and set the log buffer size
to 50.
[H3C] info-center logbuffer size 50
1.3.10 info-center logfile
Syntax
info-center logfile channel { channel-number | channel-name } *
1-25
Comware V3 Commands
undo info-center logfile channel
View
System view
Parameter
channel: Information channel for outputting information to the log file.

Description
Use the info-center logfile channel command to have the info-center output system
information to the log file.
Use the undo info-center logfile channel command to cancel the current setting.
Only when the information center is enabled can this command become effective.
Example
# Enable the info-center to send information to the log file.

[H3C] info-center logfile channel 4
1.3.11 info-center loghost
Syntax
info-center loghost X.X.X.X [ channel { channel-number | channel-name } | facility

local-number | language { chinese | english } ] *
undo info-center loghost X.X.X.X
View
System view
Parameter
X.X.X.X: IP address of the log host.

channel: Information channel for the log host.
facility: Sets the logging tool of the log host.
local-number: Logging tool of the log host, in the range local 0 to local 7.
language: Sets the logging language.
1-26
Comware V3 Commands
chinese, english: Logging language, which can be Chinese or English.
Description
Use the info-center loghost command to have the info-center output information to
the log host.
Use the undo info-center loghost command to cancel the current setting.
By default, no information is output to the log host.
If not specified, the information channel for the log host defaults to channel 2 which is
named log host, the log host recording tool local-number to local 7, and the language to
english.
Only when the information center is enabled can this command become effective.
By setting the IP address of the log host, you can specify the information output
direction. You can set up to four log hosts.
Example
# Enable the info-center to send information to the UNIX workstation at 202.38.160.1.

[H3C] info-center loghost 202.38.160.1
1.3.12 info-center loghost source
Syntax
info-center loghost source interface-type interface-number

undo info-center loghost source
View
System view
Parameter
interface-type interface-number: Specifies an interface by its type and number.
Description
Use the info-center loghost source command to specify the source address in the
packets destined to the log host.
Use the undo info-center loghost source command to cancel the current
configuration.
When a log message is sent out a router, its source address defaults to the IP address
of the interface where it is sent. You can change this address however using this
command. By assigning different source addresses to the packets sent by different
routers, you can discriminate them for retrieval convenience.
1-27
Comware V3 Commands
Example
# Set the IP address of loopback 0 as the source address of the log messages.
[H3C] interface loopback 0
[H3C-LoopBack0] ip address 1.1.1.1 255.255.255.0
[H3C-LoopBack0] quit
[H3C] info-center loghost source loopback 0
1.3.13 info-center monitor channel
Syntax
info-center monitor channel { channel-number | channel-name }

undo info-center monitor channel
View
System view
Parameter

Description
Use the info-center monitor channel command to have the info-center output
information over the specified channel to the user terminal.
Use the undo info-center monitor channel command to cancel the current setting.
By default, no information is output to the user terminal.
Example
# Enable the info-center to output information to the user terminal and set the output
channel.
[H3C] info-center monitor channel monitor
1.3.14 info-center snmp channel
Syntax
info-center snmp channel { channel-number | channel-name }

undo info-center snmp channel
1-28
Comware V3 Commands
View
System view
Parameter

Description
Use the info-center snmp channel command to set the information channel for
SNMP.
Use the undo info-center snmp channel command to cancel the current setting.
By default, channel 5 is used.
Related command: display snmp-agent statistics.
Example
# Set SNMP information channel to channel 6.

[H3C] info-center snmp channel 6
1.3.15 info-center source
Syntax
info-center source { module-name | default } { channel { channel-number |

channel-name} } [ log { state { on | off } | level severity }* | trap { state { on | off } | level
severity } * | debug { state { on | off } | level severity }* ]*
undo info-center source { module-name | default } { channel { channel-number |
channel-name }
View
System view
Parameter

default: Includes all modules by default.
channel-number: Information channel number to be set.
channel-name: Information channel name to be set.
log: Log information.
trap: Trap information.
debug: Debugging information.
1-29
Comware V3 Commands
on: Enables outputting information.

off: Disables outputting information.
level: Sets information level to disable the info-center to output information at this or
higher level.
severity: Information level. As shown in the following table, the info-center divides
information into eight levels by severity or emergency, with a lower level indicating an
event more emergent event. Level 1 represents emergencies and level 8 represents
debugging.
Table 1-7 Definition of information level
Severity level Description

emergencies The extremely emergent errors
alerts The errors that need to be corrected immediately.
critical Critical errors
errors The errors that need concerns but not critical
warnings Warning, there might exist some kinds of errors.
notifications The information should be concerned.
informational Common prompt information
debugging Debugging information
*: Indicates to select from multiple options, at least one and at most all.
Description
Use the info-center source command to add records to an information channel.

Use the undo info-center source command to remove the records from the
information channel.
For the specified module, by default,
The state of logging information output is on and the allowed information level is
informational.
The state of trapping information output is on and the allowed information level is
informational.
The state of debugging information output is off.
The system allocates one information channel for each output direction as shown in the
following table:
1-30
Comware V3 Commands
Table 1-8 Default information channels assigned to each direction
Output direction Information channel No. Default channel name

Console 0 console
Monitor terminal 1 monitor
Log host 2 loghost
Trap buffer 3 trapbuffer
Log buffer 4 logbuffer
SNMP 5 snmpagent
In addition, each information channel has a default record, where the module name and
number are default and 0xffff0000. But for different channels, the record may have
different default settings for log, trap, and debugging information. If a module has no
explicit configuration record in the channel, the default configuration record is used.
When adding a new or duplicate record, you need to specify its log, trap, and debug
information levels if the default levels are not desired.
Example
# Output IP module’s log information at emergencies and lower levels through the
SNMP channel.
[H3C] info-center source ip channel snmpagent log level emergencies
# Remove the setting of the CMD module in the SNMP channel.

[H3C] undo info-center source cmd channel snmpagent
1.3.16 info-center synchronous
Syntax
info-center synchronous
undo info-center synchronous
View
System view
Parameter
None
Description
Use the info-center synchronous command to enable synchronous terminal output.
1-31
Comware V3 Commands
Use the undo info-center synchronous command to disable synchronous terminal

output.
When you are editing a command line, the output of system information may interrupt
your work. With synchronous terminal output enabled, the system can re-display the
input that you are editing after the system information output is completed.
By default, synchronous terminal output is disabled.
Example
# Enable synchronous terminal output.

[H3C] info-center synchronous
Current IC terminal output sync is on
1.3.17 info-center timestamp
Syntax
info-center timestamp { trap | debugging | log } { boot | date | none }

undo info-center timestamp { trap | debugging | log }
View
System view
Parameter
trap: Trap information

debugging: Debugging information.
log: Log information.
boot: Absolute Information time stamp, in the format of xxxxxx.yyyyyy, where xxxxxx is
the high 32 bits and yyyyyy the low 32 bits of the passed milliseconds.
date: Date Information time stamp , in the format of mm/dd/yyyy-hh:mm:ss.
none: No time stamp.
Description
Use the info-center timestamp command to set a time stamp format for the system
information output to the information channels except for the log host.
Use the undo info-center timestamp command to cancel the current configuration.
By default, the boot time stamp is used for debugging information while the date time
stamp is used for other types of information.
Example
# Set the time stamp format to boot for traps.
1-32
Comware V3 Commands
[H3C] info-center timestamp trap boot
1.3.18 info-center timestamp loghost
Syntax
info-center timestamp loghost { date | no-year-date | none }

undo info-center timestamp loghost
View
System view
Parameter
date: Specifies to use the time stamp format containing the year. With this keyword
specified, the log information will contain information about the year, for example, “May
27 10:29:38 2005 H3C %%10SHELL/5/CMD(l): task:co0 ip:** user:** command:dis
this”.
no-year-date: Specifies to use the time stamp format without the year. With this
keyword specified, the log information will not contain information about the year, for
example, “May 27 10:29:54 H3C %%10SHELL/5/CMD(l): task:co0 ip:** user:**
command:dis this”.
none: Specifies not to use time stamps. With this keyword specified, the log information
will not contain time information, for example, “H3C %%10SHELL/5/CMD(l): task:co0
ip:** user:** command:dis this”.
Description
Use the info-center timestamp loghost command to set a time stamp format for the
system information output to the log host.
Use the undo info-center timestamp loghost command to restore the default.
By default, the date keyword applies.
Example
# Set the time stamp format to date for the system information output to the log host.
[H3C] info-center timestamp loghost date
1.3.19 info-center trapbuffer
Syntax
info-center trapbuffer [ channel { channel-number | channel-name } | size buffersize ]

*
undo info-center trapbuffer [ channel | size ]
1-33
Comware V3 Commands
View
System view
Parameter
channel: Sets the channel for outputting information to the trapbuffer.

size: Sets trapbuffer size.
buffersize: Size of the trapbuffer (the information entries that can be accommodated).
Description
Use the info-center trapbuffer command to enable the trap buffer, set its size and the
channel that outputs information to it.
Use the undo info-center trapbuffer command to cancel the current settings.
By default, information output to trap buffer is allowed and the trap buffer size is 256.
By setting size of the trap buffer, you can allow the info-center output information to the
trap buffer.
Example
# Enable the info-center to send information to the trap buffer whose size is 30.
[H3C] info-center trapbuffer size 30
1.3.20 reset logbuffer
Syntax
reset logbuffer
View
User view
Parameter
None
Description
Use the reset logbuffer command to clear information in the log buffer.
1-34
Comware V3 Commands
Example
# Clear information in the log buffer.

<H3C> reset logbuffer
1.3.21 reset trapbuffer
Syntax
reset trapbuffer
View
User view
Parameter
None
Description
Use the reset trapbuffer command to clear information in the trap buffer.
Example
# Clear information in the trap buffer.

<H3C> reset trapbuffer
1.3.22 terminal debugging
Syntax
terminal debugging
undo terminal debugging
View
User view
Parameter
None
Description
Use the terminal debugging command to have the debugging information displayed
on the user terminal.
Use the undo terminal debugging command to disable the function.
By default, terminal display is disabled.
Related command: debugging.
1-35
Comware V3 Commands
Example
# Display debugging information on the terminal.

<H3C> terminal debugging
1.3.23 terminal logging
Syntax
terminal logging
undo terminal logging
View
User view
Parameter
None
Description
Use the terminal logging command to have the log information displayed on the
terminal.
Use the undo terminal logging command to disable displaying log information on the
terminal.
By default, log information can be displayed on the terminal.
Example
# Disable displaying log information on the terminal.

<H3C> undo terminal logging
1.3.24 terminal monitor
Syntax
terminal monitor
undo terminal monitor
View
User view
Parameter
None
1-36
Comware V3 Commands
Description
Use the terminal monitor command to have the terminal display debugging /log/trap
information sent from the info-center.
Use the undo terminal monitor command to disable the terminal to display
debugging/log/trap information.
By default, terminal display is turned on for console users, allowing all prompt
messages to output to the console terminal.
For other types of terminal user, AUX, VTY, and TTY, terminal display is turned off by
default. To have the prompt messages for them output to the console terminal, you
need to configure the terminal monitor command.
The undo terminal monitor command prohibits all debugging, log, and trap
information from outputting to the current terminal, just as the undo terminal
debugging, undo terminal logging, and undo terminal trapping commands would
do.
When the terminal monitor command is configured, you can use the terminal
debugging/undo terminal debugging, terminal logging/undo terminal logging,
and terminal trapping/undo terminal trapping commands to enable/disable
debugging/log/trap information output.
Example
# Disable the terminal to display information sent from the info-center.

<H3C> undo terminal monitor
1.3.25 terminal trapping
Syntax
terminal trapping
undo terminal trapping
View
User view
Parameter
None
Description
Use the terminal trapping command to have the terminal display trap information.
Use the undo terminal trapping command to disable the terminal to display trap
information.
1-37
Comware V3 Commands
By default, the terminal displays trap information.
Example
# Disable the terminal to display trap information.

<H3C> terminal trapping
1.4 System Operating Management Commands (Only for

AR46 Series)
1.4.1 display alarm urgent
Syntax
display alarm urgent [ time | slot | id ]
View
Any view
Parameter
time: Displays alarms by time.

id: Displays alarms by ID.
slot: Displays alarms by slot.
Description
Use the display alarm urgent command to view the stored alarms in a specified way.
Executing the command without any parameter displays all alarms.
Example
# Display all the stored alarms.

<H3C> display alarm urgent
Alarm ID Slot Date Time Para1 Para2
2 11 00/04/01 23:55:18 2 24
2 10 00/04/01 23:55:18 1 24
0 12 00/04/04 10:00:14 0 1
Table 1-9 Description on the fields of the display alarm urgent command
Field Description
Identification of the alarm, which is dictated by the software. You can
Alarm ID
look it up in the manual for the corresponding alarm reason.
Slot Slot originating the alarm
Date Date of the alarm
1-38
Comware V3 Commands
Field Description
Time Time of the alarm
You can look up the alarm ID in the manual for the corresponding
Para1
alarm reason.
Para2 You can look it up in the manual for the corresponding alarm reason.
1.4.2 display environment
Syntax
display environment
View
Any view
Parameter
None
Description
Use the display environment command to view the current values and the thresholds
of the hardware system environment.
Example
# Display the system environment.

<H3C> display environment
GET 3 TEMPERATUREPOINT VALUE SUCCESSFULLY
environment information:
Temperature information:
local CurrentTemperature LowLimit HighLimit
(deg c ) (deg c) (deg c )
RPU 34 0 80
VENT 31 0 80
Table 1-10 Description on the fields of the display environment command
Field Description
local Name of a hardware unit such as RPU/ERPU
CurrentTemperature Current temperature of the hardware unit
LowLimit Lower limit of the temperature
1-39
Comware V3 Commands
Field Description
HighLimit Upper limit of the temperature
1.4.3 display device
Syntax
display device slot-number
View
Any view
Parameter
slot-number: Slot number.
Description
Use the display device command to view information on the hardware configurations
of the system, including in-position state of the RPU, NPU, interface cards, power
module, and fan module, the operating state of the interface cards, power module, and
fan module, as well as the offline state of RPU and NPU.
If no slot is specified, the basic information about all the facilities in position is displayed.
If a slot is specified, only details about the slot are displayed, including records of the
reset times and causes.
Example
# Display basic information about the facilities on the H3C.

<H3C> display device
Slot # Type Online Status
0 RPU Present Normal
6 PWR Present Normal
7 FAN Present Normal
Table 1-11 Description on the fields of the display device command
Field Description
Slot # Slog number
Type Name of the hardware unit
Indicates whether the hardware unit is present. A value of
Online
Present indicates that the unit has been installed correctly.
Status Status of the hardware unit
1-40
Comware V3 Commands
1.4.4 display schedule reboot
Syntax
display schedule reboot
View
Any view
Parameter
None
Description
Use the display schedule reboot command to view settings related to the H3C’s
schedule reboot terminal service.
Related command: reboot, schedule reboot at, schedule reboot delay, undo
schedule reboot.
Example
# Display the current settings related to the schedule reboot terminal service.
<H3C> display schedule reboot
Reboot system at 16:00:00 2006/1/1 (in 2 hours and 5 minutes).
1.4.5 remove slot
Syntax
remove slot slotnum

undo remove slot slotnum
View
User view
Parameter
slotnum: Slot number for the interface card.
Description
Use the remove slot command to have the system do some pre-processing work
before removing an interface card.
Use the undo remove slot command to cancel the inadvertent operation on the
remove slot command.
1-41
Comware V3 Commands
You do not need to execute the undo remove slot command when you replace a
removed card, but you must execute the remove slot command before removing a
card.
Example
# Remove the interface card from slot 3.

<H3C>remove slot 3
1.4.6 reset alarm urgent
Syntax
reset alarm urgent
View
User view
Parameter
None
Description
Use the reset alarm urgent command to clear all the stored alarms.
Example
# Clear all the stored alarms.

<H3C> reset alarm urgent
1.4.7 schedule reboot at
Syntax
schedule reboot at time [ date ]
View
User view
Parameter
time: Reboot time of the H3C, in the format of hh:mm (hours:minutes). hh is in the
range 0 to 23, and mm is in the range 0 to 59.
date: Reboot date of the H3C, in the format of mm/dd/yyyy or yyyy/mm/dd where mm is
the month of the year in the range 1 to 12, dd is the day of the month, the range of which
depends on month, and yyyy is the year in the range 2000 to 2099.
1-42
Comware V3 Commands
Description
Use the schedule reboot at command to enable the scheduled reboot function of the
H3C and schedule the reboot time and date.
By default, scheduled reboot is disabled.
If a future date is specified, the H3C will reboot as scheduled with about one minute’s
tolerance.
If no date is specified, two cases are involved:
z If the time is set behind the current time, the H3C will reboot at the time of that day;
z If the configured time is ahead of the current time, the H3C will reboot at that time
the next day.
The configured date must not be 30 days ahead of the current date. In addition, to have
the schedule take effect, you must confirm it by entering “y” or “Y” when asked by the
system. This overwrites the original setting, if there is any.
Note:
z After you configure the schedule reboot at command, tuning system time with the
clock command or through NTP will void the scheduled reboot setting you made.
z After the configuration of the schedule reboot at command, a timer starts. This
timer is cyclic and measured in minutes. For example, if you set at 12:05:26 to have
the H3C reboot at 12:06:00, the H3C will reboot at 12:06:26 instead of 12:06:00.
Related command: reboot, schedule reboot delay, undo schedule reboot, display
schedule reboot.
Example
# Set the H3C to reboot at 22:00 that night (the current time is 15:50).
<H3C> schedule reboot at 22:00
Reboot scheduled for 22:00:00 UTC 1/18/2006 (in 6 hours and 10 minutes)
Proceed with reboot? [Y/N]:y
1.4.8 schedule reboot delay
Syntax
schedule reboot delay { time | minutes }
View
User view
1-43
Comware V3 Commands
Parameter
time: Time waiting for reboot, in the format of hhh:mm (hours:minutes), where hhh
ranges from 0 to 720, and mm ranges from 0 to 59.
minutes: Time waiting for reboot, absolute minute value in the range 0 to 43200.
Description
Use the schedule reboot delay command to enable scheduled H3C reboot and set
the waiting time.
By default, the scheduled H3C reboot function is disabled.
In setting the time waiting for reboot, two formats are available: hours: minutes
(hhh:mm) and "absolute minutes". But the total time length must be less than or equal
to 30×24×60 minutes, or 30 days.
After you complete this configuration, the system asks you to confirm and validate the
setting by entering a "Y" or "y". If a future date is specified, the H3C will reboot as
scheduled with about one minute’s tolerance. The validated new setting overwrites the
original setting, if there is any.
Note:
After you configure the schedule reboot delay command, tuning system time with the
clock command or through NTP will void the scheduled reboot setting you made.
Related command: reboot, schedule reboot at, undo schedule reboot, display
schedule reboot.
Example
# Configure the H3C to reboot 88 minutes later (the current time is 21:32).
<H3C> schedule reboot delay 88
Reboot scheduled for 23:00:00 UTC 11/1/2005 (in 1 hours and 28 minutes)
Proceed with reboot? [Y/N]:y
1.4.9 upgrade
Syntax
upgrade [ bootrom | pico-code] filename
View
System view
1-44
Comware V3 Commands
Parameter
bootrom: Upgrades the Boot ROM in service.

pico-code: Upgrades the pico-code in service.
filename: File name of the upgrade software package.
Description
Use the upgrade command to upgrade the Boot ROM program, pico-code or the logic.
Example
# Upgrade the pico-code in service using the file named filename.

[H3C] upgrade pico-code filename
1.4.10 undo schedule reboot
Syntax
undo schedule reboot
View
User view
Parameter
None
Description
Use the undo schedule reboot command to cancel the configuration of the schedule
reboot terminal service.
Related command: reboot, schedule reboot at, schedule reboot delay, display
schedule reboot.
Example
# Disable the scheduled reboot function.

<H3C> undo schedule reboot
1.5 System Maintenance Upgrade Commands (Only for

AR28/18 Series)
1.5.1 boot bootrom
Syntax
boot bootrom filename
1-45
Comware V3 Commands
View
System view
Parameter
filename: BootRom file name in Flash Memory, which must have an extension name.
Description
Use the boot bootrom command to upgrade BootRom.
Example
# Upgrade BootRom on the H3C.

<H3C> boot bootrom 824X-BOOTROM-Comware V3-9.01.btm
1-46
Comware V3 Chapter 2 Auto Detect Configuration Commands
Chapter 2 Auto Detect Configuration Commands
2.1 Basic Auto Detect Configuration Commands

2.1.1 debugging detect-group
Syntax
debugging detect-group { all | packet | state | timer }

undo debugging detect-group { all | packet | state | timer }
View
User view
Parameter
all: All debugging.

packet: Packet debugging.
state: State debugging.
timer: Timer debugging.
Description
Use the debugging detect-group command to enable auto detect debugging.

Use the undo debugging detect-group command to disable auto detect debugging.
By default, auto detect debugging is disabled.
Example
# Enable auto detect packet debugging.

<H3C> debugging detect-group packet
2.1.2 detect-group
Syntax
detect-group group-number
undo detect-group group-number
View
System view
2-1
Parameter
group-number: Number for the detect group. The number range differs with devices.
Refer to the system prompt.
Description
Use the detect-group command to create a detect group and enter its view.
Use the undo detect-group command to remove a specified detect group.
Example
# Create a detect group numbered 10.

<H3C> system-view
[H3C] detect-group 10
[H3C-detect-group-10]
2.1.3 detect-list
Syntax
detect-list list-number ip address ip-address [ nexthop ip-address ]

undo detect-list list-number
View
Detect group view
Parameter
list-number: Sequence number for an address to be probed in the detect group. The
number range differs with devices. Refer to the system prompt.
ip-address: IP address to be probed.
nexthop ip-address: Specifies a next hop IP address for reaching the IP address to be
probed, that is, the address where auto detect starts.
Description
Use the detect-list command to add an IP address to the detect group and assign the
address a detecting sequence number.
Use the undo detect-list command to remove an IP address from the detect group.
You can specify the relationship between different IP addresses by using the option
command. The H3C probes these IP addresses in the ascending order of their
assigned sequence numbers.
Related command: option.
2-2
Example
# Add IP address 202.13.1.55 with sequence number 1 to detect group 10, taking IP
address 1.1.1.1 as the next hop address.
<H3C> system-view
[H3C-detect-group-10] detect-list 1 ip address 202.13.1.55 nexthop 1.1.1.1
2.1.4 display detect-group
Syntax
display detect-group [ group-number ]
View
Any view
Parameter
group-number: Number of the detect group to be displayed, in the range 1 to 100.
Description
Use the display detect-group command to display configuration information about a

specified detect group or all detect groups.
Example
# Display configuration information about detect group 1.

[H3C] display detect-group 1
detect-group 1 :
detect loop time(s): 15
ping wait time(s): 2
detect retry times: 2
detect ip option: and
group state: not detecting
register module num: 0
detect ip count: 0
detect-list ip address next-hop
1 1.1.1.1 1.1.1.5
Table 2-1 Description on the fields of the display detect-group command
Field Description
The following configuration information is about
detect-group 1
detect group 1
2-3
Field Description
detect loop time(s): 15 The auto detect interval is 15 seconds
The timeout period of a probing attempt is 2
ping wait time(s): 2
seconds
detect retry times: 2 The number of probing retries is 2
The logical relationship between the addresses
detect ip option: and
in the detect group is and
Current state of the detect group is that no
group state: not detecting
probing is going on
Count of times the detect group has been
register module num: 0
referenced
detect ip number: 1 Number of IP addresses in the detect group
Sequence number of an IP address in the
detect-list
detect group
ip address IP address to be probed
Next hop IP address for reaching the IP
next-hop
address to be probed
2.1.5 option
Syntax
option { and | or }
undo option [ and | or ]
View
Detect group view
Parameter
and: Specifies that the relationship between the addresses to be probed is logical AND.
or: Specifies that the relationship between the addresses to be probed is logical OR.
Description
Use the option command to specify the logical relationship between the addresses to
be probed in the detect group.
Use the undo option command to restore the default logical relationship.
The H3C probes the IP addresses in a detect group in the ascending order of their
assigned sequence numbers and determines whether the detect group is reachable as
follows:
2-4
z When the relationship between the IP addresses is logical AND, the detect group
is regarded reachable only if all IP addresses can be pinged. If the H3C fails to
ping an IP address, it stops probing and considers that the detect group is
unreachable.
z When the relationship between the IP addresses is logical OR, the detect group is
regarded reachable if one of the IP addresses can be pinged. When an IP address
is pinged, the H3C stops probing and considers that the detect group is reachable.
By default, the relationship between the addresses in a detect group is logical AND.
Example
# Specify the relationship between the addresses in detect group 10 as or.

<H3C> system-view
[H3C-detect-group-10] option or
2.1.6 retry
Syntax
retry retry-times
undo retry
View
Detect group view
Parameter
retry-times: Maximum number of probing retries during an auto detect interval. It

ranges from 0 to 10 and defaults to 2.
Description
Use the retry command to set the maximum number of probing retries during an auto
detect interval.
Use the undo retry command to restore the default maximum number of probing
retries during an auto detect interval.
Example
# Specify the maximum number of probing retries during an auto detect interval to 3 for
detect group 10.
<H3C> system-view
2-5
[H3C-detect-group-10] retry 3
2.1.7 timer loop
Syntax
timer loop seconds

undo timer loop
View
Detect group view
Parameter
seconds: Auto detect interval. It ranges from 1 to 86,400 seconds and defaults to 15
seconds.
Description
Use the timer loop command to set the auto detect interval, that is, the frequency for
auto detect.
Use the undo timer loop command to restore the default auto detect interval.
Example
# Set the detect interval of detect group 10 to 60 seconds.

<H3C> system-view
[H3C-detect-group-10] timer loop 60
2.1.8 timer wait
Syntax
timer wait seconds

undo timer wait
View
Detect group view
Parameter
seconds: Timeout time for a probing attempt. It ranges from 1 to 30 seconds and
defaults to 2 seconds.
2-6
Description
Use the timer wait command to set a timeout period for a probing attempt.
Use the undo timer wait command to restore the default timeout period for a probing
attempt.
Example
# Set the probing attempt timeout period to three seconds for detect group 3.
<H3C> system-view
[H3C-detect-group-10] timer wait 3
2.2 Auto Detect Application Commands
Note:
z For a detailed description of static routing, refer to the “Routing Protocol” part of this
manual.
z For a detailed description of VRRP, refer to the “Reliability” part of this manual.
2.2.1 ip route-static detect-group
Syntax
ip route-static ip-address { mask | mask-length } { interface-type interface-number |

nexthop } [ preference preference-value ] detect-group group-number
View
System view
Parameter
ip-address: Destination IP address of the static route, in the dotted decimal format.
mask: Subnet mask of the destination IP address.
mask-length: Length of the subnet mask, that is, the number of the consecutive 1s in
the subnet mask.
interface-type: Type of the outbound interface.
interface-number: Number of the outbound interface.
nexthop: IP address of the next hop, in the dotted decimal format.
2-7
preference-value: Preference value of the route, in the range 1 to 255.

group-number: Number of the detect group, in the range 1 to 100.
Description
Use the ip route-static detect-group command to configure a static route and

reference a detect group. Whether the static route is valid depends on the reachability
of the referenced detect group:
z If it is reachable, the static route is valid.
z If it is unreachable, the static route is invalid.
To remove the auto detect function from the static route, you must first use the undo ip
route-static command to remove the static route and then reconfigure it.
Example
# Configure a static route to 192.168.0.5/24 with 192.168.0.2 as the next hop and
reference detect group 10. This static route is valid only when detect group 10 is
reachable.
<H3C> system-view
[H3C] ip route-static 192.168.0.5 24 192.168.0.2 detect-group 10
2.2.2 standby detect-group
Syntax
standby detect-group group-number

undo standby detect-group
View
Interface view
Parameter
Description
Use the standby detect-group command to implement interface backup using the
auto detect function.
Use the undo standby detect-group command to disable interface backup using the
auto detect function.
Using the result of auto detect, you can control whether to enable the backup interface.
When a detect group is referenced for interface backup, the H3C does one of the
following:
2-8
z When the detect group is reachable, use the main interface.

z When the detect group is unreachable, enable the backup interface.
z When the unreachable detect group becomes reachable again, switch over to the
main interface.
This command is configured on the backup interface.
Example
# Enable backup up interface Serial 0/0/0 when detect group 10 is unreachable.

<H3C> system-view
[H3C] interface serial 0/0/0
[H3C-Serial 0/0/0] standby detect-group 10
2.2.3 vrrp vrid track detect-group
Syntax
vrrp vrid virtual-H3C-ID track detect-group group-number [ reduced value-reduced ]

undo vrrp vrid virtual-H3C-ID track detect-group group-number
View
Ethernet interface view
Parameter
virtual-H3C-ID: ID of the virtual H3C.

value-reduced: Decrement by which the preference value is reduced. It ranges from 1
to 255 and defaults to 10.
Description
Use the vrrp vrid command to implement VRRP using the auto detect function.
Use the undo vrrp vrid command to remove the auto detect function from VRRP.
When a detect group is referenced for implementing VRRP, the H3C does one of the
following:
z When the detect group is unreachable, decrease the preference value of the
standby group.
z When the detect group is reachable, restore the preference value of the standby
group.
Example
# Create a detect group numbered 10 and add IP address 202.13.1.55 to the group.
2-9
<H3C> system-view
[H3C-detect-group-10] detect-list 1 ip address 202.13.1.55
# Decrease the preference value of standby group 1 by 20 when detect group 10 is

unreachable.
[H3C] interface ethernet 0/0/0
[H3C-Ethernet 0/0/0] vrrp vrid 1 track detect-group 10 reduced 20
2-10
Comware V3 Chapter 3 HWPing Commands
Chapter 3 HWPing Commands
3.1 HWPing Client Commands

3.1.1 adv-factor
Syntax
adv-factor adv-number
undo adv-factor
View
HWPing test group view
Parameter
adv-number: Advantage factor, used to count Mos and ICPIF value in a jitter voice test.
It is in the range 0 to 20 and defaults to 0.
Description
Use the adv-factor command to configure the advantage factor which is used to count
Mos and ICPIF value in a jitter voice test.
Use the undo adv-factor command to restore the default.
Note:
This command applies only to jitter voice test.
Example
# Configure advantage factor to 10.

[H3C-hwping-1-1] adv-factor 10
3.1.2 count
Syntax
count times
undo count
3-1
View
Parameter
times: Number of the probes for a test. It is in the range 1 to 15 and defaults to 1.
Description
Use the count command to configure the number of probes for each test.
Use the undo count command to restore the default.
A test timer starts when the system probes for the first time. In the event that the times
argument is set greater than one, the system continues to probe for the second time
upon receipt of the reply to the first one. If receiving no reply upon expiry of the timer,
the system probes for the second time and continue all the remaining probes likewise.
Related command: frequency.
Example
# Probe 10 times for each test.

[H3C-hwping-administrator-icmp] count 10
3.1.3 datafill
Syntax
datafill string
undo datafill
View
Parameter
string: Data for padding test packets. It is a string of less than 230 characters. By
default, test packets are padded with characters in the range 0 to 255 cyclically.
Description
Use the datafill command to configure the data for padding test packets.
Use the undo datafill command to restore the default.
You can pad HWPing test packets with any character string. If the size of a test packet
is smaller than that of the configured padding string, only a portion of the data is used. If
the size of the packet is larger, the string is used cyclically for padding. Suppose a
padding string, “abcd” is configured. If the test packet size is 3, only “abc” is used; if it is
6, the string “abcdab" is used.
3-2
The configuration of a padding character string is only supported by ICMP, UDP and
jitter tests. The configuration voids other test types.
Example
# Configure a packet padding string “abcd”.

[H3C-hwping-administrator-icmp] datafill abcd
3.1.4 datasize
Syntax
datasize size
undo datasize
View
Parameter
size: Test packet size in bytes, the range of which depends on test type.
Table 3-1 Test packet size of HWPing
Test Type Code Range Default value

Jitter None 68-8100 68
Jitter G.711 A-Law 16-1500 172
Jitter G.711 U-Law 16-1500 172

Jitter G.729 A-Law 16-1500 32
ICMP None 4-8100 56
UDP None 4-8100 100

Other None 4-8100 0
The configuration of packet size is only supported by ICMP, UDP and jitter tests. The
configuration voids other test types.
Description
Use the datasize command to configure the size of test packets.

Use the undo datasize command to restore the default.
Example
# Set the size of ICMP test packets to 50.

[H3C-hwping-administrator-icmp] datasize 50
3-3
3.1.5 debugging hwping
Syntax
debugging hwping { all | error | event }

undo debugging hwping { all | error | event }
View
User view
Parameter
all: All debugging.

error: Error debugging.
event: Event debugging.
Description
Use the debugging hwping command to enable HWPing debugging.

Use the undo debugging hwping command to disable HWPing debugging.
By default, HWPing debugging is disabled.
Example
# Enable HWPing event debugging.

<H3C> debugging hwping event
3.1.6 description
Syntax
description string
undo description
View
Parameter
string: Brief description about a test operation. By default, no description is configured.
Description
Use the description command to briefly describe a test operation.

Use the undo description command to delete the configured description.
3-4
Example
# Describe a test group as “icmp-test”.

[H3C-hwping-administrator-icmp] description icmp-test
3.1.7 destination-ip
Syntax
destination-ip ip-address
undo destination-ip
View
Parameter
ip-address: Destination IP address in a test, which can be either an IP address or a host

name.
Description
Use the destination-ip command to configure the destination IP address in the test.
Use the undo destination-ip command to delete the configured destination IP
address.
By default, no destination IP address is configured for any test.
Related command: destination-port.
Example
# Set the destination IP address in the test to 169.254.10.3.

[H3C-hwping-administrator-icmp] destination-ip 169.254.10.3
3.1.8 destination-port
Syntax
destination-port port-number
undo destination-port
View
Parameter
port-number: Destination port number in a test. It is in the range 1 to 50000 for a TCP
test and 1 to 49999 for a UDP test.
3-5
Description
Use the destination-port command to configure the destination port in the test.
Use the undo destination-port command to delete the configured destination port.
By default, no destination port is configured for any test.
Note:
This command is configured only for jitter, TCP-private, or UDP-private test.
Related command: destination-ip.
Example
# Set the destination port to 9000 in the test.

[H3C-hwping-administrator-tcp] destination-port 9000
3.1.9 display hwping
Syntax
display hwping { results | history | jitter } [ administrator-name operation-tag ]
View
Any view
Parameter
results: Displays the test result.

history: Displays the test history.
jitter: Displays the jitter test information.
administrator-name: Name of the administrator creating the test.
operation-tag: Test operation tag.
Description
Use the display hwping command, you can view test result(s).
If a test group is specified using the arguments of administrator-name and
operation-tag, the system displays only the test result of the group; if not, it displays the
test results of all the test groups.
Related command: test-enable.
3-6
Example
# Display the test result.

[H3C-hwping-administrator-icmp] display hwping results administrator icmp
HWPing entry(admin administrator, tag icmp) test result:
Destination ip address:169.254.10.2
Send operation times: 10 Receive response times: 10
Min/Max/Average Round Trip Time: 1/2/1
Square-Sum of Round Trip Time: 13
Last complete test time: 2006-1-25 16:28:55.0
Extend result:
Disconnect operation number:0 Operation timeout number:0
System busy operation number:0 Connection fail number:0
Operation sequence errors:0 Drop operation number:0
Operation statistics errors:0
Table 3-2 Fields in the output of the display hwping results command
Field Description
Destination ip address Destination IP address.
Send operation times The number of the sent test packets.

Receive response times The number of successful test attempts
Roundtrip time in its minimum,
Min/Max/Average Round Trip Time
maximum, and average
Square-Sum of Round Trip Time The square sum of roundtrip time
The time of the last successful test
Last complete test time
attempt
The number of forcible disconnections
Disconnect operation number
performed by the opposite end
The number of test failures due to
System busy operation number
system busy
The number of received disordered
Operation sequence errors
packets
Operation statistics errors The number of other errors
Operation timeout number The number of timeout in a test
The number of connection failures to the
Connection fail number
opposite end
The number of failures in allocating
Drop operation number
system resource
# Display the test history.
3-7
[H3C-hwping-administrator-icmp] display hwping history administrator icmp

HWPing entry(admin administrator, tag icmp) history record:
Index Response Status LasrRC Time
1 1 1 0 2004-11-25 16:28:55.0
2 1 1 0 2004-11-25 16:28:55.0
3 1 1 0 2004-11-25 16:28:55.0
4 1 1 0 2004-11-25 16:28:55.0
5 1 1 0 2004-11-25 16:28:55.0
6 2 1 0 2004-11-25 16:28:55.0
7 1 1 0 2004-11-25 16:28:55.0
8 1 1 0 2004-11-25 16:28:55.0
9 1 1 0 2004-11-25 16:28:55.9
10 1 1 0 2004-11-25 16:28:55.9
Table 3-3 Fields in the output of the display hwping history command
Field Description
Roundtrip test time in milliseconds, or timeout time. It is 0
Response
for an incomplete test.
Status Test result value
The last received response code that is based on

implementation. Given ICMP echo enabled, receiving an
LasrRC ICMP response that contains ICMP_ECHOREPLY(0)
indicates a successful test. ICMP is usually defined in the
file that contains ip_icmp.
Time Test time
3.1.10 display hwping statistics
Syntax
display hwping statistics [ administrator-name operation- tag ]
View
Any view
Parameter
administrator-name: Name of the administrator creating the test.

Description
Use the display hwping statistics command to view test statistics.
3-8
After a test begins, if all the probes in the first test have not been finished, when you use
the command to view statistics, all statistics results will be 0.
Example
# Display the statistics information for admin jitter test group, the test type of which is
jitter.
[H3C] display hwping statistics admin jitter
# Display test statistics:

HWPing entry(admin admin, tag jitter) statistics record:
No. : 1
Destination ip address: 192.168.0.39
StartTime: 2000/1 /2 3 :12:44
LifeTime: 21
Send operation times: 0 Receive response times: 0
Max Round Trip Time: 0 Min Round Trip Time: 0
Sum Round Trip Time: 0 Average Round Trip Time: 0
Square-Sum of Round Trip Time: 0 Packet lost in test: 0%
Disconnect operation number: 0 Operation timeout number: 0
System busy operation number:0 Connection fail number: 0
Operation sequence errors: 0 Drop operation number: 0
Other operation errors: 0
Jitter result:
Min Positive SD:0 Min Positive DS:0
Max Positive SD:0 Max Positive DS:0
Positive SD Number:0 Positive DS Number:0
Positive SD Sum:0 Positive DS Sum:0
Positive SD average:0 Positive DS average:0
Positive SD Square Sum:0 Positive DS Square Sum:0
Min Negative SD:0 Min Negative DS:0
Max Negative SD:0 Max Negative DS:0
Negative SD Number:0 Negative DS Number:0
Negative SD Sum:0 Negative DS Sum: 0
Negative SD average:0 Negative DS average:0
Negative SD Square Sum:0 Negative DS Square Sum:0
SD lost packets number:0 DS lost packet number:0
Unknown result lost packet number:0
Table 3-4 Description on fields in the output of the display hwping statistic command
Field Description
Start time The time when a test starts
Lifetime The time that a test lasts
3-9
Field Description
Send operation times The number of the sent test packets.
Receive response times The number of successful test attempts
Roundtrip time in its minimum,
Min/Max/Average Round Trip Time
maximum, and average
Square-Sum of Round Trip Time The square sum of roundtrip time
Packet lost in test The number of lost packets in a test
The number of forcible disconnections
Disconnect operation number
performed by the opposite end
Operation timeout number The number of timeout in a test
The number of test failures due to busy
System busy operation number
system
The number of connection failures to the
Connection fail number
opposite end
The number of received disordered
Operation sequence errors
packets
The number of failures in allocating
Drop operation number
system resource
Other operation errors The number of other operation errors
The jitter value from source to
Min Positive SD (DS) destination (destination to source) is the
minimum of positive value
Max Positive SD (DS) destination (destination to source) is the
maximum of positive value

Positive SD (DS) destination (destination to source) is the
number/sum/average/square sum number/sum/average/square sum of
positive jitter values
Min Negative SD (DS) destination (destination to source) is the
minimum of negative value
Max Negative SD (DS) destination (destination to source) is the
maximum of negative value
Negative SD (DS) destination (destination to source) is the
number/sum/average/square sum number/sum/average/square sum of
negative jitter values
The number of the lost packets from
SD (DS) lost packets number source to destination (destination to
source)
3-10
Field Description
The number of the lost packets for
Unknown result lost packet number
unknown reason
3.1.11 filename
Syntax
filename file-name
undo filename
View
Parameter
file-name: Name of the file to be gotten from or put onto an FTP server.
Description
Use the filename command to configure the name of the file to be gotten from or put
onto an FTP server.
Use the undo filename command to cancel the configuration of the file name.
By default, no file name is configured.
Note:
This command applies only to FTP test.
Related command: username, password, ftp-operation.
Example
# Specify the file to be gotten from or put onto an FTP server by specifying its name
“config.txt".
[H3C-hwping-administrator-ftp] filename config.txt
3.1.12 frequency
Syntax
frequency interval
undo frequency
3-11
View
Parameter
interval: Automatic test interval in the range 0 to 65535 seconds. It defaults to 0,

meaning no automatic test. For a jitter voice test, it defaults to 60.
Description
Use the frequency command to configure an automatic test interval.

Use the undo frequency command to restore the default value..
The system automatically tests at intervals specified by this command, where the
argument interval is greater than 0.
Related command: count.
Example
# Set the automatic test interval to 10 seconds.

[H3C-hwping-administrator-icmp] frequency 10
3.1.13 ftp-operation
Syntax
ftp-operation { get | put }
View
Parameter
get: Gets a file from an FTP server.

put: Sends a file to an FTP server.
Description
Use the ftp-operation command to configure the FTP operation done by the system.
To FTP a file from a server, use the ftp-operation get command. To FTP a file to a
server, use the ftp-operation put command.
The default FTP operation type is get.
3-12
Note:
Related command: username, password.
Example
# Set the FTP operation to get.

[H3C—hwping-administrator-ftp] ftp-operation get
3.1.14 history keep-time
Syntax
history keep-time keep-time

undo history keep-time
View
Parameter
keep-time: Retaining time of the history record for a test group, which is in the range 1
to 1440 in minutes and defaults to 120 minutes.
Description
Use the history keep-time command to configure the retaining time of the history
record for a test group.
Use the undo history keep-time command to remove the original configuration and
restore the default.
Example
# The history record will be deleted in 240 minutes.

<H3C> system-view
[H3C] hwping 1 1
[H3C-hwping-1-1] history keep-time 240
3.1.15 history-record enable
Syntax
history-record enable
undo history-record enable
3-13
View
Parameter
None
Description
Use the history-record enable command to enable history record.

Use the undo history-record enable command to disable history record.
By default, history record is disabled. You should configure to save history record as
needed.
z If you need to save history record, enable it.
z If you disable the history record after enabling it, the saved history record will be
deleted and the maximum number of the history record for you to save will not be
changed.
z If you do not need to save history record, disable it. At this time you can also
configure the number of the history record to be saved, but the history record will
not be saved.
z When you are performing a test, the system prompts that parameter is not allowed
to be configured; otherwise, the system prompts “Test is in progress, can’t change
the parameter.”.
Use the display hwping history command to view the history record.
Example
# Enable history record saving.

<H3C> system-view
[H3C] hwping 1 1
[H3C-hwping-1-1] history-record enable
3.1.16 history-records
Syntax
history-records number
undo history-records
View
3-14
Parameter
number: Number of test results allowed to be retained. It is in the range 0 to 50 and

defaults to 50.
Description
Use the history-records command to configure the number of test results that the
system can retain.
Use the undo history-records command to restore the default.
Example
# Set the number of retained history records concerning the current test group to 10.
[H3C—hwping-administrator-icmp] history-records 10
3.1.17 http-operation
Syntax
http-operation { get | post }
View
Parameter
get: Obtains data from an HTTP server.

post: Sends data to an HTTP server.
Description
Use the http-operation command to configure an HTTP operation type.

HTTP operation includes get and post, where get is to obtain data from an HTTP
server and post is to send data to the HTTP server.
The default operation type is get.
Note:
This command applies only to HTTP test.
Related command: http-string.
Example
# Set the HTTP test operation type to get.
3-15
[H3C-hwping-administrator-http] http-operation get
3.1.18 hwping
Syntax
hwping administrator-name operation-tag

undo hwping administrator-name operation-tag
View
System view
Parameter
administrator-name: Specifies name of the administrator creating an HWPing test

group.
Description
Use the hwping command to create an HWPing test group.

Executing this command allows the system to access HWPing test group view.
Example
# Create an HWPing test group, where the administrator name is administrator and the
test operation tag is icmp.
[H3C] hwping administrator icmp
[H3C-hwping-administrator-icmp]
3.1.19 hwping-agent enable
Syntax
hwping-agent enable
undo hwping-agent enable
View
System view
Parameter
None
Description
Use the hwping-agent enable command to enable the HWPing client function.
Use the undo hwping-agent enable command to disable the HWPing client function.
3-16
Before you can perform a test, you must enable the HWPing client function.
Related command: hwping-server enable.
Example
# Enable HWPing Client.

[H3C] hwping-agent enable
3.1.20 hwping-agent max-requests
Syntax
hwping-agent max-requests max-number

undo hwping-agent max-requests
View
System view
Parameter
max-number: Maximum number of concurrent tests. It is in the range 1 to 5 and defaults

to 5. This command is invalid for ICMP, Jitter and UDP tests.
Description
Use the hwping-agent max-requests command to set the allowed maximum number
of concurrent tests.
Use the undo hwping-agent max-requests command to restore the default maximum
number of concurrent tests.
Example
# Set the maximum number of concurrent tests to 4.

[H3C] hwping-agent max-requests 4
3.1.21 jitter-interval
Syntax
jitter-interval interval
undo jitter-interval
View
3-17
Parameter
interval: Packet sending interval in milliseconds in a jitter test. Its range depends on
different test types. For a Jitter test, it ranges from 10 to 1000 milliseconds and defaults
to 50 milliseconds; for a voice test, it ranges from 10 to 60000 milliseconds and defaults
to 20 milliseconds.
Description
Use the jitter-interval command to set a packet sending interval for a jitter test.
Use the undo jitter-interval command to restore the default.
Note:
This command applies only to jitter test.
Related command: jitter-packetnum.
Example
# Send packets at intervals of 30 milliseconds in a jitter test.

[H3C-hwping-administrator-icmp] jitter-interval 30
3.1.22 jitter-packetnum
Syntax
jitter-packetnum number
undo jitter-packetnum
View
Parameter
number: Number of packets to be sent in a jitter test. The value range depends on
whether a voice test is configured. For a jitter test, it is in the range 10 to 1000 and
defaults to 10. If voice codec is configured, it is in the range 10 to 60000, and defaults to
1000.
Description
Use the jitter-packetnum command to configure the number of packets to be sent in a

jitter test.
3-18
Use the undo jitter-packetnum command to restore the default, or 20.
Note:
This command applies only to jitter test.
Related command: jitter-interval.
Example
# Send 30 packets in a jitter test.

[H3C-hwping-administrator-icmp] jitter-packetnum 30
3.1.23 password
Syntax
password password
undo password
View
Parameter
password: Password required at login.
Description
Use the password command to configure the password required for logging onto the
FTP server.
Use the undo password command to cancel the configured password.
By default, no password is configured for logging onto the FTP server.
Note:
Related command: username, ftp-operation.
Example
# Set the password for logging onto the FTP server to “hwping”.
3-19
[H3C-hwping-administrator-ftp] password hwping
3.1.24 probe-failtimes
Syntax
probe-failtimes times
undo probe-failtimes
View
Parameter
times: Number of consecutive probe failures. It is in the range 1 to 15 and defaults to 1.
Description
Use the probe-failtimes command to configure the number of consecutive probe

failures allowed in an HWPing test before a trap is sent to the NMS.
Use the undo probe-failtimes command to restore the default.
Note:
A test may include multiple probes.
Example
# Send a trap to the NMS after three consecutive probe failures for an HWPing test.
[H3C-administrator-icmp] probe-failtimes 3
3.1.25 send-trap
Syntax
send-trap { all | { probefailure | testcomplete | testfailure }* }

undo send-trap { all | { probefailure | testcomplete | testfailure }* }
View
Parameter
probefailure: Sends traps after test packet transmission fails.

testcomplete: Sends traps upon completion of the test.
3-20
testfailure: Sends traps upon test failures.

all: Sends traps for all the events described above.
Description
Use the send-trap command to configure the type of events that trigger trap sending.
Use the undo send-trap command to cancel the configuration of the event type.
By default, no traps are sent.
Example
# Send traps upon completion of tests.

[H3C-hwping-administrator-icmp] send-trap testcomplete
3.1.26 sendpacket passroute
Syntax
sendpacket passroute
undo sendpacket passroute
View
Parameter
None
Description
Use the sendpacket passroute command to enable routing table bypass.

Use the undo sendpacket passroute command to disable routing table bypass.
By default, routing table bypass is disabled.
With routing table bypass, a remote host can bypass the normal routing tables and
send ICMP packets directly to a host on an attached network. If the host is not on a
directly connected network, an error is returned. You can use this function when pinging
a local host on an interface that has no route defined.
Example
# Bypass routing table when sending ICMP packets.

[H3C-administrator-icmp] sendpacket passroute
3-21
3.1.27 source-interface
Syntax
source-interface interface-type interface-number

undo source-interface
View
Parameter
Description
Use the source-interface command to configure the source interface in the

transmitted test packets.
Use the undo source-interface command to cancel the configuration.
By default, no source interface is configured for the transmitted test packets.
Example
# Specify Ethernet 1 as the source interface in the transmitted test packet.

[H3C-hwping-administrator-dhcp] source-interface ethernet 1
3.1.28 source-ip
Syntax
source-ip ip-address
undo source-ip
View
Parameter
ip-address: Source IP address used in the test.
Description
Use the source-ip command to configure a source IP address for this test.
Use the undo source-ip command to cancel the configuration.
The source IP address in this test defaults to the IP address of the interface where test
packets are to be sent.
3-22
Example
# Set the source IP address for this test to 169.254.10.2.

[H3C-hwping-administrator-icmp] source-ip 169.254.10.2
3.1.29 source-port
Syntax
source-port port-number
undo source-port
View
Parameter
port-number: Source port number used in the test. It is in the range 1 to 50000 for a
TCP test and 1 to 49999 for a UDP test.
Description
Use the source-port command to configure a source port number for this test.
Use the undo source-port command to cancel the configuration.
Example
# Set the source port number to 8000 for this test.

[H3C-hwping-administrator-icmp] source-port 8000
3.1.30 statistics
Syntax
statistics { interval interval | max-group number }

undo statistics { interval | max-group }
View
Parameter
interval: Statistics interval, in the range 1 to 1440 in minutes and defaults to 60 seconds.
number: Number of groups of statistics information, in the range 1 to 100 and defaults
to 2.
3-23
Description
Use the statistics command to configure the statistics interval and the maximum
number of the groups of the retained statistics information according to the
configuration.
Use the undo statistics command to remove your configuration and restore the
default.
By default, the statistics interval for a test is once every 60 minutes and up to two
groups of statistics information can be retained.
Delete all statistics information when internet parameter changes.
Example
# Set the statistics interval to 120 minutes and the maximum number of statistics
groups to three.
<H3C> system-view
[H3C] hwping 1 1
[H3C-hwping-1-1] statistic interval 120
[H3C-hwping-1-1] statistic max-group 3
3.1.31 statistics keep-time
Syntax
statistics keep-time keep-time

undo statistics keep-time
View
Parameter
keep-time: Retaining time of the test statistics, which is in the range 1 to 1440 in
minutes and defaults to 120 minutes.
Description
Use the statistics keep-time command to configure the retaining time of the test
statistics.
Use the undo statistics keep-time command to remove your configuration and
Example
# Statistics information will be deleted in 180 minutes.

<H3C> system-view
3-24
[H3C] hwping 1 1
[H3C-hwping-1-1] statistics keep-time 180
3.1.32 test-time begin
Syntax
test-time begin { hh:mm :ss [ yyyy/mm/dd ] | now } lifetime lifetime

undo test-time
View
Parameter
hh:mm:ss: Test start time.

yyyy/mm/dd: Test start time, yyyy is the year in the range 2000 to 2099, mm is the
month in the range 1 to 12 and dd is the date in the range 1 to 31.
now: Specifies a test that starts from now.
lifetime: Lasting time of a test, in the range 1 to 2147483647 in seconds.
Description
Use the test-time begin command to configure the start time and the lasting time of a
test.
Use the undo test-time command to stop the test and remove the configuration.
z When the test is not performed, the configuration information you input is saved,
including test start time and lasting time.
z If you set a start time earlier than the current system time or the test lasting time
you configured is 0, the test will not be performed.
z When a test is being performed, you cannot perform any configuration; otherwise
the system prompts error.
z After you configure this command, if the test-related parameters are not complete,
the system prompts configuration error.
z The test starts until you execute the test-time begin command.
z If you set a start time earlier than the current system time, when you modify the
current system time, the test will not be performed.
z If lifetime of the test group expires, the test will stop and when you modify the
current system time, the test will not be performed.
Example
# Set the test to start from 14:03 and last 3600 seconds.
<H3C> system-view
[H3C] hwping 1 1
3-25
[H3C-hwping-1-1] test-time begin 14:03:00 lifetime 3600
3.1.33 test-type
Syntax
test-type type [ codec codec-value ]
View
Parameter
type: Test type, which can be one of the following keywords:

z dhcp: DHCP test.
z dlsw: DLSw test.
z ftp: FTP connection test.
z http: HTTP connection test.
z icmp: ICMP test, the default test type.
z jitter: Jitter test for analyzing delay variations in UDP packet transmission.
z snmpquery: SNMP test.
z tcpprivate: Tests the TCP connection of a specified unknown port.
z tcppublic: Tests the TCP connection of port 7.
z udpprivate: Tests the UDP connection of a specified unknown port.
z udppublic: Tests the UDP connection of port 7.
codec-value: Coding type for a voice test, which can be configured for a Jitter test and
can be the following keywords:
z g711a: Specifies coding type to G.711 A-Law.
z g711u: Specifies coding type to G.711 muHmm-Law.
z g729a: Specifies coding type to G.729A-Law.
Description
Use the test-type command to configure the type of the test.

HWPing tests include DHCP, DLSw, FTP, HTTP, ICMP, Jitter, SNMP, TCP, and UDP
tests.
The default test type is ICMP.
Example
# Set test type to ICMP.

[H3C-hwping-administrator-icmp] test-type icmp
3-26
3.1.34 test-enable
Syntax
test-enable
undo test-enable
View
Parameter
None
Description
Use the test-enable command to execute an HWPing test.

Use the test-enable command to cancel an HWPing test.
Note:
After you execute the test-enable command, the system does not display the test
result. You may view the test result information by executing the display hwping
command.
Related command: display hwping.
Example
# Execute the HWPing test defined by the test group wgw-testicmp.

[H3C-hwping-wgw-testicmp] test-enable
3.1.35 test-failtimes
Syntax
test-failtimes times
undo test-failtimes
View
Parameter
times: Number of consecutive test failures. It is in the range 1 to 15 and defaults to 1.
3-27
Description
Use the test-failtimes command to configure the number of consecutive test failures
allowed before a trap is sent to the NMS.
Use the undo test-failtimes command to restore the default.
Note:
A test may include multiple probes.
Example
# Send a trap to the NMS after three consecutive test failures.

[H3C-hwping-administrator-icmp] test-failtimes 3
3.1.36 timeout
Syntax
timeout time
undo timeout
View
Parameter
time: Timeout time in the range 1 to 60 seconds. It defaults to three seconds. For a
Jitter test, it defaults to five seconds.
Description
Use the timeout command to configure a timeout time for a test.

Use the undo timeout command to restore the default.
Example
# Set the timeout time to 10 seconds.

[H3C-hwping-administrator-icmp] timeout 10
3.1.37 tos
Syntax
tos value
3-28
undo tos
View
Parameter
value: ToS field in the header of HWPing test packets. It is in the range 0 to 255. By
default, ToS field is not set.
Description
Use the tos command to assign a value to the ToS field in the header of HWPing test
packets.
Use the undo tos command to cancel the ToS value configuration.
In a ping command, service type is set using the argument “-o”.
Example
# Set the ToS field in the header of HWPing packets to one.

[H3C-hwping-administrator-ftp] tos 1
3.1.38 ttl
Syntax
ttl number
undo ttl
View
Parameter
number: Time to live (TTL) value or lifetime of HWPing ICMP test packets. It is in the
range 1 to 255 and defaults to 20.
Description
Use the ttl command to configure TTL of ICMP test packets.

Use the undo ttl command to restore the default TTL of ICMP test packets.
TTL is actually a hop count limit on how far a test packet can travel on a network. In a
ping command, it is defined using the argument “-h”.
3-29
Note:
This command applies to all types of tests except for DHCP test.
The sendpacket passroute command voids the ttl command.
Example
# Set the TTL of HWPing ICMP test packets to 16.

[H3C-hwping-administrator-icmp] ttl 16
3.1.39 username
Syntax
username name
undo username
View
Parameter
name: User name used for logging onto the FTP server.
Description
Use the username command to configure a name used for logging onto the FTP
server.
Use the undo username command to cancel the username configuration.
By default, no username is configured for logging onto the FTP server.
Note:
This command applies to FTP test only.
Related command: password, ftp-operation.
Example
# Use administrator as the username for logging onto the FTP server.
[H3C-hwping-administrator-ftp] username administrator
3-30
3.1.40 vpninstance
Syntax
vpninstance name
undo vpninstance
View
Parameter
name: VPN instance name, a string of 1 to 19 characters.
Description
Use the vpninstance command to specify a VPN instance.

Use the undo vpninstance command to remove the specified VPN instance.
By default, no VPN instance information is configured.
Example
# Specify the VPN instance named vpn1.

[H3C] vpninstance vpn1
3.2 HWPing Server Commands

3.2.1 hwping-server enable
Syntax
hwping-server enable
undo hwping-server enable
View
System view
Parameter
None
Description
Use the hwping-server enable command to enable HWPing Server.

Use the undo hwping-server enable command to disable HWPing Server.
By default, HWPing Server is disabled.
3-31
You may use HWPing to test jitter, or UDP or TCP connection of a specified port. Note
that if an H3C router is used as the server in an HWPing test, you must enable HWPing
on the server.
Related command: hwping-agent enable, hwping-server tcpconnect,
hwping-server udpecho.
Example
# Enable HWPing Server.

[H3C] hwping-server enable
3.2.2 hwping-server tcpconnect
Syntax
hwping-server tcpconnect ip-address port-number

undo hwping-server tcpconnect ip-address port-number
View
System view
Parameter
ip-address: IP address where HWPing Server provides the TCP listening service.
port-number: Port where HWPing Server provides the TCP listening service. This port
number cannot be greater than 50,000 or be one reserved for special purpose such as
1701.
Description
Use the hwping-server tcpconnect command to create a TCP listening service.

Use the undo hwping-server tcpconnect command to delete the established TCP
listening service.
When you use an H3C router as the server in an HWPing test on the TCP connection of
a specified port, you must create the TCP listening service on the server.
Example
# Create a TCP listening service, setting IP address to 169.254.10.2 and port number
to 9000.
[H3C] hwping-server tcpconnect 169.254.10.2 9000
3-32
3.2.3 hwping-server udpecho
Syntax
hwping-server udpecho ip-address port-number

undo hwping-server udpecho ip-address port-number
View
System view
Parameter
ip-address: IP address where HWPing server provides the UDP listening service.
port-number: Port where HWPing Server provides the UDP listening service. This port
number must be smaller than 49,999 and could not be that of a port that is well-known
or has a special purpose, such as port 1701.
Description
Use the hwping-server udpecho command to create a UDP listening service.

Use the undo hwping-server udpecho command to delete the established UDP
listening service.
If you want to use an H3C router as the server in an HWPing test on the UDP
connection of a specified port, you must create the UDP listening service on the server.
Example
# Create a UDP listening service, setting IP address to 169.254.10.2 and port number
to 9000.
[H3C] hwping-server udpecho 169.254.10.2 9000
3-33
Comware V3 Chapter 4 File Management Commands
Chapter 4 File Management Commands
4.1 File System Commands

4.1.1 bootfile dir
Syntax
bootfile dir
View
System view
Parameter
None
Description
Use the bootfile dir command to view information about all the boot files in the Flash,
including file type, date, time, file size, and file name.
This command is available only when your router is available with the dual image
function. In addition, boot files must be put on the Flash:/ directory, or if a CF card is
available, on the Cflash:/ directory.
Related command: dir, bootfile main, bootfile backup.
Example
# Display the information about all the boot files in the Flash.
[H3C] bootfile dir
Available boot file(s):
'M' = MAIN, 'B' = BACKUP, 'S' = SECURE
---------------------------------------------------------------------
[No.] [Type] [Date] [Time] [Size] [Name] [SrcName]
---------------------------------------------------------------------
1 M Mar/15/2004 18:09:00 5556068 Main.bin N/A
1 B Mar/15/2004 18:09:00 5556068 Backup.bin N/A
1 S Mar/15/2004 18:09:00 5556068 Secure.bin N/A
1 N/A Mar/15/2004 18:09:00 5556068 Router.bin N/A
----------------------------------------------------------------------
4-1
Table 4-1 Description on the fields of the bootfile dir command
Field Description
File type: M for the main boot file, B for the backup boot file,
Type
S for the secure boot file, and N/A for any other boot file.
Date, Time Date and time when the file was loaded
Size File size
File name. Main.bin is the default name for the main boot
Name file, Backup.bin is the default name for the backup boot file,
and Secure.bin is the name for the secure boot file.
SrcName Name of the main/backup/secure boot file at the last boot
# Display all boot files.

[H3C] bootfile dir

--------------------------------------------------------------------------
--------------------------------------------------------------------------
1 N/A Oct/18/2005 13:35:39 10093604 flash:/8061.bin N/A
2 N/A Oct/20/2005 10:35:13 12252636 flash:/tt N/A
3 M+B Oct/18/2005 16:59:28 11987956 cflash:/d020 N/A
--------------------------------------------------------------------------
4.1.2 bootfile main
Syntax
bootfile main main-bootfile-name
View
System view
Parameter
main-bootfile-name: Main boot file for the router. If the specified file is not located on the
current directory, you must specify the path to it also.
Description
Use the bootfile main command to specify the main boot file.
4-2
On a router supporting the dual image function (a Flash larger than 8 MB must be
available), three boot files are defined in the system by default: main boot file, backup
boot file, and secure boot file. The system uses them in the following order:
z Main boot file, with the default name being main.bin and file type being M, is the
default file for system boot;
z Backup boot file, with the default name being backup.bin and file type being B, is
the boot file used in case of the boot failure using the main boot file;
z Secure boot file, with the default name being secure.bin and file type being S, is
the boot file used in case of the boot failure using the backup boot file. If the boot
attempts using all these files fail, the system prompts the boot failure.
This command is only available with the routers that support the dual image function.
Related command: dir, bootfile dir, bootfile backup.
Example
# Specify a main boot file.

[H3C] bootfile main H3C.bin
Set main boot file successfully!
# View information on the boot files in the Flash to verify that the main boot file has been
successfully specified.
[H3C]bootfile dir
-------------------------------------------------------------
[No.] [Type] [Date] [Time] [Size] [Name]
-------------------------------------------------------------
1 N/A Mar/15/2004 18:09:00 5556068 Main.bin
1 B Mar/15/2004 18:09:00 5556068 Backup.bin
1 S Mar/15/2004 18:09:00 5556068 Secure.bin
1 M Mar/15/2004 18:09:00 5556068 Router.bin
-------------------------------------------------------------
# Specify a main boot file.

[H3C] bootfile main cflash:/d020
Set main boot file successfully!

[H3C] bootfile dir

--------------------------------------------------------------------------
4-3
--------------------------------------------------------------------------
1 N/A Oct/18/2005 13:35:39 10093604 flash:/8061.bin N/A
2 N/A Oct/20/2005 10:35:13 12252636 flash:/tt N/A
3 M+B Oct/18/2005 16:59:28 11987956 cflash:/d020 N/A
--------------------------------------------------------------------------
4.1.3 bootfile backup
Syntax
bootfile backup backup-bootfile-name
View
System view
Parameter
backup-bootfile-name: Backup boot file for the router. If the specified file is not located
on the current directory, you must specify the path to it also.
Description
Use the bootfile backup command to specify the backup boot file.
For more information about boot files and the order in which they are used, see the
section “bootfile main”.
This command is only available with the routers that support the dual image function.
Related command: dir, bootfile dir, bootfile main.
Example
# Specify a backup boot file.

[H3C]bootfile backup H3C.bin
Set backup boot file successfully!
# View information on the boot files in the Flash to verify that the backup boot file has
been successfully specified.
[H3C] bootfile dir
-------------------------------------------------------------
[No.] [Type] [Date] [Time] [Size] [Name]
-------------------------------------------------------------
1 N/A Mar/15/2004 18:09:00 5556068 Main.bin
1 N/A Mar/15/2004 18:09:00 5556068 Backup.bin
1 S Mar/15/2004 18:09:00 5556068 Secure.bin
1 M+B Mar/15/2004 18:09:00 5556068 H3C.bin
4-4
-------------------------------------------------------------
# Specify a backup boot file.

[H3C] bootfile backup cflash:/d020
Set backup boot file successfully!

[H3C] bootfile dir

--------------------------------------------------------------------------
--------------------------------------------------------------------------
1 M Oct/18/2005 13:35:39 10093604 flash:/8061.bin N/A
2 N/A Oct/20/2005 10:35:13 12252636 flash:/tt N/A
3 B Oct/18/2005 16:59:28 11987956 cflash:/d020 N/A
--------------------------------------------------------------------------
4.1.4 cd
Syntax
cd directory
View
User view
Parameter
directory: Name of the target directory.
Description
Use the cd command to change the current working directory of the user to the
specified directory.
The default path for working directory is flash:.
Example
# Change the current working directory on the router to test.

<H3C> pwd
flash:
<H3C> cd test
<H3C> pwd
flash:/test
# Change the current working directory to cflash.
4-5
<H3C> pwd
flash:
<H3C> cd clash:
<H3C> pwd
cflash:
4.1.5 copy
Syntax
copy filename-source filename-dest
View
User view
Parameter
filename-source: Name of the source file.

filename-dest: Name of the target file or directory.
Description
Use the copy command to copy a file.

If the files to be copied are hidden, the system displays “% Access failure” to show lack
of access priority.
If the name of the target file is the same with an existing directory name, the target file is
copied to the directory. If the name of the target file is the same with the name of the
existing file, the system asks whether to overwrite the exiting file.
Example
<H3C> pwd
flash:
<H3C> dir
Directory of flash:/
1 -rw- 7654528 Oct 10 2002 10:10:10 system

2 -rw- 4 Aug 23 2052 15:44:54 snmpboots
3 -rw- 300 Aug 23 2052 15:45:58 vrpcfg.cfg
15621 KB total (8140 KB free)
# Copy the file vrpcfg.cfg from Flash memory to the backup directory that has been
created.
<H3C> copy vrpcfg.cfg backup
Copy flash:/vrpcfg.txt to flash:/backup/vrpcfg.cfg ?[Y/N]:y
4-6
%Copied file flash:/vrpcfg.cfg to flash:/backup/vrpcfg.cfg

<H3C> dir
Directory of flash:/backup/
1 -rw- 300 Aug 23 2052 15:57:46 vrpcfg.cfg
# Copy file tt from the Flash to the CF card.

<H3C> copy flash:/tt cflash:
4.1.6 delete
Syntax
delete [ /unreserved ] { filename | flash: }
View
User view
Parameter
/unreserved: Deletes the specified file unreservedly, and the deleted file can never be
restored.
filename: Name of the file to be deleted including the path.
flash: Deletes all files under the flash directory.
Description
Use the delete command to move the specified file from the storage device to the
recycle bin, where you can completely delete the file with the undelete command or
restore it with the reset recycle-bin filename command.
of access priority.
Note that if you delete two files in different directories but with the same filename, only
the last one is stored in the recycle bin.
Use the delete /unreserved command to delete the specified file completely, meaning
the file cannot be restored.
The asterisks (*) are acceptable when specifying the filename argument.
The dir command does not display the deleted files. To view all the files including those
in the recycle bin, use the dir /all command.
4-7
Caution:
If there is only one application file (system file) in the system, you are not allowed to
delete the file.
Example
# Delete file flash:/test/test.txt.

<H3C> delete flash:/test/test.txt
Delete flash:/test/test.txt?[Y/N]: y
%Delete file flash:/test/test.txt...Done.
# Delete file cflash:/test/test.txt.

<H3C> delete cflash:/test/test.txt
Delete cflash:/test/test.txt?[Y/N]:y
%Deleted file cflash:/test/test.txt.
4.1.7 dir
Syntax
dir [ /all | filename ]
View
User view
Parameter
/all: Displays all files (including the files in the recycle bin).
filename: Name of the file or directory to be displayed including the path.
Description
Use the dir command, you can view information about the specified file or directory in
the router storage device.
By default, this command displays the file information under the current directory.
This command accepts asterisks (*) as wildcards.
The dir /all command can display information about all the files, including those in the
recycle bin. The names of these deleted files are enclosed by "[]", for example,
[temp.cfg]. Such deleted files can be restored using the undelete command. To
remove the files from the recycle bin completely, use the reset recycle-bin command.
The dir /h command displays information about the private files under the current path.
The attribute of the private files is represented by “---h”.
4-8
Example
# Display the files in Flash memory.

<H3C> dir flash:
1 -rw- 5878540 Jul 05 2004 10:39:36 AR46XX-V3.30-0006.BIN

2 -rw- 670 Sep 15 2004 11:46:51 vrpcfg.cfg
3 -rw- 8271372 Aug 17 2004 14:04:15 ar46.bin
4 -rw- 8701964 Sep 22 2004 14:25:49 main.bin
5 -rw- 670 Sep 30 2004 10:49:15 ar46.cfg
# Display files in the CF card.

<H3C> dir cflash:
Directory of cflash:/
0 -rw- 5878540 Jul 05 2004 10:39:36 AR46XX-V3.30-0006.BIN

1 -rw- 670 Sep 15 2004 11:46:51 vrpcfg.cfg
2 -rw- 8271372 Aug 17 2004 14:04:15 ar46.bin
3 -rw- 8701964 Sep 22 2004 14:25:49 main.bin
4 -rw- 670 Sep 30 2004 10:49:15 ar46.cfg
4.1.8 execute
Syntax
execute { filename | flash: }
View
System view
Parameter
filename: Name of a batch file (including the path) with a .bat extension.
flash: Specifies flash as the memory device. If you want to execute the batch file with a
bat extension under the flash directory, enter flash:/abc.bat.
Description
Use the execute command to execute the specified batch file.

Batch files are command line files. Executing a batch file is to execute a set of
command lines in the file. Command lines fall into two categories: configuration
4-9
command such as local-user, and operation command such as display

current-configuration. If all the commands in a batch file are configuration commands,
the file is called configuration file; if all the commands in the file are operation
commands, the file is called operation command file.
Executing a configuration file can fast add to the system new configurations or modify
the current configurations. When doing this, the system adds those new configurations
and rewrites the existing configurations that are different from the configuration file,
while leaving the existing configurations that are not involved intact.
You can execute an operation command file to have the system execute one or multiple
operation commands automatically. For example, to view system operating information,
you need to execute the commands display version and display
current-configuration. To view routing information, you must execute the display
rout-static command in addition. You can however put these three commands in a file,
running.bat for example, and save the file to Flash. After that, you can have the system
execute execute running.bat each time you want to execute these three commands.
You can put sets of commands that are always executed together in batch files. The
execute command allows you, especially as a service engineer, to execute a batch file
instead of entering each command in it individually.
Note that:
z The extension of batch files must be .bat.
z A valid batch file contains only standard command lines.
Example
# Execute the batch file “test.bat” in the flash:/ directory.

[H3C] execute flash:/test.bat
4.1.9 file prompt
Syntax
file prompt {alert | quiet }
View
System view
Parameter
alert: Enables interactive acknowledgement when a user operation, deleting a file for
example, may result in data loss or corruption.
quiet: No prompt is displayed even when a user operation, deleting a file for example,
may result in data loss or corruption.
4-10
Description
Use the file prompt command to enable or disable the router to warn when an
operation may result in data loss or corruption.
By default, the prompt mode is alert.
When the prompt mode is set to quiet, the system does not warn even when an
operation may result in data loss or corruption.
Example
# Set the file operation prompt mode to quiet.

[H3C] file prompt quiet
# Set the file operation prompt mode to alert.

[H3C] file prompt alert
4.1.10 fixdisk
Syntax
fixdisk device-name
View
User view
Parameter
device: Device name.
Description
Use the fixdisk command to restore the space of a storage device when it becomes
unavailable because of some abnormal operation.
Example
# Restore the space of the Flash.

<H3C> fixdisk flash:
# Restore the space of the CF card.

<H3C> fixdisk cflash:
4.1.11 format
Syntax
format device-name
4-11
View
User view
Parameter
device-name: Device name.
Description
Use the format command to format a storage device.

Formatting results in loss of all files on the specified storage device and these files
cannot be restored.
Example
# Format the Flash memory.

<H3C> format flash:
All data on flash: will be lost, proceed with format? [Y/N]:
Format flash: completed
# Format the CF card.

<H3C> format cflash:
All data on cflash: will be lost, proceed with format? [Y/N]:
Format cflash: completed
4.1.12 mkdir
Syntax
mkdir directory
View
User view
Parameter
directory: Name of directory.
Description
Use the mkdir command to create a directory under the specified directory on the
specified storage device.
The name of the directory to be created must be unique under the specified directory.
This command does not allow you to create multiple directory levels at one time.
Example
# Create directory dd.
4-12
<H3C> mkdir dd
%Created dir flash:/dd.
4.1.13 more
Syntax
more filename
View
User view
Parameter
filename: File name.
Description
Use the more command, you can view the contents of the specified file.
of access priority.
By default, the file system displays files in the form of text, that is, the file contents.
Example
# Display the contents of file test.txt.

<H3C> more test.txt
AppWizard has created this test application for you.
This file contains a summary of what you will find in each of the files that
make up your test application.
Test.dsp
This file (the project file) contains information at the project level and is
used to build a single project or subproject. Other users can share the project
(.dsp) file, but they should export the makefiles locally.
4.1.14 move
Syntax
move filename-source filename-dest
View
User view
Parameter
4-13
filename-dest: Name of the target file.
Description
Use the move command to move a file.

If the name of the target file is the same with the name of an existing directory, the
target file is moved to the directory, with the same file name. If the name of the target file
is the same with an existing file name, you are prompted whether the existing file
should be overwritten.
Example
<H3C> dir
1 -rw- 2145123 Jul 12 2001 12:28:08 AR46.bin
2 -rw- 595 Jul 12 2001 10:47:50 vrpcfg.cfg
3 drw- 0 Jul 12 2001 19:41:20 test
6477 KBytes total (2144 KBytes free)
<H3C> dir flash:/test/
Directory of flash:/test/
1 drw- - Jul 12 2001 20:23:37 subdir
2 -rw- 595 Jul 12 2001 20:13:19 vrpcfg.cfg
3 -rw- 50 Jul 12 2001 20:08:32 sample.txt
# Move the file from flash:/test/sample.txt to flash:/sample.txt.

<H3C> move flash:/test/sample.txt flash:/sample.txt
Move flash:/test/sample.txt to flash:/sample.txt ?[Y/N]:y
%Moveded file flash:/test/sample.txt flash:/sample.txt
<H3C> dir
1 -rw- 2145123 Jul 12 2001 12:28:08 ne80.bin
2 -rw- 595 Jul 12 2001 10:47:50 vrpcfg.cfg
3 drw- 0 Jul 12 2001 19:41:20 test
4 -rw- 50 Jul 12 2001 20:26:48 sample.txt
<H3C> dir flash:/test/
Directory of flash:/test/
1 drw- - Jul 12 2001 20:23:37 subdir
2 -rw- 595 Jul 12 2001 20:13:19 vrpcfg.cfg
4-14
4.1.15 pwd
Syntax
pwd
View
User view
Parameter
None
Description
Use the pwd command, you can view the current path.
If the current path is not set, the operation will fail.
Example
# Display the current path.

<H3C> pwd
flash:/test
4.1.16 rename
Syntax
rename filename-source filename-dest
View
User view
Parameter

filename-dest: Name of the target file.
Description
Use the rename command to rename a file.

If the files to be renamed are hidden, the system displays “% Access failure” to show
lack of access priority.
Note that the target file name must not be the same as an existing directory or file
name.
4-15
Caution:
If only one application file (system.bin if dual image is supported or

main.bin/backup.bin/secure.bin if dual image is not supported) exists in the system,
you cannot rename it. Any modification may cause boot failure when you upgrade the
application in the router.
Example
<H3C> dir
1 -rw- 2145123 Jul 12 2001 12:28:08 system.bin
2 -rw- 595 Jul 12 2001 10:47:50 vrpcfg.cfg
3 drw- - Jul 12 2001 19:41:20 test
4 -rw- 50 Jul 12 2001 20:26:48 sample.txt
# Rename file sample.txt to sample.bak.

<H3C> rename sample.txt sample.bak
Rename flash:/sample.txt to flash:/sample.bak ?[Y/N]:y
%Renamed file flash:/sample.txt flash:/sample.bak
<H3C> dir
1 -rw- 2145123 Jul 12 2001 12:28:08 system.bin
2 -rw- 595 Jul 12 2001 10:47:50 vrpcfg.txt
3 drw- - Jul 12 2001 19:41:20 test
4 -rw- 50 Jul 12 2001 20:29:55 sample.bak
4.1.17 reset recycle-bin
Syntax
reset recycle-bin [filename | flash:/] [/force]
View
User view
Parameter
filename: Name of the file to be deleted. (You need to specify the path.)
flash:/: Deletes all files from the flash directory.
4-16
/force: Empties files in the recycle bin under the specified directory. If no directory is
specified, delete the files in the recycle bin under the current directory.
Description
Use the reset recycle-bin command to delete one or files from the recycle bin
completely.
This command accepts the asterisks (*) as wildcards. The delete command only
moves files to the recycle bin. To delete a file finally, use the reset recycle-bin
command.
Example
# Delete the specified file from the recycle bin.

<H3C> reset recycle-bin flash:/p1h_logic.out
reset flash:/plh_logic.out?[Y/N]
# Empty the recycle bin.

<H3C> reset recycle-bin /force
Clear files in recycle-bin directly?[Y/N]:y
%Cleared file flash:/test/a.cfg.
%Cleared file flash:/test/b.cfg.
%Cleared file flash:/test/c.cfg.
Finished.
4.1.18 rmdir
Syntax
rmdir directory
View
User view
Parameter
directory: Name of the directory.
Description
Use the rmdir command to delete a directory.

The directory to be deleted must be an empty one. If there are files in the recycle bin
under the directory to be deleted, when you delete the directory the files in it cannot be
restored.
Example
<H3C>dir
4-17
1 drw- - Jul 12 2001 20:23:37 subdir
2 -rw- 595 Jul 12 2001 20:13:19 vrpcfg.cfg
# Delete directory subdir.

<H3C> rmdir subdir
Rmdir flash:/subdir?[Y/N]:y
The file in the recycle-bin of this directory can not be restored after removing
the directory!
...
%Removed directory flash:/subdir.
<H3C> dir
1 -rw- 595 Jul 12 2001 20:13:19 vrpcfg.cfg
4.1.19 undelete
Syntax
undelete { filename | flash: }
View
User view
Parameter
filename: Name of the file to be restored.

flash: Restores all files under the flash directory.
Description
Use the undelete command to restore a file from the recycle bin.
You cannot restore a file if its name is the same as that of the existing directory name. If
the name of the file is the same as that of an exiting file, the system asks you whether to
overwrite the existing file.
Example
<H3C> dir /all

1 -rw- 595 Jul 12 2001 20:13:19 vrpcfg.cfg
2 -rw- 50 Jul 12 2001 20:09:23 [sample.bak]
# Restore file sample.bak from the recycle bin.
4-18
<H3C> undelete sample.bak

Undelete flash:/test/sample.bak ?[Y/N]:y
%Undeleted file flash:/test/sample.bak
<H3C> dir /all
1 -rw- 50 Jul 12 2001 20:34:19 sample.bak
2 -rw- 595 Jul 12 2001 20:13:19 vrpcfg.cfg
4.2 FTP Server Configuration Commands

4.2.1 display ftp-server
Syntax
display ftp-server
View
Any view
Parameter
None
Description
Use the display ftp-server command to view the parameters of the current FTP server.
After you configure FTP parameters, you can verify them with this command.
Example
# Display the configured FTP server parameters.

<H3C> display ftp-server
Ftp server is running
Max user number 1
User count 1
Timeout(minute) 30
P ut Method fast
The information indicates that the FTP server is running with support to only one login
user; now one login user is present; timeout of the user is 30 minutes, and file transfer
mode is fast.
4.2.2 display ftp-user
Syntax
display ftp-user
4-19
View
Any view
Parameter
None
Description
Use the display ftp-user command to view the parameters of the current FTP users.
Example
# Display the settings of the FTP users.

<H3C> display ftp-user
Username Host IP port Idle HomeDir
h3c 10.110.3.5 1024 2 flash:/H3C
The information indicates that a connection is present between FTP user h3c and the
FTP server. The IP address of the remote host is 10.110.3.5 and the remote port
number is 1074. The authorized path is flash:/h3c and the user has not sent any service
request to the FTP server for two minutes.
Note:
When the length of the authorized directory exceeds 20 characters, the in-between
characters except for the first and the last characters are displayed as tildes (~), such
as flash:/1/2/3/4/5/6~5.
4.2.3 display ftp-server source-ip
Syntax
display ftp-server source-ip
View
Any view
Parameter
None
Description
Use the display ftp-server source-ip command to display the source IP address
configured for the FTP server.
4-20
If a source interface has been specified for the FTP server, the IP address of the
interface is displayed. If neither source interface nor source IP address has been
specified for the FTP server, 0.0.0.0 is displayed.
Example
# Display the current source IP address of the FTP server.

<H3C> display ftp-server source-ip
The source IP specified is 0.0.0.0
4.2.4 ftp server enable
Syntax
ftp server enable

undo ftp server
View
System view
Parameter
None
Description
Use the ftp server enable command to enable the FTP server to allow login of FTP
users.
Use the undo ftp server command to disable the FTP server as well as login of FTP
users.
By default, the FTP server is disabled.
Example
# Disable the FTP server.

[H3C] undo ftp server
4.2.5 ftp-server source-interface
Syntax
ftp-server source-interface interface-type interface-number

undo ftp-server source-interface
View
System view
4-21
Parameter
Description
Use the ftp-server source-interface command to specify a source interface, which

must be an existing local interface, for the FTP server. After that, the IP address of the
specified interface is used as the source IP address in each packet sent by the FTP
server.
Use the undo ftp-server source-interface command to delete the source interface
specified for the FTP server. After that, the source IP address in each packet sent by
the FTP server is that of the outgoing interface where the packet is sent out.
By default, the source IP address in each packet sent by the FTP server is the IP
address of the interface where the packet is sent out.
Note:
You may specify a source IP address for the packets sent by the FTP server with the
ftp-server source-interface command or with the ftp-server source-ip command. If
both commands are configured, the one configured later overrides.
Example
# Set the source interface for the FTP server to ethernet0/0/0.

[H3C] ftp-server source-interface Ethernet 0/0/0
4.2.6 ftp-server source-ip
Syntax
ftp-server source-ip ip-address

undo ftp-server source-ip
View
System view
Parameter
ip-address: Source IP address.
Description
Use the ftp-server source-ip command to specify a source IP address for the packets
sent by the FTP server. This IP address must be a local IP address.
4-22
Use the undo ftp-server source-ip command to delete the source IP address
specified for the FTP server. After that, the source IP address of a packet sent by the
FTP server is the IP address of the interface where the packet is sent out.
By default, the source IP address in each packet sent by the FTP server is the IP
Note:
ftp-server source-interface command or with the ftp-server source-ip command. If
both commands are configured, the one configured later overrides.
Example
# Use 192.168.0.1 as the source IP address in the packets sent by the FTP server.
[H3C] ftp-server source-ip 192.168.0.1
4.2.7 ftp timeout
Syntax
ftp timeout minutes

undo ftp timeout
View
System view
Parameter
minutes: Idle-timeout timer in minutes, in the range 1 to 35791. It defaults to 30

minutes.
Description
Use the ftp timeout command to set the idle-timeout timer.

Use the undo ftp timeout command to restore the default.
Once you log onto the FTP server, you set up an FTP connection. When the connection
is disrupted or aborted, the FTP server, however, cannot realize that if not notified and
maintains the connection all the same. To address this issue, you can set an
idle-timeout timer to have the FTP server disconnect if no command is received or/and
transmitted before the timer expires.
4-23
Example
# Set the idle-timeout timer to 36 minutes.

[H3C] ftp timeout 36
4.2.8 ftp update
Syntax
ftp update { fast | normal }

undo ftp update
View
System view
Parameter
fast: Fast update.

normal: Normal update.
Description
Use the ftp update command to set the file update mode that the FTP server uses
while receiving data.
Use the undo ftp update command to restore the default, or fast mode.
The FTP server can update files you FTP to it in either of the following modes:
z In fast mode, the FTP server judges whether there is enough space for storing files
in the Flash and then starts writing data to the Flash memory after file transfer
completes; if there is not enough space, the FTP server sends error prompt
message and releases memory. This protects the existing files on the router from
being ruined in the event that anomalies, power failure for example, occur during a
file transfer.
z In normal mode, the FTP server writes data to the Flash memory during file
transfer. This means that any anomaly, power failure for example, during file
transfer might result in corruption of the files on the router. This mode, however
consumes less memory than the fast mode.
Example
# Set the FTP update mode to normal.

[H3C] ftp update normal
4-24
4.3 FTP Client Commands
Note:
When an FTP client on a security gateway logs onto an FTP server, the results and the
prompt information on the FTP client may differ with the versions of FTP servers.
4.3.1 ascii
Syntax
ascii
View
FTP client view
Parameter
None
Description
Use the ascii command to set the type of the transmitted data to ASCII.
Data type defaults to ASCII.
Example
# Set the type of the transmitted data to ASCII.

[ftp] ascii
200 Type set to A.
4.3.2 binary
Syntax
binary
View
FTP client view
Parameter
None
4-25
Description
Use the binary command to set data type to binary for file transfer.
Example
# Enable file transfer in binary mode.

[ftp] binary
200 Type set to I.
4.3.3 bye
Syntax
bye
View
FTP client view
Parameter
None
Description
Use the bye command to disconnect from the remote FTP server and exit to user view.
Example
# Terminate the connection with the remote FTP server and exit to user view.
[ftp] bye
<H3C>
4.3.4 cd
Syntax
cd pathname
View
FTP client view
Parameter
pathname: Path name.
Description
Use the cd command to change the current working directory path on the remote FTP
server.
4-26
You can use this command for accessing another directory on the FTP server.
Example
# Change the current working directory path to d:/temp.

[ftp] cd d:/temp
4.3.5 cdup
Syntax
cdup
View
FTP client view
Parameter
None
Description
Use the cdup command to return from the current working directory path to the upper
directory.
Example
# Change the current working directory path to the upper directory.

[ftp] cdup
4.3.6 close
Syntax
close
View
FTP client view
Parameter
None
Description
Use the close command to terminate the connection to the remote FTP server, but
remain in FTP client view.
This command terminates both control connection and data connection to the remote
FTP server.
4-27
Example
# Terminate the connection to the remote FTP server but remain in FTP client view.
[ftp] close
[ftp]
4.3.7 debugging
Syntax
debugging
undo debugging
View
FTP client view
Parameter
None
Description
Use the debugging command to enable debugging.

Use the undo debugging command to disable debugging.
By default, FTP client debugging is disabled.
Example
# Enable debugging.
[ftp] debugging
4.3.8 delete
Syntax
delete remotefile
View
FTP client view
Parameter
remotefile: File name.
Description
Use the delete command to delete the specified file.
4-28
Example
# Delete file temp.c.

[ftp] delete temp.c
4.3.9 dir
Syntax
dir [ remotefile [ localfile ] ]
View
FTP client view
Parameter
remotefile: Name of the queried directory or file on the remote FTP server. If no
remotefile is specified, the system displays the current directory on the remote FTP
server.
localfile: Localfile name. If no localfile is specified, the output will be displayed on the
screen.
Description
Use the dir command to query for a specified file or all files under the directory.
This command displays one or all the files under the directory.
Example
# Query for file temp.c.

[ftp] dir temp.c
4.3.10 disconnect
Syntax
disconnect
View
FTP client view
Parameter
None
Description
Use the disconnect command to disconnect from the remote FTP server but remain in
FTP client view.
4-29
This command terminates both control connection and data connection to the remote
FTP server.
Example
# Disconnect from the remote FTP server but remain in FTP client view.
[ftp] disconnect
4.3.11 display ftp source-ip
Syntax
display ftp source-ip
View
Any view
Parameter
None
Description
Use the display ftp source-ip command to display the source IP address configured
for the FTP client.
If a source interface has been specified for the FTP client, the IP address of the
specified for the FTP client, 0.0.0.0 is displayed.
Example
# Display the current source IP address of the FTP client.

<H3C> display ftp source-ip
4.3.12 ftp
Syntax
ftp [host [ port ] ] [ source-interface interface-type interface-number | source-ip

ip-address ]
View
User view
Parameter
host: IP address or hostname of the remote FTP server.
4-30
port: Port number of the remote FTP server.

interface-type interface-number: Source interface type and number of the FTP client.
ip-address: Source address of the FTP client.
Description
Use the ftp command to set up control connection to the remote FTP server and enter
FTP client view.
Note:
Both of the FTP username and password supported by the system are 1 to 512
characters.
Example
# Connect to the remote FTP server with the IP address of 1.1.1.1.

<H3C> ftp 1.1.1.1
4.3.13 ftp host source-interface
Syntax
ftp host source-interface interface-type interface-number
View
User view
Parameter
host: IP address or name of an FTP server.

interface-type interface-number: Specifies a source interface by its type and number.
Description
Use the ftp host source-interface command to specify the source interface that the
FTP client uses when accessing the specified FTP server. This interface must be an
exiting local interface.
By default, the FTP client uses the IP address of the outbound interface to access the
specified FTP server.
Example
# Set the source IP address that the FTP client uses when accessing a specified FTP
server to ethernet0/0/0.
4-31
<H3C> ftp 192.168.0.2 source-interface ethernet0/0/0
4.3.14 ftp host source-ip
Syntax
ftp host source-ip ip-address
View
User view
Parameter
host: IP address or name of an FTP server.

Description
Use the ftp host source-ip command to specify the source IP address that the FTP
client uses when accessing the specified FTP server. This source IP address must be a
local address.
By default, the FTP client uses the IP address of the outbound interface to access the
specified FTP server.
Example
# Use 192.168.0.1 as the source IP address that the FTP client uses when accessing
the FTP server at 192.168.0.2.
<H3C> ftp 192.168.0.2 source-ip 192.168.0.1
4.3.15 ftp source-interface
Syntax
ftp source-interface interface-type interface-number

undo ftp source-interface
View
System view
Parameter
4-32
Description
Use the ftp source-interface command to specify a source interface, which must be
an existing local interface, for the FTP client. After that, the IP address of the specified
interface is used as the source IP address in each packet sent by the FTP client.
Use the undo ftp source-interface command to delete the source interface specified
for the FTP client. After that, the source IP address in each packet sent by the FTP
client is that of the outgoing interface where the packet is sent out.
By default, the source IP address in each packet sent by the FTP client is the IP
Note:
You may specify a source IP address for the packets sent by the FTP client with the ftp
source-interface command or with the ftp source-ip command. If both commands are
configured, the one configured later overrides.
Example
# Set the source interface for the FTP client to ethernet0/0/0.

[H3C] ftp source-interface ethernet0/0/0
4.3.16 ftp source-ip
Syntax
ftp source-ip ip-address

undo ftp source-ip
View
System view
Parameter
Description
Use the ftp source-ip command to specify a source IP address for the packets sent by
the FTP client. This IP address must be a local IP address.
Use the undo ftp source-ip command to delete the source IP address specified for the
FTP client. After that, the source IP address of each packet sent by the FTP client is the
IP address of the interface where the packet is sent out.
4-33
Note:
You may specify a source IP address for the packets sent by the FTP client with the ftp
source-interface command or with the ftp source-ip command. If both commands are
configured, the one configured later overrides.
Example
# Use 192.168.0.1 as the source IP address in the packets sent by the FTP client.
[H3C] ftp source-ip 192.168.0.1
4.3.17 get
Syntax
get remotefile [ localfile ]
View
FTP client view
Parameter
localfile: Local file name.

remotefile: File name on the remote FTP server.
Description
Use the get command to FTP a file from a remote server and save it.
By default, if no name is specified, the local file uses the name of the source file on the
FTP server.
Example
# Download file temp1.c and save it as temp.c.

[ftp] get temp1.c temp.c
4.3.18 lcd
Syntax
lcd
4-34
View
FTP client view
Parameter
None
Description
Use the lcd command to get the local working directory path of the FTP client.
Example
# Display the local working directory path.

[ftp] lcd
%Local directory now flash:/
4.3.19 ls
Syntax
ls [ remotefile ] [ localfile ]
View
FTP client view
Parameter
remotefile: Remote file for which you query.

localfile: Name of the file to be saved at the local.
Description
Use the ls command to query for a specified file/directory.

By default, all files and directories are displayed if no file is specified.
Example
# Query for file temp.c.

[ftp] ls temp.c
4.3.20 mkdir
Syntax
mkdir pathname
View
FTP client view
4-35
Parameter
pathname: Directory name.
Description
Use the mkdir command to create a directory on the remote FTP server.
Example
# Create the directory test on the remote FTP server.

[ftp] mkdir test
4.3.21 open
Syntax
open ipaddr [ port ] [-a ip-address]
View
FTP client view
Parameter
ipaddr: IP address of the remote FTP server.

port: Port number of the remote FTP server.
-a ip-address: Source address of the FTP client.
Description
Use the open command to set up control connection to the remote FTP server.
Example
# Set up FTP connection to the FTP server on the host 10.110.3.1.

[ftp] open 10.110.3.1
4.3.22 passive
Syntax
passive
undo passive
View
FTP client view
4-36
Parameter
None
Description
Use the passive command to set data transmission mode to passive.

Use the undo passive command to set data transmission mode to active.
The default transmission mode is passive.
Example
# Set data transmission mode to passive.

[ftp] passive
4.3.23 put
Syntax
put localfile [ remotefile ]
View
FTP client view
Parameter
localfile: Local file name.

remotefile: File name on the remote FTP server.
Description
Use the put command to FTP a local file to the remote FTP server.
If no name is assigned to the file to be saved on the FTP server, the name of the local
file is used.
Example
# Upload the local file temp.c to the remote FTP server and save it as temp1.c.
[ftp] put temp.c temp1.c
4.3.24 pwd
Syntax
pwd
View
FTP client view
4-37
Parameter
None
Description
Use the pwd command to view the working directory on the remote FTP server.
Example
# Display the working directory on the remote FTP server.

[ftp] pwd
"d:/temp" is current directory.
4.3.25 quit
Syntax
quit
View
FTP client view
Parameter
None
Description
Use the quit command to disconnect from the remote FTP server and exit to user view.
Example
# Disconnect from the remote FTP server and exit to user view.
[ftp] quit
221 Server closing.
<H3C>
4.3.26 remotehelp
Syntax
remotehelp [ protocol-command ]
View
FTP client view
Parameter
protocol-command: FTP command.
4-38
Description
Use the remotehelp command to view the help for the FTP commands.
Example
# Display the syntax of the user command.

[ftp] remotehelp user
214 Syntax: USER <sp> <username>
4.3.27 rename
Syntax
rename filename1 filename2
View
FTP client view
Parameter
filename1: Original name of a file on the FTP server.

filename2: New name for the file.
Description
Use the rename command to rename a file on the FTP server from the FTP client.
The use of this command is not restricted to the FTP server of a particular vendor.
On FTP servers some functions such as rename and delete are optional or by default
disabled. To use the rename function on the FTP client, make sure that the rename
option is selected on the FTP server.
Example
# Rename the file config.cfg on the FTP server to h3c.cfg.

[ftp] rename config.cfg h3c.cfg
4.3.28 rmdir
Syntax
rmdir pathname
View
FTP client view
4-39
Parameter
pathname: Directory name on the remote FTP server.
Description
Use the rmdir command to delete a specified directory from the FTP server.
Example
# Delete the d:/temp1 directory from the FTP server.

[ftp] rmdir d:/temp1
4.3.29 user
Syntax
user username [ password ]
View
FTP client view
Parameter
username: Login username.

password: Login password.
Description
Use the user command to log onto the FTP server.
Example
# Log onto the FTP server with the username tom and the password bjhw.
[ftp] user tom bjhw
4.3.30 verbose
Syntax
verbose
undo verbose
View
FTP client view
Parameter
None
4-40
Description
Use the verbose command to enable the verbose function to view information from the
FTP server.
Use the undo verbose command to disable the verbose function.
By default, the verbose function is disabled.
Example
# Enable the verbose function.

[ftp] verbose
4.4 TFTP Client Configuration Commands

4.4.1 display tftp source-ip
Syntax
display tftp source-ip
View
Any view
Parameter
None
Description
Use the display tftp source-ip command to display the source IP address configured
for the TFTP client.
If a source interface has been specified for the TFTP client, the IP address of the
specified for the TFTP client, 0.0.0.0 is displayed.
Example
# Display the current source IP address of the TFTP client.

<H3C> display tftp source-ip
4.4.2 tftp
Syntax
tftp host { get | sget | put } source-filename [ destination-filename ]
4-41
View
User view
Parameter
host : IP address of the TFTP server.

source-filename: Source file name.
destination-filename: Target file name.
get: Downloads the file without protection. In this mode, the router writes data to the
Flash memory during file transfer, which is somewhat unsafe. For example, if you
specify destination-filename to system, the new file rewrites the original system file at
real time. The failure of this download attempt will cause inability of the router to start.
sget: Downloads the file with protection. In this mode, the router starts writing data to
the Flash memory after file transfer completes. Then the original system file will not be
rewritten even when the download fails, thus ensuring higher reliability. This method
however requires larger memory.
put: Uploads the file.
Description
Use the tftp command to upload or download a file through TFTP.

Related command: tftp-server acl.
Example
# Download file config.cfg from the root directory of the TFTP server at 1.1.254.2 and
save it as config.bak.
<H3C> tftp 1.1.254.2 get config.cfg flash:/config.bak
# Upload file vrpcfg.cfg stored under the root directory of the Flash memory onto the
default directory on the TFTP server at 1.1.254.2 and save it as config.bak.
<H3C> tftp 1.1.254.2 put flash:config.cfg config.bak
4.4.3 tftp host source-interface
Syntax
tftp host source-interface interface-type interface-number
View
User view
Parameter
host: IP address or name of a TFTP server.
4-42
Description
Use the tftp host source-interface command to specify the source interface that the
TFTP client uses when accessing the specified TFTP server. This interface must be an
exiting local interface.
By default, the TFTP client uses the IP address of the outbound interface to access the
specified TFTP server.
Example
# Set the source IP address that the TFTP client uses when accessing the TFTP server
at 192.168.0.2 to ethernet0/0/0.
<H3C> tftp 192.168.0.2 source-interface ethernet0/0/0
4.4.4 tftp host source-ip
Syntax
tftp host source-ip ip-address
View
User view
Parameter
host: IP address or name of a TFTP server.

Description
Use the tftp host source-ip command to specify the source IP address that the TFTP
client uses when accessing the specified TFTP server. This source IP address must be
a local address.
By default, the TFTP client uses the IP address of the outbound interface to access the
specified TFTP server.
Example
# Use 192.168.0.1 as the source IP address that the TFTP client uses when accessing
the TFTP server at 192.168.0.2.
<H3C> tftp 192.168.0.2 source-ip 192.168.0.1
4-43
4.4.5 tftp-server acl
Syntax
tftp-server acl acl-number
View
System view
Parameter
acl-number: IP ACL number in the range 2000 to 2999.
Description
Use the tftp-server acl command to reference an ACL to control access to the TFTP
server.
Related command: tftp.
Example
# Reference ACL 2001 to control access to the TFTP server.

[H3C] tftp-server acl 2001
4.4.6 tftp source-interface
Syntax
tftp source-interface interface-type interface-number

undo tftp source-interface
View
System view
Parameter
Description
Use the ftp source-interface command to specify a source interface, which must be
an existing local interface, for the TFTP client. After that, the IP address of the specified
interface is used as the source IP address in each packet sent by the TFTP client.
Use the undo ftp source-interface command to delete the source interface specified
for the TFTP client. After that, the source IP address in each packet sent by the TFTP
4-44
Note:
You may specify a source IP address for the packets sent by the FTP client with the tftp
source-interface command or with the tftp source-ip command. If both commands
are configured, the one configured later overrides.
Example
# Set the source interface for the TFTP client to ethernet0/0/0.

[H3C] tftp source-interface ethernet0/0/0
4.4.7 tftp source-ip
Syntax
tftp source-ip ip-address

undo tftp source-ip
View
System view
Parameter
Description
Use the ftp source-ip command to specify a source IP address for the packets sent by
the TFTP client. This IP address must be a local IP address.
Use the undo ftp source-ip command to delete the source IP address specified for the
TFTP client. After that, the source IP address of each packet sent by the TFTP client is
the IP address of the interface where the packet is sent out.
By default, the source IP address in each packet sent by the TFTP client is the IP
4-45
Note:
You may specify a source IP address for the packets sent by the FTP client with the tftp
source-interface command or with the tftp source-ip command. If both commands
are configured, the one configured later overrides.
Example
# Use 192.168.0.1 as the source IP address in the packets sent by the TFTP client.
[H3C] tftp source-ip 192.168.0.1
4.4.8 tftp vpn-instance
Syntax
tftp hostname vpn-instance vpn-instance-name source-ip ip-address { get | put |

sget } source-filename [ destination-filename ]
View
User view
Parameter
hostname: Name of TFTP Server or IP address.

vpn-instance-name: Name of VPN instance.
get: Indicates FTP file downloading in normal mode, where the FTP server writes data
to the Flash memory during file transfer. Therefore, when you specify
destianation-filename to system, new system file will overwrite the original one
momentarily. If system file downloading fails, network disconnection for example, might
result in unsuccessful startup of the router. This mode has a lower security factor.
sget: Indicates File downloading mode with protection. In this mode, the router stores
the received user file into its memory and writes data to the Flash memory after file
receiving completes. This means if file downloading fails because of network
disconnection for example, the router can still start up because the original file is not
overwritten. This mode has a higher security factor, however consumes more memory
than the normal mode.
put: Specifies to perform file uploading.
source-filename: Name of the source file.
destination-filename: Name of the destination file.
4-46
Description
Use the tftp hostname vpn-instance command to adopt VPN instance mode to access
TFTP server and upload and download files.
Follow these rules when executing this command:
z VPN instance name must exist and be correct.
z The specified source IP address must be the IP address of the router.
z The specified VPN instance name must match the source IP address.
Example
# Upload the vrpcfg.cfg file to TFTP server in VPN instance mode. The IP address of
TFTP server is 172.31.1.7 and VPN instance name is vpn5.
<H3C> tftp 172.31.1.7 vpn-instance vpn5 source-ip 169.56.82.1 put vrpcfg.cfg
4.5 TFTP Server Configuration Commands

4.5.1 debugging tftp-server
Syntax
debugging tftp-server { event | packet }

undo debugging tftp-server
View
User view
Parameter
event: Enables event debugging.

packet: Enables packet debugging.
Description
Use the debugging tftp-server command to enable TFTP server debugging.

Use the undo debugging tftp-server command to disable TFTP server debugging.
Example
# Enable TFTP server event debugging.

<H3C>debugging tftp-server event
4.5.2 display tftp-server
Syntax
display tftp-server
4-47
View
Any view
Parameter
None
Description
Use the display tftp-server command to view TFTP server state and attribute setting.
Example
# Display TFTP server state and attributes setting.

[H3C]display tftp-server
TFTP server State Close
TFTP server max-users 1
TFTP server current users 0
TFTP server timeout (second) 5
TFTP server retry-times 5
TFTP server update mode normal
TFTP server directory flash:/
Table 4-2 Description on the fields in the output of the display tftp-server command
Field Description
TFTP server State State of the TFTP server, including open and close
The maximum number of concurrent users who
TFTP server max-users
access TFTP server
The maximum number of concurrent users who
TFTP server current users
access TFTP server
TFTP server timeout
UDP packet response timeout time for TFTP server
(second)
Maximum retry times for timeout transmission for
TFTP server retry-times
the TFTP server
TFTP server update mode Update mode for the TFTP server to receive data
TFTP server directory Directory that TFTP users can access
4.5.3 tftp-server directory
Syntax
tftp-server directory directory

undo tftp-server directory
4-48
View
System view
Parameter
directory: Directory that TFTP client can access, which defaults to Flash root directory.
Description
Use the tftp-server directory command to configure the directory TFTP client can
access.
Use the undo tftp-server directory command to restore the default directory.
Example
# Configure the directory TFTP client can access to flash:/object.

[H3C] tftp-server directory flash:/object
4.5.4 tftp-server enable
Syntax
tftp-server enable
undo tftp-server enable
View
System view
Parameter
None
Description
Use the tftp-server enable command to enable TFTP server.

Use the undo tftp-server enable command to disable TFTP server.
When you use the undo tftp-server enable command to disable TFTP server, if a file
is being transmitted, the system prompts you whether to forcibly disconnect the server.
Only after your confirmation is the TFTP server disconnected.
By default, TFTP server is disabled.
Example
# Enable TFTP server.

[Router] tftp-server enable
% Start TFTP Server
# Disable TFTP server.
4-49
[Router] undo tftp-server enable

Some files are being transferred now. This operation will cut the connection
between the server and client, continue?[Y/N]:y
4.5.5 tftp-server max-users
Syntax
tftp-server max-users number

undo tftp-server max-users
View
System view
Parameter
number: Maximum number of the users that are allowed to access TFTP server, in the
Description
Use the tftp-server max-users command to configure maximum number of concurrent

users that are allowed to access TFTP server.
Use the undo tftp-server max-users command to restore to the default.
By default, concurrent access of multiple users to TFTP server is not supported. If this
function is needed, users can configure it by themselves.
Example
# Configure the maximum number of concurrent users to access TFTP server to 3.

[Router] tftp-server max-users 3
4.5.6 tftp-server retry-times
Syntax
tftp-server retry-times times

undo tftp-server retry-times
View
System view
Parameter
times: Maximum number of retry times for timeout retransmission, in the range 1 to 20
and defaults to 5.
4-50
Description
Use the tftp-server retry-times command to configure maximum number of retry times
for TFTP server timeout retransmission.
Use the undo tftp-server retry-times command to restore the default.
Example
# Configure maximum number of retry times for TFTP server timeout retransmission.
[H3C] tftp-server retry-times 6
4.5.7 tftp-server timeout
Syntax
tftp-server timeout seconds

undo tftp-server timeout
View
System view
Parameter
seconds: Response timeout time for a UDP packet, in the range 1 to 20 seconds and
defaults to five seconds.
Description
Use the tftp-server timeout command to configure UDP packet response timeout time
for TFTP server.
Use the undo tftp-server timeout command to restore the default.
Example
# Configure UDP packet response timeout time for TFTP server to 10 seconds.
[H3C]tftp-server timeout 10
4.5.8 tftp-server update
Syntax
tftp-server update { fast | normal }

undo tftp-server update
View
System view
4-51
Parameter
fast: Fast update mode.

normal: Normal update mode.
Description
Use the tftp-server update command to set the file update mode that the FTP server
uses while receiving data.
Use the undo tftp-server update command to restore the default, or fast mode.
The FTP server can update files to which you upload in either of the following modes:
z In fast mode, the FTP server judges whether there is enough space for storing files
in the Flash and then starts writing data to the Flash memory after file transfer
completes; if there is not enough space, the FTP server sends error prompt
message and releases memory. This protects the existing files on the router from
being ruined in the event that anomalies, power failure for example, occur during a
file transfer.
z In normal mode, the FTP server writes data to the Flash memory during file
transfer. This means that any anomaly, power failure for example, during file
transfer might result in corruption of the files on the router. This mode consumes
less memory than the fast mode, however has a lower security factor.
Example
# Set the FTP update mode to fast.

[H3C] tftp-server update fast
4.6 xmodem Configuration Commands

4.6.1 xmodem get
Syntax
xmodem get filename
View
User view
Parameter
filename: Name of the file to be saved to Flash. It must be an absolute file path.
4-52
Description
Use the xmodem get command to download a file by using Xmodem through the AUX
port. Comware supports 128-byte packets and CRC check.
Caution:
The xmodem get command is not supported on asynchronous serial interfaces but the
AUX port. In addition, simultaneous operations are not allowed.
Example
# Download a file with Xmodem through the AUX port and assign the name test.txt to
the file to be saved to Flash.
<H3C> xmodem get flash:/test.txt
After the command is executed, you can send the file through the hyperterminal.
4.7 Configuration File Management Commands

4.7.1 display current-configuration
Syntax
display current-configuration [interface interface-type [ interface-number ] |

configuration [ isp | luser | radius-template | system | user-interface| ] ] [ | [ begin |
include | exclude ] string ] [ by-linenum ]
View
Any view
Parameter
interface: Displays the interface configurations.

configuration: Displays the specified configurations.
isp: Display the ISP configurations.
luser: Displays the local user configurations.
radius-template: Displays the radius-template configurations.
system: Displays the system configurations.
user-interface: Displays the user interface configuration.
4-53
|: Uses a regular expression to filter output.

begin: Displays the configurations beginning with the specified characters (string).
include: Displays the configurations that include the specified characters (string).
exclude: Displays the configurations that exclude the specified characters (string).
string: The regular expression. “ ( ” is an illegal character, which cannot appear in a
string.
by-linenum: Identifies each line of displayed current configuration information with a
line number.
Description
Use the display current-configuration command to view the running configurations

on the H3C.
The current parameters that take the default values are not displayed.
After you complete some configuration tasks, you can execute the display
current-configuration command to verify them. You probably cannot see some
parameters that you have configured however, because the system displays them only
after you validate their functions.
Related command: save, reset saved-configuration, display saved-configuration.
Example
# Display the currently effective configuration parameters on the H3C.

<H3C> display current-configuration
#
sysname R1760
#
super password level 3 simple 123456
#
tcp window 8
#
undo multicast igmp-all-enable
#
interface Aux0
link-protocol ppp
#
interface Ethernet0/0/0
#
interface Serial0/0/0
link-protocol ppp
#
interface NULL0
4-54
#
bgp 15535
undo synchronization
#
#
ospf 2 H3C-id 1.1.1.1
#
rip
#
user-interface con 0
set authentication password simple 123456
history-command max-size 30
user-interface aux 0
#
return
# Display the running configurations on the H3C, identifying each line of displayed
information with a line number.
<H3C> display current-configuration by-linenum
1: #
2: sysname R1760
3: #
4: super password level 3 simple 123456
5: #
6: tcp window 8
7: #
8: undo multicast igmp-all-enable
9: #
10: interface Aux0
11: link-protocol ppp
12: #
13: interface Ethernet0/0/0
14: #
15: interface Serial0/0/0
17: #
18: interface NULL0
19: #
20: bgp 15535
21: undo synchronization
22: #
23: #
4-55
24: ospf 2 H3C-id 1.1.1.1

25: #
26: rip
27: #
28: user-interface con 0
29: set authentication password simple 123456
30: history-command max-size 30
31: user-interface aux 0
32: user-interface vty 0 4
33: #
34: return
4.7.2 display saved-configuration
Syntax
display saved-configuration [ by-linenum ]
View
Any view
Parameter
by-linenum: Identifies each line of displayed information with a line number.
Description
Use the display saved-configuration command to view the configuration file loaded
at this startup.
Related command: save, reset saved-configuration, display
current-configuration.
Example
# Display the configuration file loaded at this startup.

<H3C> display saved-configuration
#
sysname H3C
#
tcp window 8
#
undo multicast igmp-all-enable
#
controller E1 3/0/0
#
interface Aux0
4-56
link-protocol ppp
#
interface Ethernet0/0/0
#
interface Serial0/0/0
link-protocol ppp
#
interface NULL0
#
user-interface con 0
user-interface aux 0
#
return
# Display the configuration file loaded at this startup, identifying each line with a line
number.
<H3C> display saved-configuration by-linenum
1: #
2: sysname H3C
3: #
4: tcp window 8
5: #
6: undo multicast igmp-all-enable
7: #
8: controller E1 3/0/0
9: #
10: interface Aux0
12: #
13: interface Ethernet0/0/0
14: #
15: interface Serial0/0/0
17: #
18: interface NULL0
19: #
20: user-interface con 0
21: user-interface aux 0
22: user-interface vty 0 4
23: #
24: return
4-57
4.7.3 display startup
Syntax
display startup
View
Any view
Parameter
None
Description
Use the display startup command to view the configuration file used at this startup and
the one used for next startup.
Example
# Display the configuration file used at this startup and the one used for next startup.
<H3C>display startup
Startup saved-configuration file: flash:/vrpcfg.cfg
Next startup saved-configuration file: flash:/comware.cfg
4.7.4 display this
Syntax
display this [ by-linenum ]
View
Any view
Parameter
by-linenum: Identifies each line of displayed information with a line number.
Description
Use the display this command to view the current configurations in current view.
Example
# Display the current configuration in current view.

<H3C> display this
#
sysname H3C
#
4-58
tcp window 8
#
# Display the current configurations for current view, identifying each line of information
with a line number.
[H3C] display this by-linenum
1: #
2: sysname H3C
3: #
4: tcp window 8
5: #
6: return
4.7.5 reset saved-configuration
Syntax
reset saved-configuration
View
User view
Parameter
None
Description
Use the reset saved-configuration command to delete the configuration file loaded at
this startup from the Flash.
This command could not have the H3C boot with empty configuration at next startup.
Use this command with caution and under the guidance of technical staff.
You may use this command to delete the configuration file before deploying the H3C in
a new application environment where new configuration is required.
Related command: save, display current-configuration, display
saved-configuration.
Example
# Delete the configuration file loaded at this startup from the Flash.
<H3C> reset saved-configuration
The saved configuration will be erased.
Are you sure?[Y/N]y
Configuration in the device is being cleared.
Please wait ...
....
4-59
Configuration in the device is cleared.
4.7.6 save
Syntax
save [file-name | safely ]
View
Any view
Parameter
file-name: Filename, whose extension must be cfg. If this argument is not specified, the
configurations you made are saved to the configuration file loaded at this startup.
safely: Executing the command without the safely keyword is fast, but the file cannot
survive a reboot or power-off during the saving process; executing this command with
the safely keyword is slow, but the file can survive a reboot or power-off during the
saving process.
Description
Use the save command to save the current configuration file to the storage device.
After you finish and validate a set of configurations, you should save the current
configuration file to the Flash memory.
By default, fast saving applies. This mode is preferred in an environment where stable
power supplies are available. In an environment where stable power supplies are not
available or in the case of remote maintenance, however, the save safely command is
preferred.
Caution:
If you save the current configuration to the default configuration file with the save
command and also specify another configuration file to be loaded at next boot, the
saved configuration, which can be seen by executing the display
saved-configuration command, will not be executed at next boot.
Related command: reset saved-configuration, display current-configuration,

display saved-configuration.
Example
# Save the current configuration file to the default storage device.
4-60
<H3C> save
4.7.7 startup saved-configuration
Syntax
startup saved-configuration filename

undo startup saved-configuration
View
User view
Parameter
filename: Configuration file name.
Description
Use the startup saved-configuration command to specify the configuration file used
at next startup.
Use the undo startup saved-configuration command to configure the system to boot
without any configuration file at next startup.
When multiple configuration files are available on the Flash, you may use this
command to specify the one to be loaded at startup.
Table 4-3 shows how to name a configuration file:
Table 4-3 Name a configuration file
File name Description

Default name for the configuration file to be saved. The
vrpcfg.cfg name is specified by the manufacturer but you can modify
the contents.
Default ex-factory configuration file name; its contents are
vrpcfg.def
manufacturer specified.
Name of the configuration file for some old Huawei-3Com
vrpcfg.txt
devices.
The following are how configuration files are selected at boot:

1) If you do not set to skip configuration file at boot, configuration files are selected in
the order described in 2) and 3). Otherwise, the system boots with empty
configuration.
2) If you specify a configuration file, the system selects its boot configuration file in
this order: the specified configuration file and then vrpcfg.def. In case vrpcfg.def
does not exist, the system boots with empty configuration.
4-61
3) If you do not specify a boot configuration file, the configuration file is selected in
this order: vrpcfg.cfg, vrpcfg.txt, and vrpcfg.def. If none of them exists, the system
boots with empty configuration.
Example
# Set the configuration file used at next boot to master.cfg.

<H3C> startup saved-configuration master.cfg
# Display the configuration files that the system saves for boot.
<H3C> display startup
Startup saved-configuration file: flash:/vrpcfg.cfg
Next startup saved-configuration file: flash:/master.cfg
vrpcfg.cfg is the default configuration file and master.cfg is the configuration file used at
next reboot.
# Configure the system to boot without any configuration file at next startup.\
<H3C> undo startup saved-configuration
4.7.8 upgrade
Syntax
upgrade bootrom [ full ]
View
User view
Parameter
bootrom: Upgrades the Boot ROM.

full: Upgrades the entire Boot ROM.
Description
Use the upgrade command to upgrade the Boot ROM.

You may upgrade the Boot ROM on your H3C in service. After you execute the
upgrade command, the Boot ROM file is extracted from the upgrade software package
and written to the Boot ROM.
When executing this command, make sure that the upgrade software package (named
bootromfull) exists under the root directory in the Flash memory.
4-62
Example
# Upgrade the Boot ROM on the R1760, provided the upgrade software package is
stored under the root directory on the Flash memory and the file name is “bootromfull”.
<H3C> upgrade bootrom full
4-63
Comware V3 Chapter 5 User Interface Configuration Commands
Chapter 5 User Interface Configuration

Commands
5.1 User Interface Configuration Commands

5.1.1 accounting commands
Syntax
accounting commands scheme

undo accounting commands scheme
View
User interface view
Parameter
scheme: Implements per-command accounting using the scheme specified by the

scheme command, which can only be the terminal access controller access control
system (TACACS) scheme currently.
Description
Use the accounting commands command to enable the system to start per-command
accounting for terminal users logged into the user interface.
Use the undo accounting commands command to stop per-command accounting for
terminal users.
By default, per-command accounting is not configured.
At present, per-command accounting for terminal users is available with the
HWTACACS protocol only.
After this function is enabled on a user interface, a command statistics packet is sent to
a TACACS accounting server for statistics and accounting each time a login terminal
user executes a command.
When the TACACS accounting server becomes unavailable, the terminal user can
execute commands normally but with per-command accounting stopped. The system,
however, does not record or inform the terminal user of this event.
Example
# Perform per-command accounting on the VTY 0 user interface.

[H3C] user-interface vty 0
5-1
[H3C-ui-vty0] accounting commands scheme
5.1.2 acl
Syntax
acl acl-number { inbound | outbound }

undo acl { inbound | outbound }
View
User interface view
Parameter
acl-number: Address access control list number, in the range 2000 to 3999.
inbound: Controls call-in.
outbound: Controls call-out.
Description
Use the acl command to reference an ACL to control call-in and call-out of VTY (Telnet
and SSH) users.
Use the undo acl command to remove the ACL.
By default, call-in and call-out of VTY users are not restricted.
Example
# Remove the restriction on outgoing Telnet calls.

[H3C-ui-vty0] undo acl outbound
5.1.3 activation-key
Syntax
activation-key character
undo activation-key
View
User interface view
Parameter
character: Shortcut key or key combination for starting terminal sessions, a string of 1
to 3 characters or their corresponding ASCII code values in the range 0 to 127.
5-2
Description
Use the activation-key command to define a shortcut key or key combination for
starting a terminal session.
Use the undo activation-key command to remove the shortcut key or key combination
used to start terminal sessions.
Example
# Use character s as the shortcut key for starting terminal sessions.

[H3C-ui-console0] activation-key s
To verify the configuration, do the following:

# Exit the terminal session on the console port, and enter <s> at the prompt of “Please
press ENTER”.
*********************************************************************
* All rights reserved (1997-2005) *
* Without the owner's prior written consent, *
*no decompiling or reverse-engineering shall be allowed. *
*********************************************************************
User interface con0 is available.
Please press ENTER.
<H3C>
%Mar 2 18:40:27:981 2005 H3C SHELL/5/LOGIN: Console login from con0el
If the prompt for user view, <H3C> for example, appears after you press <s>, the
configuration is valid.
5.1.4 authentication-mode
Syntax
authentication-mode { password | scheme [ command-authorization | domain

domain-name ] }
authentication-mode none
undo authentication-mode
View
User interface view
5-3
Parameter
password: Performs local password authentication.

scheme: Performs authorization and authentication of AAA.
command-authorization: Performs command line authorization. HWTACACS allows
per-command authorization. An input command is executed only after it passes
authorization.
domain domain-name: Sets domain name of the applied AAA domain, a string of 1 to
24 characters.
none: Performs no authentication.
Description
Use the authentication-mode command to set the authentication mode at login.

Use the authentication-mode none command to set the authentication mode to none,
that is, no authentication at login.
Use the undo authentication-mode command to restore the default.
By default, the authentication mode is password for TTY (asynchronous interface),
VTY, and AUX user interfaces and is none for other user interfaces.
If the domain domain-name command is configured on a VTY or console port, all users
who log onto the router through VTY or console port will use the configured domain to
perform AAA. The default domain and the domain name information in the username
entered at login will become invalid. The configuration of this domain is optional.
Without this configuration, the login mode of the users using the original version of
Comware does not change.
 Note:
Domain configuration is valid on both VTY and console users, while the banner
message is only valid for Telnet and terminal users. This is because SSH client can be
provided by the third party and the interaction mode of the client cannot be modified.
Related command: set authentication password.
Example
# Enable local password authentication.

[H3C-ui0] authentication-mode password
5-4
5.1.5 auto-execute command
Syntax
auto-execute command command

undo auto-execute command
View
User interface view
Parameter
command: Command to be automatically executed.
Description
Use the auto-execute command command to set a command to be automatically

executed.
Use the undo auto-execute command command to disable command
auto-execution.
By default, command auto-execution is disabled.
You should be aware of the following restrictions before using the auto-execute
command command:
z You cannot execute the auto-execute command command on the console port.
z When the AUX port on your H3C functions as the console port, you cannot
execute the auto-execute command on it.
z These restrictions do not apply to other types of user interfaces.
When the user logs on from this interface, the system automatically executes the
command configured using the auto-execute command command and disconnects
the user connection after completing execution.
A good example is configuring the auto-execute command telnet command to have
users telnet to the specified host automatically.
Take caution when using this command on a user interface. It disables you to configure
the system on the user interface.
Caution:
Before configuring the auto-execute command command and saving it with the save
command, make sure that means exist that allow you to access the system to remove
the configuration.
5-5
Example
# Allow the system to execute the telnet 10.110.100.1 command automatically after a
user logs on from the AUX interface.
[H3C-ui-aux0] auto-execute command telnet 10.110.100.1
5.1.6 databits
Syntax
databits { 5 | 6 | 7 | 8 }
undo databits
View
User interface view
Parameter
5: Five data bits.

6: Six data bits.
7: Seven data bits.
8: Eight data bits.
Description
Use the databits command to set data bits on the user interface.
Use the undo databits command to restore the default, or eight.
The configuration can take effect only when the serial interface works in the
asynchronous flow mode.
Example
# Set data bits to 5.

[H3C-ui-aux0] databits 5
5.1.7 debugging vty
Syntax
debugging vty { fsm | negotiate }

undo debugging vty { fsm | negotiate }
View
User view
5-6
Parameter
fsm: Telnet state machine debugging.

negotiate: VTY option negotiation debugging.
Description
Use the debugging vty command to enable VTY debugging.

Use the undo debugging vty command to disable VTY debugging.
Example
# Enable VTY option negotiation debugging.

<H3C> debugging vty negotiate
5.1.8 display user-interface
Syntax
display user-interface [ [ type-name ] number ] [summary]
View
Any view
Parameter
type-name: User interface type. Together with a user interface index, it specifies a user
interface.
number: Number of a user interface. If type-name is not specified, number is an
absolute index in the range 0 to 38. If type-name is specified, it is a relative index whose
value depends on the user interface type.
summary: Displays summary about user interfaces.
Description
Use the display user-interface command to view information about the specified or all
user interfaces.
Example
# Display information about user interface 0.

<H3C> display user-interface 0
Idx Type Tx/Rx Modem Privi Auth Int
+ 0 CON 0 9600 - 3 N -
+ : Current user-interface is active.

F : Current user-interface is active and work in async mode.
5-7
Idx : Absolute index of user-interface.

Type : Type and relative index of user-interface.
Privi: The privilege of user-interface.
Auth : The authentication mode of user-interface.
Int : The physical location of UIs.
A : Authentication use AAA.
L : Authentication use local database.
N : Current UI need not authentication.
P : Authentication use current UI's password.
# Display summary about user interface 0.

<H3C> display user-interface 0 summary
0: U
1 character mode users. (U)

1 total UIs in use.
UI's name: con0
5.1.9 display users
Syntax
display users [ all ]
View
Any view
Parameter
all: Displays information about users of all user interfaces.
Description
Use the display users command to view the login information of the users on each
user interface.
Example
# Display state about all user interface users.

<H3C> display users
UI Delay Type Ipaddress Username Userlevel
+ 0 CON 0 00:00:00 3
130 VTY 0 00:00:05 TEL 192.168.1.253 tb 2
You can see information on all active terminal lines. The following table describes the
fields in the output.
5-8
Table 5-1 Fields in the output of the display users command
Field Description
+ Indicates the terminal line in use.
The first number and the second number are respectively
UI
the absolute index and relative index of the user interface.
Delay Interval since the last input, in the format of hh:mm:ss.
Type User type, such as Telnet, SSH, and PAD
Location where connection is initiated, or IP address of the
Ipaddress
call-in host.
Username that the user uses to log in from this user
Username interface. In this example, this field is void because AAA
authentication is not required on this terminal line.
User authority or level: 0 for visit, 1 for monitor, 2 for
Userlevel
system, and 3 for manage.
# Execute the display users all command on the console.

<H3C> display users all
UI Delay Type Ipaddress Username Userlevel
+ 0 CON 0 00:00:00 3
129 AUX 0
+ 130 VTY 0 00:00:16 TEL 192.168.1.253 tb 2
131 VTY 1
132 VTY 2
133 VTY 3
134 VTY 4
All the terminal lines are displayed. The plus (+) signs indicate active terminal lines.
5.1.10 escape-key
Syntax
escape-key { default | character }

undo escape-key
View
User interface view
Parameter
character: Escape key or key combination for aborting a task, a string of 1 to 3

characters or their corresponding ASCII code values in the range 0 to 127.
default: Restore the default escape key combination <CTL+C>.
5-9
Description
Use the escape-key command to define an escape key or key combination for aborting
tasks.
Use the undo escape-key command to delete the escape key or key combination
used to abort tasks.
Example
# Define Q as the escape key.

[H3C-ui-console0] escape-key Q
To verify the configuration, do the following:

# Enter <Q> when a ping task is running.
<H3C> ping –c 20 125.241.23.46
PING 125.241.23.46: 56 data bytes, press CTRL_C to break
Request time out
--- 125.241.23.46 ping statistics ---

2 packet(s) transmitted
0 packet(s) received
100.00% packet loss
<H3C>
If the ping task is terminated and return to the current view, the configuration is correct.
5.1.11 flow-control
Syntax
flow-control { hardware | software | none }

undo flow-control
View
User interface view
Parameter
none: No flow control.

software: Software flow control.
hardware: Hardware flow control , only valid on console and AUX ports.
Description
Use the flow-control command to configure flow control mode.
5-10
Use the undo flow-control command to restore the default.

By default, TTY interfaces use hardware flow control.
The configuration can become effective only when the serial interface works in the
asynchronous flow mode.
When the system is outputting, you may press <Ctrl+S> to halt outputting and <Ctrl+Q>
to continue.
Example
# Configure software flow control in user interface view.

[H3C-ui-console0] flow-control software
5.1.12 free user-interface
Syntax
free user-interface [ type-name ] number
View
User view
Parameter
type-name: User interface type.

number: Absolute/relative user interface index. If type-name is not specified, number is
an absolute index in the range 0 to 38. If type-name is specified, it is a relative index
whose value depends on the user interface type.
Description
Use the free user-interface number command to disconnect the user corresponding to
the user interface specified by its absolute index.
Use the free user-interface type-name number command to disconnect the user
corresponding to the user interface specified by its type and relative index.
Example
# Disconnect the user corresponding to user interface 0.

<H3C> free user-interface 0
5.1.13 history-command max-size
Syntax
history-command max-size size-value

undo history-command max-size
5-11
View
User interface view
Parameter
size-value: History buffer size in the range 0 to 256. It defaults to 10, that is, up to ten
history commands can be stored.
Description
Use the history-command max-size command to set the size of history command
buffer.
Use the undo history-command max-size command to restore the default, or 10.
Example
# Set the size of the history command buffer to 20.

[H3C-ui-console0] history-command max-size 20
5.1.14 idle-timeout
Syntax
idle-timeout minutes [ seconds ]

undo idle-timeout
View
User interface view
Parameter
minutes: Number of minutes in the range 0 to 35791.

seconds: Number of seconds in the range 0 to 59.
Description
Use the idle-timeout command to set the idle-timeout timer. When it expires, the user
connection is disconnected.
Use the undo idle-timeout command to restore the default.
The default idle-timeout is 10 minutes.
Setting idle-timeout to zero disables the timer and the connection is maintained
regardless of whether it is idle.
Example
# Set the idle-timeout timer to 1 minute and 30 seconds.

[H3C-ui-console0] idle-timeout 1 30
5-12
5.1.15 modem
Syntax
modem [ both | call-in | call-out ]

undo modem [ call-in | both | call-out ]
View
User interface view
Parameter
both: Allows both incoming and outgoing calls.

call-in: Allows incoming calls.
call-out: Allows outgoing calls.
Description
Use the modem or modem both command to allow modem calls to pass through, both
incoming and outgoing.
Use the modem [ call-in | call-out ] command to allow incoming or outgoing modem
calls to pass through.
Use the undo modem or undo modem both command to disable modem calls to
pass through, both incoming and outgoing.
Use the undo modem [ call-in | call-out ] command to disable incoming or outgoing
modem calls to pass through.
By default, both incoming and outgoing modem calls are disabled to pass through.
This command is only available with the AUX interface and other asynchronous
interfaces (TTYs). You cannot use it on the console interface.
Example
# Set the modem call attribute on TTY 1.

[H3C-ui-tty1] modem
5.1.16 modem auto-answer
Syntax
modem auto-answer
undo modem auto-answer
View
User interface view
5-13
Parameter
None
Description
Use the modem auto-answer command to set the answering mode to auto-answer.
Use the undo modem auto-answer command to restore the default, or manual
answer.
This command applies only to the AUX interface and other TTYs. You cannot use it on
the console interface.
To allow a user interface to accept dial-up connections using modem, you must first set
the modem parameters on it.
Example
# Set the answering mode to auto-answer.

[H3C-ui-aux0] modem auto-answer
5.1.17 modem timer answer
Syntax
modem timer answer seconds

undo modem timer answer
View
User interface view
Parameter
seconds: Timeout time in the range 1 to 60 seconds.
Description
Use the modem timer answer command to set the timeout time spent waiting for the
carrier signal after the off-hook action when setting up an incoming call connection.
Use the undo modem timer answer command to restore the default, or 30 seconds.
This command is only available with the AUX interface and other TTYs. You cannot use
it on the console interface.
Example
None
5-14
5.1.18 parity
Syntax
parity { none | even | odd | mark | space }

undo parity
View
User interface view
Parameter
none: No parity check.

even: Even parity check.
odd: Odd parity check.
mark: Mark parity check.
space: Space parity check.
Description
Use the parity command to set the check bit of the user interface.
Use the undo parity command to restore the default, or none.
The configuration is effective only when the serial interface works in asynchronous flow
mode.
Example
# Set the transmission check bit to odd on the AUX interface.

[H3C-ui-aux0] parity odd
5.1.19 protocol inbound
Syntax
protocol inbound { all | pad | ssh | telnet }
View
VTY interface view
Parameter
all: Supports all the protocols, PAD, Telnet, and SSH.

pad: Supports PAD only.
ssh: Supports SSH only.
telnet: Supports Telnet only.
5-15
Description
Use the protocol inbound command to enable the current user interface to support
Telnet, PAD, SSH, or all of them.
By default, the VTY interface supports all these protocols.
Note that even after you configured the current user interface to support SSH (which
has been enabled), the SSH service is unavailable if no local RSA key exists. After you
configure the RSA key, the configuration takes effect at next login.
If SSH is configured, you must set the authentication method to scheme using the
authentication-mode scheme command to guarantee a successful login. The
configuration of the authentication-mode password or authentication-mode none
command fails the protocol inbound ssh command.
Related command: user-interface vty.
Example
# Enable the VTYs 0 through 4 to support SSH only.

[H3C] user-interface vty 0 4
[H3C-ui-vty0-4] protocol inbound ssh
# Enable VTY 0 to support SSH only.

[H3C-ui-vty0] protocol inbound ssh
5.1.20 re-authentication
Syntax
re-authentication
undo re-authentication
View
User interface view
Parameter
None
Description
Use the re-authentication command to enable console login re-authentication.

Use the undo re-authentication command to disable console login re-authentication.
By default, console login re-authentication is disabled.
Console login re-authentication can provide extra security for your console connection
based on console login authentication.
5-16
Suppose you remove the console cable without clearing the existing console
connection. Console login re-authentication ensures that even if the cable is connected
again when the console connection is still present, one must undergo another
authentication to log in from the console port.
Configure the re-authentication command in conjunction with the flow-control
hardware command.
Example
# Enable console login re-authentication.

[H3C-ui-console0] re-authentication
[H3C-ui-console0] flow-control hardware
# Configure password authentication on the console port.

[H3C-ui-console0] authentication-mode password
[H3C-ui-console0] set authentication password simple H3C
# Remove the console cable, and then connect it before the console connection times
out. The following message is displayed:
Login authentication
Username:
Password:
5.1.21 screen-length
Syntax
screen-length screen-length
undo screen-length
View
User interface view
Parameter
screen-length: Number of lines displayed on the screen, in the range 0 to 512.
Description
Use the screen-length command to set the number of lines displayed on the terminal
screen.
Use the undo screen-length command to restore the default, or 24 lines.
Setting the screen length to zero disables multiple-screen output.
5-17
Example
# Set the number of lines on the terminal screen to 30.

[H3C-ui-console0] screen-length 30
5.1.22 screen-width
Syntax
screen-width width
undo screen-width
View
User interface view
Parameter
width: Width of the terminal screen to be configured, in the range 80 to 132.
Description
Use the screen-width command to set the width of the terminal screen, that is, how
many characters can be displayed in one line.
Use the undo screen-width command to restore the width of the terminal screen to the
default value.
By default, 80 characters can be displayed in one line.
Example
# Set the width of the terminal screen for console port to 100.
[H3C-ui-console0] screen-width 100
5.1.23 send
Syntax
send [ number | all | type-name number ]
View
User view
Parameter
number: Absolute/relative user interface index.

all: Sends messages to all user interfaces.
type-name: User interface type.
5-18
Description
Use the send command to transfer messages between user interfaces.

Use the send all command to send messages to all user interfaces.
Use the send number command to send messages to the user interface specified by its
absolute index.
Use the send type-name number command to send messages to the user interface
specified by its interface type and relative index.
For the user interface numbering rules, refer to the section “Numbering User
Interfaces” in the chapter “User Interface Configuration” of Comware V3 Operation
Manual – System Management.
Example
# Send messages to the console interface.

<H3C> send con 0
Enter message, end with CTRL+Z or Enter; abort with CTRL+C:
Hello,good morning!
Send message? [Y/N]
5.1.24 set authentication password
Syntax
set authentication password { simple | cipher } password

undo set authentication password
View
User interface view
Parameter
simple: Plain text password.

cipher: Encrypted password.
password: If the password format is set to simple, the password argument must be in
plain text. If it is set to cipher, password can be either in ciphertext or in plain text
depending on what has been input. A plain text password can be a string of no more
than 16 consecutive characters, 1234567 for example. An encrypted password,
however, must comprise 24 characters and in ciphertext, _(TT8F]Y\5SQ=^Q`MAF4<1!!
for example.
Description
Use the set authentication password command to set a local authentication

password.
5-19
Use the undo set authentication password command to remove the local
authentication password.
Regardless of whether the password format is set to plain text or ciphertext, a user
must input plain text password at authentication time.
When configuring a password, you must specify its format either to simple or to cipher
to save it in plain text or ciphertext. In the latter case, the password is displayed in
ciphertext regardless of whether the password you entered is in plain text or in
ciphertext.
By default, Telnet users must provide passwords at login, that is, the
authentication-mode password command applies. If no password is configured, the
following information appears:
Login password has not been set !
Related command: authentication-mode.
Example
# Set the local authentication password for the user interfaces VTYs 0 through 4 to h3c.
[H3C-ui-vty0-4] authentication-mode password
[H3C-ui-vty0-4] set authentication password simple h3c
5.1.25 shell
Syntax
shell
undo shell
View
User interface view
Parameter
None
Description
Use the shell command to enable terminal services on the user interface.
Use the undo shell command to cancel the current setting.
If you want to enable telnet redirect, you must configure this command.
By default, terminal services are enabled on all user interfaces.
The following are the restrictions on the use of the undo shell command:
z You cannot execute the command on the console port.
5-20
z When the AUX port on your H3C functions as the console port, you cannot
execute the command on it.
z These restrictions do not apply to other types of user interfaces.
Example
# Disable terminal services on the VTYs 0 through 4.

[H3C-ui-vty0-4] undo shell
# The following information appears when a Telnet terminal logs in:

The connection was closed by the remote host!
5.1.26 shell priority high
Syntax
shell priority high

undo shell priority high
View
System view
Parameter
None
Description
Use the shell priority high command to set command execution first.
Use the undo shell priority high command to remove command execution first.
The possessing rate of the CPU of a H3C exceeding 50% may result in the low reaction
speed on the Console interface because the system defaults to give higher priority to
data forwarding. Here you can use the command to make the system process
command executions first.
By default, shell priority high is disabled.
Example
# Set command execution first.

[H3C] shell priority high
5.1.27 speed
Syntax
speed speed-value
5-21
undo speed
View
User interface view
Parameter
speed-value: Transmission rate in bps.
Description
Use the speed command to set the transmission rate on the user interface.
Use the undo speed command to restore the default, or 9600 bps.
Only when the serial interface works in asynchronous flow mode can the configuration
be effective.
The transmission rates available with asynchronous serial interfaces include:
z 300 bps
z 600 bps
z 1200 bps
z 2400 bps
z 4800 bps
z 9600 bps
z 19200 bps
z 38400 bps
z 57600 bps
z 115200 bps
Example
# Set the transmission rate on the user interface to 19200 bps.

[H3C-ui-aux0] speed 19200
5.1.28 stopbits
Syntax
stopbits { 1.5 | 1 | 2 }
undo stopbits
View
User interface view
Parameter
1.5: 1.5 stop bits.
5-22
1: 1 stop bit.
2: 2 stop bits.
Description
Use the stopbits command to set the stop bits on the user interface.
Use the undo stopbits command to restore the default, or one stop bit.
Only when the serial interface works in asynchronous flow mode can the configuration
be effective.
Example
# Use 1.5 stop bits on the user interface.

[H3C-ui-vty0] stopbits 1.5
5.1.29 terminal type
Syntax
terminal type { ansi | vt100 }

undo terminal type
View
User interface view
Parameter
ansi: Sets the terminal type to ANSI.

vt100: Sets the terminal type to VT100.
Description
Use the terminal type command to set the terminal type.

Use the undo terminal type command to restore to the default type.
Currently, two terminal types are supported: ANSI and VT100.
By default, the terminal type is ANSI.
Example
# Set the terminal type to VT100.

[H3C-ui-vty0] terminal type vt100
5.1.30 user privilege
Syntax
user privilege level level
5-23
undo user privilege level
View
User interface view
Parameter
level: Command level in the range 0 to 3.
Description
Use the user privilege command to configure the command level that the login users
on the current user interface can access.
Use the undo user privilege command to cancel the current setting.
By default, the default command level is three for the console user interface and zero
for other user interfaces.
When a user logs onto the H3C from a user interface, the command level that the user
can access depends on two points. One is the command level that the user itself can
access, the other is the command level assigned to this user interface. If the two levels
are different, the former is taken. For example, the command level of the VTY 0 user
interface is two; however, user 007 has the right to access command level 3. If 007 logs
in from VTY 0 user interface, he can access commands at level 3 and lower.
Example
# Set the command level that the users logging in from VTY 0 to two.
[H3C-ui-vty0] user privilege level 2
# After the user telnets to the H3C from VTY 0, the terminal displays:
<H3C>
5.1.31 user-interface
Syntax
user-interface [ type-keyword ] number [ ending-number ]
View
System view
Parameter
type-keyword: User interface type.

number: The first user interface to be configured.
ending-number: The last user interface to be configured.
5-24
Description
Use the user-interface command to enter single-user interface view or multi-user

interface view.
You can specify a user interface view by its relative index or absolute index. In the
former case, you need also to specify the type of the user interface whereas in the latter
case you do not need to do so. For more information on the numbering rules, refer to
the section “Numbering User Interfaces” in the chapter “User Interface Configuration”
of Comware V3 Operation Manual – System Management.
Example
# Enter the view of the console 0 user interface.

[H3C-ui-console0]
# Enter the view of the VTY 0 user interface.

[H3C-ui-vty0]
# Enter the view of the user interfaces VTY 0 through VTY 3.

[H3C-ui-vty0-3]
# Enter user interface view to configure user interfaces 0 through 3. The types of the
interfaces include console, AUX and VTY. The actual user interface types however
depend on the interfaces provided by the H3C. If the H3C does not provide the AUX
port, this example configures one console user interface and three VTY user interfaces.
[H3C] user-interface 0 3
[H3C-ui0-3]
5-25
Comware V3 Chapter 6 NTP Configuration Commands
Chapter 6 NTP Configuration Commands
6.1 NTP Configuration Commands

6.1.1 debugging ntp-service
Syntax
debugging ntp-service { access | adjustment | authentication | event | filter |

packet | parameter | refclock | selection | synchronization | validity | all }
undo debugging ntp-service { adjustment | authentication | event | filter | packet |
parameter | refclock | selection | synchronization | validity | all }
View
User view
Parameter
adjustment: NTP clock adjustment debugging.

all: All NTP debugging.
authentication: NTP authentication debugging.
event: NTP event debugging.
filter: NTP filter information debugging.
packet: NTP packet debugging.
parameter: NTP clock parameter debugging.
refclock: NTP reference clock debugging.
selection: NTP clock selection debugging.
synchronization: NTP clock synchronization debugging.
validity: Validity debugging of NTP remote hosts.
Description
Use the debugging ntp-service command to enable NTP service debugging.

Use the undo debugging ntp-service command to disable NTP service debugging.
By default, all debugging is disabled.
Example
# Enable NTP authentication debugging.

<H3C> debugging ntp-service authentication
6-1
6.1.2 display ntp-service sessions
Syntax
display ntp-service sessions [ verbose ]
View
Any view
Parameter
verbose: Displays session details.
Description
Use the display ntp-service sessions command to view brief information about all
sessions maintained by the NTP at the local device.
Use the display ntp-service sessions verbose command to view details about all
sessions maintained by the NTP at the local device.
By default, the status of all sessions maintained by NTP at the local device is displayed.
Example
# Display brief information about all sessions maintained by NTP at the local device.
<H3C> display ntp-service sessions
source reference stra reach poll now offset delay disper
********************************************************************
[5]1.1.1.1 0.0.0.0 16 0 64 - 0.0 0.0 0.0
note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured
Table 6-1 Description on the fields of the display ntp-service sessions command
Field Description
source IP address of the clock source
reference ID of the reference clock

stra Stratum of the local clock
Reachability of the reference clock: 0 is reachable; 1 is
reach
unreachable
poll Interval between received/transmitted messages
now Time elapsed since the last NTP message was received
offset Offset of the local clock to the reference clock
delay Round-trip delay
6-2
Field Description
disper Clock dispersion relative to the reference clock
note: 1
source(master),2 Remark on the number enclosed by the square brackets
source(peer),3 in front of the source IP address. This number indicates
selected,4 candidate,5 type of the clock source
configured
6.1.3 display ntp-service status
Syntax
display ntp-service status
View
Any view
Parameter
None
Description
Use the display ntp-service status command to view status about the NTP service.
Example
<H3C> display ntp-service status

clock status: unsynchronized
clock stratum: 16
reference clock ID: none
nominal frequency: 100.0000 Hz
actual frequency: 100.0000 Hz
clock precision: 2^18
clock offset: 0.0000 ms
root delay: 0.00 ms
root dispersion: 0.00 ms
peer dispersion: 0.00 ms
reference time: 00:00:00.000 UTC Jan 1 1900(00000000.00000000)
Table 6-2 Description on the fields of the display ntp-service status command
Field Description
Indicates that the local system is synchronized to a
synchronized
remote NTP server or a clock source
6-3
Field Description
Indicates that the local system is not synchronized to any
unsynchronized
remote NTP server.
stratum The NTP stratum of the local system.
If the local system is synchronized to a remote NTP server
reference or a clock source, it indicates the address of the remote
server or clock source ID.
Nominal frequency of the hardware clock in the local
nominal freq
system.
Actual frequency of the hardware clock in the local
actual freq
system.
precision Precision of the local system clock
reference time Reference timestamp
offset Offset of the NTP server relative to the local clock
root delay Total roundtrip delay to the master reference clock
root dispersion Dispersion relative to the master reference clock

peer dispersion Dispersion relative to the remote NTP server
6.1.4 display ntp-service trace
Syntax
display ntp-service trace
View
Any view
Parameter
None
Description
Use the display ntp-service trace command to view the summary about each NTP
time server from the local device back to the reference clock source.
This command draws a picture of the NTP servers on the time synchronization path
from the local device to the reference clock source.
Example
<H3C> display ntp-service trace

server4: stratum 4, offset 0.0019529, synch distance 0.144135
6-4

server1: stratum 1, offset 0.0019298, synch distance 0.011993 refid 'GPS
Reciever'
The output displays the synchronization path from server 4 to its reference clock source,
where server 4 synchronizes to server 3, server 3 to server 2, server 2 to server 1, and
server 1 to the reference clock source GPS Receiver.
6.1.5 ntp-service access
Syntax
ntp-service access { query | synchronization | server | peer } acl-number

undo ntp-service access { query | synchronization | server | peer }
View
System view
Parameter
query: Query right.

synchronization: access to the server is permitted.
server: Both access to the server and query are allowed.
peer: Full access right.
acl-number: IP ACL number in the range 2000 to 2999.
Description
Use the ntp-service access command to control access to the NTP service on the
local device.
Use the undo ntp-service access command to cancel the limit on the access right.
By default, no access right is configured.
You can control access to the NTP service on the local device with this command. Each
time the system receives a request, it compares the request against the access control
restrictions from least to maximum: peer, server, synchronization, query.
For protection more secure, you need to configure identification authentication.
Example
# Enable the peer in ACL 76 to perform time request, query control and time
synchronization on the local device.
[H3C] ntp-service access peer 76
# Enable the peer in ACL 28 to perform time request, query control on the local device.
[H3C] ntp-service access server 28
6-5
6.1.6 ntp-service authentication enable
Syntax
ntp-service authentication enable

undo ntp-service authentication enable
View
System view
Parameter
None
Description
Use the ntp-service authentication enable command to enable NTP service ID

authentication.
Use the undo ntp-service authentication enable command to disable NTP service ID
authentication.
By default, ID authentication is disabled.
Example
# Enable NTP service ID authentication.

[H3C] ntp-service authentication enable
6.1.7 ntp-service authentication-keyid
Syntax
ntp-service authentication-keyid number authentication-mode md5 value

undo ntp-service authentication-keyid number
View
System view
Parameter
number: Key ID in the range 1 to 4294967295.

value: The key, which comprises 1 to 32 ASCII characters.
Description
Use the ntp-service authentication-keyid command to set an NTP authentication

key.
6-6
Use the undo ntp-service authentication-keyid command to cancel the NTP

authentication key.
By default, no authentication key is configured.
This command only supports MD5 authentication.
Example
# Set MD5 ID authentication key: the key ID number is 10 and the key is BetterKey.
[H3C] ntp-service authentication-keyid 10 authentication-mode md5 BetterKey
6.1.8 ntp-service broadcast-client
Syntax
ntp-service broadcast-client
undo ntp-service broadcast-client
View
Interface view
Parameter
None
Description
Use the ntp-service broadcast-client command to configure NTP broadcast client

mode.
Use the undo ntp-service broadcast-client command to cancel NTP broadcast client
mode.
By default, NTP broadcast client service is not configured.
This command specifies the interface to receive NTP broadcast packets. Operating in
broadcast client mode, the device listens to broadcast packets from the server. When
receiving the first broadcast packet, it first enters a transient client/server model to
exchange messages with the remote server in order to estimate network delay. Then it
enters the client mode to listen to the broadcast packets and synchronizes the local
clock according to the received broadcast packets.
Example
# Enable the interface Ethernet 1/0/1 to receive NTP broadcast packets.

[H3C-Ethernet1/0/1] ntp-service broadcast-client
6-7
6.1.9 ntp-service broadcast-server
Syntax
ntp-service broadcast-server [ authentication-keyid keyid | version number ] *

undo ntp-service broadcast-server
View
Interface view
Parameter
authentication-keyid: Specifies an ID authentication key.

keyid: Key ID number used when transmitting messages to broadcast clients. It is in the
range 1 to 4294967295.
version: Specifies an NTP version.
number: NTP version in the range 1 to 3.
Description
Use the ntp-service broadcast-server command to configure NTP broadcast server

mode.
Use the undo ntp-service broadcast-server command to cancel NTP broadcast
server mode.
By default, broadcast service is not configured and NTP version 3 is used.
This command specifies the interface to transmit NTP broadcast packets. In broadcast
server mode, the local device operates as a broadcast server to transmit broadcast
messages periodically to the broadcast clients.
Example
# Specify Ethernet 1/0/0 to transmit NTP broadcast packets, use the key numbered four
for encryption, and set NTP version number to three.
[H3C-Ethernet1/0/0] ntp-service broadcast-server authentication-key 4
version 3
6.1.10 ntp-service max-dynamic-sessions
Syntax
ntp-service max-dynamic-sessions number

undo ntp-service max-dynamic-sessions
6-8
View
System view
Parameter
number: Number of sessions allowed to be established locally. It is in the range 0 to

100.
Description
Use the ntp-service max-dynamic-sessions command to set the number of sessions

allowed by the local device.
Use the undo ntp-service max-dynamic-sessions command to restore the default,
or 100.
Example
# Set the number of sessions allowed by the local device to 50.

[H3C] ntp-service max-dynamic-sessions 50
6.1.11 ntp-service multicast-client
Syntax
ntp-service multicast-client [ X.X.X.X ]

undo ntp-service multicast-client [ X.X.X.X ]
View
Interface view
Parameter
X.X.X.X: Multicast IP address, or a class D address.
Description
Use the ntp-service multicast-client command to configure NTP multicast client

mode.
Use the undo ntp-service multicast-client command to cancel NTP multicast client
mode.
By default, multicast client service is not configured and X.X.X.X is 224.0.1.1.
This command specifies the interface to receive NTP multicast packets. Operating in
multicast client mode, the local device listens to multicast packets from the server.
When receiving the first multicast packet, the local device first enters a transient
client/server model to exchange messages with the remote server in order to estimate
6-9
network delay. Then it enters multicast client mode to listen to the multicast packets and
synchronizes the local clock according to the incoming multicast packets.
Example
# Configure Ethernet 1/0/0 to receive NTP multicast packets. The multicast address
corresponding to the multicast packets is 224.0.1.1.
[H3C-Ethernet1/0/0] ntp-service multicast-client 224.0.1.1
6.1.12 ntp-service multicast-server
Syntax
ntp-service multicast-server [ X.X.X.X ] [ authentication-keyid keyid | ttl ttl-number |

version number ] *
undo ntp-service multicast-server [ X.X.X.X ]
View
Interface view
Parameter
X.X.X.X: Multicast IP address, a class D address. The default address is 224.0.1.1.

authentication-keyid: Specifies the ID authentication key.
keyid: Key ID used when transmitting messages to the multicast clients. It is in the
range 1 to 4294967295.
ttl: Lifetime of multicast packets.
ttl-number: Lifetime of multicast packets, in the range 1 to 255.
version: Specifies an NTP version.
number: NTP version number in the range 1 to 3.
Description
Use the ntp-service multicast-server command to configure NTP multicast server

mode.
Use the undo ntp-service multicast-server command to cancel NTP multicast server
mode.
By default, multicast service is not configured, the IP address is 224.0.1.1 and NTP
version 3 is used.
This command specifies the interface to transmit NTP multicast packets. In multicast
server mode, the local device operates as a multicast server to transmit multicast
messages periodically to the multicast clients.
6-10
Example
# Configure Ethernet 1/0/0 to transmit NTP multicast messages. Set the multicast
address to 224.0.1.1, encryption key ID to four and NTP version to three.
[H3C-Ethernet1/0/0] ntp-service multicast-server 224.0.1.1
authentication-keyid 4 version 3
6.1.13 ntp-service refclock-master
Syntax
ntp-service refclock-master [ X.X.X.X ] [ layers-number ]

undo ntp-service refclock-master [ X.X.X.X ]
View
System view
Parameter
X.X.X.X: IP address of the reference clock 127.127.1.u, where u is an integer in the

range 0 to 3.
layers-number: Specifies the stratum of the local clock. It is in the range 1 to 15.
Description
Use the ntp-service refclock-master command to set the local clock as the NTP
master clock to provide synchronization source.
Use the undo ntp-service refclock-master command to remove the setting of the
NTP master clock.
By default, the IP address of reference clock is not specified. In this case, the local
clock is the NTP master clock.
You may set the stratum of the NTP master clock in this command.
By default, the stratum of the local clock is eight.
Example
# Use the local device as the NTP master clock to provide synchronization source for
other peers. Set layers-number to three.
[H3C] ntp-service refclock-master 3
6.1.14 ntp-service reliable authentication-keyid
Syntax
ntp-service reliable authentication-keyid number
6-11
undo ntp-service reliable authentication-keyid number
View
System view
Parameter
number: Key ID in the range 1 to 4294967295.
Description
Use the ntp-service reliable authentication-keyid command to specify a reliable key.

Use the undo ntp-service reliable authentication-keyid command to cancel the
setting.
By default, no reliable authentication key is set.
When ID authentication is enabled, you can use this command to specify that one or
more keys are reliable. The client only synchronizes to the server that provides the
reliable key.
Example
# Enable ID authentication of NTP. Adopt MD5 encryption, and specify the key ID to 37
and the key to BetterKey. Specify the key to be reliable.
[H3C] ntp-service authentication enable
[H3C] ntp-service authentication-keyid 37 authentication-mode md5 BetterKey
[H3C] ntp-service reliable authentication-keyid 37
6.1.15 ntp-service source-interface
Syntax
ntp-service source-interface interface-type interface-number

undo ntp-service source-interface
View
System view
Parameter
Description
Use the ntp-service source-interface command to specify an interface for the local
end to transmit NTP messages.
Use the undo ntp-service source-interface command to cancel the setting.
6-12
Normally, the source IP address of an NTP message is the address of its output
interface. However, you may use this command to specify the source IP address for all
the NTP messages to be transmitted. The replies to these messages, as a result, use
that address as their destination address.
Example
# Use the IP address of interface Ethernet 1/0/0 as the source address of all the NTP
messages to be transmitted.
[H3C] ntp-service source-interface ethernet 1/0/0
6.1.16 ntp-service unicast-peer
Syntax
ntp-service unicast-peer [ vpn-instance vpn-instance-name ] {X.X.X.X |

server-name } [ version number | authentication-key keyid | source-interface
interface-type interface-number | priority ] *
undo ntp-service unicast-peer [ vpn-instance vpn-instance-name ] { X.X.X.X |
server-name }
View
System view
Parameter
vpn-instance vpn-instance-name: Specifies a VPN instance, through which the H3C

can synchronize to the remote server and vice versa.
X.X.X.X: IP address of the remote server.
server-name: Remote server name.
version: NTP version number.
number: NTP version number in the range 1 to 3.
keyid: Key ID in the range 1 to 4294967295. It is used when transmitting messages to
the remote server.
source-interface: Specifies an interface.
interface-type: Specifies an interface along with interface-number.
interface-number: Specifies an interface along with interface-type. The IP address of
this interface is the source address in the NTP messages to be transmitted.
priority: Specifies the server as the one always preferred.
6-13
Description
Use the ntp-service unicast-peer command to configure NTP peer mode.

Use the undo ntp-service unicast-peer command to cancel the setting.
By default, NTP version 3 is used, ID authentication is not configured and the server is
not the preferred one.
This command sets the remote server specified by X.X.X.X as the peer of the local
device, while the local device is operating in symmetric active mode. X.X.X.X is a host
address and cannot be the address of the broadcast, multicast or reference clock. In
this configuration, the local device and the remote server can synchronize to each
other.
Example
# Allow the local device and its peer at 128.108.22.44 to synchronize to each other.
Specify NTP version to three and use the IP address of Ethernet 1/0/0 as the source IP
address of the NTP messages.
[H3C] ntp-service unicast-peer 128.108.22.44 version 3 source-interface
ethernet 1/0/0
6.1.17 ntp-service unicast-server
Syntax
ntp-service unicast-server [ vpn-instance vpn-instance-name ] {X.X.X.X |

server-name } [ version number | authentication-keyid keyid | source-interface
interface-type interface-number | priority ] *
undo ntp-service unicast-server [X.X.X.X | server-name ]
View
System view
Parameter
vpn-instance vpn-instance-name: Specifies a VPN instance, through which, the local

device can synchronize to the remote server, but not the vice versa.
X.X.X.X: IP address of the remote server.
server-name: Remote server name.
version: NTP version number.
number: NTP version number in the range of 1 to 3.
keyid: Key ID in the range 1 to 4294967295. It is used when transmitting messages to
the remote server.
6-14
source-interface: Specifies an interface.

interface-type: Specifies an interface along with interface-number.
interface-number: Specifies an interface along with interface-type. The IP address of
this interface is the source address in the NTP messages to be transmitted.
priority: Specifies the server as the preferred one.
Description
Use the ntp-service unicast-server command to configure NTP server mode.

Use the undo ntp-service unicast-server command to cancel the setting.
By default, NTP version 3 is used, ID authentication is not configured and the server is
not the preferred one.
This command sets the remote server specified by X.X.X.X or server-name as the local
time server. The X.X.X.X is a host address and cannot be the IP address of the
broadcast, multicast or reference clock. In this configuration, the local device can
synchronize to the remote server but not the vice versa.
Example
# Configure the local device to synchronize to the server at 128.108.22.44. NTP version
3 is used.
[H3C] ntp-service unicast-server 128.108.22.44 version 3
6-15
Comware V3 Chapter 7 SNMP Configuration Commands
Chapter 7 SNMP Configuration Commands
7.1 SNMP Configuration Commands

7.1.1 debugging snmp-agent
Syntax
debugging snmp-agent { header | packet | process | trap }

undo debugging snmp-agent { header | packet | process | trap }
View
User view
Parameter
header: Enables header debugging.

process: Enables process debugging.
trap: Enables trap debugging.
Description
Use the debugging snmp-agent command to enable SNMP agent debugging and
specify the information to be output.
Use the undo debugging snmp-agent command to disable SNMP agent debugging.
By default, SNMP agent debugging is disabled.
Example
# Enable header debugging of the SNMP agent.

<H3C> debugging snmp-agent header
7.1.2 display snmp-agent
Syntax
display snmp-agent { local-engineid | remote-engineid }
View
Any view
7-1
Parameter
local-engineid: Engine ID of the local SNMP entity.

remote-engineid: Engine ID of the remote SNMP entity.
Description
Use the display snmp-agent command to view the engine ID of the local or remote
SNMP entity.
Within an administrative domain, each SNMP engine ID uniquely identifies an SNMP
engine and thus the associated SNMP entity. SNMP engines are an indispensable part
of SNMP entities, completing functions such as message dispatching, processing,
authentication, and access control.
Example
# Display the engine ID of the local device.

<H3C> display snmp-agent local-engineid
SNMP local EngineID: 000007DB7F0000013859
7.1.3 display snmp-agent community
Syntax
display snmp-agent community [ read | write ]
View
Any view
Parameter
read: Displays information on the read-only community.

write: Displays information on the read-write community.
Description
Use the display snmp-agent community command to view information on the

configured communities of SNMPv1 or SNMPv2.
Example
# Display information on the configured communities.

<H3C> display snmp-agent community
Community name:8040zlz
Group name:8040zlz
Storage-type: nonVolatile
Community name:8040core
7-2
Group name:8040core
7.1.4 display snmp-agent group
Syntax
display snmp-agent group [ group-name ]
View
Any view
Parameter
group-name: Specifies the group name of the SNMP information to be displayed, in the
range 1 to 32 bytes.
Description
Use the display snmp-agent group command to view information about the specified
or all user security model (USM) based groups, including group name, security model,
storage type.
Example
# Display SNMP groups and their security model.

<H3C> display snmp-agent group
Group name: v3r2
Security model: v3 noAuthnoPriv
Readview: ViewDefault
Writeview: <no specified>
Notifyview :<no specified>
The following table describes the output fields:
Table 7-1 Description on the fields of the display snmp-agent group command
Field Description
Groupname SNMP group name corresponding to the user
Security model Security model of SNMP
Readview Name of the read-only MIB view corresponding to the group
Writeview Name of the write MIB view corresponding to the group
Notifyview Name of the notify MIB view corresponding to the group
Storage-type Storage type
7-3
7.1.5 display snmp-agent mib-view
Syntax
display snmp-agent mib-view [ exclude | include | viewname view-name ]
View
Any view
Parameter
exclude: Excludes the SNMP MIB view attributes displayed and set.
include: Includes the SNMP MIB view attributes displayed and set.
viewname: Specifies the name of the view to be displayed.
Description
Use the display snmp-agent mib-view command to view the configured MIB views.
Example
# Display the configured MIB views.

<H3C> display snmp-agent mib-view
View name:ViewDefault
MIB Subtree:internet
Subtree mask:
View Type:included
View status:active
MIB Subtree:snmpUsmMIB
Subtree mask:
View Type:excluded
View status:active
MIB Subtree:snmpVacmMIB
Subtree mask:
View Type:excluded
View status:active
7-4
MIB Subtree:snmpModules.18
Subtree mask:
View Type:excluded
View status:active
The following table describes the output fields.
Table 7-2 Description on the fields of the display snmp-agent mib-view command
Field Description
View name View name
MIB Subtree MIB subtree
Subtree mask MIB subtree mask
Storage-type Storage type
Indicates that the access to a MIB object is
ViewType: Included/excluded
allowed or prohibited.
Active Indicates the state of lines in the table.
7.1.6 display snmp-agent statistics
Syntax
display snmp-agent statistics
View
Any view
Parameter
None
Description
Use the display snmp-agent statistics command to view the state and statistics
about SNMP.
Example
# Check the statistics about SNMP communication.

<H3C> display snmp-agent statistics
0 Messages delivered to the SNMP entity
0 Messages which were for an unsupported version
0 Messages which used a SNMP community name not known
0 Messages which represented an illegal operation for the community supplied
7-5
0 ASN.1 or BER errors in the process of decoding

0 Messages passed from the SNMP entity
0 SNMP PDUs which had badValue error-status
0 SNMP PDUs which had genErr error-status
0 SNMP PDUs which had noSuchName error-status
0 SNMP PDUs which had tooBig error-status (Maximum packet size 500)
0 MIB objects retrieved successfully
0 MIB objects altered successfully
0 GetRequest-PDU accepted and processed
0 GetNextRequest-PDU accepted and processed
0 GetBulkRequest-PDU accepted and processed
0 GetResponse-PDU accepted and processed
0 SetRequest-PDU accepted and processed
0 Trap PDUs accepted and processed
Table 7-3 Description on the fields of the display snmp-agent statistics command
Field Description
0 Messages delivered to the SNMP Number of messages transmitted to the
entity SNMP entity is 0
0 Messages which were for an Number of messages with unsupported
unsupported version version is 0
0 Messages which used a SNMP Number of messages with unknown
community name not known SNMP community name is 0
0 Messages which represented an
Number of messages returned
illegal operation for the community
indicating illegal operation is 0
supplied
0 ASN.1 or BER errors in the process of Number of ASN.1 or BER error occurred
decoding during decoding is 0
0 Messages passed from the SNMP Number of messages transmitted by the
entity SNMP entity is 0
0 SNMP PDUs which had badValue Number of SNMP PDUs with badValue
error-status error is 0
0 SNMP PDUs which had genErr Number of SNMP PDUs with genErr
error-status error is 0
0 SNMP PDUs which had noSuchName Number of SNMP PDUs with
error-status noSuchName error is 0
Number of SNMP PDUs with tooBig
0 SNMP PDUs which had tooBig
error is 0 (maximum packet size is 500
error-status (Maximum packet size 500)
bytes)
0 MIB objects retrieved successfully Number of retrieved MIB objects is 0
0 MIB objects altered successfully Number of altered MIB objects is 0
7-6
Field Description
0 GetRequest-PDU accepted and Number of GetRequest PDUs being
processed received and processed is 0
0 GetNextRequest-PDU accepted and Number of GetNextRequest PDUs being
0 GetBulkRequest-PDU accepted and Number of GetBulkRequest PDUs being
0 GetResponse-PDU accepted and Number of GetResponse PDUs being
0 SetRequest-PDU accepted and Number of setRequest PDUs being
Number of trap PDUs being received
0 Trap PDUs accepted and processed
and processed is 0
7.1.7 display snmp-agent sys-info
Syntax
display snmp-agent sys-info [ contact | location | version ]*
View
Any view
Parameter
contact: Displays the contact information of this node.

location: Displays the physical location information of this node.
version: Displays the SNMP version running in this agent.
Description
Use the display snmp-agent sys-info command to view the system information of this
SNMP device.
Example
# Display the system information.

<H3C> display snmp-agent sys-info
The contact person for this managed node:
H3C Hangzhou China
The physical location of this node:
Hangzhou China
SNMP version running in the system:
7-7
SNMPv3
Table 7-4 Description on the fields of the display snmp-agent sys-info command
Field Description
The contact person for this managed node Contact person for this device
The physical location of this node: Physical location for this device
SNMP version running in the system: SNMP version in use
7.1.8 display snmp-agent trap-list
Syntax
display snmp-agent trap-list
View
Any view
Parameter
None
Description
Use the display snmp-agent trap-list command to display whether trap sending is
enabled on each module.
Related command: snmp-agent trap enable.
Example
# Display whether trap sending is enabled on each module.

[H3C] display snmp-agent trap-list
bgp trap enable
configuration trap enable
flash trap enable
ldp trap enable
lsp trap enable
ospf trap enable
standard trap enable
vrrp trap enable
system trap disable
Enable traps :8; Disable traps 1
7-8
The command output shows that trap sending is enabled on all modules other than the
system module.
7.1.9 display snmp-agent usm-user
Syntax
display snmp-agent usm-user [ engineid engineid | username user-name | group

group-name ] *
View
Any view
Parameter
engineid: Displays information about the SNMPv3 users with the specified engine ID.
engineid-string: Character string of the engine ID.
username: Displays information about the specified SNMPv3 user.
user-name: User name, in the range 1 to 32 bytes.
group: Displays information about the users in the specified SNMP group.
group-name: Group name, in the range 1 to 32 bytes.
Description
Use the display snmp-agent usm-user command to view information about the
specified or all SNMP users.
SNMP users are users that remotely execute SNMP management operation.
Example
# Display information about all current users.

<H3C> display snmp-agent usm-user
User name: authuser
Group name: 1
Engine ID: 8000007DB20000000C025808 active
UserStatus: active
The following table describes the output fields.
Table 7-5 Description on the fields of the display snmp-agent usm-user command
Field Description
User name The character string identifies the SNMP user.
Group name Name of the group to which the SNMP user belongs
7-9
Field Description
Engine ID The character string identifies the SNMP device.
Active Indicates the state of the SNMP user.
Storage-type Storage type of SNMP information
UserStatus State of the SNMP user
7.1.10 snmp-agent
Syntax
snmp-agent
undo snmp-agent
View
System view
Parameter
None
Description
Use the snmp-agent command to enable SNMP agent.

Use the undo snmp-agent command to disable SNMP agent.
By default, SNMP agent is disabled.
Note that you can enable SNMP agent with any snmp-agent command but not their
undo form. When SNMP agent is disabled, configuring the undo form of any SNMP
agent command is useless.
Example
# Disable the operating SNMP agent.

[H3C] undo snmp-agent
7.1.11 snmp-agent community
Syntax
snmp-agent community { read | write } community-name [ mib-view view-name | acl

acl-number ]
undo snmp-agent community community-name
7-10
View
System view
Parameter
read: Indicates that the community name has read-only access to the specified view.
write: Indicates that the community name has read-write access to the specified view.
community-name: Community string.
mib-view: MIB view that the specified community can access.
view-name: Specifies a MIB view.
acl: Applies an ACL to the community name.
acl-number: Number of the ACL, in the range 2000 to 2999.
Description
Use the snmp-agent community command to configure the read/write attribute of a

community, the MIB view that it can access, and the ACL applied to it. The configuration
overwrites the old configuration of the community, if there is any.
Use the undo snmp-agent community command to cancel the setting.
Related command: snmp-agent group, snmp-agent usm-user.
Example
# Set the community name to comaccess and grant it read-only access.

[H3C] snmp-agent community read comaccess
# Set the community name to mgr and grant it read-write access.

[H3C] snmp-agent community write mgr
# Delete the community name comaccess.

[H3C] undo snmp-agent community comaccess
7.1.12 snmp-agent group
Syntax
snmp-agent group { v1 | v2c } group-name { [ read-view read-view ] | [ write-view

write-view ] | [ notify-view notify-view ] } [ acl acl-number ]
undo snmp-agent group { v1 | v2c } group-name
snmp-agent group v3 group-name [ authentication | privacy ] { [ read-view
read-view ] | [ write-view write-view ] | [ notify-view notify-view ] } [ acl acl-number ]
undo snmp-agent group v3 group-name [ authentication | privacy ]
7-11
View
System view
Parameter
v1: V1 security model.

v2c: V2c security model.
group-name: Group name in the range 1 to 32 bytes.
authentication: Authenticates the packets without encryption.
privacy: Both authenticates and encrypts the packets.
read-view: Specifies a read-only view.
read-view: Name of the read-only view, in the range 1 to 32 bytes.
write-view: Specifies a read-write view.
write-view: Name of the read-write view, in the range 1 to 32 bytes.
notify-view: Specifies a notify view.
notify-view: Name of the notify view, in the range 1 to 32 bytes.
acl: Specifies an ACL for the SNMP group.
acl-number: Standard ACL in the range 2000 to 2999.
Description
Use the snmp-agent group command to configure a new SNMP group, or to map an
SNMP user or group to an SNMP view.
Use the undo snmp-agent group command to delete a specified SNMP group.
By default, the snmp-agent group group-name v3 command does not provide
authentication or encryption.
If no view is specified, the snmp-agent group v3 command considers ViewDefault
view as read-only by default. The rights of other views needs configuration.
The snmp-agent group { v1 | v2c } command configures the SNMP community
attribute. Its default is the same as the snmp-agent group v3 command.
Related command: snmp-agent mib-view, snmp-agent usm-user.
Example
# Create the SNMPv3 group named Johngroup.

[H3C] snmp-agent group v3 Johngroup
7-12
7.1.13 snmp-agent local-engineid
Syntax
snmp-agent local-engineid engineid

undo snmp-agent local-engineid
View
System view
Parameter
engineid: Engine ID string, comprising 10 to 64 hexadecimal numbers.
Description
Use the snmp-agent local-engineid command to configure an engine ID for the local
SNMP entity.
Use the undo snmp-agent local-engineid command to remove the current setting.
The default engine ID is enterprise number plus equipment information. Equipment
information can be an IP address, MAC address or a hexadecimal number string
defined using this command.
Related command: snmp-agent usm-user.
Example
# Set the name of the local equipment to 123456789A.

[H3C] snmp-agent local-engineid 123456789A
7.1.14 snmp-agent mib-view
Syntax
snmp-agent mib-view { included | excluded } view-name oid-tree

undo snmp-agent mib-view view-name
View
System view
Parameter
view-name: Name of the view.

oid-tree: OID MIB subtree for the MIB object subtree. It can be a character string of the
variable OID or a character string of variable name, for example, 1.4.5.3.1, system, or
1.4.5.*.*.1.
included: Includes the MIB subtree.
7-13
excluded: Excludes the MIB subtree.
Description
Use the snmp-agent mib-view command to create or update the information about a
view.
Use the undo snmp-agent mib-view command to delete the view information.
By default, the view name is ViewDefault and the OID is 1.3.6.1.
This command accepts both variable OID strings and node names.
Related command: snmp-agent group.
Example
# Create a view that includes all MIB-II objects.

[H3C] snmp-agent mib-view included mib2 1.3.6.1
7.1.15 snmp-agent packet max-size
Syntax
snmp-agent packet max-size byte-count

undo snmp-agent packet max-size
View
System view
Parameter
byte-count: Maximum length of the SNMP packets that the agent can receive/send, in
the range 484 to 17940 bytes. The default value is 1500 bytes.
Description
Use the snmp-agent packet max-size command to set the maximum length of the
SNMP packets that the agent can receive/send.
Use the undo snmp-agent packet max-size command to cancel the current setting.
Example
# Set the maximum length of SNMP packets that the agent can receive/send to 1042
bytes.
[H3C] snmp-agent packet max-size 1042
7-14
7.1.16 snmp-agent sys-info
Syntax
snmp-agent sys-info { contact sysContact | location sysLocation | version { { v1 |

v2c | v3 } * | all } }
undo snmp-agent sys-info { { contact | location }* | version { { v1 | v2c | v3 } * | all } }
View
System view
Parameter
contact: Sets the system contact.

sysContact: System contact string.
location: Sets the physical location of the node.
sysLocation: Physical location of the node.
version: Sets the SNMP version.
v1: SNMPv1.
v2c: SNMPv2c.
v3: SNMPv3.
*: Indicates to select from the three options of v1, v2c and v3, at least one and at most
all.
all: SNMPv1, SNMPv2c and SNMPv3.
Description
Use the snmp-agent sys-info command to set system information, including system
contact, physical location of the node, and SNMP version.
Use the undo snmp-agent sys-info command to cancel the current setting.
By default, the system contact is Huawei-3Com Technology Co., Ltd., system location
is Hangzhou China and the version is SNMPv3.
Related command: display snmp-agent sys-info.
Example
# Set the system contact to call Operator at 010-82882488.

[H3C] snmp-agent sys-info contact call Operator at 010-82882488
7-15
7.1.17 snmp-agent target-host
Syntax
snmp-agent target-host trap address udp-domain X.X.X.X [ udp-port port-number ]

[ vpn-instance vpn-name ] params securityname security-string [ v1 | v2c | v3
[ authentication | privacy ] ]
undo snmp-agent target-host X.X.X.X securityname security-string
View
System view
Parameter
trap: Specifies a host as the trap host.

address: Specifies the target host address in the SNMP messages to be transmitted.
udp-domain: Specifies that the transport domain of the target host is UDP based.
X.X.X.X: IP address of the host.
udp-port: Specifies the UDP port.
port-number: Specifies the port that receives traps.
vpn-instance vpn-name: Specifies VPN instance name.
params: Specifies the log host that generates SNMP messages.
securityname: Specifies an SNMPv1 or SNMPv2c community name or an SNMPv3
user name.
security-string: SNMPv1 or SNMPv2c community name, or SNMPv3 user name, in the
range 1 to 32 bytes.
v1: SNMPv1.
v2c: SNMPv2c.
v3: SNMPv3.
authentication: Authenticates packets without encryption.
privacy: Both authenticates and encrypts packets.
Description
Use the snmp-agent target-host command to set the destination that receives SNMP
notifications.
Use the undo snmp-agent target-host command to cancel the current setting.
Use the snmp-agent target-host command in conjunction with the snmp-agent trap
enable command.
7-16
The snmp-agent trap enable command enables a device to send traps. To have a
host send notifies, you need to configure the snmp-agent target-host command on it.
In an MPLS L3VPN network environment, a CE, a Quidview NMS for example, on a
private network can use SNMP to manage PEs. To this end, you must specify the VPN
instance to which the SNMP trap host belongs on PEs so these PEs can send back
SNMP messages in response to the SNMP get/set requests from the CE. If a PE has
no direct connection to the CE, you must specify a source interface for traps in addition.
Related command: snmp-agent trap enable, snmp-agent trap source, snmp-agent
trap life.
Example
# Allow the H3C to send SNMP traps to 10.1.1.1, using the community name of
comaccess.
[H3C] snmp-agent trap enable standard
[H3C] snmp-agent target-host trap address udp-domain 10.1.1.1 params
securityname comaccess
# Send SNMP traps to 10.1.1.1, using the community name of public.

[H3C] snmp-agent trap enable standard
securityname public
# Send traps to 202.38.160.6 in private network blue, using the community name of
public.
[H3C] snmp-agent target-host trap address udp-domain 202.38.160.6 udp-port
5000 vpn-instance blue params securityname public
7.1.18 snmp-agent trap enable
Syntax
snmp-agent trap enable [ trap-type [ trap-list ] ]

undo snmp-agent trap enable [ trap-type [ trap-list ] ]
View
System view
Parameter
trap-type: Specifies the trap type, or the module where traps are sent.
trap-list: Parameter list corresponding to the trap type.
7-17
Description
Use the snmp-agent trap enable command to enable the device to send traps and set
the trap and notification parameters.
Use the undo snmp-agent trap enable command to cancel the current setting.
By default, trap sending is enabled on all modules.
The snmp-agent trap enable command without any parameters specified allows the
device to send all types of SNMP traps from all the modules.
Use the snmp-agent trap enable command in conjunction with the snmp-agent
target-host command, which specifies the hosts to which the traps are sent. To send
traps, you must configure at least one snmp-agent target-host command.
The trap-type argument specifies the module where traps are sent. It can be bgp,
configuration, flash, ldp, lsp, ospf, standard, system, voice, and vrrp.
The standard traps include authentication, coldstart, linkdown, linkup, and
warmstart.
Related command: snmp-agent target-host, snmp-agent trap-source, snmp-agent
trap-timeout.
Example
# Allow the system to send SNMP authentication traps to 10.1.1.1, with the trap format
of SNMPv2c and the community name of public.
[H3C] snmp-agent trap enable standard authentication
securityname public v2c
# Allow the system to send all types of BGP traps to 10.1.1.1. Set the trap format to
SNMPv3. Authenticate the traps without encryption and set the use name to super.
[H3C] snmp-agent trap enable bgp
securityname super v3 authentication
7.1.19 snmp-agent trap life
Syntax
snmp-agent trap life seconds

undo snmp-agent trap life
View
System view
7-18
Parameter
seconds: Lifetime in seconds. It is in the range 1 to 2592000 and defaults to 120.
Description
Use the snmp-agent trap life command to set the lifetime of traps. The expired traps
are discarded without being retained or sent.
Use the undo snmp-agent trap life command to cancel the current setting.
Related command: snmp-agent trap enable, snmp-agent target-host.
Example
# Set the lifetime of traps to 60 seconds.

[H3C] snmp-agent trap life 60
7.1.20 snmp-agent trap queue-size
Syntax
snmp-agent trap queue-size size

undo snmp-agent trap queue-size
View
System view
Parameter
size: Length of the message queue, in the range 1 to 1000.
Description
Use the snmp-agent trap queue-size command to set the length of the trap queue to
the specified host.
Use the undo snmp-agent trap queue-size command to cancel the setting.
The default queue length is 100.
Related command: snmp-agent trap enable, snmp-agent target-host, snmp-agent
trap life.
Example
# Set the length of the outgoing trap queue to 200.

[H3C] snmp-agent trap queue-size 200
7-19
7.1.21 snmp-agent trap source
Syntax
snmp-agent trap source interface-type interface-number

undo snmp-agent trap source
View
System view
Parameter
Description
Use the snmp-agent trap source command to specify the source address of traps.
Use the undo snmp-agent trap source command to cancel the current setting.
The SNMP traps from a server have a trap address, regardless of out which interface
they are sent. Through trap addresses configured using this command, you can trace a
particular event.
Related command: snmp-agent trap enable, snmp-agent target-host.
Example
# Specify the IP address of Ethernet interface 1/0/0 as the source address of trap
packets.
[H3C] snmp-agent trap source ethernet 1/0/0
7.1.22 snmp-agent usm-user
Syntax
snmp-agent usm-user { v1 | v2c } user-name group-name [ acl acl-number ]

undo snmp-agent usm-user { v1 | v2c } user-name group-name
snmp-agent usm-user v3 user-name group-name [ [ authentication-mode { md5 |
sha } auth-password ] [ privacy des56 priv-password ] ] [ acl acl-number ]
undo snmp-agent usm-user v3 user-name group-name { local | engineid
engineid-string }
View
System view
Parameter
7-20
v2c: V2c security model.

user-name: User name, in the range of 1 to 32 bytes.
group-name: Name of the group to which the user is assigned. It is in the range 1 to 32
bytes.
authentication-mode: Sets the security level to authentication.
md5: Sets the authentication protocol to HMAC-MD5-96.
sha: Sets the authentication protocol to HMAC-SHA-96.
auth-password: Authentication password, a character string in the range 1 to 64 bytes.
privacy: Sets the security level to encrypt.
des56: Sets the encryption protocol to DES.
priv-password: Encryption password, a character string in the range 1 to 64 bytes.
acl: Sets the ACL applied to the access view.
acl-number: Standard ACL in the range 2000 to 2999.
local: Local entity user.
engineid: Specifies the engine ID associated with the user.
engineid-string: Engine ID string.
Description
Use the snmp-agent usm-user command to add a new user to an SNMP group.
Use the undo snmp-agent usm-user command to delete an SNMP group user.
After you configure a remote user for an agent, engine ID is needed during
authentication. If the engine ID changes after that, the user corresponding to the
original engine ID becomes invalid.
For SNMPv1 and SNMPv2c, this command adds a new community name; for SNMPv3,
it adds a new user to an SNMP group.
Related command: snmp-agent group, snmp-agent community, snmp-agent
local-engineid.
Example
# Add user John to the SNMP group of Johngroup, setting the security level to
authentication, authentication protocol to HMAC-MD5-96 and password to hello.
[H3C] snmp-agent usm-user v3 John Johngroup authentication-mode md5 hello
7-21
Comware V3 Chapter 8 BIMS Configuration Commands
Chapter 8 BIMS Configuration Commands
8.1 BIMS Configuration Commands

8.1.1 bims boot request
Syntax
bims boot request

undo bims boot request
View
System view
Description
Use the bims boot request command to enable the BIMS device to access the branch
intelligent management system (BIMS) center at startup.
Use the undo bims boot request command to disable the BIMS device to access the
BIMS center automatically at startup.
If a user forcibly disables the BIMS device to access the BIMS center at startup, when
the device is restarted, it will not send messages to BIMS server. Therefore BIMS
center cannot detect that the device is restarted and the waiting for restart message will
be displayed on the interface.
By default, the BIMS device does not access the BIMS center at startup.
Related command: bims request.
Example
# Configure the BIMS device to access the BIMS center at startup.

[H3C] bims boot request
8.1.2 bims device-id
Syntax
bims device-id string

undo bims device-id
View
System view
8-1
Parameter
string: Unique identifier of the BIMS device, up to 30 characters, among which the
characters “0 to 9”, “a to z”, “A to Z”, “-”, “_”, “@”, and “.” can be configured.
Description
Use the bims device-id command to configure the unique identifier of the BIMS device
at the BIMS center.
Use the undo bims device-id command to delete the identifier.
By default, no identifier is assigned to the BIMS device.
Related command: bims interval.
Example
# Set the unique identifier of the BIMS device at the BIMS center to
R2102311042W033000076.
[H3C] bims device-id R2102311042W033000076
8.1.3 bims enable
Syntax
bims enable
undo bims enable
View
System view
Description
Use the bims enable command to enable BIMS.

Use the undo bims enable command to disable BIMS.
By default, BIMS is not enabled.
Example
# Enable BIMS.
[H3C] bims enable
bims is enable
8.1.4 bims interval
Syntax
bims interval number
8-2
undo bims interval
View
System view
Parameter
number: Interval for accessing the BIMS center, in the range 10 to 10080 minutes.
Description
Use the bims interval command to configure the interval for accessing the BIMS
center. When the interval is set to 0, the BIMS device does not access the BIMS center
regularly.
Use the undo bims interval command to delete the interval specified for accessing the
BIMS center.
By default, no BIMS center accessing interval is set.
Example
# Set the interval for accessing the BIMS center to 120 minutes.
[H3C] bims interval 120
8.1.5 bims ip address
Syntax
bims ip address ip-address [ port portnumber ]

undo bims ip address
View
System view
Parameter
ip-address: IP address of the BIMS center.

portnumber: Port number used by the BIMS center.
Description
Use the bims ip address command to configure the IP address and port number of the
BIMS center.
Use the undo bims ip address command to delete the configuration.
By default, the IP address of the BIMS center is not configured. If you do not specify a
port number when configuring the IP address of the BIMS center, port 80 applies by
default.
8-3
Related command: bims interval.
Example
# Set the IP address and port number of the BIMS center to 129.33.72.66 and 81
respectively.
[H3C] bims ip address 129.33.72.66 port 81
8.1.6 bims request
Syntax
bims request
View
System view
Description
Use the bims request command to have the BIMS device access the BIMS center.
Related command: bims boot request.
Example
# Access the BIMS center.

[H3C] bims request
8.1.7 bims sharekey
Syntax
bims sharekey { simple | cipher } sharekey

undo bims sharekey
View
System view
Parameter
sharekey: Shared Key between the BIMS device and the BIMS center. It is 16 bits long.
simple: Displays the shared key in clear text.
cipher: Displays the shared key in ciphertext.
Description
Use the bims sharekey command to configure the shared key between the BIMS
device and the BIMS center.
8-4
Use the undo bims sharekey command to delete the shared key.
Related command: bims ip address.
Example
# Set the shared key between the BIMS device and the BIMS center to
1234567812345678. It is to be displayed in clear text.
[H3C] bims sharekey simple 1234567812345678
8.1.8 bims source ip-address
Syntax
bims source ip-address ip-address

undo bims source ip-address
View
System view
Parameter
ip-address: Source IP address in the packets sent by the BIMS device.
Description
Use the bims source ip-address command to specify a source IP address for the
packets sent by the BIMS device. It can be the IP address of a port on the H3C.
Use the undo bims source ip-address command to delete the source IP address
configured for the BIMS device.
By default, no source IP address is configured for the BIMS device.
Example
# On the BIMS device set the source IP address to 10.153.72.66.

[H3C] bims source ip-address 10.153.72.66
8.1.9 bims specify-time
Syntax
bims specify-time hh:mm yyyy/mm/dd [ [ hh:mm yyyy/mm/dd ] period numberdays ]

undo bims specify-time
View
System view
8-5
Parameter
hh:mm yyyy/mm/dd: The first and second hh:mm yyyy/mm/dd arguments respectively
specify the start time and end time for accessing the BIMS center. If only the first
argument is specified, the BIMS device accesses the BIMS center at that time once.
numberdays: Period in days for accessing the BIMS center.
Description
Use the bims specify-time command to configure the BIMS device to access the
BIMS center at the specified time and if desired, configure the device to access the
BIMS center at regular intervals from then on during a specified period.
Use the undo bims specify-time command to delete the setting.
The precision of the timer is one minute. The device will access BIMS center in one
minute after the specified time comes.
Example
# Configure the H3C to access the BIMS center at 01:01 on December 12, 2004, and
from then on, to access the BIMS center at seven-day intervals until December 12,
2005 01:01. If the current time hasn’t reached the specified start time, after the above
configuration, the router will access the BIMS center at 01:01 on December 12, 2004
and at 01:01 on December 19, 2004 after a 7*24 hours interval for the next time.
[H3C] bims specify-time 01:01 2004/12/12 01:01 2005/12/12 period 7
8.1.10 debugging bims all
Syntax
debugging bims all

undo debugging bims all
View
User view
Description
Use the debugging bims all command to enable BIMS debugging.

Use the undo debugging bims all command to disable BIMS debugging.
By default, BIMS debugging is disabled.
Related command: bims enable.
Example
# Enable BIMS debugging.

<H3C> debugging bims all
8-6
<H3C> system-view
[H3C] bims request
Now start visit the bims server .
*0.1252374 H3C BIMS/8/debug2:
The host name is:10.153.21.96, the Path is:/bims/service, Port:80
HTC_SendMessage req msg action!
[H3C]
[H3C]
*0.1253285 H3C BIMS/8/debug2:
HTC_SendMessage req msg action,ulRet = 0
*0.1253286 H3C BIMS/8/debug2:
Msgid = 2
*0.1253287 H3C BIMS/8/debug2:
The return code string is: 0
*0.1253287 H3C BIMS/8/debug2:
FileID is = 12
*0.1253288 H3C BIMS/8/debug2:
FileType is cfg
*0.1253289 H3C BIMS/8/debug2:
FileSize = 775
*0.1253289 H3C BIMS/8/debug2:
Digest = 90 1b b6 c9 2f e7 4e ec 8d 8f 5a d6 13 0d 55 3e
*0.1253290 H3C BIMS/8/debug2:
The length of the cfg file is 775
*0.1253291 H3C BIMS/8/debug2:
Come into BIMS_ExcuteDownCfg!
[H3C]
[H3C]
%FTP server has been started
[H3C]
[H3C]
%Unrecognized command found at '^' position.
[H3C]
bims is enable
Ready to save current build run info! ........
Current configuration has been saved to the device successfully.
*0.1271100 H3C BIMS/8/debug2:
Ok,success to deal with the download config file!
*0.1271101 H3C BIMS/8/debug2:
The host name is:10.153.21.96, the Path is:/bims/service, Port:80
<H3C>
*0.1271553 H3C BIMS/8/debug2:
Have send file confirm request message,ulRet = 0
8-7
*0.1271553 H3C BIMS/8/debug2:

Msgid = 6
*0.1271554 H3C BIMS/8/debug2:
The return code string is: 0
*0.1271555 H3C BIMS/8/debug2:
Parse the Xml file Ret = 0
Table 8-1 Description on the fields of the debugging bims all command
Field Description
The host name is:10.153.21.111, the The URL where the BIMS center is
Path is:/bims/service, Port:80 accessed
HTC_SendMessage req msg The H3C sent a request to the BIMS center
action,ulRet = and the returned value
Msgid = 2 Type of the message from the BIMS center
The return code string is: 0 The return code from the BIMS center
FileID is = 1 File ID delivered by the BIMS center
FileType is cfg File type delivered by the BIMS center
FileSize = 561 File size delivered by the BIMS center

Digest = 68 65 1a e2 51 3b 3d 7e b2
Digest delivered by the BIMS center
b5 49 4b 7a 83 c5 2e
The length of the cfg file is 561 Size of the parsed file
Begin to execute the commands in the
Come into BIMS_ExcuteDownCfg!
configuration file
Ok,success to deal with the
Succeed in executing the configuration file
download config file!
Have send file confirm request An acknowledgement is sent to the BIMS
message,ulRet = 0 center
Url=http://10.153.21.111/download/
Software URL is obtained
device_001_1_M8XXRAM.ARJ
Succeed in parsing the xml file delivered by
Parse the Xml file Ret = 0
BIMS center
GET
/download/device_001_2004112914
Begin to download the application software
5128_M8XXRAM.ARJ HTTP/1.0
Accept: */*
begin delete old
Begin to delete old applications
Comwaresoftware! .....
Now create the application file !.. Create the new application file
Write data to flash,please wait.... Write the new application to Flash
8-8
Comware V3 Chapter 9 RMON Configuration Commands
Chapter 9 RMON Configuration Commands
9.1 RMON Configuration Commands

9.1.1 display rmon alarm
Syntax
display rmon alarm [ alarm-entry ]
View
Any view
Parameter
alarm-entry: Alarm index.
Description
Use the display rmon alarm command to display the alarm table of remote monitoring
(RMON) or the specified alarm entry.
Related command: rmon alarm.
Example
# Display the alarm table of RMON.

<H3C> display rmon alarm
Alarm table 1 owned by H3C is VALID.
Samples absolute value : 1.3.6.1.2.1.16.1.1.1.4.1 <etherStatsOctets.1>
Sampling interval : 10(sec)
Rising threshold : 1000(linked with event 1)
Falling threshold : 100(linked with event 1)
When startup enables : risingOrFallingAlarm
Latest value : 0
Table 9-1 Description on the fields of the display rmon alarm command
Field Description
Alarm table 1 Alarm index 1
H3C Owner
The sample type of the 1.3.6.1.2.1.16.1.1.1.4.1 node
Samples absolute value
is absolute
VALID The alarm entry corresponding to the index is valid
9-1
Field Description
Sampling interval Sampling interval
Rising threshold is 1000 Rising threshold is 1000
Falling threshold is 100 Falling threshold is 100
When startup enables : Type of the first alarm, which can be rising alarm,
risingOrFallingAlarm falling alarm, or both
9.1.2 display rmon event
Syntax
display rmon event [ event-entry ]
View
Any view
Parameter
event-entry: Event index.
Description
Use the display rmon event command to display the event table of RMON or the
specified event entry.
The displayed information includes: event index, event owner, event description, action
triggered by the event (log or trap), and last time the event occurred (the elapsed time
since system initialization/startup in centiseconds.
Related command: rmon event.
Example
# Display the event table of RMON.

<H3C> display rmon event
Event table 1 owned by null is VALID.
Description: null.
Will cause log-trap when triggered, last triggered at 0days 00h:02m:27s.
Table 9-2 Description on the fields of the display rmon event command
Field Description
Event table 1 Event index 1
The event entry corresponding to the
VALID
index is valid
9-2
Field Description
The event causes log-and-trap
cause log-trap when triggered
notification when triggered
last triggered at 0days 00h:02m:27s Last time the event was triggered
9.1.3 display rmon eventlog
Syntax
display rmon eventlog [ event-entry ]
View
Any view
Parameter
event-entry: Event index.
Description
Use the display rmon eventlog command to display the log table of RMON or the log
entry for the specified event.
The displayed information includes: index and current state of the event, time the log
entry was created (the elapsed time since system initialization/startup in centiseconds),
and event description.
Example
# Display the log entry for event entry 1.

<H3C> display rmon eventlog 1
Event table 1 owned by null is VALID.
Generates eventLog 1.1 at 0days 00h:01m:39s.
Description: The 1.3.6.1.2.1.16.1.1.1.4.1 defined in alarm table 1,
less than(or =) 100 with alarm value 0. Alarm sample type is absolute.
Generates eventLog 1.2 at 0days 00h:02m:27s.
Description: The alarm formula defined in private alarm table 1,
less than(or =) 100 with alarm value 0. Alarm sample type is absolute.
Table 9-3 Description on the fields of the display rmon eventlog command
Field Description
Event table 1 Event index 1
VALID The event entry corresponding to the index is valid
9-3
Field Description
Generates eventLog 1.2
Last time the event was triggered
at 0days 00h:02m:27s
Description Event description
9.1.4 display rmon history
Syntax
display rmon history [ interface-type interface-number ]
View
Any view
Parameter
interface-type interface-number: Interface type and number.
Description
Use the display rmon history command to display the history control table of RMOM
and information about the latest sampling, such as utilization, number of errors and
total number of packets.
Related command: rmon history.
Example
# Display the history information about interface Ethernet2/0/1.

<H3C> display rmon history ethernet 2/0/1
History control entry 1 owned by null is VALID
Samples interface : Ethernet2/0/1<ifEntry.642>
Sampling interval : 10(sec) with 10 buckets max
Latest sampled values :
Dropevents :0 , octets :0
packets :0 , broadcast packets :0
multicast packets :0 , CRC alignment errors :0
undersize packets :0 , oversize packets :0
fragments :0 , jabbers :0
collisions :0 , utilization :0
9-4
Table 9-4 Description on the fields of the display rmon history command
Field Description
History control entry 1 Index of the history control entry
VALID State of history control entry 1 is valid
Samples interface Monitored interface
Sampling interval : 10(sec) Sampling every 10 seconds
buckets Number of buckets
Latest sampled values Latest sampling information
dropevents Number of drop events
Number of the received/transmitted bytes in this
octets
sample
Number of the received/transmitted packets
packet
during the sampling period
broadcastpacket Number of broadcast packets
multicastpacket Number of multicast packets

CRC alignment errors Number of the packets with CRC errors
undersize packets Number of undersize packets
oversize packets Number of oversize packets

fragments Number of the undersize packets with CRC errors
jabbers Number of the oversize packets with CRC errors
collisions Number of collisions

utilization Utilization ratio
9.1.5 display rmon prialarm
Syntax
display rmon prialarm [ prialarm-entry ]
View
Any view
Parameter
prialarm-entry: Prialarm entry index.
9-5
Description
Use the display rmon prialarm command to display information about the prialarm
table of RMON or the specified prialarm entry.
Related command: rmon prialarm.
Example
# Display information about the prialarm table of RMON.

<H3C> display rmon prialarm
Prialarm table 1 owned by null is VALID.
Samples absolute value : .1.3.6.1.2.1.16.1.1.1.4.1
Sampling interval : 10(sec)
Rising threshold : 1000(linked with event 1)
Falling threshold : 100(linked with event 1)
When startup enables : risingOrFallingAlarm
This entry will exist : forever.
Latest value : 0
Table 9-5 Description on the fields of the display rmon prialarm command
Field Description
Prialarm table 1 Index of the prialarm entry
owned by null Owner of the prialarm entry
VALID State of prialarm entry 1 is valid
Samples absolute The sample type of the

value : .1.3.6.1.2.1.16.1.1.1.4.1 1.3.6.1.2.1.16.1.1.1.4.1 node is absolute
Sampling interval : 10(sec) Sampling every 10 seconds
Rising threshold. Rising alarm is
Rising threshold : 1000 triggered when a sample value
reaches/exceeds this value
Falling threshold. Falling alarm is
Falling threshold : 100 triggered when a sample value
reaches/exceeds this value
Event index corresponding to the
linked with event 1
rising/falling alarm
When startup enables : Type of the first alarm, which can be
risingOrFallingAlarm rising alarm or falling alarm, or both
Lifetime of the entry, which can be
This entry will exist : forever
forever or span the specified period
Latest value 0 Latest sample value
9-6
9.1.6 display rmon statistics
Syntax
display rmon statistics [interface-type interface-number]
View
Any view
Parameter
Description
Use the display rmon statistics command to display the RMON statistics about the
specified or all interfaces.
The displayed information includes: number of collisions, CRC and queues, oversize
packets and undersize packets, timeout, fragments, broadcast, multicast, unicast, and
bandwidth use.
Related command: rmon statistics.
Example
# Display the RMON statistics about interface Ethernet 2/0/1.

<H3C> display rmon statistics ethernet2/0/1
Statistics entry 1 owned by monitor is VALID.
Interface : Ethernet0/0/0<ifIndex.642>
etherStatsOctets : 9760 , etherStatsPkts : 79
etherStatsBroadcastPkts : 0 , etherStatsMulticastPkts : 0
etherStatsUndersizePkts : 0 , etherStatsOversizePkts : 0
etherStatsFragments : 0 , etherStatsJabbers : 0
etherStatsCRCAlignErrors : 0 , etherStatsCollisions : 0
etherStatsDropEvents (insufficient resources): 0
Packets received according to length:
64 : 0 , 65-127 : 0 , 128-255 : 0
256-511: 0 , 512-1023: 0 , 1024-1518: 0
9.1.7 rmon alarm
Syntax
rmon alarm alarm-entry alarm-variable sa------mpling-time { delta | absolute }

rising_threshold threshold-value1 event-entry1 falling_threshold threshold-value2
event-entry2 [ owner text ]
undo rmon alarm entry-number
9-7
View
System view
Parameter
alarm-entry: Alarm index, in the range 1 to 65,535.

alarm-variable: Alarm variable, a string of 1 to 256 characters. It adopts the dotted node
object identifier (OID) format, such as 1.3.6.1.2.1.2.2.1.10 (or ifInOctets.1).
sampling-time: Sampling interval, in the range 5 to 65,535 seconds.
delta: Sets sample type to delta value.
absolute: Sets sample type to absolute value.
rising_threshold threshold-value1: Rising threshold, in the range 0 to 2,147,483,647.
event-entry1: Event index corresponding to the rising threshold, in the range 0 to
65,535.
falling_threshold threshold-value2: Falling threshold, in the range 0 to 2,147,483,647.
event-entry2: Event index corresponding to the falling threshold, in the range 0 to
65,535.
owner text: Owner of the entry, a string of 1 to 127 characters.
Description
Use the rmon alarm command to set an alarm entry. When an exception occurs, the
alarm is triggered. The alarm in turn triggers the corresponding event, which can be log,
trap, or log-and-trap.
Use the undo rmon alarm command to remove an alarm entry.
Example
# Remove alarm entry 15.

[H3C] undo rmon alarm 15
9.1.8 rmon event
Syntax
rmon event event-entry [ description string ] { log | trap trap-community | log-trap

log-trapcommunity | none } [ owner text ]
undo rmon event event-entry
View
System view
9-8
Parameter
event-entry: Event index, in the range 1 to 65,535.

description string: Event description, a string of 1 to 127 characters.
log: Sets event type to log.
trap: Sets event type to trap.
trap-community: Name of the community to which trap messages are sent.
log-trap: Sets event type to log-and-trap.
log-trapcommunity: Name of the community to which trap messages are sent.
none: Event other than log, trap, and log-and-trap.
Description
Use the rmon event command to add an event entry.

Use the undo rmon event command to remove an event entry.
The type of notification made about an event can be: log, sending a trap to the network
management station, or both. Based on the received information, the network
management system can handle the event appropriately.
Example
# Add event entry 10 to the event table and set its type to log.
[H3C] rmon event 10 log
9.1.9 rmon history
Syntax
rmon history history-control-entry buckets number interval sampling-interval [ owner

text-string ]
undo rmon history entry-number
View
Parameter
history-control-entry: History control index, in the range 1 to 65,535.

buckets number: Specifies the number of sampling actions in a sampling period.
interval sampling-interval: Sampling interval in the range 5 to 3,600 seconds.
owner text: Owner of the specified entry, a string of 1 to 127 characters.
9-9
Description
Use the rmon history command to add a history control entry.

Use the undo rmon history command to remove a history control entry.
The history control table of RMON retains data sampled in a sampling period.
By using this command, you can enable sampling on an interface, set sampling interval
and the number of buckets. After that, RMON periodically collects and saves data on
the specified interface, providing information such as utilization, number of errors, and
total number of packets for later retrieval.
Example
# Add a history control entry.

[H3C-Ethernet0/0/0] rmon history 1 buckets 10 interval 10
9.1.10 rmon prialarm
Syntax
rmon prialarm prialarm-entry prialarm-formula [ prialarm-des ] [ sampling-timer ]

[ delta | absolute | changeratio ] rising_threshold threshold-value1 event-entry1
falling_threshold threshold-value2 event-entry2 [ entrytype ] [ forever | cycle
[ cycle-period ] ] [ owner text ]
undo rmon prialarm entry-number
View
System view
Parameter
prialarm-entry: Prialarm index, in the range 1 to 65,535.

prialarm-formula: Prialarm formula, which returns a long integer. Create your prialarm
formula with caution to prevent errors caused by overflow in each calculating step of
your prialarm formula.
alarm-des: Alarm description, a string of 0 to 127 characters.
sampling-timer: Sampling interval, in the range 10 to 65,535 seconds.
delta | absolute | changeratio: Sets sample type to delta value, change ratio, or
absolute value.
threshold-value1: Rising threshold, a number greater than zero.
event-entry1: Index of the event associated with the rising threshold. It ranges from 0 to
65,535.
threshold-value2: Falling threshold, a number greater than zero.
9-10
event-entry2: Index of the event associated with the falling threshold. It ranges from 0
to 65535.
forever | cycle cycle-period: Lifetime of the prialarm entry, which can be forever or
span the specified period.
Description
Use the rmon prialarm command to add an entry to the prialarm table.
Use the undo rmon prialarm command to remove an entry from the prialarm table.
The number of prialarm entries you can create is hardware-dependent.
Example
# Remove prialarm entry 10.

[H3C] undo rmon prialarm 10
9.1.11 rmon statistics
Syntax
rmon statistics entry-number [ owner text ]

undo rmon statistics entry-number
View
Parameter
entry-number: Statistics index, in the range 1 to 65,535.

Description
Use the rmon statistics command to add a statistics entry.

Use the undo rmon statistics command to remove a statistics entry.
You can use the statistics function of RMON to collect statistics about the monitored
interface, such as collisions, CRCs and queues, undersize and oversize packets,
timeout, fragments, broadcast, multicast, unicast, use of bandwidth.
Example
# Add statistics entry 20 to the statistics table on interface Ethernet2/0/1.

[H3C-Ethernet2/0/1] rmon statistic 20 owner null
9-11
Comware V3 Chapter 10 Terminal Service Commands
Chapter 10 Terminal Service Commands
10.1 Telnet and Telnet Redirect

10.1.1 debugging telnet
Syntax
debugging telnet
undo debugging telnet
View
User view
Parameter
None
Description
Use the debugging telnet command to enable Telnet connection debugging.

Use the undo debugging telnet command to disable Telnet connection debugging.
By default, Telnet connection debugging is disabled.
Related command: telnet.
Example
# Debug Telnet connections.

<H3C> debugging telnet
10.1.2 direct listen-port
Syntax
direct listen-port port-number

undo direct listen-port
View
VTY user interface view
Parameter
port-number: Port number, an integer ranging from 3000 to 3100.
10-1
Description
Use the direct listen-port command to set the listening port for VTY.
Use the undo direct listen-port command to restore the default port number.
By default, the listening port is 23.
Example
# Configure listening port for VTY line 2 to 3000.

<H3C> system-view
[H3C] vty 2
[H3C-ui-vty2] direct listen-port 3000
10.1.3 display tcp status
Syntax
display tcp status
View
Any view
Parameter
None
Description
Use the display tcp status command to view information about the current TCP
connections on the H3C.
Compared with display users, the display tcp status command can display more
information about Telnet clients and servers.
The information that this command provides includes local address of TCP connection,
local port number, external address, external port number, and connection state.
Related command: telnet.
Example
# Display information about TCP connections.

<H3C> display tcp status
TCPCB Local Address Foreign Address State
129.102.100.142 23 129.102.001.092 ESTABLISHED
028ca414 0.0.0.0.23 0.0.0.0.0 LISTEN
The output indicates that one TCP connection is set up, where the local IP address is
129.102.100.142, local port is 23, and remote IP address is 129.102.001.92. In addition,
a local server process is listening to port 23.
10-2
10.1.4 display telnet-server source-ip
Syntax
display telnet-server source-ip
View
Any view
Parameter
None
Description
Use the display telnet-server source-ip command to display the source IP address
configured for the Telnet server.
If a source interface has been specified for the Telnet server, the IP address of the
specified for the Telnet server, 0.0.0.0 is displayed.
Example
# Display the current source IP address of the Telnet server.

<H3C> display telnet-server source-ip
10.1.5 redirect bind vpn-instance
Syntax
redirect bind vpn-instance vpn-instance-name

undo redirect bind vpn-instance
View
User interface view
Parameter
vpn-instance-name: Specifies a VPN instance.
Description
Use the redirect bind vpn-instance command to bind a VPN instance to the user
interface.
Use the undo redirect bind vpn-instance command to remove the binding.
By default, no VPN instance is bound with the user interface.
10-3
Example
# Bind user interface TTY 7 with VPN instance VPN1.

[H3C-ui-tty7] redirect bind vpn-instance vpn1
10.1.6 redirect enable
Syntax
redirect enable
undo redirect enable
View
User interface view
Parameter
None
Description
Use the redirect enable command to enable redirect on the asynchronous serial
interface.
Use the undo redirect enable command to disable redirect on the corresponding
asynchronous serial interface.
By default, the asynchronous serial interface does not support redirect.
This command is only useful for AUX and TTY interfaces.
Related command: telnet, display tcp status.
Example
# Enable redirect on user interface TTY7.

[H3C-ui-tty7] redirect enable
10.1.7 redirect listen-port
Syntax
redirect listen-port port-number

undo redirect listen-port
View
User interface view
Parameter
port-number: Number of the listening port, in the range 2000 to 50000.
10-4
Description
Use the redirect listen-port command to specify a port to listen for redirected Telnet
connections.
Use the undo redirect listen-port command to restore the default listening port.
The default number of the port that listens for redirected Telnet connections is TTY
number plus 2000.
Example
# Set the number of the port that listens for the redirected Telnet connections to 5000.
[H3C-ui-tty7] redirect listen-port
10.1.8 redirect timeout
Syntax
redirect timeout minutes

undo redirect timeout
View
User interface view
Parameter
minutes: Idle timeout in the range 30 to 86400 seconds. It defaults to 360 seconds.
Description
Use the redirect timeout command to specify the amount of time that a redirected
Telnet connection can stay idle. After that, the connection is disconnected.
Use the undo redirect timeout command to allow the system to maintain an
always-on redirected telnet connection.
Example
# Set the idle timeout for the redirected telnet connection to 200 seconds.
[H3C-ui-tty7] redirect timeout 200
10.1.9 redirect return-deal from-telnet
Syntax
redirect return-deal from-telnet

undo redirect return-deal from-telnet
10-5
View
User interface view
Parameter
None
Description
Use the redirect return-deal from-telnet command to have the H3C that redirects
Telnet connection substitute 0x0d for 0x0d 0x0a and 0x0d 0x00, the carriage returns
received from the Telnet client.
Use the undo redirect return-deal from-telnet command to disable the H3C that
redirects Telnet connection to process carriage returns.
By default, carriage returns are not processed.
Example
# Enable the H3C that redirects Telnet connection to process the carriage returns
received from the Telnet client.
[H3C-ui-tty7] redirect return-deal from-telnet
10.1.10 redirect return-deal from-terminal
Syntax
redirect return-deal from-terminal

undo redirect return-deal from-terminal
View
User interface view
Parameter
None
Description
Use the redirect return-deal from-terminal command to have the H3C that redirects
Telnet connection substitute 0x0d for 0x0d 0x0a and 0x0d 0x00, the carriage returns
received from the terminal (a PC connected to the console port for example).
Use the undo redirect return-deal from-terminal command to disable the H3C that
redirects Telnet connection to process the carriage returns.
By default, carriage returns are not processed.
10-6
Example
# Enable the H3C that redirects Telnet connection to process the carriage returns
received from the terminal.
[H3C-ui-tty7] redirect return-deal from-terminal
10.1.11 redirect refuse-negotiation
Syntax
redirect refuse-negotiation
undo redirect refuse-negotiation
View
User interface view
Parameter
None
Description
Use the redirect refuse-negotiation command to disable Telnet option negotiation

during setup of redirected Telnet connection.
Use the undo redirect refuse-negotiation command to enable Telnet option
negotiation during setup of redirected Telnet connection.
By default, Telnet option negotiation is enabled.
Example
# Disable Telnet option negotiation during setup of redirected Telnet connection.

[H3C-ui-tty7] redirect refuse-negotiation
10.1.12 redirect disconnect
Syntax
redirect disconnect
View
User interface view
Parameter
None
10-7
Description
Use the redirect disconnect command to disconnect a redirected telnet connection

manually.
Example
# Manually disconnect a redirected Telnet connection.

[H3C-ui-tty7] redirect disconnect
10.1.13 telnet
Syntax
telnet [ vpn-instance vpn-instance-name ] host-ip-address [ service-port ]
View
User view
Parameter
vpn-instance vpn-instance-name: Sets the VPN instance name of MPLS VPN.

host-ip-address: Host name or IP address of the remote device, in dotted decimal
format.
service-port: Number of the TCP port where the remote device provides the Telnet
service, in the range 0 to 65535.
Description
Use the telnet command to telnet from this H3C to another device.
By default, if the service-port is not specified, the Telnet port number is 23.
By executing the telnet command, you can telnet from this H3C to another device to
manage it.
Related command: display tcp status.
Example
# Telnet from H3C to H3C 2 at 129.102.0.1.

<H3C> telnet 129.102.0.1
Trying 129.102.0.1...
Service port is 23
Connected to 129.102.0.1
<H3C2>
10-8
10.1.14 telnet-server source-interface
Syntax
telnet-server source-interface interface-type interface-number

undo telnet-server source-interface
View
System view
Parameter
Description
Use the ftp-server source-interface command to specify a source interface, which

must be an existing local interface, for the Telnet server. After that, the IP address of the
specified interface is used as the source IP address in each packet sent by the Telnet
server.
Use the undo ftp-server source-interface command to delete the source interface
specified for the Telnet server. After that, the source IP address in each packet sent by
the Telnet server is that of the outgoing interface where the packet is sent out.
By default, the source IP address in each packet sent by the Telnet server is the IP
Note:
You may specify a source IP address for the packets sent by the Telnet server with the
telnet-server source-interface command or with the telnet-server source-ip
command. If both commands are configured, the one configured later overrides.
Example
# Set the source interface for the Telnet server to ethernet0/0/0.

[H3C] telnet-server source-interface Ethernet 0/0/0
10.1.15 telnet-server source-ip
Syntax
telnet-server source-ip ip-address

undo telnet-server source-ip
10-9
View
System view
Parameter
Description
Use the telnet-server source-ip command to specify a source IP address for the
packets sent by the Telnet server. This IP address must be a local IP address.
Use the undo telnet-server source-ip command to delete the source IP address
specified for the Telnet server. After that, the source IP address of each packet sent by
the Telnet server is the IP address of the interface where the packet is sent out.
By default, the source IP address in each packet sent by the Telnet server is the IP
Note:
Example
# Use 192.168.0.1 as the source IP address in the packets sent by the Telnet server.
[H3C] telnet-server source-ip 192.168.0.1
10.1.16 telnet source-interface
Syntax
telnet ip-address [ port ] source-interface interface-type interface-number
View
User view, system view
Parameter
ip-address: Destination IP address.

port: Destination port number. It defaults to 23.
interface-type interface-number: Specifies the source interface for telnet.
10-10
Description
Use the telnet source-interface command to telnet from the main IP address of the
specified interface to the destination IP address.
Example
# Telnet from the source interface ethernet 1/0/1 to the destination address 2.2.2.2.
<H3C> telnet 2.2.2.2 source-interface ethernet 1/0/1
10.1.17 telnet source-ip
Syntax
telnet ip-address [ port ] source-ip source-address
View
User view, system view
Parameter
ip-address: Destination IP address.

port: Destination port number. It defaults to 23.
source-address: Source IP address used when setting up a Telnet connection.
Description
Use the telnet source-ip command to telnet from the specified source IP address to
the specified destination IP address.
Example
# Telnet from source IP address 1.1.1.1 to destination IP address 2.2.2.2.

<H3C> telnet 2.2.2.2 source-ip 1.1.1.1
10.2 SSH Server Configuration Commands

10.2.1 debugging ssh server
Syntax
debugging ssh server { VTY index | all }

undo debugging ssh server { VTY index | all }
View
User view
10-11
Parameter
index: Index of the SSH channel to be debugged. Its value range is restricted by VTY
numbers and defaults to 0 to 4.
all: All SSH channels.
Description
Use the debugging ssh server command to output information such as the
negotiation process regulated by SSH1.5 protocol to information center as debugging
formation and to debug a user interface separately.
Use the undo debugging ssh server command to disable debugging.
By default, debugging is disabled.
Related command: ssh server authentication-retries, ssh server rekey-interval,
ssh server timeout.
Example
# Print debugging information when SSH is running.

[H3C] debugging ssh server vty 0
00:23:20: SSH0: starting SSH control process
00:23:20: SSH0: sent protocol version id SSH-1.5-H3C-1.25
00:23:20: SSH0: protocol version id is - SSH-1.5-1.2.26
00:23:20: SSH0: SSH_SMSG_PUBLIC_KEY msg
00:23:21: SSH0: SSH_CMSG_SESSION_KEY msg - length 112, type 0x03
00:23:21: SSH: RSA decrypt started
00:23:21: SSH: RSA decrypt finished
00:23:21: SSH: RSA decrypt started
00:23:21: SSH: RSA decrypt finished
10.2.2 display rsa local-key-pair public
Syntax
display rsa local-key-pair public
View
Any view
Parameter
None
10-12
Description
Use the display rsa local-key-pair public command to view the public key of the host
key pair and server key pair on the server. If no key is generated, the system displays:
RSA keys not found.
Related command: rsa local-key-pair create.
Example
# Display the public key of the host key pair and server key pair on the server.
<H3C> display rsa local-key-pair public
=====================================================
Time of Key pair created: 13:41:21 2004/11/12
Key name: H3C_Host
Key type: RSA encryption Key
=====================================================
Key code:
3047
0240
C30B0C1E 1AC2A028 984B7801 9583105D 78E69F6C
62561976 95E3B92B 7D9EC59C 150AE9CC 92E7CEF7
F025D3E0 C15408F5 4C9F4945 308A2DCF 1BA59D60
53DB5825
0203
010001
=====================================================
Time of Key pair created: 13:41:25 2004/11/12
Key name: SecPath1000_Server
Key type: RSA encryption Key
=====================================================
Key code:
3067
0260
E0DC0229 0525E04D AE3B8998 C56A18A1 997A609B
043B9302 F843715B FC727A3D 4A503B32 333DFD46
D95F4BD7 5AF63BBF 99100F9E EEAE4B3E DC6FBE42
1757F88D 1F7A098F 2C3FFFDF 8E2DA17D 991111ED
C318E857 6D40D224 4114AD15 A42068B9
0203
010001
10-13
10.2.3 display rsa peer-public-key
Syntax
display rsa peer-public-key [ brief | name keyname ]
View
Any view
Parameter
brief: Displays the brief information about all peer public keys.
keyname: Specifies the key to be displayed. A consecutive character string in the range
0 (exclusive) to 64 (inclusive).
Description
Use the display rsa peer-public-key command to view the specified RSA public key. If
no public key specified, all public keys are displayed.
Example
# Display all RSA public keys.

<H3C> display rsa peer-public-key
=====================================
Key name: aa
Key address:
=====================================
Key Code:
308186
028180
6B494EC4 EBD23DEE 1375C2B5 AB892F69 F2529D09 5B559E26 26011A1F C58AA5E3
60258B01 26494D0E 7221BB98 1C844CCD 8F0F8AEA 4AA1CD5B 9C3C5EF5 3093319F
6F3AEA80 351E5E8D 29F1511C D4AC08B4 3FDF5B7B E30A4E47 6FF75B9A 63BE5E94
E9C344B7 F0EC9D53 AE54E0A3 0567184A 2E80BEC3 89A2DAFA 83C18591 5B29EAA1
0201
25
10.2.4 display ssh server
Syntax
display ssh server { status | session }
10-14
View
Any view
Parameter
status: Displays SSH status information.

session: Displays SSH session information.
Description
Use the display ssh server command to view information on SSH status or sessions.
Related command: ssh server authentication-retries, ssh server rekey-interval,
ssh server timeout.
Example
# Display SSH status and configuration parameters.

[H3C]display ssh server status
SSH version : 1.5
SSH connection timeout : 60 seconds
SSH server key generating interval : 1 hours
SSH Authentication retries : 3 times
# Display SSH sessions.

[H3C] display ssh server session
Conn Ver Encry State Retry Username
VTY0 1.5 DES Session started H3C
VTY3 1.5 DES Session started H3C
10.2.5 display ssh-server source-ip
Syntax
display ssh-server source-ip
View
Any view
Parameter
None
Description
Use the display ssh-server source-ip command to display the source IP address
configured for the SSH server.
10-15
If a source interface has been specified for the SSH server, the IP address of the
specified for the SSH server, 0.0.0.0 is displayed.
Example
# Display the current source IP address of the SSH server.

<H3C> display ssh-server source-ip
10.2.6 display ssh user-information
Syntax
display ssh user-information [ username ]
View
Any view
Parameter
username: Valid SSH user name defined by AAA.
Description
Use the display ssh user-information command to view information about current
SSH users, including user name, corresponding key name and user authentication
mode. If you specify the username parameter, then only the information about the
specified user is displayed.
Related command: ssh user username assign rsa-key, ssh user username
authentication-type.
Example
# Display user information.

[H3C] display ssh user-information
Username authentication-type user-public-key-name
Jin rsa jin
hanqi1 password 816pub
1024 rsa file3
4000 all hq_rsa
hanqi_rsa rsa hq_rsa
hanqi_all all hq_all
10-16
10.2.7 peer-public-key end
Syntax
peer-public-key end
View
Public key view
Parameter
None
Description
Use the peer-public-key end command to return to system view from public key view.
Related command: rsa peer-public-key, public-key-code begin.
Example
# Exit public key view and save the configuration.

[H3C] rsa peer-public-key H3C003
[H3C-rsa-public-key] peer-public-key end
[H3C]
10.2.8 public-key-code begin
Syntax
public-key-code begin
View
Public key view
Parameter
None
Description
Use the public-key-code begin command to enter public key code view.
Before using this command, you must use the rsa peer-public-key command to
specify a key name. With the public-key-code begin command, you can enter public
key code view to input key data. Spaces and carriage returns are accepted between
characters. The configured public key must be a hex character string coded according
to public key format. It is generated randomly by the SSH2.0-supported client software.
Related command: rsa peer-public-key, public-key-code end.
10-17
Example
# Enter public key code view to input the key.

[H3C-rsa-public-key] public-key-code begin
[H3C-key-code] 308186028180739A291ABDA704F5D93DC8FDF84C427463
[H3C-key-code] 1991C164B0DF178C55FA833591C7D47D5381D09CE82913
[H3C-key-code] D7EDF9C08511D83CA4ED2B30B809808EB0D1F52D045DE4
[H3C-key-code] 0861B74A0E135523CCD74CAC61F8E58C452B2F3F2DA0DC
[H3C-key-code] C48E3306367FE187BDD944018B3B69F3CBB0A573202C16
[H3C-key-code] BB2FC1ACF3EC8F828D55A36F1CDDC4BB45504F020125
[H3C-key-code] public-key-code end
10.2.9 public-key-code end
Syntax
public-key-code end
View
Public key code view
Parameter
None
Description
Use the public-key-code end command to return from public key code view to public
key view and to save the configured public key.
Executing this command ends the public key edit process. The system verifies the key
before saving it. If the key contains illegal characters, the system prompts the error and
discards the key. The configuration fails. If the key is valid, it is saved to the linked list of
client public keys.
Related command: rsa peer-public-key, public-key-code begin.
Example
# Exit public key code view and save the configuration.

[H3C-rsa-key-code] public-key-code end
[H3C-rsa-public-key]
10.2.10 rsa local-key-pair create
Syntax
rsa local-key-pair create
10-18
View
System view
Parameter
None
Description
Use the rsa local-key-pair create command to generate the local RSA host key pair
and server key pair.
Executing this command generates two files, hostkey and serverkey, each containing a
pair of local public key and private key. While the key pair in the serverkey file is
updated automatically at regular intervals, the key pair in the hostkey file will not
change after their creation.
If the key pairs exist when you enter this command, the system warns that the existing
keys are to be replaced. The names of the generated key pairs are respectively H3C
name+ server and H3C name + host, for example, H3C_host and H3C_server. This
command is not stored in the configuration file.
After you enter this command, the system asks you to input the number of digits for the
host key pair. The server key pair and the host key pair have at least 128 digits of
difference. The minimum length of server key pair and host key pair is 512 digits and
the maximum length is 2048 digits. If there have been key pairs, you need to confirm
whether to change them. The default key pair length is 1024 digits.
To log onto the H3C through SSH, you must first generate local RSA key pairs using the
rsa local-key-pair create command. You only need to execute this command once
and do not need to execute it again at reboot.
If the H3C works as a SSH2.0 server, the key pair you use the rsa local-key-pair
create command to generate must be at least 768 bits; otherwise, the SSH2.0 client
cannot log on successfully. At this time if the RSA authentication of SSH2.0 client is
needed, the key pair generated by SSH2.0 client must be at least 768 bits as well.
Related command: rsa local-key-pair destroy.
Example
# Generate the local host key pair and server key pair.
[H3C] rsa local-key-pair create
The name for the keys will be: H3C _Host
%You already have RSA keys defined for rtvrp_Host
%Do you really want to replace them? [yes/no]:y
Choose the size of the key modulus in the range of 512 to 2048 for your Keys.
Choosing a key modulus greater than 512 may take a few minutes.
How many bits in the modulus [512]:512
10-19
Generating keys...
.....++++++++++++
........................++++++++++++
..........++++++++
............................++++++++
10.2.11 rsa local-key-pair destroy
Syntax
rsa local-key-pair destroy
View
System view
Parameter
None
Description
Use the rsa local-key-pair destroy command to remove all RSA keys on the server
(including the host key pair and the server key pair).
The execution of this command needs your confirmation. This command is not stored
in the configuration file.
Example
# Remove all keys on the server.

[H3C] rsa local-key-pair destroy
%Keys to be removed are named H3C _Host .
%Do you really want to remove these keys? [yes/no]:y
10.2.12 rsa peer-public-key
Syntax
rsa peer-public-key key-name

rsa peer-public-key key-name import sshkey filename
View
System view
Parameter
key-name: Name of the public key.
10-20
filename: Name of the key file to be imported from Flash. The file must have existed on
Flash.
Description
Use the rsa peer-public-key command to enter public key view. After that, you may
use the public-key-code begin command and the public-key-code end command to
configure the public key of the client.
Before performing those operations, you must obtain the RSA public key file generated
at the SSH client and use SSHKEY.EXE software to convert the generated public key to
a hexadecimal character string.
The following is an alternative way of configuring the public key of the client.
Use the rsa peer-public-key keyname import sshkey filename command to convert
the format of an RSA public key file generated at the SSH client to PKCS format and to
complete the configuration of the key automatically.
Unlike the rsa peer-public-key command, the rsa peer-public-key keyname import
sshkey filename command does not involve manual configuration. However, it
requires that the device functioning as the SSH client have upload its RSA public key to
the Flash at the SSH server end through FTP or TFTP.
The SSH client discussed here refers to both SSH 1.0 client and SSH 2.0 client.
Related command: public-key-code begin, public-key-code end.
Example
# Enter public key view.

[H3C-rsa-public-key]
# Convert and configure the RSA public key of the client.

[H3C] rsa peer-public-key 123 import sshkey pub2
10.2.13 ssh authentication-type default
Syntax
ssh authentication-type default { password | RSA | all | password-publickey }

undo ssh authentication-type default
View
System view
Parameter
password: Sets the default authentication mode for SSH users to AAA.
10-21
RSA: Sets the default authentication mode for SSH users to RSA.
all: Sets the default authentication mode for SSH users to RSA or AAA.
password-publickey: Sets the default authentication mode for SSH users to the
combination of RSA and AAA.
Description
Use the ssh authentication-type default command to specify a default authentication

mode for SSH users.
Use the undo ssh authentication-type default command to clear the specified
default authentication mode.
If a default authentication mode is available, you do not necessarily specify an
authentication mode for each SSH user. The SSH users that have not been configured
with an authentication mode can adopt the default.
If no default authentication mode is available, you must configure an authentication
mode with the ssh user authentication-type command after creating an SSH user
with the ssh user command.
By default, no default SSH user authentication mode is configured.
Related command: ssh user authentication-type.
Example
# Set the default SSH user authentication mode to AAA.

[H3C] ssh authentication-type default password
10.2.14 ssh server authentication-retries
Syntax
ssh server authentication-retries times

undo ssh server authentication-retries
View
System view
Parameter
times: Specifies the number of authentication retries in the range 1 to 5.
Description
Use the ssh server authentication-retries command to set the number of SSH
connection authentication retries, which is validated at next login.
Use the undo ssh server authentication-retries command to restore the default.
10-22
Related command: display ssh sever.
Example
# Specify the number of authentication retries at login to four.

[H3C] ssh server authentication-retries 4
10.2.15 ssh server compatible_ssh1x enable
Syntax
ssh server compatible_ssh1x enable

undo ssh server compatible_ssh1x
View
System view
Parameter
None
Description
Use the ssh server compatible_ssh1x enable command to enable the SSH server to
work with SSH1.X clients.
Use the undo ssh server compatible_ssh1x command to disable the SSH server to
work with SSH1.X clients.
By default, the SSH server can work with SSH1.X clients.
Example
# Enable the SSH server to work with SSH1.X clients.

[H3C] ssh server compatible_ssh1x enable
10.2.16 ssh server rekey-interval
Syntax
ssh server rekey-interval hours

undo ssh server rekey-interval
View
System view
Parameter
hours: Update interval in the range 1 to 24 hours.
10-23
Description
Use the ssh server rekey-interval command to set the interval for updating the server
key.
Use the undo ssh server rekey-interval command to cancel the current setting.
By default, the server key is not updated.
Example
# Set the interval for updating the server key to three hours.
[H3C] ssh server rekey-interval 3
10.2.17 ssh-server source-interface
Syntax
ssh-server source-interface interface-type interface-number

undo ssh-server source-interface
View
System view
Parameter
Description
Use the ssh-server source-interface command to specify a source interface, which

must be an existing local interface, for the SSH server. After that, the IP address of the
specified interface is used as the source IP address in each packet sent by the SSH
server.
Use the undo ssh-server source-interface command to delete the source interface
specified for the SSH server. After that, the source IP address in each packet sent by
the SSH server is that of the outgoing interface where the packet is sent out.
By default, the source IP address in each packet sent by the SSH server is the IP
10-24
Note:
You may specify a source IP address for the packets sent by the SSH server with the
ssh-server source-interface command or with the ssh-server source-ip command.
If both commands are configured, the one configured later overrides.
Example
# Set the source interface for the SSH server to Ethernet 0/0/0.
[H3C] ssh-server source-interface Ethernet 0/0/0
10.2.18 ssh-server source-ip
Syntax
ssh-server source-ip ip-address

undo ssh-server source-ip
View
System view
Parameter
Description
Use the ssh-server source-ip command to specify a source IP address for the packets
sent by the SSH server. This IP address must be a local IP address.
Use the undo ssh-server source-ip command to delete the source IP address
specified for the SSH server. After that, the source IP address of a packet sent by the
FTP server is the IP address of the interface where the packet is sent out.
By default, the source IP address in each packet sent by the SSH server is the IP
Note:
ssh-server source-interface command or with the ssh-server source-ip command.
If both commands are configured, the one configured later overrides.
10-25
Example
# Use 192.168.0.1 as the source IP address in the packets sent by the SSH server.
[H3C] ssh-server source-ip 192.168.0.1
10.2.19 ssh server timeout
Syntax
ssh server timeout seconds

undo ssh server timeout
View
System view
Parameter
seconds: Specifies the login timeout in the range 1 to 120 seconds.
Description
Use the ssh server timeout command to set a timeout for SSH connection
authentication at login. It becomes valid at next login.
Use the undo ssh server timeout command to restore the default, or 60 seconds.
Example
# Set authentication timeout to 80 seconds at login.

[H3C] ssh server timeout 80
10.2.20 ssh user
Syntax
ssh user username

undo ssh user username
View
System view
Parameter
username: SSH user name; it must be consistent with the user name defined in AAA if
password authentication is adopted. If RSA authentication is adopted, the value of this
argument is a local SSH user name and needs not to be defined in AAA.
10-26
Description
Use the ssh user command to create an SSH user.

Use the undo ssh user command to delete an SSH user.
All SSH users need authentication. Before creating an SSH user with the ssh user
command, you must specify a default authentication mode with the ssh
authentication-type default command.
If the default authentication mode for SSH users is password and local AAA
authentication is adopted, you are not necessarily use the ssh user command to
create an SSH user. Instead, you can use the local-user command to create a user
name and its password and then specify the service type for the user to SSH.
Alternatively, you may create an SSH user and specify an authentication mode for it by
using the ssh user authentication-type command.
Related command: ssh authentication-type default.
Example
# Create an SSH user, setting its name to tom.

[H3C] ssh user tom
10.2.21 ssh user assign
Syntax
ssh user username assign rsa-key keyname

undo ssh user username assign rsa-key
View
System view
Parameter
username: username: SSH user name; it must be consistent with the user name
defined in AAA if password authentication is adopted. If RSA authentication is adopted,
the value of this argument is a local SSH user name and needs not to be defined in
AAA.
keyname: Public key name of the client, a string of 1 to 64 characters.
Description
Use the ssh user assign command to assign one existing public key to a user. If a key
exists, the new assignment overrides.
Use the undo ssh user assign command to delete the association.
10-27
The AAA module is responsible for creating and deleting local users in the system.
Each time AAA creates an SSH user, SSH receives a notification and adds the user into
the user set that it maintains. Likewise, each time AAA deletes an SSH user, SSH
receives a notification and deletes the user if there is any.
The newly configured public key becomes valid at next login.
Related command: display ssh user-information.
Example
# Assign key1 to user Smith.

[H3C] ssh user smith assign rsa-key key1
[H3C]
10.2.22 ssh user authentication-type
Syntax
ssh user username authentication-type { password | rsa | all |

password-publickey }
undo ssh user username authentication-type
View
System view
Parameter
password: Sets the authentication mode of the user to password.
rsa: Sets the authentication mode of the user to RSA.
all: The authentication mode of the user can be either password or RSA.
password-publickey: Sets the authentication mode for the SSH user to the
combination of AAA and RSA.
Description
Use the ssh user authentication-type command to create an SSH user and specify
an authentication mode for it.
Use the undo ssh user authentication-type command to restore the default, where
login is always denied.
You must specify an authentication mode for each new user, or they will be unable to
log in. The new authentication mode takes effect at next login.
10-28
All SSH users need authentication.

You may create an SSH user name and specify an authentication mode for it by using
the ssh user authentication-type command.
Alternatively, you may create an SSH user name with the ssh user command. Before
that, you must specify a default authentication mode with the ssh authentication-type
default command.
Related command: ssh authentication-type default, display ssh user-information.
Example
# Set the authentication mode to password for user tom.

[H3C] ssh user tom authentication-type password
10.2.23 ssh user service-type
Syntax
ssh user username service-type { stelnet | sftp | all }

undo ssh user username service-type
View
System View
Parameter
stelnet: Sets the service type to stelnet.
sftp: Sets the service type to secure FTP (SFTP).
all: Includes stelnet and SFTP services.
Description
Use the ssh user service-type command to specify service type for a user.
Use the undo ssh user service-type command to restore the default service type for
the SSH user in the system.
The default service type for the SSH user is stelnet.
Related command: display ssh user-information.
Example
# Specify SFTP service for SSH user Tom.

[H3C] ssh user tom service-type sftp
10-29
10.3 SSH Client Configuration Commands
Note:
The public-key-code begin command and the public-key-code end command are
described in the section for the SSH server, but they are supported by the SSH client as
well.
10.3.1 debugging ssh client
Syntax
debugging ssh client

undo debugging ssh client
View
User view
Parameter
None
Description
Use the debugging ssh client command to enable SSH client debugging.
Use the undo debugging ssh client command to disable SSH client debugging.
By default, the SSH client debugging is disabled.
Related command: debugging ssh server.
Example
# Enable SSH client debugging.

[H3C] debugging ssh client.
10.3.2 display ssh server-info
Syntax
display ssh server-info
View
Any view
10-30
Parameter
None
Description
Use the display ssh server-info command to view the associations of public key to
SSH server maintained at the client end.
Example
# Display the public key to SSH server associations at the client end.
[H3C] display ssh server-info
ServerIP public-key-name
192.168.0.1 h3c_key01
192.168.0.2 h3c_key02
10.3.3 display ssh2 source-ip
Syntax
display ssh2 source-ip
View
Any view
Parameter
None
Description
Use the display ssh2 source-ip command to display the source IP address configured
for the SSH client.
If a source interface has been specified for the SSH client, the IP address of the
specified for the SSH client, 0.0.0.0 is displayed.
Example
# Display the current source IP address of the SSH client.

<H3C> display ssh2 source-ip
10.3.4 quit
Syntax
quit
10-31
View
User view
Parameter
None
Description
Use the quit command to terminate the connection to the remote SSH server.
Example
# Terminate the connection to the remote SSH server.

<H3C> quit
10.3.5 ssh client assign rsa-key
Syntax
ssh client server assign rsa-key keyname

undo ssh client server assign rsa-key
View
System view
Parameter
server: IP address or name of an SSH server.

keyname: Name for the public key from the SSH server.
Description
Use the ssh client assign rsa-key command to associate an SSH server with the
name assigned to its public key. When connecting to this server, the client verifies its
trustworthiness based on this association.
Use the undo ssh client assign rsa-key command to remove the association.
Example
# At the client end associate an SSH server with its public key.
[H3C] ssh client 192.168.0.1 assign rsa-key abc
10.3.6 ssh client first-time enable
Syntax
ssh client first-time enable
10-32
undo ssh client first-time
View
System view
Parameter
None
Description
Use the ssh client first-time enable command to enable the SSH client to perform
first-time authentication on SSH servers.
Use the undo ssh client first-time command to disable the SSH client to perform
first-time authentication on SSH servers.
The configuration of first-time authentication decides the action taken by the SSH client
when it accesses a server in the absence of the server’s public key:
z With first-time authentication enabled, the SSH client can attempt to access the
server and get the server’s public key through negotiation. Then this public key
could be saved on the client for next access.
z With first-time authentication disabled, the SSH client rejects to access a server.
To access the server, you must save its public key on the SSH client beforehand.
By default, first-time authentication is disabled on the SSH client.
Example
# Enable first-time authentication on the SSH client.

[H3C] ssh client first-time enable
10.3.7 ssh2
Syntax
ssh2 { host-ip | host-name } [ port-num ] [ prefer_kex { dh_group1 |

dh_exchange_group } ] [ prefer_ctos_cipher { des | 3des | aes128 } ]
[ prefer_stoc_cipher { des | 3des | aes128 } ] [ prefer_ctos_hmac { sha1 | sha1_96 |
md5 | md5_96 } ] [ prefer_stoc_hmac { sha1 | sha1_96 | md5 | md5_96 } ]
View
System view
Parameter
host-ip: IP address of a server.

host-name: Name of a server, a string of 1 to 20 characters.
10-33
port-num: Port number of the server, in the range 0 to 65,535. The default port number
is 22.
prefer_kex: Preferred key exchange algorithm, Diffie-Hellman-Group1-SHA1 or
Diffie-Hellman-Group-Exchange-SHA1.
dh_group1: Key exchange algorithm Diffie-Hellman-Group1-SHA1, the default
algorithm.
dh_exchange_group: Key exchange algorithm
prefer_ctos_cipher: Preferred encryption algorithm from the client to the server. The
default algorithm is AES 128.
prefer_stoc_cipher: Preferred encryption algorithm from the server to the client. The
des: Encryption algorithm DES_CBC.
3des: Encryption algorithm 3DES_CBC.
aes128: Encryption algorithm AES_128.
prefer_ctos_hmac: Preferred HMAC algorithm from the client to the server. The
default algorithm is SHA1_96.
prefer_stoc_hmac: Preferred HMAC algorithm from the server to the client. The
sha1: HMAC algorithm HMAC-SHA1.
sha1_96: HMAC algorithm HMAC-SHA1-96.
md5: HMAC algorithm HMAC-MD5.
md5_96: HMAC algorithm HMAC-MD5-96.
Description
Use the ssh2 command to initiate a connection to the specified SSH server, and
specify the preferred key exchange algorithm, encryption algorithm and HMAC
algorithm between the client and the server.
Example
# Log into the remote SSH2 server with IP address 10.214.50.51, and configure
algorithms as follows:
z Preferred key exchange algorithm: DH_exchange_group
z Preferred encryption algorithm from the client to the server: 3DES-CBC
z Preferred HMAC algorithm from the client to the server: HMAC-MD5
z Preferred encryption algorithm from the server to the client: AES-128
z Preferred HMAC algorithm from the server to the client: HMAC-SHA1-96
[H3C] ssh2 10.214.50.51 prefer_kex dh_exchange_group prefer_ctos_cipher 3des
prefer_ctos_hmac md5
10-34
10.3.8 ssh2 source-interface
Syntax
ssh2 source-interface interface-type interface-number

undo ssh2 source-interface
View
System view
Parameter
Description
Use the ssh2 source-interface command to specify a source interface, which must be
an existing local interface, for the SSH client. After that, the IP address of the specified
interface is used as the source IP address in each packet sent by the SSH client.
Use the undo ssh2 source-interface command to delete the source interface
specified for the SSH client. After that, the source IP address in each packet sent by the
SSH client is that of the outgoing interface where the packet is sent out.
By default, the source IP address in each packet sent by the SSH client is the IP
Note:
You may specify a source IP address for the packets sent by the SSH client with the
ssh2 source-interface command or with the ssh2 source-ip command. If both
commands are configured, the one configured later overrides.
Example
# Set the source interface for the SSH client to ethernet0/0/0.

[H3C] ssh2 source-interface ethernet0/0/0
10.3.9 ssh2 source-ip
Syntax
ssh2 source-ip ip-address

undo ssh2 source-ip
10-35
View
System view
Parameter
Description
Use the ssh2 source-ip command to specify a source IP address for the packets sent
by the SSH client. This IP address must be a local IP address.
Use the undo ssh2 source-ip command to delete the source IP address specified for
the SSH client. After that, the source IP address of each packet sent by the SSH client
is the IP address of the interface where the packet is sent out.
By default, the source IP address in each packet sent by the SSH client is the IP
Note:
Example
# Use 192.168.0.1 as the source IP address in the packets sent by the SSH client.
[H3C] ftp source-ip 192.168.0.1
10.4 SFTP Server Configuration Commands

10.4.1 sftp server enable
Syntax
sftp server enable

undo sftp server
View
System view
Parameter
None
10-36
Description
Use the sftp server enable command to enable the secure FTP (SFTP) server.
Use the undo sftp server command to disable the SFTP server.
By default, the SFTP server is disabled.
Example
# Enable the SFTP server.

[H3C] sftp server enable
# Disable the SFTP server.

[H3C] undo sftp server
10.5 SFTP Client Configuration Commands

10.5.1 bye
Syntax
bye
View
SFTP client view
Parameter
None
Description
Use the bye command to terminate the connection to the remote SFTP server and exit
to system view as you would with the exit and quit commands.
Example
# Terminate the connection to the remote SFTP server.

sftp-client> bye
[H3C]
10.5.2 cd
Syntax
cd [remote-path ]
View
SFTP client view
10-37
Parameter
remote-path: Name of a path on the server.
Description
Use the cd command to change the current path on the SFTP server. If you do not
specify the remote-path argument, the current path is displayed.
Example
# Change current path to d:/temp.

sftp-client> cd d:/temp
10.5.3 cdup
Syntax
cdup
View
SFTP client view
Parameter
None
Description
Use the cdup command to quit to the upper directory.
Example
# Exit to the upper directory.

sftp-client> cdup
10.5.4 delete
Syntax
delete remote-file
View
SFTP client view
Parameter
remote-file: Name of a file on the server.
10-38
Description
Use the delete command to delete the specified file from the server as you would with
the remove command.
Example
# Delete file temp.c from the server.

sftp-client> delete temp.c
10.5.5 dir
Syntax
dir [remote-path ]
View
SFTP client view
Parameter
remote-path: Name of the intended directory.
Description
Use the dir command to view the files in the specified directory as you would with the ls
command.
If the remote-path argument is not specified, the files in the current directory are
displayed.
Example
# Display directory flash:/.

sftp-client> dir flash:/
-rwxrwxrwx 1 noone nogroup 1759 Aug 23 06:52 vrpcfg.cfg
-rwxrwxrwx 1 noone nogroup 225 Aug 24 08:01 pubkey2
-rwxrwxrwx 1 noone nogroup 225 Sep 28 08:28 pub1
drwxrwxrwx 1 noone nogroup 0 Sep 28 08:24 new1
10.5.6 display sftp source-ip
Syntax
display sftp source-ip
10-39
View
Any view
Parameter
None
Description
Use the display sftp source-ip command to display the source IP address configured
for the SFTP client.
If a source interface has been specified for the SFTP client, the IP address of the
specified for the SFTP client, 0.0.0.0 is displayed.
Example
# Display the current source IP address of the SFTP client.

<H3C> display sftp source-ip
10.5.7 exit
Syntax
exit
View
SFTP client view
Parameter
None
Description
Use the exit command to terminate the connection to the remote SFTP server and exit
to system view as you would with the bye and quit commands.
Example

sftp-client> exit
[H3C]
10-40
10.5.8 get
Syntax
get remote-file [ local-file ]
View
SFTP client view
Parameter
remote-file: Name of the source file on the remote SFTP server.

local-file: Name assigned to the file to be saved at the local end.
Description
Use the get command to download and save a file from a remote server.
If no local file name is specified, the name of the source file is used by default.
Example
# Download file temp1.c and save it with name temp.c.

sftp-client> get temp1.c temp.c
10.5.9 help
Syntax
help [ command ]
View
SFTP client view
Parameter
command: Name of a command.
Description
Use the help command to get the help information for the specified or all SFTP client
commands.
Example
# View the help information for the get command.

sftp-client> help get
get remote-path [local-path] Download file
Default local-path is the same with remote-path
10-41
10.5.10 ls
Syntax
ls [ remote-path ]
View
SFTP client view
Parameter
remote-path: Name of the intended directory.
Description
Use the ls command to view the files in the specified directory as you would with the dir
command.
If the remote-path argument is not specified, the files in the current directory are
displayed.
Example
# Display directory flash:/

sftp-client> ls flash:/
-rwxrwxrwx 1 noone nogroup 1759 Aug 23 06:52 vrpcfg.cfg
10.5.11 mkdir
Syntax
mkdir remote-path
View
SFTP client view
Parameter
remote-path: Name of a directory on the remote SFTP server.
Description
Use the mkdir command to create a directory on the remote SFTP server.
10-42
Example
# Create directory test on the remote SFTP server.

sftp-client> mkdir test
10.5.12 put
Syntax
put local-file [ remote-file ]
View
SFTP client view
Parameter
local-file: Name of the source file at the local end.

remote-file: Name assigned to the file to be saved on the remote SFTP server.
Description
Use the put command to upload a local file to the remote SFTP server.
If no name is specified for the file to be saved on the remote SFTP server, the name of
the source file is used.
Example
# Upload local file temp.c to the remote SFTP server and save it with the name
temp1.c.
sftp-client> put temp.c temp1.c
10.5.13 pwd
Syntax
pwd
View
SFTP client view
Parameter
None
Description
Use the pwd command to display the current directory on the SFTP server.
10-43
Example
# Display the current directory on the SFTP server.

sftp-client> pwd
flash:
10.5.14 quit
Syntax
quit
View
SFTP client view
Parameter
None
Description
Use the quit command to terminate the connection to the remote SFTP server and exit
to system view as you would with the bye and exit commands.
Example

sftp-client> quit
[H3C]
10.5.15 remove
Syntax
remove remote-file
View
SFTP client view
Parameter
remote-file: Name of a file on the server.
Description
Use the remove command to delete the specified file from the server as you would with
the delete command.
10-44
Example
# Delete file temp.c from the server.

sftp-client> remove temp.c
10.5.16 rename
Syntax
rename oldname newname
View
SFTP client view
Parameter
oldname: Original file name.

newname: New file name.
Description
Use the rename command to change the name of the specified file on the SFTP server.
Example
# Change the name of file temp1 on the SFTP server to temp2.

sftp-client> rename temp1 temp2
10.5.17 rmdir
Syntax
rmdir remote-path
View
SFTP client view
Parameter
remote-path: Name of a directory on the remote SFTP server.
Description
Use the rmdir command to delete the specified directory from the remote SFTP server.
Example
# Delete directory D:/temp1 from the remote SFTP server.

sftp-client> rmdir D:/temp1
10-45
10.5.18 sftp
Syntax
sftp { host-ip | host-name } [ port-num ] [ prefer_kex { dh_group1 |

dh_exchange_group } ] [ prefer_ctos_cipher { des | 3des | aes128 } ]
[ prefer_stoc_cipher { des | 3des | aes128 } ] [ prefer_ctos_hmac { sha1 | sha1_96 |
md5 | md5_96 } ] [ prefer_stoc_hmac { sha1 | sha1_96 | md5 | md5_96 } ]
View
System view
Parameter
host-ip: IP address of the server.

host-name: Name of the server, a string of 1 to 20 characters.
port-num: Port number of the server, in the range 0 to 65,535. The default port number
is 22.
prefer_kex: Preferred key exchange algorithm, Diffie-Hellman-Group1-SHA1 or
dh_group1: Key exchange algorithm Diffie-Hellman-Group1-SHA1, the default
algorithm.
dh_exchange_group: Key exchange algorithm
prefer_ctos_cipher: Preferred encryption algorithm from the client to the server. The
prefer_stoc_cipher: Preferred encryption algorithm from the server to the client. The
des: Encryption algorithm DES_CBC.
3des: Encryption algorithm 3DES_CBC.
aes128: Encryption algorithm AES_128.
prefer_ctos_hmac: Preferred HMAC algorithm from the client to the server. The
prefer_stoc_hmac: Preferred HMAC algorithm from the server to the client. The
sha1: HMAC algorithm HMAC-SHA1.
sha1_96: HMAC algorithm HMAC-SHA1-96.
md5: HMAC algorithm HMAC-MD5.
md5_96: HMAC algorithm HMAC-MD5-96.
10-46
Description
Use the sftp command to establish a connection to the remote SFTP server and enter
SFTP client view.
Example
# Connect to the SFTP server with IP address 10.1.1.2 and using the default
algorithms.
[H3C] sftp 10.1.1.2
10.5.19 sftp source-interface
Syntax
sftp source-interface interface-type interface-number

undo sftp source-interface
View
System view
Parameter
Description
Use the sftp source-interface command to specify a source interface, which must be
an existing local interface, for the SFTP client. After that, the IP address of the specified
interface is used as the source IP address in each packet sent by the SFTP client.
Use the undo sftp source-interface command to delete the source interface specified
for the SFTP client. After that, the source IP address in each packet sent by the SFTP
By default, the source IP address in each packet sent by the SFTP client is the IP
Note:
sftp source-interface command or with the sftp source-ip command. If both
Example
# Set the source interface for the SFTP client to ethernet0/0/0.
10-47
[H3C] sftp source-interface ethernet0/0/0
10.5.20 sftp source-ip
Syntax
sftp source-ip ip-address

undo sftp source-ip
View
System view
Parameter
Description
Use the sftp source-ip command to specify a source IP address for the packets sent
by the SFTP client. This IP address must be a local IP address.
Use the undo sftp source-ip command to delete the source IP address specified for
the SFTP client. After that, the source IP address of each packet sent by the SFTP
client is the IP address of the interface where the packet is sent out.
By default, the source IP address in each packet sent by the SFTP client is the IP
Note:
sftp source-interface command or with the sftp source-ip command. If both
Example
# Use 192.168.0.1 as the source IP address in the packets sent by the SFTP client.
[H3C] sftp source-ip 192.168.0.1
10.6 RSH Commands

10.6.1 rsh
Syntax
rsh host [ user username ] command remote-command
10-48
View
User View
Parameter
host: IP address or host name of the remote host.

user username: Login user that is allowed to execute the RSH command on the remote
host. If no user is specified, the system name of the H3C, which is specified using the
sysname command, applies.
command: Sets the command to be executed remotely.
remote-command: The command to be executed on the remote host. The commands
to be supported depend on the operating system running on the RSH server.
Description
Use the rsh command to execute a command on a remote host remotely.

You can operate on the RSH client to invoke/execute commands, and query/access
information on the RSH server as well.
Example
# Execute the dir command remotely on the remote server at 169.254.1.100 (the
operating system is Windows 2000).
<H3C> rsh 169.254.1.100 com dir
Trying 169.254.1.100 ...
Press CTRL+K to abort
Volume in drive C is SYSTEM
Volume Serial Number is 2A0F-18DF
Directory of C:\WRSHDNT
2004-07-13 09:10 <DIR> .

2004-07-13 09:10 <DIR> ..
2001-05-10 09:04 162,304 UNWISE.EXE
2001-12-05 15:36 45,056 wrshdcfg.exe
1996-08-05 15:39 48,128 ctrlrshd.exe
1998-10-13 16:31 31,744 forewin.exe
2004-01-02 23:05 40,625 history.txt
2003-02-26 17:04 6,822 order.txt
1997-08-26 16:05 23,552 whoami.exe
2001-12-07 17:28 122,880 wrshdctl.exe
2003-06-21 10:51 192,512 wrshdnt.cpl
2001-12-09 16:41 38,991 wrshdnt.hlp
2001-12-09 16:26 1,740 wrshdnt.cnt
10-49
2003-06-22 11:14 452,230 wrshdnt.htm

2003-06-23 18:18 4,803 wrshdnt_header.htm
2003-06-23 18:18 178 wrshdnt_filelist.xml
2003-06-22 11:13 156,472 wrshdnt.pdf
2001-09-02 15:41 49,152 wrshdrdr.exe
2003-06-21 10:32 69,632 wrshdrun.exe
2004-01-02 15:54 196,608 wrshdsp.exe
2004-01-02 15:54 102,400 wrshdnt.exe
2001-07-30 18:05 766 wrshdnt.ico
2004-07-13 09:10 3,253 INSTALL.LOG
21 files 1,749,848 bytes
2 directories 2,817,417,216 bytes free
# Execute the interactive command time on the RSH server at 169.254.1.100 (the
operating system is Windows 2000).
<H3C> rsh 169.254.1.100 command time
Trying 169.254.1.100 ...
The current time is: 6:56:42.57
Enter the new time: 12:00
12:00
10.6.2 debugging rsh
Syntax
debugging rsh
undo debugging rsh
View
User View
Parameter
None
Description
Use the debugging rsh command to enable RSH debugging.

Use the undo debugging rsh command to disable RSH debugging.
You can use this command to verify the configuration after you execute the rsh
command.
Example
# Enable RSH debugging and then execute the rsh command.
10-50
<H3C> debugging rsh

<H3C> rsh 169.254.1.100 command cd c:
Trying 169.254.1.100 ...
*0.5850881 H3C RSH/8/REQUEST:User H3C start connection to Server
(169.254.1.100)
*0.5850990 H3C RSH/8/SEND:User H3C sent 23 byte(s) to server (169.254.1.100)

*0.5851090 H3C RSH/8/RECV:User H3C received 1 byte(s) from server
(169.254.1.100)
*0.5851200 H3C RSH/8/CLOSECONN:Server (169.254.1.100) closed connection
10.7 Rlogin Configuration Commands

10.7.1 debugging rlogin
Syntax
debugging rlogin
undo debugging rlogin
View
User view
Parameter
None
Description
Use the debugging rlogin command to enable remote login (rlogin) debugging.
Use the undo debugging rlogin command to disable rlogin debugging.
By default, rlogin debugging is disabled.
Example
# Enable rlogin debugging.

<H3C> debugging rlogin
10.7.2 rlogin
Syntax
rlogin remote-host username
10-51
View
User view
Parameter
remote-host: IP address or name of the UNIX host onto which you want to log.
username: User name for the remote login, which must have been registered with the
Unix host.
Description
Use the rlogin command to rlogin onto the specified remote host with the specified
user name.
The rlogin client function of the H3C enables its logging terminal users to log onto a
remote UNIX host using rlogin.
After a terminal user logs onto the remote UNIX host and passes authentication, all
characters input by the user except for local terminal escape sequences are sent to the
remote server. The commands in escape sequences are locally executed.
The local terminal can terminate the rlogin session in one of the following three ways:
z Press CTRL+K.
z Enter the local terminal escape character, or a tilde (~) at the beginning of a line,
and then enter a dot (.).
z Enter an abort command requesting the server to terminate the session process.
This command differs with servers, while exit and quit are commonly used.
Example
# Log as the user zhb onto the UNIX server at 192.168.0.200.

<H3C> rlogin 192.168.0.200 zhb
Trying 192.168.0.200 ...
Connected to 192.168.0.200 ...

Password:
Enter your password at the prompt. After the authentication is passed, the server
prompt appears.
Last login: Thu Oct 28 17:30:23 from 192.168.0.5
bash: Path: command not found
[root@localhost zhb] #
10-52
Command Manual – System Management Chapter 11 POS Terminal Access Configuration
Comware V3 Commands
Chapter 11 POS Terminal Access Configuration

Commands
11.1 POS Terminal Access Configuration Commands

11.1.1 async mode padpos
Syntax
async mode padpos pos-number

undo async mode padpos
View
Asynchronous serial interface view, AUX interface view
Parameter
pos-number: Number for the POSPAD access port, in the range 0 to 255.
Description
Use the async mode pos command to configure a POSPAD access port.
Use the undo async mode padpos command to remove the POSPAD access port
setting.
After a POSPAD access port is configured, the access H3C simulates the POSPAD
device to receive packets from the connected POS terminal and sends them to the
POSPAD concentrator by performing PAD tasks.
Related command: undo detect dsr-dtr, async mode protocol.
Example
# Configure Async1/0/0 as POSPAD access port 200.

[H3C-Async1/0/0] async mode protocol
[H3C-Async1/0/0] async mode padpos 200
11.1.2 async mode pos
Syntax
async mode pos pos-number

async mode pos pos-number app ip-address port-number [ permanent | temporary ]
11-1
Comware V3 Commands
View
Asynchronous serial interface view, AM interface view, FCM interface view, AUX
interface view
Parameter
pos-number: Number for the POS access interface, in the range 0 to 255.
ip-address: IP address of the front end processor (FEP).
port-number: Port number of the FEP.
permanent: Specifies the permanent TCP connection mode.
temporary: Specifies the temporary TCP connection mode.
Description
Use the async mode pos pos-number command to create a POS access port in
nontransparent transmission and permanent TCP connection mode.
Use the async mode pos pos-number app ip-address port-number command to
create a POS access port in transparent transmission mode. In this mode, the H3C
cannot identify the POS application to which a packet belongs by resolving the packet
as it would in nontransparent mode. Therefore, when you configure a POS access port,
you must specify its corresponding POS application.
For the async mode pos pos-number app ip-address port-number [ permanent |
temporary ] command, permanent TCP connection is adopted by default. The function
of the async mode pos pos-number app ip-address port-number permanent
command is the same as that of the async mode pos pos-number app ip-address
port-number command.
To accommodate to the FEP program requiring temporary TCP connection, you may
configure the async mode pos pos-number app ip-address port-number temporary
command.
As asynchronous and FCM interfaces operate in protocol mode by default, no POS
access port is configured by default.
An interface can receive POS packets only after it is configured as a POS access port
with POS access server enabled.
Note:
The async mode pos command has no undo form. To cancel the command, use the
async mode protocol command.
11-2
Comware V3 Commands
Example
# Configure Async1/0/0 as POS access port 1.

[H3C-Async1/0/0] async mode pos 1
11.1.3 async mode posapp
Syntax
async mode posapp app-number

undo async mode posapp
View
Asynchronous serial interface view, AUX interface view
Parameter
app-number: Number for a POS application, in the range 0 to 31. A H3C can be
configured with up to 32 POS applications.
Description
Use the async mode posapp command to configure the interface to operate in POS
application mode.
Use the undo async mode posapp command to disable the interface to operate in
POS application mode.
By default, the interface operates in protocol mode.
For an asynchronous interface to receive POS packets, you must configure it to
operate in POS application mode.
Example
# Configure asynchronous interface async1/0/0 to operate in POS application mode.

[H3C-Async1/0/0] async mode posapp 1
11.1.4 debugging pos
Syntax
debugging pos { event | error | packet | all }

undo debugging pos { event | error | packet | all }
View
User view
11-3
Comware V3 Commands
Parameter
None
Description
Use the debugging pos event command to enable event debugging for the POS
access service.
Use the debugging pos error command to enable error debugging for the POS
access service.
Use the debugging pos packet command to enable packet debugging for the POS
access service.
Use the debugging pos all command to enable all debugging for the POS access
service.
Use the undo debugging pos event command to disable event debugging output for
the POS access service.
Use the undo debugging pos error command to disable error debugging output for
the POS access service.
Use the undo debugging pos packet command to disable packet debugging output
for the POS access service.
Use the undo debugging pos all command to disable all debugging output for the
POS access service.
Example
# Enable event debugging for the POS access service.

<H3C> debugging pos event
11.1.5 debugging pos-app
Syntax
debugging pos-app [ app-number ]

undo debugging pos-app [ app-number ]
View
User view
Parameter
app-number: Number of a POS application, in the range 0 to 31.
11-4
Comware V3 Commands
Description
Use the debugging pos-app command to enable debugging for the specified or all
POS applications.
Use the undo debugging pos-app command to disable debugging output for the
specified or all POS applications.
Example
# Enable debugging for POS application 5.

<H3C> debugging pos-app 5
11.1.6 debugging pos-interface
Syntax
debugging pos-interface [ pos-number ]

undo debugging pos-interface [ pos-number ]
View
User view
Parameter
pos-number: Number of a POS access port, in the range 0 to 255.
Description
Use the debugging pos-interface command to enable debugging for the specified or
all POS access ports.
Use the undo debugging pos-interface pos-number command to disable debugging
output for the specified or all POS access ports.
The output of this command provides information about receiving interface, packet type,
discarded packet, packet content, TPDU, and buffer overflow.
Example
# Enable debugging for POS access port 1.

<H3C> debugging pos-interface 1
11.1.7 display fcm
Syntax
display fcm
11-5
Comware V3 Commands
View
Any view
Parameter
None
Description
Use the display fcm command to display the count of dial-up negotiation failures and
the count of disconnections upon transaction timeouts for FCM module interfaces.
Related command: reset fcm.
Example
# Display the count of dial-up negotiation failures and the count of disconnections upon
transaction timeouts for FCM interfaces.
[H3C] display fcm
FCMId ConnectFail Timeout
0 0 0
1 0 0
2 0 0
3 0 0
4 0 2
5 0 0
6 0 0
7 0 0
8 0 0
9 0 0
11.1.8 display pos-app
Syntax
display pos-app
View
Any view
Parameter
None
Description
Use the display pos-app command to display brief information about POS
applications.
11-6
Comware V3 Commands
The output of this command provides information about POS application number,
connection state, and counters for received packets, transmitted packets, error packets,
packets with distribution errors, discarded packets, and buffered packets.
Example
# Display brief information about POS applications.

[H3C] display pos-app
AppId State Recv Send PacErr DisErr Discarded Buffered
0 up 100 50 2 2 2 3
1 up 60 70 0 0 0 0
Table 11-1 Description on the fields of the display pos-app command
Field Description
AppId POS application number
State Connection state
Recv Count of received packets
Send Count of transmitted packets

PacErr Count of error packets
Count of packets with distribution errors. These are packets
DisErr
with unknown application ports.
Count of discarded packets. These are packets that the
application failed to send to the intended front-end
Discarded
processor as the result of link failure, full buffer, or
nonexistent application.
Buffered Count of the packets in the send-buffer for the application
11.1.9 display pos-interface
Syntax
display pos-interface
View
Any view
Parameter
None
Description
Use the display pos-interface command to display brief information about POS
access ports.
11-7
Comware V3 Commands
The output of this command provides information about interface name, POS
application ID, connection state, and counters for received packets, error packets,
application map errors, discarded packets, and buffered packets.
Example
# Display brief information about POS interfaces.

[H3C] display pos-interface
ID Interface Type State Recv Send PacErr MapErr Discarded Buffered
0 serial0 async up 100 50 2 1 3 2
1 serial1 fcm down 0 0 0 0 0 0
Table 11-2 Description on the fields of the display pos-interface command
Field Description
POS access port number. This number is the source
ID
address found in the TPDU field of POS switched packets.
Interface Name of the POS access port
Type Interface module/card type
State Physical state of the POS access port
Recv Count of received packets

Send Count of transmitted packets
Count of error packets. These packets could not be
PacErr recognized as complete switched packet data. Examples
are checksum error and incomplete packets.
Packets with application map errors. No application map
MapErr
entry exists for such packets.
Count of discarded packets. These are application packets
Discarded distributed to the POS access port and discarded as the
result of link failure, full buffer, or unavailable interface.
Count of the packets in the distribution-buffer for the POS
Buffered
access port
11.1.10 pad-mode pos enable
Syntax
pad-mode pos enable

undo pad-mode pos enable [ posid number ]
View
Synchronous serial interface view
11-8
Comware V3 Commands
Parameter
posid number: ID of a POS connection, in the range 0 to 255. This argument is

intended for debugging only. You can view it by executing the display pos-interface
command.
Description
Use the pad-mode pos enable command to enable POSPAD access mode.
Use the undo pad-mode pos enable command to restore the default PAD access
mode, that is, X.25 PAD.
The H3C Series H3Cs support two PAD access modes: X.25 PAD and POSPAD.
Example
# Enable POSPAD access mode on interface Serial 1/0/0.

[H3C-serial1/0/0] pad-mode pos enable
11.1.11 pos-server app tcp
Syntax
pos-server app tcp app-number ip-address port-number

undo pos-server app tcp app-number
View
System view
Parameter
app-number: Number for the POS application, in the range 0 to 31. A H3C can be
configured with up to 32 POS applications.
ip-address: Destination address of the POS application in TCP/IP connection mode.
port-number: Port number of the POS application in TCP/IP connection mode, in the
range 1 to 65,535.
Description
Use the pos-server app tcp command to configure a POS application in TCP/IP
connection mode.
Use the undo pos-server app tcp command to remove the specified POS application.
By default, no POS application is configured.
A POS access H3C can be connected to a UNIX FEP in one of two ways:
asynchronous and TCP/IP. When configuring a POS application in asynchronous
connection mode, a different command is used.
11-9
Comware V3 Commands
On a TCP/IP connection, an application is identified by IP address and port number.

Two applications are regarded unique, whether they use different IP addresses or use
the same IP address but different port numbers.
Example
# Configure POS application 1 with IP address 1.1.254.78 and port number 9010.
[H3C] pos-server app tcp 1 1.1.254.78 9010
11.1.12 pos-server app x25
Syntax
pos-server app x25 appid x121-address

undo pos-server app x25 appid
View
System view
Parameter
app-id: Number of a POS application, in the range 0 to 31.

x121-address: X.121 address of the POSPAD server corresponding to the POS
application.
Description
Use the pos-server app x25 command to configure the specified POS application on
the POSPAD client H3C.
Use the undo pos-server app x25 command to remove the specified POSPAD client
application.
The POSPAD client sends the POS packets of the specified application to the POSPAD
server with the specified x121 address, and receives responses from that address.
When configuring an application, ensure that the serial interface on the H3C works in
X.25 PAD mode and the PAD is available.
The POSPAD client does not support PAD multi-application mapping, so only one client
application needs to be configured.
By default, no POSPAD client application is configured.
Example
# Associate POSPAD client application 1 with the peer x121 address of 12345.
[H3C] pos-server app x25 1 12345
11-10
Comware V3 Commands
11.1.13 pos-server checkschar
Syntax
pos-server checkschar
undo pos-server checkschar
View
System view
Parameter
None
Description
Use the pos-server checkschar command to enable the system to check POS
packets for the string 10 04.
Use the undo pos-server checkschar command to disable the system to check POS
packets for the string 10 04.
In the context of POSPAD access, the string 10 04 indicates a disconnection request
and the string 02 03 03 indicates a connection setup request. After you configure the
pos-server checkschar command, the system considers all packets with the string 10
04 as disconnection requests.
When 10 04 string check is disabled, the system does not check the payload of POS
packets for the string 10 04. Instead, it treats a POS packet as a disconnection request
only when the payload of this packet is 10 04 or when the packet ends with 10 04.
By default, the system does not check POS packets for the string 10 04.
Example
# Enable the system to check POS packets for the string 10 04.
[H3C] pos-server checkschar
11.1.14 pos-server enable
Syntax
pos-server enable
undo pos-server enable
View
System view
11-11
Comware V3 Commands
Parameter
None
Description
Use the pos-server enable command to enable POS access server.

Use the undo pos-server enable command to disable server.
By default, POS access server is disabled.
To implement POS access, you must first enable POS access server. If you execute the
pos-server enable command when POS access server is enabled, the following
prompt appears:
pos-server has been enabled.
Example
# Enable POS access server.

[H3C] pos-server enable
11.1.15 pos-server fcm
Syntax
pos-server fcm { answertime time | tradetime time | packetinterval time }

undo pos-server fcm [ answertime ] [ tradetime ] [ packetinterval ]
View
System view
Parameter
answertime time: Maximum duration waiting for an answer, in the range 500 to 2000
milliseconds. The default is 500 milliseconds.
tradetime time: Maximum duration a transaction may last, in the range 30,000 to
12,000,000 milliseconds. The default is 60,000 milliseconds.
packetinterval time: Maximum duration waiting for an acknowledgement, in the range
3,500 to 10,000 milliseconds. The default is 5,000 milliseconds.
Description
Use the pos-server fcm command to configure FCM parameters for modem
negotiation.
Use the undo pos-server fcm command to restore the defaults.
11-12
Comware V3 Commands
In a POS access application, the modem on the FCM module usually acts as the called
party, and the modem embedded in the POS terminal acts as the calling party. The
following is the communication process between the two parties:
1) The POS terminal originates a call.
2) When the called party detects the call signal, it switches to the off-hook status and
sends answer tone to the POS terminal.
3) After the POS terminal receives the answer tone, the two sides begin the modem
negotiation (V.22). To ensure a successful negotiation, you need to set the
duration of answer tone appropriately considering the differences of telephony
networks in signal quality and delay. For a system with a bad network condition, a
short duration setting may cause modem negotiation failures; on the H3C, the
modem port intermittently comes up/goes down and no data is transmitted or
received. In this case, you can increase the value of the answer timer.
4) After the negotiation succeeds, the two parties begin to communicate. Since the
link layer protocol adopted by POS terminals is SDLC, a timeout retransmission
mechanism is needed to handle communication exceptions during transmission of
data frames. To this end, you may set the packet interval timer. For a system that
must handle packets greater than 512 bytes, consider to increase the value of
packet interval.
POS network convergence ratios are usually quite high. To improve the utilization of
POS access ports, you need to limit the duration of each transaction, preventing a POS
terminal from occupying resources for a long time. To this end, you may set the trade
timer. If a transaction is not completed upon expiration of this timer, the H3C
disconnects the involved POS terminal to release the occupied resources.
In normal cases, the defaults of these timers are adequate. When exceptions occur,
you may modify them as needed.
Related command: pos-server enable.
Example
# Set the answer timer to 800 milliseconds, trade timer to 1,200,000 milliseconds (20
minutes), and packet interval timer to 6000 milliseconds (6 seconds).
[H3C] pos-server fcm answertime 800
[H3C] pos-server fcm tradetime 1200000
[H3C] pos-server fcm packetinterval 6000
11.1.16 pos-server map
Syntax
pos-server map { des-code | default } app-number

undo pos-server map { des-code | default }
11-13
Comware V3 Commands
View
System view
Parameter
des-code: Destination address in the TPDU header of the POS packet. It is a string of
four hexadecimal numerals, such as FFFF, usually used for identifying a bank.
Generally, the number is distributed by the service center to a POS access device.
default: Default POS multi-application map entry.
app-number: Number of a POS application, in the range 0 to 31.
Description
Use the pos-server map command to configure a multi-application POS access map
entry.
Use the undo pos-server map command to delete a multi-application POS access
map entry.
By default, no multi-application POS access map is configured.
When a POS access port receives a packet from its physical interface, it looks up the
POS multi-application map for a match based on the destination address in the TPDU
field. If a match is found, the packet is passed to the corresponding application; if no
match is found, the packet is passed to the default application.
At present, a router supports up to 32 applications.
Example
# Configure the system to send the packets with a destination address of 01f1 in their
TDPU header to application 2.
[H3C] pos-server map 01f1 2
# Configure the system to send the packets that do not match any multi-application
map entry to default application 0.
[H3C] pos-server map default 0
11.1.17 pos-server padmode
Syntax
pos-server padmode { 0 | 1 }
View
System view
11-14
Comware V3 Commands
Parameter
0: Encapsulates POSPAD packets in synchronous format.

1: Encapsulates POSPAD packets in asynchronous format.
Description
Use the pos-server padmode command to configure a POSPAD packet

encapsulation format.
By default, POSPAD packets are encapsulated in synchronous format.
POS transaction packets transmitted from a POS terminal to a POSPAD are
encapsulated in either synchronous format or asynchronous format.
In synchronous format, a POS transaction packet is made up of a TPDU starting with
60 and an ISO 8583 packet. The POSPAD could not recognize the start and end of this
type of packets. To do that, it must use a control mechanism.
In asynchronous format, a POS transaction packet is a synchronous packet
encapsulated starting with 0x02. The packet includes information such as length of the
packet and checksum.
The same encapsulation format must be adopted on the connected POS terminal and
POSPAD.
Example
# Set the POSPAD packet encapsulation format to asynchronous.

[H3C] pos-server padmode 1
11.1.18 pos-server source-ip
Syntax
pos-server source-ip app-number ip-address

undo pos-server source-ip app-number
View
System view
Parameter
app-number: Number of an application, in the range 0 to 31.

ip-address : Source IP address bound with the specified application number.
Description
Use the pos-server source-ip command to bind the specified application with the
source address of a TCP connection.
11-15
Comware V3 Commands
Use the undo pos-server source-ip command to remove the binding.

Packets from multiple POS terminals can be multiplexed into one TCP connection
between the POS access H3C and the UNIX FEP to reach the mainframe. For security
sake and other concerns, you may hide the true IP address of the TCP connection on
the POS access H3C, and use another IP address as the source address instead. More
than that, source address binding can provide link backup.
Note that TCP source IP address binding is only applicable to applications based on
TCP connection. In addition, to ensure a successful binding, the involved TCP
connection must have not been initiated yet. Otherwise, the configuration will fail and
the following error message will appear:
App-state is wrong.
Example
# Bind application 0 in TCP connection mode with IP address 1.1.1.5.

[H3C] pos-server source-ip 0 1.1.1.5
11.1.19 pos-server wait-time
Syntax
pos-server wait-time time

undo pos-server wait-time
View
System view
Parameter
time: POSPAD wait timer setting, in the range 1 to 100, in 100-millisecond units.
Description
Use the pos-server wait-time command to set the POSPAD wait timer.
Use the undo pos-server wait-time command to restore the default of the POSPAD
wait timer, that is, 200 milliseconds.
While a POS terminal sends a packet in asynchronous mode, the POSPAD does not
know when the transmission is complete. Therefore, you need to set a wait timer for the
POSPAD. Upon expiration of this timer, the POSPAD considers that the transmission is
complete and begins to receive the packet.
The setting of this timer depends on packet length. Normally, the default setting is
adequate.
11-16
Comware V3 Commands
Example
# Set the POSPAD wait timer to 300 milliseconds.

[H3C] pos-server wait-time 3
11.1.20 reset fcm
Syntax
reset fcm
View
User view
Parameter
None
Description
Use the reset fcm command to clear the dial-up negotiation failure counter and the
timeout disconnection counter for each FCM interface.
Related command: display fcm.
Example
# Clear the dial-up negotiation failure counter and the timeout disconnection counter for
each FCM interface
[H3C] reset fcm
11.1.21 reset pos
Syntax
reset pos
View
User view
Parameter
None
Description
Use the reset pos command to clear the counters for POS applications and POS
access ports, that is, the information displayed with the display pos-app and display
pos-interface commands.
11-17
Comware V3 Commands
Example
# Clear the counters for POS applications and POS access ports.
[H3C] reset pos
11.1.22 x29 timer idleclear
Syntax
x29 timer idleclear idle-time

undo x29 timer idleclear
View
System view
Parameter
idle-time: Idle-clear timer setting for PAD connection, in the range 0 to 600 seconds. It
defaults to 0 seconds, meaning PAD connection never expires.
Description
Use the x29 timer idleclear command to set the idle-clear timer for PAD connection.
Use the undo x29 timer idleclear command to restore the default.
In normal cases, a POSPAD connection is disconnected upon completion of the
transaction on it. The likelihood exists however, that a POSPAD connection is still
present upon completion of the transaction on it.
To prevent idle PAD connections from occupying resources, configure an idle-clear
timer on the POSPAD H3C. This allows the H3C to automatically terminate an idle PAD
connection upon expiration of the timer.
Example
# Set the timeout period of PAD connections to 600 seconds.

[H3C] x29 timer idleclear 600
11-18
Interface
Command Manual – Interface
Table of Contents
Chapter 1 Interface Management Commands ............................................................................ 1-1

1.1 Interface Management Commands ................................................................................... 1-1
1.1.1 debugging physical ................................................................................................. 1-1
1.1.2 description ............................................................................................................... 1-2
1.1.3 display brief interface .............................................................................................. 1-2
1.1.4 display interface ...................................................................................................... 1-3
1.1.5 display status interface............................................................................................ 1-5
1.1.6 enable snmp trap updown....................................................................................... 1-7
1.1.7 flow-interval ............................................................................................................. 1-8
1.1.8 interface................................................................................................................... 1-9
1.1.9 looptest.................................................................................................................. 1-11
1.1.10 reset counters interface....................................................................................... 1-12
1.1.11 restart .................................................................................................................. 1-13
1.1.12 shutdown ............................................................................................................. 1-14
Chapter 2 Fundamental Ethernet Interface Configuration Commands ................................... 2-1

2.1 Fundamental Ethernet Interface Configuration Commands .............................................. 2-1
2.1.1 display interface { ethernet | gigabitethernet }......................................................... 2-1
2.1.2 duplex...................................................................................................................... 2-4
2.1.3 flow-control .............................................................................................................. 2-5
2.1.4 force-link.................................................................................................................. 2-6
2.1.5 loopback (Ethernet/GE Interface)............................................................................ 2-6
2.1.6 mtu (Ethernet/GE Interface) .................................................................................... 2-7
2.1.7 promiscuous ............................................................................................................ 2-8
2.1.8 speed....................................................................................................................... 2-8
Chapter 3 Layer 2 Ethernet Port Configuration Commands ..................................................... 3-1

3.1 Layer 2 Ethernet Port Configuration Commands............................................................... 3-1
3.1.1 broadcast-suppression............................................................................................ 3-1
3.1.2 description ............................................................................................................... 3-1
3.1.4 display port .............................................................................................................. 3-4
3.1.5 duplex...................................................................................................................... 3-5
3.1.6 flow-control .............................................................................................................. 3-5
3.1.7 interface................................................................................................................... 3-6
3.1.8 mac-address timer aging......................................................................................... 3-7
3.1.9 loopback .................................................................................................................. 3-7
3.1.10 port access vlan .................................................................................................... 3-8
3.1.11 port hybrid pvid vlan .............................................................................................. 3-8
i
3.1.12 port hybrid vlan...................................................................................................... 3-9

3.1.13 port link-type........................................................................................................ 3-10
3.1.14 port trunk permit vlan .......................................................................................... 3-10
3.1.15 port trunk pvid vlan.............................................................................................. 3-11
3.1.16 reset counters interface....................................................................................... 3-12
3.1.17 shutdown ............................................................................................................. 3-12
3.1.18 speed................................................................................................................... 3-13
3.1.19 display mac-address ........................................................................................... 3-14
3.1.20 mac-address........................................................................................................ 3-14
3.2 Port Mirroring Configuration Commands ......................................................................... 3-15
3.2.1 display mirror......................................................................................................... 3-15
3.2.2 monitor-port ........................................................................................................... 3-16
Chapter 4 Fundamental WAN Interface Configuration Commands ......................................... 4-1

4.1 Fundamental Serial Interface Configuration Commands .................................................. 4-1
4.1.1 async mode ............................................................................................................. 4-1
4.1.2 baudrate .................................................................................................................. 4-2
4.1.3 clock (Serial Interface) ............................................................................................ 4-3
4.1.4 code nrzi.................................................................................................................. 4-4
4.1.5 country-code............................................................................................................ 4-5
4.1.6 detect....................................................................................................................... 4-6
4.1.7 idle-mark.................................................................................................................. 4-7
4.1.8 eliminate-pulse ........................................................................................................ 4-7
4.1.9 framefill none........................................................................................................... 4-8
4.1.10 invert receive-clock ............................................................................................... 4-9
4.1.11 invert transmit-clock .............................................................................................. 4-9
4.1.12 loopback .............................................................................................................. 4-10
4.1.13 modem adapt no-waiting-connect ....................................................................... 4-11
4.1.14 mtu (Serial Interface)........................................................................................... 4-11
4.1.15 physical-mode ..................................................................................................... 4-12
4.1.16 phy-mru ............................................................................................................... 4-13
4.1.17 reverse-rts ........................................................................................................... 4-13
4.1.18 virtualbaudrate..................................................................................................... 4-14
4.2 Fundamental CE1/PRI Interface Configuration Commands............................................ 4-15
4.2.1 cable...................................................................................................................... 4-15
4.2.2 channel-set (CE1/PRI Interface) ........................................................................... 4-15
4.2.3 clock (CE1/PRI Interface)...................................................................................... 4-16
4.2.4 code (CEI/PRI Interface) ....................................................................................... 4-17
4.2.5 controller e1........................................................................................................... 4-18
4.2.6 crc.......................................................................................................................... 4-18
4.2.7 detect-ais (CE1/PRI Interface) .............................................................................. 4-19
4.2.8 display controller e1 .............................................................................................. 4-19
4.2.9 error-diffusion restraint config ............................................................................... 4-21
ii
4.2.10 error-diffusion restraint enable ............................................................................ 4-22

4.2.11 frame-format (CE1/PRI Interface) ....................................................................... 4-22
4.2.12 idlecode (in CE1/PRI Interface View).................................................................. 4-23
4.2.13 isdn ie passthrough ............................................................................................. 4-24
4.2.14 itf (CE1/PRI Interface) ......................................................................................... 4-25
4.2.15 loopback (CE1/PRI Interface) ............................................................................. 4-26
4.2.16 pri-set (CE1/PRI Interface).................................................................................. 4-27
4.2.17 reset counters controller e1................................................................................. 4-28
4.2.18 using (CE1/PRI Interface) ................................................................................... 4-28
4.3 Fundamental CT1/PRI Interface Configuration Commands............................................ 4-29
4.3.1 alarm-threshold ..................................................................................................... 4-29
4.3.2 bert (CT1/PRI Interface)........................................................................................ 4-30
4.3.3 cable (CT1/PRI Interface) ..................................................................................... 4-31
4.3.4 channel-set (CT1/PRI Interface) ........................................................................... 4-32
4.3.5 clock (CT1/PRI Interface)...................................................................................... 4-33
4.3.6 code (CT1/PRI Interface) ...................................................................................... 4-34
4.3.7 controller t1............................................................................................................ 4-34
4.3.8 crc.......................................................................................................................... 4-35
4.3.9 data-coding (CT1/PRI Interface) ........................................................................... 4-35
4.3.10 display controller t1 ............................................................................................. 4-36
4.3.11 fdl......................................................................................................................... 4-40
4.3.12 frame-format (CT1/PRI Interface) ....................................................................... 4-41
4.3.13 idlecode (in CT1/PRI Interface View) .................................................................. 4-42
4.3.15 itf (CT1/PRI Interface) ......................................................................................... 4-44
4.3.16 loopback (CT1/PRI Interface).............................................................................. 4-44
4.3.17 pri-set (CT1/PRI Interface) .................................................................................. 4-45
4.3.18 reset counters controller t1.................................................................................. 4-46
4.3.19 sendloopcode ...................................................................................................... 4-47
4.4 E1-F Interface Configuration Commands ........................................................................ 4-48
4.4.1 display fe1 serial.................................................................................................... 4-48
4.4.2 fe1 clock ................................................................................................................ 4-50
4.4.3 fe1 code................................................................................................................. 4-50
4.4.4 fe1 detect-ais (E1-F Interface) .............................................................................. 4-51
4.4.5 fe1 frame-format.................................................................................................... 4-51
4.4.6 fe1 loopback .......................................................................................................... 4-52
4.4.7 fe1 timeslot-list ...................................................................................................... 4-52
4.4.8 fe1 unframed ......................................................................................................... 4-53
4.5 T1-F Interface Configuration Commands ........................................................................ 4-54
4.5.1 display ft1 serial..................................................................................................... 4-54
4.5.2 ft1 bert (T1-F Interface) ......................................................................................... 4-58
4.5.3 ft1 cable................................................................................................................. 4-59
iii
4.5.4 ft1 clock ................................................................................................................. 4-60

4.5.5 ft1 code.................................................................................................................. 4-60
4.5.6 ft1 data-coding....................................................................................................... 4-61
4.5.7 ft1 fdl...................................................................................................................... 4-61
4.5.8 ft1 loopback ........................................................................................................... 4-62
4.5.9 ft1 timeslot-list ....................................................................................................... 4-63
4.5.10 ft1 alarm-threshold .............................................................................................. 4-64
4.5.11 ft1 sendloopcode................................................................................................. 4-65
4.6 Fundamental CE3 Interface Configuration Commands................................................... 4-66
4.6.1 bert ........................................................................................................................ 4-66
4.6.2 clock (CE3 Interface)............................................................................................. 4-68
4.6.3 controller e3........................................................................................................... 4-68
4.6.4 crc.......................................................................................................................... 4-69
4.6.5 display controller e3 .............................................................................................. 4-69
4.6.6 e1 bert ................................................................................................................... 4-71
4.6.7 e1 channel-set....................................................................................................... 4-73
4.6.8 e1 set clock ........................................................................................................... 4-73
4.6.9 e1 set frame-format............................................................................................... 4-74
4.6.10 e1 set loopback ................................................................................................... 4-75
4.6.11 e1 shutdown ........................................................................................................ 4-76
4.6.12 e1 unframed ........................................................................................................ 4-76
4.6.13 loopback (CE3 Interface) .................................................................................... 4-77
4.6.14 national-bit........................................................................................................... 4-78
4.6.15 using (CE3 Interface) .......................................................................................... 4-78
4.7 Fundamental CT3 Interface Configuration Commands ................................................... 4-79
4.7.1 alarm (CT3 Interface) ............................................................................................ 4-79
4.7.2 bert (CT3 Interface)............................................................................................... 4-80
4.7.3 cable (CT3 Interface) ............................................................................................ 4-81
4.7.4 clock (CT3 Interface)............................................................................................. 4-82
4.7.5 controller t3............................................................................................................ 4-83
4.7.6 crc.......................................................................................................................... 4-83
4.7.7 feac (CT3 Interface) .............................................................................................. 4-84
4.7.8 frame-format (CT3 Interface) ................................................................................ 4-86
4.7.9 ft3 (CT3 Interface) ................................................................................................. 4-86
4.7.10 loopback (CT3 Interface)..................................................................................... 4-88
4.7.11 mdl (CT3 Interface) ............................................................................................. 4-88
4.7.12 t1 alarm ............................................................................................................... 4-90
4.7.13 t1 bert .................................................................................................................. 4-91
4.7.14 t1 channel-set...................................................................................................... 4-92
4.7.15 t1 sendloopcode.................................................................................................. 4-93
4.7.16 t1 set clock .......................................................................................................... 4-94
4.7.17 t1 set frame-format.............................................................................................. 4-95
iv
4.7.18 t1 set loopback .................................................................................................... 4-96

4.7.19 t1 set fdl............................................................................................................... 4-97
4.7.20 t1 show ................................................................................................................ 4-98
4.7.21 t1 shutdown ......................................................................................................... 4-99
4.7.22 t1 unframed ....................................................................................................... 4-100
4.7.23 using (CT3 Interface) ........................................................................................ 4-101
4.7.24 display controller t3 ........................................................................................... 4-101
4.8 ISDN BRI Interface Configuration Commands .............................................................. 4-105
4.8.1 display interface bri ............................................................................................. 4-105
4.8.2 loopback (ISDN BRI Interface)............................................................................ 4-107
4.9 CPOS Interface Configuration Commands.................................................................... 4-108
4.9.1 clock .................................................................................................................... 4-108
4.9.2 controller cpos ..................................................................................................... 4-108
4.9.3 display controller cpos......................................................................................... 4-109
4.9.4 display controller cpos e1.................................................................................... 4-111
4.9.5 display controller cpos t1..................................................................................... 4-113
4.9.6 e1 channel-set..................................................................................................... 4-115
4.9.7 e1 set clock ......................................................................................................... 4-116
4.9.8 e1 set frame-format............................................................................................. 4-116
4.9.9 e1 set loopback ................................................................................................... 4-117
4.9.10 e1 shutdown ...................................................................................................... 4-118
4.9.11 e1 unframed ...................................................................................................... 4-119
4.9.12 flag..................................................................................................................... 4-120
4.9.13 frame-format...................................................................................................... 4-121
4.9.14 loopback ............................................................................................................ 4-121
4.9.15 multiplex mode .................................................................................................. 4-122
4.9.16 shutdown ........................................................................................................... 4-123
4.9.17 t1 channel-set.................................................................................................... 4-123
4.9.18 t1 set clock ........................................................................................................ 4-124
4.9.19 t1 set frame-format............................................................................................ 4-125
4.9.20 t1 set loopback .................................................................................................. 4-126
4.9.21 t1 shutdown ....................................................................................................... 4-127
4.9.22 t1 unframed ....................................................................................................... 4-128
4.10 POS Interface Configuration Commands .................................................................... 4-129
4.10.1 clock .................................................................................................................. 4-129
4.10.2 crc...................................................................................................................... 4-129
4.10.3 display interface pos ......................................................................................... 4-130
4.10.4 flag..................................................................................................................... 4-130
4.10.5 frame-format...................................................................................................... 4-131
4.10.6 link-protocol ....................................................................................................... 4-132
4.10.7 loopback ............................................................................................................ 4-132
4.10.8 mtu (POS Interface) .......................................................................................... 4-133
v
4.10.9 scramble............................................................................................................ 4-134
Chapter 5 ATM/DSL Interface Configuration Commands ......................................................... 5-1

5.1 ATM/DSL Interface Commands (Public) ........................................................................... 5-1
5.1.1 display interface atm ............................................................................................... 5-1
5.1.2 interface atm............................................................................................................ 5-3
5.1.3 mtu (ATM Interface) ................................................................................................ 5-3
5.1.4 reset atm ................................................................................................................. 5-4
5.2 IMA-E1/T1 Interface Configuration Commands................................................................. 5-4
5.2.1 cable........................................................................................................................ 5-4
5.2.2 clock ........................................................................................................................ 5-5
5.2.3 differential-delay ...................................................................................................... 5-6
5.2.4 display interface ima-group ..................................................................................... 5-6
5.2.5 display status interface ima-group ........................................................................ 5-10
5.2.6 frame-format.......................................................................................................... 5-12
5.2.7 frame-length .......................................................................................................... 5-13
5.2.8 ima ima-group ....................................................................................................... 5-14
5.2.9 ima-clock ............................................................................................................... 5-14
5.2.10 ima-test................................................................................................................ 5-15
5.2.11 interface ima........................................................................................................ 5-16
5.2.12 loopback .............................................................................................................. 5-16
5.2.13 min-active-links.................................................................................................... 5-17
5.2.14 scramble.............................................................................................................. 5-18
5.3 ATM E3/T3 Interface Configuration Commands.............................................................. 5-18
5.3.1 cable...................................................................................................................... 5-18
5.3.2 clock ...................................................................................................................... 5-19
5.3.3 frame-format.......................................................................................................... 5-20
5.3.4 loopback ................................................................................................................ 5-20
5.3.5 scramble................................................................................................................ 5-21
5.4 ATM 25M Interface Configuration Commands ................................................................ 5-22
5.4.1 clock ...................................................................................................................... 5-22
5.4.2 loopback ................................................................................................................ 5-22
5.5 ATM OC-3c/STM-1 Interface Configuration Commands ................................................. 5-23
5.5.1 clock ...................................................................................................................... 5-23
5.5.2 frame-format.......................................................................................................... 5-24
5.5.3 loopback ................................................................................................................ 5-24
5.5.4 scramble................................................................................................................ 5-25
5.6 G.SHDSL Interface Configuration Commands ................................................................ 5-26
5.6.1 activate .................................................................................................................. 5-26
5.6.2 dsl link-check......................................................................................................... 5-27
5.6.3 shdsl annex ........................................................................................................... 5-27
5.6.4 shdsl psd ............................................................................................................... 5-28
5.6.5 shdsl rate............................................................................................................... 5-29
vi
5.6.6 shdsl snr-margin.................................................................................................... 5-30

5.6.7 shdsl wire .............................................................................................................. 5-31
5.6.8 display dsl configuration........................................................................................ 5-32
5.6.9 display dsl status ................................................................................................... 5-33
5.6.10 display dsl version............................................................................................... 5-37
5.6.11 shdsl mode .......................................................................................................... 5-39
5.7 ADSL Interface Configuration Commands ...................................................................... 5-39
5.7.1 activate .................................................................................................................. 5-39
5.7.2 adsl standard......................................................................................................... 5-40
5.7.3 adsl tx_attenuation ................................................................................................ 5-42
5.7.4 display dsl configuration........................................................................................ 5-42
5.7.5 display dsl status ................................................................................................... 5-44
5.7.6 display dsl version ................................................................................................. 5-45
5.7.7 dsl link-check......................................................................................................... 5-47
5.7.8 upgrade flash......................................................................................................... 5-47
Chapter 6 Fundamental Logical Interface Configuration Commands ..................................... 6-1

6.1 WAN Subinterface Configuration Commands ................................................................... 6-1
6.1.1 interface................................................................................................................... 6-1
6.2 Ethernet Subinterface Configuration Commands .............................................................. 6-2
6.2.1 display vlan.............................................................................................................. 6-2
6.2.2 display vlan interface............................................................................................... 6-3
6.2.3 display vlan max-packet-process ............................................................................ 6-3
6.2.4 display vlan statistics vid ......................................................................................... 6-4
6.2.5 interface ethernet .................................................................................................... 6-4
6.2.6 max-packet-process................................................................................................ 6-5
6.2.7 reset vlan statistics vid ............................................................................................ 6-6
6.2.8 vlan-type dot1q........................................................................................................ 6-6
6.3 Logical Channel Interface .................................................................................................. 6-7
6.3.1 interface logic-channel ............................................................................................ 6-7
6.4 Configuration Commands of Virtual Template and Virtual Access Interface..................... 6-7
6.4.1 broadcast-limit link .................................................................................................. 6-7
6.4.2 display interface virtual-template............................................................................. 6-8
6.4.3 display virtual-access .............................................................................................. 6-9
6.4.4 interface virtual-template....................................................................................... 6-10
6.5 MP-Group Interface Configuration Commands ............................................................... 6-10
6.5.1 display interface mp-group.................................................................................... 6-10
6.5.2 interface mp-group ................................................................................................ 6-11
6.6 Virtual Ethernet Interface Configuration Commands ....................................................... 6-12
6.6.1 display interface virtual-ethernet ........................................................................... 6-12
6.6.2 interface virtual-ethernet ....................................................................................... 6-12
6.6.3 mac-address.......................................................................................................... 6-13
6.7 Configuration Command of Loopback Interface and Null Interface................................. 6-13
vii
6.7.1 display interface loopback..................................................................................... 6-13

6.7.2 display interface null.............................................................................................. 6-14
6.7.3 interface loopback ................................................................................................. 6-15
6.7.4 interface null .......................................................................................................... 6-15
Chapter 7 OSM Configuration Commands ................................................................................. 7-1

7.1 display osm status slot....................................................................................................... 7-1
7.2 osm connect slot ................................................................................................................ 7-2
7.3 osm reboot slot .................................................................................................................. 7-3
7.4 osm reload slot................................................................................................................... 7-3
7.5 osm shutdown slot ............................................................................................................. 7-4
7.6 sync-clock enable .............................................................................................................. 7-4
7.7 sync-clock interval.............................................................................................................. 7-5
viii
Comware V3 Chapter 1 Interface Management Commands
Chapter 1 Interface Management Commands
1.1 Interface Management Commands

1.1.1 debugging physical
Syntax
debugging physical { all | error | event | packet } [ interface interface-type

interface-number ]
undo debugging physical { all | error | event | packet } [ interface interface-type
interface-number ]
View
User view
Parameter
all: Enables all debugging.

error: Enables error debugging.
interface interface-type interface-number: Specifies an interface by its type and
number.
Description
Use the debugging physical command to enable debugging of the physical module
on the specified interface.
Use the undo debugging physical command to disable debugging on the specified
interface.
Example
# Enable event output for the physical module of T1 interface.

<H3C> debugging physical event
*0.98233210 H3C PHYD/8/debugging: (T1 1/0/0)PHY/EVT: Loss of signal. /*
// Display LOS information when no cable is connected and display Recovery of signal
when a cable is present.
*0.98233300 H3C PHYD/8/debugging: (T1 1/0/0)PHY/EVT: Loss of frame
alignment./*
1-1
// Display LOF information when frame alignment is lost, and display Recovery of
frame alignment when frame alignment is achieved.
*0.98233400 H3C PHYD/8/debugging:(T1 1/0/0)PHY/EVT: No AIS. /*
// Display whether AIS signals have been received.

*0.98233480 H3C PHYD/8/debugging: (T1 1/0/0)PHY/EVT: No remote alarm. /*
// Display whether RAI signals have been received.

Note that the information that the error and event debugging switches output varies by
interface type.
1.1.2 description
Syntax
description interface-description
undo description
View
Interface view
Parameter
interface-description: A string of characters up to 80. It describes the interface and

defaults to “xxxxxx interface”.
Description
Use the description command to describe the interface.

Use the undo description command to restore the default.
This command has no special purpose or function other than identifying an interface.
Related command: display interface.
Example
# Change the description of the interface Ethernet 0/0/0 to “H3C Router Ethernet
interface”.
[H3C-Ethernet0/0/0] description H3C Router ethernet interface
1.1.3 display brief interface
Syntax
display brief interface [ type [ number ] ] [ | { begin | include | exclude} text ]
1-2
View
Any view
Parameter
type: Interface type.

number: Interface number.
begin: Displays information that begins with the specified regular expression.
include: Displays information that includes the specified regular expression.
exclude: Displays information that excludes the specified regular expression.
text: Specifies a regular expression.
Description
Use the display brief interface command to display summary information about the
Example
# Display summary information about all interfaces, with the regular expression
“down” included.
<H3C> display brief interface | include down
Interface Link Protocol-link Protocol type Main IP
Analogmodem2/0/0 DOWN UP (spoofing) PPP --
Analogmodem2/1/0 DOWN UP (spoofing) PPP --
Atm1/0/0/0 DOWN DOWN ATM --
Aux0 DOWN DOWN PPP --
Dialer0 UP UP (spoofing) PPP --
Ethernet0/0/0 DOWN DOWN ETHERNET --
NULL0 UP UP (spoofing) NULL --
Serial0/0/0 DOWN DOWN PPP --
Serial3/0/0:0 DOWN DOWN PPP --
1.1.4 display interface
Syntax
display interface type number [ .sub-number ]
View
Any view
Parameter
type: Interface type, along with number identifies an interface.
1-3
number: Interface number, along with type, identifies an interface.

sub-number: Subinterface number.
Description
Use the display interface command to view the current running state and other
information about an interface.
Executing this command displays the following information:
z Physical and protocol state of the interface
z Physical features of the interface (including operating mode, DTE/DCE, clock
selection, external cable, and so on.)
z IP address of the interface
z Link layer protocol of the interface and its operating state and statistics.
z Statistics about the incoming and outgoing packets on the interface
Related command: reset counters interface.
Example
# View the running state and the relevant information about Serial 0/0/0.
[H3C] display interface serial 0/0/0
Serial0/0/0 is up , line protocol is up
Description : Serial0/0/0 Interface
Virtualbaudrate is 300 bps
The Maximum Transmit Unit is 1500, The keepalive is 10(sec)
Internet protocol processing : disabled
Link layer protocol is PPP
LCP opened, MPLSCP stopped
FIFO queuing: (Outbound queue:Size/Length/Discards)
FIFO: 0/75/0
Physical layer is synchronous,Baudrate is 64000 bps
Interface is DCE, Cable type is V35
5 minutes input rate 0.56 bytes/sec, 0.04 packets/sec
5 minutes output rate 0.66 bytes/sec, 0.05 packets/sec
51 packets input, 640 bytes, 0 no buffers
55 packets output, 700 bytes, 0 no buffers
0 input errors, 0 CRC, 0 frame errors
0 overrunners, 0 aborted sequences, 0 input no buffers
DCD=UP DTR=UP DSR=UP RTS=UP CTS=UP
1-4
Table 1-1 Description on the displayed information
Field Description
Serial0 is up Physical layer state of the interface
line protocol is up Link layer state of the interface
The input rate of the interface within the last five
5 minutes input rate
minutes
The output rate of the interface within the last five
5 minutes output rate
minutes
FIFO queueing: FIFO Type of the output queue on the interface
Packets and bytes received by the interface and
51 packets input, 640 bytes,
the packets discarded due to the unavailability of
0 no buffers
receive-buffer.
Packets and bytes sent by the interface and the
55 packets output, 700 bytes,
packets discarded due to the unavailability of
0 no buffers
send-buffer.
input errors:0, CRC:0, frame The received packets that contain errors, including
errors:0 CRC errors and frame errors.
DCD=UP DTR=UP DSR=UP State of the physical electrical signals DCD, DTR,
RTS=UP CTS=UP DSR, RTS, and CTS
1.1.5 display status interface
Syntax
display status interface interface-type interface-number
View
Any view
Parameter
Description
Use the display status interface command to display the state of the specified
interface.
Example
# Display the state of Ethernet interface 0/0/0.

[H3C] display status interface ethernet 0/0/0
transmit information
call times: 1
1-5
callok times: 1
done times: 1
delay times: 0
destroy time: 0
receive information
done times: 0
get ok mbufs: 0
make mbuf fails: 0
no buffer times: 0
Rx disable times: 0
Rx enable times: 1
software statistical information :

pMsg address: 0x04a6b9a4
pci Base: 0x80000000
slot/port isr: 0x0/0x64
EthType Flag: 0x0000ffff
RxBD Base: 0x00000000
TxBD Base: 0x00000000
TxAuxBD Base: 0x04a6ca68
Intr Req times: 0
Intr Done times: 0
Intr Rnr times = 0
Max Tx BDs: 64
Max Rx BDs: 64
bd_tptr: 1
bd_cptr: 0
bd_rptr: 0
RPTR: 63
FreeBDs: 63
Hardware information of receive:
Input packets: 0
Broadcast packets: 0
Multicast packets: 0
Align error packets: 0
CRC errors packets: 0
Symb errors packets: 0
Sequence err packets: 0
Recv No Buffers: 0
Short Packets(<64): 0
Long Packets: 0
CRC errors packets: 0
1-6
Symb errors packets: 0

Sequence err packets: 0
Recv No Buffers: 0
Short Packets(<64): 0
Long Packets: 0
Hardware information of transmitted:

Output packets: 0
Broadcast packets: 1
Multicast packets: 0
Defered Packets: 0
No ready(underrun): 0
Lost Carriers: 0
Late collisions: 0
Total collision: 0
Flow-control information:
Receive XON frame: 0
Transmit XON frame: 0
Receive XOFF frame: 0
Transmit XOFF frame: 0
1.1.6 enable snmp trap updown
Syntax
enable snmp trap updown

undo enable snmp trap updown
View
Interface view
Parameter
None
Description
Use the enable snmp trap updown command to enable the interface to send
UPDOWN traps.
Use the undo enable snmp trap updown command to disable the interface to send
UPDOWN traps.
By default, the interface can send UPDOWN traps.
Example
# Disable interface Ethernet 0/0/0 to send UPDOWN traps.
1-7
[H3C-Ethernet0/0/0] undo enable snmp trap updown
1.1.7 flow-interval
Syntax
flow-interval seconds
undo flow-interval
View
System view
Parameter
seconds: Statistic interval in the range 1 to 1500 seconds. It defaults to 300 seconds.
Description
Use the flow-interval command to configure the interval for measuring the average
rate of the interfaces.
Use the undo flow-interval command to restore the default.
Example
# Set the interval for measuring the average interface rate to 10 seconds.
[H3C] flow-interval 10
# Display information on Ethernet0/0/0.

[H3C] display interface Ethernet 0/0/0
Ethernet0/0/0 current state :UP
Line protocol current state :UP
Description : Ethernet0/0/0 Interface
The Maximum Transmit Unit is 1500, Hold timer is 10(sec)
Internet Address is 202.82.28.28/28
Internet Address is 10.0.103.254/24 Sub
Internet Address is 10.0.102.254/24 Sub
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is
00e0-fc12-384f
Media type is twisted pair, loopback not set, promiscuous mode not set
100Mb/s, Full-duplex, link type is force link
Output flow-control is disabled, input flow-control is disabled
Output queue : (Urgent queue : Size/Length/Discards) 0/50/0
Output queue : (Protocol queue : Size/Length/Discards) 0/500/0
Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0
Last 30 seconds input rate 138.36 bytes/sec, 1.63 packets/sec
1-8
Last 30 seconds output rate 5.59 bytes/sec, 0.13 packets/sec

Input: 492731 packets, 84128872 bytes, 492731 buffers
156266 broadcasts, 145584 multicasts, 0 pauses
79 errors, 78 runts, 0 giants
1 crc, 0 align errors, 0 overruns
0 dribbles, 0 drops, 0 no buffers
Output:230681 packets, 165591360 bytes, 230683 buffers
0 errors, 0 underruns, 0 collisions
0 deferred, 0 lost carriers
1.1.8 interface
Syntax
interface type number [ .sub-number ]

undo interface type number [ .sub-number ]
View
System view
Parameter
type: Interface type. Table 1-2 lists the interfaces that Comware supports so far.
number: Interface number. Comware numbers the interfaces separately by interface
type, with the numbers of each type of interfaces beginning at 0 or 1.
sub-number: Subinterface number, which is separated from the main interface
number by a dot (.).
Description
Use the interface command to enter the specified interface view or create a logical
interface or subinterface.
Use the undo interface command to delete a specified logical interface or
subinterface.
Table 1-2 Interfaces supported by Comware
Interface Description Attribute

ATM ATM interface Physical interface
AUX AUX interface Physical interface
AnalogModem Analog modem interface Physical interface
Async Asynchronous serial interface Physical interface
Bri ISDN BRI interface Physical interface
1-9
Interface Description Attribute

Bridge-Template Bridge-group virtual interface Logical interface
controller e1 E1 interface Physical interface
controller t1 T1 interface Physical interface
controller e3 E3 interface Physical interface
controller t3 T3 interface Physical interface
Dialer Dialer interface Logical interface
Ethernet Ethernet interface Physical interface
gigabitethernet Gigabit Ethernet interface Physical interface
Logic-Channel Logical-channel interface Logical interface
Loopback Loopback interface Logical interface
NULL Null interface Logical interface
MFR Multi-link FR (MFR) interface Logical interface
Serial Synchronous serial interface Physical interface
Virtual-Ethernet VE interface Logical interface

Virtual-Template Virtual-template interface Logical interface
Tunnel Tunnel interface Logical interface
Remembering the interface numbering convention mentioned earlier, you could know
that the name of a physical interface is represented by interface type + interface
number. For example, Ethernet0/0/0 represents the Ethernet interface numbered
0/0/0, and Serial0/0/0.1 the first subinterface on the interface Serial0/0/0, and
interface Serial3/0/0:2 the second channel set of the CE1/PRI interface (namely
controller interface) numbered 3/0/0.
The name of a logical interface is represented by interface type + interface number,
for example, tunnel 0.
You can however shorten the type portion in the interface name by inputting only the
leading conflict-free letters, for example, e0/0/0 for Ethernet 0/0/0 and s0/0/0.1 for
Serial 0/0/0.1.
You can enter the view of the desired physical interface and create logical interfaces
or subinterfaces as needed by executing the interface command.
You can create subinterfaces for an Ethernet interface or a serial interface
encapsulated with X.25 or Frame Relay (FR). The subinterface numbered 0 is the
actually corresponding main interface.
Note that executing the undo interface command deletes the defined logical
interfaces (such as Dialer, tunnel, and virtual-template interfaces) and subinterfaces.
1-10
Example
# Enter the Ethernet interface view in system view.

[H3C]interface ethernet 0/0/0
[H3C-Ethernet0/0/0]
# Switch from Ethernet0/0/0 view to the view of the subinterface Serial0/0/0.1.

[H3C-Ethernet0/0/0] interface serial0/0/0.1
[H3C-Serial0/0/0.1]
1.1.9 looptest
Syntax
looptest [ -c count | -p { pattern | special { ascending | descending | random } } | -s

packetsize | -t timeout ] * interface type number
View
Any view
Parameter
-c count: Number of test packets sending attempts, in the range 1 to 4,294,967,295. It

defaults to 5.
-p pattern: Test pattern, a hexadecimal string in the range 0 to FFFFFFFF, for
example ff. The default test pattern is 0x55 interleaved with 0xAA.
ascending: Pads each test packet byte-by-byte with sequences from 0x00 to 0xff
cyclically in ascending order.
descending: Pads each test packet byte-by-byte with sequences from 0x00 to 0xff
cyclically in descending order.
random: Pads each test packet byte-by-byte with a sequence in the range 0x00 to
0xff.
-s packetsize: Test packet size with the 12-byte header excluded. It ranges from 0 to
1688 bytes and defaults to 52 bytes.
-t timeout: Sets the timeout waiting for receiving a sent test packet. It ranges from 0 to
65,535 milliseconds and defaults to 2000 milliseconds.
interface type number: Specifies an interface by its type and number.
Description
Use the looptest command to test whether an interface or line is in a loop.

Loop test is available only on synchronous serial interfaces (including those formed
on E1/T1/E1-F/T1-F interfaces) using SD701 chips.
1-11
A loop test on an interface starts by sending a test packet. If the interface is in a local
or line loop, the test packet just sent will loop back to the interface.
In addition to testing interface or line loops, you may use this command to test the
transmission quality of a loopback line.
The output of this command provides information about:
z Receiving state of test packets. If a test packet does not loop back to the sending
interface upon timeout, the message “Wait time out” is displayed. If it does loop
back, information about number of bytes, sequence number, and delay is
displayed for the packet.
z Final statistics about sent test packets, received test packets, lost packets,
received error packets, percentage of lost packets, percentage of error packets,
delay in its minimum/average/maximum, and test conclusion.
For a line with a low transmission speed, increase the timeout waiting for receiving a
sent test packet.
Related command: loopback, fe1 loopback, ft1 loopback.
Example
# Test whether interface Serial 1/0/0 and its connected line is in a loop.
<H3C> looptest interface serial 1/0/0
LOOPTEST Serial1/0/0: 52 data bytes, press CTRL_C to break
Receive from Serial1/0/0: bytes=52 sequence=1 time=1 ms
--- Serial1/0/0 looptest statistics ---

5 packet(s) transmitted
5 packet(s) received
0 packet(s) lost
0 packet(s) error
0.00% packet lost
0.00% packet error
round-trip min/avg/max = 1/1/1 ms
conclusion: loopback
1.1.10 reset counters interface
Syntax
reset counters interface [ interface-type [ interface-number ] ]
1-12
View
User view
Parameter
Description
Use the reset counters interface command to clear statistics about the transmitted
and received packets, IP, ARP, and ICMP on the specified interface or all interfaces.
To count the traffic size on an interface within some period, you need to clear the
existing statistics on the interface before making a new counting.
Example
# Clear the statistics on Serial 0/0/0.

<H3C> reset counters interface serial 0/0/0
1.1.11 restart
Syntax
restart
View
Interface view
Parameter
None
Description
Use the restart command to reset the physical interface.

In some special circumstances, after modifying the operating parameters on an
interface for example, the modification cannot take effect immediately. To make new
configurations take effect, you must perform the commands shutdown and undo
shutdown on the interface, or alternatively the restart command. In remote
management, this command can reset the managed interface without disrupting
management.
Example
# Reset the interface Ethernet 1/0/0.

[H3C-Ethernet1/0/0] restart
1-13
1.1.12 shutdown
Syntax
shutdown
undo shutdown
View
Interface view
Parameter
None
Description
Use the shutdown command to shut down the interface.

Use the undo shutdown command to enable the interface.
This command can take effect not only on physical interfaces but also on loopback,
tunnel and MFR interfaces.
In some special circumstances, after modifying the operating parameters on an
interface for example, the modification cannot take effect immediately. To make new
configurations take effect, you must perform the commands shutdown and undo
shutdown on the interface, or alternatively the restart command.
Example
# Shut down Ethernet 0/0/0.

[H3C-Ethernet0/0/0] shutdown
%Dec 15 13:48:39:630 2005 28-31 PHY/2/PHY: Ethernet0/0: change status to
down
%Dec 15 13:48:39:730 2005 28-31 IFNET/5/UPDOWN:Line protocol on the interface
Et
hernet0/0 is DOWN
1-14
Command Manual – Interface Chapter 2 Fundamental Ethernet Interface
Comware V3 Configuration Commands
Chapter 2 Fundamental Ethernet Interface

Configuration Commands
2.1 Fundamental Ethernet Interface Configuration

Commands
2.1.1 display interface { ethernet | gigabitethernet }
Syntax
display interface { ethernet | gigabitethernet } [ interface-number ]
View
Any view
Parameter
ethernet: Displays the state of FE interfaces.

gigabitethernet: Displays the state of GE interfaces.
interface-number: Interface number. If no interface is specified, the configuration and
state information on all the interfaces is displayed.
Description
Use the display interface { ethernet | gigabitethernet } command to view

information about Ethernet interfaces, such as their configurations and current
running state.
Example
# Display state information about Ethernet interface 2/0/0.

<H3C> display interface ethernet 2/0/0
Ethernet2/0/0 current state : UP
Line protocol current state : UP
The Maximum Transmit Unit is 1500, Hold timer is 10(sec)
00e0.fc06.3085
Media type is twisted pair, loopback not set, promiscuous mode not set
100Mb/s-speed mode,Full-duplex mode,link type is autonegotiation
Output flow-control is unsupported, input flow-control is unsupported
2-1

Last 5 minutes input rate 227.13 bytes/sec, 2.67 packets/sec
Last 5 minutes output rate 0.00 bytes/sec, 0.00 packets/sec
Input: 542665 packets, 47721004 bytes
271460 broadcasts, 271205 multicasts
0 errors, 0 runts, 0 giants,
0 CRC, 0 align errors, 0 overruns,
0 dribbles, 0 aborts, 0 no buffers
Output:0 packets, 0 bytes
0 deferred
Table 2-1 Description on the fields of the display interface command
Field Description
Ethernet2/0/0 current state : UP Current state of the Ethernet interface
Current state of the link layer protocol on
Line protocol current state
the Ethernet interface
Description Description about the Ethernet interface
The Maximum Transmit Unit is 1500 MTU of the Ethernet interface
Hold timer is 10(sec) Poll interval
IP address and subnet mask of the
Ethernet interface
IP Sending Frames' Format is
Format and hardware (MAC) address of
PKTFMT_ETHNT_2, Hardware address
IP sending frames
is 00e0.fc06.3085
Media type is twisted pair Medium type
Indicates whether loopback is enabled
loopback not set
on the interface
Indicates whether promiscuous mode is
promiscuous mode not set
set
100Mb/s-speed mode,Full-duplex Speed, duplex mode, and link type on
mode,link type is autonegotiation the interface
Output flow-control is unsupported, input Output and input flow control modes on
flow-control is unsupported the interface
Current length and maximum length of
Output queue : (Urgent queue :
the urgent output queue and its dropped
Size/Length/Discards) 0/500/0
packets
Current length and maximum length of
Output queue : (FIFO queuing :
the FIFO queue, and its dropped
Size/Length/Discards) 0/75/0
packets
2-2
Field Description
Last 5 minutes input rate 227.13 Input and output rates within the last five
bytes/sec, 2.67 packets/sec minutes on the interface, in terms of
Last 5 minutes output rate 0.00 bytes per second and packets per
bytes/sec, 0.00 packets/sec second

271460 broadcasts, 271205 multicasts Statistics about input packets for the
0 errors, 0 runts, 0 giants, interface, covering number of packets,
number of bytes, number of multicast
0 CRC, 0 align errors, 0 overruns, packets, and number of errors
# Display the running state and relevant information on the GE interface 1/0/1.
[H3C] display interface GigabitEthernet 1/0/1
GigabitEthernet1/0/1 current state : DOWN
00e0-fc00-1500
The Maximum Transmit Unit is 1500
Media type is twisted pair, loopback not set
Port hardware type is 1000_BASE_SFP
100Mbps-speed mode, unknown-duplex mode
Link speed type is force link, link duplex type is autonegotiation
Flow-control is not enabled
The Maximum Frame Length is 1500
Broadcast MAX-ratio: 100%
Unicast MAX-ratio: 100%
Multicast MAX-ratio: 100%
Allow jumbo frame to pass
PVID: 1
Mdi type: across
Port link-type: access
Tagged VLAN ID : none
Untagged VLAN ID : 1
Last 300 seconds input: 0 packets/sec 0 bytes/sec
Last 300 seconds output: 0 packets/sec 0 bytes/sec
Input(total): 0 packets, 0 bytes
Input(normal): 0 packets, 0 bytes
Input: 0 input errors, 0 runts, 0 giants, 0 throttles, 0 CRC
0 frame, 0 overruns, 0 aborts, 0 ignored, 0 parity errors
Output(total): 0 packets, 0 bytes
2-3
Output(normal): 0 packets, 0 bytes

Output: 0 output errors, 0 underruns, 0 buffer failures
0 aborts, 0 deferred, 0 collisions, 0 late collisions
0 lost carrier, 0 no carrier
Note:
For an SFP port, the detailed information about the optic module including vender
type, wavelength, transmission distance, and serial number as follows:
The transceiver Detail Information:
The transceiver type: Xenpak
The standard compliance: 1000BASE_CX
Transfers distance(m) :9um Fiber: 0
50um Fiber: 0
625um Fiber: 1000
copper line: 100
Serial Num is 123456789
Vender Name is 3com
3C Number is 123456789
2.1.2 duplex
Syntax
duplex { full | half | negotiation }

undo duplex
View
Parameter
full: Sets the Ethernet interface to work in full duplex.

half: Sets the Ethernet interface to work in half duplex.
negotiation: Sets the Ethernet interface to work in auto-negotiation mode.
Description
Use the duplex command to set the operating mode of the Ethernet interface.
Use the undo duplex command to restore the default operating mode of the Ethernet
interface.
2-4
By default, the Ethernet interface is working in auto-negotiation mode.

Connected to a hub, the Ethernet interface on a router must be specified to work in
half-duplex mode. Connected to a network device supporting full-duplex, a LAN
Switch for example, it must be specified to work in full-duplex mode, however.
Note that FE and GE electrical interfaces can support both full-duplex and half-duplex,
whereas FE and GE optical interfaces can only work in full-duplex mode.
Before setting the Ethernet interface to work in auto-negotiation mode, you must
make sure that the connected remote end has been working in auto-negotiation mode.
If this cannot be guaranteed, the two parties are recommended to use the forced
setting for the consistency in operating mode.
Related command: speed, display interface.
Example
# Set the Ethernet interface to work in full duplex.

[H3C-Ethernet0/0/0] duplex full
2.1.3 flow-control
Syntax
flow-control
undo flow-control
View
Parameter
None
Description
Use the flow-control command to enable flow control on the Ethernet interface,
which is useful only when the peer end also supports flow control.
Use the undo flow-control command to restore the default.
By default, flow control is disabled.
When using this command, keep the configuration the same as that of the peer end.
Example
# Enable flow control on GE interface 0/0/0.

<H3C> system-view
[H3C] interface gigabitethernet 0/0/0
[H3C-GigabitEthernet0/0/0] flow-control negotiation
2-5
2.1.4 force-link
Syntax
force-link
undo force-link
View
GE interface view
Parameter
None
Description
Use the force-link command to enable the GE interface to work in force mode.
Use the undo force-link command to restore the default operating mode.
The default operating mode is negotiation.
GE optical interfaces provide two operating modes: negotiation and force. In
negotiation mode, the interface chip checks negotiation code, negotiating the format
of the PAUSE frame and the peer state (that is, whether it is faulty). In force mode, no
negotiation stream is present on the line. The interface chip decides whether an
interface can be brought up depending on how much light intensity it reads.
You must set the two ends to work in the same operating mode. Any inconsistency
can prevent the interface adopting negotiation mode from going up.
Example
# Enable negotiation on the GE interface 0/0/0.

[H3C-GigabitEthernet0/0/0] force-link
2.1.5 loopback (Ethernet/GE Interface)
Syntax
loopback
undo loopback
View
Parameter
None
2-6
Description
Use the loopback command to enable local loopback on the Ethernet interface.
Use the undo loopback command to disable local loopback on the Ethernet
interface.
By default, local loopback is disabled on the Ethernet interface.
You need to enable local loopback on the Ethernet interface only when testing some
special functions.
Note:
The Ethernet interface works in full duplex mode after you enable loopback. The
original mode resumes after loopback is disabled.
Example
# Enable local loopback on the FE interface.

[H3C-Ethernet0/0/0]loopback
2.1.6 mtu (Ethernet/GE Interface)
Syntax
mtu size
undo mtu
View
Parameter
size: Maximum transmission unit (MTU) size of the Ethernet interface, which is in
bytes. It is in the range 46 to 1500 for the frame formats of both Ethernet_II and GE.
Description
Use the mtu command to set the MTU size of the Ethernet interface.
Use the undo mtu command to restore the default or 1500 bytes.
The MTU setting of an Ethernet interface can affect the assembly and fragmentation
of IP packets on the interface.
2-7
Example
# Set MTU of the FE interface 0/0/0 to 1492.

[H3C-Ethernet0/0/0] mtu 1492
2.1.7 promiscuous
Syntax
promiscuous
undo promiscuous
View
Parameter
None
Description
Use the promiscuous command to set the Ethernet interface to operate in

promiscuous mode.
Use the undo promiscuous command to disable the Ethernet interface to operate in
promiscuous mode.
By default, the Ethernet interface is operating in non-promiscuous mode.
When the Ethernet interface is operating in promiscuous mode, it receives all correct
Ethernet packets without checking their MAC addresses, This mode is configured
when network listening applies.
After you enable the bridging function on an Ethernet interface and adds it to a
bridge-set, the interface enters promiscuous mode automatically. After removed from
the bridge-set, the interface enters non-promiscuous mode automatically.
Example
# Set interface ethernet 0/0/0 to operate in promiscuous mode.

[H3C-Ethernet0/0/0] promiscuous
2.1.8 speed
Syntax
speed { 10 | 100 | 1000 | negotiation }

undo speed
2-8
View
Parameter
10: Forces the Ethernet interface to work at 10 Mbps.

100: Forces the Ethernet interface to work at 100 Mbps.
1000: Forces the Ethernet interface to work at 1000 Mbps (only applied to GE
interfaces).
negotiation: Sets the Ethernet interface to work in auto-negotiation mode.
Description
Use the speed command to set the operating speed of the Ethernet interface.
Use the undo speed command to restore the default operating speed of the Ethernet
interface.
By default, the Ethernet interface is working in auto-negotiation mode.
Before setting the Ethernet interface to work in auto-negotiation mode, make sure that
the connected end is working in auto-negotiation mode. If you cannot make sure,
manually set the same operating mode at the two ends.
You can set the rate of FE electrical interface to 10 Mbps, 100 Mbps or auto-sensing
and the rate of GE electrical interface to 10 Mbps, 100 Mbps, 1000 Mbps or
auto-sensing. Nevertheless, the rate of FE optical interface is fixed to 100Mbps and
the rate of GE optical interface is fixed to 1000Mbps, which cannot be changed by
using commands.
Note:
As for GE electrical interface, the operating rate of 1000Mbps and the mode of
half-duplex are mutually exclusive. Do not set these two values at the same time.
Related command: duplex, display interface.
Example
# Set the FE interface to work in 10Base-T mode.

[H3C-Ethernet0/0/0] speed 10
2-9
Command Manual – Interface Chapter 3 Layer 2 Ethernet Port Configuration
Comware V3 Commands
Chapter 3 Layer 2 Ethernet Port Configuration

Commands
3.1 Layer 2 Ethernet Port Configuration Commands

3.1.1 broadcast-suppression
Syntax
broadcast-suppression pct
undo broadcast-suppression
View
Ethernet port view
Parameter
pct: Specifies the maximum wire speed ratio of the broadcast traffic allowed on the
Ethernet port. It ranges from 5 to 100 and defaults to 100. The smaller the ratio is, the
smaller the broadcast traffic is allowed.
Description
Use the broadcast-suppression command to restrict the broadcast traffic size on

the port. Once broadcast traffic exceeds the specified value, the system starts
discarding broadcast packets until the broadcast traffic decreased below the
acceptable degree.
Use the undo broadcast-suppression command to restore the default (100),
allowing all broadcast traffic to pass through without broadcast suppression.
Related command: display VLAN.
Example
# Allow 20% of broadcast traffic to pass, meaning 80% of broadcast traffic is

suppressed on the port.
[H3C-Ethernet1/0/1] broadcast-suppression 20
3.1.2 description
Syntax
description text
3-1
Comware V3 Commands
undo description
View
Ethernet port view
Parameter
text: Port description, a string of up to 80 characters.
Description
Use the description command to configure port description. Identifying a port is the
only function of this command.
Use the undo description command to restore the default port description, that is,
port name plus interface.
Example
# Set the description of port Ethernet 1/0/1 to Ethernet-interface.

[H3C-Ethernet1/0/1] description Ethernet-interface
Syntax
display interface [ interface_type | interface_type interface_num | interface_name ]
View
Any view
Parameter
interface_type: Port type.

interface_num: Port number.
interface_name: Port name, in interface_type interface_num format.
Description
Use the display interface command to view configuration information on the port.
If port type and port number are not specified when displaying the port information,
information on all the ports is displayed. If only port type is specified, information on all
the ports of this type is displayed. If both port type and port number are specified,
information on the specified port is displayed.
Example
# Display configuration information on port Ethernet 1/0/1.

<H3C> display interface ethernet1/0/1
3-2
Comware V3 Commands
Ethernet1/0/1 current state :DOWN

Media type is twisted pair, loopback not set
100Mb/s, Full-duplex, link type is autonegotiation
Mac aging time is 300 seconds, Broadcast MAX-ratio: 100
Output flow-control is disabled, input flow-control is disabled
PVID : 1
Port link-type : access
Tagged VLAN ID : none
Untagged VLAN ID : 1
0 errors, 0 runts, 0 giants
0 dribbles, 0 drops, 0 no buffers
Output:18095 packets, 5951855 bytes, 0 buffers
Field Description
Current state of the port, enabled or
Ethernet1/0/1 current state
disabled
Description Port description
Media type Media type
loopback not set State about loopback on the port
Port hardware type Hardware type of the port
100Mbps-speed mode, full-duplex mode Both duplex mode and port rate are set
to auto-negotiation, but full-duplex and
Link speed type is autonegotiation, link 100 Mbps are adopted as the result of
duplex type is autonegotiation negotiation with the peer.
Flow-control is not supported Flow control setting on the port
Mac-aging time Aging time of MAC addresses
Broadcast storm suppression ratio on
Broadcast MAX-ratio
the port
Output flow-control is disabled, input Output flow control and input flow control
flow-control is disabled are disabled.
PVID Default VLAN ID of the port
3-3
Comware V3 Commands
Field Description
Port link-type Link type of the port
Indicates the VLAN from which the
Tagged VLAN ID
packets must be tagged.
Indicates the VLAN from which the
Untagged VLAN ID
packets are not to be tagged.
Last 300 seconds output: 0 packets/sec
0 bytes/sec The input and output rates as well as the
input and output packets in the last 300
Last 300 seconds input: 0 packets/sec 0 seconds on the port
bytes/sec
0errors,0runts,0giants
Statistics about input/output packets and
0 dribbles, 0 drops, 0 no buffers errors on the port
Output: 0 packets, 0 bytes,0 buffers
3.1.4 display port
Syntax
display port { hybrid | trunk }
View
Any view
Parameter
hybrid: Displays hybrid ports.

Trunk: Displays trunk ports.
Description
Use the display port command to check whether the current system has hybrid or
trunk ports. If there is any, its port name is displayed.
Example
# Display the hybrid ports in the current system.

<H3C> display port hybrid
Now, the following hybrid ports exist:
Ethernet1/0/1 Ethernet1/0/2
3-4
Comware V3 Commands
The output indicates that the current system has two hybrid ports, Ethernet 1/0/1 and
Ethernet 1/0/2.
3.1.5 duplex
Syntax
duplex { full | half | negotiation }

undo duplex
View
Ethernet port view
Parameter
full: The port is in full duplex mode.

half: The port is in half duplex mode.
negotiation: The port is in auto-negotiation mode.
Description
Use the duplex command to configure the duplex mode of the Ethernet port.
Use the undo duplex command to restore the default duplex mode of the port, that is,
auto-negotiation.
When the port is connected to a Hub, it must operate in half duplex mode. When the
port is connected to a full duplex-supported network device that is operating in full
duplex mode, a LAN switch for example, it must operate in full duplex also.
When setting the port to auto-negotiation mode, you must ensure that the connected
port is operating in the same mode. If otherwise, you must set both ports to operate in
the same mode manually.
Related command: speed.
Example
# Set duplex mode on port Ethernet1/0/1 to auto-negotiation.

[H3C-Ethernet1/0/1] duplex negotiation
3.1.6 flow-control
Syntax
flow-control
undo flow-control
3-5
Comware V3 Commands
View
Ethernet port view
Parameter
None
Description
Use the flow-control command to enable flow control on the Ethernet port to avoid
packet drop when congestion occurs.
Use the undo flow-control command to disable flow control.
By default, flow control on the Ethernet port is disabled.
Example
# Enable flow control on port Ethernet1/0/1.

[H3C-Ethernet1/0/1] flow-control
3.1.7 interface
Syntax
interface { interface_type interface_num | interface_name }
View
System view
Parameter
interface_type: Port type. It can be Ethernet only.

interface_name: Port name, in interface_type interface_num format.
Description
Use the interface command to enter Ethernet port view.

Before you can configure an Ethernet port, you must enter its view first with this
command.
Example
# Enter the view of Ethernet 1/0/1 port.

[H3C] interface ethernet1/0/1
3-6
Comware V3 Commands
3.1.8 mac-address timer aging
Syntax
mac-address timer aging {age-time | no-age }

undo mac-address timer aging
View
Ethernet port view
Parameter
age-time: Address aging time on the port, in the range 10 to 1000000 seconds. It
no-age: The MAC addresses are never aged out of the table on the port.
Description
Use the mac-address timer aging command to set the aging timer for the MAC
address table on the port.
Use the undo mac-address timer aging command to restore the default, that is, 300
seconds.
Example
# Set the aging timer for the MAC address table on port Ethernet 1/0/1 to 20 seconds.
[H3C-ethernet1/0/1] mac-address timer aging 20
3.1.9 loopback
Syntax
loopback
undo loopback
View
Ethernet port view
Parameter
None
Description
Use the loopback command to enable loopback on the Ethernet port for test purpose.
Use the undo loopback command to disable loopback on the Ethernet port.
By default, loopback is disabled.
3-7
Comware V3 Commands
Example
# Enable loopback on port Ethernet 1/0/1.

[H3C-Ethernet1/0/1] loopback
3.1.10 port access vlan
Syntax
port access vlan vlan_id

undo port access vlan
View
Ethernet port view
Parameter
vlan_id: VLAN ID defined in IEEE 802.1Q, in the range 2 to 4094.
Description
Use the port access vlan command to add the port whose link type is access to a
specified VLAN.
Use the undo port access vlan command to remove the access port from the
specified VLAN.
The default VLAN ID of access port is 1.
Example
# Add port Ethernet 1/0/1 to VLAN 3.

[H3C-Ethernet1/0/1] port access vlan 3
3.1.11 port hybrid pvid vlan
Syntax
port hybrid pvid vlan vlan_id

undo port hybrid pvid
View
Ethernet port view
Parameter
vlan_id: VLAN ID defined in IEEE802.1Q, in the range 1 to 4094. It defaults to 1.
3-8
Comware V3 Commands
Description
Use the port hybrid pvid vlan command to assign a default VLAN ID to the hybrid
port.
Use the undo port hybrid pvid command to restore the default VLAN ID of the hybrid
port.
To ensure correct transmission of packets, the default VLAN ID of the hybrid port must
be the same as the one used by the connected hybrid port.
Related command: port link-type.
Example
# Set the default VLAN ID of hybrid port Ethernet 1/0/1 to 100.

[H3C-Ethernet1/0/1] port hybrid pvid vlan 100
3.1.12 port hybrid vlan
Syntax
port hybrid vlan vlan_id_list { tagged | untagged }

undo port hybrid vlan vlan_id_list
View
Ethernet port view
Parameter
vlan_id_list: Equals [ vlan_id1 [ to vlan_id2 ] ]&<1-10>. It specifies a range of

contiguous or discrete VLANs to which the hybrid port is to be assigned. The vlan_id
ranges from 1 to 4094. &<1-10> indicates that the former arguments can be input 10
times repeatedly at most.
tagged: The packets from the specified VLAN are to be tagged.
untagged: Packets from the specified VLAN are not to be tagged.
Description
Use the port hybrid vlan command to assign the hybrid port to the specified VLANs,
which must have existed in the system.
Use the undo port hybrid vlan command to remove the hybrid port from the
specified VLANs.
A hybrid port can belong to multiple VLANs. If multiple VLAN lists are configured using
the port hybrid vlan vlan_id_list { tagged | untagged } command, all the VLANs of
these list can pass through the port.
3-9
Comware V3 Commands
Example
# Assign hybrid port Ethernet 1/0/1 to VLANs 2, 4 and 50 through 100. All packets
from these VLANs are to be tagged.
[H3C-Ethernet1/0/1] port hybrid vlan 2 4 50 to 100 tagged
3.1.13 port link-type
Syntax
port link-type { access | hybrid | trunk }

undo port link-type
View
Ethernet port view
Parameter
access: Sets the link type of the port to access.

hybrid: Sets the link type of the port to hybrid.
trunk: Sets the link type of the port to trunk.
Description
Use the port link-type command to configure the link type of the Ethernet port.
Use the undo port link-type command to restore the default link type of the port, that
is, access.
Example
# Set the link type of port Ethernet 1/0/1 to trunk.

[H3C-Ethernet1/0/1] port link-type trunk
3.1.14 port trunk permit vlan
Syntax
port trunk permit vlan { vlan_id_list | all }

undo port trunk permit vlan { vlan_id_list | all }
View
Ethernet port view
Parameter
vlan_id_list: Equals [ vlan_id1 [ to vlan_id2 ] ]&<1-10>. It specifies a range of

contiguous or discrete VLANs to which the hybrid port is to be assigned. The vlan_id
3-10
Comware V3 Commands
ranges from 1 to 4094. &<1-10> indicates that the former arguments can be input 10
times repeatedly at most.
all: Assign the trunk port to all VLANs.
Description
Use the port trunk permit vlan command to assign the trunk port to the specified
VLANs.
Use the undo port trunk permit vlan command to remove the trunk port from the
specified VLANs.
A trunk port can belong to multiple VLANs. If multiple VLAN lists are configured using
the port trunk permit vlan command, all the VLANs of these list can pass through
the port.
This command can be used on condition that the VLAN specified using vlan_id is not
the default one.
Example
# Assign trunk port Ethernet 1/0/1 to VLANs 2, 4, and 50 through 100.

[H3C-Ethernet1/0/1] port trunk permit vlan 2 4 50 to 100
3.1.15 port trunk pvid vlan
Syntax
port trunk pvid vlan vlan_id

undo port trunk pvid
View
Ethernet port view
Parameter
vlan_id: VLAN ID defined in IEEE802.1Q, in the range 1 to 4094. It defaults to 1.
Description
Use the port trunk pvid vlan command to configure the default VLAN ID of the trunk
port.
Use the undo port trunk pvid command to restore the default VLAN ID of the port.
To ensure correct transmission of packets, the default VLAN ID of the hybrid port must
be the same as the one used by the connected hybrid port.
3-11
Comware V3 Commands
Example
# Set the default VLAN ID of trunk port Ethernet 1/0/1 to 100.

[H3C-Ethernet1/0/1] port trunk pvid vlan 100
3.1.16 reset counters interface
Syntax
reset counters interface [ interface_type | interface_type interface_num |

interface_name ]
View
User view
Parameter
interface_type: Port type.

interface_name: Port name in interface_type interface_num format.
For parameter description, refer to the interface command.
Description
Use the reset counters interface command to reset the statistics about the port.
If port type and port number are not specified when clearing the statistics, information
on all the ports is cleared. If only port type is specified, information on all the ports of
this type is cleared. If both port type and port number are specified, information on the
specified port is cleared.
Example
# Clear statistics about port Ethernet 1/0/1.

<H3C> reset counters interface ethernet1/0/1
3.1.17 shutdown
Syntax
shutdown
undo shutdown
View
Ethernet port view
3-12
Comware V3 Commands
Parameter
None
Description
Use the shutdown command to shut down the Ethernet port.

Use the undo shutdown command to enable the Ethernet port.
By default, the Ethernet port is enabled.
Example
# Enable port Ethernet 1/0/1.

[H3C-Ethernet1/0/1] undo shutdown
3.1.18 speed
Syntax
speed { 10 | 100 | negotiation }

undo speed
View
Ethernet port view
Parameter
10: Port rate is 10 Mbps.

100: Port rate is 100 Mbps.
negotiation: Port rate is to be negotiated.
Description
Use the speed command to configure the rate of the port.

Use the undo speed command to restore the default port rate, that is, negotiation.
When setting the port to auto-negotiation mode, you must ensure that the connected
port is operating in the same mode. If otherwise, you must set both ports to operate in
the same mode manually.
Related command: duplex.
Example
# Set port rate on port Ethernet 1/0/1 to 100 Mbps.

[H3C-Ethernet1/0/1] speed 100
3-13
Comware V3 Commands
3.1.19 display mac-address
Syntax
display mac-address [ interface interface-type interface-number ]
View
Any view
Parameters
interface-type: Interface type, Ethernet port only.

Description
Use the display mac-address command to display information about MAC address
entries of an interface or about all MAC address entries.
When the display mac-address command without keyword and argument is used,
information about all MAC address entries will be displayed.
Example
# Display information about MAC address entries of Ethernet1/2.

<H3C> display mac-address interface Ethernet 1/2
MAC ADDR VLAN ID STATE PORT AGE TIME
-----------------------------------------------------------
0014-222c-90da 1 Dynamic Ethernet1/2 AGING
0e31-1111-1eab 1 Static Ethernet1/2 NOAGED
Table 3-2 Description on the fields of the display mac-address command
Field Description
MAC ADDR MAC address
VLAN ID The ID of the VLAN where a MAC address resides

STATE The state of a MAC address, including Static and Dynamic.
PORT Port number
AGE TIME Aging type of a MAC address, including aging and noaged.
3.1.20 mac-address
Syntax
mac-address mac-address vlan vlan-id
3-14
Comware V3 Commands
undo mac-address [mac-address vlan vlan-id ]
View
Parameters
mac-address: MAC address

vlan-id: VLAN ID, in the range 1 to 4094, which must be the same with the VLAN ID of
the port.
Description
Use the mac-address command to add or modify a MAC address entry.

Use the undo mac-address command to remove a MAC address entry.
If you use the undo mac-address command without any keyword and argument, the
system will prompt you whether to delete all entries.
Example
# Add an entry: make the MAC address 00e0-fc01-0101 correspond to Ethernet1/1

and belong to VLAN 2.
<H3C> system-view
[H3C] interface ethernet 1/1
[H3C-Ethernet1/1] mac-address 00e0-fc01-0101 vlan 2
# Delete all MAC address entries of Ethernet1/1.

<H3C> system-view
[H3C-Ethernet1/1] undo mac-address
This will delete all MAC address entries. Continue? [Y/N]
3.2 Port Mirroring Configuration Commands

3.2.1 display mirror
Syntax
display mirror
View
Any view
Parameters
None
3-15
Comware V3 Commands
Description
Use the display mirror command to display information about port mirroring
configuration, information including the monitored ports, the direction of monitored
packets and monitoring port.
Example
# Display information about port mirroring configuration.

<H3C> display mirror
Monitor port:
Ethernet1/1
Mirroring port:
Ethernet1/2 both
Table 3-3 Description on the fields of the display mirror command
Field Description
Monitor port: Ethernet1/1 The monitoring port: Ethernet1/1
Mirroring port: Ethernet1/2 Ethernet1/2 is the monitored port; packets of both
both directions on it are monitored.
3.2.2 monitor-port
Syntax
monitor-port
undo monitor-port
View
Parameters
None
Description
Use the monitor-port command to specify the current port as the monitoring port.
Use the undo monitor-port command to remove the configuration.
Example
# Specify Ethernet1/1 as the monitoring port.

<H3C> system-view
3-16
Comware V3 Commands
[H3C-Ethernet1/1] monitor-port
3-17
Command Manual – Interface Chapter 4 Fundamental WAN Interface
Chapter 4 Fundamental WAN Interface

4.1 Fundamental Serial Interface Configuration Commands

4.1.1 async mode
Syntax
async mode { protocol | flow | terminal template-name tty-number }
View
Asynchronous serial interface view, AUX interface view, AM interface view
Parameter
protocol: Protocol mode, with which the local end directly adopts the configured link
layer protocol parameters to set up a link with the remote end after setting up a
physical link.
flow: Flow mode, also known as interactive mode. With this approach, the two ends
set up a link by interacting with each other upon the setup a physical link. Specifically,
the calling party sends the configuration commands to the called party (it is equal to
the operation of manually inputting configuration commands at the remote end), sets
the link layer protocol operating parameters of the called party, and then sets up the
link. This approach normally applies to man-machine interaction.
terminal: Terminal mode, applied for terminal access service. So far, it is supported
only on asynchronous serial and synchronous/asynchronous serial interfaces.
template-name: Terminal template name.
tty-number: The allocated TTY number.
Description
Use the async mode command to set the operating mode of the asynchronous serial
interface.
By default, the asynchronous serial interface is working in protocol mode and the AUX
interface in flow mode.
Related command: modem.
Example
# Set the asynchronous serial interface 0/0/0 to work in flow mode.
4-1
[H3C-Serial0/0/0] async mode flow
4.1.2 baudrate
Syntax
baudrate baudrate
View
Serial interface view
Parameter
baudrate: Baud rate of the serial interface in bps. It is in the range 300 to 115,200 for
an asynchronous serial interface and 1200 to 2,048,000 for a synchronous serial
interface.
Description
Use the baudrate command to set the baud rate of a serial interface.
By default, the baud rate is 9,600 bps on the asynchronous serial interface and
64,000 bps on a synchronous serial interface.
The following are the baud rates available with asynchronous serial interfaces:
300 bps, 600 bps, 1,200 bps, 2,400 bps, 4,800 bps, 9,600 bps, 19,200 bps, 38,400
bps, 57,600 bps, 115,200 bps
The following are the baud rates available with synchronous serial interfaces:
1,200 bps, 2,400 bps, 4,800 bps, 9,600 bps, 19,200 bps, 38,400 bps, 57,600 bps,
64,000 bps, 72,000 bps, 115,200 bps, 128,000 bps, 192,000 bps, 256,000 bps,
384,000 bps, 512,000 bps, 1,024,000 bps, 2,048,000 bps
Note that the baud rates of 192,000 bps, 256,000 bps, 512,000 bps, 1,024,000 bps,
and 2,048,000 bps are available with some types of serial interfaces only. You can
know whether these baud rates are available by reading the prompt message
displayed on the screen for this command.
The baud rate range available with synchronous serial interfaces depends on the
applied physical electric specifications.
z V.24 DTE/DCE supports the range of 1200 bps to 64000 bps
z V.35 DCE/DCE, X.21 DTE/DCE, EIA/TIA-449 DTE/DCE and EIA-530 DTE/DCE
supports the range of 1200 bps to 2048000 bps
After a synchronous/asynchronous serial interface makes the
synchronous/asynchronous switchover, the baud rate of the interface resumes the
default baud rate in the new operating mode.
When setting baud rate for a serial interface, you should take into consideration the
elements such as operating mode (synchronous/asynchronous mode) and the
4-2
electric specifications of the connected external cable. In addition, you should note
that the baud rate of asynchronous serial interface is only significant for the
connection between router and modem. If two modems are concerned, the baud rate
between them will be directly negotiated by themselves. Therefore, different baud rate
settings can be set on the routers at the two ends of a connection, if the routers are
working in asynchronous mode. In synchronous mode, however, the router working
as DCE will determine the baud rate for the line transmission. Therefore, you need to
set baud rate at the DCE side in this case.
Example
# Set the baud rate of the asynchronous serial interface at DCE side to 115200 bps.
[H3C-Serial0/0/0] baudrate 115200
4.1.3 clock (Serial Interface)
Syntax
clock { dteclk1 | dteclk2 | dteclk3 | dteclk4 }
View
Parameter
dteclk1: Sets the interface clock selection mode to DTE clock option 1.
Description
Use the clock command to set clock selection mode for a synchronous serial
interface.
If the synchronous serial interface operates as DCE, its clock defaults to DCE clock; if
the interface operates as DCE, its clock defaults to dteclk1.
Different operating clocks are selected for the synchronous serial interfaces working
as DTE and DCE, as shown in the following figure.
TxClk
DCE RxClk DTE
Figure 4-1 Selecting a clock for a synchronous serial interface
4-3
In the figure, “TxClk” represents transmitting clock and “RxClk” receiving clock.
As a DCE device is required to provide clock for the remote DTE device, you must
select DCEclk as the operating clock for the synchronous serial interface working as
DCE.
Working as DTE, the synchronous serial interface must accept the clock provided by
the remote DCE. As transmitting and receiving clocks of synchronization devices are
independent, the receiving clock of a DTE device can be either the transmitting or
receiving clock of the DCE device. So is the transmitting clock. Therefore, there are
four clock options are available for a DTE device.
The following table gives the four clock selection options.
Table 4-1 Clock options available for a synchronous serial interface working as DTE
Clock selection option Description

DTEclk1 TxClk = TxClk, RxClk = RxClk
DTEclk2 TxClk = TxClk, RxClk = TxClk

DTEclk3 TxClk = RxClk, RxClk = TxClk
DTEclk4 TxClk = RxClk, RxClk = RxClk
In the table, the clock ahead of = is the DTE clock and the one behind is the DCE
clock.
Example
# Set the synchronous serial interface working as DTE to use the clock selection
option dteclk2.
[H3C-Serial0/0/0] clock dteclk2
4.1.4 code nrzi
Syntax
code nrzi
undo code
View
Parameter
None
4-4
Description
Use the code nrzi command to set the digital signal coding format to
None-Return-to-Zero-Inverse (NRZI) for a synchronous serial interface.
Use the undo code command to restore the digital coding format of the synchronous
serial interface to NRZ.
The digital signal coding format defaults to NRZ on the synchronous serial interface.
Example
# Set the digital signal coding format to NRZI on the synchronous serial interface.
[H3C-Serial0/0/0] code nrzi
4.1.5 country-code
Syntax
country-code area-name
View
Asynchronous serial interface view, AM interface view
Parameter
area-name: Includes australia, austria, belgium, brazil, bulgaria, canada, china,

czechoslovakia, denmark, finland, france, germany, greece, hongkong, hungary, india,
ireland, israel, italy, japan, korea, luxembourg, malaysia, mexico, netherlands,
new-zealand, norway, philippines, poland, portugal, russia, singapore, southafrica,
spain, sweden, switzerland, taiwan, united-kingdom, and united-states.
Description
Use the country-code command to configure the coding format of the modem
connected to the serial interface.
The default area code is united-states.
The coding format of modem varies by area. To adapt to coding formats in different
areas, you can use this command.
On the asynchronous serial interface, only after the command modem is enabled can
this command be configured.
Note:
The AR 18 series does not support this command.
4-5
Example
# Set the area-code to china.

[H3C-Serial0/0/0] country-code china
4.1.6 detect
Syntax
1) Asynchronous serial interface

detect dsr-dtr
undo detect dsr-dtr
2) Synchronous serial interface
detect { dcd | dsr-dtr }
undo detect { dcd | dsr-dtr }
View
Synchronous serial interface view, asynchronous serial interface view
Parameter
dsr-dtr: Detects DSR and DTR signals of DSU/CSU.

dcd: Detects the DCD signal of the DSU/CSU on the serial interface.
Description
Use the detect command to enable data carrier detection as well as level detection on
a serial interface.
Use the undo detect command to disable data carrier detection as well as level
detection on the serial interface.
By default, the serial interface is enabled to make data carrier and level detection.
If this function is disabled on the serial interface, the system does not detect the DCD
and DSR/DTR signals when determining the state (UP or DOWN) of the interface.
When level detection is disabled on a serial interface, the system does not detect
whether a cable is connected if the interface is asynchronous, AUX or Async for
example and the state of the interface is up automatically. If the interface is
synchronous/asynchronous, however, it goes up only when the system detects that a
cable is connected.
Example
# Disable the serial interface to make data carrier detection.

[H3C-Serial0/0/0] undo detect dcd
4-6
4.1.7 idle-mark
Syntax
idle-mark
undo idle-mark
View
Parameter
None
Description
Use the idle-mark command to set the line idle-mark of the synchronous serial
interface to “FF”.
Use the undo idle-mark command to restore the line idle-mark of the synchronous
serial interface to “7E”.
Line idle-mark of synchronous serial interfaces defaults to “7E”.
In normal circumstances, the synchronous serial interface uses the code “7E” to
identify the idle state of the line. However, there are still some devices that use “FF”
(that is, the high level of all “1s”) to make the identification. For the sake of
compatibility in this case, it is necessary to configure the line idle-mark of the
synchronous serial interface.
Example
# Set the line idle-mark of the synchronous serial interface to FF.

[H3C-Serial0/0/0] idle-mark
4.1.8 eliminate-pulse
Syntax
eliminate-pulse
undo eliminate-pulse
View
Asynchronous serial interface view
Parameter
None
4-7
Description
Use the eliminate-pulse command to eliminate the pulses with a width less than
3.472us, increasing signal reliability. This is useful when the line is seriously
interfered.
Use the undo eliminate-pulse command to restore the default, eliminating the
pulses with a width less than 1.472 us.
Note:
You can use this command only when the baud rate of the interface is less than
115,200 bps. After you configure this command, the baud rate of the interface cannot
be set to 115,200 bps or greater.
This command is restricted to the 8ASE and 16ASE interface cards and modules.
Example
# Eliminate the pulses with a width less than 3.472 us on interface Async1/0/0.
[H3C-Async1/0/0] eliminate-pulse
4.1.9 framefill none
Syntax
framefill none
undo framefill none
View
Synchronous serial interface view, asynchronous serial interface view, AUX interface
view and AM interface view
Parameter
None
Description
Use the framefill none command to disable a serial interface to send interframe filling
tags.
Use the undo framefill none command to enable the serial interface to send
interframe filling tags.
By default, there are filling tags between frames sent by a serial interface.
4-8
Example
# Disable a serial interface to send interframe filling tags.

[H3C-Async1/0/0] framefill none
4.1.10 invert receive-clock
Syntax
invert receive-clock
undo invert receive-clock
View
Parameter
None
Description
Use the invert receive-clock command to invert the receive-clock signal on the
DTE-side synchronous serial interface.
Use the undo invert transmit-clock command to disable inverting the signal.
By default, receive-clock signal inversion is disabled on the synchronous serial
interface at DTE side.
You may invert the receive-clock signal on a DTE-side serial interface for the special
purpose of eliminating the half clock-period delay on the line. This command is useful
only for some special DCE devices. For common applications, clock must not be
inverted.
Related command: physical-mode, invert transmit-clock, clock.
Example
# Invert the receive-clock on the DTE-side synchronous serial interface.

[H3C-Serial0/0/0] invert receive-clock
4.1.11 invert transmit-clock
Syntax
invert transmit-clock
undo invert transmit-clock
View
4-9
Parameter
None
Description
Use the invert transmit-clock command to enable the inverting of the transmit-clock
signal of the synchronous serial interface at the DTE side.
Use the undo invert transmit-clock command to disable inverting the signal.
By default, transmit-clock signal inversion is disabled on the synchronous serial
interface at DTE side.
In some special cases, for eliminating the half-period delay of the clock on the line,
you may make the configuration to make the system invert the transmit-clock signal of
the synchronous serial interface at the DTE side. This command can take effect only
on some specific DCE devices. Clock inversion is unnecessary to general
applications.
Related command: physical-mode, invert receive-clock, clock.
Example
# Invert the transmit-clock of the synchronous serial interface at DTE side.

[H3C-Serial0/0/0] invert transmit-clock
4.1.12 loopback
Syntax
loopback
undo loopback
View
Serial interface view, AUX interface view, AM interface view
Parameter
None
Description
Use the loopback command to enable a serial interface to perform loopback.

Use the undo loopback command to disable the serial interface to perform loopback.
By default, loopback of the serial interface is disabled.
You need to enable loopback on the serial interface only when testing some special
functions.
4-10
Example
# Enable loopback on the serial interface.

[H3C-Serial0/0/0]loopback
4.1.13 modem adapt no-waiting-connect
Syntax
modem adapt no-waiting-connect

undo modem adapt no-waiting-connect
View
User interface view
Parameter
None
Description
Use the modem adapt no-waiting-connect command to set the asynchronous

serial interface Modem to switch from IDLE to ACTIVE without waiting for receiving
the signal CONNECT (a signal used for a physical modem to negotiate rate) after it
receives CD_UP (a lower layer detects carrier signal).
Use the undo modem adapt no-waiting-connect command to set the
asynchronous serial interface Modem to switch from IDLE to ACTIVE until it receives
the signal CONNECT after it receives CD_UP (a lower layer detects carrier signal).
By default, the asynchronous serial interface Modem switches from IDLE to ACTIVE
until it receives the signal CONNECT after it receives CD_UP (a lower layer detects
carrier signal).
Example
# Set the asynchronous serial interface Modem to switch from IDLE to ACTIVE
without waiting for the CONNECT signal after it receives CD_UP (a lower layer
detects carrier signal).
[H3C-ui-aux0] modem adapt no-waitting-connect
4.1.14 mtu (Serial Interface)
Syntax
mtu size
undo mtu
4-11
View
Serial interface view, AUX interface view, AM interface view
Parameter
size: MTU size of the serial interface in the range 128 to 1500 bytes. It defaults to
1500 bytes.
Description
Use the mtu command to set MTU of the serial interface.

Use the undo mtu command to restore the default.
The MTU setting can affect the assembly and fragmentation of IP packets on the
interface.
Example
# Set MTU of the serial interface to 1200.

[H3C-Serial0/0/0] mtu 1200
4.1.15 physical-mode
Syntax
physical-mode { sync | async }
View
Parameter
sync: Sets the synchronous/asynchronous serial interface to work in synchronous

mode.
async: Sets the synchronous/asynchronous serial interface to work in asynchronous
mode.
Description
Use the physical-mode command to set the operating mode of the

synchronous/asynchronous serial interface.
By default, the synchronous/asynchronous serial interface is working in synchronous
mode.
Example
# Set the synchronous/asynchronous serial interface to work in asynchronous mode.

[H3C-Serial0/0/0] physical-mode async
4-12
4.1.16 phy-mru
Syntax
phy-mru size
undo phy-mru
View
Asynchronous serial interface view
Parameter
size: Maximum receive unit (MRU), in the range 4 to 1,700 bytes. It defaults to 1,700
bytes.
Description
Use the phy-mru command to configure in asynchronous flow mode MRU at the
physical layer.
Use the undo phy-mru command to restore the default.
Example
# Set the MRU at the physical layer of asynchronous serial interface Async 1/0/0 to
100 bytes.
[H3C-Async1/0/0] phy-mru 100
4.1.17 reverse-rts
Syntax
reverse-rts
undo reverse-rts
View
Parameter
None
Description
Use the reverse-rts command to reverse RTS signal.

Use the undo reverse-rts command to restore the default.
By default, RTS signal reverse is disabled.
This command is used for debugging purpose.
4-13
Example
# Reverse RTS signal.

[H3C-Serial4/0/0] reverse-rts
4.1.18 virtualbaudrate
Syntax
virtualbaudrate virtualbaudrate
undo virtualbaudrate
View
Parameter
virtualbaudrate: Specifies a baudrate in bps, which must be consistent with the one
configured at the DCE side and can be 1200, 2400, 4800, 9600, 19200, 38400, 56000,
57600, 64000, 72000, 115200, 128000, 384000, 2048000, or 4096000.
Description
Use the virtualbaudrate command to set a virtual baudrate for the DTE interface.
Use the undo virtualbaudrate command to cancel the specified virtual baudrate.
When working as DTE, the serial interface determines its baudrate through
negotiation with the DCE side. The virtualbaudrate command, however, allows you
to configure DTE-side baudrate manually, but the configured value must be the same
as the one set at the DCE side.
To validate the configured baudrate value for routing, execute the shutdown
command and then the undo shutdown command on the interface.
Note:
z Configure the baudrate command at DCE side and the virtualbaudrate
command at DTE side (only when the interface is operating in synchronous mode).
Avoid configuring the two commands at the same end of a link.
z At DCE side, you can use the display interface command to view the baudrate of
the interface; at the DTE end, you can use the display interface command to view
the virtual baudrate of the interface, if it is configured.
4-14
Example
# Set virtual baudrate of a DTE interface to 19200.

[H3C-Serial4/0/0] virtualbaudrate 19200
# Cancel the specified virtual baudrate of the DTE interface.

[H3C-Serial4/0/0] undo virtualbaudrate
4.2 Fundamental CE1/PRI Interface Configuration

Commands
4.2.1 cable
Syntax
cable { long | short }

undo cable
View
CE1/PRI interface view
Parameter
long: The attenuation of the receiver is -43 dB

short: The attenuation of the receiver is -10 dB.
Description
Use the cable command to set the cable length matching the CE1/PRI interface.
Use the undo cable command to restore the default.
By default, the long parameter applies.
Example
# Set the cable length matching the CE1/PRI interface to short.

[H3C-E1 3/0/0] cable short
4.2.2 channel-set (CE1/PRI Interface)
Syntax
channel-set set-number timeslot-list range

undo channel-set set-number
View
4-15
Parameter
set-number: The number of the channel set formed by bundling the timeslots on the
interface, in the range 0 to 30.
range: The number of the timeslots that are bundled, in the range 1 to 31. When
specifying the timeslots to be bundled to specify a single timeslot by specifying a
number, a range of timeslots by specifying a range between number1-number2, or
several discrete timeslots by specifying number1, number2-number3.
Description
Use the channel-set command to bundle some timeslots of a CE1/PRI interface into
a channel-set.
Use the undo channel-set command to remove the specified timeslot bundle.
By default, no timeslots are bundled into channel-sets.
A CE1/PRI interface in CE1/PRI mode is physically divided into 32 timeslots
numbered from 0 through 31.
In actual applications, all the timeslots except for timeslot 0 can be bundled into
multiple channel-sets and the system will automatically create a serial interface for
each set. This serial interface has the same logic features of synchronous serial
interface.
The serial interface is numbered in the form of serial interface-number :set-number.
Where, interface-number is the number of the CE1/PRI interface, and set-number is
the number of the channel-set.
Only one timeslot bundling mode can be supported on one CE1/PRI interface at a
time. In other words, this command cannot be used together with the pri-set
command.
Related command: pri-set.
Example
# Bundle the timeslots 1, 2, 5, 10 through 15, and 18 on the CE1/PRI interface into
channel-set 0.
[H3C-E1 3/0/0] channel-set 0 timeslot-list 1,2,5,10-15,18
# Make the same configuration on the CE1/PRI interface on the remote router.
[H3C-E1 3/0/0] channel-set 0 timeslot-list 1,2,5,10-15,18
4.2.3 clock (CE1/PRI Interface)
Syntax
clock { master | slave }

undo clock
4-16
View
Parameter
master: Adopts the internal clock mode.

slave: Adopts the line clock mode.
Description
Use the clock command to set the clock mode on a CE1/PRI interface.
Use the undo clock command to restore the default clock mode on the interface.
By default, the CE1/PRI interface adopts the line clock mode (slave).
When a CE1/PRI interface is working as DCE, chose the internal clock for it, that is,
master clock mode. When it is working as DTE, chose the line clock, that is, slave
clock mode for it.
Example
# Set the clock mode of the CE1/PRI interface to internal clock (master) mode.
[H3C-E1 3/0/0] clock master
4.2.4 code (CEI/PRI Interface)
Syntax
code { ami | hdb3 }

undo code
View
Parameter
ami: Adopts alternate mark inversion (AMI) line code format.

hdb3: Adopts high density bipolar 3 (HDB3) line code format. This parameter is only
significant for a CE1/PRI interface.
Description
Use the code command to set the line code format for a CE1/PRI interface.
Use the undo code command to restore the default line code format of the interface.
The line code format of CE1/PRI interface defaults to hdb3.
You should keep the line code format of the interface in consistency with that used by
the remote device.
4-17
Example
# Set the line code format of the interface E1 3/0/0 to ami.

[H3C-E1 3/0/0]code ami
4.2.5 controller e1
Syntax
controller e1 number
View
System view
Parameter
number: CE1/PRI interface number.
Description
Use the controller e1 command to enter CE1/PRI interface view.
Example
# Enter the view of the interface E1 3/0/0.

[H3C] controller E1 3/0/0
[H3C-E1 3/0/0]
4.2.6 crc
Syntax
crc { 16 | 32 | none}
undo crc
View
Parameter
16: Adopts 16-bit CRC.

none: Adopts no CRC.
Description
Use the crc command to configure CRC mode of the serial interface formed by CE1.
Use the undo crc command to restore the default configuration.
4-18
By default, 16-bit CRC is adopted.

Related command: using {ce1/e1}, channel-set and using.
Example
# Apply 32-bit CRC to the serial interface formed by the interface E1 2/0/0 in fractional
mode.
[H3C-Serial2/0/0:0] crc 32
4.2.7 detect-ais (CE1/PRI Interface)
Syntax
detect-ais
undo detect-ais
View
Parameter
None
Description
Use the detect-ais command to enable alarm indication signal (AIS) detect on the
CE1/PRI interface.
Use the undo detect-ais command to disable AIS detect on the CE1/PRI interface.
By default, AIS detect is enabled on the CE1/PRI interface.
Before enabling or disabling AIS detect for a CE1/PRI interface, you must configure
the interface to operate in E1 mode with the using e1 command.
Example
# Disable AIS detect on interface E1 3/0/0.

[H3C-E1 3/0/0] undo detect-ais
4.2.8 display controller e1
Syntax
display controller [ e1 number ]
View
Any view
4-19
Parameter
Description
Use the display controller e1 command to display the information related to a

CE1/PRI interface.
Executing this command will display the following information:
z Physical state of interface
z Clock mode of interface
z Frame check mode of interface
z Line code format of interface
Example
# Display the information related to the E1 interface.

[H3C] display controller E1 1/0/0
E1 1/0/0 current state :DOWN
Description : E1 1/0/0 Interface
Basic Configuration:
Work mode is E1 framed, Cable type is 120 Ohm balanced.
Frame-format is no-crc4.
Line code is hdb3, Source clock is slave.
Idle code is 7e, Itf type is 7e, Itf number is 4.
Loop back is not set.
Alarm State:
Receiver alarm state is Loss-of-Signal.
Transmitter is sending remote alarm.
Historical Statistics:
Last clearing of counters: Never
Data in current interval (10 seconds elapsed):
10 Loss Frame Alignment Secs, 0 Framing Error Secs,
0 CRC Error Secs, 0 Alarm Indication Secs, 10 Loss-of-signals Secs,
0 Code Violations Secs, 1 Slip Secs, 0 E-Bit error Secs.
Table 4-2 Description on the fields of the display controller e1 command
Field Description
E1 1/0/0 current state :DOWN Current state of the E1 interface
Description : E1 1/0/0 Interface Description about the E1 interface
Operating mode of the E1 interface: E1
Work mode
or CE1
Cable type Cable type of the E1 interface
4-20
Field Description
Frame format configured on the E1
Frame-format
interface: CRC4 or no-CRC4
Line Code Line code: AMI or HDB3
Source clock used by the interface:
Source Clock
master or slave
Idle Code Idle code: 7e or ff
Itf type Type of interframe filling tag: 7e or ff
Itf number Number of interframe filling tags
Loopback Loopback setting on the interface
Alarm State Alarm state
Historical Statistics Historical statistics for the E1 interface
Data in current interval (10 seconds
elapsed):
10 Loss Frame Alignment Secs, 0 In the current interval, duration that each
Framing Error Secs, type of errors lasts. These errors include
loss of frame alignment, frame error,
0 CRC Error Secs, 0 Alarm Indication alarm, loss of signals, code violation,
Secs, 10 Loss-of-signals Secs, frame slip, and E-bit error.
0 Code Violations Secs, 1 Slip Secs, 0
E-Bit error Secs.
4.2.9 error-diffusion restraint config
Syntax
error-diffusion restraint config detect-timer renew-timer threshold

undo error-diffusion restraint config
View
System view
Parameter
detect-timer: Detect timer, in the range 30 to 600 seconds.

renew-timer: Renew timer, in the range 120 to 2400 seconds.
threshold: Error rate threshold, in the range 5 to 100.
Description
Use the error-diffusion restraint config command to set the three parameters for
error diffusion restraint function.
4-21
Use the undo error-diffusion restraint enable command to restore the three
parameters set for error diffusion restraint function to the default value.
By default, the value of detect-timer is 30 seconds, renew-timer is 600 seconds and
threshold is 20%.
The value of renew-timer cannot be 4 times less than that of detect-timer. If the total
number of packets received in detect-timer time is less than 100, no error will be
counted.
Example
# Configure detect timer for error diffusion restraint to 100 seconds and restore the
timer to 2400 seconds, error threshold to 15%.
[H3C] error-diffusion restraint cofing 100 2400 15
4.2.10 error-diffusion restraint enable
Syntax
error-diffusion restraint enable

undo error-diffusion restraint enable
View
System view
Parameter
None
Description
Use the error-diffusion restraint enable command to enable error diffusion

restraint.
Use the error-diffusion restraint enable command to disable error diffusion
restraint.
By default, error diffusion restraint is enabled.
Example
# Disable error diffusion restraint function.

[H3C] undo error-diffusion restraint enable
4.2.11 frame-format (CE1/PRI Interface)
Syntax
frame-format { crc4 | no-crc4 }
4-22
undo frame-format
View
Parameter
crc4: Sets the frame format on the CE1 interface to CRC4.

no-crc4: Sets the frame format on the CE1 interface to no-CRC4.
Description
Use the frame-format command to set the frame format on the CE1 interface.
Use the undo frame-format command to restore the default, or no-crc4.
A CE1/PRI interface in CE1 mode supports both CRC4 and no-CRC4 frame formats.
Among them, CRC4 supports four-bit cyclic redundancy check (CRC) on physical
frames whereas no-CRC4 does not.
Example
# Set the frame format on the interface E1 3/0/0 to CRC4.

[H3C-E1 3/0/0] frame-format crc4
4.2.12 idlecode (in CE1/PRI Interface View)
Syntax
idlecode { 7e | ff }
undo idlecode
View
Parameter
7e: Sets the line idle code to 0x7e.

ff: Sets the line idle code to 0xff.
Description
Use the idlecode command to set the line idle code on the CE1/PRI interface. Two
types of line idle code are available: 0x7e and 0xff.
Use the undo idlecode command to restore the default, or 0x7e.
The line idle code is sent in the timeslots that are not bundled into the logical channels
on the interface.
4-23
Example
# Set the line idle code to 0x7e on CE1/PRI interface 3/0/0.

[H3C-E1 3/0/0] idlecode 7e
4.2.13 isdn ie passthrough
Syntax
isdn ie passthrough { information-element | all } { incoming | outgoing | both }

undo isdn ie passthrough { information-element | all }
View
ISDN interface view (not applicable on BRI interface)
Parameter
information-element: List of information elements that support transparent

transmission. See Table 4-3 for detailed information.
all: Enables or disables transparent transmission for all Q.931 related information
elements.
incoming: Specifies to transparently transmit information element on the incoming
direction of Q.931 packet.
outgoing: Specifies to transparently transmit information element on the outgoing
both: Specifies to transparently transmit information element on both the incoming
and outgoing direction of Q.931 packet.
Table 4-3 Q.931 related information element supporting transparent transmission
information-element Description
connectnum Connect number
connectsub Connect subnet address

datetime Date and time
display Display
facility Facility
hlc High-layer compatibility
keypad Keyboard facility
llc Lower-layer compatibility
notification Notification
progress Progress
4-24
display display
facility Facility
Description
Use the isdn ie passthrough command to enable transparent transmission of some

or all related information elements. You can also use this command to configure
transparent transmission direction.
Use the undo isdn ie passthrough command to disable the transparent
transmission function of some or all related information elements.
By default, Q.931 information element transparent transmission is not enabled on
ISDN interface (PRI interface and BRI interface).
This command is only valid when ISDN initiates or receives an H.323 call and invalid
for a DCC call.
Example
# Set to enable transparent transmission for facility on both directions on Serial

0/0/0:15.
<H3C> system-view
[H3C] interface serial 0/0/0:15
[H3C-Serial0/0/0:15] isdn ie passthrough facility both
4.2.14 itf (CE1/PRI Interface)
Syntax
itf type { 7e | ff }
itf number number
undo itf { type | number }
View
Parameter
type { 7e | ff }: Sets the type of interframe filling tag to 0x7e by specifying the 7e
argument or to 0xff by specifying the ff keyword. On the CE1/PRI interface, the default
type of interframe filling tag is 0x7e.
4-25
number number: Sets the number of interframe filling tags. It ranges from 0 to 14
bytes and defaults to 4 bytes.
Description
Use the itf command to set the type of and the number of interframe filling tags on the
CE1/PRI interface. Two types of interframe filling tag are available: 0x7e and 0xff.
Use the undo itf command to restore the default.
Interframe filling tags are sent when no service data is sent on the timeslots bundled
into logical channels on the CE1/PRI interface.
On the CE1/PRI interface, the default type of interframe filling tag is 0x7e and the
default number of interframe filling tags is four.
Example
# Set the type of interframe filling tag to 0xff on CE1/PRI interface 3/0/0.
[H3C-E1 3/0/0] itf type ff
# On CE1/PRI interface 3/0/0 set the number of interframe filling tags to five.
[H3C-E1 3/0/0] itf number 5
4.2.15 loopback (CE1/PRI Interface)
Syntax
loopback { local | remote | payload }

undo loopback
View
Parameter
local: Enables the interface to perform local loopback.

remote: Enables the interface to perform remote loopback.
payload: Enables the interface to perform external payload loopback.
Description
Use the loopback command to enable a CE1/PRI interface to perform loopback.

Use the undo loopback command to disable the CE1/PRI interface to perform local,
remote, or external payload loopback.
By default, the interface is disabled to perform loopback in any form.
You can use loopback to check the condition of interfaces or cables. When they are
operating normally, disable this function.
4-26
You can bundle timeslots on the CE1/PRI interface to form a serial interface and
encapsulate it with PPP. After you enable loopback on this serial interface, it is normal
that the state of the link layer protocol is reported down.
Example
# Set the interface E1 3/0/0 to perform local loopback.

[H3C-E1 3/0/0] loopback local
4.2.16 pri-set (CE1/PRI Interface)
Syntax
pri-set [ timeslot-list range ]

undo pri-set
View
Parameter
range: Number of the timeslots in the bundle. It is in the range 1 to 31. When
specifying the timeslots to be bundled, you can configure a single timeslot using the
form of number, or a range of timeslots using the form of number1-number2, or
multiple discrete timeslots using the form of number1, number2-number3.
Description
Use the pri-set command to have timeslots on the CE1/PRI interface form a pri-set.
Use the undo pri-set command to remove the bundle.
By default, no pri-set is created.
When creating a pri-set on a CE1/PRI interface, note that timeslot 16 is D channel for
transmitting signaling; it cannot form a bundle that includes itself only. The attempt to
bundle only timeslot 16 will fail.
In a pri-set formed by timeslot bundling on a CE1/PRI interface, timeslot 0 is used for
frame synchronization control (FSC), timeslot 16 as a D channel for signaling
transmission, and other timeslots as B channels for data transmission. You may
bundle the timeslots except for timeslot 0 into a pri-set (as the D channel, timeslot 16
is automatically bundled). The logic features of this pri-set will be the same like those
of an ISDN PRI interface. If no timeslot is specified, all timeslots except for timeslot 0
are bundled into an interface similar to an ISDN PRI interface in the form of 30B+D.
The system automatically creates a serial interface after timeslot bundling on the
interface. This serial interface has the same logic features of ISDN PRI interface. The
serial interface is numbered in the form of serial number:15, where number is the
number of the CE1/PRI interface where the serial interface is created.
4-27
Only one timeslot bundling mode is supported on one CE1/PRI interface at a time. In
other words, you cannot use this command and the channel-set command together.
Related command: channel-set.
Example
# Bundle timeslots 1, 2, and 8 through 12 of the CE1/PRI interface into a pri-set.

[H3C-E1 3/0/0] pri-set timeslot-list 1,2,8-12
4.2.17 reset counters controller e1
Syntax
reset counters controller e1 interface-number
View
User view
Parameter
Description
Use the reset counters controller e1 command to clear the controller counter for the
CE1/PRI interface.
To display the value of the controller counter, use the display controller e1
command.
Example
# Clear the controller counter for CE1/PRI interface 1/0/0.

<H3C> reset counters controller e1 1/0/0
4.2.18 using (CE1/PRI Interface)
Syntax
using { ce1 | e1 }
undo using
View
Parameter
e1: The interface is operating in E1 mode.

ce1: The interface is operating in CE1/PRI mode.
4-28
Description
Use the using command to configure the operating mode of the CE1/PRI interface.
Use the undo using command to restore the default or CE1/PRI mode.
A CE1/PRI interface can work in either E1 mode (non-channelized mode) or CE1/PRI
mode (channelized mode).
A CE1/PRI interface in E1 mode equals a 2 Mbps interface without timeslot division.
Its logic features are the same like those of a synchronous serial interface. When
working in CE1/PRI mode, it is physically divided into 32 timeslots numbered from 0 to
31. Among them, timeslot 0 is used for transmitting the FSC information. This
interface can work as either a CE1 interface or a PRI interface.
After the CE1/PRI interface is enabled to work in E1 mode by using the using e1
command, the system automatically creates a serial interface numbered serial
interface-number:0, where interface-number is the number of the CE1/PRI interface.
Example
# Set the CE1/PRI interface to work in E1 mode.

[H3C-E1 3/0/0] using e1
4.3 Fundamental CT1/PRI Interface Configuration

Commands
4.3.1 alarm-threshold
Syntax
alarm-threshold los pulse-detection value

alarm-threshold los pulse-recovery value
alarm-threshold ais { level-1 | level-2 }
alarm-threshold lfa { level-1 | level-2 | level-3 | level-4 }
undo alarm-threshold
View
CT1/PRI interface view
Parameter
los: Sets a loss of signal (LOS) alarm threshold. Two LOS alarm thresholds are
available: pulse-detection for the pulse detection duration threshold with LOS and
pulse-recovery for the pulse threshold with LOS.
The threshold of pulse-detection ranges from 16 to 4,096 pulse intervals and defaults
to 176.
4-29
The threshold of pulse-recovery ranges from 1 to 256 and defaults to 22.

If the number of the pulses detected during the total length of the specified pulse
detection intervals is smaller than the pulse-recovery threshold, a LOS alarm occurs.
ais: Sets the alarm threshold of alarm indication signal (AIS). Two AIS alarm threshold
options are available: level-1 and level-2. If level-1 is specified, an AIS alarm occurs
when the number of 0s in the bit stream of an SF or ESF frame is less than or equal to
2. If level-2 is specified, an AIS alarm occurs when the number of 0s is less than or
equal to 3 in the bit stream of an SF frame or less than or equal to 5 in the bit stream
of an ESF frame.
By default, level-1 AIS alarm threshold applies.
lfa: Sets the loss of frame align (LFA) alarm threshold. Four threshold options are
available: level-1, level-2, level-3, and level-4. If level-1 is specified, an LFA alarm
occurs when two of four frame alignment bits are lost. If level-2 is specified, an LFA
alarm occurs when two of five frame alignment bits are lost. If level-3 is specified, an
LFA alarm occurs when two of six frame alignment bits are lost. Level-4 applies only to
ESF frames; an LFA alarm occurs when four consecutive ESF frames have errors.
By default, level-1 LFA alarm threshold applies.
Description
Use the alarm-threshold command to configure the alarm thresholds on the CT1/PRI
interface as needed.
Use the undo alarm-threshold command to restore the default alarm threshold
values.
Example
# Set the number of detection intervals to 300 for the pulse detection duration
threshold.
[H3C-T1 1/0/0] alarm-threshold los pulse-detection 300
4.3.2 bert (CT1/PRI Interface)
Syntax
bert pattern { 2^15 | 2^20 } time minutes [ unframed ]

undo bert
View
Parameter
pattern: Sets a bit error rate test (BERT) pattern, which could be 2^15 or 2^20.
4-30
2^15: Two to the fifteenth power, length of the transmitted BERT pattern in bits.
2^20: Two to the twentieth power, length of the transmitted BERT pattern in bits.
time minutes: Sets the duration of a BERT test, in the range 1 to 1440 minutes.
unframed: The test pattern covers the overhead bits of the frame.
Description
Use the bert command to start a BERT test on the CT1/PRI interface.
Use the undo bert command to stop the BERT test running on the CT1/PRI interface.
ITU O.151, ITU O.153, and ANSI T1.403-1999 define many BERT patterns, among
which, the CT1/PRI interface supports only 2^15 and 2^20 at present.
When running a BERT test, the local end sends out a pattern, which is to be looped
over somewhere on the line and back to the local end. The local end then checks the
received pattern for the bit error rate, and by so doing helps you determine whether
the condition of the line is good. To this end, you must configure loopback to allow the
transmitted pattern to loop back from somewhere on the line, for example, from the
far-end interface by placing the interface in far-end loopback.
You may view the state and result of the BERT test with the display controller t1
command.
Example
# Run a 10-minute 2^20 BERT test on CT1/PRI interface 1/0/0.

[H3C-T1 1/0/0] bert pattern 2^20 time 10
4.3.3 cable (CT1/PRI Interface)
Syntax
cable { long { 0db | -7.5db | -15db | -22.5db } | short { 133ft | 266ft | 399ft | 533ft |
655ft } }
undo cable
View
Parameter
long: Matches a 655-feet and longer transmission line. The options for this parameter
include 0db, -7.5db, -15db and -22.5db. The attenuation parameter is selected
depending on the signal quality received at the receiving end. In this case, no external
CSU is needed.
4-31
short: Matches a transmission cable under 655 feet. The options for this parameter
include 133ft, 266ft, 399ft, 533ft and 655ft. The length parameter is selected
depending on the actual transmission segment.
Description
Use the cable command to set cable attenuation and length on a CT1/PRI interface to
match the distance of the transmission line.
Use the undo cable command to restore the default or long 0db.
You can use this command to configure the signal waveform for transmission to
accommodate different needs. Whether to use this command depends on the quality
of the signal received by the receiver. If the signal quality is relatively good, you can
use the default setting, where the CT1/PRI interface does not need an external CSU
device.
Example
# Set the transmission cable that the CT1/PRI interface matches to 133 feet.
[H3C-T1 1/0/0] cable short 133ft
4.3.4 channel-set (CT1/PRI Interface)
Syntax
channel-set set-number timeslot-list range [ speed { 56k | 64k } ]

undo channel-set set-number
View
Parameter
set-number: The number of the channel-set formed by timeslot bundling on the

interface. It is in the range 0 to 23.
range: The number of the timeslots that are bundled, which is in the range 1 to 24.
When specifying the timeslots to be bundled, you can specify one timeslot by
specifying its number, a timeslot range by specifying a range in the form
number1-number2, or several discrete timeslots by specifying number1,
number2-number3.
speed { 56k | 64k }: Speed of the timeslot bundle in kbps. If 56k is selected, the
timeslots is bundled into N x 56 kbps bundles. If 64k, the default, is selected, the
timeslots is bundled into N x 64 kbps bundles.
4-32
Description
Use the channel-set command to bundle timeslots on the CT1/PRI interface into a
channel-set.
Use the undo channel-set command to remove the specified channel-set.
A CT1/PRI interface is physically divided into 24 timeslots numbered from 1 through
24. In actual applications, all the timeslots can be bundled into multiple channel-sets
and for each of them, the system automatically creates a serial interface. This serial
interface has the same logic features of synchronous serial interfaces.
The serial interface is numbered in the form of serial interface-number:set-number,
where interface-number starts from the maximum serial interface number plus 1, and
set-number is the number of the channel-set.
Only one timeslot bundling mode is supported on a CT1/PRI interface at a time. In
other words, you cannot use this command together with the pri-set command.
Related command: pri-set.
Example
# Bundle the timeslots 1, 2, 5, 10 through 15 and 18 of the CE1/PRI interface into

channel-set 0.
[H3C-T1 1/0/0] channel-set 0 timeslot-list 1,2,5,10-15,18
4.3.5 clock (CT1/PRI Interface)
Syntax

undo clock
View
Parameter
master: Adopts the internal clock.

slave: Adopts the line clock.
Description
Use the clock command to set clocking on the CT1/PRI interface.

Use the undo clock command to restore the default or slave, the line clock.
When the CT1/PRI interface is working as DCE, use internal clock for it, that is,
master. When it is working as DTE, chose the line clock, that is, slave for it.
4-33
Example
# Set the clock of the CT1/PRI interface to internal (master).

[H3C-T1 1/0/0] clock master
4.3.6 code (CT1/PRI Interface)
Syntax
code { ami | b8zs }

undo code
View
Parameter
ami: AMI line code format.

b8zs: Bipolar with 8-zero substitution (b8zs) line code format.
Description
Use the code command to set the line code format on the CT1/PRI interface.
Use the undo code command to restore the default or b8zs.
You should keep the line code format of the interface in consistency with the one used
by the remote device.
Example
# Set the line code format of the interface T1 1/0/0 to ami.

[H3C-T1 1/0/0] code ami
4.3.7 controller t1
Syntax
controller t1 number
View
System view
Parameter
number: CT1/PRI interface number.
Description
Use the controller t1 command to enter a CT1/PRI interface view.
4-34
Example
# Enter the view of the interface T1 1/0/0.

[H3C] controller t1 1/0/0
[H3C-T1 1/0/0]
4.3.8 crc
Syntax
crc { 16 | 32 | none}
undo crc
View
Parameter

Description
Use the crc command to configure CRC mode of the serial interface formed by CT1.
Use the undo crc command to restore the default configuration.
By default, 16-bit CRC is adopted.
Example
# Apply 32-bit CRC to the serial interface formed by the interface T1 2/0/0 in fractional
mode.
4.3.9 data-coding (CT1/PRI Interface)
Syntax
data-coding { normal | inverted }

undo data-coding
View
4-35
Parameter
normal: Disables user data inversion.

inverted: Enables user data inversion.
Description
Use the data-coding normal command to disable user data inversion on the
CT1/PRI interface.
Use the data-coding inverted command to enable user data inversion on the
CT1/PRI interface.
Use the undo data-coding command to restore the default.
By default, data inversion is disabled.
To prevent 7e in valid data from being taken for stuffing characters, HDLC inserts a
zero after every five ones in the data stream. Then, HDLC inverts every one bit into a
zero and every zero bit into a one. This ensures at least at least one out of every eight
bits is a one. When AMI encoding is adopted on a T1 interface, the use of data
inversion can eliminate presence of multiple consecutive zeros.
At the two ends of a T1-F line, the same data inversion setting must be adopted.
Example
# Enable user data inversion on the CT1/PRI interface.

[H3C-T1 3/0/0] data-coding inverted
4.3.10 display controller t1
Syntax
display controller t1 number
View
Any view
Parameter
Description
Use the display controller t1 command to display the information about the specified
CT1/PRI interface.
This command displays the following information about the specified interface:
z Physical state
z Cable type
4-36
z Clock mode
z Line code format
z Loopback mode
z Line idle code
z Interframe filling tag
z Alarm states
z Error statistics gathered at 15-minute intervals during the last 24 hours
Example
# Display the information about T1 interface 1/0/0.

[H3C] display controller t1 1/0/0
T1 1/0/0 current state :DOWN
Description : T1 1/0/0 Interface
Work mode is T1 framed, Cable type is 100 Ohm balanced.
Frame-format is esf, fdl is none, Line code is b8zs.
Source clock is slave, Data-coding is normal.
Idle code is ff, Itf type is ff, Itf number is 2.
Alarm State:
Pulse density violation detected.
SendLoopCode History:
inband-llb-up:0 times, inband-llb-down:0 times.
fdl-ansi-llb-up:0 times, fdl-ansi-llb-down:0 times.
fdl-ansi-plb-up:0 times, fdl-ansi-plb-down:0 times.
BERT state:(stopped, not completed)
Test pattern: 2^15, Status: Not Sync, Sync Detected: 0
Time: 0 minute(s), Time past: 0 minute(s)
Bit Errors (since test started): 0 bits
Bits Received (since test started): 0 Kbits
Bit Errors (since latest sync): 0 bits
Bits Received (since latest sync): 0 Kbits
0 Line Code Violations, 0 Path Code Violations
0 Ais Alarm Secs, 286 Los Alarm Secs
7 Slip Secs, 286 Fr Loss Secs, 0 Line Err Secs, 0 Degraded Mins
0 Errored Secs, 0 Bursty Err Secs, 0 Severely Err Secs, 286 Unavail Secs
Data in Interval 1:
4-37

Data in Interval 2:
Total Data (last 2 15 minute intervals):
Table 4-4 Description on the fields of the display controller t1 command
Field Description
Physical state of the interface: up or
T1 1/0/0 current state :DOWN
down
Description : T1 1/0/0 Interface Description about the T1 interface
Basic Configuration: Basic configurations for the interface

Operating mode of the T1 interface, T1
Work mode
framed in this example
Cable type of the T1 interface, 100 ohm
Cable type
balanced in this example
Frame format configured on the T1
Frame-format
interface: ESF or SF
fdl FDL format: ANSI, ATT, or none
Line code Line code: AMI or B8ZS
Source clock
master or slave
Data-coding Normal or inverted
Idle code 7e or ff
Loopback setting on the interface: local,
Loop back
payload, remote, or not set
Type of the received alarm: none, LOS,
LOF, RAI, or AIS
4-38
Field Description
Type of the transmitted alarm: RAI, or
none
The detected pulse density is
Pulse density violation detected
incompliant with the specification
inband-llb-up:0 times, History of loopback code sending to the
inband-llb-down:0 times. far-end, including the number of
fdl-ansi-llb-up:0 times, transmissions for each type of code, and
fdl-ansi-llb-down:0 times. the type of the last sent code. (See the
sendloopcode command.)
fdl-ansi-plb-up:0 times,
fdl-ansi-plb-down:0 times
BERT state: completed, stopped (not
completed), or running.
Test pattern in use (2^20 or 2^15), 2^15

Test pattern: 2^15, Status: Not Sync, in this example; synchronization state,
Sync Detected: 0 and the number of detected
synchronizations
Time: 0 minute(s), Time past: 0 The duration of the BERT test and the
minute(s) time that has elapsed
Number of bit errors received since the
start of the BERT test
Number of bits received since the start
Bits Received (since test started)
of the BERT test
Bit Errors (since latest sync)
last synchronization
Number of bits received since last
Bits Received (since latest sync)
synchronization
Historical Statistics: Historical statistics
Last clearing of counters: Never Counter clearing records
elapsed):
0 Line Code Violations, 0 Path Code Statistics spanning the current interval.
Violations The statistical items, such as AIS alarm,
LOS signal, and LFA, are provided
0 Ais Alarm Secs, 286 Los Alarm according to the T1 specifications for the
Secs physical layer.
7 Slip Secs, 286 Fr Loss Secs, 0 Line For details, refer to ANSI T1.403 and
Err Secs, 0 Degraded Mins AT&T TR 54016.
0 Errored Secs, 0 Bursty Err Secs, 0
Severely Err Secs, 286 Unavail Secs
4-39
Field Description
Data in Interval 1:
0 Line Code Violations, 0 Path Code
Violations
Statistics spanning the first interval.
0 Ais Alarm Secs, 901 Los Alarm
Secs The statistical items are the same as
those provided by the statistics spanning
22 Slip Secs, 901 Fr Loss Secs, 0 the current interval.
Line Err Secs, 0 Degraded Mins
Data in Interval 2:
Violations
Statistics spanning the second interval.
Violations
Statistics spanning the last two intervals.
4.3.11 fdl
Syntax
fdl { none | ansi | att }

undo fdl
View
Parameter
none: Disables facilities data link (FDL).

ansi: Implements ANSI T1.403 FDL.
att: Implements AT&T TR 54016 FDL.
4-40
Description
Use the fdl command to set the behavior of the CT1/PRI interface on the FDL in ESF
framing.
Use the undo fdl command to restore the default.
FDL is an embedded 4 kbps overhead channel within the ESF format for transmitting
performance statistics or loopback code.
By default, FDL is disabled. You can however change the setting depending on the
setting at the far end.
Example
# Implement AT&T TR 54016 FDL on interface T1 1/0/0.

[H3C-T1 1/0/0] fdl att
4.3.12 frame-format (CT1/PRI Interface)
Syntax
frame-format { sf | esf }
undo frame-format
View
Parameter
sf: Sets the frame format to super frame (SF).

esf: Sets the frame format to extended super frame (ESF).
Description
Use the frame-format command to set the frame format on the CT1/PRI interface.
Use the undo frame-format command to restore to the default or esf.
A CT1/PRI interface supports two frame formats, that is, SF and ESF. In SF format,
multiple frames can share the same FSC and signaling information, so that more
significant bits are available for transmitting user data. The use of ESF allows you to
test the system without affecting the ongoing service.
Example
# Set the frame format of T1 1/0/0 to SF.

[H3C-T1 1/0/0] frame-format sf
4-41
4.3.13 idlecode (in CT1/PRI Interface View)
Syntax
idlecode { 7e | ff }
undo idlecode
View
Parameter
7e: Sets the line idle code to 0x7e.

ff: Sets the line idle code to 0xff.
Description
Use the idlecode command to set the line idle code on the CT1/PRI interface. Two
types of line idle code are available: 0x7e and 0xff.
Use the undo idlecode command to restore the default, 0x7e.
The line idle code is sent in the timeslots that are not bundled into the logical channels
on the interface.
Example
# Set the line idle code to 0x7e on CT1/PRI interface 3/0/0.

[H3C-T1 3/0/0] idlecode 7e
Syntax

View
Parameter
information-element: List of information elements that support transparent

elements.
incoming: Specifies to transparently transmit the information element on the
incoming direction of Q.931 packet.
4-42
outgoing: Specifies to transparently transmit the information element on the outgoing

both: Specifies to transparently transmit the information element on both the
incoming and outgoing direction of Q.931 packet.
Table 4-5 Q.931 related information element supporting transparent transmission
display Display
facility Facility
progress Progress
display display
facility Facility
Description
Use the isdn ie passthrough command to enable transparent transmission of some

or all related information elements. You can also use this command to configure
Use the undo isdn ie passthrough command to disable transparent transmission for
some or all related information element.
By default, Q.931 information element transparent transmission is not enabled on
ISDN interface (PRI interface and BRI interface).
This command is only valid when ISDN initiates or receives an H.323 call and invalid
for a DCC call.
Example
# Set to enable transparent transmission for facility on both directions on Serial

0/0/0:15.
4-43
<H3C> system-view
4.3.15 itf (CT1/PRI Interface)
Syntax
itf type { 7e | ff }
itf number number
undo itf { type | number }
View
Parameter
type { 7e | ff }: Sets the type of interframe filling tag to 0x7e by specifying the 7e
argument or to 0xff by specifying the ff keyword. On the CE1/PRI interface, the default
type of interframe filling tag is 0x7e.
number number: Sets the number of interframe filling tags. It ranges from 0 to 14
bytes and defaults to 4 bytes.
Description
Use the itf command to set the type of and the number of interframe filling tags on the
CT1/PRI interface. Two types of interframe filling tag are available: 0x7e and 0xff.
Use the undo itf command to restore the default.
Interframe filling tags are sent when no service data is sent on the timeslots bundled
into logical channels on the CT1/PRI interface.
On the CT1/PRI interface, the default type of interframe filling tag is 0x7e and the
default number of interframe filling tags is four.
Example
# Set the type of interframe filling tag to 0xff on CT1/PRI interface 3/0/0.
[H3C-T1 3/0/0] itf type ff
# On CE1/PRI interface 3/0/0 set the number of interframe filling tags to five.
[H3C-T1 3/0/0] itf number 5
4.3.16 loopback (CT1/PRI Interface)
Syntax
4-44
undo loopback
View
Parameter
local: Enables the CT1/PRI interface to perform local loopback.

remote: Enables the interface to perform remote loopback.
payload: Enables the interface to perform external payload loopback.
Description
Use the loopback command to enable a CT1/PRI interface to perform local, remote,
or external payload loopback.
Use the undo loopback command to disable the CT1/PRI interface to perform
loopback.
By default, the interface is disabled to perform loopback in any form.
You can use loopback to check the condition of interfaces or cables. When they are
operating normally, disable this function.
You can bundle timeslots on the CT1/PRI interface to form a serial interface and
encapsulate it with PPP. After you enable loopback on this serial interface, it is normal
that the state of the link layer protocol is reported down.
Example
# Set the interface T1 1/0/0 to perform remote loopback.

[H3C-T1 1/0/0] loopback remote
4.3.17 pri-set (CT1/PRI Interface)
Syntax

undo pri-set
View
Parameter
4-45
number1-number2, or several discrete timeslots by specifying number1,

number2-number3.
Description
Use the pri-set command to bundle the timeslots of the CT1/PRI interface into a
pri-set.
Use the undo pri-set command to remove the timeslot bundle.
By default, no timeslots are bundled into pri-sets.
When creating a pri-set on a CT1/PRI interface, note that timeslot 24 is D channel for
transmitting signaling; it cannot form a bundle that includes itself only. The attempts to
bundle only timeslot 24 will fail.
In a pri-set formed by timeslot bundling on a CT1/PRI interface, timeslot 24 is used as
D channel for signaling transmission, and other timeslots as B channels for data
transmission. You may randomly bundle these timeslots into a pri-set (as the D
channel, timeslot 24 is automatically bundled). The logic features of this pri-set will be
the same like those of an ISDN PRI interface. If no timeslot is specified, all timeslots
are bundled into an interface similar to an ISDN PRI interface in the form of 23B+D.
The system automatically creates a serial interface after timeslot bundling on the
interface. This serial interface has the same logic features of ISDN PRI interface. The
serial interface is numbered in the form of serial number:23, where number is the
number of the CT1/PRI interface where the serial interface is created.
Only one timeslot bundling mode is supported on a CT1/PRI interface at a time. In
other words, you cannot use this command and the channel-set command together.
Example
# Bundle the timeslots 1, 2, and 8 through 12 of the CT1/PRI interface into a pri-set.
[H3C-T1 1/0/0] pri-set timeslot-list 1,2,8-12
4.3.18 reset counters controller t1
Syntax
reset counters controller t1 interface-number
View
User view
Parameter
4-46
Description
Use the reset counters controller t1 command to clear the controller counter for the
CT1/PRI interface.
To display the value of the controller counter, use the display controller t1
command.
Note:
The reset counters interface command could not clear the controller counters for
CE1/PRI interfaces. To do so, you must use the reset counters controller t1
command.
Example
# Clear the controller counter for CT1/PRI interface 1/0/0.

<H3C> reset counters controller t1 1/0/0
4.3.19 sendloopcode
Syntax
sendloopcode { inband-llb-up | inband-llb-down | fdl-ansi-llb-up |

fdl-ansi-llb-down | fdl-ansi-plb-up | fdl-ansi-plb-down | fdl-att-plb-up |
fdl-att-plb-down }
View
Parameter
inband-llb-up: Sends in-band line loopback (LLB) activation request code compliant
with the ANSI or AT&T implementation. This enables remote loopback.
inband-llb-down: Sends in-band LLB deactivation request code compliant with the
ANSI or AT&T implementation. This disables loopback.
fdl-ansi-llb-up: Sends ANSI-compliant line loopback (LLB) activation request code in
the FDL. This enables remote loopback.
fdl-ansi-llb-down: Sends ANSI-compliant LLB deactivation request code in the FDL.
This disables loopback.
fdl-ansi-plb-up: Sends ANSI-compliant payload loopback (PLB) activation request
code in the FDL to enable remote loopback.
4-47
fdl-ansi-plb-down: Sends ANSI-compliant PLB deactivation request code in the FDL

to disable loopback.
fdl-att-plb-up: Sends AT&T-compliant PLB activation code in the FDL to enable
remote loopback.
fdl-att-plb-down: Sends AT&T-compliant PLB deactivation code in the FDL to disable
loopback.
Description
Use the sendloopcode command to send the remote loopback control code.
By default, no remote loopback control code is sent.
You may configure loopback on the far-end CT1/PRI interface by sending the
loopback request code.
In LLB mode, all 193 bits (one synchronization bit and 192 effective bandwidth bits) in
a T1 PCM frame are looped back. In PLB mode, however, only 192 effective
bandwidth bits are looped back.
The format of loopback code can be compliant with ANSI T1.403 or AT&T TR 54016.
In SF framing, LLB code is sent using the effective bandwidth (slots 1 through 24). In
ESF framing, both LLB code and PLB code are sent/received in the FDL in ESF
frames.
This command is used in conjunction with the far-end T1 device. The far-end device
must be able to set loopback mode depending on the detected loopback code. The
sending of remote loopback control code can last five minutes without affecting the
operation of other interfaces.
You can use this command only when the far-end CT1/PRI interface can
automatically detect loopback request code from the network.
Example
# Send in-band LLB activation request code.

[H3C-T1 1/0/0] sendloopcode inband-llb-up
4.4 E1-F Interface Configuration Commands

4.4.1 display fe1 serial
Syntax
display fe1 [ serial serial-number ]
View
Any view
4-48
Parameter
serial serial-number: Number of the serial interface. If no interface is specified,

information on all the E1-F interfaces is displayed.
Description
Use the display fe1 serial command to view the configuration and state about the
specified or all E1-F interfaces.
If the specified interface is a serial interface rather than an E1-F interface, the system
prompts that the serial interface is not a factional E1 interface.
Example
# Display information on an E1-F interface.

[H3C] display fe1 serial 0/0/0
Serial4
Fractional E1, status is down.
Work mode is FRAMED - 120 OHM balanced.
Framing : NO-CRC4, Line Code is HDB3, Clock : Slave.
Alarm State : Loss-of-Signal. Serial0/0/0
Physical type is FE1 - 75 OHM unbalanced
Work mode is FRAMED
Frame-format is NONE,Line Code is HDB3,Source Clock is SLAVE
Alarm State is None.
129 Loss Frame Alignment Secs, 0 Framing Error Secs,
0 CRC Error Secs, 0 Alarm Indication Secs, 129 Loss-of-signals Secs,
0 Code Violations Secs, 0 Slip Secs, 0 E-Bit error Secs.
Table 4-6 Description on the fields of the display fe1 serial command
Field Description
Physical type Interface type (75-ohm unbalanced/120-ohm balanced)
Work mode Operating mode (frame/unframed)
Frame-format Frame format (CRC4/no-CRC4)
Line Code Line code format (AMI/HDB3)
Source Clock Clock mode (master/slave)
Alarm State Alarm information
4-49
4.4.2 fe1 clock
Syntax
fe1 clock { master | slave }

undo fe1 clock
View
E1-F interface view
Parameter
master: Internal clock.

slave: Line clock.
Description
Use the fe1 clock command to configure clocking on the E1-F interface.
Use the undo fe1 clock command to restore the default or slave, the line clock.
When the E1-F interface works as DCE, internal clock (master) must be used. If the
interface works as DTE, however, line clock (slave) must be used.
Example
# Set the E1-F interface to use internal clock.

[H3C-Serial0/0/0] fe1 clock master
4.4.3 fe1 code
Syntax
fe1 code { ami | hdb3 }

undo fe1 code
View
E1-F interface view
Parameter

hdb3: HDB3 line code format.
Description
Use the fe1 code command to configure the line code format of the E1-F interface.
Use the undo fe1 code command to restore the default or hdb3.
The line code of an interface should be set in consistency with that of the peer.
4-50
Example
# Set the line code format of the E1-F interface to AMI.

[H3C-Serial0/0/0] fe1 code ami
4.4.4 fe1 detect-ais (E1-F Interface)
Syntax
fe1 detect-ais
undo fe1 detect-ais
View
E1-F interface view
Parameter
None
Description
Use the fe1 detect-ais command to enable alarm indication signal (AIS) detect on the
E1-F interface.
Use the undo detect-ais command to disable AIS detect on the E1-F interface.
By default, AIS detect is enabled on the E1-F interface.
Before enabling or disabling AIS detect for an E1-F interface, you must configure the
interface to operate in unframed mode with the fe1 unframed command.
Example
# Disable AIS detect on E1-F interface serial 3/0/0.

[H3C-serial 3/0/0] undo fe1 detect-ais
4.4.5 fe1 frame-format
Syntax
fe1 frame-format { crc4 | no-crc4 }

undo fe1 frame-format
View
E1-F interface view
Parameter
crc4: Adopts CRC4 as the framing format for the E1-F interface.
no-crc4: Adopts no-CRC4 as the framing format for the E1-F interface..
4-51
Description
Use the fe1 frame-format command to configure the framing format of the E1-F
interface.
Use the undo fe1 frame-format command to restore the default or no-crc4.
Example
# Set the framing format of the E1-F interface to CRC4.

[H3C-Serial0/0/0] fe1 frame-format crc4
4.4.6 fe1 loopback
Syntax
fe1 loopback { local | remote }

undo fe1 loopback
View
E1-F interface view
Parameter
local: Places the interface in local loopback.

remote: Places the interface in remote loopback.
Description
Use the fe1 loopback command to place the E1-F interface in local or remote
loopback.
Use the undo fe1 loopback command to disable the local and remote loopback on
the interface.
Enable loopback only when testing state of interfaces or cables.
Example
# Place the E1-F interface in local loopback.

[H3C-Serial0/0/0] fe1 loopback local
4.4.7 fe1 timeslot-list
Syntax
fe1 timeslot-list range

undo fe1 timeslot-list
4-52
View
E1-F interface view
Parameter
range: Timeslots participating in the binding. It in the range 1 to 31. When specifying
timeslots for binding, you can specify one timeslot by specifying its number, a timeslot
range by specifying a range in the form number1-number2, or multiple discrete
timeslots by specifying number1, number2-number3.
Description
Use the fe1 timeslot-list command to bundle timeslots on the E1-F interface.
Use the undo fe1 timeslot-list command to restore the default.
By default, all the timeslots on the E1-F interface are bundled to form a 1984 kbps
interface.
Time slot bundling results in interface rate change. For example, after you bundle
timeslots 1 through 10 on the interface, the interface rate becomes 10 x 64 kbps.
When the E1-F interface is working in unframed mode, you cannot configure the fe1
timeslot-list command.
Related command: fe1 unframed.
Example
# Bundle the timeslots 1, 2, 5, 10 through 15, and 18 on the E1-F interface.

[H3C-Serial0/0/0] fe1 timeslot-list 1,2,5,10-15,18
4.4.8 fe1 unframed
Syntax
fe1 unframed
undo fe1 unframed
View
E1-F interface view
Parameter
None
Description
Use the fe1 unframed command to configure an E1-F interface to work in unframed
mode.
4-53
Use the undo fe1 unframed command to configure the E1-F interface to work in
framed mode.
By default, the E1-F interface works in framed mode.
When the E1-F interface is working in unframed mode, it is a 2048 kbps interface
without timeslot division and is logically equivalent to a synchronous serial interface.
When it works in framed mode, however, it is physically divided into 32 timeslots
numbered in the range 0 to 31, and timeslot 0 is used for transmitting synchronization
information.
Related command: fe1 timeslot-list.
Example
# Set the E1-F interface to work in unframed mode.

[H3C-Serial0/0/0] fe1 unframed
4.5 T1-F Interface Configuration Commands

4.5.1 display ft1 serial
Syntax
display ft1 [ serial serial-number ]
View
Any view
Parameter
serial serial-number: Number of the serial interface. If no interface is specified, the

information on all the T1-F interfaces is displayed.
Description
Use the display ft1 serial command to view the configuration and state of the T1-F
interface.
If the specified interface is a common serial interface rather than a T1-F interface, the
system prompts that the serial interface is not a fractional T1 interface.
Example
# Display information on the T1-F interface.

[H3C] display ft1 serial 1/0/0
Serial/0/0
Work mode is T1 framed, Cable type is 100 ohm balanced.
Frame-format is esf, fdl is none, Line code is b8zs.
4-54
Source clock is slave, Data-coding is normal.

Idle code is ff, Itf type is ff, Itf number is 2.
Alarm State:
Pulse density violation detected.
Inband-llb-up:0 times, Inband-llb-down:0 times.
Fdl-ansi-llb-up:0 times, Fdl-ansi-llb-down:0 times.
Fdl-ansi-plb-up:0 times, Fdl-ansi-plb-down:0 times.
Bits Received (since test started): 0 Kbits
Bit Errors (since latest sync): 0 bits
Bits Received (since latest sync): 0 Kbits
Data in Interval 1:
Data in Interval 2:
4-55
Table 4-7 Description on the fields of the display ft1 serial command
Field Description
Serial 1/0/0 Interface type and number
Basic Configuration Basic configuration for the interface
Operating mode: T1 framed or
Work mode
unframed)
Cable type of the interface, 100 ohm
Cable type
balanced in this example
Frame format configured on the
Frame-format
interface: ESF or SF
fdl FDL format: ANSI, ATT, or none
Line code AMI or B8ZS
Source Clock
master or slave
Data-coding Normal or inverted
Idle code 7e or ff
Loop back
payload, remote, or not set
Receiver alarm state
LOF, RAI, or AIS
Type of the transmitted alarm: RAI, or
none
The detected pulse density is
Pulse density violation detected
incompliant with the specification
inband-llb-up:0 times, History of loopback code sending to the
inband-llb-down:0 times. far-end, including the number of
fdl-ansi-llb-up:0 times, transmissions for each type of code, and
fdl-ansi-llb-down:0 times. the type of the last sent code. (See the
sendloopcode command.)
fdl-ansi-plb-up:0 times,
fdl-ansi-plb-down:0 times
Test pattern in use, 2^15 in this example;
Test pattern: 2^15, Status: Not Sync,
synchronization state, and the number
Sync Detected: 0
of detected synchronizations
4-56
Field Description
Bits Received (since test started)
of the BERT test
Bit Errors (since latest sync)
last synchronization
Bits Received (since latest sync)
synchronization
Historical Statistics: Historical statistics
Last clearing of counters: Never Counter clearing records
elapsed):
0 Line Code Violations, 0 Path Code Statistics spanning the current interval.
Violations The statistical items, such as AIS alarm,
LOS signal, and LFA, are provided
0 Ais Alarm Secs, 286 Los Alarm according to the T1 specifications for the
Secs physical layer.
7 Slip Secs, 286 Fr Loss Secs, 0 Line For details, refer to ANSI T1.403 and
Err Secs, 0 Degraded Mins AT&T TR 54016.
Data in Interval 1:
Violations
Statistics spanning the first interval.
Data in Interval 2:
Violations
Statistics spanning the second interval.
4-57
Field Description
Violations
Statistics spanning the last two intervals.
4.5.2 ft1 bert (T1-F Interface)
Syntax
ft1 bert pattern { 2^15 | 2^20 } time minutes [ unframed ]

undo ft1 bert
View
T1-F interface view
Parameter
pattern: Sets a bit error rate test (BERT) pattern, which could be 2^15 or 2^20.
time minutes: Sets the duration of a BERT test, in the range of 1 to 1440 minutes.
Description
Use the ft1 bert command to start a BERT test on the T1-F interface.
Use the undo ft1 bert command to stop the BERT test running on the T1-F interface.
which, the T1-F interface supports only 2^15 and 2^20 at present.
4-58
You may view the state and result of the BERT test with the display ft1 serial
command.
Example
# Run a 10-minute 2^20 BERT test on T1-F interface 0/0/0.

[H3C-Serial0/0/0] ft1 bert pattern 2^20 time 10
4.5.3 ft1 cable
Syntax
ft1 cable { long decibel | short length }

undo ft1 cable
View
T1-F interface view
Parameter
long decibel: Matches the transmission segment longer than 655 feet. The argument
decibel can take 0db, -7.5db, -15db, or -22.5db, depending on the signal quality at
the receiving end. In this case, no external CSU is required.
short length: Matches the transmission segment shorter than 655 feet. The argument
length can take 133ft, 266ft, 399ft, 533ft, or 655ft, depending on the transmission
segment.
Description
Use the ft1 cable command to configure attenuation or transmission segment

matching the T1-F interface.
Use the undo ft1cable command to restore the default.
By default, the transmission line attenuation matching the T1-F interface is long 0db.
This command is used for configuring the signal waveform required for different types
of transmission. In practice, you can decide whether to use this command according
to the signal quality at the receiving end. If the signal quality is acceptable, you can
use the default setting.
Example
# Set the transmission segment matching the T1-F interface to 133 feet.
[H3C-Serial0/0/0] ft1 cable short 133ft
4-59
4.5.4 ft1 clock
Syntax
ft1 clock { master | slave }

undo ft1 clock
View
T1-F interface view
Parameter
master: Internal clock is used.

slave: Line clock is used.
Description
Use the ft1 clock command to configure clocking on the T1-F interface.
Use the undo ft1 clock command to restore the default or slave.
If the T1-F interface is working as DCE, use internal clock (master) for it. If the
interface is working as DTE, use line clock (slave) for it.
Example
# Set clocking on the T1-F interface to internal.

[H3C-Serial0/0/0] ft1 clock master
4.5.5 ft1 code
Syntax
ft1 code { ami | b8zs }

undo ft1 code
View
T1-F interface view
Parameter

b8zs: B8ZS line code format.
Description
Use the ft1 code command to configure line code format for a T1-F interface.
Use the undo ft1 code command to restore the default or b8zs.
The line code of an interface should be set in consistency with that of its peer.
4-60
Example
# Set the line code format of the T1-F interface to AMI.

[H3C-Serial0/0/0] ft1 code ami
4.5.6 ft1 data-coding
Syntax
ft1 data-coding { normal | inverted }

undo ft1 data-coding
View
T1-F interface view
Parameter
normal: Disables user data inversion.

inverted: Enables user data inversion.
Description
Use the ft1 data-coding normal command to disable user data inversion on the T1-F
interface.
Use the ft1 data-coding inverted command to enable user data inversion on the
CT1/PRI interface.
Use the undo ft1 data-coding command to restore the default.
By default, data inversion is disabled.
To prevent 7e in valid data from being taken for stuffing characters, HDLC inserts a
zero after every five ones in the data stream. Then, HDLC inverts every one bit into a
zero and every zero bit into a one. This ensures at least at least one out of every eight
bits is a one. When AMI encoding is adopted on a T1-F interface, the use of data
inversion can eliminate presence of multiple consecutive zeros.
At the two ends of a T1-F line, the same data inversion setting must be adopted.
Example
# Enable user data inversion on the T1-F interface.

[H3C-Serial0/0/0] ft1 data-coding inverted
4.5.7 ft1 fdl
Syntax
ft1 fdl { none | ansi | att }
4-61
undo ft1 fdl
View
T1-F interface view
Parameter
none: Disables facilities data link (FDL).

att: Implements AT&T TR 54016 FDL.
Description
Use the ft1 fdl command to set the behavior of the T1-F interface on the FDL in ESF
framing.
Use the undo ft1 fdl command to restore the default.
performance statistics or loopback code.
By default, FDL is disabled. You can however change the setting depending on the
setting at the far end.
Example
# Implement ANSI T1.403 FDL on interface the T1-F interface.

[H3C-Serial0/0/0] ft1 fdl ansi
4.5.8 ft1 loopback
Syntax
ft1 loopback { local | remote }

undo ft1 loopback [ local | remote ]
View
T1-F interface view
Parameter
local: Places the interface in local loopback.

remote: Places the interface in remote loopback.
Description
Use the ft1 loopback command to place the T1-F interface in local or remote
loopback.
Use the undo ft1 loopback command to disable loopback on the interface.
4-62
By default, the interface is not placed in local or remote loopback.

Enable loopback only when testing state of interfaces or cables.
Example
# Place the T1-F interface in local loopback.

[H3C-Serial0/0/0] ft1 loopback local
4.5.9 ft1 timeslot-list
Syntax
ft1 timeslot-list range [ speed { 56k | 64k } ]

undo ft1 timeslot-list
View
T1-F interface view
Parameter
range: Timeslots participating in the bundling. It is in the range 1 to 24. When

specifying timeslots to be bundled, you can configure one timeslot by specifying its
number, a timeslot range by specifying a range in the form number1-number2, or
discrete timeslots by specifying number1, number2-number3.
speed { 56k | 64k }: Time slot bundling speed in kbps. If 56k applies, timeslots are
bundled into an N x 56 kbps bundle. If 64k applies, timeslots are bundled into an N X
64 kbps bundle.
Description
Use the ft1 timeslot-list command to bundle timeslots on the T1-F interface.
Use the undo ft1 timeslot-list command to restore the default.
By default, all the timeslots on the T1-F interface are bundled to form a 1536 kbps
interface.
Time slot bundling results in interface rate change. For example, after you bundle
timeslots 1 through 10 on the interface, the interface rate becomes 10 x 64 kbps or 10
x 56 kbps.
4-63
Note:
When binding T1-F interface with Virtual-template, if you want to use the ft1
timeslot-list command to modify T1-F interface time-slot bundling, shutdown the
corresponding T1-F interface and execute the ft1 timeslot-list command. Note that
you should perform the above modification on the two T1-F interfaces on both end of
the link and then execute the undo shutdown command to T1-F interface; otherwise,
when you execute the display interface virtual-template command, the displayed
baudrate for virtual-template interface could be incorrect.
Example
# Bind the timeslots 1, 2, 5, 10 through 15, and 18 on the T1-F interface.

[H3C-Serial0/0/0] ft1 timeslot-list 1,2,5,10-15,18
4.5.10 ft1 alarm-threshold
Syntax
ft1 alarm-threshold los pulse-detection value

ft1 alarm-threshold los pulse-recovery value
ft1 alarm-threshold ais { level-1 | level-2 }
ft1 alarm-threshold lfa { level-1 | level-2 | level-3 | level-4 }
undo ft1 alarm-threshold
View
T1-F interface view
Parameter
los: Sets a loss of signal (LOS) alarm threshold. Two LOS alarm thresholds are
available: pulse-detection for the pulse detection duration threshold with LOS and
pulse-recovery for the pulse threshold with LOS.
The threshold of pulse-detection ranges from 16 to 4,096 pulse intervals and defaults
to 176.
The threshold of pulse-recovery ranges from 1 to 256 and defaults to 22.
If the number of the pulses detected during the total length of the specified pulse
detection intervals is smaller than the pulse-recovery threshold, a LOS alarm occurs.
ais: Sets the alarm threshold of alarm indication signal (AIS). Two AIS alarm threshold
options are available: level-1 and level-2. If level-1 is specified, an AIS alarm occurs
when the number of 0s in the bit stream of an SF or ESF frame is less than or equal to
4-64
2. If level-2 is specified, an AIS alarm occurs when the number of 0s is less than or
equal to 3 in the bit stream of an SF frame or less than or equal to 5 in the bit stream
of an ESF frame.
By default, level-1 AIS alarm threshold applies.
lfa: Sets the loss of frame align (LFA) alarm threshold. Four threshold options are
available: level-1, level-2, level-3, and level-4. If level-1 is specified, an LFA alarm
occurs when two of four frame alignment bits are lost. If level-2 is specified, an LFA
alarm occurs when two of five frame alignment bits are lost. If level-3 is specified, an
LFA alarm occurs when two of six frame alignment bits are lost. Level-4 applies only to
ESF frames; an LFA alarm occurs when four consecutive ESF frames have errors.
By default, level-1 LFA alarm threshold applies.
Description
Use the alarm-threshold command to configure the alarm thresholds on the T1-F
interface as needed.
Use the undo alarm-threshold command to restore the default alarm threshold
values.
Example
# Set the number of detection intervals to 300 for the pulse detection duration
threshold.
[H3C-Serial0/0/0] ft1 alarm-threshold los pulse-detection 300
4.5.11 ft1 sendloopcode
Syntax
ft1 sendloopcode { inband-llb-up | inband-llb-down | fdl-ansi-llb-up |

fdl-ansi-llb-down | fdl-ansi-plb-up | fdl-ansi-plb-down | fdl-att-plb-up |
fdl-att-plb-down }
View
T1-F interface view
Parameter
inband-llb-up: Sends in-band line loopback (LLB) activation request code compliant
with the ANSI or AT&T implementation. This enables remote loopback.
inband-llb-down: Sends in-band LLB deactivation request code compliant with the
ANSI or AT&T implementation. This disables loopback.
fdl-ansi-llb-up: Sends ANSI-compliant line loopback (LLB) activation request code in
the FDL. This enables remote loopback.
4-65
fdl-ansi-llb-down: Sends ANSI-compliant LLB deactivation request code in the FDL.

This disables loopback.
fdl-ansi-plb-up: Sends ANSI-compliant payload loopback (PLB) activation request
code in the FDL to enable remote loopback.
fdl-ansi-plb-down: Sends ANSI-compliant PLB deactivation request code in the FDL
to disable loopback.
fdl-att-plb-up: Sends AT&T-compliant PLB activation code in the FDL to enable
remote loopback.
fdl-att-plb-down: Sends AT&T-compliant PLB deactivation code in the FDL to disable
loopback.
Description
Use the sendloopcode command to send remote loopback control code.

By default, no remote loopback control code is sent.
You may configure loopback on the far-end T1-F interface by sending the loopback
request code.
In LLB mode, all 193 bits (one synchronization bit and 192 effective bandwidth bits) in
a T1 PCM frame are looped back. In PLB mode, however, only 192 effective
bandwidth bits are looped back.
The format of loopback code can be compliant with ANSI T1.403 or AT&T TR 54016.
In SF framing, LLB code is sent using the effective bandwidth (slots 1 through 24). In
ESF framing, both LLB code and PLB code are sent/received in the FDL in ESF
frames.
This command is used in conjunction with the far-end T1 device. The far-end device
must be able to set loopback mode depending on the detected loopback code.
Example
# Send in-band LLB activation request code.

[H3C-Serial0/0/0] ft1 sendloopcode inband-llb-up
4.6 Fundamental CE3 Interface Configuration Commands

4.6.1 bert
Syntax
bert pattern { 2^7 | 2^11 | 2^15 | qrss } time minutes [ unframed ]

undo bert
4-66
View
CE3 interface view
Parameter
pattern: Sets BERT test mode, including 2^7, 2^11, 2^15 and QRSS.
2^7: Specifies length of the stream to be sent to 27 bits.
qrss: Specifies length of the stream to be sent to 220 bits and no more than 14
contiguous zeros can be included in the stream.
time minutes: Sets duration time of BERT test, ranging from 1 to 1440 in minutes.
unframed: Sets filling frame overhead bit for test stream.
Description
Use the bert command to test line bit error rate.

Use the undo bert command to delete the test.
Various BERT test modes are defined in ITU O.151, ITU O.153 and ANSI
T1.403-1999. Currently, 2CE3 interface supports the test modes as 2^7, 2^11, 2^15
and QRSS.
In BERT test mode, the local end sends a test data stream to a specific node and the
node returns the data stream back. The local end then detects the link state by
checking the line bit error rate and whether the test stream received is consistent with
the stream sent. Therefore, the BERT test requires a certain node to return the data
stream sent, for example to set the remote end to remote loopback.
You can view BERT test state and result in interface state after you configure test
mode and specify test lifetime with the bert command and start the test.
You can use the display controller e3 command to view test state and result after
executing the bert command.
By default, no bert test is performed.
 Note:
The bert command is only supported by 2CE3 interface on FIC and MIM.
Example
# Perform the BERT test in QRSS mode on CE3 interface 1/0/0 for 10 minutes.
4-67
<H3C> system-view
[H3C] interface e3 1/0/0
[H3C-E3 1/0/0] bert pattern qrss time 10
4.6.2 clock (CE3 Interface)
Syntax

undo clock
View
CE3 interface view
Parameter

Description
Use the clock command to set the clock mode on the CE3 interface.
Use the undo clock command to restore the default or slave.
The clock is selected depending on the connected remote device. If it is a
transmission device, the local end uses line clock.
If the CE3 interfaces on the two routers are directly connected, one router should use
internal clock whereas the other router uses line clock.
Example
# Sets the clock on the CE3 interface to internal.

[H3C-E3 1/0/0] clock master
4.6.3 controller e3
Syntax
controller e3 interface-number
View
System view
Parameter
interface-number: CE3 interface number.
4-68
Description
Use the controller e3 command to enter the CE3 interface view.

Related command: display controller e3.
Example
# Enter the view of the interface E3 1/0/0.

[H3C] controller e3 1/0/0
[H3C-E3 1/0/0]
4.6.4 crc
Syntax
crc { 16 | 32 | none }
undo crc
View
Parameter

Description
Use the crc command to configure CRC mode of the serial interface formed by CE3.
Use the undo crc command to restore the default or 16-bit CRC.
Related command: e1 channel-set, e1 unframed, using.
Example
# Apply 32-bit CRC to the serial interface formed by the interface E3 2/0/0 in fractional
mode.
4.6.5 display controller e3
Syntax
display controller e3 interface-number
View
Any view
4-69
Parameter
interface-number: CE3 interface number.
Description
Use the display controller e3 command to view state information on a CE3 interface.
In addition to the state information of the CE3 interface, the command can display the
information about each E1 line on the CE3 interface if the interface is working in CE3
mode.
Example
# Display the information on the interface E3 1/0/0.

[H3C] display controller e3 1/0/0
E3 1/0/0 is up
Description : E3 1/0/0 Interface
Applique type is CE3 - 75 OHM unbalanced Frame-format G751, line code HDB3,
clock slave, national-bit 1,loopback not set
Alarm: none
ERROR: 0 BPV, 0 EXZ, 0 FrmErr, 0 FEBE
E3-0 CE1 1 is up
Frame-format NO-CRC4, clock master, loopback not set
E3-0 CE1 2 is up
Frame-format NO-CRC4, clock slave, loopback local
E3-0 CE1 3 is up
Frame-format NO-CRC4, clock slave, loopback remote
E3-0 CE1 4 is up
Frame-format CRC4, clock slave, loopback not set
E3-0 CE1 5 is up
Frame-format NO-CRC4, clock slave, loopback not set
E3-0 CE1 6 is up
E3-0 CE1 7 is up
E3-0 CE1 8 is up
E3-0 CE1 9 is up
E3-0 CE1 10 is up
E3-0 CE1 11 is up
E3-0 CE1 12 is up
4-70

E3-0 CE1 13 is up
E3-0 CE1 14 is up
E3-0 CE1 15 is up
E3-0 CE1 16 is up
Table 4-8 Description on the fields of the display controller e3 command
Field Description
Physical state of the E3 interface, which is up
E3 1/0/0 is up
in this example
Description : E3 1/0/0 Interface Description about the interface
Operating mode: CE3 or E3

Line type
Applique type is CE3 - 75 OHM Frame format: G751 or HDB3
unbalanced Frame-format G751, Line code
line code HDB3, clock slave, Clock: master or slave
national-bit 1,loopback not set
National-bit
Loopback mode: payload, remote, local, not
set
Alarm information: LOS, AIS, RAI, LOF, or
Alarm: none
none
ERROR: 0 BPV, 0 EXZ, 0 FrmErr,
Statistics about errors
0 FEBE
CE1 channels divided on E3 and information

E3-0 CE1 1 is up for each E1 line with respect to:
Frame-format NO-CRC4, clock z Frame format: none, 32, or 16
master, loopback not set z Clock
z Loopback setting
4.6.6 e1 bert
Syntax
e1 line-number bert pattern { 2^11 | 2^15 | 2^20 | 2^23 | qrss } time minutes
[ unframed ]
undo e1 line-number bert
4-71
View
CE3 interface view
Parameter
line-number: E1 channel number, in the range 1 to 16.

pattern: Sets BERT test mode, including 2^11, 2^15, 2^20, 2^23 and QRSS.
qrss: Specifies length of the stream to be sent to 220 bits and no more than 14
contiguous zeros can be included in the stream.
time minutes: Sets duration time of BERT test, ranging from 1 to 1440 in minutes.
unframed: Sets filling frame overhead bit for test stream.
Description
Use the e1 bert command to test line bit error rate on CE3 interface.
Use the undo e1 bert command to delete the test.
Various BERT test modes are defined in ITU O.151, ITU O.153 and ANSI
T1.403-1999. Currently, 2CE3 interface supports the test modes as 2^7, 2^11, 2^15
and QRSS.
In BERT test mode, the local end sends a test data stream to a specific node and the
node returns the data stream back. The local end then detects the link state by
checking the line bit error rate and whether the test stream received is consistent with
the stream sent. Therefore, the BERT test requires a certain node to return the data
stream sent, for example to set the remote end to remote loopback.
You can view BERT test state and result in interface state after you configure test
mode and specify test lifetime with the bert command and start the test.
You can use the display controller e3 command to view test state and result after
executing the bert command.
By default, no bert test is performed.
Example
# Perform the BERT test in QRSS mode on the E1 line for 10 minutes.
[H3C-E3 1/0/0] e1 1 bert pattern qrss time 10
4-72
4.6.7 e1 channel-set
Syntax
e1 line-number channel-set set-number timeslot-list range

undo e1 line-number channel-set set-number
View
CE3 interface view
Parameter
line-number: E1 line number in the range 1 to 16.

set-number: The number of the channel-set formed by a timeslot bundle on the E1
line. It is in the range 0 to 30.
range: The number of the timeslots to be bundled. It is in the range 1 to 31. When
specifying the timeslots to be bundled, you can specify one timeslot by specifying its
number, a timeslot range by specifying a range in the form number1-number2, or
discrete timeslots by specifying number1, number2-number3.
Description
Use the e1 channel-set command to bundle timeslots on an E1 line.

Use the undo e1 channel-set command to remove the timeslot bundle.
A CE3 interface can be channelized into 64Kbps lines and the timeslots of each E1
line can be bundled up to 31 channels.
When an E1 line operates in framed (CE1) mode, you can bundle timeslots on it. The
system will automatically create a serial interface numbered serial number /
line-number:set-number. For example, the serial interface formed by channel-set 0 on
the first E1 line on E3 1/0/0 is numbered 1/0/1:0. This interface can operate at N x 64
kbps and equals a synchronous serial interface logically on which you make other
configurations.
Related command: e1 unframed.
Example
# Bundle a 128 kbps serial interface on the first E1 line on the interface E3 1/0/0.
[H3C-E3 1/0/0] e1 1 channel-set 1 timeslot-list 1,2
4.6.8 e1 set clock
Syntax
e1 line-number set clock { master | slave }
4-73
undo e1 line-number set clock
View
CE3 interface view
Parameter

slave: Line clock.
Description
Use the e1 set clock command to set clocking of an E1 line on the CE3 interface.
Use the undo e1 clock command to restore the default or line clock.
When the CE3 interface is working in channelized mode, you can set separate clock
for each E1 line on it.
Note:
A CE3 interface uses the line clock (slave mode) as its clock source by default. If
interfaces on both sides of the line work in slave mode, the CE3 interfaces cannot
work well due to asynchronous clock. You are recommended to configure the
interface on one side of the line to work in the internal clock (master) mode.
Example
# Configure the first E1 line on the E3 interface to adopt line clock mode.
[H3C-E3 1/0/0] e1 1 set clock slave
4.6.9 e1 set frame-format
Syntax
e1 line-number set frame-format { crc4 | no-crc4 }

undo e1 line-number set frame-format
View
CE3 interface view
Parameter
4-74
crc4: The frame format adopted by an E1 line is CRC4.

no-crc4: The frame format adopted by an E1 line is no-CRC4.
Description
Use the e1 set frame-format command to configure the frame format on an E1 line.
Use the undo e1 set frame-format command to restore the default or no-crc4.
You can configure this command only when the specified E1 line is working in framed
format (which can be set using the undo e1 unframed command).
Example
# Configure the first E1 line on the E3 interface to adopt the frame format CRC4.
[H3C-E3 1/0/0] e1 1 set frame-format crc4
4.6.10 e1 set loopback
Syntax
e1 line-number set loopback { local | remote | payload }

undo e1 line-number set loopback
View
CE3 interface view
Parameter

local: Enables local loopback on the E1 line.
remote: Enables remote loopback on the E1 line.
payload: Enables payload loopback on the E1 line.
Description
Use the e1 set loopback command to set the loopback mode of the specified E1 line
on the E3 interface.
Use the undo e1 set loopback command to disable loopback on the E1 line.
By default, loopback is disabled on E1 lines.
If an E1 line encapsulated with PPP is placed in a loopback, it is normal that the state
of the link layer protocol is reported down.
Example
# Set the loopback mode of the first E1 line on the E3 interface to local.
4-75
[H3C-E3 1/0/0] e1 1 set loopback local
4.6.11 e1 shutdown
Syntax
e1 line-number shutdown
undo e1 line-number shutdown
View
CE3 interface view
Parameter
Description
Use the e1 shutdown command to shut down an E1 line on the CE3 interface.
Use the undo e1 shutdown command to enable the E1 line.
By default, E1 lines are enabled.
This command affects not only the specified E1 line but also the serial interfaces
formed by E1 line bundling. Executing the e1 shutdown command on the specified
E1 line shuts down all these serial interfaces. Data transmission and receiving stop as
a result. Likewise, executing the undo e1 shutdown command will restart all these
serial interfaces.
Example
# Shut down the first E1 line on the E3 interface.

[H3C-E3 1/0/0] e1 1 shutdown
4.6.12 e1 unframed
Syntax
e1 line-number unframed
undo e1 line-number unframed
View
CE3 interface view
Parameter
4-76
Description
Use the e1 unframed command to set an E1 line on a CE3 interface to work in

unframed mode (E1 mode).
Use the undo e1 unframed command to set the E1 line on the CE3 interface to work
in framed mode (CE1 mode, the default).
An E1 line in unframed mode does not contain the frame control information; it cannot
be divided into timeslots. Naturally, no timeslot bundling can be performed on it. In this
case, the system automatically creates a serial interface numbered serial number /
line-number:0 for it. This interface operates at 2048 kbps and has the same logic
features of a synchronous serial interface on which you can make other
configurations.
Related command: e1 channel-set.
Example
# Set the first E1 line on the E3 interface to work in unframed mode.

[H3C-E3 1/0/0] e1 1 unframed
4.6.13 loopback (CE3 Interface)
Syntax
loopback { local | payload | remote }

undo loopback
View
CE3 interface view
Parameter
local: Enables the CE3 interface to perform local loopback.

payload: Places the CE3 interface in an remote payload loopback. Data passes the
framer in this case and is looped back after payload is generated.
remote: Enables the CE3 interface to perform remote loopback. Data does not go
through the framer in this case and will be looped back before the payload has been
generated.
Description
Use the loopback command to configure the loopback mode of a CE3 interface.
Use the undo loopback command to disable the CE3 interface to perform loopback.
By default, loopback is disabled on the CE3 interface.
4-77
It is necessary for you to enable the CE3 interface to perform loopback only for testing
some special functions.
If a CE3 interface encapsulated with PPP is placed in a loopback, it is normal that the
state of the link layer protocol is reported down.
Example
# Enable the interface E3 1/0/0 to perform local loopback.

4.6.14 national-bit
Syntax
national-bit { 0 | 1 }
undo national-bit
View
CE3 interface view
Parameter
0: Sets the national bit of the CE3 interface to 0.

1: Sets the national bit of the CE3 interface to 1.
Description
Use the national-bit command to configure national bit on the CE3 interface.
Use the undo national-bit command to restore the default or 1.
You need to set the national bit to 0 on an E3 interface only in some special
circumstances.
Related command: controller e3.
Example
# Set the national bit to 0 on the interface E3 1/0/0.

[H3C-E3 1/0/0] national-bit 0
4.6.15 using (CE3 Interface)
Syntax
using { e3 | ce3 }
undo using
4-78
View
CE3 interface view
Parameter
e3: Sets the CE3 interface to work in unchannelized mode.

ce3: Sets the CE3 interface to work in channelized mode.
Description
Use the using command to configure the operating mode of a CE3 interface. Use the
undo using command to restore the default setting.
By default, the CE3 interface is working in channelized mode.
Only when the CE3 interface is working in channelized mode can you configure the
E1 lines on it.
When the CE3 interface is working in unchannelized mode, the system automatically
creates a serial interface numbered serial number / 0:0 for it. This interface operates
at 34.368 Mbps and has the same logic features of a synchronous serial interface on
which you can make other configurations.
Related command: controller e3.
Example
# Configure the interface E3 1/0/0 to work in unchannelized mode.

[H3C-E3 1/0/0] using e3
4.7 Fundamental CT3 Interface Configuration Commands

4.7.1 alarm (CT3 Interface)
Syntax
alarm { detect | generate { ais | rai | idle | febe } }

undo alarm { detect | generate { ais | rai | idle | febe } }
View
CT3 interface view
Parameter
detect: Enables/disables periodical alarm signal detection. By default, periodical

alarm detection is enabled.
generate: Sends alarm signals, which can be AIS, RAI, idle, or FEBE. Use this
function for line state test. By default, alarm signal sending is disabled.
ais: Alarm indication signal.
4-79
rai: Remote alarm indication signal.

idle: Idle signal.
febe: Far end block error signal.
Description
Use the alarm command to enable the CT3 interface to detect/send alarm signals.
Use the undo alarm command to cancel the alarm signal detection/sending setting.
At the startup of the router, periodical alarm signal detection is enabled on the CT3
interface. When detecting LOS, LOF, or AIS signals, the interface sends RAI signals
to its peer. Alarm state report for the interface is real time; you may view that by
executing the display controller t3 command.
The supported alarm signals, LOS, LOF, AIS, RAI, FEBE, and idle, are ANSI
T1.107-1995 compliant.
You can only configure the CT3 interface to send a type of alarm signal. To have the
interface send another type of signal, use the undo alarm command to delete the
previous setting first. In addition, when the RAI signal generated upon detection of the
LOS, LOF, or AIS signal is present, the CT3 interface cannot send another type of
signal. To do that, use the undo alarm detect command to disable the CT3 interface
to send the RAI signal generated after detecting an alarm first.
For description on alarm sending and receiving states for the CT3 interface, refer to
the display controller t3 command.
Example
# Enable periodical alarm signal detection on CT3 interface 1/0/0.

<H3C> system-view
[H3C] interface t3 1/0/0
[H3C-T3 1/0/0] alarm detect
# Enable CT3 interface 1/0/0 to send AIS alarm signals.

<H3C> system-view
[H3C-T3 1/0/0] alarm generate ais
4.7.2 bert (CT3 Interface)
Syntax
bert pattern { 2^7 | 2^11 | 2^15 | qrss } time number [ unframed ]

undo bert
View
CT3 interface view
4-80
Parameter
pattern: Sets a bit error rate test (BERT) pattern, which could be 2^7, 2^11, 2^15, or
QRSS.
2^7: Two to the seventh power, length of the transmitted BERT pattern in bits.
2^11: Two to eleventh power, length of the transmitted BERT pattern in bits.
qrss: Two to the twentieth power, length of the transmitted BERT pattern in bits. In this
pattern, the presence of 14 consecutive zeros is not allowed.
time number: Sets the duration of a BERT test, in the range of 1 to 1440 minutes.
Description
Use the bert command to start a BERT test on the CT3 interface.
Use the undo bert command to stop the BERT test running on the CT3 interface.
which, the CT3 interface supports only 2^7, 2^11, 2^15, and QRSS at present.
command.
Example
# Run a 10-minute QRSS BERT test on CT3 interface 1/0/0.

<H3C> system-view
[H3C-T3 1/0/0] bert pattern qrss time 10
# Stop the BERT test running on CT3 interface 1/0/0.

<H3C> system-view
[H3C-T3 1/0/0] undo bert
4.7.3 cable (CT3 Interface)
Syntax
cable feet
4-81
undo cable
View
CT3 interface view
Parameter
feet: Cable length in the range 0 to 450 feet.
Description
Use the cable command to configure the length of the cable with which a CT3
interface is connected.
Use the undo cable command to restore the default length of the cable with which the
CT3 interface is connected.
The parameter feet defaults to 49.
The length of the cable for CT3 interface connection refers to the distance between
the router and the cable distribution rack.
Example
# Set the cable length to 50 feet on the interface T3 1/0/0.

[H3C-T3 1/0/0] cable 50
4.7.4 clock (CT3 Interface)
Syntax

undo clock
View
CT3 interface view
Parameter

slave: Line clock.
Description
Use the clock command to set the clock mode on the CT3 interface.
Use the undo clock command to restore the default clock mode or slave.
The clock is selected depending on the connected remote device. If it is a
transmission device, the local end uses line clock.
4-82
If the CT3 interfaces on the two routers are directly connected, one router should use
the internal clock whereas the other router uses the line clock.
Example
# Configure the CT3 interface with internal clock.

[H3C-T3 1/0/0] clock master
4.7.5 controller t3
Syntax
controller t3 interface-number
View
System view
Parameter
interface-number: CT3 interface number.
Description
Use the controller t3 command to enter the CT3 interface view.

Related command: display controller t3.
Example
# Enter the view of the interface T3 1/0/0.

[H3C] controller t3 1/0/0
[H3C-T3 1/0/0]
4.7.6 crc
Syntax
crc { 16 | 32 | none }
undo crc
View
Parameter

4-83
Description
Use the crc command to configure CRC mode of the serial interface formed by CT3.
Use the undo crc command to restore the default or 16-bit CRC.
Related command: t1 channel-set, t1 unframed, using.
Example
# Apply 32-bit CRC to the serial interface formed by the interface T3 1/0/0 in fractional
mode.
4.7.7 feac (CT3 Interface)
Syntax
feac detect
feac generate loopback { ds3-line | ds3-payload }
feac generate { ds3-los | ds3-ais | ds3-oof | ds3-idle | ds3-eqptfail }
undo feac detect
undo feac generate loopback { ds3-line | ds3-payload }
undo feac generate { ds3-los | ds3-ais | ds3-oof | ds3-idle | ds3-eqptfail }
View
CT3 interface view
Parameter
detect: Enables periodical far end and control signal (FEAC) channel signal detection.
By default, periodical FEAC channel signal detection is enabled.
loopback: Sends loopback code for activating far-end line loopback with the ds3-line
keyword or payload loopback with the ds3-payload keyword. By default, loopback
code sending is disabled.
generate: Sends FEAC signals. Specify ds3-los for DS3 LOS, ds3-ais for DS3 AIS,
ds3-oof for DS3 out of frame (OOF), ds3-idle for DS3 idle, and ds3-eqptfail for DS3
equipment failure. By default, FEAC signal sending is disabled.
Description
Use the feac command to enable FEAC channel signal detection and sending on the
CT3 interface.
Use the undo feac command to remove the current FEAC settings.
4-84
FEAC is a channel formed by using the third C-bit in the first subframe in C-bit framing.
It is used to transmit alarm state signals for line test purpose or to transmit loopback
control code for activating or deactivating far-end loopback during a loopback test.
According to ANSI T1.107a, the frame format used by FEAC channels is bit oriented
protocol (BOP).
At the startup of your router, FEAC channel signal detection is enabled on the CT3
interface with FEAC signal sending disabled.
After far-end loopback is enabled with the feac generate loopback { ds3-line |
ds3-payload } command, you may disable it with the undo form of the command.
Note:
Disable FEAC detection before you configure far-end loopback to prevent loopback
deadlock, which may happen when the local end enables loopback after detecting the
loopback code sent back by the far end.
You may view the transmitting/receiving state of the FEAC channel with the display
controller t3 command.
Example
# Enable FEAC channel signal detection on CT3 interface 1/0/0.

<H3C> system-view
[H3C-T3 1/0/0] feac detect
# Sends DS3 LOS signal on CT3 interface 1/0/0.

<H3C> system-view
[H3C-T3 1/0/0] feac generate ds3-los
# On CT3 interface 1/0/0 send loopback code to the far end and place the far end in a
line loopback.
<H3C> system-view
[H3C-T3 1/0/0] feac generate loopback ds3-line
# On CT3 interface 1/0/0 send loopback code to the far end and disable far-end
payload loopback.
<H3C> system-view
[H3C-T3 1/0/0] undo feac generate loopback ds3-payload
4-85
4.7.8 frame-format (CT3 Interface)
Syntax
frame-format { c-bit | m23 }

undo frame-format
View
CT3 interface view
Parameter
c-bit: Sets the frame format to C-bit.

m23: Sets the frame format to m23.
Description
Use the frame-format command to configure the frame format used by the CT3
interface.
Use the undo frame-format command to restore the default or C-bit frame format.
Example
# Set the frame format of the interface T3 1/0/0 to m23.

[H3C-T3 1/0/0] frame-format m23
4.7.9 ft3 (CT3 Interface)
Syntax
ft3 { dsu-mode { 0 | 1 | 2 | 3 } | subrate number }

undo ft3 { dsu-mode | subrate }
View
CT3 interface view
Parameter
dsu-mode: Sets the data service unit (DSU) mode for fractional T3 (FT3). The
following table lists available FT3 DSU mode options:
Table 4-9 FT3 DSU mode options
Total number of
Keyword DSU mode (vendor) Subrate range
subrate grades
300 to 44210 kbps in
0 Digital Link 147
steps of 300,746 bps
4-86
Total number of
Keyword DSU mode (vendor) Subrate range
subrate grades
1500 to 44,210 kbps in
1 Verilink steps of 1,578,918 20
bps
3100 to 44,210 kbps in
2 Larscom steps of 3,157,835 14
bps
75 to 44,210 kbps in
3 Adtran 588
steps of 75,187 bps
subrate number: Sets a T3 subrate, in the range 1 to 44,210 kbps.
Description
Use the ft3 command to configure the CT3 interface to operate in FT3 mode and to
set the DSU mode and subrate for FT3.
Use the undo ft3 command to restore the default DSU mode or subrate.
FT3, also known as subrate T3, is a nonstandard application of T3. The subrate and
number of subrate grades vary with different vendors. The ft3 command allows your
router to be compatible with five mainstream FT3 DSU modes in the industry.
By default, DSU mode is set to 0, that is, Digital Link mode; the T3 subrate is set to
44,210 kbps.
When using the ft3 command, note that:
z The command is only available to the FT3-supported CT3 cards.
z The command is available in T3 mode only. In CT3 mode, the command is
unavailable.
z The subrates available in a DSU mode set using the ft3 dsu-mode command
are discrete and the subrate set using the ft3 subrate command is an
approximate subrate. The T3 interface calculates an exact subrate (in bps)
closest to the approximate subrate within the subrate range in the specified DSU
mode and then set the hardware circuit to support the calculated exact subrate.
z You may use the display interface serial interface-number:0 command to view
the DSU mode, subrate setting, real interface rate, and interface baudrate. The
actual interface rate refers to the data bandwidth without overheads and the
interface baudrate is 44,736 kbps, the actual rate of T3 line with overheads
included.
Example
# Configure interface T3 1/0/0 to operate in FT3 mode, and set DSU mode to 1 and
subrate to 3000 kbps.
[H3C-T3 1/0/0] using t3
4-87
[H3C-T3 1/0/0] ft3 dsu-mode 1

[H3C-T3 1/0/0] ft3 subrate 3000
4.7.10 loopback (CT3 Interface)
Syntax
loopback { local | payload | remote }

undo loopback
View
CT3 interface view
Parameter
local: Enables the CT3 interface to perform local loopback.

payload: Places the CT3 interface in an external payload loop. Data passes the
framer in this case and is looped back after payload is generated.
remote: Enables the CT3 interface to perform remote loopback. Data does not go
through the framer in this case and will be looped back before the payload has been
generated.
Description
Use the loopback command to configure the loopback mode of the CT3 interface.
Use the undo loopback command to disable the CT3 interface to perform loopback.
By default, loopback is disabled on the CT3 interface.
Loopback is usually used for some special tests. Disable it in normal cases.
If you place a CT3 interface encapsulated with PPP in a loopback, it is normal that the
state of the link layer protocol is reported down.
Example
# Enable the interface T3 1/0/0 to perform local loopback.

[H3C-T3 1/0/0] loopback local
4.7.11 mdl (CT3 Interface)
Syntax
mdl { detect | data { eic string | lic string | fic string | unit string | pfi string | port-no
string | gen-no string } | generate { path | idle-signal | test-signal } }
undo mdl [detect | data [ eic | lic | fic | unit | pfi | port-no | gen-no ] | generate
[ path | idle-signal | test-signal ] ]
4-88
View
CT3 interface view
Parameter
detect: Enables periodical maintenance data link (MDL) message detection.

data: Sets information included in MDL messages.
eic string: Equipment identification code, a string of 1 to 10 characters. It can be
defined for all types of MDL messages. The default EIC is line.
lic string: Location identification code, a string of 1 to 11 characters. It can be defined
for all types of MDL messages. The default LIC is line.
fic string: Frame identification code, a string of 1 to 10 characters. It can be defined
for all types of MDL messages. The default FIC is line.
unit string: Unit, a string of 1 to 6 characters. It can be defined for all types of MDL
messages. The default unit is line.
pfi string: Path facility identification, a string in the range 1 to 38 characters. It is only
for path MDL messages. The default PFI is line.
port-no string: Port number, a string in the range 1 to 38 characters. It is only for idle
signal messages. The default port number is line.
gen-no string: Generator number, a string of 1 to 38 characters. It is only for test
signal messages. The default generator number is line.
generate: Sends specified information with MDL messages, which can be path, idle
signal, and/or test signal regularly.
Description
Use the mdl command to configure MDL message detection/sending on the CT3
interface.
Use the undo mdl detect command to disable the CT3 interface to detect MDL
messages.
Use the undo mdl generate command to disable the CT3 interface to send MDL
messages.
Use the undo mdl data command to restore the default.
MDL is a channel formed by using the three C-bits in the fifth subframe in C-bit
framing. According to ANSI T1.107a, it is used to transmit three types of maintenance
messages, path, idle signal, and test signal, and its data frame format is LAPD.
At the startup of your router, MDL message detection and sending are disabled on the
CT3 interface and the default MDL message information applies.
4-89
Example
# Enable MDL detection on CT3 interface 1/0/0.

<H3C> system-view
[H3C-T3 1/0/0] mdl detect
# On CT3 interface 1/0/0 set the LIC information sent with MDL messages to hello.
<H3C> system-view
[H3C-T3 1/0/0] mdl data lic hello
# Send path messages on CT3 interface 1/0/0.

<H3C> system-view
[H3C-T3 1/0/0] mdl generate path
4.7.12 t1 alarm
Syntax
t1 line-number alarm { detect | generate { ais | rai } }

undo t1 line-number alarm { detect | generate { ais | rai } }
View
CT3 interface view
Parameter
line-number: T1 line number, in the range 1 to 28.

detect: Enables/disables periodical alarm signal detection. By default, periodical
alarm detection is enabled.
generate: Sends alarm signals, which can be AIS or RAI. Use this function for line
state test. By default, alarm signal sending is disabled.
ais: Alarm indication signal.
rai: Remote alarm indication signal.
Description
Use the t1 alarm command to enable the specified T1 line on the CT3 interface to
detect/send alarm signals.
Use the undo t1 alarm command to remove the alarm signal detection/sending
setting.
At the startup of the router, periodical alarm signal detection is enabled on all T1 lines
on the CT3 interface. When a T1 line detects LOS, LOF, or AIS signals, it sends RAI
4-90
signals to its peer. Alarm state report for the interface is real time; you may view that
by executing the display controller t3 command.
The supported alarm signals, LOS, LOF, AIS, RAI, FEBE, and idle, are ANSI T1.403
compliant.
You can only configure a T1 line to send a type of alarm signal. To have the channel
send another type of signal, use the undo t1 alarm command to delete the previous
setting first. In addition, when the RAI signal generated upon detection of the LOS,
LOF, or AIS signal is present, the T1 line cannot send another type of signal. To do
that, use the undo t1 alarm detect command to disable the T1 line to send the RAI
signal generated after detecting an alarm first.
For description on alarm sending and receiving states for the CT3 interface, refer to
the display controller t3 command.
Example
# Enable periodical alarm signal detection on T1 line 1 on CT3 interface 1/0/0.

<H3C> system-view
[H3C-T3 1/0/0] t1 1 alarm detect
# Enable T1 line 1 on CT3 interface 1/0/0 to send AIS alarm signals.

<H3C> system-view
[H3C-T3 1/0/0] t1 1 alarm generate ais
4.7.13 t1 bert
Syntax
t1 line-number bert pattern { 2^11 | 2^15 | 2^20 | 2^23 | qrss } time number
[ unframed ]
undo t1 line-number bert
View
CT3 interface view
Parameter

pattern: Sets a BERT pattern, which could be 2^11, 2^15, 2^20, 2^23, or QRSS.
2^11: Two to eleventh power, length of the transmitted BERT pattern in bits.
4-91
2^23: Two to the twenty third power, length of the transmitted BERT pattern in bits.
qrss: Two to the twentieth power, length of the transmitted BERT pattern in bits. In this
pattern, the presence of 14 consecutive zeros is not allowed.
time number: Sets the duration of a BERT test, in the range of 1 to 1440 minutes.
Description
Use the t1 bert command to start a BERT test on the specified T1 line on the CT3
interface.
Use the undo t1 bert command to stop the BERT test running on the specified T1 line
on the CT3 interface.
which, t1 lines on the CT3 interface support only 2^11, 2^15, 2^20, 2^23, and QRSS
at present.
command.
Example
# Run a 10-minute QRSS BERT test on T1 line 1 on CT3 interface 1/0/0.

[H3C-T3 1/0/0] t1 1 bert pattern qrss time 10
# Stop the BERT test running on T1 line on CT3 interface 1/0/0.

[H3C-T3 1/0/0] undo t1 1 bert
4.7.14 t1 channel-set
Syntax
t1 line-number channel-set set-number timeslot-list range [ speed { 56k | 64k } ]

undo t1 line-number channel-set set-number
View
CT3 interface view
4-92
Parameter
line-number: T1 line number in the range 1 to 28.

set-number: The number of the channel-set formed by bundling the timeslots of T1
line, which is in the range 0 to 23.
number1-number2, or discrete timeslots by specifying number1, number2-number3.
speed: Timeslot bundling mode. If 56k applies, the timeslots are bundled into an N x
56 kbps bundle. If 64k applies, the timeslots are bundled into an N x 64 kbps bundle.
It defaults to 64k.
Description
Use the t1 channel-set command to bundle the timeslots of a T1 line.

Use the undo t1 channel-set command to remove the timeslot bundle.
When a T1 line is operating in framed (CT1) mode, you can bundle timeslots on it. The
system will automatically create a serial interface numbered serial number /
line-number:set-number for the channel-set. This interface operates at N x 64 Kbps
(or N x 56 kbps) and has the same logic features of a synchronous serial interface on
Related command: t1 unframed.
Example
# Bundle a 128 kbps serial interface on the first T1 line on the interface T3 1/0/0.
[H3C-T3 1/0/0]t1 1 set channel-set 1 timeslot-list 1,2
4.7.15 t1 sendloopcode
Syntax
t1 line-number sendloopcode { inband-line-up | fdl-ansi-line-up |

fdl-ansi-payload-up }
undo t1 line-number sendloopcode { inband-line-up | fdl-ansi-line-up |
fdl-ansi-payload-up }
View
CT3 interface view
4-93
Parameter

inband-line-up: Places the far-end T1 line in a line loopback by sending in-band
signals.
fdl-ansi-line-up: Places the far-end T1 line in a line loopback by using
ANSI-compliant FDL.
fdl-ansi-payload-up: Places the far-end T1 line in a payload loopback by using
ANSI-compliant FDL.
Description
Use the t1 sendloopcode command to set the loopback mode of the specified
far-end T1 line.
Use the undo t1 sendloopcode command to remove the corresponding setting.
Loopback is an effective way of diagnosis. You may place a far-end device into
loopback mode either at command line on it or by sending loopback control code to it.
The types and formats of loopback control code supported on T1 interfaces are
compliant with ANSI T1.403.
Loopback is divided into line loopback and payload loopback by loopback method.
They differ in the sense that the data stream is looped back at the framer with line
loopback but not with payload loopback.
You may transmit loopback control code through the in-band signal (the 192 effective
bandwidth bits or all 193 bits of T1) or the FDL in ESF frames.
Example
# Send the in-band signal on T1 line 1 on CT3 interface 1/0/0 to place the far-end T1
line in line loopback mode.
<H3C> system-view
[H3C-T3 1/0/0] t1 1 sendloopcode inband-line-up
# Send line loopback control code on T1 line 1 on CT3 interface 1/0/0 to disable line
loopback on the far-end T1 line.
<H3C> system-view
[H3C-T3 1/0/0] undo t1 1 sendloopcode fdl-ansi-line-up
4.7.16 t1 set clock
Syntax
t1 line-number set clock { master | slave }
4-94
undo t1 line-number set clock
View
CT3 interface view
Parameter

slave: Line clock.
Description
Use the t1 set clock command to set the clock mode for a T1 line on the CT3
interface.
Use the undo e1 clock command to restore the default or line clock.
When the CT3 interface is working in channelized mode, its T1 lines may use
separate clocks.
Note:
A CT3 interface uses the line clock (slave mode) as its clock source by default. If
interfaces on both sides of the line work in slave mode, the CT3 interfaces cannot
work well due to asynchronous clock. You are recommended to configure the
interface on one side of the line to work in the internal clock (master) mode.
Example
# Configure the first T1 line on the T3 interface to adopt line clock.

[H3C-T3 1/0/0] t1 1 set clock slave
4.7.17 t1 set frame-format
Syntax
t1 line-number set frame-format { esf | sf }

undo t1 line-number set frame-format
View
CT3 interface view
Parameter
4-95
esf: Set the T1 line to use the ESF format.

sf: Set the T1 line to use the SF format.
Description
Use the t1 set frame-format command to configure the frame format of T1 line.
Use the undo t1 set frame-format command to restore the default or esf.
You can configure this command only when the T1 line is working in framed format
(which can be set by using the undo t1 unframed command).
Related command: t1 set unframed, using.
Example
# Adopt the frame format SF for the first T1 line on the T3 interface.
[H3C-T3 1/0/0] t1 1 set frame-format sf
4.7.18 t1 set loopback
Syntax
t1 line-number set loopback { local | remote | payload }

undo t1 line-number set loopback
View
CT3 interface view
Parameter

local: Enables the T1 line to perform local loopback.
remote: Enables the T1 line to perform remote loopback.
payload: Enables the T1 line to perform far-end payload loopback.
Description
Use the t1 set loopback command to set the loopback mode of a T1 line on the T3
interface.
Use the undo t1 set loopback command to disable the T1 line to loop back.
By default, T1 lines are disabled to loop back.
If a T1 line encapsulated with PPP is placed in a loopback, it is normal that the state of
the link layer protocol is reported down.
Loopback is usually used for some special tests. Disable it in normal cases.
4-96
Example
# Set the loopback mode on the first T1 line on the T3 interface to local.
[H3C-T3 1/0/0] t1 1 set loopback local
4.7.19 t1 set fdl
Syntax
t1 line-number set fdl ansi

undo t1 line-number set fdl ansi
View
CT3 interface view
Parameter

fdl: Sets the FDL format of T1.
Description
Use the t1 set fdl command to set the behavior of the specified T1 line on the FDL in
ESF framing.
Use the undo t1 set fdl command to disable FDL of T1.
By default, ANSI T1.403 FDL is not configured.
periodical performance report (PPR) statistics or loopback code.
According to ANSI T1.403, the format of PPR is LAPD, and the format of loopback
code is BOP.
The t1 set fdl command only starts PPR transmission. It cannot be used to enable
loopback code transmission or detection.
Example
# On CT3 interface 1/0/0, set the FDL to be ANSI T1.403 compliant for T1 line 1.
<H3C> system-view
[H3C-T3 1/0/0] t1 1 set fdl ansi
4-97
4.7.20 t1 show
Syntax
t1 line-number show
View
CT3 interface view
Parameter

show: Displays the physical line state of the specified T1 line.
Description
Use the t1 show command to view the line state of the specified T1 line on the CT3
interface.
Example
# Display line state of T1 line 1 on CT3 interface 3/0/0.

[H3C-T3 3/0/0] t1 1 show
T3 1/0 CT1 1 is up
Frame-format ESF, clock slave, loopback not set
FDL Performance Report is disabled
Transmitter is sending none
Receiver alarm state is none
Line loop back deactivate code using inband signal last sent
Bit errors (since test started): 0 bits
Bits received (since test started): 0 Kbits
Bit errors (since latest sync): 0 bits
Bits received (since latest sync): 0 Kbits
Table 4-10 Description on the fields of the t1 show command
Field Description
The state of T1 line 1 on the CT3 interface:
T3 3/0/0 CT1 1 is up
up or down
Frame-format ESF Frame format of T1: ESF or SF
clock slave Clock used by the T1 line: slave or master
Loopback state or mode: local, remote,
loopback not set
payload, or not set.
4-98
Field Description
Transmission of PPR in the FDL is
FDL Performance Report is disabled disabled. You may enable that with the t1
set fdl command.
The transmitter of the T1 line is sending
RAI signals. When the T1 line receives
Transmitter is sending RAI
LOS, LOF, or AIS signals, it sends RAI
signals.
The type of alarm signal that the T1 line
Receiver alarm state
can receive: LOS, LOF, AIS, or RAI
Line loop back activate code using The loobpack code sent last time is in-band
inband signal last sent LLB activation request code.
BERT test state: running, complete, or
BERT state
stopped (not completed)
Test pattern in use, 2^11 in this example;
Test pattern: 2^11, Status: Not Sync,
synchronization state, and the number of
Sync Detected: 0
detected synchronizations
Time: 0 minute(s), Time past: 0 The duration of the BERT test and the time
minute(s) that has elapsed
Bits received (since test started): 0 Number of bits received since the start of
Kbits the BERT test
Number of bit errors received since the last
synchronization
Bits received (since latest sync): 0 Number of bits received since the last
Kbits synchronization
4.7.21 t1 shutdown
Syntax
t1 line-number shutdown
undo t1 line-number shutdown
View
CT3 interface view
Parameter
4-99
Description
Use the t1 shutdown command to shut down a T1 line on the CT3 interface.
Use the undo t1 shutdown command to open a T1 line.
By default, T1 lines are open.
This command will affect not only the specified T1 line but also the serial interfaces
formed by bundling timeslots on the T1 line. Executing the t1 shutdown command on
the specified T1 line will shut down all these serial interfaces. Data transmission and
receiving will stop as a result. Likewise, executing the undo t1 shutdown command
will re-enable all these serial interfaces.
Example
# Shut down the first T1 line on the T3 interface.

[H3C-T3 1/0/0] t1 1 shutdown
4.7.22 t1 unframed
Syntax
t1 line-number unframed
undo t1 line-number unframed
View
CT3 interface view
Parameter
Description
Use the t1 unframed command to set a T1 line on the CT3 interface to work in
unframed mode (T1 mode).
Use the undo t1 unframed command to set the T1 line on the CT3 interface to work
in framed mode (CT1 mode).
By default, T1 lines are working in framed mode.
A T1 line in unframed mode does not contain the frame control information; it cannot
be divided into timeslots. Naturally, no timeslot bundling can be performed on it. In this
case, the system automatically creates a serial interface numbered serial number /
line-number:0 for it. This interface operates at 1544 kbps and has the same logic
features of a synchronous serial interface on which you can make other
configurations.
Related command: t1 channel-set.
4-100
Example
# Set the first T1 line on the T3 interface to work in unframed mode.

[H3C-T3 1/0/0] t1 1 unframed
4.7.23 using (CT3 Interface)
Syntax
using { t3 | ct3 }
View
CT3 interface view
Parameter
t3: Sets the CT3 interface to work in unchannelized mode.

ct3: Sets the CT3 interface to work in channelized mode.
Description
Use the using command to configure the operating mode of a CT3 interface.
Use the undo using command to restore the default or channelized mode.
Only when the CT3 interface is working in channelized mode can you configure the T1
lines on it.
When the CT3 interface is working in unchannelized mode, the system automatically
creates a serial interface numbered serial number / 0:0 for it. This interface operates
at 44.736 Mbps and has the same logic features of a synchronous serial interface on
Example
# Configure the interface T3 1/0/0 to work in unchannelized mode.

[H3C-T3 1/0/0] using t3
4.7.24 display controller t3
Syntax
display controller t3 interface-number
View
Any view
Parameter
interface-number: CT3 interface number.
4-101
Description
Use the display controller t3 command to view state about a CT3 interface.
In addition to the state information about the CT3 interface, the command can display
the information about each T1 line on the CT3 interface if the interface is working in
CT3 mode.
Example
# Display the information related to the CT3 interface 3/0/0.

[H3C] display controller t3 3/0/0
T3 3/0/0 current state :UP
Description : T3 3/0/0 Interface
Work mode is CT3, cable length is 49 feet.
Frame-format is C-BIT Parity, line code is B3ZS.
Source clock is slave, loopback is not set.
Alarm state:
Receiver alarm state is none.
MDL state:
No message is sent now.
Message data elements:
EIC: line, LIC: line, FIC: line, UNIT: line
FI: line, PORT_NO: line, GEN_NO: line
Periodical detection is disabled.
FEAC state:
No code is sent now.
Periodical detection is enabled, no code received now.
Bits received (since test started): 0 Mbits
Bits received (since latest sync): 0 Mbits
Last clearing of counters: 14:39:02 UTC Sat 06/25/2005
0 Line Code Violations, 0 Far End Block Error
0 C-Bit Coding Violation, 0 P-bit Coding Violation
0 Framing Bit Err, 0 Severely Err Framing Secs
0 C-bit Err Secs, 0 C-bit Severely Err Secs
0 P-bit Err Secs, 0 P-bit Severely Err Secs
4-102
0 Unavailable Secs, 0 Line Err Secs
T3 1/0 CT1 1 is up
Frame-format ESF, clock slave, loopback not set
FDL Performance Report is disabled
Transmitter is sending none
Receiver alarm state is none
Line loop back deactivate code using inband signal last sent
Bits received (since test started): 0 Kbits
Bits received (since latest sync): 0 Kbits
Table 4-11 Description on the fields of the display controller t3 command
Field Description
Physical state of the interface: up or
T3 3/0/0 current state :UP
down
Description : T3 3/0/0 Interface Description about the interface
Basic Configuration: Basic configurations for the interface

Operating mode of the interface, CT3 or
Work mode
T3.
cable length Cable length supported by the interface
Frame-format Frame format: C-bit parity or M23
line code B3ZS
Source clock
master or slave
loopback
remote, or payload
LOF, RAI, or AIS.
Receiver alarm state If a LOS, LOF, AIS was received, RAI
would be sent and the screen displayed
“Transmitter is sending RAI” instead.
MDL state MDL state
4-103
Field Description
No MDL message is being sent. If an
MDL message, path or idle-signal for
No message is sent now. example, was being sent, the screen
would display “Message sent now: path.
idle signal.”
Message data elements: MDL data elements
EIC, LIC, FIC, and UNIT are four
elements present in all types of MDL
EIC: line, LIC: line, FIC: line, UNIT: line
messages. Their values are user
configurable and default to line.
FI is found in MDL path messages,
PORT_NO in MDL idle signal
FI: line, PORT_NO: line, GEN_NO: line messages, and GEN_NO in MDL test
signal messages. Their values are user
configurable and default to line.
Periodical detection of MDL is disabled.
This is the default applied upon the
start-up of the router.
When the function is enabled, the
screen displays:
Periodical detection is enabled.
No message was received.
Periodical detection is disabled.
When MDL messages are detected, the
screen displays:
Message received now: path.idle signal.
EIC: line, LIC: line, FIC: line, UNIT:
line
path/FI: line
idle Signal/PORT_NO: line
FEAC state FEAC state
No FEAC signal is sent. The FEAC
No code is sent now. DS3 Line Loop
signal sent last time is DS3 Line Loop
Back Deactivate was last sent.
Back Deactivate.
Periodical detection of FEAC is enabled.
Periodical detection is enabled, no code This is the default applied at the startup
received now. of the router.
No FEAC signal is received now.
DS3 Line Loop Back Deactivate last The FEAC signal received last time is
received. DS3 Line Loop Back Deactivate.
Test pattern in use (such as 2^7, 2^11,
Test pattern: 2^7, Status: Not Sync, Sync 2^15, and QRSS), 2^7 in this example;
Detected: 0 synchronization state, and the number
of detected synchronizations
4-104
Field Description
Bits received (since test started)
of the BERT test
Number of bit errors received since last
Bit errors (since latest sync)
synchronization
Bits received (since latest sync)
synchronization
Historical Statistics Historical statistics
Time when last counter clearing is
performed, for example, 14:39:02 UTC
Sat 06/25/2005. If no clearing is
performed, never is displayed.
Statistics spanning the current

15-minute interval, coving count of these
items:
Line code violations: BPV or EXZ
Data in current interval (1 seconds Far-end block error
elapsed):
C-bit error
0 Line Code Violations, 0 Far End
Block Error P-bit error
0 C-Bit Coding Violation, 0 P-bit Framing bit error
Coding Violation C-bit erroneous second
0 Framing Bit Err, 0 Severely Err C-bit severely erroneous second, that is,
Framing Secs the second during which 44 C-bit errors
0 C-bit Err Secs, 0 C-bit Severely Err occur
Secs P-bit erroneous second
0 P-bit Err Secs, 0 P-bit Severely Err P-bit severely erroneous second, that is,
Secs the second during which 44 P-bit errors
0 Unavailable Secs, 0 Line Err Secs occur
Service unavailable second
Line erroneous second, during which
LOS, BPV, EXZ, C-bit, P-bit, and other
errors occur
4.8 ISDN BRI Interface Configuration Commands

4.8.1 display interface bri
Syntax
display interface bri interface-type interface-number
4-105
View
Any view
Parameter
interface-type interface-number Specifies an interface by its type and number.
Description
Use the display interface bri command to view status about the specified ISDN BRI
interface.
Example
# Display status about ISDN BRI interface BRI 3/0/0:1.

<H3C>display interface bri 3/0/0:1
Bri3/0:1 current state :UP
Description : Bri3/0:1 Interface
baudrate is 64000 bps, Timeslot(s) Used: 1
LCP opened, MP opened
Output queue : (Urgent queuing : Size/Length/Discards) 0/50/0
Output queue : (Protocol queuing : Size/Length/Discards) 0/500/0
Last 30 seconds input rate 3959.10 bytes/sec, 31672 bits/sec, 21.16
packets/
sec
Last 30 seconds output rate 31.60 bytes/sec, 252 bits/sec, 0.43
packets/sec
4 frame errors
0 deferred
It is normal that the count of broadcasts in the output is zero. For a non-Ethernet
interface, counting of broadcasts and multicasts is performed at the IP layer. The IP
layer, however, does not provide statistics about broadcasts and multicasts for a
4-106
physical interface, a BRI interface for example. To view the information, you need to
view statistics about the related routing interface, a dialer interface for example, by
executing the display ip interface dialer command.
4.8.2 loopback (ISDN BRI Interface)
Syntax
loopback { b1 | b2 | both }
undo loopback
View
ISDN BRI interface view
Parameter
b1: Places the B1 channel in a remote loopback.

b2: Places the B2 channel in a remote loopback.
both: Places both B1 and B2 channels in a remote loopback.
Description
Use the loopback command to place the B1, B2, or both channels on the BRI
interface in a remote loopback. This can send data from a line back to the line.
Use the undo loopback command to disable remote loopback.
By default, remote loopback is disabled on the ISDN BRI interface.
On the ISDN BRI interface, you can place its B1, B2, or both channels in a remote
loopback.
Caution:
The modules with loopback-supported ISDN interfaces include 4BS (MIM), and
1BS\1BU\2BS\2BU (SIC). In addition, loopback is also supported by the fixed ISDN
interfaces on the routers, if there is any.
Example
# Place the B1 and B2 channels on the BRI interface in a remote loopback.

[H3C-bri0/0/0] loopback both
4-107
4.9 CPOS Interface Configuration Commands

4.9.1 clock
Syntax

undo clock
View
CPOS interface view
Parameter
master: Sets the clock mode of the CPOS interface to master.

slave: Sets the clock mode of the CPOS interface to slave.
Description
Use the clock command to set the clock mode of the CPOS interface.
Use the undo clock command to restore the default or slave clock.
Example
# Set the clock mode of CPOS 1/0/0 to master.

<H3C> system-view
[H3C] controller cpos 1/0/0
[H3C-Cpos1/0/0] clock master
4.9.2 controller cpos
Syntax
controller cpos cpos-number
View
System view
Parameter
cpos-number: CPOS interface number.
Description
Use the controller cpos command to enter CPOS interface view.

Before you can configure a CPOS physical interface, you must enter its CPOS
interface view. This is similar to interfaces that support channelization such as CE1,
CE3, and CT1.
4-108
Example
# Enter the interface view of CPOS 1/0/0.

<H3C> system-view
[H3C-Cpos1/0/0]
4.9.3 display controller cpos
Syntax
display controller cpos [ cpos-number ]
View
Any view
Parameter
cpos-number: CPOS interface number. If no CPOS number is specified, information

on all the channels on the CPOS interfaces is displayed.
Description
Use the display controller cpos command to view information about CPOS
interfaces, such as state of the E1/T1 channels and alarms, and errors that occur to
regeneration section, multiplex section, and higher-order path.
The following table describes the possible error types in the displayed information:
Table 4-12 Possible error types
Item Description
Receive loss of basic frame alignment, or receive the frame with red
FRED
alarm error
COFA Change of frame alignment.
Severely errored frame. Four consecutive frame synchronization errors
SEF
generate one SEF.
FERR Framing Bit Error. It refers to the frame with Ft/FPS/FAS error.
CERR CRC error
Far end block error. This occurs when the CRC4 frame format applies
FEBE
on the E1 channel.
BERR PRBS bit error (Pseudo-random binary sequence bit error for test only).
BIP Bit-interleaved parity

REI Remote error indication
4-109
In this table, FRED, COFA, and SEF are alarm errors (AERRs).
Related command: display controller cpos e1, display controller cpos t1.
Example
# View the path information of the interface CPOS 4/0/0.

<H3C> display controller cpos 4/0/0
Cpos4/0/0 current state : UP
Description : Cpos4/0/0 Interface
Frame-format SDH, multiplex AU-3, clock master, loopback not set
Tx: J0: 0x01, J1: "NetEngine", C2: 0x02
Rx: J0: 0x01, J1: "NetEngine", C2: 0x02
Regenerator section:
Alarm: none
Error: 0 BIP, 0 SEF
Multiplex section:
Alarm: none
Error: 0 BIP, 0 REI
Higher order path(VC-3-1):
Alarm: none
Error: 0 BIP, 0 REI
Alarm: none
Error: 0 BIP, 0 REI
Alarm: none
Error: 0 BIP, 0 REI
Cpos4/0/0 CT1 1 is up
Frame-format ESF, clock master, loopback not set
Cpos4/0 CT1 2 is up
(Some information on T1 channels is omitted)

Here is the description of the displayed information:
4-110
Table 4-13 Description of the display controller cpos command
Field Description
Current physical state of the CPOS
Cpos4/0/0 current state:
interface
Description: Interface description
Physical layer information of the CPOS
interface: SDH frame format, AU-3
Frame-format SDH, multiplex AU-3,
multiplexing path, master clock mode
clock master, loopback not set
(use internal clock signal), and no
loopback.
Tx: J0: 0x01, J1: "NetEngine", C2: 0x02 The sent overhead bytes
Rx: J0: 0x01, J1: "NetEngine", C2: 0x02 The received overhead bytes
Alarm and error statistics about the
regeneration section
Alarm and error statistics about the
Multiplex section:
multiplexing section
Alarm and error statistic about the
higher-order path. The x in “VC-3-x”
indicates the path number. When
adopting AU-3 multiplexing path, one
Higher order path(VC-3-x):
STM-1 is multiplexed by three VC-3s
with three higher-order multiplexing path
while in the AU-4 multiplexing path,
there are one higher-order path VC-4s.
Alarm: Alarm statistic
Error: Error statistic
The current physical state of T1 channel
1 of the CPOS interface 4/0/0
Physical layer information of T1 channel:

Frame-format ESF, clock master, ESF frame format, master clock mode
loopback not set (use internal clock signal), and no
loopback
4.9.4 display controller cpos e1
Syntax
display controller cpos cpos-number e1 e1-number
View
Any view
4-111
Parameter
e1-number: Number of an E1 channel on a CPOS interface. It is in the range 1 to 63.
Description
Use the display controller cpos e1 command to view the physical layer
configuration information of a specified E1 channel on the specified CPOS interface.
Different from the display controller cpos command, this command can display the
error and alarm information of the corresponding lower-order path and that of E1
frames.
Example
# View state about E1 channel 1 on the interface CPOS 1/0/0.

<H3C> display controller cpos 1/0/0 e1 1
Cpos1/0/0 current state : UP
Description : Cpos1/0/0 Interface
Frame-format SDH, multiplex AU-4, clock master, loopback not set
Alarm: none
Error: 0 BIP, 0 SEF
Multiplex section:
Alarm: none
Error: 0 BIP, 0 REI

Alarm: none
Error: 0 BIP, 0 REI
Lower order path:

Alarm: none
Error: 0 BIP, 0 REI
Cpos2/0 CE1 1 is up
E1 framer(1-1-1-1):
Alarm: none
Error: 0 FERR, 0 FEBE, 0 AERR
4-112
Where, “E1 framer(1-1-1-1)” presents how the E1 channel is multiplexed. 1-1-1-1

represents the number of VC-4 to which this E1 channel belongs, TUG-3 number,
TUG-2 number, and TUG-12 number in order.
4.9.5 display controller cpos t1
Syntax
display controller cpos cpos-number t1 t1-number
View
Any view
Parameter
t1-number: Number of a T1 channel on a CPOS interface, ranging from 1 to 84.
Description
Use the display controller cpos t1 command to view the physical layer configuration
information of a specified T1 channel on the specified CPOS interface.
Different from the display controller cpos command, this command can display the
error and alarm information of the corresponding lower-order path and that of T1
frames.
Example
# View the state about the T1 channel 2 on the interface CPOS 4/0/0.
<H3C> display controller cpos 4/0/0 t1 2
Cpos4/0/0 current state : UP Frame-format SDH, multiplex AU-3, clock master,
loopback not set
Alarm: none
Error: 0 BIP, 0 SEF
Multiplex section:
Alarm: none
Error: 0 BIP, 0 REI
Alarm: none
Error: 0 BIP, 0 REI
Lower order path:
Alarm: none
Error: 4095 BIP, 2047 REI
4-113

T1 framer(2-1-1):
Alarm: none
Error: 4095 FERR, 79 AERR
The following table describes the displayed information:
Table 4-14 Description on the fields of the display controller cpos t1 command
Field Description
The current physical state of the CPOS
Cpos1/0/0 current state :
interface
Frame-format SDH, multiplex AU-3, Physical layer information of the CPOS
clock master, loopback not set interface.
Tx: J0: 0x01, J1: "NetEngine", C2: 0x02 The sent overhead bytes
Rx: J0: 0x01, J1: "NetEngine", C2: 0x02 The received overhead bytes
Alarms and errors about the regenerator
sections.
Alarms and errors about the regenerator
Multiplex section:
sections.
Alarm and error statistic of the
higher-order path to which the T1
channel belongs. VC-3-2 means the
second VC-3.
Alarm and error statistic of the
Lower order path:
lower-order path
Error: Error statistics
The current physical state of T1 channel
1 on interface CPOS 4/0/0
Information about the physical layer of
Frame-format ESF, clock master, the T1 channel: the frame format is set
loopback not set to ESF, master clock (internal clock) is
used, loopback is disabled.
Presents how the T1 channel is
multiplexed. 2-1-1 represents the
number of VC-3 to which this T1 channel
T1 framer(2-1-1): belongs, TUG-2 number, and TUG-11
number in order. For the concrete
calculation principle, refer to the
associated Operation Manual.
4-114
4.9.6 e1 channel-set
Syntax
e1 e1-number channel-set set-number timeslot-list range

undo e1 e1-number channel-set range
View
CPOS interface view
Parameter
e1-number: Number of an E1 channel on the CPOS interface, ranging from 1 to 63.

set-number: channel set number, ranging from 0 to 30.
range: Timeslots assigned to the channel set, ranging from 1 to 31.
Description
Use the e1 channel-set command to bundle multiple timeslots on an E1 channel into

one channel set.
Use the undo e1 channel-set command to remove the bundle.
When the E1 channel is channelized, its timeslot 0 is used for synchronization and the
other 31 timeslots can be bundled to form one or multiple serial interfaces.
Note:
z To guarantee the processing capacity of the system, you can have only up to 256
virtual serial interfaces on one CPOS physical interface.
z E1 commands are available with the CPOS(E) interface module but not with the
CPOS(T) interface module.
Example
# Bundle timeslots on E1 channel 63.

<H3C> system-view
[H3C-Cpos1/0/0] e1 63 channel-set 1 timeslot-list 1-31
# Enter the view of the serial interface formed by the timeslot bundle.
[H3C-Cpos1/0/0] quit
[H3C] interface serial 1/0/0/63:1
[H3C-Serial1/0/0/63:1]
4-115
# View information about the serial interface formed by a timeslot bundle.

<H3C> display interface serial 1/0/0/63:1
4.9.7 e1 set clock
Syntax
e1 e1-number set clock { master | slave }

undo e1 e1-number set clock
View
CPOS interface view
Parameter

master: Sets the clock mode of the E1 channel to master.
slave: Sets the clock mode of the E1 channel to slave.
Description
Use the e1 set clock command to set the clock mode of the E1 channel.
Use the undo e1 set clock command to restore the default, slave mode.
Different E1 channels on the same CPOS physical interface can use different clock
modes.
Note:
E1 commands are available with the CPOS(E) interface module but not with the
Example
# Set the clock mode of E1 channel 1 to master.

<H3C> system-view
[H3C-Cpos1/0/0] e1 1 set clock master
4.9.8 e1 set frame-format
Syntax
e1 e1-number set frame-format { crc4 | no-crc4 }
4-116
undo e1 e1-number set frame-format
View
CPOS interface view
Parameter

crc4: sets the frame format to CRC4.
no-crc4: sets the frame format to no-CRC4.
Description
Use the e1 set frame-format command to set the frame format of an E1 channel.
Use the undo e1 set frame-format command to restore the default frame format,
no-CRC4.
Note:
Example
# Set E1 channel 1 to use the frame format with CRC4 check.

<H3C> system-view
[H3C-Cpos1/0/0] e1 1 set frame-format crc4
4.9.9 e1 set loopback
Syntax
e1 e1-number set loopback { local | remote }

undo e1 e1-number set loopback
View
CPOS interface view
Parameter

local: Places the E1 channel in local loopback.
4-117
remote: Places the E1 channel in remote loopback.
Description
Use the e1 set loopback command to configure the loopback mode of the E1
channel.
Use the undo e1 set loopback command to disable loopback (default).
You can test an E1 channel by placing it in local or remote loopback.
In local loopback, data of the sender is directly looped to the receiver.
In remote loopback, data received by the receiver is looped back without passing
through the E1 framer to generate payload.
Related command: display controller cpos e1.
Note:
Example
# Place E1 channel 1 in remote loopback.

[H3C-Cpos1/0/0] e1 1 set loopback remote
4.9.10 e1 shutdown
Syntax
e1 e1-number shutdown
undo e1 e1-number shutdown
View
CPOS interface view
Parameter
Description
Use the e1 shutdown command to shut down an E1 channel.

Use the undo e1 shutdown command to enable the E1 channel.
By default, E1 channels are enabled.
4-118
Disabling an E1 channel also disables the serial interfaces that are formed on it, if
there is any.
Note:
Example
# Disable E1 channel 1.
<H3C> system-view
[H3C-Cpos1/0/0] e1 1 shutdown
4.9.11 e1 unframed
Syntax
e1 e1-number unframed
undo e1 e1-number unframed
View
CPOS interface view
Parameter
Description
Use the e1 unframed command to set an E1 channel on the CPOS interface to

unframed mode or E1 mode.
Use the undo e1 unframed command to restore the default setting, channelized
mode.
When the E1 channel is set to work in unframed mode, it does not include frame
control information and does not allow timeslot division or bundling.
4-119
Note:
Example
# Set E1 channel 3 on the CPOS interface 1/0/0 to operate in unframed mode.

<H3C> system-view
[H3C-Cpos 1/0/0] e1 3 unframed
4.9.12 flag
Syntax
flag { j0 j0-string | j1 j1-string | c2 c2-value }

undo flag { j0 | j1 | c2 }
View
CPOS interface view
Parameter
j0: Regeneration section trace message, a string of 1 to 15 characters. The default

value is 0x01.
j1: Path trace message, a string of 1 to 15 characters. The default value is NetEngine.
c2: Path signal label byte. The value is a hexadecimal number ranging from 00 to FF.
The default value is 0x02.
Description
Use the flag command to set the overhead byte of SONET/SDH frames.
Use the undo flag command to restore the default.
SONET/SDH frames provide a variety of overhead bytes for operation and
maintenance (OAM) such as layered management on transmission networks. j1, j0
and c2 are used to support interoperability between devices from different countries,
areas or vendors.
Related command: display controller cpos.
Example
# Set the path trace message j1 of the interface CPOS 1/0/0 to H3C.
<H3C> system-view
4-120

[H3C-Cpos1/0/0] flag j1 H3C
4.9.13 frame-format
Syntax
frame-format { sdh | sonet }

undo frame-format
View
CPOS interface view
Parameter
sdh: Sets frame type to synchronous digital hierarchy (SDH).

sonet: Sets frame type to synchronous optical network (SONET).
Description
Use the frame-format command to set the frame type of the CPOS interface.
Use the undo frame-format command to restore the default or SDH.
Example
# Set the specified CPOS physical interface to operate in SONET mode.

<H3C> system-view
[H3C-Cpos1/0/0] frame-format sonet
4.9.14 loopback
Syntax
loopback { local | remote }

undo loopback
View
CPOS interface view
Parameter
local: Places the CPOS interface in local loopback.

remote: Places the CPOS interface in remote loopback.
4-121
Description
Use the loopback command to configure the loopback function of the CPOS
interface.
Use the undo loopback command to disable loopback.
The CPOS module provides loopback of different depths that allows you to
troubleshoot the interfaces or connection cables.
In normal conditions, disable loopback.
Example
# Place CPOS 1/0/0 in remote line loopback.

<H3C> system-view
[H3C-Cpos1/0/0] loopback remote
4.9.15 multiplex mode
Syntax
multiplex mode { au-4 | au-3 }

undo multiplex mode
View
CPOS interface view
Parameter
au-4: gests AUG through AU-4.

au-3: gets AUG through AU-3.
Description
Use the multiplex mode command to set AUG multiplexing mode.

Use the undo multiplex mode command to restore the default setting, au-4.
SDH provides two payload map/multiplex solutions: ANSI and ETSI.
The multiplex schemes of ANSI and ETSI are AU-3 and AU-4 respectively.
When the CPOS interface is operating in SDH mode, you can choose to multiplex
AUG to AU-4 or AU-3 by using the multiplex mode command. When the CPOS
interface operates in SONET mode, AUG can only be multiplexed to AU-3 and the
multiplex mode command is invalid in this case.
Related command: frame-format.
4-122
Example
# In SDH mode, multiplex AUG to AU-3.

<H3C> system-view
[H3C-Cpos1/0/0] frame-format sdh
[H3C-Cpos1/0/0] multiplex mode au-3
4.9.16 shutdown
Syntax
shutdown
undo shutdown
View
CPOS interface view
Parameter
None
Description
Use the shutdown command to shut down the CPOS physical interface.
Use the undo shutdown command to enable the CPOS physical interface.
By default, the CPOS physical interface is enabled.
Executing the shutdown command on the CPOS physical interface disables all
E1/T1 channels and serial interfaces formed by timeslot bundles. They stop
transmitting or receiving data as a result. If you execute the undo shutdown
command on the CPOS physical interface again, all E1/T1 channels and the serial
interfaces go up.
Example
# Disable CPOS physical interface 1/0/0.

<H3C> system-view
[H3C-Cpos1/0/0] shutdown
4.9.17 t1 channel-set
Syntax
t1 t1-number channel-set set-number timeslot-list range [ speed { 56k | 64k } ]

undo t1 t1-number channel-set set-number
4-123
View
CPOS interface view
Parameter
t1-number: Number of a T1 channel on the CPOS interface, ranging from 1 to 84.

set-number: Channel set number in the range 0 to 23.
range: Timeslots assigned to the channel set.
speed: Specifies how timeslots are bundled. If 56k applies, the timeslots form an N ×
56 kbps bundle. If 64k applies, timeslots form an N × 64 kbps bundle. If the speed is
not specified, the default 64 kbps applies.
Description
Use the t1 channel-set command to bundle timeslots on the T1 channel.

Use the undo t1 channel-set command to remove the bundle.
Related command: t1 unframed.
Note:
T1 commands are available with the CPOS(T) interface module but not with the
CPOS(E) interface module.
Example
# Bundle timeslots on T1 channel 1.

<H3C> system-view
[H3C-Cpos1/0/0] t1 1 channel-set 1 timeslot-list 0-23
# Enter the serial interface view after the bundling operation.

[H3C-Cpos1/0/0] quit
[H3C] interface serial 1/0/0/1:1
[H3C-Serial1/0/0/1:1]
# View information on the serial interface formed by the timeslot bundle.

<H3C> display interface serial 1/0/0/1:1
4.9.18 t1 set clock
Syntax
t1 t1-number set clock { master | slave }
4-124
undo t1 t1-number set clock
View
CPOS interface view
Parameter
t1-number: Number of a T1 channel on the CPOS, ranging from 1 to 84.

Master: Set the clock mode of T1 channel to master.
slave: Set the clock mode of the T1 channel to slave.
Description
Use the t1 set clock command to configure the clock mode of T1 channel.
Use the undo t1 set clock command to restore the default or slave.
Different E1 channels on the same CPOS physical interface can use different clock
modes.
Note:
Example
# Set the clock mode of T1 channel 1 to master.

<H3C> system-view
[H3C-Cpos1/0/0] t1 1 set clock master
4.9.19 t1 set frame-format
Syntax
t1 t1-number set frame-format { esf | sf }

undo t1 t1-number set frame-format
View
CPOS interface view
Parameter
4-125
esf: Sets the T1 channel to use the extended super frame (ESF) format.
sf: Sets the T1 channel to use the super frame (SF) format.
Description
Use the t1 set frame-format command to set a frame format for T1 channel.
Use the undo t1 set frame-format command to restore the default or ESF.
Note:
Example
# Set the frame format of T1 channel 1 to SF.

<H3C> system-view
[H3C-Cpos1/0/0] t1 1 set frame-format sf
4.9.20 t1 set loopback
Syntax
t1 t1-number set loopback { local | remote }

undo t1 t1-number set loopback
View
CPOS interface view
Parameter

local: Places the T1 channel in local loopback.
remote: Places the T1 channel in remote loopback.
Description
Use the t1 set loopback command to configure the loopback mode of the T1
channel.
Use the undo t1 set loopback command to disable loopback (default).
Loopback is used for troubleshooting purpose. Disable loopback when the device is
working normally.
4-126
Related command: display controller cpos t1.
Note:
Example
# Place T1 channel 1 in remote loopback.

<H3C> system-view
[H3C-Cpos1/0/0] t1 1 set loopback remote
4.9.21 t1 shutdown
Syntax
t1 t1-number shutdown
undo t1 t1-number shutdown
View
CPOS interface view
Parameter
Description
Use the t1 shutdown command to shut down a T1 channel.

Use the undo t1 shutdown command to enable the T1 channel.
By default, T1 channel is enabled.
Disabling a T1 channel disables the serial interfaces formed on it, if there is any.
Note:
4-127
Example
# Shut down T1 channel 1.

<H3C> system-view
[H3C-Cpos1/0/0] t1 1 shutdown
4.9.22 t1 unframed
Syntax
t1 t1-number unframed
undo t1 t1-number unframed
View
CPOS interface view
Parameter
Description
Use the t1 unframed command to set a T1 channel on the CPOS interface to

unframed mode.
Use the undo t1 unframed command to restore the default, channelized mode.
T1 channel does not contain frame control information, perform timeslot division, or
perform timeslot binding after it is configured to work in unframed mode. Its 24
timeslots and F-bit works as a path to form a serial interface at 1.544Mbit/s.
When the T1 channel is set to work in unframed mode, it does not include frame
control information and does not allow timeslot division or bundling. Its 24 timeslots
and F-bit form a 1.544 Mbps serial interface as a channel.
Note:
Example
# Set T1 channel 3 on the CPOS interface 1/0/0 to operate in unframed mode.

<H3C> system-view
4-128
[H3C-Cpos 1/0/0] t1 3 unframed
4.10 POS Interface Configuration Commands

4.10.1 clock
Syntax

undo clock
View
POS interface view
Parameter
master: Sets the clock mode of the POS interface to master.

slave: Sets the clock mode of the POS interface to slave.
Description
Use the clock command to set the clock mode of the POS interface.
Use the undo clock command to restore the default, slave.
Example
# Set the clock mode of the interface POS 1/0/0 to master.

<H3C> system-view
[H3C] interface pos 1/0/0
[H3C-Pos1/0/0] clock master
4.10.2 crc
Syntax
crc { 16 | 32 }
undo crc
View
POS interface view
Parameter
16: Sets CRC length to 16 bits.

32: Sets CRC length to 32 bits.
4-129
Description
Use the crc command to set the CRC length on the POS interface.
Use the undo crc command to restore the default setting, 32 bits.
Example
# Set the CRC length on the interface POS 1/0/0 to 16 bits.

<H3C> system-view
[H3C-Pos1/0/0] crc 16
4.10.3 display interface pos
Syntax
display interface pos [ interface-number ]
View
Any view
Parameter
interface-number: Interface number. If no interface number is specified, the

configuration and state information of all the POS interfaces is displayed.
Description
Use the display interface pos command to view the configuration and state
information of one or all POS interfaces.
Example
# Display the configuration and the state information of the interface POS 3/0/0.
<H3C> display interface pos 3/0/0
4.10.4 flag
Syntax
flag { c2 | j0 } hex-value
undo flag { c2 | j0 }
View
POS interface view
4-130
Parameter
c2: Path signal label byte, a higher-order path overhead byte used to indicate the
multiplex structure of virtual container (VC) frames and property of payload. The
default value is the hexadecimal number 16.
j0: Regeneration section trace message, a section overhead byte used to test
continuity of the connection between two interfaces at the section level. The default
value is the hexadecimal number 0.
hex-value: Hexadecimal number in the range 0 to ff.
Description
Use the flag command to set the SDH overhead byte.

Use the undo flag command to restore the default.
Related command: display interface pos.
Example
# Set the overhead byte J0.

<H3C> system-view
[H3C-Pos1/0/0] flag j0 ff
4.10.5 frame-format
Syntax

undo frame-format
View
POS interface view
Parameter
sdh: Sets frame type to SDH.

sonet: Sets frame type to SONET.
Description
Use the frame-format command to set the frame format of the POS interface.
Use the undo frame-format command to restore the default or SDH.
By default, the frame format is SDH.
4-131
Example
# Set the frame format of the POS interface to SDH.

<H3C> system-view
[H3C-Pos1/0/0] frame-format sdh
4.10.6 link-protocol
Syntax
link-protocol { fr | hdlc | ppp }
View
POS interface view
Parameter
fr: Specifies Frame Relay as the link layer protocol of the interface.
hdlc: Specifies HDLC as the link layer protocol of the interface.
ppp: Specifies PPP as the link layer protocol of the interface.
Description
Use the link-protocol command to set the link layer protocol of the interface.
By default, PPP is used.
Example
# Specify HDLC as the link protocol on the POS interface 1/0/0.

<H3C> system-view
[H3C-Pos1/0/0] link-protocol hdlc
4.10.7 loopback
Syntax
loopback { local | remote }

undo loopback
View
POS interface view
Parameter
local: Places the POS interface in local loopback.
4-132
remote: Places the POS interface in remote loopback.
Description
Use the loopback command to configure the loopback function of the POS interface.
Loopback is enabled on an interface only for troubleshooting purpose.
Note:
If you enable loopback on a POS interface encapsulated with PPP, it is normal that
the state of the link layer protocol is reported down.
Example
# Place the interface POS 1/0/0 in local loopback.

<H3C> system-view
[H3C-Pos1/0/0] loopback local
4.10.8 mtu (POS Interface)
Syntax
mtu size
undo mtu
View
POS interface view
Parameter
size: MTU size of the POS interface, which is in bytes. It ranges from 128 to 1500 and
defaults to 1500.
Description
Use the mtu command to set the MTU size of the POS interface.
The MTU setting of a POS interface can affect the assembly and fragmentation of IP
packets on the interface.
4-133
Example
# Set MTU of POS interface 0/0/0 to 1492.

[H3C-pos0/0/0] mtu 1492
4.10.9 scramble
Syntax
scramble
undo scramble
View
POS interface view
Parameter
None
Description
Use the scramble command to enable the POS interface to scramble payload data.
Use the undo scramble command to disable data scrambling.
By default, the POS interface is enabled to scramble payload data.
Example
# Disable the POS interface to scramble payload data.

<H3C> system-view
[H3C-Pos1/0/0] undo scramble
4-134
Command Manual – Interface Chapter 5 ATM/DSL Interface Configuration
Comware V3 Commands
Chapter 5 ATM/DSL Interface Configuration

Commands
5.1 ATM/DSL Interface Commands (Public)

5.1.1 display interface atm
Syntax
display interface atm [ interface-number ]
View
Any view
Parameter
interface-number: ATM interface number. If no interface is specified, the configuration

and state information about all ATM interfaces is displayed.
Description
Use the display interface atm command to display the configuration and state
information about the specified or all ATM interfaces.
Example
# Display the configuration and state information about ATM E1 interface 3/0/0.
[H3C-Atm3/0/0] display interface atm 3/0/0
Atm3/0/0 current state :DOWN
Line protocol current state :DOWN
Description : Atm3/0/0 Interface
AAL enabled: AAL5, Maximum VCs: 128
Current VCs: 0 (0 on main interface)
ATM over E1, Scramble enabled, frame-format crc4-adm
code hdb3, clock slave,Cable-length long, loopback not set
Cable type: 75 ohm non-balanced
Line Alarm: LOS LOF
Line Error: 0 FERR, 0 LCV, 0 CERR, 0 FEBE

5-1
Comware V3 Commands
Input : 0 packets, 0 bytes, 0 buffers

0 errors, 0 crcs, 0 lens, 0 giants,
0 pads, 0 aborts, 0 timeouts
0 overflows, 0 overruns,0 no buffer
Output: 0 packets, 0 bytes, 0 buffers
0 errors, 0 overflows, 0 underruns
Table 5-1 Description on the fields of the display interface atm command
Field Description
Current physical layer state of the ATM
Atm3/0/0 current state
interface
Current link layer state of the ATM
interface
Description Description about the ATM interface
The Maximum Transmit Unit is 1500 MTU of the interface
Indicates whether Internet protocol
Internet protocol processing
processing is enabled on the interface
AAL enabled ATM adapter layer (AAL) type
Maximum VCs Maximum number of VCs
Current VCs Number of current VCs

Physical layer: E1
ATM over E1, Scramble enabled, Scrambling state: enabled or disabled
frame-format crc4-adm Frame format: CRC4 ADM or No-CRC4
ADM
Line coding type: HDB3 or AMI

code hdb3, clock slave,Cable-length Clock type: slave or master
long, loopback not set Cable type: long or short
State of loopback setting
Cable type of the interface: 75-ohm
Cable type: 75 ohm non-balanced
unbalanced cable in this example
Line Alarm: LOS LOF Line alarm
Line Error: 0 FERR, 0 LCV, 0 CERR, 0
Statistics about errors
FEBE
Last 0 seconds input rate 0.00
Input rate during a specified interval
bytes/sec, 0.00 packets/sec
Last 0 seconds output rate 0.00
Output rate during a specified interval
bytes/sec, 0.00 packets/sec
5-2
Comware V3 Commands
Field Description
0 errors, 0 crcs, 0 lens, 0 giants, Detailed statistics about input packets
0 pads, 0 aborts, 0 timeouts and their errors
Output: 0 packets, 0 bytes, 0 buffers Detailed statistics about output packets
0 errors, 0 overflows, 0 underruns and their errors
5.1.2 interface atm
Syntax
interface atm number
View
System view
Parameter
number: ATM E1/T1 interface number.
Description
Use the interface atm command to enter the view of the specified ATM E1/T1
interface.
Example
# Enter the view of ATM E1/T1 interface 1/0/1.

<H3C> system-view
[H3C] interface atm 1/0/1
[H3C-Atm1/0/1]
5.1.3 mtu (ATM Interface)
Syntax
mtu size
undo mtu
View
Interface view
Parameter
size: MTU size in bytes of the ATM interface. It defaults to 1500.
5-3
Comware V3 Commands
Description
Use the mtu command to set the MTU size of the ATM interface.
The MTU setting of an ATM interface can affect the assembly and fragmentation of IP
packets on the interface.
Example
# Set MTU of the ATM interface 1/0/0 to 1492.

[H3C-ATM1/0/0] mtu 1492
5.1.4 reset atm
Syntax
reset atm interface [ atm number ]
View
User view
Parameter
atm number: ATM interface number.
Description
Use the reset atm command to clear statistics about all PVCs on the specified ATM
interface, excluding statistics about the ATM interface.
To clear statistics about ATM interfaces, use the reset counters interface command.
Example
# Clear statistics about all PVCs on the specified ATM interface.

<H3C> reset atm inter atm 1/0/0
5.2 IMA-E1/T1 Interface Configuration Commands

5.2.1 cable
Syntax

undo cable
5-4
Comware V3 Commands
View
ATM E1/T1 interface view
Parameter
long: Long haul mode, with a cable length in the range 151 to 500 meters or 495 to
1640 feet.
short: Short haul mode, with a cable length in the range 0 to 150 meters or 0 to 495
feet.
Description
Use the cable command to set the cable length of the ATM E1 interface.
Use the undo cable command to restore the default, that is, long haul mode. In this
mode, the system can automatically adjust long haul mode and short haul mode.
To have the system use short haul mode, use the cable short command.
Related command: frame-format.
Example
# Set the cable length of ATM E1 interface 1/0/1 to long haul.

<H3C> system-view
[H3C-Atm1/0/1] cable long
5.2.2 clock
Syntax

undo clock
View
Parameter
master: Sets the clock mode of the ATM E1/T1 interface to master.
slave: Sets the clock mode of the ATM E1/T1 interface to slave.
Description
Use the clock command to set the clock mode of the ATM E1/T1 interface.
Use the undo clock command to restore the default clock mode, that is, slave.
5-5
Comware V3 Commands
When the ATM E1/T1 interface is operating as DCE, set its clock mode to master.
When the interface is operating as DTE, set its clock mode to slave.
When the ATM interfaces on two routers are connected directly through a fiber-optic
cable, set the clock mode to master at one end and to slave at the other end.
Example
# Set the clock mode of ATM E1/T1 interface 1/0/1 to master.

<H3C> system-view
[H3C-Atm1/0/1] clock master
5.2.3 differential-delay
Syntax
differential-delay milliseconds
undo differential-delay
View
IMA group interface view
Parameter
milliseconds: Maximum differential delay, in the range 25 to 100 milliseconds.
Description
Use the differential-delay command to set the maximum differential delay for the
member links in the IMA group.
Use the undo differential-delay command to restore the default, that is, 25
milliseconds.
Example
# Set the maximum differential delay for the member links in IMA group 1/0/1 to 25
milliseconds.
[H3C] interface ima 1/0/1
[H3C-Ima-group 1/0/1] differential-delay 25
5.2.4 display interface ima-group
Syntax
display interface ima-group [ slot/card/group-number ]
5-6
Comware V3 Commands
View
Any view
Parameter
slot: Number of the slot for the ATM E1/T1 interface card.
card: Number of the ATM E1/T1 interface card.
group-number: IMA group number, an integer in the range 1 to 8.
If no IMA group interface is specified, the configuration of all existing IMA group
interfaces and their state information are displayed.
Description
Use the display interface ima-group command to view the configuration and state
information about the specified or all IMA group interfaces.
Example
# Display the configuration and state information about IMA group interface 6/0/1.
[H3C] display interface Ima-group 6/0/1
Ima-group6/0/1 current state :UP
Description : Ima-group6/0/1 Interface
Total baudrate is 10808000 bps,the available baudrate is 10808000 bps,the min
baudrate is 1544000 bps
AAL enabled: AAL5, Maximum VCs: 128
Current VCs: 1 (1 on main interface)
Physical layer is ATM over IMA
IMA-clock: CTC, active-links-minimum: 1
Frame-length: 128, differential-delay-maximum: 25
symmetry: symmetrical configuration and operation
Ima-group state:
ImaGroupNeState:OPERATIONAL ImaGroupFeState:OPERATIONAL
ImaGroupNeFailureStatus:NO_FAILURE ImaGroupFeFailureStatus: NO_FAILURE
Ima-Link Information:
Link Physical status Near End Tx Status
0 UP ACTIVE
1 UP ACTIVE
2 UP ACTIVE
3 UP ACTIVE
4 UP ACTIVE
5-7
Comware V3 Commands
5 UP ACTIVE
7 UP ACTIVE
Test Status: Disabled

Last 300 seconds input rate 0.08 bytes/sec, 0 bits/sec, 0.00 packets/sec
Last 300 seconds output rate 0.09 bytes/sec, 0 bits/sec, 0.00 packets/sec
0 errors, 0 crcs, 0 lens, 0 giants,
Output: 746 packets, 982408 bytes, 746 buffers
Table 5-2 Description on the fields of the display interface ima-group command
Field Description
Current physical layer state of the IMA
Ima-group6/0/1 current state
group
Current data link layer state of the IMA
group
Description Description about the IMA group
Total baudrate is 10808000 bps,the

Total baudrate, available baudrate, and
available baudrate is 10808000 bps,the
minimum baudrate
min baudrate is 1544000 bps
The Maximum Transmit Unit is 1500 MTU of the IMA interface
Internet Address is 23.1.1.1/24 IP address
AAL enabled AAL protocol type
Maximum VCs Maximum number of VCs
Current VCs Number of current VCs
Physical layer is ATM over IMA Type of physical layer
IMA-clock IMA clock: CTC or RTC
Required minimum number of active
active-links-minimum
links
Frame-length Frame length, that is, number of cells
Maximum differential delay for the links
differential-delay-maximum
in the IMA group
symmetry Symmetrical configuration and operation
5-8
Comware V3 Commands
Field Description
State of the IMA group, which can be
one of the following:
IMA_GSM_START_UP
IMA_GSM_START_UP_ACK
IMA_GSM_CFG_ABORT_BAD_M
IMA_GSM_CFG_ABORT_BAD_SYM
IMA_GSM_CFG_ABORT_BAD_VERS
N
IMA_GSM_CFG_ABORT_OTHER
Ima-group state:
IMA_GSM_INSUFFICIENT_LINKS
ImaGroupNeState:OPERATIONAL
ImaGroupFeState:OPERATIONAL IMA_GSM_BLOCKED
ImaGroupNeFailureStatus:NO_FAILUR IMA_GSM_OPERATIONAL
E ImaGroupFeFailureStatus: State of the failed end in the IMA group,
NO_FAILURE which can be one of the following:
IMA_GRP_NO_FAILURE
IMA_GRP_START_UP
IMA_GRP_INVALID_M
IMA_GRP_FAILED_ASYMM
IMA_GRP_INSUFF_LNKS
IMA_GRP_BLOCKED
IMA_GRP_FAILED_OTHER
IMA_GRP_INVALID_VERSN
Information about links in the IMA group,
including link number, physical status of
Ima-Link Information:
the link, and transmitting status at the
near end
Test setting state: disabled, success, or
Test Status
failed
Last clearing of counters: Never Time of last counter clearing
Input rate in the last 300 seconds in
Last 300 seconds input rate 0.08
terms of bytes per second, bits per
bytes/sec, 0 bits/sec, 0.00 packets/sec
second, and packets per second
Output rate in the last 300 seconds in
Last 300 seconds output rate 0.09
terms of bytes per second, bits per
bytes/sec, 0 bits/sec, 0.00 packets/sec
second, and packets per second
Input : 746 packets, 982144 bytes, 746
buffers
0 errors, 0 crcs, 0 lens, 0 giants, Statistics about input packets and errors
5-9
Comware V3 Commands
Field Description
Output: 746 packets, 982408 bytes, 746
buffers Statistics about output packets and
errors
As a baudrate setting is meaningless for IMA-group subinterfaces, the message “Total

baudrate is 10808000 bps, the available baudrate is 10808000 bps, the min baudrate
is 1544000 bps” is not available for them.
5.2.5 display status interface ima-group
Syntax
display status interface ima-group slot/card/group-number
View
Any view
Parameter
slot: Number of the slot for the ATM E1/T1 interface card.
card: Number of the ATM E1/T1 interface card.
group-number: IMA group number, an integer in the range 1 to 8.
Description
Use the display status interface ima-group command to view detailed information
about the specified IMA group interface.
Example
# Display the detailed information about IMA group interface 6/0/1.

[H3C-Ima-group3/0/1] display status interface ima-group 6/0/1
Atm IMA port basic statistic as follows:
Shutdowns/Noshuts:0/0
LinkUps/LinkDowns:1/0
Ima-group configuration and status :
ImaGroupTxImaId = 0 ImaGroupRxImaId = 0
ImaGroupTxImaVer = 1.1 ImaGroupRxImaVer = 1.1
ImaGroupMinNumTxLinks = 1 ImaGroupMinNumRxLinks = 1
ImaGroupDiffDelayMax = 25 ImaGroupATMutopiaAddr = 0
ImaGroupTxTRL = 0 ImaGroupRxTRL = 0
ImaGroupTxTRLSrc = 0 ImaGroupRxTRLSrc = 0
ImaGroupTxTRLSrcCfg = 0 ImaGroupRxTRLSrcCfg = 0
ImaGroupLeastDelayLink = 7 ImaGroupDiffDelayMaxObs = 0
5-10
Comware V3 Commands
ImaGroupNeTxClkMode = ctc ImaGroupFeTxClkMode = ctc

ImaGroupTxFrameLen = 128 ImaGroupRxFrameLen = 128
ImaGroupNumTxCfgLinks = 8 ImaGroupNumRxCfgLinks = 8
ImaGroupNumTxActLinks = 7 ImaGroupNumRxActLinks = 7
ImaGroupNumTestLink = 0 ImaGroupTestPattern = 0xff
IMA Link Information :
Link 0 :
LinkState :
NeTx = Active
NeRx = Active
FeTx = Active
FeRx = Active
LinkFailureStatus :
NeRx = NoFailure
FeRx = NoFailure
Link Information :
TxLinkId = 0
RxLinkId = 0
LinkRelDelay = 0
Table 5-3 Description on the fields of the display status interface ima-group
Field Description
Number of shutdown/undo shutdown
Shutdowns/Noshuts
operations
LinkUps/LinkDowns Number of link status changes
5-11
Comware V3 Commands
Field Description
Ima-group configuration and status :
ImaGroupTxImaId = 0
ImaGroupRxImaId = 0
reflect
Specify reflec
ImaGroupTxTRLSrc = 32
ImaGroupRxTRLSrc = 32
Configuration and states of the IMA group,
ImaGroupTxTRLSrcCfg = 0 including:
ImaGroupRxTRLSrcCfg =0
IMA group number, transmit/receive clock
ImaGroupLeastDelayLink = 0 source reference, minimum/maximum delay
ImaGroupDiffDelayMaxObs = 0 in the group, near/far end clock mode (CTC
ImaGroupNeTxClkMode = ctc or ITC), number of cells in each
ImaGroupFeTxClkMode = ctc received/transmitted frame, number of links
in the group, number of active links, test
ImaGroupTxFrameLen = 128
pattern (0-fe).
ImaGroupRxFrameLen = 128
ImaGroupNumTxCfgLinks = 1
ImaGroupNumRxCfgLinks = 1
ImaGroupNumTxActLinks = 0
ImaGroupNumRxActLinks = 0
ImaGroupNumTestLink = 0
ImaGroupTestPattern = 0xff
IMA Link Information :
Link 0 :
LinkState :
NeTx= Unusable
NeRx= Unusable
FeTx= No_In_Group Link state: not in group, unusable, usable, or
FeRx= No_In_Group active
LinkFailureStatus : Failure cause: LIF, LODS, LOS, or AIS
NeRx = Lif
FeRx= NoFailure
Link Information :
RxLinkId = 0
LinkRelDelay = 0
5.2.6 frame-format
Syntax
frame-format { crc4-adm | no-crc4-adm }

frame-format { sf-adm | esf-adm }
undo frame-format
5-12
Comware V3 Commands
View
Parameter
crc4-adm: Sets the ATM over E1 framing format to 4-bit cyclic redundancy check
ATM direct mapping (CRC4 ADM).
no-crc4-adm: Sets the ATM over E1 framing format to no-CRC4 ADM.
sf-adm: Sets the ATM over T1 framing format to super frame ADM (SF ADM).
esf-adm: Sets the ATM over T1 framing format to extended super frame ADM (ESF
ADM).
Description
Use the frame-format command to configure the ATM over E1/T1 framing format.
Use the undo frame-format command to restore the default, that is, CRC4 ADM for
ATM E1 and ESF ADM for ATM T1.
ADM directly maps the ATM cells transmitted over the E1/T1 line into E1/T1 frames.
Its process is defined by ITU-T G.804 and ATM forum.
Related command: cable, code.
Example
# Configure no-CRC4 ADM framing on ATM E1 interface 2/0/1.

<H3C> system-view
[H3C-Atm2/0/1] frame-format no-crc4-adm
5.2.7 frame-length
Syntax
frame-length { 32 | 64 | 128 | 256 }

undo frame-length
View
Parameter
32, 64, 128, 256: Specifies the number of ATM cells in an IMA frame.
Description
Use the frame-length command to configure the number of ATM cells in an IMA
frame.
5-13
Comware V3 Commands
Use the undo frame-length command to restore the default, that is, 128 ATM cells in
an IMA frame.
Example
# Set the number of ATM cells in an IMA frame to 64 on IMA group interface 1/0/1.
[H3C-Ima-group 1/0/1] frame-length 64
5.2.8 ima ima-group
Syntax
ima ima-group group-number

undo ima ima-group
View
Parameter
group-number: IMA group number, in the range 1 to 8.
Description
Use the ima ima-group command to add the ATM E1/T1 interface to the specified
IMA group. If the specified IMA group does not exist, it is created first.
Use the undo ima ima-group command to remove the interface from the IMA group.
Note:
The first link in the IMA group is the primary link. You can delete it only when you
delete the IMA group.
Example
# Add ATM E1 interface 1/0/1 to IMA group 1.

[H3C-Atm 1/0/1] ima ima-group 1
5.2.9 ima-clock
Syntax
ima-clock { itc | ctc [ link_number number ] }

undo ima-clock
5-14
Comware V3 Commands
View
Parameter
itc: Independent transmit clock configuration. In this mode, the links in the IMA group
use at least two clock sources.
ctc: Common transmit clock configuration. In this mode, all links in the IMA group
share a clock source, which can be an external clock or the one extracted from a
member link.
link_number number: Number of the E1/T1 link that provides the clock source.
Description
Use the ima-clock command to configure the clock mode of the IMA group.
Use the undo ima-clock command to restore the default, that is, CTC.
When the IMA group adopts ITC mode, you must set the clock mode of each member
ATM E1/T1 link to slave with the clock slave command.
When the IMA group adopts CTC mode, you must set the clock mode of each
member ATM E1/T1 link to master with the clock master command.
Example
# Set the clock mode to ITC on IMA group interface 1/0/1.

[H3C-Ima-group 1/0/1] ima-clock itc
5.2.10 ima-test
Syntax
ima-test [ link_number number ] [ pattern-id id ]

undo ima-test
View
Parameter
link_number number: Number of the test E1/T1 link in the IMA group.
pattern-id id: Test pattern, a hexadecimal number in the range 0 to FE.
Description
Use the ima-test command to set a test pattern for testing the connectivity of the
specified link to the rest of the IMA group.
5-15
Comware V3 Commands
Use the undo ima-test command to cancel the test.

You may test the connectivity of a link to the rest of the IMA group by sending a test
pattern over the link. This test pattern is looped over all the active links at the far end
and back to the transmitter. To display the connectivity test result, execute the display
interface ima-group command.
If no E1/T1 link is specified, the system sends the test pattern over the first link in the
IMA group by default. If no test pattern is specified, 0xAA applies by default.
By default, IMA group test is disabled.
Example
# Send test pattern AB over link 0 on IMA group interface 1/0/1.

[H3C-Ima-group 1/0/1] ima-test link-number 0 pattern-id ab
5.2.11 interface ima
Syntax
interface ima slot/card/group-number
View
System view
Parameter
slot: Slot number.

card: Card number.
group-number: IMA group number, in the range 1 to 8.
Description
Use the interface ima command to enter the specified IMA group interface view.
Example
# Enter the view of IMA group interface 1/0/1.

[H3C-Ima-group 1/0/1]
5.2.12 loopback
Syntax
loopback { cell | local | remote | payload }

undo loopback
5-16
Comware V3 Commands
View
Parameter
cell: Internal cell loopback for checking that the local physical chip is operating.
local: Internal loopback for checking that the local service chip is operating.
remote: External line loopback for checking that the remote end is normal.
payload: External payload loopback for checking that payload framing is normal.
Description
Use the loopback command to configure the loopback mode on the ATM E1/T1
interface.
Example
# Enable payload loopback on ATM E1/T1 interface 1/0/2.

<H3C> system-view
[H3C-Atm1/0/2] loopback payload
5.2.13 min-active-links
Syntax
min-active-links number
undo min-active-links
View
Parameter
number: Number of links, in the range 1 to 8.
Description
Use the min-active-links command to configure the minimum number of available

links required for the IMA group to operate.
Use the undo min-active-links command to restore the default, that is, 1.
5-17
Comware V3 Commands
Example
# Set the minimum number of available links required for IMA group 1/0/1 to operate
to 2.
[H3C-Ima-group 1/0/1] min-active-links 2
5.2.14 scramble
Syntax
scramble
undo scramble
View
Parameter
None
Description
Use the scramble command to enable payload scrambling on the ATM E1/T1
interface. This, however, does not affect cell headers.
Use the undo scramble command to disable payload scrambling.
By default, payload scrambling is enabled on the ATM E1/T1 interface.
Example
# Disable payload scrambling on ATM E1/T1 interface 1/0/0.

<H3C> system-view
[H3C-Atm1/0/0] undo scramble
5.3 ATM E3/T3 Interface Configuration Commands

5.3.1 cable
Syntax

undo cable
View
ATM T3 Interface view
5-18
Comware V3 Commands
Parameter
long: Long distance mode. Cable length ranges from 151 to 500 meters.
short: Short distance mode. Cable length ranges from 0 to 150 meters.
Description
Use the cable command to configure the cable mode of ATM T3 cable, i.e., to set the
distance between the router and the cable distribution frame.
Use the undo cable command to restore the default.
By default, short distance mode is used.
Example
# Set the cable length mode of ATM T3 1/0/0 to long.

<H3C> system-view
[H3C-Atm1/0/0] cable long
5.3.2 clock
Syntax

undo clock
View
ATM E3/T3 interface view.
Parameter
master: Sets the clock mode of ATM E3/T3 to master mode.

slave: Sets the clock mode of ATM E3/T3 to slave mode.
Description
Use the clock command to set the clock mode of ATM E3/T3 interface.
Use the undo clock command to restore the default setting.
By default, the clock mode of ATM E3/T3 interface is slave mode.
Example
# Set clock mode of ATM E3/T3 interface 2/0/0 as master.

<H3C> system-view
5-19
Comware V3 Commands
5.3.3 frame-format
Syntax
frame-format { g832-adm | g751-adm | g751-plcp }

frame-format { cbit-adm | cbit-plcp | m23-adm | m23-plcp }
undo frame-format
View
Parameter
g832-adm: Configures frame format of ATM E3 as G.823 ATM direct mapping.

g751-adm: Configures frame format of ATM E3 as G.751 ATM direct mapping.
g751-plcp: Configures frame format of ATM E3 as G.751 Physical Layer
Convergence Protocol (PLCP).
cbit-adm: Configures frame format of ATM T3 as C-bit ATM direct mapping.
cbit-plcp: Configures frame format of ATM T3 as C-bit PLCP.
m23-adm: Configures frame format of ATM T3 as M23 ATM direct mapping.
m23-plcp: Configures frame format of ATM T3 as M23 PLCP.
Description
Use the frame-format command to configure frame format of ATM E3/T3 interface.
Use the undo frame-format command to restore the default configuration.
By default, frame format g751-plcp is used for ATM E3 and cbit-plcp used for ATM T3.
Example
# Configure ATM E3 interface 1/0/0 to use frame format G.832 ADM.

<H3C> system-view
[H3C-Atm1/0/0] frame-format g832-adm
5.3.4 loopback
Syntax
loopback { cell | local | payload | remote }

undo loopback
View
5-20
Comware V3 Commands
Parameter
cell: Internal cell loopback

local: Internal loopback.
payload: External payload loopback, where data is looped back at the framer.
remote: External line loopback.
Description
Use the loopback command to enable loopback function of interface.

Use the undo loopback command to disable loopback function.
Example
# Enable external payload loopback of ATM E3/T3 interface 2/0/0.

<H3C> system-view
[H3C-Atm2/0/0] loopback payload
5.3.5 scramble
Syntax
scramble
undo scramble
View
Parameter
None
Description
Use the scramble command to enable scrambling function of ATM E3/T3 interface.
Use the undo scramble command to disable scrambling function.
By default, scrambling function of ATM E3/T3 interface is enabled.
The scramble command scrambles and descrambles the payload without touching
the cell header.
Example
# Disable scramble function of ATM E3/T3 interface 2/0/0.

<H3C> system-view
5-21
Comware V3 Commands

5.4 ATM 25M Interface Configuration Commands

5.4.1 clock
Syntax

undo clock
View
ATM interface view
Parameter

Description
Use the clock command to set the clock mode on an ATM interface.
Use the undo clock command to restore the default clock mode on the interface.
By default, the ATM interface adopts the slave clock.
When an ATM interface is working as DCE, choose the master clock mode. When it is
working as DTE, choose the slave clock mode for it. When ATM interfaces of two
routers are directly connected by fiber, one end should be configured with the master
clock mode and the other with the slave clock mode.
Example
# Adopt the master clock on the ATM interface 4/0/0.

<H3C> system-view
5.4.2 loopback
Syntax
loopback { cell | local | remote }

undo loopback
View
ATM interface view
5-22
Comware V3 Commands
Parameter
cell: Enables ATM interface cells local loop.

local: Enables ATM interface local loop.
remote: Enables ATM interface remote loopback.
Description
Use the loopback command to set the loopback function on an ATM OC-3c/STM-1
interface.
Use the undo loopback command to cancel the loopback function.
By default, loop back is forbidden.
Set the interface configuration to local loop or loopback when testing some special
functions. Disable loopback in normal cases.
Example
# Enable local loopback on the ATM interface.

[H3C-Atm4/0/0] loopback local
5.5 ATM OC-3c/STM-1 Interface Configuration Commands

5.5.1 clock
Syntax

undo clock
View
ATM interface view
Parameter

Description
Use the clock command to set the clock mode on the ATM interface.
Use the undo clock command to restore the default or slave.
When an ATM interface is working as DCE, choose the master clock mode. When it is
working as DTE, choose the slave clock mode for it. When ATM interfaces of two
routers are directly connected by fiber, one end should be configured with the master
clock mode and the other with the slave clock mode.
5-23
Comware V3 Commands
Example
# Adopt the master clock on the ATM interface 4/0/0.

<H3C> system-view
5.5.2 frame-format
Syntax

undo frame-format
View
ATM interface view
Parameter
sdh: Sets the frame format to SDH STM-1.

sonet: Sets the frame format to SONET OC-3.
Description
Use the frame-format command to set the frame format of ATM OC-3c/STM-1
interface.
Use the undo frame-format command to restore the default setting.
The frame format on the ATM OC-3c/STM-1 interface defaults to SONET.
Example
# Set the frame format on the ATM OC-3c/STM-1 interface to SDH.

[H3C-Atm4/0/0] frame-format sdh
5.5.3 loopback
Syntax
loopback { cell | local | remote }

undo loopback
View
ATM interface view
Parameter
cell: Enables the ATM interface to perform cell loopback.
5-24
Comware V3 Commands
local: Enables the ATM interface to perform local loopback.

remote: Enables the ATM interface to perform the remote loopback.
Description
Use the loopback command to enable the loopback function on an ATM

OC-3c/STM-1 interface.
Use the undo loopback command to disable the loopback function.
By default, loopback function is disabled.
Enable loopback only when performing some special tests.
Example
# Enable the ATM interface to perform local loopback.

[H3C-Atm4/0/0] loopback local
5.5.4 scramble
Syntax
scramble
undo scramble
View
ATM interface view
Parameter
None
Description
Use the scramble command to enable an undo scramble to scramble the payload
on ATM OC-3c/STM-1 interface.
Use the undo scramble command to disable the scrambling function.
By default, the ATM OC-3c/STM-1 interface is enabled to scramble the payload.
Executing the scramble command will make an interface to scramble and
descramble the payload without touching the cell header.
Example
# Disable the ATM interface to scramble the payload.

5-25
Comware V3 Commands
5.6 G.SHDSL Interface Configuration Commands

5.6.1 activate
Syntax
activate
undo activate
View
ATM (G.SHDSL) interface view
Parameter
None
Description
Use the activate command to enable the G.SHDSL interface.

Use the undo activate command to disable the G.SHDSL interface.
By default, the G.SHDSL interface is active.
A G.SHDSL interface must be activated before it can transmit services. Activation
refers to the training between the G.SHDSL office end and the STU-C end, based on
preset items such as SHDSL standard, channel mode, upstream and downstream
rates and SNR margin in link template. The training process detects line distance and
performance, negotiates between two ends and determines if the interface can run
normally under such condition. If the training succeeds, a communication link is set up
between two ends and the interface is activated, on which services can be transferred.
Upon deactivation of the interface, the office end and the remote device is
disconnected. To transmit services over the interface again, you must activate it.
The commands are mainly used in link testing and fault diagnosis.
The activate/undo activate command differs from the shutdown/undo shutdown
command in that it only functions on the G.SHDSL interface.
Since a G.SHDSL interface is always on, it enters the active state automatically and
remain in this state as long as the link is in good condition. The router supports timed
loop detection, so the G.SHDSL interface will be activated again when the link
performance is deteriorated.
Example
# Deactivate the G.SHDSL interface.

[H3C-Atm3/0/0] undo activate
5-26
Comware V3 Commands
5.6.2 dsl link-check
Syntax
dsl link-check enable

dsl link-check disable
View
Parameter
None
Description
Use the dsl link-check enable command to enable retraining upon detection of a
major fault after the DSL interface comes up.
Use the dsl link-check disable command to disable retraining upon detection of a
By default, retraining upon detection of a major fault is enabled.
The dsl link-check disable command is intended only for hardware debugging. After
it is configured, even a link disruption cannot cause interface retraining.
Example
# Enable retraining upon detection of a major fault on an interface.

[H3C-Atm3/0/0] dsl link-check enable
5.6.3 shdsl annex
Syntax
shdsl annex { a | b }
undo shdsl annex
View
Parameter
a: Annex a
b: Annex b
5-27
Comware V3 Commands
Description
Use the shdsl annex command to configure annex standard at an SHDSL interface.
You cannot activate a link with different standard types at its two ends.
Use the undo shdsl annex command to restore the default standard or annex b.
When setting annex standard, you must consider the standard adopted in the region
where your network is located. When ATU-C and ATU-R uses different standards,
G.SHDSL cannot set up connection.
Example
# Restore the default standard type on the SHDSL interface.

[H3C-Atm1/0/0] undo shdsl annex
5.6.4 shdsl psd
Syntax
shdsl psd { asymmetry | symmetry }

undo shdsl psd
View
Parameter
asymmetry: Asymmetric mode, where different power spectral densities (PSD) are
set for the central office (CO) and the customer premises equipment (CPE).
symmetry: Symmetric mode, where the same PSD is set for the CO and CPE.
Note:
Power spectral density (PSD) is the amount of power per unit (density) of frequency
(spectral) as a function of the frequency. PSD describes how the power of a time
series is distributed with frequency.
Description
Use the shdsl psd command to set PSD of the G.SHDSL interface working as CPE. It
is not necessarily the same as the one set at CO.
Use the undo shdsl psd command to restore the default.
By default, the PSD of the G.SHDSL interface is in symmetric mode.
5-28
Comware V3 Commands
Example
# Set the PSD of the G.SHDSL interface to asymmetric mode.

[H3C-Atm1/0/0] shdsl psd asymmetry
5.6.5 shdsl rate
Syntax
shdsl rate { auto | rate }

undo shdsl rate
View
Parameter
auto: Auto-negotiation mode

rate: Sets maximum single-pair rate of the G.SHDSL interface, in the range 192 kbps
to 2,312 kbps.
Note:
z For four-wire (dual-pair) G.SHDSL, interface rate is two times that of single-pair
rate. For example, if you set single-pair rate to 2,312 kbps, four-wire interface rate
is 4,624 kbps.
z Because four-wire G.SHDSL interfaces cannot negotiate rate, do not set their
single-pair interface rate to auto mode.
Description
Use the shdsl rate command to set single-pair interface rate of the SHDSL interface
or just select auto-negotiation mode. You can specify maximum line rate.
Use the undo shdsl rate command to restore the default, that is, auto.
You can set the line rate in the range 192 to 2,312 kbps in steps of 64 kbps. The
overload displayed in interface view includes an additional 8 kbits.
In actual applications, likelihood exists that maximum downlink rate could not reach
the specified rate as restricted by ATU-C and line conditions. If you select the auto
mode, the CPE and CO can negotiate a rate commensurate with the current line
condition during the activating process. If fixed rates are set at the two ends, the two
parties negotiate rate. In case the lower rate between them cannot be provided, the
line could not be activated.
5-29
Comware V3 Commands
By default, the rate of two-wire G.SHDSL interface is set to auto-negotiation mode; the
single-pair interface rate of four-wire G.SHDSL interface is set to 2,312 kbps (four-wire
G.SHDSL interface rate is 4,624 kbps).
Example
# Restore the auto-negotiation mode on the interface.

[H3C-Atm1/0/0] undo shdsl rate
5.6.6 shdsl snr-margin
Syntax
shdsl snr-margin [ current current-margin-value ] [ snext snext-margin-value ]

undo shdsl snr-margin
View
Parameter
current-margin-value: Sets a target margin, in the range 0 to 10. It defaults to 2.

During SHDSL line training, this target margin is considered in addition to the
signal-to-noise ratio (SNR) threshold. A larger margin value means increased link
stability and noise suppression ability.
snext-margin-value: Sets a target margin, in the range 0 to 10. It defaults to 2. During
SHDSL line training, this target margin is considered in addition to the SNEXT
threshold. A larger margin value means increased link stability and noise suppression
ability.
Description
Use the shdsl snr-margin command to set a target margin to signal-to-noise ratio
(SNR).
Use the undo shdsl snr-margin command to restore the default.
Setting margin can affect maximum rate of the line. When line condition is good, you
can set a small margin to obtain higher rate. When much noise is around the line, this
may cause disconnection however.
By default, current-margin-value is set to 2 and snext-margin-value is set to 0.
Example
# Set current-margin-value to 5.
[H3C-Atm1/0/0] shdsl snr-margin current 5
5-30
Comware V3 Commands
5.6.7 shdsl wire
Syntax
shdsl wire { 2 | 4-auto-enhanced | 4-standard | 4-enhanced }

undo shdsl wire
View
ATM (G. SHDSL) interface view
Parameter
2: Two-wire mode.
4-auto-enhanced: Four-wire auto-switch mode. When this mode is enabled, the
four-wire enhanced mode is used first when the local end negotiates with the remote
end. If the remote end is not operating in four-wire enhanced mode, the local end uses
the four-wire standard mode for negotiation. When four-wire auto-switch mode is
adopted, the remote end can be set to operate in four-wire enhanced mode or
four-wire standard mode.
4-standard: Four-wire standard mode. In this mode, the two pairs of these four wires
must start negotiation at the same time; in addition, the remote end must be set to
operate in four-wire standard mode as well.
4-enhanced: Four-wire enhanced mode. In this mode, the two pairs of the four wires
can start negotiation separately; in addition, the remote end must be set to operate in
four-wire enhanced mode as well.
Description
Use the shdsl wire command to set the operating mode of the current G.SHDSL
interface.
Use the undo shdsl wire command to restore the default.
By default, the four-wire G.SHDSL interface operates in four-wire enhanced mode.
Note:
The shdsl wire command is available with four-wire G.SHDSL devices only.
Example
# Set a four-wire G.SHDSL interface to operate in four-wire auto-switch mode.

[H3C-Atm1/0/0] shdsl wire 4-auto-enhanced
5-31
Comware V3 Commands
5.6.8 display dsl configuration
Syntax
display dsl configuration interface atm interface-number
View
Any view
Parameter
interface-number: Interface number
Description
Use the display dsl configuration command to view the actual DSL configurations.
Example
# Display the actual G.SHDSL configurations.

[H3C-Atm3/0/0]display dsl configuration interface atm 3/0/0
GSHDSL line parameter and mode Configuration
Mode: CPE
Standard: G991.2
Annex: B
Wire Type: 2
Framing: 3
SNR Threshold: 25 dB
Line Rate: Auto Adaptive
Current Margin: 2
SNEXT margin: 0
Target Margin: 3 dB
Psd Mode: Sym PSD
Power-Backoff: Disable
LinkCheck: Disable
--Actual Handshake Status --
00: 0002 0000 0000 0000 0000 0000 0000 0000 0000 0000
10: 0000 0008 0000 0000 0000 0000 0000 0000 0008 0000
20: 0000 0000 0002 0002 0004 0010
--Local Handshake Status --
00: 0002 0001 0000 0000 0000 0000 0034 003f 003f 003f
10: 003f 003f 0003 0034 003f 003f 003f 003f 003f 0003
20: 0000 0000 0003 0003 000f 0010
--Remote Handshake Status --
00: 0002 0000 0000 0000 0000 0000 0030 003f 003f 003f
10: 003f 000f 0000 0030 003f 003f 003f 003f 000f 0000
5-32
Comware V3 Commands
20: 0000 0000 0003 0003 0004 0010
Table 5-4 Description on the output of the display dsl configuration command
Field Description
Operating mode, customer premises equipment
Mode
(CPE) or central office (CO)
Standard The supported standard
Annex The available options are a and b.
Wire Type Two-wire system or four-wire system.
SNR Threshold Signal to noise ratio threshold
Current Margin Current margin
SNEXT margin Worst-case margin
Target Margin —
Line Rate —
Power spectral density mode: symmetric or

PSD Mode
asymmetric
Power-Backoff Power compensation
LinkCheck State of link check: enable or disable
Actual Handshake Status —
Remote Handshake Status —
5.6.9 display dsl status
Syntax
display dsl status interface atm interface-number
View
Any view
Parameter
Description
Use the display dsl status command to view state about the specified DSL interface.
Example
# Display state information of the specified two-wire G.SHDSL interface that is up.
5-33
Comware V3 Commands
[H3C-Atm3/0/0] display dsl status interface atm 3/0/0

Operating Mode: CPE
DSL Mode: SHDSL Annex B
Configured Wire Type: 2
Line A Statistics since last activation:
CRC: 0
LOSW Defect: 0
ES: 0
SES: 0
UAS: 0
TX EOC: 0
RX EOC: 0
Line A status:
Xcvr Op State: Data Mode
Last Fail Op State: 0x00
Frame Sync: in sync
Line Rate(Kbps): 2312
Wire Type: 2
SNR Margin(dB): 16.30
Loop Attenuation(dB): 0.00
RecvGain(dB): 6.07
TxPower(dBm): 9.50
Power Backoff: enable
Power Backoff Level: 5
Tip/Ring Reversal: Reversed
FrmOH Stat: 0x00
Rmt Encoder A : 0x0000016e
Rmt Encoder B : 0x00000331
Rmt NSF Cusdata : 0x0000
Rmt NSF CusID : 0x0000
Rmt Country Code : 0x00b5
Rmt Provider Code: GSPN
Rmt Vendor Data: 0x12 0x34 0x56 0x78
0x12 0x34 0x56 0x78
# Display state information of the specified four-wire G.SHDSL interface that is up.
[H3C-Atm3/0/0]display dsl status interface atm 3/0/0
Operating Mode: CPE
DSL Mode: SHDSL Annex B
Configured Wire Type: 4
5-34
Comware V3 Commands

CRC: 0
LOSW Defect: 0
ES: 0
SES: 0
UAS: 0
TX EOC: 0
RX EOC: 0
Line A status:
Frame Sync: in sync
Wire Type: 4
RecvGain(dB): 5.86
TxPower(dBm): 9.50
FrmOH Stat: 0x00
0x12 0x34 0x56 0x78
Line B Statistics since last activation:
CRC: 1
LOSW Defect: 1
ES: 1
SES: 1
UAS: 0
TX EOC: 0
RX EOC: 0
Line B status:
5-35
Comware V3 Commands
Frame Sync: in sync

Wire Type: 4
RecvGain(dB): 5.28
TxPower(dBm): 9.50
FrmOH Stat: 0x00
0x12 0x34 0x56 0x78
Table 5-5 Description on the fields of the display dsl status command
Field Description
Operating Mode CPE or CO
Annex supported by the interface:
DSL Mode
Annex A or Annex B
Configured wire mode of the interface:
Configured Wire Type
two-wire or four-wire
Line A Statistics since last activation Statistics about wire-pair A
CRC Count of CRC errors
Count of loss of synchronization word
LOSW Defect
defects
Errored second, count of errors per
ES
second
Severely errored second, count of
SES
severe errors per second
Unavailable second, count of
UAS one-second intervals for which the
G.SHDSL line is unavailable
TX EOC Count of transmitted EOC cells
RX EOC Count of received EOC cells
Line A status State of wire-pair A
5-36
Comware V3 Commands
Field Description
Xcvr Op State: Data Mode Operating state of the receiver
Operating state of the receiver when the
Last Fail Op State
last negotiation failed
Frame Sync State of frame synchronization
Line Rate(Kbps) Negotiated wire-pair speed
Wire Type Wire type: four-wire, or two-wire
SNR Margin(dB) Margin to SNR
Loop Attenuation(dB) Loop attenuation
RecvGain(dB) Receive gain
TxPower(dBm) Transmit power
Power Backoff State of power compensation
Power Backoff Level Level of power compensation
Tip/Ring Reversal State of Tip/Ring reverse

FrmOH Stat Frame outflow state
Rmt Encoder A Encoding coefficient A
Rmt Encoder B Encoding coefficient B

Rmt NSF Cusdata Remote NSF user data
Rmt NSF CusID Remote NSF user ID
Rmt Country Code Country code

Rmt Provider Code Code of the chip provider
Rmt Vendor Data Code of the chip vendor
5.6.10 display dsl version
Syntax
display dsl version interface atm interface-number
View
Any view
Parameter
5-37
Comware V3 Commands
Description
Use the display dsl version command to view the DSL version and the available
functionality.
Example
# Display the G.SHDSL version on interface ATM 3/0/0.

[H3C-Atm3/0/0] display dsl version interface atm 3/0/0
Dsl Line Type: G.SHDSL
ATM SAR Device: 0x823614f1
ATM SAR Revision: 0x02
Chipset Vendor: GSPN
Firmware Rel-Rev: R2.3.1-0
DSP Version: 1
PCB Version: 0.0
CPLD Version: 0.0
Driver Version: 2.0
Hardware Version: 1.0
ITU G991.2 ANNEX A: Supported
ITU G991.2 ANNEX B: Supported
Table 5-6 Description on the output of display dsl version interface atm
Field Description
DSL line Type Type of the user access line
ATM SAR Device Identifier of the SAR chip
ATM SAR Revision Revision identifier of the SAR chip

Chipset Vendor Identifier of the DSL chipset vendor
Firmware Rel-Rev Identifier and version of the firmware
DSP Version —
PCB Version —
CPLD Version Logic version
Driver Version Driver software version
Hardware Version —
ITU G991.2 ANNEX A, ITU G991.2 Standards and the annexes supported
ANNEX B by the interface
5-38
Comware V3 Commands
5.6.11 shdsl mode
Syntax
shdsl mode { co | cpe }

undo shdsl mode
View
Parameter
co: Sets to the central office (CO) mode.

cpe: Sets to the customer premises equipment (CPE) mode.
Description
Use the shdsl mode command to set the operating mode of the G.SHDSL interface.
Use the undo shdsl mode command to restore the default.
On a back-to-back connection, you must set one end to CO mode and the other end
to CPE mode.
By default, the G.SHDSL interface is operating in CPE mode.
Example
# Set the operating mode of interface ATM 1/0/0 to CO mode.

[H3C-Atm1/0/0] shdsl mode co
5.7 ADSL Interface Configuration Commands

5.7.1 activate
Syntax
activate
undo activate
View
ATM (ADSL) interface view
Parameter
None
Description
Use the activate command to activate the ADSL interface.
5-39
Comware V3 Commands
Use the undo activate command to deactivate the ADSL interface.

By default, the ADSL interface is active.
Before an ADSL interface can operate services, you must activate it. “ACTIVATE” in
this particular context refers to the training conducted between the ADSL central office
and the remote ATU-R. The activation procedure is specified in compliance with the
ADSL standard, channel mode, uplink and downlink speeds, and the noise tolerance
specified in the line configuration template. It will test the line distance and state,
make the central office and the remote device make negotiation, and confirm whether
the normal operation is allowed in the above conditions. If the training succeeds, the
central office and the remote device can set up a communication connection for
transporting services between them. This process is also called interface activation.
This connection will disappear upon the deactivation of the ADSL interface. To
transport new services, you must re-activate the interface.
This command is used to activate/deactivate an ADSL line manually for the purpose
of testing and troubleshooting.
The commands activate/undo activate and shutdown/undo shutdown are
different in the sense that the former can only take effect on ADSL lines.
You should note that ADSL is always on line, which is different from DCC. Therefore,
after the device is booted, the ADSL interface will automatically enable the activation
task and enter the active state. It will stay active so long as the line is in good condition.
The router tests the line performance at a regular interval and will automatically
deactivate the line and make a new training and re-activation once it finds out that the
line performance has been deteriorated.
Example
# Deactivate the ADSL interface.

[H3C-Atm1/0/0] undo activate
5.7.2 adsl standard
Syntax
adsl standard { auto | gdmt | glite | t1413 | g9923 | g9925 }

undo adsl standard
View
Parameter
auto: Auto-sensing mode.

gdmt: G.DMT (G992.1) standard.
5-40
Comware V3 Commands
glite: G.Lite (G992.2) standard.

t1413: T1.413 standard.
g9923: ADSL2 (G992.3) standard.
g9925: ADSL2+ (G992.5) standard.
Description
Use the adsl standard command to set the standard applied to the ADSL interface.
Use the undo adsl standard command to restore the default or auto.
Note that this configuration will not take effect unless you activate the interface again.
If you want to make it take effect immediately to execute the shutdown/undo
shutdown command or the activate/undo activate command.
Example
# Set the standard for the interface atm1/0/0 to T1.413.

[H3C-Atm1/0/0] adsl standard t1413
%Jan 1 00:02:15:140 2005 H3C PHY/2/PHY: Atm1/0: change status to up
%Jan 1 00:02:15:140 2005 H3C IFNET/5/UPDOWN:Line protocol on the interface
Atm1/0/0 is UP
[H3C-Atm1/0/0] display dsl configuration interface atm 1/0/0
Line Params Set by User or default

Standard: T1.413
Actual Config Near End Far End

Standard: T1.413 T1.413
Annex: AnnexA AnnexA
Trellis Coding: Enable Enable
Framing: 3 3
ADSL info:
Tx(US) Rx(DS)
K: 16 302
R: 0 8
S: 4 1
D: 2 16
DMT Bits Allocation Per Bin (Up/Down Bits:143/2595)

000: 0 0 0 0 0 0 0 0 0 2 4 5 6 7 7 7
010: 7 7 8 8 8 8 8 8 8 8 7 6 6 5 3 0
020: 0 2 3 5 5 6 7 7 8 7 9 9 a 9 a a
030: a b b b b c a a c c c d c 9 a d
5-41
Comware V3 Commands
040: 0 e d e b d e e d e e a e e e d
050: e d b d e e d e d c e e d e d d
060: e d e d e d c d d e d d e c d d
070: d d e d d d d e d d d c d d d e
080: d d c d d d d d c d d d d c d c
090: d c d c d c c d c c d c d c d c
0a0: c d c c c d c c c d c c c d c c
0b0: c d c c c c d c c c c c d c c c
0c0: c c c c c c c c c c c b c c b c
0d0: c b c b c b c b c b c b c b b c
0e0: b c 2 b c b a b a a b a a b a a
0f0: b a a b a a a a a a a 9 9 9 8 0
5.7.3 adsl tx_attenuation
Syntax
adsl tx_attenuation attenuation

undo adsl tx_attenuation
View
Parameter
attenuation: Attenuation value in the range 0 to 12. It defaults to 0.
Description
Use the adsl tx_attenuation command to set attenuation value for ADSL transmit
power.
Use the undo adsl tx_attenuation command to restore the default value.
Example
[H3C-Atm1/0/0] adsl tx_attenuation 10
5.7.4 display dsl configuration
Syntax
display dsl configuration interface atm interface-number
View
Any view
5-42
Comware V3 Commands
Parameter
Description
Use the display dsl configuration command to view the actual ADSL configurations.
Example
# Display the actual ADSL configurations.

[H3C-Atm1/0/0]display dsl configuration interface atm 1/0/0
Line Params Set by User or default

Standard: T1.413
Actual Config Near End Far End

Standard: T1.413 T1.413
Annex: AnnexA AnnexA
Trellis Coding: Enable Enable
Framing: 3 3
ADSL info:
Tx(US) Rx(DS)
K: 16 302
R: 0 8
S: 4 1
D: 2 16
DMT Bits Allocation Per Bin (Up/Down Bits:143/2595)

000: 0 0 0 0 0 0 0 0 0 2 4 5 6 7 7 7
010: 7 7 8 8 8 8 8 8 8 8 7 6 6 5 3 0
020: 0 2 3 5 5 6 7 7 8 7 9 9 a 9 a a
030: a b b b b c a a c c c d c 9 a d
040: 0 e d e b d e e d e e a e e e d
050: e d b d e e d e d c e e d e d d
060: e d e d e d c d d e d d e c d d
070: d d e d d d d e d d d c d d d e
080: d d c d d d d d c d d d d c d c
090: d c d c d c c d c c d c d c d c
0a0: c d c c c d c c c d c c c d c c
0b0: c d c c c c d c c c c c d c c c
0c0: c c c c c c c c c c c b c c b c
0d0: c b c b c b c b c b c b c b b c
0e0: b c 2 b c b a b a a b a a b a a
5-43
Comware V3 Commands
0f0: b a a b a a a a a a a 9 9 9 8 0
Table 5-7 Description on the output of the display dsl configuration command
Field Description
Line parameters at ATU-R end. Among these
Line Params Set by User parameters, you can only modify the standard for
special testing or diagnosis, but not the others.
The following information appears after the link is activated.
Actual Config Real operating parameters after the link is activated
ADSL parameters, which are displayed only when
ADSL info
they are different from ADSL2 info
ADSL2 parameters, which are displayed only when
ADSL2 info
they are different from ADSL info
DMT Bits Allocation Per Bin Bits allocated to and carried by each bin.
5.7.5 display dsl status
Syntax
display dsl status interface atm interface-number
View
Any view
Parameter
Description
Use the display dsl status command to view the DSL state information.
Example
# Display state about the ADSL on interface ATM 1/0/0.

[H3C-Atm1/0/0]display dsl status interface atm 1/0/0
Active Params Near End Far End
SNR Margin(dB): 11.3 13.0
Attn(dB): 2.5 0.0
Pwr(dBm): 12.4 7.8
Current Rate(kbps): 320 7648
Current ADSL Status: NoDefect NoDefect
ADSL Count Tx Rx
5-44
Comware V3 Commands
total RS: 0 20587812

RSCorr: 0 994935
RSUnCorr: 0 100823
SF: 302759 302761
SFErr: 190580 57576
ATM Count Tx Rx
HEC: 0 0
OCD: 0 0
LCD: 0 0
ES: 0 0
Total Cells: 0 15802440
Data Cells: 0 0
Dropped Cells: 0 0
Error Bits: 0 0
Table 5-8 Description on the output of the display dsl status command
Field Description
Parameters and indices, such as SNR margin and attenuation,
Active Params
for the line at both near end and far end.
Error and correction statistics from the chipset about errors and
corrects for ADSL, including:
Total RS: Total number of RS frames
Adsl Count RSCorr: Count of correctable RS frame errors
RSUnCorr: Count of uncorrectable RS frame errors
SF: Count of SF frames
SFErr: Count of SF errors
ATM Count Statistics from the chipset about errors and corrections for ATM.
5.7.6 display dsl version
Syntax
display dsl version interface atm interface-number
View
Any view
Parameter
5-45
Comware V3 Commands
Description
Use the display dsl version command to view DSL version and the available
capabilities.
Example
# Display the ADSL version information.

[H3C-Atm1/0/0] display dsl version interface atm 1/0/0
Adsl board chipset and version info:

Dsl Line Type: Adsl Over Pots
Chipset Vendor: BDCM
FW Release: A2pB017l.d15h
DSP Version: 17.1200
AFE Version: 1.0
PCB Version: 10.0
CPLD Version: 1.0
Driver Version: 1.0
Hardware Version: 1.0
Adsl Capability
ANNEX Supported :
ANNEX A
Standard Supported :
ANSI T1.413 Issue 2
ITU G992.1(G.dmt)
ITU G992.2(G.lite)
ITU G992.3(Adsl2)
ITU G992.3(ReAdsl2)
ITU G992.5(Adsl2p)
Table 5-9 Description on the output of the display adsl version command
Field Description
Adsl board chipset and The components of the interface board and the
version info version
DSL line Type Type of the user access line
Chipset Vendor Identifier of the ADSL chipset vendor
FW Release Identifier and version of the firmware
DSP Version —
AFE Version —
5-46
Comware V3 Commands
Field Description
PCB Version —
Driver Version Version of the driver software

CPLD Version Version of the logic
Adsl Capability The standard and annex supported by the interface.
5.7.7 dsl link-check
Syntax
dsl link-check enable

dsl link-check disable
View
Parameter
None
Description
Use the dsl link-check enable command to enable retraining upon detection of a
Use the dsl link-check disable command to disable retraining upon detection of a
By default, retraining upon detection of a major fault is enabled.
The dsl link-check enable command is intended only for hardware debugging. After
it is configured, even a link disruption cannot cause interface retraining.
Example
# Enable retraining upon detection of a major fault on an interface.

[H3C-Atm3/0/0] dsl link-check enable
5.7.8 upgrade flash
Syntax
upgrade flash file-name { full | part }
View
5-47
Comware V3 Commands
Parameter
file-name: File name read from Flash.

full: Updates the whole image.
part: Updates part of the mirror.
Description
Use the upgrade flash command to upgrade the software of ADSL2+ card. To have
the upgraded software take effect, reboot the router.
This command is valid for ADSL2+ cards and ADSL 7074 card installed with CPUs
only.
Before upgrading the current software of ADSL2+ card, you need first FTP or load the
new software by other means to the Flash of the router and then save it as a file
named bcm6348.bin. This file is then used for upgrading ADSL2+ card software.
Example
# Upgrade the whole mirror of the card using the bcm6348.bin file.
[H3C-Atm1/0/0] upgrade flash bcm6348.bin full
5-48
Command Manual – Interface Chapter 6 Fundamental Logical Interface
Chapter 6 Fundamental Logical Interface

This chapter only discusses basic configuration of logical interfaces. For configuration
of link and network layer protocols, refer to the relevant parts in this manual.
6.1 WAN Subinterface Configuration Commands

6.1.1 interface
Syntax
interface interface-type interface-number.subinterface-number [ p2mp | p2p ]

undo interface interface-type interface-number.subinterface-number
View
System view
Parameter

subinterface-number: Number of subinterface.
p2mp: Sets the type of the subinterface to point to multipoint. It is the default
subinterface type.
p2p: Sets the type of the subinterface to point to point.
Description
Use the interface command to create a P2MP or P2P subinterface.

Use the undo interface command to delete the specified subinterface.
By default, the type of subinterface is point to multipoint.
You may configure point to multipoint or point to point subinterfaces on interfaces that
are ATM or on interfaces encapsulated with Frame Relay or X.25.
The number of subinterfaces you can create on an interface depends on the model of
your router.
Example
# Create a subinterface on ATM interface 2/0/0.

<H3C> system-view
[H3C] interface atm 2/0/0.1
6-1
[H3C-Atm2/0/0.1]
6.2 Ethernet Subinterface Configuration Commands

6.2.1 display vlan
Syntax
display vlan [ vlan_id [ to ] vlan_id | all ]
View
Any view
Parameter
vlan_id: Specifies a VLAN by its VLAN ID, which is defined in IEEE802.1Q, in the
range 1 to 4094. It defaults to 1.
all: Displays information on all VLANs.
Description
Use the display vlan command to view information on VLANs.

If vlan_id or all is specified, information on the specified VLAN or all VLANs is
displayed including VLAN ID and the included ports.
If no parameter is specified, all VLAN lists that have been created in the system is are
displayed.
Example
# Display information on VLAN 2.

<H3C> display vlan 2
VLAN ID: 2
Tagged Ports: none
Untagged Ports:
Ethernet1/0/1 Ethernet1/0/2 Ethernet1/0/3
Table 6-1 Description on the information on VLAN2
Field Description
VLAN ID ID of the VLAN
Tagged Ports Indicates on which ports the VLAN packet should be tagged.
Untagged Ports Indicates on which ports the VLAN packet is not to be tagged.
6-2
6.2.2 display vlan interface
Syntax
display vlan interface interface-type interface-num
View
Any view
Parameter
interface-type interface-num: Specifies the interface. At present, the interface types

supported include Ethernet interface and Gigabit Ethernet interface, and it only
supports sub-interface.
Description
Use the display vlan interface command to view VLAN configuration information on
a certain interface (only supporting sub-interface).
Example
# Display the VLAN configuration information at the Ethernet interface 2/0/0.1.

<H3C> display vlan interface ethernet 2/0/0.1
encapsulation dot1q vid 60
6.2.3 display vlan max-packet-process
Syntax
display vlan max-packet-process vid
View
Any view
Parameter
vid: VLAN ID, used to identify a VLAN.
Description
Use the display vlan max-packet-process command to view the maximum number
of processed packets configured on a certain VLAN per second.
Related command: max-packet-process.
Example
# Display the maximum number of processed packets configured on the VLAN 10.
<H3C> display vlan max-packet-process 10
6-3
Max Packet Process Count for Vid 10 is 300000
6.2.4 display vlan statistics vid
Syntax
display vlan statistics vid vid
View
Any view
Parameter
Description
Use the display vlan statistics vid command to view the packet statistics on a
certain VLAN, e.g. the received packet number and the sent packet number.
Related command: reset vlan statistics interface.
Example
# Display the packet statistics on VLAN 10.

<H3C> display vlan statistics vid 10
Packets received: 53
Packets transmitted: 14
6.2.5 interface ethernet
Syntax
interface ethernet interface-number.subinterface-number

undo interface ethernet interface-number.subinterface-number
View
System view
Parameter

subinterface-number: Subinterface number, in the range 1 to 4096 for the AR 28
series and the AR 46 series, and 0 to 100 for the AR 18 series.
Description
Use the interface ethernet command to create an Ethernet subinterface.
6-4
Use the undo interface ethernet command to delete the specified Ethernet
subinterface.
Example
# Create a subinterface on Ethernet interface 1/0/0.

[H3C] interface ethernet 1/0/0.1
[H3C-Ethernet1/0/0.1]
6.2.6 max-packet-process
Syntax
max-packet-process count vid

undo max-packet-process vid
View
System view
Parameter
count: Maximum number of processed packets.

Description
Use the max-packet-process command to set the maximum number of processed

packets per second on a certain VLAN.
Use the undo max-packet-process command to restore it to the default setting.
By default, the system has no limitation of the maximum number of processed
packets.
After setting the maximum number of processed packets per second on a certain
VLAN, and the received packet number belonging to this VLAN reaches the limitation,
the subsequently received packets belonging to the VLAN will be discarded. Through
this command, you can perform flow control.
Related command: display vlan max-packet-process.
Example
# Set the maximum number of processed packets per second on the VLAN 10 as
200000.
[H3C] max-packet-process 200000 10
6-5
6.2.7 reset vlan statistics vid
Syntax
reset vlan statistics vid vid
View
User view
Parameter
Description
Use the reset vlan statistics vid command to clear the VLAN statistics.
Related command: display vlan statistics vid.
Example
# Clear the statistics with VLAN ID 10.

<H3C> reset vlan statistics vid 10
6.2.8 vlan-type dot1q
Syntax
vlan-type dot1q vid vid
View
Interface view
Parameter
vid: VLAN ID identifying a VLAN. Its value range varies with device model.
Description
Use the vlan-type dot1q command to set the encapsulation types on the
sub-interface.
By default, there is no encapsulation on the subinterface, nor VLAN ID related to the
subinterface.
Related command: display vlan interface.
Example
# Set the Ethernet sub-interface 2/0/0.1 to be related to VLAN ID 60, and its
encapsulation format is dot1q.
[H3C-Ethernet2/0/0.1] vlan-type dot1q vid 60
6-6
6.3 Logical Channel Interface

6.3.1 interface logic-channel
Syntax
interface logic-channel interface-number

undo interface logic-channel interface-number
View
System view
Parameter
interface-number: Number of the logical channel interface, in range 0 to 1023.
Description
Use the interface logic-channel command to create a logical channel interface.

Use the undo interface logic-channel command to delete the specified logical
channel interface.
Once created, the logical channel interface will maintain the UP state until deleted.
Example
# Create the logical channel interface 100.

[H3C] interface logic-channel 100
[H3C-Logic-Channel100]
6.4 Configuration Commands of Virtual Template and Virtual

Access Interface
6.4.1 broadcast-limit link
Syntax
broadcast-limit link number

undo broadcast-limit link
View
Virtual template view
Parameter
number: Maximum number of links that the virtual template supports for sending
multicast or broadcast packets. It is in the range 0 to 128 and defaults to 30.
6-7
Description
Use the broadcast-limit link command to configure the maximum number of links
that the virtual template supports for sending multicast or broadcast packets.
Use the undo broadcast-limit link command to restore the default.
When there are many links on the virtual template, sending multicast or broadcast
packets from each link may influence the function of the system. In this case, the
broadcast-limit link command can be used for limitation, so that multicast or
broadcast packet will be discarded if link number exceeds the limitation.
Example
# Configure maximum link number of virtual template 1 supporting sending multicast

or broadcast packet to be 100.
[H3C] interface virtual-template 1
[H3C-Virtual-Template1] broadcast-limit link 100
6.4.2 display interface virtual-template
Syntax
display interface virtual-template [ number ]
View
Any view
Parameter
virtual-template: Virtual template.

number: Number of the virtual template, in the range 0 to 1023. If no virtual template is
specified, the state about all virtual templates is displayed.
Description
Use the display interface virtual-template command to view the state about the
specified or all virtual templates.
Example
# View the state about the specified virtual template.

<H3C> display interface virtual-template 1
6-8
6.4.3 display virtual-access
Syntax
display virtual-access { dialer [ number ] | vt [ vt-number ] | user user-name | peer

peer-address | va-number }*
View
Any view
Parameter
dialer number: Dialer interface number. The Virtual-access interface created by

PPPoE client can not be displayed. Therefore, you cannot use the above command to
view it.
vt-number: Number of the virtual template to which the virtual access interface is
assigned.
user-name: Login username of virtual access interface.
peer-address: Peer address of the virtual access interface.
va-number: Sequence number of the virtual access interface.
Description
Use the display virtual-access command to view state information about the
specified or all virtual access interfaces.
For VT and dialer interfaces used in MP, PPPoE, and PPPoA, the system may create
virtual access interfaces depending on link state. Thus, to check their link state, you
must use the display virtual-access command.
Example
# Display state information about all virtual access interfaces.

<H3C> display virtual-access vt
Virtual-Template1:0 current state :UP
Description : Virtual-Template1:0 Interface
LCP opened, MP opened, IPCP opened, OSICP opened
Physical is MP, baudrate: 64000
Last 300 seconds input: 0 bytes/sec 0 packets/sec
Last 300 seconds output: 0 bytes/sec 0 packets/sec
6-9
4 packets input, 50 bytes, 0 drops

4 packets output, 50 bytes, 0 drops
6.4.4 interface virtual-template
Syntax
interface virtual-template number

undo interface virtual-template number
View
System view
Parameter
number: Number of the virtual template, in the range 0 to 1023.
Description
Use the interface virtual-template command to create a virtual template or enter the
existing virtual template view.
Use the undo interface virtual-template command to delete the specified virtual
template.
You must create a virtual template before creating virtual access interfaces and
disable it after disabling the virtual access interface.
In deleting a virtual template, make sure that all its virtual access interfaces have been
removed and this virtual template is not in use any more.
Example
# Create virtual template 10.

[H3C-Virtual-Template10]
6.5 MP-Group Interface Configuration Commands

6.5.1 display interface mp-group
Syntax
display interface mp-group [ number ]
View
Any view
6-10
Parameter
number: Number of the MP-group interface. If no MP-group interface is specified, the

state about all MP-group interfaces is displayed.
Description
Use the display interface mp-group command to view the state about the specified
or all MP-group interfaces.
Example
# Display the state about all MP-group interfaces.

<H3C> display interface mp-group
6.5.2 interface mp-group
Syntax
interface mp-group number

undo interface mp-group number
View
System view
Parameter
number: Number of MP-group interface, in the range 0 to 1023. That is, an interface
board supports up to 1024 MP-group interfaces.
Description
Use the interface mp-group command to create an MP-group interface.

Use the undo interface mp-group command to delete the specified MP-group
interface.
Use this command in conjunction with the ppp mp mp-group command to create an
MP-group interface and add an interface to it. These two tasks are order independent.
Example
# Create MP-group interface 3.

[H3C] interface mp-group 3
[H3C-mp-group 3]
6-11
6.6 Virtual Ethernet Interface Configuration Commands

6.6.1 display interface virtual-ethernet
Syntax
display interface virtual-ethernet [ number ]
View
Any view
Parameter
number: Number of the virtual Ethernet interface, in the range 0 to 1023. If no

interface is specified, the state about all virtual Ethernet interfaces is displayed.
Description
Use the display interface virtual-ethernet command to view the state about of the
specified or all virtual Ethernet interfaces.
Example
# View the state about virtual Ethernet interface 1.

<H3C> display interface virtual-ethernet 1
6.6.2 interface virtual-ethernet
Syntax
interface virtual-ethernet number

undo interface virtual-ethernet number
View
System view
Parameter
number: Number of virtual Ethernet interface, in the range 0 to 1023.
Description
Use the interface virtual-ethernet command to create a virtual Ethernet interface.

Use the undo interface virtual-ethernet command to delete the specified virtual
Ethernet interface.
Virtual Ethernet interfaces are mainly applied to PPPoE, PPPoEoA and IPoEoA.
6-12
Example
# Create virtual Ethernet interface 12.

[H3C] interface virtual-ethernet 12
[H3C-Virtual-Ethernet12]
6.6.3 mac-address
Syntax
mac-address H-H-H
undo mac-address
View
Virtual Ethernet interface view
Parameter
H-H-H: Mac address of virtual Ethernet interface, in hexadecimal format.
Description
Use the mac-address command to configure Mac address of virtual Ethernet

interface.
Use the undo mac-address command to restore the default.
Example
# Configure MAC address of virtual Ethernet interface 10.

[H3C-Virtual-Ethernet10/0/0] mac-address 1000-1000-1000
6.7 Configuration Command of Loopback Interface and Null

Interface
6.7.1 display interface loopback
Syntax
display interface loopback [ number ]
View
Any view
Parameter
number: Number of loopback interface, which must have been created. If no loopback
interface is specified, state about all created loopback interfaces is displayed.
6-13
Description
Use the display interface loopback command to view state about the specified or all
created loopback interfaces.
Related command: interface loopback.
Example
# View state about the specified loopback interface.

<H3C> display interface loopback 0
LoopBack0 current state :UP
Line protocol current state :UP (spoofing)
Description : LoopBack0 Interface
Physical is Loopback
6.7.2 display interface null
Syntax
display interface null [ 0 ]
View
Any view
Parameter
0: Number of null interface, fixed as 0.
Description
Use the display interface null command to view the state about the null interface.
Whether you specify the keyword does not affect the result.
Related command: interface null.
Example
# View the state about null 0 interface.

<H3C> display interface null 0
NULL0 current state :UP
Line protocol current state :UP (spoofing)
Description : NULL0 Interface
6-14

Physical is NULL DEV
6.7.3 interface loopback
Syntax
interface loopback number

undo interface loopback number
View
System view
Parameter
number: Number of the loopback interface, in the range 0 to 65535.
Description
Use the interface loopback command to create a loopback interface or its view.
Use the undo interface loopback command to delete the specified loopback
interface.
After created, the loopback interface keeps up until it is shutdown. As it has the
loopback feature, it is often used to improve reliability.
You can shut down a loopback interface using the shutdown command. When you do
this, “Line protocol current state :UP (spoofing)” is displayed describing the current
state of the link layer protocol on the interface.
Related command: display interface loopback.
Example
# Create loopback interface 5.

[H3C-LoopBack5]
6.7.4 interface null
Syntax
interface null 0
6-15
View
System view
Parameter
None
Description
Use the interface null command to enter null interface view.

There is only one null interface, that is, null 0, which always keeps up, and cannot be
shut down or deleted.
Related command: display interface null.
Example
# Enter the view of null 0 interface.

[H3C] interface null 0
[H3C-NULL0]
6-16
Comware V3 Chapter 7 OSM Configuration Commands
Chapter 7 OSM Configuration Commands
7.1 display osm status slot

Syntax
display osm status slot slotnum
View
Any view
Parameter
slotnum: Number of the slot where the OSM board is in.
Description
Use the display osm status slot command to view the information about the OSM
board in the specified slot, including name of the board, board status, OS name, OS
version and running time of OS.
Example
# Display information of OSM board in slot3.

<H3C> display osm status slot 3
Module name is OSM
Module status is Normal
Getting module OS information, please wait...
Module OS information:
OS name is Linux
OS version is 2.4.20-8custom
OS uptime is 0 weeks, 0 days, 0 hours, 4 minutes
# If the above information cannot be displayed, the system displays the following:
<H3C>display osm status slot 3
Module name is OSM
Module status is Normal
Getting module OS information, please wait...
Fail to get module OSM information!
7-1
Table 7-1 Description on fields in the output of the display osm status slot
command
Field Description
Module name Name of the board
Module status, falling into six categories: Booting,
Module status Normal, Heart Beat Error, Link Error, Shutting and
Shutdown
OS name Name of the operating system
OS version Version of the operating system
OS uptime Running time of the operating system
7.2 osm connect slot

Syntax
osm connect slot slotnum
View
User view
Parameter
slotnum: Number of the slot where the OSM card is in.
Description
Use the osm connect slot command to connect the current control terminal to the
OSM board to manage the system on the OSM board. If you want to return from the
OSM board to the operation interface on the router, click hot key <Ctrl+K>.
Example
# Connect the current control terminal of the router to the OSM board in slot3.
<H3C> osm connect slot 3
Connected to OSM
Red Hat Linux release 9 (Shrike)
Kernel 2.4.20-8custom on an i686
localhost.localdomain login: root
Password:
Last login: Tue Jul 4 14:11:14 on ttyS0
You have new mail.
[root@localhost root]#
7-2
7.3 osm reboot slot

Syntax
osm reboot slot slotnum
View
User view
Parameter
Description
Use the osm reboot slot command to reset the OSM board, which equals to
resetting by pressing the reset button.
Note that before performing this operation, save the service data on Linux operating
system and shut it down to avoid service broken down and hardware data loss. After
resetting, the operating system of the OSM board reboots.
Related command: osm reload slot and osm shutdown slot.
Example
# Reset the OSM board in slot3.

<H3C> osm reboot slot 3
This command will recover the OSM from shutdown or other failed state.
Warning: This command may lose the data on the hard disk if the OSM is not
being shut down!
Continue? [Y/N] y
Reboot OSM by command.
7.4 osm reload slot

Syntax
osm reload slot slotnum
View
User view
Parameter
Description
Use the osm reload slot command to restart the operating system on OSM board.
7-3
Note the service interruption resulting from restart of the operating system.
Related command: osm reboot slot and osm shutdown slot.
Example
# Restart the operating system of the OSM board in slot3.

<H3C>osm reload slot 3
This command will reload the OSM.
Continue? [Y/N]y
Reload OSM by command.
7.5 osm shutdown slot

Syntax
osm shutdown slot slotnum
View
User view
Parameter
Description
Use the osm shutdown slot command to shut down the operating system on OSM
board. This operation equals to execute the turn off command on the operating
system of OSM board.
Related command: osm reboot slot and osm reload slot.
Example
# Shut down the operating system of the OSM board in slot3.

<H3C> osm shutdown slot 3
This command will shutdown the OSM.
Continue? [Y/N]y
OSM is being shutdown. You can use reboot command to recover from shutdown.
7.6 sync-clock enable

Syntax
sync-clock enable
undo sync-clock enable
7-4
View
GigabitEthernet interface view
Parameter
None
Description
Use the sync-clock enable command to enable clock synchronization between the
router and the OSM board.
Use the undo sync-clock enable command to disable clock synchronization
between the router and the OSM board.
By default, clock synchronization between the router and the OSM board is disabled.
Related command: sync-clock interval.
Example
# Enable clock synchronization between the router and the OSM board in slot3/0/0.
[H3C-GigabitEthernet3/0/0]sync-clock enable
# Disable clock synchronization between the router and the OSM board in slot3/0/0.
[H3C-GigabitEthernet3/0/0]undo sync-clock enable
7.7 sync-clock interval

Syntax
sync-clock interval inte-value
View
GigabitEthernet interface view
Parameter
inte-value: Clock synchronization interval, ranging from 1 to 1440 minutes, defaults to

1 minute.
Description
Use the sync-clock interval command to set clock synchronization interval between
the router and the OSM board.
Related command: sync-clock enable.
Example
# Set the clock synchronization interval between the router and the OSM board in
slot3/0/0 to five minutes.
7-5
[H3C-GigabitEthernet3/0/0]sync-clock interval 5
7-6
Link Layer Protocol
Command Manual – Link Layer Protocol
Table of Contents
Chapter 1 PPP and MP Configuration Commands .................................................................... 1-1

1.1 PPP and MP configuration commands.............................................................................. 1-1
1.1.1 debugging ppp { all | cbcp | ccp | scp }.................................................................... 1-1
1.1.2 debugging ppp { chap | pap } .................................................................................. 1-2
1.1.3 debugging ppp { core | ip | ipcp | lcp | lqc | mp } ..................................................... 1-2
1.1.4 display ppp mp ........................................................................................................ 1-3
1.1.5 link-protocol ppp ...................................................................................................... 1-5
1.1.6 ppp mp binding-mode ............................................................................................. 1-6
1.1.7 ppp authentication-mode......................................................................................... 1-7
1.1.8 ppp chap password ................................................................................................. 1-8
1.1.9 ppp chap user.......................................................................................................... 1-9
1.1.10 ppp ipcp dns ........................................................................................................ 1-10
1.1.11 ppp ipcp dns admit-any ....................................................................................... 1-11
1.1.12 ppp ipcp remote-address forced ......................................................................... 1-11
1.1.13 ppp ipcp dns request........................................................................................... 1-12
1.1.14 ppp lcp mru consistent ........................................................................................ 1-13
1.1.15 ppp lqc................................................................................................................. 1-14
1.1.16 ppp mp ................................................................................................................ 1-15
1.1.17 ppp mp mp-group................................................................................................ 1-16
1.1.18 ppp mp lfi............................................................................................................. 1-16
1.1.19 ppp mp max-bind ................................................................................................ 1-17
1.1.20 ppp mp min-bind ................................................................................................. 1-18
1.1.21 ppp mp min-fragment .......................................................................................... 1-19
1.1.22 ppp mp user ........................................................................................................ 1-20
1.1.23 ppp mp sort-buffer-size ....................................................................................... 1-20
1.1.24 ppp mp virtual-template....................................................................................... 1-21
1.1.25 ppp pap local-user............................................................................................... 1-22
1.1.26 ppp timer negotiate ............................................................................................. 1-23
1.1.27 timer hold............................................................................................................. 1-23
1.2 PPP Link Efficiency Mechanism Commands................................................................... 1-24
1.2.1 debugging ppp compression iphc rtp .................................................................... 1-24
1.2.2 debugging ppp compression iphc tcp ................................................................... 1-25
1.2.3 display ppp compression iphc rtp.......................................................................... 1-25
1.2.4 display ppp compression iphc tcp ......................................................................... 1-26
1.2.5 display ppp compression stac-lzs ......................................................................... 1-26
1.2.6 ip tcp vjcompress................................................................................................... 1-27
1.2.7 ppp compression iphc ........................................................................................... 1-28
1.2.8 ppp compression iphc rtp-connections ................................................................. 1-29
i
1.2.9 ppp compression iphc tcp-connections................................................................. 1-29

1.2.10 ppp compression stac-lzs.................................................................................... 1-30
1.2.11 ppp mp lfi............................................................................................................. 1-31
1.2.12 ppp mp lfi delay-per-frag ..................................................................................... 1-32
1.2.13 reset ppp compression iphc ................................................................................ 1-32
1.2.14 reset ppp compression stac-lzs........................................................................... 1-33
Chapter 2 PPPoE Configuration Commands.............................................................................. 2-1

2.1 PPPoE Server Configuration Commands.......................................................................... 2-1
2.1.1 display pppoe-server session.................................................................................. 2-1
2.1.2 pppoe-server bind virtual-template.......................................................................... 2-2
2.1.3 pppoe-server log-information off ............................................................................. 2-3
2.1.4 pppoe-server max-sessions local-mac ................................................................... 2-3
2.1.5 pppoe-server max-sessions remote-mac................................................................ 2-4
2.1.6 pppoe-server max-sessions total ............................................................................ 2-5
2.1.7 reset pppoe-server .................................................................................................. 2-5
2.2 PPPoE Client Configuration Commands ........................................................................... 2-6
2.2.1 debugging pppoe-client........................................................................................... 2-6
2.2.2 display pppoe-server session.................................................................................. 2-7
2.2.3 pppoe-client............................................................................................................. 2-8
2.2.4 reset pppoe-client.................................................................................................... 2-9
Chapter 3 ISDN Configuration Commands ................................................................................. 3-1

3.1 ISDN Configuration Commands ........................................................................................ 3-1
3.1.1 datetime local .......................................................................................................... 3-1
3.1.2 debugging isdn ........................................................................................................ 3-1
3.1.3 dialer isdn-leased (ISDN BRI Leased Line Configuration)...................................... 3-2
3.1.4 display interface bri ................................................................................................. 3-3
3.1.5 display isdn active-channel ..................................................................................... 3-4
3.1.6 display isdn call-info ................................................................................................ 3-5
3.1.7 display isdn call-record............................................................................................ 3-8
3.1.8 display isdn parameters .......................................................................................... 3-9
3.1.9 display isdn spid .................................................................................................... 3-10
3.1.10 enable deactivate ................................................................................................ 3-12
3.1.11 isdn bch-local-manage ........................................................................................ 3-13
3.1.12 isdn bch-select-way............................................................................................. 3-14
3.1.13 isdn caller-number............................................................................................... 3-14
3.1.14 isdn calling........................................................................................................... 3-15
3.1.15 channel-set timeslot (for ISDN BRI Leased Line) ............................................... 3-15
3.1.16 isdn check-called-number ................................................................................... 3-17
3.1.17 isdn crlength ........................................................................................................ 3-17
3.1.19 isdn ignore connect-ack ...................................................................................... 3-20
3.1.20 isdn ignore hlc ..................................................................................................... 3-21
ii
3.1.21 isdn ignore llc ...................................................................................................... 3-22

3.1.22 isdn ignore sending-complete ............................................................................. 3-23
3.1.23 isdn L3-timer........................................................................................................ 3-24
3.1.24 isdn number-property .......................................................................................... 3-25
3.1.25 isdn overlap-sending ........................................................................................... 3-32
3.1.26 isdn pri-slipwnd-size............................................................................................ 3-33
3.1.27 isdn protocol-mode.............................................................................................. 3-33
3.1.28 isdn protocol-type................................................................................................ 3-34
3.1.29 isdn q921-permanent .......................................................................................... 3-35
3.1.30 isdn send-restart ................................................................................................. 3-36
3.1.31 isdn spid auto_trigger.......................................................................................... 3-37
3.1.32 isdn spid nit ......................................................................................................... 3-37
3.1.33 isdn spid timer ..................................................................................................... 3-38
3.1.34 isdn spid service.................................................................................................. 3-39
3.1.35 isdn spid resend .................................................................................................. 3-40
3.1.36 isdn spid1 ............................................................................................................ 3-40
3.1.37 isdn spid2 ............................................................................................................ 3-41
3.1.38 isdn statistics ....................................................................................................... 3-42
3.1.39 isdn two-tei .......................................................................................................... 3-44
Chapter 4 SLIP Configuration Commands ................................................................................. 4-1

4.1 SLIP Configuration Commands ......................................................................................... 4-1
4.1.1 debugging slip ......................................................................................................... 4-1
4.1.2 link-protocol slip....................................................................................................... 4-1
Chapter 5 HDLC Configuration Commands ............................................................................... 5-1

5.1 HDLC Configuration Commands ....................................................................................... 5-1
5.1.1 link-protocol hdlc ..................................................................................................... 5-1
5.1.2 timer hold................................................................................................................. 5-1
Chapter 6 Frame Relay Configuration Commands .................................................................... 6-1

6.1 Frame Relay Configuration Commands ............................................................................ 6-1
6.1.1 annexg..................................................................................................................... 6-1
6.1.2 x25 template............................................................................................................ 6-1
6.1.3 debugging fr ............................................................................................................ 6-2
6.1.4 debugging fr compress............................................................................................ 6-4
6.1.5 debugging fr compression....................................................................................... 6-5
6.1.6 debugging fr pvc-group ........................................................................................... 6-5
6.1.7 debugging pppofr .................................................................................................... 6-6
6.1.8 display fr compress ................................................................................................. 6-7
6.1.9 display fr dlci-switch ................................................................................................ 6-8
6.1.10 display fr inarp-info................................................................................................ 6-8
6.1.11 display fr interface ................................................................................................. 6-9
6.1.12 display fr lmi-info ................................................................................................. 6-10
iii
6.1.13 display fr map-info............................................................................................... 6-11

6.1.14 display fr map-info pppofr.................................................................................... 6-12
6.1.15 display fr pvc-group............................................................................................. 6-13
6.1.16 display fr pvc-info ................................................................................................ 6-15
6.1.17 display fr statistics ............................................................................................... 6-16
6.1.18 display interface mfr ............................................................................................ 6-17
6.1.19 display mfr ........................................................................................................... 6-19
6.1.20 fr bump ................................................................................................................ 6-22
6.1.21 fr compression frf9 .............................................................................................. 6-22
6.1.22 fr compression iphc ............................................................................................. 6-23
6.1.23 fr dlci.................................................................................................................... 6-24
6.1.24 fr dlci-switch......................................................................................................... 6-24
6.1.25 fr inarp ................................................................................................................. 6-25
6.1.26 fr interface-type ................................................................................................... 6-26
6.1.27 fr iphc................................................................................................................... 6-27
6.1.28 fr ip-dscp.............................................................................................................. 6-28
6.1.29 fr ip-precedence .................................................................................................. 6-29
6.1.30 fr lmi n391dte....................................................................................................... 6-30
6.1.31 fr lmi n392dce...................................................................................................... 6-31
6.1.32 fr lmi n392dte....................................................................................................... 6-32
6.1.33 fr lmi n393dce...................................................................................................... 6-33
6.1.34 fr lmi n393dte....................................................................................................... 6-34
6.1.35 fr lmi t392dce....................................................................................................... 6-35
6.1.36 fr lmi type............................................................................................................. 6-35
6.1.37 fr map ip .............................................................................................................. 6-36
6.1.38 fr map ipx............................................................................................................. 6-38
6.1.39 fr map ppp interface virtual-template .................................................................. 6-39
6.1.40 fr match ............................................................................................................... 6-39
6.1.41 fr mpls-exp........................................................................................................... 6-40
6.1.42 fr pvc-group ......................................................................................................... 6-41
6.1.43 fr pvc-protect ....................................................................................................... 6-41
6.1.44 fr switch ............................................................................................................... 6-43
6.1.45 fr switching .......................................................................................................... 6-44
6.1.46 interface mfr ........................................................................................................ 6-44
6.1.47 interface serial [ p2p | p2mp ].............................................................................. 6-45
6.1.48 link-protocol fr...................................................................................................... 6-46
6.1.49 link-protocol fr mfr ............................................................................................... 6-46
6.1.50 mfr bundle-name ................................................................................................. 6-47
6.1.51 mfr fragment ........................................................................................................ 6-48
6.1.52 mfr fragment-size ................................................................................................ 6-48
6.1.53 mfr link-name....................................................................................................... 6-49
6.1.54 mfr retry ............................................................................................................... 6-50
iv
6.1.55 mfr timer ack........................................................................................................ 6-51

6.1.56 mfr timer hello...................................................................................................... 6-51
6.1.57 mfr window-size................................................................................................... 6-52
6.1.58 shutdown ............................................................................................................. 6-52
6.1.59 reset fr inarp ........................................................................................................ 6-53
6.1.60 timer hold............................................................................................................. 6-54
Chapter 7 ATM Configuration Commands.................................................................................. 7-1

7.1 ATM Configuration Commands ......................................................................................... 7-1
7.1.1 atm-class ................................................................................................................. 7-1
7.1.2 atm class ................................................................................................................. 7-1
7.1.3 atm-ctt ..................................................................................................................... 7-2
7.1.4 atm-link check ......................................................................................................... 7-3
7.1.5 bump ....................................................................................................................... 7-3
7.1.6 cell-packing ............................................................................................................. 7-4
7.1.7 clock ........................................................................................................................ 7-5
7.1.8 debugging atm all .................................................................................................... 7-6
7.1.9 debugging atm error................................................................................................ 7-7
7.1.10 debugging atm event............................................................................................. 7-8
7.1.11 debugging atm packet........................................................................................... 7-9
7.1.12 display atm class ................................................................................................. 7-10
7.1.13 display atm interface ........................................................................................... 7-11
7.1.14 display atm map-info ........................................................................................... 7-12
7.1.15 display atm pvc-group ......................................................................................... 7-13
7.1.16 display atm pvc-info ............................................................................................ 7-15
7.1.17 encapsulation ...................................................................................................... 7-17
7.1.18 ip-dscp................................................................................................................. 7-18
7.1.19 ip-precedence...................................................................................................... 7-19
7.1.20 map bridge .......................................................................................................... 7-20
7.1.21 map bridge-group................................................................................................ 7-21
7.1.22 map ip.................................................................................................................. 7-22
7.1.23 map ppp .............................................................................................................. 7-23
7.1.24 map routed-bridge............................................................................................... 7-24
7.1.25 match................................................................................................................... 7-25
7.1.26 mpls-exp.............................................................................................................. 7-26
7.1.27 mtu ...................................................................................................................... 7-27
7.1.28 oam ais-rdi........................................................................................................... 7-28
7.1.29 oam frequency..................................................................................................... 7-29
7.1.30 oamping interface................................................................................................ 7-30
7.1.31 packing timer ....................................................................................................... 7-31
7.1.32 pvc....................................................................................................................... 7-31
7.1.33 pvc-group ............................................................................................................ 7-33
7.1.34 pvc max-number.................................................................................................. 7-33
v
7.1.35 pvc-protect........................................................................................................... 7-35

7.1.36 pvp create............................................................................................................ 7-36
7.1.37 pvp limit ............................................................................................................... 7-37
7.1.38 routed-bridge protocol ......................................................................................... 7-38
7.1.39 service cbr ........................................................................................................... 7-38
7.1.40 service ubr........................................................................................................... 7-40
7.1.41 service vbr-nrt...................................................................................................... 7-40
7.1.42 service vbr-rt........................................................................................................ 7-41
7.1.43 transmit-priority.................................................................................................... 7-42
Chapter 8 LAPB and X.25 configuration commands ................................................................. 8-1

8.1 LAPB and X.25 Configuration Commands ........................................................................ 8-1
8.1.1 channel.................................................................................................................... 8-1
8.1.2 debugging lapb........................................................................................................ 8-1
8.1.3 debugging pad......................................................................................................... 8-2
8.1.4 debugging x25......................................................................................................... 8-3
8.1.5 debugging x25 xot................................................................................................... 8-3
8.1.6 debugging x25 x2t................................................................................................... 8-4
8.1.8 display x25 alias-policy ........................................................................................... 8-8
8.1.9 display x25 cug........................................................................................................ 8-9
8.1.10 display x25 hunt-group-info................................................................................... 8-9
8.1.11 display x25 map .................................................................................................. 8-10
8.1.12 display x25 pad ................................................................................................... 8-11
8.1.13 display x25 switch-table pvc................................................................................ 8-12
8.1.14 display x25 switch-table svc................................................................................ 8-12
8.1.15 display x25 vc...................................................................................................... 8-14
8.1.16 display x25 xot..................................................................................................... 8-16
8.1.17 display x25 x2t switch-table ................................................................................ 8-17
8.1.18 lapb max-frame ................................................................................................... 8-17
8.1.19 lapb modulo......................................................................................................... 8-18
8.1.20 lapb pollremote.................................................................................................... 8-19
8.1.21 lapb retry ............................................................................................................. 8-20
8.1.22 lapb timer............................................................................................................. 8-20
8.1.23 lapb window-size ................................................................................................. 8-21
8.1.24 link-protocol lapb ................................................................................................. 8-22
8.1.25 link-protocol x25 .................................................................................................. 8-23
8.1.26 pad ...................................................................................................................... 8-24
8.1.27 reset xot............................................................................................................... 8-24
8.1.28 reset x25.............................................................................................................. 8-25
8.1.29 reset lapb............................................................................................................. 8-25
8.1.30 translate ip........................................................................................................... 8-26
8.1.31 translate X25 ....................................................................................................... 8-27
vi
8.1.32 x25 alias-policy.................................................................................................... 8-28

8.1.33 x25 call-facility ..................................................................................................... 8-29
8.1.34 x25 cug-service ................................................................................................... 8-30
8.1.35 x25 default-protocol............................................................................................. 8-31
8.1.36 x25 hunt-group .................................................................................................... 8-32
8.1.37 x25 ignore called-address ................................................................................... 8-33
8.1.38 x25 ignore calling-address .................................................................................. 8-34
8.1.39 x25 local-cug ....................................................................................................... 8-34
8.1.40 x25 map............................................................................................................... 8-35
8.1.41 x25 modulo.......................................................................................................... 8-37
8.1.42 x25 packet-size ................................................................................................... 8-38
8.1.43 x25 pvc ................................................................................................................ 8-39
8.1.44 x25 queue-length ................................................................................................ 8-41
8.1.45 x25 receive-threshold.......................................................................................... 8-42
8.1.46 x25 response called-address .............................................................................. 8-43
8.1.47 x25 response calling-address ............................................................................. 8-44
8.1.48 x25 reverse-charge-accept ................................................................................. 8-44
8.1.49 x25 roa-list........................................................................................................... 8-45
8.1.50 x25 switch pvc ..................................................................................................... 8-46
8.1.51 x25 switch svc interface ...................................................................................... 8-47
8.1.52 x25 switch svc hunt-group................................................................................... 8-48
8.1.53 x25 switch svc xot ............................................................................................... 8-50
8.1.54 x25 switching....................................................................................................... 8-51
8.1.55 x25 timer hold...................................................................................................... 8-52
8.1.56 x25 timer idle ....................................................................................................... 8-53
8.1.57 x25 timer tx0........................................................................................................ 8-53
8.1.58 x25 timer tx1........................................................................................................ 8-54
8.1.59 x25 timer tx2........................................................................................................ 8-55
8.1.60 x25 timer tx3........................................................................................................ 8-56
8.1.61 x25 vc-per-map ................................................................................................... 8-56
8.1.62 x25 vc-range........................................................................................................ 8-57
8.1.63 x25 window-size .................................................................................................. 8-58
8.1.64 x25 x121-address................................................................................................ 8-59
8.1.65 x25 xot pvc .......................................................................................................... 8-60
8.1.66 x29 timer inviteclear-time .................................................................................... 8-61
Chapter 9 Bridge Configuration Commands .............................................................................. 9-1

9.1 Bridge Configuration Commands....................................................................................... 9-1
9.1.1 bridge aging-time..................................................................................................... 9-1
9.1.2 bridge bridging......................................................................................................... 9-1
9.1.3 bridge enable........................................................................................................... 9-2
9.1.4 bridge learning......................................................................................................... 9-3
9.1.5 bridge mac-address ................................................................................................ 9-4
vii
9.1.6 bridge vlanid-transparent-transmit enable .............................................................. 9-5

9.1.7 bridge routing .......................................................................................................... 9-5
9.1.8 bridge routing-enable .............................................................................................. 9-6
9.1.9 bridge stp ieee......................................................................................................... 9-7
9.1.10 bridge stp max-age ............................................................................................... 9-7
9.1.11 bridge stp priority................................................................................................... 9-8
9.1.12 bridge stp timer forward-delay............................................................................... 9-9
9.1.13 bridge stp timer hello........................................................................................... 9-10
9.1.14 bridge-set ............................................................................................................ 9-10
9.1.15 bridge-set stp enable........................................................................................... 9-11
9.1.16 bridge-set stp port pathcost................................................................................. 9-12
9.1.17 bridge-set stp port priority ................................................................................... 9-12
9.1.18 bridge bridge-set enable ..................................................................................... 9-13
9.1.19 debugging bridge ................................................................................................ 9-14
9.1.20 debugging stp...................................................................................................... 9-14
9.1.21 display bridge address-table ............................................................................... 9-17
9.1.22 display bridge information ................................................................................... 9-18
9.1.23 display bridge spanning-tree ............................................................................... 9-20
9.1.24 display bridge traffic ............................................................................................ 9-22
9.1.25 display firewall ethernet-frame-filter .................................................................... 9-24
9.1.26 dlsw ethernet-frame-filter .................................................................................... 9-25
9.1.27 firewall ethernet-frame-filter ................................................................................ 9-26
9.1.28 fr map bridge ....................................................................................................... 9-27
9.1.29 interface bridge-template .................................................................................... 9-27
9.1.30 mac-address........................................................................................................ 9-28
9.1.31 reset bridge address-table .................................................................................. 9-28
9.1.32 reset bridge traffic ............................................................................................... 9-29
9.1.33 reset firewall ethernet-frame-filter ....................................................................... 9-30
9.1.34 reset stp statistics................................................................................................ 9-30
9.1.35 x25 map bridge.................................................................................................... 9-31
viii
Comware V3 Chapter 1 PPP and MP Configuration Commands
Chapter 1 PPP and MP Configuration Commands
1.1 PPP and MP configuration commands

1.1.1 debugging ppp { all | cbcp | ccp | scp }
Syntax
debugging ppp { all | cbcp packet | ccp { all | event | error | packet | state } | scp
packet } [ interface interface-type interface-number ]
undo debugging ppp { all | cbcp packet | ccp { all | event | error | packet | state } |
scp packet } [ interface interface-type interface-number ]
View
User view
Parameter
cbcp packet: Enables cbcp packet debugging.

scp packet: Enables scp packet debugging.
ccp: Enables ccp debugging.
all: Enables all debuggings.
state: Enables state debugging.
interface interface-type interface-number: Specifies the interface type and number.
Description
Use the debugging ppp { all | cbcp | ccp | scp } command to enable PPP related
cbcp, ccp, scp or all debugging.
Use the undo debugging ppp { all | cbcp | ccp | scp } command to restore the
default setting for PPP related cbcp, ccp, scp or all debugging.
By default, all PPP debuggings are disabled.
Example
None.
1-1
1.1.2 debugging ppp { chap | pap }
Syntax
debugging ppp { chap { all | event | error | packet | state } | pap { all | event | error |
packet | state } } [ interface interface-type interface-number ]
undo debugging ppp { chap { all | event | error | packet | state } | pap { all | event |
error | packet | state } } [ interface interface-type interface-number ]
View
User view
Parameter
chap: Enables PPP CHAP authentication debugging.

pap: Enables PPP PAP authentication debugging.
Description
Use the debugging ppp { chap | pap } command to enable PPP related CHAP or PAP
debugging.
Use the undo debugging ppp { chap | pap } command to restore the default setting .
Example
None.
1.1.3 debugging ppp { core | ip | ipcp | lcp | lqc | mp }
Syntax
debugging ppp { core event | ip packet | ipcp { all | event | error | packet | state } |
lcp { all | event | error | packet | state } | lqc packet | mp { all | event | error |
packet } } [ interface interface-type interface-number ]
undo debugging ppp { core event | ip packet| ipcp { all | event | error | packet |
state } | lcp { all | event | error | packet | state } | lqc packet | mp { all | event | error
| packet } } [ interface interface-type interface-number ]
1-2
View
User view
Parameter
core event: Enables PPP core event debugging.

ip packet: Enables PPP IP packet debugging.
ipcp: Enables PPP IPCP debugging.
lcp: Enables PPP ICP debugging.
lqc packet: Enables PPP LQCP debugging.
mp: Enables PPP MP debugging.
error: Enable error debugging.
Description
Use the debugging ppp { core | ip | ipcp | lcp | lqc | mp } command to enable PPP
related core, ip, ipcp, lcp, lqc or mp debugging.
Use the undo debugging ppp { core | ip | ipcp | lcp | lqc | mp } command to restore
the default setting of related core, ip, ipcp, lcp, lqc or mp debugging.
Example
None.
1.1.4 display ppp mp
Syntax
display ppp mp [ interface interface-type interface-num ]
View
Any view
Parameter
interface-type interface-num: Specifies the interface to be checked.
1-3
Description
Use the display ppp mp command to view all interface information and statistics of
MP.
Related command: link-protocol ppp, ppp mp.
Example
# Display information about MP interfaces, which are configured using virtual

templates.
<H3C> display ppp mp
Template is Virtual-Template1
max-bind: 100, min-fragment: 128 ,LFI max-delaly: 100
Bundle 065a23ed48de/mp1250, 2 member, slot 0, Master link is

Virtual-Template1:0
Peer's endPoint descriptor: 244258d44d45
Bundle Up Time: 2005/03/13 15:04:08:870
0 lost fragments, 0 reordered, 0 unassigned, 0 interleaved,
sequence 0/0 rcvd/sent
The member channels bundled are:
Serial1/0/0 Up-Time:2005/03/13 15:04:08:870
Serial1/0/1 Up-Time:2005/03/13 15:04:08:870
Table 1-1 Description on the fields of the display ppp mp command
Field Description
Template is Virtual-Template1 Virtual-template interface.
The MP bundle can accommodate up to
max-bind: 100
100 links
Minimum size of an MP fragment is 128
min-fragment: 128
bytes
Maximum delay of transmitting an LFI
LFI max-delaly: 100
fragment is 100 milliseconds
Bundle 065a23ed48de/mp1250 Endpoint descriptor or user name
2 member Two channels in the bundle
slot 3 Bundled in slot 3.
Peer's endPoint descriptor: The endpoint descriptor of the peer is
244258d44d45 244258d44d45
Bundle Up Time: 2005/03/13 The MP channel went up at
15:04:08:870 15:04:08:870 on March 13, 2005
Master link is Virtual-Template1:0 Master link is Virtual-Template1:0
1-4
Field Description
0 lost fragments Lost fragments.
0 reordered Number of reordered packets.
0 unassigned Fragments waiting for reorder.
0 interleaved Number of interleaved packets
Received sequence number/sent
sequence number
The following displays all the member
The member channels bundled are:
channels bundled on this logical channel
Serial1/0/0 Up-Time:2005/03/13 Subchannel Serial1/0/0 is up at
15:04:08:870 15:04:08:870 on March 13, 2005
# Display information about MP interfaces, which are configured using MP-groups.

<H3C> display ppp mp
Mp-group is Mp-group0
max-bind: 20, min-fragment: 128 ,LFI max-delaly: 100
Bundle Multilink, 1 members, slot 0, Master link is Mp-group0

Peer's endPoint descriptor: 1e9935f57c85
Bundle Up Time: 2005/03/13 19:54:23:60
0 lost fragments, 0 reordered, 0 unassigned, 0 interleaved,
Member channels: 6 active, 4 inactive
Serial1/0/1:15 Up-Time:2005/03/13 19:54:23:60
Serial1/0/1:16 Up-Time:2005/03/13 19:54:23:60
Serial1/0/1:17 Up-Time:2005/03/13 19:54:23:60
Serial1/0/1:18 Up-Time:2005/03/13 19:54:23:60
Serial1/0/1:19 Up-Time:2005/03/13 19:54:23:60
Serial1/0/1:20 Up-Time:2005/03/13 19:54:23:60
Serial1/0/1:21 (inactive)
1.1.5 link-protocol ppp
Syntax
link-protocol ppp
1-5
View
Interface view
Parameter
None
Description
Use the link-protocol ppp command to configure the link-layer protocol encapsulated
on the interface as PPP.
By default, the link-layer protocol for interface encapsulation is PPP.
PPP is a link-layer protocol bearing network-layer packets over the point-to-point link. It
defines a whole set of protocols including LCP (link control protocol), NCP
(network-layer control protocol), PAP (Password Authentication Protocol) and CHAP
(Challenge Handshake Authentication Protocol). It is widely used for it supports user
authentication, easy scalability and synchronization/asynchronization.
Example
# Configure PPP encapsulation on interface Serial 0/0/0.

[H3C- Serial0/0/0] link-protocol ppp
1.1.6 ppp mp binding-mode
Syntax
ppp mp binding-mode { authentication | both | descriptor }

undo ppp mp binding-mode
View
Virtual template interface view, dialer interface view
Parameter
authentication: Performs the MP binding according to the authentication user name of

PPP.
both: Performs the MP binding based on both the authentication user name of PPP
and the terminal identifier.
descriptor: Performs the MP binding according to the terminal identifier.
Description
Use the ppp mp binding-mode command to set the MP binding condition.
1-6
Use the undo ppp mp binding-mode command to restore the default value of the MP
binding condition.
By default, it performs the MP binding based on both the authentication user name of
PPP and the terminal identifier.
User name is the peer one received by the PPP link performing the PAP or CHAP
authentication, while the terminal identifier, as a unique flag of a Router, is the peer one
received in performing the LCP negotiation. The system can perform the MP binding
base on the received user name and terminal identifier, and then the interfaces with the
identical user name or the same terminal identifier is bound together.
Related command: ppp mp user.
Example
# Perform MP bundling only based on the user name of the PPP authentication.
[H3C-Dialer0] ppp mp binding-mode authentication
1.1.7 ppp authentication-mode
Syntax
ppp authentication-mode { chap | pap } [ [ call-in ] | domain isp-name ]

undo ppp authentication-mode
View
Interface view, virtual-template interface view
Parameter
chap, pap: Authentication mode. You must specify either option, but not both of them.
call-in: Authenticates the peer only when a call from a remote user is received.
domain: Domain name in user authentication.
Description
Use the ppp authentication-mode command to set the mode that the local PPP uses
to authenticate the peer router.
Use the undo ppp authentication-mode command to disable authentication.
If you configure the ppp authentication-mode { pap | chap } command without
specifying a domain, the system-default domain named system applies by default,
adopting local authentication and using the address pool you configured for this domain
for address allocation.
If a domain is specified, you must configure an address pool in the specified domain.
1-7
If a received username includes a domain name, this domain name is used for
authentication (if the name does not exist, authentication is denied). Otherwise, the
domain name configured for PPP authentication applies.
If the username does not include a domain name, and the domain name configured for
PPP authentication does not exist, authentication is denied also.
By default, no authentication is performed.
There are two PPP authentication algorithms:
z PAP is a two-way handshake authentication.
z CHAP is a three-way handshake authentication.
In addition, the defined AAA authentication algorithm list can be used.
Either CHAP or PAP is just an authentication process. The success of the
authentication is decided by AAA, which can authenticate on the basis of the local
authentication database or AAA server.
Related command: local-user, ppp chap user, ppp pap local-user, ppp pap
password, ppp chap password.
Example
# Authenticate the peer router by means of PAP on interface Serial 0/0/0.

[H3C-Serial0/0/0] ppp authentication-mode pap domain system
1.1.8 ppp chap password
Syntax
ppp chap password { simple | cipher } password

undo ppp chap password
View
Interface view
Parameter
password: Password.
simple: Indicates to display the password in plain text.
cipher: Indicates to display the password in ciphertext.
Description
Use the ppp chap password command to configure the password for CHAP
authentication.
Use the undo ppp chap password command to cancel the configuration.
1-8
While configuring CHAP authentication, you should configure the local password to be
the same as the user password at the remote end.
When encrypting randomly generated packets, the authenticatee always looks to the
ppp chap password command for a password prior to the local user database.
Related command: ppp authentication-mode chap, local-user.
Example
# Set the username to H3C, which is to be displayed in plain text in CHAP

authentication.
[H3C-Serial1/0/0] ppp chap password simple H3C
1.1.9 ppp chap user
Syntax
ppp chap user username

undo ppp chap user
View
Interface view
Parameter
username: User name of CHAP authentication, which is the one sent to the peer
equipment to be authenticated. username is a string of 1 to 80 characters.
Description
Use the ppp chap user command to configure the user name when performing the
CHAP authentication.
Use the undo ppp chap user command to delete the existing configuration.
By default, the user name of the CHAP authentication is “H3C”.
For CHAP authentication, the non domain username configured by the local-user
command must have the same length with the username configured by the ppp chap
user command; otherwise, the authentication is denied because of failing to finding a
corresponding user on the server.
While configuring CHAP authentication, you should configure the username of each
end as the local-user of the peer end, and configure the corresponding password
accordingly.
Related command: ppp authentication-mode, local-user.
1-9
Example
# Configure the local user name as Root when CHAP authentication is performed on
interface Serial0/0/0.
[H3C-Serial1/0/0] ppp chap user Root
1.1.10 ppp ipcp dns
Syntax
ppp ipcp dns primary-dns-address [ secondary-dns-address ]

undo ppp ipcp dns
View
Interface view
Parameter
primary-dns-address: Address of the primary DNS server.

secondary-dns-address: Address of the secondary DNS server.
Description
Use the ppp ipcp dns command to enable the router to allocate a DNS address to the
peer.
Use the undo ppp ipcp dns command to disable the router to allocate a DNS server
address to the peer.
By default, the router does not allocate DNS server addresses.
The router can allocate DNS server addresses after being solicited to the devices
connected to it using PPP, PCs dialed to it for example, allowing these devices to
access the network using their domain names.
If you are connected to the router using a PC, you can execute the winipcfg command
or the ipconfig/all command to view the provided DNS server address.
Related command: ppp authentication-mode pap, ppp ipcp dns admit-any,
local-user.
Example
# Configure the primary DNS address of the local Router as 100.1.1.1, and the
secondary DNS address as 100.1.1.2.
[H3C-Serial0/0/0] ppp ipcp dns 100.1.1.1 100.1.1.2
1-10
1.1.11 ppp ipcp dns admit-any
Syntax
ppp ipcp dns admit-any

undo ppp ipcp dns admit-any
View
Interface view
Parameter
None
Description
Use the ppp ipcp dns admit-any command to enable the router to accept the
unsolicited DNS server address allocated by the peer without sending a DNS request.
When the router is connected using PPP to another device, a network access server of
a service provider for example, this allows the router to use the DNS server allocated
by the peer.
Use the undo ppp ipcp dns admit-any command to disable the router to accept the
unsolicited DNS server address allocated by the peer.
By default, the router does not accept the unsolicited DNS address allocated by the
peer.
Related command: ppp authentication-mode pap, ppp ipcp dns, local-user.
Example
# Enable the router to accept the unsolicited DNS server address allocated by the peer.
[H3C-Serial0/0/0] ppp ipcp dns admit-any
1.1.12 ppp ipcp remote-address forced
Syntax
ppp ipcp remote-address forced

undo ppp ipcp remote-address forced
View
Interface view
Parameter
None
1-11
Description
Use the ppp ipcp remote-address forced command to forbid the peer to use the fix
self-configured IP address but the one allocated by this router.
Use the undo ppp ipcp remote-address forced command to cancel the setting of
forcible address allocation, allowing the peer to use its self-configured IP address.
By default, the peer can use its self-configured IP address in PPP IPCP negotiation. If
the peer explicitly requests this end for an address, this end acts as requested; if the
peer already has a self-configured IP address, this end does not allocate one to the
peer.
If the peer is not allowed to use self-configured IP address, you must configure the ppp
ipcp remote-address forced command on the local interface.
Related command: remote address.
Example
# The PPP-encapsulated interface serial 0/0/0 wants to allocate the IP address

10.0.0.1 to the peer. The peer can accept this allocated address, a self-configured
address, or have no address.
[H3C-Serial0/0/0] remote address 10.0.0.1
# The PPP-encapsulated interface serial 0/0/0 wants to allocate the IP address

10.0.0.1 to the peer. The peer must accept this allocated address and cannot use a
self-configured address or have no address.
[H3C-Serial0/0/0] ppp ipcp remote-address forced
1.1.13 ppp ipcp dns request
Syntax
ppp ipcp dns request

undo ppp ipcp dns request
View
Interface view
Parameter
None
Description
Use the ppp ipcp dns request command to enable the router to request the peer for a
DNS server address. When the router is connected using PPP to another device, a
1-12
network access server of a service provider for example, this allows the router to
request the peer for a DNS server address through negotiation.
Use the undo ppp ipcp dns request command to disable the router to request the
peer for a DNS server address.
By default, the router is disabled to request the peer for a DNS server address.
Note:
The valid DNS server address obtained after negotiation is displayed in the output
information about the corresponding interface.
Related command: ppp authentication-mode pap, ppp ipcp dns, ppp ipcp dns
admit-any, local-user.
Example
# Enable interface Dialer0 to request for a DNS server address.

[H3C-Dialer0] ppp ipcp dns request
1.1.14 ppp lcp mru consistent
Syntax
ppp lcp mru consistent

undo ppp lcp mru consistent
View
Interface view
Parameter
None
Description
Use the ppp lcp mru consistent command to enable PPP LCP to negotiation
maximum receive unit (MRU).
Use the undo ppp lcp mru consistent command to restore the default.
By default, PPP LCP does not negotiate MRU; the local end modifies MTU depending
on the remote MRU.
After PPP LCP is enabled to negotiate MRU, the MRU value carried in the LCP
CONREQ message received from the remote end cannot be less than the MTU value
configured on the local interface. If a smaller MRU value is received, the local end
1-13
sends a CONNAK message to the remote end. If the received MRU value is still smaller
after the local end makes a specified number of CONNAK message sending attempts,
the local end sends a CONREJ message to disable MRU negotiation. The MRU
negotiation attempts made by the remote end after that will always fail.
Normally, after PPP LCP negotiation succeeds, the MTU at the local end does not
change as the remote MRU changes.
Example
# Enable PPP LCP to negotiate MRU.

[H3C-Serial0/0/0] ppp lcp mru consistent
1.1.15 ppp lqc
Syntax
ppp lqc forbidden-percentage [ resumptive-percentage ]

undo ppp lqc
View
Interface view
Parameter
forbidden-percentage: Link quality percentage threshold. Once the quality of a link

decreased below this percentage, the link is taken down. It is in the range 0 to 100.
resumptive-percentage: Link quality percentage threshold. The link that has been taken
down is brought up again once its quality exceeds this percentage. It is in the range 0 to
100.
Description
Use the ppp lqc command to enable PPP link quality control (LQC).
Use the undo ppp lqc command to disable PPP link quality control.
By default, PPP LQC is disabled.
By default, the arguments resumptive-percentage and forbidden-percentage are equal.
You may use PPP LQC to monitor quality of PPP links including those in MP bundles.
The system shuts down a link when its quality decreased below the
forbidden-percentage and brings it up when its quality ameliorates exceeding the
resumptive-percentage. When re-enabling the link, PPP LQC experiences a delay to
avoid link flapping.
Note that the value of resumptive-percentage must be equal to or greater than that of
forbidden-percentage.
1-14
When enabling LQC at both ends of a PPP link, you must use the same parameter
settings on the routers at both ends. Normally, you are not encouraged to enable LQC
at both ends of a link.
Besides, you are not encouraged to enable PPP LQC on a dial-up line. That is because
in case the link is disabled, the DCC would disconnect the dial-up line, resulting in
inability of LQC to work. LQC can operate again only after the DCC brings the dial-up
line up again for transmitting data.
Related command: timer hold.
Example
# Enable LQC on interface Serial 0/0/0, setting forbidden-percentage to 90% and

resumptive-percentage to 95%.
[H3C-Serial0/0/0] ppp lqc 90 95
1.1.16 ppp mp
Syntax
ppp mp
undo ppp mp
View
Interface view
Parameter
None
Description
Use the ppp mp command to enable the interface encapsulated with PPP to operate in
the MP mode.
Use the undo ppp mp command to enable the interface to operate in the Single PPP
mode.
By default, the interface encapsulated with PPP operates in the Single PPP mode.
To increase the bandwidth, multiple PPP links can be bound to form a logical MP
interface. For this purpose, it is necessary to specify a virtual-template in system view.
MP can be configured and used only at the physical interfaces which can encapsulate
PPP. To enable MP, you must configure the ppp mp command and the PAP or CHAP
authentication at the physical interface.
Related command: link-protocol ppp, ppp mp user, interface virtual-template.
1-15
Example
# Configure the PPP encapsulated interface Serial0/0/0 to work in MP mode.

[H3C-Serial1/0/0] ppp mp
1.1.17 ppp mp mp-group
Syntax
ppp mp mp-group number

undo ppp mp mp-group number
View
Interface view
Parameter
number: MP-group interface number.
Description
Use the ppp mp mp-group command to add the current interface to the specified
MP-group.
Use the undo ppp mp mp-group command to remove the current interface from the
specified MP-group.
Use this command in conjunction with the interface mp-group command to create an
MP-group interface and add an interface to the MP-group. These two tasks are order
independent.
Note that the interfaces added to an MP group must be physical. The logical interfaces
such as tunnel interfaces do not support this command.
Example
# Add serial interface 3/0/0 to MP-group 3.

[H3C-Serial3/0/0] ppp mp mp-group 3
# Remove serial interface 3/0/0 from MP-group 3.

[H3C-Serial3/0/0] undo ppp mp mp-group 3
1.1.18 ppp mp lfi
Syntax
ppp mp lfi [ delay-per-frag max-delay ]

undo ppp mp lfi [ delay-per-frag ]
1-16
View
Virtual template interface view
Parameter
max-delay: Maximum delay in millisecond, its value ranges from 1 to 1000.
Description
Use the ppp mp lfi command to configure the link fragmentation and interleaving
features.
Use the undo ppp mp lfi command to restore the default configuration.
By default, the value of number is 10.
Example
# Set a maximum delay of 100 milliseconds for per fragmentation.

[H3C-Virtual-Template0] ppp mp lfi delay-per-frag 100
1.1.19 ppp mp max-bind
Syntax
ppp mp max-bind max-bind-num

undo ppp mp max-bind
View
Virtual template interface view, dialer interface view
Parameter
max-bind-num: Indicates maximum number of links which can be bound, in the range
from 1 to 128.
Description
Use the ppp mp max-bind command to configure maximum number of bound links of
MP.
Use the undo ppp mp max-bind command to restore the default configuration.
By default, its value is 16.
Normally, it is not necessary to configure the parameter, which should be performed
under the guidance of technical engineers when necessary. Such a configuration may
have impact on the performance of PPP. If it is necessary to bind more than 16 PPP
channels, the parameter max-bind-num can be changed.
1-17
Note:
If MP fails to delete links, it is possible that the maximum binding number is smaller than
the actually configured one. Make sure that the maximum binding number should be
larger than the actual one.
After you change the maximum number of links in an MP bundle on a virtual-template
or dialer interface, you must shutdown and undo shutdown all the physical interfaces
to validate the modification.
Related command: ppp mp.
Example
# Set the maximum number of bound links to 12.

[H3C-Virtual-Template10] ppp mp max-bind 12
1.1.20 ppp mp min-bind
Syntax
ppp mp min-bind min-bind-num

undo ppp mp min-bind
View
Dialer interface view
Parameter
min-bind-num: Minimum number of links in an MP bundle, in the range 1 to 128.
Description
In a dial application where multiple links are required to carry services, it is necessary to
allow a packet trigger to call up multiple links to guarantee the minimum bandwidth
needed.
Use the ppp mp min-bind command to configure the minimum number of PPP links
that an MP bundle must have.
Use the undo ppp mp min-bind command to restore the default when a call requires
only one PPP link.
By default, no lower limit of links is set for MP bundling.
Note that, after you configure the ppp mp min-bind command, the router does not look
at the ratio of traffic to bandwidth when making calls to bring up links. As for links that
already exist, they are not torn down because of timeout. The ppp mp min-bind
1-18
command voids the dialer timer idle command, just as the dialer threshold 0
command would.
The argument min-bind-num must be less than max-bind-num.
Related command: dialer threshold, ppp mp.
Example
# Set the minimum number of channels an MP bundle must have to 4.

[H3C-dialer0] ppp mp min-bind 4
# Remove the minimum number of channels setting you set.

[H3C-dialer0] undo ppp mp min-bind
1.1.21 ppp mp min-fragment
Syntax
ppp mp min-fragment size

undo ppp mp min-fragment
View
Parameter
size: Minimum packet size for MP outgoing packet fragmentation. When the MP
outgoing packet is smaller than this value, fragmentation is avoided. When the MP
packet is larger than this value, fragment is involved. It is in byte in the range from 128
to 1500.
Description
Use the ppp mp min-fragment command to set minimum size of outgoing fragments.
Use the undo ppp mp min-fragment command to restore the default, that is, 128
bytes.
If the small packet fragmentation is not expected, this command can be used to set
larger packet size value of the MP packet fragment.
Related command: ppp mp.
Example
# Set the minimum packet of the MP packet fragmentation to 500 bytes.

[H3C-Virtual-Template10] ppp mp min-fragment 500
1-19
1.1.22 ppp mp user
Syntax
ppp mp user username bind virtual-template number

undo ppp mp user username
View
System view
Parameter
username: User name, which is a string of 1 to 80 characters.

number: Virtual-template number.
Description
Use the ppp mp user command to bind an MP user to a virtual template.

Use the undo ppp mp user command to remove the specified binding.
During the establishment of a PPP connection, after PPP authentication succeeds, if a
virtual-template is specified, MP will be bound on the basis of parameters of the
virtual-template and a new virtual interface will be formed to transfer data.
Operating parameters that could be configured on the virtual-template include:
z Local IP address and the IP address (or IP address pool) assigned to the peer
PPP
z PPP working parameter
Related command: ppp mp, ppp mp max-bind.
Example
# Specify the corresponding virtual-template as 1 for the username H3C, and configure
the IP address of the virtual-template as 202.38.60.1.
[H3C] ppp mp user H3Cbind virtual-template 1
[H3C-virtual-template1] ip address 202.38.60.1 255.255.255.0
1.1.23 ppp mp sort-buffer-size
Syntax
ppp mp sort-buffer-size size

undo ppp mp sort-buffer-size
View
Virtual template interface view, MP-group interface view
1-20
Parameter
size: Size of the sort window, in the range 1 to 64. It defaults to 1, meaning only one
packet is sorted.
Description
Use the ppp mp sort-buffer-size command to set the size of the MP sort window.
Use the undo ppp mp sort-buffer-size command to restore the default.
When MP applies, packets may be received out of order. The sort window is thus used
to re-order packets. The size of the sort window is a trade-off between re-ordering effect
and delay: a large sort window brings good re-ordering effect but increased delay. For
voice packets, transmission delay should be minimized.
Example
# Configure and display the size of the sort window.

[H3C] interface Virtual-Template 1
[H3C-Virtual-Template1] ppp mp sort-buffer-size 64
1.1.24 ppp mp virtual-template
Syntax
ppp mp virtual-template number

undo ppp mp
View
Interface view
Parameter
number: Configures the virtual template number to be bound by the interface, which
ranges from 0 to 1023.
Description
Use the ppp mp virtual-template command to configure the virtual template number
to be bound by the interface.
Use the undo ppp mp command to disable the MP binding of the interface.
By default, the MP binding of the interface is disabled, and the interface works in
ordinary PPP mode.
This command specifies the virtual template number to be bound on the interface. The
interface using this command to perform the MP binding needs not configuring PAP or
CHAP authentication. Two or more interfaces with the same virtual template number is
bound directly together. Moreover, this command is mutually exclusive with the ppp mp
1-21
command. That is, only one of the two commands can be configured on a same
interface.
Related command: link-protocol ppp and interface virtual-template.
Example
# Configure the PPP encapsulated interface Serial0/0/0 to work in MP mode.

[H3C-Serial0/0/0] ppp mp virtual-template 1
1.1.25 ppp pap local-user
Syntax
ppp pap local-user username password { simple | cipher } password

undo ppp pap local-user
View
Interface view
Parameter
username: Username sent, which is a string of 1 to 80 characters.

password: Password sent.
simple: Indicates to display the password in plain text.
cipher: Indicates to display the password in ciphertext.
Description
Use the ppp pap local-user command to configure the username and password sent
by the local router when it is authenticated by the peer router via the PAP method.
Use the undo ppp pap local-user command to disable the configuration.
By default, when the local router is authenticated by the peer router via the PAP method,
both the username and the password sent by the local router are empty.
When the local router is authenticated via the PAP method by the peer router, the
username and password sent by the local router must be the same as the user and
password of the peer router.
Related command: ppp authentication pap-mode, local-user.
Example
# Set the username of the local router authenticated by the peer end via the PAP
method as H3C and the password as H3C.
[H3C-Serial1/0/0] ppp pap local-user H3C password simple H3C
1-22
1.1.26 ppp timer negotiate
Syntax
ppp timer negotiate seconds

undo ppp timer negotiate
View
Interface view
Parameter
seconds: Time of negotiation timeout in seconds. During the PPP negotiation, if the
local end does not receive the response packet of the peer end, PPP will resend the
last packet. The time ranges from 1 to 10 seconds.
Description
Use the ppp timer negotiate command to set the PPP negotiation timeout.
Use the undo ppp timer negotiate command to restore the default value.
By default, the PPP timeout is 3 seconds.
Related command: link-protocol ppp.
Example
# Set the PPP negotiation timeout to 5 seconds.

[H3C-Serial1/0/0] ppp timer negotiate 5
1.1.27 timer hold
Syntax
timer hold seconds

undo timer hold
View
Parameter
seconds: Time interval for the interface to send keepalive packet in seconds. The value
Description
Use the timer hold command to set the timer to send keepalive packet.
Use the undo timer hold command to restore the default value.
1-23
For the very slow data links, the seconds parameter must not be set too small. Because
the long datagram can only be transferred totally after a long time, the transfer of
keepalive datagram is delayed. The data link would be regarded to be broken if the
interface has not received the keepalive packet from the other end for many keepalive
periods. When the keepalive time is set to a very long time, the link is considered
broken by the other end, and then is closed.
At the two ends of a PPP link, the same keepalive interval is recommended.
Example
# Set the PPP timer hold to 20 seconds.

[H3C-Serial1/0/0] timer hold 20
1.2 PPP Link Efficiency Mechanism Commands

1.2.1 debugging ppp compression iphc rtp
Syntax
debugging ppp compression iphc rtp { all | context_state | error | full_header |

general_info }
undo debugging ppp compression iphc rtp { all | context_state | error |
full_header | general_info }
View
User view
Parameter
all: Enables all IPHC RTP debugging.

context_state: Enables IPHC RTP context_state packet debugging.
error: Enables IPHC RTP error debugging.
full_header: Enables IPHC RTP full_header debugging.
general_info: Enables general IPHC RTP debugging.
Description
Use the debugging ppp compression iphc rtp command to view debugging
information about IP/UDP/RTP header compression in IP header compression.
Use the undo debugging ppp compression iphc rtp command to disable
IP/UDP/RTP header debugging in IP header compression.
1-24
Example
# Enable error debugging for IP/UDP/RTP header compression in IP header

compression.
<H3C> debugging ppp compression iphc rtp error
1.2.2 debugging ppp compression iphc tcp
Syntax
debugging ppp compression iphc tcp { all | context_state | error | full_header |

general_info }
undo debugging ppp compression iphc tcp { all | context_state | error |
View
User view
Parameter
all: Enables all IPHC TCP debugging.

context_state: Enables IPHC TCP context_state packet debugging.
error: Enables IPHC TCP error debugging.
full_header: Enables IPHC TCP full_header debugging.
general_info: Enables general IPHC TCP debugging.
Description
Use the debugging ppp compression iphc tcp command to view the single packet
information of the IP/TCP header compression.
Use the undo debugging ppp compression iphc tcp command to disable IP/TCP
header debugging in IP header compression.
Example
# Enable IP/TCP header error debugging of IP header compression.

<H3C> debugging ppp compression iphc tcp error
1.2.3 display ppp compression iphc rtp
Syntax
display ppp compression iphc rtp [ interface-type interface-number ]
View
Any view
1-25
Parameter

Description
Use the display ppp compression iphc rtp command to view the statistic information
of the RTP header compression.
Example
# Display statistics about RTP header compression.

[H3C] display ppp compression iphc rtp
1.2.4 display ppp compression iphc tcp
Syntax
display ppp compression iphc tcp [ interface-type interface-number ]
View
Any view
Parameter

Description
Use the display ppp compression iphc tcp command to view the statistic information
of the TCP header compression.
Example
# Display statistics about TCP header compression.

[H3C] display ppp compression iphc tcp
1.2.5 display ppp compression stac-lzs
Syntax
display ppp compression stac-lzs [ interface-type interface-number ]
View
Any view
1-26
Parameter

Description
Use the display ppp compression stac-lzs command to view information about
STAC-LZS compression.
Example
# Display information about STAC-LZS compression.

[H3C] display ppp compression stac-lzs
Staz-lzs compression
Interface: Serial1/0/1:0
Received:
Compress/Error/Discard/Total: 302/0/0/302 (Packets)
Sent:
Compress/Error/Total: 302/0/302 (Packets)
1.2.6 ip tcp vjcompress
Syntax
ip tcp vjcompress
undo ip tcp vjcompress
View
Interface view
Parameter
None
Description
Use the ip tcp vjcompress command to enable a PPP interface to compress the VJ
TCP header.
Use the undo ip tcp vjcompress command to disable the PPP interface to compress
the VJ TCP header.
If the VJ TCP header is permitted to compress at the PPP interface, the interface at the
opposite end shall also permit to compress the VJ TCP header. This command is only
used in the centralized environment.
By default, the VJ TCP header is disabled to compress at the PPP interface.
1-27
Example
# Permit VJ TCP header compression on the PPP interface.

[H3C-dialer0] ip tcp vjcompress
1.2.7 ppp compression iphc
Syntax
ppp compression iphc [ nonstandard ]

undo ppp compression iphc
View
Interface view
Parameter
nonstandard: Nonstandard encapsulation mode.
Description
Use the ppp compression iphc command to enable IP header compression on the
interface.
Use the undo ppp compression iphc command to disable IP header compression.
IP header compression discussed here refers to compression of TCP and RTP
headers.
By default, TCP header compression and RTP header compression are disabled on the
interface.
The compression command can take effect on a link only when it is configured at both
ends of the link.
The configuration will take effect only when the shutdown and undo shutdown
operations are performed on the interface. If the configuration is applied on MP, the
shutdown and undo shutdown operations should be performed on all the MPs.
Related command: ppp compression iphc rtc-connection, ppp compression iphc
tcp-connections.
Example
# Enable TCP header compression and IP header compression on interface

serial0/0/0.
[H3C-serial0/0/0] ppp compression iphc
1-28
1.2.8 ppp compression iphc rtp-connections
Syntax
ppp compression iphc rtp-connections number

undo ppp compression iphc rtp-connections
View
Interface view
Parameter
number: The maximum connection number (from 3 to 256) of IP Header Compression

mode on the interface. By default, the number is 16.
Description
Use the ppp compression iphc rtp-connections command to designate the

connections number of IP Header Compression allowed on one interface.
Use the undo ppp compression iphc rtp-connections command to cancel the
configuration and restore the default value.
RTP is connection oriented; the number of RTP connections that a link can
accommodate is relatively large. The use of compression however requires the router
to maintain some information for each connection when compressing headers. To
restrict the memory load generated by compression, you can use the ppp
compression iphc rtp-connections command to limit the number of
compression-enabled RTP connections to three for example. The packets on the fourth
RTP connection are not compressed as a result.
The configuration will take effect after commands shutdown and undo shutdown
have been executed on the interface. When configuring MP, commands shutdown and
undo shutdown must be executed on all MP member interfaces.
Example
# Set the number of compression-enabled RTP connections to 10 on interface

serial0/0/0.
[H3C-serial0/0/0] ppp compression iphc rtp-connections 10
1.2.9 ppp compression iphc tcp-connections
Syntax
ppp compression iphc tcp-connections number

undo ppp compression iphc tcp-connections
1-29
View
Interface view
Parameter
number: The maximum connection number (from 3 to 256) of TCP compression mode
on the interface. By default, the number is 16.
Description
Use the ppp compression iphc tcp-connections command to configure the

connection number of TCP compression mode.
Use the undo ppp compression iphc tcp-connections command to restore the
default connection number of TCP compression mode.
TCP is connection oriented; the number of TCP connections that a link can
accommodate is relatively large. The use of compression however requires the router
to maintain some information for each connection when compressing headers. To
restrict the memory load generated by compression, you can use the ppp
compression iphc tcp-connections command to limit the number of
compression-enabled TCP connections to three for example. The packets on the fourth
TCP connection are not compressed as a result.
The configuration can become valid on an interface only after you perform the
shutdown and then the undo shutdown operations on the interface. If the
configuration is for an MP bundle, you should perform the operations on all MP member
interfaces.
Example
# Set the number of compression-enabled TCP connections to 10 on interface

serial0/0/0.
[H3C-serial0/0/0] ppp compression iphc tcp-connections 10
1.2.10 ppp compression stac-lzs
Syntax
ppp compression stac-lzs

undo ppp compression stac-lzs
View
Interface view
Parameter
None
1-30
Description
Use the ppp compression stac-lzs command to enable STAC-LZS compression for
PPP.
Use the undo ppp compression stac-lzs command to disable STAC-LZS
compression on the current interface.
By default, stac-lzs compression is disabled.
You can configure STAC-LZS compression on an interface to reduce size of data
frames through lossless compression. However, as this can increase the load on the
router, you are recommended to disable the function when the load on the router is
heavy.
Note that STAC-LZS compression can take effect on a PPP link only when the stac-lzs
option is configured on both ends of the link.
Example
# Enable STAC compression on the local router.

[H3C-Serial0/0/0] ppp compression stac-lzs
1.2.11 ppp mp lfi
Syntax
ppp mp lfi
undo ppp mp lfi
View
Parameter
None
Description
Use the ppp mp lfi command to enable link fragmentation and interleaving (LFI) on the
interface.
Use the undo ppp mp lfi command to remove LFI from the interface.
By default, the time delay of the fragment is 10ms after LFI is enabled on the Virtual
Template interface.
Related command: ppp mp lfi delay-per-frag.
1-31
Example
[H3C-Virtual-Template1] ppp mp lfi
1.2.12 ppp mp lfi delay-per-frag
Syntax
ppp mp lfi delay-per-frag time

undo ppp mp lfi delay-per-frag
View
Parameter
time: The maximum time delay of LFI fragment in ms, in the range of 1 to 1000.
Description
Use the ppp mp lfi delay-per-frag command to set the maximum time delay for
transmitting a LFI fragment.
Use the undo ppp mp lfi delay-per-frag command to restore the default maximum
time delay for transmitting an LFI fragment.
By default, the time delay of the fragment is 10ms after LFI is enabled on the Virtual
Template interface.
Related command: ppp mp lfi.
Example
# Set the maximum time delay of LFI fragment of Virtual-Template 1 to 20ms.

[H3C-Virtual-Template1] ppp mp lfi delay-per-frag 20
1.2.13 reset ppp compression iphc
Syntax
reset ppp compression iphc [ interface-type interface-number ]
View
User view
Parameter
Interface-type: Interface type.

Interface-number: Interface number.
1-32
Description
Use the reset ppp compression iphc command to delete the invalid IP/UDP/RTP
header compression or decompression context storage table and clear statistic
information of IP/UDP/RTP header compression.
If no parameter is specified, the storage table entries of IP header compression on all
interfaces will be cleared.
Example
# Reset statistics about IP/UDP/RTP header compression.

<H3C> reset ppp compression iphc
1.2.14 reset ppp compression stac-lzs
Syntax
reset ppp compression stac-lzs [ interface-type interface-number ]
View
User view
Parameter

Description
Use the reset ppp compression stac-lzs command to clear statistics about
STAC-LZS compression.
If no interface is specified, statistics about STAC-LZS compression on all interfaces is
cleared.
Example
# Clear statistics about STAC-LZS on all the interfaces.

<H3C> reset ppp compression stac-lzs
1-33
Comware V3 Chapter 2 PPPoE Configuration Commands
Chapter 2 PPPoE Configuration Commands
2.1 PPPoE Server Configuration Commands

2.1.1 display pppoe-server session
Syntax
display pppoe-server session { all | packet | statistics interface interface-type

interface-number }
View
Any view
Parameter
all: Displays all information about each PPPoE session.

packet: Displays statistics about the packets on each PPPoE session.
statistics: Displays the statistics information of PPPoE sessions over an interface.
interface-type interface-number: Specifies an interface.
Description
Use the display pppoe-server session command to view the status and statistics of
PPPoE session.
Related command: link-protocol ppp, pppoe-server bind.
Example
# View all the session information of PPPoE.

<H3C> display pppoe-server session all
There is 1 session in total:
SID Intf OIntf RemMAC LocMAC State
1 Virtual-Template1:1 GigabitEthernet1/0/0 00e0fc000501 00e0fc000100 UP
Table 2-1 Output information description
Field Description
There is 1 session in
Display total number of sessions for PPPoE
total:
SID Session Identifier
Intf The corresponding Virtual-Template interface
2-1
Field Description
OIntf corresponding Ethernet interface
RemMAC Remote MAC address
LocMAC Local MAC address
State State of sessions
# View the statistics information of PPPoE session.

<H3C> display pppoe-server session packet
SID RemMAC LocMAC InP InO InD OutP OutO OutD
1 0050ba1a02ce 0001af02a40f 42 2980 0 16 343 0
Table 2-2 Description of the output
Field Description
InP In Packets, Packages received
InO In Octets, Bytes received

InD In Discards, Received and then discarded packages
OutP Out Packets, Packages sent
OutO Out Octets, Bytes sent

OutD Out Discard, Discarded packages that might be sent.
2.1.2 pppoe-server bind virtual-template
Syntax
pppoe-server bind virtual-template number

undo pppoe-server bind
View
Interface view
Parameter
number: Number of the virtual-template for access to PPPoE, and its value ranges from
0 to 1023.
Description
Use the pppoe-server bind virtual-template command to enable PPPoE on the

virtual-template specified by the Ethernet interface.
2-2
Use the undo pppoe-server bind command to disable PPPoE protocol on the
relevant interface.
By default, PPPoE protocol is disabled.
Example
# Enable PPPoE on virtual-template 1 of Ethernet interface Ethernet1/0/0.

[H3C-Ethernet1/0/0] pppoe-server bind virtual-template 1
2.1.3 pppoe-server log-information off
Syntax
pppoe-server log-information off

undo pppoe-server log-information off
View
System view
Parameter
None
Description
Use the pppoe-server log-information off command to enable the PPPoE server to
output the PPP-related log information.
Use the undo pppoe-server log-information off command to disable the PPPoE
server to output the PPP-related log information.
By default, the PPPoE server outputs the PPP-related log information.
Example
# Disable the PPPoE server to output the PPP-related log information.

[H3C] pppoe-server log-information off
2.1.4 pppoe-server max-sessions local-mac
Syntax
pppoe-server max-sessions local-mac number

undo pppoe-server max-sessions local-mac
View
System view
2-3
Parameter
number: Maximum number of sessions that can be established at a local MAC address.
The number differs with vendors, so refer to your system display.
Description
Use the pppoe-server max-sessions local-mac command to set the maximum

number of PPPoE sessions that can be established at a local MAC address.
Use the undo pppoe-server max-sessions local-mac command to restore the
default configuration.
Related command: pppoe-server max-sessions remote-mac and pppoe-server
max-sessions total.
Example
# Set the maximum number of PPPoE sessions that can be established at a local MAC
address to 50.
[H3C] pppoe-server max-sessions local-mac 50
2.1.5 pppoe-server max-sessions remote-mac
Syntax
pppoe-server max-sessions remote-mac number

undo pppoe-server max-sessions remote-mac
View
System view
Parameter
number: Maximum number of PPPoE sessions that can be established at a peer MAC
address. The number differs with vendors, so refer to your system display.
Description
Use the pppoe-server max-sessions remote-mac command to set the maximum

number of PPPoE sessions that can be established at a peer MAC address.
Use the undo pppoe-server max-sessions remote-mac command to restore the
default configuration.
Related command: pppoe-server max-sessions local-mac, pppoe-server
max-sessions total.
2-4
Example
# Display how to set the maximum number of PPPoE sessions that can be established
at a remote MAC address to 50.
[H3C] pppoe-server max-sessions remote-mac 50
2.1.6 pppoe-server max-sessions total
Syntax
pppoe-server max-sessions total number

undo pppoe-server max-sessions total
View
System view
Parameter
number: Maximum number of PPPoE sessions that the system can establish, which
Description
Use the pppoe-server max-sessions total command to set the maximum number of
PPPoE sessions that the system can establish.
Use the undo pppoe-server max-sessions total command to restore the default
configuration.
By default, the value of the AR 18 series routers is 512, while the value of AR 48/46 is
4096.
Related command: pppoe-server max-sessions remote-mac and pppoe-server
max-sessions local-mac.
Example
# Set the maximum number of PPPoE sessions established by the system to 3000.
[H3C] pppoe-server max-sessions total 3000
2.1.7 reset pppoe-server
Syntax
reset pppoe-server { all | virtual-template number | interface interface-type

interface-num }
2-5
View
User view
Parameter
all: Clears all PPPoE sessions.

virtual-template number: Specifies a virtual template by its number.
interface interface-type interface-num: Specifies an interface by its type and number.
Description
Use the reset pppoe-server command to clear PPPoE sessions at the server end.
Example
# Clear the sessions on virtual template 1.

<H3C> reset pppoe-server virtual-template 1
2.2 PPPoE Client Configuration Commands

2.2.1 debugging pppoe-client
Syntax
debugging pppoe-client { all | data | error | event | packet | verbose } [ interface

type number ]
View
User view
Parameter
all: Enables all PPPoE Client debuggings.

data: Enables data packet debugging during PPPoE Session.
error: Enables error debugging on PPPoE Client.
event: Enables event debugging on PPPoE Client.
packet: Enables packet debugging during PPPoE Discovery.
verbose: Displays the details of PPPoE data.
interface type number: Interface type and number, used to enable the debugging
switch of the specified interface. If no interface is specified, the system will enable the
debugging switch of all interfaces.
Description
The command debugging pppoe-client is used to enable PPPoE Client debugging

switch.
2-6
Example
None
2.2.2 display pppoe-server session
Syntax
display pppoe-client session { summary | packet } [ dial-bundle-number number ]
View
Any view
Parameter
summary: Displays the summary of PPPoE session.

packet: Displays the statistics of PPPoE session data packet.
dial-bundle-number number: Displays the statistics of the specified PPPoE session. If
PPPoE session is not specified, the system will display the statistics of all PPPoE
sessions.
Description
The command display pppoe-client session is used to display the status and
statistics of PPPoE session.
Example
# Display the summary of PPPoE session.

[H3C] display pppoe-client session summary
There are 2 sessions in total:
ID Bundle Dialer Intf Client-MAC Server-MAC State
1 1 1 Eth0 00e0fc0254f3 00049a23b050 PPPUP
2 2 2 Eth0 00e0fc0254f3 00049a23b050 PPPUP
For more details of the display information, see the following table.
Table 2-3 Description on the fields of display pppoe-client session summary
Field Description
There are 2 sessions in total: There are 2 sessions in total:
ID Session ID, PPPoE session ID
Server-MAC Server MAC, server MAC address
Client-MAC Client MAC, client MAC address
Dialer Corresponding Dialer interface of PPPoE session
Bundle Dialer Bundle containing PPPoE session
2-7
Field Description
Intf Ethernet interface containing PPPoE session
State State of PPPoE session
# Display the statistics of PPPoE session data packet

<H3C> display pppoe-server session packet
PPPoE Client Session:
SID InP InO InD OutP OutO OutD
=============================================================
1 164 6126 0 83 1069 0
2 304 9886 0 156 2142 0
For more details of the display information, see the following table.
Table 2-4 Description on the fields of display pppoe-server session packet
Field Description
SID Session ID, PPPoE session ID
InP In Packets: number of received packets

InO In Octets: number of received octets
InD In Discards: number of received illegal and discarded packets
OutP Out Packets: number of sent packets

OutO Out Octets: number of sent octets
2.2.3 pppoe-client
Syntax
pppoe-client dial-bundle-number number [ no-hostuniq ] [ idle-timeout seconds

[ queue-length packets ] ]
undo pppoe-client dial-bundle-number number
View
Ethernet interface (subinterface) view, virtual Ethernet interface view
Parameter
dial-bundle-number number: Dialer Bundle number corresponding to PPPoE session.

For the AR 28 Series Routers, it ranges from 1 to 128; for the AR 46 Series Routers, it
ranges from 1 to 512.The parameter number can be used to identify a PPPoE session,
or as a PPPoE session.
2-8
no-hostuniq: The call originated from PPPoE Client does not carry the Host-Uniq field.
By default, no no-hostuniq parameter is configured, i.e. PPPoE session works in
permanent online mode by default.
idle-timeout seconds: Idle time of PPPoE session in seconds, and its value ranges
from 1 to 65535. If the parameter is not configured, PPPoE session will work in
permanent online mode. Otherwise, it will works in packet trigger mode.
queue-length packets: packet number cached in the system before PPPoE session is
established, its value ranges from 1 to 100.Only after idle-timeout is configured will the
parameter be enabled. By default, packets is 10.
Description
Use the pppoe-client command to establish a PPPoE session and specify the Dialer
Bundle corresponding to the session.
Use the undo pppoe-client command to delete a PPPoE session.
By default, no PPPoE session is configured.
Multiple PPPoE sessions can be configured at one Ethernet interface, i.e. one Ethernet
interface might simultaneously belong to multiple Dialer Bundles. However, one Dialer
Bundle only has one Ethernet interface. PPPoE session and Dialer Bundle are
one-to-one. If the Dialer Bundle at a certain Dialer has had one Ethernet interface used
by PPPoE, any other interfaces cannot be added to this Dialer Bundle. Likewise, if
Dialer Bundle has had interfaces other than the PPPoE Ethernet interface, this Dialer
Bundle can also not be added to the Ethernet interface used by PPPoE Client.
When PPPoE session works in permanent online mode, and the physical lines go UP,
the Router will immediately initiate PPPoE call to establish PPPoE session. This
PPPoE connection will exist constantly unless users use the command undo
pppoe-client to delete PPPoE session. When PPPoE session works in packet trigger
mode, the Router will not initiate PPPoE call to establish PPPoE session unless it has
data to transmit. If there is no data transmission on the PPPoE link within seconds, the
Router will automatically terminate PPPoE session. Only after it has new data to
transmit, PPPoE session will be re-established.
Related command: reset pppoe-client.
Example
# Create a PPPoE session on the interface Ethernet 0/0/0.

[H3C-Ethernet0/0/0]pppoe-client dial-bundle-number 1
2.2.4 reset pppoe-client
Syntax
reset pppoe-client { all | dial-bundle-number number }
2-9
View
User view
Parameter
all: Clears all PPPoE sessions.

dial-bundle-number number: Dialer Bundle number, its value ranges from 1 to 255.
Used to clear the PPPoE session corresponding to Dialer Bundle.
Description
Use the reset pppoe-client command to terminate PPPoE session and re-initiate the
connection later.
If PPPoE session in permanent online mode is terminated using the command reset
pppoe-client, the Router will automatically re-establish PPPoE session in sixteen
seconds. If PPPoE session is terminated in packet trigger mode using the command
reset pppoe-client, the Router will not re-establish PPPoE session unless it has data
to transmit.
Related command: pppoe-client.
Example
# Clear all PPPoE sessions, and re-initiate PPPoE session later.

<H3C> reset pppoe-client all
2-10
Comware V3 Chapter 3 ISDN Configuration Commands
Chapter 3 ISDN Configuration Commands
3.1 ISDN Configuration Commands

3.1.1 datetime local
Syntax
datetime local
undo datetime
View
PRI and BSV interface voice subscriber line view
Parameter
None
Description
Use the datetime local command to configure the Datetime information element in the
Connect message to use local time in an ISDN call.
Use the undo datetime command to configure the Datetime information element not to
use local time.
By default, no local time is used.
Example
# In PRI subscriber line set the datetime information element to use local time.
[H3C-voice-line1/0:15] datetime local
3.1.2 debugging isdn
Syntax
debugging isdn { cc | q921 | q931 | qsig | | spid } [ interface type number ]

undo debugging isdn { cc | q921 | q931| qsig | spid } [ interface type number ]
View
User view
Parameter
cc: Enables ISDN CC module debugging.
3-1
q921: Enables Q.921 debugging.

q931: Enables ISDN Q.931 module debugging.
qsig: Enables ISDN Q.SIG module debugging.
spid: Enables SPID debugging for the BRI interfaces running the NI protocol.
interface type number: Interface type and number. You can enable ISDN signaling
debugging on an interface by specifying its type and number. If no interface has been
specified, the system will enable ISDN signaling debugging on all the ISDN interfaces.
Description
Use the debugging isdn command to enable ISDN debugging.

Use the undo debugging isdn command to disable ISDN debugging.
You must enable terminal debugging first before ISDN debugging can take effect.
Example
# Enable CC debugging.
<H3C> debugging isdn cc
# Disable CC debugging.
<H3C> undo debugging isdn cc
3.1.3 dialer isdn-leased (ISDN BRI Leased Line Configuration)
Syntax
dialer isdn-leased { 128k | number }

undo dialer isdn-leased { 128k | number }
View
Parameter
128k: 128K ISDN leased line connection.

number: 64K ISDN leased line connection. It can be 0 or 1.
Description
Use the dialer isdn-leased 128k command to configure 128K leased line connection.
Use the undo dialer isdn-leased 128k command to delete 128K leased line
connection.
Use the dialer isdn-leased number command to configure 64K leased line connection.
Use the undo dialer isdn-leased number command to delete 64K leased line
connection.
3-2
By default, no ISDN leased line connection is configured.

You must manually delete the existing leased line configuration before switching from
single B channel lease line to 128K leased line.
Note:
You cannot configure this command on the BRI interfaces provided by 2S1B modules.
For more information about configuring ISDN leased lines on CE1/PRI and CT1/PRI
interfaces, refer to the dialer isdn-leased command in the “Dial-up” part of this
manual.
Related command: dialer isdn-leased (in the “Dial-up” part of this manual).
Example
# Configure 128K leased line connection.

[H3C-Bri0/0/0] dialer isdn-leased 128k
3.1.4 display interface bri
Syntax
display interface bri interface-type interface-number
View
Any view
Parameter
Description
Use the display interface bri command to view status about the specified ISDN BRI
interface.
Example
# Display status about ISDN BRI interface BRI 3/0/0:1.

<H3C>display interface bri 3/0/0:1
Bri3/0:1 current state :UP
Description : Bri3/0:1 Interface
baudrate is 64000 bps, Timeslot(s) Used: 1
3-3

LCP opened, MP opened
Output queue : (Urgent queuing : Size/Length/Discards) 0/50/0
Output queue : (Protocol queuing : Size/Length/Discards) 0/500/0
Last 30 seconds input rate 3959.10 bytes/sec, 31672 bits/sec, 21.16
packets/
sec
Last 30 seconds output rate 31.60 bytes/sec, 252 bits/sec, 0.43 packets/sec
4 frame errors
0 deferred
3.1.5 display isdn active-channel
Syntax
display isdn active-channel [ interface type number ]
View
Any view
Parameter
interface type number: Interface type and number.
Description
Use the display isdn active-channel command to view the active call information on
ISDN interfaces. If no interface has been specified, the system will display the active
call information on all the ISDN interfaces.
The displayed information can help you with ISDN call troubleshooting.
Example
# Display the active call information on the interface bri 0/0/0.

[H3C] display isdn active-channel interface bri 0/0/0
Bri 0/0/0
Channel Info: B1
3-4
Call Property: Digital Call Type: Out

Calling Number: - Calling Subaddress: -
Called Number: 6688164 Called Subaddress: -
UserName: - IP Address: -
Start Time: 05-04-30 14:27:52
Time Used: 00:04:34
Table 3-1 Description on the fields of the display isdn active-channel command
Field Description
Channel Info Information about the channel
Call Property Call property: digital or analog
Call Type Call type: incoming or outgoing
Calling Number Calling number
Calling Subaddress Calling subaddress
Called Number Called number
Called Subaddress Called subaddress
UserName User name used in PPP negotiation for authentication

IP Address Calling IP address
Start Time Time at which the link was set up
Time Used Duration of the call
3.1.6 display isdn call-info
Syntax
display isdn call-info [ interface type number ]
View
Any view
Parameter
interface type number: Interface type and number.
Description
Use the display isdn call-info command to view the current states of ISDN interfaces.
If no interface has been specified, the system will display the current states of all the
ISDN interfaces.
3-5
Executing this command will output the state of each layer of the ISDN protocol on one
or all interfaces, including the information of Q.921, Q.931 and CC modules. You may
make troubleshooting based on the output information.
Example
# Display the current state of ISDN interface 2/0/0.

<H3C> display isdn call-info interface bri 2/0/0
Bri 2/0/0(User-side): ACTIVE
Link Layer 1: TEI = 65, State = MULTIPLE_FRAME_ESTABLISHED
Link Layer 2: TEI = NONE, State = TEI_UNASSIGNED
Network Layer: 1 connection(s)
Connection 1 :
CCIndex:0x0055 , State: Active , CES:1 , Channel:0x00000001
TEI: 65
Calling_Num[:Sub]:
Called_Num[:Sub]: 6688164
Table 3-2 Description on the fields of the display isdn call-info command
Field Description
Interface Bri2/0/0 is operating at the user side
Bri2/0/0(User-side): ACTIVE
of ISDN; the D channel is active
Link Layer 1
Connections 1 through 8 at layer 2 of the BRI
…
interface
Link Layer 8
TEI Terminal equipment identifier
3-6
Field Description
Current state of the layer 2 link. It can be one of
the following:
TEI_UNASSIGNED
ASSIGN_AWAITING_TEI
ESTABLISH_AWAITING_TEI
TEI_ASSIGNED
AWAITING_ESTABLISHMENT
State AWAITING_RELEASE
MULTIPLE_FRAME_ESTABLISHED
TIMER_RECOVER
TEI_ASSIGNED_EXT1: a state option for
TBR3 test, meaning a deactivation instruction is
received from the underlying layer
TEI_ASSIGNED_EXT2: a state option for
TBR3 test, meaning link establishment request
is received
Only one network layer connection is present
Network Layer: 1 connection(s)
on the interface.
CCIndex Index of the call at the CC layer
Current state of the layer 3 link of the BRI

interface. It can be one of the following:
NULL
CALL_INITIATED
OVERLAP_SENDING
OUTGOING_CALL_PROCEEDING
CALL_DELIVERED
CALL_PRESENT
CALL_RECEIVED
State
CONNECT_REQUEST
INCOMING_CALL_PROCEEDING
ACTIVE
DISCONNECT_REQUEST
DISCONNECT_INDICATION
SUSPEND_REQUEST
RESUME_REQUEST
RELEASE_REQUEST
OVERLAP_RECEIVING
CES Connection endpoint suffix
Channel ISDN B channel map for the call
Calling_Num[:Sub]: Calling number: calling sub-address.
3-7
Field Description
Called_Num[:Sub] Called number: called sub-address
3.1.7 display isdn call-record
Syntax
display isdn call-record [ interface type number ]
View
Any view
Parameter
interface type number: Displays only the call history of the specified interface.
Description
Use the display isdn call-record command to view the information of ISDN call
history.
Executing this command will display information of the calls activated in the last 15
minutes, but the number of retained entries is limited to 100.
Exam ple
# Display the information of ISDN call history.

[H3C] display isdn call-record
--------------------------------------------------------------------------
Call Type Calling Number Start Time Seconds Used
--------------------------------------------------------------------------
Out wsx012345678ad1234567891 06-06-02 08:41:49 140
123456789012345678901234567890 -
In abcd 06-06-01 12:00:00 200
abcedddd -
Table 3-3 Description on the fields of the display isdn call-record command
Field Description
Call Type Call type: incoming or outgoing
Calling Number Calling number
Called Number Called number
Start Time Time at which the call is set up
Stop Time Time at which the call is terminated
3-8
Field Description
Second Used Duration of the call in seconds
3.1.8 display isdn parameters
Syntax
display isdn parameters { protocol | interface type number }
View
Any view
Parameter
protocol: ISDN protocol type, which can be DSS1, NTT, NI, NI2, QSIG, ETSI, ANSI or
AT&T.
interface type number: ISDN interface type and number.
Description
Use the display isdn parameters command to view the system parameters at layers 2
and 3 of the ISDN protocol, such as the durations of system timers and frame size.
If only ISDN protocol is specified, the system will display the default system parameters
of ISDN.
Example
# Display the system parameters of the ISDN protocol DSS1.

[H3C] display isdn parameters dss1
DSS1 ISDN layer 2 system parameters:
T200(sec) T201(sec) T202(sec) T203(sec) N200 K(Bri) K(Pri)
1 1 2 10 3 1 7
DSS1 ISDN layer 3 system timers(default value):

Timer-Number Value(sec)
T301 240
T302 15
T303 4
T304 30
T305 30
T308 4
3-9
T309 90
T310 40
T313 4
T314 4
T316 120
T317 10
T318 4
T319 4
T321 30
T322 4
Table 3-4 Description of the fields of the display isdn parameters command
Item Description
T200(sec) Retransmit-timer (in seconds) of the L2 protocol of ISDN
TEI test request retransmit-timer (in seconds) of the L2 protocol of

T201(sec)
ISDN
T202(sec) TEI request retransmit-timer (in seconds) of the ISDN L2 protocol
T203(sec) The maximum link idle time (in seconds) of the ISDN L2 protocol
N200 The maximum number of retransmissions
The maximum number of unacknowledged frames (slide window
K(Bri)
size) on the ISDN BRI port
The maximum number of unacknowledged frames (slide window
K(Pri)
size) on the ISDN PRI port
Timer-Number ISDN L3 timer
Value(sec) Duration (in seconds) of each ISDN L3 timer
3.1.9 display isdn spid
Syntax
display isdn spid [ interface type number ]
View
Any view
Parameter
interface type number: Specifies interface type and number.
3-10
Description
Use the display isdn spid command to view information on SPID on the BRI interface
encapsulated with the NI protocol.
You may execute this command to view the SPID type, SPID value and some other
information when ISDN is running. Executing this command without specifying an
interface, you may view information on SPI on all the SPID-supported BRI interfaces.
Alternatively, you may view the information only on one interface by specifying its type
and number.
Example
# Display the related information of SPID on the NI-supported interface bri 0/0/0.
[H3C] display isdn spid interface bri 0/0/0
Interface Bri 0/0/0:
SPID Type : AUTO
SPID B1 :
SPID Num: 124345
LDN:1234321
Neg State : SPID_ASSIGNED

Init State: INIT_NULL
SPID B2 :
SPID Num: 45645754
LDN:1234321
Neg State : SPID_ASSIGNED
Init State: INIT_NULL
SPID timer : 30 seconds
SPID resend: 2
Table 3-5 Description on the fields of the display isdn spid interface command
Field Description
SPID Type, which can be NIT, STATIC (having only the L3
SPID Type initialization process), or AUTO (including both the negotiation
and the L3 initialization)
SPID value of the BRI interface B1 channel. It can be a static
SPID B1 configuration or the result of a dynamic negotiation, all depending
on the specified SPID Type.
LDN Local dialing number
SPID value of the BRI interface. It can be a static configuration or
SPID Num the result of a dynamic negotiation, all depending on the specified
SPID Type.
3-11
Field Description
Negotiation state of the SPID, which can be
Neg State SPID_UNASSIGNED, ASSIGN_AWAITING_SPID,
SPID_ASSIGNED, ASSIGN_AWAITING_CALL_CLEAR.
Initialization state of the SPID, which can be INIT_NULL,
Init State INIT_IND, INIT_PROCEEDING, INIT_END,
INIT_AWAITING_CALL_CLEAR.
SPID value of the BRI interface B2 channel. It can be a static
SPID B2 configuration or the result of a dynamic negotiation, all depending
on the specified SPID Type.
SPID timer Duration of the timer TSPID
SPID resend SPID message retransmission times
3.1.10 enable deactivate
Syntax
enable deactivate
undo enable deactivate
View
BSV interface view
Parameter
None
Description
Use the enable deactivate command to enable the router to actively deactivate the
BSV interface.
Use the undo enable deactivate command to disable the router to actively deactivate
the BSV interface.
By default, the router is enabled to actively deactivate the BSV interface.
If disabled to actively deactivate the BSV interface, the router deactivates the interface
only when the interface is shut down or the BRI line is disconnected. Disabling active
BSV interface deactivation allows the BRI line to stay in the active state, ensuring BSV
calls to be completed rapidly. This is not preferred however, if occasional BRI line
deactivation is desired.
This command is only valid at the BSV network side. When configured at the BSV user
side, this command does not take any effect.
3-12
Example
# Disable the router to perform active BSV interface deactivation.

[H3C-Bsv2/0/0] undo enable deactivate
3.1.11 isdn bch-local-manage
Syntax
isdn bch-local-manage [ exclusive ]

undo isdn bch-local-manage
View
ISDN interface view
Parameter
exclusive: Exclusive local management mode for ISDN B channels. When the B
channel indicated by the exchange is inconsistent with the one required by the local
end, call failure occurs.
Description
Use the isdn bch-local-manage command to enable local ISDN B channel

management.
Use the undo isdn bch-local-manage command to disable the setting.
It is very important to put appropriate control on the B channels used for calls in process,
especially in the PRI mode. Proper channel management can improve call efficiency
and reduce call loss. Normally, the centralized B channel management provided by
exchanges can work well. For this reason, you are recommended to adopt the
management function provided by exchanges in most cases, despite the ISDN module
can provide the channel management function as well.
Configured with isdn bch-local-manage command, the router operates in local
B-channel management mode to select available B channels for calls. Despite this, the
connected exchange has higher priority in B channel selection. If the B channel the
router selected for a call is different from the one indicated by the exchange, the one
indicated by the exchange is used for communication.
Configured with the isdn bch-local-manage exclusive command, the router operates
in exclusive local B-channel management mode. In this mode, the B channel selected
by the router must be adopted for communication. In the Channel ID information
element of the call Setup message sent for a call, the router indicates that the B
channel is mandatory and unchangeable. If the connected exchange indicates a B
channel different from the one selected by the router, call failure occurs.
3-13
Example
# Enable local ISDN B channel management.

[H3C-Bri2/0/0] isdn bch-local-manage
3.1.12 isdn bch-select-way
Syntax
isdn bch-select-way { ascending | descending }
View
ISDN interface view
Parameter
ascending: Selects B channels in ascending order.

descending: Selects B channels in descending order.
Description
Use the isdn bch-select-way command to set a B channel selection method.

If configuring the isdn bch-select-way ascending command, you must use the
isdn-bch-local-manage command to configure local channel management; otherwise,
the configured ISDN B channel selection mode does not take effect.
When operating in B channel local management mode, the router selects B channels in
ascending order by default.
Example
# Configure B channel selection method on the interface Bri2/0/0 to descending order.

[H3C-Bri2/0/0] isdn bch-select-way descending
3.1.13 isdn caller-number
Syntax
isdn caller-number caller-number

undo isdn caller-number
View
ISDN interface view
Parameter
caller-number: Caller number that an incoming ISDN call can carry, which is a character
string of 1 to 24 characters.
3-14
Description
Use the isdn caller-number command to configure the range of the numbers that the
router can receive.
Use the undo isdn caller-number command to delete the configured caller number.
Example
# Configure the router to receive only the incoming calls from the caller numbers with
400.
[H3C-Serial0/0/0:15] isdn caller-number 400
3.1.14 isdn calling
Syntax
isdn calling calling-number

undo isdn calling
View
ISDN interface view
Parameter
calling-number: Calling number.
Description
Use the isdn calling command to have the messages from a calling party to a called
party carry the calling number.
Use the undo isdn calling command to delete calling number in the messages that a
calling party transmitted.
This command mainly applies on BRI interfaces. If a calling party has configured this
command on its BRI interface, the call party will be able to see the calling number by
viewing the call history information.
Example
# Configure the message from a calling party to a called party on interface Bri0/0/0 to
carry calling number.
[H3C-Bri0/0/0] isdn calling 8060170
3.1.15 channel-set timeslot (for ISDN BRI Leased Line)
Syntax
channel-set timeslot number
3-15
undo channel-set timeslot number
View
Parameter
number: Number of the B channel to be used for leased line service. It can be 0, 1, or
128. When it is set to 0 or 1, B-channel 0 or 1 is used; when it is set to 128, the two B
channels are used as a 128 kbps leased line.
Description
Use the channel-set timeslot command to configure a B channel for leased line
service.
Use the undo channel-set timeslot command to remove both the leased line
configuration of a B channel and the serial interface created by the channel-set
timeslot command.
By default, no B channel is configured for leased line service.
After you configure a B channel for leased line service, a serial interface is created
automatically and named as follows:
z For B channel 0, the serial interface is named serial + BRI interface number : 1, for
example, serial 1/0/0:1.
z For B channel 1, the serial interface is named serial + BRI interface number : 2, for
example, serial 1/0/0:2.
z For 128 kbps channel, the serial interface is named serial + BRI interface number :
0.
All leased line configurations must be made on this serial interface.
On an ISDN BRI interface configured with the channel-set timeslot command, you
cannot configure leased line service with the dialer isdn-leased command.
Related command: dialer isdn-leased.
Example
# Configure B channel 1 for leased line service on ISDN BRI interface 1/0/0.
[H3C-Bri1/0/0] channel-set timeslot-list 1
Upon execution of the command interface serial1/0/0:2 is created with the default link
layer protocol PPP enabled. You may enter the view of this serial interface to make
leased line configuration.
# Remove the leased line configuration of B channel 1 on the ISDN BRI interface.
[H3C-Bri1/0/0] undo channel-set timeslot-list 1
The interface serial 1/0/0:2 is deleted upon execution of the command.
3-16
3.1.16 isdn check-called-number
Syntax
isdn check-called-number check-index called-party-number [ : subaddress ]

undo isdn check-called-number check-index
View
ISDN BRI interface view, ISDN PRI interface view
Parameter
check-index: Called number or subaddress checking index, which is in the range of 1 to

3.
called-party-number: Called number, a string comprising 1 to 20 digits.
subaddress: Subaddress, which is a string comprising digits and/or case-insensitive
English letters and is 1 to 20 characters in length.
Description
Use the isdn check-called-number command to configure the called number or

subaddress that the system should verify when receiving a digital call.
Use the undo isdn check-called-number command to remove the configuration.
By default, the system does not check the called number or subaddress carried by
incoming digital calls.
This command is used for setting the examined item when a digital call is received. If a
subaddress is specified, the system will deny an incoming digital call if the calling party
sends a wrong subaddress or does not send at all.
Example
# Check whether the called number carried by incoming digital calls is 66668888 on the
interface Bri 0/0/0.
[H3C-Bri0/0/0] isdn check-called-number 1 66668888 : 123
3.1.17 isdn crlength
Syntax
isdn crlength call-reference-length

undo isdn crlength
View
ISDN interface view
3-17
Parameter
call-reference-length: ISDN call reference length, which can be one or two bytes.
Description
Use the isdn crlength command to set length of the call reference used when a call is
placed on an ISDN interface.
Use the undo isdn crlength command to restore the default ISDN call reference
length on the interface.
Call reference is equal to the sequence number that the protocol assigns to each call. It
is one or two bytes in length and can be used cyclically.
Note:
When the router receives a call from a remote device, it can automatically identify the
length of the call reference. However, some devices on the network do not have such
capability. In the event that the router is required to place calls to such a device
connected to it, you must configure the router to use the same call reference length
configured on the connected device.
By default, the call reference length is two bytes for E1 PRI and T1 PRI interfaces and
one byte for BRI interfaces.
You are not allowed to configure this command on an ISDN interface if there is still a
call on it. This command can take effect only if it is configured when there is no call on
the interface. Alternatively you can manually disable the interface by executing the
shutdown command, configure the command, and then enable the interface by
executing the undo shutdown command. The operations, however, will lead to the
disconnection of the call existing on the interface.
Example
# Set the call reference length carried by the ISDN messages on the PRI interface
serial0/0/0:15 to 1 byte.
[H3C-serial0/0/0:15] isdn crlength 1
Syntax

3-18
View
Parameter
information-element: List of information elements that supports transparent

element.
incoming: Specifies to transparently transmit the information element on Q.931 packet
incoming direction.
outgoing: Specifies to transparently transmit the information element on Q.931 packet
outgoing direction.
both: Specifies to transparently transmit the information element on both the incoming
and outgoing direction of Q.931 packet.
Table 3-6 Related information element supporting transparent transmission

display Display
facility Facility

progress Progress
display Display
facility Facility
Description
Use the isdn ie passthrough command to enable transparent transmission of certain

or all related information element and you can use this command to configure
3-19
Use the undo isdn ie passthrough command to disable transparent transmission for
Q.931 related information element.
By default, Q.931 information element transparent transmission is not enabled on ISDN
interface (PRI interface and BRI interface).
This command is only valid when ISDN initiates or receives an H.323 call and invalid for
a DCC call.
Example
# Set to enable transparent transmission for facility on both direction on Serial

0/0/0:15.
<H3C> system-view
3.1.19 isdn ignore connect-ack
Syntax
isdn ignore connect-ack

undo isdn ignore connect-ack
View
ISDN interface view
Parameter
None
Description
Use the isdn ignore connect-ack command to configure the router to switch the ISDN
protocol state to ACTIVE to start the data and voice service communications after
sending a CONNECT message without having to wait for a CONNECT ACK message.
Use the undo isdn ignore connect-ack command to restore the default setting.
By default, in the event that the router is communicating with an exchange, the ISDN
protocol must wait for the CONNECT ACK message in response to the CONNECT
message before it can switch to the ACTIVE state to start data and voice service
communications.
3-20
Note:
In the event that the router is communicating with an ISDN exchange, its settings must
be the same as those on the exchange.
the interface. Alternatively, you can manually disable the interface by executing the
Example
# Set the call process on the BRI interface 0/0/0 to proceed to the ACTIVE state without
waiting for CONNECT ACK messages.
[H3C-Bri0/0/0] isdn ignore connect-ack
3.1.20 isdn ignore hlc
Syntax
isdn ignore hlc

undo isdn ignore hlc
View
ISDN interface view
Parameter
None
Description
Use the isdn ignore hlc command to disable ISDN to carry the higher layer
compatibility (HLC) information element in the SETUP messages sent when placing
voice calls.
Use the undo isdn ignore hlc command to configure ISDN to carry the HLC
information element in SETUP messages.
By default, HLC information element is carried in SETUP messages when placing voice
calls.
3-21
Note:
Example
# Configure ISDN to carry the HLC information element in the SETUP messages for the
voice calls placed on the Bri interface 0/0/0.
[H3C-Bri0/0/0] isdn ignore hlc
3.1.21 isdn ignore llc
Syntax
isdn ignore llc

undo isdn ignore llc
View
ISDN interface view
Parameter
None
Description
Use the isdn ignore llc command to disable ISDN to carry the Lower Layer
Compatibility (LLC) information element in the SETUP messages sent when placing
voice calls.
Use the undo isdn ignore llc command to configure ISDN to carry the LLC information
element in SETUP messages.
By default, LLC information element is carried in SETUP messages when placing voice
calls.
3-22
Note:
Example
# Disable ISDN to carry the LLC information element in the SETUP messages for the
voice calls placed on the interface Bri 0/0/0.
[H3C-Bri0/0/0] isdn ignore llc
3.1.22 isdn ignore sending-complete
Syntax
isdn ignore sending-complete [ incoming | outgoing ]

undo isdn ignore sending-complete [ incoming | outgoing ]
View
ISDN interface view
Parameter
incoming: Ignores the Sending Complete Information Element in SETUP messages

with respect to incoming calls.
outgoing: Sends SETUP messages without the Sending Complete Information
Element with respect to outgoing calls.
Description
Use the isdn ignore sending-complete command to configure the ISDN protocol to
ignore the processing on the Sending Complete Information Element.
Use the undo isdn ignore sending-complete command to restore the default setting.
3-23
By default, in the event that the router is communicating with an exchange, the ISDN
protocol checks whether the received SETUP messages carry the Sending Complete
Information Element with respect to incoming calls and carries the Sending Complete
Information Element in SETUP messages with respect to outgoing calls.
Note:
You can configure this command on an interface only when the ISDN protocol running
on the interface is DSS1, Q.SIG, NI2, or ETSI.
Example
# Ignore the Sending Complete Information Element in the received SETUP messages.
[H3C-Bri0/0/0] isdn ignore sending-complete incoming
# Disable carrying the Sending Complete Information Element in the transmitted

SETUP messages.
[H3C-Bri0/0/0] isdn ignore sending-complete outgoing
3.1.23 isdn L3-timer
Syntax
isdn L3-timer timer-name time-interval

undo isdn L3-timer { timer-name | all }
View
ISDN interface view
Parameter
timer-name: Name of a L3 timer of the ISDN protocol.

time-interval: Timer duration, which can take on one of the values listed in the following
table.
3-24
all: Restores the default durations of all the L3 timers.
Table 3-7 Description of Q931 timers
timer-name Value range (in units) Default (in units)

t301 30 to 1200 240
t302 5 to 60 15
t303 2 to 10 4
t304 10 to 60 30
t305 4 to 30 30
t308 2 to 10 4
t309 10 to 180 90
t310 10 to 180 40
t313 2 to 10 4
t316 2 to 180 120
t322 2 to 10 4
Description
Use the isdn L3-timer command to configure the duration of an ISDN L3 timer. Use the
undo isdn L3-timer command to restore the default duration of the ISDN L3 timer on
the interface.
You can view the default durations of the L3 timers in the ISDN protocol by executing
the display isdn parameters command.
Example
# Set the duration of the L3 timer T301 on the interface Bri 0/0/0 to 160 seconds.
[H3C-Bri0/0/0] isdn l3-timer t301 160
3.1.24 isdn number-property
Syntax
isdn number-property number-property [ calling | called ] [ in | out ]

undo isdn number-property [ calling | called ] [ in | out ]
View
ISDN interface view
3-25
Parameter
number-property: Type and number scheme of ISDN numbers. The argument takes on
a hex value in the range of 0 to 7F. When it is expressed in 8 bits, bits 1 through 4
represent the code scheme, bits 5 through 7 represent the code type, and bit 8 is
reserved. The following table lists the possible number type and code schemes. For
more information, see the related protocol for reference.
Table 3-8 Types and code schemes of ISDN numbers
Field (Bit) value

Code
Protocol Type Definition
scheme
8 7 6 5 4 3 2 1
0 0 0 User-specified
0 1 0 National network identification
0 1 1 International network identification
ANSI 0 0 0 0 Unknown/user-specified
0 0 0 1 Carrier identification code
Data network identification code (ITU-T
0 0 1 1
Recommendation X.121)
0 0 0 Unknown
0 0 1 International number
0 1 0 National number
1 0 0 Subscriber number
AT&T
0 0 0 0 Unknown
ISDN/telephony numbering loan
0 0 0 1
( Recommendation E.164/E.163)
1 0 0 1 Private numbering plan
3-26
Field (Bit) value

Code
scheme
8 7 6 5 4 3 2 1
0 0 0 Unknown
0 1 1 Network specific number
1 1 0 Abbreviated number
1 1 1 Reserved for extension
0 0 0 0 Unknown
DSS1
ISDN/telephony numbering
0 0 0 1
plan( Recommendation E.164)
Data numbering plan( Recommendation
0 0 1 1
X.121)
Telex numbering plan( Recommendation
0 1 0 0
F.69)
1 0 0 0 National standard numbering plan

1 1 1 1 Reserved for extension
3-27
Field (Bit) value

Code
scheme
8 7 6 5 4 3 2 1
0 0 0 Unknown
1 1 0 Abbreviated number
1 1 1 Reserved for extension
0 0 0 0 Unknown
ETSI
0 0 0 1
Data numbering plan( Recommendation
0 0 1 1
X.121)
Telex numbering plan( Recommendation
0 1 0 0
F.69)
1 0 0 0 National standard numbering plan

1 1 1 1 Reserved for extension
Unknown number in Unknown numbering
0 0 0 0 0 0 0
plan
International number in ISDN numbering
0 0 1 0 0 0 1
plan (Rec. E.164)
National number in ISDN numbering plan
0 1 0 0 0 0 1
(Rec. E.164)
NI
Network specific number in private
0 1 1 1 0 0 1
numbering plan
Local (directory) number in ISDN
1 0 0 0 0 0 1
numbering plan (Rec. E.164)
Abbreviated number in private numbering
1 1 0 1 0 0 1
plan
3-28
Field (Bit) value

Code
scheme
8 7 6 5 4 3 2 1
0 0 0 Unknown
NTT
0 0 0 0 Unknown
0 0 0 1
Unknown number in Unknown numbering
0 0 0 0 0 0 0
plan
Unknown number in ISDN/Telephony
0 0 0 0 0 0 1
numbering plan (ITU-T Rec.E.164/E.163)
International number in ISDN/Telephony
0 0 1 0 0 0 1
National number in ISDN/Telephony
0 1 0 0 0 0 1
Subscriber number in ISDN/Telephony
0 1 1 0 0 0 1
QSIG
Unknown number in private numbering
0 0 0 1 0 0 1
plan
Level 2 regional number in private
0 0 1 1 0 0 1
numbering plan
0 1 0 1 0 0 1
numbering plan
PISN specific number in private numbering
0 1 1 1 0 0 1
plan

1 0 0 1 0 0 1
numbering plan
Note:
The undefined bits in all the protocols are reserved for other purposes.
calling: The specified number property is for calling numbers.
3-29
called: The specified number property is for called numbers.

in: The specified number property is for calling numbers and called numbers in
incoming ISDN calls.
out: The specified number property is for calling numbers and called numbers in
outgoing ISDN calls.
Description
Use the isdn number-property command to set the type and code scheme of calling
or called numbers in incoming or outgoing ISDN calls.
Use the undo isdn number-property command to restore the default.
By default, the system selects ISDN number type and code scheme depending on
upper layer service.
If the isdn number-property command is configured, the system adopts the
configured ISDN number type and code scheme without considering the upper layer
service.
The following table shows how to set number type and code scheme.
Table 3-9 Set the type and code scheme of ISDN numbers
Operation Command
Set a number type and code scheme
isdn number-property number-property
for the called numbers in incoming
called in
calls
Remove the number type and code
scheme for the called numbers in Undo isdn number-property called in
incoming calls
Set a number type and code scheme isdn number-property number-property
for the called numbers in outgoin calls called out
scheme for the called numbers in undo isdn number-property called out
outgoing calls
for the calling numbers in incoming
calling in
calls
scheme for the calling numbers in undo isdn number-property calling in
incoming calls
for the calling numbers in outgoing
calling out
calls
scheme for the calling numbers in undo isdn number-property calling out
outgoing calls
3-30
Operation Command
for the calling numbers in incoming
calling
and outgoing calls
scheme for the calling numbers in undo isdn number-property calling
incoming and outgoing calls
for the called numbers in incoming
called
and outgoing calls
scheme for the called numbers in undo isdn number-property called
for the calling and called numbers in
in
incoming calls
scheme for the calling and called undo isdn number-property in
numbers in incoming calls
for the calling and called numbers in
out
outgoing calls
scheme for the calling and called undo isdn number-property out
numbers in outgoing calls
for the calling and called numbers in isdn number-property number-property
scheme for the calling and called
undo isdn number-property
numbers in incoming and outgoing
calls
Example
# On interface BRI 0/0/0, set both number type and code scheme of calling numbers in
incoming ISDN calls to unknown.
[H3C-Bri0/0/0] isdn number-property 0 calling in
# On interface BRI 0/0/0, set both number type and code scheme of called numbers in
outgoing ISDN calls to unknown.
[H3C-Bri0/0/0] isdn number-property 0 called out
3-31
3.1.25 isdn overlap-sending
Syntax
isdn overlap-sending [ digits ]

undo isdn overlap-sending
View
ISDN interface view
Parameter
digits: The number of the digits, which is sent each time in overlap-sending mode and is
in the range of 1 to 15.By default, digits are 10.
Description
Use the isdn overlap-sending command to set the system to send the called number
information in the overlap mode on the ISDN interface. Use the undo isdn
overlap-sending command to set the system to send the called information in full
mode.
In "overlap-sending” mode, the digits of each called number will be sent separately and
the number of the digits sent each time can be set using this command.
In "full-sending" mode, all the digits of each called number will be collected and sent at
a time.
By default, full-sending mode applies.
Overlap-sending is only suitable for five ISDN protocols: ANSI, DSS1, ETSI, NI, and
QSIG.
NI2 only supports full-sending.
Example
# Apply the overlap-sending function on the interface Bri0/0/0 and set the number of
digits allowed to send each time to 12 digits.
[H3C-Bri0/0/0] isdn overlap-sending 12
3-32
3.1.26 isdn pri-slipwnd-size
Syntax
isdn pri-slipwnd-size window-size

isdn pri-slipwnd-size default
View
Interface view
Parameter
window-size: Slide window size in the range of 5 to 14. By default, the slide window size
on PRI interfaces is 7.
Description
Use the isdn pri-slipwnd-size command to set the slide window size on a PRI
interface. Use the isdn pri-slipwnd-size default command to restore the default slide
window size on the PRI interface.
Example
# Configure the slide window size on the interface e1 0/0/0 to 10.

[H3C] controller e1 0/0/0
[H3C-E1 0/0/0] using
[H3C-E1 0/0] pri-set
[H3C-Serial0/0/0:15] isdn pri-slipwnd-size 10
3.1.27 isdn protocol-mode
Syntax
isdn protocol-mode mode

undo isdn protocol-mode
View
ISDN interface view
Parameter
mode: ISDN protocol mode, which can be network or user.
Description
Use the isdn protocol-mode command to set the ISDN interface to operate on the
user side or network side of ISDN protocol.
3-33
By default, both ISDN BRI and ISDN PRI interfaces are operating on the user-side of
ISDN protocol. Among BRI interfaces, only BSV interfaces support network-side BRI.
Note:
z This command is available on ISDN BSV and PRI interfaces only.
z Network-side ISDN PRI interfaces only support Q.SIG and DSS1.
z Network-side ISDN BSV interfaces only support DSS1.
Example
# Set interface serial 0/0/0:15 to operate on network-side of ISDN protocol.

[H3C-serial0/0/0:15] isdn protocol-mode network
# Restore the default ISDN protocol mode of interface serial 0/0/0:15.

[H3C-serial0/0/0:15] undo isdn protocol-mode
3.1.28 isdn protocol-type
Syntax
isdn protocol-type protocol
View
ISDN interface view
Parameter
protocol: ISDN protocol, which can be DSS1, NTT, NI, QSIG, ETSI, ANSI, or AT&T.
Description
Use the isdn protocol-type command to set the ISDN protocol to be run on an ISDN
interface.
By default, both BRI and PRI interfaces run the ISDN protocol DSS1.
3-34
Note:
You are allowed to configure:
z ANSI ISDN on BRI and T1 PRI interfaces;
z AT&T ISDN on T1 PRI interfaces;
z DSS1 ISDN on BRI, E1 PRI, and T1 PRI interfaces;
z ETSI ISDN on BRI, E1 PRI, and T1 PRI interfaces;
z NI (National ISDN) on BRI interfaces;
z NI2 (National ISDN) on T1 PRI interfaces;
z QSIG ISDN on E1 PRI and T1 PRI interfaces;
z NTT ISDN on BRI and T1 PRI interfaces.
For a network-side PRI interface, its protocol must be set to DSS1 or Q.SIG; for a
network-side BSV interface, its protocol must be set to DSS1.
Example
# Apply ISDN ETSI on interface Bri0/0/0.

[H3C-Bri0/0/0] isdn protocol-type etsi
# Apply ISDN NI2 on interface Pri0/0/0.

[H3C] interface serial0/0/0:23
[H3C-Serial0/0/0:23] isdn protocol-type ni2
3.1.29 isdn q921-permanent
Syntax
isdn q921-permanent
undo isdn q921-permanent
View
ISDN interface view
Parameter
None
Description
Use the isdn q921-permanent command to enable the Q.921 permanent link function.
Use the undo isdn q921-permanent command to disable the Q.921 permanent link
function.
3-35
After you enable the function, the ISDN BRI interface automatically sets up and
maintains one or two Layer 2 links, whether Layer 3 calls are present on it or not. Two
Layer 2 links involves when two-TEI mode is enabled on the interface.
By default, the Q.921 permanent link function is disabled.
Example
# Enable the Q.921 permanent link function on interface BRI 2/0/0.

[H3C-Bri2/0/0] isdn q921-permanent
# Disable the Q.921 permanent link function on interface BRI 2/0/0.

[H3C-Bri2/0/0] undo isdn q921-permanent
3.1.30 isdn send-restart
Syntax
isdn send-restart
undo isdn send-restart
View
System view
Parameter
None
Description
Use the isdn send-restart command to enable PRI interfaces to actively send ISDN
RESTART messages to clear calls of the remote end before maintaining B channels.
Use the undo isdn send-restart command to disable PRI interfaces to actively send
ISDN RESTART messages.
By default, the PRI interface actively sends RESTART messages to the remote end
before maintaining B channels.
Example
# Enable the PRI interface to send RESTART messages before maintaining B

channels.
[H3C] isdn send-restart
# Disable the PRI interface to send RESTART messages before maintaining B

channels.
[H3C] undo isdn send-restart
3-36
3.1.31 isdn spid auto_trigger
Syntax
isdn spid auto_trigger
View
Parameter
None
Description
Use the isdn spid auto_trigger command to enable SPID auto-negotiation once on
the BRI interface running the NI protocol.
On a BRI interface compliant with the North American ISDN protocol, the router can
place a call only after SPID negotiation or initialization. SPID information can be
obtained via static configuration or dynamic negotiation. You may manually trigger a
new SPID negotiation request by executing this command if the SPID negotiation in
dynamic negotiation fails or just for the purpose of testing.
By default, a BRI interface does not originate a SPID negotiation request unless
triggered by a call.
This command applies only on the BRI interface running the NI protocol.
Example
# Manually trigger a new SPID negotiation request on the interface bri0/0/0.

[H3C-bri0/0/0] isdn spid auto_trigger
3.1.32 isdn spid nit
Syntax
isdn spid nit

undo isdn spid nit
View
Parameter
None
3-37
Description
Use the isdn spid nit command to set the SPID processing mode to NIT (Not Initial
Terminal) on an NI-compliant BRI interface. Use the undo isdn spid nit command to
disable the NIT mode on the BRI interface.
By default, NIT mode does not apply on BRI interfaces. Instead, static SPID or dynamic
SPID negotiation is applied.
On an NI-compliant BRI interface, calls can be placed only after the SPID negotiation or
initialization is finished. When the router is communicating with an NI-compliant
exchange that does not support SPID negotiation, you can use this command to set the
SPID processing mode on the router to NIT and the ISDN will ignore ISPID negotiation
and initialization.
This command applies only on NI-compliant BRI interfaces.
Example
# Ignore SPID negotiation and initialization on the interface bri0/0/0, i.e., adopting the
NIT mode.
[H3C-bri0/0/0] isdn spid nit
3.1.33 isdn spid timer
Syntax
isdn spid timer seconds

undo isdn spid timer
View
Parameter
seconds: Duration of the SPID timer, which is in the range of 1 to 255 seconds, and
Description
Use the isdn spid timer command to set the duration of the timer TSPID for an
NI-compliant BRI interface to timer_length.
Use the undo isdn spid timer command to restore the default duration of the timer
TSPID for the NI-compliant BRI interface.
On a BRI interface compliant with the ISDN protocol in North America, calls can be
placed only after the SPID negotiation or initialization is finished. SPID information can
be obtained via static configuration or dynamic negotiation. The timer TSPID is started
3-38
when the terminal originates a negotiation or initialization request by sending the

INFORMATION message. You can use this command to modify the duration of TSPID.
Example
# Set the duration of TSPID on the interface bri0/0/0 to 50 seconds.

[H3C-bri0/0/0] isdn spid timer 50
3.1.34 isdn spid service
Syntax
isdn spid service [ audio | data | speech ]

undo isdn spid service
View
Parameter
audio: Supports audio service.

data: Supports data service.
speech: Supports voice service.
Description
Use the isdn spid service command to configure the service types that must be
supported in SPI negotiation on the BRI interface adopting NI protocol.
Use the undo isdn spid service command to delete he service types that must be
supported in SPI negotiation on the BRI interface adopting NI protocol.
There are three types of services. You can select any one or none. None means all
services are supported. By default, SPID needs to support data and voice service
simultaneously.
Generally, as for the BRI interface adopting North America ISDN protocol, you need to
negotiate or initialize SPID before originate a call. During negotiation, SPCS may send
multiple SPIDs and carry the service types supported by the SPID, therefore, the router
needs to choose a proper SPID according to the local service type.
This command can only be applied on the BRI interface adopting NI protocol.
Example
# Set the service type supported by BRI interface to data and voice.
[H3C-bri0/0/0] isdn spid service data
[H3C-bri0/0/0] isdn spid service speech
3-39
3.1.35 isdn spid resend
Syntax
isdn spid resend times

undo isdn spid resend
View
Parameter
times: An integer in the range of 1 to 255 times, which defaults to 1.
Description
Use the isdn spid resend command to set the number of INFORMATION message
retransmission attempts for SPID negotiation or initialization on an NI-compliant BRI
interface.
Use the undo isdn spid resend command to restore the default number of
INFORMATION message retransmission attempts on the interface.
placed only after the SPID negotiation or initialization is finished. The timer TSPID is
started when the terminal originates a negotiation or initialization request by sending
the INFORMATION message. If the terminal does not receive any response upon the
expiration of TSPID, it will retransmit the INFORMAITON message. You can use this
command to modify the number of INFORMATION message retransmission attempts.
Example
# Set the allowed number of INFORMATION retransmission attempts to five.

[H3C-bri0/0/0] isdn spid resend 5
3.1.36 isdn spid1
Syntax
isdn spid1 spid [ LDN ]

undo isdn spid1
View
3-40
Parameter
spid: String comprising 1 to 20 digits.

LDN: Local dialing number, a string comprising 1 to 30 digits.
Description
Use the isdn spid1 command to configure SPID information for the B1 channel on the
NI-compliant BRI interface.
Use the undo isdn spid1 command to remove the SPID information of the B1 channel
on the interface.
On a BRI interface compliant with the ISDN protocol (North America), calls can be
be obtained via static configuration or dynamic negotiation. Only after SPID information
is configured for the B1 channel on the BRI interface can the system makes the L3
initialization to place calls normally.
In addition, when the router works with an ISDN NI compliant switch (the DMS100 for
example) in North America, you must use this command to configure a unique SPID
and LDN for each B channel to ensure a successful MP channel call. Otherwise, only
one B channel can be brought up. Also note that both SPID and LDN are provided by
your service provider and the configuration of LDN voids the configuration of the ISDN
calling command.
By default, Both SPID and LDN for the B1 channel on the BRI interface are null.
Example
# Set SPID to “012345” for the B1 channel on the interface bri0/0/0.

[H3C-bri0/0/0] isdn spid1 012345
# Assign the SPID 012345 and the LDN 54321 to the B1 channel on the BRI interface.
[H3C-bri0/0/0] isdn spid1 012345 54321
3.1.37 isdn spid2
Syntax
isdn spid2 spid [ LDN ]

undo isdn spid2
View
3-41
Parameter
spid: String comprising 1 to 20 digits.

LDN: Local dialing number, a string comprising 1 to 30 digits.
Description
Use the isdn spid2 command to configure SPID information for the B1 channel on an
NI-compliant BRI interface.
Use the undo isdn spid2 command to remove the SPID information of the B1 channel
on the interface.
be obtained via static configuration or dynamic negotiation. Only after SPID information
is configured for the B2 channel on the BRI interface can the system makes the L3
initialization to place calls normally.
In addition, when the router works with an ISDN NI compliant switch (the DMS100 for
example) in North America, you must use this command to configure a unique SPID
and LDN for each B channel to ensure a successful MP channel call. Otherwise, only
one B channel can be brought up. Also note that both SPID and LDN are provided by
your service provider and the configuration of LDN voids the configuration of the ISDN
calling command.
By default, both SPID and LDN for the B2 channel on the BRI interface are null.
Example
# Set SPID to “012345” for the B2 channel on the interface bri0/0/0.

[H3C-bri0/0/0] isdn spid2 012345
# Assign the SPID 012345 and the LDN 54321 to the B2 channel on the BRI interface.
[H3C-bri0/0/0] isdn spid2 012345 54321
3.1.38 isdn statistics
Syntax
isdn statistics { clear | continue | display [ flow ] | start | stop }
View
ISDN interface view
Parameter
clear: Clears the statistics.
3-42
continue: Continues counting.

display: Displays the statistics.
display flow: Displays the statistic information about message flows.
start: Starts counting.
stop: Stops counting.
Description
Use the isdn statistics command to have the system make statistics on the
information received and transmitted at an ISDN interface.
By default, no statistics is made on the information transmitted and received at
interfaces.
Use the isdn statistics start command in the view of an interface to start making
statistics on the messages received and transmitted at the interface.
Use the isdn statistics display command to view the statistic information.
Use the isdn statistics continue command to continue the effort in making statistics.
Use the isdn statistics display flow command to view the statistics in the form of flow.
Use the isdn statistics stop command to stop making statistics.
Example
# Start counting incoming and outgoing messages on PRI interface serial 0/0/0:15.
[H3C-serial0/0/0:15] isdn statistics start
# After a while, stop counting incoming and outgoing messages on PRI interface serial
0/0/0:15.
[H3C-serial0/0/0:15] isdn statistics stop
# Display statistics about the received and sent messages for PRI interface serial
0/0/0:15.
[H3C-serial0/0/0:15] isdn statistics display
Q.931 message received and sent out on current port:
CALL_PROC Send(0) Recv(6)
SETUP Send(6) Recv(13)
CONN Send(13) Recv(5)
SETUP_ACK Send(0) Recv(6)
CONNECT_ACK Send(5) Recv(13)
DISCONNECT Send(3) Recv(16)
RELEASE Send(1) Recv(18)
RELEASE_COM Send(18) Recv(1)
3-43
3.1.39 isdn two-tei
Syntax
isdn two-tei
undo isdn two-tei
View
BRI interface view
Parameter
None
Description
Use the isdn two-tei command to have the router requests the connected switch for a
new TEI value before calling for a B channel.
Use the undo isdn two-tei command to restore the default TEI handling practice on
the BRI interface.
This command applies in the situation where the switch with which the router works is
an ISDN NI compliant switch (the DMS100 for example) in North America. In this case,
you must ensure that the TEI value assigned to each B channel is unique to ensure a
successful MP channel call. Otherwise, only one B channel can be brought up.
By default, all the B channels on the BRI interface use one TEI value.
Related command: isdn protocol-type NI, isdn spid1, isdn spid2, and ppp mp.
Example
# Configure the router to request the connected switch for a new TEI value before
calling to bring up a B channel.
[H3C-bri0/0/0] isdn two-tei
3-44
Comware V3 Chapter 4 SLIP Configuration Commands
Chapter 4 SLIP Configuration Commands
4.1 SLIP Configuration Commands

4.1.1 debugging slip
Syntax
debugging slip { event | error | packet | all }

undo debugging slip { event | error | packet | all }
View
User view
Parameter

all: Enables all debuggings of SLIP protocol.
Description
Use the debugging slip command to enable the debugging switch of the SLIP
protocol.
Use the undo debugging slip command to disable the debugging of the SLIP
protocol.
By default, all debugging switches of the SLIP protocol are disabled.
Example
# Enable all debuggings of SLIP protocol.

<H3C> debugging slip all
4.1.2 link-protocol slip
Syntax
link-protocol slip
View
Interface view
4-1
Comware V3 Chapter 4 SLIP Configuration Commands
Parameter
None
Description
Use the link-protocol slip command to set the link layer protocol of the interface as
SLIP.
By default, the link-layer protocol for interface is PPP.
P2P link can use simpler link layer protocol SLIP(Serial Line IP), which is mainly used
to run TCP/IP on the P2P serial port. SLIP is only used for the asynchronous link.
SLIP only defines the start and end identifiers of frame, so as to intercept IP packet on
the serial line. Compared with PPP, SLIP has no address concept, negotiation process,
differentiation of packet types (so only one network protocol can be supported at the
same time) and error correction function.
The link layer protocol of the interface shall be consistent with that of the peer interface.
Example
# Configure the link layer protocol on the interface Serial0/0/0 as SLIP.

[H3C-Serial0/0/0] link-protocol slip
4-2
Comware V3 Chapter 5 HDLC Configuration Commands
Chapter 5 HDLC Configuration Commands
5.1 HDLC Configuration Commands

5.1.1 link-protocol hdlc
Syntax
link-protocol hdlc
View
Interface view
Parameter
None
Description
Use the link-protocol hdlc command to configure the interface encapsulation as

HDLC. HDLC is a link layer protocol and can bear network layer protocols, such as IP
and IPX.
By default, the interface is encapsulated with PPP.
Related command: timer hold and display interface.
Example
# Configure HDLC encapsulation on interface Serial1/0/0.

[H3C-Serial1/0/0] link-protocol hdlc
5.1.2 timer hold
Syntax
timer hold seconds

undo timer hold
View
Interface view
Parameter
seconds: Value of the polling interval. The value is in the range from 0 to 32767 in
seconds. 0 indicates that the link detection function is disabled.
5-1
Comware V3 Chapter 5 HDLC Configuration Commands
Description
Use the timer hold command to set the polling interval. Use the undo timer hold
command to restore the default value of the polling interval.
By default, the value of seconds is 10 seconds.
The polling interval should be set to equal at the two ends of the data link. A zero polling
interval set in both ends will close the polling operation of the data link.
Example
# Set the value of polling interval on interface Serial1/0/0 to 100 seconds.

5-2
Comware V3 Chapter 6 Frame Relay Configuration Commands
Chapter 6 Frame Relay Configuration Commands
6.1 Frame Relay Configuration Commands

6.1.1 annexg
Syntax
annexg { dte | dce }

undo annexg { dte | dce }
View
DLCI view
Parameter
dte: Annex G DTE mode.

dce: Annex G DCE mode.
Description
Use the annexg command to enable T1.617 Annext G on the frame relay interface for
data transmission.
Use the undo annexg command to disable T1.617 Annext G on the frame relay
interface.
By default, T1.617 Annext G is disabled on the frame relay interface.
Example
# Enable T1.617 Annext G on a frame relay interface for data transmission.

[H3C-fr-dlci-Serial1/0/0-200] annexg dte
6.1.2 x25 template
Syntax
x25 template name

undo x25 template name
View
System view, DLCI view
6-1
Parameter
name: X.25 template name.
Description
Use the x25 template command in system view to create an X.25 template and in DLCI
view to reference the template.
Use the undo x25 template command to delete an X.25 template or remove the
referenced template from the frame relay interface.
Example
# Create an X.25 template.

[H3C] x25 template template001
# Reference an X.25 template that has been created.

[H3C-fr-dlci-Serial1/0/0-200] x25 template template001
6.1.3 debugging fr
Syntax
debugging fr { all | congestion | de | event | fragment | inarp | lmi | mfr control |

packet | transmit-rate } [ interface interface-type interface-number [ dlci
dlci-number ] ]
undo debugging fr { all | congestion | de | event | fragment | inarp | lmi | mfr
control | packet | transmit-rate } [ interface interface-type interface-number [ dlci
dlci-number ] ]
View
User view
Parameter
all: All frame relay information debugging.

congestion: Information debugging of frame relay traffic congestion management.
de: DE information debugging of FRTS.
event: Information debugging of frame relay event. When this parameter is used, no
interface can be specified.
fragment: Information debugging of frame relay fragment. When this parameter is in
use, interface and DLCI must be specified.
inarp: Information debugging of frame relay address resolution protocol. When this
parameter is in use, DLCI can be specified.
lmi: Information debugging of frame relay LMI (Local Management Interface) protocol.
6-2
mfr control: Information debugging of multilink frame relay bundle and bundle link.
packet: Information debugging of frame relay packet. When this parameter is in use,
DLCI can be specified.
transmit-rate: Information debugging of FRTS transmit rate.
dlci dlci-number: DLCI number of virtual circuit, in the range 16 to 1007.
Description
Use the debugging fr command to enable frame relay information debugging.

Use the undo debugging fr command to disable frame relay information debugging.
By default, frame relay information debugging is disabled.
For multilink frame relay, if the information debugging of multilink frame relay bundle
and bundle link (mfr control) are enabled, the sent/received bundle link controlling
information and status change of bundle link will be displayed.
If FRTS function is enabled, the change of frame relay sending rate can be seen after
the transmit rate information debugging (transmit-rate) is enabled.
The enabling of frame relay information debugging greatly affects system performance,
so this command should be used cautiously.
Example
# Enable the FR compress debugging of all interfaces.

<H3C> debugging fr compress
# Enable the FRTS congestion management debugging of serial interface 5/0/1.

<H3C> debugging fr congestion interface serial 5/0/1
# Enable DE debugging of FRTS on serial interface 5/0/1.

<H3C> debugging fr de interface serial 5/0/1
# Enable FRTS transmit rate debugging of serial interface 5/0/1.

<H3C> debugging fr transmit-rate interface serial 5/0/1
# Enable debugging of the bundle interface MFR1, supposing several links have been
bundle on it.
<H3C> debugging fr mfr control interface mfr1
serial3/0/2(Out):
MFR msg=Add_link, Length=28, Link=serial5/1/0, BL state=Add_sent
e1 00 01 01 07 4d 46 52 30 00 02 0c 53 65 72 69 61 6c 32 3a
serial3/0/2(In):
MFR msg=Add_link, Length=30, Link=serial5/1/0, BL state=Add_sent
e1 00 01 01 09 6b 70 6c 6b 70 6c 00 02 0c 53 65 72 69 61 6c
6-3
serial3/0/2(Out):
MFR msg=Add_link_ack, Length=28, Link=serial5/1/0, BL state=Add_rx
e1 00 02 01 07 4d 46 52 30 00 02 0c 53 65 72 69 61 6c 32 3a
serial3/0/2(Out):
MFR msg=Hello, Length=9, Link=serial5/1/0, BL state=Up
e1 00 05 03 06 43 4b 01 f6
serial3/0/2(In):
MFR msg=Hello_ack, Length=9, Link=serial5/1/0, BL state=Up
e1 00 05 03 06 2f f7 00 a5
Table 6-1 Description on the fields of the debugging fr command
Field Description
Type of the control packets received and transmitted on
MFR msg
the bundle link.
Length Length of the control packets.
Link Interface number of the bundle link.

BL state Operating state about the bundle link.
6.1.4 debugging fr compress
Syntax
debugging fr compress [ interface interface-type interface-number]

undo debugging fr compress [ interface interface-type interface-number]
View
User view
Parameter

number.
Description
Use the debugging fr compress command to enable FRF9 IPHC debugging of frame
relay.
Use the undo debugging fr compress command to disable FRF9 IPHC debugging of
frame relay.
Example
# Enable FRF9 IPHC debugging of frame relay.
6-4
<H3C> debugging fr compress
6.1.5 debugging fr compression
Syntax
debugging fr compression iphc { rtp | tcp } { all | context_state | error | full_header

| general_info }
undo debugging fr compression iphc { rtp | tcp } { all | context_state | error |
View
User view
Parameter
all: Enables all FRF20 IPHC RTP/TCP debugging.

context_state: Enables FRF20 IPHC RTP/TCP context_state packet debugging.
error: Enables FRF20 IPHC RTP/TCP error debugging.
full_header: Enables FRF20 IPHC RTP/TCP packet debugging.
general_info: Enables general FRF20 IPHC RTP/TCP debugging.
Description
Use the debugging fr compression iphc command to enable FRF20 IPHC

debugging of frame relay.
Use the undo debugging fr compression iphc command to disable FRF20 IPHC
debugging of frame relay.
Example
# Enable FRF20 IPHC RTP error debugging of frame relay.

<H3C> debugging fr compression iphc rtp error
6.1.6 debugging fr pvc-group
Syntax
debugging fr pvc-group [ interface interface-type interface-number ]

[ pvc-group-name ]
undo debugging fr pvc-group [ interface interface-type interface-number ]
[ pvc-group-name ]
View
User view
6-5
Parameter

pvc-group-name: PVC group name, a string consisting of 1 to 16 characters.
Description
Use the debugging fr pvc-group command to enable debugging for the specified
PVC group or all PVC groups.
Use the undo debugging fr pvc-group command to disable the debugging output.
By default, the debugging of PVC groups is disabled.
Related command: fr pvc-group.
Example
# Enable debugging for the PVC group named 123 on interface Serial1/0/0.
<H3C> debugging fr pvc-group interface serial1/0/0 123
0.292940090 46A FR/8/debug8: PVCGROUP: Serial1/0/0, pvc group name:123
*0.292940180 46A FR/8/debug8: pvc group state change to DOWN
*0.292963710 46A FR/8/debug8: PVCGROUP: Serial1/0/0, pvc group name:123
*0.292963800 46A FR/8/debug8: pvc group state change to UP
The above debugging information displays the status change of the PVC group named
123 on interface Serial1/0/0.
6.1.7 debugging pppofr
Syntax
debugging pppofr { all | packet | event } [ interface virtual-template number ]
View
User view
Parameter
all: Enable all PPPoFR debugging switches.

packet: Enable PPPoFR packet debugging switch.
event: Enable event debugging switch.
interface virtual-template number: Virtual template interface number
Description
Use the debugging pppofr command to enable PPPoFR debugging.

Use the undo debugging pppofr command to disable PPPoFR debugging.
6-6
Example
# Enable PPPoFR packet debugging on all virtual templates.

<H3C> debugging pppofr packet
6.1.8 display fr compress
Syntax
display fr compress [ interface interface-type interface-number ]
View
Any view
Parameter
interface-type interface-number: Specifies an interface.
Description
Use the display fr compress command to view the statistics information of the frame
relay compression. If no interface is specified, the DLCI statistics information of all the
interfaces will be displayed.
Related command: fr compression frf9.
Example
# View the frame relay compression statistics information of MFR interface 4/0/0.
<H3C> display fr compress
Serial2/0/0-DLCI:100
enable frame-relay compression
Uncompressed Octets out/in : 766/0 Compressed Octets out/in : 329/0
1 min avg ratio xmt/rcv:0.42/0.00 5 min avg ratio xmt/rcv:0.42/0.00
Table 6-2 Description on the fields of the display fr compress command
Field Description
enable frame-relay compression Frame relay compression is enabled
Uncompressed transmitted /received
Uncompressed Octets out/in : 766/0
octets
Compressed Octets out/in : 329/0 Compressed transmitted/received octets
In one minute, average
1 min avg ratio xmt/rcv:0.42/0.00
transmission/receiving rate
In five minutes, average
5 min avg ratio xmt/rcv:0.42/0.00
transmission/receiving rate
6-7
6.1.9 display fr dlci-switch
Syntax
display fr dlci-switch [ interface interface-type interface-num ]
View
Any view
Parameter
interface-type interface-num : Specifies an interface. It can only be a main interface.
Description
Use the display fr dlci-switch command to view the information of the configured FR
switching to check if the frame relay switching of a user is correctly configured.
Related command: fr dlci-switch.
Example
# View the information of the configured FR switching.

<H3C> display fr dlci-switch
Status Interface(Dlci) < -----> Interface(Dlci)
Inactive Serial0/1/1:10(100) Serial1/1/0:10(100)
Table 6-3 Description on the fields of the display fr dlci-switch command
Field Description
Status The status of FR switching function.
Input interface and its DLCI, output
Interface(Dlci) < -- > Interface(Dlci)
interface and its DLCI.
6.1.10 display fr inarp-info
Syntax
display fr inarp-info [ interface interface-type interface-num ]
View
Any view
Parameter
interface-type interface-num: Specifies an interface. It can only be a main interface.
6-8
Description
Use the display fr inarp-info command to view statistics about frame relay inverse
ARP (INARP) packets, including requests and replies.
According to the output of this command, you can diagnose whether INARP is
operating normally.
Related command: fr inarp.
Example
# Display statistics about frame relay INARP packets.

<H3C> display fr inarp-info
Frame relay InverseARP statistics for interface Serial1/0/0 (DTE)
In ARP request Out ARP reply Out ARP request In ARP reply
0 0 1 1
Table 6-4 Description on the fields of the display fr inarp-info command
Field Description
Frame relay InverseARP statistics for Display frame relay INARP packet
interface Serial1/0/0 (DTE) statistics for the interface
In ARP request Received ARP requests
Out ARP reply Transmitted ARP replies

Out ARP request Transmitted ARP requests
In ARP reply Received ARP replies
6.1.11 display fr interface
Syntax
display fr interface interface-type interface-num
View
Any view
Parameter
interface-type interface-num: Specifies an interface. It can be a main interface or a

sub-interface.
Description
Use the display fr interface command to view frame relay state on the specified or all
interfaces.
6-9
Example
# Display frame relay state on all interfaces.

<H3C> display fr interface
Serial1/0/0, DTE, physical up, protocol up
Serial1/0/0.1, multi-point, protocol up
Serial1/0/0.2, point-to-point, protocol down
Serial2/0/0, DCE, physical down, protocol down
Table 6-5 Description on the fields of the display fr interface command
Field Description
Interface encapsulated with frame relay, its
Serial1/0/0, DTE, physical up,
operating state (DTE, DCE, or NNI), its
protocol up
physical layer state and link layer state
Serial1/0/0.1, multi-point, protocol up Subinterface, its type and link layer state
6.1.12 display fr lmi-info
Syntax
display fr lmi-info [ interface interface-type interface-num ]
View
Any view
Parameter
interface-type interface-num: Specifies an interface.
Description
Use the display fr lmi-info command to view the statistics of LMI protocol frame.
The LMI protocol is used to maintain the current Frame Relay link, including the status
enquiry packet and status packet. The displayed information helps you to diagnose the
faults.
Related command: fr interface-type.
Example
# Display the statistics of LMI protocol frame.

<H3C> display fr lmi-info
Frame relay LMI statistics for interface Serial0/0 (DTE,
NONSTANDARD-COMPATIBLE)
6-10
T391DTE = 10 (hold timer 10)

N391DTE = 6, N392DTE = 3, N393DTE = 4
out status enquiry = 0, in status = 0
status timeout = 0, discarded messages = 0
Frame relay LMI statistics for interface Serial2/0/0 (DCE, ANSI)
T391DTE = 0 (no keepalive)
T392DCE = 15, N392DCE = 3, N393DCE = 4
in status enquiry = 0, out status = 0
status enquiry timeout = 0, discarded messages = 0
Table 6-6 Description on the fields of the display fr lmi-info command
Field Description
Frame relay LMI statistics for interface
Terminal type and LMI protocol type for
Serial1/0/0(DTE,
the frame relay interface
NONSTANDARD-COMPATIBLE)
T391DTE = 10 (keepalive 10) DTE-side T.391 setting
N391DTE = 6, N392DTE = 3, N393DTE DTE-side N.391, N.392, and N.393
=4 settings
State enquiry packets sent out the
out status enquiry = 96
interface
in status = 85 Status packets received on the interface
status timeout = 3, discarded messages Timeout status packets and dropped

=3 packets
6.1.13 display fr map-info
Syntax
display fr map-info [ interface interface-type interface-num ]
View
Any view
Parameter

sub-interface.
Description
Use the display fr map-info command to view all FR address maps or the one for the
specified interface.
6-11
This command displays whether the static address map entries are correct and
whether dynamic address mapping operates normally.
Related command: fr map ip, fr inarp.
Example
# Display frame relay address map table.

<H3C> display fr map-info
Map Statistics for interface Serial1/0/2 (DTE)
DLCI = 100, IP INARP 100.100.1.1, Serial1/0/2
create time = 2005/10/21 14:48:44, status = ACTIVE
encapsulation = ietf, vlink = 14, broadcast
DLCI = 200, IP INARP 100.100.1.1, Serial1/0/2
encapsulation = ietf, vlink = 0, broadcast
DLCI = 300, IP 1.1.1.1, Serial1/0/2
encapsulation = ietf, vlink = 15
Table 6-7 Description on the fields of the display fr map-info command
Field Description
Map Statistics for interface
Display the frame relay address map
Serial1/0/2 (DTE)
DLCI = 100, IP INARP 100.100.1.1, The PVC with DLCI 100 is mapped to remote
Serial1/0/2 IP address 100.100.1.1 through INARP
Time and date when the map entry was
create time = 2005/10/21 14:48:44
created
status = ACTIVE State of the map entry
encapsulation = ietf Encapsulation is set to IETF
broadcast Broadcasts are permitted
6.1.14 display fr map-info pppofr
Syntax
display fr map-info pppofr
View
Any view
Parameter
None
6-12
Description
Use the display fr map-info pppofr command to display information about the current
PPPoFR map and its state.
Example
# Display information about the current PPPoFR map and its state.
[H3C] display fr map-info pppofr
Fr Interface DLCI Fr State PPP Interface PPP Phase
Serial0/0/0 100 down Virtual-Template1 Phase:0
Serial0/0/0 200 down Virtual-Template2 Phase:0
Table 6-8 Description on the fields of the display fr map-info pppofr command
Field Description
Fr Interface Frame relay interface name
DLCI DLCI number
Fr State Frame relay state

PPP Interface Name of the associated PPP virtual template interface
PPP Phase Phase of the PPP session
6.1.15 display fr pvc-group
Syntax
display fr pvc-group [ interface interface-type interface-number ] [ pvc-group-name ]
View
Any view
Parameter

pvc-group-name: PVC group name, a string consisting of 1 to 16 characters.
Description
Use the display fr pvc-group command to view status, name, backup, protection, and
other information about the specified PVC group, PVC groups on a specified interface,
or all PVC groups if no argument is specified.
If no interface is specified, the displayed result does not provide information about the
interface where a PVC group is located.
6-13
Example
# Display information about the PVC group named 123 on interface Serial 1/0/0.
[H3C] display fr pvc-group interface serial1/0/0 123
PVC group information for interface Serial1/0/0 (DCE, physical UP)
PVC-GROUP NAME: 123:
Interface: Serial1/0/0
Protocol: IP
State: ACTIVE
PVC DLCI: 100 :

ip-precedence:
Grade: 0 - 3
bump: 4
protect: individual
state: ACTIVE
PVC DLCI: 200 :

ip-precedence:
Grade: 4 - 5
bump: 6
protect: group
state: ACTIVE
PVC DLCI: 300 :

ip-precedence:
Grade: 6 - 7
protect: group
state: ACTIVE
PVC DLCI: 400 :

ip-precedence:
User set default
state: ACTIVE
Table 6-9 Descriptions on the fields of the display fr pvc-group command
Field Description
PVC group information for
The interface Serial1/0/0 functions as DCE and its
interface Serial1/0/0 (DCE,
physical layer is up.
physical UP)
PVC-GROUP NAME: 123 The name of the PVC group is 123.
Interface: Serial1/0/0 PVC group 123 is located on interface Serial1/0/0.
6-14
Field Description
Protocol: IP IP protocol is used for data transmission.
State: ACTIVE PVC group 123 is active.
The PVC group includes a PVC with the DLCI of
PVC DLCI: 100
100.
The precedence identifier of IP packet is used to
ip-precedence:
differentiate the flows.
The PVC with DLCI 100 carries IP packets of
Grade: 0 - 3
priority levels from 0 to 3.
When the PVC with the DLCI of 100 goes down,
the PVC for carrying IP packets of priority level 4
bump: 4
(that it, the PVC with the DLCI of 200) takes over
for the failed PVC.
The PVC with the DLCI of 100 is configured to be
protect: individual
protected individually.
state: ACTIVE The PVC with the DLCI of 100 is active.
6.1.16 display fr pvc-info
Syntax
display fr pvc-info [ interface interface-type interface-num ]
View
Any view
Parameter

sub-interface.
Description
Use the display fr pvc-info command to view the frame relay PVC table.
This command displays the statistics about the frame relay PVC status and
receiving/sending data on this PVC.
Related command: fr dlci.
Example
# Display the frame relay PVC table.

<H3C> display fr pvc-info
PVC statistics for interface Serial1/0/0 (DTE, physical UP)
DLCI = 100, USAGE = UNUSED (0000), INTERFACE = Serial1/0/0
6-15
create time = 2000/04/01 23:55:39, status = active

in BECN = 0, in FECN = 0
in packets = 0, in bytes = 0
out packets = 0, out bytes = 0
DLCI = 102, USAGE = LOCAL (0010), INTERFACE = Serial1/0/0.1
create time = 2000/04/01 23:56:14, status = active
in BECN = 0, in FECN = 0
Table 6-10 Description on the fields of the display fr pvc-info command
Field Description
PVC statistics for interface Serial1/0/0 Display information about PVCs on the
(DTE, physical UP) frame relay interface
DLCI 100 was assigned to the PVC
DLCI = 100, USAGE = UNUSED (0000), through negotiation of LMI with DCE
INTERFACE = Serial1/0/0 end. Its state is unused, and it belongs to
interface Serial 1/0/0.
create time = 2005/04/01 23:55:39, Date and time creating the PVC and the
status = active state of the PVC
in BECN = 0, in FECN = 0 Received FECNs and BECNs
in packets = 0, in bytes = 0 Received frames and bytes
out packets = 0, out bytes = 0 Transmitted frames and bytes
6.1.17 display fr statistics
Syntax
display fr statistics [ interface interface-type interface-num ]
View
Any view
Parameter
interface-type interface-num: Specifies an interface. It can only be a main interface.
Description
Use the display fr statistics command to view the current Frame Relay statistics
about receiving and sending packets.
The output information of this command can help the user to perform FR traffic
statistics and fault diagnosis.
6-16
Example
# Display the Frame Relay statistics about receiving and sending packets.
<H3C> display fr statistics
Frame relay packet statistics for interface Serial1/0/0 (DTE)
discarded in packets = 13, discarded out packets = 0
Frame relay packet statistics for interface Serial1/1/0 (DCE)
discarded in packets = 0, discarded out packets = 0
Table 6-11 Description on the fields of the display fr statistics command
Field Description
Frame relay packet statistics for Display frame relay packet statistics for
interface Serial1/0/0 (DTE) the interface
in packets = 84, in bytes = 1333 Received packets and bytes
out packets = 92, out bytes = 1217 Transmitted packets and bytes
discarded in packets = 13, discarded out
Dropped incoming/outgoing packets
packets = 0
6.1.18 display interface mfr
Syntax
display interface mfr [ interface-number [ .subnumber ] ]
View
Any view
Parameter
interface-number: MFR interface number.

subnumber: MFR subinterface number.
Description
Use the display interface mfr command to view information on one or all MFR
interfaces, including configuration, state, and packet statistics.
6-17
Example
# Display the configuration and status information about interface MFR 4

<H3C> display interface mfr 4
MFR4 current state : UP
Description : MFR4 Interface
link-protocol is FRAME-RELAY IETF
LMI DLCI is 0, LMI type is Q.933a, frame relay DTE
LMI status enquiry sent 435, LMI status received 435
LMI status timeout 0, LMI message discarded 0
FIFO: 0/75/0
5 minutes input rate 0 bytes/sec, 0 packets/sec
5 minutes output rate 0 bytes/sec, 0 packets/sec
Table 6-12 Description on the fields of the display interface mfr command
Field Description
MFR4 current state : UP Physical layer state
Line protocol current state : UP Link layer state

Description : MFR4 Interface Interface description
The Maximum Transmit Unit is 1500 MTU
Internet Address is 12.12.12.2/16 IP address and mask

link-protocol is FRAME-RELAY IETF Link layer protocol
LMI DLCI is 0, LMI type is Q.933a, frame DCLI number used by LMI, LMI type,
relay DTE port type and operating mode
LMI status enquiry sent 435, LMI status Transmitted and received LMI status
received 435 enquiry messages
LMI status timeout 0, LMI message LMI timeout messages and dropped LMI
discarded 0 messages
FIFO queuing: (Outbound Type of the output queue on the
queue:Size/Length/Discards) interface
5 minutes input rate 0 bytes/sec, 0 Input rate of the interface within the last
packets/sec five minutes
5 minutes output rate 0 bytes/sec, 0 Output rate of the interface within the
packets/sec last five minutes
6-18
Field Description
Packets and bytes received on the
1058 packets input, 832389 bytes, 0
interface and packets dropped as the
drops
result of full receive buffer
Packets and bytes transmitted on the
619 packets output, 828190 bytes, 0
interface and packets dropped as the
drops
result of full transmit buffer
6.1.19 display mfr
Syntax
display mfr [ interface interface-type interface-number | verbose ]
View
Any view
Parameter

verbose: Displays detailed statistics information, including the number of controlling
packets sent and received.
Description
Use the display mfr command to view configuration and statistics information of
multilink frame relay bundle and bundle link. If no bundle or bundle link is specified,
information of all bundles and bundle links will be displayed.
Related command: link-protocol fr mfr, interface mfr.
Example
# Display configuration and state information of all frame relay bundles and frame relay
bundle links.
<H3C> display mfr
Bundle interface:MFR0, Bundle State = up, Bundle Class = A
fragment disabled
Bundle name = MFR0
Bundle links:
Serial0/0/0, PHY state = up, link state = up, Link name = Serial0/0/0
# Display detailed state information of all frame relay bundle links.

<H3C> display mfr verbose
LID :Serial0/0/0 Peer LID: Serial1/0/0
6-19
Bound to MFR0 (BID:MFR0)

Physical state :up, link state : add sent
Bundle Link statistics:
Add_link: sent 40, received 0
Add_link_ack: sent 0 , received 0
Add_link_rej: sent 0 , received 0
Hello: sent 0 , received 0
Hello_ack: sent 0, received 0
Remove_link: sent 0, received 0
Remove_link_ack: sent 0, received 0
Pkts dropped : in 0. out 0
Timer: Ack 4, Hello 10
Retry : max 2, Current 0
Cause code: differential delay
Bundle interface:MFR1, Bundle state = down, Bundle class = A,

fragment disabled
Bundle name = MFR1
Bundle links:
LID : Serial1/1/1:4 Peer LID:
Bound to MFR1 (BID:MFR1)
Physical state: down, link state: down,
Bundle Link statistics:
Hello(TX/RX): 0/0 Hello_ack(TX/RX): 0/0
Add_link(TX/RX): 0/0 Add_link_ack(TX/RX): 0/0
Add_link_rej(TX/RX): 0/0
Remove_link(TX/RX): 0/0 Remove_link_ack(TX/RX): 0/0
Pkts dropped(in/out): 0/0
Timer: ACK 4, Hello 10
Retry: Max 2, Current 0
Cause code: nonew
Table 6-13 Description on the fields of the display mfr command
Field Description
Bundle interface ––
Bundle state Operating state of the bundle interface.

Class A indicates if there is one bundle link is in up state,
Bundle class the bundle is flagged as up. Moreover, all bundle links
should be tagged as down before the bundle is down.
Bundle links Physical interfaces of the links in the bundle.
LID Identifier of the bundle link.
6-20
Field Description
Peer LID Identifier of the peer bundle link.
Physical state Operating state of the physical interface.
link state Operating state of the link protocol on the bundle link.
Bundle Link statistics: Statistics about the packets on the bundle link.
Number of the transmitted and received Hello messages.
Hello(TX/RX)
Hello messages are sent for maintaining link state.
Number of transmitted and received Hello
acknowledgement messages.
Hello_ack(TX/RX)
Hello_ack messages are sent notifying receipt of the Hello
messages.
Number of transmitted and received Add_link messages.
Add_link(TX/RX) Add_link messages are sent notifying the peer that the
local node is ready for processing frames.
Number of transmitted and received Add_link
acknowledgment messages.
Add_link_ack(TX/RX)
Add_link_ack messages are sent notifying receipt of the
Add_link messages.
Number of transmitted and received Add_link reject
messages.
Add_link_rej(TX/RX)
Add_link_rej messages are sent notifying reject of the
Add_link messages.
Number of transmitted and received Remove_link
messages.
Remove_link(TX/RX)
Remove_link messages are sent notifying removal of a
link from the bundle.
Number of transmitted and received Remove_link_ack
Remove_link_ack(TX/ messages.
RX) Remove_link_ack messages are sent notifying receipt of
the Remove_link messages.
Pkts dropped(in/out) Number of dropped incoming and outgoing packets.
Time waiting for a Hello_ack message before a Hello
Timer: Ack 4 message or an Add_link message (for initial
synchronization) is retransmitted on the bundle link.
Hello 10 Intervals for sending Hello messages.
Maximum number of Hello or Add_link sending retries
Retry: max 2 made when no Hello_ack or Add_link_ack is received on
the bundle link.
Current 0 Number of retries
Cause code Cause resulting in the current state of the bundle link.
6-21
6.1.20 fr bump
Syntax
fr bump dlci grade

undo fr bump dlci
View
FR pvc-group view
Parameter
dlci: DLCI number of the PVC to be backed up, in the range 16 to 1007.
grade: Priority level of the packets assigned to the standby PVC that will take over for
the specified PVC when it fails. When the Precedence identifier in IP packet or the EXP
field in MPLS packet is used to differentiate packets, this argument is in the range 0 to 7.
When the DSCP identifier in IP packet is used to differentiate packets, this argument is
in the range 0 to 63.
Description
Use the fr bump command to configure the standby PVC that will take over when a
specified PVC goes down.
Use the undo fr bump command to remove the backup configuration.
The standby PVC configured using this command must be in the same PVC group as
the PVC to be backed up.
By default, a PVC has no standby PVC configured.
When a PVC goes down, if there is no standby PVC configured for it, the PVC carrying
packets of default priority levels takes over for it. If there is no PVC configured to carry
packets of default priority levels, the whole PVC group becomes unavailable.
Example
# For the PVC group named 123, configure the PVC carrying packets of priority level 3
to take over when PVC 200 goes down.
[H3C] interface serial1/0/0
[H3C-Serial1/0/0] fr pvc-group 123
[H3C-fr-pvc-group-Serial1/0/0-123] fr bump 200 3
6.1.21 fr compression frf9
Syntax
fr compression frf9
undo fr compression
6-22
View
Frame relay interface view
Parameter
None
Description
Use the fr compression frf9 command to enable FRF9 compression function.

Use the undo fr compression command to disable FRF9 compression function.
By default, frame relay compression function is disabled.
This command is only valid for point-to-point interfaces. In other words, it is used for
frame relay sub-interfaces of point-to-point type.
Only when the frame relay packets type of the interface is IETF, can frame relay
compression take effect. When this command is configured, the system will
automatically change the packet type of the interface into IETF if the frame relay
packets type of an interface is not IETF.
Related command: fr map.
Example
# Enable frame relay compression on the point-to-point frame relay sub-interface

Serial4/1/3.1.
[H3C] interface serial 4/1/3.1 p2p
[H3C-Serial4/1/3.1] fr compression frf9
6.1.22 fr compression iphc
Syntax
fr compression iphc
undo fr compression iphc
View
Frame Relay interface view
Parameter
None
Description
Use the fr compression iphc command to enable the IP header compression.

Use the undo fr compression iphc command to disable the function.
6-23
By default, the Frame Relay compression function is disabled.

Related command: fr map.
Example
# Configure the Frame Relay interface Serial 4/1/0 to adopt IP header compression.
[H3C-Serial4/1/0] fr compression iphc
6.1.23 fr dlci
Syntax
fr dlci dlci
undo fr dlci dlci
View
Interface view, PVC group view
Parameter
dlci: Virtual circuit number allocated for Frame Relay interface. The range of the
number is 16 to 1007. 0 to 15 and 1008 to 1023 are reserved by the protocol for special
purpose.
Description
Use the fr dlci command to configure the virtual circuit for Frame Relay interface.
Use the undo fr dlci command to cancel the configuration.
When the Frame Relay interface type is DCE or NNI, it is necessary to manually
configure virtual circuit for interface (either main interface or sub-interface). When the
Frame Relay interface type is DTE, if the interface is main interface, the system will
automatically configure the virtual circuit according to the peer device.
If a PVC group has been created on the interface, configure the command in the view of
the PVC group.
Example
# Assign a virtual circuit with DLCI 100 to Frame Relay sub-interface Serial1/0/0.1.
[H3C-Serial1/0/0.1] fr dlci 100
6.1.24 fr dlci-switch
Syntax
fr dlci-switch in-dlci interface interface-type interface-number dlci out-dlci
6-24
undo fr dlci-switch in-dlci
View
Frame relay interface view, MFR interface view
Parameter
in-dlci: DLCI in the packets received on the interface, in the range 16 to 1007.
interface-type: Specified interface type.
interface-number: Specified interface number.
out-dlci: DLCI in the sent packets. It is in the range 16 to 1007.
Description
Use the fr dlci-switch command to configure a static route for frame relay PVC
switching.
Use the undo fr dlci-switch command to delete a static route for frame relay PVC
switching.
By default, no static route is configured for frame relay PVC switching.
Before the static route of frame relay PVC is configured, it is necessary to enable the
frame relay PVC switching first by using the command fr switching.
The default type of the forwarding interface can be frame relay or MFR. You can
however specify a tunnel interface for forwarding, if one has been configured, thus
transmitting frame relay packets over IP networks.
Related command: fr switching.
Example
# Configure a static route, allowing the packets on the link with DLCI of 100 on Serial
1/0/0 to be forwarded over the link with DLCI of 200 on interface Serial 2/0/0.
[H3C-Serial1/0/0] fr dlci-switch 100 interface serial2/0/0 dlci 200
# Configure a static route, allowing the packets on the link with DLCI of 200 on Serial
4/1/2 to be forwarded over the link with DLCI of 300 on tunnel interface 4.
[H3C-Serial4/1/2] fr dlci-switch 200 interface Tunnel4 dlci 300
6.1.25 fr inarp
Syntax
fr inarp [ ip [ dlci ] | ipx [ dlci ] ]

undo fr inarp [ ip [ dlci ] | ipx [ dlci ] ]
6-25
View
Interface view
Parameter
ip: Performs inverse address resolution for IP addresses.

ipx: Performs inverse address resolution for IPX addresses.
dlci: Data link connection identifier number, that is, virtual circuit number, indicating that
the inverse address resolution is performed for this DLCI number only.
Description
Use the fr inarp command to enable the inverse address resolution of Frame Relay.
Use the undo fr inarp command to disable this function.
By default, system permits enabling the Frame Relay inverse address resolution.
When the Frame Relay sends data over the interface, it is necessary to map the
network address to the DLCI numbers. Such a map can be specified manually or can
be completed via the function of automatic inverse address resolution. Automatic
inverse address resolution can be started by using the command.
InARP of FR applies to both IP and IPX addresses.
If it is expected to enable the inverse address resolution function of all PVCs, the
command without any parameters is adopted.
If it is expected to enable the inverse address resolution function in the specified data
link, the command with dlci parameter is adopted.
The fr inarp command configured on an FR main interface also applies to its
subinterfaces.
Related command: fr map, reset fr inarp, and display fr map-info.
Example
# Enable InARP at all PVCs of the Frame Relay interface Serial1/0/0.

[H3C-Serial1/0/0] fr inarp
# Enable InARP for IPX addresses on PVC 100 on FR interface Serial 0/0/0.
[H3C-Serial0/0/0] fr inarp ipx 100
6.1.26 fr interface-type
Syntax
fr interface-type { dce | dte | nni }

undo fr interface-type
6-26
View
Interface view
Parameter
dte, dce and nni: Three types of Frame Relay interfaces.
Description
Use the fr interface-type command to set the Frame Relay interface type.
Use the undo fr interface-type command to restore the default Frame Relay interface
type.
By default, the frame relay interface type is DTE
In Frame Relay, there are two communicating parties, namely, the user side and
network side. The user side is called Data Terminal Equipment (DTE), and the network
side is called Data Communications Equipment (DCE). In a Frame Relay network, the
interface between the Frame Relay switches is Network-to-Network Interface (NNI),
and the corresponding interface adopts the NNI operating view. If the device is used as
Frame Relay switching, the Frame Relay interface should operate in the NNI view or
DCE mode. NE16E/08E/05 routers support the three modes.
In NE16E/08E/05 routers, while configuring the Frame Relay interface type as DCE or
NNI, it is unnecessary to perform the fr switching command in the System view.
Please notice that this is different from Cisco.
Related command: link-protocol fr.
Example
# Set the type of the Frame Relay interface Serial1/0/0 to DCE.

[H3C] interface Serial1/0/0
[H3C-Serial1/0/0] fr interface-type dce
6.1.27 fr iphc
Syntax
fr iphc { nonstandard | rtp-connections number1 | tcp-connections number2 |

tcp-include }
undo fr iphc { nonstandard | rtp-connections number1 | tcp-connections number2
| tcp-include }
View
6-27
Parameter
nonstandard: Nonstandard compatible compression format.

rtp-connections number1: The number of RTP compression connections, in the
range 3 to 255. By default, the number of RTP compression connections is 256.
tcp-connections number2: The number of TCP compression connections, in the
range 3 to 255. By default, the number of TCP compression connections is 256.
tcp-include: Includes TCP header compression when performing RTP compression.
Description
Use the fr iphc command to enable IP header compression function, including

RTP/TCP header compression.
Use the undo fr iphc command to disable this function.
For the related configuration, see fr map ip.
Example
# Configure the number of RTP compression connections as 200 on the frame relay
Serial1/0/0.
[H3C-Serial1/0/0] fr iphc rtp-connections 200
6.1.28 fr ip-dscp
Syntax
fr ip-dscp dlci { min [ max ] | default }

undo fr ip-dscp dlci
View
FR pvc-group view
Parameter
dlci: DLCI number of the PVC, in the range 16 to 1007.

min [ max ]: The lowest and highest priority levels of IP packets that the specified PVC
carries. With both levels configured, you specify a range of priority levels. With only the
lowest priority level configured, you specify a priority level. The valid range is from 0 to
63.
default: Specifies that the PVC serves as the default PVC.
6-28
Description
Use the fr ip-dscp command to configure the PVC to carry packets of the specified
priority levels when the DSCP identifier in the IP packet is used to identify the priority
levels of packets.
Use the undo fr ip-dscp command to remove the configuration.
The DSCP identifier in the TOS field of the IP header occupies six bits, and therefore is
able to identify 64 priority levels. Note that:
z Only after you use the fr match command to specify to identify the priority levels of
packets by the DSCP identifier of IP packets, can you configure the fr ip-dscp
command.
z After configuring the fr match dscp command, you must configure this command;
otherwise, the whole PVC group will become unavailable because the packets of
the corresponding priority levels have no PVC to carry.
Related command: fr match.
Example
# Configure PVC 100 in PVC group 123 to carry IP packets of priority levels from 0 to
20.
<H3C> system-view
[H3C-fr-pvc-group-Serial1/0/0-123] fr match dscp
[H3C-fr-pvc-group-Serial1/0/0-123] fr ip-dscp 100 0 20
6.1.29 fr ip-precedence
Syntax
fr ip-precedence dlci { min [ max ] | default }

undo fr ip-precedence dlci
View
FR pvc-group view
Parameter

min [ max ]: The lowest and highest priority levels of IP packets that the specified PVC
carries. With both levels configured, you specify a range of priority levels. With only the
lowest priority level configured, you specify a priority level. The valid range is from 0 to
7.
6-29
Description
Use the fr ip-precedence command to configure the PVC to carry packets of the
specified priority levels when the Precedence identifier in the IP packet is used to
identify the priority levels of packets.
Use the undo fr ip-precedence command to remove the configuration.
The Precedence identifier in the TOS field of the IP header occupies three bits, and
therefore is able to identify eight priority levels. Note that:
z After configuring the fr match command to specify to differentiate traffic by the
DSCP identifier, you cannot configure this command.
z If you do not configure the fr match dscp command or you have configured the fr
match precedence command, you must configure the fr ip-precedence
command.
By default, no packets are assigned to a PVC.
Related command: fr match.
Example
# Configure PVC 100 in PVC group 123 to carry IP packets of priority levels 0 to 2.
<H3C> system-view
[H3C-fr-pvc-group-Serial1/0/0-123] fr match precedence
[H3C-fr-pvc-group-Serial1/0/0-123] fr ip-precedence 100 0 2
6.1.30 fr lmi n391dte
Syntax
fr lmi n391dte n391-value

undo fr lmi n391dte
View
Interface view
Parameter
Status counter of the PVC. The range of the value is 1 to 255.
Description
Use the fr lmi n391dte command to configure N391 parameter at the DTE side.
Use the undo fr lmi n391dte command to restore the default value.
6-30
The DTE sends a Status-Enquiry packet at regular interval set by T391 to the DCE.
There are two types of Status-Enquiry packets: link integrity authentication packet and
link status enquiry packet. The N391 parameter defines the ratio of sending the two
types of packets, that is, link integrity authentication packets: link status enquiry
packets = (N391 - 1): 1.
Example
# Set DTE as the operating mode of Frame Relay interface Serial1/0/0, and the counter
value of the PVC status to 10.
[H3C-Serial1/0/0] link-protocol fr
[H3C-Serial1/0/0] fr interface-type dte
[H3C-Serial1/0/0] fr lmi n391dte 10
6.1.31 fr lmi n392dce
Syntax
fr lmi n392dce n392-value

undo fr lmi n392dce
View
Interface view
Parameter
n392-value: Error threshold, which ranges from 1 to 10.
Description
Use the fr lmi n392dce command to set N392 parameter at the DCE side.
Use the undo fr lmi n392dce command to restore the default configuration.
By default, the parameter value is 3.
The DCE requires the DTE to send a Status-Enquiry packet at regular interval (set by
T392). If the DCE does not receive the Status-Enquiry packet within a period of time, it
will record the error by adding 1 to the error count. If the errors exceed the threshold,
the DCE would consider the physical channels and all the DLCIs to be unavailable.
N392 and N393 together define the “error threshold”. N393 defines the event number
observed and N392 defines the error threshold of that number (N393). That is, if
number of errors that occurred to the DCE reaches N392 in N393 events, DCE will
consider the errors have reached the threshold and declare the physical channels and
all DLCIs to be unavailable.
N392 should be less than N393.
6-31
Related command: fr interface-type and fr lmi n393dce.
Example
# Set the operation of frame relay interface Serial1/0/0 as DCE mode and sets N392 to
5 and N393 to 6.
[H3C-Serial1/0/0] fr lmi n392dce 5
Syntax

undo fr lmi n392dte
View
Interface view
Parameter
n392-value: Error threshold, which ranges from 1 to 10.
Description
Use the fr lmi n392dte command to set N392 parameter at the DTE side.
Use the undo fr lmi n392dte command to restore the default configuration.
By default, the parameter is 3.
The DTE sends a Status-Enquiry packet at a regular interval to the DCE to inquire the
link status. On receiving this packet, the DCE will immediately send a Status-Response
packet. If the DTE does not receive the response packet in the specified time, it will
record the error by adding 1 to the error count. If the errors exceed the threshold, the
DTE will consider that the physical channels and all the DLCIs to be unavailable.
N392 and N393 together define the “error threshold”. N393 indicates the event number
observed and N392 indicates the error threshold of that number (N393). That is, if N392
errors occurred in N393 Status-Enquiry packets in the DTE, the DTE would consider
that the error had exceeded the threshold and declare the physical channels and all
DLCIs to be unavailable.
N392 at DTE side should be less than N393 at DTE side.
Related command: fr interface-type and fr lmi n393dte.
6-32
Example
# Set the operation of frame relay interface Serial1/0/0 as the DTE mode and sets N392
to 5 and N393 to 6.
6.1.33 fr lmi n393dce
Syntax
fr lmi n393dce n393-value

undo fr lmi n393dce
View
Interface view
Parameter
Event counter. in the range 1 to 10.
Description
Use the fr lmi n393dce command to set the N393 parameter at the DCE side.
Use the undo fr lmi n393dce command to restore the default configuration.
The DCE requires the DTE to send a Status-Enquiry packet at a regular interval (set by
T392). If the DCE does not receive the Status-Enquiry packet, it will record the error by
adding 1 to the error count. If the errors exceed the threshold, the DCE would consider
the physical channels and all the DLCIs to be unavailable.
N392 and N393 together define the “error threshold”. N393 defines the event number
observed and N392 defines the error threshold of that number (N393). That is, if the
number of errors that occurred to the DCE reach N392 in N393 events, DCE will
consider the errors have reached the threshold and declare the physical channels and
N392 at DCE side should be less than N393 at DCE side.
Related command: fr interface-type and fr lmi n392dce.
Example
# Set the operation of frame relay interface Serial1/0/0 as DCE mode and sets N392 to
5 and N393 to 6.
6-33
Syntax

undo fr lmi n393dte
View
Interface view
Parameter
Event counter. In the range 1 to 10.
Description
Use the fr lmi n393dte command to set N393 parameter at the DTE side. Use the
undo fr lmi n393dte command to restore the default configuration.
The DTE sends a Status-Enquiry packet at a regular interval to the DCE to inquire the
link status. On receiving this packet, the DCE will immediately send a Status-Response
packet. If the DTE does not receive the response packet in the specified time, it will
record the error by adding 1 to the error count. If the errors exceed the threshold, the
DTE will consider that the physical channels and all the DLCIs to be unavailable.
N392 and N393 together define the “error threshold”. N393 indicates the event number
observed and N392 indicates the error threshold of that number (N393). That is, if N392
errors occurred in N393 Status-Enquiry packets in the DTE, the DTE would consider
that the error count had exceeded the threshold and declare the physical channels and
N392 at DTE side should be less than N393 at DTE side.
Related command: fr interface-type and fr lmi n392dte.
Example
# Set the operation of frame relay interface Serial1/0/0 as the DTE mode and sets N392
to 5 and N393 to 6.
6-34
6.1.35 fr lmi t392dce
Syntax
fr lmi t392dce t392-value

undo fr lmi t392dce
View
Interface view
Parameter
t392-value: Value of the polling timer. The range of the value is 5 to 30, in seconds.
Description
Use the fr lmi t392dce command to set T392 parameter at the DCE side.
Use the undo fr lmi t392dce command to restore the default configuration.
By default, the parameter value is 15s.
This parameter defines the maximum time for DCE waiting for a Status-Enquiry.
T392 at DCE side should be greater than T391 at DTE side.
Example
# Set the Frame Relay interface Serial1/0/0 to operate in DCE mode and set T392 to
10s.
[H3C-Serial1/0/0] fr lmi t392dce 10
6.1.36 fr lmi type
Syntax
fr lmi type { ansi | nonstandard | q933a }

undo fr lmi type
View
Interface view
Parameter
ansi: Standard LMI protocol type of ANSI T1.617 Appendix D.

nonstandard: Nonstandard compatible LMI protocol type.
6-35
q933a: Standard LMI protocol type of Q.933 Appendix A.
Description
Use the fr lmi type command to configure the Frame Relay LMI protocol type.
Use the undo fr lmi type command to restore to the default value of LMI protocol type.
By default, the LMI protocol type is q933a.
The NE16E/08E/05 routers usually support three LMI protocols, namely, Q.933
Appendix A, ANSI T1.617 Appendix D and Nonstandard compatible LMI protocol.
Example
# Set the FR LIMI type of Serial1/0/0 to nonstandard.

[H3C-Serial1/0/0] fr lmi type nonstandard
6.1.37 fr map ip
Syntax
fr map ip { protocol-address [ ip-mask ] | default } dlci [ broadcast ] [ nonstandard

[compression iphc connections number ] | ietf [ compression [ frf9 | iphc
connections number ] ] ]
fr map ip { protocol-address [ ip-mask ] | default } pvc-group pvc-group-name
[ nonstandard | ietf | broadcast ]*
undo fr map ip { protocol-address | default } { dlci | pvc-group pvc-group-name }
View
Interface view
Parameter
protocol-address: Peer protocol address.

ip-mask: IP mask used to establish a network segment map.
dlci: Local virtual circuit number, in the range 16 to 1007.
pvc-group-name: PVC group name. Specify this argument when a PVC has been
created on the interface.
default: Creates a default map.
broadcast: Specifies if broadcast packets can be sent using the map.
nonstandard: The map adopts nonstandard compatible encapsulation format. In this
case, only IPHC compression can be adopted. PVC groups does not support
compression.
6-36
ietf: The map adopts IETF encapsulation format. In this case, only FRF9 and IPHC can
be adopted. PVC groups does not support compression.
compression: Enables frame relay compression.
frf9: Adopts payload compression.
iphc: Adopts IP, UDP, or RTP header compression.
connections number: RTP compression connection number.
Description
Use the fr map ip command to add an IP address map entry for FR.
Use the undo fr map ip command to remove an IP address map entry for FR.
By default, no static address map entry exists and InARP is enabled.
You may map an IP address to a PVC by specifying DLCI, or to a PVC group by
specifying PVC group name. In the latter case, which PVC is selected from the PVC
group to forward an IP packet depends on the precedence of the packet.
You can create an address map manually or by using InARP. InARP is suitable for a
complex network where the remote router also supports InARP. When the number of
remote hosts is small or when default routes exist, however, manual map creation is
preferred.
Related command: display fr map, fr inarp.
Note:
In the fr map ip command, if nonstandard encapsulation is adopted, only IPHC
compression is available; if IETF encapsulation is adopted, both IPHC compression
and FRF.9 compression are available.
Example
# Create a static address map entry on interface Serial 1/0/0, where DLCI 50 is
connected to the router with IP address 202.38.163.252.
[H3C-Serial1/0/0] fr map ip 202.38.163.252 50
# Interface Serial 1/0/0 is connected to a router with IP address 10.1.1.1. Map PVC
group 123 to this remote IP address for data forwarding.
[H3C-Serial1/0/0] fr map ip 10.1.1.1 pvc-group 123
6-37
6.1.38 fr map ipx
Syntax
fr map ipx protocol-address dlci [ broadcast ] [ nonstandard | ietf ] [ compression

frf9 ]
undo fr map ipx protocol-address dlci
View
Interface view
Parameter
protocol-address: IPX address of the remote host.

dlci: Local virtual circuit number, in the range 16 to 1007.
broadcast: Specifies if broadcast packets can be sent using the map.
nonstandard: The map adopts nonstandard compatible encapsulation format.
ietf: The map adopts IETF encapsulation format. In this case, only FRF9 can be
adopted.
compression frf9: Enables FRF.9 compression.
Description
Use the fr map ipx command to add an IPX address map entry.
Use the undo fr map ipx command to remove an IPX address map entry of FR.
By default, no static address map entry exists.
You can create an address map manually or by using InARP. InARP is suitable for a
complex network where the remote router also supports InARP. When the number of
remote hosts is small or when default routes exist, however, manual map creation is
preferred.
The priority of a static address map entry is higher than that of a dynamic address map
entry. When a dynamic address map entry is found to be the same as a static address
map entry, it is automatically removed.
Related command: display fr map, fr inarp.
Example
# Create a static IPX address map entry on interface Serial 0/0/0, where DLCI 50 is
connected to the remote IPX address 100.00e0-fc32-4802.
[H3C-Serial0/0/0] fr map ipx 100.00e0-fc32-4802 50
6-38
6.1.39 fr map ppp interface virtual-template
Syntax
fr map ppp dlci interface virtual-template interface-number

undo fr map ppp dlci
View
Interface view
Parameter
interface-number: Virtual template interface number.

Dlci: Specific DLCI number.
Description
Use the fr map ppp interface virtual-template command to map the FR DLCI
(corresponds to an FR PVC) to a PPP link, so the PPPoFR link is established, and thus
PPP packets can be sent/received on FR PVC. The configuration parameter of this
PPP link is up to the parameters configured on the interface which is specified by
interface virtual-template interface-number.
Use the undo map ppp command to cancel this map, and thus eliminates this
PPPoFR link.
See interface virtual-template for related configurations.
Example
# Map DLCI 100 to PPP and establish PPPoFR link.

[H3C-serial 0\0\0] fr map ppp interface virtual-template 1
6.1.40 fr match
Syntax
fr match { dscp | precedence }

undo fr match
View
FR pvc-group view
Parameter
dscp: Specifies to differentiate IP packets by the 6-bit DSCP identifier in the TOS field
of the IP header.
6-39
precedence: Specifies to differentiate IP packets by the 3-bit Precedence identifier in

the TOS field of the IP header.
Description
Use the fr match command to configure a PVC group to differentiate traffic by the
Precedence or DSCP identifier in the TOS field of the IP header.
Use the undo fr match command to remove the configuration.
By default, a PVC group uses the 3-bit Precedence identifier to differentiate IP packets.
Related command: fr ip-precedence, fr ip-dscp.
Example
# Configure PVC group 123 to differentiate traffic by the 6-bit DSCP identifier in the
TOS field of the IP header.
<H3C> system-view
[H3C-fr-pvc-group-Serial1/0/0-123] fr match dscp
6.1.41 fr mpls-exp
Syntax
fr mpls-exp dlci { min [ max ] | default }

undo fr mpls-exp dlci
View
FR pvc-group view
Parameter

min [ max ]: The lowest and highest priority levels for MPLS packets that the specified
PVC carries. With both levels configured, you specify a range of priority levels. With
only the lowest priority level configured, you specify a priority level. The valid range is
from 0 to 7.
Description
Use the fr mpls-exp command to configure the PVC to carry packets of the specified
priority levels when the EXP identifier in the MPLS packet is used to identify the priority
levels of packets.
Use the undo fr mpls-exp command to remove the configuration.
6-40
Before configuring this command, you must enable MPLS in system view and interface
view.
By default, no PVC is assigned for MPLS packets of the specified priority levels.
Example
# Configure PVC 100 in PVC group 123 to carry MPLS packets of priority levels 0 to 2.
<H3C> system-view
[H3C-fr-pvc-group-Serial1/0/0-123] fr mpls-exp 100 0 2
6.1.42 fr pvc-group
Syntax
fr pvc-group pvc-group-name
undo fr pvc-group pvc-group-name
View
Interface view
Parameter
pvc-group-name: Name for the PVC group, a string consisting of 1 to 16 characters.
Description
Use the fr pvc-group command to create a PVC group.

Use the undo fr pvc-group command to remove a PVC group.
By default, no PVC group is configured.
Example
# Create a PVC group named 123.

<H3C> system-view
6.1.43 fr pvc-protect
Syntax
fr pvc-protect dlci { group | individual }

undo fr pvc-protect dlci
6-41
View
FR pvc-group view
Parameter
dlci: DLCI number of the PVC to be protected, in the range 17 to 1006.

group: Specifies to use group protection mode.
individual: Specifies to use individual protection mode.
Description
Use the fr pvc-protect command to configure the protection mode for a PVC in a PVC
group.
Use the undo fr pvc-protect command to remove protection of a PVC group member.
Note that:
z With a PVC in a PVC group configured to be protected in individual mode, the
whole PVC group becomes unavailable when the PVC goes down. Even if the
PVC is configured with a standby PVC, the standby PVC does not take over.
z With several PVCs in a PVC group configured to be protected in group mode,
when a protected PVC goes down, if its standby PVC (if any) is also a member of
the protected object, the standby PVC takes over for the failed PVC. Otherwise,
the standby PVC cannot take over and the whole PVC group becomes
unavailable.
By default, the system does not protect any PVC in a PVC group.
Note:
When a PVC protected in individual mode goes down, the whole PVC group becomes
unavailable. When all PVCs in a protected group go down, even if packets of any
priority levels are configured with standby PVCs that are active at the time, the PVC
group still becomes unavailable.
Example
# Specify to protect PVC 100 in PVC group 123 in individual mode.

<H3C> system-view
[H3C-fr-pvc-group-Serial1/0/0-123] fr pvc-protect 100 individual
# Specify to protect PVC 200 and PVC 300 in PVC group 123 in group mode.
<H3C> system-view
6-42

[H3C-fr-pvc-group-Serial1/0/0-123] fr pvc-protect 200 group
[H3C-fr-pvc-group-Serial1/0/0-123] fr pvc-protect 300 group
6.1.44 fr switch
Syntax
fr switch name [ interface interface-type interface-number dlci dlci1 interface

interface-type interface-number dlci dlci2 ]
undo fr switch name
View
System view
Parameter
name: Name of PVC used for frame relay switching, consisting of 30 characters at
most.
interface interface-type interface-number dlci dlci: DLCI number at both ends of PVC
as well as the type and number of its interface. The peer can be specified as Tunnel
interface.
Description
Use the fr switch command to create a PVC used for frame relay switching and enter
frame relay switching view.
Use the undo fr switch command to delete a specified PVC.
By default, there is no PVC used for frame relay switching.
The interface for forwarding packets can be either a frame relay interface or an MFR
interface. If Tunnel interface is specified as the forwarding interface, frame relay
packets over IP can thus be realized.
In frame relay switching view, the shutdown/undo shutdown operation can be
executed on a PVC. Before you can enter frame relay switching view, the PVC must
have existed.
Related command: display fr pvc-info, fr dlci-switch, fr switching, and fr dlci.
Example
# Create a PVC named pvc1 on the DCE serving as the switch, which is from the DCLI
100 of serial interface 0/0/0 to the DLCI 200 of serial interface 1/0/0.
[H3C] fr switching
6-43
[H3C] fr switch pvc1 interface serial 0/0/0 dlci 100 interface serial 1/0/0
dlci 200
[H3C-fr-switching-pvc1]
6.1.45 fr switching
Syntax
fr switching
undo fr switching
View
System view
Parameter
None
Description
Use the fr switching command to enable frame relay PVC switching.

Use the undo fr switching command to disable frame relay PVC switching.
By default, no FR switching is enabled.
The command is used to enable Frame Relay PVC switching.
Example
# Enable PVC switching on FR interface.

[H3C] fr switching
6.1.46 interface mfr
Syntax
interface mfr interface-number [ .subnumber ]

undo interface mfr interface-number [ .subnumber ]
View
System view
Parameter
interface-number: MFR interface number, in the range 0 to 1023.

subnumber: MFR subinterface number, in the range 0 to 4095.
6-44
Description
Use the interface mfr command to create a multilink frame relay bundle interface or
sub-interface and enter the corresponding interface view.
Use the undo interface mfr command to delete a specified multilink frame relay
bundle interface or sub-interface.
By default, there is no multilink frame relay interface or sub-interface.
Before using the undo interface mfr command to delete an MFR interface, you must
delete all physical interfaces from the MFR interface.
Before an MFR sub-interface is created, the MFR interface must be created first.
Related command: link-protocol fr mfr, mfr bundle-name.
Example
# Create a multilink frame relay bundle interface with a point-to-multipoint

sub-interface.
[H3C] interface mfr 4
[H3C-MFR4] quit
[H3C] interface mfr 4.1
[H3C-MFR4.1]
6.1.47 interface serial [ p2p | p2mp ]
Syntax
interface serial interface-number.subinterface-number [ p2p | p2mp ]

undo interface serial interface-number.subinterface-number [ p2p | p2mp ]
View
System view
Parameter
interface-number.subinterface-number: Specifies a subinterface, with

subinterface-number in the range 1 to 1024.
p2p: Point-to-point subinterface.
p2mp: Point-to-multipoint subinterface.
Description
Use the interface serial [ p2p | p2mp ] command to configure type of the specified FR
subinterface and enter frame relay subinterface view.
Use the undo interface serial [ p2p | p2mp ] command to restore the default frame
relay subinterface type.
6-45
By default, the link-layer protocol encapsulated on the interface is PPP, and the Frame
Relay encapsulation format is IETF.
FR subinterface type defaults to p2mp.
Example
# Configure a point-to-point FR subinterface s0/0/0.1.

[H3C] interface serial0/0/0.1 p2p
6.1.48 link-protocol fr
Syntax
link-protocol fr [ nonstandard | ietf ]
View
Interface view
Parameter
nonstandard: Nonstandard compatible encapsulation format.

ietf: Default encapsulation format according to the Internet Engineering Task Force
(IETF) standard.
Description
Use the link-protocol fr command to encapsulate interface link layer protocol as

Frame Relay.
By default, the link-layer protocol encapsulated on the interface is PPP, and the Frame
Relay encapsulation format is IETF.
In Comware, the Frame Relay encapsulation can be either ietf or nonstandard
compatible encapsulation (nonstandard). IETF encapsulation conforms to RFC1490,
that is, it supports the IETF standard.
Example
# Configure Frame Relay encapsulation on interface Serial1/0/0 and select the

nonstandard encapsulation compatible format.
[H3C-Serial1/0/0] link-protocol fr nonstandard
6.1.49 link-protocol fr mfr
Syntax
link-protocol fr mfr interface-number
6-46
View
Interface view
Parameter
Description
Use the link-protocol fr mfr command to configure the current physical interface as an
MFR bundle link and bundle it onto a specified MFR interface.
By default, there is no MFR bundle link.
When this command is configured, the specified MFR interface must exist. A maximum
of 16 physical interfaces can be bundled onto an MFR interface.
To delete a physical interface from an MFR interface, use the link-protocol command
to apply a link layer protocol of non frame relay MFR to the interface.
Related command: interface mfr, mfr link-name.
Example
# Configure the current serial interface as a bundle link and add it onto the frame relay
bundle interface mfr4.
[H3C-Serial4/1/2] link-protocol fr mfr 4
6.1.50 mfr bundle-name
Syntax
mfr bundle-name [ name ]

undo mfr bundle-name [ name ]
View
MFR interface view
Parameter
name: Bundle identification, a string comprising 1 to 49 characters.
Description
Use the mfr bundle-name command to set frame relay bundle identification (BID).
Use the undo mfr bundle-name command to restore the default value.
By default, BID is represented by mfr plus frame relay bundle number, for example,
mfr4.
6-47
Each MFR bundle has a BID, which only has local significance. Therefore, the same
BID can be used at both ends of the link.
When changing the BID of an interface, you must execute the shutdown/undo
shutdown command on the interface to validate the new BID.
Related command: mfr link-name.
Example
# Set the frame relay link BID to bundle 1.

[H3C-MFR4] mfr bundle-name bundle1
6.1.51 mfr fragment
Syntax
mfr fragment
undo mfr fragment
View
MFR interface view
Parameter
None
Description
Use the mfr fragment command to enable FRF.16 fragmentation on the MFR bundle.
Use the undo mfr fragment command to disable the function.
By default, FRF.16 fragmentation is disabled on the MFR bundle.
Related command: mfr fragment-size, mfr window-size.
Example
# Enable fragmentation on interface MFR 4.

[H3C] interface mfr 4
[H3C-MFR4] mfr fragment
6.1.52 mfr fragment-size
Syntax
mfr fragment-size bytes

undo mfr fragment-size
6-48
View
Frame relay interface view and MFR interface view
Parameter
bytes: Fragment size, in bytes, in the range 60 to 1500.
Description
Use the mfr fragment-size command to configure the maximum fragment size allowed
on a frame relay bundle link.
Use the undo mfr fragment-size command to restore the default setting.
By default, the maximum fragment size allowed on a frame relay bundle link is of 300
bytes.
The priority of the fragment size configured in frame relay interface view is higher than
that of the one configured in MFR interface view.
Related command: mfr fragment and mfr window-size.
Example
# Configure the maximum fragment size allowed on the multilink frame relay bundle link
Serial4/1/2 to be 70 bytes.
[H3C-Serial4/1/2] mfr fragment-size 70
6.1.53 mfr link-name
Syntax
mfr link-name [ name ]

undo mfr link-name [ name ]
View
Parameter
name: Name of a bundle link identification, in the form of character string, in the range 1
to 49.
Description
Use the mfr link-name command to set the frame relay bundle link identification (LID).
Use the undo mfr link-name command to restore the default setting.
By default, LID is the name of the corresponding physical interface.
6-49
The peer equipment identifies a frame relay bundle link via LID or associates the
bundle link with a frame relay bundle by using LID. LID is locally valid; therefore, the
LIDs at both ends of a link can be the same.
When changing the bundle LID on an interface, you must execute the shutdown/undo
shutdown command on the interface to make the new bundle LID valid.
Related command: mfr bundle-name.
Example
# Set the bundle LID of the multilink frame relay bundle link Serial4/1/2 to be bl1.
[H3C-Serial4/1/2] mfr link-name bl1
6.1.54 mfr retry
Syntax
mfr retry number

undo mfr retry
View
Parameter
number: The maximum times that a bundle link can resend hello messages, in the
range 1 to 5. By default, it is twice.
Description
Use the mfr retry command to set the maximum times that a frame relay bundle link
can resend hello message when waiting for a hello acknowledgement message.
Use the undo mfr retry command to restore the default setting.
If the times that a bundle link resends hello message reach the maximum without
receiving acknowledgement from the peer, the system will regard the link protocol on
the bundle link to be malfunctioning.
Only after the link-protocol fr mfr command is used to associate a frame relay bundle
link interface with a frame relay bundle, can this command be configured.
Related command: mfr timer ack and mfr timer hello.
Example
# Set the bundle link Serial4/1/2 to resend hello message for 3 times at most.
[H3C-Serial4/1/2] mfr retry 3
6-50
6.1.55 mfr timer ack
Syntax
mfr timer ack seconds

undo mfr timer ack
View
Parameter
seconds: Time of waiting for hello acknowledgment message before resending hello
message, in seconds, in the range 1 to 10. It defaults to 4 seconds.
Description
Use the mfr timer ack command to set the time of waiting for hello acknowledgment
message before frame relay bundle link resends hello message.
Use the undo mfr timer ack command to restore the default setting.
Related command: mfr timer hello and mfr retry.
Example
# Set the frame relay bundle link Serial4/1/2 to wait for six seconds before resending
hello message.
[H3C-Serial4/1/2] link-protocol fr mfr 4
[H3C-Serial4/1/2] mfr timer ack 6
6.1.56 mfr timer hello
Syntax
mfr timer hello seconds

undo mfr timer hello
View
Parameter
seconds: Interval for a bundle link to send hello message, in seconds, in the range 1 to
180. By default, it is 10 seconds.
Description
Use the mfr timer hello command to set the interval for a frame relay bundle link to
send hello message.
6-51
Use the undo mfr timer hello command to restore the default setting.
Both ends of a frame relay bundle link periodically send hello message to the peer end.
After the peer receives the hello message, it will response hello acknowledgement
message.
Related command: mfr timer ack, mfr retry.
Example
# Set the bundle link Serial4/0/2 to send hello message once every 15 seconds.
[H3C-Serial4/1/2] mfr timer hello 15
6.1.57 mfr window-size
Syntax
mfr window-size number

undo mfr window-size
View
MFR interface view
Parameter
number: Number of fragments, in the range 1 to 16.
Description
Use the mfr window-size command to configure the number of fragments that can be
held by the window used in sliding window algorithm when multilink frame relay
reassembles received fragments.
By default, the size of a sliding window is equal to the number of physical interfaces of
an MFR bundle.
Related command: interface mfr, mfr fragment, mfr fragment-size.
Example
# Set the size of the sliding window of the MFR bundle interface MFR4 to be 8.
[H3C-MFR4] mfr window-size 8
6.1.58 shutdown
Syntax
shutdown
undo shutdown
6-52
View
Frame relay switching view
Description
Use the shutdown command to disable the current switching PVC.

Use the undo shutdown command to enable the current switching PVC.
By default, the switching PVC is enabled.
Example
# Disable the current switching PVC.

[H3C] fr switch pvc1 interface serial 1/0/0 dlci 100 interface serial 2/0/0
dlci 200
[H3C-fr-switching-pvc1] shutdown
6.1.59 reset fr inarp
Syntax
reset fr inarp
View
User view
Parameter
None
Description
Use the reset fr inarp command to clear the address mapping established by inverse
ARP.
In some special cases, for example, when the network architecture changes, the
dynamic address maps originally established will become invalid. Hence it is necessary
to establish them again. Users can use this command to clear all the dynamic address
maps.
Related command: fr inarp.
Example
# Clear all the Frame Relay dynamic address maps.

<H3C> reset fr inarp
6-53
6.1.60 timer hold
Syntax
timer hold seconds

undo timer hold
View
Interface view
Parameter
seconds: Value of polling timer, which ranges from 0 to 32767 in seconds. 0 indicates
that the LMI protocol is disabled.
Description
Use the timer hold command to configure the polling timer at the DTE side.
Use the undo timer hold command to restore its default value.
By default, the parameter is 10 seconds.
The parameter defines the interval of Status-Enquiry packet sent by DTE.
Related command: fr interface-type and fr lmi t392dce.
Example
# Configure that Frame Relay interface serial1/0/0 to work in DTE mode, and set the
value of polling timer to 15 seconds.
6-54
Comware V3 Chapter 7 ATM Configuration Commands
Chapter 7 ATM Configuration Commands
7.1 ATM Configuration Commands

7.1.1 atm-class
Syntax
atm-class atm-class-name
undo atm-class atm-class-name
View
Interface view, PVC view
Parameter
atm-class-name: Name of ATM-Class.
Description
Use the atm-class command to apply a set of parameters (which are defined in
ATM-Class) to an ATM interface or a PVC.
Use the undo atm-class command to delete the specified ATM-Class.
Related command: atm class.
Example
# Apply an ATM-Class named "main" to the interface Atm1/0/0.

[H3C-Atm1/0/0] atm-class main
7.1.2 atm class
Syntax
atm class atm-class-name

undo atm class atm-class-name
View
System view
Parameter
atm-class-name: Name of ATM-Class.
7-1
Description
Use the atm class command to create an ATM-Class and enter the ATM-Class view.
Use the undo atm class command to delete the specified ATM-Class.
An ATM-Class is a group of predefined parameters that can be used for ATM interface
or PVC.
Related command: atm-class.
Example
# Create an ATM-Class named "main".

[H3C] atm class main
[H3C-atm-class-main]
7.1.3 atm-ctt
Syntax
atm-ctt
undo atm-ctt
View
ATM interface view
Parameter
None
Description
Use the atm-ctt command to set all interfaces on a board to transparent transmission.
Use the undo atm-ctt command to set all interfaces on a board to non transparent
transmission state.
By default, all interfaces on all boards are in non transparent transmission state.
 Note:
This command is only valid on the first ATM interface on a board.
Example
# Set the board to transparent transmission.

<H3C> system-view
7-2
[H3C-Atm1/0/0] atm-ctt
7.1.4 atm-link check
Syntax
atm-link check
undo atm-link check
View
ATM P2P subinterface view
Parameter
None
Description
Use the atm-link check command to have the protocol state of the ATM P2P
subinterface changes depending on whether the physical interface is up and whether a
PVC is configured on the subinterface. The protocol of the subinterface, which comes
down otherwise, goes up when the physical interface is up and a PVC is configured on
the subinterface.
Use the undo atm-link check command to restore the default protocol state on the
ATM P2P subinterface.
By default, the protocol of the ATM P2P subinterface goes up or comes down
depending on whether the physical interface is up or down.
This command applies only to ATM P2P subinterfaces.
Example
# Enable the protocol sate of ATM P2P subinterface 4/0/0.1 to change depending on
whether the physical interface is up and whether a PVC is configured on the
subinterface.
[H3C-Atm4/0/0.1] atm-link check
7.1.5 bump
Syntax
bump { pvc-name [ vpi/vci ] | vpi/vci } grade

undo bump { pvc-name [ vpi/vci ] | vpi/vci }
View
ATM pvc-group view
7-3
Parameter
pvc-name: PVC name, a case-insensitive string up to 16 characters. It must be unique

on an ATM interface and cannot be any valid VPI/VCI pair. For example, “1/20” cannot
be used as a PVC name.
vpi/vci: vpi refers to ATM virtual path identifier and is in the range from 0 to 255. vci
refers to ATM virtual channel identifier and its valid value range is related to the
interface type. Usually, the VCI values from 0 to 31 are reserved for special purposes
and are not recommended.
grade: Priority level of the packets assigned to the standby PVC that will take over for
the specified PVC when it fails. When the Precedence identifier in IP packet or the EXP
field in MPLS packet is used to differentiate packets, this argument is in the range 0 to 7.
When the DSCP identifier in IP packet is used to differentiate packets, this argument is
in the range 0 to 63.
Description
Use the bump command to configure the standby PVC that will take over when a
specified PVC goes down.
Use the undo bump command to remove the backup configuration.
The standby PVC configured using this command must be in the same PVC group as
the PVC to be backed up.
By default, a PVC has no standby PVC configured. When a PVC goes down, the
packets for the PVC to carry will be carried by the PVC specified with the default
keyword. If no PVC is specified with the default keyword, the fundamental PVC (that is,
the PVC used to construct the PVC group) will take over.
Related command: pvc-group, pvc.
Example
# For PVC group 1/100, configure the PVC carrying packets of priority level 3 to take
over when PVC 1/200 goes down.
<H3C> system-view
[H3C] interface atm1/0/0
[H3C-Atm1/0/0] pvc-group 1/100
[H3C-atm-pvc-group-Atm1/0/0-1/100] bump 1/200 3
7.1.6 cell-packing
Syntax
cell-packing cell-number
undo cell-packing
7-4
View
PVC view
Parameter
cell-number: Number of cells to be packed in a PVC, ranging from 1 to 28.
Description
Use the cell-packing command to set the maximum number of cells to be packed in
one PVC.
Use the undo cell-packing command to restore to the default value.
By default, the maximum number of packet is one.
If the number of cells in a buffer reaches the maximum number of cells to be packed,
the cells in the buffer will be packed together with those in a PVC and sent.
Example
# Configure on PVC1/32 the maximum number of cells to be packed to 22.

<H3C> system-view
[H3C-Atm1/0/0] pvc 1/32
[H3C-atm-pvc-Atm1/0/0-1/32] cell-packing 22
7.1.7 clock
Syntax

undo clock
View
ATM master interface view
Parameter
master: Specify ATM interface to use the internal transmission clock signal.
slave: Restore the line clock signal.
Description
Use the clock command to specify ATM interface to use internal transmission clock
signal.
Use the undo clock command to restore the usage of network clock signal.
7-5
By default, ATM interface uses the network clock signal. This clock signal is usually
provided by the device which provides ATM interfaces.
When two network devices are directly connected in the back-to-back method through
the ATM interfaces, this command is used to set the internal transmission clock at the
ATM interface of one device.
Note:
Although this command is valid on both ATM main interface and sub-interface, it can
only be used in ATM main interface view and there is not this command in ATM
sub-interface view.
Related command: display atm interface.
Example
# Specify ATM interface Atm1/0/0 to use the internal transmission clock.

7.1.8 debugging atm all
Syntax
debugging atm all

undo debugging atm all
View
User view
Parameter
None
Description
Use the debugging atm all command to enable all the debugging switches of ATM.
Use the undo debugging atm all command to disable the debugging.
By default, all the ATM debugging switches are disabled.
7-6
Note:
Because the use of this command can lead to a mass of output information, this may
cause that users cannot control network devices through terminals and the efficiency of
packet transmitting and receiving may be greatly damaged.
Related command: debugging atm error, debugging atm event, debugging atm
packet.
Example
# Refer to the examples for the commands debugging atm error, debugging atm
event, and debugging atm packet.
7.1.9 debugging atm error
Syntax
debugging atm error [ interface interface-type interface-num [ pvc { pvc-name |

vpi/vci } ] ]
undo debugging atm error [ interface interface-type interface-num [ pvc { pvc-name
| vpi/vci } ] ]
View
User view
Parameter
interface-type: Interface type, specifies an ATM interface together with interface-num.

interface-num: Interface number, specifies an ATM interface together with
interface-type.
pvc-name: PVC name, optional. If no PVC name and VPI/VCI pair are specified, all the
error debugging of the PVC will be enabled.
vpi/vci: VPI/VCI pair, optional. For more details, refer to “Parameter Description” for the
pvc command.
Description
Use the debugging atm error command to enable the error debugging of ATM.
Use the undo debugging atm error command to disable the debugging.
By default, all ATM error debugging switches are disabled.
If no interface is specified, all ATM error debugging, global, interface level, or PVC level,
is enabled.
7-7
Related command: display debugging, debugging atm all.
Example
# Enable all the error debugging of ATM.

<H3C> debugging atm error
7.1.10 debugging atm event
Syntax
debugging atm event [ interface interface-type interface-num [ pvc { pvc-name

[ vpi/vci ] | vpi/vci } ] ]
undo debugging atm event [ interface interface-type interface-num [ pvc { pvc-name
View
User view
Parameter

interface-type.
pvc-name: PVC name, optional. If no PVC name and no VPI/VCI pair are specified, all
the event debugging of PVC will be enabled.
vpi/vci: VPI/VCI pair, optional. For more information, refer to “Parameter Description”
for the pvc command.
Description
Use the debugging atm event command to enable the event debugging of ATM.
Use the undo debugging atm event command to disable the debugging.
By default, all ATM event debugging is disabled.
If no interface is specified, all ATM event debugging, global, interface level, or PVC
level, is enabled.
This command is used to enable all the debugging of events that happen at the ATM
interface or a PVC, which can be used to trace some essential events of the system.
Such information may be helpful for detecting network faults.
Example
The example is a case to enable the debugging of ATM events and display the results.
# Enable all ATM event debugging.
<H3C> debugging atm event
7-8
7.1.11 debugging atm packet
Syntax
debugging atm packet [ interface interface-type interface-num [ pvc { pvc-name

undo debugging atm packet [ interface interface-type interface-num [ pvc
{ pvc-name [ vpi/vci ] | vpi/vci } ] ]
View
User view
Parameter

interface-type.
pvc-name: PVC name, optional. If no PVC name and no VPI/VCI pair are specified, all
the packet debugging of PVC will be enabled.
vpi/vci: VPI/VCI pair, optional. For more details, please refer to “Parameter Description”
in the pvc command.
Description
Use the debugging atm packet command to enable the packet debugging of ATM.
Use the undo debugging atm packet command to disable the debugging.
By default, all the debugging of ATM packet is disabled.
If no interface is specified, all ATM packet debugging, global, interface level, or PVC
level, is enabled.
After the packet switch is enabled, the detailed information about receiving/sending
packets at the ATM interface or PVC will be displayed. This will be very helpful for
system troubleshooting.
The received packets will display all the information about received frames , which can
indicate whether the sending side correctly encapsulates these frames. This will be
greatly helpful for the network device detection.
Packet debug information displays the PDU byte information in hex, through which
technical support personnel or engineers can locate some system errors.
7-9
Note:
Since the use of this command can lead to a mass of output information during each
packet receiving and transmitting, this may cause that users cannot control network
devices through their terminals, and thus greatly affect the efficiency of packet
transmitting and receiving.
Example
The example is a case to enable the debugging of ATM packet and display the results.
# Enable all the packet debugging of ATM.
<H3C> debugging atm packet
After some time, the following messages may appear:

……
*515396.229644-atm-8-debug8: Atm1/0/0 pvc 1/32 out ppp pkt, snap, 22
*515396.229710-atm-8-debug8: FE FE 03 CF FF 03 C0 21 01 22 00 0E 01 04 05
DC
*515396.229812-atm-8-debug8: 05 06 00 00 1F 38
*515396.232644-atm-8-debug8: Atm1/0/0 pvc 1/32 out ppp pkt, snap, 22
*515396.232710-atm-8-debug8: FE FE 03 CF FF 03 C0 21 01 23 00 0E 01 04 05
DC
*515396.232812-atm-8-debug8: 05 06 00 00 1F 38
……
It indicates that PPP packets are being output from PVC 1/32 of Atm1/0/0.
7.1.12 display atm class
Syntax
display atm class [ atm-class-name ]
View
Any view
Parameter
atm-class-name: ATM-Class name.
Description
Use the display atm class command to view the information about ATM-Class. By
default, if no ATM-Class name is specified, the information of all ATM-Class is
displayed.
7-10
Related command: atm class.
Example
# Display the information about the ATM-Class named "main" in devices.

<H3C> display atm class main
ATM CLASS: main
Service ubr 8000
encapsulation aal5snap
Table 7-1 Description on the fields of the display atm class command
Field Description
ATM CLASS : main ATM class name
Service ubr 8000 Commands configured in the ATM class. The contents
encapsulation aal5snap vary depending on your actual configuration
7.1.13 display atm interface
Syntax
display atm interface [ interface-type interface-num ]
View
Any view
Parameter

interface-type.
Description
Use the display atm interface command to locate the problems efficiently and get
detailed information related to ATM configuration.
If no interface is specified, information on all ATM interfaces is displayed by default.
Related command: display atm.
Example
# Display the information about ATM interface atm6/0/0.

[H3C-Atm6/0/0] display atm interface atm 6/0/0
ATM interface Atm6/0/0, State UP
Port Information:
7-11
Maximum VCs: 1024

PVCs: 5, MAPs: 1
input pkts: 11603, input bytes: 426476, input pkt errors: 37092
output pkts: 14053, output bytes: 519106, output pkt errors: 0
Main interface Information:
PVCs: 4, MAPs: 1
ATM interface Atm6/0/0.1, point-to-point, State UP

Sub-interface Information:
PVCs: 1, MAPs: 0
Table 7-2 Description on the fields of the display atm interface command
Field Description
ATM interface Atm6/0/0, State
Name and state of the interface
UP
Maximum VCs Maximum number of VCs on the ATM interface
PVCs Number of PVCs configured on the interface

MAPs Number of maps on the interface
input pkts: 0, input bytes: 0,
Received packets, bytes, and errors
input pkt errors: 0
output pkts: 69, output bytes:
Transmitted packets, bytes, and errors
2218, output pkt errors: 8
7.1.14 display atm map-info
Syntax
display atm map-info [ interface interface-type interface-num [ pvc { pvc-name |

vpi/vci } ] ]
View
Any view
Parameter

interface-type.
7-12
pvc-name: PVC name, optional parameter. If no PVC name and no VPI/VCI pair are
specified, the information of the higher layer protocol mapping table about all PVCs
within specified ATM interface will be displayed by default.
in the pvc command.
Description
Use the display atm map-info command to view the information about the upper layer
protocol mapping table of ATM.
If no interface is specified, information about the upper layer protocol maps on all ATM
interfaces is displayed by default.
Related command: map ip, map ppp, map bridge.
Example
# Display information about the upper layer protocol mapping table on all ATM
interfaces.
<H3C> display atm map-info
Atm1/0/0, PVC 1/32, PPP, Virtual-Template10, UP
Atm1/0/0, PVC 1/33, IP & Mask, State UP
100.11.1.1, mask 255.255.0.0, vlink 1
Atm1/0/0, PVC 2/101, ETH, Virtual-Ethernet1/1/1, MAC 00E0.FC01.0203, UP
Table 7-3 Description on the fields of the display atm map-info command
Field Description
Atm1/0/0 Interface type and interface number
PVC 1/32 PVC identifier
PPP Protocol type
Virtual-Template10 Associated virtual template
State UP Map entry state
100.11.1.1, mask 255.255.0.0 Protocol address
Vlink 1 Virtual link number
7.1.15 display atm pvc-group
Syntax
display atm pvc-group [ interface interface-type interface-num [ pvc { pvc-name

7-13
View
Any view
Parameter

interface-type.
pvc-name: PVC name, optional. If no PVC name and no VPI/VCI pair are specified, the
information about all PVC-Groups within the specified ATM interface will be displayed
by default.
vpi/vci: VPI/VCI pair, optional. For more details, please refer to “Parameter description”
in the pvc command.
Description
Use the display atm pvc-group command to view the information about PVC-Group.
If no interface is specified, information about the PVC-groups on all ATM interfaces is
displayed by default.
Related command: pvc-group.
Example
# Display the information about PVC-Group of all ATM interfaces.

<H3C> display atm pvc-group
VPI/VCI PVC-NAME STATE ENCAP PROT INTERFACE GROUP
1/32 h3c UP SNAP IP Atm10/1/0(UP) 1/32(UP)
1/33 UP SNAP IP Atm10/1/0(UP) 1/32(UP)
3/34 UP SNAP IP Atm10/1/0(UP) 1/32(UP)
2/32 UP MUX IP Atm10/1/0.1(UP) 2/32(UP)
2/33 UP MUX IP Atm10/1/0.1(UP) 2/32(UP)
Table 7-4 Description on the fields of the display atm pvc-group command
Field Description
VPI/VCI PVC identifier
PVC-NAME PVC name
STATE PVC state
ENCAP Encapsulation of the PVC
PROT Protocol running on the PVC
Interface to which the PVC belongs and physical layer state of the
INTERFACE
interface
7-14
Field Description
GROUP PVC group to which the PVC belongs and the status of the group
7.1.16 display atm pvc-info
Syntax
display atm pvc-info [ interface interface-type interface-num [ pvc { pvc-name

View
Any view
Parameter

interface-type.
pvc-name: PVC name, optional parameter. If no PVC name and no VPI/VCI pair are
specified, the information about all PVCs within the specified ATM interface will be
displayed by default.
in the pvc command.
Description
Use the display atm pvc-info command to view the information about PVC.
If no interface is specified, information about PVCs on all ATM interfaces is displayed
by default.
Related command: pvc.
Example
# Display the information about PVC of all ATM interfaces.

<H3C> display atm pvc-info
VPI/VCI | STATE | PVC-NAME | INDEX | ENCAP | PROT | INTERFACE
--------|-------|----------|-------|-------|------|----------
1/32 |UP | h3c |1 |SNAP |IP |Atm1/0/0 (UP)
1/33 |UP | h3c |5 |MUX |None |Atm1/0/0 (UP)
1/55 |UP |datacomm |2 |SNAP |PPP |Atm1/0/0.1 (UP)
2/66 |UP | |4 |SNAP |IP |Atm1/0/0.4 (UP)
2/101 |UP | hangzhou |3 |SNAP |ETH |Atm1/0/0.2 (UP)
# Display information about PVCs on interface ATM 6/0/0.
7-15
[H3C] display atm pvc-info interface atm 6/0/0

VPI/VCI|STATE|PVC-NAME |INDEX|ENCAP|PROT |INTERFACE
-------|-----|----------------|-----|-----|---------------|---------------
0/40 |UP | |0 |SNAP |IP |Atm6/0/0 (UP)
0/41 |UP | |1 |SNAP |None |Atm6/0/0.1 (UP)
Table 7-5 Description on the fields of the display atm pvc-info command
Field Description
VPI/VCI PVC identifier
STATE PVC state
PVC-NAME PVC name
INDEX Internal index of the PVC
ENCAP Encapsulation of the PVC
PROT Protocol running on the PVC

INTERFACE Interface to which the PVC belongs
# Display information about PVC 0/40 on interface ATM 6/0/0.

[H3C] display atm pvc-info interface atm 6/0/0 pvc 0/40
Atm6/0/0, VPI: 0, VCI: 40, INDEX: 0
AAL5 Encaps: SNAP, Protocol: IP
Service-type:UBR, output-pcr: 155000 kbps
Transmit-Priority: 0
OAM interval: 0 sec(disabled), OAM retry interval: 1 sec
OAM retry count (up/down): 3/5
OAM ais-rdi count (up/down): 3/1
Interface State: UP, OAM State: UP, PVC State: UP
OAM cells received: 0
F5 InEndloop: 0, F5 InAIS: 0, F5 InRDI: 0
OAM cells sent: 0
F5 OutEndloop: 0
OAM cell drops: 0
7-16
7.1.17 encapsulation
Syntax
encapsulation aal5-encap
undo encapsulation
View
PVC view
Parameter
aal5-encap: AAL5 encapsulation type, its possible values are as follows:

z aal5snap: LLC/SNAP (Logical Link Control / Subnet Access Protocol)
encapsulation type
z aal5mux: MUX encapsulation type
z aal5nlpid: RFC1490 encapsulation type
Description
Use the encapsulation command to specify ATM AAL5 encapsulation type for PVC.
Use the undo encapsulation command to restore the default encapsulation.
By default, aal5snap encapsulation is adopted.
An ATM PVC may carry multiple protocols at the same time, but some types of
encapsulations may not support some applications (one or more of IPoA, IPoEoA,
PPPoA and PPPoEoA). When such cases occur, the system gives a prompt.
The following table gives the relationship between ATM PVC encapsulation and carried
protocol.
Table 7-6 Support of ATM PVC encapsulation to carried protocols
EoA Multi-
Encapsu- (IPoEoA/
IPoA PPPoA InARP protocol
lation
PPPoEoA) support
aal5snap Yes Yes Yes Yes Yes

aal5mux Yes Yes Yes No No
aal5nlpid Yes No No No Yes
Example
The two examples can both specify AAL5 encapsulation type of PVC as aal5snap.
# Display how to specify AAL5 encapsulation type of PVC 1/32 as aal5snap.
[H3C-atm-pvc-Atm1/0/0-1/32] encapsulation aal5snap
7-17
# Display how to specify AAL5 encapsulation type of PVC 1/33 as aal5snap.

[H3C-atm-pvc-Atm1/0/0-1/33] undo encapsulation
7.1.18 ip-dscp
Syntax
ip-dscp { pvc-name [ vpi/vci ] | vpi/vci } { min [ max ] | default }

undo ip-dscp { pvc-name [ vpi/vci ] | vpi/vci }
View
ATM pvc-group view
Parameter

be used as a PVC name. In addition, the PVC identified by this argument must exist.
refers to ATM virtual channel identifier and is in the range from 0 to 2047. Usually, the
VCI values from 0 to 31 are reserved for special purposes and are not recommended.
Note that the PVC identified by this argument must exist.
min: The lowest priority level of IP packets that the specified PVC carries. It must be in
the range from 0 to 63.
max: The highest priority level of IP packets that the specified PVC carries. It must be in
the range from 0 to 63.
Description
Use the ip-dscp command to configure the PVC to carry packets of the specified
priority levels when the DSCP identifier in the IP packet is used to identify the priority
levels of packets.
Use the undo ip-dscp command to remove the configuration.
Note that:
z If you do not configure the ip-dscp command, IP packets of all priorities are
carried by the fundamental PVC of the PVC group, that is, the PVC used to
construct the PVC group.
z If you configure the ip-dscp command with the default keyword, IP packets of the
definitely specified priority levels are carried by the specified PVC, while IP
packets of priority levels that are not specified are carried by the PVC specified
with the default keyword. If no PVC is specified by the ip-dscp command with the
7-18
default keyword, those IP packets of priority levels that are not specified are
carried by the fundamental PVC.
z The specified PVC must be in the current PVC group, and the lowest priority level
(min) must be less than or equal to the highest priority level (max).
z PVC service mapping does not change the priority of an IP packet. To change the
priority of an IP packet, you can configure CAR.
Example
# Configure PVC 1/100 in the PVC group to carry IP packets of priority levels from 0 to
20.
<H3C> system-view
[H3C] interface Atm1/0/0
[H3C-pvc-group-Atm1/0/0-1/100] match dscp
[H3C-pvc-group-Serial1/0/0-123] ip-dscp 1/100 0 20
7.1.19 ip-precedence
Syntax
ip-precedence { pvc-name [ vpi/vci ] | vpi/vci } { min [ max ] | default }

undo ip-precedence { pvc-name [ vpi/vci ] | vpi/vci }
View
ATM PVC-group view
Parameter
pvc-name: PVC name, whose maximum length is 16 characters (case insensitive). It

should be unique at ATM interface. And it should not be legal VPI/VCI pair. For example,
"1/20" cannot be a PVC name. The PVC corresponding to pvc-name must have already
been created.
vpi/vci: Virtual path identifier and virtual channel identifier pair used by ATM to identify a
PVC. VPI ranges from 0 to 255. VCI ranges from 0 to 2047, with values 0 through 31
being reserved for special use. The PVC specified in this command must be an existing
one.
min: Minimum preference of IP packets carried by the PVC.
max: Maximum preference of IP packets carried by the PVC.
default: Uses the specified PVC as the default PVC.
7-19
Description
Use the ip-precedence command to set the precedence of IP packets carried over
PVC.
Use the undo ip-precedence command to delete the precedence configuration of IP
packets carried over PVC.
z If the ip-precedence command is not configured, all IP packets, regardless of
their precedence levels, are transmitted over the primary PVC in the PVC-group.
This primary PVC is the one used when the PVC-group is created.
z The IP packets carrying certain priorities are transmitted over the PVCs specified
for them using the ip-precedence { pvc-name [ vpi/vci ] | vpi/vci } min [ max ]
command. If no PVC is specified for the IP packets with certain priorities, they are
transmitted over the PVC specified using the ip-precedence { pvc-name [ vpi/vci ]
| vpi/vci } default command if there is any. If no default PVC is specified, the
primary PVC is used.
z This command is only for setting the PVCs within the PVC-Group. The specified
minimum preference min must be less than or equal to the specified maximum
preference max.
Note that setting PVC service map does not change the precedence levels of IP
packets. To change the precedence levels of IP packets, you may configure CAR.
Related command: pvc-group and pvc.
Example
# Display how to set an IP packet named "h3c" whose VPI/VCI is 1/32 and the PVC
carrying preference is 0 to 3.
[H3C-atm-pvc-group-Atm1/0/0-1/32-h3c] ip-precedence h3c 1/32 0 3
7.1.20 map bridge
Syntax
map bridge virtual-ethernet interface-num

undo map bridge
View
PVC view
Parameter
interface-num: Interface number of a VE interface.
7-20
Description
Use the map bridge command to establish the IPoEoA mapping or PPPoEoA mapping
on the PVC.
Use the undo map bridge command to delete the mapping.
By default, no mapping is configured.
Before using this command, make sure that VE has been created.
Note:
As the upper layer of the link layer on the VE interface is Ethernet and the lower layer is
carried by AAL5, the MAC address used by VE is not the actual MAC address and it
cannot be obtained from the hardware and must be configured manually. Users need to
configure the correct MAC address by themselves.
Example
The following example shows a complete process of IPoEoA configuration.

# Establish a VE interface Virtual-Ethernet 2.
# Configure IP address 10.1.1.1/16 for the VE interface.

[H3C-Virtual-Ethernet2] ip address 10.1.1.1 255.255.0.0
[H3C-Virtual-Ethernet2] quit
# Establish PVC 1/102 on the ATM interface Atm2/0/0

[H3C-Atm2/0/0] pvc 1/102
# Establish the IPoE mapping using the established VE interface in PVC view.
[H3C-atm-pvc-Atm2/0/0-1/102] map bridge virtual-ethernet2
7.1.21 map bridge-group
Syntax
map bridge-group broadcast

undo map bridge-group
View
PVC view
7-21
Parameter
None
Description
Use the map bridge-group broadcast command to enable the PVC to transmit and
receive BPDUs.
Use the undo map bridge-group command to disable the PVC to transmit or receive
BPDUs.
By default, no bridge-group broadcast map is configured, and thus ATM interfaces are
disabled to transmit BPDUs.
Example
# Enable PVC 1/102 to transmit and receive BPDUs.

[H3C-Atm2/0/0] pvc 1/102
[H3C-atm-pvc-Atm2/0/0-1/102] map bridge-group broadcast
7.1.22 map ip
Syntax
map ip { ip-address [ ip-mask ] | default | inarp [ minutes ] } [ broadcast ]

undo map ip { ip-address | default | inarp }
View
PVC view
Parameter
ip-address: Opposite IP address mapping to PVC.

ip-mask: IP address mask, optional. If a packet cannot find the next hop at the interface,
but the next hop address belongs to the network segment specified by ip-address and
ip-mask, it can be sent over the PVC.
default: A mapping with the default route property is set. If a packet cannot find a
mapping with the same address of next hop at the interface, but one PVC has the
default mapping, the packet can be sent over the PVC.
inarp: Enables Inverse Address Resolution Protocol (InARP) at PVC.
minutes: Time interval to send InARP packets in minutes, optional. The range of the
value is 1 to 600 and the default value is 15.
broadcast: Pseudo-broadcast, an optional keyword parameter. If the IPoA map of the
PVC is configured with pseudo-broadcast, the router sends on the PVC a copy of each
7-22
broadcast packet that it sends out the interface to which the PVC belongs. You must
configure the broadcast keyword on an ATM PVC where broadcast or multicast
packets must be sent, for example, to allow PIM multicast to create neighbor
relationship with the router connected using the ATM interface.
Description
Use the map ip command to create IPoA mapping for PVC.

Use the undo map ip command to delete the mapping.
By default, no mapping is configured. If a mapping is set, pseudobroadcast is not
supported by default.
When InARP is used, it must be aal5snap encapsulation type. InARP is not supported
when aal5mux and aal5nlpid encapsulations are adopted.
Example
The two examples are the cases creating IPoA mapping for PVC.
# Display how to create a static mapping at PVC 1/32, specify the opposite IP address
to 61.123.30.169 and support pseudobroadcast.
[H3C-atm-pvc-Atm1/0/0-1/32] map ip 61.123.30.169 broadcast
# Display how to enable InARP at PVC 1/33 to automatically obtain the opposite
address and send InARP packets every 10 minutes.
[H3C-atm-pvc-Atm1/0/0.1-1/33] map ip inarp 10
7.1.23 map ppp
Syntax
map ppp { virtual-template vt-number [ server ] | dialer dialer-member }

undo map ppp
View
PVC view
Parameter
vt-number: Number of the virtual template interface corresponding to common PPPoA

or PPPoA server. It must be one that already exists.
server: Configures the PPPoA as the server.
dialer-member: Number of the dialer interface corresponding to the PPPoA client. It
must be one that already exists.
Description
Use the map ppp command to create a PPPoA map on the PVC.
7-23
Use the undo map ppp command to delete the map.

Three PPPoA configuration modes are available: common PPPoA, PPPoA server, and
PPPoA client.
To configure common PPPoA, use the map ppp virtual-template vt-number
command.
To configure PPPoA server, use the map ppp virtual-template vt-number server
command.
To configure PPPoA client, use the map ppp dialer dialer-member command.
When PPPoA client mode is adopted, you may configure the dialer timer idle
command and the dialer queue-length command in dialer interface view to modify the
idle-timeout timer and the buffer queue length.
By default, no mapping is configured.
Before this command is used, the VT must have already been created.
Related commands: dialer timer idle, dialer queue-length.
Example
The following presents a complete PPPoA configuration process.

# Create virtual template interface 1o and assign is an IP address.
[H3C-Virtual-Template10] ip address 202.38.160.1 255.255.255.0
[H3C-Virtual-Template10] quit
# Create PVC 1/101 on interface Atm1/0/0.

[H3C-Atm1/0/0] pvc 1/101
# Create a PPPoA map in common PPPoA mode associating virtual template 10 with
PVC 1/101.
[H3C-atm-pvc-Atm1/0/0-1/101] map ppp virtual-template 10
7.1.24 map routed-bridge
Syntax
map routed-bridge virtual-ethernet interface-number

undo map routed-bridge
View
ATM PVC view
7-24
Parameter
virtual-ethernet interface-number: The bound VE interface in a routed bridge map

entry.
Description
Use the map routed-bridge command to configure routed bridge encapsulation on the
PVC.
Use the undo map routed-bridge command to remove routed bridge encapsulation
on the PVC.
Upon execution of the map routed-bridge command, the support of routed bridge
encapsulation to IP is enabled by default.
When using the map routed-bridge command, note the following:
z It can be configured only on point-to-point PVCs.
z The bound VE interface must be an idle interface not used by any other service.
Example
# Create a point-to-point ATM subinterface and on it create PVC 1/101.

[H3C] interface atm 1/0/0.1 p2p
[H3C-Atm1/0/0.1] pvc 1/101
# Bind a VE interface with PVC 1/101 to create a routed bridge map entry.
[H3C-atm-pvc-Atm1/0/0.1-1/101] map routed-bridge virtual-ethernet 1
7.1.25 match
Syntax
match { dscp | precedence }

undo match
View
ATM pvc-group view
Parameter
dscp: Specifies to differentiate IP packets by the 6-bit DSCP identifier in the TOS field
of the IP header.
precedence: Specifies to differentiate IP packets by the 3-bit Precedence identifier in
the TOS field of the IP header.
7-25
Description
Use the match command to configure a PVC group to differentiate traffic by the
Precedence or DSCP identifier in the TOS field of the IP header.
Use the undo match command to restore the default.
By default, a PVC group uses the 3-bit Precedence identifier to differentiate IP packets.
Example
# Configure the PVC group to differentiate traffic by the 6-bit DSCP identifier in the TOS
field of the IP header.
<H3C> system-view
[H3C-pvc-group-Atm1/0/0-1/100] match dscp
7.1.26 mpls-exp
Syntax
mpls-exp { pvc-name [ vpi/vci ] | vpi/vci } { min [ max ] | default }

undo mpls-exp { pvc-name [ vpi/vci ] | vpi/vci }
View
ATM pvc-group view
Parameter

be used as a PVC name. In addition, the PVC identified by this argument must exist.
refers to ATM virtual channel identifier and is in the range from 0 to 2047. Usually, the
VCI values from 0 to 31 are reserved for special purposes and are not recommended.
Note that the PVC identified by this argument must exist.
min: The lowest priority level of MPLS packets that the specified PVC carries. It must be
in the range from 0 to 7.
max: The highest priority level of MPLS packets that the specified PVC carries. It must
be in the range from 0 to 7.
7-26
Description
Use the mpls-exp command to configure the PVC to carry packets of the specified
priority levels when the EXP identifier in the MPLS packet is used to identify the priority
levels of packets.
Use the undo mpls-exp command to remove the configuration.
Note that:
z If you do not configure the mpls-exp command, MPLS packets of all priorities are
carried by the fundamental PVC of the PVC group, that is, the PVC used to
construct the PVC group.
z If you configure the mpls-exp command with the default keyword, MPLS packets
of the definitely specified priority levels are carried by the specified PVC, while
MPLS packets of priority levels that are not specified are carried by the PVC
specified with the default keyword. If no PVC is specified by the mpls-exp
command with the default keyword, those packets of priority levels that are not
specified are carried by the fundamental PVC.
z The specified PVC must be in the current PVC group, and the lowest priority level
(min) must be less than or equal to the highest priority level (max).
Example
# Configure PVC 1/100 in the PVC group to carry MPLS packets of priority levels from
0 to 2.
<H3C> system-view
[H3C-Atm1/0/0] mpls
[H3C-pvc-group-Serial1/0/0-123] mpls-exp 1/100 0 2
7.1.27 mtu
Syntax
mtu mtu-number
undo mtu
View
Interface view
Parameter
mtu-number: MTU size of ATM interface in bytes; the range of the value is 128 to 2000.
7-27
Description
Use the mtu command to set the size of Maximum Transmission Unit (MTU) of the ATM
interface.
Use the undo mtu command to restore the default of the value.
By default, 1500 bytes.
MTU of ATM interface only influences the packet assembling and packet disassembling
of IP layer at the ATM interface. Because of the limit of the QoS queue length (for
example, the default length of the FIFO queue is 75), the too small MTU will lead to too
many fragments and will be dropped by the QoS queue. In this case, the length of the
QoS queue can be enlarged appropriately. FIFO is the queue dispatching mechanism
used by PVC by default, and its queue length can be changed by using the fifo
queue-length command in the PVC view.
Note:
This command can be used in ATM main interface and sub-interface at the same time.
Example
# Display how to set MTU of ATM interface Atm1/0/0 to 1492 bytes.

[H3C-Atm1/0/0] mtu 1492
7.1.28 oam ais-rdi
Syntax
oam ais-rdi up up-count down down-count

undo oam ais-rdi
View
PVC view, ATM Class view
Parameter
up-count: Number of contiguous seconds during which no alarm indication

signal/remote defect indication (AIS/RDI) alarm cell is received. It ranges from 3 to 60
seconds and defaults to 3 seconds. Upon its expiration, the specified PVC goes up.
down-count: Number of contiguous AIS/RDI alarm cells received on the specified PVC.
It ranges from 1 to 60 seconds and defaults to 1. Upon its expiration, the PVC goes up.
7-28
Description
Use the oam ais-rdi command to change the parameters related to AIS/RDI alarm cell
detection. If no argument is specified, the default value applies.
Use the undo oam ais-rdi command to restore the default.
By default, AIS/RDI alarm cell detection is enabled, allowing a PVC to come down after
receiving the number of AIS/RDI alarm cells specified by down-count and to go up if no
AIS/RDI alarm cell is present for contiguous seconds specified by up-count.
Example
# Modify the AIS/RDI alarm detection parameters on PVC1/32, setting both up-count
and down-count to 5.
[H3C-atm-pvc-Atm1/0/0-1/32] oam ais-rdi up 5 down 5
7.1.29 oam frequency
Syntax
oam frequency frequency [ up up-count down down-count retry-frequency

retry-frequency ]
undo oam frequency
View
PVC view, ATM Class view.
Parameter
frequency: Time interval to send operations, administration, and maintenance (OAM)

F5 Loopback cells in seconds, and the range of the value is 1 to 600.
up-count: The number of OAM F5 Loopback cells continuously and correctly received
before PVC status changes to UP. The range of the number is 1 to 600.
down-count: The number of OAM F5 Loopback cells continuously and correctly not
received before PVC status changes to DOWN. The range of the number is 1 to 600.
retry-frequency: Before PVC status changes, the sending interval of OAM F5 Loopback
cell in retransmission check, in second. The range of the value is 1 to 1000.
Description
Use the oam frequency command to enable the transmission of OAM F5 Loopback
cell so as to check the PVC status. You can also enable OAM F5 Loopback
retransmission check or modify the related parameters of the retransmission check.
Use the undo oam frequency command to disable the transmission and
retransmission check of the cell.
7-29
By default, OAM F5 Loopback cell transmission is disabled, but if OAM F5 Loopback

cell is received, it should be responded. By default, up-count is 3, down-count is 5 and
retry-frequency is 1 second.
Example
# Display how to enable OAM F5 Loopback check at PVC 1/32, with the period of 12
seconds. And set the retransmission check up-count as 4, down-count as 4 and
retransmission period as 1 second.
[H3C-atm-pvc-Atm1/0/0-1/32] oam frequency 12 up 4 down 4 retry-frequency 1
7.1.30 oamping interface
Syntax
oamping interface atm interface-num pvc { pvc-name | vpi / vci } [ number ] timeout
View
ATM interface view
Parameter
atm interface-num: ATM interface number.

pvc-name: PVC name.
vpi/vci: VPI/VCI number.
number: Number of OAM cells to be transmitted consecutively. It defaults to 5.
timeout: OAM response timeout time in seconds. It defaults to 2.
Description
Use the oamping interface command to enable the specified ATM interface to send
OAM cells on the specified PVC for checking link state. Receiving no response upon
expiration of the specified time indicates that the link is disconnected, busy, or prone to
packet loss.
Example
# Check the link state about PVC 1/32 on ATM interface 3/0/0, sending three cells and
setting timeout time to one second.
[H3C-Atm1/0/0] oamping interface atm 3/0/0 pvc 1/32 3 1
PING interface Atm3/0/0 pvc 1/32 with 3 of 53 bytes of oam F5 end-to-end
cell(s),
timeout is 1 second(s), press CTRL_C to break
Receive reply from pvc 1/32: time=1 ms
7-30
7.1.31 packing timer
Syntax
packing-timer time
undo packing-timer
View
PVC view
Parameter
time: Maximum waiting time for PVC packing, ranging from 10 to 4095 milliseconds.
Description
Use the packing-timer command to set the maximum waiting time for one PVC.
Use the undo packing-timer command to restore the default.
By default, the maximum waiting time for PVC packing is 40 milliseconds.
If waiting time exceeds the maximum packing waiting time, the system packs the
packets in the buffer and sends them.
Example
# Configure the maximum waiting time for PVC packing on PVC1/32 to 22.
<H3C> system-view
7.1.32 pvc
Syntax
pvc { pvc-name [ vpi/vci ] | vpi/vci }

undo pvc { pvc-name [ vpi/vci ] | vpi/vci }
View
ATM interface view, PVC-Group view
Parameter
pvc-name: PVC name, whose maximum length is 16 characters. It shall be unique at

ATM interface (case insensitive), and can not be a legal VPI/VCI pair. For example,
"1/20" cannot be a PVC name.
vpi/vci: vpi is ATM Virtual Path Identifier (VPI) in the range 0 to 255; vci is ATM Virtual
Channel Identifier (VCI). Its value range depends on interface type. See the following
7-31
table for reference. Usually, the vci values from 0 to 31 are reserved for special usage
and cannot be used.
Table 7-7 VCI range for each type of ATM interface
Interface type VCI

ADSL <0-255>
GSHDSL <0-255>
ATMOC3 <0-1023>
ATM25 <0-511>
ATME3 <0-1023>
ATMT3 <0-1023>
IMA-E1/T1 <0-511>
Note:
z vpi and vci cannot both be 0.
z A PVC in certain PVC-Group cannot be deleted at ATM interface.
Description
Use the pvc command to create a PVC or enter the PVC view at ATM interface or in
PVC-Group view.
Use the undo pvc command to delete the specified PVC.
By default, no PVC is created.
This command is used to create a PVC with specified VPI/VCI.
Once pvc-name is specified for one PVC (e.g. "h3c"), it is possible to re-enter the PVC
view by inputting pvc pvc-name (e.g. " pvc h3c"). The deletion of the PVC can be done
by inputting undo pvc pvc-name (e.g. " undo pvc h3c") or through the undo pvc
vpi/vci (if the VPI/VCI of this PVC is 1/32, it is " undo pvc 1/32") command.
The VPI/VCI pair of each PVC is unique at an ATM interface (including main interface
and sub-interface).
The actual number of PVCs that can be created is determined by the pvc max-number
command.
Related command: display atm pvc-info and pvc max-number.
Example
# Display how to create a PVC named "h3c" with VPI/VCI as 1/101.
7-32
[H3C-Atm1/0/0] pvc h3c 1/101
7.1.33 pvc-group
Syntax
pvc-group { pvc-name [ vpi/vci ] | vpi/vci }

undo pvc-group { pvc-name [ vpi/vci ] | vpi/vci }
View
ATM interface view
Parameter
pvc-name: PVC name, whose maximum length is 16 characters. It is case insensitive

and should be unique at ATM interface. And it should not be legal VPI/VCI pair. For
example, "1/20" cannot be a PVC name. The PVC corresponding to pvc-name must
have already been created.
vpi/vci: vpi is ATM Virtual Path Identifier (VPI) in the range 0 to 255; vci is ATM Virtual
Channel Identifier (VCI). For its value range, refer to Table 7-7. Usually, the vci values
from 0 to 31 are reserved for special usage and cannot be used. PVC corresponding to
vpi/vci must have already been created.
Description
Use the pvc-group command to create a PVC-Group or enter the PVC-Group view at
ATM interface.
Use the undo pvc-group command to delete the specified PVC-Group.
Once pvc-name is specified for some PVC (e.g. "H3C"), it is possible to enter the
PVC-Group view by inputting pvc-group pvc-name (e.g. "pvc-group H3C"). The
deletion of the PVC-Group can be done by inputting undo pvc-group pvc-name (e.g.
"undo pvc-group H3C") or through the undo pvc-group vpi/vci (if the VPI/VCI of this
PVC is 1/32, it is " undo pvc-group 1/32") command.
Related command: ip-precedence and pvc.
Example
# Display how to create a PVC-Group based on the name "H3C" and the PVC with
VPI/VCI as 1/32.
[H3C-Atm1/0/0] pvc-group H3C 1/32.
7.1.34 pvc max-number
Syntax
pvc max-number max-number
7-33
undo pvc max-number
View
Parameter
max-number: Maximum number of supported VCs. The value range and default value
for this parameter depends on interface type, as shown in the following table:
Table 7-8 The maximum number of VCs allowed for each type of ATM interface
Interface type Value range for max-number Default

ADSL 1 to 32 32
GSHDSL 1 to 32 32
ATMOC3 1 to 1024 1024
ATM25 1 to 256 256
ATME3 1 to 1024 1024
ATMT3 1 to 1024 1024
Description
Use the pvc max-number command to set the maximum number of ATM interface
virtual circuits (VC).
Use the undo pvc max-number command to restore the default value.
This command is used to set the maximum number of the total available VCs for ATM
main interfaces and sub-interfaces.
Note:
Although this command is valid on both ATM main interface and sub-interface, it can
only be used in ATM main interface view and there is not this command in ATM
sub-interface view.
Related command: display atm interface.
Example
# Configure ATM interface Atm 1/0/0 to support up to 1024 VCs.

[H3C-Atm1/0/0] pvc max-number 1024
7-34
# Configure ATM interface Atm 1/0/0 to support the default maximum number of VCs
(1024).
[H3C-Atm1/0/0] undo pvc max-number
7.1.35 pvc-protect
Syntax
pvc-protect { pvc-name [ vpi/vci ] | vpi/vci } { group | individual }

undo pvc-protect { pvc-name [ vpi/vci ] | vpi/vci }
View
ATM pvc-group view
Parameter

be used as a PVC name.
refers to ATM virtual channel identifier and its valid value range is related to the
interface type. Usually, the VCI values from 0 to 31 are reserved for special purposes
and are not recommended.
group: Specifies to use group protection mode.
individual: Specifies to use individual protection mode.
Description
Use the pvc-protect command to configure the protection mode for a PVC in a PVC
group.
Use the undo pvc-protect command to remove protection of a PVC group member.
z When a PVC group member that is configured to be protected in individual mode
goes down, its standby PVC (if any) does not take over, while the PVC specified
with the default keyword does instead. If no PVC is specified with the default
keyword, the fundamental PVC takes over.
z With several PVCs in a PVC group configured to be protected in group mode,
when a protected PVC goes down, if its standby PVC (if any) is also a member of
the protected group, the standby PVC takes over for the failed PVC. Otherwise,
the standby PVC does not take over, while the PVC specified with the default
keyword does instead. If no PVC is specified with the default keyword, the
fundamental PVC takes over.
By default, the system does not protect any PVC in a PVC group.
7-35
Example
# Specify to protect PVC 1/101 in PVC group 1/100 in individual mode and protect PVC
1/101 and PVC 1/102 in the same PVC group in group mode.
<H3C> system-view
[H3C-Atm] pvc-group 1/100
[H3C-pvc-group-Atm1/0/0-1/100] pvc-protect 1/101 individual
[H3C-pvc-group-Atm1/0/0-1/100] pvc-protect 1/102 group
[H3C-pvc-group-Atm1/0/0-1/100] pvc-protect 1/103 group
7.1.36 pvp create
Syntax
pvp create vpi

undo pvp create
View
Interface view
Parameter
vpi: Virtual path identifier of ATM network, its value ranges from 0 to 4095.
Description
Use the pvp create command to create a virtual path.

Use the undo pvp create command to delete the virtual path.
Only one virtual path can be created on one interface. If you have created one virtual
path, the executing of this command will delete the original virtual path and create a
new one.
By default, no virtual path is created.
Example
# Create a virtual path with vpi of 22.

<H3C> system-view
[H3C-Atm1/0/0] pvp create 22
7-36
7.1.37 pvp limit
Syntax
pvp limit vpi peak-rate

undo pvp limit vpi
View
Parameter
vpi: Virtual path identifier of ATM network, its value ranges from 0 to 255.
peak-rate: Normal flow to be held. Value range of this parameter depends on interface
type, as shown in the following table:
Table 7-9 Value ranges of peak-rate
Interface type peak-rate

ADSL <64-800>
ADSL2+ <64-1024>
GSHDSL <64-2312>
ATMOC3 <2000-155000>
ATM25 <64-25600>
ATME3 <64-34000>
ATMT3 <64-44000>
Description
Use the pvp limit command to set the parameters for VP policing.
Use the undo pvp limit command to delete the VP policing.
By default, the VP policing is not performed.
When applying VP policing, the parameters of PVC are still valid. Only when the
parameters of PVC and VP policing are satisfied, will the packets be transmitted. When
calculating the traffic, the LLC/SNAP, MUX and NLPID headers are included, but the
ATM cell head is not included.
Related command: pvc, service cbr, service vbr-nrt, service vbr-rt, service ubr.
Example
# Set the traffic of VP with vpi 1 to 2M.

[H3C-Atm1/0/0] pvp limit 1 2000
7-37
7.1.38 routed-bridge protocol
Syntax
routed-bridge protocol protocol-name

undo routed-bridge protocol protocol-name
View
ATM PVC view
Parameter
protocol protocol-name: Specifies a network protocol, which can be ip or mpls only.
Description
Use the routed-bridge protocol command to enable the support of routed bridge
encapsulation to a network protocol.
Use the undo routed-bridge protocol command to disable the support of routed
bridge encapsulation to a network protocol.
At present the network protocols supported by routed bridge encapsulation are IP and
MPLS only. As IP is used more often than MPLS, the support to it is enabled upon
execution of the map routed-bridge command.
As IP is the basis of MPLS, you need enable the support of routed bridge encapsulation
to IP when enabling the support of routed bridge encapsulation to MPLS.
Example
# Bind a VE interface with PVC 1/101 to create a routed bridge map entry.
[H3C-atm-pvc-Atm1/0/0.1-1/101] map routed-bridge virtual-ethernet 1
# Enable the support of routed bridge encapsulation to IP and MPLS.

[H3C-atm-pvc-Atm1/0/0.1-1/101] routed-bridge protocol ip
[H3C-atm-pvc-Atm1/0/0.1-1/101] routed-bridge protocol mpls
7.1.39 service cbr
Syntax
service cbr output-pcr [ cdvt cdvt_value ]
View
PVC view
7-38
Parameter
output-pcr: Output peak rate of ATM cell in kbps. Value range of this parameter
depends on interface type, as shown in the following table
Table 7-10 Value ranges of output-pcr
Interface type output-pcr

ADSL 64 to 800
For two-wire interfaces or four-wire interfaces in two-wire
GSHDSL mode: 64 to 2312
For four-wire interfaces: 128 – 4624
ATMOC3 64 to 155000
ATM25 64 to 25600
ATME3 64 to 34000
ATMT3 64 to 44000
IMA-E1/T1 64 to 1904
cdvt_value: cell delay variation tolerance, in μs, and the range of the value is 0 to 10000
μs.
Description
Use the service cbr command to specify PVC service type as constant bit rate (CBR).
By default, the service type is UBR after creating a PVC. When the value of cdvt is not
specified, it is 500μs by default.
This command is used to set the PVC service type and parameter. The newly specified
PVC service type will replace the existing service type. It is recommended that the PVC
with larger bandwidth be created first and then the one with smaller bandwidth. If the
creation fails, the cdvt_value can be adjusted larger to create the PVC once more. The
above case will be prompted in the command line, as follows:
“fail to set service parameter, please adjust cdvt value”
The command does not support ATM E1 interface and ATM E3 interface.
Related command: service vbr-nrt, service vbr-rt, and service ubr.
Example
# Create a PVC named "h3c" with VPI/VCI as 1/101.

[H3C-Atm1/0/0] pvc h3c 1/101
# Specify the service type of the PVC as cbr and the peak rate of ATM cell as
50,000Kbits/s.Cell delay variation tolerance is 1000μs.
[H3C-atm-pvc-Atm1/0/0-1/101-h3c] service cbr 50000 cdvt 1000
7-39
7.1.40 service ubr
Syntax
service ubr output-pcr
View
PVC view
Parameter
output-pcr: Output peak rate of ATM cell in kbps. For the value ranges of this parameter,
see Table 7-10.
Description
Use the service ubr command to specify the service type of PVC as Unspecified Bit
Rate (UBR) and specify the related rate parameters.
By default, the service type is UBR after creating a PVC.
This command as well as the service vbr-nrt, service vbr-rt and service cbr
commands can be used to set the service type and service parameters of PVC. The
newly specified PVC service type will supersede the existing service type.
Related command: service vbr-nrt, service vbr-rt, and service cbr.
Example
# Display how to create a PVC named " h3c " with VPI/VCI as 1/101.
[H3C-Atm1/0/0] pvc h3c 1/101
# Display how to specify the service type of the PVC as ubr and the peak cell rate of
ATM cell as 100,000Kbps.
[H3C-atm-pvc-Atm1/0/0-1/101- h3c] service ubr 100000
7.1.41 service vbr-nrt
Syntax
service vbr-nrt output-pcr output-scr output-mbs
View
PVC view
Parameter
output-pcr: Peak rate of ATM cell output in kbps. For the value ranges of this parameter,
see Table 7-10.
7-40
output-scr: Sustainable rate of ATM cell output in Kbps. Its value ranges are the same
as those of output-pcr.
output-mbs: Maximum burst size for ATM cell output, that is, the maximum number of
ATM cells that the output interface can cache. It ranges from 1 to 512.
Note:
When 64 < SCR <70 and 475 ≤ MBS ≤ 512 hold, chip limitation can result in
configuration failure.
Description
Use the service vbr-nrt command to specify the service type of PVC as Variable Bit
Rate-Non Real Time (VBR-NRT) and specify the related rate parameters.
This command as well as the service ubr, service vbr-rt and service cbr commands
can be used to set the service type and service parameters of PVC. The newly
specified PVC service type will replace the existing service type.
Related command: service vbr-rt, service ubr, service cbr.
Example
# Display how to create a PVC named " h3c " with VPI/VCI as 1/101.
[H3C-Atm1/0/0] pvc h3c 1/101
# Display how to specify the service type of the PVC as VBR-NRT and set the peak bit
rate of ATM cell to 100,000kbps, sustainable bit rate to 50,000Kbps, the maximum
burst size to 320 cells.
[H3C-atm-pvc-Atm1/0/0-1/101- h3c] service vbr-nrt 100000 50000 320
7.1.42 service vbr-rt
Syntax
service vbr-rt output-pcr output-scr output-mbs
View
PVC view
Parameter
output-pcr: Peak cell rate of ATM output in Kbps. For the value ranges of this parameter,
see Table 7-10.
7-41
output-scr: Sustainable cell rate of ATM output in Kbps. Its value ranges are the same
as those of output-pcr.
output-mbs: Maximum burst size of ATM cell output, i.e., the maximum cache size of
ATM cell output at the interface in cell number. The range of the value is 1 to 512. When
it is used in ATM E3 interface, the range of the parameter is 1 to 512.
Description
Use the service vbr-rt command to set the service type of PVC to Variable Bit Rate -
Real Time (VBR-RT) and specify the related rate parameters in the PVC view.
This command as well as the service ubr, service cbr and service vbr-nrt
commands can be used to set the service type and service parameters of PVC. The
newly specified PVC service type will replace the existing service type. The command
does not support ATM E1 interface.
Related command: service cbr, service ubr, and service vbr-nrt.
Example
# Display how to create a PVC named "h3c" with VPI/VCI as 1/101.

[H3C-if-Atm1/0/0] pvc h3c 1/101
# Display how to specify the service type of the PVC as VBR-NRT and set the peak cell
rate of ATM to 100,000kbps, sustainable cell rate to 50,000Kbps, the maximum burst
size to 320 cells.
[H3C-atm-pvc-Atm1/0/0-1/101-h3c] service vbr-rt 100000 50000 320
7.1.43 transmit-priority
Syntax
transmit-priority value
undo transmit-priority
View
ATM PVC view
Parameter
value: Priority in the range 0 to 9, with a higher value indicating a higher priority.
The transmit priority for the UBR service ranges from 0 to 4 and defaults to 0.
The transmit priority for the VBR-NRT service ranges from 5 to 7 and defaults to 5.
The transmit priority for the VBR-RT service ranges from 8 to 9 and defaults to 8.
7-42
Description
Use the transmit-priority command to assign a transmit priority to the ATM PVC
associated with the UBR, VBR-T, or VBR-NRT service. The higher priority PVC is
allocated bandwidth before any other PVCs.
Uses the undo transmit-priority command to restore the default transmit priority of
the PVC according to the associated service type.
After you change the service type of the PVC, its transmit priority changes to the default
for the current service.
Example
# Assign the transmit priority of 3 to ATM PVC1/32.

[H3C-atm-pvc-Atm5/0/0-1/32-hun] transmit-priority 3
[H3C-atm-pvc-Atm5/0/0-1/32-hun] display atm pvc-info interface atm 5/0/0 pvc
1/32
Atm5/0/0, VPI: 1, VCI: 32, Name: hun, INDEX: 0

AAL5 Encaps: SNAP, Protocol: IP
Service-type:UBR, output-pcr: 100000 kbps
Transmit-Priority: 3
OAM interval: 0 sec(disabled), OAM retry interval: 1 sec
OAM retry count (up/down): 3/5
Interface State: UP, OAM State: UP, PVC State: UP
7-43
Comware V3 Chapter 8 LAPB and X.25 configuration commands
Chapter 8 LAPB and X.25 configuration

commands
8.1 LAPB and X.25 Configuration Commands

8.1.1 channel
Syntax
channel { interface serial interface-number | xot ip-address }

undo channel { interface serial interface-number | xot ip-address }
View
X.25 hunt group view
Parameter
interface-number: Interface number, its value ranges from 0 to 3.

ip-address: IP address of the peer XOT host.
Description
Use the channel command to add X.25 interface or XOT channel of one serial port to
the current hunt group.
Use the undo channel command to delete the specified interface or XOT channel from
the current hunt group.
One interface may belong to six hunt groups at most at the same time.
Related command: X25 hunt-group.
Example
# Add the serial interface serial0/0/0 to the hunt group hg1.

[H3C] x25 hunt-group hg1 round-robin
[H3C-hg-hg1] channel interface serial0/0/0
8.1.2 debugging lapb
Syntax
debugging lapb { all | error [ interface type number ] | event [ interface type number ]
| packet { i-frame | us-frame } [ interface type number ] }
8-1
undo debugging lapb { all | error [ interface type number ] | event [ interface type
number ] | packet { i-frame | us-frame }[ interface type number ] }
View
User view
Parameter
all: All LAPB debugging.

error: LAPB error debugging.
event: LAPB event debugging.
packet: LAPB packet debugging.
interface type number: Debugging on the specified interface.
i-frame: I-frame debugging.
us-frame: U-frame and S-frame debugging.
Description
Use the debugging lapb command to enable LAPB debugging.

Use the undo debugging lapb command to disable LAPB debugging.
By default, LAPB debugging is disabled.
Example
# Enable LAPB error debugging.

<H3C> debugging lapb error
8.1.3 debugging pad
Syntax
debugging pad { all | error | event | packet }

undo debugging pad { all | error | event | packet }
View
User view
Parameter
all: All PAD debugging.

error: PAD error debugging.
event: PAD event debugging.
packet: PAD packet debugging.
8-2
Description
Use the debugging pad command to enable PAD debugging.

Use the undo debugging pad command to disable PAD debugging.
Example
# Enable PAD packet debugging.

<H3C> debugging pad packet
8.1.4 debugging x25
Syntax
debugging x25 { all | error | event | packet }

undo debugging x25 { all | error | event | packet }
View
User view
Parameter
all: All X.25 debugging.

error: X.25 error debugging.
event: X.25 event debugging.
packet: X.25 packet debugging.
Description
Use the debugging x25 command to enable X.25 debugging.

Use the undo debugging x25 command to disable X.25 debugging.
Example
# Enable X.25 error debugging.

<H3C> debugging x25 error
8.1.5 debugging x25 xot
Syntax
debugging x25 xot { all | event | packet }

undo debugging x25 xot { all | event | packet }
View
User view
8-3
Parameter
all: All XOT debugging.

event: XOT event debugging.
packet: XOT packet debugging.
Description
Use the debugging x25 xot command to enable XOT debugging

Use the undo debugging x25 xot command to disable XOT debugging.
Example
# Enable XOT packet debugging.

<H3C> debugging x25 xot packet
8.1.6 debugging x25 x2t
Syntax
debugging x25 x2t { all | event | packet }

undo debugging x25 x2t { all | event | packet }
View
System view
Parameter
all: All X2T debugging.

event: X2T event debugging.
packet: X2T packet debugging.
Description
Use the debugging x25 x2t command to enable X2T debugging.

Use the undo debugging x25 x2t to disable X2T debugging.
The debugging information includes event and packet information. You can
enable/disable debugging for one piece of or all information by the debugging
command.
Example
# Enable all X2T debugging.

[H3C] debugging x25 x2t all
# Enable X2T packet debugging.

[H3C] debugging x25 x2t packet
8-4
# Enable X2T event debugging.

[H3C] debugging x25 x2t event
Syntax
display interface serial [ number ]
View
Any view
Parameter
number: Serial interface number.
Description
Use the display interface command to view the LAPB or X.25 interface information.
After configuring PVC of X.25, users can use the command to obtain the status
information on one interface.
Example
# Encapsulate Serial0/0/0 with LAPB protocol and view the encapsulated interface
information using the following commands.
<H3C> system-view
[H3C-Serial0/0/0] link-protocol lapb
[H3C-Serial0/0/0] display interface serial 0/0/0
Serial0/0/0 current state : UP
Description : Serial0/0/0 Interface
The Maximum Transmit Unit is 1500, Holder timer is 10(sec)
Link-protocol is X.25 DCE Ietf, address is , state R1, modulo 8
input/output: window sizes 7/7, packet sizes 256/256
Channels: Incoming-only 10-20, Two-way 30-40, Outgoing-only 50-60
Timers: T10 60, T11 180, T12 60, T13 60, Idle_Timer 0 (seconds)
New configuration(will be effective after restart): modulo 8
input/output: window sizes 7/7, packet sizes 256/256
Channels: Incoming-only 10-20, Two-way 30-40, Outgoing-only 50-60
Statistic: Restarts 0 (Restart Collisions 0)
Refused Incoming Call 0, Failing Outgoing Call 0
input/output: RESTART 1/1 CALL 9/2 DIAGNOSE 0/0
DATA 119/121 INTERRUPT 0/0 Bytes 2497/2731
8-5
RR 6/113 RNR 0/0 REJ 0/0

Invalid Pr: 0 Invalid Ps: 0 Unknown: 0
Link-protocol is LAPB
LAPB DCE, module 8, window-size 7, max-frame 12056, retry 10
Timer: T1 3000, T2 1500, T3 0 (milliseconds), x.25-protocol
state CONNECT, VS 6, VR 3, Remote VR 6
IFRAME 147/254, RR 11/6, RNR 0/0, REJ 0/0
FRMR 0/0, SABM 0/1, DM 0/0, UA 1/0
DISC 0/0, invalid ns 0, invalid nr 0, link resets 0
FIFO 0/75/0
Physical layer is synchronous,
Interface is DTE, Cable type is V24
5 minutes input rate 0.00 bytes/sec, 0.01 packets/sec
5 minutes output rate 0.07 bytes/sec, 0.01 packets/sec
159 packets input, 3338 bytes, 0 no buffers
261 packets output, 4057 bytes, 0 no buffers
0 input errors, 0 CRC, 0 frame errors
0 overrunners, 0 aborted sequences, 0 input no buffers
DCD=UP DTR=UP DSR=UP RTS=UP CTS=UP
The following table describes the description on the fields of the display interface
command.
Field Description
Current encapsulation protocol of this interface
Link-protocol is X.25 DCE Ietf is X.25 protocol that works in DCE mode, and
the data packet encapsulation format is IETF.
X.121 address of this X.25 interface; this field will
address is
be empty if there is no address.
state Current status of this X.25 interface.
Data packets and traffic control packets sent by
modulo this X.25 interface are numbered in modulo 8
mode.
Flow control parameters of this X.25 interface,

input/output: Window sizes 7/7, including receiving window size, sending window
packet sizes 256/256 size, maximum received packet size (in bytes),
and maximum sent packet size (in bytes).
Channel range division of this X.25 interface,
sequentially as incoming-only channel section,
Channels two-way channel section, outgoing-only channel
section; if both demarcating values of an section
are 0, this section is disabled.
8-6
Field Description
Delay values of various timers of this X.25
Timers
interface, in seconds.
New configuration of this X.25 interface taking
New Configuration effect after next restart; if this configuration is
wrong, the default value will be restored.
Statistics of this X.25 interface, including times of
Restarts 0 ( Restart Collision 0)
restart (including restart collision).
Statistics information of this X.25 interface: times
Refused Incoming Call
of call refusals. times of call failures.
Failing Outgoing Call Number of failed outgoing calls.
Statistics information of this X.25 interface:
input/output: RESTART 1/1 ...
quantities of received and sent packets, format:
REJ 0/0
received quantity/sent quantity.
Error statistics information of this X.25 interface:
total of received data packets and traffic control
Invalid Pr
packets carrying erroneous acknowledgement
numbers.
Invalid Ps total of received data packets carrying erroneous
sequence numbers.
Unknown
total of received irresolvable packets.
Current encapsulation protocol of this interface
Link-protocol is LAPB
is LAPB protocol.
LAPB DCE LAPB of this interface works in DCE mode.
Information frame and monitoring frame sent by
module 8 this interface LAPB are numbered in the modulo
8 view.
window-size 7 Window size of this interface LAPB is 7.
The maximum length of frame sent by the
max-frame 12056
interface LAPB is 12056 bits.
Maximum re-sending times of information frame
retry 10
of this interface LAPB is 10.
Delay value of timers of this interface LAPB, in
timer
milliseconds. The unit of T3 is second.
state Current status of this interface LAPB.
VS Sending variable of this interface LAPB.
VR Receiving variable of this interface LAPB.
Peer’s last acknowledgment on information
Remote VR
frame received by this interface LAPB.
8-7
Field Description
Statistics information of frames sent and
IFRAME 147/254 ... DISC 0/0 received by this interface LAPB, format: received
quantity/sent quantity.
Error statistics of this interface LAPB, including
Invalid ns total of received information frames carrying
erroneous sequence numbers.
Error statistics of this interface LAPB, including
total of received information frames and
Invalid nr
monitoring frames carrying erroneous
acknowledgment numbers.
Link resets Restarting times of this interface LAPB link.
8.1.8 display x25 alias-policy
Syntax
display x25 alias-policy [ interface interface-type interface-number ]
View
Any view
Parameter

Description
Use the display x25 alias-policy command to view X.25 alias table.
Related command: x25 alias-policy.
Example
# Display X.25 alias table.

<H3C> display x25 alias-policy
Alias for Serial0/0/0:
Alias for Serial1/0/0:
Alias- 1: $20112405$ strict
Alias- 2: $20112450 left
Alias- 3: 20112450$ right
The above information indicates: the interface Serial0/0/0 is set without alias, and the
interface Serial1/0/0 is set with 3 aliases, which are $20112405$ (in strict match mode),
8-8
$20112405 (in left alignment match mode) and 20112405$ (in right alignment match
mode).
8.1.9 display x25 cug
Syntax
display x25 cug
View
Any view
Parameter
None
Description
Use the display x25 cug command to view the CUG configuration on the router ports.
Example
# Display the CUG configuration on the router ports.

[H3C]display x25 cug
Interface:Serial0, CUG Service enable
local-cug 2 <-> network-cug 4
Interface:Serial1, CUG Service enable
local-cug 1 <-> network-cug 1 , no-incoming
local-cug 3 <-> network-cug 5 , preferential
8.1.10 display x25 hunt-group-info
Syntax
display x25 hunt-group-info [ hunt-group-name ]
View
Any view
Parameter
hunt-group-name: hunt group name
Description
Use the display x25 hunt-group-info command to view the status information of X.25
hunt group.
You can use this command to learn the hunt group of the Router and the information
about the interfaces and XOT channel inside the hunt group.
8-9
Related command: x25 hunt-group.
Example
# Display the status information of X.25 hunt group hg1.

[H3C] display x25 hunt-group-info hg1
HG_ID : hg1 HG_Type: round-robin
member state vc-used in-pkts out-pkts
Serial0/0/0 Last 2 51 20
Serial1/0/0 Next 1 21 15
1.1.1.1 Normal 1 24 3
The following table introduces the meaning of each field in the displayed information.
Table 8-2 Description of each field in the command display x25 hunt-group-info
Field Description
hg1 Hunt group name
round-robin Hunt group call channel selection policy

member Interfaces or XOT channel contained in hunt group
The state of the current interface or XOT channel, including:
Last:Last: last used
State Next: interfaces or XOT channel selected by rotary selection
policy next
Normal: normal state
Call number on the interface or XOT channel (including call
vc-used
success and call failure)
in-pkts Input flow on the interface or XOT channel in packets
out-pkts Output flow on the interface or XOT channel in packets
8.1.11 display x25 map
Syntax
display x25 map
View
Any view
Parameter
None
8-10
Description
Use the display x25 map command to view the X.25 address mapping table.
The X.25 address mapping can be configured in two methods: special configuration
(through the x25 map command) or implied configuration (through the x25 pvc
command). The display x25 map command can be used to show all the address
mappings.
Related command: x25 map, x25 pvc, x25 switch pvc, x25 xot pvc, and x25 fr pvc.
Example
# Display the X.25 address map table.

<H3C> display x25 map
Interface:Serial3/0/0(protocol status is up):
ip address:202.38.162.2 X.121 address: 22
map-type: SVC_MAP VC-number: 0
Facility:
ACCEPT_REVERSE;
BROADCAST;
PACKET_SIZE: I 512 O 512 ;
8.1.12 display x25 pad
Syntax
display x25 pad [ pad-id ]
View
Any view
Parameter
pad-id: PAD ID, its value ranges from 0 to 255. If it is not specified, all PAD connection
information will be displayed.
Description
Use the display x25 pad command to view X.25 PAD connection information.
PAD is a kind of application similar to telnet. It can establish the connection between
two ends through X121 address, and then, to carry out configuration operations.
Related command: display x25 vc and x25 xot.
Example
# Display X.25 PAD connection information.

[H3C] display x25 pad
8-11
UI-INDEX130:
From remote 22 connected to local 11, State: Normal
X.3Parameters(In):
1:1,2:0,3:2,4:1,5:0,6:0,7:21,8:0,9:0,10:0,11:14
12:0,13:0,14:0,15:0,16:127,17:21,18:18,19:0,20:0,21:0,22:0
X.3Parameters(Out):
1:1,2:0,3:2,4:1,5:0,6:0,7:21,8:0,9:0,10:0,11:14
12:0,13:0,14:0,15:0,16:127,17:21,18:18,19:0,20:0,21:0,22:0
Input:
Pkts(total/control): 13/2 bytes:12
queue(size/max) :0/200
Output:
Pkts(total/control): 15/2 bytes:320
8.1.13 display x25 switch-table pvc
Syntax
display x25 switch-table pvc
View
Any view
Parameter
None
Description
Use the display x25 switch-table pvc command to view X.25 switching virtual circuit
table.
Related command: x25 pvc, x25 switch pvc, x25 xot pvc, x25 fr pvc, and x25 switch
svc.
Example
# Display X.25 switching virtual circuit table.

[H3C] display x25 switch-table pvc
#1 (In: Serial0/0/0-vc1024)<— —>(Out: Serial1/0/0-vc1}
#2 (In: Serial1/0/0-vc1024)<— —>(Out: Serial0/0/0-vc1}
8.1.14 display x25 switch-table svc
Syntax
display x25 switch-table svc { dynamic | static }
8-12
View
Any view
Parameter
None
Description
The command display x25 switch-table svc is used to display X.25 switching routing
table.
Related command: x25 switch svc.
Example
# Display X.25 switching routing table.

[H3C] display x25 switch-table svc static
Number Destination Substitute- Substitute- CUD SwitchTo(type/name)
src dst
1 11 I/Serial2/0/0
2 22 I/Serial2/1/0
3 133 H/hg1
4 132 T/123.123.123.123
5 133 T/123.123.123.123
T/124.124.124.124
T/125.125.125.125
6 111 222 333 T/4.4.4.4
Total of static svc is 6.
The item type of SwitchTo meaning:
I: interface H: hunt-group T: xot
The following table introduces the meaning of each field in the displayed information.
Table 8-3 Description on each field in the command display x25 switch-table svc
Field Description
Number Sequence number of this route in the routing table
X.121 source address after substitution, if the content is
Substitute-src
blank, it means no substitution.
X.121 destination address after substitution, if the content is
Substitute-dst
blank, it means no substitution.
CUD Call User Data
Forwarding address of this route, including interface, XOT
SwitchTo
channel and hunt group
8-13
8.1.15 display x25 vc
Syntax
display x25 vc [ lci ]
View
Any view
Parameter
lci: Logical channel identifier, its value ranges from 1 to 4095. If the logical channel
identifier is not specified, all virtual circuits will be displayed.
Description
Use the display x25 vc command to view the information about the X.25 virtual circuit.
SVC (Switched Virtual Circuit) is set up temporarily by X.25 through call connection
when data transmission is required. PVC is configured manually and exists regardless
of the data transmission requirement. When the router works in X.25 switched mode,
virtual circuits will be set up in order to transfer the switched data. The information
about these virtual circuits can be shown via this command, and only some fields in the
displayed information differ.
Related command: x25 pvc, x25 switch pvc, x25 xot pvc, and x25 fr pvc.
Example
# Display X.25 virtual circuit.

<H3C> display x25 vc
SVC 1
State: P4
Map: ip 10.1.1.2 to 130
Window size: input 2 output 2
Packet Size: input 128 output 128
Local PS: 5 Local PR: 5 Remote PS: 5 Remote PR: 4
Local Busy: FALSE Reset times: 0
Input/Output:
DATA 5/5 INTERRUPT 0/0
RR 0/0 RNR 0/0 REJ 0/0
Bytes 420/420
Snd Queue(Current/Max): 0/200
SVC 10
State: P4
8-14
SVC <--> Serial2/0/0 SVC 60

Input/Output:
RR 0/0 RNR 0/0 REJ 0/0
Bytes 420/420
Interface: Serial2/0/0-1.1.1.1
PVC 1
State: P/Inactive
XOT PVC <--> Serial2/0/0 PVC 1 connected
Input/Output:
RR 0/0 RNR 0/0 REJ 0/0
Bytes 0/0
Interface: Serial2/0
PVC 1
State: D3
PVC <--> XOT Serial2/0/0-1.1.1.1 PVC 1 connected
Input/Output:
RR 0/0 RNR 0/0 REJ 0/0
Bytes 0/0
SVC 59
State: P4
PAD: UI-130 From remote 130 connected to local 220
8-15

Input/Output:
RR 6/2 RNR 0/0 REJ 0/0
Bytes 53/363
8.1.16 display x25 xot
Syntax
display x25 xot
View
Any view
Parameter
None
Description
Use the display x25 xot command to view XOT link information.
You can use the command display x25 xot to view the detailed information about all
XOT links, including peer ip and port, local ip and port, keepalive setting of socket and
come/go interface names.
Related command: x25 switch svc xot and x25 xot pvc.
Example
# Display XOT link information.

[H3C] display x25 xot
SVC 1024: ( ESTAB )
tcp peer ip: 10.1.1.1, peer port: 1998
tcp local ip: 10.1.1.2, local port: 1024
socket keepalive period: 5, keepalive tries: 3
come interface name: Serial0/0/0-10.1.1.1-1024
go interface name: Serial0/0/0:
The above information indicates: there is one established XOT link via SVC, whose
peer IP is 10.1.1.1, peer port is 1998, local IP is 10.1.1.2, local port is 1024, keepalive
period of socket is 5 seconds, keepalive tries are 3, come interface name is
Serial0/0/0-10.1.1.1-1024 (XOT interface), and go interface name is Serial0/0/0.
8-16
8.1.17 display x25 x2t switch-table
Syntax
display x25 x2t switch-table
View
Any view
Parameter
None
Description
Use the display x25 x2t switch-table command to display the dynamic switching
routing table and static routing table.
You can view the switch entry from X25 to TCP dynamically established by router with
the display x25 x2t switch-table command. When a router sets up a connection, this
entry exists and when you close the connection, the entry is deleted.
Example
# Display the X2T dynamic switching routing table on the router.

[H3C] display x25 x2t switch-table
X.121 Interface [LCD ]<--> Ip Address port SocketId
==========================================================
222 Serial0/0/0 [SVC:1024 ] <--> 20.1.1.1 102 2
NULL Serial0/0/0 [PVC:1 ] <--> 20.1.1.1 104 2
From the first entry in this table, we know that the router has established an X2T SVC
connection with one end connecting X.25 of Serial0/0/0 and the other a TCP
connection. The X.25 uses a virtual circuit (VC) whose LCD is 1024 and the TCP
connection whose port is 102, socket is 2 and the remote IP address is 20.1.1.1.
From the second entry in this table, we know that the router has established an X2T
PVC connection with one end connecting X.25 of Serial0/0/0 and the other a TCP
connection. The X.25 uses a virtual circuit (VC) whose LCD is 1 and the TCP
connection of which the Socket is 2, remote IP address is 20.1.1.1 and the port is 102.
8.1.18 lapb max-frame
Syntax
Lapb max-frame n1-value

undo lapb max-frame
8-17
View
Interface view
Parameter
n1-value: Value of parameter N1, in bit, in the range 1096 to 12104. LAPB parameter
N1 defaults to 12032.
Description
Use the lapb max-frame command to configure LAPB parameter N1.

Use the undo lapb max-frame command to restore the default value.
N1 indicates the maximum frame length in bits between DTE and DCE, which should
be 8 times of MTU plus the protocol header.
Note:
The lapb max-frame command is configurable only when X.25 applies on the link layer.
If the LAPB applies on the link layer, you cannot configure the lapb max-frame
command. When the MTU value on the interface changes, however, you need to use
the undo lapb max-frame command to change the default value of LAPB parameter
N1 to the value after MTU changes since the default value was calculated according to
the previous MTU.
Example
# Set the LAPB parameter N1 on Serial0/0/0 to 1160.

[H3C-Serial0/0/0] lapb max-frame 1160
8.1.19 lapb modulo
Syntax
lapb modulo { 128 | 8 }

undo lapb modulo
View
Interface view
Parameter
128: Using modulus 128 numbering view.

8: Using modulus 8 numbering view.
8-18
Description
Use the lapb modulo command to specify the LAPB frame numbering view (also
called modulo). Use the undo lapb modulo command to restore the default value.
By default, the LAPB frame protocol view is modulo 8.
There are two LAPB frame numbering views: modulo 8 and modulo 128. Each
information frame (I frame) is numbered in sequence, in the range 0 to the modulo
minus 1. In addition, sequential numbers will cycle within the range of modulo.
Modulo 8 is a basic view, LAPB can implement all the standards via the view. It is
sufficient for most links.
Related command: lapb window-size.
Note:
If the link is in congestion and you have used the lapb modulo command to configure
modulo 128, make sure that the length of the QoS queue is longer than or equal to the
length of the sliding window configured by the lapb window-size command; otherwise,
data loss and link jittering may occur.
Example
# Set the LAPB frame numbering view on Serial0/0/0 to modulo 8.

[H3C-Serial0/0/0] lapb modulo 8
8.1.20 lapb pollremote
Syntax
lapb pollremote
undo lapb pollremote
View
Interface view
Parameter
None
Description
Use the lapb pollremote command to configure the link protocol to teardown the link in
use after receiving false packets.
Use the undo lapb pollremote command to restore the default.
8-19
In data transmission, false packets are always created, which may trigger link recovery
rules, thus making the link protocol teardown the link in use and the network fail. You
can use the undo lapb pollremote command to avoid the above situation.
By default, the link protocol does not teardown when receiving false packets, that is, no
lapb pollremote command is configured by default.
Example
# Configure the lapb pollremote command on Serial0/0/0.

[H3C-Serial0/0/0] lapb pollremote
8.1.21 lapb retry
Syntax
lapb retry n2-value

undo lapb retry
View
Interface view
Parameter
n2-value: The value of N2, its value ranges from 1 to 255.By default, the parameter N2
of LAPB is 10.
Description
Use the lapb retry command to configure LAPB parameter N2.

Use the undo lapb retry command to restore the default value.
The value of N2 indicates the maximum retries that DCE or DTE sends one frame to
DTE or DCE.
Example
# Set the LAPB parameter N2 on Serial0/0/0 to 20.

[H3C-Serial0/0/0] lapb retry 20
8.1.22 lapb timer
Syntax
lapb timer { t1 t1-value | t2 t1-value | t3 t3-value }

undo lapb timer { t1 | t2 | t3 }
8-20
View
Interface view
Parameter
t1-value: The value of timer T1 in the range 1 to 64000 milliseconds. It defaults to 3000
milliseconds.
t2-value: Value of the timer T2 in the range 1 to 32000 milliseconds. It defaults to 1500
milliseconds.
t3-value: Value of the timer T3 in the range 0 to 255 seconds. It defaults to 0 seconds.
Description
Use the lapb timer command to configure the LAPB timers T1, T2 and T3.
Use the undo lapb timer command to restore their default values.
T1 is a transmission timer. When T1 expires, DTE (DCE) will start retransmission. The
value of T1 shall be greater than the maximum time between the sending of a frame
and the receiving of its response frame.
T2 is a reception timer. When it expires, the DTE/DCE must send an acknowledgement
frame so that this frame can be received before the peer DTE/DCE T1 timer expires
(T2<T1).
T3 is an idle channel timer, when it expires, the DCE reports to the packet layer that the
channel stays idle for a long time. T3 should be greater than the timer T1 (T3>T1) on a
DCE. When T3 is 0, it indicates that it does not function yet.
Example
# Set the LAPB timer T1 on Serial0/0/0 to 3000ms.

[H3C-Serial0/0/0] lapb timer t1 3000
8.1.23 lapb window-size
Syntax
lapb window-size k-value

undo lapb window-size
View
Interface view
Parameter
k-value: Maximum number of I frame of unacknowledged sequence number that DTE

or DCE may send, if the modulus is 8, the value of the window parameter K ranges 1 to
8-21
7. If the modulus is 128, the value of the window parameter K ranges 1 to 127. By
default, the window parameter K is 7.
Description
Use the lapb window-size command to configure the LAPB window parameter K.
Use the undo lapb window-size command to restore the default value of the LAPB
window parameter K.
The value of the window parameter K is determined by the value of modulus.
Related command: lapb modulo.
Note:
If the link is in congestion and you have used the lapb modulo command to configure
modulo 128, make sure that the length of the QoS queue is longer than or equal to the
length of the sliding window configured by the lapb window-size command; otherwise,
data loss and link jittering may occur.
Example
# Set the LAPB window parameter K on the interface Serial 0/0/0 to be 5.

[H3C-Serial0/0/0] lapb window-size 5
8.1.24 link-protocol lapb
Syntax
link-protocol lapb [ dte | dce ] [ ip | multi-protocol ]
View
Interface view
Parameter
dte: Indicates that the interface works in DTE mode of LAPB.

dce: Indicates that the interface works in DCE mode of LAPB.
ip: Indicates that the network layer protocol borne by LAPB is IP.
Description
Use the link-protocol lapb command to specify the link layer protocol of the interface
as LAPB.
8-22
By default, DTE is the default LAPB operating mode. IP is the default network layer
protocol.
Though LAPB is a layer-2 protocol of X.25, it can act as an independent link-layer
protocol for simple data transmission. Generally, LAPB can be used when two routers
are directly connected with a dedicated line. At that time one end works in the DTE
mode, and the other in the DCE mode.
Example
# Configure LAPB as the link layer protocol of the interface Serial 0/0/0, and enable it to
work in DCE mode.
[H3C-Serial0/0/0] link-protocol lapb dce
8.1.25 link-protocol x25
Syntax
link-protocol x25 [ dte | dce ] [ ietf | nonstandard ]
View
Interface view
Parameter
dte: Indicates that the interface works in DTE mode.

dce: Indicates that the interface works in DCE mode.
letf: Based on the standard stipulation of the IETF RFC 1356, encapsulate IP or other
network protocols on the X.25 network.
nonstandard: Encapsulates IP or other network protocols on the X.25 network with
nonstandard.
Description
Use the link-protocol x25 command to encapsulate X.25 protocol to the specified
interface.
By default, the link-layer protocol for interface is PPP. When the interface uses X.25
protocol, it works in DTE IETF mode by default.
If the X.25 switching function is not used, and two Routers are directly connected back
to back via the X.25 protocol, one Router shall work in DTE mode, while the other shall
work in DCE mode. When two Routers are connected via the X.25 public packet
network, they shall generally work in DTE mode. If the X.25 switching function is used,
the Router shall generally work in DCE mode.
In practice, select the IETF format of datagram if there is no special requirement.
8-23
Example
# Specify X.25 as the link layer protocol of the interface Serial 0/0/0 that works in DTE
IETF mode.
[H3C-Serial0/0/0] link-protocol x25 dte ietf
8.1.26 pad
Syntax
pad x121-address
View
User view
Parameter
x121-address: x121 destination address.
Description
Use the pad command to establish a PAD connection with the remote site.
PAD is a kind of application similar to telnet. It can establish the connection between
two ends through X121 address, and then, to carry out configuration operations.
Example
# Establish a PAD connection, and the destination x121 address is 2.

<H3C> pad 2
8.1.27 reset xot
Syntax
reset xot local local-ip-address local-port remote remote-ip-address remote-port
View
User view
Parameter
local-ip-address: Local IP address of the XOT connection.

local-port: Local port number of the XOT connection.
remote-ip-address: Remote IP address of the XOT connection.
remote-port: Remote port number of the XOT connection.
8-24
Description
For SVC, use the reset xot command to initiatively clear an XOT link.
For PVC, use the reset xot command to initiatively reset an XOT link.
You can initiatively clear or reset the XOT link using the command reset xot. When you
clear or reset the XOT link, you can obtain the required ports using the commands
display x25 xot or display tcp status.
Related command: display x25 vc, x25 switching, display x25 xot, and display tcp
status.
Example
# Clear or reset an XOT link.

<H3C> reset xot local 10.1.1.1 1998 remote 10.1.1.2 1024
8.1.28 reset x25
Syntax
reset x25 { counters interface type number | vc interface type number

[ pvc-number ] }
View
User view
Parameter
counters: Resets interface statistics.

vc: Rests X.25 circuits.
pvc-number: PVC number in the range 1 to 4095.
Description
Use the reset x25 command to reset statistics about X.25 on the specified interface or
to reset the specified X.25 VC.
Example
# Reset the statistics about X.25 on the specified interface.

[H3C] reset x25 counters interface serial 0/0/0
8.1.29 reset lapb
Syntax
reset lapb statistics
8-25
View
Interface view
Parameter
None
Description
Use the reset lapb statistics command to clear the statistics about LAPB.
Example
# Clear the statistics about LAPB.

[H3C-Serial1/0/0] reset lapb statistics
8.1.30 translate ip
Syntax
translate ip ip-address port port-number { x25 x.121-address | pvc { interface-type

interface-number } pvc-number }
undo translate ip ip-address port port-number
View
System view
Parameter
ip-address: Local IP address.

port-number: TCP port number on which the local router listen messages.
x.121-address: Destination address of X.121 after translation.
interface-number: Number of the port encapsulated with X25.
pvc-number: PVC number.
Description
Use the translate ip command to configure an X2T forwarding route from IP network to
X.25 network.
Use the undo translate ip command to cancel a configured X2T forwarding route from
IP network to X.25 network.
When the host in IP network transmits packets to the specified IP address and port
number of the router, the router will translate these IP packets to X.25 ones and then
forward them to a specified X1.121 address or PVC in X.25 network.
8-26
x.121-address supports wildcard. For the details about how to use wildcard, refer to the
X25 route command.
Example
# Configure an X2T forwarding route to forward the packets that the local device
receives at 10.1.1.1:102 to the X.121 address 111.
[H3C] Translate ip 10.1.1.1 port 102 x25 111
# Configure an X2T forwarding route to forward the packets that the local device
receives at 10.1.1.1:102 to PVC 1 on the interface serial 0/0/0.
[H3C] Translate ip 10.1.1.1 port 102 pvc serial 0/0/0 1
8.1.31 translate X25
Syntax
translate x25 x.121-address ip ip-address port port-number

undo translate x25 x.121-address
View
System view
Parameter
x.121-address: Destination address of X.121.

ip: IP address of the remote host to be connected.
port: Port number of the remote host to be connected.
Description
Use the translate x25 command to configure an X2T forwarding route from X.25
network to IP network.
Use the undo translate x25 command to cancel this configuration.
Users can implement the packet forwarding between X25 and IP network. The program
compares the destination address in the X.25 call request packet with x.121-address,
then initiates a TCP connection to a specified IP address and port number according to
the configuration if the matching result describes it is an X2T application.
You can establish mapping between port numbers and X.121 addresses by multiple
commands.
x.121-address supports wildcard. For the details about how to use wildcard, refer to the
X25 route command.
8-27
Example
# Configure an X2T forwarding route to forward the packets that are received at the
X.121 address 111 to the IP address 10.1.1.1:102.
[H3C] Translate x25 1111 ip 10.1.1.1 port 102
8.1.32 x25 alias-policy
Syntax
x25 alias-policy match-type alias-string

undo x25 alias-policy match-type alias-string
View
Interface view
Parameter
match-type: Match type of the alias. There are 9 optional match types:
z free: Free match
z free-ext: Extended free match
z left: Left alignment match
z left-ext: Extended left alignment match
z right: Right alignment match
z right-ext: Extended right alignment match
z strict: Strict match
z whole: Whole match
z whole-ext: Extended whole match
alias-string: String of the alias
Description
Use the x25 alias-policy command to configure the alias of an X.121 address.
Use the undo x25 alias-policy command to delete the alias of an X.121 address.
By default, no x.25 alias is configured.
When an X.25 call is forwarded between networks, different X.25 networks may
perform some operations on the destination addresses (that is, the called DTE address)
carried by this call packet, for example, regularly adding or deleting the prefix and suffix.
In this case, a user needs to set an interface alias for the router to adapt this change.
Please consult your ISP to learn if the network supports this function before deciding
whether the alias function is enabled or not.
For the details about the X.25 alias matching method, please see the chapter LAPB
and X.25 Configurations in Operation Manual.
Related command: display x25 alias-policy, x25 x121-address.
8-28
Example
# Configure the link-layer protocol on interface Serial0/0/0 as X.25 and its X.121
address to 20112451, and set two aliases with different match types for it.
[H3C-Serial0/0/0] link-protocol x25
[H3C-Serial0/0/0] x25 x121-address 20112451
[H3C-Serial0/0/0] x25 alias-policy right 20112451$
[H3C-Serial0/0/0] x25 alias-policy left $20112451
With the above configurations, a call whose destination address is 20112451 can be
accepted as long as it can reach the local X.25 interface Serial0/0/0, no matter whether
the network is performing the prefix adding operation or suffix adding operation.
8.1.33 x25 call-facility
Syntax
x25 call-facility facility-option

undo x25 call-facility facility-option
View
Interface view
Parameter
facility-option: User facility option, its value includes:

closed-user-group number: Specifies a closed user group (CUG) number for the X.25
interface. The facility enables DTE to belong to one or more CUGs. CUG allows the
DTEs in it to communicate with each other, but not to communicate with other DTEs.
packet-size input-size output-size: Specifies the maximum packet size negotiation in
initiating call from X.25 interface. Maximum packet size negotiation is part of flow
control parameter negotiation. It needs two parameters: maximum reception packet
size and maximum transmission packet size, which must range from 16 (inclusive) to
4096 (inclusive), and must be the integer power of 2.
reverse-charge-request: Specifies reverse charging request while calling from X.25
interface.
roa-list name: Specifies an ROA list name configured by the command X25 roa-list in
system view for the X.25 interface.
send-delay value: Specifies the maximum network send delay request while calling
from X.25 interface. You can set this request to any value in the range 0 to 65534 ms
(including 0 and 65534).
8-29
threshold in out: Specifies throughput negotiation while calling from X.25 interface.
The values of in/out are defined as 75, 150, 300, 600, 1200, 2400, 4800, 9600, 19200,
and 48000.
window-size input-window-size output-window-size: Specifies the window size
negotiation while calling from X.25 interface. Window size negotiation is a part of flow
control parameter negotiation. It needs two parameters: reception window size and
transmission window size, which must be in the range of 1 to modulo -1 (including 1
and modulo -1).The default values of the two parameters are 2.
Description
Use the x25 call-facility command to set user options for an X.25 interface. After an
option is set, all X.25 calls from the X.25 interface will carry the relevant information
field in call packet.
Use the undo x25 call-facility command to delete the set option.
By default, no facility is set.
The user facilities set via this command are available for all the calls originating from
this X.25 interface. You can set a user option for an X.25 call from a certain address
mapping through the command x25 map protocol-name protocol-address
x.121-address x.121-address [ option ].
Related command: x25 map.
Example
# Specify the flow control parameter negotiation with the peer end for the calls from the
X.25 interface serial0/0/0.
[H3C-Serial0/0/0] x25 call-facility packet-size 512 512
[H3C-Serial0/0/0] x25 call-facility window-size 5 5
8.1.34 x25 cug-service
Syntax
x25 cug-service [ incoming-access ] [ outgoing-access ] [ suppress { all |

preferential } ]
undo x25 cug-service
View
Interface view
Parameter
incoming-access: Performs the suppress processing of incoming access

outgoing-access: Performs the suppress processing of outgoing access
8-30
all: Suppresses all CUGs configured with preferential suppress

preferential: Only processes those CUGs configured with preferential suppress
Description
Use the x25 cug-service command to enable CUG service and suppression policies.
Use the undo x25 cug-service command to disable CUG service.
By default, CUG service is disabled.
The command is used at DEC end. You can use the link-protocol x25 dce command
to set the interface operating in DCE mode.
After CUG service is enabled, the system suppresses those calls matching the preset
conditions. The details are:
If no parameter is set, the system suppresses all calls (including the calls with or
without CUG facilities).
If the incoming-access parameter is chosen, the system suppresses incoming calls.
That is, it suppresses the incoming calls with CUG facilities, but lets the incoming calls
without CUG facilities pass through.
If the outgoing-access parameter is chosen, the system suppresses outgoing calls.
That is, it suppresses the outgoing calls with CUG facilities, but lets the outgoing calls
without CUG facilities pass through.
If the suppress all parameter is chosen, the system removes CUG facilities for the
incoming calls with CUG facilities and makes call processing. This parameter is
ineffective to outgoing calls.
When the suppress preferential parameter, if an incoming call with CUG facilities and
the suppression rule is preferential, the system then removes its CUG facilities and
make call processing. If the suppression rule is not preferential, the system does not
remove its CUG facilities but lets it pass through. This parameter is ineffective to
outgoing calls.
Related command: x25 call-facility, x25 local-cug.
Example
# Define the suppress processing of incoming access on the interface Serial0/0/0.

[H3C-Serial0/0/0] x25 cug-service incoming-access
8.1.35 x25 default-protocol
Syntax
x25 default-protocol protocol-type

undo x25 default-protocol
8-31
View
Interface view
Parameter
protocol-type: Protocol type, may be IP.
Description
Use the x25 default-protocol command to set the default upper-layer protocol carried
over X.25 for the X.25 interface.
Use the undo x25 default-protocol command to restore the default upper-layer
protocol.
By default, IP is carried over X.25.
During X.25 SVC setup, the called device will check the call user data field of X.25 call
request packet. If it is an unidentifiable one, the called device will deny the setup of the
call connection. However, a user can specify a default upper-layer protocol carried over
X.25. When X.25 receives a call with unknown CUD, the call can be treated based on
the default upper-layer protocol specified by a user.
Example
# Set the default upper-layer protocol over the X.25 interface Serial0/0/0 as IP.
[H3C-Serial0/0/0] x25 default-protocol ip
8.1.36 x25 hunt-group
Syntax
x25 hunt-group hunt-group-name { round-robin | vc-number }

undo x25 hunt-group hunt-group-name
View
System view
Parameter
hunt-group-name: Name of hunt group.

round-robin: Select call channel using cyclic selection policy.
vc-number: Select call channel using the policy of computing available logical channel.
Description
Use the x25 hunt-group command to create or enter an X.25 hunt group.
8-32
Use the undo x25 hunt-group command to delete the specified X.25 hunt group.
X.25 hunt group supports two call channel selection policies: round-robin mode and
vc-number mode, and a hunt group only uses one channel selection policy. The
round-robin mode will select next interface or XOT channel inside hunt group for each
call request using cyclic selection method. The vc-number mode will select the
interface with the most idle-logical channels in hunt group for each call request.
A hunt group can have 10 interfaces or XOT channels at most, and it may arbitrarily
select the available channels between interface and XOT channel.
XOT channel cannot join the hunt group that adopts the vc-number selection policy.
Related command: display x25 hunt-group.
Example
# Create hunt group hg1 which uses cyclic selection policy.

[H3C] x25 hunt-group hg1 round-robin
[H3C-hg-hg1]
8.1.37 x25 ignore called-address
Syntax
x25 ignore called-address

undo x25 ignore called-address
View
Interface view
Parameter
None
Description
Use the x25 ignore called-address command to enable it to ignore the X.121 address
of the called DTE when X.25 initiates calls.
Use the undo x25 ignore called-address command to disable this function.
By default, this function is disabled.
According to X.25, the calling request packet must carry the address bits. However, on
some occasions, the X.25 calling request does not have to carry the called/calling DTE
address in a specific network environment or as is required by the application. This
command enables users to specify whether the call request packet sent by X.25 in the
H3C series routers carries the called DTE address.
Related command: x25 response called-address, x25 response calling-address, and
x25 ignore calling-address.
8-33
Example
# Specify the call request packet from the X.25 interface Serial0/0/0 not to carry the
called DTE address.
[H3C-Serial0/0/0] x25 ignore called-address
8.1.38 x25 ignore calling-address
Syntax
x25 ignore calling-address

undo x25 ignore calling-address
View
Interface view
Parameter
None
Description
Use the x25 ignore calling-address command to enable it to ignore the X.121
address of the calling DTE when X.25 initiates calls.
Use the undo x25 ignore calling-address command to disable this function.
According to X.25, the calling request packet must carry the address bits. However, on
some occasions, the X.25 calling request does not have to carry the called/calling DTE
address in a specific network environment or as is required by the application. This
command enables users to specify whether the call request packet sent by X.25 in the
H3C series routers carries the calling DTE address.
Related command: x25 response called-address, x25 response calling-address, and
x25 ignore called-address.
Example
# Specify the call request packet from the X.25 interface Serial0/0/0 not to carry the
calling DTE address.
[H3C-Serial0/0/0] x25 ignore calling-address
8.1.39 x25 local-cug
Syntax
x25 local-cug cug-number network-cug cug-number [ no-incoming ] [ no-outgoing ]

[ preferential ]
8-34
undo x25 local-cug cug-number
View
Interface view
Parameter
local-cug cug-number: Number of local cug.

network-cug cug-number: Number of network cug.
no-incoming: Suppresses incoming access.
no-outgoing: Suppresses outgoing access.
preferential: Suppresses the CUGs configured with preferential.
Description
Use the x25 local-cug command to configure mapping from local CUG to network
CUG and define its suppression rule.
Use the undo x25 local-cug command to remove the mapping from local CUG to
network CUG.
Two types of CUG suppression policies are available. One it to suppress all incoming
calls, where the system removes the CUG facilities of all incoming calls with CUG
facilities. The other is to suppress the incoming calls matching the mapping specified
as preference rule, where the system removes the CUG facilities only of those
incoming calls matching the mapping specified as preference rule, but lets other
incoming calls with CUG facilities pass through.
By default, no suppress rule is defined.
Related command: x25 call-facility and x25 cug-service.
Example
# Define the rule on the serial interface Serial0/0/0: the incoming calls with 100 local
CUGs or 200 network CUGs are denied.
[H3C-Serial0/0/0] x25 cug-service
[H3C-Serial0/0/0] x25 local-cug 100 network-cug 200 no-incoming
8.1.40 x25 map
Syntax
x25 map { ip | compressedtcp } protocol-address x121-address x.121-address

[ option ]
undo x25 map { ip | compressedtcp } protocol-address
8-35
View
Interface view
Parameter
ip: Uses IP protocol.

compressedtcp: Uses TCP header compression.
protocol-address: Network protocol address of the peer host.
x.121-address: X.121 address of the peer host.
option: Specifies some attributes or user facilities for the address mapping.
Description
Use the x25 map command to set the address mapping between IP address used by
LANs and X.121 address.
Use the undo x25 map command to delete one existing mapping.
By default, no address mapping is set.
Since X.25 protocol can multiplex more logical virtual circuits on a physical interface,
you need to manually specify the mapping relation between all network addresses and
X.121 address.
Once you have specified an address mapping, its contents (including protocol address,
X.121 address and all options) cannot be changed. To make modifications, you can first
delete this address mapping via the undo x25 map command, and then establish one
new address mapping.
Two or more address mappings with an identical protocol address shall not exist on the
same X.25 interface.
Detailed explanations are as follows:
broadcast: Sends any broadcasts of internetworking protocol and the multicast of IP to
the destination. This option provides powerful support for some routing protocols (such
as Routing Information Protocol).
closed-user-group group-number: Number of the closed user group corresponding to
this address mapping.
encapsulation-type: Encapsulation type, optional types include nonstandard, ietf,
multi-protocol and snap.
idle-timer minutes: Maximum idle time for the VC associated with the address
mapping. 0 means that the idle time is infinite.
no-callin: Disables accepting call to the address mapping.
no-callout: Disables call originating from the address mapping.
packet-size input-packet output-packet: When the address mapping is used to
originate a call, it will negotiate the maximum packet size in bytes with the peer end. Its
8-36
value must range from 16 to 4096 (including 16 and 4096), and must be the integer
power of 2.
reverse-charge-accept: If a call initiated by the address mapping carries reverse
charging request, to accept the call, this option must be configured in the address
mapping.
reverse-charge-request: Specifies reverse charging request while calling from the
address mapping.
roa-list name: Specifies an ROA list name configured by the command X25 roa-list in
send-delay milliseconds: When the address mapping is used to originate a call, it
carries the maximum transmission delay request.
threshold in out: When the address mapping is used to originate a call, it negotiates
throughput with the peer end. The values of in/out are defined to be 75, 150, 300, 600,
1200, 2400, 4800, 9600, 19200, and 48000.
vc-per-map count: Maximum number of VCs associated with the address mapping.
window-size input-window-size output-window-size: When the address mapping is
used to originate a call, it negotiates the window size with the peer end. The values of
input-window-size and output-window-size range between 1 and the number that is 1
less than the modulus of the X.25 interface where the address mapping exists
(including 1 and modulus minus 1).
Related command: display x25 map, x25 reverse-charge-accept, x25 call-facility, x25
timer idle, and x25 vc-per-map.
Example
# Set two address mappings on the X.25 interfaces Serial0/0/0 and Serial1/0/0,
respectively, and the four address mappings have different attributes.
[H3C-Serial0/0/0] x25 map ip 202.38.160.11 x121-address 20112451
reverse-charge-request reverse-charge-accept
[H3C-Serial0/0/0] x25 map ip 202.38.160.138 x121-address 20112450 packet-size
512 512 idle-timer 10
[H3C-Serial1/0/0] x25 map ip 20.30.4.1 x121-address 25112451 window-size 4 4
broadcast
[H3C-Serial0/0/0] x25 map ip 20.30.4.8 x121-address 25112450 no-callin
8.1.41 x25 modulo
Syntax
x25 modulo modulus
8-37
undo x25 modulo
View
Interface view
Parameter
modulus: Modulus, whose value is 8 or 128.
Description
Use the x25 modulo command to set the window modulus of an X.25 interface.
Use the undo x25 modulo command to restore its default window modulus.
By default, the window modulus of X.25 interface is modulus 8 mode.
The slip window is the basis for X.25 traffic control, and the key about the slip window is
that the sent packets are numbered cyclically in order and are to be acknowledged by
the peer end. The order in numbering refers to the ascending order, like “…2, 3, 4, 5,
6…” “Cyclically” means that the numbering starts again from the beginning when a
certain number (called modulus) is reached. For example, when the modulus is 8, the
numbering goes “…4, 5, 6, 7, 0, 1…”.
X.25 defines two numbering modulus: 8 (also called the basic numbering) and 128
(also called extended numbering), and the X.25 of the H3C series routers supports both
views.
Related command: display interface, x25 call-facility, x25 map, x25 pvc, x25 switch pvc,
x25 xot pvc, x25 fr pvc, and x25 window-size.
Example
# Set the modulus on the X.25 interface Serial0/0/0 to 128.

[H3C-Serial0/0/0] x25 modulo 128
8.1.42 x25 packet-size
Syntax
x25 packet-size input-packet output-packet

undo packet-size
View
Interface view
8-38
Parameter
input-packet: Maximum input packet length in bytes, its value ranges from 16 (inclusive)
to 4096 (inclusive) and must be the integer power of 2.By default, the maximum input
packet length of X.25 interface is 128 bytes.
output-packet: Maximum output packet length in bytes, its value ranges from 16
(inclusive) to 4096 (inclusive) and must be the integer power of 2. By default, the
maximum output packet length of X.25 interface is 128 bytes.
Description
Use the x25 packet-size command to set the maximum input and output packet
lengths of X.25 interface.
Use the undo x25 packet-size command to restore their default values.
Usually, the X.25 packet-switching network has a limitation of the transmission packet
size, and the maximum size of a data packet sent by the DTE shall not exceed this size
(otherwise it will trigger the reset of the VC).In this way, the DTE devices at sending end
and receiving end are required to have datagram fragmentation and reassembly
functions. The DTE device at sending end fragments the datagram with a length
exceeding the maximum transmission packet length based on the maximum
transmission packet length, and sets M bit in other fragments besides the final fragment.
After receiving these fragments, the DTE at receiving end will reassemble them as a
datagram to submit the upper-layer protocol based on the M bit. Please consult users'
ISP about this maximum receiving packet length.
Normally, the maximum receiving packet length is equivalent to the maximum send
packet. Unless users' ISP allows, please do not set these two parameters to different
values.
Related command: x25 call-facility, x25 pvc, x25 switch pvc, x25 xot pvc and x25 fr pvc.
Example
# Set the maximum receiving packet length and maximum sending packet length on
X.25 interface Serial0/0/0 to 256 bytes.
[H3C-Serial0/0/0] x25 packet-size 256 256
8.1.43 x25 pvc
Syntax
x25 pvc pvc-number protocol-type protocol-address [ compressedtcp ]

x121-address x.121-address [ option ]
undo x25 pvc pvc-number
8-39
View
Interface view
Parameter
pvc-number: PVC number, which must range from 1 to 4094 (inclusive), and must be in
the PVC channel range.
protocol-type: Upper-layer protocol carried over the permanent virtual circuit, which
may be IP or compressedtcp.
protocol-address: Network protocol address of the peer end of the PVC.
compressedtcp: Enables TCP header compression.
x.121-address: X.121 address of the peer end of this PVC.
option: Attribute of the PVC.
Description
Use the x25 pvc command to configure one PVC route encapsulated with datagram.
Use the undo x25 pvc command to delete this route.
By default, no PVC encapsulated with datagram is created. When creating such a PVC,
you do not set the relevant attributes for the PVC, its flow control parameters will be the
same as that of the X.25 interface on which it resides (the flow control parameters on an
X.25 interface can be set by the x25 packet-size and x25 window-size commands).
As one corresponding address mapping is impliedly established while establishing the
PVC, it is unnecessary (or impossible) to establish an address mapping first before
establishing PVCs.
Before establishing PVCs, users should first enable the PVC channel section. The
section is between 1 and the latest unprohibited channel section PVC number minus 1
(including 1 and the lowest PVC number minus 1). Naturally, if the lowest PVC number
is 1, the PVC section will be disabled naturally. The following table shows some typical
PVC sections.
Table 8-4 PVC channel section of some typical configurations
Incoming-only Two-way channel Outgoing-only PVC channel

channel range range channel range range
[0, 0] [1, 1024] [0, 0] Disabled
[0, 0] [10, 24] [0, 0] [1, 9]
[1, 10] [15, 30] [0, 0] Disabled
[5, 10] [15, 25] [30, 32] [1, 4]
8-40
Incoming-only Two-way channel Outgoing-only PVC channel

channel range range channel range range
[0, 0] [0, 0] [20, 45] [1, 19]
[0, 0] [0, 0] [0, 0] [1, 4094]
Detailed explanations of PVC options are follows:

broadcast: Forward broadcast packet to the peer PVC.
encapsulation-type: Encapsulation type, which may be nonstandard, ietf,
packet-size input-packet output-packet: Specifies the maximum receiving packet
length and maximum sending packet length. The length is counted in byte, which must
range from 16 to 4096 (including 16 and 4096), and must be the integer power of 2.
window-size input-window-size output-window-size: Specifies the receiving window
and transmitting window sizes of the VC, which range between 1 and the number that is
1 less than the modulus of the X.25 interface where the address mapping exists
Related command: display x25, x25 map.
Example
# Configure the link layer protocol on the interface Serial0/0/0 to X.25, enable PVC
channel section, and set two VCs.
[H3C-Serial0/0/0] x25 vc-range bi-channel 8,102 4
[H3C-Serial0/0/0] x25 pvc 2 ip 202.38.168.1 x121-address 20112451 broadcast
packet-size 512 512
[H3C-Serial0/0/0] x25 pvc 6 ip 202.38.168.3 x121-address 20112453 broadcast
window-size 5 5
8.1.44 x25 queue-length
Syntax
x25 queue-length queue-length

undo x25 queue-length
View
Interface view
8-41
Parameter
queue-length: Queue length in packets. It ranges from 0 to 9999 for the AR 28/46
Series Routers and from 0 to 3000 for the AR 18 Series Routers. The default queue
length on X.25 VC is 200.
Description
Use the x25 queue-length command to set the data queue length on X.25 VC.
Use the undo x25 queue-length command to restore its default value.
When the data traffic is too heavy, you can use this command to extend the receiving
queue and sending queue of the X.25 VC to avoid data loss that may affect
transmission performance. It should be noted here that modifying this parameter would
not affect the existing data queue of VC.
Related command: x25 packet-size
Example
# Set the VC data queue length of the X.25 interface Serial0/0/0 to 75 datagrams.
[H3C-Serial0/0/0] x25 queue-length 75
8.1.45 x25 receive-threshold
Syntax
x25 receive-threshold count

undo x25 receive-threshold
View
Interface view
Parameter
count: The number of data packets that can be received before previous
acknowledgement, in the range 0 to input window size. If it is set to 0 or the input
window size, this function will be disabled. If it is set to 1, X.25 of the H3C serial routers
will send an acknowledgement for each correct packet received. By default, the number
of data packets that can be received on X.25 before previous acknowledgement is 0.
Description
Use the x25 receive-threshold command to set the number of receivable maximum
packets before X.25 sends the acknowledged packet.
Use the undo x25 receive-threshold command to restore its default value.
After enabling this function, the H3C series routers can send acknowledgement to the
peer router upon the receipt of some correct packets, even if the input window is not yet
8-42
full. If there is not much data traffic in users' application environment and users pay
more attention to the response speed, they can appropriately adjust this parameter to
meet the requirement.
Related command: x25 window.
Example
# Specify that each VC on the X.25 interface Serial0/0/0 acknowledges each correctly
received data packet.
[H3C-Serial0/0/0] x25 receive-threshold 1
8.1.46 x25 response called-address
Syntax
x25 response called-address

undo x25 response called-address
View
Interface view
Parameter
None
Description
Use the x25 response called-address command to enable X.25 to carry the address
information of the called DTE in sending call reception packet.
Use the undo x25 response called-address command to disable the above function.
According to X.25, the call receiving packet of a call may or may not carry an address
code group, depending on the specific network requirements. This command enables
users to easily specify whether the call receiving packet of a call sent by X.25 of the
H3C series routers carries the called DTE address.
Related command: x25 response calling-address, x25 ignore called-address, and x25
ignore calling-address.
Example
# Specify that the call receiving packet of a call sent from the X.25 interface Serial0/0/0
carries the called DTE address.
[H3C-Serial0/0/0] x25 response called-address
8-43
8.1.47 x25 response calling-address
Syntax
x25 response calling-address

undo x25 response calling-address
View
Interface view
Parameter
None
Description
Use the x25 response calling-address command to enable X.25 to carry the address
information of the calling DTE in sending call reception packet.
Use the undo x25 response calling-address command to disable the above function.
According to X.25, the call receiving packet of a call may or may not carry an address
code group, depending on the specific network requirements. This command enables
users to easily specify whether the call receiving packet of a call sent by X.25 of the
H3C series routers carries the calling DTE address.
Related command: x25 response called-address, x25 ignore called-address, and x25
ignore calling-address.
Example
# Specify that the call receiving packet of a call sent from the X.25 interface Serial0/0/0
carries the calling DTE address.
[H3C-Serial0/0/0] x25 response calling-address
8.1.48 x25 reverse-charge-accept
Syntax
x25 reverse-charge-accept
undo x25 reverse-charge-accept
View
Interface view
Parameter
None
8-44
Description
Use the x25 reverse-charge-accept command to enable this interface to accept the
call with “reverse charging request”, the information added by some certain user
facilities.
Use the undo x25 reverse-charge-accept command to disable this above function.
This function does not affect any call without “reverse charging request”.
If you enable this function on an X.25 interface, all these calls that reach the interface
will be accepted. If you enable this function for a certain address mapping by the option
reverse-charge-accept in the command x25 map, only such calls that reach the
interface and map this address will be accepted, while other calls (carrying reverse
charging request, and not mapping this address) will be cleared.
Example
# Set the “accepting calls with reverse charging request” function on interface
Serial0/0/0.
[H3C-Serial0/0/0] x25 reverse-charge-accept
8.1.49 x25 roa-list
Syntax
x25 roa-list roa-name roa-id1 [ , id2, id3.... ]

undo x25 roa-list roa-name id1 [ , id2, id3.... ]
View
System view
Parameter
roa-name: Name of ROA.

id: ID specified for this ROA, and its value ranges from 0 to 9999. You can specify
multiple IDs for the ROA.
Description
Use the x25 roa-list command to define ROA list.

Use the undo x25 roa-list command to delete ROA list items.
By default, no ROA list is defined.
8-45
You can configure multiple (0 to 20) ROAs, and each ROA can be specified with
multiple(1 to 10) IDs. After configuring ROA, you can cite it by its name in the
commands x25 call-facility or x25 map.
Related command: x25 call-facility, x25 map.
Example
# Define two ROA lists, and cite them on the interfaces Serial 0/0/0 and Serial 1/0/0.
[H3C] x25 roa-list list1 11 23 45
[H3C] x25 roa-list list2 345
[H3C-Serial0/0/0] x25 call-facility roa-size list1
[H3C-Serial0/0/0] x25 call-facility roa-list list2
8.1.50 x25 switch pvc
Syntax
x25 switch pvc pvc-number1 interface serial number pvc pvc-number2 [ option ]
undo x25 switch pvc pvc-number1
View
Interface view
Parameter
pvc-number1: PVC number on the input interface, and its value ranges from 1 to 4095.
pvc-number2: PVC number on the output interface, and its value ranges from 1 to
4095.
number: Number of the output interface. It cannot be a subinterface.
option: Attribute of PVC.
Description
Use the x25 switch pvc (packet switching) command to configure one PVC route.
Use the undo x25 switch pvc command to delete one PVC route.
By default, no PVC route is defined.
Based on the X.25 switching configuration, you can use the H3C series Routers as a
simple X.25 switch. When PVC switching is configured, the link layer protocols on the
input and output interfaces must be X.25. Moreover, the specified PVCs on the two
interfaces have been presented and enabled. Note that PVC switching cannot be
configured on the X.25 sub-interface.
Detailed explanations of PVC options are follows:
8-46
broadcast: Forwards broadcast packet to the peer PVC.

encapsulation-type: Encapsulation type, which may be nonstandard, ietf,
window-size input-window-size output-window-size: Specifies the input window and
output window sizes of the VC, which range between 1 and the number that is 1 less
that the modulus of the X.25 interface where the address mapping exists (including 1
and modulus minus 1).
Related command: display x25 vc and x25 switching.
Example
# Perform the packet switching between PVC1 on the Serial0/0/0 and PVC1 on the
Serial1/0/0.
[H3C-Serial0/0/0] link-protocol x25 dce ietf
[H3C-Serial0/0/0] interface serial1/0/0
[H3C-Serial1/0/0] x25 switch pvc 1 interface serial 0/0/0 pvc 1
8.1.51 x25 switch svc interface
Syntax
x25 switch svc x.121-address [ sub-dest destination-address ] [ sub-source

source-address ] interface serial interface-number
undo x25 switch svc x.121-address [ sub-dest destination-address ] [ sub-source
source-address ] [ interface serial interface-number ]
View
System view
Parameter
x.121-address: Destination X.121 address, a pattern matching string that is 1 to 30

characters long.
Interface-number: Local X.25 outgoing interface number. It cannot be a subinterface.
sub-dest destination-address: Substitution destination address.
sub-source source-address: Substitution source address.
8-47
Description
Use the x25 switch svc interface command to add an X.25 switching route whose
forwarding address is a serial interface or Annex G DLCI.
Use the undo x25 switch svc xot command to delete the specified X.25 switching
route.
By default, no X.25 switching route is configured.
You can configure the router with X.25 switching to have it function as a simple X.25
switch. Note that on X.25 subinterfaces, you cannot configure SVCs.
Before using this command, enable X.25 switching with the x25 switching command.
Related command: x25 switch svc xot, display x25 switch-table, x25 switching.
Example
# Switch SVC 1 to interface Serial 0/0/0 and SVC 2 to interface Serial 1/0/0.
[H3C-Serial0/0/0] interface serial 1/0/0
[H3C-Serial1/0/0] quit
[H3C] x25 switch svc 1 interface serial 0/0/0
[H3C] x25 switch svc 2 interface serial 1/0/0
8.1.52 x25 switch svc hunt-group
Syntax

source-address ] hunt-group hunt-group-name
source-address ] hunt-group hunt-group-name
View
System view
Parameter
x.121-address: Destination address of X.121.This parameter consists of mode

matching string, and its length ranges from 1 to 15 characters. For the specific
description of mode matching, see the segment Description.
hunt-group-name: Name of hunt group.
8-48
Description
Use the x25 switch svc hunt-group command to add an X.25 switching route whose
forwarding address is a hunt group.
Use the undo x25 switch svc hunt-group command to delete the specified X.25
switching route.
After the X.25 switching route whose forwarding address is a hunt group is configured,
the relevant X.25 call request packet will be forwarded to different interfaces or XOT
channels in the specified hunt group, so as to implement the load sharing under X.25
protocol.
Note that you cannot configure SVCs on X.25 subinterfaces.
Table 8-5 X.121 mode matching rules
Matchable
Wildcard
Matching rules Example character
characters
string
Matching zero or more previous
* fo* fo, foo, fooo
characters
Matching zero or more previous
+ fo+ fo, foo, fooo
characters
Matching the beginning of the entered hell, hello,
^ ^hell
characters hellaaa
Matching the end of the entered
$ ar$ ar, car, hear
characters
Matching a single character specified
\char b\+ b+
by char.
. Matching arbitrary single character l.st last, lbst, lost
Matching arbitrary zero or more
.* fo.* fo, foo, fot
characters.
Matching arbitrary one or more
.+ fo.+ foo, fot, foot
characters.
Table 8-6 Input rules of X.121 address mode matching string
Characters Input rules

Cannot be placed at the beginning of character string
* Cannot be placed after the symbol ^
Cannot be placed before and after the symbols + and *.
8-49
Characters Input rules

Cannot be placed at the beginning of character string
+ Cannot be placed after the symbol ^
Cannot be placed before and after the symbols + and *.
\ Cannot be placed at the end of character string
^ Cannot be placed before the symbols + and *.
Related command: display x25 switch-table svc.
Example
# Add an X.25 switching route, whose destination address is 8888 and forwarding
address is the hunt group hg1, and substitute the destination address with 9999.
[H3C] x25 switch svc 111 sub-dest 9999 sub-source 8888 hunt-group hg1
8.1.53 x25 switch svc xot
Syntax

source-address ] xot ip-address1 [ ip-address2 ] … [ ip-address6 ] [ xot-option ]
source-address ] [ xot ip-address1 [ ip-address2 ] … [ ip-address6 ] ]
View
System view
Parameter
x.121-address: Destination X.121 address, a pattern matching string that is 1 to 15

characters long. For the specific description of mode matching, see Table 8-5 and Table
8-6.
ip-address1 - ip-address6: Destination IP address of XOT connection, up to 6
addresses can be configured.
xot-option: XOT channel parameter option. For the specific configuration, see Table
8-7.
Description
Use the x25 switch svc xot command to add an X.25 switching route whose
forwarding address is XOT channel.
8-50
Use the undo x25 switch svc xot command to delete the specified X.25 switching
route.
After configuring the XOT switching command of X.25 SVC, a user can cross IP
network from the local X.25 network to implement the interconnection with the remote
X.25 network. If a user configures the keepalive attribute, the link detection for XOT will
be supported.
Table 8-7 XOT channel parameter option
Option Description
Keepalive timer delay of XOT connection. The timer sends
timer seconds the keepalive packet upon timeout to detect the connection
availability. Its value ranges from 1 to 3600.
Number of maximum retries of sending keepalive. If the
retry times number exceeds times, the XOT connection will be
disconnected. Its value ranges from 3 to 3600.
source interface-type Type and number of the interface that initiates the XOT
interface-number connection.
Related command: x25 switch svc interface, display x25 switch-table svc, x25
switching.
Example
# Switch SVC 1 to the destination address 10.1.1.1.

[H3C] x25 switch svc 1 xot 10.1.1.1
8.1.54 x25 switching
Syntax
x25 switching
undo x25 switching
View
System view
Parameter
None
Description
Use the x25 switching command to enable the X.25 switching function.
8-51
Use the undo x25 switching command to disable this function, which will not affect the
established VC switching function.
By default, X.25 packet switching function is disabled.
X.25 packet switching is used to accept packets from an X.25 interface and send them
to a certain interface based on the destination information contained in the packets.
The Router can be used as a small-sized packet switch by the packet layer switching
function.
Related command: x25 pvc, x25 switch pvc, x25 xot pvc, x25 fr pvc, x25 switch
svc, display x25 vc, display x25 switch-table svc.
Example
# Enable X.25 switching function.

[H3C] x25 switching
8.1.55 x25 timer hold
Syntax
x25 timer hold minutes

undo x25 timer hold
View
Interface view
Parameter
minutes: Value of delay time in minutes, and its value ranges from 0 to 1000. If the
previous call failed at one destination, the X.25 would not send calls to such a
destination again within the time set by this command.
By default, the delay time is 0.
Description
Use the x25 timer hold command to set the delay to send calls to a destination with
failed calls.
Use the undo x25 timer hold command to restore its default value.
Frequently sending call requests to a wrong destination (which does not exist or is
faulty) will deteriorate the operating efficiency of the H3C series router. The use of this
function can avoid this problem to a certain extent. If this parameter is set to 0, it is
equal to disabling the function. In addition, this function is only effective to the calls
originated from the local. That is to say, this parameter is meaningless when the X.25
operates in the switching mode.
8-52
Example
# Set the parameter of the X.25 interface Serial0/0/0 to 5 minutes.

[H3C-Serial0/0/0] x25 timer hold 5
8.1.56 x25 timer idle
Syntax
x25 timer idle minutes

undo x25 timer idle
View
Interface view
Parameter
minutes: Maximum idle time of SVC in minutes, and its value ranges from 0 to 255.By
default, this value is 0.
Description
Use the x25 timer idle command to set the maximum idle time of the SVC on the
interface.
Use the undo x25 timer idle command to restore its default value.
When a SVC stays idle (no data transmission) for a period (the period length is decided
by the parameter), the router will clear this SVC automatically. If this parameter is set to
0, this SVC will be reserved no matter how long it stays idle.
The configuration of this parameter will affect all the SVCs on this X.25 interface. Also
users can set the maximum idle time for a SVC attached to this address mapping
through the option in the command x25 map.
For PVC or the established SVC for X.25 switching, the command will be disabled.
Example
# Set the maximum idle time of the SVC on the interface Serial 0/0/0 to 10 minutes.
[H3C-Serial0/0/0] x25 timer idle 10
8.1.57 x25 timer tx0
Syntax
x25 timer tx0 seconds

undo x25 timer tx0
8-53
View
Interface view
Parameter
seconds: Delay time for the X.25 restarting timer in seconds. It ranges 0 to 1000. By
default, the delay on the X.25 DTE restarting timer is 180 seconds and that on the DCE
timer is 60 seconds.
Description
Use the x25 timer tx0 command to set the restart/retransmission timer delay for DTE
(or DCE).
Use the undo x25 timer tx0 command to restore their default values.
According to X.25, a timer should be started when a DTE sends a restart request (or a
DCE sends a restart indication). If no peer acknowledgement is received after this timer
is timeout, the sending end will take some measures to guarantee the normal
proceeding of the local procedure. This parameter specifies the delay time of this timer
before the timeout.
Related command: x25 timer tx1, x25 timer tx2, and x25 timer tx3.
Example
# Set the restarting timer delay on the X.25 interface Serial0/0/0 to 120 seconds.
[H3C-Serial0/0/0] x25 timer tx0 120
Syntax

undo x25 timer tx1
View
Interface view
Parameter
seconds: Delay time of calling request (indication) transmission timer in seconds, and
its value ranges from 0 to 1000. By default, the delay time on a DTE call timer is 200
seconds; that on a DCE call sending timer is 180 seconds.
Description
Use the x25 timer tx1 command to set calling request (indication) transmission timer
delay for DTE (or DCE).
8-54
Use the undo x25 timer tx1 command to restore its default value.
According to X.25, a timer should be started when a DTE sends a call request (or a
DCE sends a call indication). If no peer acknowledgement is received after this timer is
timeout, the sending end will take some measures to guarantee the normal proceeding
of the local procedure. This parameter specifies the delay time of this timer before the
timeout.
Example
# Set the timer delay on the X.25 interface Serial0/0/0 to 100 seconds.
[H3C-Serial0/0/0] x25 tx1 100
Syntax

undo x25 timer tx2
View
Interface view
Parameter
seconds: Delay time of resetting request (indication) timer in seconds, and its value
ranges from 0 to 1000. By default, the delay time on a DTE reset timer is 180 seconds;
that on a DCE reset timer is 60 seconds.
Description
Use the x25 timer tx2 command to set resetting request (indication) transmission timer
According to X.25, a timer should be started when a DTE sends a reset request (or a
DCE sends a reset indication). If no peer acknowledgement is received after this timer
before the timeout.
Example
# Set the reset timer delay on the X.25 interface Serial0/0/0 to 120 seconds.
[H3C-Serial0/0/0] x25 tx2 120
8-55
Syntax

undo x25 timer tx3
View
Interface view
Parameter
seconds: Delay time of clearing request (indication) transmission timer in seconds, and
its value ranges from 0 to 1000. By default, the delay time on a DTE clearing timer is
180 seconds; that on a DCE clearing timer is 60 seconds.
Description
Use the x25 timer tx3 command to set clearing request (indication) transmission timer
According to X.25, a timer should be started when a DTE sends a clear request (or a
DCE sends a clear indication). If no peer acknowledgement is received after this timer
before the timeout.
Example
# Set the delay time of clearing timer on the X.25 interface Serial0/0/0 to 100 seconds.
[H3C-Serial0/0/0] x25 timer tx3 100
8.1.61 x25 vc-per-map
Syntax
x25 vc-per-map count

undo x25 vc-per-map
View
Interface view
8-56
Parameter
count: Maximum number of VCs, and its value ranges from 1 to 8.By default, its value is
1.
Description
Use the x25 vc-per-map command to set the maximum number of VCs for
connections with the same destination device.
Use the undo x25 vc-per-map command to restore their default values.
If the parameter is greater than 1, and the sending window and the sending queue of
VC are filled full, the system will create a new VC to the same destination. If the new VC
cannot be created, the datagram will be discarded.
Related command: display interface and x25 map.
Example
# Set the maximum value of VCs on the X.25 interface Serial 0/0/0 to 3.
[H3C-Serial0/0/0] x25 vc-per-map 3
8.1.62 x25 vc-range
Syntax
x25 vc-range { in-channel lic hic | bi-channel ltc htc | out-channel loc hoc }
undo x25 vc-range
View
Interface view
Parameter
lic hic: Lowest and highest incoming-only channels of X.25 VC, and its value ranges
from 0 to 4095. If hic (highest incoming-only channel) is set to 0, lic (lowest
incoming-only channel) must also be set to 0, which indicates that the incoming-only
channel section is disabled. By default, the hic in X.25 VC range is 0.
ltc htc: Lowest and highest two-way channels of X.25 VC, and its value ranges from 0 to
4095. If htc (highest two-way channel) is set to 0, ltc (lowest two-way channel) must
also be set to 0, which indicates that the two-way channel section is disabled. By
default, the htc of X.25 VC is 1024.
loc hoc: Lowest and highest outgoing-only channels of X.25 VC, and its value ranges
from 0 to 4095. If hoc (highest outgoing-only channel) is set to 0, loc (lowest
outgoing-only channel) must also be set to 0, which indicates that the outgoing-only
channel section is disabled. By default, the hoc in X.25 VC range is 0.
8-57
Description
Use the x25 vc-range command to set highest and lowest values of X.25 VC range.
Use the undo x25 vc-range command to restore their default values.
By default, Comware X.25 disables incoming-only channel range and outgoing-only
channel, and only the two-way channel range (1-1024) is reserved for use. Please set
the VC range correctly according to the requirements of the ISP.
Example
# Configure the link layer protocol on the interface Serial 0/0/0 to X.25, enable
incoming-only channel section and two-way channel section and disable outgoing
–only channel section. After executing a series of commands, the three sections are [1,
7], [8, 1024] and [0, 0], respectively.
[H3C-Serial0/0/0] x25 vc-range in-channel 1 7 bi-channel 8 1024
8.1.63 x25 window-size
Syntax
x25 window-size input-window-size output-window-size

undo x25 window-size
View
Interface view
Parameter
input-window-size: Size of input window. When X.25 window modulus is 8, its value
ranges from 1 to 7. When X.25 window modulus is 128, its value ranges from 1 to
127.By default, its value is 2.
output-window-size: Size of output window. When X.25 window modulus is 8, its value
ranges from 1 to 7. When X.25 window modulus is 128, its value ranges from 1 to 127.
Description
Use the x25 window-size command to set the sizes of input and output windows on
the interface X.25.
Use the undo x25 window-size command to restore their default values.
This parameter in-packets determines the maximum number of correctly received
packets before X.25 sends the acknowledgement information. As long as the
bandwidth allows, the greater the window size, the higher the transmission efficiency.
8-58
Out-packets determines the maximum number of data packets sent by X.25 before it
receives the correct acknowledgment information. As long as the bandwidth allows, the
greater the window size, the higher the transmission efficiency.
Please consult users' ISP about the sending and receiving window sizes. Unless
supported by the network, do not set these two parameters to different values.
Related command: display interface, x25 map, x25 pvc, x25 switch pvc, x25 xot pvc,
x25 fr pvc, and x25 receive-threshold.
Example
# Set the receiving and sending window sizes on the X.25 interface Serial0/0/0 to 5.
[H3C-Serial0/0/0] x25 window-size 5 5
8.1.64 x25 x121-address
Syntax
x25 x121-address x.121-address

undo x25 x121-address
View
Interface view
Parameter
x.121-address: X.121 address of an interface. It is formatted using the numerical string

from 1 to 15 bytes.
Description
Use the x25 x121-address command to set the X.121 address of an X.25 interface.
Use the undo x25 x121-address command to delete the address.
If the Router is accessed to X.25 public packet network, the ISP must assign a valid
X.121 address to it. If two Routers are only directly connected back to back, a user can
randomly specify the valid X.121 address. If you only wants the Router to work in
switching mode, the X.121 address needs not to be configured.
When you reconfigure an X.121 address for an X.25 interface, you need not delete the
original X.121 address, because the new address will overwrite the old one. After an
X.25 interface is re-configured, the original X.121 address will be deleted. So the X.121
address must be re-configured to work properly.
Note: For the format of the X.121 address and the dynamic conversion between IP
address and X.121 address, please refer to ITU-T Recommendation X.121 and the
relative RFC document.
8-59
Example
# Configure the link layer protocol on the interface Serial 0/0/0 as X.25, and X.121
address as 20112451.
[H3C-Serial0/0/0] x25 x121-address 20112451
8.1.65 x25 xot pvc
Syntax
x25 xot pvc pvc-number1 ip-address interface type number pvc pvc-number2
[ xot-option ] [ packet-size input-packet output-packet window-size input-window-size
output-window-size ]
undo x25 pvc pvc-number1
View
Interface view
Parameter
pvc-number1: Number of PVC on the local interface, in the range 1 to 4095.

pvc-number2: Number of PVC on the peer interface, in the range 1 to 4095.
ip-address: IP address of the peer destination for connection with XOT.
interface type number: Type and number of remote X.25 interface, and the interface
type can only be Serial.
xot-option: XOT channel parameter option. see the following table.
Table 8-8 XOT channel parameter option
Option Description
Keepalive timer delay of XOT connection. The timer
timer seconds sends the keepalive packet upon timeout to detect the
connection availability. Its value ranges from 1 to 3600.
Number of maximum retries of sending keepalive. If the
retry times number exceeds times, the XOT connection will be
disconnected. Its value ranges from 3 to 3600.
source interface-type Type and number of the interface that initiates the XOT
interface-number connection.

8-60
window-size input-window-size output-window-size: Specifies the receiving window

and sending window sizes of the VC, which range between 1 and the number that is 1
less than the modulus of the X.25 interface where the address mapping exists
Description
Use the x25 xot pvc command to add a PVC route of XOT. Use the undo x25 pvc
command to delete the specified PVC route of XOT.
By default, no PVC route is configured.
After configuring the XOT switching command of X.25 PVC, a user can cross IP
network from the local X.25 network to implement the interconnection with the remote
X.25 network. If a user configures the keepalive attribute, the link detection for XOT will
be supported.
Related command: display x25 vc and x25 switching.
Example
# Connect PVC1 on the interface Serial0/0/0(10.1.1.1) of Router RTA with PVC2 on the
interface Serial1/0/0(10.1.1.2) of Router RTB via XOT tunnel, and then perform packet
switching.
# Perform the configurations on the Router RTA.
[H3C-Serial0/0/0] ip address 10.1.1.1 255.255.255.0
[H3C-Serial0/0/0] x25 xot pvc 1 10.1.1.2 interface serial 1/0/0 pvc 2
# Perform the configurations on the Router RTB.

[H3C-Serial1/0/0] x25 xot pvc 2 10.1.1.1 interface serial 0/0/0 pvc 1
8.1.66 x29 timer inviteclear-time
Syntax
x29 timer inviteclear-time seconds

undo x29 timer inviteclear-time
View
System view
Parameter
seconds: Delay time in seconds, in the range 5 to 2147483. The delay of waiting for
response after inviting PAD clear procedure, its default value is 5.
8-61
Description
Use the x29 timer inviteclear-time command to set the delay waiting for response
after the PAD clear procedure is initiated. Upon expiration of this timer, the server
aborts the connection by force and starts X.25 clear procedures.
Use the undo x29 timer inviteclear-time command to restore the default.
The server of X.25 PAD may send an Invite Clear message to the client, for example,
after receiving an exit request from client or in order to release the link. At the same
time, a timer is started. If no response is received upon expiration of the timer, the
server clears the link.
Example
# Set the inviteclear-time timer to 10 seconds.

[H3C] x29 timer inviteclear-time 10
8-62
Comware V3 Chapter 9 Bridge Configuration Commands
Chapter 9 Bridge Configuration Commands
9.1 Bridge Configuration Commands

9.1.1 bridge aging-time
Syntax
bridge aging-time seconds

undo bridge aging-time
View
System view
Parameter
seconds: Aging time of the dynamic address table, in the range 10 to 1,000,000
seconds. By default, the aging time of a dynamic address table is 300 seconds.
Description
Use the bridge aging-time command to configure the aging time of the dynamic
address table.
Use the undo bridge aging-time command to restore the default aging time of the
dynamic address table.
Upon the timeout of the timer, the dynamic address entries will be deleted.
Example
# Configure the aging time of the dynamic address table to 500 seconds.
[H3C] bridge aging-time 500
9.1.2 bridge bridging
Syntax
bridge bridge-set bridging { ip | ipx | others }

undo bridge bridge-set bridging { ip | ipx | others }
View
System view
9-1
Parameter
bridge-set: Bridge set number, in the range 1 to 255.

ip: Internet Protocol.
ipx: Internet Packet Exchange Protocol.
others: Other network protocols, for example OSI protocol.
Description
Use the bridge bridging command to enable the bridging function of a network layer
protocol on a specified bridge set.
Use the undo bridge bridging command to disable the bridging function of a network
layer protocol on specified bridge set.
By default, the bridging function is enabled.
The packets that cannot be routed will be discarded when the bridging function of the IP,
IPX or other protocols is disabled on a bridge set.
Example
# Disable the bridging function of the IP protocol from bridge 1.

[H3C] undo bridge 1 bridging ip
# Enable the bridging function of the IP protocol on bridge 1.

[H3C] bridge 1 bridging ip
9.1.3 bridge enable
Syntax
bridge enable
undo bridge enable
View
System view
Parameter
None
Description
Use the bridge enable command to enable the bridging function.

Use the undo bridge enable command to disable the bridging function.
When an active bridge-set is defined, you cannot use the undo bridge enable
command to disable bridging until you use the undo bridge bridge-set enable
command to remove the bridge-set first.
9-2
By default, the bridging function is disabled.

Only after the bridging function is enabled, can the configuration of a bridge be valid.
Example
# Disable the bridging function.

[H3C] undo bridge enable
# Disable the bridging function when an active bridge-set is defined.

[H3C] undo bridge enable
Cannot delete bridging while an active Bridge Set is defined. Remove Bridge
Set first.
9.1.4 bridge learning
Syntax
bridge bridge-set learning

undo bridge bridge-set learning
View
System view
Parameter
bridge-set: Bridge set number which the interface belongs to; an integer in the range 1
to 255.
Description
Use the bridge learning command to enable forwarding by dynamic address table.
Use the undo bridge learning command to disable forwarding by dynamic address
table and forward by static address table only.
By default, the dynamic address table is used in forwarding.
The dynamic address table does not require manual maintenance, as it is automatically
refreshed whenever the network topology changes.
Example
# Enable dynamic MAC address learning.

[H3C] bridge 1 learning
9-3
9.1.5 bridge mac-address
Syntax
bridge bridge-set mac-address mac-address { permit | deny } [ interface

interface-type interface-number | dlsw ]
undo bridge bridge-set mac-address mac-address [ interface interface-type
interface-number ]
View
System view
Parameter
bridge-set: Bridge set number which the interface belongs to; an integer in the range 1
to 255.
mac-address: Ethernet MAC address in the xxxx-xxxx-xxxx format, which is used to
match the destination addresses in an Ethernet.
deny: Discard the frames whose destination address is the specified address on the
permit: Forward the frames whose destination address is the specified address on the
interface: Specify an outbound interface.
dlsw: The output interface is DLSW module.
Description
Use the bridge mac-address command to manually configure a static address table
entry of bridge.
Use the undo bridge mac-address command to delete the static address entry.
Normally, a bridge can automatically create dynamic address map entry after obtaining
associations between MAC addresses and interfaces. You can however
administratively create static address map entries, which will never age out.
If the deny argument is configured in the above command, the configuration after that
of the deny argument does not take effect.
Example
# Enable the interface Ethernet 0/0/0 to forward the frames with MAC address
0000-0000-0111.
[H3C] bridge 1 mac-address 0000-0000-0111 permit interface ethernet 0/0/0
9-4
9.1.6 bridge vlanid-transparent-transmit enable
Syntax
bridge vlanid-transparent-transmit enable

undo bridge vlanid-transparent-transmit enable
View
Interface view
Parmeter
None
Description
Use the bridge vlanid-transparent-transmit enable command to enable VLAN ID

transparent transmission.
Use the undo bridge vlanid-transparent-transmit enable to disable VLAN ID
By default, VLAN ID transparent transmission is disabled.
Before enabling VLAN ID transparent transmission on an interface, you must first add
this interface to the bridge set; otherwise, the system prompts you the interface is not
added to the bridge set.
Example
Enable VLAN ID transparent transmission on interface atm1/0/0.

<H3C> system-view
[H3C-ATM1/0/0] bridge-set 2
[H3C-ATM1/0/0] bridge vlanid-transparent-transmit enable
9.1.7 bridge routing
Syntax
bridge bridge-set routing { ip | ipx }

undo bridge bridge-set routing { ip | ipx }
View
System view
Parameter
bridge-set: Bridge-set number in the range 1 to 255.
9-5
ip: IP
ipx: IPX
Description
Use the bridge routing command to enable the routing function of a specified
bridge-set for the specified network protocol.
Use the undo bridge routing command to disable the routing function of the
bridge-set for the specified network protocol.
By default, the routing function is disabled.
When a bridge is configured to route for a particular network protocol, the PDUs of the
protocol are routed if needed.
Example
# Enable IP routing in bridge-set 1.

[H3C] bridge 1 routing ip
9.1.8 bridge routing-enable
Syntax
bridge routing-enable
undo bridge routing-enable
View
System view
Parameter
None
Description
Use the bridge routing-enable command to enable the routing function of the bridge.
Use the undo bridge routing-enable command to disable the routing function of the
bridge.
By default, the routing function of the bridge is disabled.
The routing function for a protocol can be implemented only when routing is enabled on
the bridge.
Example
# Enable routing on the bridge.

[H3C] bridge routing-enable
9-6
9.1.9 bridge stp ieee
Syntax
bridge bridge-set stp ieee

undo bridge bridge-set stp ieee
View
System view
Parameter
bridge-set: Number of a bridge set, an integer in the range 1 to 255.

ieee: Ethernet spanning tree protocol (STP).
Description
Use the bridge stp ieee command to specify a bridge set to support IEEE STP.
Use the undo bridge stp ieee command to disable a bridge set to support STP.
The default STP standard supported on a bridge set is IEEE.
STP has multiple standards, which are not compatible. To prevent bridging loops, the
communicating parties must use the same STP standard.
Example
# Set the STP standard supported by a bridge set to IEEE.

[H3C] bridge 1 stp ieee
9.1.10 bridge stp max-age
Syntax
bridge stp max-age seconds

undo bridge stp max-age
View
System view
Parameter
seconds: Value for the Max Age timer on the bridge, in the range 6 to 40 seconds. It
Description
Use the bridge stp max-age command to set the Max Age timer on the bridge.
Use the undo bridge stp max-age command to restore the default.
9-7
A Max Age timer is used to limit the lifetime of BPDUs. Enabling STP on a port starts a
Max Age timer. If the interface receives no BPDU before the timer expires, its link is
considered faulty and STP starts to recalculate its topology.
When configuring a Max Age timer, consider the following:
z On a spanning tree, all bridges use the Max Age timer of the root instead of their
own.
z Set the timer appropriately. A small timer may result in undesired spanning tree
calculation frequency and have the bridge mistake congestions for link failures. A
large timer, on the contrary, may decrease the self-tuning capability of the network
preventing the bridge from discovering link failures quickly.
You are recommended to use the default Max Age timer setting in normal cases.
Example
# Set the Max Age timer on the bridge to 30 seconds.

[H3C] bridge stp max-age 30
9.1.11 bridge stp priority
Syntax
bridge stp priority value

undo bridge stp priority
View
System view
Parameter
value: Bridge priority, in the range 0 to 65,535. The default value is 32,768.
Description
Use the bridge stp priority command to assign a priority to the bridge.
Use the undo bridge stp priority command to restore the default priority of the bridge.
The ID of a bridge consists of two parts: bridge priority and bridge MAC address. During
a spanning tree calculation in a network, the bridge with the lowest ID is elected as the
root. The process is as follows:
z Compare the priorities of the bridges in the network. The one with the lowest
bridge priority is elected as the root.
z In case multiple bridges in the network have the same priority, compare their MAC
addresses and elect the bridge with the lowest MAC address as the root.
When STP is enabled, changing the priority of a bridge may cause spanning tree
recalculation.
9-8
Example
# Set the bridge priority to 500.

[H3C] bridge stp priority 500
9.1.12 bridge stp timer forward-delay
Syntax
bridge stp timer forward-delay seconds

undo bridge stp timer forward-delay
View
System view
Parameter
seconds: Value for the Forward Delay timer on the bridge, in the range 4 to 200
seconds. The default value is 15 seconds.
Description
Use the bridge stp timer forward-delay command to set the Forward Delay timer on
the bridge.
Use the undo bridge stp timer forward-delay command to restore the default.
A link fault on the network may cause a spanning-tree recalculation immediately;
however, it takes time for the new BPDU to propagate throughout the entire network. If
new root ports and designated ports start forwarding frames immediately after they are
elected, a temporary loop may occur.
To resolve the problem, STP adopts a state transition mechanism, where a root or
designated port must undergo a transitional state before it enters the forwarding state
to forward frames. The duration of this transitional state depends on the setting of a
timer called Forward Delay timer. It ensures that the new BPDU has been propagated
throughout the network before frames are forwarded according to the latest topology.
When configuring a Forward Delay timer, consider the following:
z On a spanning tree, all bridges must use the Forward Delay timer of the root
bridge instead of their own.
z Use the default Forward Delay timer setting if possible. A small forward delay may
create temporary path redundancy; while a large forward delay may increase the
time required for the topology of the spanning tree to converge. In the latter case,
network connectivity recovery may take a long time.
Example
# Set the Forward Delay timer on the bridge to 50 seconds.
9-9
[H3C] bridge stp timer forward-delay 50
9.1.13 bridge stp timer hello
Syntax
bridge stp timer hello seconds

undo bridge stp timer hello
View
System view
Parameter
seconds: Value for the Hello Time timer on the bridge, in the range 1 to 10 seconds.
The default value is 2 seconds.
Description
Use the bridge stp timer hello command to set the Hello Time timer on the bridge.
Use the undo bridge stp timer hello command to restore the default.
A Hello Time timer is used to control the interval for sending BPDUs. Enabling STP on a
port starts a Hello Time timer. An appropriately set Hello Time timer allows the bridge to
discover link faults on the network without occupying many resources.
When configuring a Hello Time timer, consider the following:
z On a spanning tree, all bridges must use the Hello Time timer of the root bridge
instead of their own.
z Set the Hello Time timer appropriately. A small Hello time timer may increase the
frequency of BPDU sending, increasing undesired CPU load. A large Hello Time
timer, on the contrary, may cause the bridge to take a frame loss for a link failure,
and then to recalculate the spanning tree. You are recommended to use the
default timer setting if possible.
Example
# Set the Hello Time timer on the bridge to 5 seconds.

[H3C] bridge stp timer hello 5
9.1.14 bridge-set
Syntax
bridge-set bridge-set
undo bridge-set bridge-set
9-10
View
Interface view, bridge template view
Parameter
bridge-set: Bridge set number; an integer in the range 1 to 255.
Description
Use the bridge set command to add an interface to a bridge set.

Use the undo bridge set command to delete the interface from the bridge set.
By default, no interface is added to the bridge set.
Bridging can only be implemented between interfaces of a same bridge set.
Note that if VRRP is enabled on the bridge template corresponding to a bridge set,
non-Ethernet interface is not allowed to be added to this bridge set.
When configuring bridge over dial interface, you need to configure this command on
the top-layer dial interface.
Example
# Add Ethernet0/0/0 to bridge set 1.

[H3C-Ethernet0/0/0] bridge-set 1
# Add interface dialer 0 to bridge set 1.

[H3C] interface Dialer0
[H3C-Dialer0] bridge-set 1
9.1.15 bridge-set stp enable
Syntax
bridge-set bridge-set stp enable

undo bridge-set bridge-set stp enable
View
Interface view
Parameter
bridge-set: Number of a bridge set, in the range 1 to 255.
Description
Use the bridge-set stp enable command to enable STP on the port.
Use the undo bridge-set stp enable command to disable STP on the port.
9-11
By default, STP is disabled on the port.

Only after STP is enabled on the port can other STP parameters take effect.
Example
# Enable STP on Ethernet0/0/0.

[H3C-Ethernet0/0/0] bridge-set 1 stp enable
9.1.16 bridge-set stp port pathcost
Syntax
bridge-set bridge-set stp port pathcost cost

undo bridge-set bridge-set stp port pathcost
View
Interface view
Parameter

cost: Path cost of a bridge port, in the range 1 to 65,535. It defaults to 19 if the port is
Ethernet and to 1000 if the port is serial.
Description
Use the bridge-set stp port pathcost command to configure the path cost of the
bridge port.
Use the undo bridge-set stp port pathcost command to restore the default.
Assign a path cost to a bridge port depending on its link speed. The higher the link
speed is, the lower the path cost should be configured.
When a bridge port uses the default path cost, STP can automatically identify the type
of the port and get the corresponding default path cost value.
Example
# Set the path cost for Ethernet port 1/0/0 to 5.

[H3C-Ethernet1/0/0] bridge-set stp port pathcost 5
9.1.17 bridge-set stp port priority
Syntax
bridge-set bridge-set stp port priority value

undo bridge-set bridge-set stp port priority
9-12
View
Interface view
Parameter

value: Bridge port priority, in the range 0 to 255. The default value is 128.
Description
Use the bridge-set stp port priority command to configure the priority of the bridge
port.
Use the undo bridge-set stp port priority command to restore the default priority of
the bridge port.
The ID of a bridge port comprises port priority and port number.
When the path costs of all ports on a bridge are the same, the one with the lowest port
ID is more likely to be elected as the designated port. The process is as follows:
z Compare the priorities of the ports on the bridge. The one with the lowest port
priority is elected as the designated port.
z In case multiple ports on the bridge have the same priority, compare their port
numbers and elect the port with the lowest number as the designated port.
To identify the number of each port, execute the display bridge spanning tree
command.
Example
# Set the priority for Ethernet port 0/0/0 to 5.

[H3C-Ethernet0/0/0] bridge-set stp port priority 5
9.1.18 bridge bridge-set enable
Syntax
bridge bridge-set enable

undo bridge bridge-set enable
View
System view
Parameter
bridge-set: Bridge-set number, an integer in the range 1 to 255.
Description
Use the bridge bridge-set enable command to enable the specified bridge set.
9-13
Use the undo bridge bridge-set enable command to disable the specified bridge set.
When there is an interface in the bridge set, it cannot be deleted.
Example
# Enable bridge-set 1.
[H3C] bridge 1 enable
9.1.19 debugging bridge
Syntax
debugging bridge eth-forwarding [ dlsw | interface interface-type

interface-number ]
undo debugging bridge eth-forwarding [ dlsw | interface interface-type
interface-number ]
View
User view
Parameter

Description
Use the debugging bridge command to enable the debugging function of a bridge set.
Use the undo debugging bridge command to disable the debugging function.
Example
# Enable the debugging function of the bridge set.

<H3C> debugging bridge eth-forwarding
9.1.20 debugging stp
Syntax
debugging stp { error | event | packet }

undo debugging stp { error | event | packet }
View
User view
9-14
Parameter
error: Enables STP error debugging.

event: Enables STP event debugging.
packet: Enables STP packet debugging.
Description
Use the debugging stp command to enable STP debugging.

Use the undo debugging stp command to disable STP debugging.
Example
# Enable STP packet debugging.

<H3C> debugging stp packet
Enable spanning-tree protocol packet debugging functions.
STP PACKET: Send Configuration BPDU to Ethernet1/0/1
TopologyChange:0, TopologyChangeAcknowledgment:0,
RootID:8000.00e0.fc04.9dc2
RootCost:0, BridgeID:8000.00e0.fc04.9dc2, PortID:8003
MessageAge:0, MaxAge:20, HelloTime:2, Forward:15
STP PACKET: Send TCN BPDU to Ethernet1/0/0
Table 9-1 Description on the fields of the debugging stp packet command
Field Description
STP PACKET: Send Configuration A configuration BPDU is sent to port
BPDU to Ethernet1/0/1 Ethernet1/0/1.
Both topology change bit and topology
TopologyChange:0,
change acknowledgement bit are zero,
TopologyChangeAcknowledgment:0
meaning the topology does not change.
ID of the bridge root on the spanning
RootID:8000.00e0.fc04.9dc2
tree
RootCost:0,
Cost of the root port, ID of this bridge,
BridgeID:8000.00e0.fc04.9dc2,
and ID of this port
PortID:8003
MessageAge is the current age of the
packet, MaxAge is the aging timer. If the
message age of the packet equals the
MessageAge:0, MaxAge:20, Max Age timer, the packet is dropped.
HelloTime:2, Forward:15
HelloTime is the hello interval.
Forward is the time that the port must
wait before changing its states.
STP PACKET: Send TCN BPDU to
A TCN packet is sent to Ethernet 1/0/0
Ethernet1/0/0
9-15
# Enable STP event debugging.

<H3C> debugging stp event
Enable spanning-tree protocol event debugging functions.
STP : HoldTicks is run on port 3
STP : HelloTicks is run
STP : Port 0 id is 1,port state is 0,designatedport is 0
STP : Creat HoldTimer on port 3 ,timeout is 1
STP : Creat HoldTimer ,timeout is 2
STP : Creat TcnTimer ,timeout is 2
STP : Delete tcn timer id 5413032
Table 9-2 Description on the fields of the debugging stp event command
Field Description
A BPDU is sent when the HoldTicks
timer running on port 3 expires.
A Hello packet is sent when the
HelloTicks timer expires.
STP : Port 0 id is 1,port state is The ID of port 0 is 1, its state is
Forwarding,designatedport is Yes forwarding, and it is the designated port.
A TCN timer set to two seconds is
STP : Creat TcnTimer ,timeout is 2
created.
STP : Delete tcn timer id 5413032 The timer with ID 5413032 is deleted.
# Enable STP error debugging.

<H3C> debugging stp error
Enable spanning-tree protocol error debugging functions.
STP: Received BPDU is corrupted.
STP: Fail to create MBuf.
STP: Fail to send Configuration BPDU.
STP: Fail to send TCN BPDU.
STP: Received BPDU sent by myself.
STP: Get a wrong port index.
Table 9-3 Description on the fields of the debugging stp error command
Field Description
STP: Received BPDU is corrupted. The received BPDU is corrupted.
9-16
Field Description
The request for the memory for a
STP: Fail to create MBuf.
transmitted BPDU is denied.
The transmission of a configuration
STP: Fail to send Configuration BPDU.
BPDU failed.
STP: Fail to send TCN BPDU. The transmission of a TCN BPDU failed.
A BPDU is received on the port where it
STP: Received BPDU sent by myself.
was sent.
A port index that does not exist is
STP: Get a wrong port index.
obtained.
9.1.21 display bridge address-table
Syntax
display bridge address-table [ bridge-set bridge-set | interface interface-type

interface-number | mac mac-address | dlsw ] [ dynamic | static ]
View
Any view
Parameter

mac-address: MAC address, a group of numbers in hex with the form of
xxxx-xxxx-xxxx.
dlsw: Displays the MAC address table of DLSW.
dynamic: Displays dynamic address entries.
static: Displays static address scanning entries.
Description
Use the display bridge address-table command to view the information of MAC
address forwarding table.
Example
# Display all the static table entries in the address table.

[H3C] display bridge address-table static
# Display the dynamic address entry with MAC address 1-1-1.
9-17
[H3C] display bridge address-table mac 1-1-1 dynamic
The information displayed, and to be described in the following table is:

Mac-address Set Flag Aging-time Receive Send Interface-name
Flag meaning: P--PERMIT N--DENY D--DYNAMIC S--STATIC
Table 9-4 Description on the fields of the display bridge address-table command
Field Description
Mac-Address MAC address
Set Bridge set number
Four options available: P--PERMIT, N--DENY, D--DYNAMIC
and S--STATIC
P refers to the "permit" rule in the MAC address filtering;
Flag
N refers to the "deny" rule in the MAC address filtering;
D refers to an dynamic entry;
S refers to a static entry.
Aging-time Time a forwarding table entry has existed.
Number of Packets number received with this destination
Receive
MAC address
Send Number of Packets sent to this destination MAC address
Interface-name Name of the outbound interface
9.1.22 display bridge information
Syntax
display bridge information [ bridge-set bridge-set ]
View
Any view
Parameter
Description
Use the display bridge information command to view the information of one or all the
enabled bridge sets in bridge module.
Example
# Display the information of all the enabled bridge sets.

<H3C> display bridge information
9-18
Bridge module is activated,4 port take part in bridge module at all;

Address table has 0 item, with 0 static one; life cycle is 100 (s).
Bridge set 1:
Configure: bridge ip;
undo bridge ipx;
bridge 1 learning;
interface: Ethernet4/2/0 :up

Ethernet5/2/0 :up
total 2 interface(s) in the set
Bridge set 2:
Configure: bridge ip;
undo bridge ipx;
undo bridge 2 learning ;
interface: Ethernet4/2/0.1 :up

Ethernet5/2/0.1 :up
total 2 interface(s) in the set
From the output information to see that the two bridge sets (bridge sets 1 and 2) are
active. Each comprises configure- and interface-related information.
For description of the information, see:
Table 9-5 Description on the fields of the display bridge information command
Field Description
This section records the configuration attributes of the bridge set.
For example, the configure section of bridge set 1 tells that it can
Configure
bridge IP packet but not IPX packet, and can perform dynamic
MAC address learning.
This section records the interfaces contained in the bridge set
and their statuses. For example, the interface section of bridge
set 1 tells that there are two interfaces in bridging: Ethernet4/2/0
Interface and Ethernet5/2/0, both in up status. Here, UP indicates the
activated status of an interface and DOWN the inactivated. Only
when the interface is in up status, can a bridge set implement
bridging function.
9-19
9.1.23 display bridge spanning-tree
Syntax
display bridge spanning-tree
View
Any view
Parameter
None
Description
Use the display bridge spanning-tree command to view STP state and statistics for
traffic analysis and control.
The command displays these global STP parameters: Root ID, Root Cost, Root Port,
Priority, Max Age, Hello, Hold, Forward Delay, Bridge Address, and Root Bridge
Address.
Example
# Display STP state and statistics.

[H3C] display bridge spanning-tree
Current root is me.
Bridge Identifier's priority: 32768 address: 00-e0-fc-0c-a2-91
Configured timer Hello: 2 Max Aging time: 20
Forward: 15 Root port: 0 (All Ports)
cost of root path: 0 Topology change flag: Not Set
Topology change detected flag: Not Set
Times: hold: 1 topology change: 35
notification: 2 hello: 2
max age: 20 forward : 15
aging: 300
Timers: hello: 1 topology change: 0
notification: 0
Port 1:
Port name: Ethernet1/0/0 State: Disable
Port path cost: 19 Port priority: 128
Designated root's priority: 32768 address: 00-e0-fc-0c-a2-91
Designated bridge's priority: 32768 address: 00-e0-fc-0c-a2-91
Designated port: 1 Designated path cost: 0
Timers: message age: 0 forward delay: 0
hold: 0 Sent BPDU: 0
9-20
Received BPDU: 0
Port 2:
Port name: Ethernet4/0/0 State: Forwarding
Port path cost: 1000 Port priority: 128
Designated root's priority: 32768 address: 00-e0-fc-0c-a2-91
Designated bridge's priority: 32768 address: 00-e0-fc-0c-a2-91
Designated port: 2 Designated path cost: 0
Timers: message age: 0 forward delay: 0
hold: 0 Sent BPDU: 33051
Received BPDU: 0
Table 9-6 Description on the fields of the display bridge spanning-tree command
Field Description
Bridge Identifier's priority: Bridge priority
address: MAC address of the bridge
Configured timer Hello The Hello timer configured on the bridge
Max Aging time Max Age timer
Root port Root port

cost of root path Cost of the root path
Topology change flag Topology change flag
Topology change detected flag Topology change detected flag

Times Time
hold Hold-in time
hello hello time
max age Maximum age
The valid time for forwarding entries of
aging
bridge forwarding tables
Timers Timers
hello hello timers

topology change Topology change timers
notification Notification timers
Port 2 Port 2
Port name Port names
State States
Port path cost Port path cost
9-21
Field Description
Port priority Port priority
Designated root's priority Designated port's priority
address Port addresses
Designated bridge's priority Designated bridge's priority
Designated port Designated ports
Designated path cost Designated path cost
Timers Timers
message age Message age
Delay time for port's state to be turned
forward delay
into forward
hold Port hold-in time
Sent BPDU Count of sent BPDU packets
Received BPDU Count of received BPDU packets
9.1.24 display bridge traffic
Syntax
display bridge traffic [ bridge-set bridge-set | interface interface-type

interface-number | dlsw ]
View
Any view
Parameter

dlsw: Display the information of the traffic through DLSW module.
Description
Use the display bridge traffic command to view the traffic statistics on an interface.
Example
# Display the traffic information on Ethernet0/0/0.

[H3C] display bridge traffic interface ethernet 0/0/0
9-22
The information displayed and described in the following table is:

the statistic of interface Ethernet0/0/0 in bridge set 1 :
Input:
10 total, 1 bpdu, 2 single,
0 multi, 0 broadcast;
0 ip,0 ipx, 0 other protocol;
0 eth2, 0 snap,
0 dlsw, 0 other,
0 vlan;
Output:
0 total, 0 bpdu, 0 single,
0 multi, 0 broadcast;
0 ip, 0 ipx, 0 other protocol;
0 eth2, 0 snap,
0 dlsw, 0 other,
0 vlan;
Send Way: 0 broadcast, 0 fast, 0 other
Discard:
0 by inport state,
0 for local frame ,
0 by mac table,
0 by inport filter,
0 by outport filter,
0 by ip filter ,
0 other
Table 9-7 Description on the fields of the display bridge traffic command
Field Description
Type and quantity of input packets on the interface. “10
total,1bpdu, 2 single” indicates there are totally 10 data
Input
packets input, with 1 BPDU packet and 2 single broadcast
packets.
Output Type and quantity of output packets on the interface.
Send way Way of data transmission.
Discard Reason for discarding and quantity of discarded packets.
0 by inport state Frames discarded due to the abnormal in-port state.
0 for local frame Frames discarded as the out-port is also the in-port.
Frames discarded due to the "deny" entry configured in MAC
0 by mac table
forwarding table.
9-23
Field Description
Frames discarded due to the filter rule configured on the
0 by inport filter
in-port.
Frames discarded due to the filter rule configured on the
0 by outport filter
out-port.
Frames discarded due to the filter rule configured at the IP
0 by ip filter
layer.
0 other Frames discarded due to other reasons.
9.1.25 display firewall ethernet-frame-filter
Syntax
display firewall ethernet-frame-filter { all | dlsw | interface interface-type

interface-number }
View
Any view
Parameter

all: Firewall statistics on all the interfaces.
dlsw: Firewall statistics when data traffic passes DLSW module.
Description
Use the display firewall ethernet-frame-filter command to view the filtering statistics
by ACL on the interface, namely, the detailed filtering information based on the ACL
configured via the firewall ethernet-frame-filter { acl-number | acl-name } { inbound |
outbound } command.
Example
# Display firewall statistics on the interface Ethernet0/0/0.

[H3C] display firewall ethernet-frame-filter interface e0/0/0
Interface: Ethernet0/0/0
In-bound Policy: acl nameacl
From 2003-06-07 14:46:59 to 2003-06-07 16:16:23
0 packets, 0 bytes, 0% permitted,
0 packets, 0 bytes, 0% denied,
0 packets, 0 bytes, 0% permitted default,
9-24
0 packets, 0 bytes, 0% denied default,

Totally 0 packets, 0 bytes, 0% permitted,
Totally 0 packets, 0 bytes, 0% denied.
Out-bound Policy: acl 4000
From 2003-06-07 15:59:23 to 2003-06-07 16:16:23
0 packets, 0 bytes, 0% permitted,
0 packets, 0 bytes, 0% denied,
0 packets, 0 bytes, 0% permitted default,
0 packets, 0 bytes, 0% denied default,
Totally 0 packets, 0 bytes, 0% permitted,
Totally 0 packets, 0 bytes, 0% denied.
The information is explained in the table below:
Table 9-8 Description on the fields of display firewall ethernet-frame-filter command
Field Description
Interface: Ethernet0/0/0 Interface name.
It indicates that In-bound ACL rules are configured on
In-bound Policy the interface. Behind the colon is the ACL number or
name.
It indicates that Out-bound ACL rules are configured on
Out-bound Policy the interface, Behind the colon is the ACL number or
name.
9.1.26 dlsw ethernet-frame-filter
Syntax
dlsw ethernet-frame-filter acl-number { inbound | outbound }

undo dlsw ethernet-frame-filter acl-number { inbound | outbound }
View
System view
Parameter
acl-number: Number of an extended Access Control List.
Description
Use the dlsw ethernet-frame-filter command to apply an ACL in the transmitting and
receiving directions of DLSW module towards bridge module so that it can transmit and
receive only the Ethernet frames with permitted source MAC addresses.
9-25
Use the undo dlsw ethernet-frame-filter command to delete the MAC-address-based

ACL applied in the transmitting or receiving direction.
For more information on MAC-based ACLs, refer to the security part of this manual.
Related command: acl.
Example
# Configure filtering rule (ACL 4000) in the receiving direction of DLSW module.
[H3C] dlsw ethernet-frame-filter 4000 inbound
9.1.27 firewall ethernet-frame-filter
Syntax
firewall ethernet-frame-filter acl-number { inbound | outbound }

undo firewall ethernet-frame-filter acl-number { inbound | outbound }
View
Interface view
Parameter
acl-number: Number of a MAC-based ACL.

inbound: Filters the Ethernet frames received on the interface.
outbound: Filters the Ethernet frames forwarded from the interface.
Description
Use the firewall ethernet-frame-filter command to apply a MAC-based ACL on the

interface.
Use the undo firewall ethernet-frame-filter command to remove the MAC-based ACL
from the interface.
This command can be configured on all bridge-supported interfaces.
For more information on MAC-based ACLs, refer to the security part of this manual.
Related command: acl.
Example
# Configure filtering rule (ACL 4000) in the receiving direction on the interface
Ethernet0/0/0.
[H3C-Etherhet0/0/0] firewall ethernet-frame-filter 4000 inbound
# Apply ACL 4001 to the outbound direction of interface dialer 0.

[H3C-Dialer0] firewall ethernet-frame-filter 4001 outbound
9-26
9.1.28 fr map bridge
Syntax
fr map bridge dlci broadcast

undo fr map bridge dlci
View
Interface view
Parameter
dlci: Local VC number in the range 16 to 1007.

broadcast: Specifies the broadcast attribute of the map.
Description
Use the fr map bridge command to add a bridge-set to frame relay map entry.
Use the undo fr map bridge command to delete a bridge-set to frame relay map entry.
By default, no bridge-set to frame relay map is configured.
Related command: display fr map.
Example
# On the interface Serial1/0/0, configure a bridge-set to frame relay map entry on the
VC with DLCI 50.
[H3C-Serial1/0/0] fr map bridge 50 broadcast
9.1.29 interface bridge-template
Syntax
interface bridge-template bridge-set

undo interface bridge-template bridge-set
View
System view
Parameter
bridge-set: Bridge set number, an integer in the range 1 to 255.
Description
Use the interface bridge-template command to create a bridge template interface,

connecting the specified bridge set to the routing network.
9-27
Use the undo interface bridge-template command to delete the bridge template
interface.
Each bridge set can have only one bridge template interface.
Related command: bridge routing-enable.
Example
# Create interface bridge-template 1.

[H3C] interface bridge-template 1
[H3C-Bridge-template1]
9.1.30 mac-address
Syntax
mac-address H-H-H
undo mac-address
View
Bridge-template interface view
Parameter
H-H-H: MAC address.
Description
Use the mac-address command to manually configure the MAC address of the
bridge-template interface.
Use the undo mac-address command to clear the manually configured MAC address
of the bridge-template interface.
By default, the bridge-template interface uses the automatically created MAC address.
Example
# Manually configure the MAC address of the bridge-template 1 interface as

123-234-345.
[H3C-Bridge-template1] mac-address 123-234-345
9.1.31 reset bridge address-table
Syntax
reset bridge address-table [ bridge-set bridge-set | interface interface-type

interface-number ]
9-28
View
User view
Parameter
bridge-set: Bridge set number, an integer in the range 1 to 255.

Description
Use the reset bridge command to clear all the dynamic address entries or the entries
of a specified bridge set or a specified interface in the forwarding table.
Example
# Clear all the dynamic address entries pf bridge set 1 in the forwarding table.
<H3C> reset bridge address-table bridge-set 1
9.1.32 reset bridge traffic
Syntax
reset bridge traffic [ bridge-set bridge-set | interface interface-type interface-number

| dlsw ]
View
User view
Parameter

dlsw: Displays the information of traffic passing DLSW module.
Description
Use the reset bridge traffic command to clear the traffic statistics of a bridge set on a
interface.
Example
# Clear the traffic statistics of bridge set 1.

<H3C> reset bridge traffic bridge-set 1
9-29
9.1.33 reset firewall ethernet-frame-filter
Syntax
reset firewall ethernet-frame-filter { all | dlsw | interface interface-type

interface–number }
View
User view
Parameter
all: Statistics of all ACLs.

dlsw: Statistics about DLSw on the firewall.
Description
Use the reset firewall ethernet-frame-filter command to clear the ACL-based firewall
statistics.
Example
# Clear firewall statistics of all ACLs.

<H3C> reset firewall ethernet-frame-filter all
9.1.34 reset stp statistics
Syntax
reset stp statistics
View
User view
Parameter
None
Description
Use the reset stp statistics command to clear statistics about the spanning tree.
Example
# Clear statistics about the spanning tree.

<H3C> reset stp statistics
9-30
9.1.35 x25 map bridge
Syntax
x25 map bridge x121-address x.121-address broadcast

undo x25 map bridge x121-address x.121-address
View
Interface view
Parameter
x121-address x.121-address: Remote X.121 address.

broadcast: Sends broadcast packets to the X.25 destination.
Description
Use the x25 map bridge command to map an X.121 address to a bridge-set.
Use the undo x25 map bridge command to delete the configured map entry.
By default, no bridge-set to X.25 map is configured.
Related command: display x25 map.
Example
# Configure a map entry on the X.25 interface Serial0/0/0.

[H3C-Serial0/0/0] x25 map bridge x121-address 20112451 broadcast
9-31
Network Protocol
Command Manual – Network Protocol
Table of Contents
Chapter 1 IP Address Configuration Commands....................................................................... 1-1

1.1 IP Address Configuration Commands ............................................................................... 1-1
1.1.1 ip address................................................................................................................ 1-1
1.1.2 ip address ppp-negotiate......................................................................................... 1-2
1.1.3 ip address unnumbered .......................................................................................... 1-3
1.1.4 remote address ....................................................................................................... 1-4
Chapter 2 ARP Configuration Commands .................................................................................. 2-1

2.1 ARP Configuration Commands.......................................................................................... 2-1
2.1.1 arp static.................................................................................................................. 2-1
2.1.2 arp check enable ..................................................................................................... 2-2
2.1.3 arp timer aging ........................................................................................................ 2-2
2.1.4 debugging arp packet.............................................................................................. 2-3
2.1.5 display arp ............................................................................................................... 2-3
2.1.6 display arp timer aging (only for the AR46 Series) ................................................. 2-4
2.1.7 naturemask-arp ....................................................................................................... 2-5
2.1.8 reset arp .................................................................................................................. 2-5
2.2 Proxy ARP Configuration Commands ............................................................................... 2-6
2.2.1 arp-proxy enable ..................................................................................................... 2-6
2.3 Gratuitous ARP Configuration Commands........................................................................ 2-7
2.3.1 arp send-gratuitous-arp........................................................................................... 2-7
2.3.2 gratuitous-arp-learning enable ................................................................................ 2-8
2.3.3 gratuitous-arp-sending enable ................................................................................ 2-8
2.4 Authorized ARP Configuration Commands ....................................................................... 2-9
2.4.1 arp security.............................................................................................................. 2-9
2.4.2 arp security time-out.............................................................................................. 2-10
2.4.3 dhcp server synchronize arp (in Interface View)................................................... 2-11
2.4.4 dhcp server synchronize arp interface (in System View) ...................................... 2-11
2.4.5 synchronize arp ..................................................................................................... 2-12
Chapter 3 DNS Configuration Commands .................................................................................. 3-1

3.1 Static DNS Configuration Commands ............................................................................... 3-1
3.1.1 display ip host.......................................................................................................... 3-1
3.1.2 ip host...................................................................................................................... 3-1
3.2 DNS Client Configuration Commands ............................................................................... 3-2
3.2.1 debugging dns......................................................................................................... 3-2
3.2.2 dns resolve .............................................................................................................. 3-3
3.2.3 dns server................................................................................................................ 3-3
3.2.4 dns domain.............................................................................................................. 3-4
i
3.2.5 display dns domain ................................................................................................. 3-5

3.2.6 display dns server ................................................................................................... 3-5
3.2.7 display dns dynamic-host........................................................................................ 3-6
3.2.8 nslookup type .......................................................................................................... 3-7
3.2.9 reset dns dynamic-host ........................................................................................... 3-8
3.3 DNS Proxy Configuration Commands ............................................................................... 3-8
3.3.1 dns-proxy enable..................................................................................................... 3-8
Chapter 4 DDNS Configuration Commands ............................................................................... 4-1

4.1 DDNS Configuration Commands....................................................................................... 4-1
4.1.1 ddns-server ............................................................................................................. 4-1
4.1.2 ddns username........................................................................................................ 4-1
4.1.3 ddns password ........................................................................................................ 4-2
4.1.4 ddns domainname................................................................................................... 4-2
4.1.5 ddns source-interface.............................................................................................. 4-3
4.1.6 ddns refresh ............................................................................................................ 4-4
Chapter 5 URPF Configuration Commands................................................................................ 5-1

5.1 URPF Configuration Commands ....................................................................................... 5-1
5.1.1 ip urpf ...................................................................................................................... 5-1
5.1.2 debugging ip urpf .................................................................................................... 5-1
Chapter 6 IP Accounting Configuration Commands ................................................................. 6-1

6.1 IP Accounting Configuration Commands........................................................................... 6-1
6.1.1 debugging ip count.................................................................................................. 6-1
6.1.2 display ip count........................................................................................................ 6-4
6.1.3 display ip count rule ................................................................................................ 6-5
6.1.4 ip count enable ........................................................................................................ 6-5
6.1.5 ip count exterior-threshold....................................................................................... 6-6
6.1.6 ip count firewall-denied ........................................................................................... 6-7
6.1.7 ip count inbound-packets ........................................................................................ 6-7
6.1.8 ip count interior-threshold........................................................................................ 6-8
6.1.9 ip count outbound-packets ...................................................................................... 6-9
6.1.10 ip count rule........................................................................................................... 6-9
6.1.11 ip count timeout ................................................................................................... 6-10
6.1.12 reset ip count....................................................................................................... 6-11
Chapter 7 UDP Helper Configuration Commands...................................................................... 7-1

7.1 UDP Helper Configuration Commands.............................................................................. 7-1
7.1.1 debugging udp-helper ............................................................................................. 7-1
7.1.2 display udp-helper server........................................................................................ 7-1
7.1.3 udp-helper enable ................................................................................................... 7-2
7.1.4 udp-helper port ........................................................................................................ 7-2
7.1.5 udp-helper server .................................................................................................... 7-3
ii
Chapter 8 BOOTP Client Configuration Commands.................................................................. 8-1

8.1 BOOTP Client Configuration Command............................................................................ 8-1
8.1.1 display bootp client.................................................................................................. 8-1
8.1.2 ip address bootp-alloc ............................................................................................. 8-2
Chapter 9 DHCP Configuration Commands ............................................................................... 9-1

9.1 DHCP Public Configuration Commands............................................................................ 9-1
9.1.1 dhcp enable............................................................................................................. 9-1
9.1.2 dhcp select (in Interface View) ................................................................................ 9-1
9.1.3 dhcp select (in System View) .................................................................................. 9-3
9.1.4 dhcp server detect................................................................................................... 9-4
9.2 DHCP Server Configuration Commands ........................................................................... 9-4
9.2.1 accounting domain .................................................................................................. 9-4
9.2.2 bims-server.............................................................................................................. 9-6
9.2.3 debugging dhcp server............................................................................................ 9-6
9.2.4 dhcp server accounting domain interface (in System View) ................................... 9-8
9.2.5 dhcp server accounting domain (in Interface View) ................................................ 9-9
9.2.6 dhcp server bims-server (Interface View) ............................................................. 9-10
9.2.7 dhcp server bims-server interface (System View) ................................................ 9-11
9.2.8 dhcp server dns-list ............................................................................................... 9-12
9.2.9 dhcp server dns-list interface (in System View) .................................................... 9-13
9.2.10 dhcp server domain-name (in Interface View) .................................................... 9-13
9.2.11 dhcp server domain-name interface (in System View) ....................................... 9-14
9.2.12 dhcp server expired (in Interface View) .............................................................. 9-15
9.2.13 dhcp server expired interface (in System View).................................................. 9-16
9.2.14 dhcp server forbidden-ip ..................................................................................... 9-17
9.2.15 dhcp server ip-pool.............................................................................................. 9-18
9.2.16 dhcp server nbns-list (in Interface View)............................................................. 9-19
9.2.17 dhcp server nbns-list interface (in System View) ................................................ 9-19
9.2.18 dhcp server netbios-type interface (in System View).......................................... 9-21
9.2.19 dhcp server netbios-type (in Interface View)....................................................... 9-22
9.2.20 dhcp server option interface (in System View).................................................... 9-23
9.2.21 dhcp server option (in Interface View) ................................................................ 9-24
9.2.22 dhcp server ping.................................................................................................. 9-24
9.2.23 dhcp server relay information enable.................................................................. 9-25
9.2.24 dhcp server static-bind ........................................................................................ 9-26
9.2.25 dhcp server voice-config (in Interface View) ....................................................... 9-27
9.2.26 dhcp server voice-config interface (in System View) .......................................... 9-28
9.2.27 display dhcp server conflict ................................................................................. 9-29
9.2.28 display dhcp server expired ................................................................................ 9-30
9.2.29 display dhcp server free-ip .................................................................................. 9-31
9.2.30 display dhcp server ip-in-use .............................................................................. 9-32
9.2.31 display dhcp server statistics .............................................................................. 9-33
iii
9.2.32 display dhcp server tree ...................................................................................... 9-35

9.2.33 dns-list ................................................................................................................. 9-38
9.2.34 domain-name ...................................................................................................... 9-38
9.2.35 expired................................................................................................................. 9-39
9.2.36 gateway-list ......................................................................................................... 9-40
9.2.37 nbns-list ............................................................................................................... 9-41
9.2.38 netbios-type......................................................................................................... 9-41
9.2.39 network................................................................................................................ 9-42
9.2.40 option................................................................................................................... 9-43
9.2.41 reset dhcp server conflict .................................................................................... 9-44
9.2.42 reset dhcp server ip-in-use.................................................................................. 9-44
9.2.43 reset dhcp server statistics.................................................................................. 9-45
9.2.44 static-bind ip-address .......................................................................................... 9-45
9.2.45 static-bind { mac-address | client-identifier } ....................................................... 9-46
9.2.46 voice-config ......................................................................................................... 9-47
9.3 DHCP Relay Configuration Commands .......................................................................... 9-48
9.3.1 debugging dhcp relay............................................................................................ 9-48
9.3.2 dhcp relay information........................................................................................... 9-49
9.3.3 dhcp relay information strategy ............................................................................. 9-50
9.3.4 dhcp relay release................................................................................................. 9-50
9.3.5 display dhcp relay address.................................................................................... 9-51
9.3.6 display dhcp relay statistics................................................................................... 9-52
9.3.7 display dhcprelay-security..................................................................................... 9-53
9.3.8 ip relay address (in Interface View)....................................................................... 9-53
9.3.9 ip relay address cycle............................................................................................ 9-54
9.3.10 ip relay address interface (in System View)........................................................ 9-55
9.3.11 reset dhcp relay statistics.................................................................................... 9-56
9.4 DHCP Client Configuration Commands .......................................................................... 9-56
9.4.1 debugging dhcp client ........................................................................................... 9-56
9.4.2 display dhcp client................................................................................................. 9-57
9.4.3 ip address dhcp-alloc ............................................................................................ 9-59
Chapter 10 IP Performance Configuration Commands ........................................................... 10-1

10.1 IP Performance Configuration Commands.................................................................... 10-1
10.1.1 debugging ip........................................................................................................ 10-1
10.1.2 debugging tcp event............................................................................................ 10-2
10.1.3 debugging tcp md5.............................................................................................. 10-3
10.1.4 debugging tcp packet .......................................................................................... 10-4
10.1.5 debugging udp packet......................................................................................... 10-5
10.1.6 display fib ............................................................................................................ 10-6
10.1.7 display fib acl....................................................................................................... 10-7
10.1.8 display fib begin .................................................................................................. 10-8
10.1.9 display fib ip-prefix .............................................................................................. 10-9
iv
10.1.10 display fib longer ............................................................................................. 10-10

10.1.11 display fib statistics ......................................................................................... 10-11
10.1.12 display icmp statistics...................................................................................... 10-11
10.1.13 display ip fast-forwarding cache...................................................................... 10-13
10.1.14 display ip interface .......................................................................................... 10-13
10.1.15 display ip interface brief .................................................................................. 10-14
10.1.16 display ip socket.............................................................................................. 10-15
10.1.17 display ip statistics .......................................................................................... 10-17
10.1.18 display tcp statistics ........................................................................................ 10-18
10.1.19 display tcp status............................................................................................. 10-21
10.1.20 display udp statistics ....................................................................................... 10-21
10.1.21 icmp redirect send........................................................................................... 10-23
10.1.22 ip fast-forwarding............................................................................................. 10-23
10.1.23 reset ip fast-forwarding cache ......................................................................... 10-24
10.1.24 reset ip statistics.............................................................................................. 10-25
10.1.25 reset tcp statistics............................................................................................ 10-25
10.1.26 reset udp statistics .......................................................................................... 10-26
10.1.27 tcp mss ............................................................................................................ 10-26
10.1.28 tcp timer fin-timeout......................................................................................... 10-27
10.1.29 tcp timer syn-timeout....................................................................................... 10-27
10.1.30 tcp window....................................................................................................... 10-28
10.2 Broadcast Forwarding Configuration Commands........................................................ 10-29
10.2.1 ip forward-broadcast ......................................................................................... 10-29
10.3 Multicast Fast Forwarding Configuration Commands.................................................. 10-30
10.3.1 ip multicast-fast-forwarding ............................................................................... 10-30
10.3.2 reset ip multicast-fast-forwarding cache ........................................................... 10-30
10.3.3 display ip multicast-fast-forwarding cache ........................................................ 10-31
Chapter 11 NAT Configuration Commands .............................................................................. 11-1

11.1 NAT Configuration Commands...................................................................................... 11-1
11.1.1 connection-limit default ....................................................................................... 11-1
11.1.2 connection-limit default amount .......................................................................... 11-1
11.1.3 connection-limit enable ....................................................................................... 11-2
11.1.4 connection-limit policy ......................................................................................... 11-3
11.1.5 debugging connection-limit ................................................................................. 11-3
11.1.6 debugging nat...................................................................................................... 11-4
11.1.7 display connection-limit policy............................................................................. 11-4
11.1.8 display connection-limit statistics ........................................................................ 11-5
11.1.9 display nat ........................................................................................................... 11-6
11.1.10 display nat connection-limit ............................................................................... 11-8
11.1.11 limit .................................................................................................................... 11-9
11.1.12 nat address-group ........................................................................................... 11-10
11.1.13 nat aging-time.................................................................................................. 11-11
v
11.1.14 nat alg.............................................................................................................. 11-12

11.1.15 nat dns-map .................................................................................................... 11-13
11.1.16 nat outbound ................................................................................................... 11-14
11.1.17 nat outbound interface .................................................................................... 11-15
11.1.18 nat outbound static.......................................................................................... 11-16
11.1.19 nat overlapaddress.......................................................................................... 11-17
11.1.20 nat server ........................................................................................................ 11-18
11.1.21 nat static .......................................................................................................... 11-21
11.1.22 nat static inside ............................................................................................... 11-22
11.1.23 nat connection-limit-policy............................................................................... 11-23
11.1.24 reset nat .......................................................................................................... 11-23
Chapter 12 IP Unicast Policy Routing Configuration Commands.......................................... 12-1

12.1 IP Unicast Policy Routing Configuration Commands .................................................... 12-1
12.1.1 apply default output-interface.............................................................................. 12-1
12.1.2 apply ip-address default next-hop ....................................................................... 12-2
12.1.3 apply ip-address next-hop (for Unicast Policy Routing) ...................................... 12-2
12.1.4 apply ip-dscp ....................................................................................................... 12-3
12.1.5 apply ip-precedence............................................................................................ 12-4
12.1.6 apply output-interface (for Unicast Policy Routing)............................................. 12-4
12.1.7 display ip policy ................................................................................................... 12-5
12.1.8 display ip policy setup ......................................................................................... 12-6
12.1.9 display ip policy statistic ...................................................................................... 12-7
12.1.10 if-match acl ........................................................................................................ 12-8
12.1.11 if-match packet-length....................................................................................... 12-8
12.1.12 ip local policy route-policy ................................................................................. 12-9
12.1.13 ip policy route-policy.......................................................................................... 12-9
12.1.14 route-policy...................................................................................................... 12-10
Chapter 13 IP Multicast Policy Routing Configuration Commands ....................................... 13-1

13.1 IP Multicast Policy Routing Configuration Commands .................................................. 13-1
13.1.1 apply ip-address next-hop (for Multicast Policy Routing).................................... 13-1
13.1.2 apply output-interface (for Multicast Policy Routing)........................................... 13-2
13.1.3 debugging ip multicast-policy .............................................................................. 13-2
13.1.4 display ip multicast-policy.................................................................................... 13-3
13.1.5 if-match acl .......................................................................................................... 13-4
13.1.6 ip multicast-policy route-policy ............................................................................ 13-5
13.1.7 route-policy.......................................................................................................... 13-6
Chapter 14 QLLC Configuration Commands............................................................................ 14-1

14.1.1 debugging qllc ..................................................................................................... 14-1
14.1.2 X25 qllc-switch .................................................................................................... 14-1
Chapter 15 SOT Configuration Commands .............................................................................. 15-1

15.1 SOT Configuration Commands...................................................................................... 15-1
vi
15.1.1 display sot ........................................................................................................... 15-1

15.1.2 link-protocol sot ................................................................................................... 15-2
15.1.3 sot counter keepalive .......................................................................................... 15-3
15.1.4 sot gather ............................................................................................................ 15-4
15.1.5 sot group-set ....................................................................................................... 15-4
15.1.6 sot peer ............................................................................................................... 15-5
15.1.7 sot sdlc broadcast ............................................................................................... 15-6
15.1.8 sot sdlc controller ................................................................................................ 15-6
15.1.9 sot sdlc-status primary ........................................................................................ 15-7
15.1.10 sot sdlc-status secondary.................................................................................. 15-8
15.1.11 sot send address............................................................................................... 15-9
15.1.12 sot send all tcp ................................................................................................ 15-10
15.1.13 sot timer keepalive .......................................................................................... 15-10
Chapter 16 MIP Configuration Commands ............................................................................... 16-1

16.1 MIP Configuration Commands....................................................................................... 16-1
16.1.1 debugging mobile-ip advertise ............................................................................ 16-1
16.1.2 debugging mobile-ip node................................................................................... 16-1
16.1.3 display mobile-ip interface................................................................................... 16-2
16.1.4 display mobile-ip globals ..................................................................................... 16-4
16.1.5 display mobile-ip statistics................................................................................... 16-6
16.1.6 mobile-ip............................................................................................................ 16-10
16.1.7 mobile-ip tunnel path-mtu-discovery ................................................................. 16-11
16.1.8 reset mobile-ip statistics.................................................................................... 16-12
16.1.9 snmp-agent trap enable mobile-ip .................................................................... 16-12
16.2 HA Configuration Commands ...................................................................................... 16-13
16.2.1 display mobile-ip binding................................................................................... 16-13
16.2.2 mobile-ip home-agent ....................................................................................... 16-15
16.2.3 mobile-ip virtual-network ................................................................................... 16-17
16.2.4 reset mobile-ip binding ...................................................................................... 16-18
16.3 FA Configuration Commands ...................................................................................... 16-19
16.3.1 display mobile-ip visitor ..................................................................................... 16-19
16.3.2 mobile-ip foreign-agent ..................................................................................... 16-20
16.3.3 mobile-ip foreign-agent service ......................................................................... 16-22
16.3.4 mobile-ip prefix-length....................................................................................... 16-23
16.3.5 mobile-ip registration-lifetime ............................................................................ 16-24
16.3.6 reset mobile-ip visitor ........................................................................................ 16-25
16.4 MN Configuration Commands ..................................................................................... 16-26
16.4.1 display mobile-ip node ...................................................................................... 16-26
16.4.2 mobile-node....................................................................................................... 16-27
16.4.3 reset mobile-ip node-statistics........................................................................... 16-28
16.4.4 mobile-ip home-agent mobile-router ................................................................. 16-29
16.4.5 ip address.......................................................................................................... 16-29
vii
16.4.6 mobile-network .................................................................................................. 16-30

16.5 MR Configuration Commands ..................................................................................... 16-31
16.5.1 debugging mobile-ip mobile-router.................................................................... 16-31
16.5.2 display mobile-ip mobile-router ......................................................................... 16-32
16.5.3 encapsulation .................................................................................................... 16-38
16.5.4 home-agent ip-address ..................................................................................... 16-38
16.5.5 ip address.......................................................................................................... 16-39
16.5.6 mobile-ip mobile-router ..................................................................................... 16-40
16.5.7 mobile-ip mobile-router ccoa............................................................................. 16-40
16.5.8 mobile-ip mobile-router roam ............................................................................ 16-41
16.5.9 mobile-ip mobile-router solicit ........................................................................... 16-42
16.5.10 mobile-network ................................................................................................ 16-43
16.5.11 register lifetime ................................................................................................ 16-44
16.5.12 register retransmit ........................................................................................... 16-44
16.5.13 reset mobile-ip mobile-router .......................................................................... 16-46
16.5.14 reverse-tunnel ................................................................................................. 16-46
16.5.15 simultaneous-bindings .................................................................................... 16-47
16.6 MIP Security Policy Configuration Commands............................................................ 16-48
16.6.1 display mobile-ip secure.................................................................................... 16-48
16.6.2 display mobile-ip violation ................................................................................. 16-49
16.6.3 mobile-ip secure ................................................................................................ 16-51
16.7 IRDP Configuration Commands .................................................................................. 16-52
16.7.1 display mobile-ip irdp ........................................................................................ 16-52
16.7.2 mobile-ip irdp..................................................................................................... 16-53
viii
Comware V3 Chapter 1 IP Address Configuration Commands
Chapter 1 IP Address Configuration Commands
1.1 IP Address Configuration Commands

1.1.1 ip address
Syntax
ip address ip-address net-mask [ sub ]

undo ip address [ ip-address net-mask [sub] ]
View
Interface view
Parameter
ip-address: Interface IP address, in dot delimitated decimal format.

net-mask: The mask of the corresponding subnet in dot delimitated decimal format, or
the mask length to be specified.
sub: To enable communications among different subnets, the configured slave IP
address should be used.
Description
Use the ip address command to set an IP address for an interface.

Use the undo ip address command to delete an IP address of the interface.
By default, no IP address for an interface is configured.
Users can select proper IP subnet according to actual conditions. Moreover, in the case
that part of the host address is composed of 0 or the entire host address is composed of
1, the address has some special use and can not be used as ordinary IP address.
The mask identifies the network number in an IP address.
Under normal conditions, one interface only needs to be configured with one IP
address. However, to enable one interface of a router to connect to several subnets,
one interface can be configured with several IP addresses. Among them, one is master
IP address, and others are slave IP addresses. Following is the relationship between
the master and slave IP addresses:
z If a master IP address is configured while there’s already an existing master IP
address, the original one will be deleted and the newly configured will take effect.
z The command undo ip address without parameters indicates to delete all the IP
addresses of the interface. The command undo ip address ip-address net-mask
1-1
indicates to delete the master IP address and undo ip address ip-address

net-mask sub indicates to delete the slave address. All the slave addresses must
be deleted before the master IP address can be deleted.
In addition, any two IP addresses configured for all interfaces on a router cannot be
located in the same subnet.
Related command: ip route-static, display ip interface, and display interface.
Example
# Configure the interface Serial 0/0/0 with the master IP address as 129.102.0.1, the
slave IP address is 202.38.160.1, and the subnet mask of both is 255.255.255.0.
[H3C-Serial1/0/0] ip address 202.38.160.1 255.255.255.0 sub
1.1.2 ip address ppp-negotiate
Syntax
ip address ppp-negotiate
undo ip address ppp-negotiate
View
Interface view
Parameter
None
Description
Use the ip address ppp-negotiate command to allow IP address be assigned through

negotiation at the interface.
Use the undo ip address ppp-negotiate command to disable this function.
By default, no interface IP address negotiation is allowed.
As PPP supports IP address negotiation, only when the interface is encapsulated with
the link-layer protocol PPP, can the IP address negotiation at this interface be
configured.
Normally, it is not necessary to configure IP address negotiation. Only in some special
circumstances such as accessing Internet through the ISP, the IP addresses of the
interface that is connected with the ISP are allocated by the ISP through negotiation.
When IP address negotiation for the interface is configured, it is not necessary to
configure the IP address manually for this interface.
1-2
Example
# Display how to set IP address of interface Serial 0/0/0 to be allocated by peer through
negotiation.
[H3C-Serial0/0/0] ip address ppp-negotiate
1.1.3 ip address unnumbered
Syntax
ip address unnumbered interface interface-type interface-number

undo ip address unnumbered
View
Interface view
Parameter
interface-type: Name of the unnumbered interface.

interface-number: Serial number of the unnumbered interface.
Description
Use the ip address unnumbered command to enable an interface to borrow the IP

address of another interface.
Use the undo ip address unnumbered command to disable this function on the
interface.
By default, the interface does not borrow IP addresses from other interfaces.
This command is used to enable serial interfaces encapsulated with PPP, HDLC,
Frame Relay, SLIP serial interface or Tunnel interface to borrow IP addresses from
Ethernet interface or other interfaces. Ethernet interfaces however cannot use
unnumbered IP addresses.
The interface that uses an unnumbered address has no IP address itself. Its route
cannot be added into the routing table as a result. For connectivity purpose, you must
configure two static routes for it. For more information, refer to the “Routing Protocol”
part of this manual.
Example
# Display how to make the serial interface 0/0/0 encapsulated with PPP borrow the
unnumbered IP address from Ethernet interface 0/0/0.
[H3C-Serial0/0/0] ip address unnumbered Ethernet 0/0/0
1-3
1.1.4 remote address
Syntax
remote address { ip-address | pool [ pool-number ] }

undo remote address
View
Interface view
Parameter
ip-address: IP address.
pool-number: Global address pool number in the range 0 to 99. It defaults to 0. One
address picked from the specified address pool is to be assigned to the peer interface.
Description
Use the remote address command to configure to assign IP address for the peer
interface.
Use the undo remote address command to disable to assign IP address for the peer
interface.
By default, the interface does not assign address for the peer interface.
When an interface is encapsulated with PPP, but not configured with authentication and
IP address, perform the following task to configure the negotiable attribute of IP
address for this interface (configuring the ip address ppp-negotiate command on
local router), and configure the remote address command on the peer router, so that
the local interface can accept the IP address originated from PPP negotiation. This IP
address is assigned by the opposite end. This configuration is mainly used to obtain IP
address assigned by ISP when accessing Internet via ISP.
Caution:
This command does not forbid the peer to configure IP address itself. To forbid the peer
to configure IP address itself, you must configure the ppp ipcp remote-address
forced command.
Use this command only when PPP authentication is not configured, and be sure to
specify a global address pool.
Related command: ip address ppp-negotiate, ppp ipcp address forced.
1-4
Example
# The serial interface encapsulated with PPP assigns an IP address 10.0.0.1 for the
peer.
1-5
Comware V3 Chapter 2 ARP Configuration Commands
Chapter 2 ARP Configuration Commands
2.1 ARP Configuration Commands

2.1.1 arp static
Syntax
arp static ip-address ethernet-address [ vpn-instance-name ]

undo arp ip-address [ vpn-instance-name ]
View
System view
Parameter
ip-address: IP addresses of the ARP mapping entries in dotted decimal format.

ethernet-address: Ethernet MAC address of ARP mapping entries. Its format is H-H-H.
vpn-instance-name: The name of VPN instance.
Description
Use the arp static command to configure ARP mapping table.

Use the undo arp command to delete mapping items corresponding to some
addresses in the ARP mapping table.
By default, the mapping table of the system ARP is empty and the address mapping
can be obtained through dynamic ARP.
Normally, ARP mapping table is maintained by dynamic ARP, only in special
circumstances is manual configuration needed. Besides, ARP mapping table is used
for LAN only, WAN address resolution is accomplished in a different way, for instance
the inverse address resolution of Frame Relay.
Related command: arp static and display arp.
Example
# Configure the Ethernet MAC address 00e0-fc01-0ec5 corresponding to the IP

address 129.102.0.1.
[H3C] arp static 129.102.0.1 00e0-fc01-0ec5
# Configure the Ethernet MAC address aa-fcc-12 corresponding to the IP address

11.0.0.1.
[H3C] arp static 11.0.0.1 aa-fcc-12
2-1
2.1.2 arp check enable
Syntax
arp check enable

undo arp check enable
View
System view
Parameter
None
Description
Use the arp check enable command to enable ARP entry check to have the device not
learn the ARP entries with broadcast MAC addresses.
Use the undo arp check enable command to disable ARP entry check to have the
system learn the ARP entries with broadcast MAC addresses.
By default, ARP entry check is enabled. The device does not learn the ARP entries with
broadcast MAC addresses.
Example
# Enable ARP entry check.

[H3C] arp check enable
2.1.3 arp timer aging
Syntax
arp timer aging minutes

undo arp timer aging
View
System view
Parameter
minutes: Sets the aging timer for dynamic ARP entries, in the range 1 to 1440 minutes.
The default is 20 minutes.
Description
Use the arp timer aging command to set the aging timer for dynamic ARP entries.
Use the undo arp timer aging command to restore the default.
2-2
Related command: display arp timer aging.
Example
# Set the aging timer for dynamic ARP entries to 30 minutes.

[H3C] arp timer aging 30
2.1.4 debugging arp packet
Syntax
debugging arp packet

undo debugging arp packet
View
User view
Parameter
None
Description
Use the debugging arp packet command to enable ARP packets debugging.
Use the undo debugging arp packet command to disable the function.
Example
# Enable ARP packets debugging.

<H3C> debugging arp packet
2.1.5 display arp
Syntax
display arp [ static | dynamic | all ] [ { begin text | exclude text | include text } ]
View
Any view
Parameter
static: Indicates to show the static ARP entries.

dynamic: Indicates to show the dynamic ARP entries.
all: Indicates to show all ARP entries.
|: Outputs the matched entries.
begin: Matches the strings beginning with the regular expression.
2-3
exclude: Matches the strings that exclude the regular expression.

include: Matches the strings that include the regular expression.
text: Regular expression.
Description
Use the display arp command to view the ARP mapping table.
Related command: arp static, reset arp.
Example
# Display all ARP entries.

<H3C> display arp
Type: S-Static D-Dynamic
IP Address MAC Address Type Vpn-instance Name Interface
1.1.1.1 0012-0012-0012 S
10.153.72.2 00e0-fc00-0007 D Eth0/0/1
# Display static ARP entries.

<H3C> display arp static
1.1.1.1 0012-0012-0012 S
# Display dynamic ARP entries.

<H3C> display arp dynamic
10.153.72.2 00e0-fc00-0007 D Eth0/0/1
2.1.6 display arp timer aging (only for the AR46 Series)
Syntax
display arp timer aging
View
Any view
Parameter
None
Description
Use the display arp timer aging command to display the aging timer for dynamic ARP
entries.
2-4
Related command: arp timer aging.
Example
# Display the aging timer for dynamic ARP entries.

[H3C] arp timer aging 30
[H3C] display arp timer aging
Current ARP aging time is 30 minute(s)
[H3C] undo arp timer aging
[H3C] display arp timer aging
Current ARP aging time is 20 minute(s)(default)
2.1.7 naturemask-arp
Syntax
naturemask-arp enable
undo naturemask-arp enable
View
System view
Parameter
None
Description
Use the naturemask-arp enable command to support ARP within natural network
segments rather than subnets.
Use the undo naturemask-arp enable command to disable the support to ARP within
natural network segments.
Example
# Enable ARP within natural network segments.

[H3C] naturemask-arp enable
2.1.8 reset arp
Syntax
reset arp [ all | dynamic | static | interface interface-type interface-number ]
View
User view
2-5
Parameter
all: Indicates to clear all ARP entries.

dynamic: Indicates to clear the dynamic ARP entries.
static: Indicates to clear the static ARP entries.
interface: Indicates the selected interface.
interface-number: Interface sequence number.
Description
Use the reset arp command to clear the ARP entries in the ARP mapping table.
When operation is performed to the interface with specified interface, the interface
type can only be Ethernet, GE or virtual Ethernet and only the dynamic entries can be
deleted on the interface.
Related command: arp static and display arp.
Example
# The following example shows how to delete the dynamic entries in the ARP mapping
table on Ethernet 0/0/0.
<H3C> reset arp interface Ethernet 0/0/0
2.2 Proxy ARP Configuration Commands

2.2.1 arp-proxy enable
Syntax
arp-proxy enable
undo arp-proxy enable
View
Parameter
None
Description
Use the arp-proxy enable command to enable proxy ARP on an interface.

Use the undo arp-proxy enable command to disable proxy arp on the interface.
By default, the proxy ARP is disabled.
2-6
This command is applied on Ethernet interface. As for the hosts in the same hop but on
different physical networks, the proxy ARP function hides the fact that the physical
network are separated, and makes the user feel like he is on the same and one physical
network.
Example
# Enable proxy ARP at Ethernet 0/0/0.

[H3C-Ethernet0/0/0] arp-proxy enable
2.3 Gratuitous ARP Configuration Commands

2.3.1 arp send-gratuitous-arp
Syntax
arp send-gratuitous-arp seconds

undo arp-gratuitous-arp
View
Ethernet interface view, Ethernet subinterface view, Gigabit Ethernet interface view,
Gigabit Ethernet subinterface view, bridge template view, VLAN interface view or virtual
Parameter
seconds: Period of sending gratuitous ARP packet, in second.
Description
Use the arp send-gratuitous-arp command to enable sending gratuitous ARP packet
on this interface periodically and set the sending period.
Use the undo arp send-gratuitous-arp command to disable the function,
By default, the function is disabled.
Note that:
z The gratuitous ARP packet sent is that of the host address of this interface. The
host address can be configured with the command, or obtained through
negotiation or other ways;
z The gratuitous ARP packet of host address is not sent;
z The gratuitous ARP packet is not sent when the interface link layer is not up.
Example
# Enable sending gratuitous ARP packet periodically on the interface Ethernet0/0/0,

and set the sending period to be 1 second.
[H3C-Ethernet0/0/0]arp send-gratuitous-arp 1
2-7
2.3.2 gratuitous-arp-learning enable
Syntax
gratuitous-arp-learning enable
undo gratuitous-arp-learning enable
View
System view
Parameter
None
Description
Use the gratuitous-arp-learning enable command to enable the address learning

function of gratuitous ARP.
Use the undo gratuitous-arp-learning enable command to disable the address
learning function of gratuitous ARP.
By default, the address learning function of gratuitous ARP is disabled.
By sending gratuitous ARP messages, a network device can:
z Check for IP address conflicts with other devices.
z Update its current hardware address to the caches on other devices if a hardware
address change has occurred for example, after the device reconnected to the
network with a new interface card.
Related command: debugging arp packet.
Example
# Enable the address learning function of gratuitous ARP.

<H3C> system-view
[H3C] gratuitous-arp-learning enable
2.3.3 gratuitous-arp-sending enable
Syntax
gratuitous-arp-sending enable
undo gratuitous-arp-sending enable
View
System view
2-8
Parameter
None
Description
Use the gratuitous-arp-sending enable command to configure the system to return

gratuitous ARP responses when receiving ARP packets from other network segments.
The system, however, does not learn the received ARP entries.
Use the undo gratuitous-arp-sending enable command to disable the system to
respond to ARP requests from other network segments.
By default, the system does not return ARP responses when receiving gratuitous ARP
packets from different network segments.
Example
# Configure the system to return ARP responses when receiving gratuitous ARP
packets from different network segments.
[H3C] gratuitous-arp-sending enable
2.4 Authorized ARP Configuration Commands

2.4.1 arp security
Syntax
arp security
undo arp security
View
Parameter
None
Description
Use the arp security command to disable dynamic ARP learning on an Ethernet
interface.
Use the undo arp security command to restore dynamic ARP learning on an Ethernet
interface.
The commands for disabling/enabling dynamic ARP learning are configured on an
interface; all other interfaces are not affected.
2-9
If you disable dynamic ARP learning and then enable the function again, the ARP
entries left in the ARP table are not affected; each of the left entries continues with its
own aging process.
By default, dynamic ARP learning is enabled on an Ethernet interface.
Example
# Disable dynamic ARP learning on Ethernet interface Ethernet1/0/0.

[H3C-Ethernet1/0/0] arp security
2.4.2 arp security time-out
Syntax
arp security time-out seconds

undo arp security time-out
View
Parameter
seconds: Aging time of the authorized ARP entries in seconds. It ranges from 30 to
86,400 and defaults to 90.
Description
Use the arp security time-out command to configure the aging time of the authorized
ARP entries.
Use the undo arp security time-out command to restore the default aging time of the
authorized ARP entries.
This command takes effect only when you have configured the arp security command.
The aging of an authorized ARP entry is implemented by the mechanism of ARP ping.
The default aging time of an authorized ARP entry is the time that three ARP ping
operations takes when no responses are received. Since the ARP ping interval is 30
seconds, the default aging time of an authorized ARP entry is 90 seconds. If no
response is received for an authorized ARP entry or if the DHCP server fails to update
the entry by re-adding the entry for example, after 90 seconds elapse, the entry ages
out. The DHCP server is then notified of this.
Example
# Configure an aging time of 120 seconds for the authorized ARP entries on interface
Ethernet1/0/0.
[H3C-Ethernet1/0/0] arp security time-out 120
2-10
2.4.3 dhcp server synchronize arp (in Interface View)
Syntax
dhcp server synchronize arp

undo dhcp server synchronize arp
View
Interface view
Parameter
None
Description
Use the dhcp server synchronize arp command to enable authorized ARP for a
DHCP interface address pool.
Use the undo dhcp server synchronize arp command to disable authorized ARP for
a DHCP interface address pool.
By default, authorized ARP is disabled.
After you enable authorized ARP for a DHCP interface address pool, the system
permits IP addresses allocated from the interface address pool to be resolved
dynamically using ARP, and allows the corresponding authorized ARP entries to be
added to the ARP table.
Related command: dhcp select interface, dhcp server synchronize arp interface,
and synchronize arp.
Example
# Enable authorized ARP in interface view.

[H3C-Ethernet 1/0/0] dhcp server synchronize arp
2.4.4 dhcp server synchronize arp interface (in System View)
Syntax
dhcp server synchronize arp { interface interface-type interface-number [ to

interface-type interface-number | all }
undo dhcp server synchronize arp { interface interface-type interface-number [ to
interface-type interface-number | all }
View
System view
2-11
Parameter
interface-type interface-number [ to interface-type interface-number ]: Indicates all

subinterfaces from the first specified subinterface to the second (including these two
subinterfaces). Note that the interfaces must be Ethernet interfaces or virtual Ethernet
interfaces.
all: Indicates all interfaces.
Description
Use the dhcp server synchronize arp interface command to enable authorized ARP
for specified DHCP interface address pools.
Use the undo dhcp server domain-name interface command to disable authorized
ARP for specified DHCP interface address pools.
After you enable authorized ARP for the specified DHCP interface address pools, the
system permits IP addresses allocated from the interface address pools to be resolved
dynamically using ARP, and allows the corresponding authorized ARP entries to be
added to the ARP table.
Note that you cannot use the display current-configuration command to verify the
configuration made by using the dhcp server synchronize arp interface command,
which is implemented by executing the dhcp server synchronize arp command
repeatedly.
Related command: dhcp server ip-pool.
Example
# Enable authorized ARP for interfaces from Ethernet2/0/0.1 to Ethernet2/0/0.5.

[H3C] dhcp server synchronize arp interface ethernet 2/0/0.1 to ethernet
2/0/0.5
2.4.5 synchronize arp
Syntax
synchronize arp
undo synchronize arp
View
Global DHCP address pool view
Parameter
None
2-12
Description
Use the synchronize arp command to enable authorized ARP for global DHCP
address pools.
Use the undo synchronize arp command to disable authorized ARP that has been
enabled for global DHCP address pools.
After you enable authorized ARP for global DHCP address pools, the system permits IP
addresses allocated from the global address pools to be resolved dynamically using
ARP, and allows the corresponding authorized ARP entries to be added to the ARP
table.
Example
# Enter global address pool view and enable authorized ARP.

[H3C] dhcp sever ip-pool arp
[H3C-dhcp-pool-arp] synchronize arp
2-13
Comware V3 Chapter 3 DNS Configuration Commands
Chapter 3 DNS Configuration Commands
3.1 Static DNS Configuration Commands

3.1.1 display ip host
Syntax
display ip host
View
Any view
Parameter
None
Description
Use the display ip host command to display all the host names and their
corresponding IP addresses.
Example
# Display all the host names and their corresponding IP addresses.

<H3C> display ip host
Host Age Flags Address
eth 0 static 6.1.1.1
H3C0 static 1.1.1.1
Table 3-1 Description on the fields of the display ip host command
Field Description
Host Host name
Age Life time. It is 0 for a static entry.
Flags Domain name resolution type, for example, static
Address Host address
3.1.2 ip host
Syntax
ip host hostname ip-address
3-1
undo ip host hostname [ ip-address ]
View
System view
Parameter
hostname: The name of a host, a character string with its length from 1 to 20. It can be
a digit from 0 to 9, a capital letter from A to Z or a small letter from a to z. Other
characters are invalid. At least one letter must be contained in the host name.
ip-address: The IP address corresponding to a host name.
Description
Use the ip host command to configure the IP address corresponding to a host name.
Use the undo ip host command to remove the IP address corresponding to a host
name.
A hostname can be mapped to one IP address only.
By default, the static domain name table is empty, that is, no hostname-to-IP map.
Example
# Configure the IP address corresponding to the host name router1 as 10.110.0.1.

[H3C] ip host router1 10.110.0.1
# Configure the IP address corresponding to the host name router2 as 10.110.0.2.

# Configure to assign the IP address 10.110.0.3 to the host name router3.

# Remove the IP address 10.110.0.2 corresponding to the host name router2.

[H3C] undo ip host router2 10.110.0.2
3.2 DNS Client Configuration Commands

3.2.1 debugging dns
Syntax
debugging dns
undo debugging dns
View
User view
3-2
Parameter
None
Description
Use the debugging dns command to enable DNS client debugging.

Use the undo debugging dns command to disable DNS client debugging.
By default, DNS client debugging is disabled.
Example
# Enable DNS client debugging.

<H3C> debugging dns
# Disable DNS client debugging.

<H3C> undo debugging dns
3.2.2 dns resolve
Syntax
dns resolve
undo dns resolve
View
System view
Parameter
None
Description
Use the dns resolve command to enable DNS resolving.

Use the undo dns resolve command to disable DNS resolving.
By default, DNS resolving is disabled.
Example
# Enable DNS resolving.

[H3C] dns resolve
3.2.3 dns server
Syntax
dns server ip-address
3-3
undo dns server [ ip-address ]
View
System view
Parameter
ip-address: IP address of a DNS server.
Description
Use the dns server command to configure IP address of a DNS server.

Use the undo dns server command to delete IP address of a DNS server.
Example
# Configure IP address of a DNS server.

[H3C] dns server 10.110.66.1
# Delete IP address of a specified DNS server.

[H3C] undo dns server 10.110.66.1
# Delete IP addresses of all the DNS servers.

[H3C] undo dns server
3.2.4 dns domain
Syntax
dns domain domain-name

undo dns domain [ domain-name ]
View
System view
Parameter
domain-name: DNS domain name.
Description
Use the dns domain command to configure a DNS domain name.

Use the undo dns domain command to delete one or all DNS domain names.
Example
# Configure a DNS domain name.

[H3C] dns domain huawei-3com.com
# Delete a specified DNS domain name.
3-4
[H3C] undo dns domain huawei-3com.com
# Delete all the DNS domain names.

[H3C] undo dns domain
3.2.5 display dns domain
Syntax
display dns domain [dynamic]
View
Any view
Parameter
dynamic: displays DNS domain names that are dynamically obtained using DHCP.
Description
Use the display dns domain command to view the DNS domain names that are
manually configured.
Use the display dns domain dynamic command to view the DNS domain names that
are dynamically obtained through DHCP or other protocols.
Example
# Display the DNS domain names that are manually configured.

[H3C] display dns domain
No Domain-name
0 huawei-3com.com
# Display the DNS domain names that are dynamically obtained.

[H3C]display dns domain dynamic
No Domain-name
0 huawei-3com.com
3.2.6 display dns server
Syntax
display dns server [ dynamic ]
View
Any view
3-5
Parameter
dynamic: displays DNS server addresses that are dynamically obtained through
DHCP or other protocols.
Description
Use the display dns server command to view the DNS server addresses manually
configured.
Use the display dns server dynamic command to view the DNS server addresses
that are dynamically obtained through DHCP or other protocols.
Example
# Display the DNS server addresses that are dynamically obtained.

[H3C]display dns server dynamic
Domain-server IpAddress
0 10.72.66.36
# Display the DNS server addresses that are manually configured.

[H3C]display dns server
Domain-server IpAddress
0 10.72.74.5
3.2.7 display dns dynamic-host
Syntax
display dns dynamic-host
View
Any view
Parameter
None
Description
Use the display dns dynamic-host command to view the current contents in the
domain name cache of the DNS client.
The DNS client retains the result of each successful domain name resolution in its
cache. If it receives the same resolving request later, it first looks up the cache for a
match. And if no match is found, it sends a domain name resolving request to the DNS
server. You can use this command to view the current contents in the buffer.
3-6
Example
# Display the current contents in the domain name cache of the DNS client.
[H3C]display dns dynamic-host
No Host --Æ Ipaddress TTL Alias
1 www.sohu.com 91.1.1.1 3521
2 www.sina.com.cn 87.1.1.1 3000
No Host Å-- Ipaddress TTL Alias

1 www.163.com 191.1.1.1 3561
2 www.263.com 187.1.1.1 3300
Note:
The first part of the output is the result of Class A query, or the result queried by host;
the second part of the output is the result of PTR class query, or the result queried by IP
address.
3.2.8 nslookup type
Syntax
nslookup type { ptr ip-address | a domain-name }
View
Any view
Parameter
ptr ip-address: Resolves the specified IP address to a domain name.

a domain-name: Resolves the specified domain name to an IP address. The domain
name is a string of up to 30 characters. Automatic domain name appending is
supported.
Description
Use the nslookup type command to resolve the specified IP address or domain name
to a domain name or IP address.
Example
# Resolve the address 192.168.3.2 to a domain name.

<H3C> nslookup type ptr 192.168.3.2
Trying DNS server (10.72.66.36)
3-7
Name: www.huawei-3com.com
Address: 192.168.3.2
# Resolve www.huawei-3com.com to an IP address.

<H3C> nslookup type a www.huawei-3com.com
Trying DNS server (10.72.66.36)
Name: www.huawei-3com.com
Address: 192.168.3.2
3.2.9 reset dns dynamic-host
Syntax
reset dns dynamic-host
View
User view
Parameter
None
Description
Use the reset dns dynamic-host command to clear the current contents in the domain
name cache of the DNS client.
Example
# Clear the current contents in the domain name cache of the DNS client.
<H3C> reset dns dynamic-host
3.3 DNS Proxy Configuration Commands

3.3.1 dns-proxy enable
Syntax
dns-proxy enable
undo dns-proxy enable
View
System view
Parameter
None
3-8
Description
Use the dns-proxy enable command to enable DNS proxy.

Use the undo dns-proxy enable command to disable DNS proxy.
By default, DNS proxy is disabled.
Example
# Enable DNS proxy on the router.

[H3C] dns-proxy enable
3-9
Comware V3 Chapter 4 DDNS Configuration Commands
Chapter 4 DDNS Configuration Commands
4.1 DDNS Configuration Commands

4.1.1 ddns-server
Syntax
ddns-server 3322.org
undo ddns-server
View
System view
Parameter
3322.org: Sets the DDNS service provider to 3322.org.
Description
Use the ddns-server command to specify a DDNS service provider and enter its view.
At present, only 3322.org is available.
Use the undo ddns-server command to delete the configured DDNS service provider.
By default, no DDNS service provider is configured.
Example
# Set the DDNS service provider to 3322.org.

[H3C] ddns-server 3322.org
4.1.2 ddns username
Command
ddns username name

undo ddns username
View
DDNS configuration view
Parameter
name: User name used for accessing the DDNS service provider. It is a string of 1 to 30
characters.
4-1
Description
Use the ddns username command to configure a user name for accessing the DDNS
service provider.
Use the undo ddns username command to delete the user name used for accessing
the DDNS service provider.
By default, no user name is specified for accessing the DDNS service provider.
Example
# Set the user name used for accessing the DDNS service provider to 3322.org.
[H3C-ddns-3322.org] ddns username admin
4.1.3 ddns password
Syntax
ddns password password

undo ddns password
View
Parameter
password: Password used to access the DDNS service provider. The length of
character string is 1 to 30.
Description
Use the ddns password command to configure a password for accessing the DDNS
service provider.
Use the undo ddns password command to delete the password used for accessing
the DDNS service provider.
By default, no password is configured for accessing the DDNS service provider.
Example
# Set the password used to access the DDNS service provider to h3c.
[H3C-ddns-3322.org] ddns password h3c
4.1.4 ddns domainname
Syntax
ddns domainname name

undo ddns domainname
4-2
View
Parameter
name: Domain name whose domain name-to-IP address mapping can be updated on
DNS by using the service of the DDNS service provider. It is a string of 1 to 30
characters.
Description
Use the ddns domain name command to configure a domain name whose domain
name-to-IP address mapping on DNS needs update by using the service of the DDNS
service provider.
Use the undo ddns domainname to delete the configured domain name.
By default, no domain name is configured.
Related command: ddns refresh.
Example
# Configure domain name www.h3c.com, allowing its domain name-to-IP address

mapping to be updated on DDS by using the service of the DDNS service provider.
[H3C-ddns-3322.org] ddns domainname www.h3c.com
4.1.5 ddns source-interface
Syntax
ddns source-interface interface-type interface-number

undo ddns source-interface
View
Parameter
interface-type: Type of the interface used for accessing the DDNS service provider.
interface-number: Number of the interface used for accessing the DDNS service
provider.
Description
Use the ddns source-interface command to configure the interface used for
accessing the DDNS service provider.
Use the undo ddns source-interface to delete the interface used for accessing the
DDNS service provider.
4-3
By default, no interface is configured for accessing the DDNS service provider.
Example
# Set the interface used for accessing DDNS service provider 3322.org to Ethernet
1/0/0.
[H3C-ddns-3322.org] ddns source-interface ethernet1/0/0
4.1.6 ddns refresh
Syntax
ddns refresh
View
Parameter
None
Description
Use the ddns refresh command to request the DDNS service provider to notify the
DNS server that the bound IP address of the domain name specified by the ddns
domainname command has changed.
Related command: ddns domainname.
Example
# Request DDNS service provider 3322.org to notify the DNS server that the bound IP
address of the domain name specified by the ddns domainname command has
changed.
[H3C-ddns-3322.org] ddns refresh
4-4
Comware V3 Chapter 5 URPF Configuration Commands
Chapter 5 URPF Configuration Commands
5.1 URPF Configuration Commands

5.1.1 ip urpf
Syntax
ip urpf { strict | loose } [ allow-default-route ] [ acl acl-number ]

undo ip urpf
View
Interface view
Parameter
strict: Strict check. The packet’s source address must be in the router’s FIB table. It
searches reversely for outgoing interfaces for the packet. At least one outgoing address
must match the packet’s incoming interface; otherwise URPF rejects the packet.
loose: Loose check. The only requirement is that the packet’s source address is in the
router’s FIB table; otherwise URPF rejects the packet.
allow-default-route: Allows special treatment for the default route. When the default
route and the allow-default-route parameters are both configured, the principles of
strict check and loose check change.
acl-number: ACL number, ranges from 2000 to 3999.
Description
Use the ip urpf command to enable URPF check on the interface.

Use the undo ip urpf command to disable URPF check.
By default, URPF is disabled.
Example
# Enable strict URPF check on Ethernet2/2/0, allow special treatment for the default
route, and set ACL number to 2999.
[H3C-Ethernet2/2/0] ip urpf strict allow-default-route acl 2999
5.1.2 debugging ip urpf
Syntax
debugging ip urpf discards [ interface interface-type interface-number ]
5-1
Comware V3 Chapter 5 URPF Configuration Commands
undo debugging ip urpf discards [ interface interface-type interface-number ]
View
User view
Parameter
interface-type interface-number: Interface name. If not specified, it represents all the

interfaces.
Description
Use the debugging ip urpf command to display the information on the discarded
packets by URPF debugging. .
Use the undo debugging ip urpf command to disable the function.
Example
# Suppose URPF is enabled on Ethernet2/2/0, configure as follows to display the

information on the rejected packets.
<H3C> debugging ip urpf discards interface Ethernet2/2/0
5-2
Comware V3 Chapter 6 IP Accounting Configuration Commands
Chapter 6 IP Accounting Configuration

Commands
6.1 IP Accounting Configuration Commands

6.1.1 debugging ip count
Syntax
debugging ip count { data | error | all }

undo debugging ip count { data | error | all }
View
User view
Parameter
data: Enables data procedure debugging.

all: Enables all debugging.
Description
Use the debugging ip count command to enable debugging for the IP Accounting
module (the IP Accounting).
Use the undo debugging ip count command to disable debugging for the IP
Accounting.
By default, debugging for the IP Accounting is disabled.
Table 6-1 Description on the fields of the debugging ip count data command
Field Description
IPA_In: Begin processing of IPA is enabled on the router. An IP
inbound-packet. packet arrived at the router.
Protocol:1 Direction: 10.153.72.1 --> IPA is enabled on the router. An IP
10.153.72.150 From:Ethernet0/0/0 packet arrived at the router.
IPA is enabled on the router. An IP
packet arrived at the router and passed
Dealing with the inbound-packet the firewall on the inbound interface.
permitted by the firewall.
Counting of inbound packets is enabled
on the interface.
6-1
Field Description
IPA is enabled on the router. An IP
packet arrived at the router and denied
Dealing with the packet denied by the by the firewall on the inbound interface.
firewall.
Counting of denied inbound packets is
enabled on the interface.
IPA is enabled on the router.
IPA_In: Finish processing of
inbound-packet. The inbound IP packet was counted
correctly.
IPA_Out: Begin processing of IPA is enabled on the router.

outbound-packet. An outbound IP packet was present.
Protocol:1 Direction: 10.153.72.150 --> IPA is enabled on the router.

10.153.72.1 To:Ethernet0/0/0 An outbound IP packet was present.
An outbound IP packet was present and
Dealing with the outbound-packet
Counting of permitted outbound packets
is enabled on the outbound interface.

An outbound IP packet was present and
Dealing with the packet denied by the then denied by the firewall on the
firewall. outbound interface.
Counting of denied outbound packets is
enabled on the outbound interface.
IPA_Out: Finish processing of
outbound-packet. The outbound IP packet was counted
correctly.
Note:
IPA – IP Accounting
Inbound (or outbound) IP packets include both legitimate IP packets and illegitimate
IP packets.
In this chapter, legitimate packets refer to IP packets permitted by the firewall;
illegitimate packets refer to IP packets denied by the firewall.
Table 6-2 Description on the fields of the debugging ip count error command
Field Description
Failed to allocate memory Memory allocation failed.
Null parameter inputted while clearing
Delete a null protocol entry.
protocol hash list.
Error: Deleting address node failed The system failed to delete an address
because of giving a NULL pointer! node because of a null pointer.
6-2
Field Description
Error(IPA_In): Failed to get ip control No IP control block pointer available on
block pointer! the incoming interface.
When counting a legitimate inbound IP
Error(IPA_In): Failed to create address
packet, the system failed to create an
hash node and protocol hash node.
address node and a protocol node for it.
When counting a legitimate inbound IP
Error(IPA_In): Failed to create protocol
packet, the system failed to create a
hash node.
protocol node for it.
When counting an illegitimate inbound
Error(IPA_In): Failed to create firewall
IP packet, the system failed to create a
hash node and its sub-node.
counting node for it.
Error(IPA_In): No inbound statistic Counting of inbound IP packets is not
function available on this interface! enabled on the inbound interface.
Error(IPA_Out): Failed to get ip control No IP control block is available with the
block pointer! outbound interface.
Error(IPA_Out): Failed to create address
IP packet, the system failed to create an
hash node and protocol hash node.
address node and a protocol node for it.
Error(IPA_Out): Failed to create protocol
hash node.
protocol node for it.
When counting an illegitimate outbound
Error(IPA_Out): Failed to create firewall
hash node and its sub-node.
counting node for it.
Error(IPA_Out): No outbound statistic Counting of outbound IP packets is not
function available on this interface! enabled on the inbound interface.
An improper rule is configured. The
Improper rule,the result of (IPAddress &
result of anding the input IP address with
Mask) is equal to zero!
its mask is zero.
The rule-list is full! The rule list is full.
Example
# Enable data and error debugging for the IP Accounting.

<H3C> debugging ip count all
# Disable all debugging for the IP Accounting.

<H3C> undo debugging ip count all
6-3
6.1.2 display ip count
Syntax
display ip count { inbound-packets | outbound-packets } { interior | exterior |

firewall-denied }
View
Any view
Parameter
inbound-packets: Displays information about inbound IP packets.

outbound-packets: Displays information about outbound IP packets.
firewall-denied: Displays information about denied IP packets.
interior: Displays information about the IP packets in the interior hash table. The
interior hash table records rule-matching legitimate packets.
exterior: Displays information about the IP packets in the exterior hash table. The
exterior hash table records the legitimate packets not matching the rule.
Description
Use the display ip count command to display IP packet statistics gathered by the IP
Accounting.
Example
# Display information about the legitimate inbound IP packets not matching any IP
accounting rule.
[H3C] display ip count inbound-packets exterior
Inbound packets information in exterior list:
SrcIP DstIP Protocol Pkts Bytes
0.0.0.0 255.255.255.255 UDP 28 9502
10.153.72.181 10.153.73.255 UDP 174 38034
10.153.72.137 239.255.255.250 UDP 4 644
10.153.72.141 224.0.0.2 IGMP 4 128
10.153.72.141 224.0.0.9 UDP 4 208
10.153.72.141 224.0.0.9 IGMP 4 128
Table 6-3 Description on the fields of the display ip count command
Field Description
SrcIP: The source address of a packet
DstIP: The destination address of a packet
Pkts The number of packets
6-4
Field Description
Bytes The number of bytes
Protocol The protocol type of a packet
6.1.3 display ip count rule
Syntax
display ip count rule
View
Any view
Parameter
None
Description
Use the display ip count rule command to display IP accounting rules.
Example
# Display IP accounting rules.

[H3C] display ip count rule
IP Count rule list:
IP address address mask
192.168.0.0 255.255.255.0
1.0.0.0 255.0.0.0
------------------------------------
Total: 2 rules
6.1.4 ip count enable
Syntax
ip count enable
undo ip count enable
View
System view
Parameter
None
6-5
Description
Use the ip count enable command to enable IP accounting.

Use the undo ip count enable command to disable IP accounting.
By default, IP accounting is disabled.
Example
# Enable IP accounting.
[H3C] ip count enable
6.1.5 ip count exterior-threshold
Syntax
ip count exterior-threshold number

undo ip count exterior-threshold
View
System view
Parameter
number: Maximum number of entries in the exterior hash table, in the range 0 to 8192.
Description
Use the ip count exterior-threshold command to configure maximum number of

entries in the exterior hash table, with each entry for an IP packet that does not match
any IP accounting rule.
Use the undo ip count exterior-threshold command to restore the default value, that
is, 0. When doing this, you are prompted to clear the table first if the number of entries
that already existed in the table exceeds the default.
By default, maximum number of entries in the exterior hash table is 0.
Example
# Set maximum number of entries in the exterior hash table to 100.

[H3C] ip count exterior-threshold 100
# Restore the default maximum number of entries in the exterior hash table.
[H3C] undo ip count exterior-threshold
6-6
6.1.6 ip count firewall-denied
Syntax
ip count firewall-denied { inbound-packets | outbound-packets }

undo ip count firewall-denied { inbound-packets | outbound-packets }
View
Interface view
Parameter
inbound-packets: Counts the inbound IP packets denied by the firewall on the current
interface.
outbound-packets: Counts the outbound IP packets denied by the firewall on the
current interface.
Description
Use the ip count firewall-denied command to configure the IP Accounting to count the
IP packets denied by the firewall on the current interface.
Use the undo ip count firewall-denied command to restore the default.
By default, IP packets denied by the firewall are not counted on the current interface.
Information about counted IP packets is stored in the firewall-list table.
Example
# Configure the IP Accounting to count the outbound IP packets denied by the firewall
on the current interface.
[H3C-Ethernet0/0/0] ip count firewall-denied outbound-packets
# Configure the IP Accounting not to count the outbound IP packets denied by the
firewall on the current interface.
[H3C-Ethernet0/0/0] undo ip count firewall-denied outbound-packets
6.1.7 ip count inbound-packets
Syntax
ip count inbound-packets
undo ip count inbound-packets
View
Interface view
6-7
Parameter
None
Description
Use the ip count inbound-packets command to configure the IP Accounting to count

inbound IP packets on the current interface.
Use the undo ip count inbound-packets command to configure the IP Accounting to
By default, inbound IP packets on the interface are not counted.
When counting inbound IP packets on the interface, the IP Accounting assigns them to
the exterior hash table or the interior hash table according to rules in the IP accounting
list.
Example
# Configure the IP Accounting to count inbound IP packets on the interface.

[H3C-Ethernet0/0/0] ip count inbound-packets
# Configure the IP Accounting to count inbound IP packets on the interface.

[H3C-Ethernet0/0/0] undo ip count inbound-packets
6.1.8 ip count interior-threshold
Syntax
ip count interior-threshold number

undo ip count interior-threshold
View
System view
Parameter
number: Maximum number of entries in the interior hash table, in the range 0 to 16,384.
Description
Use the ip count interior-threshold command to configure maximum number of

entries in the interior hash table, with each entry for an IP packet matching the IP
accounting rule.
Use the undo ip count interior-threshold command to restore the default. When
doing this, you are prompted to clear the table first if the number of entries in the table is
greater than the default.
By default, maximum number of entries in the interior hash table is 512.
6-8
Example
# Set maximum number of entries in the interior hash table to 1,000.

[H3C] ip count interior-threshold 1000
# Restore the default maximum number of entries in the interior hash table.
[H3C] undo ip count interior-threshold
6.1.9 ip count outbound-packets
Syntax
ip count outbound-packets
undo ip count outbound-packets
View
Interface view
Parameter
None
Description
Use the ip count outbound-packets command to configure the IP Accounting to count

outbound IP packets on the current interface.
Use the undo ip count outbound-packets command to restore the default.
By default, outbound IP packets on the interface are not counted.
When counting outbound IP packets on the interface, the IP Accounting assigns them
to the exterior hash table or the interior hash table according to the IP count rule list.
Example
# Configure the IP Accounting to count outbound IP packets on an interface.

[H3C-Ethernet0/0/0] ip count outbound-packets
# Configure the IP Accounting not to count outbound IP packets on an interface.

[H3C-Ethernet0/0/0] undo ip count outbound-packets
6.1.10 ip count rule
Syntax
ip count rule ip-address net-mask

undo ip count rule [ ip-address net-mask ]
6-9
View
System view
Parameter
ip-address: Interface IP address, in dotted decimal format. It cannot be a loopback

address.
net-mask: Subnet mask, in dotted decimal notation or using mask length.
Description
Use the ip count rule command to configure IP accounting rules.

Use the undo ip count rule command to delete the specified or all IP accounting rules.
When counting packets, the IP Accounting follows these conventions:
z If the source or destination IP address of an IP packet matches a network segment
address in the table, information about the packet is recorded in the interior hash
table as a legitimate packet (packet permitted by the firewall) matching the rule.
z If neither of the addresses has a match, the packet is recorded in the exterior hash
table as a legitimate packet not matching the rule.
z If the packet is denied by the firewall when it arrives at an interface, its information
is recorded in the firewall-denied hash table as illegitimate.
By default, no IP accounting rule is configured in the system.
You may configure 32 rules at most.
Example
# Configure an IP accounting rule.

[H3C] ip count rule 169.254.10.1 255.255.0.0
# Remove an IP accounting rule.

[H3C] undo ip count rule 169.254.10.1 16
# Remove all IP accounting rules.

[H3C] undo ip count rule
6.1.11 ip count timeout
Syntax
ip count timeout minutes

undo ip count timeout
View
System view
6-10
Parameter
minutes: Aging time of IP accounting entries, in the range 60 to 10,080 minutes.
Description
Use the ip count timeout command to configure the aging time of IP accounting
entries.
Use the undo ip count timeout command to restore the default aging time, that is, 720
minutes or 12 hours.
If an IP accounting entry does not receive a new IP packet before its aging time expires,
the entry is considered expired and then deleted.
Example
# Set the aging time of IP accounting entries to 100 minutes.

[H3C] ip count timeout 100
# Restore the default aging time of IP accounting entries.

[H3C] undo ip count timeout
6.1.12 reset ip count
Syntax
reset ip count { interior | exterior | firewall-denied | all }
View
User view
Parameter
firewall-denied: Information about the IP packets denied by the firewall.

interior: Information about the IP packets in an interior hash table.
exterior: Information about the IP packets in an exterior hash table.
all: All IP accounting tables.
Description
Use the reset ip count command to clear information that the IP Accounting retained
about IP packets.
Example
# Clear all IP accounting tables.

<H3C> reset ip count all
6-11
Comware V3 Chapter 7 UDP Helper Configuration Commands
Chapter 7 UDP Helper Configuration Commands
7.1 UDP Helper Configuration Commands

7.1.1 debugging udp-helper
Syntax
debugging udp-helper { event | packet [ receive | send ] }

undo debugging udp-helper { event | packet [ receive | send ] }
View
User view
Parameter
event: UDP Helper event debugging.

packet: UDP Helper packet debugging.
receive: UDP Helper inbound packet debugging.
send: UDP Helper outbound packet debugging.
Description
Use the debugging udp-helper command to enable UDP Helper debugging.

Use the undo debugging udp-helper command to disable UDP Helper debugging.
By default, UDP Helper debugging is disabled.
Example
# Enable UDP Helper packet debugging.

<H3C> debugging udp-helper packet
7.1.2 display udp-helper server
Syntax
display udp-helper server [interface number ]
View
Any view
Parameter
number: Ethernet interface number.
7-1
Description
Use the display udp-helper server command to display the information about the
destination servers associated with the specified or all Ethernet interfaces.
Example
# Display the information about the destination servers associated with Ethernet
interface 0/0/0.
<H3C> display udp-helper server interface ethernet 0/0/0
interface name server address packets send
ethernet0/0/0 192.1.1.2 0
7.1.3 udp-helper enable
Syntax
udp-helper enable
undo udp-helper enable
View
System view
Parameter
None
Description
Use the udp-helper enable command to enable UDP Helper.

Use the undo udp-helper enable command to disable UDP Helper.
By default, UDP Helper is disabled.
Example
# Enable UDP Helper.

[H3C] udp-helper enable
7.1.4 udp-helper port
Syntax
udp-helper port { port | dns | netbios-ds | netbios-ns | tacacs | tftp | time }

undo udp-helper port { port | dns | netbios-ds | netbios-ns | tacacs | tftp | time }
View
System view
7-2
Parameter
port: UDP port number in the UDP broadcasts to be forwarded. It ranges from 1 to
65,535.
dns: Domain name service, corresponding to UDP port 53.
netbios-ds: NetBIOS datagram service, corresponding to UDP port 138.
netbios-ns: NetBIOS name service, corresponding to UDP port 137.
tacacs: TACACS, corresponding to UDP port 49.
tftp: Trivial file transfer protocol, corresponding to UDP port 69.
time: Time service, corresponding to UDP port 37.
Description
Use the udp-helper port command to specify the UDP port number in the UDP
broadcasts to be forwarded.
Use the undo udp-helper port command to disable the system to forward the UDP
broadcasts with the specified UDP port number.
Example
# Configure the system to forward the UDP broadcasts with the UDP port number of
DNS.
[H3C] udp-helper port dns
7.1.5 udp-helper server
Syntax
udp-helper server ip-address

undo udp-helper server [ip-address ]
View
Parameter
ip-address: IP address of the destination server, in dotted decimal format.
Description
Use the udp-helper server command to configure the destination server to which the
UDP broadcasts received on the interface are forwarded.
Use the undo udp-helper server command to remove the configured destination
server.
By default, no destination server is configured.
7-3
Related command: display udp-helper server.
Example
# Configure the system to forward all UDP broadcasts received on interface Ethernet
0/0/0 to 192.1.1.2.
[H3C-ethernet 0/0/0] udp-helper server 192.1.1.2
7-4
Comware V3 Chapter 8 BOOTP Client Configuration Commands
Chapter 8 BOOTP Client Configuration Commands
8.1 BOOTP Client Configuration Command

8.1.1 display bootp client
Syntax
display bootp client [ interface interface-type interface-number ]
View
Any view
Parameter

number.
Description
Use the display bootp client command to display information about the BOOTP client,
such as MAC address and IP address.
Example
# Display information about the BOOTP client.

[H3C] display bootp client interface ethernet0/0/0
Interface ethernet0/0/0:
Allocated IP: 169.254.0.2 255.255.0.0
Transaction ID = 0x3d8a7431
Mac Address 00e0-fc0a-c3ef
Table 8-1 Description on the fields of the display bootp client command
Field Description
Ethernet 0/0/0 interface is configured to obtain IP
Interface ethernet0/0/0
address from a BOOTP server.
Allocated IP IP address obtained from the BOOTP server
Transaction ID XID field in the BOOTP packet
Mac Address MAC address of the BOOTP client
8-1
Comware V3 Chapter 8 BOOTP Client Configuration Commands
8.1.2 ip address bootp-alloc
Syntax
ip address bootp-alloc
undo ip address bootp-alloc
View
Parameter
None
Description
Use the ip address bootp-alloc command to configure the Ethernet interface to obtain
IP address using BOOTP.
Use the undo ip address bootp-alloc command to disable the Ethernet interface to
obtain IP address using BOOTP.
By default, the Ethernet interface does not obtain IP address using BOOTP.
Example
# Configure interface Ethernet 0/0/0 to obtain IP address using BOOTP.

[H3C-Ethernet 0/0/0] ip address bootp-alloc
8-2
Comware V3 Chapter 9 DHCP Configuration Commands
Chapter 9 DHCP Configuration Commands
9.1 DHCP Public Configuration Commands

9.1.1 dhcp enable
Syntax
dhcp enable
undo dhcp enable
View
System view
Parameter
None
Description
Use the dhcp enable command to enable DHCP.

Use the undo dhcp enable command to disable DHCP.
By default, DHCP is enabled.
Before you can configure DHCP, you must enable DHCP. This configuration is essential
to both DHCP server and DHCP relay.
Note:
DHCP can operate normally only after you correctly set the system clock.
Example
# Enable DHCP on the current router.

[H3C] dhcp enable
9.1.2 dhcp select (in Interface View)
Syntax
dhcp select { global [ subaddress ] | interface | relay }

undo dhcp select
9-1
View
Interface view
Parameter
global: The address DHCP client gets is the one selected by the local DHCP server
from a global address pool upon the receipt of the DHCP request from the client.
subaddress: Enables subaddress allocation, allowing the DHCP server to assign a
DHCP client an IP address belonging to a subaddress segment for the Ethernet
interface. This IP address is selected from the global address pool corresponding to the
subaddress segment. When subaddress allocation is enabled, the Ethernet interface
on the DHCP server must be assigned a subaddress and the specified global address
pool must reside in the same segment with the subaddress, otherwise the IP address is
assigned to the client from the primary address segment of the Ethernet interface.
Currently, subaddress allocation is available only on Ethernet interface and Virtual
Ethernet interface.
interface: The address DHCP client gets is the one selected by the local DHCP server
from an interface address pool upon the receipt of the DHCP request from the client.
relay: The address DHCP client gets is allocated by an external DHCP server.
Description
Use the dhcp select command in interface view to select a method for disposing the
DHCP packets destined to the local device.
Use the undo dhcp select command in interface view to restore the default setting.
By default, DHCP packets destined to the local device will be sent to the internal server
and the clients sending them will be allocated with addresses selected from a global
address pool (in global approach).
Currently, DHCP is available only on the following interfaces:
z Ethernet interface or subinterface
z Virtual Ethernet interface
z Synchronous/asynchronous serial interface encapsulated with PPP, HDLC, or
frame relay
z E/T interfaces
Related command: dhcp select (in system view).
Example
# Allocate addresses selected from an interface address pool on the internal DHCP
server to the clients sending DHCP packets destined to the local device.
[H3C-Ethernet1/0/0] dhcp select interface
9-2
9.1.3 dhcp select (in System View)
Syntax
dhcp select { global [ subaddress ] | interface | relay } { interface interface-type

interface-number [ to interface-type interface-number ] | all }
undo dhcp select { interface interface-type interface-number [ to interface-type
interface-number ] | all }
View
System view
Parameter
global: The address DHCP client gets is the one selected by the local DHCP server
from a global address pool upon the receipt of the DHCP request from the client.
subaddress: Enables subaddress allocation, allowing the DHCP server to assign a
DHCP client an IP address belonging to a subaddress segment for the Ethernet
interface. This IP address is selected from the global address pool corresponding to the
subaddress segment. When subaddress allocation is enabled, the Ethernet interface
on the DHCP server must be assigned a subaddress located in the subaddress
segment from which subaddresses are selected for DHCP clients. This is to ensure that
the main address and the subaddress assigned to a DHCP client are located in
different network segments.
interface: The address DHCP client gets is the one selected by the local DHCP server
from an interface address pool upon the receipt of the DHCP request from the client.
relay: The address DHCP client gets is allocated by an external DHCP server.
subinterfaces from the first specified subinterface to the second. Note that the
interfaces can be Ethernet interfaces, virtual Ethernet interfaces,
synchronous/asynchronous serial interfaces encapsulated with PPP, HDCL, or frame
relay, or E/T interfaces.
all: All the interfaces.
Description
Use the dhcp select command in system view to select a method for multiple
interfaces in a specified range to dispose the DHCP packets destined to the local
device.
Use the undo dhcp select command in system view to restore the default setting.
By default, DHCP packets destined to the local device will be sent to the internal server
and the clients sending them will be allocated with addresses selected from a global
address pool (in global approach).
9-3
Related command: dhcp select (in interface view).
Example
# Configure the subinterfaces in the range of Ethernet2/0/0.1 to Ethernet2/0/0.5 to

allocate addresses selected from an interface address pool maintained by the internal
server to the clients sending DHCP packets destined to the local device.
[H3C] dhcp select interface interface ethernet 2/0/0.1 to ethernet 2/0/0.5
9.1.4 dhcp server detect
Syntax
dhcp server detect

undo dhcp server detect
View
System view
Parameter
None
Description
Use the dhcp server detect command to enable pseudo-DHCP-server detection.

Use the undo dhcp server detect command to disable the function.
By default, pseudo-DHCP-server detection is disabled.
If you configure this command on a DHCP client, when receiving a DHCP response
packet from the DHCP server, the client displays information about the DHCP server.
If you configure this command on a DHCP server, when receiving a DHCP request
packet, the server displays the DHCP server information carried by the packet.
Example
# Enable pseudo DHCP server detection.

[H3C] dhcp server detect
9.2 DHCP Server Configuration Commands

9.2.1 accounting domain
Syntax
accounting domain domain-name

undo accounting domain
9-4
View
DHCP address pool view
Parameter
domain-name: Domain for DHCP accounting. For this domain, a RADIUS scheme must
be configured.
Description
Use the accounting domain command to enable DHCP server accounting for
addresses from the global DHCP address pools and configure a domain for DHCP
accounting.
Use the undo accounting domain command to disable DHCP accounting for
addresses from the DHCP address pools.
By default, DHCP accounting is not enabled.
When DHCP accounting is enabled, the DHCP server sends accounting packets to the
RADIUS accounting server in the specific domain when issuing and releasing leases.
The RADIUS server then records information about use of IP addresses, but does not
really perform accounting.
After configuring a DHCP server to use the RADIUS server in the specified domain for
accounting, you must associate RADIUS with the domain name. Otherwise, your
configuration does not take effect.
Without being configured with the accounting domain command, a DHCP server
does not send any accounting request to any RADIUS server when allocating a lease.
When configured with the accounting domain command, a DHCP server sends an
accounting start request to the RADIUS server whenever allocating a new lease; it
does not send any accounting start request to the RADIUS server for any existing lease.
When receiving a lease renewal request, the DHCP server sends an accounting start
request to the RADIUS server again.
When configured with the undo accounting domain command, a DHCP server does
not send any accounting stop request to the RADIUS server when releasing an existing
lease. If you modify the RADIUS domain, the DHCP server will send accounting start
and stop requests to the new RADIUS server for subsequent lease allocation and
releasing events.
Example
# Enable DHCP accounting for addresses from a DHCP address pool.

[H3C-dhcp-pool-pool1] accounting domain h3c
9-5
9.2.2 bims-server
Syntax
bims-server ip ip-address [ port port-number ] sharekey key

undo bims-server
View
Global DHCP address pool view
Parameter
ip ip-address: IP address of the BIMS server.

port port-number: Protocol port of the BIMS server, in the range 1 to 65534.
sharekey key: Shared key of the BIMS server, which can be 1 to 16 characters in
length.
Description
Use the bims-server command to enable and configure BIMS option for a global
address pool on the DHCP server.
Use the undo bims-server command to disable BIMS option for a global address pool
on the DHCP server.
After you configure BIMS option for a global address pool, the DHCP server
encapsulates the BIMS option information in the DHCP_OFFER and DHCP_ACK
packets when assigning an IP address from the global address pool to a DHCP client.
By default, BIMS option is not configured on the DHCP server.
Example
# Configure BIMS option in global address pool view, setting the IP address of the BIMS
server to 192.168.1.1, the protocol port to 80, and the shared key to abcdefg.
<H3C> system-view
[H3C] dhcp server ip-pool 123
[H3C-dhcp-pool-123] bims-server ip 192.168.1.1 port 80 sharekey abcdefg
9.2.3 debugging dhcp server
Syntax
debugging dhcp server { all | error | event | packet }

undo debugging dhcp server { all | error | event | packet }
View
User view
9-6
Parameter
all: All debugging functions of DHCP server.

error: Error debugging on the DHCP server, specifically, the debugging on the errors
that occur when the DHCP server processes DHCP packets, allocates addresses, etc.
event: Event debugging on the DHCP server, specifically, the debugging on the events
such as address allocation, ping detection timeout, etc.
packet: DHCP packet debugging, specifically, the debugging on the packets that the
DHCP server has received and sent and on the ping packets sent for the purpose of
detection and the received response packets.
Description
Use the debugging dhcp server command to enable debugging on the DHCP server.
Use the undo debugging dhcp server command to disable debugging.
By default, debugging is disabled on the DHCP server.
Example
# Enable event debugging on the DHCP server.

<H3C> debugging dhcp server event
*0.62496500-DHCP SER-8-DHCPS_DEBUG_COMMON:
DhcpServer: ICMP Timeout
DhcpServer: Still Need to ICMP detect for 1 times
DhcpServer: ICMP Timeout
DhcpServer: All Try finished
DhcpServer: Ack User's Lease
# Enable packet debugging on the DHCP server.

<H3C> debugging dhcp server packet
DhcpServer: receive DHCPRELEASE from 00.05.5D.85.D5.45.
DhcpServer: Release Lease for MAC 00.05.5D.85.D5.45. IP is 5.5.5.2
DhcpServer: receive DHCPDISCOVER from 00.05.5D.85.D5.45.
DhcpServer: Sending ICMP ECHO to Target IP: 5.5.5.2
DhcpServer: Sending ICMP ECHO to Target IP: 5.5.5.2
9-7
DhcpServer: Send DHCPOFFER to MAC=> 00.05.5D.85.D5.45. Offer IP=> 5.5.5.2
DhcpServer: receive DHCPREQUEST from 00.05.5D.85.D5.45.
DhcpServer: Send DHCPACK to MAC=> 00.05.5D.85.D5.45. Offer IP=> 5.5.5.2
# Enable error debugging on the DHCP server.

<H3C> debugging dhcp server error
DhcpServer: Icmp Packet is not EHHOREPLY!
9.2.4 dhcp server accounting domain interface (in System View)
Syntax
dhcp server accounting domain domain-name { interface interface-type

undo dhcp server accounting domain { interface interface-type interface-number
[ to interface-type interface-number ] | all }
View
System view
Parameter
be configured.
interfaces must be Ethernet interfaces or virtual Ethernet interfaces.
Description
Use the dhcp server accounting domain interface command to enable DHCP
accounting for addresses from the address pools of the specified interfaces and
configure a domain for DHCP accounting.
Use the undo dhcp server accounting domain interface command to disable DHCP
accounting for addresses from the address pools of the specified interfaces.
Note that you cannot use the display current-configuration command to verify the
configuration made by using the dhcp server accounting domain interface
9-8
command, which is implemented by executing the dhcp server accounting domain

command repeatedly.
Related command: accounting domain.
Example
# Enable DHCP accounting for addresses from the address pools of Ethernet2/0/0.1 to
Ethernet2/0/0.5, and specify radius_domain as the domain for accounting.
[H3C] dhcp server accounting domain radius_domain interface ethernet 2/0/0.1
to ethernet 2/0/0.5
9.2.5 dhcp server accounting domain (in Interface View)
Syntax
dhcp server accounting domain domain-name

undo dhcp server accounting domain domain-name
View
Interface view
Parameter
be configured.
Description
Use the dhcp server accounting domain command to enable DHCP accounting for
addresses from the interface address pool and configure a domain for DHCP
accounting.
Use the undo dhcp server accounting domain command to disable DHCP
accounting for addresses from the interface address pool.
Related command: accounting domain.
Example
# Enable DHCP accounting for addresses from the interface address pool, and specify
radius_domain as the domain for accounting.
[H3C-Ethernet0/0/0] dhcp server accounting domain radius_domain
9-9
9.2.6 dhcp server bims-server (Interface View)
Syntax
dhcp server bims-server ip ip-address [ port port-number ] sharekey key

undo dhcp server bims-server
View
Ethernet interface (subinterface) view
Parameter

port port-number: Number of the protocol port on the BIMS server, in the range 1 to
65,534.
length.
Description
Use the dhcp server bims-server command to enable and configure BIMS option
support on the current interface.
Use the undo dhcp server bims-server command to disable BIMS option support on
the current interface.
After you configure BIMS option support on the DHCP server, the DHCP server
packets sent to the DHCP clients according to these rules:
If BIMS option support is enabled on the current interface, the DHCP server sends the
BIMS option information together with the lease when assigning an IP address from the
interface address pool to a DHCP client.
Example
# Configure BIMS option support on Ethernet interface ethernet0/0/0 (which is

configured with an interface address pool), setting the IP address of the BIMS server to
192.168.1.1, the protocol port to 80, and the shared key to abcdefg.
[H3C-Ethernet0/0/0] dhcp server bims-server ip 192.168.1.1 port 80 sharekey
abcdefg
9-10
9.2.7 dhcp server bims-server interface (System View)
Syntax
dhcp server bims-server ip ip-address [ port port-number ] sharekey key { interface

interface-type interface-number [ to interface-type interface-number ] | all }
undo dhcp server bims-server { interface interface-type interface-number [ to
interface-type interface-number ] | all }
View
System view
Parameter

port port-number: Number of the protocol port on the BIMS server, in the range 1 to
65534.
length.
all: Indicates all interfaces configured with interface address pools.
Description
Use the dhcp server bims-server interface command to enable and configure BIMS
option support for an interface or all interfaces configured with interface address pools.
Use the undo dhcp server bims-server command to disable BIMS option support for
an interface or all interfaces configured with interface address pools.
After you configure BIMS option support on the DHCP server, the DHCP server
packets sent to the DHCP clients according to these rules:
z If you configure BIMS option support for an interface, the DHCP server sends the
BIMS option information together with the lease when assigning an IP address
from the interface address pool to a DHCP client.
z If you specify the all keyword in the dhcp server bims-server command, the
DHCP server sends the BIMS option information together with the lease when
assigning an IP address from any of the interface address pools to a DHCP client.
9-11
Example
# Configure BIMS option support on Ethernet interface ethernet0/0/0 (which is

configured with an interface address pool), setting the IP address of the BIMS server to
192.168.1.1, the protocol port to 80, and the shared key to abcdefg.
[H3C] dhcp server bims-server ip 192.168.1.1 port 80 sharekey abcdefg interface
ethernet0/0/0
9.2.8 dhcp server dns-list
Syntax
dhcp server dns-list ip-address [ ip-address ]

undo dhcp server dns-list { ip-address | all }
View
Ethernet interface (or subinterface) view
Parameter
ip-address: IP address of DNS. You can configure up to eight IP addresses separated

by spaces in a command.
Description
Use the dhcp server dns-list command in interface view to configure DNS IP
addresses for an interface configured with a DHCP address pool.
Use the undo dhcp server dns-list command in interface view to delete the
configuration.
By default, no DNS address is configured.
By far, only up to eight DNS server addresses can be set in each DHCP address pool.
Related command: dhcp server dns-list (in system view), dhcp server ip-pool, and
dns-list.
Example
# Configure the DNS server address 1.1.1.254 for the DHCP address pool of the
interface Ethernet1/0/0.
[H3C-Ethernet 1/0/0] dhcp server dns-list 1.1.1.254
9-12
9.2.9 dhcp server dns-list interface (in System View)
Syntax
dhcp server dns-list ip-address [ ip-address ] { interface interface-type

undo dhcp server dns-list { ip-address | all } { interface interface-type
View
System view
Parameter
ip-address: IP address of DNS server. You can configure up to eight IP addresses

separated by spaces in a command.
all: In the undo form of the command, the first “all” refers to all the Gateway (GW)
addresses and the second, all the interfaces.
Description
Use the dhcp server dns-list interface command to specify DNS server IP addresses
in the specified interface DHCP address pool.
Use the undo dhcp server dns-list interface command to delete the specified DNS
server IP addresses.
By default, no DNS address is configured.
Only up to eight DNS server addresses, by far, can be set in each DHCP address pool.
Related command: dhcp server dns-list, dhcp server ip-pool, dns-list.
Example
# Assign the DNS server address 1.1.1.254 to the DHCP address pool of the interfaces
in the range of Ethernet1/0/0.0 to Ethernet2/0/0.5.
[H3C] dhcp server dns-list 1.1.1.254 interface ethernet 2/0/0.0 to ethernet
2/0/0.5
9.2.10 dhcp server domain-name (in Interface View)
Syntax
dhcp server domain-name domain-name

undo dhcp server domain-name
9-13
View
Parameter
domain-name: Domain name that the DHCP server allocates to clients, which is a
string comprising at least three characters and at most 50 characters.
Description
Use the dhcp server domain-name command in interface view to configure the
domain name that the DHCP address pool of the current interface allocates to clients.
Use the undo dhcp server domain-name command in interface view to delete the
configured domain name.
By default, no domain name has been allocated to DHCP clients and domain name is
null.
Related command: dhcp server ip-pool, dhcp server domain-name (in system view),
and domain-name.
Example
# Configure the domain name eth1_0_0.com.cn in an interface DHCP address pool.

[H3C-Ethernet 1/0/0] dhcp server domain-name eth1_0_0.com.cn
9.2.11 dhcp server domain-name interface (in System View)
Syntax
dhcp server domain-name domain-name { interface interface-type interface-number

undo dhcp server domain-name interface interface-type interface-number [ to
View
System view
Parameter
string comprising 3 to 50 characters.
9-14

Description
Use the dhcp server domain-name interface command in system view to configure
the domain name that the DHCP address pool of the interfaces in a specified range
allocates to DHCP clients.
Use the undo dhcp server domain-name interface command in system view to
delete the configured domain name.
By default, no domain name is configured for clients.
After configuring this command, you cannot view the configuration of this command by
executing the display current-configuration command. By executing the dhcp
server domain-name command respectively on the specified interfaces, you can fulfill
the batch configurations of the command.
Related command: dhcp server ip-pool.
Example
# Configure eth2_1_5.com.cn as the domain name in the interface DHCP address pool
of the interfaces Ethernet2/0/0.1 through Ethernet2/0/0.5.
[H3C] dhcp server domain-name eth1_0_0.com.cn interface ethernet 2/0/0.1 to
ethernet 2/0/0.5
9.2.12 dhcp server expired (in Interface View)
Syntax
dhcp server expired { day day [ hour hour [ minute minute ] ] | unlimited }
undo dhcp server expired
View
Parameter
day day: Number of days in the range of 0 to 365.

hour hour: Number of hours in the range of 0 to 23.
minute minute: Number of hours in the range of 0 to 59.
unlimited: The valid period is unlimited (currently, it is 25 years for the system).
9-15
Description
Use the dhcp server expired command in interface view to configure a valid period
allowed for leasing IP addresses in the current interface DHCP address pool.
Use the undo dhcp server expired command in interface view to restore the default
setting.
By default, the leasing valid period is one day.
Currently, the leasing valid period specified by this command cannot exceed the year of
2106.
Related command: dhcp server ip-pool, dhcp server expired (in system view), and
expired.
Example
# Set the valid period for leasing IP addresses in the interface address pool maintained
by Ethernet1/0/0 to unlimited.
[H3C-Ethernet 1/0/0] dhcp server expired unlimited
9.2.13 dhcp server expired interface (in System View)
Syntax
dhcp server expired { day day [ hour hour [ minute minute ] ] | unlimited } { interface
undo dhcp server expired { interface interface-type interface-number [ to
View
System view
Parameter

all: All interfaces.
9-16
Description
Use the dhcp server expired interface command in system view to configure a valid
period allowed for leasing IP addresses in the interface DHCP address pool of the
interfaces in a specified range.
Use the undo dhcp server expired interface command in system view to restore the
default setting.
2106.
After configuring this command, you cannot view the configuration by executing the
display current-configuration command. By calling the dhcp server expired
command respectively on the specified interfaces, you can fulfill the batch
configurations of the command.
Related command: dhcp server ip-pool, dhcp server expired (in interface view),
expired.
Example
# Set the valid period for leasing IP addresses in the interface address pool of the
interfaces in the range of Ethernet2/0/0.1 to Ethernet2/0/0.5 to unlimited.
[H3C] dhcp server expired unlimited interface ethernet 2/0/0.1 to ethernet
2/0/0.5
9.2.14 dhcp server forbidden-ip
Syntax
dhcp server forbidden-ip low-ip-address [ high-ip-address ]

undo dhcp server forbidden-ip low-ip-address [ high-ip-address ]
View
System view
Parameter
low-ip-address: The low IP address that does not participate in the auto-allocation.
high-ip-address: The high IP address that does not participate in the auto-allocation. It
must belong to the same segment to which the low-ip-address belongs as well and
must not be smaller than the low-ip-address. If this parameter is not specified, there will
be only one IP address, that is, low-ip-address.
9-17
Description
Use the dhcp server forbidden-ip command to exclude IP addresses in a specified

range to participate in the auto-allocation.
Use the undo dhcp server forbidden-ip command to delete the configuration.
By default, all the IP addresses in address pools participate in the auto-allocation.
You may configure multiple IP address ranges that do not participate in auto-allocation.
Related command: dhcp server ip-pool, network, and static-bind ip-address.
Example
# Reserve the IP addresses in the range of 10.110.1.1 to 10.110.1.63 so that these

addresses will not participate in the address auto-allocation.
[H3C] dhcp server forbidden-ip 10.110.1.1 10.110.1.63
9.2.15 dhcp server ip-pool
Syntax
dhcp server ip-pool pool-name

undo dhcp server ip-pool pool-name
View
System view
Parameter
pool-name: Address pool name uniquely identifying an address pool, which is a string
comprising at least one character and 35 characters at most.
Description
Use the dhcp server ip-pool command to create a DHCP address pool and access
the DHCP address pool view.
Use the undo dhcp server ip-pool command to delete the specified address pool.
By default, no DHCP address pool is created.
If the specified address pool has existed, executing the dhcp server ip-pool command
will directly access the DHCP address pool view. If the address pool does not exist, the
DHCP server will create it before accessing the DHCP address pool view. Each DHCP
server is allowed to configure multiple address pools. So far, you may configure up to
128 global address pools on each DHCP server.
The subnet addresses and subnet broadcast addresses on the DHCP server do not
participate in address allocation.
Related command: dhcp enable, expired, and network.
9-18
Example
# Create DHCP address pool 0.

[H3C-dhcp-0]
9.2.16 dhcp server nbns-list (in Interface View)
Syntax
dhcp server nbns-list ip-address [ ip-address ]

undo dhcp server nbns-list { ip-address | all }
View
Parameter
ip-address: IP address of NetBIOS server. You can configure up to eight IP addresses

all: All the NetBIOS server IP addresses.
Description
Use the dhcp server nbns-list command in interface view to configure NetBIOS
server addresses in the DHCP address pool of current interface.
Use the undo dns-list command in interface view to delete the configuration.
By default, no NetBIOS server address is configured.
By far, only up to eight NetBIOS addresses can be configured in each DHCP address
pool.
Related command: dhcp server ip-pool, dhcp server nbns-list (in system view),
nbns-list, and netbios-type.
Example
# In the DHCP address pool of Ethernet1/0/0, allocate the NetBIOS server at

10.12.1.99 to the clients.
[H3C-Ethernet 1/0/0] dhcp server nbns-list 10.12.1.99
9.2.17 dhcp server nbns-list interface (in System View)
Syntax
dhcp server nbns-list ip-address [ ip-address ] { interface interface-type

9-19
undo dhcp server nbns-list { ip-address | all } { interface interface-type

View
System view
Parameter

all: In the undo form of the command, the first “all” refers to all the NetBIOS server
addresses and the second, all the interfaces.
Description
Use the dhcp server nbns-list interface command in system view to configure
NetBIOS server addresses for the clients that get ip address from the DHCP address
pool of the interfaces in a specified range.
Use the undo dhcp server nbns-list interface command in system view to delete the
configuration.
By default, no NetBIOS server address is configured.
pool.
display current-configuration command. By calling the dhcp server nbns-list
command respectively on the specified interfaces, you can fulfill the batch
configurations of the command.
Related command: dhcp server ip-pool, dhcp server nbns-list (in interface view),
nbns-list, and netbios-type.
Example
# In the DHCP address pool of interfaces in the range of Ethernet2/0/0.1 to

Ethernet2/0/0.5, assign the NetBIOS server at 10.12.1.99 to the clients.
[H3C] dhcp server nbns-list 10.12.1.99 interface ethernet 2/0/0.1 to ethernet
2/0/0.5
9-20
9.2.18 dhcp server netbios-type interface (in System View)
Syntax
dhcp server netbios-type { b-node | h-node | m-node | p-node } { interface

undo dhcp server netbios-type { interface interface-type interface-number [ to
View
System view
Parameter
b-node: Broadcast mode, that is, hostname-IP maps are obtained by means of
broadcast.
p-node: Peer-to-peer mode, that is, maps are obtained by means of communicating
with the NetBIOS server.
m-node: Mixed (m) mode, that is, the mode of type b nodes running “peer-to-peer”
communications mechanism.
h-node: Hybrid (h) mode, that is, the mode of type p nodes possessing some of the
broadcast features.
Description
Use the dhcp server netbios-type interface command in system view to configure a
NetBIOS node type for the DHCP clients of the address pool of the interfaces in a
specified range.
Use the undo dhcp server netbios-type interface command in system view to
restore the default setting.
By default, clients adopt type h node (h-node).
Hostname-IP maps are required in the event that DHCP clients use the NetBIOS
protocol on a WAN.
display current-configuration command. By calling dhcp server netbios-type
respectively on the specified interfaces, you can fulfill the batch configurations of the
command.
9-21
Related command: dhcp server ip-pool, netbios-type, dhcp server netbios-type,

and nbns-list.
Example
# In the DHCP address pool of interfaces in the range of Ethernet2/0/0.1 to

Ethernet2/0/0.5, set the NetBIOS node type of clients to p-node.
[H3C] dhcp server netbios-type p-node interface ethernet 2/0/0.1 to ethernet
2/0/0.5
9.2.19 dhcp server netbios-type (in Interface View)
Syntax
dhcp server netbios-type { b-node | h-node | m-node | p-node }

undo dhcp server netbios-type
View
Parameter
broadcast.
broadcast features.
Description
Use the dhcp server netbios-type command in interface view to configure the
NetBIOS node type of the DHCP clients of the current interface.
Use the undo dhcp server netbios-type command in interface view to restore the
default setting.
Hostname-IP maps are required in the event that DHCP clients use the NetBIOS
protocol on a WAN.
Related command: dhcp server ip-pool, netbios-type, dhcp server netbios-type (in
system view), and nbns-list.
9-22
Example
# In the DHCP address pool of Ethernet1/0/0, set the NetBIOS node type of its clients to
p-node.
[H3C-Ethernet 1/0/0] dhcp server netbios-type p-node
9.2.20 dhcp server option interface (in System View)
Syntax
dhcp server option code { ascii ascii-string | hex hex-string | ip-address ip-address }
{ interface interface-type interface-number [ to interface-type interface-number ] | all }
undo dhcp server option code { interface interface-type interface-number [ to
View
System view
Parameter
code: Option value that needs to be assigned by the user, in the range 2 to 254, among
which 3, 6, 15, 44, 46, 50 to 55, 57 to 61, 184 and 127 are reserved for the system.
ascii ascii-string: ASCII string.
hex hex-string: 2-digit or 4-digit hexadecimal string, such as hh or hhhh.
ip-address ip-address: IP address.
Description
Use the dhcp server option command in system view to configure a DHCP
self-defined option for the interfaces in a specified range.
Use the undo dhcp server option command in system view to delete the
configuration.
After you configure this command, you cannot view the configuration by executing the
display current-configuration command. By calling the dhcp server option
cyclically, you can fulfill the batch configurations of the command.
Related command: dhcp server option (in interface view) and option.
9-23
Example
# Define the hexadecimal strings of the option code 100 to 0x11 and 0x22 for the
interface DHCP address pool of the interfaces in the range of Ethernet2/0/0.1 to
Ethernet2/0/0.5.
[H3C] dhcp server option 100 hex 11 22 interface ethernet 2/0/0.1 to ethernet
2/0/0.5
9.2.21 dhcp server option (in Interface View)
Syntax
dhcp server option code { ascii ascii-string | hex hex-string | ip-address ip-address }
undo dhcp server option code
View
Parameter
code: Option value that needs to be assigned by the user in the range 2 to 254, among
Description
Use the dhcp server option command in interface view to configure a DHCP
self-defined option for the DHCP address pool of the current interface.
Use the undo dhcp server option command in interface view to delete the
configuration.
Related command: option, dhcp server option (in system view).
Example
# Define the hexadecimal strings of the option code 100 to 0x11 and 0x22 for the DHCP
address pool of the interface Ethernet1/0/0.
[H3C-Ethernet 1/0/0] dhcp server option 100 hex 11 22
9.2.22 dhcp server ping
Syntax
dhcp server ping { packets number | timeout milliseconds }
9-24
undo dhcp server ping { packets | timeout }
View
System view
Parameter
packets number: The maximum number of ping packets allowed to be sent, which is in
the range of 0 to 10 and defaults to 2, with 0 indicating that no ping operation will be
performed.
timeout milliseconds: The longest time period that the DHCP server waits for the
response to each ping packet, which is in the range of 0 to 10000 milliseconds and
defaults to 500 milliseconds.
Description
Use the dhcp server ping command to configure the maximum number of ping
packets that the DHCP server is allowed to send and the longest time period that the
DHCP server should wait for the response to each ping packet.
Use the undo dhcp server ping command to restore the default settings.
To prevent the address collision resulted from repeated IP address allocation, DHCP
server sends ping packets to detect that an address is available.
Example
# Allow the DHCP server to send up to ten ping packets and wait 500 milliseconds (the
default setting) for the response to each packet.
[H3C] dhcp server ping packets 10
9.2.23 dhcp server relay information enable
Syntax
dhcp server relay information enable

undo dhcp server relay information enable
View
System view
Parameter
None
Description
Use the dhcp server relay information enable command to enable the DHCP server
to support option 82.
9-25
Use the undo dhcp server relay information enable command to disable the DHCP
server to support option 82.
When enabled to support option 82, the DHCP server can recognize DHCP requests
carrying option 82 and handle the packets according to their sub-options.
At present, the DHCP server can recognize sub-option 5 of option 82 and assign the
client an IP address in the same network segment where the IP address specified by
sub-option 5 is located.
By default, the DHCP server supports option 82.
Example
# Disable the DHCP server to support option 82.

[H3C] undo dhcp server relay information enable
9.2.24 dhcp server static-bind
Syntax
dhcp server static-bind ip-address ip-address { mac-address mac-address |

client-identifier client-identifier }
undo dhcp server static-bind { ip-address ip-address | mac-address mac-address |
client-identifier client-identifier }
View
Parameter
ip-address: Host IP address to be bound. It must be a valid IP address selected from

the current interface address pool.
mac-address: Host MAC address to be bound.
client-identifier: Client identifier to be bound.
Description
Use the dhcp server static-bind command to configure a static address binding in the
DHCP address pool of the current interface.
Use the undo dhcp server static-bind command to delete the configuration.
By default, static address binding is not configured in any interface address pool.
Among all the static bindings on an interface, each IP address, MAC address, and
client identifier must be unique. In addition, an IP address can be bound with a MAC
address or client identifier, but not with both.
9-26
Example
# Statically bind the MAC address 0000-e03f-0305 with the IP address 10.1.1.1.
[H3C-Ethernet1/0/0] dhcp server static-bind ip-address 10.1.1.1 mac-address
0000-e03f-0305
9.2.25 dhcp server voice-config (in Interface View)
Syntax
dhcp server voice-config { ncp-ip ip-address | as-ip ip-address | voice-vlan vlan-id

{ enable | disable } | fail-over ip-address dialer-string }
undo dhcp server voice-config [ ncp-ip | as-ip | voice-vlan | fail-over ]
View
Interface view
Parameter
ncp-ip ip-address: Specifies the IP address of the network call processor (NCP).
as-ip ip-address: Specifies the IP address of the alternate NCP server.
voice-vlan: Voice VLAN.
vlan-id: Voice VLAN ID, in the range 1 to 4094.
enable: Voice VLAN is in the enabled state.
disable: Voice VLAN is in the disabled state.
fail-over: Failover call routing.
ip-address: IP address for failover call routing.
dialer-string: Dial string for failover call routing, comprising digits in the range 0 to 9 and
wildcard asterisk (*).
Description
Use the dhcp server voice-config command to enable the DHCP server to send
option 184 and suboptions of 184 when it assigns addresses from the current interface
address pool.
Use the undo dhcp server voice-config command to disable the DHCP server to
send option 184 and suboptions of 184 when it assigns addresses from the current
interface address pool.
The DHCP server sends option 184 and suboptions of 184 only when thus required by
the DHCP client.
Configure the NCP-IP suboption before configuring other suboptions; otherwise, they
cannot take effect.
9-27
By default, the DHCP server does not support option 184 and its suboptions.
Related command: voice-config.
Example
# Enable the DHCP server to support option 184 and its suboptions, setting IP address
of NCP to 1.1.1.1, IP address of the alternate NCP server to 2.2.2.2, state of voice
VLAN to enable, ID of voice VLAN to 1, IP address for failover call routing to 3.3.3.3,
and dial string for failover call routing to 99*.
<H3C> system-view
[H3C] interface Ethernet 0/0/1
[H3C-Ethernet0/0/1] dhcp select interface
[H3C-Ethernet0/0/1] dhcp server voice-config ncp-ip 1.1.1.1
[H3C-Ethernet0/0/1] dhcp server voice-config as-ip 2.2.2.2
[H3C-Ethernet0/0/1] dhcp server voice-config voice-vlan 1 enable
[H3C-Ethernet0/0/1]dhcp server voice-config fail-over 3.3.3.3 99*
9.2.26 dhcp server voice-config interface (in System View)
Syntax
dhcp server voice-config { ncp-ip ip-address | as-ip ip-address | voice-vlan vlan-id

{ enable | disable } | fail-over ip-address dialer-string } { all | interface interface-type
interface-number [ to interface-type interface-number ] }
undo dhcp server voice-config [ ncp-ip | as-ip | voice-vlan | fail-over ] { all |
interface interface-type interface-number [ to interface-type interface-number ] }
View
System view
Parameter
9-28

Description
Use the dhcp server voice-config interface command to enable the DHCP server to
send option 184 and suboptions of 184 when it assigns addresses from the specified
send option 184 and suboptions of 184 when it assigns addresses from the specified
the DHCP client.
cannot take effect.
Related command: voice-config.
Example
# Enable the DHCP server to send option 184 and its suboptions when assigning
addresses from interface Ethernet 0/0/1, setting IP address of NCP to 1.1.1.1, IP
address of the alternate NCP server to 2.2.2.2, state of voice VLAN to enable, ID of
voice VLAN to 1, IP address for failover call routing to 3.3.3.3, and dial string for failover
call routing to 99*.
<H3C> system-view
[H3C] dhcp select interface ethernet 0/0/1
[H3C] dhcp server voice-config ncp-ip 1.1.1.1 interface ethernet 0/0/1
[H3C] dhcp server voice-config as-ip 2.2.2.2 interface ethernet 0/0/1
[H3C] dhcp server voice-config voice-vlan 1 enable interface ethernet 0/0/1
[H3C] dhcp server voice-config fail-over 3.3.3.3 99* interface ethernet 0/0/1
9.2.27 display dhcp server conflict
Syntax
display dhcp server conflict { ip ip-address | all }
View
Any view
9-29
Parameter
ip-address: A specified IP address.

all: All the IP addresses.
Description
Use the display dhcp server conflict command to view the DHCP address conflict
statistics, including the information in conflicted IP address, conflict detection type, and
conflict time.
Related command: reset dhcp server conflict.
Example
# View the DHCP address conflict statistics.

<H3C> display dhcp server conflict all
Address Discover Time
10.110.1.2 Jan 11 2003 11:57: 7 PM
Table 9-1 Description on fields of the display dhcp server conflict command
Field Description
Address The conflicted IP address
Discover Time Time when the conflict is discovered
9.2.28 display dhcp server expired
Syntax
display dhcp server expired { ip ip-address | pool [ pool-name ] | interface

[ interface-type interface-number ] | all }
View
Any view
Parameter

pool-name: Name of a global address pool. All the global address pools will apply if no
address pool has been specified.
interface-type interface-number: Interface address pool. All the interface address pools
will apply if no interface has been specified.
all: All the IP addresses.
9-30
Description
Use the display dhcp server expired command to view the expired address leases in
a DHCP address pool. In certain conditions, the addresses of the expired leases will be
allocated to other DHCP clients.
Example
# View the expired leases in DHCP address pools.

<H3C> display dhcp server expired all
Global pool:
Global pool:
IP address Client-identifier/ Lease expiration Type
Hardware address
Interface pool:
Hardware address
--- total 0 entry ---
Table 9-2 Description of the information displayed by executing display dhcp server
expired
Major item Description

Global pool: Expired address leases in global address pools.
Interface pool: Expired address leases in interface address pools.
IP address The bound IP address

Client-identifier/Hardware
The bound MAC address or identifier
address
Lease expiration The lease expiration time
Type Address binding type
9.2.29 display dhcp server free-ip
Syntax
display dhcp server free-ip
View
Any view
9-31
Parameter
None
Description
Use the display dhcp server free-ip command to view the free address ranges in
DHCP address pools, that is, information about IP addresses that have not been
allocated yet.
Example
# Display the free address ranges in DHCP address pools.

<H3C> display dhcp server free-ip
IP Range from 1.0.0.0 to 2.2.2.1
IP Range from 2.2.2.3 to 2.255.255.255
IP Range from 4.0.0.0 to 4.255.255.255
IP Range from 5.5.5.0 to 5.5.5.0
IP Range from 5.5.5.2 to 5.5.5.255
9.2.30 display dhcp server ip-in-use
Syntax
display dhcp server ip-in-use { all | ip ip-address | pool [ pool-name ] | interface

[ interface-type interface-number ] }
View
Any view
Parameter
all: Displays all the information.

ip-address: Specifies an IP address. If no IP address has been specified, information of
all the bound addresses will be displayed.
pool-name: Specifies a global address pool. If no global address pool has been
specified, the bound addresses in all the global address pools will be displayed.
interface-type interface-number: Specifies an interface address pool. If no interface
address pool has been specified, the bound addresses in all the interface address
pools will be displayed.
Description
Use the display dhcp server ip-in-use command to view the address binding
information of DHCP clients, such as the information in hardware address, IP address,
and address lease expiration.
9-32
Related command: reset dhcp server ip-in-use.
Example
# View the DHCP address binding information.

<H3C> display dhcp server ip-in-use all
Global pool:
Hardware address
2.2.2.2 000f-1f7e-fec5 NOT Used Manual
Interface pool:
Hardware address
5.5.5.1 0050-ba28-930a Jun 5 2004 10:56: 7 AM Auto:COMMITED
--- total 2 entry ---
Table 9-3 Description on the fields of the display dhcp server ip-in-use command
Field Description
Global pool Address binding information of global address pools
Interface pool Address binding information of interface address pools
IP address The bound IP address
Client identifier/Hardware
The bound MAC address or identifier
address
VlanId Identifies a user uniquely together with a MAC address
Lease expiration The lease expiration time
Type Address binding type
9.2.31 display dhcp server statistics
Syntax
display dhcp server statistics
View
Any view
Parameter
None
9-33
Description
Use the display dhcp server statistics command to view the statistics on the DHCP
server, including such information as number of DHCP address pools, automatically or
manually bound address and expired addresses, number of unknown packets, number
of DHCP request packets, and number of response packets.
Related command: reset dhcp server statistics.
Example
# View the statistic information on the DHCP server.

<H3C> display dhcp server statistics
Global Pool:
Pool Number: 5
Binding
Auto: 0
Manual: 1
Expire: 0
Interface Pool:
Pool Number: 1
Binding
Auto: 1
Manual: 0
Expire: 0
Boot Request: 6
Dhcp Discover: 1
Dhcp Request: 4
Dhcp Decline: 0
Dhcp Release: 1
Dhcp Inform: 0
Boot Reply: 4
Dhcp Offer: 1
Dhcp Ack: 3
Dhcp Nak: 0
Bad Messages: 0
Table 9-4 Description of the information output by executing display dhcp server
statistics

Global Pool: Statistics of global address pools
Interface Pool: Statistics of interface address pools
Pool Number Number of address pools
9-34

Number of automatically bound IP
Auto
addresses
Number of manually bound IP
Manual
addresses
Number of IP addresses of expired
Expire
leases
Number of messages that DHCP clients
Boot Request
sent to the DHCP server
Dhcp Discover, Dhcp Request, Dhcp
Statistics of the received DHCP packets
Decline, Dhcp Release, Dhcp Inform
Number of messages that the DHCP
Boot Reply
server sent to DHCP clients
Statistics of the transmitted DHCP
Dhcp Offer, Dhcp Ack, Dhcp Nak
packets
Bad Messages Statistics of packets containing errors
9.2.32 display dhcp server tree
Syntax
display dhcp server tree { pool [ pool-name ] | interface [ interface-type

interface-number ] | all }
View
Any view
Parameter
pool-name: Name of a global address pool. All the global address pools will apply if no
interface-type interface-number: Interface address pool. All the interface address pools
will apply if no interface has been specified.
all: All the DHCP address pools.
Description
Use the display dhcp server tree command to view the tree-structure information of
DHCP address pools, including the address pool at each node, option, address lease
period, and DNS server information.
Example
# View the tree-structure information of DHCP address pools.
9-35
<H3C> display dhcp server tree all

Global pool:
Pool name: 5 network 10.10.1.0 255.255.255.0
Child node:6
Sibling node:7
option 1 ip-address 255.0.0.0
expired 1 0 0
option 58 hex 00 00 A8 C0
option 59 hex 00 00 00 3C
Pool name: 6
static-bind ip-address 10.10.1.2 255.0.0.0
static-bind mac-address 1111.2222.3333
Parent node:5
expired 1 0 0

PrevSibling node:5
Sibling node:8

Child node:9
PrevSibling node:7
gateway-list 2.2.2.2
nbns-list 3.3.3.3
netbios-type m-node
expired 2 0 0
option 58 hex 00 01 51 80
Parent node:8
dns-list 1.1.1.1
domain-name 444444
nbns-list 3.3.3.3
netbios-type m-node
expired 2 0 0
9-36
option 58 hex 00 01 51 80
Interface pool:
Pool name: Ethernet11/2/0
network 5.5.5.0 mask 255.255.255.0
expired 1 0 0
Table 9-5 Description on the fields of the display dhcp server tree command
Field Description
Global pool: Global address pool information
Interface pool: Interface address pool information
Pool Name: Address pool name
network Address ranges available for allocation
static-bind ip-address
10.10.1.2 255.0.0.0
Statically bound IP address and MAC address
static-bind mac-address
1111.2222.3333
The child node of the current node is address pool 6.
The node in this position can be:
Child node, which is the child node (subnet) address
pool of the current address pool
Parent node, which is the father node (natural
child node:6 network segment) address pool of the current node
Sibling node, which is the next sibling node (another
subnet on the same natural network segment)
address pool. The order of sibling nodes depends on
the order in which they are configured.
PrevSibling node, which is the previous sibling node
of the current node
option Self-definable DHCP option
The address lease period that is indicated by days,
expired
hours, and minutes
gateway-list The egress GW router allocated to DHCP clients
dns-list The DNS servers allocated to DHCP clients
domain-name Domain name specified for DHCP clients
9-37
Field Description
nbns-list The NetBIOS server allocated to DHCP clients
netbios-type NetBIOS node type specified for DHCP clients
9.2.33 dns-list
Syntax
dns-list ip-address [ ip-address ]

undo dns-list { ip-address | all }
View
Parameter
ip-address: IP address of the DNS. You can configure up to eight IP addresses

Description
Use the dns-list command to configure DNS server IP addresses in a global DHCP
address pool.
Use the undo dns-list command to delete the configuration.
By default, no DNS server address is configured.
By far, only up to eight DNS server addresses can be set in each DHCP address pool.
Related command: dhcp server dns-list interface, dhcp server dns-list, and dhcp
server ip-pool.
Example
# Specify 1.1.1.254 as a DNS server address for DHCP address pool 0.

[H3C-dhcp-0] dns-list 1.1.1.254
9.2.34 domain-name
Syntax
domain-name domain-name
undo domain-name domain-name
9-38
View
Parameter
string comprising at least three characters and at most 50 characters.
Description
Use the domain-name command to configure the domain name that a global address
pool of the DHCP server allocates to clients.
Use the undo domain-name command to delete the configured domain name.
By default, no domain name has been allocated to DHCP clients and domain name is
null.
Related command: dhcp server ip-pool, dhcp server domain-name interface, and
dhcp server domain-name.
Example
# Set the domain name of DHCP address pool 0 to mydomain.com.cn.

[H3C-dhcp-0] domain-name mydomain.com.cn
9.2.35 expired
Syntax
expired { day day [ hour hour [ minute minute ] ] | unlimited }

undo expired
View
Parameter

Description
Use the expired command to configure a valid period allowed for leasing IP addresses
in a global DHCP address pool.
9-39
Use the undo expired command to restore the default setting.

2106.
Related command: dhcp server ip-pool, dhcp server expired, and dhcp server
expired interface.
Example
# Set the IP address lease period of global address pool 0 to three minutes, two hours,
and one day.
[H3C-dhcp-0] day 1 hour 2 minute 3
9.2.36 gateway-list
Syntax
gateway-list ip-address [ ip-address ]

undo gateway-list { ip-address | all }
View
Parameter
ip-address: IP address of egress GW router. You can configure up to eight IP addresses

all: IP addresses of all the egress GW routers.
Description
Use the gateway-list command to configure IP addresses of the egress GW routers

used by DHCP clients.
Use the undo gateway-list command to delete the configuration.
By default, no egress GW router is configured.
Related command: dhcp server ip-pool and network.
Example
# Associate the egress GW router at 10.110.1.99 with DHCP address pool 0.

[H3C-dhcp-0] gateway-list 10.110.1.99
9-40
9.2.37 nbns-list
Syntax
nbns-list ip-address [ ip-address ]

undo nbns-list { ip-address | all }
View
Parameter

all: All the NetBIOS server IP addresses.
Description
Use the nbns-list command to configure NetBIOS server addresses in a global DHCP
address pool for the clients.
Use the undo nbns-list command to remove the configured NetBIOS server
addresses.
By default, no NetBIOS address is configured.
pool.
Related command: dhcp server ip-pool, dhcp server nbns-list, dhcp server
nbns-list interface, and netbios-type.
Example
# In the DHCP address pool 0, allocate the NetBIOS server at 10.12.1.99 to the clients.
[H3C-dhcp-0] nbns-list 10.12.1.99
9.2.38 netbios-type
Syntax
netbios-type { b-node | h-node | m-node | p-node }

undo netbios-type
View
9-41
Parameter
broadcast.
broadcast features.
Description
Use the netbios-type command to configure the NetBIOS node type of the clients of a
global DHCP address pool.
Use the undo netbios-type command to restore the default setting.
Related command: dhcp server ip-pool, dhcp server netbios-type (in interface
view), dhcp server netbios-type (in system view), and nbns-list.
Example
# Specify b-node as the NetBIOS node type of clients of DHCP address pool 0.
[H3C-dhcp-0] netbios-type b-node
9.2.39 network
Syntax
network ip-address [ mask netmask ]

undo network
View
Parameter
ip-address: The subnet address of an IP address pool used for dynamic allocation.
mask netmask: Network mask of the IP address pool. Natural mask will be adopted if
the parameter is not specified.
9-42
Description
Use the network command to configure an IP address range used for dynamic
allocation.
Use the undo network command to delete the configuration.
By default, no IP address range has been configured for dynamic allocation.
Each DHCP address pool can be configured with a network segment and the new
configuration will replace the old one. If the system requires several such address
segments, you should configure them in multiple address pools.
Related command: dhcp server ip-pool and dhcp server forbidden-ip.
Example
# Use 192.168.8.0/24 as the address space for DHCP address pool 0.

[H3C-dhcp-0] network 192.168.8.0 mask 255.255.255.0
9.2.40 option
Syntax
option code { ascii ascii-string | hex hex-string | ip-address ip-address }

undo option code
View
Parameter
code: Option value that needs to be assigned by the user, in the range 2 to 254, among
Description
Use the option command to configure the self-defined options for a DHCP global
address pool.
Use the undo option command to delete the DHCP self-defined options.
New options are emerging along with the development of DHCP. In order to
accommodate these options, manual option addition is supported so that they can be
added into the attribute list maintained by the DHCP server.
Related command: dhcp server option (in interface view) and dhcp server option
interface (in system view).
9-43
Example
# Define the hexadecimal strings of the option code 100 to 0x11 and 0x22.
[H3C-dhcp-0] option 100 hex 11 22
9.2.41 reset dhcp server conflict
Syntax
reset dhcp server conflict { ip-address | all }
View
User view
Parameter

all: All the address pools.
Description
Use the reset dhcp server conflict command to clear the statistics about DHCP
address collision.
Related command: display dhcp server conflict.
Example
# Clear all the address collision statistics.

<H3C> reset dhcp server conflict all
9.2.42 reset dhcp server ip-in-use
Syntax
reset dhcp server ip-in-use { ip ip-address | pool [ pool-name ] | interface

[ interface-type interface-number ] | all }
View
User view
Parameter
ip-address: Binding information of a specified IP address.

pool-name: Specifies a global address pool. All the global address pools will apply if no
interface-type interface-number: Specifies an interface address pool. If no interface has
been specified, all the interface address pools will apply.
9-44
all: All the address pools.
Description
Use the reset dhcp server ip-in-use command to clear the DHCP dynamic address
binding information, outdated or not.
Related command: display dhcp server ip-in-use.
Example
# Clear the binding information of the address 10.110.1.1.

<H3C> reset dhcp server ip-in-use ip 10.110.1.1
9.2.43 reset dhcp server statistics
Syntax
reset dhcp server statistics
View
User view
Parameter
None
Description
Use the reset dhcp server statistics command to clear the statistics on the DHCP
server, including such information as number of DHCP address pools, automatically
and manually bound addresses and expired addresses, number of unknown packets,
number of DHCP request packets, and number of response packets.
Related command: display dhcp server statistics.
Example
# Clear statistic information of the DHCP server.

<H3C> reset dhcp server statistics
9.2.44 static-bind ip-address
Syntax
static-bind ip-address ip-address [ mask netmask ]

undo static-bind ip-address
View
9-45
Parameter
ip-address: IP address to be bound.

netmask: Mask of the IP address to be bound. If it is not specified, the natural mask will
be adopted.
Description
Use the static-bind ip-address command to configure an IP address for a static

address binding in DHCP address pool view.
Use the undo static-bind ip-address command to delete the static address binding in
DHCP address pool view.
By default, no static address binding exists in DHCP address pool view.
The static-bind ip-address command must be used in combination with the
static-bind mac-address|static-bind client-identifier command to bind an IP
address with a MAC address or client identifier.
Related command: dhcp server ip-pool and static-bind { mac-address |
client-identifier }.
Example
# Bind the PC at the MAC address 0000-e03f-0305 with the IP address 10.1.1.1 using
the mask 255.255.255.0.
[H3C-dhcp-0] static-bind ip-address 10.1.1.1 mask 255.255.255.0
[H3C-dhcp-0] static-bind mac-address 0000-e03f-0305
9.2.45 static-bind { mac-address | client-identifier }
Syntax
static-bind { mac-address mac-address | client-identifier client-identifier }

undo static-bind { mac-address | client-identifier }
View
Parameter
mac-address: The host MAC address to be bound, which is in the format of H-H-H.
client-identifier: Host ID to be bound.
Description
Use the static-bind { mac-address | client-identifier } command to configure a MAC

address or client identifier for a static binding.
9-46
Use the undo static-bind { mac-address | client-identifier } command to delete the

MAC address or client identifier from a static binding.
By default, no MAC address or client identifier is bound statically.
The commands static-bind { mac-address | client-identifier } and static-bind
ip-address must be used in pairs.
Only one static binding can be configured for one MAC address or identifier.
Related command: dhcp server ip-pool, static-bind ip-address.
Example
# Bind the PC at the MAC address 0000-e03f-0305 with the IP address 10.1.1.1 using
the mask 255.255.255.0.
[H3C-dhcp-0] static-bind ip-address 10.1.1.1 mask 255.255.255.0
[H3C-dhcp-0] static-bind mac-address 0000-e03f-0305
9.2.46 voice-config
Syntax
voice-config { ncp-ip ip-address | as-ip ip-address | voice-vlan vlan-id { disable |

enable } | fail-over ip-address dialer-string }
undo voice-config [ ncp-ip | as-ip | voice-vlan | fail-over ]
View
Parameter
Description
Use the voice-config command to enable the DHCP server to send option 184 and
suboptions of 184 when it assigns addresses from the global address pool.
9-47
send option 184 and suboptions of 184 when it assigns addresses from the global
address pool.
the DHCP client.
cannot take effect.
Related command: dhcp server voice-config.
Example
# Enable the DHCP server to support option 184 and its suboptions in the view of global
address pool 123, setting IP address of NCP to 1.1.1.1, IP address of the alternate NCP
server to 2.2.2.2, state of voice VLAN to enable, ID of voice VLAN to 1, IP address for
failover call routing to 3.3.3.3, and dial string for failover call routing to 99*.
<H3C> system-view
[H3C] dhcp select global all
[H3C-dhcp-pool-123]voice-config ncp-ip 1.1.1.1
[H3C-dhcp-pool-123]voice-config as-ip 2.2.2.2
[H3C-dhcp-pool-123]voice-config voice-vlan 1 enable
[H3C-dhcp-pool-123]voice-config fail-over 3.3.3.3 99*
9.3 DHCP Relay Configuration Commands

9.3.1 debugging dhcp relay
Syntax
debugging dhcp relay { all | error | event | packet [ client mac mac-address ] }
undo debugging dhcp relay { all | error | event | packet [ client mac mac-address ] }
View
User view
Parameter
all: All DHCP-relay debugging.

error: Error debugging for DHCP-relay module.
event: Event debugging for DHCP-relay module.
packet: Packet debugging for DHCP-relay module.
9-48
client mac: MAC address of the DHCP client and only displays the information of the
specified DHCP client.
Description
Use the debugging dhcp relay command to enable debugging on the DHCP-relay
module.
Use the undo debugging dhcp relay command to disable DHCP-relay module
debugging.
Example
# Enable DHCP-relay module debugging.

<H3C> debugging dhcp relay
9.3.2 dhcp relay information
Syntax
dhcp relay information enable

undo dhcp relay information enable
View
System view
Parameter
None
Description
Use the dhcp relay information enable command to enable the DHCP relay to
support option 82 globally.
Use the undo dhcp relay information enable command to disable the DHCP relay to
support option 82.
Option 82 supported by the DHCP relay can provide up to 255 sub-options. Among
them, only sub-option 1 and sub-option 2 are available at present, allowing the DHCP
relay to insert into a DHCP packet the MAC address and VLAN ID of the switch port
connected to the DHCP client, and the MAC address of the DHCP relay.
By default, DHCP relay is disabled to support option 82.
Example
# Enable DHCP relay to support option 82.

[H3C] dhcp relay information enable
9-49
9.3.3 dhcp relay information strategy
Syntax
dhcp relay information strategy { drop | keep | replace }

undo dhcp relay information strategy
View
System view
Parameter
drop: Drops packets.

keep: Leaves option 82 in packets intact.
replace: Replaces the original option 82 information in packets with the option 82
information of this frame relay.
Description
Use the dhcp relay information strategy command to configure a strategy for
handling packets with option 82 on the DHCP relay.
Use the undo dhcp relay information strategy command to restore the default
strategy for handling packets with option 82.
When receiving a packet with option 82, the DHCP relay replaces the information in the
option 82 field with the option 82 information of itself.
Example
# Configure the DHCP replay to leave the option 82 information carried in requests
intact.
[H3C] dhcp relay information strategy keep
9.3.4 dhcp relay release
Syntax
dhcp relay release client-ip mac-address [ server-ip ]
View
Interface view, system view
Parameter
client-ip: IP address of the DHCP client.

mac-address: MAC address of the DHCP client, which is in the format of H-H-H.
server-ip: IP address of the DHCP server.
9-50
Description
Use the dhcp relay release command to send an IP address releasing request to a
DHCP server via the DHCP relay.
In the event no IP address of DHCP server has been specified, release packets would
be sent either to all the DHCP servers if this command is configured in system view or
to all the relay addresses configured on an interface if this command is configured in
interface view.
After receiving an IP address release request from the DHCP relay, the DHCP server
releases the IP address from the IP-in-use address pool and moves it to the
lease-expired queue. Normally, this address will experience some time before
participating in allocation again. For the client, however, this address is not released
and will be used until its lease really expires.
A release request takes effect only when the server uses MAC address to identify users.
The DHCP server function of a Comware router uses MAC address to identify users,
while those from most manufactures uses ID.
No debugging information is printed upon execution of this command.
Example
# Send a release packet to the DHCP server at 10.110.91.174, requesting to release

the IP address 192.2.2.25, which was offered to the client whose MAC address is
0050-ba34-2000.
[H3C] dhcp relay release 192.2.2.25 0050-ba34-2000 10.110.91.174
9.3.5 display dhcp relay address
Syntax
display dhcp relay address { interface interface-type interface-num | all }
View
Any view
Parameter
interface-type interface-num: Specifies an interface by its type and number.

Description
Use the display dhcp relay address command to view the DHCP relay address
configuration of an interface.
Related command: ip relay address and ip relay address interface.
9-51
Example
# View the DHCP relay address configurations of all the interfaces.

<H3C> display dhcp relay address all
** Ethernet11/2/0 DHCP Relay Address **
Relay Address [0] : 3.3.3.3
9.3.6 display dhcp relay statistics
Syntax
display dhcp relay statistics
View
Any view
Parameter
None
Description
Use the display dhcp relay statistics command to view the statistics of DHCP relay in
packet errors, DHCP packets received from clients, DHCP packets received from and
sent to servers, and DHCP packets sent to clients (including unicast and broadcast
packets).
Example
# View DHCP relay statistics.

<H3C> display dhcp relay statistics
Bad Packets recieved: 0
DHCP packets received from clients: 0
DHCP DISCOVER packets received: 0
DHCP REQUEST packets received: 0
DHCP INFORM packets received: 0
DHCP DECLINE packets received: 0
DHCP BOOTPREQUEST packets received: 0
DHCP packets received from servers: 0
DHCP OFFER packets received: 0
DHCP ACK packets received: 0
DHCP NAK packets received: 0
DHCP BOOTPREPLY packets received: 0
DHCP packets sent to servers: 0
DHCP packets sent to clients: 0
Unicast packets sent to clients: 0
9-52
Broadcast packets sent to clients: 0
9.3.7 display dhcprelay-security
Syntax
display dhcprelay-security
View
Any view
Parameter
None
Description
Use the display dhcprelay-security command to display the IP-to-MAC mappings of

the clients obtaining IP addresses dynamically through the DHCP relay.
Example
# Display the IP-to-MAC mappings of the clients obtaining IP addresses dynamically

through the DHCP relay.
[H3C] display dhcprelay-security
IP Address MAC Address IP Address Type
30.30.0.2 0000-0000-0000 Dynamic
9.3.8 ip relay address (in Interface View)
Syntax
ip relay address ip-address

undo ip relay address { ip-address | all }
View
Interface view
Parameter
ip-address: IP relay address in dotted decimal format.

all: All IP relay addresses.
Description
Use the ip relay address command to specify the exact location of a DHCP server by
configuring an IP relay address for it on the current interface.
9-53
Use the undo ip relay address command to delete one or all relay IP addresses used
by an interface.
By default, no relay IP address has been configured.
Note:
As the packets sent by DHCP client machines in some phases of DHCP are broadcast
packets, the interfaces configured with relay IP addresses must support broadcast. In
other words, this command can be used on the broadcast-supported network
interfaces, Ethernet interfaces for example.
Related command: dhcp select interface.
Example
# Add two relay IP addresses on Ethernet 0/0/0.

[H3C-Ethernet0/0/0] ip relay address 202.38.1.2
[H3C-Ethernet0/0/0] ip relay address 202.38.1.3
9.3.9 ip relay address cycle
Syntax
ip relay address cycle

undo ip relay address cycle
View
System view
Parameter
None
Description
Use the ip relay address cycle command to enable the DHCP relay to allocate
servers using the load sharing approach, where the HASH algorithm applies allowing
different clients to use different DHCP servers and the same client to use the same
DHCP server so long as it is possible.
Use the undo ip relay address cycle command to enable the DHCP relay to relay
client requests to all the DHCP servers by broadcasting.
A user is assigned to a server by the DHCP relay based on its MAC address and only
when this MAC address changes may this server be different. That means, a user is
associated with only one DHCP server, but one DHCP server can be associated with
9-54
multiple users. With this mechanism, the users of a server may be unable to obtain
addresses after the server fails because they are not assigned to other servers. Two
solutions are available for addressing this problem: recover the server, or delete the
configuration of the server from the DHCP Relay to allow the Relay to assign the users
to other servers.
By default, broadcast applies.
Related command: ip relay address.
Example
# Enable the DHCP Relay to assign servers in the load sharing approach.
[H3C] ip relay address cycle
9.3.10 ip relay address interface (in System View)
Syntax
ip relay address ip-address { interface interface-type interface-number [ to

undo ip relay address { ip-address | all } { interface interface-type interface-number
View
System view
Parameter
ip-address: IP address of the DHCP server.

all: In the undo form of the command, the first “all” refers to all the relay addresses and
the second all, the interfaces.
Description
Use the ip relay address interface command to configure a relay address for the
Ethernet interfaces in a specified range for the purpose of transparent forwarding.
Use the undo ip relay address interface command to delete the configured relay
address.
By default, no relay IP address has been configured.
Related command: ip relay address.
9-55
Example
# Add a relay IP address for the interfaces in the range of Ethernet2/0/0.1 to

Ethernet2/0/0.5.
[H3C] ip relay address 202.38.1.2 interface ethernet 2/0/0.1 to ethernet
2/0/0.5
9.3.11 reset dhcp relay statistics
Syntax
reset dhcp relay statistics
View
User view
Parameter
None
Description
Use the reset dhcp relay statistics command to clear the DHCP relay statistics.
Related command: display dhcp relay statistics.
Example
# Clear the DHCP relay statistics.

<H3C> reset dhcp relay statistics
9.4 DHCP Client Configuration Commands

9.4.1 debugging dhcp client
Syntax
debugging dhcp client { event | packet | error | all }

undo debugging dhcp client { event | packet | error | all }
View
User view
Parameter
event: Protocol events of the DHCP client, which include address allocation and data
updating.
packet: DHCP packets received and sent by the DHCP client.
9-56
error: Unknown packet information or error information.

all: Enables debugging of the DHCP client in all the information (event, packet, and
error).
Description
Use the debugging dhcp client command to enable debugging on the DHCP client.
Use the undo debugging dhcp client command to disable debugging on the DHCP
client. By default, DHCP client debugging is disabled.
Example
# Enable event debugging on the DHCP client.

<H3C> debugging dhcp client event
9.4.2 display dhcp client
Syntax
display dhcp client [ verbose ]
View
Any view
Parameter
verbose: Statistic details of the DHCP client.
Description
Use the display dhcp client command to display the statistic information of the DHCP
client. Executing the command attached without the keyword parameter verbose will
display only the brief address allocation information on the DHCP client.
Example
# Display the statistic details of the DHCP client.

[H3C] display dhcp client verbose
DHCP client statistic information:
Ethernet0/0:
Current machine state: BOUND
Alloced IP: 169.254.0.2 255.255.0.0
Alloced lease: 86400 seconds, T1: 43200 seconds, T2: 75600 seconds
Lease from 2004.09.20 01:05:03 to 2004.09.21 01:05:03
Server IP: 169.254.0.1
Transaction ID = 0x3d8a7431
Default router: 2.2.2.2
9-57
DNS server: 1.1.1.1

Domain name: huawei-3com.com
Client ID: huawei-3com-00e0.fc0a.c3ef-Ethernet0/0
Next timeout will happen after 0 days 11 hours 56 minutes 1 seconds.
Ethernet2/0:
Current machine state: HALT
The statistic information shows that two interfaces, that is, Ethernet0/0 and Ethernet2/0,
have been configured to be DHCP clients.
Ethernet0/0 has been assigned with the address 169.254.0.2/16 subject to the lease
expiration of 86400 seconds and the current machine state is BOUND. The renewal
timer is set to 43200 seconds, the rebinding timer to 75600 seconds, and the lease
expiration to the period since 2004.09.20 01:05:03 to 2004.09.21 01:05:03. The
selected DHCP server is at 169.254.0.1, the GW at 2.2.2.2, and the DNS server at
1.1.1.1, given the domain name is huawei-3com.com. In addition, the next timeout will
happen 1 second, 56 minutes, and 11 hours later.
The allocation process has not been started at Ethernet2/0 yet. The current machine
state is HALT, which is normally as a result of the DOWN state of the interface.
Note that if more than one default router or DNS server is specified in the response
packet from the server, a DHCP client resolves only the first one.
# Display more details of the DHCP client.
[H3C] display dhcp client verbose
DHCP client statistic information:
Ethernet0/0:
Current machine state: BOUND
Alloced IP: 169.254.0.2 255.255.0.0
Alloced lease: 300 seconds, T1: 150 seconds, T2: 262 seconds
Lease from 2004.09.15 07:11:55 to 2004.09.15 07:16:55
Server IP: 169.254.0.1
Transaction ID = 0x3d8432b1
Client ID: huawei-3com-00e0.fc0a.c3ef-Ethernet0/0
Next timeout will happen after 0 days 0 hours 1 minutes 36 seconds.
Table 9-6 Statistic information field description of DHCP client
Field Description
Interface where the client is allowed to
Ethernet0/0
dynamically obtain an IP address
Current machine state State of the client state machine
Alloced IP IP address allocated to the client
lease Lease period
9-58
Field Description
T1 Duration of the renewal timer
T2 Duration of the rebinding timer
Lease from….to…. The starting time and the end time of the lease
Server IP The selected DHCP server address
Transaction ID Transaction ID
Client ID User ID
Default router GW address
DNS server DNS server address
Domain name Domain name
Requested IP The requested IP address
Offered IP The provided IP address
9.4.3 ip address dhcp-alloc
Syntax
ip address dhcp-alloc
undo ip address dhcp-alloc
View
Interface view (Ethernet interface or subinterface, synchronous/asynchronous serial

interface encapsulated with PPP, HDLC, or frame relay, E1 interface)
Parameter
None
Description
Use the ip address dhcp-alloc command to enable DHCP client on the Ethernet or
WAN interface for obtaining local IP address.
Use the undo ip address dhcp-alloc command to disable DHCP client.
By default, DHCP client is disabled.
Currently this command is available on following interfaces:
z Ethernet interface (subinterface)
z Synchronous/asynchronous serial interface encapsulated with PPP, HDLC, or
frame relay
z E1 interface.
9-59
Example
# Enable DHCP client on Ethernet0/0/0.

[H3C-Ethernet0/0/0] ip address dhcp-alloc
9-60
Comware V3 Chapter 10 IP Performance Configuration Commands
Chapter 10 IP Performance Configuration

Commands
10.1 IP Performance Configuration Commands

10.1.1 debugging ip
Syntax
debugging ip { icmp | packet [ acl { acl-number1 | acl-number2 } ] }

undo debugging ip { icmp | packet }
View
User view
Parameter
acl-number1: ACL based on the interface, in the range of 1000 to 1999.

acl-number2: ACL in the range of 2000 to 3999. The ACL in the range of 2000 to 2999
is the basic ACL and that in the range of 3000 to 3999 is the advanced ACL.
Description
Using debugging ip icmp command to enable the ICMP debugging.

Use the undo debugging ip icmp command to disable the ICMP debugging.
The debugging ip packet command is used to enable the IP packet debugging. The
filtration to the debugging information can be accomplished by filtering the IP packets
via acl.
Use the undo debugging ip packet command to disable the IP packet debugging.
Example
# Enable the IP packet debugging.

<H3C> debugging ip packet
*0.129680-IP-8-debug_case:
Delivering, interface = Serial0/0/0, version = 4, headlen = 20, tos = 6,pktlen
= 70, pktid = 49, offset = 0, ttl = 1, protocol = 17,checksum = 50, s = 1.1.1.2,
d = 224.0.0.2
prompt: IP packet is delivering up!
*0.129680-IP-8-debug_case:
10-1
Sending, interface = Serial0/0/0, version = 4, headlen = 20, tos = 6,pktlen

= 70, pktid = 49, offset = 0, ttl = 1, protocol = 17,checksum = 55147, s = 1.1.1.2,
d = 224.0.0.2
prompt: Sending the packet from local at Serial0/0/0
<H3C> debugging ip icmp
*0.157090-IP-8-debug_icmp:
ICMP Receive: echo(Type=8, Code=0), Src = 127.0.0.1, Dst = 1.1.1.2
ICMP Send: echo-reply(Type=0, Code=0), Src = 1.1.1.2, Dst = 127.0.0.1
ICMP Receive: echo-reply(Type=0, Code=0), Src = 1.1.1.2, Dst = 127.0.0.1
10.1.2 debugging tcp event
Syntax
debugging tcp event [ task_id socket_id ]

undo debugging tcp event [ task_id socket_id ]
View
User view
Parameter
task_id: The ID of a task.

socket_id: The ID of a socket.
Description
Use the debugging tcp event command to enable TCP events debugging.
Use the undo debugging tcp event command to disable TCP events debugging.
There is limitation for the number of debugging switches enabled, that is, only a fixed
number of debugging switches can be enabled at one time (combination of task ID and
socket ID). In addition, when TCP is enabled to receive connection request reactively, a
new socket will be created to establish that connection, and some programs will create
a new task to process the connection, like Telnet server. So to view information about
connection, such parameters as task_id and socket_id cannot be used for filtering.
Example
# Enable debugging of TCP events.

<H3C> debugging tcp event
*0.630270-SOCKET-8-TCP EVENT:
10-2
1043494683: task = Co0(2), socketid = 0,

TCPCB 0x02c6fd74 created
1043494683: task = Co0(2), socketid = 1,
state CLOSED changed to SYN_SENT
1043494683: task = Co0(2), socketid = 1,
sending SYN, seq = 74249530,
LA = 127.0.0.1:1025, FA = 1.1.1.1:23
1043494683: task = Co0(2), socketid = 1,
advertising MSS = 512,
LA = 127.0.0.1:1025, FA = 1.1.1.1:23
1043494683: task = VTYD(9), socketid = 0,
received MSS = 512,
LA = 1.1.1.1:23, FA = 127.0.0.1:1025
733759463: sending RST to 2.2.2.1:11022
1043495346: task = Co0(2), socketid = 1,
connection refused because remote sent RST!
LA = 1.1.1.1:1026, FA = 1.1.1.2:21
TCP:
TCP event debugging is on for task any socket any
10.1.3 debugging tcp md5
Syntax
debugging tcp md5

undo debugging tcp md5
View
User view
10-3
Parameter
None
Description
Use the debugging tcp md5 command to enable the MD5 authentication debugging of
the TCP connection.
Use the undo debugging tcp md5 command to disable the MD5 authentication
debugging of the TCP connection.
Example
# Enable the MD5 authentication debugging of the TCP connection.

<H3C> debugging tcp md5
10.1.4 debugging tcp packet
Syntax
debugging tcp packet [ task_id socket_id ]

undo debugging tcp packet [ task_id socket_id ]
View
User view
Parameter

Description
Use the debugging tcp packet command to enable the debugging of TCP packet. The
number of debugging switches users can enable is limited, that is, at the same time
only a fixed number of debugging switches can be enabled (combination of task ID and
socket ID).
Use the undo debugging tcp packet command to disable the debugging of TCP
packet.
Example
# Enable the debugging of TCP packet.

<H3C> debugging tcp packet
*0.100070-SOCKET-8-TCP PACKET:
1043204051: Input: Co0(5) socketId = 2, state = SYN_SENT,
10-4
src = 127.0.0.1:1025, dst = 2.2.2.2:23,

seq = 11084380, ack = 0, optlen = 4, flag = SYN ,
window = 8192
1043204051: Output: Co0(5) SocketId = 2, State = SYN_SENT,
src = 127.0.0.1:1025, Dst = 2.2.2.2:23,
Seq = 11084380, Ack = 0, Datalen = 4, Flag = ACK PSH ,
Window = 8192
1043204051: Retrans: Co0(5) SocketId = 2, State = SYN_SENT,
Src = 127.0.0.1:1025, Dst = 2.2.2.2:23,
Seq = 11084380, Ack = 0, Optlen = 4, Flag = SYN ,
Window = 8192
10.1.5 debugging udp packet
Syntax
debugging udp packet [ task_id socket_id ]

undo debugging udp packet [ task_id socket_id ]
View
User view
Parameter

Description
Use the debugging udp packet command to enable the debugging of UDP packet.
The number of debugging switches users can enable is limited, that is, at the same time
only a fixed number of debugging switches can be enabled (combination of task ID and
socket ID).
Use the undo debugging udp packet command to disable the debugging of UDP
packet.
Example
# Enable the debugging of UDP packet.

<H3C> debugging udp packet
*0.377770-SOCKET-8-UDP:
1043494431: Output: task = ROUT(6), socketid = 3,
src = 1.1.1.1:520, dst = 255.255.255.255:520, datalen = 24,
10-5
10.1.6 display fib
Syntax
display fib
View
Any view
Parameter
None
Description
Use the display fib command to view the summary of the Forwarding Information
Base.
This command outputs the Forwarding Information Base in a list, in which each line
represents one route. The following points are included:
z Destination address/mask length
z Next hop
z The current flag, which is expressed in the combination of G, H and U. G
represents Gateway, H is Host (host route), and U is UP (available).
z Time stamp
z Outbound interface
Example
# Display the summary of the forwarding information base.

<H3C> display fib
Flag:
U: Usable G:Gateway H:Host B:Blackhole S:Static
R:Reject E:Equal cost multi-path L:Generated by ARP or ESIS
Destination/Mask Nexthop Flag TimeStamp Interface
196.1.1.0/24 220.1.1.2 GU t[418913] Vlan-interface1200
10-6

……………………………………………………………………………………
10.1.7 display fib acl
Syntax
display fib acl number
View
Any view
Parameter
number: Basic ACL number, ranging from 2000 to 2999.
Description
Use the display fib acl command to filter and display FIB information.
According to ACL number, you can view the FIB table entries matching the filtering
rules in a format.
When an ACL number in the range 2000 to 2999 is entered, the corresponding ACL will
be searched. If no ACL is found, all FIB table entries information will be displayed; and
if such an ACL is found, the FIB table entries information will be output in a format.
If the number of FIB table entries matching the filtering rules is 0, the following
information will be output:
Route entry matched by access-list 2000:
Summary count: 0
If the number of FIB table entries matching the filtering rules is not 0, the FIB table entry
information will be output in the following format:
Summary count: 1
127.0.0.0/8 127.0.0.1 U t[0] InLoopBack0
Example
# Display the FIB table entries matched by the ACL.

<H3C> display fib acl 2000
Summary counts: 1
127.0.0.0/8 127.0.0.1 U t[0] InLoopBack0
10-7
10.1.8 display fib begin
Syntax
display fib | { begin | include | exclude } text
View
Any view
Parameter
text: Character.
Description
Use the display fib command to output the lines related to the line containing the
character string text in the buffer according to the regular expression.
Use the display fib | begin text command to view the lines beginning from the line
containing the character string text to the end line of the buffer.
Use the display fib | include text command to just view the lines containing the
character string text.
Use the display fib | exclude text command to view the lines not containing the
character string text.
Example
# Display the lines beginning from the line containing the character string “169.254.0.0”
to the end line of the buffer:
<H3C> display fib | begin 169.254.0.0
169.254.0.0/16 2.1.1.1 U t[0] Ethernet0/0/0
2.0.0.0/16 2.1.1.1 U t[0] Ethernet0/0/0
127.0.0.0/8 127.0.0.1 U t[0] InLoopBack0
# Display all the lines containing the character string “Ethernet0”:

<H3C> display fib | include ethernet0/0/0
169.254.0.0/16 2.1.1.1 U t[0] Ethernet0/0/0
2.0.0.0/16 2.1.1.1 U t[0] Ethernet0/0/0
# Display all the lines not containing the character string ”169.254.0.0”:
<H3C> display fib | exclude 169.254.0.0
2.0.0.0/16 2.1.1.1 U t[0] Ethernet0/0/0
127.0.0.0/8 127.0.0.1 U t[0] InLoopBack0
10-8
10.1.9 display fib ip-prefix
Syntax
display fib ip-prefix listname
View
Any view
Parameter
listname: The name of the prefix list.
Description
Use the display fib ip-prefix command to filter and display FIB information by
prefix-list name in certain format.
If no FIB entry matches the specified prefix-list, the system displays the prompt
indicating that the number of FIB entry matches is 0; if the specified prefix-list name
cannot be found, no FIB entry is displayed; if the FIB table entries after filtering is not 0,
they are output in certain format.
If no FIB table entry matching the prefix list, the following information will be output:
Route entry matched by prefix-list abc1:
Summary count: 0
If the number of FIB table entries after filtering is not 0, FIB table entry information will
be output in the following format:
Route entry matched by prefix-list abc2:
Summary count: 1
127.0.0.0/8 127.0.0.1 U t[0] InLoopBack0
Example
# Display the FIB table entries matched by the prefix list abc0.
<H3C> display fib ip-prefix abc0
Route Entry matched by prefix-list abc0:
Summary count: 4
127.0.0.0/8 127.0.0.1 U t[0] InLoopBack0
127.0.0.1/32 127.0.0.1 U t[0] InLoopBack0
169.0.0.0/8 2.1.1.1 SU t[0] Ethernet 0/0/0
169.0.0.0/15 2.1.1.1 SU t[0] Ethernet 0/0/0
10-9
10.1.10 display fib longer
Syntax
display fib dest-addr1 [ dest-mask1 ] [ longer ]

display fib dest-addr1 dest-mask1 dest-addr2 dest-mask2
View
Any view
Parameter
dest-addr1: The destination IP address 1, which is expressed in dotted decimal format.

dest-mask1: The subnet mask 1 corresponding to the destination IP address 1, which is
the mask in dotted decimal format or the mask length in integer format.
dest-addr2: The destination IP address 2, which is expressed in dotted decimal format.
dest-mask2: The subnet mask 2 corresponding to the destination IP address 2, which is
the mask in dotted decimal format or the mask length in integer format.
Description
Different parameters selected leads to different matching methods.

display fib dest-addr: According to the destination address, if FIB table entries can be
found within the range of natural mask, all the subnets will be displayed. Otherwise,
only the FIB table entries found by operating the longest match will be displayed.
display fib dest-addr dest-mask: The FIB table entries exactly matching the
destination address and mask are displayed.
display fib dest-addr longer: The FIB table entries matching the destination addresses
within the range of natural mask.
display fib dest-addr dest-mask longer: The FIB table entries matching the
destination IP addresses within the entered mask range.
The display fib dest-addr1 dest-mask1 dest-addr2 dest-mask2 command is used to
display FIB table entries whose destination address is within the range from dest-addr1
dest-mask1 to dest-addr2 dest-mask2.
Example
# Display the FIB table entries whose destination address matches169.253.0.0 longest
with the natural mask range.
<H3C> display fib 169.253.0.0 longer
169.0.0.0/16 2.1.1.1 U t[0] Ethernet0/0/0
10-10
# Display the FIB entries whose destination address is within the range from
69.254.0.0/16 to 169.254.0.6/16.
<H3C> display fib 169.254.0.0 255.255.0.0 169.254.0.6 255.255.0.0
169.254.0.1/16 2.1.1.1 U t[0] Ethernet0/0/0
10.1.11 display fib statistics
Syntax
display fib statistics
View
Any view
Parameter
None
Description
Use the display fib statistics command to display the total numbers of FIB table
entries.
Example
# Display the total numbers of FIB table entries.

<H3C> display fib statistics
Route Entry Count : 30
10.1.12 display icmp statistics
Syntax
display icmp statistics
View
Any view
Parameter
None
Description
Use the display icmp statistics command to view statistics about ICMP messages.
10-11
Example
# Display statistics about ICMP messages.

[H3C] display icmp statistics
Input: bad formats 0 bad checksum 0
echo 5 destination unreachable 0
source quench 0 redirects 0
echo reply 15 parameter problem 0
timestamp 0 information request 0
mask requests 0 mask replies 0
time exceeded 1
Output:echo 15 destination unreachable 0
source quench 0 redirects 0
echo reply 5 parameter problem 0
timestamp 0 information reply 0
mask requests 0 mask replies 0
time exceeded 1
Table 10-1 Description of the output information of the display icmp statistics
command
Field Description
Input: bad formats Number of input packets in bad format
bad checksum Number of input packets with wrong checksum

echo Number of input/output echo request packets
destination Number of input/output packets with unreachable
unreachable destination
source quench Number of input/output source quench packets
redirects Number of input/output redirected packets

echo reply Number of input/output echo reply packets
parameter problem Number of input/output packets with parameter problem
timestamp Number of input/output timestamp packets

information request Number of input information request packets
mask requests Number of input/output mask request packets
mask replies Number of input/output mask reply packets
information reply Number of output information reply packets
time exceeded Number of time exceeded packets
10-12
10.1.13 display ip fast-forwarding cache
Syntax
display ip fast-forwarding cache [ ip-address ]
View
Any view
Parameter
ip-address: Specifies IP address to be displayed..
Description
Use the display ip fast-forwarding cache command to view information on the

unicast fast forwarding table.
Example
# Display the information of the unicast fast forwarding table.

[H3C] display ip fast-forwarding cache
Fast-Forwarding cache:
Index SrIP SrPort DsIP DsPort Pro Input_If Output_If FLAG
600:0 1.1.3.149 1463 10.10.26.30 23 6 Ethernet0/0/0 Ethernet1/0/0 81
The above information indicates that the latest cache contains the data flow from port
1463 at 1.1.3.149 to port 23 at 10.10.26.30, with a protocol number 6, that is, the TCP
data, ingress is Ethernet0/0/0 and the egress is Ethernet1/0/0.
10.1.14 display ip interface
Syntax
display ip interface [ interface-type interface-number ]
View
Any view
Parameter

Description
Use the display ip interface command to view IP-related information about the
10-13
By default, if no interface is specified, the IP-related information about all interfaces is

displayed.
The information is helpful for troubleshooting.
Related command: display interface, display ip interface brief.
Example
# Display IP-related information about interface Serial 1/0/0.

<H3C> display ip interface serial 1/0/0
Serial1/0/0 current state :UP
Line protocol current state :DOWN
Broadcast address : 1.1.1.255
The Maximum Transmit Unit : 1500 bytes
ip fast-forwarding incoming packets state is Enabled
ip fast-forwarding outgoing packets state is Enabled
IP input packets : 0, bytes : 0, multicasts : 0
IP output packets : 0, bytes : 0, multicasts : 0
TTL invalid packet number: 0
ICMP packet input number: 0
Echo reply: 0
Unreachable: 0
Source quench: 0
Routing redirect: 0
Echo request: 0
Router advert: 0
Router solicit: 0
Time exceed: 0
IP header bad: 0
Timestamp request: 0
Timestamp reply: 0
Information request: 0
Information reply: 0
Netmask request: 0
Netmask reply: 0
Unknown type: 0
DHCP packet deal mode: global
10.1.15 display ip interface brief
Syntax
display ip interface brief [ interface-type [ interface-number ] ]
10-14
View
Any view
Parameter

Description
Use the display ip interface brief command to view IP-related summary about the
By default, if no interface is specified, the IP-related summary about all interfaces is
displayed.
Related command: display interface, display ip interface.
Example
# Display IP-related summary about all interfaces.

[H3C] display ip interface brief
*down: administratively down
(l): loopback
(s): spoofing
Interface IP Address Physical Protocol Description
Aux0 unassigned down down Aux0 Interface
Ethernet0/0/0 192.168.0.1 down down Ethernet0/0/0 Interface
Ethernet0/0/1 unassigned down down Ethernet0/0/1 Interface
Virtual-Template0unassigned up up(s) changchen
10.1.16 display ip socket
Syntax
display ip socket [ socktype sock_type ] [ task_id socket_id ]
View
Any view
Parameter
sock_type: The type of a socket: (tcp:1, udp 2, raw ip 3)

10-15
Description
Use the display ip socket command to display the information about all sockets in the
current system.
Example
# Display the information about the socket of TCP type.

<H3C> display ip socket socktype 1
SOCK_STREAM:
Task = VTYD(9), socketid = 1, Proto = 6,
LA = 0.0.0.0:23, FA = 0.0.0.0:0,
sndbuf = 4096, rcvbuf = 4096, sb_cc = 0, rb_cc = 0,
socket option = SO_ACCEPTCONN
socket state = SS_PRIV SS_ASYNC
SOCK_DGRAM:
Task = ROUT(6), socketid = 1, Proto = 17,
LA = 0.0.0.0:0, FA = 0.0.0.0:0,
socket option = SO_UDPCHECKSUM
SOCK_RAW:
Task = ROUT(6), socketid = 2, Proto = 2,
LA = 0.0.0.0, FA = 0.0.0.0,
socket option = 0,
socket state = SS_PRIV SS_NBIO SS_ASYNC
Explanations of the display information:

SOCK_STREAM: the socket type.
Proto: the protocol number used by the socket.
sndbuf: the sending buffer size of the socket.
rcvbuf: the receiving buffer size of the socket.
sb_cc: the current data size in the sending buffer. The value makes sense only for the
socket of TCP type, because only TCP is able to cache data.
rb_cc: the current data size in the receiving buffer.
socket option: the option of the socket.
socket state: the state of the socket.
# Display the information about the socket with socket ID as 4 and task ID as 8.
<H3C> display ip socket 8 4
Task = VTYD(8), socketid = 4, Proto = 6,
LA = 0.0.0.0:23, FA = 0.0.0.0:0,
10-16

socket option = SO_ACCEPTCONN
10.1.17 display ip statistics
Syntax
display ip statistics
View
Any view
Parameter
None
Description
Use the display ip statistics command to view IP traffic statistics information. This
command is used to display such statistics information as IP packet transmit/receive,
packet assembly/disassembly, which is helpful to fault diagnosis.
Related command: display interface, display ip interface, and reset ip statistics.
Example
# Display the IP traffic statistic information.

<H3C> display ip statistics
Input: sum 7120 local 112
bad protocol 0 bad format 0
bad checksum 0 bad options 0
Output: forwarding 0 local 27
dropped 0 no route 2
compress fails 0
Fragment:input 0 output 0
dropped 0
fragmented 0 couldn't fragment 0
Reassembling:sum 0 timeouts 0
Table 10-2 Description of the fields of the display ip statistics command
Field Description
Input: sum Sum of input packets
Number of received packets whose destination is the
local
local device
bad protocol Number of packets with wrong protocol number
10-17
Field Description
bad format Number of packets in bad format
bad checksum Number of packets with wrong checksum
bad options Number of packets that has wrong options
Output: forwarding Number of forwarded packets
local Number of packets that are sent by the local device
dropped Number of dropped packets during transmission
no route Number of packets that cannot be routed
compress fails Number of packets that cannot be compressed
Fragment: input Number of input fragments
output Number of output fragments
dropped Number of dropped fragments
fragmented Number of packets that are fragmented
couldn't fragment Number of packets that cannot be fragmented
Reassembling: sum Number of packets that are reassembled

timeouts Number of packets that time out
Note:
When fast forwarding is functioning, the sum of input packets and the number of
forwarded packets only count in unicast packets. The likelihood exists that some other
types of packets are counted in, for example, broadcast packets sent/received before
fast forwarding is enabled and/or other types of packets sent/received after fast
forwarding fails.
10.1.18 display tcp statistics
Syntax
display tcp statistics
View
Any view
Parameter
None
10-18
Description
Use the display tcp statistics command to view TCP traffic statistic information.
The command is used to display the traffic statistic information of all the active TCP
connections. Statistics information is classified into two parts: receiving and sending,
and each part is further classified according to different types of packets. For example,
for receiving packets, there are retransmission packets number, keep-alive detection
packets number, etc. Also the statistics closely related to connection are displayed,
such as connection number received, retransmission packets number and keep-alive
detection packets number. The unit of statistics results is packet, and sometimes is
byte.
Related command: display tcp status.
Example
# Display the TCP traffic statistic information.

<H3C> display tcp statistics
Received packets:
Total: 0
packets in sequence: 0 (0 bytes)
window probe packets: 0, window update packets: 0
checksum error: 0, bad offset : 0, too short : 0
duplicate packets : 0 (0 bytes), partially duplicate packets : 0(0 bytes)
out-of-order packets : 0 (0 bytes)
packets with data after window : 0 (0 bytes)
packets after close : 0
ack packets:0 (0 bytes), duplicate ack packets:0, ack packets with unsend
data:0
Sent packets:
Total: 0
urgent packets: 0
control packets: 0 ( 0 RST)
window probe packets: 0, window update packets: 0
data packets : 0 (0 bytes), data packets retransmitted: 0 (0 bytes)
ack only packets : 0(0 delayed)
Total retransmit timeout: 0, connections dropped in retransmit timeout: 0
Keepalive timeout: 0, keepalive probe: 0, dropped connections in keepalive:
0
Initiated connections: 0, accepted connections: 0,established connections:
0
Closed connections: 0,( dropped: 0, initiated dropped: 0)
Packets dropped with MD5 authentication : 0
10-19
Packets permitted with MD5 authentication : 0
The above information means:

Receiving statistics:
Total number of packets received: 0
The number of packets reaching as the order (total bytes: 0): 0
Window detection packets number: 0, window upgrading packets number: 0.
The number of packet verification errors: 0, the number of packet length errors: 0.
The number of totally repeated packets: 0 (the total bytes: 0), the number of partial
repeated packets: 0 (the total bytes: 0).
The number of packets with confusing order: 0 (the total bytes: 0).
The number of packets reaching outside of the receiving window: 0 (the total bytes: 0).
The number of packets reaching after connection being closed: 0.
The confirmed packets number: 0 (the bytes of the confirmed data: 0), the repeated
confirmed packets number: 0, ACK packets number already being confirmed but not
being sent yet: 0.
Sending statistics:
Total number of packets sent: 0.
The urgent packets number: 0.
The control packets number: 0. (RST packets number: 0).
The window detection packets number: 0, the window upgrading packets number: 0.
The data packets number: 0 (the total bytes: 0) he retransmission packets number: 0
(the total bytes: 0).
ACK packets number: 0 (delay ACK packets number: 0)
The time-out times of retransmission timer: 0, the connection number discarded due to
retransmission times beyond limitation: 0.
The time-out times of keep-alive timer: 0, the times of sending keep-alive detection
packets: 0.
The number of connections initiated: 0, the number of connections received: 0, the
number of connections established: 0.
The number of connections closed already: 0, the number of connections discarded
accidentally (after SYN is received):0, the times of connections actively failed to
establish (before SYN is received): 0.
The packets number discarded after MD5 verification: 0.
The packets number passing MD5 verification: 0.
10-20
10.1.19 display tcp status
Syntax
display tcp status
View
Any view
Parameter
None
Description
Use the display tcp status command to monitor TCP connection any time.
Related command: display local-user.
Example
# Display the TCP connection status.

<H3C> display tcp status
*: TCP MD5 Connection
TCPCB Local Address Foreign Address State
0442c394 10.110.93.146.23 10.110.93.175.1538 ESTAB
045d8074 0.0.0.0.21 0.0.0.0.0 LISTEN
10.1.20 display udp statistics
Syntax
display udp statistics
View
Any view
Parameter
None
Description
Use the display udp statistics command to view TCP traffic statistic information.
The command is used to display the traffic statistic information of all the active TCP
connections. Statistics information is classified into two parts: receiving and sending,
and each part can be further classified according to different types of packets, as
checksum packets and error packets, for example. Moreover there are statistics closely
10-21
related to connection, such as the number of broadcast packets. The statistics

information is organized in terms of packet.
For relate configuration, please refer to the reset udp statistics command.
Example
# Display the UDP traffic statistic information.

<H3C> display udp statistics
Received packet:
Total: 0
checksum error: 0
shorter than header: 0, data length larger than packet: 0
no socket on port: 0
total broadcast or multicast packets : 0
no socket broadcast or multicast packets: 0
not delivered, input socket full: 0
input packets missing pcb cache: 0
Sent packet:
Total: 0
Table 10-3 Description on the fields of the display udp statistics command
Field Description
Received packet: Statistics about the received packets
Total: 0 Total number of received UDP packets

Number of the packets with checksum
checksum error: 0
error
Number of the packets with data length
shorter than header: 0
shorter than header
Number of the received packets larger
data length larger than packet: 0
than the allowed packet length
Number of the received packets with an
no socket on port: 0
unknown port number
Number of the received broadcasts or
total broadcast or multicast packets : 0
multicasts
no socket broadcast or multicast Number of the received broadcasts or
packets: 0 multicasts with an unknown port number
Number of the packets that are not
not delivered, input socket full: 0
delivered because the input socket is full
Number of the packets that mismatch
input packets missing pcb cache: 0
the PCB cache
10-22
Field Description
Sent packet: Statistics about the transmitted packets
Total: 0 Total number of the transmitted packets
10.1.21 icmp redirect send
Syntax
icmp redirect send

undo icmp redirect send
View
System view
Parameter
None
Description
Use the icmp redirect send command to enable the sending of ICMP Redirect
messages.
Use the undo icmp redirect send command to disable the sending of ICMP
messages.
By default, the system can send ICMP Redirect messages.
Example
# Enable the sending of ICMP Redirect messages.

[H3C] icmp redirect send
10.1.22 ip fast-forwarding
Syntax
ip fast-forwarding [ inbound | outbound ]

undo ip fast-forwarding [ inbound | outbound ]
View
Interface view
Parameter
inbound: Allows unicast fast forwarding only on the inbound interface.

outbound: Allows unicast fast forwarding only on the outbound interface.
10-23
Description
Use the ip fast-forwarding command to enable unicast fast packet forwarding on

interfaces.
Use the undo ip fast-forwarding command to disable unicast fast forwarding on both
the inbound and outbound interfaces.
By default, unicast fast forwarding is allowed on both inbound and outbound interfaces.
Unicast fast forwarding is well-suited to high-speed links (such as Ethernet and FR). Its
function will be render useless, however, on a low-speed link, due to the low
transmission rate such a link can provide.
H3C Series Routers support unicast fast forwarding on the links of various high-speed
interfaces such as Ethernet, synchronous PPP, FR, and HDLC, on the interfaces
configured with firewall and NAT features, and on the virtual tunnel interface of GRE as
well. However, it should be noted that the interface configured with the function of
unicast fast forwarding will be unable to send ICMP redirection packets.
Example
# Disable unicast fast forwarding on an interface.

[H3C-Ethernet/0/0] undo ip fast-forwarding
# Enable unicast fast forwarding on the inbound interface on Ethernet 0/0/0.

[H3C-Ethernet0/0/0] ip fast-forwarding inbound
10.1.23 reset ip fast-forwarding cache
Syntax
reset ip fast-forwarding cache
View
User view
Parameter
None
Description
Use the reset ip fast-forwarding cache command to reset the unicast fast forwarding
cache.
After being cleared, the fast forwarding table does not contain any fast forwarding entry.
Example
# Clear the unicast fast forwarding cache.
10-24
<H3C> reset ip fast-forwarding cache
10.1.24 reset ip statistics
Syntax
reset ip statistics
View
User view
Parameter
None
Description
Use the reset ip statistics command to clear the IP statistics information. In some
special cases, it is necessary to clear the IP statistics information and perform new
statistics.
Related command: display ip interface and display ip statistics.
Example
# Clear IP statistics information.

<H3C> reset ip statistics
10.1.25 reset tcp statistics
Syntax
reset tcp statistics
View
User view
Parameter
None
Description
Use the reset tcp statistics command to clear TCP traffic statistic information.
Related command: display tcp statistics.
10-25
Example
# Display the TCP traffic statistic information.

<H3C> reset tcp statistics
10.1.26 reset udp statistics
Syntax
reset udp statistics
View
User view
Parameter
None
Description
Use the reset udp statistics command to clear the UDP statistics information.
Example
# Clear UDP traffic statistics information.

<H3C> reset udp statistics
10.1.27 tcp mss
Syntax
tcp mss value

undo tcp mss
View
Interface view
Parameter
Value: The threshold for the TCP packet to be fragmented, with the value ranging from
128 to 2048.
Description
Use the tcp mss command to designate a value as a threshold for TCP packets to be
fragmented. The undo tcp mss command is used to prevent TCP packets from being
fragmented. As the default MTU of the interface being 1500 bytes, this restricts the total
length of encryption packet head + data link expenditure + IP packet head + TCP
10-26
packet to 1500 bytes. So the dear length of TCP packets to fragment may be about
1200 bytes.
By default, TCP packets are not fragmented.
Example
# Configure the threshold of TCP packet fragmentation to be 300.

[H3C-Ethernet0/0/0] tcp mss 300
10.1.28 tcp timer fin-timeout
Syntax
tcp timer fin-timeout time-value

undo tcp timer fin-timeout
View
System view
Parameter
time-value: TCP finwait timer value, in second, with the value range of 76 to 3600.
Description
Use the tcp timer fin-timeout command to configure the TCP finwait timer.
Use the undo tcp timer fin-timeout command to restore the default value of the timer.
By default, TCP finwait timer value is 675 seconds.
When the TCP connection status changes from FIN_WATI_1 to FIN_WAIT_2, the
finwait timer is enabled. If FIN packet is not received before the timeout of finwait timer,
the TCP connection will be closed.
The configuration of this parameter needs to be implemented under the guidance of the
technical support engineers.
Related command: tcp timer syn-timeout and tcp window.
Example
# Configure the TCP finwait timer value as 675 seconds.

[H3C] tcp timer fin-timeout 675
10.1.29 tcp timer syn-timeout
Syntax
tcp timer syn-timeout time-value

undo tcp timer syn-timeout
10-27
View
System view
Parameter
time-value: TCP synwait timer value in second, with the value range of 2 to 600.
Description
Use the tcp timer syn-timeout command to configure the TCP synwait timer.
Use the undo tcp timer syn-timeout command to restore the default value of the
timer.
By default, TCP synwait timer value is 75 seconds.
When a syn packet is sent, TCP enables the synwait timer. If the response packet is not
received before synwait timeout, the TCP connection will be disabled.
Related command: tcp timer fin-timeout and tcp window.
Example
# Configure the TCP synwait timer value as 75 seconds.

[H3C] tcp timer syn-timeout 75
10.1.30 tcp window
Syntax
tcp window-size window-size

undo tcp window
View
System view
Parameter
window-size: The size of the transceiving buffer of the connection-oriented Socket in

kilobytes (KB), with the value ranging 1 to 32.
Description
Use the tcp window command to configure the size of the transceiving buffer of the
connection-oriented Socket.
Use the undo tcp window command to restore the default size of the buffer, or 8 KB.
10-28
Related command: tcp timer fin-timeout, tcp timer syn-timeout.
Example
# Configure the size of the transceiving buffer of the connection-oriented Socket as 4

KB.
[H3C] tcp window 4
10.2 Broadcast Forwarding Configuration Commands

10.2.1 ip forward-broadcast
Syntax
ip forward-broadcast [ acl-number ]
undo ip forward-broadcast
View
Interface view
Parameter
acl-number: ACL in the range 1000 to 3999.
Description
Use the ip forward-broadcast command to enable the current interface to forward

broadcasts.
Use the undo ip forward-broadcast command to disable the current interface to
forward broadcasts.
By default, the router does not forward broadcasts.
You may configure this command on an output interface. When configured with an ACL,
the command which otherwise allows the output interface to forward all broadcasts
enables the output interface to forward only matched broadcasts.
Example
# Enable interface Ethernet 0/0/0 to forward all broadcasts.

[H3C-Ethernet0/0/0] ip forward-broadcast
# Enable interface Ethernet 0/0/0 to forward broadcasts matching ACL 2100.

[H3C-Ethernet0/0/0] ip forward-broadcast 2100
[H3C] acl number 2100
[H3C-acl-basic-2100] rule 1 permit source 1.1.0.0 0.0.255.255
10-29
[H3C-acl-basic-2100] rule 2 deny source any
10.3 Multicast Fast Forwarding Configuration Commands

10.3.1 ip multicast-fast-forwarding
Syntax
ip multicast-fast-forwarding
undo ip multicast-fast-forwarding
View
Interface view
Parameter
None
Description
Use the ip multicast-fast-forwarding command to enable multicast fast forwarding on

an interface.
Use the undo ip multicast-fast-forwarding command to disable multicast fast
forwarding on an interface. When you configure this command on an interface, all fast
forwarding table entries with this interface as the inbound interface in the cache are
cleared.
Example
# Enable multicast fast forwarding on an interface.

[H3C-Ethernet0/0/0] ip multicast-fast-forwarding
10.3.2 reset ip multicast-fast-forwarding cache
Syntax
reset ip multicast-fast-forwarding cache
View
User view
Parameter
None
10-30
Description
Use the reset ip multicast-fast-forwarding cache command to clear the multicast

fast forwarding cache. However, this command does not release the space occupied by
the cache.
Example
# Clear the multicast fast forwarding cache.

<H3C> reset ip multicast-fast-forwarding cache
10.3.3 display ip multicast-fast-forwarding cache
Syntax
display ip multicast-fast-forwarding cache [ multicast-group ]
View
Any view
Parameter
multicast-group: IP address of the multicast group in dotted decimal notation, such as

224.0.0.1.
Description
Use the display ip multicast-fast-forwarding cache command to display summary

information about the fast forwarding table entries in the multicast fast forwarding
cache.
If you issue the command without specifying the argument, summary information about
all fast forwarding table entries in the multicast fast forwarding cache is displayed. If you
issue the command with a multicast address specified, summary information about all
fast forwarding table entries related to the multicast address is displayed. The output
information of the command includes the source address, source port number,
multicast address, destination port number, protocol number (which is usually the
number for UDP), inbound interface, outbound interface, and status of the outbound
interface (that is, whether the link layer header is present).
Example
# Display summary information about all fast forwarding table entries related to a
specified multicast address in the cache.
<H3C> display ip multicast-fast-forwarding cache 225.1.2.3
Multicasting fast-forwarding cache: total 120 items
Multicasting fast-Forwarding cache by selected group: 10 items
----------------------------------------------------------------------
10-31
Source Address:Port Group Address:Port Prot RecvInterface SendInterface L2H

156.43.56.34:1057 225.1.2.3:1058 0x11 E 0/0/0 E 0/0/1 Yes
E 2/0/0 No
E 2/0/1 Yes
Table 10-4 Description on the fields of display ip multicast-fast-forwarding cache
Field Description
Total number of fast forwarding table entries in
Multicasting fast-forwarding cache
the multicast fast forwarding cache
Number of fast forwarding table entries related
Multicasting fast-Forwarding
to the specified multicast group in the
cache by selected group
multicast fast forwarding cache
Source Address:Port Source address and source port number
Group Address:Port Multicast address and destination port number
Protocol number, which is usually 0x11 for the
Prot
UDP protocol.
RecvInterface Inbound interface
SendInterface Outbound interface
Status of the outbound interface, that is,
L2H
whether the link layer header is present.
10-32
Comware V3 Chapter 11 NAT Configuration Commands
Chapter 11 NAT Configuration Commands
11.1 NAT Configuration Commands

11.1.1 connection-limit default
Syntax
connection-limit default { permit | deny }

undo connection-limit default { permit | deny }
View
System view
Parameter
permit: Performs limit, with the upper limit and lower limit being the default value.
deny: Does not limit.
Description
Use the connection-limit default command to configure the action when the limit
policy is not available.
Use the undo connection-limit default command to delete the action.
The connection-limit default command can be configured repeatedly. The new one
overwrites the previous one.
Example
# Configure to limit connection when the limit policy is not available.

<H3C> system-view
[H3C] connection-limit default permit
11.1.2 connection-limit default amount
Syntax
connection-limit default amount { upper-limit upper-limit | lower-limit lower-limit }*

undo connection-limit default amount { upper-limit | lower-limit }*
View
System view
11-1
Parameter
upper-limit: Sets default upper limit.

upper-limit: Default upper limit, in the range 1 to 4294967295.
lower-limit: Sets default lower limit.
lower-limit: Default lower limit, in the range 0 to 4294967295.
Description
Use the connection-limit default amount command to set default threshold for
connection limit.
Use the undo connection-limit default amount command to delete the threshold.
By default, the upper limit is 50 and the lower limit is 20.
Example
# Set the default threshold of connection limit, with the upper limit being 100 and lower
limit being 20.
<H3C> system-view
[H3C] connection-limit default amount upper-limit 100 lower-limit 20
11.1.3 connection-limit enable
Syntax
connection-limit enable
undo connection-limit enable
View
System view
Parameter
None
Description
Use the connection-limit enable command to enable the connection limit function.
Use the undo connection-limit enable command to disable the function.
Example
# Enable connection limit function.

<H3C> system-view
[H3C] connection-limit enable
11-2
11.1.4 connection-limit policy
Syntax
connection-limit policy policy-number

undo connection-limit policy { policy-number | all }
View
System view
Parameter
policy-number: Number of connection limit policy, ranging from 0 to 19.

all: Deletes all policies.
Description
Use the connection-limit policy command to create connection limit policy and enter
its view.
Use the undo connection-limit policy command to delete the policy.
Example
# Create connection limit policy 10.

<H3C> system-view
[H3C] connection-limit policy 10
11.1.5 debugging connection-limit
Syntax
debugging connection-limit
undo debugging connection-limit
View
User view
Parameter
None
Description
Use the debugging connection-limit command to enable connection limit debugging.

Use the undo debugging connection-limit command to disable the debugging.
By default, the debugging function is disabled.
11-3
Example
# Enable connection limit debugging.

<H3C> debugging connection-limit
11.1.6 debugging nat
Syntax
debugging nat { alg | event | packet [ interface { interface-type interface-number ] }

undo debugging nat { alg | event | packet [ interface interface-type
interface-number ] }
View
User view
Parameter
alg: Enables the application level gateway NAT debugging information.

event: Enables NAT event debugging information.
packet: Enables NAT data packet debugging information.
interface: Enables NAT packet debugging for a special interface.
Description
Use the debugging nat command to enable the NAT debugging function.
Use the undo debugging nat command to disable the NAT debugging function.
Example
None
11.1.7 display connection-limit policy
Syntax
display connection-limit policy { policy-number | all }
View
Any view
Parameter
policy-number: Policy number to be displayed, in the range 0 to 255.

all: Displays all policies.
11-4
Description
Use the display connection-limit policy command to display connection limit policy.
Example
# Display the policy 1.

<H3C> display connection-limit policy 1
11.1.8 display connection-limit statistics
Syntax
display connection-limit statistics [ source source-addr source-wildcard ]

[ destination destination-addr destination-wildcard ] [ destination-port { { eq | neq | gt
| lt } destination-port | range destination-port1 destination-port2 } ] [ vpn-instance
vpn-name ]
View
Any view
Parameter
source: Specifies source IP address.

source-addr: Source IP address.
source-wildcard: Wildcard of source IP address.
destination: Specifies destination IP address.
destination-addr: Destination IP address.
destination-wildcard: Wildcard of destination IP address.
all: Displays statistics of all connections.
destination-port: Specifies destination port number.
eq: Displays the connection number of services whose destination port number equals
to the specified port number.
neq: Displays the connection number of services whose destination port number does
not equal to the specified port number.
gt: Displays the connection number of services whose destination port number is
greater than the specified port number.
lt: Displays the connection number of services whose destination port number is less
than the specified port number.
range: Displays the connection number of services whose destination port number is
within specified range.
destination-port: Destination port number.
11-5
destination-port1, destination-port2: Paramaters when displayed in the port range,

indicating the upper limit and lower limit of service port respectively.
vpn-instance: Specifies VPN instance.
vpn-name: Name of the VPN instance.
Description
Use the display connection-limit statistics command to display the connection limit
statistics.
Users can view the desired connection limit statistics flexibly by executing this
command. Statistics of all connections will be displayed when no other parameters are
followed with this command.
Example
# Display all connection limit statistics.

<H3C> system-view
[H3C] display connection-limit statistics
11.1.9 display nat
Syntax
display nat { address-group | aging-time | all | outbound | server | statistics |

session [ vpn-instance vpn-instance-name ] [ slot slot-number ] [source global
global-addr | source inside inside-addr ] [ destination ip-addr ] }
View
Any view
Parameter
address-group: Displays the information of the address pool.

aging-time: Displays the effective time for NAT connection.
all: Displays all the information about NAT.
outbound: Displays the information of the outbound NAT.
server: Displays the information of the internal server.
statistics: Displays the statistics of current NAT records.
session: Displays the information of the currently activated connection.
vpn-instance vpn-instance-name: Displays the NAT table items of a special VPN. The
omission of this parameter means that NAT items for all VPNs will be listed out.
slot slot-number: Designates the slot number of an interface. This parameter is
reserved especially for distributed environment use.
11-6
source global global-addr: Only displays the NAT entry with address as global-addr
after NAT.
source inside inside-addr: Only displays the NAT entry with internal address as
inside-addr.
destination ip-addr: Displays the NAT table items of a special IP destination.
Description
Use the display nat command to display the configuration of address translation.
Users can verify if the configuration of address translation is correct according to the
output information after execution of this command. When address translation
connection information is displayed, the parameters of global-addr and inside-addr can
be specified for the display nat session command simultaneously.
Example
# Display all the information about address translation.

<H3C> display nat all session
Protocol GlobalAddr Port InsideAddr Port DestAddr Port
- 172.18.65.55 --- 1.1.1.1 --- --- ---
VPN: 0, status: NOPAT, TTL: 00:04:00, Left: 00:00:33
Table 11-1 Description on the fields of the display nat command
Field Description
Protocol number. VPN indicates that the entry corresponds to
Protocol
a MPLS VPN virtual route forwarding instance.
Translated external address (source address) and port (source
port).
GlobalAddr Port Note: Since a nat session entry is dynamically generated for
packets sent from the internal network to external networks,
the naming and meaning of the fields is from the perspective of
the internal network.
Internal address (source address) and port (source port) to be
InsideAddr Port
translated.
DestAddr Destination address of the packet.
Port Destination port of the packet.
A hexadecimal value indicating the status. When the status is

NOPAT, the value is the special identification of the nat session
status entry in NOPAT mode.
Note: The value contains 32 bits, each of which indicates a
specific status attribute of the entry.
TTL Time for which the entry exists, in the format of hh:mm:ss.
11-7
Field Description
Time after which the entry expires from now on, in the format of
Left
hh:mm:ss.
<H3C> display nat session

Protocol GlobalAddr Port InsideAddr Port DestAddr Port
- 172.18.65.55 --- 1.1.1.1 --- --- ---
VPN: 0, status: NOPAT, TTL: 00:04:00, Left: 00:00:33
- 172.18.65.55 44009 1.1.1.1 44009 172.18.66.55 44009
VPN: 0, status: 3, TTL: 00:01:00, Left: 00:00:23
Note:
When you use NOPAT to translate address, two NAT entries can be seen using the
display nat command, NOPAT entry and PAT entry. By doing this, the address
translation for access to the external network only happens when the address and port
number are matched, thus enhancing network security.
11.1.10 display nat connection-limit
Syntax
display nat connection-limit [ source source-addr source-wildcard ] [ destination

destination-addr destination-wildcard ] [ destination-port { { eq | neq | gt | lt }
destination-port | range destination-port1 destination-port2 } ] [ vpn-instance
vpn-name ]
View
Any view
Parameter
nat: Displays statistics of the connections created by NAT.

source: Specifies source IP address.
source-addr: Source IP address.
source-wildcard: Wildcard of source IP address.
destination: Specifies destination IP address.
destination-addr: Destination IP address.
destination-wildcard: Wildcard of destination IP address.
all: Displays statistics of all connections.
11-8
destination-port: Specifies destination port number.

eq: Displays the connection number of services whose destination port number equals
to the specified port number.
neq: Displays the connection number of services whose destination port number does
not equal to the specified port number.
gt: Displays the connection number of services whose destination port number is
greater than the specified port number.
lt: Displays the connection number of services whose destination port number is less
than the specified port number.
range: Displays the connection number of services whose destination port number is
within specified range.
destination-port: Destination port number.
destination-port1, destination-port2: Paramaters when displayed in the port range,
indicating the upper limit and lower limit of service port respectively.
vpn-instance: Specifies VPN instance.
vpn-name: Name of the VPN instance.
Description
Use the display nat connection-limit command to display the NAT-related connection
limit statistics.
Users can view the desired connection limit statistics flexibly by executing this
command. Statistics of all NAT-related connections will be displayed when no other
parameters are followed with this command.
Example
# Display all NAT-related connection limit statistics.

<H3C> display nat connection-limit
11.1.11 limit
Syntax
limit limit-id acl acl-number [ { per-source | per-destination | per-service }* amount

upper-limit lower-limit ]
undo limit limit-id
View
Connection limit policy view
11-9
Parameter
limit-id: Rule ID for connection limit policy, ranging from 0 to 255.

acl: Specifies ACL. The connection limit policy uses ACL to specify the characteristics
of connections to be limited. ACL can be used to specify nearly all connection
characteristics.
acl-number: Specifies ACL number, in the range 2000 to 3999.
per-source: Specifies to limit according to each source address.
per-destination: Specifies to limit according to each destination address.
per-service: Specifies to limit according to each service (destination port).
amount: Identifies that it is the connection limit that is configured, but not rate limit, in
order to facilitating adding rate identifier when adding rate limit function in the future.
upper-limit, lower-limit: Specifies the connection upper limit and lower limit of this rule.
When the connection characteristic meets the specified rule, the two values are used to
limit the connections. The upper-limit ranges from 1 to 4294967295, and the lower-limit
ranges from 1 to 4294967295. When the connection number reaches the upper limit, it
is prohibited to establish new connection. At this time, to establish new connection is
allowed only when the connection number drops to be below or equal to the lower limit.
Description
Use the limit command to create rule under corresponding connection limit policy.
Use the undo limit command to delete the rule under corresponding connection limit
policy.
When a rule is bound with NAT, it cannot be modified or deleted. To modify or delete it
needs to first unbind the rule from NAT.
Example
# Create a rule under policy 1 to use ACL3000 to limit the source address, with the
upper limit being 100 and lower limit being 10.
<H3C> system-view
[H3C] connection-limit policy 1
[H3C-connection-limit-policy-1] limit 0 acl 3000 per-source amount 100 10
11.1.12 nat address-group
Syntax
nat address-group group-number start-addr end-addr

undo nat address-group group-number
11-10
View
System view
Parameter
group-number: Defined Address pool ID, it is an integer ranging from 0 to 31.

start-addr: Starting IP address in the address pool.
end-addr: Ending IP address in the address pool.
Description
Use the nat address-group command to configure an address pool.

Use the undo nat address-group command to delete an IP address pool.
Address pool indicates the cluster of some outside IP addresses. If start-addr and
end-addr are the same, it means that there is only one address.
Caution:
z The length of an address pool (numbers of all addresses contained in an address

pool) cannot exceed 255.
z The address pool cannot be deleted, if it has been correlated to some certain
access control list to perform the address translation.
Example
# Configure an address pool from 202.110.10.10 to 202.110.10.15, with its NAT pool ID
being 1.
[H3C] nat address-group 1 202.110.10.10 202.110.10.15
11.1.13 nat aging-time
Syntax
nat aging-time { default | { dns | ftp-ctrl | ftp-data | icmp | pptp | tcp | tcp-fin |
tcp-syn | udp } seconds }
View
System view
Parameter
default: Sets the address translation lifetime values to the defaults.
11-11
dns: Sets the address translation lifetime for DNS to 60 seconds (default).
ftp-ctrl: Sets the address translation lifetime for FTP control links to 7200 seconds
(default).
ftp-data: Sets the address translation lifetime for FTP data links to 240 seconds
(default).
icmp: Sets the address translation lifetime for ICMP to 60 seconds (default).
pptp: Sets the address translation lifetime for PPTP to 86400 seconds (default).
tcp: Sets the address translation lifetime for TCP to 86400 seconds (default).
tcp-fin: Sets the address translation lifetime for TCP FIN or TCP RST connections to
60 seconds (default).
tcp-syn: Sets the address translation lifetime for TCP SYN connections to 60 seconds
(default).
udp: Sets the address translation lifetime for UDP to 300 seconds (default).
seconds: Time value in the range 10 to 86400 (24 hours).
Description
Use the nat aging-time command to set the lifetime of NAT connections.
This command is used to set the lifetime of address translation connection in seconds,
and different time values are set for different types of protocols.
Example
# Set the valid connection time of TCP to 240 seconds.

[H3C] nat aging-time tcp 240
11.1.14 nat alg
Syntax
nat alg { dns | ftp | h323 | ils | nbt | pptp | sip }

undo nat alg { dns | ftp | h323 | ils | nbt | pptp | sip }
View
System view
Parameter
dns: Supports DNS.

ftp: Supports FTP.
h323: Supports H.323.
ils: Supports Internet locator service (ILS).
11-12
nbt: Supports NetBIOS over TCP/IP.

pptp: Supports point to point tunneling protocol.
sip: Supports session initiation protocol.
Description
Use the nat alg command to enable the application gateway function of NAT.
Use the undo nat alg command to disable the application gateway function of NAT.
By default, the application gateway function of NAT is enabled.
Example
# Enable the application gateway function of NAT, allowing it to support FTP.

[H3C] nat alg ftp
11.1.15 nat dns-map
Syntax
nat dns-map domain-name global-addr global-port [ tcp | udp ]

undo nat dns-map domain-name
View
System view
Parameter
domain-name: Valid domain name that can be correctly translated by external DNS
servers.
global-addr: Public IP address that outside hosts can access.
global-port: Service port number that outside hosts can access.
tcp: Sets the transport protocol to TCP.
udp: Sets the transport protocol to UDP.
Description
Use the nat dns-map command to configure a NAT entry, mapping a domain name to a
triplet of external IP address, port number, and protocol type.
Use the undo nat dns-map command to remove the NAT entry for a domain name.
You may configure your internal hosts to access internal servers by domain name. In
case your intranet has no DNS server, an external DNS server will be involved to
provide domain name resolution service.
When an internal host attempts to access an internal server by domain name, its DNS
request is first forwarded to an external DNS server where the domain name is resolved
11-13
to a public IP address. The NAT server, however, could not identify the desired internal
server with this public IP address only. To allow it to correctly identify an internal server
by domain name, you must create a NAT entry for the domain name of the internal
server. This entry must include a service port number in addition to the public IP
address.
By default, no map entry exists for any domain name.
You may create up to 16 NAT entries for domain names.
Example
# Map a domain name to a triplet of public IP address, port number, and protocol type.
[H3C] nat dns-map www.abc.com 202.112.0.1 80 tcp
11.1.16 nat outbound
Syntax
nat outbound acl-number [ address-group group-number [ no-pat ] ]

undo nat outbound acl-number [ address-group group-number [ no-pat ] ]
View
Interface view
Parameter
address-group: Configures address translation by means of address pool. If the

address pool is not specified, use the IP address of the interface as the translated
address, that is, the "easy ip" feature.
no-pat: Uses simple address translation, which means only to translate the address of
the packet but not use port information.
acl-number: ACL index in the range of 2000 to 3999 (the advanced ACL can be used).
group-number: The number of a defined address pool.
Description
Use the nat outbound command to associate an ACL with an address pool, indicating
that the address specified in the acl-number can be translated by using address pool
group-number.
Use the undo nat outbound command to remove the corresponding address
translation.
Translation of the source address of the packet that conforms to the ACL is
accomplished by configuring the association between the ACL and the address pool.
The system performs address translation by selecting one address in the address pool
or by directly using the IP address of the interface. Users can configure different
11-14
address translation associations at the same interface. The corresponding undo form
of the command can be used to delete the related address translation association.
Normally, this interface is connected to ISP, and serves as the exit interface of the
inside network.
The command without the address-group parameter implements the "easy-ip" feature.
When performing address translation, the IP address of the interface is used as the
translated address and the ACL can be used to control which addresses can be
translated.
Example
# Enable the hosts of the 10.110.10.0/24 network segment to perform address

translation by selecting the addresses from 202.110.10.10 to 202.110.10.12 as the
translated address. Suppose that the interface Serial0/0/0 connects to ISP.
[H3C-acl-basic-2001] rule permit source 10.110.10.0 0.0.0.255
[H3C-acl-basic-2001] rule deny
# Configure the address pool.

[H3C] nat address-group 1 202.110.10.10 202.110.10.12
# Allow address translation and use the addresses of address pool 1 for address
translation. During translation, the information of TCP/UDP port is used.
[H3C-Serial0/0/0] nat outbound 2001 address-group 1
# Delete the corresponding configuration.

[H3C-Serial0/0/0] undo outbound 2001 address-group 1
# Configuration of simple address translation (Not using the TCP/UDP port information
to perform the address translation)
[H3C-Serial1/0/0] nat outbound 2001 address-group 1 no-pat

[H3C-Serial0/0/0] undo nat outbound 2001 address-group 1 no-pat
# The configuration that can be used when performing address translation by using the
IP address of interface Serial0/0/0 directly.
[H3C-Serial0/0/0] nat outbound 2001

[H3C-Serial0/0/0] undo nat outbound 2001
11.1.17 nat outbound interface
Syntax
nat outbound acl-number interface interface-type interface-number
11-15
undo nat outbound acl-number interface interface-type interface-number
View
Interface view
Parameter
acl-number: ACL index number, in the range 2000 to 3999.

number. Currently, it can be a loopback interface only.
Description
Use the nat outbound interface command to associate an ACL with an interface and
to use the address of the interface as the target address in the translations for the
packets matching the ACL. After that, this address substitutes for the source addresses
of the packets matching the ACL.
Use the undo nat outbound interface command to remove an ACL to interface
association.
Currently, the interface specified in this command can only be a loopback interface.
Example
# Use the address of interface loopback 0 as the target address for address translation.
[H3C] interface loopback0
[H3C-LoopBack0] ip address 202.38.160.106
[H3C-LoopBack0] quit
[H3C-acl-basic-2000] quit
[H3C-Serial3/0/0] nat outbound 2 interface loopback 0
11.1.18 nat outbound static
Syntax
nat outbound static
View
Interface view
Parameter
None
11-16
Description
Use the nat outbound static command to apply on the interface one-to-one address
translation configured using the nat static command.
Example
# Apply one-to-one address translation on the interface Serial0/0/0.

[H3C-serial0/0/0]nat outbound static
11.1.19 nat overlapaddress
Syntax
nat overlapaddress number overlappool-startaddress temppool-startaddress

{ pool-length pool-length | address-mask mask }
undo nat overlapaddress number
View
System view
Parameter
number: Sequence number of an address pool pair, in the range 0 to 7.

overlappool-startaddress: Start address of an overlapping address pool. The range of
this pool must be unique among all overlapping address pools.
temppool-startaddress: Start address of a temporary address pool. This pool must be
unique among all temporary address pools. Temporary addresses cannot be existing
internal or external addresses. When specifying temporary address pools, private
address ranges are preferred to public address ranges.
pool-length: Address pool length, in decimal format. The associated overlapping and
temporary address pools must be configured in the same length, with one overlap
address corresponding to one temporary address.
mask: Subnet mask of the address pools.
Description
Use the nat overlapaddress command to map an overlapping address pool to a

temporary address pool.
Use the undo nat overlapaddress command to remove the specified map entry.
11-17
Note:
Overlapping address pools and temporary address pools come in pairs. When
converting an overlapping address to a temporary address, the following conventions
are followed:
z Temporary address = Start address of the temporary address pool + (overlapping
address – start address of the overlapping address pool)
z Overlapping address = Start address of the overlapping address pool + (temporary
address – start address of the temporary address pool)
Example
# Configure an overlapping address pool map entry, setting address pool pair number
to 0, start address of the overlapping address pool to 171.69.100.0, start address of the
temporary address pool to 192.168.0.0, and subnet mask to 24.
[H3C] nat overlapaddress 0 171.69.100.0 192.168.0.0 address-mask 24
11.1.20 nat server
Syntax
nat server [ acl-number ] [ vpn-instance vpn-instance-name ] protocol pro-type

global { global-addr [ global-port ] | current-interface | interface interface-type
interface-number } inside host-addr [ host-port ]
nat server [ acl-number ] [ vpn-instance vpn-instance-name ] protocol pro-type
global { global-addr global-port1 global-port2 | current-interface | interface
interface-type interface-number } inside host-addr1 host-addr2 host-port
undo nat server [ acl-number ] [ vpn-instance vpn-instance-name ] protocol pro-type
global { global-addr [ global-port ] | current-interface | interface interface-type
interface-number } inside host-addr [ host-port ]
undo nat server [ acl-number ] [ vpn-instance vpn-instance-name ] protocol pro-type
global { global-addr global-port1 global-port2 | current-interface | interface
interface-type interface-number } inside host-addr1 host-addr2 host-port
View
Interface view
Parameter
acl-number: ACL in the range 2000 to 3999. When configured with an ACL, the nat
server command allows the NAT server to translate addresses for packets sent by
internal servers only when the source and destination addressses in the packets are
permitted by the ACL.
11-18
vpn-instance-name: The virtual route forwarding instance of the VPN the internal server
belongs to. If the parameter is not configured, it represents that the internal server
belongs to an ordinary private network, other than one MPLS VPN.
global-addr: An IP address provided for the outside to access (a legal IP address).
global-port: A service port number provided for the outside to access. If ignored, its
value shall be the same with the host-port’s value.
current-interface: Uses the address of the current public network interface of the
router as the public network address of NAT server.
interface interface-type interface-number: Uses the address of other interfaces as the
public network address of the NAT server. Currently, only Loopback interface is
supported and must be configured on a router.
host-addr: IP address of the server in internal LAN.
host-port: Service port number provided for a server in the range of 0 to 65535, and the
common used port numbers are replaced by key words. For example, www service port
number is 80, which can also be represented by www. ftp service port number is 21,
and ftp can also stands for it. If the inside-port is 0, it indicates that all the types of
services can be provided and the key word any can be used to stand for it in this
situation. If the parameter is not configured, it is considered as the case of any, which is
the same as that there is a static connection between global-addr and host-addr. When
the host-port is configured as any, the global-port also should be any, otherwise the
configuration is illegal.
global-port1, global-port2: Specifies a port range through two port numbers, forming a
corresponding relation with the internal host address range. global-port2 must be larger
than global-port1.
host-addr1, host-addr2: Defines a group of consecutive address ranges, which
respectively one-to-one matches the port ranges defined above. host-addr2 must be
bigger than host-addr1. The number of the address ranges should be the same as the
number of ports defined by global-port1 and global-port2.
pro-type: The protocol type carried by IP, possibly being a protocol ID, or a key word as
a substitution. For example: icmp (its protocol ID is 1), tcp (its protocol ID is 6), udp (its
protocol ID is 17).
Description
Use the nat server command to define a mapping table for internal servers. Users can
access the internal server with the address and port as host-addr and host-port
respectively through the address port defined by global-addr and global-port.
Use the undo nat server command to remove the mapping table.
Through this command, you can configure some internal network servers for outside
use. The internal server can locate in the ordinary private network or in MPLS VPN. For
example, www, ftp, telnet, kpop3, dns and so on.
11-19
Up to 256 internal server conversion commands can be configured on one interface

and at most 4096 internal servers can be configured on one interface. Up to 1024
internal server conversion commands can be configured in one system. If the nat
servers are configured in the form of port range (that is, specify a port range through
configuring global-port1 and global-port2, forming a corresponding relation with the
address range of the internal hosts), then the number of internal servers will be the
same as that of the ports configured, and the max number of them are also 4096.
To ensure the normal work of NAT while configuring nat server for tftp, it is required to
configure nat outbound for tftp server in internal network.
The interface on which this command is configured is interconnected with ISP and
serves as the gateway of the internal network.
Example
# Specify the IP address of the interior www server of the LAN as 10.110.10.10, the IP
address of the interior ftp server as 10.110.10.11. It is expected that the outside can
access WEB through http:// 202.110.10.10:8080 and connect FTP web site through
ftp://202.110.10.10. Suppose that Serial0/0/0 is connected to ISP.
[H3C-Serial0/0/0] nat server protocol tcp global 202.110.10.10 8080 inside
10.110.10.10 www
[H3C] ip vpn-instance vrf10
[H3C-vpn-instance] route-distinguisher 100:001
[H3C-Serial0/0/0] nat server protocol tcp global 202.110.10.10 inside
10.110.10.11 ftp
# Specify one interior host 10.110.10.12, expecting that the host of the exterior network
can ping it with ping 202.110.10.11 command.
[H3C-Serial0/0/0] nat server protocol icmp global 202.110.10.11 inside
10.110.10.12
# Delete the www server.

[H3C-Serial0/0/0] undo nat server protocol tcp global 202.110.10.10 8070
inside 10.110.10.10 www
# By the command below, the internal ftp server of VPN vrf10 can be removed.
[H3C-Serial0/0/0] undo nat server protocol tcp global 202.110.10.11 8070
inside 10.110.10.11 ftp
# Specify an outside address as 202.110.10.10, and map the ports ranging from 1001
to 1100 to the addresses of 10.110.10.1 to 10.110.10.100 respectively to access ftp
service inside VPN vrf10. 202.110.10.10:1001 accesses 10.110.10.1 and
202.110.10:1002 accesses 10.110.10.2, etc.
[H3C-Serial0/0/0] nat server protocol tcp global 202.110.10.10 1001 1100
inside 10.110.10.1 10.110.10.100 telnet
11-20
# Specify the address of the current public network interface of the router as the public
network address of NAT server. Configure FTP interface mapping of an internal server
with the IP address of 1.0.0.1 to provide service for public network users.
[H3C-Ethernet0/0/0] nat server protocol tcp global current-interface ftp
inside 1.0.0.1 ftp
# Specify the IP address obtained by Dialer 0 interface as the public network address of
NAT server.
[H3C-Dialer0] nat server protocol tcp global current-interface 5000 inside
10.0.0.10 5000
11.1.21 nat static
Syntax
nat static [ vpn-instance vpn-instance-name ] inside-ip global-ip

undo nat static [ vpn-instance vpn-instance-name ] inside-ip global-ip
View
System view
Parameter
vpn-instance vpn-instance-name: Virtual route forwarding instance of the VPN to

which the internal host belongs. It is a character string in the length of 1 to 19
characters.
inside-ip: Private IP address of an internal host.
global-ip: Public IP address.
Description
Use the nat static command to configure a one-to-one private-to-public address

binding.
Use the undo nat static command to delete an existing one-to-one private-to-public
address binding.
Example
# Bind an internal private IP address with a public IP address for one-to-one address
translation.
[H3C] nat static 192.168.1.1 2.2.2.2
11-21
11.1.22 nat static inside
Syntax
nat static inside [ vpn-instance vpn-instance-name ] ip inside-start-address

inside-end-address global ip global-ip { mask | prefix-length }
undo nat static inside [ vpn-instance vpn-instance-name ] ip inside-start-address
inside-end-address global ip global-ip { mask | prefix-length }
View
System view
Parameter
vpn-instance vpn-instance-name: Virtual route forwarding instance of the VPN to

which the internal host belongs. It is a character string in the length of 1 to 19
characters.
inside-start-address: Start address of an internal-address range.
inside-end-address: End address of the internal-address range.
global-address: Public network segment address.
mask: Subnet mask of the public network segment address.
Description
Use the nat static inside command to create a static net-to-net NAT entry. When the
router translates addresses based on this type of NAT entry, it translates the network
address portion without touching the host address portion.
Use the undo nat static inside command to delete a static net-to-net NAT entry.
The global-address can be any address. Then it will be calculated by combining with
the mask and the length of the mask.
The static NAT entries configured using the nat static inside command must not
conflict with those configured using the nat static command.
By default, no static net-to-net NAT entry is configured.
Note:
When you use the nat static inside command, ensure that the translated global
address does not include the IP address used by the network devices.
11-22
Example
# Configure a static net-to-net NAT entry, allowing the addresses in the range 10.1.1.1
to 10.1.1.100 to be translated into addresses on the segment 211.1.1.0 with their host
addresses unchanged.
[H3C] nat static inside ip 10.1.1.1 10.1.1.100 global 211.1.1.0 255.255.255.0
11.1.23 nat connection-limit-policy
Syntax
nat connection-limit-policy policy-number

undo nat connection-limit-policy policy-number
View
System view
Parameter
policy-number: The policy number of NAT connection limit, in the range 0 to 19.
Description
Use the nat connection-limit-policy command to specify the NAT connection limit
policy.
Use the undo nat connection-limit-policy command to delete the policy.
By default, the policy is not bound with NAT.
The nat connection-limit-policy command can be configured repeatedly. The new
configuration overwrites the previous one.
Example
# Bind policy 1 with NAT.

<H3C> system-view
[H3C] nat connection-limit-policy 1
11.1.24 reset nat
Syntax
reset nat session slot slot-number
View
User view
11-23
Parameter
slot slot-number: Number of the interface card, which only exists in the distributed
environment.
session: Clears the information of the address translation table.
Description
Use the reset nat command to clear up the mapping tables of address translation in the
memory and release all the memory dynamically allocated to store the mapping tables.
Example
# In a centralized environment, clear NAT log buffer.

<H3C> reset nat session
# In a distributed environment, clear information of the address translation table.

<H3C> reset nat session slot 10
11-24
Command Manual – Network Protocol Chapter 12 IP Unicast Policy Routing Configuration
Comware V3 Commands
Chapter 12 IP Unicast Policy Routing

12.1 IP Unicast Policy Routing Configuration Commands

12.1.1 apply default output-interface
Syntax
apply default output-interface interface-type interface-number [ interface-type

interface-number ]
undo apply default output-interface [ interface-type interface-number
[ interface-type interface-number ] ]
View
Route-policy view
Parameter

Description
Use the apply default output-interface command to set default forwarding interface
for packets.
Use the undo apply default output-interface command to cancel the configuration of
the default forwarding interface of packets.
This command is used to set default forwarding interface for the matched IP packet and
you can set up to two default forwarding interfaces. The clause is valid for the packet
whose route has not been found.
Related command: apply ip-precedence, apply ip-address next-hop, apply
output-interface, apply ip-address default next-hop.
Example
# Set the default forwarding interface of packets as serial 0/0/0.

[H3C-route-policy] apply default output-interface serial 0/0/0
12-1
Comware V3 Commands
12.1.2 apply ip-address default next-hop
Syntax
apply ip-address default next-hop ip-address [ ip address ]

undo apply ip-address default next-hop [ ip-address [ ip address ] ]
View
Route-policy view
Parameter
ip-address: IP address of default next hop.
Description
Use the apply ip-address default next-hop command to set the default next hop of a
packet.
Use the undo apply ip-address default next-hop command to cancel the configured
default packet next hop.
This command is only valid for the packet whose route has not been found.
Use this command to set the next hop where the matched IP packets are to be
forwarded. You can set at most two next hop interfaces.
Related command: apply ip-precedence, apply output-interface, apply default
output-interface, and apply ip-address next-hop.
Example
# Set the default next hop of a packet to 1.1.1.1.

[H3C-route-policy] apply ip-address default next-hop 1.1.1.1
12.1.3 apply ip-address next-hop (for Unicast Policy Routing)
Syntax
apply ip-address next-hop ip-address [ ip-address ]

undo apply ip-address next-hop [ ip-address [ ip-address ] ]
View
Route-policy view
Parameter
ip-address: IP address of next hop.
12-2
Comware V3 Commands
Description
Use the apply ip-address next-hop command to set the packet next hop.
Use the undo apply ip-address next-hop command to cancel the configuration about
the next hop.
This command is used to set the next hop for the matched IP packet and at most two
next hops can be specified. The next hop should be adjacent to this device.
Related command: apply ip-precedence, apply output-interface, apply default
Example
# Set the packet next hop to 1.1.1.1.

[H3C-route-policy] apply ip-address next-hop 1.1.1.1
12.1.4 apply ip-dscp
Syntax
apply ip-dscp { value | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 |
af42 | af43 | be | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | ef }
undo apply ip-dscp
View
Route-policy view
Parameter
value: DSCP value, an integer in from 0 to 63.
Description
Use the apply ip-dscp command to configure to modify the packet DSCP value
matching the policy.
Use the undo ip-dscp command to delete the configuration.
Example
# Configure the packet DSCP value matching ACL 2000 to 30.

<H3C> system-view
[H3C] route-policy test permit node 1
[H3C-route-policy] if-match acl 2000
[H3C-route-policy] apply ip-dscp 30
12-3
Comware V3 Commands
12.1.5 apply ip-precedence
Syntax
apply ip-precedence value

undo apply ip-precedence
View
Route-policy view
Parameter
value: The preference value. There are totally 8 (in the range 0 to 7) preferences:
0 routine
1 priority
2 immediate
3 flash
4 flash-override
5 critical
6 internet
7 network
Description
Use the apply ip-precedence command to set precedence of IP packets.

Use the undo apply ip-precedence command to remove the precedence of IP
packets.
This command is used to configure the set clause of route-policy and the preference for
the matched IP packets.
Related command: apply output-interface, apply ip-address next-hop, apply
default output-interface, and apply ip-address default next-hop.
Example
# Set the preference of IP packet to 5 (critical).

[H3C-route-policy] apply ip-precedence critical
12.1.6 apply output-interface (for Unicast Policy Routing)
Syntax
apply output-interface interface-type interface-number [ interface-type

interface-number ]
12-4
Comware V3 Commands
undo apply output-interface [ interface-type interface-number [ interface-type

interface-number ] ]
View
Route-policy view
Parameter

Description
Use the apply output-interface command to set a packet forwarding interface.

Use the undo apply output-interface command to cancel the configuration on a
forwarding interface.
This command is used to set the packet forwarding interface for the matched IP packet.
At most two forwarding interfaces can be specified.
Related command: apply ip-precedence, apply ip-address next-hop, apply default
Example
# Specify forwarding interface as serial0/0/0 for the matched IP packet.

[H3C-route-policy] apply output-interface Serial 0/0/0
12.1.7 display ip policy
Syntax
display ip policy
View
Any view
Parameter
None
Description
Use the display ip policy command to view the routing policies of local and configured
interface policy routings.
This command is used to display the routing policies of local and configured interface
policy routings.
12-5
Comware V3 Commands
Example
# Display the routing policies of the local and configured interface policy routings.
<H3C> display ip policy
Route-policy Interface
pr02 Local
pr02 Virtual-Template0
pr01 Ethernet 0/0/0
The first line is prompt information. The first row shows where is used the routing policy
indicated in the second row. Take the first line as an example, "local" indicates that the
policy routing is used on the local router, that is, all packets sent from the local router
(not forward through it) using the policy routing "pr02". The second and third lines
represent that the interfaces virtual-template0 and Ethernet0/0/0 use route policy pr02
and pr01 respectively.
12.1.8 display ip policy setup
Syntax
display ip policy setup { local | interface interface-type interface-number }
View
Any view
Parameter
local: Displays the setting information of local policy routings.

interface: Displays the setting information of interface policy routings.
Description
Use the display ip policy setup command to view the setting information of policy
routings.
Example
# Display the configurations of policy routing on the specified interface, regardless of

whether the policy routing is enabled.
<H3C> display ip policy setup interface ethernet 0/0/0
route-policy pr01 permit 0
if-match acl 3101
apply output-interface Serial1/0/0
12-6
Comware V3 Commands
This command displays the configurations of the policy routing named pr01 on
interface Ethernet 0/0/0. As shown above, the policy routing has one 0 node and
includes an if-match clause and an apply clause. For the accurate meanings of the
if-match clause and the apply clause, refer to the description on the command.
The output of the display ip policy setup local command is the same as that of the
display ip policy setup interface command, except that it displays the policy routing
enabled on this router.
12.1.9 display ip policy statistic
Syntax
display ip policy statistic { local | interface interface-type interface-number }
View
Any view
Parameter
local: Displays the statistics of local policy routing packets.

interface: Displays the statistics of interface policy routings.
Description
Use the display ip policy statistic command to view the statistics of policy routings.
Example
# Display statistics about policy routing matches on the specified interface.

<H3C> display ip policy statistic interface ethernet0/0/0
Interface Ethernet0/0/0 policy routing information:
Route-policy: aaa
permit node 5
apply output-interface Serial1/0/0
Denied: 0,
Forwarded: 0
Total denied: 0, forwarded: 0
The above information shows the forwarding success and failure times for all the
forwarding policies (that is, the apply clause) of policy routing on interface
ethernet0/0/0.
12-7
Comware V3 Commands
12.1.10 if-match acl
Syntax
if-match acl acl-number

undo if-match acl
View
Route-policy view
Parameter
acl-number: Access control list number.
Description
Use the if-match acl command to set the match condition for IP address.
Use the undo if-match acl command to delete the IP address match condition.
An acl-number can be basic ACL or advanced ACL.
Related command: if-match packet-length.
Example
# Set packets that accord with the access list 2010 to be matched.
[H3C] route-policy map1 permit node 2010
12.1.11 if-match packet-length
Syntax
if-match packet-length min-len max-len

undo if-match packet-length
View
Route-policy view
Parameter
min-len: Minimum size of network layer packets, in the range 0 to 2147483647.

max-len: Maximum size of network layer packets, in the range 0 to 2147483647.
Description
Use the if-match packet-length command to set length match conditions of IP

packets.
12-8
Comware V3 Commands
Use the undo if-match packet-length command to delete the configuration about IP
packet length match conditions.
Related command: if-match acl.
Example
# Set the packet in the range 100 to 200 to be matched.

[H3C-route-policy] if-match packet-length 100 200
12.1.12 ip local policy route-policy
Syntax
ip local policy route-policy policy-name

undo ip local policy route-policy policy-name
View
System view
Parameter
policy-name: Policy name.
Description
Use the ip local policy route-policy command to enable local policy routing.
Use the undo ip local policy route-policy command to delete the existing setting of
the policy routing.
By default, interface local policy routing is disabled.
This command is used to enable or disable the local policy routing for the packets sent
by the local device. If there is no special demand, it is recommended that users do not
configure local policy routing.
Related command: ip policy route-policy.
Example
# Enable a local policy routing, which is specified by route-policy AAA.

[H3C] ip local policy route-policy AAA
12.1.13 ip policy route-policy
Syntax
ip policy route-policy policy-name

undo ip policy route-policy policy-name
12-9
Comware V3 Commands
View
Interface view
Parameter
Description
Use the ip policy route-policy command to enable policy routing at an interface.

Use the undo ip policy route-policy command to delete the existing policy routing at
an interface.
By default, interface policy routing is disabled.
Related command: ip local policy route-policy.
Example
# Enable the policy routing specified by route-policy AAA at the interface Ethernet
0/0/0.
[H3C-ethernet0/0/0] ip policy route-policy AAA
12.1.14 route-policy
Syntax
route-policy route-policy-name { permit | deny } node sequence-number

undo route-policy route-policy-name [ permit | deny | node sequence-number
View
System view
Parameter
route-policy-name: Specifies the name of a route-policy, which uniquely identifies one

route-policy.
permit: Sets the match mode of a route-policy node to permit. If a packet matches all
if-match clauses of the route-policy node, the packet is permitted and actions are
performed on the packet according to the apply clauses of the route-policy node. If the
packet does not match one of the if-match clauses of the route-policy node, it is
checked against the next route-policy node.
deny: Sets the match mode of a route-policy node to deny. When a packet matches all
if-match clauses of the node, the packet is denied by the node and will not be checked
against the next node.
node: Route-policy node.
12-10
Comware V3 Commands
sequence-number: Identifies a node in the route-policy. When the route-policy is used

for routing information filtering, the node with a smaller sequence-number is used first.
Description
Use the route-policy command to create a route-policy or a route-policy node and

enter the corresponding view.
Use the undo route-policy command to remove a route-policy or a route-policy node.
By default, no route-policy is defined.
Route-policies are used for policy routing. One route-policy may contain multiple nodes,
each consisting of multiple if-match and apply clauses.
The if-match clauses of a route-policy node define the match rules whereas its apply
clauses define the actions performed on the packets filtered in by the node.
For a route-policy node, the relationship between its if-match clauses is AND for packet
filtering, meaning a packet is permitted by the node only when it matches all if-match
clauses.
For a route-policy, the relationship between its nodes is OR for packet filtering, meaning
a packet permitted by a route-policy node passes the filtering of the route-policy. If the
packet does not match any route-policy node, it is denied by the route-policy.
Related command: if-match packet-length, if-match acl, apply ip-precedence,
apply output-interface, apply ip-address next-hop, apply default output-interface,
apply ip-address default next-hop.
Example
# Configure route-policy policy 1, setting its node number to 10 and match mode to
permit; and enter the corresponding view.
[H3C] route-policy policy1 permit node 10
[H3C-route-policy]
12-11
Command Manual – Network Protocol Chapter 13 IP Multicast Policy Routing Configuration
Comware V3 Commands
Chapter 13 IP Multicast Policy Routing

13.1 IP Multicast Policy Routing Configuration Commands

13.1.1 apply ip-address next-hop (for Multicast Policy Routing)
Syntax
apply ip-address next-hop { acl acl-number | ip-address [ ip-address ] }

undo apply ip-address next-hop [ acl acl-number | ip-address [ ip-address ] ]
View
Route-policy view
Parameter
acl-number: Standard ACL number ranging from 2000 to 2999.

ip-address: Specifies the next hop address. Multiple next hop addresses can be
specified.
Description
Use the apply ip-address command to configure the next hop IP address list in a
route-node.
Use the undo apply ip-address command to remove the configuration.
By default, no apply clause is defined.
This command specifies the next hop address for packets that match the if-match acl
command. It specifies the next hop IP address list for multicast policy routing through
the ACL. This command is in juxtaposition relation with the apply output-interface
command. If both apply clauses are configured at the same time, in multicast policy
routing, the packets will be replicated and forwarded to all the interfaces and next hops
specified by the ACLs respectively. This is different from that only one apply clause
works in unicast policy routing.
For the next hop IP address, the specified ACL is the standard ACL.
Related command: if-match acl, apply output-interface, and display ip
multicast-policy.
Example
None
13-1
Comware V3 Commands
13.1.2 apply output-interface (for Multicast Policy Routing)
Syntax
apply output-interface acl acl-number

undo apply output-interface [ acl acl-number ]
View
Route-policy view
Parameter
acl-number: ID of interface-based ACL, ranging from 1000 to 1999.
Description
Use the apply output-interface command to configure an outgoing interface list in a

route-node.
Use the undo apply output-interface command to remove the configuration.
This command specifies outgoing interfaces for packets that match the if-match
command. It specifies outgoing interfaces for multicast policy routing through the ACL.
The action executed to packets that meet the if-match conditions defined by the match
clause is as follows: If outgoing forwarding interfaces are set in the route-node through
the ACL, the packets will be replicated and forwarded to all interfaces specified by the
ACL.
For an outgoing interface, the specified ACL is the one based on interface.
This command is in juxtaposition relation with the apply ip-address next-hop
command. If both apply clauses are configured at the same time, in multicast policy
routing, the packets will be replicated and forwarded to all the interfaces and next hops
specified by the ACLs respectively. This is different from that only one apply clause
works in unicast policy routing.
Related command: apply ip-address next-hop, if-match acl, and display ip
multicast-policy.
Example
None
13.1.3 debugging ip multicast-policy
Syntax
debugging ip multicast-policy [ acl-number ]

undo debugging ip multicast-policy
13-2
Comware V3 Commands
View
User view
Parameter
acl-number: ID of interface-based ACL ranging 1000 to 1999.
Description
Use the debugging ip multicast-policy command to enable the debugging of IP

multicast policy routing.
Use the undo debugging ip multicast-policy command to disable the debugging of
multicast policy routing.
The contents of the debugging information contain the route-node that the packets
match and the next hop/outgoing interface to which the packets are forwarded. The
debugging information output can be filtered with the interface-based ACL.
It should be noted that enabling the debugging would affect the performance of the
system. You should disable the debugging when the system is running normally.
Related command: route-policy.
Example
None
13.1.4 display ip multicast-policy
Syntax
display ip multicast-policy [ setup interface interface-type interface-num | statistic

interface interface-type interface-num ]
View
Any view
Parameter
interface-type interface-num: Specifies an interface by its type and number.
Description
Use the display ip multicast-policy command to view the multicast policy routing
information.
Example
# Display the information about the multicast policy routing configured on interface
Ethernet2/0/0.
13-3
Comware V3 Commands
[H3C] display ip multicast-policy setup interface ethernet2/0/0

route-policy cc permit node 10
if-match acl 3110
apply ip-address next-hop acl 2050
route-policy cc permit node 20
if-match acl 3120
apply output-interface acl 1005
# Display the statistic information about the multicast policy routing configured on
interface Ethernet2/0/0.
[H3C] display ip multicast-policy statistic interface ethernet2/0/0
interface Ethernet2/0/0 multicast-policy routing summary information:
Total packets matched: 5
Total packets forward : 20
13.1.5 if-match acl
Syntax

undo if-match acl acl-number
View
Route-policy view
Parameter
acl-number: Standard or extended ACL number ranging from 2000 to 3999.
Description
Use the if-match acl command to set conditions that multicast packets should meet in
each policy node.
Use the undo if-match acl command to remove the match conditions set.
By default, no if-match clause is defined.
If a packet meets the if-match conditions specified in a policy node, actions specified by
the node will be performed. If a packet does not meet the if-match conditions specified
in a policy node, the next node will be detected. If a packet does not meet the conditions
of all policy nodes, the packet will return to the normal forwarding flow. The
configuration and use of this command are the same as those of the same command in
the unicast policy routing.
Related command: if-match ip-prefix.
Example
# Set the ACL conditions that multicast packets need to meet.
13-4
Comware V3 Commands
[H3C] route-policy p1 permit node 10

13.1.6 ip multicast-policy route-policy
Syntax
ip multicast-policy route-policy policy-name

undo ip multicast-policy route-policy policy-name
View
Interface view
Parameter
policy-name: Specifies the name of a route-policy, which uniquely identifies one

route-policy.
Description
Use the ip multicast-policy route-policy command to enable a multicast policy

routing on an interface.
Use the undo ip multicast-policy route-policy command to remove a multicast policy
route applied on the interface.
By default, no multicast route policy is enabled.
Using this command can enable multicast policy routing defined by the route-policy
named policy-name on an interface.
When multicast policy routing is configured on an interface of a router, all multicast
packets entering the router on the interface will be filtered.
The filter method is that all policy nodes of the route-policy specified by the policy
routing are tried in the order of the ascending sequence of the numbers. If a packet
meets the if-match conditions specified in a policy node, actions specified by the node
will be performed. If a packet does not meet the if-match conditions specified in a policy
node, the next node will be detected. If a packet does not meet the conditions of any
policy nodes, the packet will return to the normal forwarding flow.
Example
# Enable multicast policy routing named map1 on interface Ethernet 2/0/0.

[H3C-Ethernet2/0/0] ip multicast-policy route-policy map1
13-5
Comware V3 Commands
13.1.7 route-policy
Syntax
route-policy policy-name { permit | deny } node sequence-number

undo route-policy policy-name [ permit | deny ] [ node sequence-number ]
View
System view
Parameter
policy-name: Specifies the name of a route-policy, which uniquely identifies one

route-policy.
permit: Specifies the match mode of the route-policy node defined as permit. When a
route entry meets the if-match clause of the node, the entry is permitted to pass the
filter of the node and the apply clause of the node will be performed. If a route entry
does not meet the if-match clause of the node, the next node of the route-policy will be
tested. For multicast policy routing configuration, all the if-match clauses except the
if-match acl clause are invalid.
deny: Specifies the match mode of the route-policy node defined as deny. When a
route entry meets the if-match clause of the node, the entry is denied to pass the filter
of the node and the next node will not be tested. For multicast policy routing
configuration, all the if-match clauses except the if-match acl clause are invalid.
sequence-number: Identifies a node in the route-policy. When the route-policy is used
for routing information filtering, the node with a smaller sequence-number is tested first.
This parameter ranges from 0 to 65535.
Description
Use the route-policy command to configure a route-policy node and enter the
route-policy view.
Use the undo route-policy command to remove a route-policy or a node.
The policy of IP multicast policy routing is implemented by configuring route-policies.
Multiple route-policies can be configured on the router. Each route-policy may contain
multiple route-nodes. Different route-nodes in a route-policy are identified by different
integer sequence-numbers. In each route-node, set the conditions that packets should
match (that is, the match rule) with the if-match command and configure the forwarding
actions to be executed to packets that meet the match conditions with the apply
command.
The logical relation that filter the if-match clauses is “and”. This means that any if-match
clause passing the filter will cause others to be ignored.
13-6
Comware V3 Commands
Only the if-match acl clause is effective for multicast policy routing. The logical relation
between route-policy nodes is “or”. That is, one packet forwarded in one policy node
results in all the following nodes being ignored. If all permit nodes can not succeed in
matching with the features of packet or any deny node is matched, the packet will then
be forwarded or discarded normally, up to the route table.
When multicast policy routing is configured on an interface of a router, all multicast
packets entering the router on the interface will be filtered. The filter method is that all
policy nodes of the route-policy are applied in the ascending sequence of their ID(a
number).
Related command: if-match, apply output-interface, apply ip-address next-hop,
display ip multicast-policy.
Example
# Configure a route-policy named map1 with the node ID of 10 and with the match
mode of permit and enter the route-policy view.
[H3C-route-policy]
13-7
Comware V3 Chapter 14 QLLC Configuration Commands
Chapter 14 QLLC Configuration Commands
14.1.1 debugging qllc
Syntax
debugging qllc { all | packet | event }

undo debugging qllc { all | packet | event }
View
User view
Parameter
all: Enables all QLLC information debugging.

packet: Enables QLLC packet debugging.
event: Enables QLLC negotiation process debugging.
Description
Use the debugging qllc command to enable QLLC debugging.

Use the undo debugging qllc command to disable QLLC debugging.
Example
# Enable all QLLC information debugging.

<H3C> debugging qllc all
14.1.2 X25 qllc-switch
Syntax
X25 qllc-switch x.121-address virtual-mac mac-address [ partner-mac

mac-address ]
X25 qllc-switch x.121-address
View
Parameter
x.121-address: X.121 address of the remote X25 host.

virtual-mac mac-address: Virtual MAC address of the router.
14-1
Comware V3 Chapter 14 QLLC Configuration Commands
partner-mac mac-address: MAC address of the remote SNA device.
Description
Use the X25 qllc-switch command to create a QLLC switching map entry, an
association of X.121 address, MAC address of the SNA device, and local virtual MAC
address.
Use the undo X25 qllc-switch command to delete the QLLC switching map entry.
By default, no QLLC switching map entry exists.
Each asynchronous serial interface can have only one QLLC link, meaning you can
configure only one QLLC switching map entry for a physical interface.
Example
# Create a QLLC switching map entry on X.25-encapsulated interface Serial 1/0/0.

[H3C-Serial1/0/0] x25 qllc-switch 111 virtual-mac 0011-0000-00c1 parter-mac
0000-1738-6dfb
14-2
Comware V3 Chapter 15 SOT Configuration Commands
Chapter 15 SOT Configuration Commands
15.1 SOT Configuration Commands

15.1.1 display sot
Syntax
display sot
View
Any view
Parameter
None
Description
Use the display sot command to display the current state about SOT connections.
Example
# Display the state about SOT connections.

[H3C] display sot
This peer : 1.1.1.1
Serial0/0/0 group 1 (simple)
sdlc-addr ip-address state frame_s frame_r conn_frames disc-frames
1 2.2.2.2 open 23 34 2 3
Table 15-1 Description on the fields of the display sot command
Field Description
This peer IP address of the local SOT entity
The Serial0/0/0 interface is added to SOT protocol
Serial0/0/0 group 1 (simple)
group 1, which is operating in simple SOT mode.
sdlc-addr SDLC address of the terminal
ip-address Peer IP address
state SOT connection state
frame_s Number of sent SDLC information frames
frame_r Number of received SDLC information frames

Number of the SDLC frames sent for SOT
conn_frames
connection setup
15-1
Field Description
disc-frames Number of discarded SDLC frames
The following is the detailed information about SOT connection state:

z In simple/sdlc pass through mode, a SOT connection can be open or close.
Table 15-2 SOT connection states in simple/SDLC pass-through mode
SOT connection
When…
state is…
TCP connection has been set up or is being set up.
open Normally, the TCP connection is set up several seconds after
the send all tcp/sot send address command is configured in
non-local mode on the serial interfaces at the two ends.
close No TCP connection is present
z In SOT local acknowledgement mode, seven SOT states exist: NULL, Link_up,
N-xid_sent, Connecting, Awaiting_connect, Connected, and Awaiting_release.
Table 15-3 SOT connection states in simple/SDLC pass-through mode
SOT connection
When…
state is…
The interface to be used is shut down or its physical state or
NULL
protocol state is down
The physical layer and protocol state of the interface are up,
Link_up
but no connection is being set up
N-xid_sent One end of the link sends an XID frame
Connecting Connection is being set up
Awaiting_connect Connection setup acknowledgement is in progress

Connected Connection is set up
Awaiting_release Connection release acknowledgement is in progress
15.1.2 link-protocol sot
Syntax
link-protocol sot
View
15-2
Parameter
None
Description
Use the link-protocol sot command to encapsulate the serial interface with SOT.
By default, the serial interface is encapsulated with PPP.
Before you can configure SOT on a synchronous serial interface, you must encapsulate
the interface with SOT.
Example
# Encapsulate the Serial0/0/0 interface with SOT.

[H3C-Serial0/0/0] link-protocol sot
15.1.3 sot counter keepalive
Syntax
sot counter keepalive count

undo sot counter keepalive
View
System view
Parameter
count: Maximum number of keepalive checks before disconnecting from the peer SOT
entity, in the range 1 to 10.
Description
Use the sot counter keepalive command to specify the number of keepalive checks
before disconnecting from the peer SOT entity.
Use the undo sot counter keepalive command to disable keepalive check before
disconnection. The peer SOT entity is disconnected without keepalive check.
By default, SOT connection is disconnected without keepalive check.
The command is used only in SOT local acknowledgement mode.
Example
# Set maximum number of keepalive checks to four before disconnecting from the peer
SOT entity.
[H3C] sot counter keepalive 4
15-3
15.1.4 sot gather
Syntax
sot gather group-number

undo sot gather group-number
View
Parameter
group-number: An integer in the range 1 to 255.
Description
Use the sot gather command to assign the serial interface to an existing SOT protocol
group.
Use the undo sot gather command to remove the serial interface from its SOT
protocol group.
You can assign a serial interface to only one SOT protocol group. If this group is
operating in simple SOT mode, the interface will operate in simple SOT mode providing
only point-to-point data transmission. If this group is operating in SDLC mode, the
interface operates in pass-through mode or local acknowledgement mode providing
point to multipoint data transmission.
Note:
The configuration of the sot gather group-number command will replace the original
one, if there is any.
When the type of the SOT protocol group changes, from simple to SDLC for example,
the SOT configuration on the interface is removed.
Related command: sot group-set.
Example
# Assign interface Serial 0/0/0 to SOT protocol group 2.

[H3C-Serial0/0/0] sot gather 2
15.1.5 sot group-set
Syntax
sot group-set group-number { simple | sdlc }
15-4
undo sot group-set group-number
View
System view
Parameter
group-number: An integer in the range 1 to 255.

simple: Simple protocol group, corresponding to simple SOT mode.
sdlc: SDLC protocol group, corresponding to SDLC mode: pass-through or local.
Related command: sot gather.
Description
Use the sot group-set command to set up a SOT protocol group.

Use the undo sot group-set command to remove a SOT protocol group.
By default, no protocol group is set up.
SDLC protocol groups are well suited to point-to-point or point-to-multipoint SDLC
routing; simple protocol groups are well suited to point-to-point connections.
Example
# Set up SOT protocol group 5 and specifies its mode to simple.

[H3C] sot group-set 5 simple
# Set up SOT protocol group 6 and specifies its mode to SDLC.

[H3C] sot group-set 6 sdlc
15.1.6 sot peer
Syntax
sot peer ip-address

undo sot peer
View
System view
Parameter
ip-address: IP address of the local SOT entity.
Description
Use the sot peer command to assign an IP address to the local SOT entity.
Use the undo sot peer command to remove the local SOT entity.
15-5
The IP address provided in this command must belong to an interface that is always up,
a loopback interface for example. Or, the tunnel cannot be established and the system
prompts that the IP address is not a local address.
Example
# Assign the IP address 131.108.254.6 to the local SOT entity.

[H3C] sot peer 131.108.254.6
15.1.7 sot sdlc broadcast
Syntax
sot sdlc broadcast

undo sot sdlc broadcast
View
Parameter
None
Description
Use the sot sdlc broadcast command to configure the broadcast address FF for the
connected SDLC terminals, allowing them to receive broadcast frames.
Use the undo sot sdlc broadcast command to disable SDLC broadcast.
By default, SDLC broadcast is disabled.
Related command: sot send address.
Example
# Configure the broadcast address FF for the connected SDLC terminals.

[H3C-Serial0/0/0] sot sdlc broadcast
15.1.8 sot sdlc controller
Syntax
sot sdlc controller sdlc-address

undo sot sdlc controller sdlc-address
View
15-6
Parameter
sdlc-address: SDLC address of the terminal, in the range 0 to ff (exclusive).
Description
Use the sot sdlc controller command to configure the SDLC address of a connected
terminal.
Use the undo sot sdlc controller command to remove the SDLC address of a
connected terminal.
By default, no terminal is specified.
This command allows the router to implement point-to-multipoint transmission in SDLC
mode, sending packets to multiple connected terminals. This command is used to have
an IBM controller or front end processor to communicate with specified terminals.
Before you can configure the sdlc controller command on the interface, you must
assign the interface to a SOT protocol group. In addition, multiple terminals can be
configured.
Example
# Configure the terminal C2.

[H3C-Serial0/0/0] sot sdlc controller c2
15.1.9 sot sdlc-status primary
Syntax
sot sdlc-status primary

undo sot sdlc-status
View
Parameter
None
Description
Use the sot sdlc-status primary command to set the role of the router to SDLC
primary node.
Use the undo sot sdlc-status command to delete the role setting.
By default, no role is assigned to the router.
In SOT local acknowledgement mode, you must assign a role to the router, depending
on the position of the router in the sequence of primary (IBM host), secondary (router),
15-7
primary (router), and secondary (terminal). If the router is connected to terminals, its
role is SDLC primary node. Other SOT modes however, do not involve the role of
primary node.
Example
# Specify the router to be SDLC primary node.

[H3C-Serial0/0/0] sot sdlc-status primary
15.1.10 sot sdlc-status secondary
Syntax
sot sdlc-status secondary

undo sot sdlc-status
View
Parameter
None
Description
Use the sot sdlc-status secondary command to set the role of the router to SDLC
secondary node.
Use the undo sot sdlc-status command to delete the role setting.
By default, no role is assigned to the router.
In SOT local acknowledgement mode, you must assign a role to the router, depending
on the position of the router in the sequence of primary (IBM host), secondary (router),
primary (router), and secondary (terminal). If the router is connected to an IBM host, its
role is SDLC secondary node. In broadcast mode, you must set the role of the router to
secondary, regardless of whether it is connected to an IBM host or to a terminal. Other
SOT modes however, do not involve the role of secondary node.
Related command: ip route, display ip interface, display interface.
Example
# Set the role of the router to SDLC secondary node.

[H3C-Serial0/0/0] sot sdlc-status secondary
15-8
15.1.11 sot send address
Syntax
sot send address sdlc-address tcp ip-address [ local ] [ send-queue ]

undo sot sendaddress sdlc-address tcp ip-address [local ] [ send-queue ]
View
Parameter
sdlc-address: SDLC address of a terminal, a hexadecimal number in the range 1 to FF.

ip-address: IP address of the peer SOT entity.
local: Implements the local acknowledgement function.
send-queue: Sets maximum length of the TCP output queue, in the range 10 to 500. It
defaults to 50.
Description
Use the sot send address command to configure the route for sending SDLC frames
to the specified specific terminal.
Use the undo sot send address command to remove the specified route.
This command is applicable to the following two SDLC modes:
z In non-local mode or pass-through mode, the sdlc-address argument ranges from
1 to FF. When the sdlc-address argument is set to FF, the router sends SDLC
frames to all SDLC terminals connected to it.
z In local acknowledgement mode (specified by the local keyword), the
sdlc-address argument ranges from 1 to fe and cannot be the broadcast address
FF.
Related command: sot sdlc broadcast.
Example
# Send the SDLC frames destined for SDLC terminal 10 to the peer device (in non-local
mode) with the IP address of 131.108.8.1.
[H3C-Serial0/0/0] sot send address 10 tcp 131.108.8.1
# Send the SDLC frames destined for SDLC terminal 10 to the peer device (in local
acknowledgement mode) with the IP address of 131.108.8.1.
[H3C-Serial0/0/0] sot send address 10 tcp 131.108.8.1 local
15-9
15.1.12 sot send all tcp
Syntax
sot send all tcp ip-address

undo sot send all tcp ip-address
View
Parameter
ip-address: IP address of the peer entity.
Description
Use the send all tcp command to forward all received SDLC frames to the specified
address.
Use the undo send all tcp command to disable the router to forward the SDLC frames
received on the interface.
By default, the received SDLC frames are not forwarded.
This command is only applicable to simple SOT mode.
Example
# Forward all SDLC frames received on interface Serial 0/0/0 to the specified IP
address 131.108.8.1.
[H3C-Serial0/0/0] sot send all tcp 131.108.8.1
15.1.13 sot timer keepalive
Syntax
sot timer keepalive [ seconds ]

undo sot timer keepalive
View
System view
Parameter
seconds: Keepalive timer in the range 1 to 300 seconds. It defaults to 30 seconds.
Description
Use the sot timer keepalive command to configure the keepalive timer.
Use the undo sot timer keepalive command to restore the default.
15-10
Use this command in SOT local acknowledgement mode and in conjunction with the
sot counter keepalive command.
Example
# Set the keepalive timer to 60 seconds.

[H3C] sot timer keepalive 60
15-11
Comware V3 Chapter 16 MIP Configuration Commands
Chapter 16 MIP Configuration Commands
16.1 MIP Configuration Commands

16.1.1 debugging mobile-ip advertise
Syntax
debugging mobile-ip advertise

undo debugging mobile-ip advertise
View
User view
Parameter
None
Description
Use the debugging mobile-ip advertise command to enable debugging for mobility
agent advertisements.
Use the undo debugging mobile-ip advertise command to disable the debugging.
By default, debugging is disabled for mobility agent advertisements.
Example
# Enable debugging for mobility agent advertisements.

<H3C> debugging mobile-ip advertise
16.1.2 debugging mobile-ip node
Syntax
debugging mobile-ip node

undo debugging mobile-ip node
View
User view
Parameter
None
16-1
Description
Use the debugging mobile-ip node command to enable debugging for MIP packets
and events.
Use the undo debugging mobile-ip node command to disable the debugging.
Example
# Enable debugging for MIP packets and events.

<H3C> debugging mobile-ip node
MobileIP: HA received registration for MN 20.0.0.6 on interface Ethernet1 using
COA
68.0.0.31 HA 66.0.0.5 lifetime 30000 options sbdmgvT
MobileIP: Authenticated FA 68.0.0.31 using SPI 110 (MN 20.0.0.6)
MobileIP: Authenticated MN 20.0.0.6 using SPI 300
MobileIP: HA accepts registration from MN 20.0.0.6
MobileIP: Mobility binding for MN 20.0.0.6 updated
MobileIP: Roam timer started for MN 20.0.0.6, lifetime 30000
MobileIP: MH auth ext added (SPI 300) in reply to MN 20.0.0.6
MobileIP: HF auth ext added (SPI 220) in reply to MN 20.0.0.6
MobileIP: HA sent reply to MN 20.0.0.6
16.1.3 display mobile-ip interface
Syntax
display mobile-ip interface [ ethernet interface-number ]
View
Any view
Parameter
interface-number: Ethernet interface number.
Description
Use the display mobile-ip interface command to display the MIP information of an
interface. With the interface-number argument not specified, MIP information of all
interfaces is displayed.
Example
# Display MIP information of all interfaces.

[H3C] display mobile-ip interface
IP Mobility interface information:
16-2
Ethernet0/0/0
IRDP (includes agent advertisement) disabled
No Prefix Length advertised
Lifetime is 36000 seconds
Home Agent service provided
Foreign Agent service provided
No reverse tunnel supported
No registration required
Not busy
No Home Agent access list
Maximum number of visitors allowed: 50
Current number of visitors: 0
Ethernet0/0/1
IRDP (includes agent advertisement) disabled
Lifetime is 36000 seconds
Home Agent service provided
No Foreign Agent service provided
The following table describes the fields of the output.
Table 16-1 Description on the fields of the display mobile-ip interface command
Field Description
Ethernet0/0/0 Interface name
IRDP (includes agent advertisement) Whether IRDP is enabled on the
disabled interface
Whether the agent advertisement
includes prefix-length extension
Lifetime is 36000 seconds Registration lifetime for the MNs
Home Agent service provided Whether HA is enabled on the interface
Foreign Agent service provided Whether FA is enabled on the interface
Whether the interface provides reverse
No reverse tunnel supported
tunneling
Whether an MN with a co-located
No registration required care-of address is required to register by
FA
Whether the FA function of the interface
Not busy
is busy
HA addresses granted or denied by the
No Home Agent access list
FA configured on the interface
16-3
Field Description
Maximum number of visitors the
Maximum number of visitors allowed: 50 interface is configured to support. It
Number of current visitors on the
Current number of visitors: 0 interface (that is, number of visiting
MNs)
16.1.4 display mobile-ip globals
Syntax
display mobile-ip globals
View
Any view
Parameter
None
Description
Use the display mobile-ip globals command to display global information about
mobility agents.
Information about an HA includes: the default lifetime of all MNs, list of all nodes
permitted to roam, list of authorized care-of addresses, list of virtual networks serviced
by the HA, and whether broadcast forwarding and reverse tunneling are enabled.
Information about an FA includes: the aging time of the pending table entries, list of
care-of addresses, and number of interfaces providing services.
Information about all MAs includes: the supported encapsulation mode, whether PMTU
discovery is enabled and the PMTU aging time.
Example
# Display global information about mobility agents.

[H3C] display mobile-ip globals
Mobile IP global information:
Home Agent is enabled
Registration lifetime: 36000 seconds
Roaming access list: 2001
Care-of access list: 2000
Broadcast disabled
Replay protection time: 30 seconds
16-4
Reverse tunnel enabled

Virtual networks HA address : 11.1.1.1
Virtual networks:
11.1.1.0/24 HA address : 11.1.1.1
Foreign Agent is enabled.
Pending time : 7 secconds
care-of interface Ethernet0/0/0
1 interface providing service
Mobility Agent
Encapsulations supported: IPIP and GRE
Discovered tunnel MTU aged timer: 600 seconds
Table 16-2 Description on the fields of the display mobile-ip globals command
Field Description
Home Agent is enabled Whether HA is enabled.
The default lifetime of all MNs, in
Registration lifetime: 36000 seconds
seconds.
ACL that indicates the mobile nodes of
Roaming access list: 2001 the HA permitted to roam. Not displayed
if not specified.
ACL that indicates the FAs supporting
Care-of access list: 2000 mobile nodes of HA to roam. Not
displayed if not specified.
Whether broadcast forwarding is
Broadcast disabled
enabled.
Replay protection time, 30 seconds by
Replay protection time: 30 seconds
default.
Reverse tunnel enabled Whether reverse tunneling is enabled.
HA Address for virtual networks, which
must be the address of an existing
Virtual networks HA address : 11.1.1.1
interface, generally the Loopback
interface.
Virtual networks: List of virtual networks serviced by the
11.1.1.0/24 HA address : 11.1.1.1 HA. Not displayed if not specified.
Foreign Agent is enabled Whether FA is enabled.

Aging time for the pending table entries,
Pending time : 7 secconds
7 seconds by default.
List of care-of addresses, including the
care-of interface Ethernet0/0/0 port status (up or down). Not displayed if
not specified.
16-5
Field Description
Number of interfaces providing FA
1 interface providing service
service
Information about all mobility agents.
Mobility Agent Both the HA service and the FA service
on the device share this information.
Encapsulations supported: IPIP and
Supported encapsulation mode
GRE
PMTU aging time. PMTU is not aged by
Discovered tunnel MTU aged timer: 600
default, and if aged, the default aging
seconds
time is 600 seconds.
16.1.5 display mobile-ip statistics
Syntax
display mobile-ip statistics
View
Any view
Parameter
None
Description
Use the display mobile-ip statistics command to display statistics collected by the
mobility agents.
Example
# Display statistics collected by the mobility agents.

<H3C> display mobile-ip statistics
mobile-ip statistics:
Advertisements:
Solicitations received 0
Advertisements sent 0, response to solicitation 0
Home Agent Registrations:
Register 0, Deregister 0 requests
Register 0, Deregister 0 replied
Accepted 0, No simultaneous bindings 0
Denied 0, Ignored 0
Unspecified 0, Unknown HA 0
Administrative prohibited 0, No resource 0
16-6
Authentication failed MN 0, FA 0
Bad identification 0, Bad request form 0
Unavailable encap 0, Too many bindings 0
Reverse tunnel Unavailable 0, Mandatory 0
Gratuitous 0, Proxy 0 ARPs sent
Foreign Agent Registrations:
Request in 0,
Forwarded 0, Denied 0, Ignored 0
Unspecified 0, HA unreachable 0
Administrative prohibited 0, No resource 0
Bad lifetime 0, Bad request form 0
Unavailable encapsulation 0, Compression 0
Reverse tunnel Unavailable 0, Mandatory 0
MN too far 0
Unavailable COA 0, Pending expired 0
Replies in 0
Forwarded 0, Bad 0, Ignored 0
Authentication failed MN 0, HA 0
Table 16-3 Description on the fields of the display mobile-ip statistics command
Field Description
Total number of agent solicitations
Solicitations received
received by the mobility agents
Total number of agent advertisements
Advertisements sent
sent by the mobility agents
Response to solicitation sent in response to agent solicitations
from MNs
Home Agent Registrations: HA registration statistics
Total number of registration requests
Register requests
received by the HA
Total number of deregistration requests
Deregister requests
received by the HA
Total number of registration replies sent
Register replied
by the HA
Total number of deregistration replies
Deregister replied
sent by the HA
Accepted
accepted by the HA
16-7
Field Description
No simultaneous binding accepted by the HA when simultaneous
binding is not supported
Denied
denied by the HA
Ignored
ignored by the HA
Unspecified denied by the HA based on unknown
reasons
Unknown HA denied by the HA because no HA
address was specified in the packets
Administrative prohibited denied by the HA due to unauthorized
MNs
No resource denied by the HA due to lack of
resources
Authentication failed MN denied by the HA due to failed MN
authentication
Authentication failed FA denied by the HA due to failed FA
authentication
denied by the HA due to failed
Bad identification
timestamp authentication for replay
protection
Bad request form denied by the HA due to incorrect packet
format
Unavailable encap denied by the HA due to unsupported
encapsulation mode requested by MNs
Too many bindings denied by the HA due to over-limit
bindings
Unavailable reverse tunnel denied by the HA due to unavailable
reverse tunneling
denied by the HA because reverse
Mandatory
tunneling is mandatory on it but not set
in the registration request
16-8
Field Description
Total number of gratuitous ARP packets
Gratuitous ARP
sent to MNs by the HA
Total number of proxy ARP packets sent
Proxy ARPs sent
to MNs by the HA
Foreign Agent Registrations: FA registration statistics
Request in
received by the FA
Forwarded
relayed by the FA
Denied
denied by the FA
Ignored
ignored by the FA
Unspecified denied by the FA due to unknown
reasons
HA unreachable denied by the FA due to unreachable
HAs
Administrative prohibited denied by the FA due to unauthorized
MNs
No resource denied by the FA due to lack of
resources
Bad lifetime denied by the FA due to too long lifetime
settings in the registration requests
Bad request form denied by the FA due to incorrect packet
format
Unavailable encapsulation denied by the FA due to unsupported
encapsulation mode requested by MNs
Unavailable compression denied by the FA due to unavailable Van
Jacobson header compression
Reverse tunnel Unavailable denied by the FA due to unavailable
reverse tunneling
16-9
Field Description
denied by the FA because reverse
Mandatory
tunneling is mandatory but not set in the
registration request
denied by the FA because reverse
MN too far
tunneling was used but the TTL was not
255
denied by the FA because the HA did not
Unavailable COA
treat the FA as a valid care-of address
holder
denied by the FA because the pending
Pending expired
time expired but no registration reply
was received from the HA
Total number of valid registration replies
Replies in
received by the FA
Total number of valid registration replies
Forwarded
forwarded to MNs by the FA
Total number of registration replies
Bad denied by the FA due to incorrect packet
format
Ignored
ignored by the FA
Authentication failed MN denied by the FA due to failed MN
authentication at HAs
Authentication failed HA denied by the FA due to failed HA
authentication
16.1.6 mobile-ip
Syntax
mobile-ip
undo mobile-ip
View
System view
16-10
Parameter
None
Description
Use the mobile-ip command to enable the MIP function.

Use the undo mobile-ip command to disable the MIP function.
You must enable MIP before configuring HA or FA on a router.
Once MIP is disabled, all relevant configurations (including those configured globally or
locally on an interface) are deleted, all dynamic information (the visitor table, pending
table, and binding table) are removed, and all statistics are cleared.
By default, MIP is not enabled.
Example
# Enable MIP on a router.

<H3C> system-view
[H3C] mobile-ip
# Disable MIP on a router.

<H3C> system-view
[H3C] undo mobile-ip
16.1.7 mobile-ip tunnel path-mtu-discovery
Syntax
mobile-ip tunnel path-mtu-discovery [ age-timer {seconds | infinite} ]

undo mobile-ip tunnel path-mtu-discovery [ age-timer ]
View
System view
Parameter
seconds: PMTU aging time in seconds. It ranges from 30 to 1,800, and defaults to 600.
infinite: Specifies never to age out the PMTU.
Description
Use the mobile-ip tunnel path-mtu-discovery command to set the PMTU update
policy.
Use the undo mobile-ip tunnel path-mtu-discovery command to specify not to
perform PMTU discovery.
16-11
Use the undo mobile-ip tunnel path-mtu-discovery age-timer command to restore

the default PMTU aging time.
PMTU is used to find the maximum packet size tunneled without fragmentation. The
discovered PMTU can be aged out periodically, replaced by a more suitable PMTU in
some cases, or reset when it expires.
By default, PMTU discovery is not performed.
Example
# Set the PMTU discovery aging time to 480 seconds.

<H3C> system-view
[H3C] mobile-ip tunnel path-mtu-discovery age-timer 480
16.1.8 reset mobile-ip statistics
Syntax
reset mobile-ip statistics
View
User view
Parameter
None
Description
Use the reset mobile-ip statistics command to clear all MIP counters.
Example
# Clear all MIP counters.

<H3C> reset mobile-ip statistics
16.1.9 snmp-agent trap enable mobile-ip
Syntax
snmp-agent trap enable mobile-ip

undo snmp-agent trap enable mobile-ip
View
System view
Parameter
None
16-12
Description
Use the snmp-agent trap enable mobile-ip command to enable the MIP SNMP trap
function. With the function enabled, a trap packet is sent to the network management
software whenever a security violation event occurs.
Use the undo snmp-agent trap enable mobile-ip command to disable the MIP SNMP
trap function.
By default, MIP SNMP trap is disabled.
Example
# Enable the MIP SNMP trap function.

<H3C> system-view
[H3C] snmp-agent trap enable mobile-ip
16.2 HA Configuration Commands

16.2.1 display mobile-ip binding
Syntax
display mobile-ip binding [ ip-address | brief ]
View
Any view
Parameter
ip-address: IP address of the MN.

brief: Displays only total number of MNs in the binding table.
Description
Use the display mobile-ip binding command to display information about the HA
binding table. A binding table maintains mainly the corresponding relations between HA
addresses and the care-of addresses of MNs. An HA updates the binding table based
on MN registration events.
With no parameters specified, information about the whole binding table is displayed.
Example
# Display information about the whole binding table.

[H3C] display mobile-ip binding
Mobile IP Binding List:
Total 1
20.0.0.1
16-13
Care-of Addr 68.0.0.31, Src Addr 68.0.0.31

Lifetime granted 02:46:40 (10000), remaining 02:46:32
Flags SbdmGvt, Identification B750FAC4.C28F56A8,
Tunnel src 66.0.0.5 dest 68.0.0.31 reverse-allowed
Routing Options - (G)GRE
Table 16-4 Description on the fields of the display mobile-ip binding command
Field Description
Total 1 Total number of entries in the binding table
20.0.0.1 Home address of the MN
Care-of Addr 68.0.0.31 Care-of address of the MN
Source IP address of the registration request
that the HA received. It might be the
Src Addr 68.0.0.31
co-located care-of address of the MN or the
address of the FA.
Registration lifetime that the HA granted to
Lifetime granted 02:46:40 (10000)
the MN (in seconds)
Remaining time before the registration
expires. Its initial value equals to the granted
remaining 02:46:32
lifetime and the HA decreases it by 1 every
second.
Flags sent by the MN. A capital letter means
Flags SbdmGvt that the bit is set to 1, a lower-case letter
means that the bit is set to 0.
A 64-bit value for matching registration
Identification
requests with registration replies to avoid
B750FAC4.C28F56A8
replay attacks by registration requests
Source and destination of the tunnel; whether

reverse tunneling is supported
(reverse-allowed if supported, and
Tunnel src 66.0.0.5 dest 68.0.0.31 reverse-off if not).
reverse-allowed The tunnel encapsulation mode is IP in IP by
default, otherwise is GRE. The configured
encapsulation mode is denoted in the
Routing Options field.
Services that the HA can provide, which can
be:
B for agent advertisement broadcasting,
D for direct-to-mobile node,
G for encapsulation mode GRE, or
T for reverse tunneling.
16-14
16.2.2 mobile-ip home-agent
Syntax
mobile-ip home-agent [ care-of-acl acl ] [ha-virtual-net ip-address] [ lifetime

seconds ] [ replay seconds ] [ reverse-tunnel {off | mandatory } ] [ roam-acl acl ]
undo mobile-ip home-agent [ care-of-acl ] [ha-virtual-net] [ lifetime] [ replay ]
[ reverse-tunnel ] [ roam-acl]
View
System view
Parameter
care-of-acl number: ACL that indicates the care-of addresses that MNs can register.
Use this ACL to control where MNs can roam. By default, all addresses are allowed.
The number argument ranges from 2000 to 2999.
ha-virtual-net ip-address: HA address of the virtual network when MIP supports virtual
network.
lifetime seconds: Registration lifetime for all MNs, which can be overwritten by that set
for a single MN (using the mobile-node low-addr [ up-addr ] { interface ethernet
interface-number | virtual-network network_address mask} [ lifetime lifetime ]
command). It ranges from 3 to 65,535 seconds and defaults to 36,000 seconds. If the
lifetime of a registration request is longer than seconds, the registration request is
accepted with the longer as its lifetime.
replay seconds: Replay protection interval, in which registration is valid. It ranges from
1 to 600 seconds and defaults to 30 seconds.
reverse-tunnel {mandatory | off }: The mandatory keyword enables reverse
tunneling and forces MNs to use reverse tunneling. The off keyword cancels reverse
tunneling. By default, an HA supports reverse tunneling.
roam-acl number: ACL that indicates which nodes can roam. The number argument
Description
Use the mobile-ip home-agent command to enable HA service on a router.

Use the undo mobile-ip home-agent command to disable HA service on a router or
restore the defaults of some parameters.
An HA processes registration requests from its MNs, establishes tunnels, sets up
routes to the care-of addresses, and forwards packets destined for the MNs to the
care-of addresses.
16-15
If HA service is not enabled on an expected HA, or no MN-HA security association is

configured, any incoming registration request will be ignored. Otherwise, the HA will
authenticate the registration request and respond.
After accepting the registration request of an MN, the HA creates or updates its MN
binding table, including the entry aging time. If no previous binding information about
the MN exists in the binding table, the HA adds an entry for the MN, and creates a
virtual tunnel to the care-of address. Meanwhile, the HA adds a routing entry into the
routing table, setting the destination address to the home address of the MN, the next
hop to the care-of address of the MN, and the outbound interface to Mobile0. Packets
destined for the MN are forwarded through this route to the care-of address, including
gratuitous ARP packets.
When an MN deregisters or its registration lifetime expires, the HA removes the
corresponding routing entry in the routing table, binding information in the binding table
and deletes the virtual tunnel interface. If an MN returns home, it sends a gratuitous
ARP packet.
When a packet destined for an MN arrives, the HA encapsulates and tunnels the packet
to the care-of address. If the “don't segment” bit is set, the outer IP header also must be
set, which allows the PMTU discovery function to set the MTU. If the subsequent
packets are larger than the PMTU, they will be dropped and an ICMP message
informing the too large packet will be sent back to the initiator.
If the route to the endpoint of the tunnel (that is, the care-of address of the MN) is
unreachable, the HA removes the route from its routing table. When the route comes up
again, the route will be automatically added back to the routing table. If the HA finds no
route to an MN, it sends the packet to the interface (the home link) or the virtual
network.
An HA uses the care-of-acl argument to control where MNs can roam, and uses the
roam-acl to control which nodes can roam.
By default, HA service is not enabled.
Example
# Enable the HA function.

[H3C] mobile-ip home-agent
# Set the global registration lifetime to 7,200 seconds.

[H3C] mobile-ip home-agent lifetime 7200
# Add ACL 2000 as the roam-acl to specify the MNs, and ACL 2001 as the care-of-acl
to specify the FAs for MNs.
16-16
# Enable the HA function.

[H3C] mobile-ip home-agent care-of-acl 2001 roam-acl 2000
16.2.3 mobile-ip virtual-network
Syntax
mobile-ip virtual-network ip-address { mask | mask-length } [ ha-address

ip-address ]
undo mobile-ip virtual-network [ net { mask | mask-length } ]
View
System view
Parameter
ip-address: IP address for the virtual network.

mask: Mask for the virtual network.
mask-length: Length of the mask for the virtual network.
ha-address ip-address: HA Address for the virtual network, which must be the address
of an interface and is usually the address of a loopback interface.
Description
Use the mobile-ip virtual-network command to define a virtual network.

Use the undo mobile-ip virtual-network command to remove one or all virtual
networks.
The mobile-ip virtual-network command adds a virtual network to the routing table so
that MNs can use the virtual network as the home network.
By default, no virtual network is defined.
Example
# Add virtual network 20.0.0.0, using the address of loopback interface loopback0 as
the HA address.
[H3C] mobile-ip virtual-network 20.0.0.0 255.255.0.0
[H3C-loopback0] ip address 20.0.0.1 255.255.255.255
[H3C-loopback0] quit
[H3C] mobile-ip virtual-network 20.0.0.0 255.255.0.0 ha-address 20.0.0.1
16-17
16.2.4 reset mobile-ip binding
Syntax
reset mobile-ip binding [ ip-address | interface ethernet interface-number ]
View
User view
Parameter

Interface ethernet interface-number: Interface that MNs rely on. Specify this argument
to remove all mobility bindings on the interface.
Description
Use the reset mobile-ip binding command to remove mobility bindings. With neither
the ip-address argument nor the interface-number argument specified, all mobility
bindings are removed.
An HA maintains a mobility binding for each roaming MN. The mobility binding
mechanism allows MNs to exchange packets with their respective CNs. When a
mobility binding is removed, routing information about the MN will be removed from the
routing table. If the MN still needs to roam, it must register again.
Use this command with caution. This command can terminate an ongoing session.
Example
# Disable MN 20.0.0.1 from roaming.

[H3C] display mobile-ip binding
Mobile IP Binding List:
Total 1
20.0.0.1:
Care-of Addr 68.0.0.31, Src Addr 68.0.0.31,
Lifetime granted 02:46:40 (10000), remaining 02:46:32
Flags SbdmGvt, Identification B750FAC4.C28F56A8,
Tunnel100 src 66.0.0.5 dest 68.0.0.31 reverse-allowed
<H3C> reset mobile-ip binding 20.0.0.1
<H3C> display mobile-ip binding
Mobile-ip Binding List:
Total 0
16-18
16.3 FA Configuration Commands

16.3.1 display mobile-ip visitor
Syntax
display mobile-ip visitor [ pending ] [ip-address | brief ]
View
Any view
Parameter
pending: Displays information about MNs in the pending table.

brief: Displays the total number of MNs in the visitor table or pending table.
Description
Use the display mobile-ip visitor command to display information in the visitor table
and pending table of an FA. An FA updates its visitor table and pending table based on
registration events of MNs. If not specify the ip-address argument, all contents of the
tables are displayed.
Example
# Display information in the visitor table.

[H3C] display mobile-ip visitor
Mobile Visitor List:
Total 1
20.0.0.1:
Interface Ethernet0/0/1, MAC addr 00-60-83-7b-95-ec
IP src 20.0.0.1, dest 67.0.0.31, UDP src port 434
HA addr 66.0.0.5, Identification B7510E60.64436B38
Lifetime 3000 Remaining 2996
Tunnel src 68.0.0.31, dest 66.0.0.5, reverse-allowed
Routing Options - (T)Reverse-tunnel
Table 16-5 Description on the fields of the display mobile-ip visitor command
Field Description
Total 1 Total number of visiting MNs on the FA
Interface Ethernet0/0/1 FA interface used by the MN
16-19
Field Description
MAC addr 00-60-83-7b-95-ec MAC address of the MN
Source IP address in the registration
IP src 20.0.0.1
request of the MN
Destination IP address in the
registration request of the MN, which is
dest 67.0.0.31
the IP address of the FA interface
connecting to the MN
Source UDP port in the registration
UDP src port 434
request of the MN
HA addr 66.0.0.5 HA address of the MN
requests with registration replies to
Identification B7510E60.64436B38
avoid replay attacks by registration
messages
Registration lifetime granted by HA to
Lifetime 3000
the MN (in seconds)
Remaining time before the registration
expires. Its initial value equals to the
Remaining 2996
granted lifetime and the FA decreases it
by 1 every second.
Source and destination of the tunnel

through which an HA forwards packets
to a care-of address. Also indicated is
whether reverse tunneling is supported
Tunnel src 68.0.0.31, dest 66.0.0.5, (reverse-allowed if supported, and
reverse-allowed reverse-off is unsupported).
The encapsulation mode, denoted in the
Routing Options field, is IP in IP by
default, otherwise is GRE.
Services that the HA can provide, which
can be:
S for simultaneous binding,
Routing Options - (T)Reverse-tunnel B for agent advertisement broadcasting,
D for direct-to-MN,
G for encapsulation mode GRE, or
T for reverse tunneling.
16.3.2 mobile-ip foreign-agent
Syntax
mobile-ip foreign-agent { care-of ethernet interface-number | pending seconds }

undo mobile-ip foreign-agent [ care-of ethernet interface-number | pending ]
16-20
View
System view
Parameter
care-of ethernet interface-number: Care-of address of the FA. An FA can have

multiple care-of addresses and must have at least one.
pending seconds: Time for waiting for the registration reply. It ranges from 5 to 600
seconds and defaults to 7 seconds. If no reply is received for a sent registration request
in this period, the FA deletes information about the MN from the pending table.
Description
Use the mobile-ip foreign-agent command to set foreign agent care-of addresses and
the pending time.
Use the undo mobile-ip foreign-agent command to disable FA service or, with said
arguments specified, remove a foreign agent care-of address and restore the default
pending time setting.
With at least one care-of address specified, the mobile-ip foreign-agent service
command enables FA service. An FA sends agent advertisements on interfaces with FA
service enabled.
An FA relays registration requests to the HAs, establishes tunnels to the HAs, and
forwards packets to the MNs. Any requests that arrive at an interface without care-of
address or with FA service not enabled are ignored.
If a security association between a visiting MN and the FA exists, the FA authenticates
the registration request from the MN. If the registration request passes the
authentication, the FA relays the request to the HA. If a security association exists
between the FA and the HA, the FA also adds the FA-HA authentication extension,
when the pending timer will be started (set to 7 seconds by default). Each MN can send
up to five pending registration requests. If the registration request fails the
authentication, the FA sends an error code to the MN, and logs the event as a security
exception.
When a registration reply arrives at the FA, if a security association exists between the
HA and the FA, the FA will authenticate the reply. If the authentication is successful, the
FA relays the registration reply to the MN, and creates or updates its visitor table,
including the aging timer. A visitor binding will be removed If the registration lifetime
expires or a deregistration request is accepted.
An FA must advertise its care-of address, which an MN uses to register with its HA. The
HA and FA use the care-of address as the endpoint of the tunnel and the starting point
of the reverse tunnel respectively. When packets destined for an MN reach the FA, the
FA detunnels and forwards the packets to the MN. When an MN uses a reverse tunnel
16-21
to send packets, the FA uses the care-of address as the starting point of the reverse
tunnel, tunneling the packets from the MN to the HA.
By default, the FA function is not enabled.
Example
# Enable FA service on interface Ethernet 0/0/1, setting the IP address of the interface
1.0.0.1 as the care-of address for advertisements.
<H3C> system-view
[H3C] mobile-ip foreign-agent care-of Ethernet 0/0/1
16.3.3 mobile-ip foreign-agent service
Syntax
mobile-ip foreign-agent service [ home-acl acl ] [ registration-required ] [ restrict

number ] [ reverse-tunnel [ mandatory ] ]
undo mobile-ip foreign-agent service [ home-acl ] [ registration-required ]
[ restrict ] [ reverse-tunnel ]
View
Interface view
Parameter
home-acl acl: ACL that controls which HA address can be used by MNs to register. The
acl argument ranges from 2000 to 2999.
registration-required: Forces MNs to register through the FA even if they are using
co-located care-of addresses. Meanwhile, the R bit in the agent advertisement of the
interface must be set to 1.
restrict number: Maximum number of visitors permitted on the interface. When the
number of registered visitors reaches this threshold, the agent advertisement of the
interface will have the B bit set to 1. This argument ranges from 1 to 100 and defaults to
50.
reverse-tunnel [ mandatory ]: Supports reverse tunneling. With the mandatory
keyword specified, it forces MNs to use reverse tunneling. When an interface supports
reverse tunneling, its agent advertisements have the T bit set to 1. By default, reverse
tunneling is not supported.
Description
Use the mobile-ip foreign-agent service command to enable FA service on an

interface.
16-22
Use the undo mobile-ip foreign-agent service command to disable FA service on an

interface or, with any parameters specified, restore the defaults of the parameters
without disabling FA service.
By default, FA service is not enabled.
Example
# Enable FA service on the interface, restricting the visitor number up to 100.

<H3C> system-view
[H3C]mobile-ip foreign-agent care-of ethernet 0/0/0
[H3C]interface Ethernet 0/0/0
[H3C-Ethernet0/0/0]ip address 11.1.1.1 24
[H3C-Ethernet0/0/0]mobile-ip foreign-agent service restrict 100
16.3.4 mobile-ip prefix-length
Syntax
mobile-ip prefix-length
undo mobile-ip prefix-length
View
Interface view
Parameter
None
Description
Use the mobile-ip prefix-length command to add the prefix-length extension part in
the agent advertisement.
Use the undo mobile-ip prefix-length command to remove the prefix-length
extension part added in the agent advertisement.
After an MN registers, it uses the following two alternative methods to determine
whether it has moved to another network:
z Use the lifetime of the agent advertisement
An MN can know the agent advertisement lifetime from the Lifetime field in the received
agent advertisement. The agent advertisement lifetime indicates how long the FA is
valid. If an MN does not receive any more agent advertisement from the FA in this
period, it assumes that the FA is not present any more and that it has moved away from
the network where the FA resides.
z Use the network prefix
16-23
This method is applicable to registered MNs. When an MN that has registered with an
FA receives the agent advertisement of another FA, it uses prefix-length extension to
determine whether the advertisement is from the same network. It checks whether the
network address in the Router Address field of the advertisement is the same as the
network address of the current care-of address. If they are not the same, the MN
assumes that it has moved to another network.
An MN moving to another network must register with the FA on the network.
By default, the prefix-length extension part is not added to the agent advertisement.
Example
# Specify to add the prefix-length extension part in the agent advertisement.

<H3C> system-view
[H3C-Ethernet0/0/0] mobile-ip prefix-length
16.3.5 mobile-ip registration-lifetime
Syntax
mobile-ip registration-lifetime seconds

undo mobile-ip registration-lifetime
View
Interface view
Parameter
seconds: Registration lifetime of the MN. This argument specifies how long an MN is
valid after registration. Once the lifetime of an MN expires, the FA deletes the
registration information of the MN. Typically, an MN resends a registration request
when the registration lifetime is going to expire. This argument ranges from 3 to 65,535
seconds.
Description
Use the mobile-ip registration-lifetime command to set the registration lifetime of the
MN.
Use the undo mobile-ip registration-lifetime command to restore the default
registration lifetime.
An FA can use the MN registration lifetime to control how long an MN can stay with it. If
a visiting MN requests a lifetime longer than this registration lifetime, the FA will reject
the request.
By default, the registration lifetime is 36,000 seconds.
16-24
Example
# Set the registration lifetime to 600 seconds on interface Ethernet0/0/0 and to 3,600
seconds on Ethernet0/0/1.
<H3C> system-view
[H3C]interface Ethernet 0/0/0
[H3C-Ethernet0/0/0] mobile-ip registration-lifetime 600
[H3C-Ethernet0/0/1] mobile-ip registration-lifetime 3600
16.3.6 reset mobile-ip visitor
Syntax
reset mobile-ip visitor [ pending ] [ ip-address | interface ethernet

interface-number ]
View
User view
Parameter
visitor : Deletes information in the visitor table and pending table.

visitor pending: Deletes information in the pending table.
ip-address: IP address of the visiting MN.
interface ethernet interface-number: FA interface name.
Description
Use the reset mobile-ip visitor command to delete information in the visitor table and
the pending table on the FA, or with the pending keyword specified to delete
information in the pending table only. You can also restrict deletion to one MN or MNs
registered on an interface by specifying arguments ip-address and interface ethernet
interface-number respectively.
Upon receipt of a MN registration request, the FA authenticates the request. If the
request is valid, the FA relays the request to the HA and adds an entry in its pending
table.
Upon receipt of the registration request, the HA authenticates the request. If the
request is valid, the HA sends a reply to the FA, informing the FA of the successful
registration.
When the FA receives the reply, it authenticates the reply. If the reply is valid, the FA
adds for the MN a visitor entry in its visitor table, deletes the corresponding entry in the
pending table, and relays the reply to the MN.
16-25
When visiting a foreign network, an MN can receive packets destined for it as long as it
has a visitor entry in the visitor table of the FA. Deleting a visitor entry will terminate an
ongoing session. Therefore, use this command with caution.
After you configure this command for an MN, the MN must register on the FA again for
roaming.
Example
# Disable MN 10.0.0.1 from roaming.

<H3C> reset mobile-ip visitor 10.0.0.1
16.4 MN Configuration Commands

16.4.1 display mobile-ip node
Syntax
display mobile-ip node [ ip-address | interface ethernet interface-number |

virtual-network address | brief ]
View
Any view
Parameter
ip-address: IP address of an MN. If not specified, information about all MNs is

displayed.
interface ethernet interface-number: Displays information about all MNs using the
address of this interface as the HA address.
virtual-network ip-address: Displays information about all MNs in this virtual network.
brief: Displays the total number of MNs.
Description
Use the display mobile-ip node command to display information about MNs. With no
parameters specified, information about all MNs is displayed.
Example
# Display information about all MNs.

[H3C]display mobile-ip node
11.1.1.2
Allowed lifetime 36000 seconds
Roaming status -Unregistered-, Home link on interface Ethernet0/0/0
Accepted 0, Last time -never-
Overall service time 0 seconds
16-26
Denied 0, Last time -never-

Last code 0
Total violations 0
Tunnel to MN - pkts 0, bytes 0
Reverse tunnel from MN - pkts 0, bytes 0
Table 16-6 Description on the fields of the display mobile-ip node command
Field Description
Granted lifetime of the MN. The default
value is the global lifetime set by using
Allowed lifetime 36000 seconds
the mobile-ip home-agent lifetime
command.
Whether the MN is registered. It can be
Roaming status -Unregistered-
Registered or Unregistered.
Interface or virtual network to which the
Home link on interface Ethernet0/0/0
MN belongs
Number of MN service requests
Accepted 0
accepted by the HA
Time when the last MN registration
Last time -never-
request is accepted by HA
Service time of HA since the latest
Overall service time 0 seconds
reboot
Number of service requests denied by
Denied 0
the HA
Time when the latest MN registration
Last time -never-
request is denied by the HA
Error code for the latest MN registration
Last code 0
request denial by the HA
Total violations 0 Number of MN security violations
Number of packets and bytes tunneled
Tunnel to MN - pkts 0, bytes 0
to the MN
Number of packets and bytes sent by
Reverse tunnel from MN - pkts 0, bytes 0
the MN through the reverse tunnel
16.4.2 mobile-node
Syntax
mobile-node low-address [ up-address ] { interface ethernet interface-number |

virtual-network network-address mask} [ lifetime lifetime ]
16-27
undo mobile-node low-address [ up-address ] { interface ethernet interface-number |

virtual-network network-address mask} [ lifetime ]
View
System view
Parameter
low-address [ up-address ]: Home addresses of MNs. It can be a single address or a

range of addresses.
interface ethernet interface-number: Interface to which the MN belongs.
virtual-network ip-address mask: If an MN belongs to a virtual network, you must
specify the IP address and mask of the virtual network. You can specify the mask length
or mask address.
lifetime lifetime: MN Registration lifetime, in the ranges of 1 to 65,535 seconds.
Description
Use the mobile-node command to set MN attributes, including the interface or virtual
network and the registration lifetime.
Use the undo mobile-node command to cancel the configuration.
You can set the MN registration lifetime in two ways: using the mobile-ip home-agent
lifetime number command to set the registration lifetime for all MNs, or using the
mobile-node low-addr [ up-addr ] { interface ethernet interface-number |
virtual-network network_address mask} [ lifetime lifetime ] command to set the
registration lifetime for a single MN.
Example
# Specify MN 10.1.1.1 to belong to interface Ethernet0/0/1.

<H3C> system-view
[H3C] mobile-node 10.1.1.1 interface Ethernet 0/0/1
16.4.3 reset mobile-ip node-statistics
Syntax
reset mobile-ip node-statistics [ ip-address ]
View
User view
Parameter
ip-address: MN IP address. If not specified, statistics about all MNs are cleared.
16-28
Description
Use the reset mobile-ip node-statistics command to clear MN statistics.
Example
# Clear statistics about MN 10.0.0.1.

<H3C> reset mobile-ip node-statistics 10.0.0.1
16.4.4 mobile-ip home-agent mobile-router
Syntax
mobile-ip home-agent mobile-router number

undo mobile-ip home-agent mobile-router number
View
System view
Parameter
number: Number for the MR, in the range of 1 to 1024.
Description
Use the mobile-ip home-agent mobile-router command to configure an MR on an

HA. This command will bring you to HA-MR view.
Use the undo mobile-ip home-agent mobile-router command to remove an MR from
the HA.
In HA-MR view, you can configure the IP address of the MR and the connected mobile
network.
Example
# Configure an MR with the number of 3 and enter HA-MR view.

<H3C> system-view
[H3C] mobile-ip home-agent mobile-router 3
[H3C-HA-MobileRouter-3]
16.4.5 ip address
Syntax
ip address ip-address
undo ip address
16-29
View
HA-MR view
Parameter
ip-address: Home address for the MR
Description
Use the ip address command to configure the home address of an MR.

Use the undo ip address command to remove the home address of an MR.
With the ip address command configured, when an MN having this address as its
home address registers with the HA, the HA treats it as an MR. In addition, an HA also
considers an MN whose registration request includes normal vendor/organization
specific extension (NVSE) an MR.
Example
# Configure an MR with the number of 3 and set its home address as 101.1.1.1.
<H3C> system-view
[H3C-HA-MobileRouter-3] ip address 101.1.1.1
16.4.6 mobile-network
Syntax
mobile-network ip-address { mask | mask_length }

undo mobile-network ip-address { mask |mask_length }
View
HA-MR view
Parameter
ip-address: IP address for the connected mobile network of the MR.

mask: Mask of the IP address for the connected mobile network of the MR.
mask_length: Mask length of the IP address for the connected mobile network of the
MR.
Description
Use the mobile-network command to configure a mobile network for an MR.

Use the undo mobile-network command to remove a connected mobile network of an
MR.
16-30
After an MR registers with the HA, the HA adds a route to the mobile network connected
by the MR. Thus, the HA can forward all packets destined for the mobile network over
the route to the MR, which will then forward the packets to the respective destinations.
You can configure multiple mobile networks for an MR.
After an MR registers with its HA and the HA adds the route to a mobile network of the
MR, executing the undo mobile-network command on the HA will delete the route.
Caution:
A mobile network cannot be the network where the roaming interface of the MR resides.
Example
# Configure an MR with the number of 3 and set the address of its connected mobile
network as 101.1.2.0.
<H3C> system-view
[H3C-HA-MobileRouter-3] mobile-network 101.1.2.0 255.255.255.0
16.5 MR Configuration Commands

16.5.1 debugging mobile-ip mobile-router
Syntax
debugging mobile-ip mobile-router { all | error | event | packet }

undo debugging mobile-ip mobile-router { all | error | event | packet }
View
User view
Parameter
all: Debugging of all items.

error: Error debugging, including information about failed registration request
transmission and failed space application.
event: Event debugging, including state change formation of the MR.
packet: Packet transmission debugging, including information about the sent and
received registration requests and agent advertisements.
16-31
Description
Use the debugging mobile-ip mobile-route command to enable debugging for an

MR.
Use the undo debugging mobile-ip mobile-router command to disable debugging
for an MR.
Example
# Enable debugging of all items for the MR.

<H3C> debugging mobile-ip mobile-router all
# Disable debugging of all items for the MR.

<H3C> undo debugging mobile-ip mobile-router all
16.5.2 display mobile-ip mobile-router
Syntax
display mobile-ip mobile-router [ agent | registration | statistics ]
View
Any view
Parameter
agent: Displays the mobility agent information discovered by the MR.

registration: Displays the MR registration information.
statistics: Displays the MR statistics.
Description
Use the display mobile-ip mobile-router command to display information about an

MR, including basic information, discovered mobility agent information, registration
information, and statistics.
Example
# Display the basic MR information.

<H3C> display mobile-ip mobile-router
Mobile Router:
Status: Registered
Home Address IP: 1.1.1.3 Mask: 255.0.0.0
Home Agent IP : 1.1.1.1 Priority: 1
Registration Lifetime: 36000
Registration Retransmit: Init 1, Max 128, Retry 5
Tunnel Mode: IPinIP
16-32
Reverse Tunnel: disable

Simultaneous Bindings: disable
Mobile Network:
IP: 11.0.0.0 Mask: 255.0.0.0
Interface Name: Ethernet0/0/1
Table 16-7 Description on the fields of the display mobile-ip mobile-router command
Field Description
State of the MR:
Home: On the home network
Registered: Registered on a foreign
Status: Registered network
Pending: Registering
Isolated: Unreachable
Unknown: In an unknown state
Home Address IP: 1.1.1.3 Mask:
Home address and mask of the MR
255.0.0.0
Configured registration lifetime of the
Registration Lifetime: 36000 MR in seconds. Defaults to 36,000
seconds.
Registration retransmission parameters
configured for the MR:
z Init: Initial registration retransmission
interval in seconds. Defaults to 1
Registration Retransmit: Init 1, Max 128, second.
Retry 5 z Max: Maximum registration
retransmission interval in seconds.
Defaults to 128 seconds.
z Retry: Maximum number of
registration retransmission attempts.
Defaults to 5.
Encapsulation mode configured for the
MR, which can be IP in IP or GRE
Tunnel Mode: IPinIP
encapsulation. The default is IP in IP
encapsulation.
Whether reverse tunneling is enabled on
Reverse Tunnel: disable the MR. By default, reverse tunneling is
not enabled.
Whether simultaneous binding is
Simultaneous Bindings: disable enabled on the MR. By default,
simultaneous binding is not enabled.
Mobile Network:
IP address, mask and interface of the
IP: 11.0.0.0 Mask: 255.0.0.0
MR mobile network
Interface Name: Ethernet0/0/1
16-33
# Display the mobility agent information discovered by the MR.

<H3C> display mobile-ip mobile-router agent
Mobile Router Agents: 1
Agent IP: 5.5.5.5
MAC: 00e0-fc06-aa5d
Care of Address: 1
IP 5.5.5.5
Router Address: 1
IP 5.5.5.5 Priority 0
Sequence 3990, Flags rbhFmG-t, Life time 36000,
IRDP lifetime 1800, Remaining time 1795,
Last received 08/15/2005 11:46:47
Table 16-8 Description on the fields of display mobile-ip mobile-router agent
Field Description
Number of mobility agents discovered
Mobile Router Agents: 1
by the MR
Agent IP: 5.5.5.5 IP address of the mobility agent
MAC: 00e0-fc06-aa5d MAC address of the mobility agent
Care of Address: 1 Number of care-of addresses provided

in agent advertisements and the care-of
IP 5.5.5.5 addresses
IP addresses of the interfaces sending
Router Address: 1 agent advertisements and the priorities
of the addresses ( the priority values are
IP 5.5.5.5 Priority 0 all 0 because the priority is not
configurable currently)
Sequence number of the agent
Sequence 3990
advertisement
Flag bits in the agent advertisement.
Flags rbhFmG-t Refer to Table 16-9 for description of the
flags.
Maximum MN registration lifetime (in
Life time 36000
seconds) allowed by the FA
Lifetime (in seconds) of the agent
IRDP lifetime 1800
advertisement
Remaining lifetime (in seconds) of the
Remaining time 1795
agent advertisement
Time when the latest agent
Last received 08/15/2005 11:46:47
advertisement was received
16-34
Table 16-9 Description on the flags of an agent advertisement
Flag bit Description

Registration required. The MN must use a foreign agent care-of
R (r) address to register with the HA, rather than use a co-located care-of
address to register with the HA directly.
FA busy. The FA does not accept any registration request from any
B (b)
other MN.
HA. The agent offers service as an HA on the home network on which
H (h)
the agent advertisement is sent.
FA. The agent offers service as an FA on the network on which the
F (f)
agent advertisement is sent.
Minimal encapsulation. The agent receives tunneled packets that use
M (m)
minimal encapsulation.
GRE encapsulation. The agent receives tunneled packets that use
G (g)
GRE encapsulation.
— Reserved
T (t) The FA supports reverse tunneling.

Note: A capital letter equals 1 and means yes; a lower-case letter equals 0 and
means no.
# Display the MR registration information.

<H3C> display mobile-ip mobile-router registration
Mobile Router Registration:
Registered:
Registration type: register with care-of address
Destination IP : 5.5.5.5
Source IP : 1.1.1.3
Destination MAC : 00e0-fc06-aa5d
Home-agent : 1.1.1.1
Care-of Address : 5.5.5.5 Flags sbdmg-t-
Orignal Lifetime : 36000 Remaining 35855
Last sent : 08/15/2005 11:46:47
Pending: 0
Table 16-10 Fields of display mobile-ip mobile-router registration
Field Description
Registered: Information about the registered MR
16-35
Field Description
MR registration type, which can be:
Registration type: register with care-of z register with care-of address

address z register with co-located care-of
address
z deregister
Destination IP address of the
Destination IP : 5.5.5.5
registration request
Source IP address of the registration
Source IP : 1.1.1.3
request
FA MAC address that the MR used to
Destination MAC : 00e0-fc06-aa5d register. Displayed only for “register with
care-of address”.
Home-agent : 1.1.1.1 HA address that the MR used to register
Care-of address that the MR used to
Care-of Address : 5.5.5.5
register
Flags in the registration request. A
Flags sbdmg-t- capital letter indicates 1 and a
lower-case letter indicates 0.
Allowed registration lifetime (if the MR is
registered) or registration lifetime in the
Original Lifetime : 36000
registration request (if the MR is
registering)
Remaining time of the registration
Remaining 35855 lifetime (if the MR is registered) or of the
pending interval (if the MR is registering)
Time when the last registration request
Last sent : 08/15/2005 11:46:47
was sent
Number of pending records. The default
pending lifetime is 7 seconds.
Pending: 0 If there are pending records, you will find
the same information described for
fields in the “Registered:” part.
# Display the MR statistics.

<H3C> display mobile-ip mobile-router statistics
Mobile Router Statistic:
Sent Agent Solicitation : 30
Received Agent Advertisement : 30
Sent Registration Request : 1
Sent Deregistration Request : 0
Received Registration Reply : 1
Received Deregistration Reply : 0
16-36
Accepted : 1
Denied : 0
Denied by foreign agent : 0
Denied by foreign agent due to authentication extension : 0
Denied by foreign agent due to reverse tunnel : 0
Denied by home agent : 0
Denied by home agent due to authentication extension : 0
Denied by home agent due to reverse tunnel : 0
Denied by home agent due to encapsulation : 0
Denied by home agent due to time stamps : 0
Table 16-11 Description on the fields of display mobile-ip mobile-router statistics
Field Description
Total number of agent solicitations sent
Sent Agent Solicitation : 30
by the MR
Received Agent Advertisement : 30
received by the MR
Sent Registration Request : 1 sent by the MR, using a foreign agent or
co-located care-of address
Sent Deregistration Request : 0 Total number of deregistration requests
Accepted: Total number of replies for
Accepted : 1 accepted registration requests
Denied : 0 Denied: Total number of replies for
denied registration requests
Total number of replies for registration
Denied by foreign agent : 0
requests denied by FA
Denied by foreign agent due to Total number of replies for registration
authentication extension : 0 requests denied by the FA due to failed
MN-FA SA authentication
Denied by foreign agent due to reverse
requests denied by the FA due to
tunnel
reverse tunneling
Denied by home agent
requests denied by the HA
Denied by home agent due to
requests denied by the HA due to failed
authentication extension
MN-HA SA authentication
Denied by home agent due to reverse
requests denied by the HA due to
tunnel
reverse tunneling
Denied by home agent due to
encapsulation : 0
encapsulation
16-37
Field Description
Denied by home agent due to time
stamps : 0
incorrect time stamps
16.5.3 encapsulation
Syntax
encapsulation gre
undo encapsulation
View
MR view
Parameter
None
Description
Use the encapsulation gre command to set the MR encapsulation mode to GRE.
Use the undo encapsulation command to restore the default encapsulation mode IP
in IP.
Example
# Configure the MR encapsulation mode as GRE.

<H3C> system-view
[H3C] mobile-ip mobile-router
[H3C-MobileRouter] encapsulation gre
16.5.4 home-agent ip-address
Syntax
home-agent ip-address ip-address

undo home-agent ip-address
View
MR view
Parameter
ip-address: HA address for the MR.
16-38
Description
Use the home-agent ip-address command to configure the HA address of the MR.
Use the undo home-agent ip-address command to remove the configuration.
You cannot configure the undo home-agent ip-address command on a registered or
registering MR.
By default, an MR has no HA configured.
Example
# Configure an HA for an MR.

<H3C> system-view
[H3C-MobileRouter] home-agent ip-address 1.1.1.1
16.5.5 ip address
Syntax
ip address ip-address { mask | mask-length }

undo ip address
View
MR view
Parameter
ip-address: Home address of the MR.

mask: Mask of the MR home address.
Mask-length: Length of the MR home address mask. It cannot be 32.
Description
Use the ip address command to configure the home address of an MR.

Use the undo ip address command to remove the configuration.
The home address of an MR is a special address. It must be on the same segment as
that of the HA and must be configured on the loopback interface with a mask of
255.255.255.255. Otherwise, the sending of the registration request will fail.
After an MR starts up, you must configure this command for it; otherwise, it cannot use
its home address to communicate with others.
By default, an MR has no home address configured.
Example
# Configure MR home address on the MR.
16-39
<H3C> system-view
[H3C-MobileRouter] ip address 1.1.1.3 255.0.0.0
# Configure the MR home address on interface loopback1.

[H3C-MobileRouter] quit
[H3C-MR-LoopBack1] ip address 1.1.1.3 255.255.255.255
16.5.6 mobile-ip mobile-router
Syntax
mobile-ip mobile-router
undo mobile-ip mobile-router
View
System view
Parameter
None
Description
Use the mobile-ip mobile-router command to enable the MR function and enter MR
view.
Use the undo mobile-ip mobile-router command to disable the MR function.
By default, the MR function is disabled.
The MR function can be enabled only when the MIP function is enabled and the HA
function is disabled.
Example
# Enable the MR function.

<H3C> system-view
16.5.7 mobile-ip mobile-router ccoa
Syntax
mobile-ip mobile-router ccoa only

mobile-ip mobile-router ccoa gateway ip-address
undo mobile-ip mobile-router ccoa { only | gateway }
16-40
View
Interface view
Parameter
ip-address: IP address of the default gateway.

only: Specifies that the interface can only use a co-located care-of address to register.
Description
Use the mobile-ip mobile-router ccoa only command to specify that the interface can
only use a co-located care-of address to register.
Use the undo mobile-ip mobile-router ccoa only command to remove the
configuration.
Use the mobile-ip mobile-router ccoa only gateway command to configure the
default gateway for the interface using a co-located care-of address to register.
Use the undo mobile-ip mobile-router ccoa gateway command to remove the
configured default gateway address.
When an MR uses a co-located care-of address to register, it employs the default
gateway specified by the ip-address argument (if specified). If the co-located care-of
address is manually configured or is configured to be obtained through DHCP but no
DHCP gateway is available, you must configure the IP address of the default gateway.
By default, an interface is neither specified to use only a co-located care-of address to
register, nor configured with a default gateway address.
Example
# Specify an MR interface to use only a co-located care-of address to register.

<H3C> system-view
[H3C-Ethernet1/0/0] mobile-ip mobile-router ccoa only
16.5.8 mobile-ip mobile-router roam
Syntax
mobile-ip mobile-router roam [ priority value ]

undo mobile-ip mobile-router roam
View
Interface view
16-41
Parameter
value: Priority of the interface. It ranges from 1 to 255 and defaults to 100. A greater
value indicates a higher priority.
Description
Use the mobile-ip mobile-router roam command to enable the roaming function on
the interface, that is, to allow the interface to function as the roaming interface of the
MR.
Use the undo mobile-ip mobile-router roam command to remove the roaming
function of the interface.
When registering, an MR uses the roaming interface with the highest priority among
available ones. After registration, if a newly available roaming interface with a higher
priority than the previous one receives a new agent advertisement, the MR will use the
new roaming interface to re-register.
By default, the roaming function is not enabled on an interface.
Example
# Enable the roaming function on interface Ethernet1/0/0 of the MR.

<H3C> system-view
[H3C-Ethernet1/0/0] mobile-ip mobile-router roam priority 10
16.5.9 mobile-ip mobile-router solicit
Syntax
mobile-ip mobile-router solicit { interval value | retransmit { initial value |

maximum value | retry value } }
undo mobile-ip mobile-router solicit { interval | retransmit { initial | maximum |
retry } }
View
Interface view
Parameter
interval-time: Agent solicitation transmission interval for the interface. It ranges from 1
to 65,535 seconds and defaults to 600 seconds.
initial-time: Initial agent solicitation retransmission interval for the interface. It ranges
from 10 to 20,000 ms and defaults to 1,000 ms.
max-time: Maximum agent solicitation retransmission interval for the interface. It
ranges from 10 to 20,000 ms and defaults to 4,000 ms.
16-42
number: Maximum number of agent solicitation retransmission attempts for the

interface. It ranges from 0 to 10 and defaults to 5.
Description
Use the mobile-ip mobile-router solicit command to configure agent solicitation

retransmission parameters.
Use the undo mobile-ip mobile-router solicit command to restore the defaults.
An MR retransmits agent solicitations using a binary exponential backoff mechanism,
doubling the interval between consecutive solicitations. If no any reply, it will not stop
the retransmission until the maximum interval or the permitted maximum number of
agent solicitations is reached.
Example
# Configure the initial agent solicitation retransmission interval to 2,000 ms.

<H3C> system-view
[H3C-Ethernet1/0/0] mobile-ip mobile-router solicit retransmit initial 2000
16.5.10 mobile-network
Syntax
mobile-network { interface-type interface-number | ip-address { mask | mask-length } }

undo mobile-network { interface-type interface-number | ip-address { mask |
mask-length } }
View
MR view
Parameter
interface-type: Type of the interface for the mobile network.

interface-number: Number of the interface for the mobile network.
ip-address: IP address of the mobile network.
mask: Mask of the mobile network.
mask-length: Length of the mask of the mobile network.
Description
Use the mobile-network command to configure a mobile network for the MR.
Use the undo mobile-network command to remove a mobile network of the MR.
16-43
An MR adds NVSE in its registration requests. The NVSE includes information about
the mobile network. If the HA supports NVSE, it adds a route to the mobile network in its
routing table, enabling the mobile network of the MR to communicate.
After you remove a mobile network of an MR, the HA deletes the route to the mobile
network only after the MR re-registers with it.
By default, an MR has no mobile network configured.
Example
# Configure a mobile network for the MR.

<H3C> system-view
[H3C-MobileRouter] mobile-network Ethernet1/0/0
16.5.11 register lifetime
Syntax
register lifetime value

undo register lifetime
View
MR view
Parameter
value: Registration lifetime for the MR in seconds, in the range of 1 to 65,535.
Description
Use the register lifetime command to configure the registration lifetime of an MR.
Use the undo register lifetime command to restore the default.
By default, the registration lifetime of an MR is 36,000 seconds.
Example
# Set the registration lifetime of the MR to 18,000 seconds.

<H3C> system-view
[H3C-MobileRouter] register lifetime 18000
16.5.12 register retransmit
Syntax
register retransmit { initial initial-time | maximum max-time | retry number }
16-44
undo register retransmit [ initial | maximum | retry ]
View
MR view
Parameter
initial-time: Initial registration retransmission interval for the MR. It ranges from 1 to 16
seconds and defaults to 1 second.
max-time: Maximum registration retransmission interval for the MR. It ranges from 1 to
1,800 seconds and defaults to 128 seconds.
number: Maximum number of registration retransmission attempts for the MR. It ranges
from 1 to 64 and defaults to 5.
Description
Use the register retransmit command to configure the registration retransmission

parameters of an MR, including the initial registration retransmission interval, the
maximum registration retransmission interval, and the maximum number of registration
retransmission attempts.
Use the undo register retransmit command to restore the defaults.
By default, the initial registration retransmission interval is one second, the maximum
registration retransmission interval is 128 seconds, and the maximum number of
registration retransmission attempts is 5.
An MR sends registration requests using a binary exponential backoff mechanism,
doubling the interval between consecutive requests. If no any reply, it will not stop the
retransmission until the maximum interval or the maximum number of registration
requests is reached.
Example
# Configure the MR registration retransmission parameters, setting the initial interval to

2 seconds, the maximum interval to 100 seconds, and the maximum number of
registration retransmission attempts to 3.
<H3C> system-view
[H3C-MobileRouter] register retransmit initial 2
[H3C-MobileRouter] register retransmit maximum 100
[H3C-MobileRouter] register retransmit retry 3
16-45
16.5.13 reset mobile-ip mobile-router
Syntax
reset mobile-ip mobile-router { agent [ agent-address ] | registration [ reg-address ]

| statistics }
View
User view
Parameter
agent-address: Address of the mobility agent.

reg-address: FA or HA to register with.
statistics: Statistics of the MR.
Description
Use the reset mobile-ip mobile-router agent command to clear agent information
discovered by the MR, MR registration information, and MR statistics.
reg-address refers to the destination address of the registration requests. You can view
the corresponding information by using the display mobile-ip mobile-router
command.
Once information about an agent in use or registration successful is cleared, the MR
moves to the state of Isolated and resends registration requests.
Example
# Clear information about MR discovered mobility agent 5.5.5.5.

<H3C> reset mobile-ip mobile-router agent 5.5.5.5
# Clear all MR registration information.

<H3C> reset mobile-ip mobile-router registration
# Clear MR statistics.
<H3C> reset mobile-ip mobile-router statistics
16.5.14 reverse-tunnel
Syntax
reverse-tunnel enable
undo reverse-tunnel enable
View
MR view
16-46
Parameter
None
Description
Use the reverse-tunnel command to enable the reverse tunneling function for an MR.
Use the undo reverse-tunnel command to disable the reverse tunneling function of an
MR.
An MR supports registration using reverse tunneling only when the following conditions
are satisfied:
z The MR uses an FA to register.
z The FA supports reverse tunneling.
z Reverse tunneling is enabled on the MR.
By default, reverse tunneling is not enabled.
Example
# Enable the reverse tunneling function on the MR.

<H3C> system-view
[H3C-MobileRouter] reverse-tunnel enable
16.5.15 simultaneous-bindings
Syntax
simultaneous-bindings enable
undo simultaneous-bindings enable
View
MR view
Parameter
None
Description
Use the simultaneous-bindings command to enable simultaneous binding.

Use the undo simultaneous-bindings command to disable simultaneous binding.
If both an MR and its HA support simultaneous binding, the HA retains the MR’s prior
mobility binding information, including multiple care-of addresses of the MR. Otherwise,
the HA replaces the prior mobility binding information with the new binding information
specified in the registration request.
16-47
Multiple simultaneous mobility bindings are likely to be useful when an MN using at

least one wireless network interface moves within a wireless transmission range with
more than one foreign agent. When the HA allows simultaneous bindings, it tunnels a
separate copy of each packet to each care-of address of the MR, and the MR will
receive multiple copies of each packet destined for it.
By default, simultaneous binding is not enabled.
Example
# Enable simultaneous binding on the MR.

<H3C> system-view
[H3C-MobileRouter] simultaneous-bindings enable
16.6 MIP Security Policy Configuration Commands

16.6.1 display mobile-ip secure
Syntax
display mobile-ip secure home-agent { host [ip-address ] | foreign-agent

[ip-address ] }
display mobile-ip secure foreign-agent { home-agent [ ip-address ] | visitor
[ip-address ] }
display mobile-ip secure mobile-router { home-agent [ip-address ] | foreign-agent
[ip-address ] }
View
Any view
Parameter
home-agent host: HA-MN mobility security association attributes.

home-agent foreign-agent: HA-FA mobility security association attributes.
foreign-agent home-agent: FA-HA mobility security association attributes.
foreign-agent visitor: FA-MN mobility security association attributes.
mobile-router home-agent: MR-HA mobility security association attributes.
mobile-router foreign-agent: MR-FA mobility security association attributes.
ip-address: IP address of the MN or mobility agent.
16-48
Description
Use the display mobile-ip secure command to display mobility security association
attributes. If not specify argument ip-address, information about all mobility security
association attributes of the specified mobility security associations is displayed.
Example
# Display information about HA-MN security associations.

[H3C]display mobile-ip secure home-agent host
Security Associations (algorithm,mode,replay protection,key):
IP address 11.1.1.2
SPI(HEX): 100, MD5, Prefix-suffix, Timestamp +/- 30
key: 'hello'
Table 16-12 Description on the fields of the display mobile-ip secure command
Field Description
IP address 11.1.1.2 IP address of the node or agent
Security parameter index for security
SPI(HEX): 100
authentication
MD5 MD5 encryption algorithm
Prefix-suffix Authentication mode
Timestamp +/- 30 Replay protection mode

Security association shared key in
key: 'hello'
hexadecimal
16.6.2 display mobile-ip violation
Syntax
display mobile-ip violation [ ip-address ]
View
Any view
Parameter
ip-address: Displays the security exception information of an IP address. When not

specified, all security exception information is displayed.
16-49
Description
Use the display mobile-ip violation command to display MN security exception

information logged by a mobility agent. With the ip-address argument not specified, all
security exception information is displayed; up to 100 latest entries of information can
be displayed.
Example
# Display MN security exception information.

[H3C] display mobile-ip violation
Security Violation:
Mobile Hosts: 20.0.0.1
Violations: 1, Last time: 10/18/2004 19:16:47
SPI: 300, Identification: B751B581.77FD0E40
Error Code: MN failed authentication (131), Reason: Bad authenticator (2)
Table 16-13 Description on the fields of the display mobile-ip violation command
Field Description
IP address of the MN with security
Mobile Hosts: 20.0.0.1
exceptions
Violations: 1 Security exception times of the MN
Latest time when the MN violated
Last time: 10/18/2004 19:16:47
security regulations
SPI of the latest violated security
context.
z If the violation is due to identification
mismatch, the SPI has a value from
the MN-HA authentication extension
domain.
SPI: 300 z If the violation is due to invalid
authenticator, the SPI has a value
from the authentication extension
domain of the invalid authentication
packet.
z In other cases, the SPI has a value
of 0.
requests with registration replies to
Identification: B751B581.77FD0E40
avoid replay attacks by registration
messages
16-50
Field Description
Error code in the request or reply,
indicating the reason for the latest
security exception. Possible reasons
are:
z No mobility security association
Error Code: MN failed authentication available
(131), Reason: Bad authenticator (2)
z Bad authenticator
z Bad flags
z Wrong SPI
z No security extension
z Others
16.6.3 mobile-ip secure
Syntax
mobile-ip secure home-agent { host | foreign-agent } low-addr [ up-addr ] spi spi

key string
mobile-ip secure foreign-agent { home-agent | visitor } low-addr [ up-addr ] spi spi
key string
mobile-ip secure mobile-router { home-agent | foreign-agent } low-addr [ up-addr ]
spi spi key string
undo mobile-ip secure home-agent { host | foreign-agent } low-addr [ up-addr ]
undo mobile-ip secure foreign-agent { home-agent | visitor } low-addr [ up-addr ]
undo mobile-ip secure mobile-router { home-agent | foreign-agent } low-addr
[ up-addr ]
View
System view
Parameter
home-agent host: HA-MN mobility security association attributes. low-addr [ up-addr]

refers to the range of MN addresses. This configuration is required on an HA for
improving HA-MN registration security.
home-agent foreign-agent: HA-FA mobility security association attributes. low-addr
[ up-addr] refers to the range of FA addresses. This configuration is required on an HA
for improving HA-FA registration security.
foreign-agent home-agent: FA-HA mobility security association attributes. low-addr
[ up-addr] refers to the range of HA addresses. This configuration is required on an FA
for improving FA-HA registration security.
16-51
foreign-agent visitor: FA-MN mobility security association attributes. low-addr

[ up-addr] refers to the range of MN addresses. This configuration is required on an FA
for improving FA-HA registration security.
mobile-router home-agent: MR-HA mobility security association attributes. low-addr
[ up-addr] refers to the range of HA addresses. This configuration is required on an MR
for improving MR-HA registration security.
mobile-router foreign-agent: MR-FA mobility security association attributes. low-addr
[ up-addr] refers to the range of FA addresses. This configuration is required on an MR
for improving MR-FA registration security.
spi spi: Security parameter index in the range of 0x100 to 0xFFFFFFFF.
key string: Shared key string of ASCII codes, ranging from 1 to 16 characters.
Description
Use the mobile-ip secure command to configure mobility security associations on HAs,
FAs, and MRs.
Use the undo mobile-ip secure command to remove the configuration.
A security association indicates the address of the mobility agent or MN, SPI, and the
key.
By default, no security association is configured.
Example
# Configure an HA-MN security association, the IP address of the MN is 20.0.0.1.

<H3C> system-view
[H3C] mobile-ip secure home-agent host 20.0.0.1 spi 100 key 1234567812345678
16.7 IRDP Configuration Commands

16.7.1 display mobile-ip irdp
Syntax
display mobile-ip irdp
View
Any view
Parameter
None
16-52
Description
Use the display mobile-ip irdp command to display ICMP router discovery protocol
(IRDP) configuration information, including the agent advertisement lifetime, the
maximum and minimum agent advertisement interval, and the agent advertisement
transmission mode (broadcast or multicast).
Example
# Display IRDP configuration.

<H3C> display mobile-ip irdp
Ethernet0/0/0 has router discovery enabled!
Advertisements min-interval : 450 seconds, max-interval : 600 seconds
Advertisements lifetime : 1800 seconds
Advertisements are sent with broadcasts
Ethernet0/0/1 has router discovery disabled!
Table 16-14 Description on the fields of the display mobile-ip irdp command
Field Description
Ethernet0/0/0 has router discovery IRDP is enabled on interface Ethernet
enabled 0/0/0.
Minimum and maximum agent
Advertisements min-interval : 450
advertisement intervals are 450 seconds
seconds, max-interval : 600 seconds
and 600 seconds respectively.
The lifetime of agent advertisements is
Advertisements lifetime : 1800 seconds
1,800 seconds.
Advertisements are sent with
Agent advertisements are broadcasted.
broadcasts
Ethernet0/0/1 has router discovery IRDP is not enabled on interface
disabled! Ethernet 0/0/1.
16.7.2 mobile-ip irdp
Syntax
mobile-ip irdp [ lifetime seconds ] [ max-interval seconds ] [ min-interval seconds ]

[ multicast ]
undo mobile-ip irdp [ lifetime seconds ] [ max-interval seconds ] [ min-interval
seconds ] [ multicast ]
View
Interface view
16-53
Parameter
lifetime seconds: Agent advertisement lifetime. It ranges from 5 to 9,000 seconds and
defaults to 1,800 seconds. It must be greater than the maximum agent advertisement
interval.
max-interval seconds: Maximum agent advertisement interval. It ranges from 4 to
1,800 seconds and defaults to 600 seconds. It must be greater than the minimum agent
advertisement interval. A value of 0 specifies that the interface sends agent
advertisements only upon receiving agent solicitations.
min-Interval seconds: Minimum agent advertisement interval. It ranges from 3 to 1,800
seconds and defaults to 450 seconds. It must be less than the maximum agent
advertisement interval.
multicast: Changes the default broadcast address for agent advertisement to multicast
address 224.0.0.1.
Description
Use the mobile-ip irdp command to enable IRDP and configure the relevant attributes
on an interface.
Use the undo mobile-ip irdp command to disable IRDP or restore the default IRDP
attributes on an interface.
Without mobile-ip irdp configured, an FA or HA sends agent advertisements only upon
receiving agent solicitations from MNs. After it configured, however, an FA or HA
periodically sends agent advertisements on the attached network through IRDP to
advertise its presence.
By default, IRDP is not enabled.
Example
# Enable IRDP on interface Ethernet 1/0/0.

<H3C> system-view
[H3C-Ethernet1/0/0] mobile-ip irdp
16-54
Routing Protocol
Command Manual – Routing Protocol
Table of Contents
Chapter 1 Static Route Configuration Commands .................................................................... 1-1

1.1 Routing Table Displaying Commands ............................................................................... 1-1
1.1.1 display ip routing-table ............................................................................................ 1-1
1.1.2 display ip routing-table acl....................................................................................... 1-2
1.1.3 display ip routing-table ip_address.......................................................................... 1-3
1.1.4 display ip routing-table ip_address1 ip_address2................................................... 1-6
1.1.5 display ip routing-table ip-prefix .............................................................................. 1-6
1.1.6 display ip routing-table protocol .............................................................................. 1-8
1.1.7 display ip routing-table radix ................................................................................... 1-9
1.1.8 display ip routing-table statistics ........................................................................... 1-10
1.1.9 display ip routing-table verbose ............................................................................ 1-11
1.1.10 display ip routing-table vpn-instance................................................................... 1-12
1.1.11 reset ip routing-table ........................................................................................... 1-14
1.2 Static Route Configuration Commands ........................................................................... 1-15
1.2.1 delete static-routes all ........................................................................................... 1-15
1.2.2 ip route-static......................................................................................................... 1-15
1.3 Bandwidth-Based Unbalanced Load Sharing Commands .............................................. 1-18
1.3.1 band-based-sharing .............................................................................................. 1-18
1.3.2 display loadsharing ip address.............................................................................. 1-18
1.3.3 loadbandwidth ....................................................................................................... 1-19
1.3.4 reset loadsharing................................................................................................... 1-20
Chapter 2 RIP Configuration Commands.................................................................................... 2-1

2.1 RIP Configuration Commands ........................................................................................... 2-1
2.1.1 checkzero ................................................................................................................ 2-1
2.1.2 debugging rip........................................................................................................... 2-2
2.1.3 default cost .............................................................................................................. 2-2
2.1.4 display rip ................................................................................................................ 2-3
2.1.5 display rip interface ................................................................................................. 2-4
2.1.6 display rip routing .................................................................................................... 2-5
2.1.7 display rip vpn-instance........................................................................................... 2-6
2.1.8 filter-policy export .................................................................................................... 2-7
2.1.9 filter-policy import .................................................................................................... 2-7
2.1.10 host-route .............................................................................................................. 2-9
2.1.11 import-route ........................................................................................................... 2-9
2.1.12 ipv4-family vpn-instance...................................................................................... 2-10
2.1.13 network................................................................................................................ 2-11
2.1.14 peer ..................................................................................................................... 2-12
i
2.1.15 preference ........................................................................................................... 2-13

2.1.16 reset .................................................................................................................... 2-13
2.1.17 rip ........................................................................................................................ 2-14
2.1.18 rip authentication-mode....................................................................................... 2-15
2.1.19 rip input................................................................................................................ 2-16
2.1.20 rip metricin........................................................................................................... 2-16
2.1.21 rip metricout......................................................................................................... 2-17
2.1.22 rip output ............................................................................................................. 2-18
2.1.23 rip split-horizon .................................................................................................... 2-19
2.1.24 rip triggered ......................................................................................................... 2-20
2.1.25 rip version............................................................................................................ 2-20
2.1.26 rip work................................................................................................................ 2-21
2.1.27 summary.............................................................................................................. 2-22
2.1.28 timers................................................................................................................... 2-23
2.1.29 traffic-share-across-interface .............................................................................. 2-24
2.1.30 validate-source-address...................................................................................... 2-24
Chapter 3 OSPF Configuration Commands................................................................................ 3-1

3.1 OSPF Configuration Commands ....................................................................................... 3-1
3.1.1 abr-summary ........................................................................................................... 3-1
3.1.2 area ......................................................................................................................... 3-2
3.1.3 asbr-summary ......................................................................................................... 3-2
3.1.4 authentication-mode................................................................................................ 3-3
3.1.5 debugging ospf........................................................................................................ 3-4
3.1.6 default cost .............................................................................................................. 3-5
3.1.7 default interval ......................................................................................................... 3-6
3.1.8 default limit .............................................................................................................. 3-7
3.1.9 default tag................................................................................................................ 3-7
3.1.10 default type............................................................................................................ 3-8
3.1.11 default-cost............................................................................................................ 3-9
3.1.12 default-route-advertise ........................................................................................ 3-10
3.1.13 display debugging ospf ....................................................................................... 3-11
3.1.14 display ospf abr-asbr........................................................................................... 3-12
3.1.15 display ospf asbr-summary ................................................................................. 3-12
3.1.16 display ospf brief ................................................................................................. 3-14
3.1.17 display ospf cumulative ....................................................................................... 3-16
3.1.18 display ospf error................................................................................................. 3-17
3.1.19 display ospf interface .......................................................................................... 3-20
3.1.20 display ospf lsdb.................................................................................................. 3-21
3.1.21 display ospf memory ........................................................................................... 3-24
3.1.22 display ospf nexthop ........................................................................................... 3-25
3.1.23 display ospf peer ................................................................................................. 3-26
3.1.24 display ospf request-queue ................................................................................. 3-28
ii
3.1.25 display ospf retrans-queue.................................................................................. 3-29

3.1.26 display ospf routing ............................................................................................. 3-30
3.1.27 display ospf vlink ................................................................................................. 3-31
3.1.28 filter-policy export ................................................................................................ 3-33
3.1.29 filter-policy import ................................................................................................ 3-33
3.1.30 import-route ......................................................................................................... 3-35
3.1.31 log-peer-change .................................................................................................. 3-36
3.1.32 multi-path-number ............................................................................................... 3-37
3.1.33 network................................................................................................................ 3-37
3.1.34 nssa..................................................................................................................... 3-39
3.1.35 opaque-capability ................................................................................................ 3-40
3.1.36 ospf...................................................................................................................... 3-40
3.1.37 ospf authentication-mode.................................................................................... 3-41
3.1.38 ospf cost .............................................................................................................. 3-42
3.1.39 ospf dr-priority ..................................................................................................... 3-43
3.1.40 ospf mib-binding .................................................................................................. 3-44
3.1.41 ospf mtu-enable .................................................................................................. 3-44
3.1.42 ospf network-type................................................................................................ 3-45
3.1.43 ospf timer dead.................................................................................................... 3-46
3.1.44 ospf timer hello .................................................................................................... 3-47
3.1.45 ospf timer poll ...................................................................................................... 3-48
3.1.46 ospf timer retransmit ........................................................................................... 3-49
3.1.47 ospf trans-delay................................................................................................... 3-49
3.1.48 peer ..................................................................................................................... 3-50
3.1.49 preference ........................................................................................................... 3-51
3.1.50 reset ospf............................................................................................................. 3-52
3.1.51 router id ............................................................................................................... 3-53
3.1.52 silent-interface ..................................................................................................... 3-54
3.1.53 snmp-agent trap enable ospf .............................................................................. 3-55
3.1.54 spf-schedule-interval ........................................................................................... 3-56
3.1.55 stub...................................................................................................................... 3-57
3.1.56 vlink-peer............................................................................................................. 3-57
Chapter 4 Integrated IS-IS Configuration Commands ............................................................... 4-1

4.1 Integrated IS-IS Configuration Commands........................................................................ 4-1
4.1.1 area-authentication-mode ....................................................................................... 4-1
4.1.2 cost-style ................................................................................................................. 4-2
4.1.3 debugging isis ......................................................................................................... 4-3
4.1.4 default-route-advertise ............................................................................................ 4-4
4.1.5 display isis brief ....................................................................................................... 4-5
4.1.6 display isis interface ................................................................................................ 4-6
4.1.7 display isis lsdb ....................................................................................................... 4-7
4.1.8 display isis mesh-group........................................................................................... 4-7
iii
4.1.9 display isis peer....................................................................................................... 4-8

4.1.10 display isis routing................................................................................................. 4-8
4.1.11 display isis spf-log ............................................................................................... 4-10
4.1.12 domain-authentication-mode............................................................................... 4-11
4.1.15 ignore-lsp-checksum-error .................................................................................. 4-13
4.1.16 import-route ......................................................................................................... 4-14
4.1.17 import-route isis................................................................................................... 4-15
4.1.18 isis ....................................................................................................................... 4-16
4.1.19 isis authentication-mode ..................................................................................... 4-17
4.1.20 isis circuit-level .................................................................................................... 4-18
4.1.21 isis cost................................................................................................................ 4-18
4.1.22 isis dis-priority...................................................................................................... 4-19
4.1.23 isis enable ........................................................................................................... 4-20
4.1.24 isis mesh-group ................................................................................................... 4-21
4.1.25 isis small-hello ..................................................................................................... 4-22
4.1.26 isis timer csnp...................................................................................................... 4-22
4.1.27 isis timer hello...................................................................................................... 4-23
4.1.28 isis timer holding-multiplier.................................................................................. 4-24
4.1.29 isis timer lsp......................................................................................................... 4-25
4.1.30 isis timer retransmit ............................................................................................. 4-26
4.1.31 is-level ................................................................................................................. 4-26
4.1.32 log-peer-change .................................................................................................. 4-28
4.1.33 md5-compatible................................................................................................... 4-28
4.1.34 network-entity ...................................................................................................... 4-29
4.1.35 preference ........................................................................................................... 4-30
4.1.36 reset isis all.......................................................................................................... 4-30
4.1.37 reset isis peer ...................................................................................................... 4-31
4.1.38 set-overload......................................................................................................... 4-31
4.1.39 silent-interface ..................................................................................................... 4-32
4.1.40 spf-delay-interval................................................................................................. 4-33
4.1.41 spf-slice-size........................................................................................................ 4-34
4.1.42 summary.............................................................................................................. 4-34
4.1.43 timer lsp-max-age ............................................................................................... 4-35
4.1.44 timer lsp-refresh .................................................................................................. 4-36
4.1.45 timer spf............................................................................................................... 4-37
Chapter 5 BGP Configuration Commands.................................................................................. 5-1

5.1 BGP Configuration Commands ......................................................................................... 5-1
5.1.1 aggregate ................................................................................................................ 5-1
5.1.2 balance.................................................................................................................... 5-2
5.1.3 bgp .......................................................................................................................... 5-3
iv
5.1.4 compare-different-as-med....................................................................................... 5-4

5.1.5 confederation id....................................................................................................... 5-4
5.1.6 confederation nonstandard ..................................................................................... 5-5
5.1.7 confederation peer-as ............................................................................................. 5-6
5.1.8 dampening............................................................................................................... 5-7
5.1.9 debugging bgp......................................................................................................... 5-8
5.1.10 default-route imported ........................................................................................... 5-9
5.1.11 default local-preference......................................................................................... 5-9
5.1.12 default med.......................................................................................................... 5-10
5.1.13 display bgp group................................................................................................ 5-11
5.1.14 display bgp network ............................................................................................ 5-12
5.1.15 display bgp paths ................................................................................................ 5-13
5.1.16 display bgp peer .................................................................................................. 5-14
5.1.17 display bgp routing .............................................................................................. 5-16
5.1.18 display bgp routing as-path-acl ........................................................................... 5-18
5.1.19 display bgp routing cidr ....................................................................................... 5-20
5.1.20 display bgp routing community............................................................................ 5-21
5.1.21 display bgp routing community-list ...................................................................... 5-21
5.1.22 display bgp routing dampened ............................................................................ 5-22
5.1.23 display bgp routing different-origin-as................................................................. 5-24
5.1.24 display bgp routing flap-info ................................................................................ 5-24
5.1.25 display bgp routing peer { advertised | received } ............................................... 5-26
5.1.26 display bgp routing peer dampened.................................................................... 5-27
5.1.27 display bgp routing peer regular-expression....................................................... 5-28
5.1.28 display bgp routing regular-expression ............................................................... 5-29
5.1.29 display bgp routing statistic ................................................................................. 5-30
5.1.32 group ................................................................................................................... 5-32
5.1.33 import-route ......................................................................................................... 5-33
5.1.34 ip as-path-acl....................................................................................................... 5-34
5.1.35 ip community-list.................................................................................................. 5-35
5.1.36 log-peer-change .................................................................................................. 5-36
5.1.37 network................................................................................................................ 5-37
5.1.38 peer advertise-community................................................................................... 5-37
5.1.39 peer allow-as-loop............................................................................................... 5-38
5.1.40 peer as-number ................................................................................................... 5-39
5.1.41 peer as-path-acl .................................................................................................. 5-39
5.1.42 peer connect-interface ........................................................................................ 5-40
5.1.43 peer default-route-advertise ................................................................................ 5-41
5.1.44 peer description................................................................................................... 5-41
5.1.45 peer ebgp-max-hop............................................................................................. 5-42
v
5.1.46 peer enable ......................................................................................................... 5-43

5.1.47 peer filter-policy................................................................................................... 5-44
5.1.48 peer group ........................................................................................................... 5-45
5.1.49 peer ip-prefix ....................................................................................................... 5-46
5.1.50 peer next-hop-local ............................................................................................. 5-47
5.1.51 peer password..................................................................................................... 5-47
5.1.52 peer public-as-only.............................................................................................. 5-48
5.1.53 peer reflect-client................................................................................................. 5-49
5.1.54 peer route-policy ................................................................................................. 5-50
5.1.55 peer route-update-interval................................................................................... 5-51
5.1.56 peer shutdown..................................................................................................... 5-51
5.1.57 peer timer ............................................................................................................ 5-52
5.1.58 preference ........................................................................................................... 5-53
5.1.59 reflect between-clients ........................................................................................ 5-53
5.1.60 reflector cluster-id................................................................................................ 5-54
5.1.61 refresh bgp .......................................................................................................... 5-55
5.1.62 reset bgp ............................................................................................................. 5-56
5.1.63 reset bgp flap-info ............................................................................................... 5-56
5.1.64 reset bgp group ................................................................................................... 5-57
5.1.65 reset dampening ................................................................................................. 5-58
5.1.66 summary.............................................................................................................. 5-58
5.1.67 timer keep-alive hold ........................................................................................... 5-59
5.1.68 undo synchronization .......................................................................................... 5-59
5.2 MBGP Configuration Commands .................................................................................... 5-60
5.2.1 ipv4-family ............................................................................................................. 5-60
5.2.2 ipv4-family vpnv4................................................................................................... 5-61
Chapter 6 IP Routing Policy Configuration Commands............................................................ 6-1

6.1 IP Routing Policy Configuration Commands ..................................................................... 6-1
6.1.1 apply as-path........................................................................................................... 6-1
6.1.2 apply community ..................................................................................................... 6-1
6.1.3 apply cost ................................................................................................................ 6-2
6.1.4 apply cost-type ........................................................................................................ 6-3
6.1.5 apply ip-address ...................................................................................................... 6-4
6.1.6 apply isis.................................................................................................................. 6-4
6.1.7 apply local-preference............................................................................................. 6-5
6.1.8 apply origin .............................................................................................................. 6-6
6.1.9 apply tag.................................................................................................................. 6-6
6.1.10 display ip ip-prefix ................................................................................................. 6-7
6.1.11 display route-policy ............................................................................................... 6-8
6.1.12 filter-policy export .................................................................................................. 6-8
6.1.13 filter-policy import .................................................................................................. 6-9
6.1.14 if-match acl .......................................................................................................... 6-10
vi
6.1.15 if-match as-path .................................................................................................. 6-11

6.1.16 if-match community ............................................................................................. 6-12
6.1.17 if-match cost ........................................................................................................ 6-13
6.1.18 if-match interface................................................................................................. 6-13
6.1.19 if-match ip next-hop............................................................................................. 6-14
6.1.20 if-match ip-prefix.................................................................................................. 6-15
6.1.21 if-match tag.......................................................................................................... 6-15
6.1.22 ip ip-prefix............................................................................................................ 6-16
6.1.23 route-policy.......................................................................................................... 6-18
Chapter 7 Route Capacity Configuration Commands ............................................................... 7-1

7.1 Route Capacity Configuration Commands ........................................................................ 7-1
7.1.1 display memory ....................................................................................................... 7-1
7.1.2 memory auto-establish disable ............................................................................... 7-2
7.1.3 memory auto-establish enable ................................................................................ 7-3
7.1.4 memory ................................................................................................................... 7-4
vii
Comware V3 Chapter 1 Static Route Configuration Commands
Chapter 1 Static Route Configuration Commands
Note:
For the specific examples and parameter explanation of VPN instance, refer to the
“MPLS” module of this manual.
1.1 Routing Table Displaying Commands

1.1.1 display ip routing-table
Syntax
display ip routing-table
View
Any view
Parameter
None
Description
Use the display ip routing-table command to view the routing table summary.
This command views routing table information in summary form. Each line represents
one route. The contents include destination address/mask length, protocol, preference,
cost, next hop and output interface.
Only current used route, i.e., best route, is displayed via the display ip routing-table
command.
Example
# View the summary of current routing table.

<H3C> display ip routing-table
Routing Table: public net
Destination/Mask Proto Pre Cost Nexthop Interface
1.1.1.0/24 DIRECT 0 0 1.1.1.1 Interface serial1/0/0
1.1.1.1/32 DIRECT 0 0 127.0.0.1 InLoopBack0
1-1

3.3.3.0/24 DIRECT 0 0 3.3.3.1 Interface ethernet1/0/0
4.4.4.0/24 DIRECT 0 0 4.4.4.1 Interface ethernet2/0/0
127.0.0.0/8 DIRECT 0 0 127.0.0. 1 InLoopBack0
1.1.2 display ip routing-table acl
Syntax
display ip routing-table acl acl-number [ verbose ]
View
Any view
Parameter
acl_number: References a basic ACL by its number, which is in the range 2000 to 2999.
verbose: With the parameter, this command displays the verbose information of both
the active and inactive routes that passed filtering rules. Without the parameter, this
command only displays the summary of the active routes that passed filtering rules.
Description
Use the display ip routing-table acl command to view the route filtered through
specified basic access control list (ACL).
The command is used in tracking route policy to display the route that passed the
filtering rule according to the input basic ACL number.
The command is only applicable to view the route that passed basic ACL filtering rules.
Example
# View the summary of active routes that are filtered through basic ACL 2001.
<H3C> display ip routing-table acl 2001
Routes matched by access-list 2001:
Summary count: 4
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoopBack0
169.0.0.0/8 Static 60 0 2.1.1.1 LoopBack1
169.0.0.0/15 Static 60 0 2.1.1.1 LoopBack1
# Display the verbose information of the active and inactive routes that are filtered
through basic ACL2001.
1-2
<H3C> display ip routing-table acl 2001 verbose

Routes matched by access-list 2001:
Generate Default: no
+ = Active Route, - = Last Active, # = Both * = Next hop in use
Summary count:5
**Destination: 127.0.0.0 Mask: 255.0.0.0
Protocol: #Direct Preference: 0
*NextHop: 127.0.0.1 Interface: 127.0.0.1(InLoopBack0)
Vlinkindex: 0
State: <NoAdvise Int ActiveU Retain Multicast Unicast>
Age: 3:47 Metric: 0/0
**Destination: 127.0.0.1 Mask: 255. 255. 255. 255
Vlinkindex: 0
State: <NotInstall NoAdvise Int ActiveU Retain Gateway Multicast Unicast>
Protocol: #Static Preference: 60
*NextHop: 4.1.1.1
Vlinkindex: 0
State: <Int Hidden Static Unicast>
*NextHop: 2.1.1.1 Interface: 2.1.1.1(LoopBack1)
Vlinkindex: 0
State: <Int ActiveU Static Unicast>
Vlinkindex: 0
1.1.3 display ip routing-table ip_address
Syntax
display ip routing-table ip_address [ mask ] [ longer-match ] [ verbose ]
1-3
View
Any view
Parameter
ip_address: Destination IP address in dotted decimal format.

mask: IP address mask, which can be in dotted decimal notation or represented by an
integer in the range of 0 to 32.
longer-match: Indicates all route destination addresses are matched in the natural
mask range.
verbose: With the verbose parameter, this command displays the verbose information
of both the active and inactive routes. Without the parameter, this command only
displays the summary of active routes.
Description
Use the display ip routing-table ip_address command to view the routing information
of the specified destination address.
With different optional parameters, the output of the command is different. The
following is the output description for different forms of this command:
z display ip routing-table ip_address
If destination address, ip_address, has corresponding routes in natural mask range,
this command will display all subnet routes. Or, only the route best matching the
destination address, ip_address, is displayed. And only the active matching route is
displayed.
z display ip routing-table ip_address mask,
This command only displays the route fully matching with specified destination address
and mask.
z display ip routing-table ip_address longer-match
This command displays all route destination addresses matching with destination
addresses in natural mask range.
Example
# There is corresponding route in natural mask range. View the summary.

<H3C> display ip routing-table 169.0.0.0
Routing Tables:
Summary count:1
169.0.0.0/16 Static 60 0 2.1.1.1 LoopBack1
# There is no corresponding route (only the longest matching route is displayed) in

natural mask range and summary is viewed.
1-4
<H3C> display ip routing-table 169.253.0.0

Routing Tables:
Summary count:1
169.0.0.0/8 Static 60 0 2.1.1.1 LoopBack1
# There are corresponding routes in the natural mask range. View the detailed
information.
<H3C> display ip routing-table 169.0.0.0 verbose
Routing Tables:
Summary count:2
Vlinkindex: 0
Vlinkindex: 0
# There are no corresponding routes in the natural mask range (only display the
longest matching route). View the detailed information.
<H3C> display ip routing-table 169.253.0.0 verbose
Routing Tables:
Summary count:1
Protocol: #Static Preference: -60
*NextHop: 2.1.1.1
Vlinkindex: 0
1-5
1.1.4 display ip routing-table ip_address1 ip_address2
Syntax
display ip routing-table ip_address1 mask1 ip_address2 mask2 [ verbose ]
View
Any view
Parameter
ip_address1, ip_address2: Destination IP address in dotted decimal notation.

ip_address1 and ip_address2 determine one address range together to display the
route in this address range.
mask1, mask2: IP address mask, length in dotted decimal notation or integer form.
verbose: With the verbose parameter, this command displays the verbose information
of both the active and inactive routes. Without the parameter, this command only
displays the summary of active routes.
Description
Use the display ip routing-table ip_address1 ip_address2 command to view the

routing information in the specified destination address range.
Example
# View the routing information of destination addresses ranging from 1.1.1.0 to 2.2.2.0.
<H3C> display ip routing-table 1.1.1.0 24 2.2.2.0 24
Routing tables:
Summary count: 3
1.1.5 display ip routing-table ip-prefix
Syntax
display ip routing-table ip-prefix ip-prefix-name [ verbose ]
View
Any view
Parameter
ip-prefix-name: Prefix list name.
1-6
verbose: With the parameter, this command displays the verbose information of both
the active and inactive routes that passed filtering rules. Without the parameter, this
command displays the summary of the active routes that passed filtering rules.
Description
Use the display ip routing-table ip-prefix command to view the route that passed the
filtering rule according to the specified ip prefix list.
If there is no specified prefix list, this command will display the verbose information of
all active and inactive routes with the parameter verbose and it will display the
summary of all active routes without the parameter verbose.
Example
# Display the summary of the active route that is filtered through ip prefix list abc2.
<H3C> display ip routing-table ip-prefix abc2
Routes matched by ip-prefix abc2:
Summary count: 4
169.0.0.0/8 Static 60 0 2.1.1.1 LoopBack1
169.0.0.0/15 Static 60 0 2.1.1.1 LoopBack1
# Display the verbose information of the active and inactive routes that are filtered
through ip prefix list abc2.
<H3C> display ip routing-table ip-prefix abc2 verbose
Routes matched by ip-prefix abc2:
Summary count:4
Vlinkindex: 0
State: <NoAdvise Int ActiveU Retain Multicast Unicast>
**Destination: 127.0.0.1 Mask: 255. 255. 255. 255
Vlinkindex: 0
State: <NotInstall NoAdvise Int ActiveU Retain Gateway Multicast Unicast>
1-7
Protocol: #Static Preference:-60

*NextHop: 4.1.1.1
Vlinkindex: 0
State: <Int Hidden Static Unicast>
Vlinkindex: 0
Vlinkindex: 0
1.1.6 display ip routing-table protocol
Syntax
display ip routing-table protocol protocol [ inactive | verbose | vpn-instance

vpn-instance-name]
View
Any view
Parameter
protocol: Has multiple selectable values:

z direct: Displays direct connection route information
z static: Displays static route information.
z bgp: Displays BGP route information.
z isis: Displays IS-IS route information.
z ospf: Displays OSPF route information.
z ospf-ase: Displays OSPF ASE route information.
z ospf-nssa: Displays OSPF NSSA route information.
z rip: Displays RIP route information.
inactive: With the parameter, this command displays the inactive route information.
Without the parameter, this command displays the active and inactive route
information.
verbose: With the verbose parameter, this command displays the verbose routing
information. Without the parameter, this command displays the route summary.
1-8
vpn-instance vpn-instance-name: Specifies the name of the VPN instance.
Description
Use the display ip routing-table protocol command to view the routing information of
specified protocol. If vpn-instance is not specified, the routing information of the public
network will be displayed; if vpn-instance is specified, the routing information of the
private network will be displayed.
Example
# Display all direct connection routes summary.

<H3C> display ip routing-table protocol direct
DIRECT Routing tables:
Summary count: 4
DIRECT Routing tables status:<active>:
Summary count: 3
Destination/Mask Proto Pre Cost Nexthop Interface:
DIRECT Routing tables status:<inactive>:
Summary count: 1
# Display the static routing table.

<H3C> display ip routing-table protocol static
STATIC Routing tables:
Summary count: 1
STATIC Routing tables status:<active>:
Summary count: 0
STATIC Routing tables status:<inactive>:
Summary count: 1
1.2.3.0/24 STATIC 60 0 1.2.4.5 Ethernet 2/0/0
1.1.7 display ip routing-table radix
Syntax
display ip routing-table radix
View
Any view
1-9
Parameter
None
Description
Use the display ip routing-table radix command to view the routing table information
in a tree structure.
Example
# View the routing table information in a tree structure.

<H3C> display ip routing-table radix
Radix tree for INET (2) inodes 7 routes 5:
+-32+--{210.0.0.1
+--0+
| | +--8+--{127.0.0.0
| | | +-32+--{127.0.0.1
| +--1+
| +--8+--{20.0.0.0
| +-32+--{20.1.1.1
1.1.8 display ip routing-table statistics
Syntax
display ip routing-table [ vpn-instance vpn-instance-name ] statistics
View
Any view
Parameter
vpn-instance vpn-instance-name: Specifies the name of the VPN-instance.
Description
Use the display ip routing-table statistics command to view the integrated routing
information.
If you do not specify vpn-instance in the display ip routing-table statistics command,
the system displays the routing information of public networks. If you specify
vpn-instance, the system displays the routing information of private networks.
The integrated routing information includes total route amount, the route amount added
or deleted by protocol, amount of the routes that are labeled deleted but not deleted,
the active route amount and inactive route amount.
1-10
Example
# Display the integrated routing information.

<H3C> display ip routing-table statistics
Routing tables:
Proto route active added deleted freed
BGP 0 0 0 0 0
DIRECT 5 4 5 0 0
RIP 0 0 0 0 0
STATIC 0 0 0 0 0
IS-IS 0 0 0 0 0
OSPF 0 0 0 0 0
O_ASE 0 0 0 0 0
O_NSSA 0 0 0 0 0
Total 5 4 5 0 0
1.1.9 display ip routing-table verbose
Syntax
display ip routing-table verbose
View
Any view
Parameter
None
Description
Use the display ip routing-table verbose command to view the verbose routing table
information.
With the verbose parameter, this command displays the verbose routing table
information. The descriptor describing the route state will be displayed first, then the
statistics of the entire routing table will be output and finally the verbose description of
each route will be output.
All current routes, including inactive routes and invalid routes, can be displayed using
the display ip routing-table verbose command.
Example
# Display the verbose routing table information.

<H3C> display ip routing-table verbose
Routing Tables:
1-11

Destinations: 4 Routes: 4
Holddown: 0 Delete: 9 Hidden: 0
*NextHop: 127.0.0.1 Interface: 127.0.0.1(LO0)
State: <NoAdv Int Active Retain Rej>
Age: 19:31:06 Metric: 0/0
*NextHop: 127.0.0.1 Interface: 127.0.0.1(LO0)
State: <NoAdv Int Active Retain>
Age: 114:03:05 Metric: 0/0
The statistics of the entire routing table is displayed first, then the verbose description of
each route is output. The meanings of route state parameters are explained in the
following table:
Table 1-1 Description of the output information of the display ip routing-table verbose
command
Field Description
Number of currently hold down routes – Holddown refers to a route
advertising policy used by some distance vector (D-V) routing
protocols (such as RIP) in order to avoid expansion of error routes
and improve fast and correct transmission of unreachable routing
Holddown
information. It usually advertises a route fixedly at an interval no
matter what changes have happened to the routes to the same
destination, which have been learned actually. For details, refer to
the specific routing protocol.
Delete Number of routes that have been deleted currently.
Number of currently hidden routes -- Some routes are not available
Hidden at present for some reason (e.g., the interface is Down) but are not
expected to be deleted. They can be hidden for future restoration.
1.1.10 display ip routing-table vpn-instance
Syntax
display ip routing-table vpn-instance vpn-instance-name [ ip-address ] [ verbose ]
View
Any view
1-12
Parameter
vpn-instance-name: VPN instance name.

ip-address: Destination IP address in dotted decimal format.
verbose: With the parameter, the command displays the verbose routing information.
Without the parameter, the command displays the route summary.
Description
Use the display ip routing-table vpn-instance command to view RIP information

associated with vpn instance address family.
Given that both ip-address and verbose are configured in the command to view all
routes to the specified IP address in the VPN-instance, including the local routes as
well as the routes learned from the remote.
Example
# Display details of the routes to 10.1.1.1 in the VPN-instance vpn1.

<H3C> display ip routing-table vpn-instance vpn1 10.1.1.1 verbose
Routing tables:
Summary count: 2
Protocol: #DIRECT Preference: 0
Vlinkindex: 0
State: <NoAdvise Int ActiveU Retain Gateway Unicast>
Age: 54 Cost: 0/0
Protocol: #DIRECT Preference: 0
Vlinkindex: 0
State: <Int ActiveU Retain Unicast>
Age: 54 Cost: 0/0
# Display the summary of the routes to 10.1.1.1 in the VPN-instance vpn1.

<H3C> display ip routing-table vpn-instance vpn1 10.1.1.1
Routing tables: vpn1 Route-Distinguisher: 100:1
Destination/Mask Protocol Pre Cost Nexthop Interface
10.1.1.0/24 DIRECT 0 0 10.1.1.1 LoopBack0
1-13
1.1.11 reset ip routing-table
Syntax
reset ip routing-table [ vpn-instance vpn-instance-name ] statistics protocol

protocol-type
View
User view
Parameter
vpn-instance vpn-instance name: Specifies the name of the VPN-instance.

protocol protocol-type: Specifies the protocol type, including all, BGP, direct
connection route, ISIS, OSPF, OSPF ASE, OSPF NSSA, RIP, and static route.
Description
Use the reset ip routing-table command to clear the routing table.

When you specify the vpn-instance, the numbers of added and deleted routes of the
specified protocol are set to zero.
Example
# Remove the routing information of the private network whose VPN-instance name is
h3c11.
[H3C] reset ip routing-table vpn-instance h3c1
Routing tables:
Proto route active added deleted
DIRECT 2 2 0 0
STATIC 1 1 0 0
BGP 0 0 0 0
RIP 0 0 0 0
IS-IS 0 0 0 0
OSPF 0 0 0 0
O_ASE 0 0 0 0
O_NSSA 0 0 0 0
AGGRE 0 0 0 0
Total 3 3 0 0
1-14
1.2 Static Route Configuration Commands

1.2.1 delete static-routes all
Syntax
delete static-routes all
View
System view
Parameter
None
Description
Use the delete static-routes all command to cancel all the static routes.
When this command is used to cancel static routes, the user should confirm the
settings before all the configured static routes are canceled.
Related command: display ip routing-table and ip route-static.
Example
# Delete all the static routes configured on router.

[H3C] delete static-routes all
This will erase all unicast static routes and their configurations, you must
reconfigure all static routes
Are you sure to delete all the static routes?[Y/N]y
1.2.2 ip route-static
Syntax
ip route-static ip-address { mask | mask-length } [ interface-type interface-number ]

[nexthop-address ] [ preference preference-value ] [ reject | blackhole ] [ tag
tag-value ] [ description string ]
undo ip route-static ip-address { mask | mask-length } [ interface-type
interface-number | nexthop-address ] [ preference preference-value ]
ip route-static vpn-instance vpn-instance-name1 vpn-instance-name2 … ip-address
{ mask | mask-length } [ interface-type interface-number [ nexthop-address ] |
vpn-instance vpn-nexthop-name nexthop-address | nexthop-address [ public ] ]
[ preference preference-value ] [ reject | blackhole ]
undo ip route-static vpn-instance vpn-instance-name1 vpn-instance-name2 …
ip-address { mask | mask-length } [ interface-type interface-number | vpn-instance
1-15
vpn-nexthop-name nexthop-address | nexthop-address [ public ]] [ preference

preference-value ]
View
System view
Parameter
ip-address: Destination IP address, in dotted decimal notation.

mask: Mask.
mask-length: Mask length. Since "1" s in the 32-bit mask are required to be consecutive,
the mask in dotted decimal notation can be replaced by mask-length, which is the
number of the consecutive "1" s in the mask.
interface-type interface-number: Specifies the outbound interface type and number of
the static route. The interfaces of the public network or under other vpn-instances can
be taken as the outbound interface of the static route.
vpn-instance-name: Indicates a name of VPN instance. It can take a maximum of 6
values.
vpn-nexthop-name: Specifies the vpn-instance of the static route next hop.
nexthop-address: Specifies the next hop IP address (in dotted decimal notation) of the
static route.
preference-value: Preference level of the static route in the range from 1 to 255.
public: Public network.
reject: Indicates an unreachable route.
blackhole: Indicates a blackhole route.
tag tag-value: Tag for the static route. It is used for routing policies.
description string: Description on the static route.
Description
Use the ip route-static command to configure a static route.

Use the undo ip route-static command to cancel the configured static route.
Two static routes to the same destination through the same next hop but with different
preferences are totally different. The system will prefer the route with the smaller
preference value, that is, higher preference level as the current route.
Use the undo ip route-static command to delete all the static routes to the same
destination through the same next hop.
Use the undo ip route-static preference command to delete the static routes with the
specified preference.
1-16
Use the ip route-static vpn-instance command to configure a static route. In the

application of multi-role host, you can configure a static route on a private network to
specify the interface of another private network or public network as its outbound
interface.
Use the undo ip route-static vpn-instance command to remove the static route
configuration.
By default, the system can obtain the sub-net route directly connected with the router.
When configuring a static route, the default preference is 60 if it is not specified. If it is
not specified as reject or blackhole, the route will be reachable by default.
Precautions when configuring static route:
z When the destination IP address and the mask are both 0.0.0.0, it is the default
route. If it is failed to detect the routing table, a packet will be forwarded along the
default route.
z For different configuration of preference level, flexible routing management policy
can be adopted. For example, configure multiple routes to the same destination.
Load sharing can be fulfilled by specifying the same preference for the routes.
Route backup can be realized by specifying different preferences.
z To configure static route, either transmission interface or next hop address can be
specified, which one is adopted in practice depends on actual condition. For the
interfaces supporting the resolution from network address to link layer address or
point-to-point interface, transmission interface or next hop address can be
specified. But for NBMA interfaces, such as the interface or dialing interface
encapsulated with X.25 or frame-relay, they support point-to-multi-point. Except IP
route is configured, secondary route, i.e. the map from IP address to link layer
address should be established on link layer. In such condition, transmission
interface cannot be specified and the next hop IP address should be configured
when configuring static route.
z VT interface cannot be configured as outbound interface.
z In some conditions (for example, the link layer is encapsulated with PPP),
transmission interface can be specified when opposite address cannot be learned
in router configuration. After specifying transmission interface, the configuration of
this router is unnecessary to be modified as opposite address changes.
Related command: display ip routing-table.
Example
# Configure the next hop of the default route as 129.102.0.2.

[H3C] ip route-static 0.0.0.0 0.0.0.0 129.102.0.2
# Configure the static route, whose destination address is 100.1.1.1 and whose
next-hop address is 1.1.1.2.
[H3C] ip route-static vpn-instance vpn1 100.1.1.1 16 vpn-instance vpn1 1.1.1.2
1-17
1.3 Bandwidth-Based Unbalanced Load Sharing Commands

1.3.1 band-based-sharing
Syntax
band-based-sharing
undo band-based-sharing
View
System view
Parameter
None
Description
Use the band-based-sharing command to enable bandwidth-based unbalanced load

sharing.
Use the undo band-based-sharing command to disable bandwidth-based
unbalanced load sharing.
By default, bandwidth-based unbalanced load sharing is disabled.
As bandwidth-based unbalanced load sharing does not support per-flow load sharing,
you must disable fast forwarding on the incoming or outgoing interface when using the
function.
Example
# Enable bandwidth-based unbalanced load sharing.

[H3C] band-based-sharing
1.3.2 display loadsharing ip address
Syntax
display loadsharing ip address ip-address mask
View
Any view
Parameter
ip-address: IP address of the destination network, in dotted decimal format.

mask: Dotted decimal subnet mask or subnet mask length.
1-18
Description
Use the display loadsharing ip address command to view the statistics about the
unbalanced load sharing based on interface bandwidth, including the number and ratio
of the packets sent from the interfaces related to the equal-cost routes to a network
address.
You can view these equal-cost routes using the display fib command.
Related command: display fib.
Example
# Display information about load sharing on all the interfaces corresponding to the
equal-cost routes to the network 10.2.1.0/24.
[H3C] display loadsharing ip address 10.2.1.0 24
There are/is totally 3 route entry(s) to the same destination network.
Nexthop Packet(s) Bandwidth[KB] Flow(s) Interface
10.1.1.2 763851 100000 0 Ethernet0/0/0
10.1.2.2 1193501 155000 0 Atm1/0/0
10.1.3.2 15914 2048 0 Serial2/0/0
BandWidth:48:75:1
Packets:47:74:1
Flows:0:0:0
1.3.3 loadbandwidth
Syntax
loadbandwidth bandwidth
undo loadbandwidth
View
Interface (excluding logical interfaces) view
Parameter
bandwidth: Load bandwidth in kbps on the current interface, in the range 0 to

1,000,000.
Description
Use the loadbandwidth command to allocate load bandwidth to the interface.

Use the undo loadbandwidth to restore the default load bandwidth of the interface,
that is, the physical bandwidth.
1-19
Different from physical bandwidth, the configuration of load bandwidth does not affect
interface properties but load distribution. When you set the bandwidth argument to 0,
the current interface is shut down and do not participate in load sharing.
Example
# Configure the bandwidth for load sharing on interface Ethernet 0/0/0.

[H3C-Ethernet0/0/0] loadbandwidth 1000
[H3C-Ethernet0/0/0] undo loadbandwidth
1.3.4 reset loadsharing
Syntax
reset loadsharing { all | ip address ip-address mask }
View
User view
Parameter
all: Clears the statistics about unbalanced load sharing for all interfaces.
ip-address mask: IP address and mask of destination network. The specified mask
takes the dotted decimal format or the form of length.
Description
Use the reset loadsharing command to reset statistics about unbalanced load sharing
for all interfaces or the interfaces related to the equal-cost routes to the specified
destination network.
Example
# Clear the statistics about unbalanced load sharing

<H3C> reset loadsharing all
1-20
Comware V3 Chapter 2 RIP Configuration Commands
Chapter 2 RIP Configuration Commands
Note:
For the specific examples and parameter explanation of VPN instance, refer to “MPLS”
module of this manual.
2.1 RIP Configuration Commands

2.1.1 checkzero
Syntax
checkzero
undo checkzero
View
RIP view
Parameter
None
Description
Use the checkzero command to check the zero field of RIP-1 packet.
Use the undo checkzero command to cancel the check of the zero fields.
By default, RIP-1 performs the zero field check.
According to the protocol (RFC1058) specifications, some fields in RIP-1 packets must
be zero, called zero fields. With the checkzero command, the zero check operation for
RIP-1 packet can be enabled or disabled. During the zero check operation, if the RIP-1
packet in which the zero fields are not zeros is received, it will be rejected.
This command is ineffective to RIP-2 since RIP-2 packets have no zero fields.
Example
# Configure not to perform zero check for RIP-1 packet.

[H3C-rip] undo checkzero
2-1
2.1.2 debugging rip
Syntax
debugging rip { packet [ interface type number ] | receive | send }
View
User view
Parameter
packet: Enables the RIP packets debugging.

interface type number: Enables RIP packet debugging on the specified interface.
receive: Enables the RIP receiving packets debugging.
send: Enables the RIP sending packets debugging.
Description
Use the debugging rip command to enable RIP debugging.

Use the undo debugging rip command to disable RIP debugging.
Users can learn the current information of receiving and sending RIP packets on each
interface by using this command.
Example
# Enable RIP packet debugging.

<H3C> debugging rip packet
2.1.3 default cost
Syntax
default cost value

undo default cost
View
RIP view
Parameter
value: Default routing cost to be set, ranging from 1 to 16.The default value is 1.
Description
Use the default cost command to configure the default routing cost of a redistributed
route.
Use the undo default cost command to restore the default value.
2-2
If no specific routing cost is specified when redistributing routes from other protocols
with the import-route command, the redistributing will be performed with the default
routing cost specified by the default cost command.
Related command: import-route.
Example
# Set the default routing cost of redistributing other routing protocol routes as 3.
[H3C-rip] default cost 3
2.1.4 display rip
Syntax
display rip
View
Any view
Parameter
None
Description
Use the display rip command to view the current RIP running state and its
configuration information.
Example
# Display the current running state and configuration information of the RIP protocol.
<H3C> display rip
RIP is turned on
public net VPN-Instance
Checkzero is on Default cost : 1
Summary is on Preference : 100
Period update timer : 30
Timeout timer : 180
Garbage-collection timer : 120
No peer router
Table 2-1 Description of the output information of the display rip command
Field Description
RIP is turned on RIP is enabled.
public net VPN-Instance Public networks in the VPN-instance
2-3
Field Description
Checkzero is on Enables checkzero of RIP.
The default cost of the redistributed
Default cost : 1
route is 1.
Summary is on Enables route summary of RIP.
Preference : 100 The preference of RIP is 100.
Period update timer : 30
Timeout timer : 180 Setting on the three timers of RIP
Garbage-collection timer : 120
No peer router RIP has no peer router.
2.1.5 display rip interface
Syntax
display rip interface [ vpn-instance vpn-instance-name ]
View
Any view
Parameter
vpn-instance vpn-instance-name: Specifies a VPN by its name.
Description
Use the display rip interface command to display information about the specified RIP
interface or all RIP interface.
Example
# Display information about all RIP interfaces.

<H3C> display rip interface
RIP Interface: public net
Address Interface Pro MetrIn/Out Input Output Split-horizon

30.0.0.2 Mp-group1 RIP1 0/1 on on on
2-4
Table 2-2 Description on the fields of the display rip interface command
Field Description
IP address of the RIP interface. You must enable the RIP interface
Address
using the network in RIP view
Name of the RIP interface. Its IP address is displayed in the Address
Interface
field
Pro RIP version running on the interface
MetrIn/Out The routing metric value added when receiving or sending routes
On indicates that the interface can receive RIP packets and off
Input
indicates the contrary.
On indicates that the interface can send RIP packets and off
Output
indicates the contrary.
On indicates that slit horizon is enabled and off indicates that slit
Split-horizon
horizon is disabled
2.1.6 display rip routing
Syntax
display rip routing [vpn-instance vpn-instance-name]
View
Any view
Parameter
vpn-instance vpn-instance-name: Specifies the name of the VPN.
Description
Use the display rip routing command to display the RIP routing table, including
normal routes and routes in garbage-collection status.
With vpn-instance not specified, RIP routes of the public network will be displayed;
with vpn-instance specified, RIP routes of the specified vpn-instance will be displayed.
Example
# Display RIP routes.

[H3C] display rip routing
RIP routing table: public net
A = Active I = Inactive G = Garbage collection
2-5
C = Change T = Trigger RIP
Destination/Mask Cost NextHop Age SourceGateway Att

90.0.0.0/8 1 30.0.0.1 6s 30.0.0.1 A
95.0.0.0/8 1 30.0.0.1 6s 30.0.0.1 A
Table 2-3 Description on the fields of the display rip routing command
Field Description
Destination/Mask Destination address/mask length
Cost Routing metric
NextHop Address of the next hop
Age The lifetime of the route entry in the routing table (aging time)
SourceGateway Address of the source gateway from which the route is learnt
Route status, which could be one of the following:
A = Active
I = Inactive
Att
G = Garbage collection
C = Change
T = Trigger RIP
2.1.7 display rip vpn-instance
Syntax
display rip vpn-instance vpn-instance-name
View
Any view
Parameter
vpn-instance vpn-instance-name: VPN instance name.
Description
Use the display rip vpn-instance command to view the related configuration of VPN
instance of RIP.
Example
None
2-6
2.1.8 filter-policy export
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name | route-policy route-policy-name}

export [ routing-protocol ]
undo filter-policy { acl-number | ip-prefix ip-prefix-name | route-policy
route-policy-name} export [ routing-protocol ]
View
RIP view
Parameter
acl-number: Access control list number used for filtering the destination addresses of
the routing information.
ip-prefix-name: Name of address prefix list used for filtering the destination addresses
of the routing information.
route-policy-name: Name of the routing policy used for filtering routing information. It
allows RIP to decide which routes should be sent or received based on the fields acl,
cost, interface, ip, ip-prefix, and tag.
routing-protocol: Routing protocol whose routing information is to be filtered, including
direct, isis, bgp, ospf, ospf-ase, ospf-nssa, and static at present.
Description
Use the filter-policy export command to configure to filter the advertised routing
information by RIP.
Use the undo filter-policy export command to configure not to filter the advertised
routing information.
By default, RIP does not filter the advertised routing information.
Related command: acl, filter-policy import, and ip ip-prefix.
Example
# Filter the advertised route information according to acl 2003.

[H3C-rip] filter-policy 2003 export
2.1.9 filter-policy import
Syntax
filter-policy gateway ip-prefix-name import

undo filter-policy gateway ip-prefix-name import
2-7
filter-policy { acl-number | ip-prefix ip-prefix-name [ gateway ip-prefix-name ] |

route-policy route-policy-name} import
undo filter-policy { acl-number | ip-prefix ip-prefix-name [ gateway ip-prefix-name ] |
route-policy route-policy-name } import
View
RIP view
Parameter
gateway ip-prefix-name: Name of address prefix list used for filtering the addresses of
the neighboring routers advertising the routing information.
route-policy-name: Name of the routing policy used for filtering routing information. It
allows RIP to decide which routes should be sent or received based on the fields acl,
cost, interface, ip, ip-prefix, and tag.
Description
Use the filter-policy gateway command to configure to filter the received routing
information distributed from the specified address.
Use the undo filter-policy gateway command to configure not to filter the received
routing information distributed from the specified address.
Use the filter-policy import command to configure the filtering to the received global
routing information.
Use the undo filter-policy import command to disable filtering to the received global
routing information
By default, RIP does not filter the received routing information.
The range of the routes received by RIP can be controlled by specifying the access
control list and the address prefix list.
Related command: acl, filter-policy export, and ip ip-prefix.
Example
# Configure the filtering of the global routing information according to acl 2003.
[H3C-rip] filter-policy 2003 import
2-8
2.1.10 host-route
Syntax
host-route
undo host-route
View
RIP view
Parameter
None
Description
Use the host-route command to control the RIP to accept the host route.
Use the undo host-route command to reject the host route.
By default, router accepts the host route.
In some special cases, RIP receives a great number of host routes in the same network
segment. These routes cannot help the path searching much but occupy a lot of
resources. In this case, the undo host-route command can be used to reject host
routes.
Example
# Configure RIP to reject a host route.

[H3C-rip] undo host-route
2.1.11 import-route
Syntax
import-route protocol [ allow-ibgp ] [ cost value ] [ route-policy route-policy-name ]

undo import-route protocol
View
RIP view
Parameter
protocol: Specifies the source routing protocol to be redistributed by RIP. At present,

RIP can redistribute the following routes: direct, ospf, ospf-ase, ospf-nssa, static,
and bgp and isis.
allow-ibgp: Optional when the protocol argument is set to BGP. Whereas the
import-route bgp command redistributes only EBGP routes, the import-route bgp
2-9
allow-ibgp command redistributes IBGP routes in addition and as such, must be used
with cautions.
value: Cost value of the route to be redistributed, ranging from 1 to 16..
route-policy route-policy-name: Configured to redistribute the route matching the
condition of the specified Route-policy only.
Description
Use the import-route command to redistribute the routes of other protocols into RIP.
Use the undo import-route command to cancel the routes redistributed from other
protocols.
By default, RIP does not redistribute any other routes.
The import-route command is used to redistribute the route of another protocol by
using a certain value. RIP regards the redistributed route as its own route and transmits
it with the specified value. This command can greatly enhance the RIP capability of
obtaining routes, thus increasing the RIP performance.
If the cost value is not specified, routes will be redistributed according to the default
cost. It is in the range of 1 to 16. If it is larger than or equal to 16, it indicates an
unreachable route and the transmission will be stopped in 120 seconds.
Related command: default cost.
Example
# redistribute a static route with cost being 4.

[H3C-rip] import-route static cost 4
# Set the default cost and redistribute an OSPF route with the default cost.
[H3C-rip] default cost 3
[H3C-rip] import-route ospf
2.1.12 ipv4-family vpn-instance
Syntax
ipv4-family [ unicast ] vpn-instance vpn-instance-name

undo ipv4-family [ unicast ] vpn-instance vpn-instance-name
View
RIP view
Parameter
unicast: Unicast address.
2-10
vpn-instance-name: Associates the specified VPN instance with the IPv4 address
family. Enter the MBGP address family view of RIP with this parameter.
Description
Use the ipv4-family command to enter MBGP address family view of RIP.
Use the undo ipv4-family command to cancel all configurations in extended address
family view.
ipv4-family command is used to enter the MBGP address family view. In this view,
parameters related to address family can be configured for RIP.
undo ipv4-family command is only used in RIP view.
The ipv4-family vpn-instance command is used for BGP/MPLS VPN. For related
description, refer to “MPLS VPN“ section in module “MPLS” chapter of this manual.
Related command: display rip vpn-instance.
2.1.13 network
Syntax
network network-address
undo network network-address
View
RIP view
Parameter
network-address: Address of the network enabled/disabled. It can be IP network

address of any interface.
 Note:
For AR 28 series routers, the network-address argument can be configured to 0.0.0.0
to enable all network segments; while for AR 18 series routers, the network-address
argument cannot be configured to 0.0.0.0.
Description
Use the network command to enable Routing Information Protocol (RIP) on the
interface.
Use the undo network command to cancel the RIP on the interface.
By default, RIP is disabled on any interface.
2-11
After enabling a RIP routing process, it is disabled on any interface by default. RIP at a
certain interface must be enabled with the network command.
Like the undo rip work command in interface view, the undo network command in
RIP view can disable an interface from receiving or transmitting RIP routes. They are
different in the sense that the undo rip work command does not prevent other
interfaces from forwarding the route of the interface while the undo network can
prevent RIP from advertising the route of the interface and as a result no route is
available for forwarding the packets intended for this interface.
When the network command is used on an address, the effect is that the interface on
the network segment at this address is enabled. For example, the results of viewing the
network 129.102.1.1 with both the display current-configuration command and the
display rip command are shown as the network 129.102.0.0.
Related command: rip work.
Example
# Enable the RIP on the interface with the network address as 129.102.0.0.
[H3C-rip] network 129.102.0.0
2.1.14 peer
Syntax
peer ip-address
undo peer ip-address
View
RIP view
Parameter
ip-address: IP address of the peer router with which information will be exchanged in
unicast mode, represented in the format of dotted decimal.
Description
Use the peer command to configure the destination address of the peer to which
information is sent in unicast mode.
Use the undo peer command to cancel the set destination address.
By default, do not send RIP packet to any destination.
This command specifies the sending destination address to fit some non-broadcast
networks. Usually, it is not recommended to use this command.
2-12
Example
# Specify the sending destination address 202.38.165.1.

[H3C-rip] peer 202.38.165.1
2.1.15 preference
Syntax
preference value
undo preference
View
RIP view
Parameter
value: Preference level, ranging from 1 to 255. By default, the value is 100.
Description
Use the preference command to configure the route preference of RIP.

Use the undo preference command to restore the default preference.
Every routing protocol has its own preference. Its default value is determined by the
specific routing policy. The preference will finally determine the routing algorithm to
obtain the optimal route in the IP routing table. This command can be used to modify
the RIP preference manually.
Example
# Specify the RIP preference as 20.

[H3C-rip] preference 20
2.1.16 reset
Syntax
reset
View
RIP view
Parameter
None
2-13
Description
Use the reset command to reset the system parameters of RIP.

When you need to re-configure parameters of RIP, this command can be used to
restore the default setting.
Example
# Reset the RIP system.

[H3C-rip] reset
2.1.17 rip
Syntax
rip
undo rip
View
system view
Parameter
None
Description
Use the rip command to enable the RIP and enter the RIP view.
Use the undo rip command to cancel RIP.
By default, the system does not run RIP.
To enter the RIP view to configure various RIP global parameters, RIP should be
enabled first. Whereas the configuration of parameters related to the interfaces is not
restricted by enabling/disabling RIP.
Caution:
You can execute the undo rip command in both system view and interface view, which
will lead to deletion of all RIP-related commands.
Example
# Enable the RIP and enter the RIP view.

[H3C] rip
2-14
[H3C-rip]
2.1.18 rip authentication-mode
Syntax
rip authentication-mode { { simple password } | { md5 { rfc2082 key-string key-id |

rfc2082 key-string } } }
undo rip authentication-mode
View
Interface view
Parameter
simple: Simple text authentication mode.

password: Simple text authentication key, in character string format with 1 to 16
characters in simple text mode or 24 characters in cipher text mode.
md5: MD5 cipher text authentication mode.
rfc2082: Specifies the MD5 cipher text authentication packet to use a nonstandard
packet format described in RFC2082.
rfc2453; Specifies the MD5 cipher text authentication packet to use the generic packet
format (RFC2453 standard format).
key-string: MD5 cipher-text authentication key. When input in simple text, it is a string of
1 to 16 characters, for example, 1234567. When input in cipher text, it is a string of 24
characters, for example, (TT8F]Y\5SQ=^Q`MAF4<1!!.
key-id: MD5 cipher text authentication identifier, ranging from 1 to 255.
Description
Use the rip authentication-mode command to configure RIP-2 authentication mode

and corresponding parameters.
Use the undo rip authentication-mode command to cancel the RIP-2 authentication.
RIP-1 does not support authentication. There are two RIP authentication modes:
simple text authentication and MD5 cipher text authentication. When MD5 cipher text
authentication mode is used, there are two types of packet formats. One of them is
described in RFC 1723, which was brought forward earlier. The other format is the one
described specially in RFC 2082. The router supports both of the packet formats and
the user can select either of them on demands.
Whether you configure plain text password or cipher text password, the password must
be entered in plain text for authentication.
Related command: rip version.
2-15
Example
# Specify Interface serial1/0/0 to use the simple text authentication with the key as aaa.
[H3C-Serial1/0/0] rip version 2
[H3C-Serial1/0/0] rip authentication-mode simple aaa
2.1.19 rip input
Syntax
rip input
undo rip input
View
Interface view
Parameter
None
Description
Use the rip input command to allow an interface to receive RIP packets.
Use the undo rip input command to cancel an interface to receive RIP packets.
By default, RIP packets at all interfaces (except loopback interface) can be received..
This command is used in cooperation with the other two commands: rip output and rip
work. Functionally, rip work is equivalent to rip input & rip output. The latter two
control the receipt and the transmission of RIP packets respectively on an interface.
The former command equals the functional combination of the latter two commands.
Related command: rip output and rip work.
Example
# Specify the interface serial1/0/0 not to receive RIP packets.

[H3C-serial1/0/0] undo rip input
2.1.20 rip metricin
Syntax
rip metricin value

undo rip metricin
View
Interface view
2-16
Parameter
value: Additional route metric added when receiving a packet, ranging from 0 to 16. By
default, the value is 0.
Description
Use the rip metricin command to configure the additional route metric added to the
route when an interface receives RIP packets.
Use the undo rip metricin command to restore the default value of this additional route
metric.
This command is valid for the routes distributed by the local network and other routes
redistributed by other routes. This command is invalid for the routes redistributed by the
local router.
Related command: rip metricout.
Example
# Specify the additional route metric to 2 when the interface serial1/0/0 receives RIP
packets.
[H3C-serial1/0/0] rip metricin 2
2.1.21 rip metricout
Syntax
rip metricout value [ all-route ]

undo rip metricout
View
Interface view
Parameter
value: Additional route metric added when transmitting a packet, ranging from 1 to 16.
By default, the value is 1.
all-route: Adds the additional route metric to all routes.
Description
Use the rip metricout value command to enable RIP to send routes out the interface
with an additional route metric added. This command applies to routes both locally
learned and learned from other routers.
2-17
Use the rip metricout value all-route command to enable RIP to send routes out the
interface with an additional route metric added. This command applies to locally
redistributed routes in addition to those locally learned and learned from other routers.
Use the undo rip metricout command to restore the default value of this additional
route metric.
The rip metricout value command will override the previously configured rip
metricout value all-route command, if there is any.
Related command: rip metricin.
Example
# Enable RIP to send routes out interface Serial 6/0/0 all with an additional route metric
added.
[H3C-Serial6/0/0] rip metricout 10 all-route
# When RIP sends routes out interface Serial 6/0/0, enable it to add an additional route
metric to the routes both locally learned and learned from other routers.
[H3C-Serial6/0/0] rip metricout 10
# Restore the default additional route metric value.

[H3C-Serial6/0/0] undo rip metricout
2.1.22 rip output
Syntax
rip output
undo rip output
View
Interface view
Parameter
None
Description
Use the rip output command to configure an interface to transmit RIP packets to the
external.
Use the undo rip output command to cancel an interface to transmit RIP packets to
the external.
By default, RIP packets at all interfaces (except loopback interface) can be transmitted.
This command is used in cooperation with the other two commands: rip input and rip
work. Functionally, rip work is equivalent to rip input & rip output. The latter two
2-18
control the receipt and the transmission of RIP packets respectively on an interface.
The former command equals the functional combination of the latter two commands.
Related command: rip input and rip work.
Example
# Disable the interface serial1/0/0 to transmit RIP packets.

[H3C-serial1/0/0] undo rip output
2.1.23 rip split-horizon
Syntax
rip split-horizon
undo rip split-horizon
View
Interface view
Parameter
None
Description
Use the rip split-horizon command to configure an interface to use split horizon when
transmitting RIP packets.
Use the undo rip split-horizon command to configure an interface not to use split
horizon when transmitting RIP packets.
By default, an interface is enabled to use split horizon when transmitting RIP packets.
Normally, split horizon is necessary for reducing routing loops. Only in some special
cases should split horizon be disabled to ensure the correct execution of protocols. For
example, on an NBMA network, you need to disable split horizon on FR-encapsulated
main interfaces and point-to-multipoint subinterfaces to allow an interface to send the
routes learned from those interfaces.
Example
# Specify the interface serial1/0/0 not to use split horizon when processing RIP packets.
[H3C-serial1/0/0] undo rip split-horizon
2-19
2.1.24 rip triggered
Syntax
rip triggered
undo rip triggered
View
Interface view
Parameter
None
Description
Use the rip triggered command to enable trigger RIP (TRIP).

Use the undo rip triggered command to disable TRIP.
TRIP only runs on PPP, frame relay, and X.25.
Routers are used on connection-oriented networks to allow potential connectivity to
many remote destinations. Circuits on the WAN are established on demand and are
relinquished when traffic subsides. Depending on the application, the connection
between any two sites for user data could be short and relatively infrequent.
Periodic updates are suppressed over the interface on which this feature is enabled.
Therefore, you can save money on demand circuit for which you are charged for usage.
Whenever, routing information needs to be exchanged over demand circuits using RIP,
or triggered RIP it should be enabled.
Example
# Enable TRIP.
[H3C] serial 6/0/0
[H3C-Serial6/0/0] rip triggered
2.1.25 rip version
Syntax
rip version { 1| { 2 [ broadcast | multicast ] } }

undo rip version
View
Interface view
2-20
Parameter
1: Interface version is RIP-1.

2: Interface version is RIP-2. By default, multicast is used.
broadcast: Transmission mode of RIP-2 packet is broadcast.
multicast: Transmission mode of RIP-2 packet is multicast.
Description
Use the rip version command to configure the version of RIP packets on an interface.
Use the undo rip version command to restore the default value of RIP packet version
on the interface.
By default, the interface RIP version is RIP-1.
RIP-2 has 2 transmission modes: broadcast and multicast. Multicast is the default
mode. The multicast address in RIP-2 is 224.0.0.9. One of the advantages of multicast
mode is that the hosts that do not run RIP in this network will not receive the broadcast
packets. Additionally, hosts running RIP-1 will be prevented from receiving and
processing the RIP-2 routes with subnet masks.
When the interface specifies the use of RIP-1, only RIP-1 and RIP-2 broadcast packets
will be received. In this case, RIP-2 multicast packets will be rejected. When the
interface is specified to use RIP-2 multicast, only RIP-2 multicast packets and RIP-2
broadcast packets will be received. In this case, RIP-1 packets will be rejected.
Example
# Configure the interface serial1/0/0 as RIP-2 broadcast mode.

[H3C-serial1/0/0] rip version 2 broadcast
2.1.26 rip work
Syntax
rip work
undo rip work
View
Interface view
Parameter
None
2-21
Description
Use the rip work command to enable the running of RIP on an interface.
Use the undo rip work command to disable the running of RIP on an interface.
By default, RIP is run on an interface.
This command is used in cooperation with rip input, rip output and network
commands.
Related command: network, rip input, and rip output.
Example
# Disable the interface serial1/0/0 to run the RIP.

[H3C-serial1/0/0] undo rip work
2.1.27 summary
Syntax
summary
undo summary
View
RIP view
Parameter
None
Description
Use the summary command to enable RIP-2 automatic route summarization.

Use the undo summary command to disable RIP-2 automatic route summarization.
By default, RIP-2 route summarization is enabled.
Route aggregation can be performed to reduce the routing traffic on the network as well
as to reduce the size of the routing table. If RIP-2 is used, route summarization function
can be disabled with the undo summary command, when it is necessary to broadcast
the subnet route.
RIP-1 does not support subnet mask. Forwarding subnet route may cause ambiguity.
Therefore, RIP-1 uses route summarization all the time. The undo summary
command is invalid for RIP-1.
Related command: rip version.
2-22
Example
# Set RIP version on the interface serial1/0/0 as RIP-2 and disable the route
summarization function.
[H3C-serial1/0/0] rip version 2
[H3C-serial1/0/0] quit
[H3C] rip
[H3C-rip] undo summary
2.1.28 timers
Syntax
timers { update update-timer-length | timeout timeout-timer-length } *

undo timers { update | timeout } *
View
RIP view
Parameter
update-timer-length: Period update value, measured in seconds ranging from 1 to 3600.

timeout-timer-length: Timeout value, measured in seconds ranging from 1 to 3600. The
default value is 180 seconds.
Description
Use the timers command to modify value for the three timers, Period update, Timeout
and Garbage-collection, of RIP.
Use the undo timers command to restore the default setting.
The default values of timer Period update, Timeout and Garbage-collection are
respectively 30s, 180s and 120s.
Usually, the timing length of timer Garbage-collection is fixedly 3 times longer than that
of timer Period update. However, in practice, an unreachable route will not be
completely deleted until the fourth update packet sent from the same neighbor is
received. So the actual timing length of timer Garbage-collection is as 3 to 4 times as
that of timer Period update. Additionally, the modification on timer Period update will
affect timer Garbage-collection.
The modified value of RIP timers will take effect immediately.
Related command: display rip.
2-23
Example
# Set timer Period update to 10 seconds and timer Timeout to 30 seconds.

[H3C] rip
[H3C-rip] timers update 10 timeout 30
2.1.29 traffic-share-across-interface
Syntax
traffic-share-across-interface
undo traffic-share-across-interface
View
RIP protocol view, RIP MBGP address family view
Parameter
None
Description
Use the traffic-share-across-interface command to enable RIP to distribute traffic

equally on multiple interfaces using equal-cost routes.
Use the undo traffic-share-across-interface command to disable traffic sharing
across interfaces.
By default, traffic sharing across RIP interfaces is disabled.
Example
# Enable RIP traffic sharing across interfaces.

[H3C-rip] traffic-share-across-interface
2.1.30 validate-source-address
Syntax
validate-source-address
undo validate-source-address
View
RIP protocol view, RIP MBGP address family view
Parameter
None
2-24
Description
Use the validate-source-address command to enable checking of the source address

of a RIP packet upon reception.
Use the undo validate-source-address command to cancel checking of the source
address of a RIP packet. With the source address of a RIP packet not checked,
indirectly connected RIP routes can be exchanged. This command applies to the RIP
protocol both running in public networks and private networks in a MPLS VPN.
By default, the source address of a RIP packet is checked.
Example
# Configure not to check the source address of a RIP packet received.

[H3C-rip] undo validate-source-address
# Configure not to check the source address of a RIP packet received.

[H3C-rip] ipv4-family vpn-instance H3C
[H3C-rip-af-vpn-instance] undo validate-source-address
2-25
Comware V3 Chapter 3 OSPF Configuration Commands
Chapter 3 OSPF Configuration Commands
3.1 OSPF Configuration Commands

3.1.1 abr-summary
Syntax
abr-summary ip-address mask [ advertise | not-advertise ]

undo abr-summary ip-address mask
View
OSPF area view
Parameter
ip-address: Network segment address.

mask: Network mask.
Advertise: Advertises only the summarized route.
Notadvertise: Suppresses the advertisement of the routes in the matched range.
Description
Use the abr-summary command to configure the route aggregation on the area border
router (ABR).
Use the undo abr-summary command to cancel the function of route aggregation on
the area border router.
By default, the area border router doesn’t aggregate routes.
This command is applicable only to the ABR and is used for the route aggregation in an
area. The ABR only transmits an aggregated route to other areas. Route aggregation
refers to that the routing information is processed in the ABR and for each network
segment configured with route aggregation, there is only one route transmitted to other
areas. An area can configure multiple aggregation network segments. Thus OSPF can
aggregate various network segments together.
Example
# Aggregate the routes in the two network segments, 36.42.10.0 and 36.42.110.0, of
OSPF area 1 into one route 36.42.0.0 and transmit it to other areas.
[H3C-ospf-1] area 1
[H3C-ospf-1-area-0.0.0.1] network 36.42.10.0 0.0.0.255
3-1
[H3C-ospf-1-area-0.0.0.1] abr-summary 36.42.0.0 255.255.0.0
3.1.2 area
Syntax
area area-id
undo area area-id
View
OSPF view, OSPF area view
Parameter
area-id: ID of the OSPF area, which can be a decimal integer (ranging from 0 to
4294967295) or in IP address format.
Description
Use the area command to enter OSPF area view.

Use the undo area command to cancel the designated area.
Example
# Enter area 0 view.

[H3C-ospf-1] area 0
[H3C-ospf-1-area-0.0.0.0]
3.1.3 asbr-summary
Syntax
asbr-summary ip-address mask [ not-advertise | tag tag-value ]

undo asbr-summary ip-address mask
View
OSPF view
Parameter
ip-address: Matched IP address in dotted decimal notation.

mask: IP address mask in dotted decimal notation.
not-advertise: Not advertises routes matching the specified IP address and mask.
Aggregated route will be advertised without this parameter.
tag-value: Control advertisement of routes via Route-policy. It is in the range from 0 to
4294967295. If it is not specified, it is 1 by default.
3-2
Description
Use the asbr-summary command to configure summarization of redistributed routes

by OSPF.
Use the undo asbr-summary command to cancel the summarization.
By default, summarization of redistributed routes is disabled.
After the summarization of redistributed routes is configured, if the local router is an
autonomous system border router (ASBR), this command summarizes the
redistributed Type-5 LSAs in the summary address range. When NSSA is configured,
this command will also summarize the redistributed Type-7 LSAs in the summary
address range.
If the local router acts as both an ABR and a switch router in the NSSA, this command
summarizes Type-5 LSAs transformed from Type-7 LSAs. If the router is not the router
in the NSSA, the summarization is disabled.
Related command: display ospf asbr-summary.
Example
# Set summarization of H3C redistributed routes.

[H3C-ospf-1] asbr-summary 10.2.0.0 255.255.0.0 not-advertise
3.1.4 authentication-mode
Syntax
authentication-mode { simple | md5 }

undo authentication-mode
View
OSPF area view
Parameter
simple: Simple text authentication mode.

md5: MD5 cipher text authentication mode.
Description
Use the authentication-mode command to configure one area of OSPF to support the
authentication attribute.
Use the undo authentication-mode command to cancel the authentication attribute of
this area.
By default, an area does not support authentication attribute.
3-3
All the routers in one area must use the same authentication mode (no authentication,
supporting simple text authentication or MD5 cipher text authentication). If the mode of
supporting authentication is configured, all routers on the same segment must use the
same authentication key. To configure a simple text authentication key, use the ospf
authentication-mode simple command. And, use the ospf authentication-mode
md5 command to configure the MD5 cipher text authentication key if the area is
configured to support MD5 cipher text authentication mode.
Related command: ospf authentication-mode.
Example
# Enter area 0 view.

[H3C-ospf-1] area 0
# Specify the OSPF area 0 to support MD5 cipher text authentication.

[H3C-ospf-1-area-0.0.0.0] authentication-mode md5
3.1.5 debugging ospf
Syntax
debugging ospf [ process-id ] { event | { packet [ ack | dd | hello | interface type num
| request | update ] } | lsa-generate | spf | te }
undo debugging ospf [ process-id ] { event | { packet [ ack | dd | hello | interface type
num | request | update ] } | lsa-generate | spf | te }
View
User view
Parameter
interface type num: Type and number of the interface.

process-id: OSPF process number. If no process number is specified, all the process
debugging is enabled or disabled.
event: Enables OSPF event information debugging.
packet: Enables OSPF packet information debugging. There are five sorts of packets
in OSPF as follows:
ack: LSAck packet.
dd: Database Description packet.
hello: Hello message.
request: Link State Request packet.
update: Link State Update packet.
Lsa-generate: Enables OSPF LSA packet information debugging.
3-4
spf: Enables the debugging of the calculation of the OSPF shortest-path tree.
te: Enables the debugging of OSPF TE.
Description
Use the debugging ospf command to enable OSPF debugging.

Use the undo debugging ospf command to disable the function.
In OSPF multi-process, using debugging command, you can enable the debugging of
all the process simultaneously or one of the processes only.
If no process number is specified in the debugging command, the command is valid to
all the processes. And it keeps the state during the router running period no matter
OSPF process exits or not. In this way, the execution of this command will
enable/disable each enabled OSPF debugging. At the same time, the debugging
specified by this command will be enabled automatically when new OSPF is enabled.
If there is a specified process number in the debugging command, only the specified
process is debugged. The configuration command is invalid if OSPF is not enabled.
And the debugging state will not be kept after exiting the process, either.
If you do not define the interface parameter in the debugging command, the system
displays the debugging information of all the interfaces. If you define the parameter, the
system only displays the debugging information of the specified interface.
Related command: display debugging ospf.
Example
# Enable the information debugging of OSPF packets.

<H3C> debugging ospf packet
3.1.6 default cost
Syntax
default cost value

undo default cost
View
OSPF view
Parameter
value: Default routing cost of external route redistributed by OSPF, ranging from 0 to
16777214. By default, its value is 1.
3-5
Description
Use the default cost command to configure the default cost for OSPF to redistribute
external routes.
Use the undo default cost command to restore the default value of the default routing
cost configured for OSPF to redistribute external routes.
Since OSPF can redistribute external routing information and propagate it to the entire
autonomous system, it is necessary to specify the default routing cost for the protocol
to redistribute external routes.
If multiple OSPFs are enabled, the command is valid to this process only.
Example
# Specify the default routing cost for OSPF to redistribute external routes as 10.
[H3C-ospf-1] default cost 10
3.1.7 default interval
Syntax
default interval seconds

undo default interval
View
OSPF view
Parameter
seconds: Default interval for redistributing external routes. Its unit is second and the
value ranges from 1 to 2147483647. By default, the interval for OSPF to redistribute
external routes is 1 second.
Description
Use the default interval command to configure the default interval for OSPF to
redistribute external routes.
Use the undo default interval command to restore the default value of the default
interval of redistributing external routes.
Because OSPF can redistribute the external routing information and broadcast it to the
entire autonomous system, it is necessary to specify the default interval for the protocol
to redistribute external routes.
Example
# Specify the default interval for OSPF to redistribute external routes as 10 seconds.
[H3C-ospf-1] default interval 10
3-6
3.1.8 default limit
Syntax
default limit routes

undo default limit
View
OSPF view
Parameter
routes: Default value to the redistributed external routes in a unit time, ranging from 200
to 2147483647. By default, the value is 1000.
Description
Use the default limit command to configure default value of maximum number of
redistributed routes.
Use the undo default limit command to restore the default value.
OSPF can redistribute external route information and broadcast them to the whole
autonomous system, so it is necessary to regulate the default value of external route
information redistributed in one process.
Related command: default interval.
Example
# Specify the default value of OSPF redistributing external routes as 200.

[H3C-ospf-1] default limit 200
3.1.9 default tag
Syntax
default tag tag

undo default tag
View
OSPF view
Parameter
tag: Default tag, ranging from 0 to 4294967295 and defaulting to 1.
3-7
Description
Use the default tag command to configure the default tag of OSPF when it
redistributes an external route.
Use the undo default tag command to restore the default tag of OSPF when it
redistributes the external route.
When OSPF redistributes a route found by other routing protocols in the router and
uses it as the external routing information of its own autonomous system, some
additional parameters are required, including the default cost and the default tag of the
route.
Related command: default type.
Example
# Set the default tag of OSPF redistributed external route of the autonomous system as
10.
[H3C-ospf-1] default tag 10
3.1.10 default type
Syntax
default type { 1 | 2 }
undo default type
View
OSPF view
Parameter
type 1: External routes of type 1.

type 2: External routes of type 2.
Description
Use the default type command to configure the default type when OSPF redistributes
external routes.
Use the undo default type command to restore the default type when OSPF
redistributes external routes.
By default, the external routes of type 2 are redistributed.
OSPF specifies the two types of external routing information. The command described
in this section can be used to specify the default type when external routes are
redistributed.
Related command: default tag.
3-8
Example
# Specify the default type as type 1 when OSPF redistributes an external route.
[H3C-ospf-1] default type 1
3.1.11 default-cost
Syntax
default-cost value
undo default-cost
View
OSPF area view
Parameter
value: Specifies the cost value of the default route transmitted by OSPF to the STUB or
NSSA area, ranging from 0 to 16777214. The default value is 1.
Description
Use the default-cost command to configure the cost of the default route transmitted by
OSPF to the STUB or NSSA area.
Use the undo default-cost command to restore the cost of the default route
transmitted by OSPF to the STUB or NSSA area to the default value.
This command is applicable for the border routers connected to STUB or NSSA area.
The stub and default-cost commands are necessary in configuring STUB area. All the
routers connected to STUB area must use stub command to configure the stub
attribute to this area. Use the default-cost command to specify the cost of the default
route transmitted by ABR to STUB or NSSA area.
This command is only valid for this process if multiple OSPF processes are enabled.
Related command: stub and nssa.
Example
# Set the area 1 as the STUB area and the cost of the default route transmitted to this
STUB area to 60.
[H3C-ospf-1] area 1
[H3C-ospf-1-area-0.0.0.1] stub
[H3C-ospf-1-area-0.0.0.1] default-cost 60
3-9
3.1.12 default-route-advertise
Syntax
default-route-advertise [ always ] [ cost cost-value ] [ type type-value ]

[ route-policy route-policy-name ]
undo default-route-advertise [ always ] [ cost ] [ type ] [ route-policy ]
View
OSPF view
Parameter
always: If the parameter is selected, a default route which is advertised via LSAs will be
generated no matter whether there is a default route in the routing table. For the ASBR
in an general area, the default route is advertised via Type-5 LSA, while in NSSA, the
default route is advertised via Type-7 LSA.
cost-value: Cost value of this LSA. The cost-value ranges from 0 to 16777214. The
default value is 1.
type-value: Cost type of this LSA. It ranges from 1 to 2. The default value is 2.
route-policy-name: If the default route matches the route-policy specified by
route-policy-name, route-policy will affect the value in LSA. The length of
route-policy-name parameter ranges from 1 to 19 character.
Description
Use the default-route-advertise command to make the system generate a default

route to OSPF area.
Use the undo default-route-advertise command to cancel the generating of default
route.
By default, OSPF does not generate default route.
Use the default-route-advertise command at ABR to generate a default route which is
advertised via the Type-5 LSA or Type-7 LSA no matter whether there is a default route
in the routing table.
An OSPF router after the default-route-advertise command is executed will become
an ASBR, as is similar to executing the import-route command on an OSPF router.
But you cannot redistribute the default route into the OSPF area with the import-route
command.
In addition, the default-route-advertise command is not available for the Stub area.
For the ABR or ASBR in NSSA, the default-route-advertise command is equivalent to
the nssa default-route-advertise command in terms of effect.
This command is valid for the current process only if multiple OSPF processes are
enabled.
3-10
Related command: import-route and nssa.
Example
# If local route has default route, the LSA of default route will be generated, otherwise it
won’t be generated.
[H3C-ospf-1] default-route-advertise
# The LSA of default route will be generated and advertised to OSPF route area even
the local router has no default route.
[H3C-ospf-1] default-route-advertise always
3.1.13 display debugging ospf
Syntax
display debugging ospf
View
Any view
Description
Use the display debugging ospf command to view the state of the debug switches for
each OSPF process.
Related command: debugging ospf.
Example
# View the global OSPF debugging state and each process debugging state.
<H3C> display debugging ospf
OSPF process 1 debugging state:
OSPF SPF debugging switch is on
OSPF EVENT debugging switch is on
OSPF LSA debugging switch is on
Table 3-1 Description on the fields of the display debugging ospf command
Field Description
The state of the debug switches for
OSPF process 1 debugging state:
OSPF process 1 is displayed.
OSPF SPF debugging switch is on OSPF SPF debug switch is turned on.
OSPF EVENT debugging switch is on OSPF event debug switch is turned on.
OSPF LSA debugging switch is on OSPF LSA debug switch is turned on.
3-11
3.1.14 display ospf abr-asbr
Syntax
display ospf [ process-id ] abr-asbr
View
Any view
Parameter
process-id: OSPF process ID. If no process ID is specified, the command takes effect
on all OSPF processes.
Description
Use the display ospf abr-asbr command to view information on the routes to the Area
Border Router (ABR) and Autonomous System Border Router (ASBR) of OSPF.
Example
# Display the information of the OSPF ABR and ASBR.

<H3C> display ospf abr-asbr
OSPF Process 1 with Router ID 1.1.1.1
Routing Table to ABR and ASBR
I = Intra i = Inter A = ASBR B = ABR S = SumASBR
Destination Area Cost Nexthop Interface
IA 2.2.2.2 0.0.0.0 10 10.153.17.89 ethernet0/0/0
Table 3-2 Description on the fields of the display ospf abr-asbr command
Field Description
Destination Router ID of ABR or ASBR
The area to which both this router and the ABR or the
Area
ASBR is connected
Cost Route cost
Nexthop Next hop address
Interface Output interface of this router
3.1.15 display ospf asbr-summary
Syntax
display ospf [ process-id ] asbr-summary [ ip-address mask ]
3-12
View
Any view
Parameter
ip-address: Matched IP address, in dotted decimal notation.
mask: IP address mask in dotted decimal notation.
Description
Use the display ospf asbr-summary command to view summary about the
redistributed routes of OSPF.
If the parameters are not configured, the summary information of all redistributed routes
will be viewed.
Related command: asbr-summary.
Example
# Display the summary information of all OSPF redistributed routes.

<H3C> display ospf asbr-summary
The Count of Route is 0 OSPF Process 1 with Router ID 1.1.1.1
Summary Addresses
Total summary address count: 2
Summary Address
net : 168.10.0.0
mask : 255.254.0.0
tag : 1
status : Advertise
The Count of Route is 0
Summary Address
net : 1.1.0.0
mask : 255.255.0.0
tag : 100
status : DoNotAdvertise
The Count of Route is 0
3-13
Table 3-3 Description on the fields of the display ospf asbr-summary command
Field Description
net Destination segment
mask Mask
tag Tag
State information. Two values are available:
DoNotAdvertise: The summary route destined to this network segment
status is not to be advertised.
Advertise: The summary route destined to this network segment is to
be advertised.
3.1.16 display ospf brief
Syntax
display ospf [ process-id ] brief
View
Any view
Parameter
process-id: Process ID of OSPF. If no process ID is specified, this command displays

the main information of all OSPF processes in configuration sequence.
Description
Use the display ospf brief command to view the summary of OSPF.
Example
# Display the OSPF summary.

<H3C> display ospf brief
Area Count: 0 Nssa Area Count: 0 OSPF Process 1 with Router ID 10.110.95.189
OSPF Protocol Information
RouterID: 10.110.95.189 Border Router: Area AS
spf-schedule-interval: 5
Routing preference: Inter/Intra: 10 External: 150
Default ASE parameters: Metric: 1 Tag: 0.0.0.1 Type: 2
SPF computation count: 16
Area Count: 1 Nssa Area Count: 0
Area 0.0.0.0:
Authtype: none Flags: <>
3-14
SPF scheduled: <>

Interface: 201.1.1.4 (Vlan-interface1)
Cost: 1 State: DR Type: Broadcast
Priority: 1
Designated Router: 201.1.1.4
Backup Designated Router: 201.1.1.3
Timers: Hello 10, Dead 40, Poll 0, Retransmit 5, Transmit Delay 1
Table 3-4 Description on the fields of the display ospf brief command
Field Description
RouterID Router ID of this router
The knowledge that this router has about the ABRs
Border Router
and ASBRs connected to this area
spf-schedule-interval SPF calculation interval
Authtype OSPF authentication type
OSPF routing preference.
For OSPF internal routes (including intra-area and
Routing preference inter-area routes), the default routing preference is 10.
For OSPF external routes, the default routing
preference is 150.
The default metric, type, type and other parameter
Default ASE parameters
values for the redistributed external routes
SPF computation count Number of SPF calculations since OSPF is enabled
Area Count The areas connected to this router
Nssa Area Count Number of NSSA areas
SPF scheduled SPF calculation time sequence (tag)

Interface Name of the interface belonging to this area
Cost Route cost
State State information

Type Network type of the OSPF interface
Priority Priority
Designated Router The IP address of the DR
Backup Designated
The IP address of the BDR
Router
3-15
Field Description
OSPF timers:
Hello: specifies the hello interval.
Timers Dead: specifies the neighbor dead interval
Poll: specifies the polling interval
Retransmit: specifies LSA retransmission interval
Transmit Delay LSA transmission delay on the interface
3.1.17 display ospf cumulative
Syntax
display ospf [ process-id ] cumulative
View
Any view
Parameter
Description
Use the display ospf cumulative command to view the OSPF cumulative information.
Example
# Display the OSPF cumulative information.

<H3C> display ospf cumulative
Intra Area: 6 Inter Area: 0 ASE: 0 OSPF Process 1 with Router ID 1.1.1.1
Cumulations
IO Statistics
Type Input Output
Hello 225 437
DB Description 78 86
Link-State Req 18 18
Link-State Update 48 53
Link-State Ack 25 21
ASE: 1 Checksum Sum: FCAF
LSAs originated by this router
Router: 50 SumNet: 40 SumASB: 2
LSAs Originated: 92 LSAs Received: 33
Area 0.0.0.0:
3-16
Neighbors: 1 Interfaces: 1
Spf: 54 Checksum Sum F020
rtr: 2 net: 0 sumasb: 0 sumnet: 1
Area 0.0.0.1:
Neighbors: 0 Interfaces: 1
Spf: 19 Checksum Sum 14EAD
rtr: 1 net: 0 sumasb: 1 sumnet: 1
Routing Table:
Intra Area: 2 Inter Area: 0 ASE: 1
Table 3-5 Description on the fields of the display ospf cumulative command
Field Description
Type Type of input and output OSPF packets
IO Statistics Input Number of the received packets
Output Number of the sent packets
ASE Sum of ASE LSAs
checksum sum Checksum of ASE LSA

originated Number of self-generated LSAs
LSAs Number of the LSAs received from
received
other routers
Router Number of Router LSAs
SumNet Number of Sumnet LSAs

SumASB Number of SumASB LSAs
Neighbors Number of the neighbors in this area
Interfaces Number of the interfaces in this area
Area Number of the SPF calculations in this
Spf
area
rtr, net, sumasb, sumnet Number of LSAs of each type

Intra Area Number of intra-area routes
Routing
Inter Area Number of inter-area routes
Table
ASE Number of external routes
3.1.18 display ospf error
Syntax
display ospf [ process-id ] error
3-17
View
Any view
Parameter
Description
Use the display ospf error command to view the statistics of error information which
OSPF received.
Example
# Display the statistics of error information which OSPF received .

<H3C> display ospf error
0: TE LSA : absence of (sub)TLV OSPF Process 1 with Router ID 1.1.1.1
OSPF packet error statistics:
0: IP: received my own packet 0: OSPF: wrong packet type
0: OSPF: wrong version 0: OSPF: wrong checksum
0: OSPF: wrong area id 0: OSPF: area mismatch
0: OSPF: wrong virtual link 0: OSPF: wrong authentication type
0: OSPF: wrong authentication key 0: OSPF: too small packet
0: OSPF: packet size > ip length 0: OSPF: transmit error
0: OSPF: interface down 0: OSPF: unknown neighbor
0: HELLO: netmask mismatch 0: HELLO: hello timer mismatch
0: HELLO: dead timer mismatch 0: HELLO: extern option mismatch
0: HELLO: router id confusion 0: HELLO: virtual neighbor unknown
0: HELLO: NBMA neighbor unknown 0: DD: neighbor state low
0: DD: router id confusion 0: DD: extern option mismatch
0: DD: unknown LSA type 0: LS ACK: neighbor state low
0: LS ACK: wrong ack 0: LS ACK: duplicate ack
0: LS ACK: unknown LSA type 0: LS REQ: neighbor state low
0: LS REQ: empty request 0: LS REQ: wrong request
0: LS UPD: neighbor state low 0: LS UPD: newer self-generate LSA
0: LS UPD: LSA checksum wrong 0: LS UPD: received less recent LSA
0: LS UPD: unknown LSA type 0: OSPF routing: next hop not exist
0: DD: MTU option mismatch 0: ROUTETYPE: wrong type value
Table 3-6 Description on the fields of the display ospf error command
Field Description
IP: received my own packet The received packet was sent from myself.
OSPF: wrong packet type OSPF packet type error
3-18
Field Description
OSPF: wrong version OSPF version error
OSPF: wrong checksum OSPF checksum error
OSPF: wrong area id OSPF area ID error
OSPF: area mismatch OSPF area mismatch
OSPF: wrong virtual link OSPF virtual link error
OSPF: wrong authentication type OSPF authentication type error
OSPF: wrong authentication key OSPF authentication key error
OSPF: too small packet OSPF packet too small
OSPF: packet size > ip length OSPF packet size exceeds IP packet length
OSPF: transmit error OSPF transmission error
OSPF: interface down OSPF interface is down and thus unavailable
OSPF: unknown neighbor The OSPF neighbor is unknown
HELLO: netmask mismatch Network mask mismatch
Interval for sending Hello packets is
HELLO: hello timer mismatch
mismatched
Interval for sending neighbor dead packets is
HELLO: dead timer mismatch
mismatched
The Extern option in the Hello packet is
HELLO: extern option mismatch
mismatched
Hello packet: the Router ID in the Hello
HELLO: router id confusion
packet is not unique
HELLO: virtual neighbor unknown Hello packet: unknown virtual neighbor
HELLO: NBMA neighbor unknown Hello packet: unknown NBMA neighbor
Database description (DD) packet: neighbor
DD: neighbor state low
state is not synchronized.
DD: unknown LSA type DD packet: unknown LSA type
Link state acknowledgment (LS ACK) packet:
LS ACK: neighbor state low
states of neighbors are not synchronized.
Link state acknowledgment packet: ACK
LS ACK: wrong ack
error
Link state acknowledgment packet:
LS ACK: duplicate ack
duplicated ACK
Link state acknowledgment packet: unknown
LS ACK: unknown LSA type
LSA type
LS REQ: neighbor state low Link state request (LS REQ) packet
LS REQ: empty request Link state request packet: empty request
3-19
Field Description
LS REQ: wrong request Link state request packet: erroneous request
Link state update packet: The states of
LS UPD: neighbor state low
neighbors are synchronized.
Link state update packet: newer LSA
LS UPD: newer self-generate LSA
generated by itself
Link state update packet: LSA checksum
LS UPD: LSA checksum wrong
error
Link state update packet: received less
LS UPD: received less recent LSA
recent LSA
LS UPD: unknown LSA type Link state update packet: unknown LSA type
OSPF routing: next hop not exist Next hop of OSPF routing does not exist
DD: MTU option mismatch MTU option of DD packet is mismatched
ROUTETYPE: wrong type value Route type: the value of the type is wrong
3.1.19 display ospf interface
Syntax
display ospf [ process-id ] interface [ interface-type interface-number ]
View
Any view
Parameter
Description
Use the display ospf interface command to view the OSPF interface information.
Example
# Display the OSPF ethernet2/0/0 interface information.

<H3C> display ospf interface ethernet2/0/0
Interfaces
Area: 0.0.0.0
IP Address Type State Cost Pri DR BDR
3-20
10.0.0.2 Bcast BackupDR 1 1 10.1.1.1 10.0.0.2

80.0.0.1 NBMA DR 1562 1 80.0.0.1 None
Area: 0.0.0.1
IP Address Type State Cost Pri DR BDR
60.0.0.1 NBMA DR 1562 1 60.0.0.1 None
90.0.0.1 NBMA DR 1562 1 90.0.0.1 None OSPF Process
1 with Router ID 1.1.1.1
Interfaces
Interface: 10.110.10.2 (Ethernet0/0/0)
Cost: 1 State: BackupDR Type: Broadcast
Priority: 1
Designated Router: 10.110.10.1
Backup Designated Router: 10.110.10.2
Table 3-7 Description on the fields of the display ospf interface command
Field Description
Cost Cost of the interface
State State of the interface state machine

Type OSPF network type on the interface
Priority Priority of the interface for DR election in its network
Designated Router DR on the network in which the interface resides

Backup Designated Router BDR on the network in which the interface resides
OSPF timers, defined as follows:
Hello Specifies the hello interval
Dead Specifies the neighbor dead interval
Timers
Poll Specifies the polling interval
Specifies the interval for LSA
Retransmit
retransmission
3.1.20 display ospf lsdb
Syntax
display ospf [ process-id ] [ area-id ] lsdb [ brief | asbr | ase | network | nssa |
opaque { area-local | as | link-local } | router | summary ] [ ip-address ]
[ originate-router ip-address ] [ self-originate ]
3-21
View
Any view
Parameter
area-id: Area ID, a decimal integer in the range 0 to 4294967295, or an IP address.
brief: Brief database information.
asbr: Database information of Type-4 LSA (summary-Asbr-LSA).
ase: Database information of Type-5 LSA (AS-external-LSA).
network: Database information of Type-2 LSA (Network-LSA).
nssa: Database information of Type-7 LSA (NSSA-external-LSA)
opaque: Database information of Opaque LSA.
area-local: Database information of Type-10 Opaque-LSA.
as: Database information of Type-11 Opaque-LSA.
link-local: Database information of Type-9 Opaque-LSA.
router: Database information of Type-1 LSA (Router-LSA)
summary: Database information of Type-3 LSA (Summary-Net-LSA)
ip-address: Link state ID in IP address format.
originate-router ip-address: IP address of the router advertising LSA packet.
self-originate: Database information of self-originated LSA generated by local router..
Description
Use the display ospf lsdb command to view the database information about OSPF
connecting state.
Example
# Display the LSDB of OSPF.

<H3C> display ospf lsdb
Link State Database
Area: 0.0.0.0
Type LinkState ID AdvRouter Age Len Sequence Metric Where
Rtr 2.2.2.2 2.2.2.2 465 36 8000000c 0 SpfTree
Rtr 1.1.1.1 1.1.1.1 449 36 80000004 0 SpfTree
Net 10.153.17.89 2.2.2.2 465 32 80000004 0 SpfTree
SNet 10.153.18.0 1.1.1.1 355 28 80000003 10 Inter List
Area: 0.0.0.1
3-22

Rtr 1.1.1.1 1.1.1.1 449 36 80000004 0 SpfTree
Rtr 3.3.3.3 3.3.3.3 429 36 8000000a 0 Clist
Net 10.153.18.89 3.3.3.3 429 32 80000003 0 SpfTree
SNet 10.153.17.0 1.1.1.1 355 28 80000003 10 Inter List
ASB 2.2.2.2 1.1.1.1 355 28 80000003 10 SumAsb List
AS External Database:
ASE 10.153.18.0 1.1.1.1 1006 36 80000002 1 Ase List
ASE 10.153.16.0 2.2.2.2 798 36 80000002 1 Uninitialized
ASE 10.153.17.0 2.2.2.2 623 36 80000003 1 Uninitialized
ASE 10.153.17.0 1.1.1.1 1188 36 80000002 1 Ase List
Table 3-8 Description on the fields of the display ospf lsdb command
Field Description
Type Type of the LSA
LinkStateID Link state ID of the LSA

AdvRouter Router ID of the router originating the LSA
Age Age of the LSA
Len Length of the LSA

Sequence Sequence number of the LSA
Metric Cost from the router advertising the LSA to LSA destination
Where Location of the LSA
<H3C> display ospf lsdb ase

Link State Data Base
type : ASE
ls id : 2.2.0.0
adv rtr: 1.1.1.1
ls age: 349
len: 36
seq#: 80000001
chksum: 0xfcaf
Options: (DC)
Net mask:255.255.0.0
Tos 0 metric: 1
E type : 2
Forwarding Address: 0.0.0.0
Tag: 1
3-23
Table 3-9 Description on the fields of the display ospf lsdb ase command
Field Description
type Type of the LSA
ls id Link state ID of the LSA
adv rtr Router ID of the router originating the LSA
ls age Age of the LSA in seconds
len Length of the LSA
seq# Sequence number of the LSA
chksum Checksum of the LSA
Options Options of the LSA
Net mask Network mask
E type Type of external route
Forwarding Address Forwarding address
Tag Tag
3.1.21 display ospf memory
Syntax
display ospf memory
View
Any view
Parameter
None
Description
Use the display ospf memory command to view memory occupation status for LSAs.
Example
# Display memory occupation status for LSAs.

<H3C> display ospf memory
LSDB Memory
ASE LSA - count: 0, memory: 0 byte
Area: 0.0.0.0
Router LSA - count: 1, memory: 260 byte
3-24
Network LSA - count: 0, memory: 0 byte

Network summary LSA - count: 0, memory: 0 byte
ASBR summary LSA - count: 0, memory: 0 byte
Area: 0.0.0.1
Router LSA - count: 1, memory: 260 byte
Network LSA - count: 0, memory: 0 byte
Network summary LSA - count: 0, memory: 0 byte
ASBR summary LSA - count: 0, memory: 0 byte
Total: 520 byte
3.1.22 display ospf nexthop
Syntax
display ospf [ process-id ] nexthop
View
Any view
Parameter
Description
Use the display ospf nexthop command to view the information about the next-hop
Example
# Display the OSPF next-hop information.

<H3C> display ospf nexthop
Next hops:
Address Type Refcount Intf Addr Intf Name
----------------------------------------------------------------------
10.0.0.2 Direct 3 10.0.0.2 Ethernet0/0/1
10.1.1.1 Neighbor 6 10.0.0.2 Ethernet0/0/1
60.0.0.1 Direct 3 60.0.0.1 Dialer0
80.0.0.1 Direct 3 80.0.0.1 Dialer1
90.0.0.1 Direct 3 90.0.0.1 Dialer3
3-25
Table 3-10 Description on the fields of the display ospf nexthop command
Field Description
Address Next hop address
Type Type of the next hop
Reference count of the next hop, that is, the number of the
Refcount
routes using this address as the next hop
Intf Addr The IP address of the outgoing interface to the next hop
Intf Name The outgoing interface to the next hop
3.1.23 display ospf peer
Syntax
display ospf [ process-id ] peer [ brief ]
View
Any view
Parameter
brief: Brief information of neighbors in areas.
Description
Use the display ospf peer command to view the information about the neighbors in
OSPF areas.
Use the display ospf peer brief command to view the brief information of neighbors in
OSPF, mainly the neighbor number at all states in every area.
The display format of OSPF neighbor valid time is different according to the length of
time. Description is as follows:
XXYXXMXXD: More than a year, namely year: month: day
XXXdXXhXXm: More than a day but less than a year, that is, day: hour: minute
XX: XX: XX: Less than a day, namely hour: minute: second
Example
# Display information about OSPF neighbors.

<H3C> display ospf peer
Neighbors
3-26
Area 0.0.0.0 interface 10.153.17.88's neighbor(s)

RouterID: 2.2.2.2 Address: 10.153.17.89
State: Full Mode: Nbr is Master Priority: 1
DR: 10.153.17.89 BDR: 10.153.17.88
Dead timer expires in 31s
Neighbor has been up for 01:14:14
Table 3-11 Description on the fields of the display ospf peer command
Field Description
RouterID Router ID of the neighbor router
Address of the interface, through which the neighbor
Address
router communicates with the router
State State of adjacency
Master/slave mode formed through negotiation during
Mode
DD packet exchange
Priority Priority of the neighbor in DR/BDR election
DR IP address of the interface of elected DR
BDR IP address of the interface of elected BDR

Dead timer expires in 31s Remaining time before the neighbor is considered dead
Neighbor has been up for
Duration of the neighbor connection
01:14:14
# Display brief information about OSPF neighbors.

<H3C> display ospf peer brief
Neighbor Statistics
Area ID Down Attempt Init 2-Way ExStart Exchange Loading Full Total
0.0.0.0 0 0 0 0 0 0 0 1 1
0.0.0.1 0 0 0 0 0 0 0 1 1
Total 0 0 0 0 0 0 0 2 2
Table 3-12 Description on the fields of the display ospf peer brief command
Field Description
Area ID Area ID
Initial state of a neighbor conversation. It
Down indicates that there has been no recent information received from the
neighbor.
3-27
Field Description
This state is only valid for neighbors attached to NBMA networks,
such as Frame Relay, X.25 and ATM.
Attempt It indicates that the OSPF router does not receive information from
the neighbor router recently, but that an effort should be made to
maintain the contact with the neighbor by sending Hello packets in a
low frequency.
It indicates that the OSPF router has received a Hello packet from the
neighbor router, but does not see the IP address of itself in the Hello
Init
packet. Therefore, a two-way communication has not been
established between the two routers yet.
It indicates that a two-way communication between the OSPF router
and its neighbor has been established.
2-Way
The DR and BDR are selected from the set of neighbors in 2-Way
state or greater.
In this state, the router needs to decide upon the initial DD sequence
ExStart number, ensuring that the link state information it obtains is always up
to date.
In this state, the OSPF router exchanges link state information with its
Exchange
neighbor by sending DD packets.
In this state, the OSPF router sends link state requests to the
Loading neighbor asking for the more recent LSAs that have been discovered
(but not yet received) in the Exchange state.
It indicates that the neighboring routers have synchronized their
Full
LSDBs.
3.1.24 display ospf request-queue
Syntax
display ospf [ process-id ] request-queue
View
Any view
Parameter
Description
Use the display ospf request-queue command to view the information about the
OSPF request-queue.
3-28
Example
# View the information about the OSPF request-queue.

<H3C> display ospf request-queue
The Router's Neighbors is
Interface: 103.169.2.2 Area: 0.0.0.1
LSID:129.11.25.0 AdvRouter:103.160.1.1 Sequence:80000001 Age:201
Interface: 1.1.1.3 Area: 0.0.0.0
Table 3-13 Description on the fields of the display ospf request-queue command
Field Description
Address of the interface, through which the neighbor router
Address
communicate with this router
Interface Address of the interface attached to the network segment
Area OSPF area ID
LSID:1.1.1.3 Link state ID of the LSA

Sequence number of the LSA, used for discovering old and
Sequence
duplicated LSAs
Age Age of the LSA
3.1.25 display ospf retrans-queue
Syntax
display ospf [ process-id ] retrans-queue
View
Any view
Parameter
3-29
Description
Use the display ospf retrans-queue command to view the information about the
OSPF retransmission queue.
Example
# View the information about the OSPF retransmission queue.

<H3C> display ospf retrans-queue
Retransmit List
Interface: 103.169.2.5 Area: 0.0.0.1
Retrans list:
Type: ASE LSID:129.11.77.0 AdvRouter:103.160.1.1
Type: ASE LSID:129.11.108.0 AdvRouter:103.160.1.1
Table 3-14 Description on the fields of the display ospf retrans-queue command
Field Description
Address of the interface, through which the neighbor router
Address
communicates with this router
Interface Address of the interface attached to the network segment
Area OSPF area ID

Type Type of the LSA
LSID Link state ID of the LSA
3.1.26 display ospf routing
Syntax
display ospf [ process-id ] routing
View
Any view
Parameter
3-30
Description
Use the display ospf routing command to view the information about OSPF routing
table.
Example
# View the routing table information related to OSPF.

<H3C> display ospf routing
Routing Tables
Routing for Network
Destination Cost Type NextHop AdvRouter Area
10.110.0.0/16 1 Net 10.110.10.1 1.1.1.1 0
10.10.0.0/16 1 Stub 10.10.0.1 3.3.3.3 0
Total Nets: 2
Intra Area: 2 Inter Area: 0 ASE: 0 NSSA: 0
Table 3-15 Description on the fields of the display ospf routing command
Field Description
Destination Destination network segment
Cost Route cost
Type Type of the route

NextHop Next hop address
AdvRouter Router ID of the router advertising the route
Area Area ID
Intra Area Number of intra-area routes
Inter Area Number of inter-area routes
ASE Number of external routes

NSSA Number of NSSA routes
3.1.27 display ospf vlink
Syntax
display ospf [ process-id ] vlink
View
Any view
3-31
Parameter
Description
Use the display ospf vlink command to view the information about OSPF virtual links.
Example
# View OSPF virtual links information.

<H3C> display ospf vlink
Virtual Links
Virtual-link Neighbor-id -> 2.2.2.2, State: Full
Cost: 0 State: Full Type: Virtual
Transit Area: 0.0.0.2
Table 3-16 Description on the fields of the display ospf vlink command
Field Description
Virtual-link Router ID of the neighbor router at the other end of the virtual
Neighbor-id link
State State
Interface IP address of the local interface on the virtual link
Cost Route cost of the interface
Type Type of the link is virtual.
ID of the transit area that the virtual link passes through. This
Transit Area
area could not be a backbone, stub, or NSSA area
OSPF timers, defined as follows:
Hello Specifies the hello interval
Timers Dead Specifies the neighbor dead interval
Poll Specifies the polling interval
Retransmit Specifies the interval for LSA retransmission
3-32
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } export [ routing-protocol ]

undo filter-policy {acl-number | ip-prefix ip-prefix-name} export [ routing-protocol ]
View
OSPF view
Parameter
acl-number: Access control list number.

ip-prefix-name Name of the address prefix list.
routing-protocol: Protocol advertising the routing information, including direct, isis,
bgp, rip and static at present.
Description
Use the filter-policy export command to configure OSPF to filter the LSAs of
redistributed routes for advertisement.
Use the undo filter-policy export command to cancel the filtering rules that have been
set.
By default, no LSA filtering is performed for any type of route.
In some cases, it may be required that only the routing information meeting some
conditions be advertised. Then, the filter-policy command can be used to configure
the filtering conditions for the routing information to be advertised. Only the routing
information passing the filtration can be advertised.
Related command: acl and ip ip-prefix.
Example
# Configure OSPF to advertise only the routing information permitted by acl 2001.
[H3C-acl-basic-1] rule deny source any
[H3C-ospf] filter-policy 2001 export
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name | gateway prefix-list-name }

import
3-33
undo filter-policy { acl-number | ip-prefix ip-prefix-name | gateway ip-prefix-name }

import
View
OSPF view
Parameter
gateway ip-prefix-name: Name of address prefix list used for filtering the addresses of
the neighboring routers advertising the routing information.
Description
Use the filter-policy import command to configure the OSPF rules of filtering the
routing information received.
Use the undo filter-policy import command to cancel the filtering of the routing
information received.
By default, no filtering of the received routing information is performed.
conditions can be received. Then, the filter-policy command can be used to set the
filtering conditions for the routing information to be advertised. Only the routing
information passed the filtration can be received.
Use the filter-policy import command to filter the routes calculated by OSPF. Only the
filtered routes can be added to the routing table. The filtering can be performed
according to the next hop and destination of the route.
Since OSPF is a dynamic routing protocol based on link state, its routing information
hides in the link state, this command cannot filter the advertised/received routing
information in link state. There is more limitation when using this command in OSPF
than using it in distance vector routing protocol.
This command is valid for this process only if multiple OSPF processes are enabled.
Example
# Filter the received routing information according to the rule defined by the ACL 2002.
[H3C-acl-basic-2002] rule deny source any
[H3C-ospf-1] filter-policy 2002 import
3-34
3.1.30 import-route
Syntax
import-route protocol [ allow-ibgp ] [ cost value ] [ type value ] [ tag value ]

[ route-policy route-policy-name ]
View
OSPF view
Parameter
protocol: Specifies the source routing protocol that can be redistributed. At present, it
includes direct, rip, bgp, isis, static, ospf, ospf-ase, and ospf-nssa.
ospf process-id: Redistributes only the internal routes found by OSPF process-id as
external routing information. If no process number is specified, the OSPF default
process number 1 is used.
ospf-ase process-id: Redistributes only the ASE external routes found by OSPF
process-id as external routing information. If no process number is specified, the OSPF
default process number 1 is used.
ospf-nssa process-id: Redistributes only the NSSA external routes found by OSPF
process-id as external routing information. If no process number is specified, the OSPF
default process number 1 is used.
with cautions.
cost value: Cost of the redistributed routes.
type value: Type of the routes to be redistributed by OSPF. value takes 1 or 2; type 1
represents class 1 external routes, and type 2 (default) represents class 2 external
routes.
tag value: Tags the redistributed routes.
route-policy route-policy-name: Redistributes only the routes matching the specified
Route-policy.
Description
Use the import-route command to redistribute the information of another routing

protocol.
Use the undo import-route command to cancel the redistributed external routing
information.
3-35
For an redistributed class 1 route, its metric equals the metric for this router to reach the
router where the route is advertised plus the cost assigned to the route. For an
redistributed class 2 route, its metric equals the cost assigned to it.
Set the arguments cost, type, and tag at a time instead of setting them using the
command for several times, because the latest configuration will overwrite the previous
one.
By default, the routing information of other protocols is not redistributed.
Example
# Specify an redistributed RIP route as the route of type 2, with the route tag as 33 and
the route cost as 50.
[H3C-ospf-1] import-route rip type 2 tag 33 cost 50
# Specify OSPF process 100 to redistribute the route found by OSPF 160.
[H3C-ospf-100] import-route ospf 160
3.1.31 log-peer-change
Syntax
log-peer-change
undo log-peer-change
View
OSPF view
Parameter
None
Description
Use the log-peer-change command to turn on the OSPF adjacency changes output
switch for the current OSPF process.
Use the undo log-peer-change command to turn off the OSPF adjacency changes
output switch.
By default, OSPF adjacency changes output switch is turned off.
After the OSPF adjacency changes output switch is turned on, OSPF adjacency
changes for the current OSPF process will be output to the configuration terminal until
the switch is turned off.
Example
# Turn on the adjacency changes output switch for OSPF process 1.

[H3C-ospf-1] log-peer-change
3-36
%Apr 12 17:15:08:870 2005 UA02 PHY/2/PHY: Serial4/0/0: change status to down

%Apr 12 17:15:08:970 2005 UA02 IFNET/5/UPDOWN:Line protocol on the interface
Serial4/0/0 is DOWN
%Apr 12 17:15:09:090 2005 UA02 IFNET/5/UPDOWN:PPP IPCP protocol on the

interface Serial4/0/0 is DOWN
%Apr 12 17:15:09:210 2005 UA02 RM/5/RTLOG:OSPF-ADJCHANGE:Process 1,Adjacency
To 1.1.1.1 (Serial4/0/0) from Down to Down
Information about adjacency changes is in boldface.
3.1.32 multi-path-number
Syntax
multi-path-number number
undo multi-path-number
View
OSPF view
Parameter
number: Number of equal-cost routes, in the range 1 to 3. It defaults to 3.
Description
Use the multi-path-number command to configure maximum number of OSPF

equal-cost routes.
Use the undo multi-path-number command to restore the default.
Example
# Set the number of OSPF equal-cost routes to 2.

[H3C-ospf-1] multi-path-number 2
3.1.33 network
Syntax
network ip-address wildcard

undo network ip-address wildcard
View
OSPF area view
3-37
Parameter
ip-address: Address of the network segment where the interface locates.

wildcard: IP address wildcard mask, which is similar to the reversed form of the mask of
IP address. But when configure this parameter to type it as mask of IP address, it could
be translated as wildcard mask by Comware system.
Description
Use the network command to configure the interface running OSPF.

Use the undo network command to cancel the interface running OSPF.
By default, the interface does not belong to any area.
To run the OSPF protocol on one interface, the master IP address of this interface must
be in the range of the network segment specified by this command. If only the slave IP
address of the interface is in the range of the network segment specified by this
command, this interface will not run OSPF protocol.
After OSPF multi-instance is configured, different OSPF processes are bound with
different VPN instances. The network addresses between different processes can be
the same or included. But for the same VPN instance, the network addresses between
different OSPF processes cannot be the same or included. Otherwise, the later
configured command cannot be valid and the following will be displayed: Network
already set in OSPF process xx, that is, if network 10.1.0.0 0.0.255.255 is enabled in
process 100, network 10.1.0.0 0.0.255.255, network 10.1.1.0 0.0.0.255 or network
10.0.0.0 0.255.255.255 will fail to be enabled in other OSPF processes.
Caution:
z OSPF configuration can only enable the interfaces that belong to the same VPN
instance.
z After OSPF is configured multi-instance, if different VPN instances are bound in the
OSPF process, the network addresses between different processes can be the
same or included. But for the same VPN instance, the network addresses between
different OSPF processes cannot be the same or included.
Related command: ospf.
Example
# Specify the interfaces whose master IP addresses are in the segment range of
10.110.36.0 to run the OSPF protocol and specify the number of the OSPF area (where
these interfaces are located) as 6.
3-38
[H3C-ospf] area 6
[H3C-ospf-1-area-0.0.0.6] network 10.110.36.0.0 0.0.0.255
# Enable OSPF process 100 on the router and specify the number of the area where
the interface is located as 2.
[H3C] router id 10.110.1.9
[H3C] ospf 100
[H3C-ospf-100] area 2
# Enable OSPF process 200 on the router and specify the number of the area where
the interface is located as 1.
3.1.34 nssa
Syntax
nssa [ default-route-advertise ] [ no-import-route ] [ no-summary ]

undo nssa
View
OSPF area view
Parameter
default-route-advertise: Only available for the NSSA ABR or ASBR. When using the
parameter at NSSA ABR to generate Type-7 LSAs for the default route no matter
whether there exists the default route 0.0.0.0 in the routing table. When using the
parameter at NSSA ASBR to generate Type-7 LSAs for the default route only if there
exists the default route 0.0.0.0 in the routing table.
no-import-route: Forbids AS external routes to be redistributed in to the NSSA as
Type-7 LSAs. This parameter is available for the NSSA ABR and for the ASBR in OSPF
AS, to ensure all external route information is redistributed into the OSPF areas.
no-summary: Only available for the NSSA ABR. When the parameter is selected, the
NSSA ABR advertises a default route via the Summary-LSAs (Type-3) in the area, but
no other Summary-LSAs to other areas.
Description
Use the nssa command to configure an area as NSSA area.

Use the undo nssa command to cancel the function.
By default, NSSA area is not configured.
For all the routers in the NSSA area, the command nssa must be used to configure the
area as NSSA.
3-39
Example
# Configure area 1 as NSSA.

[H3C-ospf-1] area 1
[H3C-ospf-1-area-0.0.0.1] nssa
3.1.35 opaque-capability
Syntax
opaque-capability enable
undo opaque-capability
View
OSPF view
Parameter
None
Description
Use the opaque-capability enable command to enable the Opaque capability of

OSPF.
Use the undo opaque-capability command to disable the Opaque capability of OSPF.
Caution:
z By default, Opaque capability of OSPF is enabled.

z If the application based on Opaque LSA is enabled, for example, the area TE
capability is enabled, the Opaque capability cannot be disabled.
Example
# Enable Opaque capability.

[H3C-ospf-100] opaque-capability enable
3.1.36 ospf
Syntax
ospf [ process-id [ [ router-id router-id ] vpn-instance vpn-instance-name ] ]
3-40
undo ospf [ process-id ]
View
System view
Parameter
process-id: Number of an OSPF process. If no process number is specified, the default

number 1 is used.
router-id: Router ID employed by the OSPF process, in dotted decimal notation.
vpn-instance-name: Name of the VPN instance bound with the OSPF process.
Description
Use the ospf command to enable the OSPF protocol.

Use the undo ospf command to disable the OSPF protocol.
By default, the system does not run the OSPF protocol.
By specifying different process IDs, you can run multiple OSPF processes on the same
router. In this case, you are recommended to use router-id to specify different Router
IDs for those processes.
After enabling OSPF protocol, the user can make the corresponding configuration in
OSPF view.
If you use OSPF as the VPN interior routing protocol of the MPLS VPN solution, the
OSPF process must be bound with the VPN instance. For more details, refer to the
“VPN” section of this manual.
Related command: network.
Example
# Enable the OSPF protocol.

[H3C] router id 10.110.1.8
[H3C] ospf
[H3C-ospf-1]
# Enable OSPF process 120.

[H3C] router id 10.110.1.8
[H3C] ospf 120
[H3C-ospf-120]
3.1.37 ospf authentication-mode
Syntax
ospf authentication-mode { simple password | md5 key-id key }
3-41
undo ospf authentication-mode { simple | md5 }
View
Interface view
Parameter
simple password: Character string not exceeding 8 characters using simple text
authentication.
key-id: ID of the authentication key in MD5 cipher text authentication mode in the range
from 1 to 255.
key: MD5 authentication key. If it is input in a simple form, MD5 key is a character string
of 1 to 16 characters. And it will be displayed in a cipher text form in a length of 24
characters when display current-configuration command is executed. Inputting the
24-character MD5 key in a cipher text form is also supported.
Description
Use the ospf authentication-mode command to configure the authentication mode

and key between adjacent routers.
Use the undo ospf authentication-mode command to cancel the authentication key
that has been set.
By default, the interface does not authenticate the OSPF packets.
The passwords for authentication keys of the routers on the same network segment
must be identical. In addition, using authentication-mode command to set the
authentication type of the area authentication key so as to validate the configuration.
Related command: authentication-mode.
Example
# Set the area 1 where the network segment 131.119.0.0 of Interface serial1/0/0 is
located to support MD5 cipher text authentication. The authentication key identifier is
set to 15 and the authentication key is H3c.
[H3C-ospf-1] area 1
[H3C-ospf-1-area-0.0.0.1] authentication-mode md5
[H3C-ospf-1-area-0.0.0.1] interface serial 1/0/0
[H3C-Serial1/0/0] ospf authentication-mode md5 15 H3c
3.1.38 ospf cost
Syntax
ospf cost value
3-42
undo ospf cost
View
Interface view
Parameter
value: Cost for running OSPF protocol, ranging from 1 to 65535.
Description
Use the ospf cost command to configure different packet sending costs so as to send
packets from different interfaces.
Use the undo ospf cost command to restore the default costs.
By default, the interface automatically calculates the costs required for running OSPF
protocol according to the current Baud rate.
Example
# Specify the cost spent when an interface runs OSPF as 33.

[H3C-Serial1/0/0] ospf cost 33
3.1.39 ospf dr-priority
Syntax
ospf dr-priority value

undo ospf dr-priority
View
Interface view
Parameter
value: Interface priority for electing the "designated router", ranging from 0 to 255. By
Description
Use the ospf dr-priority command to configure the priority for electing the "designated
router" on an interface.
Use the undo ospf dr-priority command to restore the default value.
Interface priority determines the interface qualification when electing the “designated
router”. The interface with high priority is considered first when there is collision in
election.
3-43
Example
# Set the priority of the interface Ethernet1/0/0 to 8, when electing the DR.
[H3C] interface Ethernet1/0/0
[H3C-Ethernet1/0/0] ospf dr-priority 8
3.1.40 ospf mib-binding
Syntax
ospf mib-binding process-id

undo ospf mib-binding
View
System view
Parameter
process-id: Number of OSPF process.
Description
Use the ospf mib-binding command, MIB operation can be bound on the specified
OSPF process.
Use the undo ospf mib-binding command to restore the default configuration.
MIB operation is always bound on the first process enabled by OSPF protocol. Use the
this command, MIB operation can be bound on other OSPF processes. Use the undo
ospf mib-binding command to cancel the binding configuration. MIB operation is
rebound automatically by OSPF protocol on the first enabled process.
By default, MIB operation is bound on the first enabled OSPF process.
Example
# Bind MIB operation on OSPF process 100.

[H3C] ospf mib-binding 100
# Cancel MIB operation binding

[H3C] undo ospf mib-binding
3.1.41 ospf mtu-enable
Syntax
ospf mtu-enable
undo ospf mtu-enable
3-44
View
Interface view
Parameter
None
Description
Use the ospf mtu-enable command to enable the interface to write MTU value when
sending DD packets.
Use the undo ospf mtu-enable command to restore the default settings.
By default, the MTU value is 0 when sending DD packets, i.e. the actual MTU value of
the interface is not written.
Database Description Packets (DD packets) are used to describe its own LSDB when
the router running OSPF protocol is synchronizing the database.
The default MTU value of DD packet is 0. With this command, the specified interface
can be set manually to write the MTU value area in DD packets when sending DD
packets, i.e. the actual MTU value of the interface is written in.
Example
# Set interface Ethernet1/0/0 to write MTU value area when sending DD packets.
[H3C-Ethernet1/0/0] ospf mtu-enable
3.1.42 ospf network-type
Syntax
ospf network-type { broadcast | nbma | p2mp | p2p }

undo ospf network-type
View
Interface view
Parameter
broadcast: Changes the interface network type to broadcast.

nbma: Changes the interface network type to Non-Broadcast Multicast Access.
p2mp: Changes the interface network type to point-to-multipoint.
p2p: Changes the interface network type to point-to-point.
3-45
Description
Use the ospf network-type command to configure the network type of OSPF interface.
Use the undo ospf network-type command to restore the default network type of the
OSPF interface.
OSPF divides networks into four types by link layer protocol:
z Broadcast: If Ethernet is adopted, OSFP defaults the network type to broadcast.
z Non-Broadcast Multi-access (nbma): If Frame Relay, ATM, HDLC or X.25 is
adopted, OSPF defaults the network type to NBMA.
z Point-to-Multipoint (p2mp): OSPF will not default the network type of any link layer
protocol to p2mp. The general undertaking is to change a partially connected
NBMA network to p2mp network if the NBMA network is not fully-meshed.
z Point-to-point (p2p): If PPP or LAPB is adopted, OSPF defaults the network type
to p2p.
If there is a router not supporting multicast address on the broadcast network, the
interface network type can be changed to NBMA. The interface network type can also
be changed from NBMA to broadcast.
A network that can be called an NBMA network or can be changed to a broadcast
network should satisfy the following condition: there is a virtual circuit directly connects
any two routers on the network. In other words, the network is full-meshed. If the
network cannot satisfy this condition, the interface network type must be changed to
point-to-multipoint. In this way, these two routers can exchange routing information via
a router directly connected with the two routers.
If there are only two routers running OSPF protocol on the same network segment, the
interface network type can be changed to point-to-point.
Note: When the network type of an interface is NBMA or it is changed to NBMA
manually, the peer command must be used to configure the neighboring point.
Related command: ospf dr-priority.
Example
# Set the interface serial1/0/0 to NBMA type.

[H3C-serial1/0/0] ospf network-type nbma
3.1.43 ospf timer dead
Syntax
ospf timer dead seconds

undo ospf timer dead
3-46
View
Interface view
Parameter
seconds: Dead interval of the OSPF neighbor. It is in second and ranges from 1 to
65535.
Description
Use the ospf timer dead command to configure the dead interval of the OSPF
neighbor.
Use the undo ospf timer dead command to restore the default value of the dead
interval of the neighbor.
By default, the dead interval for the OSPF neighbors of p2p and broadcast interfaces
is 40 seconds, and for those of p2mp and nbma interfaces is 120 seconds.
The dead interval of OSPF neighbors means that within this interval, if no Hello
message is received from the neighbor, the neighbor will be considered to be invalid.
The value of dead seconds should be at least four times the value of the Hello seconds.
The dead seconds for the routers on the same network segment must be identical.
Related command: ospf timer hello.
Example
# Set the neighbor dead interval on the interface serial1/0/0 to 80 seconds.

[H3C-serial1/0/0] ospf timer dead 80
3.1.44 ospf timer hello
Syntax
ospf timer hello seconds

undo ospf timer hello
View
Interface view
Parameter
seconds: Interval in seconds for an interface to transmit hello message. It ranges from
1 to 255.
3-47
Description
Use the ospf timer hello command to configure the interval for transmitting Hello
messages on an interface.
Use the undo ospf timer hello command to restore the default value.
By default, the interval is 10 seconds for an interface of p2p or broadcast type to
transmit Hello messages, and 30 seconds for an interface of nbma or p2mp type.
Related command: ospf timer dead.
Example
# Configure the interval of transmitting Hello packets on the interface serial1/0/0 to 20

seconds.
[H3C-serial1/0/0] ospf timer hello 20
3.1.45 ospf timer poll
Syntax
ospf timer poll seconds

undo ospf timer poll
View
Interface view
Parameter
seconds: Specifies the poll Hello messages interval, ranging from 1 to 65535 and
measured in seconds. By default, the value is 40 seconds.
Description
Use the ospf timer poll command to configure the poll Hello message interval on
nbma and p2mp network.
Use the undo ospf timer poll command to restore the default value.
On the nbma and p2mp network, if a neighbor is invalid, the Hello message will be
transmitted regularly according to the poll seconds. You can configure the poll
seconds to specify how often the interface transmits Hello messages before it
establishes adjacency with the adjacent router.
You are recommended to set the poll timer longer than the hello timer.
Example
# Configure to transmit poll Hello message from interface serial2/0/0 every 130
seconds.
3-48
[H3C-serial2/0/0] ospf timer poll 130
3.1.46 ospf timer retransmit
Syntax
ospf timer retransmit interval

undo ospf timer retransmit
View
Interface view
Parameter
interval: Interval in seconds for re-transmitting LSA on an interface. It ranges from 1 to

65535.The default value is 5 seconds.
Description
Use the ospf timer retransmit command to configure the interval for LSA
re-transmitting on an interface.
Use the undo ospf timer retransmit command to restore the default interval value for
LSA re-transmitting on the interface.
If a router running OSPF transmits a "link state advertisement"(LSA) to the peer, it
needs to wait for the acknowledgement packet from the peer. If no acknowledgement is
received from the peer within the LSA retransmission, this LSA will be re-transmitted.
According to RFC2328, the LSA retransmission between adjacent routers should not
be set too short. Otherwise, unexpected retransmission will be caused.
Example
# Specify the retransmission for LSA transmitting between the interface serial1/0/0 and
the adjacent routers to 12 seconds.
[H3C-serial1/0/0] ospf timer retransmit 12
3.1.47 ospf trans-delay
Syntax
ospf trans-delay seconds

undo ospf trans-delay
View
Interface view
3-49
Parameter
seconds: Transmitting delay of LSA on an interface. It is in seconds and ranges from 1

to 3600. By default, the value is 1 second.
Description
Use the ospf trans-delay command to configure the LSA transmitting delay on an
interface.
Use the undo ospf trans-delay command to restore the default value of the LSA
transmitting delay on an interface.
LSA will age in the "link state database" (LSDB) of the router as time goes by (add 1 for
every second), but it will not age during network transmission. Therefore, it is
necessary to add a period of time set by this command to the aging time of LSA before
transmitting it.
Example
# Specify the trans-delay of transmitting LSA on the interface serial1/0/0 as 3 seconds.

[H3C-serial1/0/0] ospf trans-delay 3
3.1.48 peer
Syntax
peer ip-address [ dr-priority dr-priority-number ]

undo peer ip-address
View
OSPF view
Parameter
ip-address: IP address of the neighboring point.

dr-priority-number: Represents the corresponding value of the network neighbor priority,
being an integer ranging from 0 to 255. The default value is 1.
Description
Use the peer command to configure the IP address of adjacent routers and specify a
DR priority on an NBMA network.
Use the undo peer command to cancel the configuration.
On the frame relay network, a full-meshed network (i.e. there is a VC directly
connecting any two routers on the network) can be implemented by configuring map.
Thus OSPF can perform in the same way in the frame relay network as in the broadcast
3-50
network (such as electing DR and BDR). However, the IP address of adjacent routers
and their election rights must be configured manually for the interface because
adjacent routers cannot be found dynamically by advertising Hello messages.
Example
# Configure the IP address of peer router as 10.1.1.1.

[H3C-ospf-1] peer 10.1.1.1
3.1.49 preference
Syntax
preference [ ase ] value

undo preference [ ase ]
View
OSPF view
Parameter
value: OSPF protocol route preference, ranging from 1 to 255.

ase: Preference of an redistributed external route of the AS.
Description
Use the preference command to configure the preference of an OSPF protocol route.
Use the undo preference command to restore the default value of the OSPF protocol
route.
By default, the preference of an OSPF protocol internal route is 10 and the preference
of an external route is 150.
Because multiple dynamic routing protocols could be running on a router, there is the
problem of routing information sharing among routing protocols and selection.
Therefore, a default preference is specified for each routing protocol. When multiple
routes to the same destination are found by different routing protocols, the route found
by high preference routing protocol will be selected to forward IP packets.
Example
# Specify the preference of an external redistributed route of the AS as 160.

[H3C-ospf-1] preference ase 160
3-51
3.1.50 reset ospf
Syntax
reset ospf [ statistics ] { all | process-id }
View
User view
Parameter
statistics: Resets statistics of the OSPF process.

process-id: OSPF process number. If no OSPF process number is specified, all the
OSPF processes should be reset.
all: Resets all the OSPF processes.
Description
Use the reset ospf all command to reset all the OSPF processes. Use the parameter
of statistics to reset statistics about OSPF.
The reset ospf process-id command can be used to reset the specified process and
clear statistics data. Use the parameter of statistics to reset statistics about OSPF.
Use the reset ospf command to reset the OSPF process, the following results are
expected:
z Clear invalid LSA immediately without waiting for LSA timeout.
z If the Router ID changes, a new Router ID will take effect by executing the
command.
z Re-elect DR and BDR conveniently.
z OSPF configuration will not be lost if the system is restarted.
z Delete the original OSPF routes.
z After OSPF process is restarted, new routes and LSA will be generated
correspondingly and LSA will be advertised.
The system will require the user to confirm whether to re-enable the OSPF protocol
after execution of the command.
Example
# Reset all the OSPF processes

<H3C> reset ospf all
# Reset the OSPF process 200

<H3C> reset ospf 200
3-52
3.1.51 router id
Syntax
router id router-id
undo router id
View
System view
Parameter
router-id: Router ID that is a 32-bit unsigned integer.
Description
Use the router id command to configure the ID of a router running the OSPF protocol.
Use the undo router id command to cancel the router ID that has been configured.
By default, no router ID is configured.
Router ID is a 32-bit unsigned integer that uniquely identifies a router in an OSPF
autonomous system. If no router ID is specified, the system automatically selects one
as the router ID as follows:
z If the IP address of loopback interface is available, select the last configured one.
z If not available, select the IP address of the first configured physical interface that
is up.
z If none of the interfaces is configured with an IP address, then you must configure
the router ID in system view, otherwise, the OSPF cannot be operated.
When the router ID is configured manually, the IDs of any two routers cannot be
identical in the autonomous system. It is recommended that you choose the IP address
of the loopback interface as the router ID, because the interface is always up unless
you shut it down manually.
Note:
The modified router ID will not be valid unless OSPF is re-enabled.
The router ID configured using the router id command takes effect only on the OSPF on
public networks.
Related command: ospf.
Example
# Set the router ID to 10.1.1.3.
3-53
[H3C] router id 10.1.1.3
3.1.52 silent-interface
Syntax
silent-interface interface-type interface-number

undo silent-interface interface-type interface-number
View
OSPF view
Parameter
interface-type: Specifies the interface type

interface-number: Specifies the interface number.
Description
Use the silent-interface command to disable an interface to transmit OSPF packet.

Use the undo silent-interface command to restore the default setting.
By default, the interface is enabled to transmit OSPF packet.
You can use this command to disable an interface to transmit OSPF packet, so as to
prevent the router on some network from receiving the OSPF routing information.
Different processes can disable the same interface to transmit OSPF packet. While
silent-interface command only takes effect on the interface enabled with OSPF by this
process, being invalid for the interface enabled by other processes.
Example
# Disable interface serial2/0/0 to transmit OSPF packet.

[H3C-ospf-1] silent-interface serial2/0/0
# Disable interface Ethernet2/0/0 to transmit OSPF packet in both OSPF process 100
and OSPF process 200.
[H3C] router id 10.110.1.9
[H3C] ospf 100
[H3C-ospf-100] silent-interface ethernet 2/0/0
[H3C-ospf-100] quit
[H3C] router id 20.18.0.7
[H3C] ospf 200
[H3C-ospf-200] silent-interface ethernet 2/0/0
3-54
3.1.53 snmp-agent trap enable ospf
Syntax
snmp-agent trap enable ospf [ process-id ] [ trap-type ]

undo snmp-agent trap enable ospf [ process-id ] [ trap-type ]
View
System view
Parameter
process-id: OSPF process number. If no OSPF process number is specified, this

command is valid for all the current OSPF processes.
trap-type: Type of SNMP TRAP packet transmitted by OSPF. It can be the keyword in
the following table.
Table 3-17 SNMP TRAP type keywords
Keywords Description
ifauthfail Enables the InterfaceAuthenticationFailure trap packets
ifcfgerror Enables the InterfaceConfigError trap packets

ifrxbadpkt Enables the InterfaceRecieveBadPacket trap packets
ifstatechange Enables the InterfaceStateChange trap packets
iftxretransmit Enables the InterfaceTxRetransmitPacket trap packets

lsdbapproachover
Enables the LsdbApproachOverflow trap packets
flow
lsdboverflow Enables the LsdbOverflow trap packets
maxagelsa Enables the MaxAgeLsa trap packets
nbrstatechange Enables the NeighborStateChange trap packets
originatelsa Enables the OriginateLsa trap packets
virifauthfail Enables the VirtualInterfaceAuthenticationFailure trap packets
virifcfgerror Enables the VirtualInterfaceConfigError trap packets

virifrxbadpkt Enables the VirtualInterfaceRecieveBadPacket trap packets
virifstatechange Enables the VirtualInterfaceStateChange trap packets
viriftxretransmit Enables the VirtualInterfaceTxRetransmitPacket trap packets

virnbrstatechange Enables the VirtualNeighborStateChange trap packets
3-55
Description
Use the snmp-agent trap enable ospf command to enable the TRAP function of
OSPF.
Use the undo snmp-agent trap enable ospf command to disable the TRAP function.
This command takes no effect on the OSPF process enabled after its execution.
By default, no OSPF process is enabled to transmit TRAP packets.
For detailed configuration of SNMP TRAP, refer to “system management” section in this
manual.
Example
# Enable TRAP function of OSPF process 100.

<H3C> snmp-agent trap enable ospf 100
3.1.54 spf-schedule-interval
Syntax
spf-schedule-interval interval
undo spf-schedule-interval
View
OSPF view
Parameter
Interval: SPF calculation interval of OSPF, which is in seconds in the range of 1 to 10.
Description
Use the spf-schedule-interval command to configure the route calculation interval of

OSPF.
Use the undo spf-schedule-interval command to restore the default setting.
According to the Link State Database (LSDB), the router running OSPF can calculate
the shortest path tree taking itself as the root and determine the next hop to the
destination network according to the shortest path tree. By adjusting SPF calculation
interval, network frequently changing can be restrained, which may lead to that too
many bandwidth resources and router resources will be used.
Example
# Set the OSPF route calculation interval of H3C to 6 seconds.

[H3C-ospf-1] spf-schedule-interval 6
3-56
3.1.55 stub
Syntax
stub [ no-summary ]
undo stub
View
OSPF area view
Parameter
no-summary: Only available for the ABR in Stub area. When this parameter is
selected, the ABR only advertises the Summary-LSA for the default route, but no other
Summary-LSAs. The area is also called totally stub area.
Description
Use the stub command to configure the type of an OSPF area as the STUB area.
Use the undo stub command to cancel the settings.
By default, no area is set to be the STUB area.
All the routers in a Stub area must be configured with the corresponding attribute.
Related command: default-cost.
Example
# Set the type of OSPF area 1 to the STUB area.

[H3C-ospf] area 1
[H3C-ospf-area-0.0.0.1] stub
3.1.56 vlink-peer
Syntax
vlink-peer router-id [ hello seconds] [ retransmit seconds ] [ trans-delay seconds ]

[ dead seconds ] [ simple password | md5 keyid key ]
undo vlink-peer router-id
View
OSPF area view
Parameter
router-id: Router ID of virtual link neighbor.
3-57
hello seconds: Interval that router transmits hello message. It ranges from 1 to 8192
seconds. This value must equal the hello seconds value of the router virtually linked to
the interface. By default, the value is 10 seconds,
retransmit seconds: Specifes the interval for re-transmitting the LSA packets on an
interface. It ranges from 1 to 3600 seconds. By default, the value is 5 seconds.
trans-delay seconds: Specifes the interval for delaying transmitting LSA packets on an
interface. It ranges from 1 to 3600 seconds. By default, the value is 1 second.
dead seconds: Specifies the interval of death timer. It ranges from 1 to 8192 seconds.
This value must equal the dead seconds of the router virtually linked to it and must be
at least 4 times of the hello seconds. By default, the value is 40 seconds.
simple password: Specifies the simple text authentication key, not exceeding 8
characters, of the interface. This value must equal the authentication key of the virtually
linked neighbor.
keyid: Specifies the MD5 authentication key ID. Its value ranges from 1 to 255. It must
be equal to the authentication key ID of the virtually linked neighbor.
key: Specifies the authentication key on an interface. It is a character string not
exceeding 16 characters. This value must equal the authentication key of the virtually
linked neighbor. And the key will be displayed in a cipher text form in a length of 24
characters when display current-configuration command is executed. Inputting the
key in a cipher text form with 24 characters long is also supported.
Description
Use the vlink-peer command to create and configure a virtual link.

Use the undo vlink-peer command to cancel an existing virtual link.
According to RFC2328, the OSPF area should be connected with the backbone
network. You can use vlink-peer command to keep the connectivity. Virtual link
somewhat can be regarded as a common ospf enabled interface so that you can easily
understand how to configure the parameters such as hello, retransmit, and trans-delay
on it.
One thing should be mentioned. When configuring virtual link authentication,
authentication-mode command is used to set the authentication mode as MD5 cipher
text or simple text on the backbone network.
Related command: authentication-mode, and display ospf.
Example
# Create a virtual link to 10.110.0.3 and use the MD5 cipher text authentication mode.
[H3C-ospf] area 1
[H3C-ospf-area-1] vlink-peer 10.110.0.3 md5 3 345
3-58
Comware V3 Chapter 4 Integrated IS-IS Configuration Commands
Chapter 4 Integrated IS-IS Configuration

Commands
4.1 Integrated IS-IS Configuration Commands

4.1.1 area-authentication-mode
Syntax
area-authentication-mode { simple | md5 } password [ ip | osi ]

undo area-authentication-mode { simple | md5 } [ ip | osi ]
View
IS-IS view
Parameter
simple: Transmits the password in simple text.

md5: Transmits the password encrypted with MD5.
password: Specifies the password to be configured, in the range of 1~24 bits.
ip: Specifies the IP authentication password.
osi: Specifies the OSI authentication password.
The configuration of ip or osi authentication password is independent of the real
network environment.
Description
Use the area-authentication-mode command to configure IS-IS to authenticate the

received Level-1 routing information packets (LSP, CSNP and PSNP), according to the
pre-defined mode and password.
Use the undo area-authentication-mode command to configure IS-IS not to
authenticate the said packets.
In default configuration, the system will not authenticate the received Level-1 routing
information packets, and there is no password. By using this command, you can clear
all the Level-1 routing packets, whose area authentication passwords are not
consistent with the one set via this command. At the same time, this command will let
IS-IS insert the area authentication password into all the Level-1 routing packets sent
by this node, in a certain mode.
4-1
Note:
After the area-authentication-mode command takes effect, the system does not
remove the local Isp immediately, which is aged out after its age time expires. If you
want to age out it right now, you can shutdown, undo shutdown related interfaces or
use the reset isis all or reset isis peer command.
Related command: reset isis all, reset isis peer, domain-authentication-mode, and
isis authentication-mode.
Example
# Set the area authentication password as "hello" and the authentication type as
simple.
[H3C] isis
[H3C-isis] area-authentication-mode simple hello
4.1.2 cost-style
Syntax
cost-style { narrow | wide | compatible [ relax-spf-limit ] | narrow-compatible

[ relax-spf-limit ] | wide-compatible }
View
IS-IS view
Parameter
narrow: Only receives/sends packets whose cost type is narrow.

wide: Only receives/sends packets whose cost type is wide.
compatible: Receives/sends packets whose cost type is narrow or wide.
narrow-compatible: Receives packets whose cost type is narrow or wide, but only
send packets whose cost type is narrow.
wide-compatible: Receives packets whose cost type is narrow or wide, but only send
packets whose cost type is wide.
relax-spf-metric: Permits to receive routes whose cost value is larger than 1024. If this
item is not set, the route whose metrics value is larger than 1024 will be discarded.
Description
Use the cost-style command to set the cost type of an IS-IS packet received/sent by
the router.
Use the undo cost-style command to restore the default setting.
4-2
By default, IS-IS only receives/sends packets whose cost type is narrow.

Related command: isis cost.
Example
# Set IS-IS to receive packets whose cost type is narrow or wide, but only send packets
whose cost type is narrow.
[H3C] isis
[H3C-isis] cost-style narrow-compatible
4.1.3 debugging isis
Syntax
debugging isis { adjacency | all | authentication-error | checksum-error |

circuit-information | configuration-error | datalink-receiving-packet |
datalink-sending-packet | general-error | interface-information |
memory-allocating | receiving-packet-content | self-originate-update |
sending-packet-content | snp-packet | spf-event | spf-summary | spf-timer |
task-error | timer | update-packet }
undo debugging isis { adjacency | all | authentication-error | checksum-error |
circuit-information | configuration-error | datalink-receiving-packet |
datalink-sending-packet | general-error | interface-information |
memory-allocating | receiving-packet-content | self-originate-update |
sending-packet-content | snp-packet | spf-event | spf-summary | spf-timer |
task-error | timer | update-packet }
View
User view
Parameter
adjacency: IS-IS adjacency related packets.

all: All IS-IS related debugging information.
authentication-error: IS-IS authentication errors.
checksum-error: IS-IS checksum errors.
circuit-information: Information about IS-IS enabled interface.
configuration-error: IS-IS configuration errors.
datalink-receiving-packet: Data link layer's packets-receiving status.
datalink-sending-packet: Data link layer's packets-sending status.
general-error: IS-IS error information.
interface-information: Information about IS-IS enabled data link layer.
4-3
memory-allocating: IS-IS memory allocating status.

receiving-packet-content: Packets received through IS-IS protocol.
self-originate-update: Packets locally updated through IS-IS protocol.
sending-packet-content: Packets sent through IS-IS protocol.
snp-packet: CSNP/PSNP packet of IS-IS.
spf-event: IS-IS SPF events.
spf-summary: Statistics about IS-IS performing SPF calculation.
spf-timer: IS-IS SPF trigger events.
task-error: IS-IS events status.
timer: IS-IS timer.
update-packet: Updated packets through IS-IS protocol.
Description
Use the debugging isis command to enable IS-IS debugging.

Use the undo debugging isis command to disable the function.
Example
# Enable all the information debugging of IS-IS.

<H3C> debugging isis all
4.1.4 default-route-advertise
Syntax
default-route-advertise [ route-policy [ route-policy-name ] ]

undo default-route-advertise [ route-policy [ route-policy-name ] ]
View
IS-IS view
Parameter
route-policy-name: Name of the specified route-policy.
Description
Use the default-route-advertise command to configure the default route of Level-1

and Level-2 routers.
Use the undo default-route-advertise command to cancel this configuration.
By default, Level-2 router generates the default route.
4-4
This command can be set on Level-1 router or Level-2 router. By default, the default
route is generated on L2 LSP. If apply isis level-1 is set in route-policy view, the default
route will be generated on L1 LSP. If apply isis level-2 command is used in
route-policy view, the default route will be generated on L2 LSP. If apply isis level-1-2
is set in route-policy view, the default route will be generated on both L1 LSP and L2
LSP.
Example
# Set the current router to generate the default route on the LSP of corresponding level.
[H3C-isis] default-route-advertise
4.1.5 display isis brief
Syntax
display isis brief
View
Any view
Parameter
None
Description
Use the display isis brief command to view the brief information of IS-IS.
Example
# View the brief information of IS-IS.

<H3C>display isis brief
ISIS zq Protocol Brief Information :
network-entity: 01.bbbb.bbbb.bbbb.00
is-level :Level-12
cost-style: wide
preference : 15
Timers:
spf-delay-interval : 5000
spf-slice-size: 0
lsp-max-age: 1200
lsp-refresh: 900
Interval between SPFs: level-1 10
level-2 10
4-5
4.1.6 display isis interface
Syntax
display isis interface [ verbose ]
View
Any view
Parameter
verbose: If this parameter is used, the details of the interface will be displayed.
Description
Use the display isis interface command to view the information of the IS-IS enabled
interface.
This command views the information of the IS-IS enabled interface, including interface
name, IP address, link state of the interface and so on. Besides displaying all the
information shown by the display isis interface command, the display isis interface
verbose command displays such information about the IS-IS parameters of the
interface as CSNP packet broadcast interval, Hello message broadcast interval and
number of invalid Hello messages.
Example
# Display the information about the IS-IS enabled interface.

<H3C> display isis interface
Interface IP Address Id Link.Sta IP.Sta MTU Type DIS
Ethernet1/0/0 2.1.1.12 001 Up Up 1497 L12 No/No
# Display the details of the IS-IS enabled interface.

<H3C> display isis interface verbose
Interface IP Address Id Link.Sta IP.Sta MTU Type DIS
Ethernet1/0/0 2.1.1.12 001 Up Up 1497 L12 No/No
Secondary IP Address(es) :
Csnp-Interval : L1 10 L2 10
Hello-Interval : L1 10 L2 10
Hold Time : L1 30 L2 30
Lsp Interval : 1
Cost : L1 10 L2 10
Priority : L1 64 L2 64
Retransmit Interval : 5
4-6
4.1.7 display isis lsdb
Syntax
display isis lsdb [ l1 ] [ l2 ] [ level-1 ] [ level-2 ] [ local ] [ verbose ] [ LSPID ]
View
Any view
Parameter
l1 and Level-1: Both refer to the link state database of Level-1.

l2 and level-2: Both refer to the link state database of Level-2.
local: Displays the Contents of the Local LSP Database
verbose: Displays the verbose information of the link state database.
LSPID: Specifies the LSPID of the network-entity-title.
Description
Use the display isis lsdb command to view the link state database of the IS-IS.
Example
# Display the output information of display isis lsdb command.

<H3C> display isis lsdb
Lsp ID Sequence Holdtime A_P_O Checksum
1111.1111.1011.00-00 0x00000002 658 0_0_0 0x0b5e
4.1.8 display isis mesh-group
Syntax
display isis mesh-group
View
Any view
Parameter
None
Description
Use the display isis mesh-group command to view the IS-IS mesh group.
This command is used for displaying the configurations of the mesh-group of the
current router interface.
4-7
Example
# Add Interface serial1/0/0 and Interface serial2/0/0 running IS-IS into mesh group 100.
[H3C-Serial1/0/0] isis mesh-group 100
[H3C-Serial1/0/0] interface Interface serial2/0/0
# Display the information of IS-IS mesh-group.

[H3C-serial2/0/0] display isis mesh-group
Interface Mesh-group/Blocked
Serial2/0/0 1
4.1.9 display isis peer
Syntax
display isis peer [ verbose ]
View
Any view
Parameter
verbose: When this parameter is configured, the area address carried in the Hello
message from the peer will be displayed. Otherwise, only the summary information will
be displayed.
Description
Use the display isis peer command to view IS-IS peer information.
The display isis peer verbose command yields not only all the outputs of the display
isis peer command, but also the area address, Up time and IP address of the directly
connected interface of the peer.
Example
# Display the output information of the display isis peer command.

<H3C> display isis peer
System ID Interface Circuit ID State HoldTime Type Pri
1111.1111.1031 Ethernet3/0/0 1111.1111.1031.01 Up 8s L2 64
1111.1111.1011 Ethernet3/0/1 1111.1111.1011.01 Up 7s L2 6
4.1.10 display isis routing
Syntax
display isis routing
4-8
View
Any view
Parameter
None
Description
Use the display isis routing command to view IS-IS routing information.
Example
# View the output information of display isis routing command.

<H3C> display isis routing
ISIS Level - 1 Forwarding Table :
Type - D -Direct, C -Connected, I -ISIS, S -Static, O -OSPF

B -BGP, R -RIP
Flags: R-Added to RM, L-Advertised in LSPs, U-Up/Down Bit Set
Destination/Mask In.Met Ex.Met NextHop Interface Flags

--------------------------------------------------------------------------
--
D 4.0.0.0/8 10 NULL Direct Ethernet2/0/0 R/L/-
I 55.55.0.0/16 20 NULL 4.0.0.2 Ethernet2/0/0 R/L/-
3.0.0.2 Ethernet1/0/0
I 0.0.0.0/0 10 NULL 4.0.0.2 Ethernet2/0/0 R/-/-
3.0.0.2 Ethernet1/0/0
ISIS Level - 2 Forwarding Table :

Type - D -Direct, C -Connected, I -ISIS, S -Static, O -OSPF
B -BGP, R -RIP
Flags: R-Added to RM, L-Advertised in LSPs, U-Up/Down Bit Set
Destination/Mask In.Met Ex.Met NextHop Interface Flags

--------------------------------------------------------------------------
--
D 4.0.0.0/8 10 NULL Direct Ethernet2/0/0 R/L/-
D 99.99.0.0/16 10 NULL Direct LoopBack3 R/L/-
4-9
4.1.11 display isis spf-log
Syntax
display isis spf-log
View
Any view
Parameter
None
Description
Use the display isis spf-log command to view the SPF calculation log of the IS-IS.
Example
# View the output information of display isis spf-log command.

<H3C> display isis spf-log
Details of Level 1 SPF Run:
-------------------------------
Trig.Event No.Of Nodes Duration(ms) StartTime
IS_SPFTRIG_ADJDOWN 2 0 23:10:54
IS_SPFTRIG_NEWADJ 3 0 23:10:54
IS_SPFTRIG_LSPCHANGE 3 0 23:10:54
IS_SPFTRIG_PERIODIC 2 0 23:10:37
IS_SPFTRIG_CIRC_UP 3 0 23:10:53
Details of Level 2 SPF Run:
-------------------------------
Trig.Event No.Of Nodes Duration(ms) StartTime
IS_SPFTRIG_NEWADJ 4 0 23:10:54
4-10
4.1.12 domain-authentication-mode
Syntax
domain-authentication-mode { simple | md5 } password [ ip | osi ]

undo domain-authentication-mode { simple | md5 } [ ip | osi ]
View
IS-IS view
Parameter
simple: Transmits the password in simple text.

md5: Transmits the password in MD5 encryption.
password: Specifies the password to be configured.
Description
Use the domain-authentication-mode command to configure IS-IS route area to

authenticate the received Level-2 routing packets (LSP, CSNP, PSNP), according to
the pre-defined mode and password.
Use the undo domain-authentication-mode command to configure IS-IS not to
authenticate the said packets.
In default configuration, the system will not authenticate the received Level-2 routing
packets, and there is no password. By using this command, you can discard all the
Layer 2 routing packets, whose area authentication passwords do not consist with the
one set via this command. At the same time, this command will let IS-IS insert the area
authentication password into all the Layer 2 routing packets sent by this node, in a
certain mode.
Related command: area-authentication-mode and isis authentication-mode.
Example
# When you need to authenticate the layer 2 routing packets, you can select the simple
mode, and the password is "h3c".
[H3C] isis
[H3C-isis] domain-authentication-mode simple h3c
4-11
Syntax
filter-policy acl-number export [ protocol ]

undo filter-policy acl-number export [ protocol ]
View
IS-IS view
Parameter
acl-number: Specifies the number of the access control list, ranging from 2000 to 3999.
protocol: Specifies a routing protocol, which could be direct, static, rip, bgp, ospf,
ospf-nssa, or ospf-ase. Without this parameter, filtering is performed on all
redistributed routes.
Description
Use the filter-policy export command to configure IS-IS to filter all redistributed routes
or routes redistributed from a specified routing protocol.
Use the undo filter-policy export command to disable IS-IS to filter all redistributed
routes or routes redistributed from a specified routing protocol.
By default, IS-IS does not filter any redistributed routing information.
conditions be advertised. You may use the filter-policy export command to set the
conditions for filtering redistributed routing information. Only the routing information
passing the filtering can be advertised.
Related command: filter-policy import.
Example
# Use acl 2006 to filter routes redistributed to IS-IS.

[H3C-isis] filter-policy 2006 export
Syntax
filter-policy acl-number import

undo filter-policy acl-number import
View
IS-IS view
4-12
Parameter
acl-number: Specifies the number of the access control list, ranging from 2000 to 2999.
Description
Use the filter-policy import command to configure to filter the routes received by
IS-IS.
Use the undo filter-policy import command to configure not to filter the received
routes.
By default, IS-IS does not filter the received routing information.
In some cases, only the routing information meeting the specified conditions will be
accepted. You can configure the filter-policy to specify the filter conditions so as to
accept the desired routing information only.
Related command: filter-policy export.
Example
# Filter the received routes by using acl 2003.

[H3C-isis] filter-policy 2003 import
4.1.15 ignore-lsp-checksum-error
Syntax
ignore-lsp-checksum-error
undo ignore-lsp-checksum-error
View
IS-IS view
Parameter
None
Description
Use the ignore-lsp-checksum-error command to configure the IS-IS to ignore the

checksum error of LSP.
Use the undo ignore-lsp-checksum-error command to configure the IS-IS not to
ignore the checksum error of LSP.
By default, the checksum error of LSP is not ignored.
After receiving an LSP packet, the local IS-IS will calculate its checksum and compares
the result with the checksum in the LSP packet. This process is the checksum
authentication over the received LSP. By default, if the checksum in the packet is found
4-13
not in consistent with the calculated result, the LSP will be discarded without being
processed. Moreover, if ignoring checksum error is set with the
ignore-lsp-checksum-error command, the packet will be processed as a normal one
even if the checksum error is found.
Example
# Configure to ignore the checksum error of LSP.

[H3C-isis] ignore-lsp-checksum-error
4.1.16 import-route
Syntax
import-route protocol [ allow-ibgp ] [ cost value ] [ type { external | internal } ]

[ level-1 ] [ level-1-2 ] [ level-2 ] [ route-policy route-policy-name ]
undo import-route protocol [ cost value ] [ type { external | internal } ] [ level-1 ]
[ level-1-2 ] [ level-2 ] [ route-policy route-policy-name ]
View
IS-IS view
Parameter
protocol: Specifies source routing protocols which can be redistributed, including direct,
bgp, ospf, ospf-nssa , ospf-ase, rip and static at present.
with cautions.
cost value: Specifies the route cost of the redistributed route, ranging from 0 to 63.
level-1: Redistributes the route into Level-1 routing table.
level-2: Redistributes the route into Level-2 routing table.
level-1-2: Redistributes the route into Level-1-2 routing table.
If the level for redistributing the route is not specified in the command, it defaults to
redistribute the routes into Level-1 and Level-2, i.e. Level-1-2 routing table.
route-policy route-policy-name: Redistributes only the routes matching the specified
route-policy.
Description
Use the import-route command to configure IS-IS to filter the redistributed routes.
Use the undo import-route command to configure IS-IS not to redistribute the routing
information of other protocols.
4-14
By default, IS-IS does not redistribute routing information from any other protocols.
For IS-IS, the routes discovered by other routing protocols are processed as the routes
outside the routing domain. When redistributing the routes of other protocols, you can
specify the default cost for them. If OSPF routes are redistributed, you can also specify
the cost type for them.
When IS-IS redistributes routes, you can specify to redistribute the routes to Level-1,
Level-2 or Level-1-2. If you do not specify the level, the system will redistribute the
routes to Level-2 routing table by default.
IS-IS regards all the routes redistributed into the routing domain as the external routes,
which describe the way how to select the routes to the destination outside the routing
domain.
Example
# Redistribute a static route with cost 15.

[H3C-isis] import-route static cost 15
4.1.17 import-route isis
Syntax
import-route isis level-2 into level-1 [acl number ]

undo import-route isis level-2 into level-1 [ acl number ]
View
IS-IS view
Parameter
number: ACL number. When configuring routing leak from Level-2 to Level-1, only the
routes that are permitted by ACL can be redistributed to Level-1 area if an ACL has
been specified.
Description
Use the import-route isis level-2 into level-1 command to enable routing information
in a Level-2 area to be redistributed to a Level-1 area.
Use the undo import-route isis level-2 into level-1 command to remove the function.
By default, routing information in a Level-2 area is not redistributed to a Level-1 area.
Example
# Redistribute routing information of a router from a Level-2 area to a Level-1 area.

[H3C] acl number 3100 permit any
[H3C] isis
4-15
[H3C-isis] import-route isis level2 into level1 acl 3100
4.1.18 isis
Syntax
isis [ tag ]
undo isis [ tag ]
View
System view
Parameter
tag: Name given to the IS-IS process. The name length should be no longer than 128
characters. It can be 0, which means null.
Description
Use the isis command to enable the corresponding IS-IS routing process and enter the
IS-IS view.
Use the undo isis command to cancel the specified IS-IS routing process.
By default, IS-IS routing process is not started
For the normal operation of the IS-IS protocol, the isis command must be used to
enable the IS-IS process. Then the network-entity command is used to set a Network
Entity Title (NET) for the router. And, at last, the isis enable command is used to
enable each interface on which the IS-IS process runs. The IS-IS protocol is actually
enabled upon the completion of these configurations.
Note:
Only one IS-IS routing process can be started on one router.
Related command: isis enable and network-entity.
Example
# Start an IS-IS routing process, in which the system ID is 0000.0000.0002 and the
area ID is 01.0001.
[H3C] isis
[H3C-isis] network-entity 01.0001.0000.0000.0002.00
4-16
4.1.19 isis authentication-mode
Syntax
isis authentication-mode { simple | md5 } password [ { level-1 | level-2 } [ ip | osi ] ]

undo isis authentication-mode { simple | md5 } password [ { level-1 | level-2 } [ ip |
osi ] ]
View
Interface view
Parameter
simple: Transmit the authentication password in simple text.

md5: Transmit the authentication password in MD5 encryption.
password: Specifies the authentication password.
level-1: Configures authentication password for Level-1.
level-2: Configures authentication password for Level-2.
Description
Use the isis authentication-mode command to configure the IS-IS to authenticate the
hello messages of the corresponding level, in the specified mode and with the specified
password on the IS-IS interface.
Use the undo isis authentication-mode command to cancel the authentication and
delete the password at the same time.
By default, the password is not set and no authentication is executed.
If the password is set, but no parameter is specified, the default settings are Level-1,
simple and osi.
Related command: area-authentication-mode and domain-authentication-mode.
Example
# Set the authentication password "tangshi" in simple text for the Level-1 neighboring
relationship on Interface serial1/0/0.
[H3C-Serial1/0/0] isis authentication-mode simple tangshi level-1
4-17
4.1.20 isis circuit-level
Syntax
isis circuit-level [ level-1 | level-1-2 | level-2 ]

undo isis circuit-level
View
Interface view
Parameter
level-1: Configures only Level-1 adjacency instead of Level-2 one on the current
interface.
level-1-2: Configures both Level-1 and Level-2 adjacency on the current interface.
level-2: Configures only Level-2 adjacency on the current interface.
Description
Use the isis circuit-level command to configure the link adjacency relationship.
Use the undo isis circuit-level command to restore the default setting.
By default, you can configure both Level-1 and Level-2 adjacency on the interface.
If the local router is a Level-1-2 router and it is required to establish a correlation with
the peer router on a certain level (Level-1 or Level-2), this command can specify the
interface to send and receive hello messages of this level. Certainly, only one type of
hello message is sent and received on the point-to-point link. In this way, excessive
processing is avoided, and the bandwidth is saved.
Only when system type of IS-IS is Level-1-2, can the circuit level take effect. Otherwise,
take the level defined via is-level command as the standard.
Related command: is-level.
Example
# When interface serial1/0/0 is connected with a non-backbone router in the same area,
you can set this interface as Level-1, prohibiting the sending and receiving of Level-2
hello messages.
[H3C-Serial1/0/0] isis enable
[H3C-Serial1/0/0] isis circuit-level level-1
4.1.21 isis cost
Syntax
isis cost value [ level-1 | level-2 ]
4-18
undo isis cost [ level-1 | level-2 ]
View
Interface view
Parameter
value: Specifies the link cost used in the SPF calculation of corresponding level. By
default, the value is 10. When the cost type is “narrow”, its range is 1 through 63; when
the cost type is wide, its range is 1 to 16777215.
level-1: Indicates that the link cost corresponds to Level-1
level-2: Indicates that the link cost corresponds to Level-2
Description
Use the isis cost command to configure the link cost of this interface when performing
SPF calculation.
Use the undo isis cost command to restore the default link cost.
If neither Level-1 nor Level-2 is specified in the configuration, Level-1 will be the default
value.
The link cost for interfaces will effect the calculation of IS-IS routes.
Related command: cost-style.
Example
# Set the link cost of the Level-2 link on Interface serial1/0/0 to 5.

[H3C-Serial1/0/0] isis cost 5 level-2
4.1.22 isis dis-priority
Syntax
isis dis-priority value [ level-1 | level-2 ]

undo isis dis-priority [ level-1 | level-2 ]
View
Interface view
Parameter
value: Specifies the priority when selecting DIS, ranging from 0 to 127. By default, the
value is 64.
level-1: Specifies the priority when selecting Level-1 DIS.
level-2: Specifies the priority when selecting Level-2 DIS.
4-19
Description
Use the isis dis-priority command to configure the priority of an interface for the
corresponding level DIS election.
Use the undo isis dis-priority command to restore the default priority.
If the level is not specified, it defaults to set the Level-2 priority.
The IS-IS does not concern the concept of backup DIS. The router with the priority 0
can also run for the DIS, which is different from the DR election of OSPF.
Example
# Set the priority of Interface serial1/0/0 to 127.

[H3C-Serial1/0/0] isis dis-priority127 level-2
4.1.23 isis enable
Syntax
isis enable [ tag ]

undo isis enable [ tag ]
View
Interface view
Parameter
tag: Name given to an IS-IS routing process, when executing isis command in the
system view. If not specified, it is null.
Description
Use the isis enable command to configure this interface to activate the corresponding
IS-IS routing process.
Use the undo isis enable command to cancel this designation.
By default, the IS-IS routing process is not enabled on an interface.
For the normal operation of the IS-IS protocol, the isis command must be used to
enable the IS-IS process. Then the network-entity command is used to set a Network
Entity Title (NET) for the router. And, at last, the isis enable command is used to
enable each interface on which the IS-IS process runs. The IS-IS protocol will be
enabled upon the completion of these configurations.
Related command: isis and network-entity.
4-20
Note:
So far, a router can enable the IS-IS process on 255 interfaces at most, including logic
interfaces such as subinterfaces.
Example
# Create an IS-IS routing process named "h3c", and activate this routing process on
interface serial1/0/0.
[H3C] isis h3c
[H3C-isis] quit
[H3C-serial1/0/0] isis enable h3c
4.1.24 isis mesh-group
Syntax
isis mesh-group [ mesh-group-number | mesh-blocked ]

undo isis mesh-group
View
Interface view
Parameter
mesh-group-number: Specifies the mesh group number, ranging from 1 to

4294967295.
mesh-blocked: Blocks a specified interface, so that it will not flood the received LSP to
other interfaces.
Description
Use the isis mesh-group command to add an interface to a specified mesh group.
Use the undo isis mesh-group command to cancel this interface from the mesh
group.
By default, the interface does not belong to any mesh group and floods LSP normally.
The interface beyond the mesh group floods the received LSP to other interfaces,
following the normal procedure. This processing method applied to an NBMA network
with higher connectivity and several point-to-point links will cause repeated LSP
flooding and waste bandwidth.
4-21
The interface joining a mesh group only floods the received LSP to the interfaces
beyond the local mesh group.
Be sure to provide some redundancy when adding an interface to a mesh group or
blocking it, for avoiding the effect on the normal flooding of the LSP due to link failure.
Example
# Add interface serial1/0/0 to mesh group 3.

4.1.25 isis small-hello
Syntax
isis small-hello
undo isis small-hello
View
Interface view
Parameter
None
Description
Use the isis small-hello command to disable IS-IS to stuff Hello packets to the size of
interface MTU if their data sizes are smaller.
Use the undo isis small-hello command to restore the default to have IS-IS stuff Hello
packets to the size of interface MTU if their data sizes are smaller.
You are recommended to configure the isis small-hello command on the interfaces
with an MTU greater than 1500 bytes, such as tunnel and GE interfaces.
Example
# Disable ISIS to stuff Hello packets to the size of interface MTU when their data sizes
are smaller.
[H3C-tunnel0/0/0] isis small-hello
4.1.26 isis timer csnp
Syntax
isis timer csnp seconds [ level-1 | level-2 ]

undo isis timer csnp [ level-1 | level-2 ]
4-22
View
Interface view
Parameter
seconds: Specifies the CSNP packet interval on the broadcast network, ranging from 1
to 65535 and measured in seconds. By default, the value is 10 seconds.
level-1: Specifies the Level-1 CSNP packet interval.
level-2: Specifies the Level-2 CSNP packet interval.
If neither Level-1 nor Level-2 is specified, it defaults to set Level-1-2 Hello message
interval, that is, both Level-1 and Level-2 take effect.
Description
Use the isis timer csnp command to configure the interval of sending CSNP packets
on the broadcast network.
Use the undo isis timer csnp command to restore the default value, that is, 10
seconds.
Only DIS can periodically send CSNP packets, therefore, this command is valid only for
the router that is selected as the DIS. Furthermore, DIS is divided into Level-1 and
Level-2, and their intervals of sending CSNP packets must be set respectively.
Example
# Set the Level-2 CSNP packet to be transmitted every 15 seconds on the interface
Serial1/0/0.
[H3C-Serial1/0/0] isis timer csnp 15 level-2
4.1.27 isis timer hello
Syntax
isis timer hello seconds [ level-1 | level-2 ]

undo isis timer hello [ level-1 | level-2 ]
View
Interface view
Parameter
seconds: Specifies the Hello message interval, ranging from 3 to 255 and measured in
level-1: Specifies the Level-1 Hello interval.
4-23
level-2: Specifies the Level-2 Hello interval.

If neither Level-1 nor Level-2 is specified, it is defaulted to Level-1-2 Hello message
interval, that is, both Level-1 and Level-2 take effect.
Description
Use the isis timer hello command to configure the interval of sending hello message
of corresponding level.
Use the undo isis timer hello command to restore the default value, that is, 10
seconds.
On a broadcast link, Level-1 and Level-2 hello messages will be sent respectively and
their intervals should also be set respectively. Such settings are unnecessary on
point-to-point links. The shorter the sending interval is, the more system resources are
occupied to send hello messages. Therefore, the interval should be set according to
actual conditions.
Related command: isis timer dead.
Example
# Set the Hello message of Level-1 to be transmitted every 20 seconds on Interface

serial1/0/0.
[H3C-Serial1/0/0] isis timer hello 20 level-1
4.1.28 isis timer holding-multiplier
Syntax
isis timer holding-multiplier number [ level-1 | level-2 ]

undo isis timer holding-multiplier [ level-1 | level-2 ]
View
Interface view
Parameter
number: In the range of 0 to 3.
Description
Use the isis timer holding-multiplier command to configure the number of invalid
Hello messages for the interface.
Use the undo isis timer holding-multiplier command to restore the default settings.
The default number of invalid Hello messages is 3.
4-24
ISIS protocol maintains the adjacency between the adjacent routers by sending and
receiving Hello messages. If the local router does not receive a Hello message from the
peer within an interval, it regards the neighbor unavailable. The interval is the ISIS
holddown time.
In ISIS, the holddown time can be regulated by configuring the number of invalid Hello
messages. That is, the local router regards its neighbor unavailable if it has not
received the specific number of Hello messages consecutively.
If you do not specify Level-1 or Level-2 in the command, the system applies the number
of invalid Hello messages to Level-1 and Level-2.
Related command: isis timer hello.
Example
# Set the number of invalid Hello messages to 10.

[H3C] isis timer holding-multiplier 10
4.1.29 isis timer lsp
Syntax
isis timer lsp time

undo isis timer lsp
View
Interface view
Parameter
time: Specifies the LSP interval, ranging from 1 to 1000 and measured in milliseconds.
The default value is 33 milliseconds.
Description
Use the isis timer lsp command to configure minimum IS-IS LSP interval on the
interface.
Use the undo isis timer lsp command to restore the default setting.
Related command: isis timer retransmit.
Example
# Set the LSP interval on Interface serial1/0/0 to 500 milliseconds.

[H3C] interface Interface serial1/0/0
[H3C-Serial1/0/0] isis timer lsp 500
4-25
4.1.30 isis timer retransmit
Syntax
isis timer retransmit seconds

undo isis timer retransmit
View
Interface view
Parameter
seconds: Specifies the retransmission interval of LSP packets, with the range from 0 to
300 and the default value is 5 seconds.
Description
Use the isis timer retransmit command to configure the LSP retransmission interval
over the point-to-point link.
Use the undo isis timer retransmit command to restore the default setting.
Use this parameter cautiously when setting this parameter to avoid unnecessary
retransmission.
The response is required when sending LSP packets on the p2p link, not the broadcast
link, and therefore this command is unnecessary for the broadcast link.
Related command: isis timer lsp.
Example
# Set the LSP retransmission interval to 10 seconds on Interface serial1/0/0.

[H3C-Serial1/0/0] isis timer retransmit 10
4.1.31 is-level
Syntax
is-level { level-1 | level-1-2 | level-2 }

undo is-level
View
IS-IS view
Parameter
level-1: Configures the router to operate at Level-1, only calculate the intra-area routes
and maintain the LSDB of L1.
4-26
level-1-2: Configures the router to operate at Level-1-2, calculate both the L1 and L2
routes and maintain the LSDB of Level-1 and Level-2.
level-2: Configures the router to operate at Level-2, only switch Level-2 LSP and
calculate the Level-2 routes and maintain the LSDB of Level-2.
Description
Use the is-level command to configure the IS-IS level.

Use the undo is-level command to restore the default setting.
By default, the value is level-1-2.
You are recommended to set the system level when configuring IS-IS.
If there is only one area, you are recommended to set the level of all the routers as
Level-1 or Level-2, because it is not necessary for all the routers to maintain two
identical databases. You are recommended to set all the routers to Level-2 for
convenient future extension, when applying them to IP network.
Note:
As described in ISIS protocol, there is only one type of PDU Hello message on a
point-to-point link, while there are two types of PDU Hello messages on a LAN interface,
namely, Level-1 and Level-2. If you have configured different Level-1 and Level-2
authentication passwords on a point-to-point link, the system will have to choose one
type of password, since only one type of Hello message exists on a point-to-point link.
Hence the system will choose one password from Level-1 and Level-2 and put it into
the Hello message.
As for sender:
z If the sender is of Level-1 or Level-1-2 interface, it encapsulates the
Level-1authenticator into Hello message.
z If the sender is of Level-2 interface, it encapsulates the Level-2 authenticator into
Hello message.
z As for receiver:
z Supposing that the receiver is of Level-1 interface, it uses the Level-1 authenticator.
z Supposing that the receiver is of Level-2 interface, it uses the Level-1 authenticator
if its neighbors are of Level-1-2; otherwise, it uses the Level-2 authenticator.
z Supposing that the receiver is of Level-1-2 interface, it uses the Level-1
authenticator if its neighbors are of Level-1-2 or Level-1; otherwise, it uses the
Level-2 authenticator.
Related command: isis circuit-level.
4-27
Example
# Set the current router to operate on Level-1.

[H3C] isis
[H3C-isis] is-level level-1
Syntax
log-peer-change
View
IS-IS view
Parameter
None
Description
Use the log-peer-change command to configure to log the IS-IS adjacency changes.
Use the undo log-peer-change command to configure not to log the IS-IS adjacency
changes.
By default, IS-IS adjacency changes log is disabled.
After IS-IS adjacency changes log is enabled, the IS-IS adjacency changes will be
output on the configuration terminal until the log is disabled.
Example
# Configure to log the IS-IS adjacency changes on the current router.

[H3C-isis] log-peer-change
4.1.33 md5-compatible
Syntax
md5-compatible
undo md5-compatible
View
ISIS view
Parameter
None
4-28
Description
Use the md5-compatible command to configure ISIS to use the H3C-compatible MD5
algorithm. You need to use this command when MD5 authentication on ISIS is required
between your router and a H3C device.
Use the undo md5-compatible command to restore the default MD5 algorithm.
Example
# Configure ISIS to use the H3C-compatible MD5 algorithm.

[H3C-isis] md5-compatible
4.1.34 network-entity
Syntax
network-entity net
undo network-entity net
View
IS-IS view
Parameter
net: Specifies the NET (Network Entity Title ) in the X…X.XXXX....XXXX.00 format, in
which the first "X…X" is the area address, the twelve Xs in the middle is the System ID
of the router, and the 00 in the end is SEL.
Description
Use the network-entity command to configure the name of Network Entity Title (NET)
of the IS-IS routing process.
Use the undo network-entity command to cancel a NET.
By default, the value is No NET.
NET means the Network Service Access Point (NSAP). The NET field of IS-IS is 8 to 20
bytes.
It consists of three parts. Part one is area ID, which is variable (1 to 13 bytes), and the
area IDs of the routers in the same area are identical. Part two is system ID (6 bytes) of
this router, which must be unique in the whole area and backbone area. Part three, the
last byte "SEL", whose value must be "00". Usually, one router can be configured with
one NET. When the area is redesigned by combination or separation, after
reconfiguration, the correctness and continuity of the routes must be ensured.
Related command: isis and isis enable.
4-29
Example
# Specify NET as “10.0001.1010.1020.1030.00”, in which the system ID is

“1010.1020.1030”, area ID is “10.0001”.
[H3C] isis
4.1.35 preference
Syntax
preference value
undo preference
View
IS-IS view
Parameter
value: Specifies the preference, ranging from1 to 255. By default, the value is 15.
Description
Use the preference command to configure the preference of IS-IS protocol.

Use the undo preference command to restore the default value.
Several dynamic routing protocols could run simultaneously on a router. In this case,
there is an issue of sharing and selecting the routing information among all the routing
protocols. The system sets a preference for each routing protocol. When various
routing protocols find the route to the same destination, the protocol with the higher
preference will take effect.
Example
# Configure the preference of IS-IS as 25.

[H3C-isis] preference 25
4.1.36 reset isis all
Syntax
reset isis all
View
User view
4-30
Parameter
None
Description
Use the reset isis all command to reset all the IS-IS data.
This command is used when LSPs need refreshing immediately. For example, after
area-authentication-mode and domain-authentication-mode commands are
executed, the old LSP still remain on the router.
Example
# Clear all the IS-IS data.

<H3C> reset isis all
4.1.37 reset isis peer
Syntax
reset isis peer system-id
View
User view
Parameter
system-id: Specifiesy the system ID of IS-IS neighbor.
Description
Use the reset isis peer command to reset the IS-IS data of specified IS-IS neighbor.
This command is used when you want to reconfigure a certain neighbor.
Example
# Clear the IS-IS data of neighbor whose system ID is 0000.0c11.1111.

<H3C> reset isis peer 0000.0c11.1111
4.1.38 set-overload
Syntax
set-overload
undo set-overload
4-31
View
IS-IS view
Parameter
None
Description
Use the set-overload command to configure overload flag bit for the current router.
Use the undo set-overload command to reset the overload flag bit.
By default, no overload bit is set.
If a router is configured with the overload bit, it will be ignored by other routers in SPF
calculation. (However the directly connected routes will not be ignored.)
When the overload threshold is set, other routers should not send this router the
packets which should be forwarded by it.
Example
# Set overload flag bit on the current router.

[H3C-isis] set-overload
4.1.39 silent-interface
Syntax
silent-interface interface-type interface-number

undo silent-interface interface-type interface-number
View
IS-IS view
Parameter
interface-type: Specifies the interface type.

interface-number: Specifies the interface number.
Description
Use the silent-interface command to disable a specified interface to transmit IS-IS

packet.
Use the undo silent-interface command to enable the interface to transmit IS-IS
packet.
By default, all the interface are allowed to transmit/receive IS-IS packets.
4-32
The silent-interface command is only used to restrain the IS-IS packets not to be sent
on the interface, but the interface routes still can be sent from other interfaces.
Example
# Prohibit the IS-IS packets to be transmitted via Interface Ethernet1/0/0.

[H3C-isis] silent-interface Ethernet1/0/0
4.1.40 spf-delay-interval
Syntax
spf-delay-interval number
undo spf-delay-interval
View
IS-IS view
Parameter
number: Interval for actively releasing CPU in route calculation. It is in pieces, ranging
from 1000 to 50000. By default, the value is 5000.
Description
Use the spf-delay-interval command to configure the interval for actively releasing
CPU in the SPF calculation.
Use the undo spf-delay-interval command to restore the default setting.
When there are a large number of routes in the routing table, this command can be
used to set that CPU resources are released automatically after a certain number of
routes are processed. The unprocessed routes will be processed in one second.
The value of the parameter number can be adjusted according to the capacity of the
routing table. If the spf-slice-size command is also configured, the SPF calculation will
be paused when any setting item is met.
By default, CPU is released once when every 5000 pieces of routes are processed.
Related command: spf-slice-size.
Example
# Set IS-IS to release CPU once after processing every 3000 pieces of routes.
[H3C-isis] spf-delay-interval 3000
4-33
4.1.41 spf-slice-size
Syntax
spf-slice-size seconds
undo spf-slice-size
View
IS-IS view
Parameter
seconds: Duration time in seconds for SPF calculation each time in the range from 0 to
120. When the calculation duration time reaches or exceeds the set value, the
calculation of this time ends. If seconds is set to 0, it indicates that SPF calculation is
not divided into slices and it will operate until the end. By default, the value is 0.
Description
Use the spf-slice-size command to configure whether to set slice and the duration time
each time when IS-IS performs SPF route calculation.
Use the undo spf-slice-size command to restore the default setting.
When there are a large number of routes in the routing table, this command can be
used to enable the SPF calculation in slices to prevent it from occupying the system
resources for a long time. Each time the router processes some route information, it will
free CPU to process other things, and process route information after 1 second.
The user is recommended to use the command when the number of routes reaches
150,000 or 200,000 and the value of seconds is recommended as 1. In other cases, the
default setting should be used, that is, SPF runs to the end with no slice.
If the spf-delay-interval command is also configured, when SPF calculation is run, the
SPF calculation will be paused if any setting item is met.
Related command: spf-delay-interval.
Example
# Set the SPF duration time to 1 second.

[H3C-isis] spf-slice-size 1
4.1.42 summary
Syntax
summary ip-address mask [ level-1 | level-1-2 | level-2 ]

undo summary ip-address mask [ level-1 | level-1-2 | level-2 ]
4-34
View
IS-IS view
Parameter
ip-address: Address segment of the routes to be aggregated.

mask: Aggregated route mask.
level-1: Aggregates the routes redistributed into Level-1.
level-1-2: Aggregates the routes redistributed to both areas and backbone network.
level-2: Aggregates the routes redistributed to backbone network only.
Description
Use the summary command to configure IS-IS route summary.

Use the undo summary command to cancel the summary.
By default, no routes will be summarized.
Similarly, the routes with the same next hops can be aggregated into one route. In this
way, the sizes of the routing table, LSP packets and LSDB are reduced. Among them,
the aggregated route can be either a route found by IS-IS protocol, or an redistributed
route. Furthermore, the cost value of the aggregated route adopts the smallest cost of
the routes aggregated.
Example
# Set a route summary of 202.0.0.0/8.

[H3C-isis] summary 202.0.0.0 255.0.0.0
4.1.43 timer lsp-max-age
Syntax
timer lsp-max-age seconds

undo timer lsp-max-age
View
IS-IS view
Parameter
seconds: Specifies the maximum lifetime of LSP, measured in seconds. The range is 1
to 65535. The default value is 1200 seconds.
4-35
Description
Use the timer lsp-max-age command to configure the maximum lifetime of an LSP
generated by the current router.
Use the undo timer lsp-max-age command to restore the default value.
When a router generates the LSP of the system, it will fill in the maximum lifetime of this
LSP. When other routers receive this LSP, its lifetime will be reduced continuously as
the time goes by. If updated LSP has not been received before the old one times out,
this LSP will be deleted from the LSDB.
Related command: timer lsp-refresh.
Example
# Set the lifetime of an LSP generated by the current system to 25 minutes, i.e., 1500
seconds.
[H3C-isis] timer lsp-max-age 1500
4.1.44 timer lsp-refresh
Syntax
timer lsp-refresh seconds

undo timer lsp-refresh
View
IS-IS view
Parameter
seconds: Specifies the LSP refresh interval, measured in seconds. The range is 1 to
65535. The default value is 900 seconds.
Description
Use the timer lsp-refresh command to configure the refresh interval of LSP.
Use the undo timer lsp-refresh command to restore the default value.
By this mechanism, synchronization of the LSPs within the entire area can be
maintained.
Related command: timer lsp-max-age.
Example
# Set the LSP refresh interval of the current system to 1500 seconds.
[H3C-isis] timer lsp-refresh 1500
4-36
4.1.45 timer spf
Syntax
timer spf seconds [ level-1 | level-2 ]

undo timer spf [ level-1 | level-2 ]
View
IS-IS view
Parameter
seconds: Specifies the SPF calculation interval, ranging from 1 to 120 and measured in
level-1: Sets Level-1 SPF calculation interval only.
level-2: Sets Level-2 SPF calculation interval only.
If the level is not specified, it defaults to SPF interval of Level-1.
Description
Use the timer spf command to configure the interval for the SPF calculation.
Use the undo timer spf command to restore the default setting.
In IS-IS protocol, when the LSDB of the corresponding level is changed, SPF
calculation is required. However, if the SPF calculation is performed too frequently, the
system efficiency will be lowered and a great number of resources on the network will
be occupied. SPF calculation interval can improve its calculation efficiency to some
degree. This setting can be made according to actual conditions.
Example
# Set the SPF calculation interval of the router to 3 seconds.

[H3C-isis] timer spf 3
4-37
Comware V3 Chapter 5 BGP Configuration Commands
Chapter 5 BGP Configuration Commands
5.1 BGP Configuration Commands
Note:
For the commands defining routing policies in BGP, refer to the next chapter “IP
Routing Policy Configuration Commands”.
For the configuration examples and parameter explanation of VPNv4 and VPN
instance in BGP, refer to the "Multicast" module and "MPLS" module of this manual.
5.1.1 aggregate
Syntax
aggregate address mask [ as-set ] [ detail-suppressed ] [ suppress-policy

route-policy-name ] [ origin-policy route-policy-name ] [ attribute-policy
route-policy-name ]
undo aggregate address mask [ as-set ] [ detail-suppressed ] [ suppress-policy
route-policy-name ] [ origin-policy route-policy-name ] [ attribute-policy
route-policy-name ]
View
BGP view
Parameter
address: Address of the aggregated route, in dotted decimal notation.

mask: Network mask of the aggregated route, in dotted decimal notation.
as-set: Creates a route with AS segment.
detail-suppressed: Only advertises the aggregated route.
suppress-policy route-policy-name: Suppresses the individual routes selected, some
of which are not advertised.
origin-policy route-policy-name: Selects the originating routes used for aggregation.
attribute-policy route-policy-name: Sets the attributes of the aggregated route.
5-1
Description
Use the aggregate command to establish an aggregated record in the BGP routing
table.
Use the undo aggregate command to cancel the function.
By default, there is no route aggregation.
The keywords are explained as follows:
Table 5-1 Functions of the keywords
Keywords Function
Used to create an aggregated route, whose AS path
information includes individual routes. Use this keyword
as-set carefully when many AS paths need to be aggregated, for
the frequent change of individual routes may lead to route
vibration.
This keyword does not suppress any aggregated route, but
it suppresses the advertisement of all the individual routes. If
detail-suppressed
only some individual routes are to be suppressed, use the
peer filter-policy command.
Used to create an aggregated route and suppress the
advertisement of the specified route. If you want to suppress
suppress-policy some specific routes selectively and leave other routes still
being advertised, use the if-match clause of the
route-policy command.
Selects only the individual routes that are in accordance with
origin-policy
route-policy to create an aggregated route.
Sets aggregated route attributes. The same work can be
attribute-policy
done by using the peer route-policy command, etc.
Example
# Establish an aggregated record in the BGP routing table.

[H3C-bgp] aggregate 192.213.0.0 255.255.0.0
5.1.2 balance
Syntax
balance num
undo balance
View
BGP view
5-2
Parameter
num: Number of the BGP routes participating in load balancing. It is in the range 1 to 8.
When it is set to 1, load balancing is disabled.
Description
Use the balance command to configure the number of routes participating in BGP load
balancing.
Use the undo balance command to restore the default, that is, 1. In this case, load
balancing is disabled.
Different from IGP, BGP is just a single-purpose routing protocol and therefore has no
explicit metric for making load balancing decision. Instead, it implements load
balancing by changing its routing rule.
Related command: display ip routing-table.
Example
# Set the number of routes participating in BGP load balancing to 2.

[H3C] bgp 100
[H3C-bgp] balance 2
5.1.3 bgp
Syntax
bgp as-number
undo bgp [ as-number ]
View
System view
Parameter
as-number: Specifies the local AS number, ranging from 1 to 65535.
Description
Use the bgp command to enable BGP and enter the BGP view.
Use the undo bgp command to disable BGP.
By default, BGP is not enabled.
This command is used to enable and disable BGP as well as to specify the local AS
number of BGP.
Example
# Enable BGP.
5-3
[H3C] bgp 100

[H3C-bgp]
5.1.4 compare-different-as-med
Syntax
compare-different-as-med
undo compare-different-as-med
View
BGP unicast view, BGP multicast view, VPNv4 view
Parameter
None
Description
Use the compare-different-as-med command to enable comparison of MED values of

routes from neighbors residing in different ASs when determining the best route.
Use the undo compare-different-as-med command to disable the comparison.
By default, it is disabled to compare the MED attribute values from the routing paths of
different AS peers.
If there are several routes available to one destination address, the route with smaller
MED value can be selected as the final route item for use.
You are not recommended to use this command unless you can make sure that the
ASs adopt the same IGP and routing method.
Example
# Enable the comparison of the MED attribute values of routes from neighbors in
different AS.
[H3C-bgp] compare-different-as-med
5.1.5 confederation id
Syntax
confederation id as-number
undo confederation id
View
BGP view
5-4
Parameter
as-number: Number of the AS which contains multiple sub-ASs. The range is from 1 to
65535.
Description
Use the confederation id command to configure confederation identifier.

Use the undo confederation id command to cancel the configured confederation ID.
By default, the confederation ID is not configured.
Confederation can be adopted to solve the problem of too many IBGP full connections
in a large AS domain. The solution is, first dividing the AS domain into several smaller
sub-ASs, and each sub-ASs remains full-connected. These sub-ASs form a
confederation. Key IGP attributes of the route, such as next hop, MED, local preference,
are not discarded across each sub-ASs. The sub-ASs still look like a whole from the
point of view of a confederation although these sub-ASs have EBGP relations. This can
assure the integrality of the former AS domain, and ease the problem of too many
connections in the domain.
Related command: confederation nonstandard and confederation peer-as.
Example
# Confederation 9 consists of four sub-ASs, namely, 38, 39, 40 and 41. Here, the peer
10.1.1.1 is an internal member of the AS confederation while the peer 200.1.1.1 is an
external member of the AS confederation. For external members, Confederation 9 is a
unified AS domain.
[H3C] bgp 41
[H3C-bgp] confederation id 9
[H3C-bgp] confederation peer-as 38 39 40
[H3C-bgp] peer 10.1.1.1 as-number 38
5.1.6 confederation nonstandard
Syntax
confederation nonstandard
undo confederation nonstandard
View
BGP view
Parameter
None
5-5
Description
Use the confederation nonstandard command, the router can be compatible with the
AS confederation not adopting RFC1965.
Use the undo confederation nonstandard command to cancel this function.
By default, the configured confederation is consistent with RFC1965.
All the H3C routers in the confederation should be configured with this command for
interworking with those nonstandard devices.
Related command: confederation id and confederation peer-as.
Example
# AS100 contains routers not following RFC1965, which is composed of two sub-ASs,
64000 and 65000.
[H3C] bgp 64000
[H3C-bgp] confederation id 100
[H3C-bgp] confederation peer-as 65000
[H3C-bgp] confederation nonstandard
5.1.7 confederation peer-as
Syntax
confederation peer-as as-number-1 [ ......as-number-n ]

undo confederation peer-as [ as-number-1 ] [......as-number-n ]
View
BGP view
Parameter
as-number-1...as-number-n: Sub-AS numbers, ranging from 1 to 65535. Up to 32

sub-ASs can be configured for a confederation.
Description
Use the confederation peer-as command to specify the sub-ASs constituting a

confederation.
Use the undo confederation peer-as command to expel the specified sub-ASs from
the confederation.
By default, no sub-AS is configured as a member of the confederation.
The sub-ASs specified in this command must be inside a confederation and each
sub-AS must be a fully meshed network. The confederation id command must be
5-6
used to specify the confederation to which each sub-AS belongs; otherwise, this
configuration is invalid
Related command: confederation nonstandard and confederation id.
Example
# Configure the confederation to contain AS 2000 and 2001.

[H3C-bgp] confederation peer-as 2000 2001
5.1.8 dampening
Syntax
dampening [ half-life-reachable half-life-unreachable reuse suppress ceiling ]

[ route-policy policy-name ]
undo dampening
View
BGP view
Parameter
half-life-reachable: Specifies the half-life when the route is reachable. The range is 1 to
45 minutes. By default, the value is 15 minutes.
half-life-unreachable: Specifies the half-life when the route is unreachable. The range is
1 to 45 minutes. By default, the value is 15 minutes.
reuse: Penalty value of a route when it starts to be reused. The range is 1 to 20000. By
default, its value is 750.
suppress: Penalty threshold of a route when it starts to be suppressed. The range is 1
to 20000. By default, its value is 2000.
ceiling: Upper threshold of the penalty. The range is 1001 to 20000. By default, its value
is 16000.
policy-name: Route policy name.
Description
Use the dampening command to make BGP route dampening valid or modify various
BGP route dampening parameters.
Use the undo dampening command to make the characteristics invalid.
By default, no route dampening is configured.
If these parameters are not set, their default values are used. half-life-reachable,
half-life-unreachable, reuse, suppress and ceiling are mutually dependent. Once any
one is configured, all others should also be specified accordingly.
5-7
The dampening command dampens only the routes that are learned from EBGP peers;
it dampens no IBGP routes.
Related command: reset dampening, reset bgp flap-info, display bgp routing
dampened, and display bgp routing flap-info.
Example
# Modify BGP route dampening parameters.

[H3C-bgp] dampening 15 15 1000 2000 10000
5.1.9 debugging bgp
Syntax
debugging bgp { all | event | normal }

debugging bgp { keepalive | mp-update | open | packet | route-refresh | update }
[ receive | send ] [ verbose ]
undo debugging bgp { all | event | normal | keepalive | mp-update | open | packet |
route-refresh | update }
View
User view
Parameter
all: All BGP debugging items.

event: BGP event debugging.
Normal: BGP normal operation debugging.
keepalive: BGP keepalive packet debugging.
mp-update: MBGP Update packet debugging.
open: BGP Open packet debugging.
packet: BGP packet debugging.
route-refresh: BGP route-refresh packet debugging.
update: BGP Update packet debugging.
receive: Received packet debugging.
send: Sent packet debugging.
verbose: Displays detailed debugging information.
Description
Use the debugging bgp command to enable debugging of specified BGP packets and
events.
5-8
Use the undo debugging bgp command to disable debugging of specified BGP
packets or events.
By default, debugging is disabled for any items.
System performance is influenced when debugging is enabled. Therefore, this
command should be used cautiously. Disable debugging of any item after gone
through.
Example
# Enable BGP packet debugging.

<H3C> debugging bgp packet
5.1.10 default-route imported
Syntax
default-route imported
undo default-route imported
View
BGP view
Parameter
None
Description
Use the default-route imported command to redistribute local default routes into BGP.
Use the undo default-route imported command to disable the redistribution.
By default, local default routes are not redistributed into BGP.
Example
# Redistribute local default routes into BGP.

[H3C-bgp] default-route imported
5.1.11 default local-preference
Syntax
default local-preference value

undo default local-preference
View
5-9
Parameter
value: Local preference value to be configured. The range is 0 to 4294967295, the

larger the value is, the higher the preference is. By default, its value is 100.
Description
Use the default local-preference command to configure the local preference.

Use the undo default local-preference command to restore the default value.
Configuring different local preferences will affect BGP routing selection.
Example
# Two routers RTA and RTB reside in the same autonomous area and use the X.25 and
Frame Relay protocols separately to connect with external autonomous areas. The
command can be used to configure the local preference of RTB as 180 so that the route
via RTB is preferred to forward packets.
[H3C-bgp] default local-preference 180
5.1.12 default med
Syntax
default med med-value

undo default med
View
BGP unicast view, BGP multicast view, VPNv4 view, VPN instance view
Parameter
med-value: MED value to be specified. The range is 0 to 4294967295. By default, the

med-value is 0.
Description
Use the default med command to configure the system MED value.
Use the undo default med command to restore the default MED value.
Multi-exit discriminator (MED) is an external metric for routes. Different from local
preference, MED is exchanged between ASs and will stay in the AS once it enters the
AS. The smaller an MED is, the better a route is. So the route with a lower MED is
preferred. When a router running BGP obtains several routes with identical destination
address and different next-hops from various external peers, it will select the best route
depending on the MED value. In the case that all other conditions are the same, the
system first selects the route with the smaller MED value as the external route of the
autonomous system.
5-10
Example
# Routers RTA and RTB belong to AS100, and router RTC belongs to AS200. RTC is
the peer of RTA and RTB. The network between RTA and RTC is X.25 network and the
network between RTB and RTC is Ethernet. So the MED of RTA can be configured as
25 to allow RTC to select the route transmitted by RTB first.
[H3C-bgp] default med 25
5.1.13 display bgp group
Syntax
display bgp [ multicast | [ vpnv4 { all | route-distinguisher route-distinguisher |

vpn-instance vpn-instance-name } ] ] group [ group-name ]
View
Any view
Parameter
group-name: A specified peer group.

vpn-instance vpn-instance-name: Name of VPN instance.
Description
Use the display bgp group command to view the information of peer groups.
Example
# Display the information of the peer group "aaa".

<H3C> display bgp group aaa
Group : aaa type : external
as-number : 200
members in this group :
10.1.1.1 11.1.1.1
configuration within the group :
no export policy route-policy
no export policy filter-policy
no export policy as-path-acl
no export policy ip-prefix
route-policy specified in import policy : aaa
no import policy filter-policy
no import policy as-path-acl
no import policy ip-prefix
5-11
Table 5-2 Description on the fields of the display bgp group command
Field Description
Group Name of the BGP peer group
type Type of the BGP peer group: IBGP or EBGP
as-number AS number of the BGP peer group
members in this group Members in this BGP peer group
route-policy Name of the configured route policy
filter-policy Route filtering policy of BGP
as-path-acl AS path ACL used for route filtering
ip-prefix IP prefix list used for route filtering
5.1.14 display bgp network
Syntax

vpn-instance vpn-instance-name } ] ] network
View
Any view
Parameter

route-distinguisher route-distinguisher: Name of route-distinguisher.
Description
Use the display bgp network command to view the routing information that has been
configured.
Example
# View the routing information that has been configured.

<H3C> display bgp network
Network Mask Route-policy
133.1.1.0 255.255.255.0 None
112.1.0.0 255.255.0.0 None
5-12
Table 5-3 Description on the fields of the display bgp network command
Field Description
Network Network address
Mask Mask
Route-policy Route policy
5.1.15 display bgp paths
Syntax
display bgp paths as-regular-expression
View
Any view
Parameter
as-regular-expression: Matched AS path regular expression.
Description
Use the display bgp paths command to view the information about AS paths
Example
# Display the information about the AS paths.

<H3C> display bgp paths 500
Id Hash-index References Aggregator Origin As-Path
---------------------------------------------------
3 214 1 <null> INC 500
Table 5-4 Description on the fields of the display bgp paths command
Field Description
Id Sequence number
Hash-Index Hash index
References Count of the times that the path is referenced
Aggregator Mask length of the aggregate route
5-13
Field Description
Origin attribute of the route, which can take on one of the following
values:
Indicates that a route is interior to the AS.
IGP Aggregate routes and the routes defined using the
Origin network command are considered IGP routes.
Indicates that a route is learned from the exterior gateway
EGP
protocol (EGP).
Short for INCOMPLETE. It indicates that the origin of a
INC
route is unknown and the route is learned by other means.
AS-path attribute of the route. It records all ASs traversed by the
As-path
route for avoiding routing loops.
5.1.16 display bgp peer
Syntax
display bgp [ multicast ] peer [ [ peer-address ] verbose ]

display bgp vpnv4 { all | route-distinguisher route-distinguisher | vpn-instance
vpn-instance-name } peer [ [ peer-address ] verbose ]
View
Any view
Parameter
peer-address: Specifies the IP address of the peer to be displayed, in dotted decimal

notation.
route-distinguisher route-distinguisher: Name of route-distinguisher.
verbose: Displays the detailed information of the peer.
Description
Use the display bgp peer command to view the information of peer.
Use the display bgp multicast peer command to view the information of MBGP peer.
Use the display bgp vpnv4 peer command to view the information of VPN peer.
Example
# Display the information of all BGP peers.

<H3C> display bgp peer
Peer AS-num Ver Queued-Tx Msg-Rx Msg-Tx Up/Down State
5-14
-------------------------------------------------------------------
1.1.1.10 300 4 0 3 5 00:00:10 Established
2.2.2.11 100 4 0 0 0 Never Idle
Table 5-5 Description on the fields of the display bgp peer command
Field Description
Peer IP address of the peer
AS-num AS number of the peer
Ver BGP version of the peer
Queued-Tx Number of the packets in the transmit queue
Msg-Rx Number of messages received from this peer
Msg-Tx Number of messages sent to this peer
Up/Down Up/down time of the peer
State Current state of the peer
# View the details of peer 1.1.1.10.

<H3C> display bgp peer 1.1.1.10 verbose
Peer: 1.1.1.10+1024 Local: 1.1.1.20+179
Type: Internal
State: Established Flags: <>
Expiring Time: 00:02:49
Last State: OpenConfirm Last Event: RecvKeepAlive
Last Error: None
Options: <>
Peer Version: 4 Peer ID: 1.1.1.10 Local ID: 8.8.8.8
Active Holdtime: 180s, Keepalive: 60s
Group Bit: 0 Send state: in sync
Last traffic (seconds): Received 11 Sent 17 Checked 17
Input messages: Total 3 Updates 2 Octets 439
Output messages: Total 5 Updates 3 Octets 264
Peer capabilities:
Route refresh: advertised and received
Ipv4-family Unicast: advertised and received
Ipv4-family Multicast: advertised and received
Ipv4-family VPNv4: advertised and received
Configuration within the peer :

route-policy specified in export policy : 2
5-15
Table 5-6 Description on the fields of the display bgp peer verbose command
Field Description
IP address of the peer and the port number for
Peer: 1.1.1.10+1024
TCP connection
IP address of the local and the port number for
Local: 1.1.1.20+179
TCP connection
Type: Internal BGP version of the peer
State: Established Current state of the peer
Displays the remaining lifetime of the peer. This
Expiring Time: 00:02:49 field is displayed only when the state of the peer
is Established
The last state of the peer before transitting to the
Last State: OpenConfirm
current state
Last Event: RecvKeepAlive The last event that triggers state transition
Peer capabilities: The negotiated peer capabilities

Route refreshing capability. Advertised means
Route refresh: route advertisement is allowed and Received
means route updates can be received.
Ipv4-family Unicast: IPv4 unicast address family capacity
Ipv4-family Multicast: IPv4 multicast address family capacity
Ipv4-family VPNv4: IPv4 VPN address family capacity
5.1.17 display bgp routing
Syntax
display bgp [ multicast | vpnv4 { all | route-distinguisher route-distinguisher |

vpn-instance vpn-instance-name } ] routing [ ip-address mask | statistic ]
View
Any view
Parameter
multicast: Displays the MBGP routing information in BGP routing table.

all: Displays all VPNv4 routing information.
route-distinguisher route-distinguisher: Displays network layer reachable information
(NLRI) matching the specified routing distinguisher (RD).
vpn-instance vpn-instance-name: Displays NLRI associated with the specified VPN
instance.
5-16
ip-address: Destination network address, in dotted decimal notation.

mask: Network mask, in dotted decimal notation.
statistic: Displays statistics of routes.
Description
Use the display bgp routing command to view the BGP routing information in the
BGP routing table.
Use the display bgp multicast routing command to view the MBGP routing
information in the BGP routing table.
Use the display bgp vpnv4 routing command to view the VPN routing information in
the BGP routing table.
Example
# Display BGP routing information.

<H3C> display bgp routing
Flags: # - valid ^ - active I - internal
D - damped H - history S - aggregate suppressed
B - balance
Dest/Mask Next-hop Med Local-pref Origin As-path

-------------------------------------------------------------------------
#^ 129.1.1.0/24 5.5.5.5 0 100 IGP 600
#^ 129.1.2.0/24 5.5.5.5 0 100 IGP 600
#^ 129.1.3.0/24 5.5.5.5 0 100 IGP 600
#^ 129.1.4.0/24 5.5.5.5 0 100 IGP 600
#^ 129.1.5.0/24 5.5.5.5 0 100 IGP 600
#^ 129.1.6.0/24 5.5.5.5 0 100 IGP 600
#^ 129.1.7.0/24 5.5.5.5 0 100 IGP 600
#^ 129.1.8.0/24 5.5.5.5 0 100 IGP 600
#^ 129.1.9.0/24 5.5.5.5 0 100 IGP 600
#^ 129.1.10.0/24 5.5.5.5 0 100 IGP 600
5-17
Table 5-7 Description on the fields of the display bgp routing command
Field Description
State flags:
# – valid
^ – best
D – damped
Flags
H – history
I – internal (IGP)
S – aggregate suppressed (suppressed)
B – balance
Dest/Mask Destination address/mask
Next Hop Next hop IP address
Multi-exit discriminator (MED) attribute, in the range 0 to
Med
4,294,967,295
Local-Pref Local preference value, in the range 0 to 4,294,967,295
values:

EGP
protocol (EGP).
INC
As-path
5.1.18 display bgp routing as-path-acl
Syntax

vpn-instance vpn-instance-name } ] ] routing as-path-acl aspath-acl-number
View
Any view
Parameter
acl-number: Number of the specified AS path to be matched, ranging from 1 to 199.
5-18
Description
Use the display bgp routing as-path-acl command to view routes that match an
as-path ACL.
Example
# Display routes that match filtering list.

<H3C> display bgp routing as-path-acl 1
B - balance
Dest/Mask Pref Next-Hop Med Local-pref Origin As-path

--------------------------------------------------------------------
#^ 1.1.1.0/24 256 10.10.10.1 0 100 IGP 200
#^ 1.1.2.0/24 256 10.10.10.1 0 100 IGP 200
#^ 1.1.3.0/24 256 10.10.10.1 0 100 IGP 200
#^ 2.2.3.0/24 256 10.10.10.1 0 100 INC 200
#^ 4.4.4.0/24 256 10.10.10.1 0 100 INC 200
#^ 9.9.9.0/24 256 10.10.10.1 0 100 INC 200
#^ 10.10.10.0/24 256 10.10.10.1 0 100 IGP 200
#^ 22.1.0.0/16 256 200.1.7.2 100 100 INC 200
Table 5-8 Description on the fields of the display bgp routing as-path-acl command
Field Description
Pref Preference
Nexthop Next hop IP address
Med Multi-exit discriminator (MED) attribute
Local-pref Local preference
values:

EGP
protocol (EGP).
INC
5-19
Field Description
As-path
5.1.19 display bgp routing cidr
Syntax

vpn-instance vpn-instance-name } ] ] routing cidr
View
Any view
Parameter
None
Description
Use the display bgp routing cidr command to view the routing information about the
non-natural mask (namely the classless inter-domain routing, CIDR).
Example
<H3C> display bgp routing cidr

Flags: # - valid, ^ - best,
D - damped, H - history,
I - internal, S – aggregate suppressed
Dest/Mask Pref Next-Hop Med Local-pref Origin As-path

--------------------------------------------------------------------
#^ 1.1.1.0/24 10.10.10.1 0 100 IGP 200
#^ 1.1.2.0/24 10.10.10.1 0 100 IGP 200
#^ 1.1.3.0/24 10.10.10.1 0 100 IGP 200
#^ 2.2.3.0/24 10.10.10.1 0 100 INC 200
#^ 4.4.4.0/24 10.10.10.1 0 100 INC 200
#^ 9.9.9.0/24 10.10.10.1 0 100 INC 200
#^ 10.10.10.0/24 10.10.10.1 0 100 IGP 200
#^ 22.1.0.0/16 200.1.7.2 100 100 INC 200
For description on the output of the command, see Table 5-7.
5-20
5.1.20 display bgp routing community
Syntax

vpn-instance vpn-instance-name } ] ] routing community [ aa:nn |
no-export-subconfed | no-advertise | no-export ] [ whole-match ]
View
Any view
Parameter
aa:nn: Specifies a community number.

no-export-subconfed: Indicates not to advertise matched routes outside the AS.
no-advertise: Indicates not to advertise matched routes to any peer.
no-export: Indicates not to advertise routes outside the AS but to other sub ASs.
whole-match: Displays the exactly matched routes.
Description
Use the display bgp routing community command to view the routing information
related to the specified BGP community number in the routing table.
Example
# Display the routing information matching the specified BGP community number.
<H3C> display bgp routing community 11:22
B - balance
Dest/Mask Next-Hop Med Local-pref Origin As-path

-------------------------------------------------------------------
#^ 1.0.0.0/8 172.10.0.2 0 100 IGP 2
#^ 2.0.0.0/8 172.10.0.2 0 100 IGP 2
5.1.21 display bgp routing community-list
Syntax

vpn-instance vpn-instance-name } ] ] routing community-list community-list-number
[ whole-match ]
5-21
View
Any view
Parameter
community-list-number: Specifies a community-list number.

whole-match: Displays the exactly matched routes.
Description
Use the display bgp routing community-list command to view the routing
information matching the specified BGP community list.
Example
# View the routing information matching BGP community list 1.

[H3C] display bgp routing community-list 1
B - balance
Destination/Mask Pref Next-hop Med Local-Pref Origin As-Path

-------------------------------------------------------------------
1.1.1.0/24 256 10.10.10.1 0 IGP 200
1.1.2.0/24 256 10.10.10.1 0 IGP 200
1.1.3.0/24 256 10.10.10.1 0 IGP 200
2.2.3.0/24 256 10.10.10.1 0 INC 200
4.4.4.0/24 256 10.10.10.1 0 INC 200
9.9.9.0/24 256 10.10.10.1 0 INC 200
10.10.10.0/24 0 10.10.10.2 0 IGP
10.10.10.0/24 256 10.10.10.1 0 IGP 200
5.1.22 display bgp routing dampened
Syntax
display bgp routing dampened
View
Any view
Parameter
None
5-22
Description
Use the display bgp routing dampened command to view BGP dampened routes.
Example
# Display BGP dampened routes.

<H3C> display bgp routing dampened
B - balance
Dest/Mask Source Damping-limit Origin As-path
-----------------------------------------------------------------
#D 11.1.0.0 133.1.1.2 1:20:00 IGP 200
Table 5-9 Description on the fields of the display bgp routing dampened command
Field Description
State flags:
# – valid
^ – best
D – damped
Flags
H – history
B – balance
#D Valid and damped routes
Dest/Mask The route to this destination network segment is damped.
Source Next hop of the route
Damping-limit Time after which the route can recover from the damped state
values:

network command are considered IGP routes.
Origin
Indicates that a route is learned from the exterior
EGP
gateway protocol (EGP).
INC route is unknown and the route is learned by other
means.
As-path
5-23
5.1.23 display bgp routing different-origin-as
Syntax
display bgp [ multicast ] routing different-origin-as
View
Any view
Parameter
None
Description
Use the display bgp routing different-origin-as command to view routes that have
different source autonomous systems.
Example
# View the routes that have different source ASs.

<H3C> display bgp routing different-origin-as
B - balance
Destination/Mask Pref Next-hop Med Local-Pref Origin As-Path

------------------------------------------------------------------------
10.10.10.0/24 0 10.10.10.2 0 IGP
10.10.10.0/24 256 10.10.10.1 0 IGP 200
5.1.24 display bgp routing flap-info
Syntax
display bgp routing flap-info [ { regular-expression as-regular-expression } |

{ as-path-acl aspath-acl-number } | { network-address [ mask [ longer-match ] ] } ]
View
Any view
Parameter
as-regular-expression: Displays the route flap-info matching AS path regular

expression.
acl-number: Number of the specified AS path to be matched, ranging from 1 to 199.
5-24
network-address: Network IP address related to the flap statistics to be displayed.

mask: Network mask.
longer-match: Displays the route flap statistics that is more specific than
<network-address, mask>.
Description
Use the display bgp routing flap-info command to view BGP flap statistics. When
<network-address mask> is <0.0.0.0 0.0.0.0>, this command will view the flap statistics
of all BGP routes.
Example
# Display BGP flap statistics.

<H3C> display bgp routing flap-info
B - balance
Dest/Mask Source Keepup-time Damping-limit Flap-times Origin As-path
--------------------------------------------------------------------
#D 11.1.0.0/16 133.1.1.2 48 1:20:30 4 IGP 200
Table 5-10 Description on the fields of the display bgp routing flap-info command
Field Description
State flags:
# – valid
^ – best
D – damped
Flags
H – history
B – balance
#D Valid and damped routes
Dest/Mask The route to this destination network segment is damped.
Source Next hop of the route
Keepup-time Time that the damping has lasted
Flap-times Number of route flaps
5-25
Field Description
values:
EGP
protocol (EGP).
INC
As-path
5.1.25 display bgp routing peer { advertised | received }
Syntax
display bgp routing peer peer-address { advertised | received } [ network-address

[ mask ] | statistic ]
View
Any view
Parameter
peer-address: Specifies the peer to be displayed.

advertised: Routing information advertised by the specified peer.
received: Routing information the specified peer received.
network-address: IP address of the destination network segment.
mask: Mask of the destination network segment.
statistic: Displays the statistics for the route.
Description
Use the display bgp routing peer command to view the routing information the
specified BGP peer advertised or received.
Related command: display bgp peer.
Example
# View the routing information advertised by BGP peer 10.10.10.1.

[H3C] display bgp routing peer 10.10.10.1 advertised
5-26

B - balance
Dest/mask Next -Hop Med Local-pref Origin As-path
*> 10.10.10.0/24 0.0.0.0 INC
5.1.26 display bgp routing peer dampened
Syntax
display bgp routing peer peer-address dampened [ statistic | ip-address ]
View
Any view
Parameter
peer-address: IP address of the BGP peer.

statistic: Statistics about dampened routes.
ip-address: Details about the specified dampened route.
Description
Use the display bgp routing peer dampened command to view the information about
the dampened routes received from the specified peer.
Example
# Display the information about the dampened routes received from the specified peer.
<H3C>display bgp routing peer 133.1.1.1 dampened

B - balance
Dest/Mask Source Damping-limit Origin Path

--------------------------------------------------------------------------
--
#D 10.0.0.0/8 133.1.1.1 28:30 INC 200
# Display statistics about the dampened routes received from the specified peer.
<H3C>display bgp routing peer 133.1.1.1 dampened statistic
Received damping routes total: 1
# Display the details about the dampened routes to the 10.0.0.0 segment received from
the specified peer.
5-27
<H3C> display bgp routing peer 133.1.1.1 dampened 10.0.0.0

B - balance
Dest/Mask Source Damping-limit Origin Path

--------------------------------------------------------------------------
--
#D 10.0.0.0/8 133.1.1.1 28:00 INC 200
Table 5-11 Description on the fields of display bgp routing peer dampened
Field Description
State flags:
# – valid
^ – best
D – damped
Flags
H – history
B – balance
Source Source IP address
values:

EGP
protocol (EGP).
INC
As-path
5.1.27 display bgp routing peer regular-expression
Syntax
display bgp routing peer peer-address regular-expression text
5-28
View
Any view
Parameter
peer-address: IP address of the BGP peer.

statistic: Statistics about dampened routes.
text: AS regular expression.
Description
Use the display bgp routing peer regular-expression command to view the route
information received from the specified peer and matching the specified regular
expression.
Example
# Display the route information received from the specified peer and matching the
regular expression 200.
<H3C> display bgp routing peer 133.1.1.1 regular-expression 200
B - balance
Dest/Mask Next-Hop Med Local-pref Origin Path

----------------------------------------------------------------------
Received Routes:
#D 10.0.0.0 133.1.1.1 0 INC 200
5.1.28 display bgp routing regular-expression
Syntax

vpn-instance vpn-instance-name } ] ] routing regular-expression
as-regular-expression
View
Any view
Parameter
as-regular-expression: Matched AS regular expression.
5-29
Description
Use the display bgp routing regular-expression command to view the routing
information matching the specified AS regular expression.
Example
# Display the routing information matching with AS regular expression ^200$.

<H3C> display bgp routing regular-expression ^200$
B - balance
Destination/Mask Pref Next-hop Med Local-Pref Origin Path
--------------------------------------------------------------------
1.1.1.0/24 100 10.10.10.1 0 IGP 200
1.1.2.0/24 100 10.10.10.1 0 IGP 200
1.1.3.0/24 100 10.10.10.1 0 IGP 200
2.2.3.0/24 100 10.10.10.1 0 INC 200
4.4.4.0/24 100 10.10.10.1 0 IGP 200
9.9.9.0/24 100 10.10.10.1 0 INC 200
10.10.10.0/24 256 10.10.10.1 0 IGP 200
5.1.29 display bgp routing statistic
Syntax
display bgp routing statistic
View
Any view
Parameter
None
Description
Use the display bgp routing statistic command to display statistics about BGP
routes.
Example
# Display statistics about BGP routes.

<H3C> display bgp routing statistic
Routes total: 4
5-30
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]

undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]
View
Parameter
acl-number: Specifies the number of ACL matching the destination address field of
routing information, ranging from 2000 to 3999.
ip-prefix-name: Specifies the name of the address prefix list matching the destination
address field of routing information, ranging from 1 to 19.
protocol: Specifies routing information of which kind of routing protocol to be filtered. It
can be direct, ospf, ospf-ase, ospf-nssa, isis, rip, and static at present.
Description
Use the filter-policy export command to filter the advertised routes and only the
routes passing the filter can be advertised by BGP.
Use the undo filter-policy export command to cancel the filtering to the advertised
routes.
By default, the advertised routing information is not filtered.
If the argument protocol is specified, only routes redistributed from the specified
protocol are filtered, and routes redistributed from other protocols are not affected. If
the parameter protocol is not specified, routes redistributed from any protocol will be
filtered.
Example
# Use acl 2003 to filter all routes advertised by BGP.

[H3C-bgp] filter-policy 2003 export
Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name } import
undo filter-policy { acl-number | ip-prefix ip-prefix-name } import
5-31
View
Parameter
acl-number: Specifies the number of ACL matching the destination address field of
routing information, ranging from 2000 to 3999.
ip-prefix ip-prefix-name: Address prefix list name. The matched object is the
destination address field of the routing information, ranging from 1 to 19.
gateway ip-prefix-name: Address prefix list name of the neighboring router. The
matched object is the routing information distributed by the specified neighboring router,
ranging from 1 to 19.
Description
Use the filter-policy gateway import command to filter the learned routing information
advertised by the specified address.
Use the undo filter-policy gateway import command to remove the filtering to the
routing information advertised by the specified address.
Use the filter-policy import command to filter the received global routing information.
Use the undo filter-policy import command to remove the filtering to the received
global routing information.
By default, the received routing information is not filtered.
This command can be used to filter the routes received by BGP and determines
whether to add the routes to the BGP routing table.
Example
# Use acl 2003 to filter the routing information received by BGP.

[H3C-bgp] filter-policy 2003 import
5.1.32 group
Syntax
group group-name { [ internal ] | external }

undo group group-name
View
BGP view
Parameter
group-name: Specifies the name of the peer group. It can be an alphanumeric string
with the length ranging from 1 to 47.
5-32
internal: Creates an internal peer group.

external: Creates an external peer group including other sub ASs in the confederation.
Description
Use the group command to create a peer group.

Use the undo group command to delete the configured peer group.
The use of BGP peer group is for ease of configuration. When you are starting several
peers with the same configuration, you can establish and configure a peer group at first,
and then add all the peers to the peer group so that they have the same configuration
as the peer group.
By default, an IBGP peer is added to the default peer group and needs no configuration,
and the route update policy configured for any IBGP peer is valid for the other IBGP
peers in the group. To be specific, if the router is not a route reflector, all the IBGP peers
are in the same group. If the router is a route reflector, all the route reflection clients are
in a group, while non-clients are in another group.
The external peer group members must be in the same network segment. Otherwise,
some EBGP peers may discard the transmitted route update.
The peer group members cannot be configured with a route update policy different from
that of the peer group, but can be configured with different ingress policies.
Example
# Establish a peer group "test".

[H3C-bgp] group test
5.1.33 import-route
Syntax
import-route protocol [ med med-value ] [ route-policy route-policy-name ]

View
BGP view
Parameter
protocol: Specifies the routing protocol from which to redistribute routes, it can be
direct, ospf, ospf-nssa , ospf-ase, rip, bgp, and static at present.
med med-value: Specifies the MED value to be applied to redistributed routes, ranging
from 0 to 4294967295.
route-policy route-policy-name: Specifies the route-policy for filtering redistributed
routes. It can be an alphanumeric string with the length ranging from 1 to 19.
5-33
Description
Use the import-route command to redistribute routes from other protocols.

Use the undo import-route command to disable the configuration.
By default, BGP does not redistribute the routes from other protocols.
Example
# Redistribute routes from RIP.

[H3C-bgp] import-route rip
5.1.34 ip as-path-acl
Syntax
ip as-path-acl aspath-acl-number { permit | deny } as-regular-expression

undo ip as-path-acl aspath-acl-number
View
System view
Parameter
aspath-acl-number: Number of AS path list ranging from 1 to 199.

as-regular-expression: AS path regular expression.
The routing information packet of the BGP protocol includes an AS path field. During
BGP routing information exchange, all the ASs along the route are recorded in this field.
Identifying an AS path list is to compare it with a regular expression. A regular
expression is a combination of characters. For example, ^200. *100$ means all the AS
path fields that begin with AS200 and end with AS100.
The following table shows the special characters used in AS regular expressions and
their meanings.
Table 5-12 Special characters in regular expressions
Character Meaning
. Matches any single character, including blank space.
* Matches 0 or more patterns.
+ Matches 1 or more patterns.
^ Matches the beginning of an input string.
$ Matches the end of an input string.
5-34
Character Meaning
Matches a comma, left brace, right brace, left parenthesis, right
_ parenthesis, the beginning of an input string, the end of an input
string, or a space.
[ range ] Means the range of single-character patterns.
- Separates the ending points of a range.
You can specify a regular expression to match AS path information when defining
aspath-acl. The system can filter out unmatched routing information by matching
aspath-acl. You can define multiple aspath-acl commands for one list number, that is,
one list number can represent a group of AS access lists. Each AS path list is identified
by a number.
Description
Use the ip as-path-acl command to configure an AS path regular expression.

Use the undo ip as-path-acl command to disable the defined regular expression.
The configured AS path list can be used in BGP policy.
Related command: peer as-path-acl, and display bgp routing as-path-acl.
Example
# Configure an AS path list.

[H3C] ip as-path-acl 10 permit 200,300
5.1.35 ip community-list
Syntax
ip community-list stand-comm-list-number { permit | deny } { aa:nn | internet |

no-export-subconfed | no-advertise | no-export }
ip community-list ext-comm-list-number { permit | deny } as-regular-expression
undo ip community-list { stand-comm-list-number | ext-comm-list-number }
View
System view
Parameter
stand-comm-list-number: Number of the standard community list ranging from 1 to 99.

ext-comm-list-number: Number of the extended community list ranging from 100 to
199.
permit: Permits those that match the conditions to access.
5-35
deny: Denies those that match the conditions to access.

aa:nn: Community number, where aa is the AS number and nn is the community
number.
internet: Advertises all routes.
as-regular-expression: Community attribute in the regular expression form.
Description
Use the ip community-list command to configure a BGP community list.

Use the undo ip community-list command to delete the configured BGP community
list.
The configured community list can be used in BGP policy.
Related command: apply community, and display bgp routing community-list.
Example
# Define a community attribute list and indicate not to advertise routes with the
community attribute beyond the AS.
[H3C] ip community-list 6 permit no-export-subconfed
Syntax
log-peer-change
View
BGP view
Parameter
None
Description
Use the log-peer-change command to turn on the BGP adjacency changes output
switch.
Use the undo log-peer-change command to turn off the BGP adjacency changes
output switch.
By default, BGP adjacency changes output switch is turned off.
5-36
After the BGP adjacency changes output switch is turned on, BGP adjacency changes
will be output to the configuration terminal until the switch is turned off.
Example
# Turn on the BGP adjacency changes output switch on the current router.
[H3C-bgp] log-peer-change
5.1.37 network
Syntax
network ip-address [ address-mask ] [ route-policy route-policy-name ]

undo network ip-address [ address-mask ] [ route-policy route-policy-name ]
View
BGP view
Parameter
ip-address: Network address for BGP to advertise.

address-mask: Mask of the network address.
route-policy-name: Route-policy applied to the advertised route.
Description
Use the network command to configure the network routes advertised by the local
BGP system.
Use the undo network command to cancel the existing configuration.
By default, no route is advertised by the local BGP system.
Example
# Advertise the route through network segment 10.0.0.0/16.

[H3C-bgp] network 10.0.0.1 255.255.0.0
5.1.38 peer advertise-community
Syntax
peer group-name advertise-community

undo peer group-name advertise-community
View
BGP view, VPNv4 view, VPN instance view
5-37
Parameter
group-name: Specifies the name of the peer group.
Description
Use the peer advertise-community command to enable the transmission of

community attributes to a peer group.
Use the undo peer advertise-community command to cancel the existing
configuration.
By default, community attributes are not transmitted to any peer group.
Related command: if-match community-list, apply community.
Example
# Enable the transmission of community attributes to peer group test.

[H3C-bgp] peer test advertise-community
5.1.39 peer allow-as-loop
Syntax
peer { group-name | peer-address } allow-as-loop [ number ]

undo peer { group-name | peer-address } allow-as-loop
View
Parameter

peer-address: Specifies the IP address of the peer.
number: Specifies the repeating times of the local AS number. The range is 1 to 10.
Description
Use the peer allow-as-loop command to configure the repeating times of the local AS
number.
Use the undo peer allow-as-loop command to cancel the configuration.
Related command: display current-configuration, display bgp routing peer, and
display bgp routing group.
Example
# Configure the repeating times of the local AS number to 2.

[H3C-bgp] peer 1.1.1.1 allow-as-loop 2
5-38
5.1.40 peer as-number
Syntax
peer group-name as-number as-number

undo peer group-name as-number as-number
View
BGP view
Parameter

as-number: Peer AS number of the peer group. The range is 1 to 65,535.
Description
Use the peer as-number command to specify an AS number for a peer group.
Use the undo peer as-number command to delete the AS number of a peer group.
By default, no AS number is configured.
Example
# Specify the AS number of the peer group test as 100.

[H3C-bgp] peer test as-number 100
5.1.41 peer as-path-acl
Syntax
peer { group-name | peer-address } as-path-acl number import

undo peer { group-name | peer-address } as-path-acl number import
peer group-name as-path-acl number export
undo peer group-name as-path-acl number export
View
Parameter

aspath-acl-number: Specifies the filtering list number of an AS regular expression. The
range is 1 to 199.
import: Distribution list for received routes.
5-39
export: Distribution list for advertised routes.
Description
Use the peer as-path-acl command to specify BGP route filtering policy based on AS
path list for a peer/peer group.
Use the undo peer as-path-acl command to cancel the existing configuration.
By default, a peer/peer group has no AS path list associated.
Example
# Set the AS path ACL for peer group test.

[H3C] ip as-path-acl 10 permit 200,300
[H3C] bgp 100
[H3C-bgp] peer test as-path-acl 10 export
5.1.42 peer connect-interface
Syntax
peer { group-name | peer-address } connect-interface interface-type

interface-number
undo peer { group-name | peer-address } connect-interface interface-type
interface-number
View
BGP view
Parameter

interface-type interface-number: Specifies the type and name of the interface.
Description
Use the peer connect-interface command to specify the source interface for route
updates.
Use the undo peer connect-interface command to restore the best source interface.
By default, BGP uses the best source interface.
Usually, BGP uses the optimal source interface to forward route updates. However, for
updates to be forwarded in case the interface experiences a failure, you can configure
to use the Loopback interface for forwarding route updates.
5-40
Example
# Specify to use loopback0 as the source interface for route updates.

[H3C-bgp] peer test connect-interface loopback 0
5.1.43 peer default-route-advertise
Syntax
peer group-name default-route-advertise

undo peer group-name default-route-advertise
View
BGP view
Parameter
Description
Use the peer default-route-advertise command to redistribute a default route to a

peer group.
Use the undo peer default-route-advertise command to cancel the existing
configuration.
By default, no default route is redistributed to a peer group.
For this command, no default route is required in the routing table. A default route is
sent unconditionally to a peer with the next hop being itself.
Example
# Redistribute a default route to peer group "test".

[H3C-bgp] peer test default-route-advertise
5.1.44 peer description
Syntax
peer { group-name | peer-address } description description-line

undo peer { group-name | peer-address } description
View
BGP view
5-41
Parameter

description-line: Description information to be configured, an alphanumeric string up to
79 characters.
Description
Use the peer description command to configure the description information of the
peer/peer group.
Use the undo peer description command to remove the description information of the
peer/peer group.
By default, no description information is configured for a peer (group).
Related command: display current-configuration, display bgp peer, and display
bgp routing group.
Example
# Configure the description information of the peer named group1 as beijing1.

[H3C-bgp] peer group1 description beijing1
5.1.45 peer ebgp-max-hop
Syntax
peer group-name ebgp-max-hop [ ttl ]

undo peer group-name ebgp-max-hop
View
BGP view
Parameter

ttl: Specifies the maximum hop count. The range is 1 to 255. By default, the value is 64.
Description
Use the peer ebgp-max-hop command to allow establishing EBGP connection with a
neighbor on an indirectly connected network.
Use the undo peer ebgp-max-hop command to cancel the existing configuration.
By default, this feature is disabled.
5-42
Example
# Allow to establish EBGP connection with peer group "test" on an indirectly connected
network.
[H3C-bgp] peer test ebgp-max-hop
5.1.46 peer enable
Syntax
peer { group-name | peer-address } enable

undo peer { group-name | peer-address } enable
View
BGP unicast address family view, IPv4 multicast sub-address family view, VPNv4
address family view, L2VPN address family view
Parameter

Description
Use the peer enable command to enable the specified peer (group).
Use the undo peer enable command to disable the specified peer (group).
Note that the peer peer-address enable command can be configured in unicast
address family view only. Use this command to disable the unicast function of the peer.
You can delete the peer from the group in the corresponding address to disable its
multicast function or VPNv4 function.
By default, BGP peer (group) is enabled in unicast address family, but disabled in VPN
and MBP address families.
If the specified peer/peer group is disabled, the router will not exchange routing
information with the specified peer (group).
Example
# Deactivate the specified peer.

[H3C] bgp 180
[H3C-bgp] undo peer 18.10.0.9 enable
# Configure a peer and activate it in VPNv4 unicast address family view.

[H3C] bgp 100
5-43
[H3C-bgp] ipv4-family vpnv4 unicast

[H3C-bgp-af-vpn] peer 10.15.0.15 enable
# Configure a peer and activate it in IPv4 multicast address family view.

[H3C] bgp 200
[H3C-bgp] ipv4-family multicast
[H3C-bgp-af-mul] peer 20.10.0.1 enable
5.1.47 peer filter-policy
Syntax
peer { group-name | peer-address } filter-policy acl-number import

undo peer { group-name | peer-address } filter-policy acl-number import
peer group-name filter-policy acl-number export
undo peer group-name filter-policy acl-number export
View
BGP view, IPv4 multicast sub-address family view
Parameter

list-number: Specifies the IP ACL number.
import: Applies the filter-policy to received routes.
export: Applies the filter-policy to advertised routes.
Description
Use the peer filter-policy import command to configure BGP to filter routes received
from the peer (group) based on the ACL.
Use the undo peer filter-policy import command to cancel filtering of the received
routes based on the ACL.
Use the peer filter-policy export command to configure BGP to filter routes advertised
to the peer (group) based on the ACL.
Use the undo peer filter-policy export command to cancel filtering of the advertised
routes based on the ACL.
By default, no filtering is applied to routes advertised or received.
Related command: ip as-path acl and peer as-path-acl.
5-44
Example
# Set the filter-policy list of peer group test.

[H3C-acl-basic-2003] rule 0 deny source 98.12.0.0 0.0.0.255
[H3C] bgp 100
[H3C-bgp] peer test filter-policy 2003 import
5.1.48 peer group
Syntax
For multicast address family or VPNv4 address family:

peer peer-address group group-name
undo peer peer-address group
For unicast address family or VPN-INSTANCE address family:
peer peer-address group group-name [ as-number as-number ]
undo peer peer-address group
View
BGP view
Parameter
group-name: Specifies the name of the peer group. It can be an alphanumeric string
with the length ranging from 1 to 47.
as-number: Specifies the AS number for the peer.
Description
Use the peer group command to add a peer to a peer group.

Use the undo peer group command to delete the specified peer from a peer group.
In the unicast/VPN-INSTANCE address family view, when adding a peer to an external
peer group without a specified AS number, specify an AS number for the peer at the
same time. While it is unnecessary when adding the peer to an internal peer group or
an external peer group with a specified AS number.
In the multicast/VPNv4 address family view, it is required that the peer to be added
exist and have been added to a peer group in the unicast address family (the peer can
be disabled).
5-45
In different address family views, a peer can be added to different peer groups and a
peer group can have different members.
Example
# Add the peer with IP address being 10.1.1.1 to the peer group TEST.
[H3C-bgp] group TEST
[H3C-bgp] peer 10.1.1.1 group TEST
5.1.49 peer ip-prefix
Syntax
peer { group-name | peer-address } ip-prefix prefixname import

undo peer { group-name | peer-address } ip-prefix prefixname import
peer group-name ip-prefix prefixname export
undo peer group-name ip-prefix prefixname export
View
Parameter

prefixname: Specifies the name of the ip-prefix.
import: Applies the filtering policy to routes received by the specified peer/peer group.
export: Applies the filtering policy to routes advertised to the specified peer/peer group.
Description
Use the peer ip-prefix import command to configure BGP to filter routes received from
the peer/peer group based on the ip-prefix list.
Use the undo peer ip-prefix import command to cancel filtering of the received routes
based on the ip-prefix list.
Use the peer ip-prefix export command to configure BGP to filter routes advertised to
the peer/peer group based on the ip-prefix list.
Use the undo peer ip-prefix export command to cancel filtering of the advertised
routes based on the ip-prefix list.
By default, no filtering is applied to routes advertised or received.
Related command: ip ip-prefix.
5-46
Example
# Configure the route filtering policy based on the ip-prefix list.

[H3C-bgp] peer group1 ip-prefix list1 import
5.1.50 peer next-hop-local
Syntax
peer group-name next-hop-local

undo peer group-name next-hop-local
View
BGP view
Parameter
Description
Use the peer next-hop-local command to configure the next hop in the route to be
advertised to the peer group as the address of the local router.
Use the undo peer next-hop-local command to cancel the configuration.
Example
# Make BGP take its own address as the next hop when distributing a route to peer
group test.
[H3C-bgp] peer test next-hop-local
5.1.51 peer password
Syntax
peer { group-name | peer-address } password { cipher | simple } password

undo peer { group-name | peer-address } password
View
BGP view, MBGP VPN-instance address family view
Parameter

peer-address: Specifies the IP address of the peer, in dotted decimal format.
cipher: Displays the configured password in cipher text.
simple: Displays the configured password in simple text.
5-47
password: Password, a string with 1 to 16 characters when argument simple is

configured in the command or in the event of inputting the password in simple text but
argument cipher is configured in the command; with 24 characters in the event of
inputting the password in cipher text when argument cipher is configured in the
command.
Description
Use the peer password command to configure BGP to perform MD5 authentication
before setting up a TCP connection.
Use the undo peer password command to cancel the configuration.
By default, BGP does not perform MD5 authentication before setting up a TCP
connection.
Once MD5 authentication is enabled, both parties involved in the authentication must
be configured with the exact authentication mode and password. Otherwise, the TCP
connection will not be set up because of the failed authentication.
This command is used to configure MD5 authentication for a specific peer only when
the peer group to which the peer belongs is not configured with MD5 authentication.
Otherwise, the peer group configuration takes precedence.
Example
# Perform MD5 authentication on the TCP connection set up between the local router at
10.1.100.1 and the peer router at 10.1.100.2.
[H3C-bgp] peer 10.1.100.2 password simple h3c
# Perform the similar configuration on the peer.

[H3C-bgp] peer 10.1.100.1 password simple h3c
5.1.52 peer public-as-only
Syntax
peer group-name public-as-only

undo peer group-name public-as-only
View
BGP view
Parameter
5-48
Description
Use the peer public-as-only command to configure not to carry the private AS number
when transmitting BGP updates.
Use the undo peer public-as-only command to configure to carry the private AS
number when transmitting BGP updates.
By default, the private AS number is carried when BGP updates are transmitted.
Generally, BGP transmits BGP updates with the AS number (either the public AS
number or the private AS number). To enable some outbound routers to ignore the
private AS number when transmitting updates, configure not to carry the private AS
number when transmitting BGP updates.
Example
# Configure not to carry the private AS number when transmitting BGP updates to the
peer named test.
[H3C-bgp] peer test public-as-only
5.1.53 peer reflect-client
Syntax
peer group-name reflect-client

undo peer group-name reflect-client
View
BGP view, VPNv4 view
Parameter
Description
Use the peer reflect-client command to configure a peer group as the route reflector
client.
Use the undo peer reflect-client command to cancel the existing configuration.
By default, no route reflector is in AS.
Generally speaking, it is not necessary to configure this command for the peer group
because IBGP peers are in the default group. A single peer peer-address reflect-client
command should be used to configure the route reflector clients.
Related command: reflect between-clients and reflect cluster-id.
5-49
Example
# Configure the peer group "test" as the route reflector client.

[H3C-bgp] peer test reflect-client
5.1.54 peer route-policy
Syntax
peer { group-name | peer-address } route-policy policy-name import

undo peer { group-name | peer-address } route-policy policy-name import
peer group-name route-policy policy-name export
undo peer group-name route-policy policy-name export
View
Parameter

route-policy-name: Specifies the route-policy.
import: Applies the route-policy to routes received from the peer (group).
export: Applies the route-policy to routes advertised to the peer (group).
Description
Use the peer route-policy import command to configure MBGP to filter routes
received from the peer (group) based on the route-policy.
Use the undo peer route-policy import command to disable the specified
route-policy.
Use the peer route-policy export command to configure MBGP to filter routes
advertised to the peer (group) based on the route-policy.
Use the undo peer route-policy export command to disable the specified
route-policy.
By default, the peer (group) has no route-policy associated.
Example
# Apply routing policy test-policy to routes from peer group test.

[H3C-bgp] peer test route-policy test-policy import
5-50
5.1.55 peer route-update-interval
Syntax
peer group-name route-update-interval seconds

undo peer group-name route-update-interval
View
Parameter

seconds: Specifies the minimum interval of sending UPDATE message. The range is 0
to 600 seconds. By default, the interval is 5 seconds for internal peer groups, and 30
seconds for external peer groups.
Description
Use the peer route-update-interval command to configure the interval for a peer
group to advertise route updates.
Use the undo peer route-update-interval command to restore the default value.
Example
# Configure BGP peer group test to advertise route updates at intervals of 10 seconds.
[H3C-bgp] peer test route-update-interval 10
5.1.56 peer shutdown
Syntax
peer { group-name | peer-address } shutdown

undo peer {group-name | peer-address } shutdown
View
BGP view, VPN instance view
Parameter

5-51
Description
Use the peer shutdown command to disable the specified BGP peer or peer group to
initiate or receive BGP connection or to disconnect a BGP connection that has existed.
Use the undo peer shutdown command to restore the default, allowing the peer/peer
group to initiate or receive BGP connection.
Example
# Disable the BGP peer 1.1.1.1 to initiate or receive BGP connection.

[H3C-bgp] peer 1.1.1.1 shutdown
5.1.57 peer timer
Syntax
peer { group-name | peer-address } timer keep-alive keepalive-interval hold

holdtime-interval
undo peer { group-name | peer-address } timer
View
BGP view
Parameter

keepalive-interval: Specifies the Keepalive interval. The range is 0 to 65535 seconds.
By default, its value is 60 seconds.
holdtime-interval: Specifies the Holdtime interval. The range is 0 to 65535 seconds. By
default, its value is 180 seconds.
Description
Use the peer timer command to configure Keepalive and Holdtime intervals for a peer
(group).
Use the undo peer timer command to restore the default values.
The timer configured by using this command has a higher priority than the one
configured by using the timer command.
Example
# Configure the Keepalive and Holdtime intervals of the peer group "test".
[H3C-bgp] peer test timer keep-alive 60 hold 180
5-52
5.1.58 preference
Syntax
preference value
undo preference
View
BGP protocol view, BGP multicast address family view
Parameter
value: Specifies the preference, ranging from 1 to 256. By default, the value is 170.
Description
Use the preference command to configure the preference of BGP protocol.

Use the undo preference command to restore the default preference.
Each kind of routing protocol has its own preference, by which the routing policy will
select the optimal from the routes of different protocols. The greater the preference
value is, the lower the preference is. BGP defines two kinds of routes: routes learned
from external peers and routes learned from internal peers. The preferences of the two
kinds of routes can be different, and can be set manually.
Different BGP preferences for different sub-address families are supported, so are
unicast address family and multicast address family at present.
Example
# Configure the preference of the BGP protocol to 150.

[H3C-bgp] preference 150
5.1.59 reflect between-clients
Syntax
reflect between-clients
undo reflect between-clients
View
Parameter
None
5-53
Description
Use the reflect between-clients command to enable route reflection between clients.
Use the undo reflect between-clients command to disable this function.
By default, route reflection between clients is enabled.
After a route reflector is configured, it reflects the routes of a client to other clients. If the
clients of a route reflector are fully connected, disable route reflection between clients
to reduce overheads.
Related command: reflector cluster-id and peer reflect-client.
Example
# Disable the route reflection between clients.

[H3C-bgp] undo reflect between-clients
5.1.60 reflector cluster-id
Syntax
reflector cluster-id { cluster-id | address }

undo reflector cluster-id
View
Parameter
cluster-id: Specifies the cluster ID of the route reflector, in integer or IP address format,
with the range from 1 to 4294967295.
address: Specifies the interface address of the route reflector’s cluster ID.
Description
Use the reflector cluster-id command to configure the cluster ID of the route reflector.
Use the undo reflector cluster-id command to remove the configured cluster ID.
By default, each route reflector uses its router ID as the cluster ID.
Usually, there is only one route reflector in a cluster. It is the router ID of the reflector
that identifies the cluster. You can configure multiple route reflectors to improve the
stability of the network. If a cluster is configured with multiple route reflectors, use this
command to configure the identical cluster ID for all the reflectors.
Related command: reflect between-clients and peer reflect-client.
Example
# Set cluster ID for local router to identify the cluster.
5-54
[H3C-bgp] reflector cluster-id 80

[H3C-bgp] peer 11.128.160.10 reflect-client
5.1.61 refresh bgp
Syntax
refresh bgp { all | peer-address | { group group-name } } [ multicast | vpnv4 |

vpn-instance vpn-instance-name ] { import | export }
View
User view
Parameter
all: Refreshes all the peers.

peer-address: Refreshes the peer with the specified address.
group-name: Refreshes all the members in the specified peer group.
vpnv4: Refreshes routes of VPNv4 address family for the peer.
multicast: Refreshes routes of multicast address family for the peer.
vpn-instance vpn-instance-name: Refreshes VPN routes for the peer in the specified
VPN-INSTANCE.
import: Sends ROUTE-REFRESH packet to the peer to require retransmission of all
the routes.
export: Retransmits all the routes to the peer.
Description
Use the refresh bgp command to request the peer to retransmit routes or retransmit
routes to the peer.
After a BGP connection is created, only incremental routes are transmitted. But in some
cases, for example, when the routing policy is changed, retransmission of routes is
required on both ends, and the routes will be filtered according to the new policy.
Example
# Request all the peers to retransmit multicast routes.

<H3C> refresh bgp all multicast import
# Retransmit all the routes to the CE peer 10.1.1.1 in VPN-INSTANCE vpn1.

<H3C> refresh bgp 10.1.1.1 vpn-instance vpn1 export
5-55
5.1.62 reset bgp
Syntax
reset bgp { all | peer-address } [ vpn-instance vpn-instance-name ]
View
User view
Parameter
all: Resets all the BGP connections.

peer-address: Resets only the connection with the specified BGP peer.
vpn-instance vpn-instance-name: Name of specified VPN-INSTANCE. The range is 1
to 19.
Description
Use the reset bgp peer-address command to reset the connection of BGP with a
specified peer.
Use the reset bgp all command to reset all the BGP connections.
After changing the BGP policy or protocol configuration, resetting BGP connections can
make the newly configured policy in effect immediately.
Example
# Reset all the BGP connections to enable the new configuration (after configuring new
Keepalive and Holdtime intervals using the timer command).
<H3C> reset bgp all
5.1.63 reset bgp flap-info
Syntax
reset bgp flap-info [ regular-expression as-regular-expression | as-path-acl

aspath-acl-number | network-address [ mask ] } ]
reset bgp network-address [ flap-info ]
View
User view
Parameter
regular-expression as-regular-expression: Clears the flap statistics of routes

matching the AS path regular expression.
5-56
as-path-acl aspath-acl-number: Clears the flap statistics of routes in consistency with

the specified filtering list. The range of the argument is 1 to 199.
network-address: Clears the flap statistics recorded at this IP address. If this argument
is put before flap-info, the router clears the flap statistics of all the routes from this
address.
mask: Network mask.
Description
Use the reset bgp flap-info command to reset the flap statistics of routes.
Related command: dampening.
Example
# Clear the flap statistics of all routes matching filtering list 10.
<H3C> reset bgp flap-info as-path-acl 10
5.1.64 reset bgp group
Syntax
reset bgp group group-name [ vpn-instance vpn-instance-name ]
View
User view
Parameter
group-name: Specifies the name of the peer group, in a string with 1 to 47 characters.
vpn-instance vpn-instance-name: Specifies the name of the VPN-INSTANCE. The
range is 1 to 19.
Description
Use the reset bgp group command to reset the BGP connections of all the members
in the specified peer group.
Related command: peer group.
Example
# Reset the BGP connections of all members from peer group group1.
<H3C> reset bgp group group1
5-57
5.1.65 reset dampening
Syntax
reset dampening [ network-address [ mask ] ]
View
User view
Parameter
network-address: Network IP address related to clearing dampening information.

mask: Network mask.
Description
Use the reset dampening command to clear the dampening information and flap
statistics of a route and release the suppression of a suppressed route.
Related command: dampening and display bgp routing dampened.
Example
# Clear the dampening information of the route to network 20.1.0.0, and release the
suppression of the suppressed route.
<H3C> reset dampening 20.1.0.0 255.255.0.0
5.1.66 summary
Syntax
summary
undo summary
View
BGP unicast view, BGP multicast view, VPN instance view
Parameter
None
Description
Use the summary command to configure automatic aggregation of sub-network routes.

Use the undo summary command to disable automatic aggregation.
By default, no automatic aggregation of sub-network routes is executed.
After the summary is configured, BGP cannot receive sub-network routes redistributed
from IGP, so the amount of the routing information can be reduced.
5-58
Example
# Configure automatic aggregation of the sub-network routes.

[H3C-bgp] summary
5.1.67 timer keep-alive hold
Syntax
timer keep-alive keepalive-interval hold holdtime-interval

undo timer
View
Parameter
keepalive-interval: Interval for sending Keepalive message, ranging from 0 to 65535.

By default, its value is 60 seconds.
holdtime-interval: Keepalive time of BGP, ranging from 0 to 65535. By default, its value
is 180 seconds.
Description
Use the timer keep-alive hold command to configure the Keepalive and Holdtime
timer of BGP.
Use the undo timer keep-alive hold command to restore the default values of the
Keepalive and Holdtime timers.
Example
# Configure the Keep-alive and Hold-time timers as 30 seconds and 60 seconds,

respectively.
[H3C-bgp] timer keep-alive 30 hold 60
5.1.68 undo synchronization
Syntax
undo synchronization
View
Parameter
None
5-59
Description
Use the undo synchronization command to remove the synchronization between

BGP and IBGP.
Example
[H3C-bgp] undo synchronization
5.2 MBGP Configuration Commands
Note:
In the following command description, BGP unicast view indicates the common BGP
view.
For the specific configuration of MBGP multicast extension, refer to the "Multicast"
module of this manual.
For the specific configuration of VPN instance and VPNv4, refer to "MPLS" module in
this manual.
5.2.1 ipv4-family
Syntax
ipv4-family { multicast | vpn-instance vpn-instance-name }

undo ipv4-family { multicast | vpn-instance vpn-instance-name }
View
Parameter
multicast: Enters the BGP multicast extended address family view with the argument.
vpn-instance vpn-instance-name: Associates the specified VPN instance with the
IPv4 address family. Enter the MBGP address family view of BGP with this argument.
Description
Use the ipv4-family command to enter IPv4 extended address family view of BGP.
Use the undo ipv4-family command to remove all configurations in extended address
family view and return to IPv4 unicast address family view of BGP.
Use the command to enter the IPv4 extended address family view. In this view,
parameters related to the address family can be configured for BGP.
5-60
Use the undo ipv4-family multicast command to exit the multicast extended address
family view, remove all configurations in the address family view and return to BGP
unicast view.
Use the undo ipv4-family vpn-instance vpn-instance-name command to remove the
association between the specified VPN instance and IPv4 address family and delete all
configurations in the address family and return to BGP unicast view.
Use the ipv4-family multicast command to multicast. For relevant contents, refer to
"MBGP Multicast Extended" chapter in module "Multicast" of this manual.
Use the ipv4-family vpn-instance command for BGP/MPLS VPN. For related
description, refer to "MPLS VPN" chapter in module "MPLS" module of this manual.
Related command: ipv4-family vpnv4 and peer enable.
Example
None
5.2.2 ipv4-family vpnv4
Syntax
ipv4-family vpnv4 [ unicast ]

undo ipv4-family vpnv4 [ unicast ]
View
BGP view
Parameter
unicast: Enters VPN-IPv4 unicast address family view with this argument.
Description
Use the ipv4-family vpnv4 command to enter VPNv4 address family view of BGP.
Use the undo ipv4-family vpnv4 command to delete all configurations in VPNv4
address family view and return to IPv4 unicast address family view of BGP.
The ipv4-family vpnv4 command is used for BGP/MPLS VPN. For related description,
refer to "MPLS VPN" chapter in module "MPLS" of this manual.
The present Comware software platform only supports IPv4 unicast address of VPN.
Performing the ipv4-family vpnv4 command will enter VPN-IPv4 unicast address
family view even if the unicast argument is not specified.
Related command: ipv4-family and peer enable.
5-61
Example
None
5-62
Comware V3 Chapter 6 IP Routing Policy Configuration Commands
Chapter 6 IP Routing Policy Configuration

Commands
6.1 IP Routing Policy Configuration Commands

6.1.1 apply as-path
Syntax
apply as-path as-number-1 [ as-number-2 [ as-number-3 ... ] ]

undo apply as-path
View
Routing policy view
Parameter
as-number-1... as-number-n: AS numbers to be added.
Description
Use the apply as-path command to specify the AS numbers to be added in front of the
original AS path in route-policy.
Use the undo apply as-path command to cancel the AS sequence numbers added in
front of the original AS path.
By default, no AS number is set.
If the match condition of route-policy is satisfied, the AS attribute of the transmitting
route will be changed. Up to 10 AS numbers can be added.
The as-path number is primarily used to prevent routing loops. By setting as-path, you
can change the BGP route selection behavior.
Example
# Add AS 200 in front of the original AS path in route-policy.

[H3C-route-policy] apply as-path 200
6.1.2 apply community
Syntax
apply community { { {aa:nn | no-export-sunconfed | no-export | no-advertise} …

[ additive ] } | additive | none }
6-1
undo apply community
View
Routing policy view
Parameter
aa:nn: Community number.

additive: Community attributes of additional routes.
none: Community attributes of the deleted routes.
Description
Use the apply community command to set BGP community attributes in route-policy.
Use the undo apply community command to cancel the configured BGP community
attributes.
By default, no BGP community attributes are set.
Configure BGP community attributes after matching the route-policy conditions.
Related command: ip community-list, if-match community-list, route-policy,
display bgp routing community.
Example
# Display how to configure one route-policy named setcommunity, whose node serial
number is 16 and match mode is permit, and enter route policy view to set match
conditions and attribute modification actions to be executed.
[H3C] route-policy setcommunity permit node 16
[H3C-route-policy] if-match as-path 8
[H3C-route-policy] apply community no-export
6.1.3 apply cost
Syntax
apply cost value

undo apply cost
View
Routing policy view
6-2
Parameter
value: Specifies the route cost value of route information.
Description
Use the apply cost command to set the route cost value of route information.
Use the undo apply cost command to cancel the apply clause.
Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip
next-hop, if-match cost, if-match tag, route-policy, apply ip-address, apply
local-preference, apply origin, and apply tag.
Example
# Display how to define one apply clause. When it is used for setting route information
attribute, it sets the route cost value of route information as 120.
[H3C-route-policy] apply cost 120
6.1.4 apply cost-type
Syntax
apply cost-type [ internal | external ]

undo apply cost-type
View
Routing policy view
Parameter
internal: Uses the cost type of IGP as MED value of BGP to advertise route to EBGP
peer.
external: External cost type value of IS-IS.
Description
Use the apply cost-type command to set the route cost type of route information.
Use the undo apply cost-type command to cancel the apply clause.
By default, route cost type is not set.
Example
# Set the cost type of IGP as MED value of BGP

[H3C-route-policy] apply cost-type internal
6-3
6.1.5 apply ip-address
Syntax
apply ip-address [ default ] { next-hop ip-address [ ip-address ] | acl acl-number }

undo apply ip-address [ default ] { next-hop ip-address [ ip-address ] | acl
acl-number }
View
Routing policy view
Parameter
default: Specifies the default next-hop address. It voids the acl argument.
ip-address: Next-hop address. Two next-hop addresses can be specified at most.
acl-number: Specifies the number of the access control list used for filtering, ranging
from 2000 to 2999
Description
Use the apply ip-address command to set the next hop address of route information.
Use the undo apply ip-address command to cancel the apply clause.
One of the apply clauses of the route-policy: When this command is used for setting
routing information attribute, it sets the next hop address of the packets passed filtering.
If multiple next hop addresses are set through apply ip-address command, other next
hop addresses will be tried by turn when the first next hop address is invalid.
next-hop, if-match cost, if-match tag, route-policy, apply local-preference, apply
cost, apply origin, and apply tag.
Example
# Define an apply clause to set the next hop address of routing information as 193.1.1.8
when it is used for setting routing information attribute.
[H3C-route-policy] apply ip-address 193.1.1.8
6.1.6 apply isis
apply isis [ level-1 | level-2 | level-1-2 ]

undo apply isis
View
Routing policy view
6-4
Parameter
level-1: Redistributes the matched route to Level-1 area.

level-2: Redistributes the matched route to Level-2 area.
level-1-2: Redistributes the matched route to both Level-1 and Level-2 area.
Description
Use the apply isis command to apply the level of a matched route to be redistributed to
Level-1, Level-2 or Level-1-2.
Use the undo apply isis command to remove the setting clause.
next-hop, if-match cost, if-match tag, route-policy, apply ip-address, apply cost,
apply origin, and apply tag.
Example
# Define an apply clause to set the redistributed route to Level-2.

[H3C-route-policy] apply isis level-2
6.1.7 apply local-preference
Syntax
apply local-preference local-preference

undo apply local-preference
View
Routing policy view
Parameter
local-preference: Newly set local preference.
Description
Use the apply local-preference command to apply the local preference of route
information.
Use the undo apply local-preference command to cancel the apply clause.
6-5
Example
# Apply the local preference level of route information as 130 when this apply clause is
used for setting route information attribute.
[H3C-route-policy] apply local-preference 130
6.1.8 apply origin
Syntax
apply origin { igp | egp as-number | incomplete }

undo apply origin
View
Routing policy view
Parameter
igp: Sets the BGP route information source as internal route

egp: Sets the BGP route information source as external route
as-number: Specifies AS number of external route.
incomplete: Sets the BGP route information source as unknown source.
Description
Use the apply origin command to set the routing source of BGP routing information.
Use the undo apply origin command to cancel the apply clause.
local-preference, apply cost, and apply tag.
Example
# Display how to define one apply clause. When it is used for setting routing information
attribute, it sets the routing source of the routing information as igp.
[H3C-route-policy] apply origin igp
6.1.9 apply tag
Syntax
apply tag value

undo apply tag
6-6
View
Routing policy view
Parameter
value: Specifies the tag value of route information.
Description
Use the apply tag command to set the tag area of OSPF route information.
Use the undo apply tag command to cancel the apply clause.
When a route is redistributed from protocol A to protocol B, and is redistributed back to
protocol A on some other routers, protocol A allows the tag field of the routing protocol
update packet to be transferred to the peer, that is, the information in the tag field can
traverse from protocol A to protocol B and then back to protocol A, without being lost.
OSPF, RIP2, ISIS, and BGP support the tag field, but RIP1 does not.
For example, when a BGP route is redistributed into OSPF and then redistributed back
to BGP on another router, the as-path attribute of the BGP route is lost. You can the
aplly tag command to set the OSPF tag field as as-path to guarantee the integrity of
the as-path attribute.
local-preference, apply cost, and apply origin.
Example
# Display how to define one apply clause. When it is used for setting route information
attribute, it sets the tag area of route information as 100.
[H3C-route-policy] apply tag 100
6.1.10 display ip ip-prefix
Syntax
display ip ip-prefix [ ip-prefix-name ]
View
Any view
Parameter
ip-prefix-name: Specifies displayed address prefix list name.
Description
Use the display ip ip-prefix command to view the address prefix list.
6-7
Display all the configured address prefix lists when no ip-prefix-name is specified.
Example
# Display the information of the address prefix list named p1.

<H3C> display ip ip-prefix p1
ip-prefix p1
index 10: permit 192.168.10.10/16 greater-equal 17 less-equel 18
6.1.11 display route-policy
Syntax
display route-policy [ route-policy-name ]
View
Any view
Parameter
route-policy-name: Specifies displayed route-policy name.
Description
Use the display route-policy command to view the configured route-policy

Display all the configured route-policy when no route-policy-name is specified.
Example
# Display the information of route-policy named policy1.

<H3C> display route-policy policy1
Route-policy : policy1
Permit 10 : if-match (prefixlist) p1
apply cost 100
matched : 0 denied : 0
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]

undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]
View
Routing protocol view
6-8
Parameter
acl-number: Number of the access control list used for matching the destination
address field of the routing information.
ip-prefix-name: Address prefix list used for matching the routing information destination
address field.
protocol: Routing information of which kind of route protocol to be filtered.
Description
Use the filter-policy export command to configure the filtering conditions of the
routing information advertised by a certain type of routing protocols.
Use the undo filter-policy export command to cancel the filtering conditions set.
By default, the advertised routing information is not filtered.
conditions can be advertised. Then, the filter-policy command can be used to set the
filtering conditions for the routing information to be advertised. Only the routing
information passing the filtering can be advertised.
Related command: filter-policy import.
Example
# Define the filtering rules for advertising the routing information of RIP. Only the routing
information passing the filtering of address prefix list p1 will be advertised by RIP.
[H3C-rip] filter-policy ip-prefix p1 export
Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name } import
undo filter-policy { acl-number | ip-prefix ip-prefix-name } import
View
Routing protocol view
Parameter
acl-number: Access control list number used for matching the destination address field
ip-prefix ip-prefix-name: Prefix address list name. Its matching object is the destination
address field of the routing information.
6-9
gateway ip-prefix-name: Prefix address list name of the neighbor router address. Its
matching object is the routing information advertised by the specified neighbor router.
Description
Use the filter-policy gateway import command to filter the routing information
advertised by a specified router.
Use the undo filter-policy gateway import command to cancel the setting of the
filtering condition.
Use the filter-policy import command to configure the condition for filtering the routing
information.
Use the undo filter-policy import command to cancel the setting of filter condition.
By default, the received routing information is not filtered.
conditions can be received. Then, the filter-policy command can be used to set the
filtering conditions. acl-number is the access control list number used for filtering the
destination addresses of the routing information and ip-prefix parameter is used to filter
the routing information specified destination address.
Related command: filter-policy export.
Example
# Define the filtering rule for receiving routing information of RIP. Only the routing
information filtered through the address prefix list p1 can be received by RIP.
[H3C-rip] filter-policy ip-prefix p1 import
6.1.14 if-match acl
Syntax

undo if-match [ acl acl-number ]
View
Routing policy view
Parameter
acl-number: Specifies the number of the access control list used for filtering.
ip-prefix-name: Specifies the name of the prefix address list used for filtering.
Description
Use the if-match acl command to configure the IP address range to match the
route-policy.
6-10
Use the undo if-match acl command to cancel the setting of the match rule.
Filtering is performed by quoting an ACL.
Related command: if-match ip-prefix, if-match interface, if-match ip next-hop,
if-match cost, if-match tag, route-policy, apply ip-address, apply cost, apply
Example
# Display how to define one if-match clause. When the clause is used for filtering route
information, the route information filtered by route destination address through address
ACL 2010 is enabled to pass the if-match clause.
6.1.15 if-match as-path
Syntax
if-match as-path aspath-acl-number

undo if-match as-path
View
Routing policy view
Parameter
aspath-acl-number: Number of the AS path list, in the range of 1 to 199.

aspath-acl-number is defined by the ip as-path-acl command.
Description
Use the if-match as-path command to filter BGP routing information.

Use the undo if-match as-path command to disable the configuration.
By default, Route-policy does not require for matching with the AS path list.
This if-match clause of route-policy is used to filter BGP routing information. The match
condition is specified according to the AS path attributes of the routing information.
Related command: ip as-path-acl.
Example
# Define an as-path numbered as 2002 and allow the autonomous system number to
contain the routing information of 200 and 300. Then, define a route-policy named test.
The node No.10 of this route-policy defines an if-match clause, which quotes the
definition of as-path.
[H3C] ip as-path acl 2 permit 200:300
6-11
[H3C-route-policy] if-match as-path 2
6.1.16 if-match community
Syntax
if-match community { standard-community-list-number [ whole-match ] |

extended-community-list-number }
undo if-match community
View
Routing policy view
Parameter
standard-community-list-number: Standard community list number, ranging from 1 to

99.
extended-community-list-number: Extended community list number, ranging from 100
to 199.
whole-match: Fully matching, i.e., all the communities must appear.
Description
Use the if-match community command to configure the community list number to be
matched in route-policy.
Use the undo if-match community command to cancel the configuration of the
matched community list number.
By default, community list is not matched.
The if-match clause of route-policy is used to filter BGP routing information. The match
condition is specified according to the community attributes of the routing information.
Related command: route-policy and ip community-list.
Example
# Define a community-list numbered as 1, and allow the autonomous system number to

contain the routing information of 100 and 200. Then, the route-policy named test is
defined. The node No.10 of the route-policy defines a if-match clause, which quotes the
definition of the community-list.
[H3C] ip community-list 1 permit 100:200
[H3C-route-policy] if-match community 1
6-12
6.1.17 if-match cost
Syntax
if-match cost value

undo if-match cost
View
Routing policy view
Parameter
value: Specifies the required route cost value, ranging from 0 to 4294967295.
Description
Use the if-match cost command to configure one of the matching rules of route-policy
to match the cost of the routing information.
Use the undo if-match cost command to cancel the configuration of the matching rule.
This if-match clause of route-policy is used to specify the route cost value of the
matched routing information.
next-hop, if-match tag, route-policy, apply ip-address, apply local-preference,
apply cost, apply origin, and apply tag.
Example
# Define an if-match clause, which allows the routing information with routing cost 8 to
pass this if-match clause.
[H3C-route-policy] if-match cost 8
6.1.18 if-match interface
Syntax
if-match interface interface-type interface-number

undo if-match interface
View
Routing policy view
Parameter
interface-type: Specifies the type of the interface.

interface-number: Specifies the number of the interface.
6-13
Description
Use the if-match interface command to match the route whose next hop is designated
interface.
Use the undo if-match interface command to cancel the setting of match condition.
This if-match clause of the route-policy is used to match the corresponding interface of
the route next hop when it filters the route.
Related command: if-match acl, if-match ip-prefix, if-match ip next-hop, if-match
cost, if-match tag, route-policy, apply ip-address, apply cost, apply
Example
# Display how to define one if-match clause to match the route whose next hop
interface is ethernet 1/0/2.
[H3C-route-policy] if-match interface Ethernet1/0/2
6.1.19 if-match ip next-hop
Syntax
if-match ip next-hop { acl acl-number | ip-prefix ip-prefix-name }

undo if-match ip next-hop [ ip-prefix ]
View
Routing policy view
Parameter
acl-number: Specifies the number of the access control list used for filtering. The range
is 2000 to 2999.
ip-prefix-name: Specifies the name of the prefix address list used for filtering. The
range is 1 to 19.
Description
Use the if-match ip next-hop command to configure one of the match rules of
route-policy on the next hop address of the routing information.
Use the undo if-match ip next-hop command to cancel the setting of match condition.
This if-match clause of the route-policy is used to specify the next hop address field
matching the routing information when it filters the routing information and implement
its filtering function by referring to an ACL or address prefix list.
6-14
Related command: if-match interface, if-match acl, if-match ip-prefix, if-match

Example
# Define an if-match clause. It permits the routing information, whose route next hop
address passes the filtering of the prefix address list p1, to pass this if-match clause.
[H3C-route-policy] if-match ip next-hop ip-prefix p1
6.1.20 if-match ip-prefix
Syntax
if-match ip-prefix ip-prefix-name

undo if-match [ ip-prefix ip-prefix-name ]
View
Routing policy view
Parameter
ip-prefix-name: Specifies the name of the prefix address list used for filtering.
Description
Use the if-match ip-prefix command to configure one of the match rules of
route-policy on the IP address range of the routing information.
Use the undo if-match ip next-hop command to cancel the setting of match condition.
The filtering is achieved through redistributing an IP address prefix name.
Related command: if-match acl, if-match interface, if-match ip next-hop, if-match
Example
# Define an if-match sub-statement in which the IP address prefix list p1 is used in

routing information filtering.
[H3C-route-policy] if-match ip-prefix p1
6.1.21 if-match tag
Syntax
if-match tag value

undo if-match tag
6-15
View
Routing policy view
Parameter
value: Specifies the required tag value.
Description
Use the if-match tag command to match the tag field of OSPF route information.
Use the undo if-match tag command to cancel the existing matching rules.
When a route is redistributed from protocol A to protocol B, and is redistributed back to
protocol A on some other routers, protocol A allows the tag field of the routing protocol
update packet to be transferred to the peer, that is, the information in the tag field can
traverse from protocol A to protocol B and then back to protocol A, without being lost.
OSPF, RIP2, ISIS, and BGP support the tag field, but RIP1 does not.
For example, when a BGP route is redistributed into OSPF and then redistributed back
to BGP on another router, the as-path attribute of the BGP route is lost. You can the
aplly tag command to set the OSPF tag field as as-path to guarantee the integrity of
the as-path attribute.
next-hop, if-match cost, route-policy, apply ip-address, apply cost, apply
Example
# Display how to define one if-match clause and enable the OSPF route information
whose tag field is 8 to pass the if-match clause.
[H3C-route-policy] if-match tag 8
6.1.22 ip ip-prefix
Syntax
ip ip-prefix ip-prefix-name [ index index-number ] { permit | deny } network len

[ greater-equal greater-equal | less-equal less-equal ]
undo ip ip-prefix ip-prefix-name [ index index-number | permit | deny ]
View
System view
Parameter
ip-prefix-name: Specifies an address prefix list name. It identifies one address prefix list
uniquely.
6-16
index-number: Identifies an item in the prefix address list. The item with smaller
index-number will be tested first.
permit: Specifies the match mode of the defined address prefix list items as permit
mode. In the permit mode, if the IP address to be filtered is in the defined range, it will
not be tested by the next node. Otherwise, it has to go on with the test.
deny: Specifies the match mode of the defined address prefix list items as deny mode.
In the deny mode, the IP address in the defined range cannot pass the filtering and is
refused to go on with the next test. Otherwise, it will have the next test.
network: IP address prefix range (IP address). If it is 0.0.0.0 0, all the IP addresses are
matched.
len: IP address prefix range (mask length). If it is 0.0.0.0 0, all the IP addresses are
matched.
greater-equal, less-equal: Specifies the address prefix range [greater-equal, less-equal]
to be matched after the address prefix network len has been matched. The meaning of
greater-equal is "greater than or equal to" , and the meaning of less-equal is "less
than or equal to". The range is len <= greater-equal <= less-equal <= 32. When only
greater-equal is used, it indicates the prefix range [greater-equal, 32]. When only
less-equal is used, it indicates the prefix range [len, less-equal].
Description
Use the ip ip-prefix command to configure an address prefix list or one of its items.
Use the undo ip ip-prefix command to delete an address prefix list or one of its items.
The address prefix list is used for IP address filtering. An address prefix list may contain
several items, and each item specifies one address prefix range. The inter-item filtering
relation is "OR", i.e. passing an item means passing the filtering of this address prefix
list. Not passing the filtering of all items means not passing the filtering of this prefix
address list.
The address prefix range may contain two parts, which are determined by len and
[greater-equal, less-equal] respectively. If the prefix ranges of these two parts are both
specified, the IP to be filtered must match the prefix ranges of these two parts.
If you specify network len as 0.0.0.0 0, it only matches the default route.
Specify network len as 0.0.0.0 0 less-equal 32 to match all the routes.
Example
# Configure an address prefix list named p1. It permits the routes with the mask of 17 or
18 bits long and in network segment 10.0.192.0.8 to pass.
[H3C] ip ip-prefix p1 permit 10.0.192.0 8 greater-equal 17 less-equal 18
6-17
6.1.23 route-policy
Syntax
route-policy route-policy-name { permit | deny } node { node-number }

undo route-policy route-policy-name [ permit | deny | node node-number ]
View
System view
Parameter
route-policy-name: Specifies the route-policy name to identify one route-policy

uniquely.
permit: Specifies the match mode of the defined route-policy node as permit mode. If a
route matches all the if-match clauses, it is permitted to pass the filtering and execute
the apply clauses of this node. If not, it will take the test of next node of this route-policy.
deny: Specifies the match mode of the defined route-policy node as deny mode. When
a route matches all the if-match clauses of this node, it will be refused to pass the
filtering and will not take the next test.
node: Node of the route policy.
node-number: Index of the node in the route-policy. When this route-policy is used for
routing information filtering, the node with smaller node-number will be tested first.
Description
Use the route-policy command to create and enter route-policy view.

Use the undo route-policy command to cancel the established route-policy.
Route-policy is used for route information filtering. One route-policy comprises of some
nodes and each node comprises of some if-match and apply clauses. The if-match
clause defines the match rules of this node and the apply clause defines the actions
after passing the filtering of this node. The filtering relationship between the if-match
clauses of the node is "and", i.e., all if-match clauses that meet the node. The filtering
relation between route-policy nodes is "OR", i.e. passing the filtering of one node
means passing the filtering of this route-policy. If the information does not pass the
filtering of any nodes, it cannot pass the filtering of this route-policy.
next-hop, if-match cost, if-match tag, apply ip-address, apply local-preference,
apply cost, apply origin, and apply tag.
6-18
Example
# Display how to configure one route-policy policy1, whose node number is 10 and the
match mode is permit, and enter route policy view.
[H3C] route-policy policy1 permit node 10
[H3C-route-policy]
6-19
Comware V3 Chapter 7 Route Capacity Configuration Commands
Chapter 7 Route Capacity Configuration

Commands
7.1 Route Capacity Configuration Commands

7.1.1 display memory
Syntax
display memory [ limit ]
View
Any view
Parameter
limit: Displays the lower limit and safety value of the router idle memory.
Description
Use the display memory command to view the memory setting and state information
related to the routing capacity.
It includes available memory and state information about connections such as times for
disconnecting connections, times for reestablishing connections and whether the
current system is in the emergent state or not.
Example
# Display the current memory setting and state information.

<H3C> display memory limit
Current memory limit configuration information:
memory safety: 30
memory limit: 20
auto-establish enabled
Free Memory: 73855332 (Byte)
The state information about connection:

The times of disconnect: 0
The times of reconnect: 0
The current state: Normal
7-1
The information displayed by this command includes the router memory limit, the size
of the idle memory, the times of connection disconnecting, the times of connection
reestablishment and the current state.
The displayed information is described specifically in the following table:
Table 7-1 Description of the information displayed by the display memory limit
command
Field Description
memory safety: 30 The safety value of the router memory is 30Mbytes.
memory limit: 20 The lower limit of the router memory is 20Mbytes.
The system allows recovering the connection
memory auto-establish
automatically. (If the automatic recover is disabled,
enabled
the "auto-establish disabled" will be displayed.)
Free Memory: 73855332 The size of the current idle memory is 73855332
(Byte) bytes, that is, 73.855M.
The times of the connection disconnecting of the
The times of disconnect: 0
router is 0.
The times of the connection re-establishment of the
The times of reconnect: 0
router is 0.
The current state is normal. (If entering the
The current state: Normal
emergent state, the system will display "Exigency" .)
7.1.2 memory auto-establish disable
Syntax
memory auto-establish disable
View
System view
Parameter
None
Description
Use the memory auto-establish disable command to disable the function of restoring
the connections of all the routing protocols (even if the idle memory reduces to a safety
value).
By default, when the idle memory of the router recovers to a safety value, connections
of all the routing protocols will always recover (when the idle memory of the router
reduces to a lower limit, the connection will be disconnected forcibly).
7-2
Use the memory auto-establish disable command to disable the above function.
Thus, connections of all the routing protocols will not recover when the idle memory of
the router recovers to a safety value. In this case, you need to restart the routing
protocol to recover the connections.
You shall use the command cautiously.
Related command: memory auto-establish enable, memory { safety | limit }, and
display memory limit.
Example
# Disable to recover the connections of all the protocols automatically when the current
router memory resumes.
[H3C] memory auto-establish disable
[H3C]
%Dec 15 15:53:38:298 2005 H3C RM/5/RTLOG:You have changed the model of
connection
7.1.3 memory auto-establish enable
Syntax
memory auto-establish enable
View
System view
Parameter
None
Description
Use the memory auto-establish enable command to resume connections of all the
routing protocols when the idle memory of the router recovers to a safety value.
By default, when the idle memory of the router recovers to a safety value, connections
of all the routing protocols will always recover (when the idle memory of the router
reduces to a lower limit, the connection will be disconnected forcibly).
Use the memory auto-establish disable command to disable the above function. Use
the memory auto-establish enable command to enable the above function again. By
default, the function is always enabled.
Related command: memory auto-establish disable, memory { safety | limit }, and
display memory limit.
7-3
Example
# Enable memory resume of the current router and recover connections of all the
protocols automatically.
[H3C] memory auto-establish enable
[H3C]
%Dec 15 15:53:38:298 2005 H3C RM/5/RTLOG:You have changed the model of
connection
7.1.4 memory
Syntax
memory { safety safety-value | limit limit-value }*

undo memory { safety safety-value | limit limit-value }*
View
System view
Parameter
safety-value: Safety value of the router idle memory in Mbytes. Its valid range depends
on the current idle memory of the router. The default value depends on the memory of
the router. For a router with 128 Mbytes memory, safety-value defaults to 5 Mbytes; for
a router with 256 Mbytes memory, it defaults to 50 Mbytes.
limit-value: Lower limit of the router idle memory in Mbytes. Its valid range depends on
the current idle memory of the router. The default value depends on the memory of the
router. For a router with 128 Mbytes memory, limit-value defaults to 3 Mbytes; for a
router with 256 Mbytes memory, it defaults to 40 Mbytes.
Description
Use the memory command to configure the safety value and lower limit of the router
idle memory. When the idle memory of the router is less than the lower limit, all the
routing protocol connections will be disconnected forcibly. If you configure the memory
auto-establish enable command (configured by default), when the idle memory
reaches safety-value, all forcibly disconnected routing protocol connections will be
reestablished automatically.
Use the undo memory command to restore the default safety value and lower limit of
the router idle memory.
Note that limit-value must be less than safety-value; otherwise, the configuration will
fail.
7-4
Note:
When the current router idle memory is less than the configured lower limit of the idle
memory, all routing protocol connections will be disconnected and the timer is started
at the same time (the timeout time period is 60 seconds). After the timer times out, the
current router memory will be checked. If it is more than the safety value of the idle
memory, all routing protocol connections will be reestablished; otherwise, the system
waits for the next timeout period. If the current router idle memory is more than the
lower limit before the second timeout, the routing protocol connections will not be
reestablished.
Related command: memory auto-establish disable, memory auto-establish enable,

memory safety, and display memory limit.
Example
# Set the lower limit of the router idle memory to 25 Mbytes.

[H3C] memory limit 25
[H3C]
%Dec 15 16:51:29:987 2005 H3C RM/5/RTLOG:You have changed the memory
limit/safety value
# Set the lower limit of the router idle memory to 25 Mbytes and the safety value to 30
Mbytes.
[H3C] memory safety 30 limit 25
[H3C]
%Dec 15 15:51:29:987 2004 H3C RM/5/RTLOG:Changed the system memory
limit(20->25)/ safety(30->35) successfully
7-5
Multicast Protocol
Command Manual – Multicast Protocol
Table of Contents
Chapter 1 Multicast Common Configuration Commands ......................................................... 1-1

1.1 Multicast Common Configuration Commands ................................................................... 1-1
1.1.1 debugging multicast forwarding .............................................................................. 1-1
1.1.2 debugging multicast kernel-routing ......................................................................... 1-1
1.1.3 debugging multicast status-forwarding ................................................................... 1-2
1.1.4 display multicast forwarding-table ........................................................................... 1-3
1.1.5 display multicast routing-table................................................................................. 1-3
1.1.6 display multicast routing-table static ....................................................................... 1-5
1.1.7 display multicast rpf-info.......................................................................................... 1-6
1.1.8 mtracert ................................................................................................................... 1-6
1.1.9 multicast minimum-ttl .............................................................................................. 1-8
1.1.10 multicast packet-boundary .................................................................................... 1-9
1.1.11 multicast route-limit ............................................................................................... 1-9
1.1.12 multicast routing-enable ...................................................................................... 1-10
1.1.13 reset multicast forwarding-table .......................................................................... 1-11
1.1.14 reset multicast routing-table ................................................................................ 1-12
Chapter 2 IGMP Configuration Commands ................................................................................ 2-1

2.1 IGMP Configuration Commands........................................................................................ 2-1
2.1.1 debugging igmp....................................................................................................... 2-1
2.1.2 display igmp group .................................................................................................. 2-1
2.1.3 display igmp interface ............................................................................................. 2-2
2.1.4 display igmp local .................................................................................................... 2-4
2.1.5 igmp enable............................................................................................................. 2-4
2.1.6 igmp group-limit....................................................................................................... 2-5
2.1.7 igmp group-policy .................................................................................................... 2-6
2.1.8 igmp host-join .......................................................................................................... 2-6
2.1.9 igmp lastmember-queryinterval............................................................................... 2-7
2.1.10 igmp max-response-time....................................................................................... 2-8
2.1.11 igmp proxy............................................................................................................. 2-9
2.1.12 igmp robust-count ................................................................................................. 2-9
2.1.13 igmp timer other-querier-present......................................................................... 2-10
2.1.14 igmp timer query.................................................................................................. 2-11
2.1.15 igmp version ........................................................................................................ 2-12
2.1.16 reset igmp group ................................................................................................. 2-13
Chapter 3 PIM Configuration Commands ................................................................................... 3-1

3.1 PIM Configuration Commands........................................................................................... 3-1
3.1.1 bsr-policy ................................................................................................................. 3-1
i
3.1.2 c-bsr ........................................................................................................................ 3-2

3.1.3 c-rp .......................................................................................................................... 3-3
3.1.4 crp-policy ................................................................................................................. 3-4
3.1.5 debugging pim common.......................................................................................... 3-5
3.1.6 debugging pim dm................................................................................................... 3-6
3.1.7 debugging pim sm................................................................................................... 3-7
3.1.8 display pim bsr-info ................................................................................................. 3-7
3.1.9 display pim interface ............................................................................................... 3-8
3.1.10 display pim neighbor ............................................................................................. 3-9
3.1.11 display pim routing-table ....................................................................................... 3-9
3.1.12 display pim rp-info ............................................................................................... 3-11
3.1.13 pim....................................................................................................................... 3-11
3.1.14 pim bsr-boundary ................................................................................................ 3-12
3.1.15 pim dm................................................................................................................. 3-13
3.1.16 pim neighbor-limit ................................................................................................ 3-13
3.1.17 pim neighbor-policy ............................................................................................. 3-14
3.1.18 pim sm................................................................................................................. 3-15
3.1.19 pim timer hello ..................................................................................................... 3-15
3.1.20 register-policy ...................................................................................................... 3-16
3.1.21 reset pim neighbor .............................................................................................. 3-17
3.1.22 reset pim routing-table ........................................................................................ 3-17
3.1.23 source-policy ....................................................................................................... 3-18
3.1.24 spt-switch-threshold ............................................................................................ 3-19
3.1.25 static-rp................................................................................................................ 3-20
Chapter 4 MSDP Configuration Commands ............................................................................... 4-1

4.1 MSDP Configuration Commands....................................................................................... 4-1
4.1.1 cache-sa-enable...................................................................................................... 4-1
4.1.2 debugging msdp...................................................................................................... 4-1
4.1.3 display msdp brief ................................................................................................... 4-2
4.1.4 display msdp peer-status ........................................................................................ 4-3
4.1.5 display msdp sa-cache............................................................................................ 4-4
4.1.6 display msdp sa-count ............................................................................................ 4-5
4.1.7 import-source .......................................................................................................... 4-5
4.1.8 msdp........................................................................................................................ 4-6
4.1.9 msdp-tracert ............................................................................................................ 4-7
4.1.10 originating-rp ......................................................................................................... 4-9
4.1.11 peer ..................................................................................................................... 4-10
4.1.12 peer description................................................................................................... 4-11
4.1.13 peer mesh-group................................................................................................. 4-11
4.1.14 peer minimum-ttl.................................................................................................. 4-12
4.1.15 peer request-sa-enable ....................................................................................... 4-13
4.1.16 peer sa-cache-maximum..................................................................................... 4-13
ii
4.1.17 peer sa-policy ...................................................................................................... 4-14

4.1.18 peer sa-request-policy......................................................................................... 4-15
4.1.19 reset msdp peer .................................................................................................. 4-16
4.1.20 reset msdp sa-cache........................................................................................... 4-16
4.1.21 reset msdp statistics............................................................................................ 4-17
4.1.22 shutdown ............................................................................................................. 4-17
4.1.23 static-rpf-peer ...................................................................................................... 4-18
4.1.24 timer retry ............................................................................................................ 4-19
Chapter 5 MBGP Multicast Extension Configuration Commands............................................ 5-1

5.1 MBGP Multicast Extension Configuration Commands ...................................................... 5-1
5.1.1 aggregate ................................................................................................................ 5-1
5.1.2 debugging bgp mp-update ...................................................................................... 5-2
5.1.3 display bgp multicast group..................................................................................... 5-2
5.1.4 display bgp multicast peer....................................................................................... 5-3
5.1.5 display bgp multicast network ................................................................................. 5-3
5.1.6 display bgp multicast routing................................................................................... 5-4
5.1.7 display bgp multicast routing as-path-acl................................................................ 5-4
5.1.8 display bgp multicast routing cidr ............................................................................ 5-5
5.1.9 display bgp multicast routing community ................................................................ 5-5
5.1.10 display bgp multicast routing community-list......................................................... 5-6
5.1.11 display bgp multicast routing different-origin-as.................................................... 5-6
5.1.12 display bgp multicast routing peer......................................................................... 5-7
5.1.13 display bgp multicast routing regular-expression.................................................. 5-7
5.1.14 display bgp multicast routing statistic.................................................................... 5-8
5.1.15 import-route ........................................................................................................... 5-8
5.1.16 ipv4-family multicast.............................................................................................. 5-9
5.1.17 network................................................................................................................ 5-10
5.1.18 peer advertise-community................................................................................... 5-10
5.1.19 peer allow-as-loop............................................................................................... 5-11
5.1.20 peer as-path-acl .................................................................................................. 5-12
5.1.21 peer enbale ......................................................................................................... 5-13
5.1.22 peer filter-policy................................................................................................... 5-13
5.1.23 peer ip-prefix ....................................................................................................... 5-14
5.1.24 peer next-hop-local ............................................................................................. 5-15
5.1.25 peer public-as-only.............................................................................................. 5-16
5.1.26 peer reflect-client................................................................................................. 5-16
5.1.27 peer route-policy ................................................................................................. 5-17
Chapter 6 Multicast Static Route Configuration Commands.................................................... 6-1

6.1 Multicast Static Route Configuration Commands .............................................................. 6-1
6.1.1 delete rpf-route-static all.......................................................................................... 6-1
6.1.2 display multicast routing-table static ....................................................................... 6-1
6.1.3 display multicast routing-table static config............................................................. 6-2
iii
6.1.4 ip rpf-longest-match ................................................................................................ 6-3

6.1.5 ip rpf-route-static ..................................................................................................... 6-3
iv
Comware V3 Chapter 1 Multicast Common Configuration Commands
Chapter 1 Multicast Common Configuration

Commands
1.1 Multicast Common Configuration Commands

1.1.1 debugging multicast forwarding
Syntax
debugging multicast forwarding

undo debugging multicast forwarding
View
User view
Parameter
None
Description
Use the debugging multicast forwarding command to enable multicast packet

forwarding debugging functions.
Use the undo debugging multicast forwarding command to disable the debugging
functions.
By default, the debugging function is disabled.
Example
# Enable multicast packet forwarding debugging functions.

<H3C> debugging multicast forwarding
1.1.2 debugging multicast kernel-routing
Syntax
debugging multicast kernel-routing

undo debugging multicast kernel-routing
View
User view
1-1
Parameter
None
Description
Use the debugging multicast kernel-routing command to enable multicast kernel

routing debugging functions.
Use the undo debugging multicast kernel-routing command to disable the
debugging functions.
By default, the multicast kernel routing debugging function is disabled.
Example
# Enable multicast kernel routing debugging functions.

<H3C> debugging multicast kernel-routing
1.1.3 debugging multicast status-forwarding
Syntax
debugging multicast status-forwarding

undo debugging multicast status-forwarding
View
User view
Parameter
None
Description
Use the debugging multicast status-forwarding command to enable multicast

forwarding status debugging functions.
Use the undo debugging multicast status-forwarding command to disable the
debugging functions.
By default, the multicast status debugging function is disabled.
Example
# Enable multicast forwarding status debugging functions.

<H3C> debugging multicast status-forwarding
1-2
1.1.4 display multicast forwarding-table
Syntax
display multicast forwarding-table [ group-address [ mask { mask | mask-length } ] |

source-address [ mask { mask | mask-length } ] | incoming-interface { interface-type
interface-number | register } ] *
View
Any view
Parameter
group-address: Multicast group address, used to specify a multicast group, ranging

from 224.0.0.0 to 239.255.255.255.
mask: Mask.
mask-length: Length of mask. Because “1”s in 32-bit mask are required to be
continuous, the mask in dotted decimal notation format can be replaced by mask-length
(mask-length is the number of continuous “1”s in the mask).
source-address: Unicast IP address of the multicast source.
incoming-interface: Incoming interface of the multicast forwarding entry.
register: Register interface of PIM-SM.
Description
Use the display multicast forwarding-table command to view the information of

multicast forwarding table.
source-address and group-address of multicast forwarding table are displayed in
hexadecimal notation format and its incoming and outgoing port numbers are displayed
by virtual port number. This information can be viewed via display pim interface
command.
Related command: display multicast routing-table.
Example
# Display the multicast forwarding table information.

<H3C> display multicast forwarding-table
1.1.5 display multicast routing-table
Syntax
display multicast routing-table [ group-address [ mask { mask | mask-length } ] |

source-address [ mask { mask | mask-length } ] | incoming-interface { interface-type
interface-number | register } ]*
1-3
View
Any view
Parameter
group-address: Multicast group address, used to specify a multicast group and display
the corresponding routing table information of the group. The value ranges from
224.0.0.0 to 239.255.255.255.
source-address: Unicast IP address of the multicast source.
mask: Mask.
mask-length: Length of mask. Because “1” in 32-bit mask is required to be continuous,
the mask in dotted decimal notation format can be replaced by mask-length
incoming-interface: Incoming interface of the multicast route entry.
register: Register interface of PIM-SM.
Description
Use the display multicast routing-table command to view the information of IP

multicast routing table.
This command displays the multicast routing table information, while the display
multicast forwarding-table command displays the multicast forwarding table
information.
The entry (S, G) in the multicast routing table, i.e., (multicast source, multicast group)
acts as the independent entry in the table. Each entry has a unique Upstream,
indicating the interface through which RPF goes to the multicast source. Each entry
has also a Downstream List, indicating which interfaces need multicast forwarding. The
related information about (S, G) includes:
z proto: the multicast protocol number which possesses the (S, G) (in hexadecimal
notation format).
z Flags: all kinds of flags, such as RPT 0x1, WC 0x2, SPT 0x4, NEG CACHE 0x8
and JOIN SUPP 0x10. All the flags are marked by binary “bit”. In which, RPT
indicates the (S, G) is in the shared tree status. WC is the abbreviation of wildcard.
SPT indicates the shortest path tree. NEG CACHE indicates the cache record that
the downstream interface list is null. JOIN SUPP indicates the prune suppression
status.
Example
# Display the corresponding route entry information of multicast group in the multicast
routing table.
<H3C> display multicast routing-table
Multicast Routing Table
1-4
Total 1 entry
(10.10.1.2, 225.1.1.1)
UpTime: 00:01:28, Timeout in 278 sec
Upstream interface: Ethernet0/0/0(10.10.1.20)
Downstream interface list:
LoopBack0(20.20.20.30), Protocol 0x1: IGMP
1.1.6 display multicast routing-table static
Syntax
display multicast routing-table static [ config ] [ source-address [ mask |

mask-length ] ]
View
Any view
Parameter
config: When this parameter is chosen, all the routing information configured will be
displayed. If this parameter is not chosen, only effective routing information is
displayed.
source-address: IP address of the multicast source.
mask: Mask.
mask-length: Length of mask. Because “1”s in 32-bit mask are required to be
continuous, the mask in dotted decimal notation format can be replaced by mask-length
Description
Use the display multicast routing-table static command to view the configuration
information of static multicast route.
Example
# Display the configuration information of static multicast route.

<H3C>display multicast routing-table static
100.10.0.0/16
RPF interface = 10.10.1.20(Ethernet0/0/0), RPF neighbor = 10.10.1.20
Matched routing protocol = <none>, route-policy = <none>, preference = 1
Running config = ip rpf-route-static 100.10.0.0 16 Ethernet0/0/0 preference
1
1-5
1.1.7 display multicast rpf-info
Syntax
display multicast rpf-info source-address
View
Any view
Parameter
Description
Use the display multicast rpf-info command to view the Reverse Path Forwarding
(RPF) routing information for specified multicast source.
Example
# Display all the RPF routing information.

<H3C> display multicast rpf-info 192.193.194.192
Multicast source's RPF route information about 192.193.194.192
RPF interface: InLoopBack0, RPF neighbor: 127.0.0.1
Referenced route/mask: 192.193.194.192/32
Referenced route type: unicast (DIRECT)
RPF-route selecting rule: preference-preferred
1.1.8 mtracert
Syntax
mtracert source-address [ last-hop-address ] [ group-address ]
View
Any view
Parameter
source-address: Address of the multicast source.

last-hop-address: Unicast address, which is the starting address of path tracing. This
address must be an interface address of a hop router. By default, it is a physical
interface address of the local router.
group-address: Address of multicast group. By default, the value is 0.0.0.0.
1-6
Description
Use the mtracert command to trace the network path from the multicast source to the
destination receiver along Multicast Distribution Tree, according to either the multicast
kernel routing table or RPF rule to the source. This command can help to locate the
faults, such as information loss and configuration error.
The trace mode to the group address of 0.0.0.0 is called weak trace mode.
Example
# Trace the path reversely from the local hop router 18.110.0.1 to the multicast source
10.10.1.2 in weak trace mode.
<H3C> mtracert 10.10.1.2
Type Ctrl+C to abort
Mtrace from 10.10.1.2 to 18.110.0.1 via RPF
Querying full reverse path...
-1 18.110.0.1
Incoming Interface Address: 18.110.0.1
Previous-Hop Router Address: 18.110.0.2
Input packet count on incoming interface: 0
Output packet count on outgoing interface: 0
Total number of packets for this source-group pair: 0
Protocol: PIM
Forwarding TTL: 0
Forwarding Code: No error
-2 18.110.0.2
Protocol: PIM
Forwarding TTL: 0
-3 11.110.0.4
Protocol: PIM
Forwarding TTL: 0
1-7
# Trace reversely the path information of multicast group 225.1.1.1 from the multicast
source 10.10.1.3 to the destination address 12.110.0.2.
<H3C>mtracert 10.10.1.3 12.110.0.2 225.1.1.1
Type Ctrl+C to abort
Mtrace from 10.10.1.3 to 12.110.0.2 via group 225.1.1.1
Querying full reverse path...
-1 12.110.0.2
Protocol: PIM
Forwarding TTL: 0
-2 11.110.0.4
Protocol: Unknown
Forwarding TTL: 0
1.1.9 multicast minimum-ttl
Syntax
multicast minimum-ttl ttl-value

undo multicast minimum-ttl
View
Interface view
Parameter
ttl-value: The minimum TTL value, ranging from 0 to 255.
Description
Use the multicast minimum-ttl command to configure the minimum TTL value for
multicast forwarding.
Use the undo multicast minimum-ttl command to remove the minimum TTL value
configured.
1-8
By default, no minimum TTL value for multicast forwarding is configured.
Example
# Configure the minimum TTL value for multicast forwarding to 8.

[H3C-Ethernet1/0/1] multicast minimum-ttl 8
1.1.10 multicast packet-boundary
Syntax
multicast packet-boundary acl-number

undo multicast packet-boundary
View
Interface view
Parameter
acl-number: Number of basic or advanced ACL, ranging from 2000 to 3999.
Description
Use the multicast packet-boundary command to configure a multicast forwarding

boundary.
Use the undo multicast packet-boundary command to remove the multicast
forwarding boundary configured.
By default, no multicast forwarding boundary is configured.
You can set boundary conditions for multicast packets on an interface via basic or
advanced Access Control List (ACL). Packets denied by the ACL will be discarded. The
source address of a multicast packet can be filtered through the basic ACL. Both the
source address and the destination address (source group address) of a multicast
packet can be filtered through the advanced ACL.
Example
# Set boundary conditions for multicast packets through the basic ACL 2001.
[H3C-Ethernet1/0/1] multicast packet-boundary 2001
1.1.11 multicast route-limit
Syntax
multicast route-limit limit
View
System view
1-9
Parameter
limit: Limit of multicast routing table capacity, ranging from 0 to MAX_MROUTE_LIMIT.

In which, MAX_MROUTE_LIMIT differs with the different router types.
Description
Use the multicast route-limit command to limit the multicast routing table capacity. If
the capacity exceeds the limit, the router will discard protocols and data packets of the
newly-added (S, G).
By default, the limit of multicast routing table capacity is MAX_MROUTE_LIMIT.
If the number of route entries in the routing table has exceeded the configured number
when configuring the command, the previous route entry in the routing table will not be
deleted. The system will prompt “The number of current route entries is more than that
configured.”
If this command is executed repeatedly, the new configuration will overwrite the
previous one.
Example
# Limit the multicast routing table capacity to 1000.

[H3C] multicast route-limit 1000
1.1.12 multicast routing-enable
Syntax
multicast routing-enable
undo multicast routing-enable
View
System view
Parameter
None
Description
Use the multicast routing-enable command to enable IP multicast routing.

Use the undo multicast routing-enable command to disable IP multicast routing.
By default, IP multicast routing is disabled.
the system will not forward any multicast packet when IP multicast routing is disabled.
Related command: pim dm and pim sm.
1-10
Example
# Enable IP multicast routing.

<H3C> system-view
[H3C] multicast routing-enable
1.1.13 reset multicast forwarding-table
Syntax
reset multicast forwarding-table [ statistics ] { all | { group-address [ mask

{ group-mask | group-mask-length } ] | source-address [ mask { source-mask |
source-mask-length } ] | { incoming-interface interface-type interface-number } | { slot
slot-number } } * }
View
User view
Parameter
statistics: If this parameter is used, the statistics of MFC forwarding entries will be
cleared. Otherwise, the MFC forwarding entries will be cleared.
all: All the MFC forwarding entries.
group-address: Address of the specified group.
group-mask: Address mask of the specified group.
group-mask-length: Address mask length of the specified group.
source-address: Address of the specified source.
source-mask: Address mask of the specified source.
source-mask-length: Address mask length of the specified source.
incoming-interface: Incoming interface of the specified forwarding entry.
interface-type interface-number: Interface type and interface number.
slot-number: Number of the slot where the interface board resides. This parameter is
only present in the distributed router.
Description
Use the reset multicast forwarding-table command to clear MFC forwarding entries
or the statistics of MFC forwarding entries.
The sequence of group-address and source-address can be reversed, but the input
group-address and source-address must be valid. Otherwise, the system will prompt
input error.
1-11
Related command: reset pim routing-table, reset multicast routing-table, display

multicast forwarding-table.
Example
# Clear the forwarding entry whose group address is 225.5.4.3 from the MFC
forwarding table.
<H3C> reset multicast forwarding-table 225.5.4.3
# Clear the statistics of the forwarding entry whose group address is 225.5.4.3 from
MFC forwarding table.
<H3C> reset multicast forwarding-table statistics 225.5.4.3
1.1.14 reset multicast routing-table
Syntax
reset multicast routing-table { all | { group-address [ mask { group-mask |

group-mask-length } ] | source-address [ mask { source-mask | source-mask-length } ] |
{ incoming-interface interface-type interface-number } } * }
View
User view
Parameter
all: All the route entries in multicast kernel routing table.

group-address: Address of the specified group.
group-mask: Address mask of the specified group.
group-mask-length: Address mask length of the specified group.
source-address: Address of the specified source.
source-mask: Address mask of the specified source.
source-mask-length: Address mask length of multicast source.
incoming-interface: Incoming interface of the specified route entry.
Description
Use the reset multicast routing-table command to clear the route entry in the
multicast kernel routing table and remove the corresponding forwarding entry in MFC.
input error.
1-12
Related command: reset pim routing-table, reset multicast forwarding-table,

display multicast forwarding-table.
Example
# Clear the route entry whose group address is 225.5.4.3 from the multicast kernel
routing table.
<H3C> reset multicast routing-table 225.5.4.3
1-13
Comware V3 Chapter 2 IGMP Configuration Commands
Chapter 2 IGMP Configuration Commands
2.1 IGMP Configuration Commands

2.1.1 debugging igmp
Syntax
debugging igmp { all | event | host | packet | timer }

undo debugging igmp { all | event | host | packet | timer }
View
User view
Parameter
all: All the debugging information of IGMP.

event: Debugging information of IGMP event.
host: Debugging information of IGMP host.
packet: Debugging information of IGMP packets.
timer: Debugging information of IGMP timers.
Description
Use the debugging igmp command to enable IGMP debugging functions.

Use the undo debugging igmp command to disable the debugging functions.
By default, IGMP debugging functions are disabled.
Example
# Enable all IGMP debugging functions

<H3C> debugging igmp all
2.1.2 display igmp group
Syntax
display igmp group [ group-address | interface interface-type interface-number |

local ]
View
Any view
2-1
Parameter
group-address: Multicast group address.

interface-type interface-number: Interface type and interface number of the router,
used to specify the interface.
local: Information of the local interface which receives and sends multicast data.
Description
Use the display igmp group command to view the member information of the IGMP
multicast group.
You can specify to view the information of a group or the member information of the
multicast group on an interface. The information displayed includes the multicast
groups joined through IGMP and those joined statically through command lines by the
downstream host.
Related command: igmp host-join.
Example
# Display the member information of the directly connected sub-network.

<H3C> display igmp group
LoopBack0 (20.20.20.20): Total 3 IGMP Groups reported:

Group Address Last Reporter Uptime Expires
225.1.1.1 20.20.20.20 00:02:04 00:01:15
225.1.1.3 20.20.20.20 00:02:04 00:01:15
225.1.1.2 20.20.20.20 00:02:04 00:01:17
Table 2-1 Description on the fields of display ip igrmp group command
Item Description
Group address Multicast group address
Last Reporter Report the last host which becomes the multicast group member
The time since the multicast group is found (hour, minute,
Uptime
second)
The predicted time when the record will be removed from the
Expires
IGMP group table (hour, minute, second)
2.1.3 display igmp interface
Syntax
display igmp interface [ interface-type interface-number ]
2-2
View
Any view
Parameter
interface-type interface-number: Interface type and interface number of the router,

used to specify the interface. If the parameters are not specified, information about all
the interfaces running IGMP will be displayed.
Description
Use the display igmp interface command to view the IGMP configuration and running
information on an interface.
The information displayed through display igmp interface will be different according
to the configuration of IGMP proxy on an interface.
z If the interface is neither a proxy nor a client, the configuration of IGMP Proxy will
not be displayed.
z If the interface is a proxy, all the clients will be displayed.
z If the interface is a client, the proxy will be displayed.
Example
# Display the IGMP configuration and running information on an interface.

<H3C> display igmp interface
Ethernet0/0/0 (10.10.1.20):
IGMP is enabled
Current IGMP version is 2
Value of query interval for IGMP(in seconds): 60
Value of other querier time out for IGMP(in seconds): 120
Value of maximum query response time for IGMP(in seconds): 10
Policy to accept IGMP reports: none
Querier for IGMP: 10.10.1.10
Total 2 IGMP groups reported
LoopBack0 (20.20.20.30):
IGMP is enabled
Value of query interval for IGMP(in seconds): 60
Value of other querier time out for IGMP(in seconds): 120
Value of maximum query response time for IGMP(in seconds): 10
Policy to accept IGMP reports: none
Querier for IGMP: 20.20.20.30 (this router)
No IGMP group reported
2-3
2.1.4 display igmp local
Syntax
display igmp local
View
Any view
Parameter
local: Information of the local interface which receives and sends multicast data.
Description
Use the display igmp local command to view the IGMP configuration and running
information of the local interface which receives and sends multicast data.
Example
# Display the IGMP configuration and running information of the local interface which
receives and sends multicast data.
<H3C> display igmp local
Mcast_Out_IF (127.0.0.6):
IGMP is enabled on interface
No IGMP group reported
Mcast_In_IF (127.0.0.5):
IGMP is disabled on interface
2.1.5 igmp enable
Syntax
igmp enable
undo igmp enable
View
Interface view
Parameter
None
Description
Use the igmp enable command to enable IGMP on an interface.
2-4
Use the undo igmp enable command to disable IGMP on an interface.

By default, IGMP is disabled on an interface.
Only after multicast is enabled, can this command take effect. After this command is
configured, the configuration of other attributes of IGMP can be performed.
Related command: multicast routing-enable.
Example
# Enable IGMP on interface Ethernet0/0/0.

[H3C-Ethernet0/0/0] igmp enable
2.1.6 igmp group-limit
Syntax
igmp group-limit limit

undo igmp group-limit
View
Interface view
Parameter
limit: Number of IGMP groups, ranging from 0 to MAX_IF_IGMP_GROUP_LIMIT. The

value of MAX_IF_IGMP_GROUP_LIMIT on routers is MAX_MROUTE_LIMIT, which
differs with the different router types.
Description
Use the igmp group-limit command to limit the number of IGMP groups joined on the
interface. If the number exceeds the limit, the router will not process the joined IGMP
packet any more.
Use the undo igmp group-limit command to restore the default configuration.
By default, the maximum number of IGMP groups joined on the interface is 1024.
If the number of IGMP groups joined on the interface has exceeded the configuration
value during configuration, the previously joined IGMP groups will not be deleted.
previous one.
Example
# Limit the maximum number of IGMP groups joined on the interface Ethernet1/0/0 to
100.
[H3C-Ethernet1/0/0] igmp group-limit 100
2-5
2.1.7 igmp group-policy
Syntax
igmp group-policy acl-number [ 1 | 2 ]

undo igmp group-policy
View
Interface view
Parameter
acl-number: Number of basic IP ACL, defining the range of a multicast group. The value
1: IGMP Version 1.
2: IGMP Version 2. If IGMP version is not specified, IGMP Version 2 is used by default.
Description
Use the igmp group-policy command to set the filter of multicast groups on an
interface to control the accessing to the IP multicast groups.
Use the undo igmp group-policy command to remove the filter configured.
By default, no filter is configured, that is, a host can join any multicast group.
If you do not want the hosts on the network that the interface is on to join some
multicast groups and receive the packets from the multicast groups, you can use this
command to limit the range of the multicast groups served by the interface.
Related command: igmp host-join.
Example
# Permit the hosts on the interface Ethernet1/0/0 to join multicast group 225.1.1.1 only.
[H3C-acl-basci-2005] rule permit source 225.1.1.1 0
[H3C-acl-basci-2005] quit
[H3C-Ethernet1/0/0] igmp group-policy 2005
2.1.8 igmp host-join
Syntax
igmp host-join group-address

undo igmp host-join group-address
2-6
View
Interface view
Parameter
group-address: Multicast address of the multicast group that an interface will join.
Description
Use the igmp host-join command to enable an interface of a router to join a multicast
group.
Use the undo igmp host-join command to disable the configuration.
By default, an interface does not join any multicast group.
On one router, up to 1024 interfaces can be configured with igmp host-join command
at best.
Related command: igmp group-policy.
Example
# Configure Ethernet1/0/0 to join the multicast group 255.0.0.1.

[H3C-Ethernet1/0/0] igmp host-join 225.0.0.1
2.1.9 igmp lastmember-queryinterval
Syntax
igmp lastmember-queryinterval seconds

undo igmp lastmember-queryinterval
View
Interface view
Parameter
seconds: Interval at which IGMP querier sends the IGMP specified group query packet
when it receives IGMP Leave packet from the host, in second. The value ranges from 1
to 5 seconds. By default, the value is 1 second.
Description
Use the igmp lastmember-queryinterval command to set the interval at which IGMP
querier sends the IGMP specified group query packet when it receives IGMP Leave
packet from the host.
Use the undo igmp lastmember-queryinterval command to restore the default value.
On a shared network, that is, when there are multiple hosts and multicast routers on a
network segment, the query router (querier for short) takes charge of maintaining IGMP
2-7
group membership on an interface. When the host in IGMP Version 2 leaves a group,
the host should send IGMP Leave packet. If IGMP querier receives the packet, it must
send the IGMP specified group query packet for robust-value times according to the
interval seconds configured via igmp lastmember-queryinterval command (if the
command is not configured, seconds is 1) and the robust coefficient robust-value
configured via igmp robust-count (if the command is not configured, robust-value is 2).
If another host receives the IGMP specified group query packet from IGMP querier and
is interested in the group, it will send IGMP Membership Report packet within the
maximum response time regulated by the packet. If IGMP querier receives IGMP
Membership Report packet from another host within the time robust-value x seconds, it
will go on maintaining the group membership. If not, it will regard the group is timeout
and stop maintaining the group membership.
The command is only valid when IGMP query router is running in IGMP Version 2. If the
host runs in IGMP Version 1, it may not send IGMP Leave packet when it leaves a
group. At that time, the command is invalid to the host.
Related command: igmp robust-count and display igmp interface.
Example
# Configure the query interval of the querier for the last group member on the interface
Ethernet1/0/0 to 3 seconds.
[H3C-Ethernet1/0/0] igmp lastmember-queryinterval 3
2.1.10 igmp max-response-time
Syntax
igmp max-response-time seconds

undo igmp max-response-time
View
Interface view
Parameter
seconds: The maximum response time in the IGMP query packet in second, ranging
from 1 to 25. By default, the value is 10 seconds.
Description
Use the igmp max-response-time command to configure the maximum response

time contained in the IGMP query packet.
Use the undo igmp max-response-time command to restore the default value.
The maximum query response time determines the period for a router to detect quickly
that there are no longer directly connected group members in a LAN.
2-8
Related command: display igmp group.
Example
# Configure the maximum response time to 8 seconds.

[H3C-Ethernet1/0/0] igmp max-response-time 8
2.1.11 igmp proxy
Syntax
igmp proxy interface-type interface-number

undo igmp proxy
View
Interface view
Parameter
interface-type: Proxy interface type.

interface-number: Proxy interface number.
Description
Use the igmp proxy command to specify an interface of a leaf network router as the
IGMP proxy of another interface.
Use the undo igmp proxy command to remove the configuration.
By default, IGMP proxy function is disabled.
You must enable PIM on the interface before you configure the igmp proxy command.
An interface cannot act as the IGMP proxy of two or more other interfaces at the same
time.
If an interface is configured with IGMP proxy for multiple times, the last one overrides all
the previous configurations.
Related command: pim neighbor-policy.
Example
# Configure the IGMP proxy of router Ethernet0/0/0 to Ethernet1/0/0.

[H3C-Ethernet0/0/0] igmp proxy ethernet 1/0/0
2.1.12 igmp robust-count
Syntax
igmp robust-count robust-value

undo igmp robust-count
2-9
View
Interface view
Parameter
robust-value: IGMP robust coefficient, indicating the times IGMP querier sends the
IGMP specified group query packet when it receives IGMP Leave packet from the host.
The value ranges from 2 to 5. By default, the value is 2.
Description
Use the igmp robust-count command to set the times IGMP querier sends the IGMP
specified group query packet when it receives IGMP Leave packet from the host.
Use the undo igmp robust-count command to restore the default value.
On a shared network, that is, when there are multiple hosts and multicast routers on a
network segment, the query router (querier for short) takes charge of maintaining IGMP
group membership on an interface. When the host in IGMP Version 2 leaves a group,
the host should send IGMP Leave packet. If IGMP querier receives the packet, it must
send the IGMP specified group query packet for robust-value times according to the
interval seconds configured via igmp lastmember-queryinterval command (if the
command is not configured, seconds is 1) and the robust coefficient robust-value
configured via igmp robust-count (if the command is not configured, robust-value is 2).
If another host receives the IGMP specified group query packet from IGMP querier and
is interested in the group, it will send IGMP Membership Report packet within the
maximum response time regulated by the packet. If IGMP querier receives IGMP
Membership Report packet from another host within the time robust-value x seconds, it
will go on maintaining the group membership. If not, it will regard the group is overtime
and stop maintaining the group membership.
The command is only valid when IGMP query router is running in IGMP Version 2. If the
host runs in IGMP Version 1, it may not send IGMP Leave packet when it leaves a
group. At that time, the command is invalid to the host.
Related command: igmp lastmember-queryinterval and display igmp interface.
Example
# Configure the robust-value of querier on the interface Ethernet1/0/0 to 3.

[H3C-Ethernet1/0/0] igmp robust-count 3
2.1.13 igmp timer other-querier-present
Syntax
igmp timer other-querier-present seconds

undo igmp timer other-querier-present
2-10
View
Interface view
Parameter
seconds: IGMP querier present time, in second. The value ranges from 1 to 131070
seconds. By default, the value is twice of IGMP query messages interval. It is 120
seconds in general.
Description
Use the igmp timer other-querier-present command to configure the overtime value
of presence of IGMP querier.
Use the undo igmp timer other-querier-present command to restore the default
value.
On a shared network, i.e., there are multiple multicast routers on the same network
segment, the query router (querier for short) takes charge of sending query messages
periodically on the interface. If other non-queriers receive no query messages within
the valid period, the router will consider the previous query to be invalid and the router
itself becomes a querier.
In IGMP Version 1, the selection of a querier is determined by the multicast routing
protocol. In IGMP Version 2, the router with the lowest IP address on the shared
network segment acts as the querier.
Related command: igmp timer query, display igmp interface.
Caution:
If the querier present time configured is less than the twice of query interval, it may lead
to the repeated changes of queriers in the network.
Example
# Configure the querier present time on the interface Ethernet1/0/0 to 200 seconds.
[H3C-Ethernet1/0/0] igmp timer other-querier-present 200
2.1.14 igmp timer query
Syntax
igmp timer query seconds

undo igmp timer query
2-11
View
Interface view
Parameter
seconds: Interval at which the router sends the IGMP query messages, in second. It
ranges from 1 to 65535. By default, the value is 60 seconds.
Description
Use the igmp timer query command to configure the interval at which a router
interface sends IGMP query messages.
Use the undo igmp timer query command to restore the default value.
A multicast router sends IGMP query messages at intervals to find out whether there
are multicast group members on the network. The query interval can be modified
according to the practical conditions of the network.
Related command: igmp timer other-querier-present.
Example
# Configure the interval at which multicast router Ethernet1/0/0 sends IGMP query
packet to 125 seconds.
[H3C-Ethernet1/0/0] igmp timer query 125
2.1.15 igmp version
Syntax
igmp version { 1 | 2 }
undo igmp version
View
Interface view
Parameter
1: IGMP Version 1.
2: IGMP Version 2. By default, IGMP Version 2 is used.
Description
Use the igmp version command to specify the version of IGMP that a router uses.
Use the undo igmp version command to restore the default value.
All systems running in the same sub-network must support the same version of IGMP.
When a router finds the system of Version 1, it cannot switch to Version 1 by itself.
2-12
Example
# Specify Ethernet1/0/0 to use IGMP Version 1.

[H3C-Ethernet1/0/0] igmp version 1
2.1.16 reset igmp group
Syntax
reset igmp group { all | interface interface-type interface-number { all | group-address

[ group-mask ] } }
View
User view
Parameter
all: All IGMP groups.

interface interface-type interface-number: Interface type and interface number.
group-address: IGMP group address.
group-mask: Network segment mask of group address.
Description
Use the reset igmp group command to delete the IGMP group joined on the interface.
The deletion of the group does not affect its joining again.
Example
# Delete all the IGMP groups on all interfaces.

<H3C> reset igmp group all
# Delete all the IGMP groups on the interface Ethernet0/0/0.

<H3C> reset igmp group interface ethernet0/0/0 all
# Delete the group 225.0.0.1 on the interface Ethernet0/0/0.

<H3C> reset igmp group interface ethernet0/0/0 225.0.0.1
# Delete the IGMP groups ranging between the network segment 225.1.1.0 and
225.1.1.255 on the interface Ethernet0/0/0.
<H3C> reset igmp group interface ethernet0/0/0 225.1.1.0 255.255.255.0
2-13
Comware V3 Chapter 3 PIM Configuration Commands
Chapter 3 PIM Configuration Commands
3.1 PIM Configuration Commands

3.1.1 bsr-policy
Syntax
bsr-policy acl-number
undo bsr-policy
View
PIM view
Parameter
acl-number: ACL number used by BSR filter policy , ranging from 2000 to 2999.
Description
Use the bsr-policy command to restrict the range for valid BSR, preventing BSR
spoofing.
Use the undo bsr-policy command to restore the normal state without any range
restriction and regard all the messages received are valid.
In PIM SM network which uses BSR mechanism, any router can set itself as C-BSR
and will take charge of the authority of advertising BP information in the network if it
succeeds in competition. To prevent the valid BSR in the network from being
maliciously replaced, the following two measures should be taken:
z Change RP mapping relationship to prevent the host from spoofing the router by
counterfeiting valid BSR packet. BSR packet is multicast packet with TTL of 1, so
this kind of attack usually takes place on the edge router. BSR is in the internal
network and the host is in the external network, therefore, performing neighbor
check and RPF check to BSR packet can prevent this kind of attack.
z If a router in the network is controlled by an attacker or an illegal router accesses
the network, the attacker can set the router to C-BSR and make it succeed in
competition and control the authority of advertising RP information in the network.
The router, after being configured as C-BSR, will automatically advertise BSR
information to the whole network. BSR packet is the multicast packet which is
forwarded hop by hop with TTL of 1. The whole network will not be affected if the
neighbor router does not receive the BSR information. The solution is to configure
bsr-policy on each router in the whole network to restrict the range for legal BSR.
For example, if only 1.1.1.1/32 and 1.1.1.2/32 are permitted as BSR, the router will
3-1
not receive and forward other BSR information and legal BSR will not compete
with it.
The above two points can partially protect the security of BSR in the network. However,
if a legal BSR router is controlled by an attacker, it will also lead to the above problem.
The source parameter in the related rule command is translated as BSR address in
bsr-policy command.
Related command: acl, rule.
Example
# Configure BSR filter policy on a router. Only permit 1.1.1.1/32 to act as BSR and
regard others are invalid.
[H3C-pim] bsr-policy 2001
[H3C-pim] quit
[H3C-acl-basic-2001] rule 0 permit source 1.1.1.1 0
3.1.2 c-bsr
Syntax
c-bsr interface-type interface-number hash-mask-len [ priority ]

undo c-bsr
View
PIM view
Parameter
interface-type interface-number: Interface type and interface number of a router. A

candidate BSR is configured on this interface. PIM-SM must be enabled on this
interface, the configuration can take effect.
hash-mask-len: Mask length. The mask performs “And” operation with multicast
address at first and then performs the operation of searching for RP. The value ranges
from 0 to 32.
priority: Priority of the candidate BSR. The larger the value is, the higher the priority of
candidate BSR is. The value ranges from 0 to 255. By default, the priority is 0.
Description
Use the c-bsr command to configure a candidate BSR.

Use the undo c-bsr command to remove the candidate BSR configuration.
By default, no candidate BSR is set.
3-2
Since BSR and other devices in PIM domain need to exchange a great deal of
information during candidate BSR configuration, a relatively large bandwidth must be
guaranteed.
Related command: pim sm.
Example
# Configure the IP address of the router on Ethernet1/0/0 as a candidate BSR with the
priority 2.
<H3C> system-view
[H3C] pim
[H3C-pim] c-bsr ethernet1/0/0 30 2
3.1.3 c-rp
Syntax
c-rp interface-type interface-number [ group-policy acl-number ] [ priority

priority-value ]
undo c-rp { interface-type interface-number | all }
View
PIM view
Parameter
interface-type interface-number: Specified interface with the IP address advertised as a

candidate RP address.
acl-number: Number of basic ACL that defines a group range, which is the service
range of the advertised RP. The value ranges from 2000 to 2999.
priority-value: Priority of a candidate RP. The larger the value is, the lower the priority is.
The value ranges from 0 to 255. By default, the value is 0.
all: Removes the configuration of all candidate RPs.
Description
Use the c-rp command to configure the router to advertise itself as a candidate RP to
BSR.
Use the undo c-rp command to remove the configuration.
By default, no candidate RP is configured.
When configuring a candidate RP, a relatively large bandwidth should be reserved for
the router and other devices in PIM domain.
Related command: c-bsr.
3-3
Example
# Configure the interface Ethernet1/0/0 as the candidate RP for all groups.

<H3C> system-view
[H3C] pim
[H3C-pim] c-rp ethernet 1/0/0
3.1.4 crp-policy
Syntax
crp-policy acl-number
undo crp-policy
View
PIM view
Parameter
acl-number: ACL number used by C-RP filter policy, ranging from 3000 to 3999.
Description
Use the crp-policy command to restrict the range for valid C-RP and the group range
served by each C-RP, preventing C-RP cheating.
Use the undo crp-policy command to restore the normal state without any range
restriction and regard all the messages received are valid.
In PIM SM network which uses BSR mechanism, any router can set itself as a C-RP
serving the specific group range. If it is elected in RP election, it will become an RP
serving in the group range.
In BSR mechanism C-RP router unicasts C-RP information to BSR router which is
responsible for advertising all C-RP information to the whole network by using BRP
information.
To prevent C-RP cheating, crp-policy is needed to configure on BSR router to restrict
the range for valid C-RP and the group address range it serves. Each C-BSR may
become a BSR possibly, so the same filter policy should be configured on each C-BSR.
This command uses the ACL numbered from 3000 to 3999. The parameter source in
the related rule command indicates C-RP address and destination indicates the group
range the C-RP serves. Upon matching the received C-RP message, only when the
C-RP address in the packet matches source address and the group address range in
the packet is the subset of that in ACL, can this configuration be regarded successful.
Related command: acl and rule.
3-4
Example
# Configure C-RP policy on C-BSR router. Only permit 1.1.1.1/32 to act as C-RP which
only serves the group range 225.1.0.0/16.
[H3C-pim] crp-policy 3100
[H3C-pim] quit
[H3C-acl-adv-3100] rule 0 permit ip source 1.1.1.1 0 destination 225.1.0.0
0.0.255.255
3.1.5 debugging pim common
Syntax
debugging pim common { all | event | packet | timer }

undo debugging pim common { all | event | packet | timer }
View
User view
Parameter
all: All the common debugging information of PIM.

event: Debugging information of common PIM event.
packet: Debugging information of PIM Hello message.
timer: Debugging information of common PIM timer.
Description
Use the debugging pim common command to enable common PIM debugging
functions.
Use the undo debugging pim common command to disable the debugging functions.
By default, common PIM debugging functions are disabled.
Example
# Enable all common PIM debugging functions.

<H3C> debugging pim common all
3-5
3.1.6 debugging pim dm
Syntax
debugging pim dm { alert | all | mrt | timer | warning | { recv | send } { all | assert |
graft | graft-ack | join | prune } }
undo debugging pim dm { alert | all | mrt | timer | warning | { recv | send } { all |
assert | graft | graft-ack | join | prune } }
View
User view
Parameter
all: All the debugging information of PIM-DM.

alert: Debugging information of PIM-DM interoperation event.
mrt: Debugging information of PIM-DM multicast routing table.
timer: Debugging information of PIM-DM timer.
warning: Debugging information of PIM-DM warning message.
recv: Debugging information of PIM-DM receiving packets.
send: Debugging information of PIM-DM sending packets.
all: All packet types.
assert: Packet type, assert packet.
graft: Packet type, graft packet.
graft-ack: Packet type, graft acknowledgment packet.
join: Packet type, join packet.
prune: Packet type, prune packet.
Description
Use the debugging pim dm command to enable PIM-DM debugging functions.

Use the undo debugging pim dm command to disable the debugging functions.
By default, PIM-DM debugging functions are disabled.
Example
# Enable all PIM-DM debugging functions

<H3C> debugging pim dm all
3-6
3.1.7 debugging pim sm
Syntax
debugging pim sm { all | mbr | mrt | msdp | timer | verbose | warning | { recv | send }
{ assert | bootstrap | crpadv | jp | reg | regstop } }
undo debugging pim sm { all | mbr | mrt | msdp | timer | verbose | warning | { recv
| send } { assert | bootstrap | crpadv | jp | reg | regstop } }
View
User view
Parameter
mbr: Debugging information of PIM-SM multicast boundary router event.

mrt: Debugging information of PIM-SM multicast routing table.
msdp: Functions between PIM-SM and MSDP.
timer: Debugging information of PIM-SM timer.
warning: Debugging information of PIM-SM warning message.
recv: Debugging information of PIM-SM receiving packets.
send: Debugging information of PIM-SM sending packets.
assert | bootstrap | crpadv | jp | reg | regstop: Packet type.
Description
Use the debugging pim sm command to enable PIM-SM debugging functions.

Use the undo debugging pim sm command to disable the debugging functions.
By default, PIM-SM debugging functions are disabled.
The command debugging pim sm register-proxy is only suitable for the distributed
router. This command can enable the debugging when an interface board acts as a
proxy of main control board to send register packets.
Example
# Enable all PIM-SM debugging functions

<H3C> debugging pim sm all
3.1.8 display pim bsr-info
Syntax
display pim bsr-info
3-7
View
Any view
Parameter
None
Description
Use the display pim bsr-info command to view Bootstrap Router (BSR) information.
Related command: c-bsr and c-rp.
Example
# Execute this command on a router running PIM-SM and display the current BSR
information.
<H3C> display pim bsr-info
Current BSR Address: 20.20.20.30
Priority: 0
Mask Length: 30
Expires: 00:01:55
Local host is BSR
3.1.9 display pim interface
Syntax
display pim interface [ interface-type interface-number ]
View
Any view
Parameter
Description
Use the display pim interface command to view the PIM interface information.
Example
# Display the PIM information about the interface Ethernet1/0/0.

<H3C> display pim interface ethernet 1/0/0
PIM information of interface Ethernet1/0/0:
IP address of the interface is 10.10.1.20
PIM is enabled on interface
PIM version is 2
3-8
PIM mode is Sparse

PIM query interval is 30 seconds
Total 1 PIM neighbor on interface
PIM DR(designated router) is 10.10.1.20
Table 3-1 Description of output information of display pim interface command
Item Description
PIM SM is enabled on the interface
PIM is enabled on interface
Ethernet1/0/0.
The sending interval of Hello message
PIM query interval is 30 seconds
is 30 seconds.
PIM DR (designated router) is 10.10.1.20 IP address of DR is 10.10.1.20.
3.1.10 display pim neighbor
Syntax
display pim neighbor [ interface interface-type interface-number ]
View
Any view
Parameter
Description
Use the display pim neighbor command to view the PIM neighbor information.
Example
# Display the PIM neighbor information of the interface Ethernet1/0/0 on the router.
<H3C> display pim neighbor ethernet 1/0/0
Neighbor's Address Interface Name Uptime Expires
10.10.1.10 Ethernet1/0/0 00:41:59 00:01:16
3.1.11 display pim routing-table
Syntax
display pim routing-table [ *g [ group-address [ mask { mask-length | mask } ] ]

[ incoming-interface { interface-type interface-number | null } ] [ dense-mode |
sparse-mode ]
3-9
display pim routing-table [ **rp [ rp-address [ mask { mask-length | mask } ] ]

[ incoming-interface { interface-type interface-number | null } ] [ dense-mode |
sparse-mode]
display pim routing-table [ source-address [ mask { mask-length | mask } ]
[ group-address [ mask { mask-length | mask } ] ] [ incoming-interface { interface-type
interface-number | null } ] [ dense-mode | sparse-mode ]
View
Any view
Parameter
**rp: (*, *, RP) route entry.

*g: (*, G) route entry.
group-address: Address of the multicast group.
incoming-address: Route entry of the specified incoming interface.
Description
Use the display pim routing-table command to view the contents of the PIM multicast
routing table.
Related command: display multicast routing-table.
Example
# Display the contents of the PIM multicast routing table on the router.
<H3C> display pim routing-table
PIM-SM Routing Table
Total 0 (S,G) entry, 2 (*,G) entries, 0 (*,*,RP) entry
(*, 224.0.1.40), RP 20.20.20.30

Protocol 0x20: PIMSM, Flag 0x2003: RPT WC NULL_IIF
UpTime: 00:17:25, never timeout
Upstream interface: Null, RPF neighbor: 0.0.0.0
Ethernet0/0/0, Protocol 0x1: IGMP, never timeout
(*, 225.1.1.1), RP 20.20.20.30

Protocol 0x20: PIMSM, Flag 0x2003: RPT WC NULL_IIF
UpTime: 00:08:45, never timeout
Upstream interface: Null, RPF neighbor: 0.0.0.0
3-10

Ethernet0/0/0, Protocol 0x1: IGMP, never timeout
Matched 0 (S,G) entry, 2 (*,G) entries, 0 (*,*,RP) entry
3.1.12 display pim rp-info
Syntax
display pim rp-info [ group-address ]
View
Any view
Parameter
group-address: Group address.
Description
Use the display pim rp-info command to view the corresponding RP information of
multicast group, BSR and static RP information.
If no group address is specified in this command, the corresponding RP information of
all groups will be displayed.
Example
# Display the currently corresponding RP of 224.0.0.0.

<H3C> display pim rp-info 224.0.0.0
PIM-SM RP-SET information:
BSR is: 20.20.20.20
Group/MaskLen: 224.0.0.0/4
RP 20.20.20.20
Version: 2
Priority: 0
Uptime: 00:00:05
Expires: 00:02:25
3.1.13 pim
Syntax
pim
undo pim
3-11
View
System view
Parameter
None
Description
Use the pim command to enter PIM view.

Use the undo pim command to clear the configuration in PIM view.
The global parameter which is related with the PIM must be configured in PIM view.
Example
<H3C> system-view
[H3C] pim
[H3C-pim]
3.1.14 pim bsr-boundary
Syntax
pim bsr-boundary
undo pim bsr-boundary
View
Interface view
Parameter
None
Description
Use the pim bsr-boundary command to configure an interface to become the PIM
domain boundary.
Use the undo pim bsr-boundary command to remove the boundary.
By default, no domain boundary is set.
After this command is configured on an interface, Bootstrap messages cannot pass the
boundary, whereas other PIM packets can. This command can effectively divide the
network to domains which use different BSRs.
Related command: c-bsr.
3-12
Example
# Configure a domain boundary on the interface Pos1/0/0.

[H3C-Pos1/0/0] pim bsr-boundary
3.1.15 pim dm
Syntax
pim dm
undo pim dm
View
Interface view
Parameter
None
Description
Use the pim dm command to enable PIM-DM.

Use the undo pim dm command to disable PIM-DM.
By default, PIM-DM is disabled.
Once PIM-DM is enabled on an interface, PIM-SM cannot be enabled on the same
interface and vice versa.
Example
# Enable PIM-DM on the interface Ethernet1/0/0.

[H3C-Ethernet1/0/0] pim dm
3.1.16 pim neighbor-limit
Syntax
pim neighbor-limit limit

undo pim neighbor-limit
View
Interface view
Parameter
limit: Upper limit of PIM neighbor number on an interface, ranging from 0 to 128.
3-13
Description
Use the pim neighbor-limit command to limit PIM neighbor number on an router
interface. If the number exceeds the limit configured, no new neighbor can be added to
the router.
Use the undo pim neighbor-limit command to restore the default configuration.
By default, the upper limit of PIM neighbor number on an interface is 128.
If the PIM neighbor number on an interface has exceeded the value configured during
configuration, the previous PIM neighbor will not be deleted.
Example
# Limit the upper limit of PIM neighbor number on the interface Ethernet1/0/0/ to 50.
[H3C-Ethernet1/0/0] pim neighbor-limit 50
3.1.17 pim neighbor-policy
Syntax
pim neighbor-policy acl-number

undo pim neighbor-policy
View
Interface view
Parameter
acl-number: Number of basic ACL. The value ranges from 2000 to 2999.
Description
Use the pim neighbor-policy command to configure a router to filter the PIM neighbor
of the current interface.
Use the undo pim neighbor-policy command to cancel the filtering.
Only the router which is permitted by ACL can act as PIM neighbor of the current
interface, while other routers cannot.
If this command is configured repeatedly, the new configuration will overwrite the
previous one.
Example
# Configure 10.10.1.2 rather than 10.10.1.1 as the PIM neighbor of Ethernet1/0/0.

[H3C-Ethernet1/0/0] pim neighbor-policy 2001
[H3C-Ethernet1/0/0] quit
[H3C-acl-basic-2001] rule permit source 10.10.1.2 0
3-14
[H3C-acl-basic-2001] rule deny source 10.10.1.1 0
3.1.18 pim sm
Syntax
pim sm
undo pim sm
View
Interface view
Parameter
None
Description
Use the pim sm command to enable PIM-SM protocol on an interface.

Use the undo pim sm command to disable PIM-SM protocol.
By default, PIM-SM is disabled.
Once PIM-SM is enabled on an interface, PIM-DM cannot be enabled on the same
interface and vice versa.
Example
# Enable PIM-SM on the interface Ethernet1/0/0.

<H3C> system-view
[H3C-Ethernet1/0/0] pim sm
3.1.19 pim timer hello
Syntax
pim timer hello seconds

undo pim timer hello
View
Interface view
Parameter
seconds: Interval of sending Hello message in second, ranging from 1 to 18000. By

default, the value is 30 seconds.
3-15
Description
Use the pim timer hello command to configure the interval of sending PIM router Hello
message.
Use the undo pim timer hello command to restore the default value.
Example
# Configure the interval of sending Hello message on the interface Ethernet1/0/0 on the
PIM router to 40 seconds.
[H3C-Ethernet1/0/0] pim sm
[H3C-Ethernet1/0/0] pim timer hello 40
3.1.20 register-policy
Syntax
register-policy acl-number
undo register-policy
View
PIM view
Parameter
acl-number: Number of advanced IP ACL, defining the rule of filtering the source and
group addresses. The value ranges from 3000 to 3999.
Description
Use the register-policy command to configure a RP to filter the register packet sent by
the DR in the PIM-SM network and to accept the specific packet only.
Use the undo register-policy command to remove the configured packet filtering.
Example
# If the local device is the RP in the network, using the following command can only
accept the multicast data register packets sent by the source on the network segment
10.10.0.0/16 to the multicast address in the range of 225.1.0.0/16.
<H3C> system-view
[H3C-acl-adv-3110] rule permit ip source 10.10.0.0 0.0.255.255 destination
225.1.0.0 0.0.255.255
[H3C-acl-adv-3110] quit
[H3C] pim
3-16
[H3C-pim] register-policy 3110
3.1.21 reset pim neighbor
Syntax
reset pim neighbor { all | { neighbor-address | interface interface-type

interface-number } * }
View
User view
Parameter
all: All PIM neighbors.

neighbor-address: Specifies neighbor address.
interface: Specifies the interface.
Description
Use the reset pim neighbor command to clear PIM neighbor.

Related command: display pim neighbor.
Example
# Clear the PIM neighbor of the interface addressed with 25.5.4.3.

<H3C> reset pim neighbor 25.5.4.3
3.1.22 reset pim routing-table
Syntax
reset pim routing-table all

reset pim routing-table { group-address [ mask group-mask | group-mask-length ]
[ source-address [ mask source-mask | source-mask-length ] [ incoming-interface
{ interface-type interface-number | null } ] } *
View
User view
Parameter
all: All PIM route entries.

mask group-mask: Address mask of multicast group.
3-17
group-mask-length: Address mask length of multicast group.

source-address: Multicast source address.
mask source-mask: Address mask of multicast source.
source-mask-length: Address mask length of multicast source.
null: Route entry with null incoming interface.
incoming-interface: Incoming interface of the route entry in PIM routing table.
Description
Use the reset pim routing-table command to clear PIM route entry.
input error.
If group-address is configured to 244.0.0.0/24 and source-address to RP address (in
which, group address may have mask but the calculation result of the two must be
224.0.0.0, while source address has no mask), it indicates only (*, *, RP) entry is
deleted.
If group-address is configured to a group address and source-address to 0 (in which,
group address may have mask while source address has no mask), it indicates only (*,
G) entry is deleted.
After this command is executed, not only the multicast route entry is deleted from PIM,
but also the corresponding route entry or forwarding entry in the multicast kernel
routing table and MFC is deleted.
Related command: reset multicast routing-table, reset multicast forwarding-table,
display pim routing-table.
Example
# Clear the route entry with group address of 225.5.4.3 in PIM routing table.
<H3C> reset pim routing-table 225.5.4.3
3.1.23 source-policy
Syntax
source-policy acl-number
undo source-policy
View
PIM view
3-18
Parameter
acl-number: Number of basic or advanced ACL. The value ranges from 2000 to 3999.
Description
Use the source-policy command to configure a router to filter the multicast data packet
received according to source (group) address.
Use the undo source-policy command to remove the configuration.
If source address filtering and basic ACL are configured, all the multicast data packets
received will be matched with source addresses. The packet which does not pass the
matching will be discarded.
If source address filtering and advanced ACL are configured, all the multicast data
packets received will be matched with source and group addresses. The packet which
does not pass the matching will be discarded.
This command filters not only multicast data, but also the multicast data encapsulated
in register packet.
previous one.
Example
# Configure to accept the multicast data packets with source address of 10.10.1.2 and
discard the multicast data packets with source address of 10.10.1.1.
[H3C] pim
[H3C-pim] source-policy 2001
[H3C-pim] quit
[H3C-acl-basic-2001] rule permit source 10.10.1.2 0
3.1.24 spt-switch-threshold
Syntax
spt-switch-threshold { traffic-rate | infinity } [ group-policy acl-number [ order

order-value] ]
undo spt-switch-threshold { traffic-rate | infinity } [ group-policy acl-number ]
View
PIM view
3-19
Parameter
traffic-rate: Switch rate threshold from the RPT to the SPT in Kbps, ranging from 0 to
65535. By default, the switch threshold value is 0, i.e., switching starts when the RPT
receives the first data packet.
infinity: Indicates never to switch to SPT.
acl-number: Number of basic IP ACL, defining the range of a multicast group. The value
order-value: Order of the newly-added or refreshed group-policy in the group-policy
table, ranging from 1 to 99.
Description
Use the spt-switch-threshold command to set the packet rate threshold when the PIM
leaf router switches from the RPT to the SPT.
Use the undo spt-switch-threshold command to restore the default setting.
Use the order command to regulate the order of the group-policy. In addition, the
system chooses SPT switch threshold according to the order of group-policy, which is
more flexible and increases efficiency.
Example
# Set the threshold value to 4 kbps. If the transmission rate from the source to the
multicast group is higher than the value, the router will switch to the SPT toward the
source.
<H3C> system-view
[H3C] pim
[H3C-pim] spt-switch-threshold 4
# Add a new group-policy, with ACL number of 2010, threshold value of 100, and order
number of 1.
[H3C] spt-switch-threshold 100 group-policy 2010 order 1
3.1.25 static-rp
Syntax
static-rp rp-address [ acl-number ]

undo static-rp
View
PIM view
3-20
Parameter
rp-address: Static RP address. This address must be valid unicast IP address and
cannot be configured as the address in 127 network segment.
acl-number: Number of basic ACL, used in controlling the multicast group range that
static RP serves. The value ranges from 2000 to 2999.
Description
Use the static-rp command to configure static RP.

Use the undo static-rp command to remove the configuration.
RP is the kernel router in multicast routing. If the dynamic RP elected through BSR
mechanism is invalid for some reason, static RP can be configured as backup of the
dynamic RP to improve robusticity of the network and operation management capability
of the multicast network.
All routers in the PIM domain should be configured with this command and be specified
with the same RP address. If the configured static RP address is the address of an UP
interface on the local device, the local device will act as static RP. PIM is not necessarily
enabled on the interface which acts as static RP.
If this command is configured but ACL is not specified, the static RP configured will
serve all the multicast groups. If ACL is specified, the static RP configured will only
serve the multicast group permitted by the ACL.
In the case that the RP elected through BSR mechanism is valid, static RP does not
take effect.
previous one.
Related command: display pim rp-info.
Example
# Configure 10.110.0.6 as a static RP.

[H3C] pim
[H3C-pim] static-rp 10.110.0.6
3-21
Comware V3 Chapter 4 MSDP Configuration Commands
Chapter 4 MSDP Configuration Commands
4.1 MSDP Configuration Commands

4.1.1 cache-sa-enable
Syntax
cache-sa-enable
undo cache-sa-enable
View
MSDP view
Parameter
None
Description
Use the cache-sa-enable command to enable the router to cache SA state.

Use the undo cache-sa-enable command to remove the cache from the router.
By default, the router caches the SA state, i.e., (S, G) entry after it receives SA
messages.
If the router is in cache state, it will not send SA request message to the specified
MSDP peer when it receives a new group join message.
Example
# Configure the router to cache all the SA states.

<H3C> system-view
[H3C] msdp
[H3C-msdp] cache-sa-enable
4.1.2 debugging msdp
Syntax
debugging msdp { all | connect | event | packet | source-active }

undo debugging msdp { all | connect | event | packet | source-active }
View
User view
4-1
Parameter
all: All the debugging information of MSDP.

connect: Debugging information of MSDP peer connection reset.
event: Debugging information of MSDP event.
packet: Debugging information of MSDP packet.
source-active: Debugging information of active MSDP source.
Description
Use the debugging msdp command to enable MSDP debugging functions.

Use the undo debugging msdp command to disable MSDP debugging functions.
By default, MSDP debugging functions are disabled.
Example
# Enable all common MSDP debugging functions.

<H3C> debugging msdp all
4.1.3 display msdp brief
Syntax
display msdp brief
View
Any view
Parameter
None
Description
Use the display msdp brief command to view the state of MSDP peer.
Example
# Display the state of MSDP peer.

<H3C> display msdp brief
MSDP Peer Brief Information
Peer's Address State Up/Down time AS SA Count Reset Count
20.20.20.20 Up 00:00:13 100 0 0
4-2
4.1.4 display msdp peer-status
Syntax
display msdp peer-status [ peer-address ]
View
Any view
Parameter
peer-address: Address of MSDP peer.
Description
Use the display msdp peer-status command to view the detailed information of
MSDP peer.
Related command: peer.
Example
# Display the detailed information of the MSDP peer 10.110.11.11.

<H3C> display msdp peer-status 10.110.11.11
MSDP Peer 20.20.20.20, AS 100
Description:
Information about connection status:
State: Up
Up/down time: 14:41:08
Resets: 0
Connection interface: LoopBack0 (20.20.20.30)
Number of sent/received messages: 867/947
Number of discarded output messages: 0
Elapsed time since last connection or counters clear: 14:42:40
Information about (Source, Group)-based SA filtering policy:
Import policy: none
Export policy: none
Information about SA-Requests:
Policy to accept SA-Request messages: none
Sending SA-Requests status: disable
Minimum TTL to forward SA with encapsulated data: 0
SAs learned from this peer: 0, SA-cache maximum for the peer: none
Input queue size: 0, Output queue size: 0
Counters for MSDP message:
Count of RPF check failure: 0
Incoming/outgoing SA messages: 0/0
Incoming/outgoing SA requests: 0/0
4-3
Incoming/outgoing SA responses: 0/0

Incoming/outgoing data packets: 0/0
4.1.5 display msdp sa-cache
Syntax
display msdp sa-cache [ group-address ] [ source-address ]

[ autonomous-system-number ]
View
Any view
Parameter
group-address: Group address of (S, G) entry.

source-address: Source address of (S, G) entry. With no source address specified, all
the source information of the specified group will be displayed.
If neither group address nor source address is determined, all SA caches will be
displayed.
autonomous-system-number: Displays (S, G) entries from specified autonomous
system.
Description
Use the display msdp sa-cache command to view (S, G) state learnt from MSDP
peer.
Only cache-sa-enable command is configured, can cache state be displayed.
Example
<H3C> display msdp sa-cache

MSDP Total Source-Active Cache - 5 entries
(Source, Group) Origin RP Pro AS Uptime Expires

(10.10.1.2, 225.1.1.1) 10.10.10.10 BGP 100 00:00:10 00:05:50
(10.10.1.3, 225.1.1.1) 10.10.10.10 BGP 100 00:00:11 00:05:49
(10.10.1.2, 225.1.1.2) 10.10.10.10 BGP 100 00:00:11 00:05:49
(10.10.2.1, 225.1.1.2) 10.10.10.10 BGP 100 00:00:11 00:05:49
(10.10.1.2, 225.1.2.2) 10.10.10.10 BGP 100 00:00:11 00:05:49
MSDP matched 5 entries
4-4
4.1.6 display msdp sa-count
Syntax
display msdp sa-count [ autonomous-system-number ]
View
Any view
Parameter
autonomous-system-number: Number of sources and groups from the specified

autonomous system.
Description
Use the display msdp sa-count command to view the number of sources and groups
in MSDP cache.
The cache-sa-enable command must be configured before the configuration of this
command.
Example
<H3C> display msdp sa-count

Number of cached Source-Active entries, counted by Peer
Peer's Address Number of SA
10.10.10.10 5
Number of source and group, counted by AS

AS Number of source Number of group
? 3 3
Total Source-Active entries: 5
4.1.7 import-source
Syntax
import-source [ acl acl-number ]

undo import-source
View
MSDP view
4-5
Parameter
acl-number: Number of basic or advanced IP ACL, ranging from 2000 to 3999,

controlling which sources SA messages will advertise and to which groups it will be sent
in the domain. Basic ACL performs filtering to source and advanced ACL performs
filtering to source/group. If no ACL is specified, no multicast source will be advertised.
Description
Use the import-source command to configure which (S, G) entries in the domain need
to be advertised when a MSDP originates an SA message.
Use the undo import-source command to remove the configuration.
By default, all the (S, G) entries in the domain are advertised by the SA message.
Besides controlling SA messages creation, you can filter the forwarded SA messages
by the commands peer sa-policy import and peer sa-policy export.
Example
# Configure which (S, G) entries from the multicast routing table will be advertised in SA
messages originated by the MSDP peer.
<H3C> system-view
225.1.0.0 0.0.255.255
[H3C] msdp
[H3C-msdp] import-source acl 3101
4.1.8 msdp
Syntax
msdp
undo msdp
View
System view
Parameter
None
Description
Use the msdp command to enable MSDP and enter the MSDP view.
4-6
Use the undo msdp command to clear all configurations of MSDP, release all
resources that MSDP occupies, and restore the initial state.
Example
# Clear all configurations of MSDP.

<H3C> system-view
[H3C] undo msdp
4.1.9 msdp-tracert
Syntax
msdp-tracert source-address group-address rp-address [ max-hops max-hops ]

[ next-hop-info ] [ sa-info ] [ peer-info ] [ skip-hops skip-hops ]
View
Any view
Parameter
source-address: Multicast address address.

rp-address: IP address of RP.
max-hops: The maximum number of hops that are traced, ranging from 1 to 255. By
next-hop-info: Flag bit for collecting the next hop information.
sa-info: Flag bit for collecting SA entity information.
peer-info: Flag bit for collecting MSDP peer information.
skip-hops: Number of hops that are skipped before collecting detailed information,
ranging from 0 to 255. By default, the value is 0.
Description
Use the msdp-tracert command to trace the transmission path of SA messages in the
network, which helps to locate the faults such as information loss and configuration
error. After the transmission path of SA messages is determined, correct configuration
can avoid the overflow of SA messages.
Example
# Trace (10.10.1.1, 225.2.2.2, 20.20.20.20) path information.

<H3C> msdp-tracert 10.10.1.1 225.2.2.2 20.20.20.20
4-7
# Specify the maximum number of hops that are traced and collect detailed information
of SA and MSDP peer.
<H3C> msdp-tracert 10.10.1.1 225.2.2.2 20.20.20.20 max-hops 10 sa-info
peer-info
MSDP tracert: press CTRL_C to break
D-bit: set if have this (S,G) in cache but with a different RP
RP-bit: set if this router is an RP
NC-bit: set if this router is not caching SA's
C-bit: set if this (S,G,RP) tuple is in the cache
MSDP Traceroute path information:
Router Address: 20.20.1.1
Fixed-length response info:
Peer Uptime: 10 minutes, Cache Entry Uptime: 30 minutes
D-bit: 0, RP-bit: 1, NC-bit: 0, C-bit: 1
Return Code: Reached-max-hops
Next Hop info:
Next-Hop Router Address: 0.0.0.0
SA info:
Count of SA messages received for this (S,G,RP): 0
Count of encapsulated data packets received for this (S,G,RP):0
SA cache entry uptime: 00:30:00 , SA cache entry expiry time: 00:03:32
Peering info:
Peering Uptime: 10 minutes, Count of Peering Resets: 3
Table 4-1 Description of msdp-tracert command domain
Item Description
Address where the local router creates Peering
Router Address
session with Peer-RPF neighbor.
Time for which the local router performs Peering
Peer Uptime session with Peer-RPF neighbor in minute, with the
maximum value of 255.
Present time of (S, G, RP) entry in SA cache of the
Cache Entry Uptime local router, in minute, with the maximum value of
255.
(S, G, RP) entry existing in SA cache of the local
router.
D-bit: 1
But the RP is different from the RP specified in the
request message.
The local router is an RP, but it is not necessarily the
RP-bit: 1
source RP in (S, G, RP) entry.
NC-bit: 0 The local router enables SA cache.
C-bit: 1 (S, G, RP) entry exists in SA cache of the local router.
4-8
Item Description
Return reason is the reached maximum hops and
Return Code: other possible value includes:
Reached-max-hops Hit-src-RP: The local hop router is the source RP in
(S, G, RP) entry.
Next-Hop Router Address: If the parameter next-hop-info is used, Peer-RPF
0.0.0.0 neighbor address will be displayed.
Count of SA messages Number of SA messages received for tracing this (S,
received for this (S,G,RP) G, RP) entry.
Count of encapsulated data
Number of encapsulated data packets received for
packets received for this
tracing this (S, G, RP) entry.
(S,G,RP)
SA cache entry uptime Present time of SA cache entry.
SA cache entry expiry time Expiry time of SA cache entry.
Peering Uptime: 10 Time for which the local router performs Peering
minutes session with Peer-RPF neighbor.
Count of Peering Resets Number of Peering session resets.
4.1.10 originating-rp
Syntax
originating-rp interface-type interface-number

undo originating-rp
View
MSDP view
Parameter

Description
Use the originating-rp command to allow a MSDP to use the IP address of specified
interface as the RP address in the SA message originated.
Use the undo originating-rp command to remove the configuration.
By default, the RP address in the SA message is the RP address configured by PIM.
If an interface specified by using the originating-rp command is not configured with an
IP address or it is down, the system does not send SA message. At this time if multiple
RPs are configured on the device, the system will not select other RPs to send SA
4-9
message. Therefore, you must ensure the validity of the specified interface; otherwise it
is considered as configuration problem.
Configure logical RP by using this command.
Example
# Configure IP address of the interface Ethernet1/0/0 as the RP address in the SA

message originated.
<H3C> system-view
[H3C] msdp
[H3C-msdp] originating-rp ethernet 1/0/0
4.1.11 peer
Syntax
peer peer-address connect-interface interface-type interface-number

undo peer peer-address
View
MSDP view
Parameter

connect-interface interface-type interface-number: Interface type and number whose
primary address is used by the local router as the source IP address to establish TCP
connection with remote MSDP peers.
Description
Use the peer command to configure an MSDP peer.

Use the undo peer command to remove the MSDP peer configured.
If the local router is also in BGP peer relation with a MSDP peer, the MSDP peer and
the BGP peer should use the same IP address.
Related command: static-rpf-peer.
Example
# Configure the router using IP address 125.10.7.6 as an MSDP peer of the local router.
<H3C> system-view
[H3C] msdp
[H3C-msdp] peer 125.10.7.6 connect-interface ethernet 0/1/0
4-10
4.1.12 peer description
Syntax
peer peer-address description text

undo peer peer-address description
View
MSDP view
Parameter

text: Descriptive text, being case sensitive. The maximum length is 80 characters.
Description
Use the peer description command to configure descriptive text to MSDP peer.
Use the undo peer description command to remove the descriptive text configured.
By default, an MSDP peer has no descriptive text.
Administrator can conveniently differentiate MSDP peers by configuring descriptive
text.
Related command: display msdp peer-status.
Example
# Add descriptive text CstmrA to router 125.10.7.6 to specify that the router is Client A.
<H3C> system-view
[H3C] msdp
[H3C-msdp] peer 125.10.7.6 description router CstmrA
4.1.13 peer mesh-group
Syntax
peer peer-address mesh-group name

undo peer peer-address mesh-group name
View
MSDP view
Parameter
name: Name of an Mesh Group, being case sensitive. The maximum length is 32
characters.
peer-address: Address of an MSDP peer to be a member of the Mesh Group.
4-11
Description
Use the peer mesh-group command to configure an MSDP peer to join an Mesh
Group.
Use the undo peer mesh-group command to remove the configuration.
By default, an MSDP peer is not a member of any Mesh Group.
Example
# Configure the MSDP peer with address 125.10.7.6 to be a member of the Mesh
Group Grp1.
<H3C> system-view
[H3C] msdp
[H3C-msdp] peer 125.10.7.6 mesh-group Grp1
4.1.14 peer minimum-ttl
Syntax
peer peer-address minimum-ttl ttl

undo peer peer-address minimum-ttl
View
MSDP view
Parameter
peer-address: Address of the MSDP peer to which the TTL limitation applies.
ttl: TTL threshold, ranging from 0 to 255.
Description
Use the peer minimum-ttl command to configure the minimum TTL (Time-to-Live)
value of the multicast data packets encapsulated in SA messages to be sent to
specified MSDP peer.
Use the undo peer minimum-ttl command to restore the default TTL threshold.
By default, the value of TTL threshold is 0.
Example
# Configure the TTL threshold value to 10, i.e., only those multicast data packets with a
TTL value greater than or equal to 10 can be forwarded to the MSDP peer 110.10.10.1.
<H3C> system-view
[H3C] msdp
[H3C-msdp] peer 110.10.10.1 minimum-ttl 10
4-12
4.1.15 peer request-sa-enable
Syntax
peer peer-address request-sa-enable

undo peer peer-address request-sa-enable
View
MSDP view
Parameter
Description
Use the peer request-sa-enable command to enable the router to send SA request
message to the specified MSDP peer when receiving a new group join message.
Use the undo peer request-sa-enable command to remove the configuration.
By default, when receiving a new group join message, the router sends no SA request
messages to MSDP peers but waits to receive the next SA message.
Related command: cache-sa-enable.
Example
# Configure to send SA request message to the MSDP peer 125.10.7.6.

<H3C> system-view
[H3C] msdp
[H3C-msdp] peer 125.10.7.6 request-sa-enable
4.1.16 peer sa-cache-maximum
Syntax
peer peer-address sa-cache-maximum sa-limit

undo peer peer-address sa-cache-maximum
View
MSDP view
Parameter

sa-limit: Maximum value that the SA cache allows, ranging from 1 to 2048.
4-13
Description
Use the peer sa-cache-maximum command to limit the number of caches originated
when the router receives SA messages from an MSDP peer.
Use the undo peer sa-cache-maximum command to restore the default configuration.
By default, the maximum number of SA caches is 2048.
This configuration is recommended for all MSDP peers in the networks possibly
attacked by DoS.
Related command: display msdp, sa-count, display msdp peer-status, display
msdp brief.
Example
# Limit the number of caches originated to 100 when the router receives SA messages
from the MSDP peer 125.10.7.6.
<H3C> system-view
[H3C] msdp
[H3C-msdp] peer 125.10.7.6 sa-cache-maximum 100
4.1.17 peer sa-policy
Syntax
peer peer-address sa-policy { import | export } [ acl acl-number ]

undo peer peer-address sa-policy { import | export }
View
MSDP view
Parameter
import: Receives SA messages from the specified MSDP peer.

export: Forwards SA messages from the specified MSDP peer.
peer-address: Address of the MSDP peer whose SA messages need to be filtered.
acl acl-number: Number of advanced IP ACL, ranging from 3000 to 3999. If no ACL is
specified, all (S, G) entries are filtered.
Description
Use the peer sa-policy command to configure a filter list for SA messages received or
forwarded from the specified MSDP peer.
Use the undo peer sa-policy command to remove the configuration.
By default, messages received or forwarded will not be filtered. All SA messages are
received or forwarded from an MSDP peer.
4-14
Example
# Forward only those SA messages that passed the advanced IP ACL.

<H3C> system-view
225.1.0.0 0.0.255.255
[H3C] msdp
[H3C-msdp] peer 125.10.7.6 sa-policy export acl 3100
4.1.18 peer sa-request-policy
Syntax
peer peer-address sa-request-policy [ acl acl-number ]

undo peer peer-address sa-request-policy
View
MSDP view
Parameter
peer-address: Address from which the local router receives SA request messages sent
by the specified MSDP peer.
acl acl-number: Number of basic IP ACL, describing multicast group address, ranging
from 2000 to 2999. If no ACL is specified, all SA request messages will be ignored.
Description
Use the peer sa-request-policy command to limit SA request messages that the
router receives from MSDP peers.
Use the undo peer sa-request-policy command to remove the limitation.
By default, the router receives all SA request messages from the MSDP peer.
If no ACL is specified, all SA requests will be ignored. If ACL is specified, only those SA
request messages from the groups permitted by the ACL will be processed and all the
others will be ignored.
4-15
Example
# Configure the ACL for filtering SA request messages from the MSDP peer 175.58.6.5.
The SA request messages from group address range 225.1.1.0/8 will be received and
all the others will be ignored.
<H3C> system-view
[H3C] msdp
[H3C-msdp] peer 175.58.6.5 sa-request-policy acl 2001
4.1.19 reset msdp peer
Syntax
reset msdp peer peer-address
View
User view
Parameter
Description
Use the reset msdp peer command to reset TCP connection with the specified MSDP
peer, and clear all the statistics of the specified MSDP peer.
Example
# Clear TCP connection and statistics of the MSDP peer 125.10.7.6.

<H3C> reset msdp peer 125.10.7.6
4.1.20 reset msdp sa-cache
Syntax
reset msdp sa-cache [ group-address ]
View
User view
4-16
Parameter
group-address: Address of the group, (S, G) entries matching which are cleared from
the SA cache. If no multicast group address is specified, all SA cache entries will be
cleared.
Description
Use the reset msdp sa-cache command to clear SMDP SA cache entries.
Related command: cache-sa-enable and display msdp sa-cache.
Example
# Clear the cache entries with group address 225.5.4.3 from the SA cache.
<H3C> reset msdp sa-cache 225.5.4.3
4.1.21 reset msdp statistics
Syntax
reset msdp statistics [ peer-address ]
View
User view
Parameter
peer-address: Address of the MSDP peer whose statistics, resetting information and
input/output information will be cleared. If no MSDP peer address is specified, all
MSDP peers statistics will be cleared.
Description
Use the reset msdp statistics command to clear statistics of one or more MSDP peers
without resetting the MSDP peer.
Example
# Clear the statistics of the MSDP peer 25.10.7.6.

<H3C> reset msdp statistics 125.10.7.6
4.1.22 shutdown
Syntax
shutdown peer-address
undo shutdown peer-address
4-17
View
MSDP view
Parameter
peer-address: IP address of MSDP peer.
Description
Use the shutdown command to disable the MSDP peer specified.

Use the undo shutdown command to remove the configuration.
By default, no MSDP peer is disabled.
Example
# Disable the MSDP peer 125.10.7.6.

<H3C> system-view
[H3C] msdp
[H3C-msdp] shutdown 125.10.7.6
4.1.23 static-rpf-peer
Syntax
static-rpf-peer peer-address [ rp-policy list ]

undo static-rpf-peer peer-address
View
MSDP view
Parameter
peer-address: Address of the static RPF peer to receive SA messages.

rp-policy list: Filter policy based on RP address, which filters the RP in SA messages.
If the parameter is not specified, all SA messages from static RPF peer will be accepted.
If the parameter rp-policy list is specified and filter policy is configured, the router will
only accept SA messages from the RP which passes filtering. If no filter policy is
configured, the router will still accept all SA messages from the static RPF peer.
Description
Use the static-rpf-peer command to configure static RPF peer.

Use the undo static-rpf-peer command to remove the static RPF peer.
By default, no static RPF peer is configured.
4-18
You must configure the peer command before using the static-rpf-peer command.
If you do not want to perform RPF check to SA messages from a same MSDP peer. If
only an MSDP peer is configured on a router, this MSDP peer will be regarded as static
RPF peer.
Related command: peer and ip prefix-list.
Example
# configure two static RPF peers.

<H3C> system-view
[H3C] ip ip-prefix list1 permit 130.10.0.0 16
[H3C] ip ip-prefix list2 permit 130.10.0.0 16
[H3C] msdp
[H3C-msdp] static-rpf-peer 130.10.7.6 rp-policy list1
[H3C-msdp] static-rpf-peer 130.10.7.5 rp-policy list2
4.1.24 timer retry
Syntax
timer retry seconds

undo timer retry
View
MSDP view
Parameter
seconds: Value of connection request re-try period in second, ranging from 1 to 60.
Description
Use the timer retry command to configure the value of connection request re-try
period.
Use the undo timer retry command to restore the default value.
By default, the value of connection request re-try period is 30 seconds.
Example
# Configure the connection request re-try period to 60 seconds.

<Qudiway> system-view
[H3C] msdp
4-19
[H3C-msdp] timer retry 60
4-20
Command Manual – Multicast Protocol Chapter 5 MBGP Multicast Extension Configuration
Comware V3 Commands
Chapter 5 MBGP Multicast Extension

5.1 MBGP Multicast Extension Configuration Commands

5.1.1 aggregate
Syntax
aggregate address mask [ as-set ] [ attribute-policy route-policy-name ]

[ detail-suppressed ] [ origin-policy route-policy-name ] [ suppress-policy
route-policy-name ]
undo aggregate address mask [ as-set ] [ attribute-policy route-policy-name ]
[ detail-suppressed ] [ origin-policy route-policy-name ] [ suppress-policy
route-policy-name ]
View
IPv4 multicast subaddress family view
Parameter
address: Address of the aggregated route.

mask: Network mask of the aggregated route.
as-set: Generates a route with AS_SET segment. This parameter is not recommended
to use when many AS paths are aggregated.
attribute-policy: Attributes of the aggregated route.
detail-suppressed: No detailed route but the aggregated route is advertised.
origin-policy: Filters the detailed route involved in aggregation.
suppress-policy: Detailed route determined is not advertised.
Description
Use the aggregate command to create a multicast aggregated record in the BGP
routing table.
Use the undo aggregate command to remove the aggregation.
By default, no route is aggregated.
Use the aggregate command without parameters to create one local aggregated route
and set atomic aggregation attributes.
5-1
Comware V3 Commands
Example
# Create a multicast aggregated record in the BGP routing table and set the address of
aggregated route is 192.213.0.0.
[H3C-bgp-af-mul] aggregate 192.213.0.0 255.255.0.0
5.1.2 debugging bgp mp-update
Syntax
debugging bgp mp-update [ receive | send | verbose ]

undo debugging bgp mp-update
View
User view
Parameter
receive: Enables incoming packet debugging of MBGP.

send: Enables outgoing packet debugging of MBGP.
verbose: Enables packet detail debugging of MBGP.
Description
Use the debugging bgp mp-update command to enable MBGP Update packet
debugging.
Use the undo debugging bgp mp-update command to disable the functions.
Example
# Enable MBGP Update packet debugging.

<H3C> debugging bgp mp-update
5.1.3 display bgp multicast group
Syntax
display bgp multicast group [ group-name ]
View
Any view
Parameter
group-name: Name of peer group. If no peer group is specified, the information about
all peer groups will be displayed.
5-2
Comware V3 Commands
Description
Use the display bgp multicast group command to view the information about peer
groups.
Example
# Display the information about the peer group named my_peer.

<H3C> display bgp multicast group my_peer
5.1.4 display bgp multicast peer
Syntax
display bgp multicast peer [ ip-address | verbose ]
View
Any view
Parameter
ip-address: Displays information about the specified peer.

verbose: Display complete information about peers.
Description
Use the display bgp multicast peer command to view information about MBGP
peers.
Example
# Display information about MBGP peers.

[H3C] display bgp multicast peer verbose
5.1.5 display bgp multicast network
Syntax
display bgp multicast network
View
Any view
Parameter
None
5-3
Comware V3 Commands
Description
Use the display bgp multicast network command to view the routing information that
MBGP advertises.
Example
# Display the network segment routing information that MBGP advertises.

<H3C> display bgp multicast network
5.1.6 display bgp multicast routing
Syntax
display bgp multicast routing ip-address [ mask ]
View
Any view
Parameter
ip-address: MBGP routing information whose IP address is specified in the BGP routing
table.
Description
Use the display bgp multicast routing command to view the MBGP routing
information whose IP address is specified in the BGP routing table.
Example
# Display the MBGP routing information with destination network segment 14.1.0.0.
<H3C> display bgp multicast routing 14.1.0.0
5.1.7 display bgp multicast routing as-path-acl
Syntax
display bgp multicast routing as-path-acl as-path-acl
View
Any view
Parameter
as-path-acl: AS path list in the range 1 to 99.
5-4
Comware V3 Commands
Description
Use the display bgp multicast routing as-path-acl command to view in the BGP
routing table the MBGP routes that match the specified AS path list.
Example
# Display in the BGP routing table the MBGP routes that match the specified AS path
list.
[H3C] display bgp multicast routing as-path-acl 1
5.1.8 display bgp multicast routing cidr
Syntax
display bgp multicast routing cidr
View
Any view
Parameter
None
Description
Use the display bgp multicast routing cidr command to view the routing information
with non-natural network mask (i.e., classless inter-domain routing, CIDR).
Example
# Display CIDR routing information.

<H3C> display bgp multicast routing cidr
5.1.9 display bgp multicast routing community
Syntax
display bgp multicast routing community [ community-number |

no-export-subconfed | no-advertise | no-export | whole-match ]
View
Any view
Parameter
community-number: Specifies community number.

no-export-subconfed: Not advertises matched routes outside the local autonomous
system.
5-5
Comware V3 Commands
no-advertise: Not advertises matched routes to any peer.

no-export: Not advertises routes outside the local autonomous system but advertise
routes to other sub-autonomous systems.
whole-match: Exact match.
Description
Use the display bgp multicast routing community command to view the routing
information that belongs to the specified MBGP community.
Example
# Display the routing information that belongs to the specified MBGP community.
<H3C> display bgp multicast routing community 600:1
<H3C> display bgp multicast routing community no-export
5.1.10 display bgp multicast routing community-list
Syntax
display bgp multicast routing community-list list-number [ whole-match ]
View
Any view
Parameter
list-number: Number of community list.

whole-match: Exact match.
Description
Use the display bgp multicast routing community-list command to view the routing
information that is permitted by the MBGP community list.
Example
# Display the routing information that is permitted by the MBGP community list.
<H3C> display bgp multicast routing community-list
5.1.11 display bgp multicast routing different-origin-as
Syntax
display bgp multicast routing different-origin-as
View
Any view
5-6
Comware V3 Commands
Parameter
None
Description
Use the display bgp multicast routing different-origin-as command to view AS

routes with different origins.
Example
# Display AS routes with different origins.

<H3C> display bgp multicast routing different-origin-as
5.1.12 display bgp multicast routing peer
Syntax
display bgp multicast routing peer peer-address { received | advertised }
View
Any view
Parameter
peer-address: Address of multicast neighbor, in dotted decimal notation format.

received: Routing information received from the specified neighbor.
advertised: Routing information sent to the specified neighbor.
Description
Use the display multicast routing peer command to view the route received from or
sent to the specified multicast neighbor.
Example
# Display the routing information sent to the multicast neighbor 10.10.1.11.

<H3C> display multicast routing peer 10.10.1.11 advertised
5.1.13 display bgp multicast routing regular-expression
Syntax
display bgp multicast routing [ regular-expression as-regular-expression ]
View
Any view
5-7
Comware V3 Commands
Parameter
as-regular-expression: AS regular expression matched.
Description
Use the display bgp multicast routing regular-expression command to view the
routing information matching the specified AS regular expression.
Example
# Display the MBGP routing information matching the regular expression ^600$.
<H3C> display bgp multicast routing regular-expression ^600$
5.1.14 display bgp multicast routing statistic
Syntax
display bgp multicast routing statistic
View
Any view
Parameter
None
Description
Use the display bgp multicast routing statistic command to view statistics of MBGP
route information.
Example
# Display statistics of MBGP route information.

<H3C> display bgp multicast routing statistic
5.1.15 import-route
Syntax
import-route protocol [ route-policy policy-name ] [ med metric ]

View
5-8
Comware V3 Commands
Parameter
protocol: Source routing protocols that can be imported, which can be direct, ospf,
ospf-ase, ospf-nssa, rip, isis and static at present.
metric: Metric value loaded by an imported route.
policy-name: Routing policy used by an imported route.
Description
Use the import-route command to import routing information from other protocols to
BGP.
Use the undo import-route command to cancel the importing of routing information
from other protocols.
By default, BGP will not import routing information from other protocols.
Example
# Configure to import a static route.

[H3C-bgp-af-mul] import-route static
5.1.16 ipv4-family multicast
Syntax
ipv4-family multicast
undo ipv4-family multicast
View
BGP view
Parameter
None
Description
Use the ipv4-family multicast command to enter the IPv4 multicast subaddress family
view.
Use the undo ipv4-family multicast command to remove all the configurations in the
IPv4 multicast subaddress family view.
Example
# Enter the IPv4 multicast subaddress family view.

<H3C> system-view
[H3C] bgp 100
5-9
Comware V3 Commands
[H3C-bgp-af-mul]
5.1.17 network
Syntax
network ip-address [ address-mask ] [ route-policy policy-name ]

undo network ip-address [ address-mask ] [ route-policy policy-name ]
View
Parameter
ip-address: Network address that BGP advertises.

address-mask: Mask of the network address.
route-policy policy-name: Routing policy applied to the routes advertised.
Description
Use the network command to configure the network addresses to be sent by the local
BGP.
Use the undo network command to remove the existing configuration.
By default, the local BGP does not advertise any route.
Example
# Advertise routes to the network segment 10.0.0.0/16.

[H3C-bgp-af-mul] network 10.0.0.1 255.255.0.0
5.1.18 peer advertise-community
Syntax
peer group-name advertise-community

undo peer group-name advertise-community
View
Parameter
group-name: Name of the peer group.
5-10
Comware V3 Commands
Description
Use the peer advertise-community command to configure to advertise community

attributes to a peer (group).
Use the undo peer advertise-community command to remove the existing
configuration.
By default, no community attribute is advertised to any peer (group).
Example
# Advertise community attributes to the peer group named test.

[H3C-bgp-af-mul] peer test advertise-community
5.1.19 peer allow-as-loop
Syntax
peer { group-name | peer-address } allow-as-loop [number]

undo peer { group-name | peer-address } allow-as-loop
View
Parameter
group-name: Peer group name.

peer-address: Peer IP address.
number: Specifies the times that the local AS number allowed to be present in the
received route update messages. It defaults to 3.
Description
Use the peer allow-as-loop command to allow the AS_PATH attribute in the received
routes to include the local AS number.
Use the undo peer allow-as-loop command to disallow the AS_PATH attribute in the
received routes to include the local AS number.
By default, the local AS number is unacceptable in the received route updates.
Example
# Specify to contain the local AS number in the AS_PATH attributes received.

[Quidwa-bgp] ipv4-family multicast
[H3C-bgp-af-vpn] peer 1.1.1.1 allow-as-loop 1
5-11
Comware V3 Commands
5.1.20 peer as-path-acl
Syntax
peer { group-name | peer-address } as-path-acl number import

undo peer { group-name | peer-address } as-path-acl number import
peer group-name as-path-acl number export
undo peer group-name as-path-acl number export
View
Parameter

peer-address: IP address of the peer.
as-path-acl number: Number of AS path list matched, ranging from 1 to 199.
import: Filter list applied to incoming routes.
export: Filter list applied to outgoing routes.
Description
Use the peer as-path-acl import command to have MBGP filter the routes received
from the specified peer or peer group based on the specified AS path list.
Use the undo peer as-path-acl import command to disable MBGP to filter the
received routes.
Use the peer as-path-acl export command to have MBGP filter the routes advertised
to the specified peer or peer group.
Use the undo peer as-path-acl export command to disable MBGP filter the routes
advertise to the specified peer or peer group.
By default, MBGP does not filter the received or advertised routes.
Example
# Enable MBGP to filter routes advertised to the specified BGP peer or peer group
based on the specified AS path list.
[H3C-bgp-af-mul] peer test enable
[H3C-bgp-af-mul] peer test as-path-acl 3 export
5-12
Comware V3 Commands
5.1.21 peer enbale
Syntax
peer group-name enable

undo peer group-name enable
View
Parameter
group-name: Name of the multicast peer group.
Description
Use the peer enable command to enable the multicast peer or peer group.
Use the undo peer enable command to disable the multicast peer or peer group.
By default, the multicast peer (or peer group) is disabled.
Only after the peer (peer group) is enabled, can it establish connection with the
multicast peer.
Example
# Enable the multicast peer test.

[H3C-bgp] peer test enable
5.1.22 peer filter-policy
Syntax
peer { group-name | peer-address } filter-policy acl-number import

undo peer { group-name | peer-address } filter-policy acl-number import
peer group-name filter-policy acl-number export
undo peer group-name filter-policy acl-number export
View
Parameter

acl-number: IP ACL number, ranging from 2000 to 3999.
5-13
Comware V3 Commands
import: Specifies the redistribution policy.

export: Specifies the advertising policy.
Description
Use the peer filter-policy import command to have MBGP filter the routes received
from the specified peer or peer group based on the specified ACL.
Use the undo peer filter-policy import command to disable MBGP to filter the
received routes.
Use the peer filter-policy export command to have MBGP filter the routes advertised
to the specified peer or peer group based on the specified ACL.
Use the undo peer filter-policy export command to disable MBGP to filter the
advertised routes.
By default, MBGP does no filter the received or advertised routes.
Related command: peer as-path-acl.
Example
# Set the filter policy list for a peer.

[H3C-bgp-af-mul] peer test filter-policy 2003 import
5.1.23 peer ip-prefix
Syntax
peer { group-name | peer-address } ip-prefix prefixname import

undo peer { group-name | peer-address } ip-prefix prefixname import
peer group-name ip-prefix prefixname export
undo peer group-name ip-prefix prefixname export
View
Parameter

ip-prefix prefixname: Specifies ip-prefix name, in the range 1 to 19 characters.
import: Applies the filter policy to the routes received by the specified peer or peer
group.
5-14
Comware V3 Commands
export: Applies the filter policy to the routes advertised by the specified peer or peer
group.
Description
Use the peer ip-prefix import command to have MBGP filter the routes received from
the specified peer or peer group based on the specified address prefix list.
Use the undo peer ip-prefix import command to disable MBGP to filter the received
routes.
Use the peer ip-prefix export command to have MBGP filter the routes advertised to
the specified peer or peer group based on the specified address prefix list.
Use the undo peer ip-prefix export command to disable MBGP to filter the advertised
routes.
By default, MBGP does no filter the received or advertised routes.
Example
# Enable MBGP to filter the routes received from the specified peer group based on the
specified address prefix list.
[H3C-bgp-af-mul] peer group1 ip-prefix list1 import
5.1.24 peer next-hop-local
Syntax
peer group-name next-hop-local

undo peer group-name next-hop-local
View
Parameter
Description
Use the peer next-hop-local command to remove the processing of the next hop in
routes which BGP will advertise to the peer (group) and set the local address as the
next hop.
Use the undo peer next-hop-local command to remove the existing setting.
Example
# Set the local address as the next hop when advertising routes to peer group named
test.
5-15
Comware V3 Commands
[H3C-bgp-af-mul] peer test next-hop-local
5.1.25 peer public-as-only
Syntax
peer group-name public-as-only

undo peer group-name public-as-only
View
Parameter
Description
Use the peer public-as-only command to configure only to carry public AS number
rather than private AS number when BGP sends update packets.
Use the undo peer public-as-only command to configure to carry private AS number
when BGP sends update packets.
By default, the private AS number is carried when BGP sends update packets.
Generally, BGP sends update packets with the AS number (which can be either the
public AS number or private AS number). To enable some external routers to ignore the
private AS number when sending update packets to configure not to carry the private
AS number when BGP sends update packets.
Example
# Configure not to carry private AS number when BGP sends update packets to peer
group named test.
[H3C-bgp-af-mul] peer test public-as-only
5.1.26 peer reflect-client
Syntax
peer group-name reflect-client

undo peer group-name reflect-client
View
Parameter
5-16
Comware V3 Commands
Description
Use the peer reflect-client command to configure a peer (group) as a client of the
route reflector.
Use the undo peer reflect-client command to remove the existing configuration.
By default, there is no route reflector in the autonomous system.
Example
# Configure peer group named test to be client of the route reflector.

[H3C-bgp-af-mul] peer test reflect-client
5.1.27 peer route-policy
Syntax
peer { group-name | peer-address } route-policy policy-name import

undo peer { group-name | peer-address } route-policy policy-name import
peer group-name route-policy policy-name export
undo peer group-name route-policy policy-name export
View
Parameter

route-policy policy-name: Routing policy specified.
import: Applies routing policy to the routes received from the peer (group).
export: Applies routing policy to the routes advertised to the peer (group).
Description
Use the peer route-policy import command to have MBGP apply the specified routing
policy to the routes received from the specified peer or peer group.
Use the undo peer route-policy import command to remove the applied routing
policy.
Use the peer route-policy export command to have MBGP apply the specified routing
policy to the routes advertised to the specified peer or peer group.
Use the undo peer ip-prefix export command to disable MBGP to remove the applied
routing policy.
By default, no routing policy is applied to the received or advertised routes.
5-17
Comware V3 Commands
Example
# Apply policy 1 to the routes received from the peer group named test.
[H3C-bgp-af-mul] peer test route-policy policy1 import
5-18
Command Manual – Multicast Protocol Chapter 6 Multicast Static Route Configuration
Comware V3 Commands
Chapter 6 Multicast Static Route Configuration

Commands
6.1 Multicast Static Route Configuration Commands

6.1.1 delete rpf-route-static all
Syntax
delete rpf-route-static all
View
System view
Parameter
None
Description
Use the delete rpf-route-static all command to delete all the static multicast routes.
When using this command, the system will prompt you to acknowledge. All static
multicast routes will be deleted after your acknowledgement.
Related command: ip rpf-route-static and display multicast routing-table static.
Example
# Delete all the static multicast routes.

[H3C] delete rpf-route-static all
6.1.2 display multicast routing-table static
Syntax
display multicast routing-table static [ source mask ]
View
Any view
Parameter
source: IP address of multicast source (unicast address).

mask: IP address mask of multicast source.
6-1
Comware V3 Commands
Description
Use the display multicast routing-table static command to view the active multicast
static routes.
If no multicast source address is specified, all active multicast static routes will be
displayed.
Related command: display multicast routing-table static config.
Example
# Display all active multicast static routes.

<H3C> display multicast routing-table static
22.22.0.0/16 [inactive]
RPF interface = serial0/0/0, RPF neighbor = 66.55.99.88
Matched routing protocol = = <none>, route-policy = <none>, preference = 1
Running config = ip mroute 22.22.0.0 16 66.55.99.88 preference 1
# Display the multicast static routes that exactly match the address 10.10.0.0/16.
<H3C> display multicast routing-table static 10.10.0.0 255.255.0.0
6.1.3 display multicast routing-table static config
Syntax
display multicast routing-table static config [ source mask ]
View
Any view
Parameter

Description
Use the display multicast routing-table static config command to view multicast
static routes configured.
If no multicast source address is specified, all configured multicast static routes will be
displayed.
Related command: display multicast routing-table static.
Example
# Display all the configured multicast static routes.

<H3C> display multicast routing-table static config
6-2
Comware V3 Commands
# Display the multicast static routes that exactly match the address 1.0.0.0/8.
<H3C> display multicast routing-table static config 1.0.0.0 255.0.0.0
6.1.4 ip rpf-longest-match
Syntax
ip rpf-longest-match
undo ip rpf-longest-match
View
System view
Parameter
None
Description
Use the ip rpf-longest-match command to configure the longest-match rule to be the

multicast RPF route selecting policy.
Use the undo ip rpf-longest-match command to restore the default configuration.
By default, routes are selected according to the preference-preferred rule.
Example
# Set the longest-match rule to be the multicast RPF route selecting policy.
[H3C] ip rpf-longest-match
6.1.5 ip rpf-route-static
Syntax
ip rpf-route-static source { mask | mask-length } [ protocol ] [ route-policy

policyname ] { rpf-nbr | interface-type interface-number } [ preference preference ]
undo ip rpf-route-static source { mask | mask-length } [ protocol ] [ route-policy
policyname ]
View
System view
Parameter

mask-length: IP address mask length of multicast source.
6-3
Comware V3 Commands
protocol: Indicates that matched routes must appear in the specified unicast routing
protocol. Protocol can be such unicast routing protocols as bgp, isis, ospf, rip and static.
route-policy: Match rule for static multicast routes.
rpf-nbr: IP address of RPF neighbor router.
interface-type interface-number: Specifies the interface connected to the neighbor
running RPF.
preference: Route preference, ranging from 1 to 255. By default, the value is 1.
Description
Use the ip rpf-route-static command to configure multicast static routes.

Use the undo ip rpf-route-static command to remove the multicast static routes from
the multicast static routing table.
Related command: display multicast routing-table static config, display multicast
routing-table static.
Example
# Configure a multicast static route.

<H3C> system-view
[H3C] ip rpf-route-static 1.0.0.0 255.0.0.0 rip route-policy map1 11.0.0.1
# Display the multicast static route configured.

[H3C] display multicast routing-table static config
# Continue to configure the multicast static route.

[H3C] ip rpf-route-static 1.0.0.0 255.0.0.0 rip route-policy map1 13.1.1.2

# Continue to configure the multicast static route.

[H3C] ip rpf-route-static 1.0.0.0 255.0.0.0 null0

6-4
MPLS
Command Manual – MPLS
Table of Contents
Chapter 1 MPLS Basic Configuration Commands..................................................................... 1-1

1.1 MPLS Basic Configuration Commands ............................................................................. 1-1
1.1.1 debugging mpls lspm .............................................................................................. 1-1
1.1.2 display mpls interface.............................................................................................. 1-2
1.1.3 display mpls lsp ....................................................................................................... 1-2
1.1.4 display mpls static-lsp ............................................................................................. 1-3
1.1.5 display mpls statistics.............................................................................................. 1-3
1.1.6 lsp-trigger ................................................................................................................ 1-5
1.1.7 mtu label-including .................................................................................................. 1-6
1.1.8 mpls......................................................................................................................... 1-7
1.1.9 mpls lsr-id ................................................................................................................ 1-7
1.1.10 reset mpls statistics ............................................................................................... 1-8
1.1.11 snmp-agent trap enable ldp .................................................................................. 1-9
1.1.12 snmp-agent trap enable lsp................................................................................... 1-9
1.1.13 static-lsp egress .................................................................................................. 1-10
1.1.14 static-lsp ingress.................................................................................................. 1-11
1.1.15 static-lsp transit ................................................................................................... 1-12
1.1.16 ttl expiration ......................................................................................................... 1-12
1.1.17 ttl propagate ........................................................................................................ 1-13
1.2 LDP Configuration Commands ........................................................................................ 1-14
1.2.1 debugging mpls ldp ............................................................................................... 1-14
1.2.2 display mpls ldp..................................................................................................... 1-15
1.2.3 display mpls ldp buffer-info ................................................................................... 1-15
1.2.4 display mpls ldp interface...................................................................................... 1-16
1.2.5 display mpls ldp lsp ............................................................................................... 1-17
1.2.6 display mpls ldp peer ............................................................................................ 1-17
1.2.7 display mpls ldp remote ........................................................................................ 1-18
1.2.8 display mpls ldp session ....................................................................................... 1-18
1.2.9 mpls label advertise .............................................................................................. 1-19
1.2.10 mpls ldp ............................................................................................................... 1-20
1.2.11 mpls ldp enable ................................................................................................... 1-21
1.2.12 mpls ldp hops-count ............................................................................................ 1-22
1.2.13 mpls ldp loop-detect ............................................................................................ 1-22
1.2.14 mpls ldp password .............................................................................................. 1-23
1.2.15 mpls ldp path-vectors .......................................................................................... 1-23
1.2.16 mpls ldp remote-peer .......................................................................................... 1-24
1.2.17 mpls ldp reset-session ........................................................................................ 1-25
1.2.18 mpls ldp timer ...................................................................................................... 1-25
i
1.2.19 mpls ldp transport-ip............................................................................................ 1-26

1.2.20 remote-ip ............................................................................................................. 1-27
Chapter 2 BGP/MPLS VPN Configuration Commands .............................................................. 2-1

2.1.1 apply access-vpn vpn-instance ............................................................................... 2-1
2.1.2 apply mpls-label ...................................................................................................... 2-1
2.1.3 description ............................................................................................................... 2-2
2.1.4 display bgp routing label ......................................................................................... 2-2
2.1.5 display bgp vpnv4 ................................................................................................... 2-3
2.1.6 display ip routing-table vpn-instance....................................................................... 2-5
2.1.7 display ip vpn-instance............................................................................................ 2-6
2.1.8 display mpls l3vpn-lsp ............................................................................................. 2-6
2.1.9 display ospf sham-link............................................................................................. 2-7
2.1.10 domain-id............................................................................................................... 2-8
2.1.11 if-match mpls-label ................................................................................................ 2-9
2.1.12 import-route ospf ................................................................................................... 2-9
2.1.13 ip binding vpn-instance ....................................................................................... 2-10
2.1.14 ip route-static vpn-instance ................................................................................. 2-11
2.1.15 ip vpn-instance .................................................................................................... 2-12
2.1.16 ipv4-family ........................................................................................................... 2-13
2.1.17 ospf vpn-instance ................................................................................................ 2-14
2.1.18 peer default-route-advertise ................................................................................ 2-16
2.1.19 peer label-route-capability................................................................................... 2-16
2.1.20 peer next-hop-invariable ..................................................................................... 2-17
2.1.21 peer upe .............................................................................................................. 2-18
2.1.22 policy vpn-target .................................................................................................. 2-18
2.1.23 route-distinguisher............................................................................................... 2-19
2.1.24 route-tag .............................................................................................................. 2-20
2.1.25 routing-table limit................................................................................................. 2-21
2.1.26 sham-link ............................................................................................................. 2-22
2.1.27 vpn-instance-capability simple ............................................................................ 2-24
2.1.28 vpn-target ............................................................................................................ 2-25
Chapter 3 MPLS L2VPN Configuration Commands................................................................... 3-1

3.1 CCC Configuration Commands ......................................................................................... 3-1
3.1.1 ccc interface transmit-lsp receive-lsp ...................................................................... 3-1
3.1.2 ccc interface out-interface ....................................................................................... 3-2
3.1.3 debugging mpls l2vpn ............................................................................................. 3-3
3.1.4 display ccc............................................................................................................... 3-3
3.1.5 static-lsp egress l2vpn............................................................................................. 3-4
3.1.6 static-lsp ingress l2vpn............................................................................................ 3-5
3.1.7 static-lsp transit l2vpn.............................................................................................. 3-6
3.2 SVC MPLS L2VPN Configuration Commands .................................................................. 3-6
3.2.1 display mpls static-l2vc ........................................................................................... 3-6
ii
3.2.2 mpls static-l2vc........................................................................................................ 3-7

3.3 Martini MPLS L2VPN Configuration Commands............................................................... 3-8
3.3.1 display mpls l2vc ..................................................................................................... 3-8
3.3.2 mpls l2vc ................................................................................................................. 3-8
3.4 Kompella MPLS L2VPN Configuration Commands........................................................... 3-9
3.4.1 ce............................................................................................................................. 3-9
3.4.2 connection ............................................................................................................. 3-10
3.4.3 display bgp l2vpn .................................................................................................. 3-11
3.4.4 display mpls l2vpn forwarding-info ........................................................................ 3-12
3.4.5 l2vpn-family ........................................................................................................... 3-12
3.4.6 mpls l2vpn ............................................................................................................. 3-13
3.4.7 mpls l2vpn encapsulation...................................................................................... 3-14
3.4.8 mtu ........................................................................................................................ 3-15
3.4.9 peer enable ........................................................................................................... 3-15
iii
Comware V3 Chapter 1 MPLS Basic Configuration Commands
Chapter 1 MPLS Basic Configuration Commands
1.1 MPLS Basic Configuration Commands

1.1.1 debugging mpls lspm
Syntax
debugging mpls lspm { agent | all | event | ftn | interface | packet | policy | process
| vpn }
undo debugging mpls lspm { agent | all | event | ftn | interface | packet | policy |
process | vpn }
View
User view
Parameter
agent: Enables all MPLS Agent debugging.

all: Enables all MPLS-related debugging.
event: Enables debugging of various MPLS events.
ftn: Enables MPLS ftn debugging.
interface: Enables the MPLS debugging on the message sending/receiving interface.
packet: Enables MPLS packet debugging.
policy: Enables MPLS policy debugging.
process: Enables debugging of MPLS internal process.
vpn: Enables all MPLS VPN debugging.
Description
Use the debugging mpls lspm command to enable various LSP debugging.
Use the undo debugging mpls lspm command to disable the corresponding
debugging.
By default, all debugging is disabled.
This command is used to the debug MPLS LSPM. As debugging will affect the
performance of the router, you are recommended to use the command with caution.
Example
# Enable all MPLS LSP VPN debugging.
1-1
<H3C> debugging mpls lspm vpn
1.1.2 display mpls interface
Syntax
display mpls interface
View
Any view
Parameter
None
Description
Use the display mpls interface command to view all MPLS-enabled interfaces.
Related command: display mpls lsp, display mpls statistics, display static-lsp.
Example
# Display all MPLS-enabled interfaces.

[H3C] display mpls interface
1.1.3 display mpls lsp
Syntax
display mpls lsp [ verbose ] [ include text ]
View
Any view
Parameter
verbose: Displays detailed information.

include text: Displays the information with the specified string included.
Description
Use the display mpls lsp command to view LSP information.

By default, the display mpls lsp command displays all LSP information.
Related command: display mpls interface, display mpls statistics, display
static-lsp.
Example
# Display all LSPs whose incoming interfaces are Serial 3/0/0.
1-2
[H3C] display mpls lsp include incoming-interface serial3/0/0
1.1.4 display mpls static-lsp
Syntax
display mpls static-lsp [ verbose ] [ include text ]
View
Any view
Parameter

include text: Displays the information with the specified string included.
Description
Use the display mpls static-lsp command to view the information of all or one static
LSP(s).
Related command: display mpls interface, display mpls lsp, and display mpls
statistics.
Example
# Display information of the static LSP named “citiya-cityb”.

[H3C] display mpls static-lsp include citya-cityb
1.1.5 display mpls statistics
Syntax
display mpls statistics { interface { all | interface-type interface-number } } | { lsp

[ lsp-Index | all | name lsp-name ] } }
View
Any view
Parameter
interface-type: Type of network interface.

Interface-number: Number of network interface.
lsp-Index: LSP index
all: All LSPs
name lsp-name: Name of LSP
1-3
Description
Use the display mpls statistics command to view statistics of all or one LSP(s) and
LSP statistics on all or one interface(s).
Specifically, the displayed information includes the numbers of octets, packets, errors
and discarded packets processed on each LSP ingress and egress, as well as the
numbers of octets, packets, errors and discarded packets received and transmitted on
each MPLS-enabled interface.
Note:
Execution of the display mpls statistics command only displays LSP statistics of
public networks. For those packets that only carry private network labels, this
command does not work.
Related command: display mpls interface, display mpls lsp, and display mpls
static-lsp.
Example
# Display MPLS statistics.

[H3C] display mpls statistics lsp all
Building the information...
LSP Index/LSP Name : 1/lsp1
InSegment Octets of LSP is: 0
InSegment Packets of LSP is: 0
InSegment Errors of LSP is: 0
InSegment Discard Packets of LSP is: 0
LSP Index/LSP Name : 1/lsp1
OutSegment Octets of LSP is: 0
OutSegment Packets of LSP is: 0
OutSegment Errors of LSP is: 0
OutSegment Discard Packets of LSP is: 0
LSP Index/LSP Name : 17416/dynamic-lsp
InSegment Octets of LSP is: 0
InSegment Packets of LSP is: 0
InSegment Errors of LSP is: 0
InSegment Discard Packets of LSP is: 0
LSP Index/LSP Name : 17416/dynamic-lsp
OutSegment Octets of LSP is: 0
OutSegment Packets of LSP is: 0
OutSegment Errors of LSP is: 0
1-4
OutSegment Discard Packets of LSP is: 0
# Display MPLS statistics on all interfaces.

[H3C] display mpls statistics interface all
Showing statistics about all MPLS interface:
The statistics of interface : Serial6/0/0
The statistics of interface in :
In Octets of Mpls interface is: 0
In Packets of Mpls interface is: 0
In Errors of Mpls interface is: 0
In Discard Packets of Mpls interface is: 0
The statistics of interface out :
Out Octets of Mpls interface is: 0
Out Packets of Mpls interface is: 0
Out Errors of Mpls interface is: 0
Out Discard Packets of Mpls interface is: 0
The statistics of interface : Serial6/0/1
The statistics of interface in :
In Octets of Mpls interface is: 0
In Packets of Mpls interface is: 0
In Errors of Mpls interface is: 0
In Discard Packets of Mpls interface is: 0
The statistics of interface out :
Out Octets of Mpls interface is: 0
Out Packets of Mpls interface is: 0
Out Errors of Mpls interface is: 0
Out Discard Packets of Mpls interface is: 0
1.1.6 lsp-trigger
Syntax
lsp-trigger { all | ip-prefix ip-prefix }

undo lsp-trigger { all | ip-prefix [ ip-prefix ] }
View
MPLS view
Parameter
all: Triggers LSPs at any route.

ip-prefix: Triggers LSPs only at the routes matching the specified IP prefix list.
ip-prefix: IP prefix list, ranging from 1 to 19.
1-5
Description
Use the lsp-trigger command to configure topology-triggered LSP creation policy.

Use the undo lsp-trigger command to remove the filtering conditions specified by
parameters and disable LSP trigger creation at any route.
By default, all kinds of routing protocols are filtered out.
Note:
If no topology-triggered policy is configured, LSPs can be triggered at all host routes
with 32-bit masks.
If you import an IP-prefix rule without contents, LSPs can be triggered at all routes
according to the IP-prefix usage convention in Comware.
Example
# Triggers LSPs at all routes.

[H3C-mpls] lsp-trigger all
1.1.7 mtu label-including
Syntax
mtu label-including
undo mtu label-including
View
MPLS view
Parameter
None
Description
Use the mtu label-including command to configure to include MPLS label length in
outgoing interface MTU calculation.
Use the undo mtu label-including command to restore the default setting.
By default, MPLS label length is not included in outgoing interface MTU calculation.
Example
# Configure to include MPLS label length in outgoing interface MTU calculation.
1-6
[H3C-mpls] mtu label-including
1.1.8 mpls
Syntax
mpls
undo mpls
View
System view, routing protocol view, interface view, virtual interface view
Parameter
None
Description
Use the mpls command in system view to enable MPLS globally and enter MPLS view.
Use the undo mpls command in system view to disable MPLS globally.
Use the mpls command in interface view to enable MPLS on the interface.
Use the undo mpls command in interface view to disable MPLS on the interface.
By default, MPLS is not enabled.
Before you can enter MPLS view, you must configure the mpls lsr-id command first. In
addition, you can configure other MPLS commands only after you enter MPLS view.
Related command: mpls enable | disable.
Example
# Enter MPLS view in system view.

[H3C] mpls
[H3C-mpls]
# Execute the mpls command in interface view.

[H3C-Ethernet6/0/0] mpls
%Info: MPLS in the interface is starting, please wait...OK
1.1.9 mpls lsr-id
Syntax
mpls lsr-id ip-address

undo mpls lsr-id
1-7
View
System view
Parameter
ip-address: LSR ID, with the format like IP address, used to identify an LSR.
Description
Use the mpls lsr-id command to configure an LSR ID.

Use the undo mpls lsr-id command to delete an LSR ID.
By default, no LSR has an ID.
LSR-ID address must be the interface address of the router, and the address must be
reachable in the entire network. In general, it is recommended to use the address of the
loopback interface.
As a premise for configuring other MPLS commands, this command you can configure
an LSR ID.
Related command: display mpls interface.
Example
# Set the ID of the LSR to 202.17.41.246.

[H3C] mpls lsr-id 202.17.41.246
%Mpls lsr-id changed.
1.1.10 reset mpls statistics
Syntax
reset mpls statistics { interface { all | interface-type interface-num } | lsp { lsp-index |

all | name lsp-name } }
View
User view
Parameter
all: All interfaces or all LSPs

interface-type: Type of a network interface.
Interface-num: Number of a network interface.
lsp-Index: LSP index
name lsp-name: Name of LSP.
1-8
Description
Use the reset mpls statistics command to clear MPLS statistics.

You can use this command to clear the statistics on all or one interface(s); or the
statistics on all or one LSP(s).
Related command: display mpls statistics.
Example
# Clear statistics on the LSP named “citya-cityb”.

<H3C> reset mpls statistics lsp name citya-cityb
1.1.11 snmp-agent trap enable ldp
Syntax
snmp-agent trap enable ldp

undo snmp-agent trap enable ldp
View
System view
Parameter
None
Description
Use the snmp-agent trap enable ldp command to enable Trap function in MPLS LDP
creation.
Use the undo snmp-agent trap enable ldp command to disable Trap function in
MPLS LDP creation.
By default, TRAP function is not enabled during MPLS LDP creation.
Example
# Enable TRAP function during MPLS LDP creation.

[H3C] snmp-agent trap enable ldp
1.1.12 snmp-agent trap enable lsp
Syntax
snmp-agent trap enable lsp

undo snmp-agent trap enable lsp
1-9
View
System view
Parameter
None
Description
Use the snmp-agent trap enable lsp command to enable Trap function in MPLS LSP
creation.
Use the undo snmp-agent trap enable lsp command to disable Trap function in
MPLS LSP creation.
By default, TRAP function is disabled during MPLS LSP creation.
Example
# Enable TRAP function during MPLS LSP creation.

[H3C] snmp-agent trap enable lsp
1.1.13 static-lsp egress
Syntax
static-lsp egress lsp-name incoming-interface interface-type interface-num in-label

in-label-value
undo static-lsp egress lsp-name
View
MPLS view
Parameter
lsp-name: Name of LSP.

Interface-num: Number of network interface.
in-label-value: Value of inbound label, ranging from 16 to 1023.
Description
Use the static-lsp egress command to configure a static LSP for an egress LSR.
Use the undo static-lsp egress command to delete an LSP for an egress LSR.
Related command: static-lsp ingress, debugging mpls.
1-10
Example
# Configure a static LSP named citya-cityb on the egress LSR.

[H3C-mpls] static-lsp egress citya-cityb incoming-interface serial8/0/0
in-label 233
1.1.14 static-lsp ingress
Syntax
static-lsp ingress lsp-name destination dest-addr { addr-mask | mask-length }

{ nexthop next-hop-addr | outgoing-interface interface-type interface-num } out-label
out-label-value
undo static-lsp ingress lsp-name
View
MPLS view
Parameter

dest-addr: Destination IP address.
addr-mask: Destination IP address mask.
mask-length: Mask length of destination IP address
next-hop-addr: Next-hop address.
Interface-num: Number of network interface.
out-label-value: Value of outbound label, ranging from 16 to 1023.
Description
Use the static-lsp ingress command to configure a static LSP for the ingress LSR.
Use the undo static-lsp ingress command to delete an LSP for the ingress LSR.
In addition to configuring a static LSP for the ingress LSR, you can set precedence
value and metric value for the LSP with this command.
Related command: static-lsp egress, static-lsp transit, debugging mpls.
Example
# Configure a static LSP for the ingress LSR heading for the destination address
202.25.38.1.
[H3C-mpls] static-lsp ingress citya-cityb destination 202.25.38.1 24 nexthop
202.55.25.33 out-label 237
1-11
1.1.15 static-lsp transit
Syntax
static-lsp transit lsp-name incoming-interface interface-type interface-num in-label

in-label-value { nexthop next-hop-addr | outgoing-interface interface-type
interface-num } out-label out-label-value
undo static-lsp transit lsp-name
View
MPLS view
Parameter

interface-type: Type of an incoming or outgoing interface.
Interface-num: Number of an incoming or outgoing interface.
next-hop-addr: Next-hop address.
in-label-value: Value of inbound label, ranging from 16 to 1023.
out-label-value: Value of outbound label, ranging from 16 to 1023.
Description
Use the static-lsp transit command to configure a static LSP for a transit LSR.
Use the undo static-lsp transit command to delete an LSP for a transit LSR.
Related command: static-lsp egress, static-lsp ingress.
Example
# Configure a static LSP for the serial interface Serial3/0/0 on a transit LSR, with an
inbound label of 123 and an outbound label of 253.
[H3C-mpls] static-lsp transit citya-cityb incoming-interface serial3/0/0
in-label 123 nexthop 202.34.114.7 out-label 253
1.1.16 ttl expiration
Syntax
ttl expiration pop

undo ttl expiration pop
View
MPLS view
1-12
Parameter
None
Description
Use the ttl expiration command to configure the router to forward ICMP responses by
local IP routing when the MPLS TTL expires.
Use the undo ttl expiration command to disable the function.
For a one-tier MPLS packet with TTL expired, its ICMP response is forwarded by local
IP routing by default.
You are recommended to configure the undo ttl expiration command on the ASBRs or
the SPEs on an HoVPN network. This ensures that you can get the correct forwarding
path of the public-network routers when tracerting to another device on the VPN.
Use the undo mpls command to clear all the configurations related to the ttl
expiration command.
Related command: ttl propagate.
Example
# Send back an ICMP packet along the LSP if the TTL of an MPLS packet expires.
[H3C-mpls] undo ttl expiration pop
1.1.17 ttl propagate
Syntax
ttl propagate { public | vpn }

undo ttl propagate { public | vpn }
View
MPLS view
Parameter
public: Configures to apply TTL duplication to the packets on the public network.
vpn: Configures to apply TTL duplication to the VPN packets.
Description
Use the ttl propagate command to enable IP TTL duplication of MPLS.

Use the undo ttl propagate command to disable IP TTL duplication of MPLS.
1-13
Note:
The ttl propagate command is only available with the NE16E, NE08E, and NE05.
Caution:
The configuration of TTL duplication must be the same on all the PEs. If otherwise, the
results of traceroutes cannot reflect the real network conditions.
Related command: tracert and ttl expiration.
Example
# Apply IP TTL duplication of MPLS to VPN packets.

[H3C-mpls] ttl propagate vpn
1.2 LDP Configuration Commands

1.2.1 debugging mpls ldp
Syntax
debugging mpls ldp { { all | main | advertisement | session | pdu | notification }

[ interface interface-type interface-number ] | remote }
undo debugging mpls ldp { all | main | advertisement | session | pdu | notification }
[ interface interface-type interface-number ] | remote }
View
User view
Parameter
all: Displays all debugging information related to LDP.

main: Displays the debugging information of LDP main tasks.
advertisement: Displays the debugging information during processing of LDP
advertisement.
session: Displays debugging information during processing of LDP session.
pdu: Displays the debugging information during processing of PDU.
notification: Displays the debugging information during processing of notification.
interface interface-type interface-number: Displays all the debugging information of a
1-14
remote: Displays debugging information of all remote peers.
Description
Use the debugging ldp command to enable debugging of LDP messages.

Use the undo debugging ldp command to disable debugging of LDP messages.
You can use this command to view LDP debugging information, but take caution when
doing so.
Example
# Enable LDP debugging.

<H3C> debugging mpls ldp all
1.2.2 display mpls ldp
Syntax
display mpls ldp
View
Any view
Parameter
None
Description
Use the display mpls ldp command to view LDP and LSR information.
Related command: mpls ldp, mpls ldp hops-count, mpls ldp loop-detection, mpls
ldp path-vectors.
Example
# Display LDP and LSR information.

[H3C] display mpls ldp
1.2.3 display mpls ldp buffer-info
Syntax
display mpls ldp buffer-info
View
Any view
1-15
Parameter
None
Description
Use the display mpls ldp buffer-info command to view the buffer information of LDP.
Example
# Display LDP buffer information.

[H3C] display mpls ldp buffer-info
-----------------------------------------------------------------
Buffer-Name Buffer-ID Buffer-Size Total-Count Free-Count
-----------------------------------------------------------------
ENTITY 0 292 199 195
LOCAL-IF 1 36 200 196
PEER-IF 2 40 201 195
PDU 3 204 249 249
ADJACENCY 4 56 201 198
PEER-INF 5 116 201 198
SESSION 6 176 201 198
US-BLK 7 264 1052 1028
DS-BLK 8 240 1052 1042
FEC 9 40 1042 1032
US-LIST 10 16 1052 1028
TRIG-BLK 11 56 2076 2071
LABEL-RANGE 12 20 198 198
CR-TUNNEL 13 124 128 128
ER-HOP 14 40 4096 4096
IF-MSG 15 24 9999 9999
-----------------------------------------------------------------
Buffer no error.
1.2.4 display mpls ldp interface
Syntax
display mpls ldp interface
View
Any view
Parameter
None
1-16
Description
Use the display mpls ldp interface command to view the information of an
LDP-enabled interface.
Related command: mpls ldp enable, display mpls ldp session.
Example
# Display the information of an LDP-enabled interface.

[H3C-Ethernet3/0/0] display mpls ldp interface
1.2.5 display mpls ldp lsp
Syntax
display mpls ldp lsp
View
Any view
Parameter
None
Description
Use the display mpls ldp lsp command to view relevant LSP information created via
LDP.
Related command: display mpls lsp.
Example
# Display LSP.
[H3C-Ethernet3/0/0] display mpls ldp lsp
1.2.6 display mpls ldp peer
Syntax
display mpls ldp peer
View
Any view
Parameter
None
1-17
Description
Use the display mpls ldp peer command to view peer information.
Example
# Display peer information.

[H3C] display mpls ldp peer
1.2.7 display mpls ldp remote
Syntax
display mpls ldp remote
View
Any view
Parameter
None
Description
Use the display mpls ldp remote command to view the configured remote peer
information.
Related command: mpls ldp remote and remote-peer.
Example
# Display the configured remote-peer information.

[H3C] display mpls ldp remote
1.2.8 display mpls ldp session
Syntax
display mpls ldp session
View
Any view
Parameter
None
Description
Use the display mpls ldp session command to display the session between peer
entities.
1-18
Related command: mpls ldp enable.
Example
# Display the session between peer entities.

[H3C] display mpls ldp session
Local LDP ID: 1.1.1.9:5; Peer LDP ID: 4.4.4.9:0
TCP Connection: 1.1.1.9 <- 4.4.4.9
Session State: Operational
Session Role: Passive
Session existed time:
Basic Hello Packets Sent/Received: 85/67
KeepAlive Packets Sent/Received: 1/1
Negotiated Keepalive hold time: 60 Peer PV Limit: 0
LDP Basic Discovery Source((A) means active):
Ethernet1/0/1.3(A) Ethernet1/0/1.2
Ethernet1/0/1.1
(A) in “Ethernet1/0/1.3(A)” displayed above indicates that the interface is the main
interface.
1.2.9 mpls label advertise
Syntax
mpls ldp advertise { implicit-null | explicit-null | non-null }

undo mpls ldp advertise { implicit-null | explicit-null | non-null }
View
MPLS view
Parameter
explicit-null: Specifies at egress to distribute an explicit null label to the penultimate

hop.
implicit-null: Specifies at egress to distribute an implicit null label to the penultimate
hop.
non-null: Specifies at egress to distribute a normal label to the penultimate hop.
1-19
Note:
Label value 0 stands for IPv4 Explicit NULL Label, which is valid only at the bottom of
label stack. That is, the label stack must be popped and forwarded as the IPv4 header.
Label value 1 stands for Router Alert Label, which is valid except at the bottom of label
stack. When receiving messages with label value 1 at the top of the label stack, the
system forwards them into local software module for further processing. If a lower-layer
label is to be forwarded, it must be put with Router Alert Label.
Label value 2 stands for IPv6 Explicit NULL Label, which is valid only at the bottom of
label stack. That is, the label stack must be popped and forwarded as the IPv6 header.
Label value 3 stands for Implicit NULL Label, which can be distributed and forwarded,
but cannot be placed in encapsulation. When LSR switches top-layer labels, it only
needs to pop the labels, but cannot replace them when using label 3 to replace the
original label.
Labels 4 to 15 are reserved.
Description
Use the mpls label advertise command to specify at the egress the type of the label to
be distributed to the penultimate hop.
Use the undo mpls label advertise command to restore the default.
When the keyword explicit-null is selected, the m-layer label of a packet with m-layer
label parameter is popped at the penultimate LSR of the LSP, instead of at the egress
LSR. This can lower the stack operation demands at egress node and somewhat
mitigate the load on the egress node.
By default, the implicit label is assigned to the penultimate hop.
If the explicit null label is assigned to the penultimate hop, it can only reside at the
bottom of the label stack.
Example
# Specify at the egress to distribute a normal label to the penultimate hop.

[H3C-mpls] mpls label advertise non-null
1.2.10 mpls ldp
Syntax
mpls ldp
undo mpls ldp
1-20
View
System view
Parameter
None
Description
Use the mpls ldp command to enable LDP.

Use the undo mpls ldp command to disable LDP.
By default, LDP is disabled.
Before enabling LDP, you must enable MPLS and configure LSR ID first.
Related command: mpls lsr-id.
Example
# Enable LDP.
[H3C] mpls ldp
1.2.11 mpls ldp enable
Syntax
mpls ldp enable

mpls ldp disable
View
Interface view
Parameter
None
Description
Use the mpls ldp enable command to enable LDP on the interface.
Use the undo mpls ldp enable command to disable LDP on an interface.
By default, LDP is disabled on the interface.
To enable an interface, you must enable LDP first. After LDP is enabled on an interface,
peer discovery and session creation starts.
Example
# Enable LDP on the interface.

[H3C-Ethernet3/0/0] mpls ldp enable
1-21
1.2.12 mpls ldp hops-count
Syntax
mpls ldp hops-count hop-number

undo mpls ldp hops-count
View
System view
Parameter
hop-number: Maximum hops of loop detection, ranging from 1 to 32.
Description
Use the mpls ldp hops-count command to set the maximum hops of loop detection.
Use the undo mpls ldp hops-count command to restore the default value.
By default, the maximum hops of loop detection are 32.
This command should be configured before LDP is enabled on any interface. Its value,
which depends on actual networking situation, decides the loop detection speed during
LSP creation
Related command: mpls ldp loop-detection and mpls ldp path-vector.
Example
# Set the maximum hops of loop detection to 22.

[H3C] mpls ldp hops-count 22
# Set the maximum hops of loop detection to its default value, that is, 32.
[H3C] undo mpls ldp hops-count
1.2.13 mpls ldp loop-detect
Syntax
mpls ldp loop-detect

undo mpls ldp loop-detect
View
System view
Parameter
None
1-22
Description
Use the mpls ldp loop-detect command to enable loop detection.

Use the undo mpls ldp loop-detect command to disable loop detection.
By default, loop detection is disabled in the system.
This command should be configured before LDP is enabled on any interface.
Related command: mpls ldp hops-count and mpls ldp path-vectors.
Example
# Enable loop detection.

[H3C] mpls ldp loop-detect
# Disable loop detection.

[H3C] undo mpls ldp loop-detect
1.2.14 mpls ldp password
Syntax
mpls ldp password { cipher | simple } password

undo mpls ldp password
View
Interface view, remote-peer view
Parameter
simple: Transmits password in plain text.

cipher: Transmits password in encrypted text (MD5).
password: User password.
Description
Use the mpls ldp password command to configure LDP authentication mode.
Use the undo mpls ldp password command to delete the configuration.
Example
# Configure the LDP authentication mode to be in plain text, with a password of 123.
[H3C-Ethernet0/0/0.1] mpls ldp password simple 123
1.2.15 mpls ldp path-vectors
Syntax
mpls ldp path-vectors pv-number
1-23
undo mpls ldp path-vectors
View
System view
Parameter
pv-number: Maximum value of path vector, ranging from 1 to 32.
Description
Use the mpls ldp path-vectors command to set the maximum value of path vector.
Use the undo mpls ldp path-vectors command to restore the default maximum value
of path vector.
By default, pv-number is 32.
This command should be configured before LDP is enabled on any interface. Its value,
which depends on actual networking situation, decides the loop detection speed in LSP
creation.
Related command: mpls ldp loop-detection and mps ldp hops-count.
Example
# Set the maximum value of path vector to 23

[H3C] mpls ldp path-vectors 23
# Restore the default maximum value of path vector.

[H3C] undo mpls ldp path-vectors
1.2.16 mpls ldp remote-peer
Syntax
mpls ldp remote-peer Index

undo mpls ldp remote-peer Index
View
System view or remote-peer view
Parameter
Index: Index of remote peer entity, used to identify an entity. It ranges from 0 to 99.
Description
Use the mpls ldp remote-peer command to create a remote-peer entity and enter
remote-peer view.
Use the undo mpls ldp remote-peer command to delete a remote-peer entity.
1-24
You can use this command to create a remote-peer and accordingly create remote
session.
Related command: remote-peer.
Example
# Create a remote-peer.
[H3C] mpls ldp remote-peer 22
[H3C-mpls-remote22]
# Delete a remote-peer.
[H3C-mpls-remote22] undo mpls ldp remote-peer 22
[H3C]
1.2.17 mpls ldp reset-session
Syntax
mpls ldp reset-session peer-address
View
Interface view
Parameter
peer-address: Corresponding LDP Peer address (in IP address format).
Description
Use the mpls ldp reset-session command to reset a specified session on an

interface.
After LDP is configured on an interface and LDP session is created, this command can
be used to reset a specific session on the interface. You only need to specify the
address of the peer corresponding to the session to be reset.
Related command: mpls ldp and mpls ldp enable.
Example
# Reset the session at the interface Ethernet0/0/0.

[H3C-Ethernet0/0/0] mpls ldp reset-session 10.1.1.1
1.2.18 mpls ldp timer
Syntax
mpls ldp timer { session-hold session-holdtime | hello hello-holdtime }

undo mpls ldp timer { session-hold | hello }
1-25
View
Interface view, remote-peer view
Parameter
hello hello-holdtime: Specifies timeout time of hello hold timer, in the range 6 to 65535
seconds. It defaults to 15 seconds.
session-hold session-holdtime: Specifies timeout time of session hold timer, in the
range 1 to 65535 seconds. It defaults to 60 seconds.
Description
Use the mpls ldp timer command to set the duration of a Hello hold timer or session
hold timer.
Use the undo mpls ldp timer command to restore the default value.
Timeout of Hello hold timer means that the adjacency relation with the peer is down,
while timeout of session hold timer means that the session relation with the peer is
down.
In general, the transmission interval of hello/keepalive packets is one-third of the
timeout time of hello/session hold timer.
Normally, the default value can be directly adopted. In special cases, you need to make
modification according to requirements. Please note that the modification of hello
parameter may cause reestablishment of the original session as well as deletion and
reestablishment of the LSP established based on this session
Related command: mpls ldp, mpls ldp enable.
Example
# Modify the duration of a Hello hold timer.

[H3C-Ethernet3/0/0] mpls ldp timer hello 30
1.2.19 mpls ldp transport-ip
Syntax
mpls ldp transport-ip { interface | ip-address }

undo mpls ldp transport-ip
View
Interface view
Parameter
interface: Sets the IP address of the current interface as the transport address.
1-26
ip-address: Sets the IP address as the transport address.
Description
Use the mpls ldp transport-ip command to configure an LDP session transport
address.
Use the undo mpls ldp transport-ip command to restore the default LDP transport
address.
By default, the transport address is the LSR ID. Normally, LSR ID is an address of a
certain loopback interface and only when its peer has a route to this loopback interface
address, can the session be established successfully.
For a remote-peer, the configuration of transport address is not supported and its
transport address is fixed on the LSR ID.
In the case of local peer, the address of the local interface or the Router ID of LSR can
be adopted as its transport address.
When MPLS LDP is enabled on multiple directly connected links, these links must be
configured with the same transport address. It is recommended that you take the
default LSR-ID as the transport address; otherwise, the LDP session may not be well
established.
Example
# Set the address of the current interface as the transport address.

[Quidwa-Ethernet3/0/0] mpls ldp transport-ip interface
# Set the address of another interface as the transport address.

[H3C-Ethernet3/0/0] mpls ldp transport-ip 10.1.11.2
1.2.20 remote-ip
Syntax
remote-ip ip-address
View
Remote-peer view
Parameter
ip-address: IP address of a remote peer.
Description
Use the remote-ip command to configure a remote IP address. The address should be
the LSR ID of the remote LSR. As remote peers adopt LSR ID as their transport
1-27
addresses, the last two remote peers use their LSR ID as their transport addresses for
creating TCP connection.
remote-peer command is mainly used for extension discovery mode to establish
session with peers that are not directly connected with the links.
Related command: mpls ldp remote-peer.
Example
# Configure the address of remote-peer.

[H3C] mpls ldp remote-peer 12
[H3C-remote-peer12] remote-ip 192.168.1.
1-28
Comware V3 Chapter 2 BGP/MPLS VPN Configuration Commands
Chapter 2 BGP/MPLS VPN Configuration

Commands
2.1.1 apply access-vpn vpn-instance
Syntax
apply access-vpn vpn-instance [ vpn-name1 vpn-name2 … ]

undo apply access-vpn vpn-instance [ vpn-name1 vpn-name2 … ]
View
Route-policy view
Parameter
vpn-name: Name of the configured VPN instance. At most, 6 VPN names can be
configured.
Description
Use the apply access-vpn vpn-instance command to specify to search private

network forwarding routes in vpn-name1, vpn-name2, vpn-name3, vpn-name4,
vpn-name5, vpn-name6 (if they all exist) and forward packets after policy routing is
enabled to satisfy route-policy.
Use the undo apply access-vpn vpn-instance command to remove this function.
Example
# Specify the configured VPN instance.

[H3C-route-policy] apply access-vpn vpn-instance vpn1
2.1.2 apply mpls-label
Syntax
apply mpls-label
undo apply mpls-label
View
Route-policy view
Parameter
None
2-1
Description
Use the apply mpls-label command to assign MPLS labels for public network routes
that match route-policy filter conditions.
Use the undo apply mpls-label command to remove the configuration.
By default, no label is assigned for public network routes.
Related command: if-match mpls-label.
Example
# Define an apply clause to assign labels for public network routes that match
route-policy filter conditions.
[H3C-route-policy] apply mpls-label
2.1.3 description
Syntax
description vpn-instance-description
undo description
View
Vpn-instance view
Parameter
vpn-instance-description: Specifies the description information of VPN instance.
Description
Use the description command to configure description information for a specified VPN
instance.
Use the undo description command to remove the description of a VPN instance.
Example
# Configure description information of VPN.

[H3C-vpn-vpna] description h3c
2.1.4 display bgp routing label
Syntax
display bgp routing label
View
Any view
2-2
Parameter
None
Description
Use the display bgp routing label command to view routing information and label
information in the BGP routing table.
For common IPv4 routes without labels, “Null” is displayed.
When you view the BGP routing information by using the display bgp routing address
[ mask ] command, you can see the label information if the routes have labels.
Example
# Display BGP routing information.

<H3C> display bgp routing label
In/out
Dest/Mask Next-Hop Label
--------------------------------------------------------------
#^ 9.0.0.1/32 0.0.0.0 1024/-
# Display specific BGP routing information.

<H3C> display bgp routing 9.0.0.1
BGP routing table entry information of 9.0.0.1/32
Age : 00:00:32
From : local
State : valid, sourced, active,
Nexthop : 0.0.0.0
Origin : INC
As-path : (null)
Med : 1563
In/Out label : 1024/-
2.1.5 display bgp vpnv4
Syntax
display bgp vpnv4 { all | route-distinguisher rd-value | vpn-instance

vpn-instance-name } { group [ group-name ] | network | peer [ ip-address1 | verbose ]
| routing [ ip-address2 | statistic ] [ label ] [ as-path-acl as-path-acl | cidr |
community [ community-number | no-advertise | no-export | no-export-subconfed |
whole-match ] | community-list community-list [ whole-match ] | different-origin-as
| peer ip-address1 [ advertised | received] | regular-expression text ] }
2-3
View
Any view
Parameter
all: Displays all VPNv4 information, including group, network, peer, and routing-table.
route-distinguisher rd-value: Displays the network layer reachable information (NLRI)
that matches the route distinguisher (RD).
vpn-instance vpn-instance-name: Displays NLRI associated with the specified
vpn-instance.
group: Displays the information about peer groups.
group-name: Peer group name of the peer.
network: Displays the networks advertised by BGP.
peer: Displays information about the peer.
ip-address1: IP address of the peer.
verbose: Complete information on the peer.
routing: Displays BGP routes.
ip-address2: Displays the route to the specified destination address.
statistic: Displays route statistics.
label: Displays the route information of the specified label.
as-path-acl as-path-acl: Displays the routing information of the specified AS path.
cidr: Displays the route information of the classless domains.
community: Displays the route information of the specified community.
community-number: Specifies a community by its number.
no-advertise: Displays routes that are not advertised to any peer.
no-export: Displays routes advertised to the sub-ASs but not outside the AS.
no-export-subconfed: Displays routes that are not advertised outside the local AS.
whole-match: Displays routes that are exact matches of the specified community.
different-origin-as: Displays routes that are not originated from the local AS.
advertised: Displays all the routes advertised to the peer.
received: Displays all the routes received from the peer.
regular-expression text: Displays the routes that match the regular expression.
Description
Use the display bgp vpnv4 command to view VPNv4 information in BGP database.
2-4
Example
Display the information about all BGP VPNv4 routing-table.

[H3C] display bgp vpnv4 all routing
In/out As
Dest/mask Next-hop Med Local-pref label path
Route Distinguisher:1.1.1.1:1 (VPN instance:v1)
#^ 1.0.0.0 0.0.0.0 1024/-
Routes total: 49194533
2.1.6 display ip routing-table vpn-instance
Syntax
display ip routing-table vpn-instance vpn-instance-name [ statistics | [ ip-address ]

[ verbose ] ]
View
Any view
Parameter
vpn-instance-name: Name assigned to vpn-instance.

ip-address: Displays information of the specified address.
statistics: Displays the digests of all the routes.
Description
Use the display ip routing-table vpn-instance command to view the specified

information in the IP routing table of vpn-instance.
Example
# Display the IP routing table associated with the vpn-instance.

[H3C] display ip routing-table vpn-instance vpn-instance1
Routing Table: vpn-instance1 RD: 1233:11
Destination/Mask Proto Pre Metric Nexthop Interface
192.1.1.0/24 Direct 0 0 192.1.1.1 GigabitEthernet1/0/0
2-5
2.1.7 display ip vpn-instance
Syntax
display ip vpn-instance [ vpn-instance-name | verbose ]
View
Any view
Parameter

Description
Use the display ip vpn-instance command to view the information related to

vpn-instance, such as RD, description, and interfaces of the VPN instance.
Example
# Display the information about vpn-instance vpn1.

[H3C] display ip vpn-instance vpn1
VPN-Instance : vpn1
No description
Route-Distinguisher : 100:6
Interfaces :
Ethernet0/0/0.101
2.1.8 display mpls l3vpn-lsp
Syntax
display mpls l3vpn-lsp [ vpn-instance vpn-instance-name ] [ transit | egress |

ingress ] [include text | verbose ]
View
Any view
Parameter
transit: LSP of ASBR VPN.

egress: LSP of egress VPN.
ingress: LSP of ingress VPN.
vpn-instance: Name of VPN routing/forwarding instance
include text: String includes the specified FEC.
2-6
verbose: Displays verbose information.
Description
Use the display mpls l3vpn-lsp command to view the information of vpn-instance of
MPLS L3VPN LSPs.
Example
# Display the information of vpn-instance of MPLS L3VPN LSPs.

<H3C> display mpls l3vpn-lsp transit
--------------------------------------------------------------------LSP
Information: L3vpn Transit Lsp
--------------------------------------------------------------------
TOTAL: 0 Record(s) Found.
# Display the information of MPLS L3VPN LSPs.

[H3C] display mpls l3vpn-lsp include h3c
2.1.9 display ospf sham-link
Syntax
display ospf sham-link
View
Any view
Parameter
None
Description
Use the display ospf sham-link command to view the information of sham links.
Related command: sham-link.
Example
# Display the information of sham links.

<H3C> display ospf sham-link
Sham Links
Sham-link 3.3.3.3 -> 5.5.5.5, State: Down
Area: 0.0.0.1
Cost: 1 State: Down Type: Sham
2-7
2.1.10 domain-id
Syntax
domain-id { id-number | id-addr }

undo domain-id
View
OSPF protocol view
Parameter
id-number: Domain ID for a VPN instance, an integer in the range of 0 to 4294967295.

By default, it is 0.
id-addr: IP address format of the domain ID of a VPN instance. By default, it is 0.0.0.0.
Description
Use the domain-id command to specify domain ID for a VPN instance.

Use the undo domain-id command to restore the default domain ID.
For standard BGP/OSPF interoperability, when BGP routes are imported to OSPF at
PE, their original OSPF attributes cannot be restored. As these BGP VPN IP routes are
issued to CE as ASE LSA (type-5 LSA), OSPF cannot distinguish the routes imported
from other route domains. In order to distinguish external routes from OSPF internal
routes, it is required to restore the attributes of BGP routes when they are imported to
OSPF at the remote end. To achieve this goal, we can configure a domain ID for each
OSPF domain. A domain ID is attached to a BGP/VPN route when an OSPF route is
imported into BGP/VPN for transmission over BGP/VPN routes. Then when BGP
routes are imported to the peer PE, LAS values are filled in according to the extended
community attributes. If the received BGP VPN IP routes have the same domain ID,
they are from the same VPN instance.
By default, domain ID is 0.
Note:
The specified domain ID will not take effect until the reset ospf command is executed.
Example
# Set domain ID 100 to OSPF process 100.

[H3C-ospf-100] domain-id 100
[H3C-ospf-100] domain-id 0.0.0.100
2-8
2.1.11 if-match mpls-label
Syntax
if-match mpls-label
undo if-match mpls-label
View
Route-policy view
Parameter
None
Description
Use the if-match mpls-label command to configure to match public network routes
with MPLS labels only.
Use the undo if-match mpls-label command to remove the match rules.
Related command: apply mpls-label.
Example
# Define an if-match clause to permit the filtering of routes with labels.

[H3C-route-policy] if-match mpls-label
2.1.12 import-route ospf
Syntax
import-route { ospf | ospf-ase | ospf-nssa } [ process-id ] [ med value | route-policy

route-policyname ]
undo import-route { ospf | ospf-ase | ospf-nssa } [ process-id ]
View
BGP unicast/multicast view, MBGP VPN-instance address family view
Parameter
process-id: OSPF process ID. By default, it is 1.

ospf: Imports only the ASE internal route discovered by OSPF process with process-id
as the external route information.
ospf-ase: Imports only the OSPF-ASE route discovered by OSPF process with
process-id as the external route information.
ospf-nssa: Imports only the OSPF-NSSA route discovered by OSPF process with
process-id as the external route information.
2-9
med value: Route cost value

route-policyname: Route policy name
Description
Use the import-route ospf command to enable to import OSPF route.

Use the undo import-route ospf command to disable to import OSPF route.
Caution:
By default, the process ID is 1.
Example
# Enable to import an OSPF route with process ID 100.

[H3C] ip vpn-instance sphinx
[H3C-vpn-sphinx] route-distinguisher 168.168.55.1:85
[H3C-vpn-sphinx] quit
[H3C] bgp 352
[H3C-bgp] ip vpn-instance sphinx
[H3C-bgp-af-vpn-instance] import-route ospf 100
2.1.13 ip binding vpn-instance
Syntax
ip binding vpn-instance vpn-instance-name

undo ip binding vpn-instance vpn-instance-name
View
Interface (including subinterface) view
Parameter
Description
Use the ip binding vpn-instance command to bind an interface or subinterface to a

vpn-instance.
Use the undo ip binding vpn-instance command to delete the binding.
By default, global routing table is used.
2-10
The IP address of the interface will be removed after you execute this command on it,
so you need to reconfigure the IP address for the interface.
Example
# Bind VPN instance vpn1 to the interface atm0/0/0.

[H3C] interface atm1/0/0
[H3C-Atm1/0/0] ip binding vpn-instance vpn1
2.1.14 ip route-static vpn-instance
Syntax
ip route-static vpn-instance vpn-instance-name1 vpn-instance-name2 …

destination-address { mask | mask-length } { interface-type interface-number |
[ nexthop-address ] | vpn-instance vpn-nexthop-name vpn-nexthop-address |
nexthop-address [ public ] } [ preference preference-value ] [ reject | blackhole ]
undo ip route-static vpn-instance vpn-instance-name1 vpn-instance-name2 …
destination-address { mask | mask-length } { interface-type interface-number |
vpn-instance vpn-nexthop-name vpn-nexthop-address | nexthop-address [ public ] }
[ preference preference-value ]
View
System view
Parameter
vpn-name: Name of VPN instance. 6 names can be configured at most.

destination-address: Destination address of the static route.
mask: Address mask.
mask-length: Length of the mask. As it requires consecutive 1s in a 32-bit mask, the
mask in dotted decimal notation format can be substituted by mask-length.
(mask-length is represented by the number of consecutive 1s in the mask.)
interface-type interface-number: Specifies the outgoing interface of the static route by
its type and number. You can specify the interface of public network or other
vpn-instance as the outgoing-interface of the static route.
vpn-nexthop-name: Specifies vpn-instance of the next hop for the static route.
vpn-nexthop-address: Specifies IP address of the next hop for the static route.
public: Indicates that the next hop of this route is a public IP address.
preference-value: Specifies preference value.
reject: Configures a route as unreachable.
blackhole: Configures a route as a blackhole.
2-11
Description
Use the ip route-static vpn-instance command to configure a static route, by

specifying a private network interface as the outgoing-interface of this static route.
When using a multi-role host, you can configure a static route in a private network with
an interface of another private network or public network as its outgoing-interface.
Use the undo ip route-static vpn-instance command to delete the configuration of
this static route.
Example
# Configure a static route with destination address 100.1.1.1 and next hop address
1.1.1.2.
[H3C] ip route-static vpn-instance vpn1 100.1.1.1 16 vpn-instance vpn1 1.1.1.2
2.1.15 ip vpn-instance
Syntax
ip vpn-instance vpn-instance-name
undo ip vpn-instance vpn-instance-name
View
System view, routing protocol (BGP and RIP) view
Parameter
Description
Use the ip vpn-instance command to create and configure a vpn-instance.

Use the undo ip vpn-instance command to delete the specified vpn-instance.
By default, vpn-instance is not defined. Neither input nor output list is associated with
vpn-instance. No route-map is associated with vpn-instance.
Use the ip vpn-instance command to create a vpn-instance named vpn-name.
Example
# Create VPN instance vpn1.

[H3C] ip vpn-instance vpn1
[H3C-vpn-vpn1]
2-12
2.1.16 ipv4-family
Syntax
ipv4-family { multicast | vpn-instance vpn-instance-name | vpnv4 [ unicast ] }

undo ipv4-family {multicast | vpn-instance vpn-instance-name | vpnv4 [ unicast ] }
View
BGP view
Parameter
multicast: It is used to enter MBGP multicast address family view.

vpn-instance vpn-instance-name: Associates the specified vpn-instance with the
MBGP address family. This parameter is used to enter MBGP vpn-instance address
family view.
vpnv4: It is used to enter MBGP vpnv4 address family view.
unicast: Uses VPNv4 unicast address.
Description
Use the ipv4-family multicast command to enter MBGP multicast address family
view.
Use the undo ipv4-family multicast command to delete the configuration of the
specified multicast address family view.
Use the ipv4-family vpn-instance command to enter MBGP vpn-instance address
family view.
Use the undo ipv4-family vpn-instance command to delete the association of
vpn-instance with MBGP address family, and return to BGP unicast view.
Use the ipv4-family vpnv4 command to enter MBGP VPNv4 address family view.
Use the undo ipv4-family vpnv4 command to delete the configuration of MBGP
VPNv4 address family view.
By default, unicast address is used when VPNv4 address family is configured.
By default, unicast address is used when MBGP address family is configured.
Use this command to enter address family view and configure parameters related to
BGP address family in this view.
Related command: peer enable.
Example
# Associate the specified vpn-instance with MBGP address family to enter MBGP
vpn-instance address family view. You must first configure vpn-instance before you
perform that configuration.
2-13
[H3C] bgp 100

[H3C–bgp] ipv4 family vpn-instance abc
[H3C-bgp-af-vpn-instance]
# Enter VPNv4 address family view.

[H3C] bgp 100
[H3C-bgp] ipv4 family vpnv4 unicast
[H3C-bgp-af-vpn]
2.1.17 ospf vpn-instance
Syntax
ospf process-id [ router-id router-id-number ] vpn-instance vpn-instance-name

undo ospf process-id
View
System view
Parameter
process-id: OSPF process ID. By default, it is set to 1.

router-id-number: Router ID for an OSPF process. It is optional.
vpn-instance-name: VPN instance bound to an OSPF process.
Description
Use the ospf command to enable an OSPF process.

Use the undo ospf command to disable an OSPF process.
After enabling an OSPF process, you can perform the configuration related to OSPF in
the OSPF protocol view.
By default, OSPF protocol is not used in the system.
Comware supports multiple OSPF processes, so you can specify different process IDs
to enable multiple OSPF processes on a router.
You are recommended to specify route-id in a process using router-id when enabling
the OSPF process. If you want to enable multiple processes on a router, you are
recommended to specify different router IDs for different processes.
To enable an OSPF process belonging to a public network without router ID, the
following conditions should be satisfied:
z RM is configured with router ID.
z There is an interface configured with an IP address.
2-14
If you enable an OSPF process without specify router ID, and the process is to be
bound to a VPN instance, the VPN instance should have an interface that is configured
with an IP address.
If you want to bind a process to a VPN instance, you must specify the VPN instance
name.
One VPN instance may include several processes. For example, for VPN instance 1 to
configure the commands ospf 1 vpn-instance vpn1, ospf 2 vpn-instance vpn1, and
ospf 3 vpn-instance vpn1. Accordingly, VPN instance 1 will include processes 1, 2,
and 3.
One process belongs to one instance only however. If you have configured ospf 1
vpn-instance vpn1, you cannot configure ospf 1 vpn-instance vpn2. Otherwise, the
system prompts: “Wrong configuration. Process 1 has been bound to vpn-instance
vpn-instance 1”. If you configure ospf 1 first and then ospf 1 vpn-instance vpn1, the
system prompts: “Wrong configuration. Process 1 has been running in public domain”.
If you configure ospf 1 vpn-instance vpn1 first and then ospf 1, the system enters
ospf 1 vpn-instance vpn1 mode. That is, the commands ospf 1 and ospf 1
vpn-instance vpn1 are equivalent.
When an OSPF process is bound to a VPN instance, the default OSPF router is PE
router. After executing the display ospf process-id brief command, you will view the
information: “PE router, connected to VPN backbone”.
Caution:
z A router can run no more than 1024 OSPF processes, with up to 10 processes
enabled in each VPN instance.
z If you bind an OSPF process to a nonexistent VPN instance, the configuration for
the command fails. The system prompts: “Specified vpn instance not configured”.
z When a VPN instance is deleted, all the related OSPF processes will be deleted.
For example, VPN instance vpn1 includes OSPF processes 1, 2 and 3. If VPN
instance vpn1 is deleted, the OSPF processes 1, 2 and 3 will all be deleted at the
same time.
Related command: network.
Example
# Enable OSPF protocol with default process ID.

[H3C] router id 10.110.1.8
[H3C] ospf
2-15
# Enable OSPF protocol with process ID 120.

[H3C] router id 10.110.1.8
[H3C] ospf 120
[H3C-ospf-120]
# Enable OSPF process with process ID 100, specify its route ID to 2.2.2.2, and bind it
to VPN instance vpn1.
[H3C] ospf 100 router-id 2.2.2.2 vpn-instance vpn1
[H3C-ospf-100]
2.1.18 peer default-route-advertise
Syntax
peer group-name default-route-advertise

undo peer group-name default-route-advertise
View
BGP view, MBGP IPv4-family view
Parameter
group-name: Peer group name.
Description
Use the peer default-route-advertise command to enable a peer (group) to import a

default route.
Use the undo peer default-route-advertise command to remove the existing
configuration.
By default, a peer (group) does not import default route.
This command does not require any default route in the routing table but transmits a
default route with the next hop being itself to the peer unconditionally.
Example
# Enable the peer (group) test to import a default route.

[H3C–bgp] peer test default-route-advertise
2.1.19 peer label-route-capability
Syntax
peer group-name label-route-capability

undo peer group-name label-route-capability
2-16
View
BGP view
Parameter
group-name: Indicates name of peer group.
Description
Use the peer label-route-capability command to enable the capability of a peer to

process IPv4 routes with labels. Use the undo peer label-route-capability command
to disable the capability.
By default, BGP peer cannot process IPv4 routes with labels.
Example
# Enable the capabilities of IBGP and EBGP peer groups to process IPv4 routes with
labels.
[H3C-bgp] group ibgp internal
[H3C-bgp] peer ibgp label-route-capability
[H3C-bgp] group ebgp external
[H3C-bgp] peer ebgp label-route-capability
2.1.20 peer next-hop-invariable
Syntax
peer group-name next-hop-invariable

undo peer group-name next-hop-invariable
View
BGP view, BGP-VPNv4 subaddress family view, BGP VPN-Instance view, BGP-IPv4
multicast subaddress family view
Parameter
group-name: Indicates name of peer group.
Description
Use the peer next-hop-invariable command to configure the invariable next hop when
sending routes to EBGP peers.
Use the undo peer next-hop-invariable command to restore the default configuration.
By default, BGP Speaker varies the next hop to itself when sending routes to EBGP
peers.
2-17
The peer next-hop-invariable command is applicable to the networking application

that adopts Multihop MP-BGP multi-AS VPN mode and uses Route Reflector (RR) to
advertise VPNv4 routes. The invariable next hop is configured when VPNv4 routes are
advertised between multi-AS RRs.
Example
# Configure the invariable next hop when sending VPNv4 routes to EBGP peers.
[H3C-bgp] group ebgp external
[H3C-bgp] ipv4-family vpnv4
[H3C-bgp-af-vpn] peer ebgp enable
[H3C-bgp-af-vpn] peer ebgp next-hop-invariable
2.1.21 peer upe
Syntax
peer peer-address upe

undo peer peer-address} upe
View
BGP view
Parameter
peer-address: IP address of a peer.
Description
Use the peer upe command to configure BGP peer as the UPE of hierarchical
BGP/MPLS VPN.
Use the undo peer upe command to delete this configuration.
Example
# Configure BGP peer as the UPE of hierarchical BGP/MPLS VPN.

[H3C-bgp] ipv4-family vpnv4
[H3C-bgp-af-vpn] peer 1.1.1.1 upe
2.1.22 policy vpn-target
Syntax
policy vpn-target
undo policy vpn-target
2-18
View
BGP-VPNv4 subaddress family view
Parameter
None
Description
Use the policy vpn-target command to filter the received routing information
according to the VPN-target extended community attributes.
Use the undo policy vpn-target command to remove the filtering.
By default, the received routing information is filtered according to the VPN-target
extended community attributes.
Example
# Filter the received routing information according to the VPN-target extended

community attributes.
[H3C-bgp-af-vpn] policy vpn-target
2.1.23 route-distinguisher
Syntax
route-distinguisher route-distinguisher
View
MBGP VPN-instance view
Parameter
route-distinguisher: Configures a VPN IPv4 prefix by adding an 8-byte value to an IPv4

prefix.
Description
Use the route-distinguisher command to configure RD for an MPLS VPN instance. A

vpn-instance cannot run until it is configured with an RD.
A route distinguisher (RD) creates route and forwarding list for a VPN and specifies the
default route identifier. Add an RD to the beginning of a specific IPv4 prefix to make it
the globally unique VPN IPv4 prefix.
If an RD is associated with an autonomous system number (ASN), it is composed of the
ASN and an arbitrary number; if the RD is associated with an IP address, it is a
combination of the IP address and an arbitrary number.
RD has the following formats:
2-19
16-bit ASN (can be 0 here): a 32-bit number defined by user, for example, 101:3.
32-bit IP address (can be 0.0.0.0 here): a 16-bit number defined by user, for example,
192.168.122.15:1.
Example
# Configure RD for an MPLS VPN instance.

[H3C] ip vpn-instance vpn_blue
[H3C-vpn-vpn_blue] route-distinguisher 100:3
[H3C] ip vpn-instance vpn_red
[H3C-vpn-vpn_red] route-distinguisher 173.13.0.12:200
2.1.24 route-tag
Syntax
route-tag tag-number
undo route-tag
View
OSPF protocol view
Parameter
tag-number: Tag value to identify VPN import route, in range of 0 to 4294967295. By

default, its first two fields are fixed to 0xD000, while the last two fields are the ASN of
local BGP. For example, if local BGP ASN is 100, then the default tag value in decimal
is 3489661028.
Description
Use the route-tag command to specify a tag value to identify VPN import route.
Use the undo route-tag command to restore the default value.
If a VPN site is linked to multiple PEs, when a route learned from MPLS/BGP is
advertised by a PE router via its type-5 or type-7 LSA to the VPN site, the route may be
received by another PE router. This will result in routing loop. To avoid routing loop, you
should configure route-tag and you are recommended to configure the same route-tag
for the PEs in the same VPN domain. The route-tag is included in the type-5/-7 LSA. It
is not transmitted in the extended community attributes of BGP, and thus it is limited in
the local area. Therefore, it can only be configured and function on the PE router, which
receives BGP routes and generates OSPF LSA.
Configure route-tag in OSPF protocol view. Different processes can be configured with
a same route-tag. You can configure the same route-tag using different commands, but
they are different in priority levels.
1) Those configured with the import-route command are of the highest priority level.
2-20
2) Those configured with the route-tag command are in the second place in terms of
priority level.
3) Those configure with the default tag command are of the lowest priority level.
If the route-tag included in the type-5/-7 LSA is identical with its existing tag, the LSA
received will be neglected in route calculation.
Caution:
To validate the configured route-tag, you must execute the reset ospf command.
Related command: import-route and default.
Example
# Configure route-tag 100 to OSPF process 100.

[H3C-ospf-100] route-tag 100
OSPF: Process 100's route tag has been changed
OSPF: Reload or use 'reset ospf' command for this to take effect
2.1.25 routing-table limit
Syntax
routing-table limit threshold-value { warn threshold | syslog-alert }

undo routing-table limit
View
Parameter
threshold-value: Threshold of the maximum route count. When the number of routes
reaches this threshold, no route can be added. It is in the range 1 to 1000.
warn-threshold: Warn threshold percentage. When the number of routes exceeds the
threshold of the maximum route count times the warn threshold, alarm is generated.
The warn threshold is in the range 1 to 100.
syslog-alert: Allows a route to be added when the number of routes reaches the
threshold of the maximum route count. In this case, a SYSLOG error message is sent.
Description
Use the routing-table limit command to limit the route maximum in a vpn-instance, to
avoid too many routes in the ingress interface of the PE router.
2-21
Use the undo routing-table limit command to remove the limitation.

It is necessary to enter vpn-instance sub-view before using the routing-table limit
command. Create a vpn-instance routing table in this view and allocate a route
distinguisher (RD) in either of the following formats:
16-bit ASN: a 32-bit user-defined number, e.g. 100:1.
32-bit IP address: a 16-bit user-defined number, e.g. 172.1.1.1:1.
Create a vpn-target extended community for a vpn-instance and specify ingress or
egress interface or both of them for the vpn-target command. These parameters can
be used to configure ingress/egress routing information of the VPN-target extended
community for a router.
Example
# Set the threshold of maximum route count to 1000 in VPN-instance vpn1.

[H3C] ip vpn-instance vpn1
[H3C-vpn- vpn1] route-distinguisher 100:1
[H3C-vpn- vpn1] vpn-target 100:1 import-extcommunity
[H3C-vpn- vpn1] routing-table limit 1000 simply-alert
2.1.26 sham-link
Syntax
sham-link source-addr destination-addr [ cost cost-value ] [ dead seconds ] [ hello

seconds ] [ md5 keyid key seconds ] [ retransmit seconds ] [ simple password ]
[ trans-delay seconds ]
undo sham-link source-addr destination-addr
View
OSPF area view
Parameter
source-addr: Source address of a sham-link, a loopback interface address with 32-bit

mask
destination-addr: Destination address of a sham-link, a loopback interface address with
32-bit mask
cost-value: Cost at sham link, in the range of 1 to 65535. By default, it is 1.
password: Specifies authentication string in plain text at the interface, 8 characters at
most. It must be consistent with the authentication string of sham link peer.
keyid: Specifies MD5 authentication string at the interface, in range of 1 to 255
characters. It must be consistent with the authentication string of sham link peer.
2-22
key: Specifies authentication string at the interface, 16 characters at most. It must be

consistent with the authentication string of sham link peer. When the display
current-configuration command is executed, the system displays the 24-character
MD5 authentication string in cipher text. You can also input 24-character authentication
string in cipher text.
dead seconds: Specifies interval for the dead timer, in range of 1 to 8192 seconds. By
default, it is 40 seconds. It must be consistent with the value of dead seconds for sham
link peer.
hello seconds: Specifies interval between Hello message transmissions at the
interface, in range of 1 to 8192 seconds. By default, it is 10 seconds. It must be
consistent with the value of hello seconds for sham link peer.
retransmit seconds: Specifies internal for LSA message retransmission at the
interface, in range of 1 to 8192 seconds. By default, it is 5 seconds.
trans-delay seconds: Specifies delay period for LSA message transmission at the
interface, in range of 1 to 8192 seconds. By default, it is 1 second.
Description
Use the sham-link command to configure a sham link.

Use the undo sham-link command to delete a sham link.
In the OSPF PE-CE connection, suppose that in an OSPF area there are two sites
belonging to the same VPN. They are connected to different PE routers and there is an
intra-domain OSPF link (backdoor) between them. Though there may be other routes
connecting the two sites via PE routers, these routes are inter-area routes, and OSPF
will first select those routes through the backdoor link. Sometimes, users desire to
select the routes first through VPN backbone. Hence it is required to establish sham
links between PE routers. In this case, the routes through VPN backbone are of the
highest priority within the OSPF area.
The sham link between VPN PE routers is taken as a link within the OSPF area. Its
source and destination addresses are both loopback interface addresses with 32-bit
mask, which must be bound to a VPN instance and imported into BGP through a
direct-connect route. The optional parameters can be appended in the sham link
command and only those appended in the sham link command can be selected in the
undo command.
2-23
Caution:
z The source and destination addresses of a sham link are both loopback interface
addresses with 32-bit mask, which must be bound to a VPN instance and imported
into BGP through a direct-connect route.
z The source and destination addresses of a sham link cannot be the same.
z The same sham link cannot be configured for different OSPF processes.
z 50 sham links can be configured for an OSPF process at most.
Example
# Configure a sham link, with source address 1.1.1.1 and destination address 2.2.2.2.
[H3C-ospf-100-area-0.0.0.1] sham-link 1.1.1.1 2.2.2.2 cost 100
2.1.27 vpn-instance-capability simple
Syntax
vpn-instance-capability simple
undo vpn-instance-capability
View
OSPF protocol view
Parameter
None
Description
Use the routing-table limit command to configure a router as Multi-VPN-Instance CE.

Use the undo routing-table limit command to remove the configuration.
OSPF multi-VPN-instance is often run at a PE router. Therefore, the CE router, on
which OSPF multi-VPN-instance runs, is called Multi-VPN-Instance CE. Though they
both support multi-VPN-instance, Multi-VPN-Instance CE does not necessarily support
BGP/OSPF interoperability.
When OSPF processes are bound to VPN instances, OSPF will use the PE router as
the default router. This command will remove the default setting and change a router
into Multi-VPN-Instance CE. Then OSPF processes will set up all peers again. DN bits
and route-tag will not be check in routing calculation. To prevent route loss, loop test
function is disabled on PE routes. MGP/OSPF interoperability is also disabled to save
system resources.
2-24
After the display ospf brief command is executed successfully, the system prompts
the information: “Multi-VPN-Instance enable on CE router.”
Caution:
OSPF processes will set up all peers again after this command is executed.
Example
# Configure OSPF procedure 100 as Multi-VPN-Instance CE.

[H3C-ospf-100] vpn-instance-capability simple
# Restore the OSPF procedure 100 as PE.

[H3C-ospf-100] undo vpn-instance-capability
2.1.28 vpn-target
Syntax
vpn-target vpn-target-ext-community [ import-extcommunity |

export-extcommunity | both ]
undo vpn-target vpn-target-ext-community [ import-extcommunity |
export-extcommunity | both ]
View
Parameter
import-extcommunity: Ingress route information from the extended community of

target VPN.
export-extcommunity: Egress route information to the extended community of target
VPN.
both: Imports both ingress and egress route information to the extended community of
target VPN.
vpn-target-ext-community: Adds vpn-target extended community attribute to the
ingress and egress of vpn-instance or the vpn-target extended community list of
ingress and egress.
2-25
Description
Use the vpn-target command to create vpn-target extended community for

vpn-instance.
Use the undo vpn-target command to remove the vpn-target extended community
attributes.
By default, the default value is both.
With the vpn-target command, you can create ingress and egress route target
extended community list for a specified vpn-instance. Execute this command once for
each target community. Import the received route bearing the specific vpn-target
extended community to all vpn-instances, for which an extended community is
configured as ingress vpn-target. Vpn-target specifies a target VPN extended
community. Same as RD, an extended community is either composed of an ASN and
an arbitrary number, or composed of an IP address and an arbitrary number.
Extended community has the following formats:
16-bit ASN: a 32-bit number defined by user, for example, 100:1.
32-bit IP address: a 16-bit number defined by user, for example, 172.1.1.1:1.
Example
# Create vpn-target extended community for the vpn-instance.

[H3C] ip vpn-instance vpn_red
[H3C-vpn-vpn_red] vpn-target 1000:1 both
[H3C-vpn-vpn_red] vpn-target 1000:2 export-extcommunity
[H3C-vpn-vpn_red] vpn-target 173.27.0.130:2 import-extcommunity
2-26
Comware V3 Chapter 3 MPLS L2VPN Configuration Commands
Chapter 3 MPLS L2VPN Configuration Commands
3.1 CCC Configuration Commands

3.1.1 ccc interface transmit-lsp receive-lsp
Syntax
ccc ccc-connection-name interface interface-type interface-number transmit-lsp

transmit-lsp-name receive-lsp receive-lsp-name [ atm-cell [ atm-1to1-vcc |
atm-1to1-vpc ] ]
undo ccc ccc-connection-name
View
System view
Parameter
ccc-connection-name: CCC connection name of 1 to 20 characters in length, which

uniquely identifies a CCC inside a PE.
interface interface-type interface-number: Interface for the remote connection.
transmit-lsp transmit-lsp-name: Name of the transmit-LSP.
receive-lsp receive-lsp-name: Name of the receive-LSP.
atm-cell: N-to-one encapsulation mode for ATM cell transparent transmission.
atm-1to1-vcc: One-to-one VCC encapsulation mode for ATM cell transparent
transmission.
atm-1to1-vpc: One-to-one VPC encapsulation mode for ATM cell transparent
transmission.
Description
Use the ccc interface transmit-lsp receive-lsp command to create a remote CCC
connection.
Use the undo ccc command to delete a remote CCC connection.
You can delete a CCC connection in interface view or system view.
Related command: ccc interface out-interface.
3-1
Example
# Create a remote CCC connection, with the name of clink, transmit-LSP of tlsp, and
receive-LSP of rlsp, adopting one-to-one VCC encapsulation mode for ATM cell
<H3C> system-view
[H3C-Atm1/0/0] pvc 1/32
[H3C-atm-pvc-Atm1/0/0-1/32] quit
[H3C-Atm1/0/0] quit
[H3C] ccc clink interface atm1/0/0 transmit-lsp tlsp receive-lsp rlsp atm-cell
atm-1to1-vcc
3.1.2 ccc interface out-interface
Syntax
ccc ccc-connection-name interface interface-type interface-number out-interface

outinterface-type outinterface-num
undo ccc ccc-connection-name
View
System view
Parameter
ccc-connection-name: CCC connection name of 1 to 20 characters, which is used for

uniquely identifying the CCC inside the PE.
interface-type interface-number: Interface connected to the first CE
outinterface-type outinterface-num: Interface connected to the second CE.
Description
Use the ccc interface out-interface command to create a local CCC connection.
Use the undo ccc command to delete the local CCC connection.
The supported interfaces include serial, asynchronous serial, ATM, Ethernet, VE, and
GE interfaces, as well as ATM, Ethernet, and GE sub-interfaces.
For a serial, asynchronous serial, Ethernet, GE, or VE interface, CCC encapsulation
defaults to link layer encapsulation and the command does not have any parameter in
this case. This also applies to the CCC encapsulation on an Ethernet sub-interface or
GE sub-interface. For an ATM sub-interface, CCC encapsulation defaults to ATM AAL5.
In this case, the command can bring with it a parameter indicating whether the
encapsulation is ATM AAL5 or ATM CELL.
3-2
Example
# Create a local CCC connection, with the name of clink, two CEs connected
respectively to Ethernet0/0/0 and Ethernet2/0/0.
[H3C] ccc clink interface serial0/0/0 out-interface Ethernet 2/0/0
3.1.3 debugging mpls l2vpn
Syntax
debugging mpls l2vpn { all | advertisement | error | event | connections [ interface

interface-type interface-num ] }
undo debugging mpls l2vpn { all | advertisement | error | event | connections
[ interface interface-type interface-num ] }
View
User view
Parameter
all: Enables/Disables all L2VPN debugging.

advertisement: Enables/Disables BGP/LDP advertisement debugging of L2VPN.
error: Enables/Disables L2VPN error debugging.
event: Enables/Disables L2VPN event debugging.
connections: Enables/Disables connection debugging.
interface-type interface-num: Specifies a CE interface for connection debugging.
Description
Use the debugging mpls l2vpn command to view L2VPN link information.
Use the undo debugging mpls l2vpn command to disable the debugging.
Example
<H3C> debugging mpls l2vpn all
3.1.4 display ccc
Syntax
display ccc [ ccc-name | type [ local | remote ] ]
View
Any view
3-3
Parameter
ccc-name: Name of the connection to be displayed.

local: Displays local CCC connection only.
remote: Displays remote CCC connection only.
Description
Use the display ccc command to view CCC connection information.
Example
# Display CCC connection information.

[H3C] display ccc c-link
3.1.5 static-lsp egress l2vpn
Syntax
static-lsp egress lsp-name l2vpn incoming-interface interface-type interface-num

in-label in-label
undo static-lsp egress lsp-name l2vpn
View
MPLS view
Parameter
lsp-name: LSP name

interface-type Interface-num: Interface type and interface number
in-label-value: Inbound label value, in range of 16 to 1024
Description
Use the static-lsp egress l2vpn command to configure a static LSP used in L2VPN for
egress LSR.
Use the undo static-lsp egress l2vpn command to delete an LSP used in L2VPN of
egress LSR.
Two LSPs (one in each direction) should be created in advance before creating a
remote CCC connection.
Related command: static-lsp ingress l2vpn, debugging mpls.
Example
# Add a static LSP citya-city at egress LSR.
3-4
[H3C-mpls] static-lsp egress citya-cityb l2vpn incoming-interface serial8/0/0

in-label 233
3.1.6 static-lsp ingress l2vpn
Syntax
static-lsp ingress lsp-name { l2vpn | destination ip_addr } { nexthop next-hop-addr |

outgoing-interface interface-type interface-num } out-label out-label
undo static-lsp ingress lsp-name l2vpn
View
MPLS view
Parameter
lsp-name: LSP name

next-hop-addr: Next hop address
out-label-value: Outbound label value, in range of 16 to 1024
Description
Use the static-lsp egress l2vpn command to configure a static LSP used in L2VPN for
ingress LSR.
Use the undo static-lsp egress l2vpn command to delete an LSP used in L2VPN of
ingress LSR.
With this command, you can configure a static LSP for ingress LSR, and set preference
and measurement value for it.
Two LSPs (one in each direction) should be created in advance before creating a
remote CCC connection.
Related command: static-lsp egress lvpn, static-lsp transit, debugging mpls.
Example
# Add a static LSP with destination address 202.25.38.1 at ingress LSR.

[H3C-mpls] static-lsp ingress citya-cityb destination 202.25.38.1 24 nexthop
202.55.25.33 out-label 237
3-5
3.1.7 static-lsp transit l2vpn
Syntax
static-lsp transit lsp-name l2vpn incoming-interface interface-type interface-num

in-label in-label { nexthop next-hop-addr | outgoing-interface interface-type
interface-num } out-label out-label
undo static-lsp transit lsp-name l2vpn
View
MPLS view
Parameter
lsp-name: LSP name

next-hop-addr: Next hop address
in-label-value: Inbound label value, in range of 16 to 1024
out-label-value: Outbound label value, in range of 16 to 1024
Description
Use the static-lsp transit command to configure a static LSP used in L2VPN for transit
LSR.
Use the undo static-lsp transit command to delete an LSP used in L2VPN of transit
LSR.
Two LSPs (one in each direction) should be created in advance and configured to the
transit LSR before creating a remote CCC connection.
Related command: static-lsp egress l2vpn and static-lsp ingress l2vpn.
Example
# Add a static LSP used in 12vpn for the Serial0/0/0 of transit LSR, with inbound label
123 and outbound label 253.
[H3C-mpls] static-lsp transit citya-cityb l2vpn incoming-interface
serial0/0/0 in-label 123 nexthop 202.34.114.7 out-label 253
3.2 SVC MPLS L2VPN Configuration Commands

3.2.1 display mpls static-l2vc
Syntax
display mpls static-l2vc [ interface interface-type interface-num ]
3-6
View
Any view
Parameter
interface-type interface -num: Interface type and interface number
Description
Use the display mpls static-l2vc command to view the connection information of
static MPLS L2VPN.
Example
# Display basic information of static connections.

[H3C-Ethernet1/0/1] display mpls static-l2vc
total connections: 1, 0 up, 1 down
ce-intf state destination tr-label rcv-label tnl-type tnl-index
Ethernet1/0/1 down 192.1.1.1 222 111 -- 0
[H3C] display mpls static-l2vc interface ethernet1/0/1

CE-interface: Ethernet1/0/1 is up, VC State: down, Destination: 192.1.1.1,
transmit-vpn-label: 222, receive-vpn-label: 111,
tunnel type: --, tunnel index: 0
3.2.2 mpls static-l2vc
Syntax
mpls static-l2vc destination destination-ip-address transmit-vpn-label

transmit-label-value receive-vpn-label receive-label-value [ atm-cell [ atm-1to1-vcc |
atm-1to1-vpc ] ]
undo mpls static-l2vc
View
Interface view
Parameter
destination destination-ip-address: IP address of the destination router.

transmit-vpn-label transmit-label-value: Label value of the transmitting VPN.
receive-vpn-label receive-label-value: Label value of the receiving VPN.
transmission.
3-7

transmission.
Description
Use the mpls static-l2vc command to create an SVC MPLS L2VPN connection.
Use the undo mpls static-l2vc command to delete the connection.
Example
# Create an SVC MPLS L2VPN connection, with the interface in ATM cell transparent
transmission mode, adopting one-to-one VPC encapsulation mode.
<H3C> system-view
[H3C-Atm1/0/0] pvc 1/32
[H3C-Atm1/0/0] mpls static-l2vc destination 192.1.1.1 transmit-vpn-label 333
receive-vpn-label 111 atm-cell atm-1to1-vpc
3.3 Martini MPLS L2VPN Configuration Commands

3.3.1 display mpls l2vc
Syntax
display mpls l2vc [ interface interface-type interface-num | verbose ]
View
Any view
Parameter
verbose: Displays the detailed information.

interface-type interface-num: Name of the interface connected to CE.
Description
Use the display mpls l2vc command to view the VC information in LDP.
Example
None
3.3.2 mpls l2vc
Syntax
mpls l2vc ip-address vc-id [ atm-cell [ atm-1to1-vcc | atm-1to1-vpc ] ]
3-8
undo mpls l2vc
View
Interface view
Parameter
ip-address: lsr-id address of peer PE.

vc-id: ID of the VC, ranging from 1 to 4294967295.
transmission.
transmission.
Description
Use the mpls l2vc command to create an LDP connection.

Use the undo mpls l2vc command to delete the connection.
Supported interface types: Serial, Asy Serial, POS, ATM, ATM subinterface, Ethernet,
Ethernet subinterface, VE, GE, GE subinterface.
Enable MPLS L2VPN and encapsulate CCC on the interface before using this
command.
Related command: mpls l2vpn and ccc.
Example
# Create a virtual connection with ID 23, with the interface in ATM transparent
transmission mode, adopting ATM CELL N-to-One encapsulation mode.
<H3C> system-view
[H3C-Atm1/0/0] pvc 1/32
[H3C-Atm1/0/0] mpls l2vc 10.0.0.11 23 atm-cell
3.4 Kompella MPLS L2VPN Configuration Commands

3.4.1 ce
Syntax
ce name [ id id range range ] [ default-offset offset ] ]

undo ce name
3-9
View
MPLS L2VPN view
Parameter
name: CE name, unique in the current PE VPN.

id: CE ID, unique in VPN, represents a CE, ranging from 1 to 65535.
offset: Specifies default offset value of the original CE.
range: CE range, that is, the maximum number of CEs that the current CE can connect
to, ranging from 1 to 100. The default value is 10.
Description
Use the ce command to create a CE or modify the CE range.

Use the undo ce command to delete a CE.
After a CE is created, the system will create a CE mode and all the CE connections are
configured in this mode.
To facilitate VPN expansion, CE range can be configured larger than actual demand at
present. It is a waste of identifier however, because the identifier block distributed by
the system is as large as the CE range.
If the CE range is smaller than demand during VPN expansion, for example, the CE
range is 10 while the needed CE number is 20, you can modify the CE range to 20.
Related command: mpls l2vpn encapsulation and connection.
Example
Create a CE for vpna, named citya-mod, with CE ID 1 and default CE range.

[H3C] mpls l2vpn
[H3C] mpls l2vpn vpna encapsulation ppp
[H3C-mpls-l2vpn-vpna] ce citya-mod id 1
[H3C-mpls-l2vpn-ce-vpna-citya-mod]
3.4.2 connection
Syntax
connection [ ce-offset offset ] { interface interface-type interface-num }

undo connection [ ce-offset offset ] { interface interface-type interface-num }
View
MPLS L2VPN CE view
3-10
Parameter
offset: Specifies a remote CE ID of L2VPN connection for establishing local CE

connection
interface-type interface-num: Specifies a CE interface for establishing remote CE
connection.
Description
Use the connection command to create a CE connection.

Use the undo connection command to delete a CE connection.
Configure RD for MPLS L2VPN first before establishing a CE connection.
Related command: mpls l2vpn encapsulation and ccc.
Example
# Establish a CE connection.
[H3C] mpls l2vpn vpna
[H3C-l2vpn-vpna] ce ce-a id 1 range 4
[H3C-l2vpn-vpna-ce-ce-a] connection s0/0/0 ce-offset 2
3.4.3 display bgp l2vpn
Syntax
display bgp l2vpn { all | peer | route-distinguisher }
View
Any view
Parameter
all: All L2VPN information in the current address family.

peer: Information of the specified BGP peer.
route-distinguisher: Information of the specified VPN RD.
Description
Use the display bgp l2vpn all command to view system operating information and all
L2VPN information.
Example
# Display all L2VPN information.

[H3C] display bgp l2vpn all
3-11
BGP local router ID is 172.16.1.5 , Origin codes: i - IGP, e - EGP, ? -

incomplete
bgp.l2vpn: 3 destinations
CE ID Label Offset Label Base nexthop pref as-path
Route Distinguisher: 100:1

2 1 800000 1.1.1.1
100 I 200 600
3 1 500000 1.1.1.1
100 I 200 600
Route Distinguisher: 100:2
1 1 700000 1.1.1.1
100 I 200 600
3.4.4 display mpls l2vpn forwarding-info
Syntax
display mpls l2vpn forwarding-info [ vc-label ] interface interface-type

interface-num
View
Any view
Parameter
vclabel: VC label
interface-type interface-num: Interface type and interface number
Description
Use the display mpls l2vpn forwarding-info command to view the L2VPN
information of a specific interface.
Example
# Display the L2VPN information of a specific interface.

[H3C] display mpls l2vpn forwarding-info interface serial1/0/0
VCLABEL TUNNELTYPE ENTRYTYPE OUTINTERFACE OUTSLOT TOKEN CTRLWORD
102402 LSP SEND Serial1 0 0 FALSE
Record(s) Found.
3.4.5 l2vpn-family
Syntax
l2vpn-family
3-12
undo l2vpn-family
View
BGP view
Parameter
None
Description
Use the l2vpn-family command to create or enter an L2VPN address family view.
Use the undo l2vpn-family command to delete an L2VPN address family view.
By default, it is BGP unicast view.
Execute the undo l2vpn-family command to exit multicast extended address family
view. Delete the entire configuration in this address family and return to BGP unicast
view.
Example
# Create an L2VPN address family view.

[H3C] bgp 100
[H3C-bgp] l2vpn-family
[H3C-bgp-af-l2vpn]
3.4.6 mpls l2vpn
Syntax
mpls l2vpn
undo mpls l2vpn
View
System view
Parameter
None
Description
Use the mpls l2vpn command to enable L2VPN.

Use the undo mpls l2vpn command to disable L2VPN.
Enable MPLS before using this command.
Related command: mpls and mpls lsr-id.
3-13
Example
# Enter MPLS view, configure LSR ID, and enable MPLS.

[H3C] undo mpls
[H3C-mpls] mpls lsr-id 10.0.0.1
[H3C] mpls
# Enable L2VPN.
[H3C] mpls l2vpn
3.4.7 mpls l2vpn encapsulation
Syntax
mpls l2vpn vpn-name encapsulation { atm-aal5 | ethernet | fr | hdlc | ppp | vlan |

atm-cell [ atm-1to1-vcc | atm-1to1-vpc ] }
undo mpls l2vpn vpn-name
View
System view
Parameter
vpn-name: Unique VPN name in PE with 1 to 20 bytes.

encapsulation: MPLS L2VPN encapsulation type.
ethernet: Ethernet encapsulation mode.
vlan: VLAN encapsulation mode.
fr: FR encapsulation mode.
hdlc: HDLC encapsulation mode.
ppp: PPP encapsulation mode.
atm-aal5: ATM frame mode encapsulation mode.
atm-cell: N-to-One encapsulation mode for ATM cell transparent transmission.
transmission.
transmission.
Description
Use the mpls l2vpn encapsulation command to create Kompella MPLS L2VPN,
specify encapsulation type, and enter MPLS L2VPN view.
Use the undo mpls l2vpn encapsulation command to remove the encapsulation.
3-14
Create Kompella MPLS L2VPN after MPLS L2VPN is enabled. All the parameters of
L2VPN are configured in L2VPN view.
Related command: ce, mtu.
Example
# Create a Kompella MPLS L2VPN, named “h3c”, with encapsulation type atm-cell
atm-1to1-vcc.
<H3C> system-view
[H3C] mpls l2vpn h3c encapsulation atm-cell atm-1to1-vcc
3.4.8 mtu
Syntax
mtu mtu
View
MPLS L2VPN view
Parameter
mtu: Layer2 MTU value of VPN. MTU defaults to 1500.
Description
Use the mtu command to configure MTU of Kompella MPLS L2VPN.

When configuring VPN layer2 mtu, make sure that the mtu values of different PEs in the
same VPN are the same in the whole SP network. Otherwise, VPN will not work
normally.
Related command: mpls l2vpn encapsulation.
Example
Configure the mtu of VPN “h3c” as 1000.

[H3C] mpls l2vpn vpna encapsulation ppp
[H3C-mpls-l2vpn-vpna] mtu 1000
3.4.9 peer enable
Syntax
peer { group-name | peer-address } enable

undo peer { group-name | peer-address } enable
View
L2VPN address family view
3-15
Parameter
group-name: Peer group name, refers to the whole peer group.

peer-address: IP address of the peer, refers to the specific peer.
Description
Use the peer enable command to activate the specified peer (group) in L2VPN
address family view.
Use the undo peer enable command to deactivate the specified peer (group) in
L2VPN address family view.
By default, unicast peer (group) of IPv4 address family is activated, while other peer
(group) is deactivated.
Example
# Activate the peer (group) 192 in the L2VPN address family view.
[H3C-bgp] l2vpn-family
[H3C-bgp-af-l2vpn] peer 1.1.1.1 enable
3-16
Security
Command Manual – Security
Table of Contents
Chapter 1 AAA and RADIUS/HWTACACS Protocol Configuration Commands...................... 1-1

1.1 AAA Configuration Commands.......................................................................................... 1-1
1.1.1 access-limit.............................................................................................................. 1-1
1.1.2 accounting ............................................................................................................... 1-1
1.1.3 accounting optional ................................................................................................. 1-2
1.1.4 authentication .......................................................................................................... 1-3
1.1.5 authorization............................................................................................................ 1-4
1.1.6 display connection................................................................................................... 1-5
1.1.7 display domain ........................................................................................................ 1-6
1.1.8 display local-user..................................................................................................... 1-8
1.1.9 domain..................................................................................................................... 1-9
1.1.10 ip pool.................................................................................................................. 1-11
1.1.11 level ..................................................................................................................... 1-12
1.1.12 local-user............................................................................................................. 1-13
1.1.13 local-user password-display-mode...................................................................... 1-13
1.1.14 password ............................................................................................................. 1-14
1.1.15 scheme................................................................................................................ 1-15
1.1.16 service-type ......................................................................................................... 1-16
1.1.17 service-type ftp .................................................................................................... 1-17
1.1.18 service-type ppp .................................................................................................. 1-18
1.1.19 state..................................................................................................................... 1-18
1.2 RADIUS Protocol Configuration Commands ................................................................... 1-19
1.2.1 authentication ........................................................................................................ 1-19
1.2.2 accounting ............................................................................................................. 1-20
1.2.3 accounting-on........................................................................................................ 1-21
1.2.4 data-flow-format .................................................................................................... 1-23
1.2.5 debugging radius................................................................................................... 1-24
1.2.6 debugging local-server.......................................................................................... 1-24
1.2.7 display local-server statistics................................................................................. 1-25
1.2.8 display radius ........................................................................................................ 1-26
1.2.9 display radius statistics ......................................................................................... 1-27
1.2.10 display stop-accounting-buffer ............................................................................ 1-31
1.2.11 key....................................................................................................................... 1-32
1.2.12 local-server.......................................................................................................... 1-33
1.2.13 nas-ip................................................................................................................... 1-34
1.2.14 primary accounting.............................................................................................. 1-35
1.2.15 primary authentication......................................................................................... 1-36
1.2.16 radius scheme ..................................................................................................... 1-37
i
1.2.17 radius nas-ip........................................................................................................ 1-38

1.2.18 radius trap ........................................................................................................... 1-39
1.2.19 reset radius statistics........................................................................................... 1-39
1.2.20 reset stop-accounting-buffer ............................................................................... 1-40
1.2.21 retry ..................................................................................................................... 1-41
1.2.22 retry realtime-accounting..................................................................................... 1-42
1.2.23 retry stop-accounting........................................................................................... 1-43
1.2.24 secondary accounting ......................................................................................... 1-44
1.2.25 secondary authentication .................................................................................... 1-44
1.2.26 server-type .......................................................................................................... 1-45
1.2.27 state..................................................................................................................... 1-46
1.2.28 stop-accounting-buffer enable............................................................................. 1-47
1.2.29 timer quiet............................................................................................................ 1-47
1.2.30 timer realtime-accounting.................................................................................... 1-48
1.2.31 timer response-timeout ....................................................................................... 1-49
1.2.32 user-name-format................................................................................................ 1-50
1.3 HWTACACS Configuration Commands .......................................................................... 1-51
1.3.1 authentication ........................................................................................................ 1-51
1.3.2 authorization.......................................................................................................... 1-52
1.3.3 accounting ............................................................................................................. 1-53
1.3.4 data-flow-format .................................................................................................... 1-54
1.3.5 debugging hwtacacs ............................................................................................. 1-55
1.3.6 display hwtacacs ................................................................................................... 1-56
1.3.7 display stop-accounting-buffer .............................................................................. 1-58
1.3.8 hwtacacs change-password self ........................................................................... 1-59
1.3.9 hwtacacs nas-ip..................................................................................................... 1-60
1.3.10 hwtacacs scheme................................................................................................ 1-60
1.3.11 key....................................................................................................................... 1-61
1.3.12 nas-ip................................................................................................................... 1-62
1.3.13 primary accounting.............................................................................................. 1-63
1.3.14 primary authentication......................................................................................... 1-64
1.3.15 primary authorization........................................................................................... 1-65
1.3.16 reset hwtacacs statistics ..................................................................................... 1-66
1.3.17 reset stop-accounting-buffer ............................................................................... 1-66
1.3.18 retry stop-accounting........................................................................................... 1-67
1.3.19 secondary accounting ......................................................................................... 1-68
1.3.20 secondary authentication .................................................................................... 1-69
1.3.21 secondary authorization ...................................................................................... 1-69
1.3.22 timer quiet............................................................................................................ 1-70
1.3.23 timer realtime-accounting.................................................................................... 1-71
1.3.24 timer response-timeout ....................................................................................... 1-72
1.3.25 user-name-format................................................................................................ 1-73
ii
Chapter 2 Portal Configuration Commands ............................................................................... 2-1

2.1 Portal Configuration Commands........................................................................................ 2-1
2.1.1 debugging portal...................................................................................................... 2-1
2.1.2 display portal ........................................................................................................... 2-4
2.1.3 portal ....................................................................................................................... 2-8
2.1.4 portal auth-network ................................................................................................. 2-9
2.1.5 portal free-ip ............................................................................................................ 2-9
2.1.6 portal free-user ...................................................................................................... 2-10
2.1.7 portal method ........................................................................................................ 2-11
2.1.8 portal server .......................................................................................................... 2-12
2.1.9 reset portal ............................................................................................................ 2-13
2.1.10 portal fast-authentication..................................................................................... 2-14
2.2 EAD Configuration Commands........................................................................................ 2-14
2.2.1 display portal update-resource.............................................................................. 2-14
2.2.2 portal service-type ................................................................................................. 2-15
2.2.3 portal upload-ip...................................................................................................... 2-16
2.2.4 portal update-resource .......................................................................................... 2-16
2.2.5 portal update-resource-id ...................................................................................... 2-17
2.2.6 portal all-resource-id ............................................................................................. 2-18
2.2.7 portal resource ...................................................................................................... 2-19
2.2.8 security-policy-server ............................................................................................ 2-19
Chapter 3 Access Control List Configuration Commands........................................................ 3-1

3.1 ACL Configuration Commands .......................................................................................... 3-1
3.1.1 acl............................................................................................................................ 3-1
3.1.2 acl-reflect timeout.................................................................................................... 3-2
3.1.3 display acl................................................................................................................ 3-2
3.1.4 nesting..................................................................................................................... 3-3
3.1.5 reset acl counter...................................................................................................... 3-3
3.1.6 rule .......................................................................................................................... 3-4
3.2 Time-range Configuration Commands .............................................................................. 3-9
3.2.1 display time-range ................................................................................................... 3-9
3.2.2 time-range ............................................................................................................. 3-10
Chapter 4 Firewall Configuration Commands ............................................................................ 4-1

4.1 Packet Filtering Firewall Configuration Commands........................................................... 4-1
4.1.1 debugging firewall ................................................................................................... 4-1
4.1.2 display firewall-statistics.......................................................................................... 4-2
4.1.3 firewall default ......................................................................................................... 4-2
4.1.4 firewall enable ......................................................................................................... 4-3
4.1.5 firewall fragments-inspect ....................................................................................... 4-3
4.1.6 firewall fragments-inspect { high | low }................................................................... 4-4
4.1.7 firewall packet-filter ................................................................................................. 4-5
4.1.8 reset firewall-statistics ............................................................................................. 4-7
iii
4.2 ASPF Configuration Commands........................................................................................ 4-7

4.2.1 aging-time................................................................................................................ 4-7
4.2.2 aspf-policy ............................................................................................................... 4-8
4.2.3 debugging aspf........................................................................................................ 4-8
4.2.4 detect....................................................................................................................... 4-9
4.2.5 display aspf all....................................................................................................... 4-11
4.2.6 display aspf interface ............................................................................................ 4-12
4.2.7 display aspf policy ................................................................................................. 4-13
4.2.8 display aspf session .............................................................................................. 4-13
4.2.9 display port-mapping............................................................................................. 4-15
4.2.10 firewall aspf ......................................................................................................... 4-15
4.2.11 log enable............................................................................................................ 4-16
4.2.12 port-mapping ....................................................................................................... 4-17
Chapter 5 WEB Filtering Configuration Commands.................................................................. 5-1

5.1 WEB Filtering Configuration Commands........................................................................... 5-1
5.1.1 debugging web url-filter host ................................................................................... 5-1
5.1.2 debugging web url-filter parameter ......................................................................... 5-1
5.1.3 debugging web java-blocking.................................................................................. 5-2
5.1.4 display web url-filter host......................................................................................... 5-3
5.1.5 display web url-filter parameter ............................................................................... 5-3
5.1.6 display web java-blocking ....................................................................................... 5-4
5.1.7 web url-filter host acl-number.................................................................................. 5-5
5.1.8 web url-filter host add.............................................................................................. 5-6
5.1.9 web url-filter host delete-all ..................................................................................... 5-7
5.1.10 web url-filter host default ....................................................................................... 5-7
5.1.11 web url-filter host delete ........................................................................................ 5-8
5.1.12 web url-filter host enable ....................................................................................... 5-9
5.1.13 web url-filter host ip-address ................................................................................. 5-9
5.1.14 web url-filter host save-file .................................................................................. 5-10
5.1.15 web url-filter host load-file ................................................................................... 5-10
5.1.16 web url-filter parameter add ................................................................................ 5-11
5.1.17 web url-filter parameter add-default .................................................................... 5-11
5.1.18 web url-filter parameter delete-all........................................................................ 5-12
5.1.19 web url-filter parameter delete ............................................................................ 5-12
5.1.20 web url-filter parameter enable ........................................................................... 5-13
5.1.21 web url-filter parameter load-file.......................................................................... 5-14
5.1.22 web url-filter parameter save-file......................................................................... 5-14
5.1.23 web java-blocking enable.................................................................................... 5-15
5.1.24 web java-blocking acl-number............................................................................. 5-15
5.1.25 web java-blocking extension add ........................................................................ 5-16
5.1.26 web java-blocking extension delete .................................................................... 5-16
5.1.27 web java-blocking extension delete-all ............................................................... 5-17
iv
5.1.28 web java-blocking extension add-default ............................................................ 5-17

5.1.29 web java-blocking extension save-file................................................................. 5-18
5.1.30 web java-blocking extension load-file ................................................................. 5-19
5.1.31 web log enable .................................................................................................... 5-19
5.1.32 web log timer ....................................................................................................... 5-20
5.1.33 reset web url-filter host counter........................................................................... 5-20
5.1.34 reset web url-filter parameter counter ................................................................. 5-21
5.1.35 reset web java-blocking counter.......................................................................... 5-21
5.1.36 reset web log-buf................................................................................................. 5-22
Chapter 6 IPSec Configuration Commands................................................................................ 6-1

6.1 IPSec Configuration Commands ....................................................................................... 6-1
6.1.1 ah authentication-algorithm..................................................................................... 6-1
6.1.2 debugging ipsec ...................................................................................................... 6-2
6.1.3 display ipsec policy ................................................................................................. 6-2
6.1.4 display ipsec policy-template .................................................................................. 6-5
6.1.5 display ipsec proposal............................................................................................. 6-6
6.1.6 display ipsec sa ....................................................................................................... 6-8
6.1.7 display ipsec statistics........................................................................................... 6-11
6.1.8 encapsulation-mode.............................................................................................. 6-12
6.1.9 esp authentication-algorithm ................................................................................. 6-13
6.1.10 esp encryption-algorithm..................................................................................... 6-14
6.1.11 ipsec policy(in Interface View)............................................................................. 6-15
6.1.12 ipsec policy (in System View).............................................................................. 6-16
6.1.13 ipsec policy-template........................................................................................... 6-18
6.1.14 ipsec proposal ..................................................................................................... 6-19
6.1.15 ipsec sa global-duration ...................................................................................... 6-20
6.1.16 pfs........................................................................................................................ 6-21
6.1.17 proposal............................................................................................................... 6-22
6.1.18 reset ipsec sa ...................................................................................................... 6-23
6.1.19 reset ipsec statistics ............................................................................................ 6-25
6.1.20 sa authentication-hex .......................................................................................... 6-25
6.1.21 sa duration........................................................................................................... 6-27
6.1.22 sa encryption-hex................................................................................................ 6-28
6.1.23 sa spi ................................................................................................................... 6-29
6.1.24 sa string-key ........................................................................................................ 6-31
6.1.25 security acl .......................................................................................................... 6-32
6.1.26 transform ............................................................................................................. 6-34
6.1.27 tunnel local .......................................................................................................... 6-35
6.1.28 tunnel remote ...................................................................................................... 6-36
6.2 Encryption Card Configuration Commands ..................................................................... 6-37
6.2.1 debugging encrypt-card ........................................................................................ 6-37
6.2.2 display encrypt-card fast-switch ............................................................................ 6-38
v
6.2.3 display encrypt-card sa ......................................................................................... 6-39

6.2.4 display encrypt-card statistics ............................................................................... 6-40
6.2.5 display encrypt-card syslog................................................................................... 6-41
6.2.6 display interface encrypt ....................................................................................... 6-42
6.2.7 encrypt-card backuped.......................................................................................... 6-43
6.2.8 encrypt-card fast-switch ........................................................................................ 6-43
6.2.9 interface encrypt.................................................................................................... 6-44
6.2.10 ipsec card-proposal............................................................................................. 6-45
6.2.11 reset counters interface encrypt.......................................................................... 6-46
6.2.12 reset encrypt-card sa .......................................................................................... 6-46
6.2.13 reset encrypt-card statistics ................................................................................ 6-47
6.2.14 reset encrypt-card syslog .................................................................................... 6-48
6.2.15 snmp-agent trap enable encrypt-card ................................................................. 6-48
6.2.16 use encrypt-card ................................................................................................. 6-49
6.3 IPSec DPD Configuration Commands............................................................................. 6-50
6.3.1 debugging ike dpd................................................................................................. 6-50
6.3.2 display ike dpd....................................................................................................... 6-51
6.3.3 dpd ........................................................................................................................ 6-52
6.3.4 ike dpd................................................................................................................... 6-52
6.3.5 interval-time........................................................................................................... 6-53
6.3.6 time-out ................................................................................................................. 6-53
Chapter 7 IKE Configuration Commands.................................................................................... 7-1

7.1 IKE Configuration Commands ........................................................................................... 7-1
7.1.1 authentication-algorithm.......................................................................................... 7-1
7.1.2 authentication-method............................................................................................. 7-1
7.1.3 debugging ike .......................................................................................................... 7-2
7.1.4 dh ............................................................................................................................ 7-3
7.1.5 display ike peer ....................................................................................................... 7-4
7.1.6 display ike proposal................................................................................................. 7-5
7.1.7 display ike sa........................................................................................................... 7-6
7.1.8 encryption-algorithm................................................................................................ 7-8
7.1.9 exchange-mode....................................................................................................... 7-9
7.1.10 id-type.................................................................................................................. 7-10
7.1.11 ike next-payload check disabled ......................................................................... 7-11
7.1.12 ike local-name ..................................................................................................... 7-11
7.1.13 ike peer (in System View) ................................................................................... 7-12
7.1.14 ike peer (In IPSec policy view or IPSec policy template view)............................ 7-12
7.1.15 ike proposal ......................................................................................................... 7-13
7.1.16 ike sa keepalive-timer interval............................................................................. 7-14
7.1.17 ike sa keepalive-timer timeout............................................................................. 7-15
7.1.18 ike sa nat-keepalive-timer interval....................................................................... 7-16
7.1.19 local ..................................................................................................................... 7-17
vi
7.1.20 local-address ....................................................................................................... 7-17

7.1.21 nat traversal......................................................................................................... 7-18
7.1.22 pre-shared-key .................................................................................................... 7-19
7.1.23 peer ..................................................................................................................... 7-19
7.1.24 remote-address ................................................................................................... 7-20
7.1.25 remote-name ....................................................................................................... 7-20
7.1.26 reset ike sa .......................................................................................................... 7-21
7.1.27 sa duration........................................................................................................... 7-22
Chapter 8 PKI Configuration Commands.................................................................................... 8-1

8.1 PKI Domain Configuration Commands.............................................................................. 8-1
8.1.1 ca identifier .............................................................................................................. 8-1
8.1.2 certificate request entity .......................................................................................... 8-1
8.1.3 certificate request from............................................................................................ 8-2
8.1.4 certificate request mode.......................................................................................... 8-3
8.1.5 certificate request polling ........................................................................................ 8-4
8.1.6 certificate request url............................................................................................... 8-4
8.1.7 crl check disable...................................................................................................... 8-5
8.1.8 crl update-period ..................................................................................................... 8-6
8.1.9 crl url........................................................................................................................ 8-6
8.1.10 ldap-server ............................................................................................................ 8-7
8.1.11 pki domain ............................................................................................................. 8-7
8.1.12 root-certificate fingerprint ...................................................................................... 8-8
8.2 PKI Entity Configuration Commands ................................................................................. 8-9
8.2.1 fqdn ......................................................................................................................... 8-9
8.2.2 common-name ........................................................................................................ 8-9
8.2.3 country................................................................................................................... 8-10
8.2.4 ip............................................................................................................................ 8-10
8.2.5 locality ................................................................................................................... 8-11
8.2.6 organization........................................................................................................... 8-12
8.2.7 organizational-unit................................................................................................. 8-12
8.2.8 state....................................................................................................................... 8-13
8.2.9 pki entity ................................................................................................................ 8-13
8.3 PKI Certificate Operation Commands.............................................................................. 8-14
8.3.1 pki delete-certificate .............................................................................................. 8-14
8.3.2 pki import-certificate .............................................................................................. 8-14
8.3.3 pki request-certificate ............................................................................................ 8-15
8.3.4 pki retrieval-certificate ........................................................................................... 8-16
8.3.5 pki retrieval-crl ....................................................................................................... 8-16
8.3.6 pki validate-certificate............................................................................................ 8-17
8.4 PKI Displaying and Debugging Commands .................................................................... 8-18
8.4.1 debugging pki ........................................................................................................ 8-18
8.4.2 display pki certificate ............................................................................................. 8-22
vii
8.4.3 display pki crl......................................................................................................... 8-23
viii
Command Manual – Security Chapter 1 AAA and RADIUS/HWTACACS Protocol
Chapter 1 AAA and RADIUS/HWTACACS Protocol

1.1 AAA Configuration Commands

1.1.1 access-limit
Syntax
access-limit { disable | enable max-user-number }

undo access-limit
View
ISP domain view
Parameter
disable: No limit to the supplicant number in the current ISP domain.

enable max-user-number: Specifies the maximum supplicant number in the current
ISP domain, ranging from 1 to 1048.
Description
Use the access-limit command to configure a limit to the amount of supplicants in the
current ISP domain.
Use the undo access-limit command to restore the limit to the default setting.
By default, there is no limit to the amount of supplicants in the current ISP domain.
This command limits the amount of supplicants contained in the current ISP domain.
The supplicants may compete for the network resources. So setting a suitable limit to
the amount will guarantee the reliable performance to the existing supplicants.
Example
# Set a limit of 500 supplicants for the ISP domain h3c163.net.

[H3C-isp-h3c163.net] access-limit enable 500
1.1.2 accounting
Syntax
accounting { hwtacacs-scheme hwtacacs-scheme-name | radius-scheme

radius-scheme-name | none }
1-1
undo accounting
View
ISP domain view
Parameter
hwtacacs-scheme radius-scheme-name: Specifies the HWTACACS scheme for

accounting.
radius-scheme hwtacacs-scheme-name: Specifies the RADIUS scheme for
accounting.
none: Specifies not to perform accounting.
Description
Use the accounting command to configure an accounting scheme for the current ISP
domain.
Use the undo accounting command to remove the accounting scheme used by the
ISP domain.
By default, no separate accounting scheme is available.
Note that the RADIUS or HWTACACS accounting scheme you configure by using the
accounting command must exist already.
If you configure the accounting command in ISP domain view, the system uses the
scheme specified in the command for accounting. Otherwise, the system uses the
scheme specified by using the scheme command.
Related command: scheme, radius scheme, hwtacacs scheme.
Example
# Specify ISP domain h3c163.net to use RADIUS scheme radius for accounting.
[H3C-isp-h3c163.net] accounting radius-scheme radius
# Specify ISP domain h3c to use HWTACACS scheme hwtac for accounting.
[H3C-isp-h3c] accounting hwtacacs-scheme hwtac
1.1.3 accounting optional
Syntax
accounting optional
undo accounting optional
View
ISP domain view, RADIUS view
1-2
Parameter
None
Description
Use the accounting optional command to enable optional accounting.

Use the undo accounting optional command to disable it.
By default, optional accounting is disabled.
After the accounting optional command is configured, a user that will be
disconnected otherwise can use the network resources even when there is no available
accounting server or the communication with the current accounting server fails. This
command is normally used for the authentication without accounting.
Example
# Enable optional accounting for users in the domain h3c163.net.

[H3C] domain h3c163.net
[H3C-isp- h3c163.net] accounting optional
1.1.4 authentication
Syntax
authentication { hwtacacs-scheme hwtacacs-scheme-name [ local ] |

radius-scheme radius-scheme-name [ local ] | local | none }
undo authentication
View
ISP domain view
Parameter
hwtacacs-scheme hwtacacs-scheme-name: Specifies the HWTACACS scheme for

authentication.
radius-scheme radius-scheme-name: Specifies the RADIUS scheme for
authentication.
local: Specifies to use the local authentication scheme.
none: Specifies not to perform authentication.
Description
Use the authentication command to configure an authentication scheme for the

current ISP domain.
1-3
Use the undo authentication command to restore the default authentication scheme
of the domain.
By default, no separate authentication scheme is available.
Note that the RADIUS or HWTACACS authentication scheme you configure by using
the authentication command must exist already.
If you configure the authentication radius-scheme radius-scheme-name local or
authentication hwtacacs-scheme hwtacacs-scheme-name local command, the
local authentication scheme is the alternate scheme for use when the RADIUS server
or TACACS server is not responding properly. That is, the local authentication scheme
is used only when the RADIUS server or TACACS server is not available.
If you want the system to use the local scheme as the first scheme, the local
authentication scheme is the only scheme for authentication, and you cannot configure
any RADIUS or HWTACACS scheme at the same time. That is, you can only specify
the local keyword in the authentication command. The same is true for the none
keyword.
If you configure the authentication command in ISP domain view, the system uses the
scheme specified in the command for authentication. Otherwise, the system uses the
Example
# Specify ISP domain h3c163.net to use RADIUS scheme radius for authentication.
[H3C-isp-h3c163.net] authentication radius-scheme radius
# Specify ISP domain h3c to use RADIUS scheme rd for authentication and use the
local authentication scheme as the alternate one.
[H3C-isp-h3c] authentication radius-scheme rd local
# Specify ISP domain h3c to use HWTACACS scheme hwtac for authentication and
use the local authentication scheme as the alternate one.
[H3C-isp-h3c] authentication hwtacacs-scheme hwtac local
1.1.5 authorization
Syntax
authorization { hwtacacs-scheme hwtacacs-scheme-name | none }

undo authorization
View
ISP domain view
1-4
Parameter
hwtacacs-scheme hwtacacs-scheme-name: Specifies the HWTACACS scheme for

authorization.
none: Specifies not to perform authorization, that is, the system provides services
without authorization.
Description
Use the authorization command to configure an authorization scheme for the current
ISP domain.
Use the undo authorization command to restore the default authorization scheme of
the domain.
By default, no separate authorization scheme is available.
Note that the HWTACACS authorization scheme specified in this command must have
existed.
If you configure the authorization command in ISP domain view, the system uses the
scheme specified in the command for authorization. Otherwise, the system uses the
Example
# Specify ISP domain h3c to use HWTACACS scheme hwtac for authorization.
[H3C-isp-h3c] authorization hwtacacs-scheme hwtac
1.1.6 display connection
Syntax
display connection [ domain isp-name | hwtacacs-scheme hwtacacs-scheme-name

| ip ip-address | mac mac-address | radius-scheme radius-scheme-name | ucibindex
ucib-index | user-name user-name ]
View
Any view
Parameter
domain isp-name: Displays all the user connections belonging to the ISP domain
specified by isp-name, a character string not exceeding 24 characters. The specified
ISP domain must be an existing one.
hwtacacs-scheme hwtacacs-scheme-name: HWTACACS scheme name.
ip ip-address: Displays all the user connections related to the specified IP address.
1-5
mac mac-address: Displays a user connection by specifying its hexadecimal MAC

address in the format of x-x-x.
radius-scheme radius-scheme-name: Displays all the user connections connected to
the RADIUS server specified by radius-scheme-name, a character string not exceeding
32 characters.
ucibindex ucib-index: Displays information on a user connection by specifying its
connection index number, that is, ucib-index ranging from 0 to 1047.
user-name user-name: Displays information on a user connection by specifying its
user ID, or the user name excluding the domain name. This user name comprises up to
55 characters, excluding forward slashes (/), colons (:), asterisks (*), question marks
(?), less-than signs (<), and greater-than signs (>).
Description
Use the display connection command to view the relevant information on the
specified user connection or all the connections. The output can help you troubleshoot
user connections.
By default, information about all user connections is displayed.
Example
# Display information on the connections of the user system.

<H3C> display connection domain system
Index=0 ,Username=hfx@system
IP=188.188.188.3
Total 1 connections matched, 1 listed.
Table 1-1 Description on the fields of the display connection command
Field Description
Index Index number
Username User name
IP IP address of the user
1.1.7 display domain
Syntax
display domain [ isp-name ]
View
Any view
1-6
Parameter
isp-name: Specifies the ISP domain name, with a character string not exceeding 24
characters. The specified ISP domain must be an existing one.
Description
Use the display domain command to view the configuration of a specified ISP domain
or display the summary information of all ISP domains.
By default, the summary of all ISP domains is displayed.
This command is used to output the configuration of a specified ISP domain or display
the summary information of all ISP domains. If an ISP domain is specified, the
configuration information will be displayed exactly the same, concerning the content
and format, as the displayed information of the display domain command. The output
information can help with ISP domain diagnosis and troubleshooting.
Related command: access-limit, domain, scheme, state, display domain.
Example
# Display configuration information for the test domain.

[H3C] display domain test
The contents of Domain test:
State = Active
Current Authentication : RADIUS Scheme = test
Current Authorization: TACACS Scheme = hwt
Current Accounting : RADIUS Scheme = rad
Accounting Optional = Disable
Access-limit = Disable
Domain User Template:
Table 1-2 Description on the fields of the display domain command
Field Description
The contents of Domain test Configuration information of the test domain
State State of the domain user: active or block
Current Authentication Authentication scheme for the domain
Current Authorization Authorization scheme for the domain
Current Accounting Accounting scheme for the domain
Accounting Optional State of optional accounting: enable or disable
1-7
Field Description
State of the restriction on the concurrent
Access-limit connected users accommodated by the domain
user: disable or enable
Domain User Template Domain user template
1.1.8 display local-user
Syntax
display local-user [ domain isp-name | service-type { telnet | ssh | terminal | pad |

ftp | ppp } | state { active | block } | user-name user-name ]
View
Any view
Parameter
domain isp-name: Displays all the local users in the ISP domain specified by isp-name,
a character string not exceeding 24 characters. The specified ISP domain must be an
existing one.
service-type: Displays local users by specifying service type, which can be telnet, ssh,
terminal (terminal users logging on from Console, AUX, or Asyn port), ftp, ppp, or PAD
(X.25 PAD).
state { active | block }: Displays local users by specifying user state, where active
means users allowed to request for network services and block means the opposite.
user-name user-name: Displays a user by specifying its user-name, a character string
not exceeding 80 characters. It must exclude forward slashes (/), colons (:), asterisks
(*), question marks (?), less-than signs (<), and greater-than signs (>). The @ sign can
be present once in a user name. The user name without domain name (the part before
@, namely the user ID) cannot exceed 55 characters.
Description
Use the display local-user command to view the relevant information on the specified
local user or all the local users. The output can help you troubleshoot faults related to
local user.
By default, information on all local users is displayed.
Related command: local-user.
Example
# Display the relevant information of all the local users.
1-8
<H3C> display local-user

The contents of local user admin:
State: Active ServiceType Mask: FTC
Current AccessNum: 0
FTP Directory: flash:
User Privilege: 3
Total 1 local user(s) Matched, 1 listed.
ServiceType Mask Meaning: A--PAD C--Terminal D--DVPN F--FTP L--LanAccess
P--PPP S--SSH T—Telnet
Table 1-3 Description on the fields of the display local-user command
Field Description
State State of the user: active or block
Service type abbreviation:
C: terminal
A: pad
ServiceType Mask P: PPP
F: FTP
S: SSH
T: telnet
Current AccessNum Count of current accesses
User Privilege User’s privilege
FTP Directory Directory authorized to the FTP user
Note:
The IP address of some types of users, such as L2TP users, cannot be displayed.
1.1.9 domain
Syntax
domain [ isp-name | default { disable | enable isp-name } ]

undo domain isp-name
View
System view
1-9
Parameter
isp-name: Specifies an ISP domain name. It comprises up to 24 characters, excluding

forward slashes (/), colons (:), asterisks (*), question marks (?), less-than signs (<), and
greater-than signs (>).
default: Configures the default ISP domain. The system-default ISP domain is named
system.
disable: Disables the configured default ISP domain. Unqualified usernames, which
are not suffixed with a domain name, in this case will be rejected.
enable: Enables the configured default ISP domain. It is to be suffixed to received
unqualified usernames before being sent to AAA servers.
Description
Use the domain command to configure an ISP domain or enter the view of an existing
ISP domain.
Use the undo domain command to cancel a specified ISP domain.
By default, the system uses the domain named system. You are not allowed to delete
this domain, but you can view its settings by executing the display domain command.
An ISP domain is a group of users belonging to the same ISP. Generally, for a
username in the userid@isp-name format, gw20010608@ h3c163.net for example, the
isp-name (” h3c163.net” in the example) following the “@” is the ISP domain name.
When an AAA server controls user access, for an ISP user whose username is in
userid@isp-name format, the system takes the part "userid" as username for
identification and takes the part "isp-name" as domain name.
The purpose of introducing ISP domain settings is to support the application
environment with multiple ISP domains. In this case, an access device may have
supplicants from different ISP domains. Because the attributes of ISP users, such as
username and password structures, service types, may be different, it is necessary to
separate them by setting ISP domains. In ISP domain view, you can configure a
complete set of ISP domain attributes for each ISP domain, including an AAA scheme
(the RADIUS scheme applied).
For a router, each supplicant belongs to an ISP domain. The system supports to
configure up to 16 ISP domains.
When this command is used, if the specified ISP domain does not exist, the system will
create a new ISP domain. All the ISP domains are in the active state when they are
created.
Related command: access-limit, scheme, state, and display domain.
Example
# Create a new ISP domain, h3c163.net, and enters its view.
1-10

New Domain added.
[H3C-isp- h3c163.net]
1.1.10 ip pool
Syntax
ip pool pool-number low-ip-address [ high-ip-address ]

undo ip pool pool-number
View
System view, ISP domain view
Parameter
pool-number: Address pool number, ranging from 0 to 99.

low-ip-address and high-ip-address: The start and end IP addresses of the address
pool. The number of in-between addresses cannot exceed 1024. If end IP address is
not specified, there will be only one IP address in the pool, namely the start IP address.
Description
Use the ip pool command to configure a local address pool for assigning addresses to
PPP users.
Use the undo ip pool command to delete the specified local address pool.
By default, no local IP address pool is configured.
You can configure an IP address pool in system view and use the remote address
command in interface view to assign IP addresses from the pool to PPP users.
You can also configure an IP address pool in ISP domain view for assigning IP
addresses to PPP users in the current ISP domain. This applies to the case where an
interface serves a great amount of PPP users but with inadequate address resources
for allocation. For example, an Ethernet interface running PPPoE can accommodate
4095 users at most. However, only one address pool with up to 1024 addresses can be
configured on its Virtual Template (VT). This is obviously far from what is required. To
address the issue, you can configure address pools for ISP domains and assign
addresses from them to their PPP users.
Related command: remote address.
1-11
Note:
When using the ip pool command to define the global address pool or domain address
pool, you cannot include the network address and broadcast address in the address
pool.
Example
# Configure the local IP address pool 0 with the address range of 129.102.0.1 to
129.102.0.10.
[H3C-isp- h3c163.net] ip pool 0 129.102.0.1 129.102.0.10
1.1.11 level
Syntax
level level
undo level
View
Local user view
Parameter
level: Specifies user priority level, an integer ranging from 0 to 3.
Description
Use the level command to configure user priority level.

Use the undo level command to restore the default user priority level.
By default, user priority level is 0.
Related command: local user.
Note:
If the configured authentication mode is none authentication or password
authentication, the command level that a user can access after login depends on the
priority of user interface. In the case of authentication requiring both username and
password, however, the accessible command level depends on user priority level.
1-12
Example
# Set the priority level of the user to 3.

[H3C-luser-h3c1] level 3
1.1.12 local-user
Syntax
local-user user-name
undo local-user { user-name | all }
View
System view
Parameter
user-name: Specifies a local username with a character string not exceeding 80

characters, excluding forward slashes (/), colons (:), asterisks (*), question marks (?),
less-than signs (<), and greater-than signs (>). The @ sign can be used only once in
one username. The username without domain name (the part before @, namely the
user ID) cannot exceed 55 characters. user-name is case-insensitive, so UserA and
usera are the same.
all: All the users.
Description
Use the local-user command to add a local user and enter the local user view.
Use the undo local-user command to remove the specified local user.
By default, no local user is configured.
Example
# Add a local user named h3c1.

[H3C] local-user h3c1
[H3C-luser- h3c1]
1.1.13 local-user password-display-mode
Syntax
local-user password-display-mode { cipher-force | auto }

undo local-user password-display-mode
1-13
View
System view
Parameter
cipher-force: Forced cipher mode specifies that the passwords of all the accessed
users must be displayed in cipher text.
auto: The auto mode specifies that a user is allowed to use the password command to
set a password display mode.
Description
Use the local-user password-display-mode command to configure the password

display mode of all the local users.
Use the undo local-user password-display-mode command to restore the default
password display mode of all the local users.
If cipher-force applies, the effort of specifying in the password command to display
passwords in simple text is rendered useless.
By default, auto applies when displaying passwords of local users.
Related command: display local-user and password.
Example
# Force all the local users to have passwords displayed in cipher text.
[H3C] local-user password-display-mode cipher-force
1.1.14 password
Syntax
password { simple | cipher } password

undo password
View
Local user view
Parameter
simple: Specifies to display passwords in simple text.

cipher: Specifies to display passwords in cipher text.
password: Defines a password. When input in simple text, it is a string of 1 to 48
characters, for example, 1234567. When input in cipher text, it is a string of 24 or 64
characters, for example, _(TT8F]Y\5SQ=^Q`MAF4<1!!. Cipher-text password, is
available however only when the cipher keyword is specified.
1-14
Description
Use the password command to configure a password for a local user.

Use the undo password command to cancel the password of the local user.
If local-user password-display-mode cipher-force applies, the effort of specifying in
the password command to display passwords in simple text is rendered useless.
Note:
The ciphertext password set by the password cipher command could be 24 or 64
characters long in Comware V3 RT-0011 or later versions, but it is only 24 characters
long in earlier versions. As this may cause password loss when you downgrade
Comware V3 RT-0011 or later versions to an earlier version of Comware V3 RT-0011,
you are recommended to back up your configuration file before doing that.
Example
# Display the password of the user h3c1in simple text, with the password being
20040422.
[H3C-luser- h3c1] password simple 20040422
1.1.15 scheme
Syntax
scheme { radius-scheme radius-scheme-name [ local ] | hwtacacs-scheme

hwtacacs-scheme-name [ local ] | local | none }
undo scheme { radius-scheme | hwtacacs-scheme | none }
View
ISP domain view
Parameter
radius-scheme-name: RADIUS scheme, a character string not exceeding 32

characters
hwtacacs-scheme-name: HWTACACS scheme, a character string not exceeding 32
characters
local: Local authentication
none: No authentication
1-15
Description
Use the scheme command to configure the AAA scheme to be referenced by the
current ISP domain.
Use the undo scheme command to restore the default AAA scheme.
The default AAA scheme in the system is local.
With this command the current ISP domain can reference a RADIUS/HWTACACS
scheme that has been configured.
When the radius-scheme radius-scheme-name local command or the
hwtacacs-scheme hwtacacs-scheme-name local command is configured, the local
scheme applies as a backup scheme if the RADIUS or TACACS server is not available.
If the RADIUS or TACACS server is available, local authentication is not used.
If the local or none scheme applies as the first scheme, no RADIUS or HWTACACS
scheme can be adopted.
Related command: radius scheme and hwtacacs scheme.
Example
# Specify the current ISP domain, h3c1.net, to use the RADIUS scheme h3c.
[H3C-isp- h3c163.net] scheme radius H3C
# Set the authentication scheme referenced by the ISP domain h3c to radius-scheme
rd and use the local scheme as the backup.
[H3C-isp-h3c] scheme radius-scheme rd local
# Set the authentication scheme referenced by the ISP domain h3c to

hwtacacs-scheme hwtac and use the local scheme as the backup.
[H3C-isp-h3c] scheme hwtacacs-scheme hwtac local
1.1.16 service-type
Syntax
service-type { dvpn | telnet | ssh | terminal | pad }

undo service-type { dvpn | telnet | ssh | terminal | pad }
View
Local user view
Parameter
dvpn: Authorizes the user to use the DVPN service.

telnet: Authorizes the user to use the Telnet service.
ssh: Authorizes the user to use the SSH service.
1-16
terminal: Authorizes the user to use the terminal service (login via the Console, AUX or
Asyn port).
pad: Authorizes the user to use the PAD service.
Description
Use the service-type command to configure a service type for a particular user.
Use the undo service-type command to delete one or all service types configured for
the user.
By default, no service is available for the user.
Related command: service-type ppp and service-type ftp.
Example
# Authorize the user to use the Telnet service.

[H3C-luser- h3c1] service-type telnet
1.1.17 service-type ftp
Syntax
service-type ftp [ ftp-directory directory]

undo service-type ftp [ ftp-directory ]
View
Local user view
Parameter
ftp-directory directory: Specifies a directory accessible for the FTP user. It is a string
up to 56 characters.
Description
Use the service-type ftp command to specify a directory accessible for the FTP user.
Use the undo service-type ftp command to disable FTP service.
Use the undo service-type ftp ftp-directory command to restore the default directory
accessible for the FTP user.
By default, no services of any type are authorized to any user and access of
anonymous FTP users is not allowed, but a user that is granted the FTP service is
authorized to access the root directory "flash:/".
Related command: service-type and service-type ppp.
Example
# Authorize the user to use the FTP service.
1-17
[H3C-luser- h3c1] service-type ftp
1.1.18 service-type ppp
Syntax
service-type ppp [ callback-number callback-number | call-number call-number [ :

subcall-number ] ]
undo service-type ppp [ callback-number | call-number ]
View
Local user view
Parameter
callback-number callback-number: Specifies a callback number.

call-number call-number: Specifies a caller number in ISDN user authentication, with a
length up to 64 bytes.
[ : subcall-number ]: Specifies the sub-caller number. If included, the total length of it
plus the caller number cannot exceed 62 bytes.
Description
Use the service-type command to configure the callback attribute and caller number of
the PPP user.
Use the undo service-type command to restore their default settings.
By default, no services of any type are authorized to any users; if the PPP service is
authorized, no callback number is specified by default; and the system does not
authenticate the caller number of ISDN users.
Related command: service-type and service-type ftp.
Example
# Set PPP call back number to 123456.

[H3C-luser-h3c1] service-type ppp callback-number 123456
1.1.19 state
Syntax
state { active | block }
View
ISP domain view, local user view
1-18
Parameter
active: Configured to allow users in the current ISP domain or the current local user to
request for network services.
block: Configured to block users in the current ISP domain or the current local user to
request for network services.
Description
Use the state command to configure the state of the current ISP domain or local user.
By default, both ISP domain (in ISP domain view) and local user (in local user view) are
in the active state upon their creation (in ISP domain view).
Every ISP domain can be active or blocked. If an ISP domain is configured to be active,
the supplicants in it can request for network services; whereas in the block state, its
users are disallowed to request for any network service, which does not affect the users
currently online. This also applies to local users.
Related command: domain.
Example
# Set the state of the current ISP domain " h3c163.net" to block. The supplicants in this
domain cannot request for network services.
[H3C-isp-h3c163.net] state block
# Set the state of the user " h3c1" to block.

[H3C-luser-h3c1] state block
1.2 RADIUS Protocol Configuration Commands

Syntax
authentication { primary | secondary } ip ip-address [ port port-number ] [ key

{ simple | cipher } key-string ]
undo authentication { primary | secondary }
View
RADIUS scheme view
Parameter
ip-address: Server IP address, in the dotted decimal format. It must be a legal unicast
IP address.
port-number: UDP port number, in the range 1 to 65535.
1-19
simple: Specifies to display the shared key in plain text.

cipher: Specifies to display the shared key in cipher text.
key-string: Shared key. In the simple mode, the key-string must be in plain text. In the
cipher mode, the key-string can be in either plain or cipher text. The plain text key is a
character string of 1 to 96 characters, like “h3c918”. By default, the key is “huawei” in
plain text.
Description
Use the authentication command to set the IP address, port number and shared key
for the primary and secondary RADIUS authentication servers.
Use the undo authentication command to restore the default settings.
By default, for the RADIUS scheme named “system” created by the system, the IP
address and UDP port number of the primary authentication server are 127.0.0.1 and
1645 respectively, and the IP address and UDP port number of the secondary
authentication server are 0.0.0.0 and 1812 respectively. For a newly created RADIUS
scheme, the IP addresses and UDP port numbers of both the primary and secondary
authentication servers are 0.0.0.0 and 1812 respectively. The default shared key of
both the primary and secondary authentication servers of a RADIUS scheme is
“huawei".
Example
# Set the IP address of the primary authentication server of the RADIUS scheme
named “h3c” to 10.110.1.2, set its UDP port number to 1812, and set its shared key to
“sharekey”.
[h3c-radius-h3c] authentication primary ip 10.110.1.2 port 1812 key sharekey
1.2.2 accounting
Syntax
accounting { primary | secondary } ip ip-address [ port port-number ] [ key { simple

| cipher } key-string ]
undo accounting { primary | secondary }
View
RADIUS scheme view
Parameter
ip-address: Server IP address, in dotted decimal format. It must be a legal unicast IP

address.
port-number: UDP port number, in the range 1 to 65535.
1-20

cipher mode, the key-string can be in either plain or cipher text. The plain key is a
character string of 1 to 96 characters, like “h3c918”. By default, the key is “huawei" in
plain text.
Description
Use the accounting command to set the IP address, port number and shared key for
the primary and secondary RADIUS accounting servers.
Use the undo accounting command to restore the default settings.
By default, for the RADIUS scheme named “system” created by the system, the IP
address and UDP port number of the primary accounting server are 127.0.0.1 and 1646
respectively, and the IP address and UDP port number of the secondary accounting
server are 0.0.0.0 and 1813 respectively. For a newly created RADIUS scheme, the IP
addresses and UDP port numbers of both the primary and secondary accounting
servers are 0.0.0.0 and 1813 respectively. The default shared key of both the primary
and secondary accounting servers of a RADIUS scheme is “huawei".
Example
# Set the IP address of the primary accounting server of the RADIUS scheme “h3c" to
10.110.1.2, set its UDP port number to 1813, and set its shared key to “sharekey”.
[h3c-radius-h3c] accounting primary ip 10.110.1.2 port 1813 key sharekey
1.2.3 accounting-on
Syntax
accounting-on enable [ send times ] [ interval interval ]

undo accounting-on { enable | send | interval }
View
RADIUS view
Parameter
times: Maximum times for sending Accounting-On packets, in the range 1 to 256. It
defaults to 15.
interval: Interval for sending Accounting-On packets, in the range 1 to 30 seconds. It
1-21
Description
Use the accounting-on enable command to enable the user re-authentication at

reboot function.
Use the undo accounting-on enable command to disable the user re-authentication
at reboot function.
Use the undo accounting-on send command to restore the default maximum times
for sending Accounting-On packets.
Use the undo accounting-on interval command to restore the default interval for
sending Accounting-On packets.
By default, the user re-authentication at reboot function is not enabled.
The user re-authentication at reboot function can resolve the problem that exclusive
users originally online cannot log into the router again after the router reboots. With this
function enabled, the following occur whenever the router reboots:
z The router generates an Accounting-On packet, which includes information such
as the NAS-ID, NAS-IP (source IP), and session ID of the user.
z The router sends the Accounting-On packet to the CAMS server at a specified
interval.
z When receiving an Accounting-On packet, the CAMS server sends a response
packet to the router, locates and deletes information about the original online
users according to information about NAS-ID, NAS-IP, and session ID in the
Accounting-On packet, and ends the accounting based on the last accounting
update packet.
z When receiving the response packet from the CAMS server, the router stops
z If the router has sent the specified maximum number of Accounting-On packets
without receiving any response packet from the CAMS server, the router stops
Note:
z The primary attributes of an Accounting-On packet (that is, the NAS-ID, NAS-IP,
and session ID) are often generated by the router automatically, where the NAS-IP
attribute is the IP address for the outbound interface of the packet by default. You
can also configure the NAS-IP attribute manually by using the nas-ip command, in
which case you must be sure to specify a correct and valid IP address.
z These commands take effect only when used together with a CAMS server.
Related command: nas-ip.
1-22
Example
# Enable the user re-authentication at reboot function for a RADIUS scheme named
CAMS.
<H3C> system-view
[H3C] radius scheme CAMS
[H3C-radius-CAMS] accounting-on enable
1.2.4 data-flow-format
Syntax
data-flow-format data { byte | giga-byte | kilo-byte | mega-byte } packet

{ giga-packet | kilo- packet | mega-packet | one-packet }
undo data-flow-format
View
RADIUS view
Parameter
data: Sets data unit.

byte: Data flows are sent in bytes.
giga-byte: Data flows are sent in gigabytes.
kilo-byte: Data flows are sent in kilobytes.
mega-byte: Data flows are sent in megabytes.
packet: Sets data packet unit.
giga-packet: Data packets are sent in giga-packets.
kilo-packet: Data packets are sent in kilo-packets.
mega-packet: Data packets are sent in mega-packets.
one-packet: Data packets are sent in the units of one-packet.
Description
Use the data-flow-format command to configure the unit in which data flows are sent
to a RADIUS Server.
Use the undo data-flow-format command to restore the unit to the default setting.
By default, data flows are sent in bytes and data packets in the units of one-packet.
Related command: display radius.
1-23
Example
# Send data flows and packets destined for the RADIUS server "h3c" in kilobytes and
kilo-packets.
[H3C-radius-h3c] data-flow-format data kilo-byte packet kilo-packet
1.2.5 debugging radius
Syntax
debugging radius packet

undo debugging radius packet
View
User view
Parameter
Description
Use the debugging radius command to enable RADIUS debugging.

Use the undo debugging radius command to disable RADIUS debugging.
By default, RADIUS debugging is disabled.
Example
# Enable RADIUS debugging.

<H3C> debugging radius packet
1.2.6 debugging local-server
Syntax
debugging local-server { all | error | event | packet }

undo debugging local-server { all | error | event | packet }
View
User view
Parameter
all: Enables/disables debugging for all items.

error: Enables/disables debugging for errors.
event: Enables/disables debugging for events.
1-24
packet: Enables/disables debugging for packets.
Description
Use the debugging local-server command to enable debugging for the local RADIUS
authentication server.
Use the undo debugging local-server command to disable debugging for the local
RADIUS authentication server.
By default, debugging for the local RADIUS authentication server is not enabled.
Example
# Enable debugging for the local RADIUS authentication server.

[H3C] debugging local-server all
*0.9045238 H3C LS/8/EVENT-MSG:Message received. MessageType = 1
*0.9045238 H3C LS/8/PACKET:Packet Received,Code = 1
*0.9045239 H3C LS/8/PACKET:Packet Send auth pkt ,Code =
1.2.7 display local-server statistics
Syntax
display local-server statistics
View
Any view
Parameter
None
Description
Use the display local-server statistics command to display statistics of the local
RADIUS authentication server.
Related command: local-server.
Example
# Display statistics of the local RADIUS authentication server.

<H3C> display local-server statistics
The localserver packet statistics:
Receive: 82 Send: 61
Discard: 21 Receive Packet Error: 0
Auth Receive: 82 Auth Send: 61
Acct Receive: 0 Acct Send: 0
1-25
1.2.8 display radius
Syntax
display radius [ radius-scheme-name | statistics ]
View
Any view
Parameter
radius-scheme-name: Specifies a RADIUS scheme with a string not exceeding 32

characters and excluding forward slashes (/), colons (:), asterisks (*), question marks
(?), less-than signs (<), and greater-than signs (>). If no scheme is specified, all
RADIUS schemes are displayed.
statistics: Displays statistics.
Description
Use the display radius command to view the configuration information about the
specified or all RADIUS schemes or to view statistics about RADIUS.
By default, the configuration information about all RADIUS schemes is displayed.
Related command: radius scheme.
Example
# Display the configurations of all RADIUS schemes.

<H3C> display radius
------------------------------------------------------------------
SchemeName =system Index=1 Type=standard
Primary Auth IP =127.0.0.1 Port=1645 State=active
Primary Acct IP =127.0.0.1 Port=1646 State=active
Second Auth IP =0.0.0.0 Port=1812 State=block
Second Acct IP =0.0.0.0 Port=1813 State=block
Auth Server Encryption Key= Not configured
Acct Server Encryption Key= Not configured
Accounting method = required
TimeOutValue(in second)=3 RetryTimes=3 RealtimeACCT(in minute)=12
Permitted send realtime PKT failed counts =5
Retry sending times of noresponse acct-stop-PKT =500
Quiet-interval(min) =5
Username format =without-domain
Data flow unit =Byte
Packet unit =1
1-26
------------------------------------------------------------------
Total 1 RADIUS scheme(s). 1 listed
Table 1-4 Information about RADIUS server configuration
Field Description
SchemeName RADIUS scheme name
Index Index number of the RADIUS scheme
Type Type of the RADIUS scheme
IP address/access port number/current state of
Primary Auth IP/ Port/ State
the primary authentication server
Primary Acct IP/ Port/ State
the primary accounting server
Second Auth IP/ Port/ State
the secondary authentication server
Second Acct IP/ Port/ State
the secondary accounting server
Auth Server Encryption Key Shared key of the authentication server
Acct Server Encryption Key Shared key of the accounting server

TimeOutValue (seconds) Duration of the RADIUS server timeout timer
Permitted send realtime PKT The maximum number of realtime-accounting
failed counts packet transmission attempts
Retry sending times of The maximum number of retries allowed when
noresponse acct-stop-PKT sending a buffered stop-accounting packet
The interval for the primary server to resume the
Quiet-interval(min)
active state.
Username format Format of username
Data flow unit Unit of data flows

Packet unit Unit of packets
1.2.9 display radius statistics
Syntax
display radius statistics
View
Any view
1-27
Parameter
None
Description
Use the display radius statistics command to view the statistics information on
RADIUS packets. The displayed packet information can help you troubleshoot RADIUS
faults.
Example
# Display the statistics information on RADIUS packets.

<H3C> display radius statistics
state statistic(total=1048):
DEAD=1047 AuthProc=0 AuthSucc=0
AcctStart=0 RLTSend=0 RLTWait=1
AcctStop=0 OnLine=1 Stop=0
StateErr=0
Received and Sent packets statistic:

Sent PKT total :38 Received PKT total:2
Resend Times Resend total
1 12
2 12
Total 24
RADIUS received packets statistic:
Code= 2,Num=1 ,Err=0
Code=11,Num=0 ,Err=0
Running statistic:
RADIUS received messages statistic:
Normal auth request , Num=13 , Err=0 , Succ=13
EAP auth request , Num=0 , Err=0 , Succ=0
Account request , Num=1 , Err=0 , Succ=1
Account off request , Num=0 , Err=0 , Succ=0
PKT auth timeout , Num=36 , Err=12 , Succ=24
PKT acct_timeout , Num=0 , Err=0 , Succ=0
Realtime Account timer , Num=0 , Err=0 , Succ=0
PKT response , Num=2 , Err=0 , Succ=2
EAP reauth_request , Num=0 , Err=0 , Succ=0
1-28
PORTAL access , Num=0 , Err=0 , Succ=0

Update ack , Num=0 , Err=0 , Succ=0
PORTAL access ack , Num=0 , Err=0 , Succ=0
Session ctrl pkt , Num=0 , Err=0 , Succ=0
RADIUS sent messages statistic:
Auth accept , Num=0
Auth reject , Num=0
EAP auth replying , Num=0
Account success , Num=0
Account failure , Num=0
Cut req , Num=0
RecError_MSG_sum:0 SndMSG_Fail_sum :0
Timer_Err :0 Alloc_Mem_Err :0
State Mismatch :0 Other_Error :0
No-response-acct-stop packet =0
Discarded No-response-acct-stop packet for buffer overflow =0
Table 1-5 Description on the fields of the display radius statistics command
Field Description
state statistic(total=1048)
DEAD=1047 AuthProc=0
AuthSucc=0
State statistics for RADIUS
AcctStart=0 RLTSend=0 RLTWait=1
AcctStop=0 OnLine=1 Stop=0
StateErr=0
Received and Sent packets statistic:
Sent PKT total :38 Received PKT Statistics about transmitted/received
total:2 packets, including:
Resend Times Resend total z Count of transmitted packets
1 12 z Count of received packets
z Count of retransmissions and
2 12 retransmitted packets
Total 24
1-29
Field Description
Statistics about received packets of
RADIUS, including packet type code,
count of received packets and errors of
RADIUS received packets statistic: each type
Code= 2,Num=1 ,Err=0 The following are meanings of code
values:
2: authentication response
3: authentication rejected
Code=11,Num=0 ,Err=0
5: accounting response
11: Access-Challenge (EAP
authentication) packet
Operating statistics for RADIUS,
Running statistic: including count of received/sent
messages and errors
RADIUS received messages statistic:
Normal auth request , Num=13 ,
Err=0 , Succ=13
EAP auth request , Num=0 ,
Err=0 , Succ=0 Statistics about received messages for
Account request , Num=1 , RADIUS, providing count of messages,
Err=0 , Succ=1 errors, and successes of each type.
Account off request , Num=0 , The following are message types:
Err=0 , Succ=0 Normal authentication request
PKT auth timeout , Num=36 , EAP authentication request
Err=12 , Succ=24
Accounting request
PKT acct_timeout , Num=0 ,
Stop-accounting request
Err=0 , Succ=0
Authentication timeout
Realtime Account timer ,
Num=0 , Err=0 , Succ=0 Accounting timeout
PKT response , Num=2 , Realtime accounting
Err=0 , Succ=2 Response
EAP reauth_request , Num=0 , EAP re-authentication request
Err=0 , Succ=0
Portal access authentication request
PORTAL access , Num=0 ,
Update acknowledgement
Err=0 , Succ=0
Portal access acknowledgement
Update ack , Num=0 ,
Err=0 , Succ=0 Session control packet
PORTAL access ack ,
Num=0 , Err=0 , Succ=0
Session ctrl pkt , Num=0 ,
Err=0 , Succ=0
1-30
Field Description
RADIUS sent messages statistic:
Auth accept , Num=0 Statistics about transmitted messages,
Auth reject , Num=0 including count of accepted and rejected
authentication requests, count of EAP
EAP auth replying , Num=0
authentication responses, count of
Account success , Num=0 accounting successes and failures, and
Account failure , Num=0 count of cut requests
Cut req , Num=0
Sum of received message errors
RecError_MSG_sum:0 Sum of message transmission failures
SndMSG_Fail_sum :0 Sum of timer errors
Timer_Err :0 Alloc_Mem_Err :0 Sum of memory allocation errors
State Mismatch :0 Other_Error :0 Sum of sate mismatches
Sum of other errors
Count of stop-accounting packets that
No-response-acct-stop packet =0
received no response
Discarded No-response-acct-stop
Count of stop-accounting packets
packet for buffer overflow =0
discarded for buffer overflow
1.2.10 display stop-accounting-buffer
Syntax
display stop-accounting-buffer { radius-scheme radius-scheme-name | session-id

session-id | time-range start-time stop-time | user-name user-name }
View
Any view
Parameter
radius-scheme radius-scheme-name: Displays information on buffered

stop-accounting requests related to the RADIUS scheme specified by
radius-scheme-name. It is a string not exceeding 32 characters and excluding forward
slashes (/), colons (:), asterisks (*), question marks (?), less-than signs (<), and
greater-than signs (>).
session-id session-id: Displays information on the buffered stop-accounting requests
related to the session ID specified by session-id, a character string not exceeding 50
characters.
time-range start-time stop-time: Displays the buffered stop-accounting requests by the
time range of requests. It is specified by start-time and stop-time in the format of
hh:mm:ss-mm/dd/yyyy or hh:mm:ss-yyyy/mm/dd, that is,
1-31
hours:minutes:seconds-months/days/years or
hours:minutes:seconds-years/months/days.
user-name user-name : Displays information on the buffered stop-accounting requests
by user ID, or user name excluding the domain name. This user name comprises up to
55 characters, excluding forward slashes (/), colons (:), asterisks (*), question marks
(?), less-than signs (<), and greater-than signs (>).
Description
Use the display stop-accounting-buffer command to view information on the

stop-accounting requests buffered in the router by RADIUS scheme, session ID, or
time range. The displayed packet information can help you troubleshoot RADIUS
faults.
If receiving no response after sending a stop-accounting request to a RADIUS server,
the router buffers the request packet and retransmits it. The number of allowed
transmission attempts can be set using the retry stop-accounting command.
Related command: reset stop-accounting-buffer, stop-accounting-buffer enable,
and retry stop-accounting.
Example
# Display information on the buffered stop-accounting requests between 0:0:0 and

23:59:59 on August 31, 2005.
<H3C> display stop-accounting-buffer time-range 0:0:0-08/31/2005
23:59:59-08/31/2005
Total find 0 record
1.2.11 key
Syntax
key { accounting | authentication } string

undo key { accounting | authentication }
View
RADIUS view
Parameter
accounting: Specifies to configure/delete the shared key of RADIUS accounting

packets.
authentication: Specifies to configure/delete the shared key of RADIUS
authentication/authorization packets.
string: Indicates the key, a string of up to 16 characters, in which the following
characters cannot be included: “/, :, *, ?, <, >”. No key is used by default.
1-32
Description
Use the key command to set a shared key for RADIUS authentication/authorization or
accounting packets.
Use the undo key command to restore the default shared key.
The RADIUS client (the router system) and the RADIUS server use MD5 algorithm to
encrypt packets exchanged between them. The two ends verify the packets using a
shared key. Only when the same key is used can they properly receive the packets and
make responses. Therefore, it must be ensured that the shared key set on the router is
consistent with that on the RADIUS server. If the authentication/authorization server
and accounting server are not the same device and the shared keys set on them are
inconsistent, a shared key must be set respectively for authentication/authorization
packets and accounting packets.
Related command: primary accounting, primary authentication, and radius
scheme.
Note:
This command applies only to the AR 18-2X series routers (excluding the AR
18-21A/21B routers).
Example
# Set the shared key of authentication/authorization packets of the RADIUS scheme

“h3c” to “hello”.
[H3C-radius-h3c] key authentication hello
# Set the shared key of accounting packet of the RADIUS scheme “h3c” to “ok”.
[H3C-radius-h3c] key accounting ok
1.2.12 local-server
Syntax
local-server nas-ip ip-address key password

undo local-server nas-ip ip-address
View
System view
1-33
Parameter
nas-ip ip-address: NAS-IP address of the access server, in dotted decimal format. By
default, there is a local server with a NAS-IP of 127.0.0.1.
key password: Shared key of the local server, a string consisting of up to 16 characters.
It defaults to no key.
Description
Use the local-server command to configure a local RADIUS authentication server.

Use the undo local-server command to delete a local RADIUS authentication server.
By default, the system creates a local RADIUS authentication server with the NAS-IP of
127.0.0.1 without default key.
Note that:
z In addition to the traditional RADIUS client function (that is, employing an
authentication/authorization server and a separate accounting server for user
authentication management), the router provides a simple local RADIUS server
function for authentication and authorization, which is called the local RADIUS
authentication server function.
z With the local RADIUS authentication server function, the UDP port for
authentication/authorization service must be 1645, and the UDP port for
accounting service must be 1646.
z The packet encryption key configured using the local-server nas-ip command
must be identical to that configured using the key authentication command in
RADIUS scheme view.
z Up to 16 local RADIUS authentication servers can be configured, including the
one created by the system by default.
Related command: radius scheme, state.
Example
# Configure a local RADIUS authentication server, setting the IP address to 10.110.1.2,

the shared key to aabbcc.
[H3C] local-server nas-ip 10.110.1.2 key aabbcc
1.2.13 nas-ip
Syntax
nas-ip ip-address
undo nas-ip
View
RADIUS view
1-34
Parameter
ip-address: IP address in dotted decimal format.
Description
Use the nas-ip command to set the source IP address of the network access server
(NAS, the router in this manual), so that all packets destined for the RADIUS server
carry the same source IP address.
Use the undo nas-ip command to cancel the configuration.
Specifying a source address for the RADIUS packets to be transmitted can avoid the
situation where the packets sent back by the RADIUS server cannot be received as the
result of a physical interface failure. The address of a loopback interface is usually used
as the source address.
By default, the source IP address of packets is the IP address of the output port.
Example
# Set the source IP address that is carried in the RADIUS packets sent by the NAS (the
router) to 10.1.1.1.
[H3C] radius scheme test1
[H3C-radius-test1] nas-ip 10.1.1.1
1.2.14 primary accounting
Syntax
primary accounting ip-address [ port-number ]

undo primary accounting
View
RADIUS view
Parameter
ip-address: IP address in dotted decimal format. By default, IP address of the primary

accounting server is 0.0.0.0.
port-number: UDP port number of the primary accounting server, which is ranging from
1 to 65535 and defaults to 1813.
Description
Use the primary accounting command to configure IP address and port number of the
primary RADIUS accounting server.
1-35
Use the undo primary accounting command to restore the default IP address and
port number of the primary RADIUS accounting server.
After creating a RADIUS scheme, you are supposed to configure IP address and UDP
port of each RADIUS server (primary/secondary authentication/authorization or
accounting server). The configuration of RADIUS servers is at your discretion except
that there must be at least one authentication/authorization server and one accounting
server. Besides, ensure that the RADIUS service port settings on the router are
consistent with the port settings on the RADIUS servers.
Related command: radius scheme, and state.
Note:
Example
# Set the IP address of the primary accounting server in the RADIUS scheme “h3c” to
10.110.1.2 and use the UDP port 1813 to provide the RADIUS accounting service.
[H3C-radius-h3c] primary accounting 10.110.1.2 1813
1.2.15 primary authentication
Syntax
primary authentication ip-address [ port-number ]

undo primary authentication
View
RADIUS view
Parameter
ip-address: IP address in dotted decimal format. By default, the IP address of the

primary authentication/authorization server is 0.0.0.0.
port-number: UDP port number of the primary authentication/authorization server,
which is ranging from 1 to 65535 and defaults to 1812.
Description
Use the primary authentication command to configure IP address and port number of
the primary RADIUS authentication/authorization server.
1-36
Use the undo primary authentication command to restore the default IP address and
port number of the primary RADIUS authentication/authorization server.
After creating a RADIUS scheme, you are supposed to configure IP address and UDP
port of each RADIUS server (primary/secondary authentication/authorization or
accounting server). The configuration of RADIUS servers is at your discretion except
that there must be at least one authentication/authorization server and one accounting
server. Besides, ensure that the RADIUS service port settings on the router are
consistent with the port settings on the RADIUS servers.
Note:
Example
# Set IP address of the primary authentication/authorization server in the RADIUS

scheme “h3c” to 10.110.1.1 and use the UDP port 1812 to provide the RADIUS
authentication/authorization service.
[H3C-radius-h3c] primary authentication 10.110.1.1 1812
1.2.16 radius scheme
Syntax
radius scheme radius-scheme-name

undo radius scheme radius-scheme-name
View
System view
Parameter
radius-scheme-name: RADIUS scheme name, a character string not exceeding 32

characters and excluding “/”, “:”, “*”, “?”, “<” and “>”.
Description
Use the radius scheme command to configure a RADIUS scheme and enter its view.
Use the undo radius scheme command to delete the specified RADIUS scheme.
By default, the RADIUS scheme named system exists in the system, with all attributes
being the defaults. You cannot delete this scheme.
1-37
RADIUS protocol is configured scheme by scheme. Every RADIUS scheme must at

least specify IP address and UDP port number of RADIUS
authentication/authorization/accounting server and the parameters necessary for the
RADIUS client (a router) to interact with the servers. You must first create a RADIUS
scheme and enter its view before you can perform RADIUS protocol configurations.
A RADIUS scheme can be referenced by several ISP domains at the same time.
The undo radius scheme command can be used to delete any RADIUS scheme
except for the default one. Note that a RADIUS scheme currently being used by any
online users cannot be removed.
Related command: retry realtime-accounting, scheme, timer realtime-accounting,
stop-accounting-buffer enable, retry stop-accounting, server-type, state,
user-name-format, retry, display radius and display radius statistics.
Example
# Create a RADIUS scheme named “h3c” and enter its view.

[H3C] radius scheme h3c
[H3C-radius-h3c]
1.2.17 radius nas-ip
Syntax
radius nas-ip ip-address

undo radius nas-ip
View
System view
Parameter
ip-address: Specifies a source IP address.
Description
Use the radius nas-ip command to specify the source address of the RADIUS packet
sent from NAS.
Use the undo radius nas-ip command to restore the default setting..
By specifying the source address of the RADIUS packet, you can avoid unreachable
packets as returned from the server upon interface failure. The source address is
normally recommended to be a loopback interface address..
By default, the source address is not specified, that is, the address of the interface
sending the packet serves as the source address.
1-38
This command specifies only one source address; therefore, the newly configured
source address may overwrite the original one.
Related command: nas-ip.
Example
# Configure the router to send RADIUS packets from 129.10.10.1.

[H3C] radius nas-ip 129.10.10.1
1.2.18 radius trap
Syntax
radius trap { authentication-server-down | accounting-server-down }

undo radius trap { authentication-server-down | accounting-server-down }
View
System view
Parameter
authentication-server-down: The state of the RADIUS authentication server changes

to down.
accounting-server-down: The state of the RADIUS accounting server changes to
down.
Description
Use the radius trap command to enable the RADIUS server to send traps when it goes
down.
Use the undo radius trap command to disable the RADIUS server to send traps when
it goes down.
By default, the RADIUS server does not send traps when it goes down.
Example
# Enable the RADIUS authentication server to send traps when it goes down.
[H3C] radius trap authentication-server-down
1.2.19 reset radius statistics
Syntax
reset radius statistics
1-39
View
User view
Parameter
None
Description
Use the reset radius statistics command to clear the statistic information related to
the RADIUS protocol.
Example
# Clear the RADIUS protocol statistics.

<H3C> reset radius statistics
1.2.20 reset stop-accounting-buffer
Syntax
reset stop-accounting-buffer { radius-scheme radius-scheme-name | session-id

session-id | time-range start-time stop-time | user-name user-name }
View
System view
Parameter
radius-scheme radius-scheme-name: Clears the buffered stop-accounting requests

related to the RADIUS scheme specified by radius-scheme-name, a character string
not exceeding 32 characters and excluding “/”, “:”, “*”, “?”, “<” and “>”.
session-id session-id: Clears the buffered stop-accounting requests related to the
session ID specified by session-id, a character string not exceeding 50 characters.
time-range start-time stop-time: Clears the buffered stop-accounting requests by the
time range of requests. The time range is specified by start-time and stop-time in the
format of hh:mm:ss-mm/dd/yyyy or hh:mm:ss-yyyy/mm/dd, that is,
hours:minutes:seconds-months/days/years or
hours:minutes:seconds-years/months/days.
user-name user-name : Clears the buffered stop-accounting requests by user ID, or
user name excluding the domain name. This user name comprises up to 55 characters,
excluding forward slashes (/), colons (:), asterisks (*), question marks (?), less-than
signs (<), and greater-than signs (>).
1-40
Description
Use the reset stop-accounting-buffer command to clear the buffered

stop-accounting requests that have no responses.
If receiving no response after sending a stop-accounting request to a RADIUS server,
the router buffers the request packet and retransmits it. The number of allowed
transmission attempts can be set using the retry stop-accounting command.
You can clear the buffered stop-accounting requests by RADIUS scheme, session ID,
username, or time range.
Related command: stop-accounting-buffer enable, retry stop-accounting, and
display stop-accounting-buffer.
Example
# Clear the buffered stop-accounting requests related to the user

“user0001@h3c163.net”.
<H3C> reset stop-accounting-buffer user-name user0001@h3c163.net
# Clear the buffered stop-accounting requests in the time range 0:0:0 to 23:59:59 on
August 31, 2005.
<H3C> reset stop-accounting-buffer time-range 0:0:0-08/31/2005
23:59:59-08/31/2005
1.2.21 retry
Syntax
retry retry-times
undo retry
View
RADIUS view
Parameter
retry-times: The maximum number of request attempts, which is ranging from 1 to 20

and defaults to 3.
Description
Use the retry command to configure the number of RADIUS request attempts.
Use the undo retry command to restore the default.
In the RADIUS protocol, UDP applies to provide unreliable transmission. If the NAS
receives no response from the current RADIUS server when the response timeout
timer expires, it has to retransmit the RADIUS request.
1-41
Suppose the maximum number of retransmission attempts is set to N. If the primary

RADIUS server does not respond after the number of request attempts exceeds (N –
[N/2]), the NAS considers that the current RADIUS server is disconnected and turns to
another RADIUS server.
Appropriately set the retry-times parameter to maintain an acceptable system response
speed.
Example
# With the RADIUS scheme "h3c", a RADIUS request can be sent up to five times.
[H3C-radius-h3c] retry 5
1.2.22 retry realtime-accounting
Syntax
retry realtime-accounting retry-times

undo retry realtime-accounting
View
RADIUS view
Parameter
retry-times: The maximum number of real-time accounting request attempts that have
no responses. It is in the range 1 to 255 and defaults to 5.
Description
Use the retry realtime-accounting command to configure the maximum number of

real-time accounting request attempts allowed to have no responses.
Use the undo retry realtime-accounting command to restore the default.
RADIUS server usually checks whether a user is online using a timeout timer. If the
RADIUS server has not received the real-time accounting packet from NAS, it will
consider that there is line or device failure and stop accounting. Accordingly, it is
necessary to disconnect the user at NAS end and on RADIUS server synchronously
when some unexpected failure occurs. H3C Series Routers support to set maximum
times of real-time accounting request failing to be responded. NAS will disconnect the
user if it has not received real-time accounting response from RADIUS server for some
specified times.
Suppose the response timeout timer of the RADIUS server is T and the real-time
accounting interval of NAS is t. Set T to 3, t to 12, and the maximum number of real-time
request retries to 5. With these values being configured, the NAS generates an
accounting request every 12 minutes, and retries if no response is received within 3
1-42
minutes. If no response is received after five attempts, the NAS assumes that this
accounting fails. Normally, the result of retry-times multiple by T is smaller than t.
Related command: radius scheme and timer realtime-accounting.
Example
# Configure the RADIUS scheme "h3c" to allow up to ten real-time accounting request
attempts.
[H3C-radius-h3c] retry realtime-accounting 10
1.2.23 retry stop-accounting
Syntax
retry stop-accounting retry-times

undo retry stop-accounting
View
RADIUS view
Parameter
retry-times: Specifies the maximal retransmission times after stop-accounting request,.

Description
Use the retry stop-accounting command to configure the maximal retransmission

times after stop-accounting request.
Use the undo retry stop-accounting command to restore the retransmission times to
the default value.
Because the stop-accounting request concerns account balance and will affect the
amount of charge, which is very important for both the user and ISP, NAS shall make its
best effort to send the message to RADIUS accounting server. Accordingly, if the
message from the router to RADIUS accounting server has not been responded, the
router shall save it in the local buffer and retransmit it until the server responds or
discard the messages after transmitting for specified times.
Related command: reset stop-accounting-buffer, radius scheme, display
stop-accounting-buffer.
Example
# Indicate that, when stop-accounting request for the server in the RADIUS scheme
“h3c”, the router system will retransmit the packets for up to 1000 times.
[H3C-radius-h3c] retry stop-accounting 1000
1-43
1.2.24 secondary accounting
Syntax
secondary accounting ip-address [ port-number ]

undo secondary accounting
View
RADIUS view
Parameter
ip-address: IP address, in dotted decimal format. By default, the IP address of

secondary accounting server is at 0.0.0.0.
port-number: Specifies the UDP port number, ranging from 1 to 65535. By default, the
accounting service is provided through UDP 1813.
Description
Use the secondary accounting command to configure the IP address and port
number for the secondary RADIUS accounting server.
Use the undo secondary accounting command to restore the IP address and port
number to the defaults.
For detailed information, refer to the description of the primary accounting command.
Example
# Set the IP address of the secondary accounting server of RADIUS scheme, h3c, to
10.110.1.1 and the UDP port 1813 to provide RADIUS accounting service.
[H3C-radius-h3c] secondary accounting 10.110.1.1 1813
1.2.25 secondary authentication
Syntax
secondary authentication ip-address [ port-number ]

undo secondary authentication
View
RADIUS view
Parameter
ip-address: IP address in dotted decimal format. By default, the IP address of the

secondary authentication/authorization server is 0.0.0.0.
1-44
port-number: UDP port number, ranging from 1 to 65535. By default, the

authentication/authorization service is provided through UDP 1812
Description
Use the secondary authentication command to configure the IP address and port
number of the secondary RADIUS authentication/authorization/accounting server.
Use the undo secondary authentication command to restore the IP address and port
number to the defaults.
For detailed information, refer to the description of the primary authentication
command.
Example
# Set IP address of the secondary authentication/authorization server in the RADIUS

scheme “h3c” to 10.110.1.2 and use the UDP port 1812 to provide the RADIUS
authentication/authorization service.
[H3C-radius-h3c] secondary authentication 10.110.1.2 1812
1.2.26 server-type
Syntax
server-type { extended | standard | portal }
View
RADIUS view
Parameter
extended: Specifies the RADIUS server of extended type (generally CAMS), which
requires the RADIUS client (router system) and RADIUS server to interact according to
the procedures and packet format provisioned by the private RADIUS protocol of
different companies.
standard: Specifies the RADIUS server of Standard type, which requires the RADIUS
client end (router system) and RADIUS server to interact according to the regulation
and packet format of standard RADIUS protocol (RFC 2138/2139 or newer).
portal: Specifies the RADIUS server of portal type.
Description
Use the server-type command to configure the RADIUS server type supported by the
router.
By default, the value is standard.
1-45
Example
# Set RADIUS server type of RADIUS scheme h3c to extended.

[H3C-radius-h3c] server-type extended
1.2.27 state
Syntax
state { primary | secondary } { accounting | authentication } { block | active }
View
RADIUS view
Parameter
primary: Sets the state of the primary RADIUS server.

secondary: Sets the state of the secondary RADIUS server.
accounting: Sets the state of RADIUS accounting server.
authentication: Sets the state of RADIUS authentication/authorization server.
block: Sets state of the RADIUS server to block.
active: Sets state of the RADIUS server to active, namely the normal operation state.
Description
Use the state command to configure the state of a RADIUS server.

By default, all the RADIUS servers in every RADIUS scheme are in the state of active.
When the primary server (accounting or authentication) in a RADIUS scheme becomes
unavailable, the NAS automatically turns to the secondary server. After the primary one
recovers however, the NAS does not resume the communication with it at once; instead,
the NAS continues the communication with the secondary one and turns to the primary
one again only after the secondary one fails. To have the NAS communicate with the
primary server right after its recovery, you can manually set the state of the primary
server to active.
When both the primary and secondary servers are active or blocked, the NAS only
sends packets to the primary server.
Related command: radius scheme, primary authentication, secondary
authentication, primary accounting, secondary accounting.
Example
# Set the state of the secondary authentication server in the RADIUS scheme “h3c” to
active.
1-46
[H3C-radius-h3c] state secondary authentication active
1.2.28 stop-accounting-buffer enable
Syntax
stop-accounting-buffer enable
undo stop-accounting-buffer enable
View
RADIUS view
Parameter
None
Description
Use the stop-accounting-buffer enable command to enable the router to buffer the
stop-accounting requests that have no responses.
Use the undo stop-accounting-buffer enable command to disable the router to buffer
the stop-accounting requests that have no responses.
By default, the router is enabled to buffer the stop-accounting requests that have no
responses.
Since the stop-accounting packet affects the charge to a user, it has importance for
both users and ISPs. Therefore, the NAS makes its best effort to send every
stop-accounting request to RADIUS accounting servers. If receiving no response after
a specified period of time, the NAS buffers and resends the packet until receiving a
response or discards the packet when the number of transmission retries reaches the
configured limit.
Related command: reset stop-accounting-buffer, radius scheme, display
Example
# In the RADIUS scheme “h3c”, enable the router to buffer the stop-accounting
requests that have no responses.
[H3C-radius-h3c] stop-accounting-buffer enable
1.2.29 timer quiet
Syntax
timer quiet minutes

undo timer quiet
1-47
View
RADIUS view
Parameter
minutes: Ranges from 1 to 255. By default, the primary server must wait five minutes
before it can resume the active state.
Description
Use the timer quiet command to set the duration that the primary server must wait
Use the undo timer quiet command to restore the default (five minutes).
Example
# Set the quiet timer for the primary server to ten minutes.
[H3C] radius scheme test1
[H3C-hwtacacs-test1] timer quiet 10
1.2.30 timer realtime-accounting
Syntax
timer realtime-accounting minutes

undo timer realtime-accounting
View
RADIUS view
Parameter
minutes: Real-time accounting interval, which is a multiple of 3 in the range 3 to 60

minutes and defaults to 12.
Description
Use the timer realtime-accounting command to configure a real-time accounting

interval.
Use the undo timer realtime-accounting command to restore the default interval.
The setting of real-time accounting interval is indispensable to real-time accounting.
After an interval value is set, the NAS transmits the accounting information of online
users to the RADIUS accounting server at intervals of this value.
The setting of real-time accounting interval somewhat depends on the performance of
the NAS and the RADIUS server: a shorter interval requires higher device performance.
1-48
You are therefore recommended to adopt a longer interval when there are a large
number of users (more than 1000, inclusive). The following table recommends the ratio
of minutes to the number of users.
Table 1-6 Recommended ratio of minutes to the number of users
Real-time accounting interval

Number of users
(minute)
1 – 99 3
100 – 499 6
500 – 999 12
≥1000 ≥15
Related command: retry realtime-accounting and radius scheme.
Example
# Set the real-time accounting interval in the RADIUS scheme “h3c” to 51 minutes.
[H3C-radius-h3c] timer realtime-accounting 51
1.2.31 timer response-timeout
Syntax
timer response-timeout seconds

undo timer response-timeout
View
RADIUS view
Parameter
seconds: RADIUS server response timeout timer, ranging from 1 to 10 seconds. By

Description
Use the timer response-timeout command to configure the RADIUS server response
timer.
Use the undo timer response-timeout command to restore the default.
If the NAS receives no response from the RADIUS server after sending a RADIUS
request (authentication/authorization or accounting request) for a period, the NAS
resends the request, thus ensuring the user can obtain the RADIUS service. You can
specify this period by setting the RADIUS server response timeout timer, taking into
consideration the network condition and the desired system performance.
1-49
Related command: radius scheme and retry.
Example
# Set the response timeout timer in the RADIUS scheme h3c to 5 seconds.
[H3C-radius-h3c] timer response-timeout 5
1.2.32 user-name-format
Syntax
user-name-format { with-domain | without-domain }
View
RADIUS view
Parameter
with-domain: Includes the ISP domain name in the username sent to the RADIUS
server.
without-domain: Excludes the ISP domain name from the username sent to the
RADIUS server.
Description
Use the user-name-format command to configure the format of the username to be

sent to a RADIUS server.
By default, ISP domain name is included in the username.
The supplicants are generally named in the userid@isp-name format, of which
isp-name is used by the router to decide the ISP domain to which a supplicant belongs.
Some earlier RADIUS servers however, cannot recognize usernames including an ISP
domain name. Before sending a username including a domain name to such a RADIUS
server, the router must remove the domain name. This command is thus provided for
you to decide whether to include a domain name in a username to be sent to a RADIUS
server.
Note:
If a RADIUS scheme defines that the username is sent without the ISP domain name,
do not apply the RADIUS scheme to more than one ISP domains, thus avoiding the
confused situation where the RADIUS server regards two users in different ISP
domains but with the same userid as one.
1-50
Example
# Send the username without the domain name to the RADIUS servers in the RADIUS
scheme "h3c".
[H3C-radius-h3c] user-name-format without-domain
1.3 HWTACACS Configuration Commands

Syntax
authentication { primary | secondary } ip ip-address [ port port-number ] [ key

undo authentication { primary | secondary }
View
HWTACACS view
Parameter

address.
port-number: UDP port number, in the range 1 to 65535. By default, it is 49.
character string of 1 to 96 characters, like “h3c918”.
Description
Use the authentication command to set the IP address, port number and shared key
for the primary and secondary HWTACACS authentication servers.
Use the undo authentication command to delete the configured authentication
servers.
By default, the IP address of TACACS authentication server is 0.0.0.0, without any
shared key.
The primary and secondary authentication servers must not use the same IP address.
Otherwise, the system will prompt unsuccessful configuration.
If you execute this command repeatedly, the new settings will replace the old settings.
You can remove a server only when it is not used by any active TCP connection for
sending authentication packets.
1-51
The HWTACACS client (the router) and HWTACACS server use the MD5 algorithm to
encrypt the exchanged packets between each other. The two ends verify the packets
using a shared key. They can properly receive packets and make responses only when
they use the same key. Therefore, the shared key on the router must be the same with
that on the HWTACACS server.
Example
# Set the IP address of the primary authentication server of the HWTACACS scheme
named “h3c" to 10.110.1.2, set its UDP port number to 49, and set its shared key to
“sharekey”.
[H3C-hwtacacs-h3c] authentication primary ip 10.110.1.2 port 49 key sharekey
1.3.2 authorization
Syntax
authorization { primary | secondary } ip ip-address [ port port-number ] [ key

undo authorization { primary | secondary }
View
HWTACACS view
Parameter

address.
Description
Use the authorization command to set the IP address, port number and shared key for
the primary and secondary HWTACACS authorization servers.
Use the undo authorization command to delete the configured authorization servers.
By default, the IP address of TACACS authorization server is 0.0.0.0., without any key.
The primary and secondary authorization servers must not use the same IP address.
1-52
You can remove a server only when it is not used by any active TCP connection for
sending authorization packets.
encrypt the exchanged packets between each other. The two ends verify the packets
using a shared key. They can properly receive packets and make responses only when
they use the same key. Therefore, the shared key on the router must be the same with
that on the HWTACACS server.
Example
# Set the IP address of the primary and secondary authorization servers of the
HWTACACS scheme named “h3c" to 10.110.1.2, set its UDP port number to 49, and
set its shared key to “sharekey”.
[H3C-hwtacacs-h3c] authorization primary ip 10.110.1.2 port 49 key sharekey
1.3.3 accounting
Syntax
accounting { primary | secondary } ip ip-address [ port port-number ] [ key { simple

| cipher } key-string ]
undo accounting { primary | secondary }
View
HWTACACS view
Parameter

address.
Description
Use the accounting command to set the IP address, port number and shared key for
the primary and secondary HWTACACS accounting servers.
Use the undo accounting command to delete the configured accounting servers.
By default, the IP address of TACACS accounting server is 0.0.0.0, without any key.
1-53
The primary and secondary accounting servers cannot use the same IP address.
You can remove a server that cannot be removed otherwise, only when it is not used by
any active TCP connection for sending accounting packets.
encrypt the exchanged packets between them. The two ends verify the packets using a
shared key. Only when the same key is used can they properly receive the packets and
make responses. Thus, the shared key on the router must be the same with that on the
HWTACACS server.
Example
# Configure the IP address to 10.110.1.2, UDP port number to 49, and shared key to
sharekey for the primary and secondary accounting servers of the HWTACACS
scheme “h3c".
[H3C-hwtacacs-h3c] accounting primary ip 10.110.1.2 port 49 key sharekey
1.3.4 data-flow-format
Syntax
data-flow-format data [ byte | giga-byte | kilo-byte | mega-byte ]

data-flow-format packet [ giga-packet | kilo-packet | mega-packet | one-packet ]
undo data-flow-format [ data | packet ]
View
HWTACACS view
Parameter
data: Sets data unit.

byte: Sets 'byte' as the unit of data flow.
giga-byte: Sets 'giga-byte' as the unit of data flow.
kilo-byte: Sets 'kilo-byte' as the unit of data flow.
mega-byte: Sets 'mega-byte' as the unit of data flow.
packet: Sets data packet unit.
giga-packet: Sets 'giga-packet' as the unit of packet flow.
kilo-packet: Sets 'kilo-packet' as the unit of packet flow.
mega-packet: Sets 'mega-packet' as the unit of packet flow.
one-packet: Sets 'one-packet' as the unit of packet flow.
1-54
Description
Use the data-flow-format command to configure the unit of data flows sent to the
TACACS server.
Use the undo data-flow-format command to restore the default.
By default, the data unit is byte and the data packet unit is one-packet.
Related command: display hwtacacs.
Example
# Set the unit of data flow destined for the HWTACACS server "h3c" to be kilo-byte and
the data packet unit be kilo-packet.
[H3C-hwtacacs-h3c] data-flow-format data kilo-byte packet kilo-packet
1.3.5 debugging hwtacacs
Syntax
debugging hwtacacs { all | error | event | message | receive-packet | send-packet }

undo debugging hwtacacs { all | error | event | message | receive-packet |
send-packet }
View
User view
Parameter
all: Specifies all HWTACACS debugging.

error: Specifies error debugging.
event: Specifies event debugging.
message: Specifies message debugging.
receive-packet: Specifies incoming packet debugging.
send-packet: Specifies outgoing packet debugging.
Description
Use the debugging hwtacacs command to enable HWTACACS debugging.

Use the undo debugging hwtacacs command to disable HWTACACS debugging.
By default, HWTACACS debugging is disabled.
Example
# Enable the event debugging of HWTACACS.

<H3C> debugging hwtacacs event
1-55
1.3.6 display hwtacacs
Syntax
display hwtacacs [ hwtacacs-scheme-name [ statistics ] ]
View
Any view
Parameter
hwtacacs-scheme-name: HWTACACS scheme name, a string of 1 to 32

case-insensitive characters, excluding forward slashes (/), colons (:), asterisks (*),
question marks (?), less-than signs (<), and greater-than signs (>). If no HWTACACS
scheme is specified, the system displays the configuration of all HWTACACS schemes.
statistics: Displays complete statistics about the HWTACACS server.
Description
Use the display hwtacacs command to view configuration information of specified or

all HWTACACS schemes.
By default, configuration information of all HWTACACS schemes is displayed.
Related command: hwtacacs scheme.
Example
# View configuration information of HWTACACS scheme gy.

<H3C> display hwtacacs gy
--------------------------------------------------------------------
HWTACACS-server template name : gy
Primary-authentication-server : 172.31.1.11:49
Primary-authorization-server : 172.31.1.11:49
Primary-accounting-server : 172.31.1.11:49
Secondary-authentication-server : 0.0.0.0:0
Secondary-authorization-server : 0.0.0.0:0
Secondary-accounting-server : 0.0.0.0:0
Current-authentication-server : 172.31.1.11:49
Current-authorization-server : 172.31.1.11:49
Current-accounting-server : 172.31.1.11:49
Source-IP-address : 0.0.0.0
key authentication : 790131
key authorization : 790131
key accounting : 790131
Quiet-interval(min) : 5
Response-timeout-Interval(sec) : 5
1-56
Domain-included : No
Traffic-unit : B
Packet traffic-unit : one-packet
Table 1-7 Description on the fields of the display radius statistics command
Field Description
HWTACACS-server template name HWTACACS scheme
IP address and port number of the
Primary-authentication-server
primary authentication server
Primary-authorization-server
primary authorization server
Primary-accounting-server
primary accounting server
Secondary-authentication-server
secondary authentication server
Secondary-authorization-server
secondary authorization server
Secondary-accounting-server
secondary accounting server
Current-authentication-server
current authentication server
Current-authorization-server
current authorization server
Current-accounting-server
current accounting server
Source IP address in transmitted
Source-IP-address
HWTACACS packets
Shared key of the HWTACACS
key authentication
authentication server
key authorization
authorization server
key accounting
accounting server
Time that the primary server waits
Quiet-interval(min)
before resuming the active state
Maximum time waiting for response from
Response-timeout-Interval(sec)
the TACACS server
Domain name is included in the
Domain-included
username sent to the TACACAS server
Traffic-unit Traffic unit: byte (B), GB, KB, or MB
1-57
Field Description
Packet unit: giga-packet, kilo-packet,
Packet traffic-unit
mega-packet, one-packet
1.3.7 display stop-accounting-buffer
Syntax
display stop-accounting-buffer hwtacacs-scheme hwtacacs-scheme-name
View
Any view
Parameter
hwtacacs-scheme hwtacacs-scheme-name: Displays information on buffered

stop-accounting requests related to the HWTACACS scheme specified by
hwtacacs-scheme-name, a character string not exceeding 32 characters and excluding
“/”, “:”, “*”, “?”, “<” and “>”.
Description
Use the display stop-accounting-buffer command to view information on the

stop-accounting requests buffered in the router.
The router buffers and retransmits each stop-accounting request packet for which no
response is received from the RADIUS server. You may set the total number of
transmissions by using the retry stop-accounting command. Related command:
reset stop-accounting-buffer, stop-accounting-buffer enable, and retry
stop-accounting.
Example
# Display information on the buffered stop-accounting requests related to the

HWTACACS scheme “h3c".
<H3C> display stop-accounting-buffer hwtacacs-scheme h3c
-------------------------------------------------------------
NO. SendTime IP Address Template
1 10 172.31.1.27 h3c
-------------------------------------------------------------
Whole accounting stop packet to resend:1
Table 1-8 Description on the fields of the display stop-accounting-buffer command
Field Description
NO. Sequence number of the stop-accounting request
1-58
Field Description
SendTime Count of stop-accounting request transmission attempts
IP Address IP address of the TACACS server
Template HWTACACS authentication scheme name
1.3.8 hwtacacs change-password self
Syntax
hwtacacs change-password self
View
User view
Parameter
None
Description
Use the hwtacacs change-password self command to enable the TACACS online
user to change the password.
After this command is configured, the system guides the TACACS online user through
to change the password. Three chances are available for changing the password.
Failure to do so makes the TACACS server quit this operation automatically.
This function is only valid for terminal users (including console, AUX, TTY, and VTY)
configured with TACACS authentication.
Example
# Change the old password.

<H3C > hwtacacs change-password self
please waitting for connection with tacacs server......
Old Password:
New Password:
Re-enter New password:
Password Changed
< H3C >
1-59
1.3.9 hwtacacs nas-ip
Syntax
hwtacacs nas-ip ip-address

undo hwtacacs nas-ip
View
System view
Parameter
ip-address: Specifies a source IP address.
Description
Use the hwtacacs nas-ip command to specify the source address of the hwtacacs
packet sent from NAS.
Use the undo hwtacacs nas-ip command to restore the default setting.
By specifying the source address of the hwtacacs packet, you can avoid unreachable
packets as returned from the server upon interface failure. The source address is
normally recommended to be a loopback interface address.
By default, the source address is not specified, that is, the address of the interface
sending the packet serves as the source address.
This command specifies only one source address; therefore, the newly configured
source address may overwrite the original one.
Example
# Configure the router to send hwtacacs packets from 129.10.10.1.

[H3C] hwtacacs nas-ip 129.10.10.1
1.3.10 hwtacacs scheme
Syntax
hwtacacs scheme hwtacacs-scheme-name

undo hwtacacs scheme hwtacacs-scheme-name
View
System view
Parameter
hwtacacs-scheme-name: Specifies an HWTACACS server scheme, with a character

string of 1 to 32 characters.
1-60
Description
Use the hwtacacs scheme command to enter HWTACACS Server view. If the
specified HWTACACS server scheme does not exist, you can create a new
HWTACACS scheme.
Use the .undo hwtacacs scheme command to delete an HWTACACS scheme.
Example
# Create an HWTACACS scheme named "test1" and enter the relevant HWTACACS
Server view.
[H3C] hwtacacs scheme test1
[H3C-hwtacacs-test1]
1.3.11 key
Syntax
key { accounting | authentication | authorization } string

undo key { accounting | authentication | authorization } string
View
HWTACACS view
Parameter
accounting: Shared key of the accounting server.

authentication: Shared key of the authentication server.
authorization: Shared key of the authorization server.
string: Indicates the key, a string of up to 16 characters, in which the following
characters cannot be included: “/, :, *, ?, <, >”.
Description
Use the key command to set a shared key for the HWTACACS authentication,
authorization and accounting servers.
Use the undo key command to remove the setting.
By default, no key is set for the TACACS server.
The TACACS client (the router system) and the TACACS server use MD5 algorithm to
encrypt packets exchanged between them. The two ends verify the packets using a
shared key. Only when the same key is used can they properly receive packets and
make responses. Therefore, it must be ensured that the shared key set on the router is
consistent with that on the RADIUS server. If the authentication/authorization server
and accounting server are not the same device and the shared keys set on them are
1-61
inconsistent, a shared key must be set respectively for authentication/authorization

packets and accounting packets.
Note:
Example
# Set the shared key of HWTACACS accounting server to “hello”.

[H3C-hwtacacs-test1] key accounting hello
1.3.12 nas-ip
Syntax
nas-ip ip-address
undo nas-ip
View
HWTACACS view
Parameter
ip-address: IP address in dotted decimal format.
Description
Use the nas-ip command to have all the HWTACACS packets sent by the NAS (the
router) carry the same source address.
Use the undo nas-ip command to delete the setting.
Specifying a source address for the HWTACACS packets to be transmitted can avoid
the situation where the packets sent back by the TACACS server cannot be received as
the result of a physical interface failure. The address of a loopback interface is usually
used as the source address.
By default, the source IP address of a HWTACACS packet sent by the NAS is the IP
address of the output port.
1-62
Example
# Set the source IP address carried in the HWTACACS packets that are sent by the
NAS to 10.1.1.1.
[H3C-hwtacacs-test1] nas-ip 10.1.1.1
1.3.13 primary accounting
Syntax
primary accounting ip-address [ port ]

undo primary accounting
View
HWTACACS view
Parameter
ip-address: IP address of the server, a valid unicast address in dotted decimal format.
port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.
Description
Use the primary accounting command to configure a primary TACACS accounting

server.
Use the undo primary accounting command to delete the configured primary
TACACS accounting server.
By default, IP address of TACACS accounting server is all zeros.
You are not allowed to assign the same IP address to both primary and secondary
accounting servers.
You can configure only one primary accounting server in a HWTACACS scheme. If you
repeatedly use this command, the latest configuration replaces the previous one.
You can remove an accounting server only when it is not being used by any active TCP
connections, and the removal impacts only packets forwarded afterwards.
Note:
1-63
Example
# Configure a primary accounting server.

[H3C-hwtacacs-test1] primary accounting 10.163.155.12 49
1.3.14 primary authentication
Syntax
primary authentication ip-address [ port ]

undo primary authentication
View
HWTACACS view
Parameter
Description
Use the primary authentication command to configure a primary TACACS

Use the undo primary authentication command to delete the configured
By default, IP address of TACACS authentication server is all zeros.
authentication servers.
You can configure only one primary authentication server in a HWTACACS scheme. If
you repeatedly use this command, the latest configuration replaces the previous one.
You can remove an authentication server only when it is not being used by any active
TCP connections, and the removal impacts only packets forwarded afterwards.
Note:
1-64
Example
# Configure a primary authentication server.

[H3C-hwtacacs-test1] primary authentication 10.163.155.13 49
1.3.15 primary authorization
Syntax
primary authorization ip-address [ port ]

undo primary authorization
View
HWTACACS view
Parameter
Description
Use the primary authorization command to configure a primary TACACS

authorization server.
Use the undo primary authorization command to delete the configured primary
By default, IP address of TACACS authorization server is all zeros.
If TACACS authentication is configured for a user without TACACS authorization server,
the user cannot log in regardless of its user type.
authorization servers.
You can configure only one primary authorization server in a HWTACACS scheme. If
You can remove an authorization server only when it is not being used by any active
1-65
Note:
Example
# Configure a primary authorization server.

[H3C-hwtacacs-test1] primary authorization 10.163.155.13 49
1.3.16 reset hwtacacs statistics
Syntax
reset hwtacacs statistics { accounting | authentication | authorization | all }
View
User view
Parameter
accounting: Clears all the HWTACACS accounting statistics.

authentication: Clears all the HWTACACS authentication statistics.
authorization: Clears all the HWTACACS authorization statistics.
all: Clears all statistics.
Description
Use the reset hwtacacs statistics command to clear HWTACACS protocol statistics.
Example
# Clear all HWTACACS protocol statistics.

<H3C> reset hwtacacs statistics
1.3.17 reset stop-accounting-buffer
Syntax
reset stop-accounting-buffer hwtacacs-scheme hwtacacs-scheme-name
View
User view
1-66
Parameter
hwtacacs-scheme hwtacacs-scheme-name: Configures to delete the stop-accounting

requests from the buffer according to the specified HWTACACS scheme name. The
hwtacacs-scheme-name specifies the HWTACACS scheme name with a character
string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”.
Description
Use the reset stop-accounting-buffer command to clear the stop-accounting

requests that have no response and are buffered on the router.
Related command: stop-accounting-buffer enable, retry stop-accounting, display
Example
# Delete the buffered stop-accounting requests that are related to the HWTACACS
scheme “h3c”.
<H3C> reset stop-accounting-buffer hwtacacs-scheme h3c
1.3.18 retry stop-accounting
Syntax
retry stop-accounting retry-times

undo retry stop-accounting
View
HWTACACS view
Parameter
retry-times: The maximum number of real-time accounting request attempts. It is in the

Description
Use the retry stop-accounting command to enable stop-accounting packet

retransmission and configure the maximum number of stop-accounting request
attempts.
Use the undo retry stop-accounting command to restore the default setting.
By default, stop-accounting packet retransmission is enabled and has 100 attempts for
each request.
Related command: reset stop-accounting-buffer, hwtacacs scheme, and display
1-67
Example
# Enable stop-accounting packet retransmission and allow up to 50 attempts for each

request.
[H3C] retry stop-accounting 50
1.3.19 secondary accounting
Syntax
secondary accounting ip-address [ port ]

undo secondary accounting
View
HWTACACS view
Parameter
Description
Use the secondary accounting command to configure a secondary TACACS

accounting server.
Use the undo secondary accounting command to delete the configured secondary
TACACS accounting server.
By default, IP address of TACACS accounting server is all zeros.
accounting servers.
You can configure only one secondary accounting server in a HWTACACS scheme. If
You can remove an accounting server only when it is not being used by any active TCP
connections.
Example
# Configure a secondary accounting server.

[H3C-hwtacacs-test1] secondary accounting 10.163.155.12 49
1-68
1.3.20 secondary authentication
Syntax
secondary authentication ip-address [ port ]

undo secondary authentication
View
HWTACACS view
Parameter
Description
Use the secondary authentication command to configure a secondary TACACS

Use the undo secondary authentication command to delete the configured
secondary authentication server.
By default, IP address of TACACS authentication server is all zeros.
authentication servers.
You can configure only one primary authentication server in a HWTACACS scheme. If
You can remove an authentication server only when it is not being used by any active
Example
# Configure a secondary authentication server.

[H3C-hwtacacs-test1] secondary authentication 10.163.155.13 49
1.3.21 secondary authorization
Syntax
secondary authorization ip-address [ port ]

undo secondary authorization
1-69
View
HWTACACS view
Parameter
ip-address: IP address of the server, a legal unicast address in dotted decimal format.
port: Port number of the server, ranging from 1 to 65535. By default, it is 49.
Description
Use the secondary authorization command to configure a secondary TACACS

Use the .undo secondary authorization command to delete the configured
secondary authorization server.
By default, IP address of TACACS authorization server is all zeros.
authorization servers.
You can configure only one primary authorization server in a HWTACACS scheme. If
You can remove an authorization server only when it is not being used by any active
Example
# Configure the secondary authorization server.

[H3C-hwtacacs-test1] secondary authorization 10.163.155.13 49
1.3.22 timer quiet
Syntax
timer quiet minutes

undo timer quiet
View
HWTACACS view
Parameter
minutes: Ranges from 1 to 255 minutes. By default, the primary server must wait five
minutes before it resumes the active state.
1-70
Description
Use the timer quiet command to set the duration that a primary server must wait
Use the undo timer quiet command to restore the default (five minutes).
Example
# Set the quiet timer for the primary server to ten minutes.
[H3C-hwtacacs-test1] timer quiet 10
1.3.23 timer realtime-accounting
Syntax
timer realtime-accounting minutes

undo timer realtime-accounting
View
HWTACACS view
Parameter
minutes: Real-time accounting interval, which is a multiple of 3 in the range 3 to 60

minutes and defaults to 12.
Description
Use the timer realtime-accounting command to configure a real-time accounting

interval.
Use the undo timer realtime-accounting command to restore the default interval.
Real-time accounting interval is necessary for real-time accounting. After an interval
value is set, the NAS transmits the accounting information of online users to the
TACACS accounting server at intervals of this value.
The setting of real-time accounting interval depends somewhat on the performance of
the NAS and the TACACS server: a shorter interval requires higher device performance.
You are therefore recommended to adopt a longer interval when there are a large
number of users (more than 1000, inclusive). The following table recommends the ratio
of minutes to the number of users.
1-71
Table 1-9 Recommended ratio of minutes to the number of users
Real-time accounting interval

Number of users
(minute)
1 – 99 3
100 – 499 6
500 – 999 12
≥1000 ≥15
Example
# Set the real-time accounting interval in the HWTACACS scheme “h3c” to 51 minutes.
[H3C-hwtacacs-h3c] timer realtime-accounting 51
1.3.24 timer response-timeout
Syntax
timer response-timeout seconds

undo timer response-timeout
View
HWTACACS view
Parameter
seconds: Ranges from 1 to 300 seconds and defaults to five seconds.
Description
Use the timer response-timeout command to set the response timeout timer of the
TACACS server.
Use the undo timer response-timeout command to restore the default (five seconds).
Note:
As the HWTACACS is based on TCP, either the server response timeout and/or the
TCP timeout may cause disconnection to the TACACS server.
1-72
Example
# Set the response timeout time of the TACACS server to 30 seconds.

[H3C-hwtacacs-test1] timer response-timeout 30
1.3.25 user-name-format
Syntax
user-name-format { with-domain | without-domain }
View
HWTACACS view
Parameter
with-domain: Specifies to send the username with domain name to the TACACS
server.
without-domain: Specifies to send the username without domain name to the
TACACS server.
Description
Use the user-name-format command to configure the username format sent to the
TACACS server.
By default, HWTACACS scheme acknowledges that the username sent to it includes
ISP domain name.
The supplicants are generally named in userid@isp-name format. The part following
the @ sign is the ISP domain name, according to which the router assigns a user to the
corresponding ISP domain. However, some earlier TACACS servers reject the user
name including ISP domain name. In this case, the user name is sent to the TACACS
server after its domain name is removed. Accordingly, the router provides this
command to decide whether the username is sent to the TACACS server, carrying ISP
domain name or not.
Note:
If a HWTACACS scheme is configured to reject usernames including ISP domain
names, the TACACS scheme shall not be simultaneously used in more than one ISP
domains. Otherwise, the TACACS server will regard two users in different ISP domains
as the same user by mistake, if they have the same username (excluding their
respective domain names.)
1-73
Related command: hwtacacs scheme.
Example
# Specify to send the username without domain name to the HWTACACS scheme
"h3c".
[H3C-hwtacacs-h3c] user-name-format without-domain
1-74
Comware V3 Chapter 2 Portal Configuration Commands
Chapter 2 Portal Configuration Commands
2.1 Portal Configuration Commands

2.1.1 debugging portal
Syntax
debugging portal
undo debugging portal
View
User view
Parameter
None
Description
Use the debugging portal command to enable portal debugging.

Use the undo debugging portal command to disable portal debugging.
Example
# Enable portal debugging.

<H3C> debugging portal
1) The normal process for direct authentication:
*0.1765820 H3C PORTAL/8/PT_DEBUG: User Index 9 State Change: VOID -> DISCOVERED
*0.1765920 H3C PORTAL/8/PT_DEBUG: User Index 9 State Change: DISCOVERED ->
WAIT_AUTH_ACK
*0.1766300 H3C PORTAL/8/PT_DEBUG: User Index 9 State Change: WAIT_AUTH_ACK ->
WAIT_LOGIN_ACK
*0.1766700 H3C PORTAL/8/PT_DEBUG: User Index 9 State Change: WAIT_LOGIN_ACK
-> ONLINE
*0.1797620 H3C PORTAL/8/PT_DEBUG: User Index 9 State Change: ONLINE -> WAIT_
LOGOUT_ACK
*0.1798000 H3C PORTAL/8/PT_DEBUG: User Index 9 State Change: WAIT_LOGOUT_ACK
-> VOID
2) The normal process for re-DHCP authentication:
*0.2997440 H3C PORTAL/8/PT_DEBUG: User Index 11 State Change: VOID -> DISCOV
ERED
2-1
WAIT_AUTH_ACK
*0.2997800 H3C PORTAL/8/PT_DEBUG: User Index 11 State Change: WAIT_AUTH_ACK
-> WAIT_NEW_IP
*0.3004080 H3C PORTAL/8/PT_DEBUG: User Index 11 State Change: WAIT_NEW_IP ->
WAIT_LOGIN_ACK
-> ONLINE
3) The process for authentication failure:
ERED
WAIT_AUTH_ACK
-> VOID
4) The process for accounting failure:
ERED
WAIT_AUTH_ACK
-> WAIT_NEW_IP
WAIT_LOGIN_ACK
-> VOID
5) The process for authentication timeout:
ERED
WAIT_AUTH_ACK
-> WAIT_LEAVING_ACK
*0.6419510 H3C PORTAL/8/PT_DEBUG: User Index 15 State Change: WAIT_LEAVING_A
CK -> VOID
6) The process for accounting timeout:
ERED
WAIT_AUTH_ACK
-
> WAIT_LOGIN_ACK
2-2
-> WAIT_LEAVING_ACK
CK -> VOID
7) The process for no response when the request for a public IP address times out:
ERED
WAIT_AUTH_ACK
-> WAIT_NEW_IP
WAIT_LEAVING_ACK
CK -> VOID
Table 2-1 Description on the fields of the debugging portal command
Field Description
The user migrates from the VOID state to the
VOID -> DISCOVERED :
DISCOVERED state.
The user migrates from the DISCOVERED state to
DISCOVERED ->
the WAIT_AUTH_ACK state (waiting for
WAIT_AUTH_ACK:
authentication acknowledgement).
The user migrates from the WAIT_AUTH_ACK state
WAIT_AUTH_ACK ->
to the WAIT_LOGIN_ACK state (waiting for
WAIT_LOGIN_ACK:
accounting acknowledgement).
WAIT_LOGIN_ACK-> The user migrates from the WAIT_LOGIN_ACK state
ONLINE: to the ONLINE state.
The user migrates from the ONLINE state to the
ONLINE ->
WAIT_LOGOUT_ACK state (waiting for logout
WAIT_LOGOUT_ACK:
acknowledgement).
WAIT_LOGOUT_ACK-> The user migrates from the WAIT_LOGOUT_ACK
VOID: state to the VOID state, that is, the user is deleted.
The user migrates from the WAIT_NEW_IP state
WAIT_NEW_IP (waiting for refreshing the public IP address) to the
->WAIT_LOGIN_ACK: WAIT_LOGIN_ACK state (waiting for accounting
acknowledgement) in re-DHCP operating mode.
WAIT_AUTH_ACK->VOID: to the VOID state, that is, the user fails the
authentication and is deleted.
The user migrates from the WAIT_LOGIN_ACK state
WAIT_LOGIN_ACK ->
to the VOID state, that is, the user fails the accounting
VOID:
and is deleted.
2-3
Field Description
WAIT_AUTH_ACK-> to the WAIT_LEAVING_ACK state (waiting for
WAIT_LEAVING_ACK: leaving acknowledgement), that is, the user
authentication times out.
The user migrates from the WAIT_LOGIN_ACK state
WAIT_LOGIN_ACK->
to the WAIT_LEAVING_ACK state, that is, the user
WAIT_LEAVING_ACK:
accounting times out.
The user migrates from the WAIT_NEW_IP state to
WAIT_NEW_IP ->
the WAIT_LEAVING_ACK state, that is, the user fails
WAIT_LEAVING_ACK:
when trying to obtain a public IP address.
2.1.2 display portal
Syntax
display portal [ acm statistics | auth-network [ auth-interface interface-type

interface-num ] | free-user | free-ip | interface [ interface-type interface-num ] | server
[ server-name ] | | server statistics | tcp-cheat statistics]
View
Any view
Parameter
acm statistics: Displays the accumulative statistics of the ACM module.

auth-network: Displays the authentication network segment.
auth-interface: Ethernet interface to which the authentication network segment is
attached.
free-user: Displays the configured authentication-free users.
free-ip: Displays the configured authentication-free IP addresses.
interface: Displays all Ethernet interfaces.
interface-type interface-num: Displays the specified Ethernet interface.
server: Displays the information about all portal servers.
server-name: Name of the portal server to be displayed.
server statistics: Displays the portal server statistics.
tcp-cheat statistics: Displays TCP-cheat statistics.
Description
Use the display portal command to display the information about portal servers.
2-4
Example
# Display the information about portal servers.

[H3C] display portal
This operation may take few minutes ,please wait
Service Type:
normal
Run Method:
Direct
Resource Name:
Update resource id:

1
All resource id:
2
Free IP:
1)IP = 192.168.0.200 Interface = any
2)IP = 1.1.1.1 Interface = Ethernet0/0/0
Authenticate network:
1)IP = 172.33.0.0 Net Mask = 255.255.0.0 Interface = Ethernet0/0/0
Free User:
No Free User
Update Resource:
1)IP = 192.168.0.201 Mask = 255.255.255.255
2)IP = 192.168.0.202 Mask = 255.255.0.0
Portal Server:
1)pt:
IP = 192.168.0.200
Key = Not configured
Port = 50100
URL = "http://192.168.0.200/portal"
Interface Portal Configuration:
Ethernet0/0/0 : Portal Started Portal Server: pt
Index State MAC IP Interface
0 ONLINE - 172.33.0.2 Ethernet0/0/0
Table 2-2 Description on the fields of the display portal command
Field Description
Service Type Portal service type: portal or portal+
Operating mode of the portal server, which can be Direct
Run Method for direct authentication, or Redhcp for re-DHCP
authentication.
2-5
Field Description
Name of resources accessible to users. It may be set
Resource Name
when portal+ applies.
Free IP addresses. The IP address of a portal server is a
Free IP
free IP address displayed with an interface of any.
Free User Authentication-free users
Update resources. When the user passes identity
Update-resource authentication of EAD, it can access update resources,
that is, the resources in the isolation zone.
Update-resource ID, corresponding to the isolation ACL
Update-resource-id
configured on the security policy server for the router.
All-resource ID, corresponding to the security ACL
All-resource-id
configured on the security policy server for the router.
Basic configurations of the portal server, including the
Portal Server name, IP address, communication key, port, and URL for
HTTP redirection.
z Information about portal-enabled interfaces, including
whether they are portal-enabled and the name of the
Interface Portal portal server.
Configuration z Information about connected users, such as the user
state, MAC address, IP address, and connected
interface.
Note:
The MAC address of a user can be displayed in the information output of the display
portal command only when the re-DHCP authentication mode is used for portal
authentication.
[H3C] display portal acm statistics

ACM Statistics Running State Statistics
WAIT_MAC_ACK 0
DISCOVERED 0
WAIT_AUTH_ACK 0
WAIT_LOGIN_ACK 0
WAIT_ACL_ACK 0
WAIT_NEW_IP 0
ONLINE 0
WAIT_LOGOUT_ACK 0
Message Statistics :
MSG NAME RCV MSG NUM
PT_MSG_AUTH_ACK 1
2-6
PT_MSG_LOGIN_ACK 1
PT_MSG_LOGOUT_ACK 1
PT_MSG_LEAVING_ACK 0
PT_MSG_CUT_REQ 0
PT_MSG_ARPPKT 16
PT_MSG_UPDATE 0
PT_MSG_TMR_AUT 0
PT_MSG_TMR_LGN 0
PT_MSG_TMR_LGT 0
PT_MSG_TMR_LEV 0
PT_MSG_TMR_NIP 0
PT_MSG_TMR_USERIPCHANGE 0
PT_MSG_TMR_REQAUTH 0
ERROR Statistics:
MEM Error: 0 RCV MSG ERR: 0 SND MSG ERR: 0
Table 2-3 Description on the fields of the display portal acm statistics command
Field Description
Statistics of the state machine, indicating the
ACM Statistics
number of users in each state.
The state of waiting for MAC address
WAIT_MAC_ACK acknowledgement. The statistical value for this state
is always 0.
DISCOVERED The DISCOVERED state.
The state of waiting for authentication
WAIT_AUTH_ACK
acknowledgement
The state of waiting for accounting
WAIT_LOGIN_ACK
acknowledgement
The state of waiting for ACL update. The statistical
WAIT_ACL_ACK
value for this state is always 0.
WAIT_NEW_IP The state of waiting for a new IP address
ONLINE The online state
WAIT_LOGOUT_ACK The state of waiting for logout acknowledgement
Message Statistics Statistics about received messages.
PT_MSG_AUTH_ACK Authentication acknowledgement messages
PT_MSG_LOGIN_ACK Accounting acknowledgement messages
PT_MSG_LOGOUT_ACK Logout acknowledgement messages
PT_MSG_LEAVING_ACK Leaving acknowledgement messages
PT_MSG_CUT_REQ Logout requests
2-7
Field Description
PT_MSG_ARPPKT ARP packets
PT_MSG_UPDATE Update messages
PT_MSG_TMR_AUT Authentication timer messages
PT_MSG_TMR_LGN Accounting timer messages
PT_MSG_TMR_LGT Logout timer messages
PT_MSG_TMR_LEV Leaving timer messages
PT_MSG_TMR_NIP New IP timer messages
PT_MSG_TMR_USERIPCH Waiting for IP update acknowledgement timer
ANGE messages
PT_MSG_TMR_REQAUTH Waiting for authentication timer messages
ERROR Statistics Error statistics
MEM Error/RCV MSG Error statistics, including memory errors, received
ERR/SND MSG ERR and sent error messages
2.1.3 portal
Syntax
portal server-name
undo portal
View
Parameter
server-name: Name of a configured portal server.
Description
Use the portal command to enable portal authentication on an interface.

Use the undo portal command to disable portal authentication on an interface.
Before enabling portal authentication on an interface, make sure that the interface is
configured with a legal IP address, and the specified portal server exists.
Example
# Enable portal authentication on interface Ethernet0/0/0.

[H3C-Ethernet0/0/0] portal portal1
2-8
2.1.4 portal auth-network
Syntax
portal auth-network ip-address net-mask interface interface-type interface-num

undo portal auth-network { [ ip-address net-mask ] interface interface-type
interface-num | all }
View
System view
Parameter
ip-address: IP address of a network segment.

net-mask: Subnet mask of the network segment.
interface-type interface-num: Type and number of the Ethernet interface to which the
network segment is attached.
all: All configured authentication network segments.
Description
Use the portal auth-network command to configure a network segment for portal
authentication.
Use the undo portal auth-network command to remove a specified authentication
network segment or all authentication network segments.
By default, no authentication network segments are configured.
Example
# Configure the network segment for portal authentication.

[H3C] portal auth-network 192.168.0.200 255.255.0.0 interface ethernet 0/0/0
2.1.5 portal free-ip
Syntax
portal free-ip ip-address interface interface-type interface-num

undo portal free-ip { [ ip-address ] interface interface-type interface-num | all }
View
System view
Parameter
ip-address: Free IP address of the host to be configured.
2-9
interface-type interface-num: Type and number of the Ethernet interface on which the
free IP address of the host is configured.
all: All the free IP addresses.
Description
Use the portal free-ip command to configure a free IP address.

Use the undo portal free-ip command to remove a specified free IP addresses.
By default, no free IP address for a host or segment is configured.
You can configure the IP address of a free website provided by an Internet service
provider (ISP) as a free IP address. All users can access it without restriction.
The system supports up to eight free IP addresses, including the IP address of the
portal server.
Example
# Configure a free IP address 192.168.253.222 on Ethernet0/0/0.

[H3C] portal free-ip 192.168.253.222 interface ethernet 0/0/0
2.1.6 portal free-user
Syntax
portal free-user ip ip-address interface interface-type interface-num

undo portal free-user { [ ip ip-address ] interface interface-type interface-num | all }
View
System view
Parameter
ip-address: IP address of the authentication-free user.

interface-type interface-num: Type and number of the Ethernet interface to which the
authentication-free user is attached.
all: All the authentication-free users.
Description
Use the portal free-user command to configure a portal authentication-free user.

Use the undo portal free-user ip command to delete a specified authentication-free
user.
Use the undo portal free-user interface command to delete all authentication-free
users on a specified interface.
Use the undo portal free-user all command to delete all set authentication-free users.
2-10
In actual networking environments, you can configure some servers and the LAN
network devices attached to the router as authentication-free users, enabling them to
access all networks without authentication.
The authentication-free user information contains the IP address of the user and the
interface on the router to which the user is connected. Only the user whose information
fully matches the authentication-free user information can be allowed to access the
Internet without authentication.
Caution:
z In re-DHCP authentication mode, the IP address of an authentication-free user and

the primary IP address of the interface must be on the same network segment. In
direct authentication mode, the IP address of an authentication-free user and the IP
address of the interface must be on the same network segment.
z This configuration takes effect only if portal authentication is enabled on the
interface to which the authentication-free user is connected.
Example
# Configure a portal authentication-free user, who is at 10.110.100.100 and connected

to Ethernet0/0/1.
[H3C] portal free-user ip 10.110.100.100 interface ethernet 0/0/1
2.1.7 portal method
Syntax
portal method { direct | redhcp }

undo portal method
View
System view
Parameter
direct: Direct authentication.

redhcp: Re-DHCP authentication.
Description
Use the portal method command to specify a portal authentication method.
2-11
Use the undo portal method command to restore the default authentication method,
that is, direct authentication.
Example
# Set the portal authentication method to redhcp.

[H3C] portal method redhcp
# Restore the default authentication method.

[H3C] undo portal method
2.1.8 portal server
Syntax
portal server server-name { ip ip-address | key key-string | port port | url url-string } *
undo portal server server-name [ key | port | url ]
View
System view
Parameter
server-name: Name of the portal server, a string consisting of 1 to 32 characters.

ip-address: IP address of the portal server, which cannot be 0.0.0.0, or any loopback
address, multicast address, or broadcast address.
key-string: Shared key for communications between the portal server and the router, a
string consisting of 1 to 16 characters. By default, it is h3c.
port: Port from which the router sends packets to the portal server, in the range of 1 to
65,534. By default, it is 50,100.
url-string: URL for HTTP redirection. By default, it is a string starting with http:// and
consisting of the value of the ip-address argument. For example, if the value of the
ip-address argument is 10.110.100.100, then the default URL is http://10.110.100.100.
When entering the string, you do not need to put it between double quotation marks.
Description
Use the portal server command to configure a portal server or modify the configuration
of a portal server.
Use the undo portal server command to delete a specified portal server or restore the
default settings for a specified portal server.
All users can access a portal server without limitation.
2-12
Caution:
z When configuring a portal server for the first time, you must specify its IP address.
z To modify the parameters of a portal server which is referenced by an interface, you
must first remove the portal server from the port.
z The IP address of a portal server is a free IP address. If the number of free IP
addresses has already reached the maximum number, the portal server
configuration will fail.
Example
# Configure a portal server named H3C with an IP address of 10.10.100.100, a

communication key of 163, a port of 50101, and an HTTP redirection URL of
http://www.huawei-3com.com.
[H3C] portal server H3C ip 10.10.100.100 key 163 port 50101 url http://www.
http://www.huawei-3com.com.
2.1.9 reset portal
Syntax
reset portal { acm | server | tcp-cheat } statistics
View
User view
Parameter
acm: Clears portal ACM statistics, that is, clear the state machine statistics related to
authentication, connection, and management.
server: Clears portal server statistics.
tcp-cheat: Clears TCP spoofing statistics.
Description
Use the reset portal command to clear the related portal statistics.
Example
# Clear portal ACM statistics.

<H3C> reset portal acm statistics
2-13
2.1.10 portal fast-authentication
Syntax
portal fast-authentication server server-name user-name user-name password

password
undo portal fast-authentication server server-name
View
System view
Parameter
server-name: Name of the configured portal server.

user-name: User name used for fast authentication.
password: Password used for fast authentication.
Description
Use the portal fast-authentication command to enable fast portal authentication.

Use the undo portal fast-authentication command to disable fast portal
authentication.
Note that the portal server name must exist, that is, the portal server must have been
configured. Otherwise, an error occurs.
By default, normal portal authentication is enabled.
Example
# Enable fast portal authentication for portal server pt, and specify to use user name
fast and password 123.
[H3C] portal fast-authentication server pt user-name fast password 123
2.2 EAD Configuration Commands

2.2.1 display portal update-resource
Syntax
display portal update-resource
View
Any view
Parameter
None
2-14
Description
Use the display portal update-resource command to display information about the
update resources configured by the user.
Example
# Display information about the update resources configured by the user.

[H3C] display portal update-resource
Update Resource:
1)IP = 1.1.1.1 Mask = 255.255.255.255
2)IP = 2.2.2.2 Mask = 255.0.0.0
Table 2-4 Description on the fields of the display portal update-resource command
Field Description
IP IP address of update resource
Mask Subnet mask of update resource
2.2.2 portal service-type
Syntax
portal service-type { normal | plus }

undo portal service-type
View
System view
Parameter
normal: Sets the portal authentication mode to normal (or portal).

plus: Sets the portal authentication mode to portal+.
Description
Use the portal service-type command to set the portal authentication mode.
Use the undo portal service-type command to restore the default portal
authentication mode.
After you enable portal on an interface, normal portal authentication mode applies by
default.
Portal+ is an enhancement to portal; it supports endpoint admission defense in addition
to the functions provided by portal.
2-15
Example
# Set the portal authentication mode to portal+.

[H3C] portal service-type plus
# Set the portal authentication mode to normal.

[H3C] undo portal service-type
2.2.3 portal upload-ip
Syntax
portal upload-ip ip-address

undo portal upload-ip
View
Parameter
ip-address: IP address of the interface connected to the CAMS.
Description
Use the portal upload-ip command to configure the IP address of the interface
connected to the CAMS server.
Use the undo portal upload-ip command to delete the IP address of the interface
connected to the CAMS server.
By default, the IP address of the interface connected to the CAMS server is not
configured.
Use this command only on the Ethernet interface enabled with portal authentication.
Example
# Configure the IP address of the interface connected to the CAMS server.

[H3C-Ethernet0/0/0] portal upload-ip 172.21.1.1
2.2.4 portal update-resource
Syntax
portal update-resource ip ip-address [ mask mask ]

undo portal update-resource { ip ip-address [ mask mask ] | all }
View
System view
2-16
Parameter
ip-address: IP address of update-resource.

mask: Dotted decimal subnet mask or mask length of the IP address of update
resource.
all: All update resources.
Description
Use the portal update-resource command to add an IP address to update resources.

Use the undo portal update-resource command to remove one or all IP addresses
from update resources.
By default, no update resources are configured.
EAD uses two authentication phases, identity authentication of AAA and security
authentication, to control resources accessible to an endpoint user using the portal+
client as follows:
z When the user passes identity authentication, it can access update resources, that
is, the resources in the isolation zone.
z When the user passes the subsequent security authentication, it can access all
available resources.
Example
# Add 192.168.0.201 to update resources.

[H3C] portal update-resource ip 192.168.0.201
# Remove 192.168.0.201 from update resources.

[H3C] undo portal update-resource ip 192.168.0.201
2.2.5 portal update-resource-id
Syntax
portal update-resource-id number

undo portal update-resource-id
View
System view
Parameter
number: Update-resource ID.
Description
Use the portal update-resource-id command to configure the update-resource ID.
2-17
Use the undo portal update-resource-id command to delete the update-resource ID.
By default, the update-resource ID is not configured.
The update-resource ID is corresponding to the isolation ACL configured on the
security policy server for the router.
The security policy server issues the isolation ACL when an endpoint user using portal+
client passes identity authentication of AAA. If this isolation ACL is the same as the
update-resource ID, the user can access update resources. If this isolation ACL is not
the same as the update-resource ID, the router assigns the update-resource ID to the
user. By using this update-resource ID, the user can access update resources.
To access resources other than update resources, the user must pass the security
authentication.
Example
# Set the update-resource ID to 1.

[H3C] portal update-resource-id 1
# Delete the update-resource ID.

[H3C] undo portal resource-id
2.2.6 portal all-resource-id
Syntax
portal all-resource-id number

undo portal all-resource-id
View
System view
Parameter
number: All-resource ID.
Description
Use the portal all-resource-id command to configure the all-resource ID.

Use the undo portal all-resource-id command to delete the all-resource ID.
By default, no all-resource ID is configured.
The all-resource ID is corresponding to the security ACL configured on the security
policy server for the router.
The security policy server issues the security ACL when an endpoint user using portal+
client passes security authentication. This security ACL must be the same as the
2-18
all-resource ID. With the all-resource ID, the user can access network resources other
than update resources.
Example
# Set the all-resource ID to 2.

[H3C] portal all-resource-id 2
# Delete the all-resource ID.

[H3C] undo portal all-resource-id
2.2.7 portal resource
Syntax
portal resource resource-name

undo portal resource
View
System view
Parameter
resource-name: Name of accessible resource.
Description
Use the portal resource command to create an accessible-resource name.

Use the undo portal resource command to restore the default accessible-resource
name.
The default accessible-resource name is h3c.
This resource name is used by the system in the security authentication failure prompt
indicating that the resource with the specified name is accessible only after security
authentication is passed.
Example
# Create an accessible-resource name to sina.

[H3C] portal resource sina
# Restore the default accessible-resource name.

[H3C] undo portal resource
2.2.8 security-policy-server
Syntax
security-policy-server ip-address
2-19
undo security-policy-server [ ip-address | all ]
View
RADIUS scheme view
Parameter
ip-address: Specifies a security policy server by specifying its IP address.

all: All security policy servers.
Description
Use the security-policy-server command to specify the IP address of a security policy

server.
Use the undo security-policy-server command to delete the specified or all security
policy servers.
You may specify up to eight security policy servers in a RADIUS scheme.
Configured with the security-policy-server command, the RADIUS server accepts
only the session control packets (carrying the security ACL) issued by the specified
security policy server or servers after endpoints pass security authentication.
You need to configure this command only when RADIUS, portal, and security policy
servers are not co-located.
Example
# Specify the security policy server with IP address 192.168.0.1.

[H3C] radius scheme system
[H3C-radius-system] security-policy-server 192.168.0.1
2-20
Command Manual – Security Chapter 3 Access Control List Configuration
Comware V3 Commands
Chapter 3 Access Control List Configuration

Commands
3.1 ACL Configuration Commands

3.1.1 acl
Syntax
acl number acl-number [ match-order { config | auto } ]

undo acl { number acl-number | all }
View
System View
Parameter
number: Defines a numbered access control list (ACL).

acl-number: ACL number, with the range 1000 to 1999 for interface-based ACLs, 2000
to 2999 for basic ACLs, 3000 to 3999 for advanced ACLs, and 4000 to 4999 for
MAC-based ACLs.
match-order: Indicates the order in which rules are configured.
config: Indicates to match the rule according to configuration order that the user
configured them.
auto: Indicates to match the rule in automatic order (in accordance with "Depth first"
principle.)
all: Deletes all ACLs.
Description
Use the acl command to create an access control list and enter ACL view.
Use the undo acl command to delete an access control list.
An access control list consists of a list of rules that are described by a series of permit
or deny sub-sentences. Several rule lists form an ACL. Before configuring the rules for
an access control list, you should create the access control list first.
Example
# Create an ACL numbered 2000.

[H3C-acl-basic-2000]
3-1
Comware V3 Commands
3.1.2 acl-reflect timeout
Syntax
acl-reflect timeout time

undo acl-reflect timeout
View
System view
Parameter
time: Aging time, in the range 60 to 2,147,483, in seconds.
Description
Use the acl-reflect timeout command to set the global aging time of reflexive ACLs.
Use the undo acl-reflect timeout command to restore the global aging time of
reflexive ACLs to the default value.
By default, the global aging time of reflexive ACLs is 300 seconds.
Example
# Set the global aging time of reflexive ACLs to 301 seconds.

[H3C] acl-reflect timeout 301
3.1.3 display acl
Syntax
display acl { all | acl-number }
View
Any view
Parameter
all: All ACL rules.

acl-number: ACL expressed by number.
Description
Use the display acl command to view the rules of access control list.
The rule match order defaults to config or the configuration order. If it applies, the
display command does not show information on the match order. If the match order
auto applies, the display command shows that.
3-2
Comware V3 Commands
Example
# Display the contents of ACL 2000 rule.

[H3C] display acl 2000
Total ACL Number: 1
Basic ACL 2000, 2 rules,
Acl's step is 1
rule 1 permit (0 times matched)
rule 2 permit source 1.1.1.1 0 (0 times matched)
3.1.4 nesting
Syntax
nesting acl-number
undo nesting acl-number
View
ACL view
Parameter
acl-number: Nesting ACL number, in the range 3000 to 3999.
Description
Use the nesting command to configure a nesting rule.

Use the undo nesting command to delete a nesting rule.
By default, no nesting rule is configured.
Example
# Configure to nest ACL3001 in ACL3000.

[H3C-acl-adv-3000] nesting 3001
3.1.5 reset acl counter
Syntax
reset acl counter { all | acl-number }
View
User View
Parameter
acl-number: ACL expressed by number.
3-3
Comware V3 Commands
all: All ACL rules.
Description
Use the reset acl counter command to clear the statistics of access control list.
Example
# Reset the statistics of access control list 1000.

<H3C> reset acl counter 1000
3.1.6 rule
Syntax
1) Create or delete a rule of a basic access control list.

rule [ rule-id ] { permit | deny | comment text } source [ sour-addr sour-wildcard | any ]
[ time-range time-name ] [ logging ] [ fragment ] [ vpn-instance vpn-instance-name ]
undo rule rule-id [ comment text ] [ source ] [ time-range ] [ logging ] [ fragment ]
[ vpn-instance vpn-instance-name ]
2) Create or delete a rule of an advanced access control list.
rule [ rule-id ] { permit | deny | comment text } protocol source [ sour-addr
sour-wildcard | any ] destination [ dest-addr wildcard | any ] [ source-port operator
port1 [ port2 ] ] [ destination-port operator port1 [ port2 ] ] [ icmp-type { icmp-message
|icmp-type icmp-code} ] [ dscp dscp ] [ established ] [ reflect acl-number [ timeout
time ] [ precedence precedence ] [ tos tos ] [ time-range time-name ] [ logging ]
[ fragment ] [ vpn-instance ]
undo rule rule-id [ comment text ] [ source ] [ destination ] [ source-port ]
[ destination-port ] [ icmp-type ] [ dscp ] [ precedence ] [ tos ] [ time-range ]
[ logging ] [ fragment ] [ vpn-instance vpn-instance-name ]
3) Create or delete a rule of an interface-based ACL rule.
rule [ rule-id ] { permit | deny | comment text } interface { interface-type
interface-number | any } [ time-range time-name ] [ logging ]
undo rule rule-id [ comment text ] [ time-range | logging ] *
4) Add/delete a MAC-based ACL rule
rule [ rule-id ] { deny | permit | comment text } [ type type-code type-mask | lsap
lsap-code lsap-mask ] [ source-mac sour-addr sour-mask ] [ dest-mac dest-addr
dest-mask ]
undo rule rule-id [ comment text ]
View
ACL view
3-4
Comware V3 Commands
Parameter
In the rule command:

rule-id: ID of an ACL rule, optional, ranging from 0 to 65534. If you specify a rule-id, and
the ACL rule related to the ID already exists, the newly defined rule will partially
overwrite the existing rule, just as editing the existing ACL rule. Therefore, you are
recommended to delete an existing rule first and then create a new rule ; otherwise, the
outcome might be different from the expectation. If the rule-id you specify does not exist,
a new rule number with the specified rule-id will be created. If you do not specify the
rule-id, a new rule will be created and the system will assign a rule-id to the ACL rule
automatically.
deny: Discards matched packets.
permit: Permits matched packets.
comment text: Specifies a comment for each rule.
protocol: Protocol type over IP expressed by name or number. The number range is
from 0 to 255, and the name range covers gre, icmp, igmp, ip, ipinip, ospf, tcp and udp.
source: Optional, specify source address information of ACL rule. If it is not configured,
it indicates that any source address of the packets matches.
sour-addr: Source IP address of packets in dotted decimal format. Or use "any" to
represent the source address 0.0.0.0 with the wildcard 255.255.255.255.
sour-wildcard: Source address wildcard in dotted decimal format. Inputting “0” indicates
that the wildcard is 0.0.0.0. It represents a host with the address specified by parameter
sour-addr.
destination: Optional, specify destination address information of ACL rule. If it is not
configured, it indicates that any destination address of the packets matches.
dest-addr: Destination IP address of packets in dotted decimal format. Or use "any" to
represent the destination address 0.0.0.0 with the wildcard 255.255.255.255.
dest-wildcard: Destination address wildcard in dotted decimal format. Inputting “0”
indicates that the wildcard is 0.0.0.0. It represents a host with the address specified by
parameter dest-addr.
icmp-type: Optional, specify ICMP packet type and ICMP message code, only valid
when packet protocol is ICMP. If it is not configured, it indicates any ICMP packet
matches.
icmp-type: ICMP packet can be filtered according to ICMP message type. It is a number
icmp-code: ICMP packets that can be filtered according to ICMP message type can
also be filtered according to message code. It is a number ranging from 0 to 255.
icmp-message: ICMP packets can be filtered according to ICMP message type or
ICMP message code.
3-5
Comware V3 Commands
source-port: Optional, specify source port information of UDP or TCP packets, valid
only when the protocol specified by the rule is TCP or UDP. If it is not specified, it
indicates that any source port information of TCP/UDP packets matches.
destination-port: Optional, specify destination port information of UDP or TCP packets,
valid only when the protocol specified by the rule is TCP or UDP. If it is not specified, it
indicates that any destination port information of TCP/UDP packets matches.
operator: Optional, comparison between port number of source or destination address.
Their names and meanings are as follows: lt (lower than), gt (greater than), eq (equal
to), neq (not equal to) and range (between). If the operator is range, two port numbers
should follow it. Others only need one port number.
port1, port2: Optional, port number of TCP or UDP, expressed by name or number. The
number range is from 0 to 65535.
dscp dscp: Specifies a DSCP field, the DS byte in IP packets, which is mutually
exclusive with the precedence and TOS parameters.
established: Matches the TCP packets with the ACK and/or RST flag, including the
TCP packets of these types: SYN+ACK, ACK, FIN+ACK, RST, RST+ACK.
precedence: Optional, a number ranging from 0 to 7, or a name. Packets can be
filtered according to precedence field. This parameter is mutually exclusive with the
DSCP and TOS parameters.
tos tos: Optional, a number ranging from 0 to 15 or a name. Packets can be filtered
according to type of service. This parameter is mutually exclusive with the DSCP and
precedence parameters.
logging: Optional, indicating whether to log qualified packets. The log contents include
sequence number of ACL rule, packets passed or discarded, upper layer protocol type
over IP, source/destination address, source/destination port number, and number of
packets. This parameter applies only to the firewall module. Namely, when other
modules invoke the ACL, the matched packets are not logged.
time-range time-name: Specifies that the ACL is valid in this time range.
fragment: Specifies that this rule is only valid for the fragment packets that are not the
first fragment. When this parameter is contained, it indicates that the rule is only valid
for the fragment packets that are not the first fragment. A matching rule specified
without this keyword cannot match fragments.
interface interface-type interface-number: Specifies the interface information of the
packets, which cannot be L2 Ethernet port information. If no interface is specified, all
interfaces can be matched. any represents all interfaces.
vpn-instance: Optional, specifies a vpn-instance. If it is not specified, the ACL rule is
invalid for packets in all vpn-instances. If it is specified, the ACL rule is valid only for the
specified vpn-instance.
vpn-instance-name: Specifies the name of a vpn-instance that existed.
3-6
Comware V3 Commands
In the undo rule command:

rule-id: ID of an ACL rule, it should be an existing ACL rule number. If the command is
not followed by other parameters, this ACL rule will be deleted completely; otherwise,
only part of information related to this ACL rule will be deleted.
comment text: Specifies a comment for each rule.
source: Optional. Only the information settings related to the source address part of
the ACL rule number will be deleted.
destination: Optional. Only the information setting related to the destination address
part of the ACL rule number will be deleted.
source-port: Optional. Only the information setting related to the source port part of the
ACL rule number will be deleted, valid only when the protocol is TCP or UDP.
destination-port: Optional. Only the information setting related to the destination port
part of the ACL rule number will be deleted, valid only when the protocol is TCP or UDP.
icmp-type: Optional. Only the information setting related to ICMP type and message
code part of the ACL rule number will be deleted, valid only when the protocol is ICMP.
dscp dscp: Specifies a DSCP value. For IP packets, it is a DS value.
reflect acl-number: Specifies a reflexive attribute group by its number, in the range
3000 to 3999.
timeout time: Timeout time, in the range of 60 to 2,147,483, in seconds.
precedence: Optional. Only the setting of precedence configuration of the ACL rule will
be deleted.
tos tos: Optional. Only related tos setting corresponding to the ACL rule will be deleted.
time-range time-name: Optional, specifies that the ACL is valid in this time range.
logging: Optional. Only the setting corresponding to the logging part of the ACL rule
will be deleted.
fragment: Optional. Only the setting corresponding to the validity of non-first packets
fragmentation of the ACL rule will be deleted. A matching rule specified without this
keyword cannot match fragments.
vpn-instance: Optional parameter. If it has been specified, the deletion operation will
delete only the settings involved the vpn-instance in the specified ACL rule.
type-code: Type of the Data frame, a 16-bit hexadecimal number corresponds to the
type-code field in Ethernet_II and Ethernet_SNAP frames.
type-mask: A 16-bit hexadecimal number used for specifying the mask bits.
lsap-code: Encapsulation format of data frames, a 16-bit hexadecimal number.
lsap-mask: LSAP mask, a 16-bit hexadecimal number used to specify mask bits.
sour-addr: Source MAC address in the format of xxxx-xxxx-xxxx, used to match the
source address of a packet.
3-7
Comware V3 Commands
sour-mask: Source MAC address mask.

dest-addr: Destination MAC address in the format of xxxx-xxxx-xxxx, Used to match
the destination address of a packet.
dest-mask: Destination MAC address mask.
Description
Use the rule command to add a rule in current ACL view.

Use the undo rule command to delete a rule.
When an interface-based ACL rule is added, if the interface information of the packet is
specified, it must not be the L2 Ethernet port information.
The rule ID is needed when you try to delete a rule. If you do not know the ID, using the
display acl command to find it out.
Example
# Create ACL 3001 and add a rule to deny RIP packets.

[H3C-acl-adv-3001] rule deny udp destination-port eq rip
# Add a rule to permit hosts in the network segment 129.9.0.0 to send WWW packet to
hosts in the network segment 202.38.160.0.
[H3C-acl-adv-3001] rule permit tcp source 129.9.0.0 0.0.255.255 destination
202.38.160.0 0.0.0.255 destination-port eq www
# Add a rule to deny the WWW access (80) from the host in network segment 129.9.0.0
to the host in network segment 202.38.160.0, and log events that violate the rule.
[H3C-acl-adv-3001] rule deny tcp source 129.9.0.0 0.0.255.255 destination
202.38.160. 0 0.0.0.255 eq www logging
# Add a rule to permit the WWW access (80) from the host in network segment
129.9.8.0 to the host in network segment 202.38.160.0.
202.38.160.0 0.0.0.255 destination-port eq www
# Add a rule to prohibit all hosts from establishing Telnet (23) connection to the host
with the IP address 202.38.160.1.
[H3C-acl-adv-3001] rule deny tcp destination 202.38.160.1 0 destination-port
eq telnet
# Add a rule to prohibit create UDP connections with port number greater than 128 from
the hosts in network segment 129.9.8.0 to the hosts in network segment 202.38.160.0
[H3C-acl-adv-3001] rule deny udp source 129.9.8.0 0.0.0.255 destination
202.38.160.0 0.0.0.255 destination-port gt 128
# Add a rule, denying the packets carrying the source address 1.1.1.1 from VPN vrf1.
3-8
Comware V3 Commands
[H3C-acl-adv-3001] rule deny ip source 1.1.1.1 vpn-instance vrf1
# Configure the reflexive attribute under ACL3001.

[H3C-acl-adv-3001]rule permit tcp reflect 3001 timeout 301
3.2 Time-range Configuration Commands

3.2.1 display time-range
Syntax
display time-range { all | time-name }
View
Any view
Parameter
time-name: Name of the time range.

all: Displays all the configured time ranges.
Description
Use the display time-range command to view the configuration and the status of time
range. For the active time range at present, it displays "active" and for the inactive time
range, it displays "inactive".
Since there is a time deviation when the system updates acl status, which is about 1
minute, but display time-range will display the information of time range at the current
time exactly. Thus, the following case may happen: use the command display
time-range to find that a time range is activated but the acl that should be active in the
time range is inactive. This case is normal.
Example
# Display all time ranges.

[H3C] display time-range all
# Display the time range named trname.

[H3C] display time-range trname
Current time is 02:49:36 2/15/2006 Saturday
Time-range : trname ( Inactive )
14:00 to 16:00 off-day from 00:00 12/1/2004 to 00:00 12/1/2005
3-9
Comware V3 Commands
3.2.2 time-range
Syntax
time-range time-name { start-time to end-time days-of-the-week [ from start-time

start-date ] [ to end-time end-date ] | from start-time start-date [ to end-time end-date ]
| to end-time end-date }time-range time-name [ start-time to end-time ] [ days ] [ from
time1 date1 ] [ to time2 date2 ]
undo time-range time-name { start-time to end-time days-of-the-week [ from
start-time start-date ] [ to end-time end-date ] | from start-time start-date [ to end-time
end-date ] | to end-time end-date }
View
System view
Parameter
time-name: Name of time range.

start-time: Start time of a time range, in the format of HH:MM.
end-time: End time of a time range, in the format of HH:MM.
days-of-the-week: Indicates on which day of a week the time range is valid or from
which day in a week the time range is valid. It is represented by numbers 0 through 6,
respectively for Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday,
and Sunday.
z Working-day includes Monday through Friday;
z Off-day includes Saturday and Sunday;
z Daily includes the seven days of a week.
from start-time start-date: Optional, which is used to indicate the start time and date.
The input format of time is hh:mm, which is shown in 24-hour notation. The range of hh
is from 0 to 23 and the range of mm is from 0 to 59. The input format of date is
MM/DD/YYYY. DD can be in the value range from 1 to 31. MM is one number in the
range form 1 to 12 and YYYY is one number in the range from 1970 to 2100. If no start
time is set, it means that there is no restriction on start time and only the end time
should be considered.
to end-time end-date: Optional. It is used to indicate the end time and date. In addition,
the input format of time and date is the same with that of the start time. The end time
must be greater than the start time. If the end time is not set, it will be the maximum time
that the system can set.
Description
Use the time-range command to specify a time range.

Use the undo time-range command to delete a time range.
3-10
Comware V3 Commands
A time range can be one of the following types:

z Absolute time range created using the time-range time-name [ from time1 date1 ]
[ to time2 date2 ] command. For example, you can use the time-range test from
20:00 04/01/2004 to 20:00 12/10/2004 command in system view to create an
absolute time range spanning from April 1, 2004 20:00 to December 10, 2004
20:00.
z Periodic time range created using the time-range time-name [ start-time to
end-time ] [ days ] command. For example, you can create a periodic time range
spanning from 12:00 to 17:00 on a daily basis.
z Periodic time range effective within an absolute time range, created by the
time-range time-name [ start-time to end-time ] [ days ] [ from time1 date1 ] [ to
time2 date2 ] command. For example, you can use the time-range test 14:00 to
16:00 off-day from 20:00 04/01/2004 to 20:00 12/10/2004 command in system
view to create a time range spanning from 14:00 to 16:00 and effective on off-days
between April 1, 2004 20:00 and December 10, 2004 20:00.
z Combined time range formed by multiple time range segments. If no periodic time
range segment is included, the combined time range is the union of all the
absolute time range segments. If periodic time range segments are included, the
combined time range is the intersection of the absolute time range segment union
and the periodic time range segment union.
To display the configured time range, use the display time-range command.
Example
# Configure the time range valid at 0:0 on Jan. 1, 2004, always valid.
[H3C] time-range test from 0:0 1/1/2004
# Configure the time range valid between 14:00 and 16:00 in every weekend from
20:00 on Apr.01, 2004 to 20:00 on Dec.10, 2004.
[H3C] time test 14:00 to 16:00 off-day from 20:00 04/01/2004 to 20:00 12/10/2004
# Configure the time range valid between 8:00 and 18:00 in each working day.
[H3C] time-range test 8:00 to 18:00 working-day
# Configure the time range valid between 14:00 and 18:00 in each weekend day.
[H3C] time-range test 14:00 to 18:00 off-day
3-11
Comware V3 Chapter 4 Firewall Configuration Commands
Chapter 4 Firewall Configuration Commands
4.1 Packet Filtering Firewall Configuration Commands

4.1.1 debugging firewall
Syntax
debugging firewall { all | eff | icmp | packet { permitted | denied } | tcp | udp |
fragments-inspect | others } [ interface type number ]
undo debugging firewall { all | eff | icmp | packet { permitted | denied } | tcp | udp |
fragments-inspect | others } [ interface type number ]
View
User view
Parameter
all: Debugging information of all the packets.

eff: Ethernet frame filtering debugging.
icmp: ICMP packet filtering debugging.
packet: Packet filtering debugging. You can specify the permitted or denied keyword
to display the debugging information about the permitted or denied packets.
tcp: TCP packet filtering debugging.
udp: UDP packet filtering debugging.
fragments-inspect: Fragment debugging.
others: Debugging of all the packets except ICMP, TCP and UDP.
interface type number: Debugging information of the corresponding packets passing
the interface. The debugging information of all the interfaces will be displayed if this
parameter is not configured.
Description
Use the debugging firewall command to enable the information debugging of the
firewall packet filtering.
Use the undo debugging firewall command to disable the information debugging of
the firewall packet filtering.
By default, all the information debugging of the firewall is disabled.
Related command: display debugging.
4-1
Example
# Enable the debugging information about UDP packet filtering.

<H3C> debugging firewall udp
4.1.2 display firewall-statistics
Syntax
display firewall-statistics { all | interface type number | fragments-inspect }
View
Any view
Parameter
all: Displays the filtering packet statistics of all the interfaces.

fragments-inspect: Displays the fragment inspection information.
Description
Use the display firewall-statistics command to view the firewall statistics.

Related command: firewall fragments-inspect.
Example
# Display the information of fragment inspection.

<H3C> display firewall-statistics fragments-inspect
Fragments inspection is enabled.
The high-watermark for clamping is 10000.
The low-watermark for clamping is 1000.
Current records for fragments inspection is 0.
4.1.3 firewall default
Syntax
firewall default { permit | deny }
View
System view
Parameter
permit: Default filter rule is permitting packets to pass.

deny: Default filter rule is denying packets to pass.
4-2
Description
Use the firewall default command to configure the default filtering rule of the firewall,
whether to be “permit” or “deny”.
By default, the system permits packets.
Example
# Set the default filtering rule of the firewall to “deny”.

[H3C] firewall default deny
4.1.4 firewall enable
Syntax
firewall enable
undo firewall enable
View
System view
Parameter
None
Description
Use the firewall enable command to enable the firewall.

Use the undo firewall enable command to disable the firewall.
If the firewall enable command is not executed to enable the firewall function, the
packet filter function cannot take effect even if it is configured on the interface.
By default, the firewall is disabled.
Example
# Enables the firewall

[H3C] firewall enable
4.1.5 firewall fragments-inspect
Syntax
firewall fragments-inspect
undo firewall fragments-inspect
View
System view
4-3
Parameter
none
Description
Use the firewall fragments-inspect command to enable fragment inspection switch.

Use the undo firewall fragments-inspect command to disable fragment inspection
switch.
By default, fragment inspection switch is disabled.
This command is the premise of realizing exact match. Only after fragment inspection
switch is enabled, can fragment exact match be implemented. Packet filtering firewall
will record the status of a fragment, and perform the exact matching to advanced ACL
rules according to the information beyond the layer 3 (IP layer).
Packet filtering firewall will consume some system resources for recording the fragment
status. If the exact match mode is not used, you are recommended to disable this
function so as to improve the running efficiency of system and reduce the system cost.
Only when the fragment packet inspection is enabled, can the exact match really take
effect.
Related command: display firewall fragments-inspect and firewall packet-filter.
Example
# Enable the fragment inspection switches

[H3C] firewall fragments-inspect
4.1.6 firewall fragments-inspect { high | low }
Syntax
firewall fragments-inspect { high | low } { default | number }

undo firewall fragments-inspect { high | low }
View
System view
Parameter
high number: Specifies the high threshold of the fragment status records. It is in the
range from 100 to 10000.
low number: Specifies the low threshold of the fragment status records. It is in the
range from 100 to 10000.
4-4
default: Default number of fragment status records. The default high threshold of the
fragment status records is 2000 and the default low threshold of the fragment status
records is 1500.
Description
Use the firewall fragments-inspect { high | low } command to configure the high and
low thresholds of records for fragment inspection.
Use the undo firewall fragments-inspect { high | low } command to restore the
default high and low thresholds.
If fragment inspection switch is enabled and exact match filtering is applied, the
executing efficiency of the packet filtering will be slightly reduced. As the number of
matching entries increases, efficiency is reduced. Therefore, the (high and low)
thresholds should be set. When the number of fragment status records reaches the
high threshold, those status entries first reserved will be deleted until the number of
records is below the low threshold.
The low threshold must be no greater than the high threshold.
Related command: display firewall-statistics fragments-inspect and firewall
packet-filter.
Example
# Configure the high threshold for fragment packet inspection to 3000 and configure the
low threshold to the default value.
[H3C] firewall fragments-inspect high 3000
[H3C] firewall fragments-inspect low default
4.1.7 firewall packet-filter
Syntax
firewall packet-filter acl-number { inbound | outbound } [ match-fragments

{ normally | exactly } ]
undo firewall packet-filter acl-number { inbound | outbound }
View
Interface view
Parameter
acl-number: Serial number of access control list rule.

inbound: Filters the packet received from the interface.
outbound: Filters the packet forwarded from the interface.
4-5
match-fragments: Specify the matching mode of fragments. This parameter can only
be applied to advanced ACLs.
normally: Normal matching mode, the default mode.
exactly: Exact matching mode.
Description
Use the firewall packet-filter command to apply the access control list to the
corresponding interface.
Use the undo firewall packet-filter command to delete the corresponding setting.
Interface-based ACL (namely ACL rule with sequence number from 1000 to 1999) can
only use the parameter outbound.
Packet-filtering on Comware platform can filter fragment packets, which matches and
filters all fragment packets on layer 3 (IP layer) by source IP address, destination IP
address etc. It also provides standard matching and exact matching for advanced ACL
rules that contain extended information such as TCP/UDP port number and type of
ICMP.
The standard matching matches layer 3 information and special information such as
time range and vpn-instance, and neglects layer 4 Information. The exact matching
matches packets according to all filtering rules of an advanced ACL, including layer 3
and layer 4 information, time range, and vpn-instance. If an advanced ACL includes
layer 4 filtering rules but the interface employs the default standard matching mode, the
layer 4 filtering rules do not take effect.
For the layer 4 matching rules in an advanced ACL to take effect, you must first
configure the firewall fragments-inspect command on the firewall to enable fragment
inspection, making the firewall record the layer 4 information in the first fragment of a
packet to obtain complete matching information about the non-first-fragments. In
addition, you must configure the interface to filter fragments by exactly matching all the
rules in the ACL.
If the firewall enable command is not executed to enable the firewall function, the
packet filter function cannot take effect even if it is configured on the interface.
Related command: acl, display acl, and firewall fragments-inspect.
Example
# Apply ACL 1001 to the Serial1/0/0 interface to filter the packets forwarded by the
interface.
[H3C-Serial1/0/0] firewall packet-filter 1001 outbound
4-6
4.1.8 reset firewall-statistics
Syntax
reset firewall-statistics { all | interface type number }
View
User view
Parameter
all: Clears the filtering packet statistics of all the interfaces.

interface: Clears the filtering packet statistics of a certain interface.
type number: Specifies an interface by its type and number.
Description
Use the reset firewall-statistics command to clear the firewall statistics.
Example
# Clear filtering packet statistics of the interface E3/1/0.

<H3C> reset firewall-statistics interface e3/1/0
4.2 ASPF Configuration Commands

4.2.1 aging-time
Syntax
aging-time { syn | fin | tcp | udp } seconds

undo aging-time { syn | fin | tcp | udp }
View
ASPF policy view
Parameter
seconds: The default timeout time of SYN, FIN, TCP and UDP is 30s, 5s, 3600s and
30s respectively.
Description
Use the aging-time command to configure SYN status waiting timeout value and FIN
status waiting timeout value of TCP, session entry idle timeout value of TCP and UDP.
Use the undo aging-time command to restore the default value.
Before the aging-time expires, the system will retain the connections and the sessions
that have been set up.
4-7
Related command: display aspf all, display aspf policy, display aspf session and
display aspf interface.
Example
# Configure SYN status waiting timeout value of TCP as 20 seconds.

[H3C-aspf-policy-1] aging-time syn 20
# Configure FIN status waiting timeout value of FIN as 10 seconds.

[H3C-aspf-policy-1] aging-time fin 10
# Configure TCP idle timeout value as 3000 seconds.

[H3C-aspf-policy-1] aging-time tcp 3000
# Configure UDP idle timeout value as 110 seconds.

[H3C-aspf-policy-1] aging-time udp 110
4.2.2 aspf-policy
Syntax
aspf-policy aspf-policy-number
undo aspf-policy aspf-policy-number
View
System view
Parameter
aspf-policy-number: ASPF policy number, ranging from 1 to 99.
Description
Use the aspf-policy command to define an ASPF policy. For a defined policy, the policy
can be invoked through its policy number.
Example
# Define an ASPF policy and enter ASPF view.

[H3C] aspf-policy 1
[H3C-aspf-policy-1]
4.2.3 debugging aspf
Syntax
debugging aspf { all | verbose | events | ftp | h323 | http | rtsp | session | smtp | tcp
| timers | udp }
4-8
undo debugging aspf { all | verbose | events | ftp | h323 | http | rtsp | session |
smtp | tcp | timers | udp }
View
User view
Parameter
all: All ASPF debugging switch.

verbose: Detailed debugging switch.
events: Event debugging switch.
ftp: Debugging switch for FTP detect information .
h323: Debugging switch for H.323 information detection.
http: Debugging switch for HTTP information detection.
rtsp: Debugging switch for RTSP information detection.
session: Debugging switch for Session information .
smtp: Debugging switch for SMTP information detection.
tcp : Debugging switch for TCP information detection.
timers: Debugging switch for Timer information .
udp: Debugging switch for UDP information detection.
Description
Use the debugging aspf command to enable ASPF debugging function.

Use the undo debugging aspf command to disable ASPF debugging function.
By default, ASPF debugging function is disabled.
Example
# Open all the switches of debugging aspf

<H3C> debugging aspf all
4.2.4 detect
Syntax
detect protocol [ java-blocking acl-number ] [ aging-time seconds ]

undo detect protocol
4-9
View
ASPF policy view
Parameter
protocol: Name of the protocol supported by ASPF. It can be an application layer

protocol of ftp, http, h323, smtp, or rtsp, or a transport layer protocol of tcp or udp.
seconds: Configures the idle timeout time of the protocol, ranging from 5 to 43200
seconds. The default TCP-based timeout time is 3600 seconds, and the default
UDP-based timeout time is 30 seconds.
java-blocking: Configures to block the Java Applets to specified network segment
packets, valid only when the protocol is HTTP.
acl-number: Basic ACL number, ranging from 2000 to 2999.
Description
Use the detect command to specify ASPF policy for application layer protocols.
Use the undo detect command to cancel the configuration.
When the protocol is HTTP, Java blocking is permitted.
If both application layer protocol specific detection and generic TCP/UDP-based
detection are configured, the former has priority.
ASPF uses the timeout mechanism to manage session state information of protocols
so that it can decide when to stop managing the state information of a session or delete
a session that cannot be set up normally. The timeout time setting is a global setting
applicable to all sessions; it can protect system resources against malicious
occupation.
Example
# Configure to specify an ASPF policy for HTTP protocol with policy number 1. At the
same time, permit Java blocking and set ACL2000 to make ASPF able to filter Java
Applets from destination server 10.1.1.1.
[H3C-acl-basic-2000] rule permit any
[H3C] aspf-policy 1
[H3C-aspf-policy-1] detect http java-blocking 2000
4-10
4.2.5 display aspf all
Syntax
display aspf all
View
Any view
Parameter
None
Description
Use the display aspf all command to view the information of all ASPF policies and
sessions.
Example
# View the information of ASPF policy and session.

[H3C] display aspf all
[ASPF Policy 1]
Session audit trail: disabled
tcp synwait-time: 30 sec
tcp finwait-time: 5 sec
tcp idle-time: 3600 sec
udp idle-time: 30 sec
h323 timeout: 3600
tcp timeout: 33
[Interface Configuration]
Inbound ASPF policy: none
Outbound ASPF policy: 1
Table 4-1 ASPF configuration information
Item Description
Session audit trail: disabled The session logging function is disabled.
TCP connected SYN status timeout value is 30
tcp syn wait-time
seconds.
TCP connection FIN status timeout value is 5
tcp finnwait-time
seconds.
Timeout for the idle-time of TCP session is 3600
tcp idle-time
seconds.
4-11
Item Description
Timeout for the idle-time of UDP session is 30
udp idle-time
seconds.
Detect the HTTP traffic and filter the Java Applets
from some particular sites by using ACL 1. The HTTP
http java-list 1 timeout
timeout time is set to 3000 seconds. “h323 timeout”
indicates the timeout time of the h323 session entry.
The policy inspects h323 traffic. The timeout time of
h323 timeout
h323 is 3600 seconds.
The policy inspects tcp traffic. The timeout time of tcp
tcp timeout
is 33 seconds.
Inbound ASPF policy ASPF policy in the inbound direction of the interface
outbound ASPF policy ASPF policy in the outbound direction of the interface
4.2.6 display aspf interface
Syntax
display aspf interface
View
Any view
Parameter
None
Description
Use the display aspf interface command to view the interface configuration of the
inspection policy.
Example
# View the interface configuration of the inspection policy.

<H3C> display aspf interface
[Interface Configuration]
Inbound ASPF policy: none
Outbound ASPF policy: 1
4-12
Table 4-2 ASPF interface configuration information
Item Description
Inbound ASPF policy ASPF policy in the inbound direction of the interface
outbound ASPF policy ASPF policy in the outbound direction of the interface
4.2.7 display aspf policy
Syntax
display aspf policy aspf-policy-number
View
Any view
Parameter
aspf-policy-number: ASPF policy number, ranging from 1 to 99.
Description
Use the display aspf policy command to view the configuration of a specific inspection
policy.
Example
# Display the configuration information of the inspection policy with policy number of 1.
[H3C] display aspf policy 1
[ASPF Policy 1]
Session audit trail: disabled
tcp synwait-time: 30 sec
tcp finwait-time: 5 sec
tcp idle-time: 3600 sec
udp idle-time: 30 sec
h323 timeout: 3600
tcp timeout: 33
4.2.8 display aspf session
Syntax
display aspf session [ verbose ]
View
Any view
4-13
Parameter
verbose: Displays the detailed information of the sessions.
Description
Use the display aspf session command to view the information of the ASPF sessions.
Example
# Display information on current ASPF sessions.

[H3C] display aspf session
[Established Sessions]
Session Initiator Responder Application Status
212BA84 169.254.1.121:1427 169.254.1.52:0 ftp-data TCP_DOWN
2B738C4 169.254.1.121:1426 169.254.1.52:21 ftp FTP_CONXN_UP
# Display detailed information of current ASPF sessions.

[H3C] display aspf session verbose
[ Established Sessions ]
[ Session 0xC7E2B4 ]
(192.168.0.1:2125)=>(13.1.0.5:2093) h245-media-control H245_OPEN
SessNum: 229, TransProt: 6,
AppProt: 21
Prev: 0x0, Next: 0x0,
Child: 0xCA9EA4,
Parent: 0x0
SynNode: 0x0, FinNode: 0x0
Interface: Ethernet1/0/0,
Direction: outbound
Bytes/Packets sent (initiator:responder) [1339/15 : 1309/12]
Tcp SeqNum/AckNum [352115193/62885460 : 62885456/352115193]
Timeout 00:02:00(120),
Table 4-3 Information of current ASPF sessions
Item Description
Transport layer protocol is numbered 6, which means
TransProt: 6
that TCP is used.
Application layer protocol uses port 21, which means
AppProt: 21
that the sessions are FTP sessions
Interface: Ethernet1/0/0 ASPF policy is applied in outbound direction of the
Direction: outbound interface Ethernet1/0/0
Bytes/Packets transmitted between the originating

Bytes/Packets sent
and responding sides of the connection
4-14
Item Description
Timeout 00:02:00(120) Timeout time set for the protocol is 120 seconds
4.2.9 display port-mapping
Syntax
display port-mapping [ application-name | port port-number ]
View
Any view
Parameter
application-name: Specifies the name of application for PAM. Optional applications

include ftp, http, h323, smtp and rtsp.
port-number: Port number in the range from 0 to 65535.
Description
Use the display port-mapping command to view PAM information.

Related command: port-mapping.
Example
# Display all PAM information.

[H3C] display port-mapping
4.2.10 firewall aspf
Syntax
firewall aspf aspf-policy-number { inbound | outbound }

undo firewall aspf aspf-policy-number { inbound | outbound }
View
Interface view
Parameter
aspf-policy-number: ASPF policy number used on the interface.

inbound: Applies ASPF policy in inbound direction of the interface.
outbound: Applies ASPF policy in outbound direction of the interface.
4-15
Description
Use the firewall aspf command to apply ASPF policy in specified direction to an
interface.
Use the undo firewall aspf command to delete the applied ASPF policy on the
interface.
There are two concepts in ASPF: inbound interface and outbound interface. If the
router connects with both intranet and internet, and uses ASPF to protect the servers of
intranet, the router interface connected with intranet is regarded as inbound interface
and that connected with internet is regarded as outbound interface.
When ASPF is applied on outbound interface, ASPF will refuse the access of intranet
from internet users, but the returning packets of intranet users accessing internet can
pass the detection of ASPF.
Example
# Configure ASPF firewall function in outbound direction of the interface ethernet1/0/0.

[H3C-Ethernet1/0/0] firewall aspf 1 outbound
4.2.11 log enable
Syntax
log enable
undo log enable
View
ASPF policy view
Description
Use the log enable command to enable ASPF session logging function.
Use the undo log enable command to disable logging function.
By default, session logging function is disabled.
ASPF provides enhanced session logging function, which can log all connections,
including connection time, source address, destination address, port in use and
transmitted bytes number.
Related command: display aspf all, display aspf policy, display aspf session,
Example
# Enable ASPF session logging function.

[H3C-aspf-policy-1] log enable
4-16
4.2.12 port-mapping
Syntax
port-mapping application-name port port-number [ acl acl-number ]

undo port-mapping [ application-name port port-number [ acl acl-number ] ]
View
System view
Parameter
application-name: Specifies the name of the application for PAM. Optional applications
include ftp, http, h323, smtp and rtsp.
port-number: Port number, ranging from 0 to 65535.
acl-number: Number of basic ACL, which is in the range from 2000 to 2999.
Description
Use the port-mapping command to establish a mapping from the port to application
layer protocol.
Use the undo port-mapping command to delete the PAM ingress defined by the user.
PAM supports two mapping mechanisms: general port mapping and host port mapping
based on basic ACL. The former is to establish the mapping relation between a
user-defined port number and an application protocol. For example, mapping the port
8080 to the HTTP will make all the TCP packets destined to 8080 be regarded as HTTP
packets. The latter is to map the self-defined port number to the application protocol for
the packets from some specific hosts. For example, you can map the TCP packets
using the port 8080, which destine to the hosts residing on the segment 1.1.0.0 to be
the HTTP packets. The range of hosts will be specified by the basic ACL.
Related command: display port-mapping.
Example
# Map port 3456 to FTP service, with this configuration, all the data flows destined to
port 3456 will be regarded as FTP data flows.
[H3C] port-mapping ftp port 3456
4-17
Comware V3 Chapter 5 WEB Filtering Configuration Commands
Chapter 5 WEB Filtering Configuration Commands
5.1 WEB Filtering Configuration Commands

5.1.1 debugging web url-filter host
Syntax
debugging web url-filter host { all | filter | packet | event | error }

undo debugging web url-filter host { all | filter | packet | event | error }
View
User view
Parameter
all: All debugging functions.

filter: Filtering packet debugging.
Description
Use the debugging web url-filter host command to enable URL address filtering
debugging.
Use the undo debugging web url-filter host command to disable URL address
filtering debugging.
Example
# Enable all debugging functions for URL address filtering.

<H3C> debugging web url-filter host all
5.1.2 debugging web url-filter parameter
Syntax
debugging web url-filter parameter { all | error | event | filter | packet }

undo debugging web url-filter parameter { all | error | event | filter | packet }
View
User view
5-1
Parameter

Description
Use the debugging web url-filter parameter command to enable URL paramater
filtering debugging.
Use the undo debugging web url-filter parameter command to disable URL
paramater filtering debugging.
Example
# Enable error debugging for URL parameter filtering.

<H3C> debugging web url-filter parameter error
5.1.3 debugging web java-blocking
Syntax
debugging web java-blocking { all | error | event | filter | packet }

undo debugging web java-blocking { all | error | event | filter | packet }
View
User view
Parameter

Description
Use the debugging web java-blocking command to enable Java blocking debugging.
Use the undo debugging web java-blocking command to disable Java blocking
debugging.
5-2
Example
# Enable all debugging functions for Java blocking.

<H3C> debugging web java-blocking all
5.1.4 display web url-filter host
Syntax
display web url-filter host { enable | all | item url-address | item-all }
View
Any view
Parameter
enable: Displays the status of URL address filtering (enabled/disabled).

all: Displays all information about URL address filtering.
item url-address: Displays statistics of specific address filtering entries.
Item-all: Displays statistics of all address filtering entries.
Description
Use the display web url-filter host command to display information about URL
address filtering.
Example
# Display information about URL address filtering.

<H3C> display web url-filter host all
URL-filter is enable.
Default method : permit.
URL-filter has loaded file "flash:/urlfilter" , there are 1 item(s) in filter
now.
There are 0 packet(s) be filtered.
There are 0 packet(s) passed.
5.1.5 display web url-filter parameter
Syntax
display web url-filter parameter { enable | all | item keywords | item-all }
View
Any view
5-3
Parameter
enable: Displays the status of SQL injection attack protection (enabled/disabled).

all: Displays all filtering information about SQL injection attack protection.
item keywords: Displays statistics of specific filtering keyword entries.
Item-all: Displays statistics of all filtering keyword entries.
Description
Use the display web url-filter parameter command to display the filtering information
about SQL injection attack protection.
Example
# Display statistics of all filtering keyword entries.

<H3C> display web url-filter parameter item-all
SN Match-Times KeyWorks
----------------------------------------------
1 0 %27
2 0 êxec$
3 0 '
4 0 --
5 0 ^drop$
6 0 ^delete$
7 0 ûpdate$
8 0 însert$
9 0 ^select$
10 0 qqqqq
11 0 qqqq
12 0 qq
13 0 qqq
5.1.6 display web java-blocking
Syntax
display web java-blocking { enable | all | extension keywords | extension-all }
View
Any view
Parameter
enable: Displays the status of Java blocking (enabled/disabled).

all: Displays all information about Java blocking.
5-4
extension keywords: Displays statistics of specific Java blocking keywords.

extension-all: Displays statistics of all Java blocking keywords.
Description
Use the display web java-blocking command to display the information about Java
blocking.
Example
# Display the information about Java blocking based on the keyword of ”class”.
<H3C> display web java-blocking extension class
The java request packet including: ".class" had been filtered for 0 times.
5.1.7 web url-filter host acl-number
Syntax
web url-filter host acl-number number

undo web url-filter host acl-number
View
System view
Parameter
number: ACL number, in the range 3000 to 3999.
Description
Use the web url-filter host acl-number command to configure the firewall to filter the
Web requests whose destination URL address is an IP address by using an ACL. This
command is effective only after IP address support in URL address filtering is enabled.
Only one ACL rule can be referenced when this command is executed, and the new
settings will replace the old settings.
Use the undo web url-filter host acl-number command to delete the configured rule.
By default, no filtering rule is configured.
Example
# Configure an ACL rule 3001, so that only those Web requests whose destination IP
addresses are on the subnet 200.1.1.0/24 are allowed to pass.
<H3C> system-view
[H3C-acl-adv-3001] rule 0 permit ip destination 200.1.1.0 0.0.0.255
[H3C-acl-adv-3001] rule 1 deny ip
5-5
[H3C] web url-filter host acl-number 3001
5.1.8 web url-filter host add
Syntax
web url-filter host add { permit | deny } url-address [ priority priority-number ]
View
System view
Parameter
permit: The operation is permit.

deny: The operation is deny.
url-address: URL filtering address to be added. It supports the wildcards ^, $, &, and *.
Table 5-1 Description on the wildcards
Wildcard Description
Match at the beginning.
^ It appears only at the beginning of the filtering keyword, and only
once.
Match at the end.
$
It appears only at the end of the filtering keyword, and only once.
Replace a character.
& It can appear several times, or in a successive manner. It can
appear at any position in the filtering keyword.
Replace any character.
It appears only once at the beginning or in the middle of the filtering
*
keyword.
It must not be adjacent to ^ and &.
If “^” and “$” appear respectively at the beginning and the end of the keyword, exact
match applies. If no wildcard appears at the beginning and the end, fuzzy match
applies. For example, if the keyword is “^huawei”, the URL addresses starting with
“huawei" (e.g. huawei.com.cn) or addresses similar to “cmm.huawei-3com.com” will be
filtered out, but addresses similar to “www.bj-huawei.com” will not be filtered out. If the
keyword is “^huawei$”, only URL addresses containing “huawei" (e.g.
www.huawei.com) will be filtered out, and addresses similar to
“www.huawei-3com.com” will not be filtered out. If fuzzy match applies, any address
containing the keyword will be filtered out.
The wildcard “&” cannot replace “ . ” during URL address filtering.
5-6
The wildcard “*” cannot replace “.”, such as “huawei*.com”, it must be in the form of
“*.com” or “*.huawei.com” when it is present at the beginning.
priority priority-number: Configures the priority, in the range 0 to 1999. The smaller the
number, the higher the priority.
Description
Use the web url-filter host add command to add a URL address to be filtered, and set
the filtering operation.
Example
# Add a filtering entry that allows the address www.huawei-3com.com to pass.

<H3C> system-view
[H3C] web url-filter host add permit www.huawei-3com.com
Add host name successfully.
5.1.9 web url-filter host delete-all
Syntax
web url-filter host delete-all
View
System view
Parameter
None
Description
Use the web url-filter host delete-all command to delete all URL address filtering
entries.
Example
# Delete all URL address filtering entries.

<H3C> system-view
[H3C] web url-filter host delete-all
Delete all host names in filter successfully.
5.1.10 web url-filter host default
Syntax
web url-filter host default { permit | deny }
5-7
View
System view
Parameter
permit: The default filtering operation is permit.

deny: The default filtering operation is deny.
Description
Use the web url-filter host default command to permit or deny packets that do not
match the URL addresses configured by the administrator.
By default, the unmatched packet is permitted.
Example
# Set the default filtering operation to permit.

<H3C> system-view
[H3C] web url-filter host default permit
5.1.11 web url-filter host delete
Syntax
web url-filter host delete url-address
View
System view
Parameter
url-address: URL filtering address to be deleted.
Description
Use the web url-filter host delete command to delete a URL address filtering entry
previously added.
Example
# Delete the filtering entry with the URL address of ”www.huawei-3com.com”.

<H3C> system-view
[H3C] web url-filter host delete www.huawei-3com.com
Delete host name successfully.
5-8
5.1.12 web url-filter host enable
Syntax
web url-filter host enable

undo web url-filter host enable
View
System view
Parameter
None
Description
Use the web url-filter host enable command to enable URL address filtering.
Use the undo web url-filter host enable command to disable URL address filtering.
By default, the URL address filtering function is disabled.
An ASPF policy must be configured before the URL address filtering function can be
enabled.
Example
# Enable URL address filtering.

<H3C> system-view
[H3C] web url-filter host enable
5.1.13 web url-filter host ip-address
Syntax
web url-filter host ip-address { permit | deny }
View
System view
Parameter
permit: Permits any Web request whose destination URL address is an IP address.
deny: Denies any Web request whose destination URL address is an IP address.
Description
Use the web url-filter host ip-address command to configure whether to permit a
Web request whose destination URL address is an IP address to pass.
By default, the filter action is deny.
5-9
Example
# Configure to permit any Web request whose destination URL address is an IP

address to pass.
<H3C> system-view
[H3C] web url-filter host ip-address permit
5.1.14 web url-filter host save-file
Syntax
web url-filter host save-file file-name
View
System view
Parameter
file-name: Name of the filter file to be saved.
Description
Use the web url-filter host save-file command to save a URL address filter file.
Example
# Save the URL address filter file named ”urlfilter”.

<H3C> system-view
[H3C] web url-filter host save-file urlfilter
5.1.15 web url-filter host load-file
Syntax
web url-filter host load-file file-name

undo web url-filter host load-file
View
System view
Parameter
file-name: Name of the filter file to be loaded.
Description
Use the web url-filter host load-file command to load a URL address filter file.
Use the undo web url-filter host load-file command to unload the previously loaded
URL address filter file.
5-10
To validate the entries in a URL address filter file and filter addresses, a URL address
filter file must be loaded first.
Example
# Load the URL address filter file named ”urlfilter”.

<H3C> system-view
[H3C] web url-filter host load-file urlfilter
5.1.16 web url-filter parameter add
Syntax
web url-filter parameter add keywords

undo web url-filter parameter add keywords
View
System view
Parameter
keywords: URL parameter keyword to be filtered.
Description
Use the web url-filter parameter add command to add a keyword for URL parameter
filtering. The keyword supports the wildcards ^, $, & and *. For the description of
wildcards, see Table 5-1.
Example
# Assume a user-defined storage process named ”sp_additem” exists in the database.

Prohibit the access to this storage process by blocking HTTP commands containing
this storage process name.
<H3C> system-view
[H3C] web url-filter parameter add sp_additem
Add the key successfully.
5.1.17 web url-filter parameter add-default
Syntax
web url-filter parameter add-default
View
System view
5-11
Parameter
None
Description
Use the web url-filter parameter add-default command to add default filter keywords
^select^, însert^, ûpdate^, ^delete^, ^drop^, --, ', êxec^ and %27, to facilitate the
user to input these keywords and prevent some keywords from being carelessly
deleted, or enable the user to restore the default settings quickly if the web url-filter
parameter delete-all command was improperly executed.
Example
# Add default filter keywords.

<H3C> system-view
[H3C] web url-filter parameter add-default
Success to add 9 keys!
5.1.18 web url-filter parameter delete-all
Syntax
web url-filter parameter delete-all
View
System view
Parameter
None
Description
Use the web url-filter parameter delete-all command to delete all filter keywords.
Example
# Delete all filter keywords.

<H3C> system-view
[H3C] web url-filter parameter delete-all
Delete all key words in filter successfully.
5.1.19 web url-filter parameter delete
Syntax
web url-filter parameter delete keywords
5-12
View
System view
Parameter
keywords: The filter keywords to be deleted.
Description
Use the web url-filter parameter delete command to delete a filter keyword previously
added.
Example
# Delete the filter keyword “select”.

<H3C> system-view
[H3C] web url-filter parameter delete select
Delete key word successfully.
5.1.20 web url-filter parameter enable
Syntax
web url-filter parameter enable

undo web url-filter parameter enable
View
System view
Parameter
None
Description
Use the web url-filter parameter enable command to enable URL parameter filtering.
Use the undo web url-filter parameter enable command to disable URL parameter
filtering.
An ASPF policy must be configured before the URL address filtering function can be
enabled.
Example
# Enable SQL attack protection.

<H3C> system-view
[H3C] web url-filter parameter enable
5-13
5.1.21 web url-filter parameter load-file
Syntax
web url-filter parameter load-file file-name

undo web url-filter parameter load-file
View
System view
Parameter
file-name: Name of the filter file to be loaded.
Description
Use the web url-filter parameter load-file command to load a URL parameter filter
file.
Use the undo web url-filter parameter load-file command to unload the previously
loaded URL parameter filter file.
Example
# Load the URL parameter filter file named ”sqlfilter”.

<H3C> system-view
[H3C] web url-filter parameter load-file sqlfilter
5.1.22 web url-filter parameter save-file
Syntax
web url-filter parameter save-file file-name
View
System view
Parameter
file-name: Name of the filter file to be saved.
Description
Use the web url-filter parameter save-file command to save a URL parameter filter
file.
Example
# Save the URL parameter filter file named ”sqlfilter”.

<H3C> system-view
5-14
[H3C] web url-filter parameter save-file sqlfilter
5.1.23 web java-blocking enable
Syntax
web java-blocking enable

undo web java-blocking enable
View
System view
Parameter
None
Description
Use the web java-blocking enable command to enable Java blocking.

Use the undo web java-blocking enable command to disable the function.
An ASPF policy must be configured before the Java blocking function can be enabled.
Example
# Enable Java blocking.

<H3C> system-view
[H3C] web java-blocking enable
5.1.24 web java-blocking acl-number
Syntax
web java-blocking acl-number acl-number

undo web java-blocking acl-number
View
System view
Parameter
acl-number: Basic ACL number, in the range 2000 to 2999.
Description
Use the web java-blocking acl-number command to enable ACL-based Java

blocking.
Use the undo web java-blocking acl-number command to disable the function.
5-15
Example
# Enable ACL-based Java blocking.

<H3C> system-view
[H3C] web java-blocking acl-number 2001
5.1.25 web java-blocking extension add
Syntax
web java-blocking extension add keywords
View
System view
Parameter
keywords: Extension name of Java request packets to be blocked. Any keyword must
begin with ”.”, and can contain up to 9 characters, including ”.”. A maximum of 10
extension names can be configured.
Description
Use the web java-blocking extension add command to add extension named of Java
request packets to be blocked.
Example
# Specify to block Java requests with the extension name of ”.class”.

<H3C> system-view
[H3C] web java-blocking extension add .class
5.1.26 web java-blocking extension delete
Syntax
web java-blocking extension delete keywords
View
System view
Parameter
keywords: The extension name of the Java request packet to be deleted.
Description
Use the web java-blocking extension delete command to delete a previously added
extension name of Java request packets.
5-16
Example
# Specify to delete Java request filtering entries with the extension name of ”.class”.
<H3C> system-view
[H3C] web java-blocking extension delete .class
Delete extension successfully
5.1.27 web java-blocking extension delete-all
Syntax
web java-blocking extension delete-all
View
System view
Parameter
None
Description
Use the web java-blocking extension delete-all command to delete all Java blocking
keywords previously added.
Example
# Delete all Java blocking keywords previously added.

<H3C> system-view
[H3C] web java-blocking extension delete-all
Delete all extensions successfully
5.1.28 web java-blocking extension add-default
Syntax
web java-blocking extension add-default
View
System view
Parameter
None
5-17
Description
By default, the system has two pre-defined filtering parameters: .class and .jar, which
take effect after the web java-blocking extension add-default command is
configured.
The system accepts only 10 blocking keywords. So, when the number of user-defined
blocking keywords exceeds 8, all the default keywords cannot be added after the
command is executed.
You can also execute the web java-blocking extension add keywords command to
add deault keywords.
Example
# Add system default Java blocking keywords after nine keywords have been defined.
<H3C> system-view
[H3C]dis web java-blocking extension-all
SN Match-Times Extension
---------------------------
0 0 .aaa
1 0 .bbb
2 0 .ccc
3 0 .ddd
4 0 .eee
5 0 .fff
6 0 .ggg
7 0 .hhh
8 0 .iii
[H3C]web java-blocking extension add-default
add .class successfully
Exceed the maximal number of java blocking extensions ,can’t add .jar
Success to add 1 default extensions!
5.1.29 web java-blocking extension save-file
Syntax
web java-blocking extension save-file file-name
View
System view
Parameter
file-name: Name of the Java blocking filter file to be saved.
5-18
Description
Use the web java-blocking extension save-file command save a Java blocking filter
file.
Example
# Save the Java blocking filter file named ”javablk”.

<H3C> system-view
[H3C] web java-blocking extension save-file javablk
5.1.30 web java-blocking extension load-file
Syntax
web java-blocking extension load-file file-name

undo web java-blocking extension load-file file-name
View
System view
Parameter
file-name: Name of the Java blocking filter file to be loaded.
Description
Use the web java-blocking extension load-file command to load a Java blocking
filter file.
Use the undo web java-blocking extension load-file command to unload a Java
blocking filter file.
Example
# Load the Java blocking filter file named “javablk”.

<H3C> system-view
[H3C] web java-blocking extension load-file javablk
5.1.31 web log enable
Syntax
web log enable

undo web log enable
View
System view
5-19
Parameter
None
Description
Use the web log enable command to enable Web logging and create a logging timer.
Use the undo web log enable command to disable Web logging and delete the
configured logging timer.
Example
# Enable Web logging.

<H3C> system-view
[H3C] web log enable
5.1.32 web log timer
Syntax
web log timer time

undo web log timer
View
System view
Parameter
time: Timeout time of the logging timer, in the range 1 to 65,535, in seconds.
Description
Use the web log timer command to configure the timeout time of the logging timer.
Use the undo web log timer command to restore the timeout time to default value.
By default, the timeout time is 30 seconds.
Example
# Configure the timeout time of the logging timer to be 45 seconds.

<H3C> system-view
[H3C] web log timer 45
5.1.33 reset web url-filter host counter
Syntax
reset web url-filter host counter
5-20
View
User view
Parameter
None
Description
Use the reset web url-filter host counter command to clear the URL address filtering
statistics information.
Example
# Clear the URL address filtering statistics information.

<H3C> reset web url-filter host counter
Clear the counter of keywords in filter successfully.
5.1.34 reset web url-filter parameter counter
Syntax
reset web url-filter parameter counter
View
User view
Parameter
None
Description
Use the reset web url-filter parameter counter command to clear the statistics of
SQL injection attack protection.
Example
# Clear the statistics of SQL injection attack protection.

<H3C> reset web url-filter parameter counter
Clear the counter of keywords in filter successfully.
5.1.35 reset web java-blocking counter
Syntax
reset web java-blocking counter
5-21
View
User view
Parameter
None
Description
Use the reset web java-blocking counter command to clear the Java blocking
statistics information.
Example
# Clear the Java blocking statistics information.

<H3C> reset web java-blocking counter
5.1.36 reset web log-buf
Syntax
reset web log-buf
View
User view
Parameter
None
Description
Use the reset web log-buf command to clear the Web filtering log buffer.
Example
# Delete the Web filtering log buffer.

<H3C> reset web log-buf
5-22
Comware V3 Chapter 6 IPSec Configuration Commands
Chapter 6 IPSec Configuration Commands
6.1 IPSec Configuration Commands

6.1.1 ah authentication-algorithm
Syntax
ah authentication-algorithm { md5 | sha1 }

undo ah authentication-algorithm
View
IPSec proposal view
Parameter
md5: MD5 algorithm is adopted.

sha1: SHA1 algorithm is adopted.
Description
Use the ah authentication-algorithm command to set the authentication algorithm

adopted by Authentication Header protocol in IPSec proposal.
Use the undo ah authentication-algorithm command to restore the default setting.
By default, the md5 authentication algorithm is adopted by Authentication Header
protocol in IPSec proposal.
AH protocol cannot be used to encrypt, but to authenticate.
MD5 algorithm uses the 128-bit message digest, and SHA1 uses the 160-bit message
digest. By comparison, MD5 is faster than SHA1, while SHA1 is securer than MD5.
The IPSec proposal adopted by the security policy at both ends of the security tunnel
must be set as using the same authentication algorithm.
Can the AH authentication algorithm be configured only if AH or AH-ESP security
protocol was selected by executing the transform command.
Related command: ipsec proposal, proposal, sa spi and transform.
Example
# Set an IPSec proposal with AH adopting SHA1.

[H3C] ipsec proposal prop1
[H3C-ipsec-proposal-prop1] transform ah
[H3C-ipsec-proposal- prop1] ah authentication-algorithm sha1
6-1
6.1.2 debugging ipsec
Syntax
debugging ipsec { all | sa | misc | packet [ policy policy-name [ seq-number ] |

parameters ip-address protocol spi-number ] }
undo debugging ipsec { all | sa | misc | packet [ policy policy-name [ seq-number ] |
parameters ip-address protocol spi-number ] }
View
User view
Parameter
all: Displays all debugging information.

sa: Displays debugging information of SA.
packet: Displays debugging information of IPSec packets.
policy policy-name: Displays debugging information of IPSec policy whose name is
policy-name.
seq-number: Displays debugging information of IPSec policy whose sequence number
is seq-number.
parameters: Displays debugging information of a SA whose remote address is
ip-address, Security protocol is protocol, and SPI is spi-number.
misc: Displays other debugging information of IPSec.
Description
Use the debugging ipsec command to turn IPSec debugging on.

Use the undo debugging ipsec command to turn IPSec debugging off.
By default, IPSec debugging is off.
Example
# Enable IPSec SA debugging function.

<H3C> debugging ipsec sa
6.1.3 display ipsec policy
Syntax
display ipsec policy [ brief | name policy-name [ seq-number ] ]
View
Any view
6-2
Parameter
brief: Displays brief information about all the ipsec policies.

name: Displays information of the ipsec policy with the name policy-name and
sequence number seq-number.
policy-name: Name of an ipsec policy.
seq-number: Sequence number of an ipsec policy.
If no argument has been specified, the details of all the IPSec policies will be displayed.
If name policy-name has been specified but seq-number has not, the information of the
specified IPSec policy group will be listed out.
Description
Use the display ipsec policy command to view information about the ipsec policy.
The brief keyword is used for displaying brief information about all the ipsec policies,
whose display format is the brief format (see the following example). The brief
command can be used for quick display of all the ipsec policies. Brief information
includes: name and sequence number, negotiation mode, access control list, proposal,
local address, and remote address.
The other command words are used to display the detailed information about the ipsec
policy, whose display format is the detailed format (refer to the following example).
Related command: ipsec policy (system view).
Example
# View brief information about all the ipsec policies.

<H3C> display ipsec policy brief
Ipsec-policy-Name Mode acl Local Address Remote Address
policy1-100 manual 2000 150.1.1.2 150.1.1.1
test-300 isakmp 2200 202.38.160.66
ike-peer name: newpeer
Table 6-1 Brief information of IPSec policy
Item Description
Ipsec-policy-Name Name and sequence number of an ipsec policy
Mode Negotiation method used by an ipsec policy

acl Access control list used by an ipsec policy
Local Address Local IP address
Remote Address Remote IP address
6-3
Item Description
In ISAKMP negotiation mode, the IKE peer name
ike-peer name referenced by the IPSec policy. This field is not
available with manually-established IPSec policies.
# View information about all the ipsec policies

[H3C] display ipsec policy
===========================================
IPsec Policy Group: "policy_isakmp"
Using interface: {Ethernet1/0/0}
===========================================
--------------------------------------------
IPsec policy name: "policy_isakmp"
sequence number: 10
mode: isakmp
--------------------------------------------
security data flow : 100
selector mode: per-session
tunnel remote address: 162.105.10.2
PFS (Y/N): N
proposal name: prop1
ipsec sa local duration(time based): 3600 seconds
ipsec sa local duration(traffic based): 1843200 kilobytes
===========================================
IPsec Policy Group: "policy_man"
Using interface: {Ethernet1/0/1}
===========================================
-----------------------------------------
IPsec policy name: "policy_man"
sequence number: 10
mode: manual
-----------------------------------------
security data flow : 100
tunnel local address: 162.105.10.1
tunnel remote address: 162.105.10.2
proposal name: prop1
inbound ah setting:
ah spi: 12345 (0x3039)
ah string-key:
ah authentication hex key : 1234567890123456789012345678901234567890
inbound esp setting:
esp spi: 23456 (0x5ba0)
6-4
esp string-key:
esp encryption hex key:
1234567890abcdef1234567890abcdef1234567812345678
esp authentication hex key: 1234567890abcdef1234567890abcdef
outbound ah setting:
ah spi: 54321 (0xd431)
ah string-key:
ah authentication hex key: 1122334455667788990011223344556677889900
outbound esp setting:
esp spi: 65432 (0xff98)
esp string-key:
esp encryption hex key:
11223344556677889900aabbccddeeff1234567812345678
esp authentication hex key: 11223344556677889900aabbccddeeff
Table 6-2 Detailed information of IPSec ipsec policy
Item Description
Name, sequence number and negotiation
ipsec policy
method of an ipsec policy
security data flow Access control list used by an ipsec policy
selector mode Data stream protection mode

proposal name Name of the proposal used by an ipsec policy
Settings of inbound/outbound ends using
inbound/outbound ah/esp setting
AH/ESP, including SPI and key
tunnel Local Address Local IP address
tunnel Remote Address Remote IP address
Whether using PFS(Perfect Forward Security)
PFS (Y/N)
or not
6.1.4 display ipsec policy-template
Syntax
display ipsec policy-template [ brief | name template-name [ seq-number ] ]
View
Any view
Parameter
brief: Displays brief information about all the ipsec policy templates.
6-5
name: Displays information of the ipsec policy template with the name template-name
and sequence number seq-number.
template-name: Name of an ipsec policy template.
seq-number: Sequence number of an ipsec policy template.
If no parameter is specified, then the detail information about all the ipsec policy
templates will be displayed. If name template-name is specified but seq-number is not,
the information of the specified IPSec policy template group is displayed.
Description
Use the display ipsec policy-template command to view information about the ipsec
policy template.
Parameter brief is for showing brief information about all the ipsec policy templates,
whose display format is the brief format (see the following example). It can display
information on all the ipsec policy templates quickly. Brief information includes:
template name and sequence number, access control list, and remote address.
Any of the sub-commands can be used to display detail information of the IPSec policy
template.
Related command: ipsec policy-template.
Example
# View brief information about all the ipsec policy templates.

[H3C] display ipsec policy-template brief
Policy-template-Name acl Remote-Address
------------------------------------------------------
test-tplt300 2200
Table 6-3 Brief information of IPSec policy template
Item Description
Policy-template-Name name, sequence number of an ipsec policy template
acl access control list used by an ipsec policy template

Remote Address remote IP address
6.1.5 display ipsec proposal
Syntax
display ipsec proposal [ proposal-name ]
6-6
View
Any view
Parameter
proposal-name: Name of the proposal.
Description
Use the display ipsec proposal command to view information about the proposal.
If the name of the proposal is not specified, then information about all the proposals will
be shown.
Related command: ipsec proposal, display ipsec sa and display ipsec policy.
Example
# View all the proposals.

[H3C] display ipsec proposal
Ipsec proposal name: prop2
encapsulation mode: tunnel
transform: ah-new
ah protocol: authentication-algorithm sha1-hmac-96
Ipsec proposal name: prop1
encapsulation mode: transport
transform: esp-new
esp protocol: authentication-algorithm md5-hmac96, encryption des
Table 6-4 IPSec proposal information
Item Description
Ipsec proposal name name of the proposal
modes used by proposal, including two types: transport
encapsulation mode
mode and tunnel mode
security protocols used by proposal, including two
transform
types: AH and ESP
ah protocol the authentication-algorithm used by AH: md5 | sha1
the authentication-algorithm and encryption method
esp protocol
used by ESP respectively: MD5 and DES
6-7
6.1.6 display ipsec sa
Syntax
display ipsec sa [ brief | remote ip-address | policy policy-name [ seq-number ] |

duration ]
View
Any view
Parameter
brief: Displays brief information about all the SAs.

remote: Displays information about the SA with remote address as ip-address.
ip-address: Specifies the remote address in dotted decimal format.
policy: Displays information about the SA created by the ipsec policy whose name is
policy-name.
policy-name: Specifies the name of the ipsec policy.
seq-number: Specifies the sequence number of the ipsec policy.
duration: Global sa duration to be shown.
Description
Use the display ipsec sa command to view the relevant information about the SA.
The command with brief parameter shows brief information about all the SAs, whose
display format is the brief format (refer to the following example). Brief information
includes source address, destination address, SPI, protocol, and algorithm. A display
beginning with "E" in the algorithm stands for the encryption algorithm, and a display
beginning with "A" stands for the authentication algorithm. The brief command can be
used to display all the SAs already set up quickly.
The commands with remote and policy parameters both display the detailed
information about the SA. The display mode: part of the information about the ipsec
policy is shown first and then the detailed information of the SA in this ipsec policy.
The command with duration parameter shows the global sa duration, including
"time-based" and "traffic-based" sa duration. Refer to the examples for this command.
Information of all the SAs will be shown when no parameter is specified.
Related command: reset ipsec sa, ipsec sa duration, display ipsec sa and display
ipsec policy.
Example
# View brief information about all the SAs.

<H3C> display ipsec sa brief
6-8
total phase-2 SAs: 2

Src Address Dst Address SPI Protocol Algorithm
10.1.1.1 10.1.1.2 300 ESP E:DES; A:HMAC-MD5-96
10.1.1.2 10.1.1.1 400 ESP E:DES; A:HMAC-MD5-96
Table 6-5 Brief information of IPSec SA
Item Description
Total number of SAs in the second phase of IPSec
total phase-2 SAs
negotiation
Src Address Local IP address
Dst Address Remote Ip address
SPI security parameter index
Protocol security protocol used by IPSec
The authentication algorithm and encryption algorithm used
by the security protocol. A display beginning with "E" in the
Algorithm
algorithm stands for the encryption algorithm, and a display
beginning with "A" stands for the authentication algorithm.
# View the global duration of SA.

[H3C] display ipsec sa duration
ipsec sa global duration (traffic based): 1843200 kilobytes
ipsec sa global duration (time based): 3600 seconds
# View information of all the SAs.

[H3C] display ipsec sa
===============================
path MTU: 1500
===============================
----------------------------------
IPsec policy name: "policy_isakmp"
sequence number: 10
mode: isakmp
----------------------------------
connection id: 4
in use settings = {tunnel}
tunnel local : 162.105.10.1
tunnel remote : 162.105.10.2
[inbound ah SAs]
spi: 3752719292 (0xdfadf3bc)
transform: AH-SHA1HMAC96
sa remaining key duration (bytes/sec): (1887436384/3594)
6-9
max received sequence-number: 4

[inbound esp SAs]
spi: 74180629 (0x46be815)
transform: ESP-ENCRYPT-3DES ESP-AUTH-MD5
max received sequence-number: 4
[outbound esp SAs]
spi: 1394075637 (0x5317e7f5)
transform: ESP-ENCRYPT-3DES ESP-AUTH-MD5
max sent sequence-number: 5
[outbound ah SAs]
spi: 2132905296 (0x7f218d50)
transform: AH-SHA1HMAC96
max sent sequence-number: 5
Table 6-6 Detailed information of IPSec SA
Item Description
Interface Interface using ipsec policy
Maximum IP packet length sent from the
path MTU
interface
ipsec policy used, including name, sequence
ipsec policy
number and negotiation method
connection id security tunnel identifier
IPSec mode, including two types: transport
in use settings
mode and tunnel mode
tunnel local local IP address
tunnel remote remote IP address
inbound SA information of the inbound end
transform proposal used by the ipsec policy
sa remaining key duration rest sa duration of SA
maximum sequence number of the received
max received sequence-number packets (the anti-replay function provided by
the security protocol)
outbound SA information of the outbound end
maximum sequence number of the sent
max sent sequence-number packets (the anti-replay function provided by
the security protocol)
6-10
6.1.7 display ipsec statistics
Syntax
display ipsec statistics
View
Any view
Parameter
none
Description
Use the display ipsec statistics command to view the IPSec packet statistics
information, including the input and output security packet statistics, bytes, number of
packets discarded and detailed description of discarded packets.
Related command: reset ipsec statistics.
Example
# View IPSec packet statistics.

<H3C> display ipsec statistics
the security packet statistics:
input/output security packets: 5124/8231
input/output security bytes: 52348/64356
input/output dropped security packets: 0/0
dropped security packet detail:
no enough memory: 0
can't find SA: 0
queue is full: 0
authen failed: 0
invalid length: 0
replay packet: 0
too long packet: 0
invalid SA: 0
Table 6-7 IPSec packet statistics
Item Description
input/output packets under the security
input/output security packets
protection
input/output bytes under the security
input/output security bytes
protection
6-11
Item Description
input/output packets under the security
input/output discarded security packets
protection discarded by the router
Statistics on the situation that system
no enough memory:
resources are insufficient
Statistics on the situation that the
can't find SA:
corresponding SA cannot be found
Statistics on the situation that the queue
queue is full:
is full
Statistics on the situation that hash
authen failed:
authentication is failed
Statistics on the situation that the packet
invalid length: length received is inconsistent with that
indicated in the IP header
replay packet: Statistics on anti-replay
Statistics on the situation that the packet
too long packet:
length exceeds 65535
invalid SA: Statistics on invalid SA
6.1.8 encapsulation-mode
Syntax
encapsulation-mode { transport | tunnel }

undo encapsulation-mode
View
IPSec proposal view
Parameter
transport: Sets that the encapsulation mode of IP packets is transport mode.

tunnel: Sets that the encapsulation mode of IP packets is tunnel mode.
Description
Use the encapsulation-mode command to set the encapsulation mode that the
security protocol applies to IP packets, which can be transport or tunnel.
Use the undo encapsulation-mode command to restore it to the default.
By default, tunnel mode is used.
There are two encapsulation modes where IPSec is used to encrypt and authenticate
IP packets: transport mode and tunnel mode. In transport mode, IPSec does not
6-12
encapsulate a new header into the IP packet. The both ends of security tunnel are of
source and destination of original packets. In tunnel mode, IPSec protects the whole IP
packet, and adds a new IP header in the front part of the IP packet. The source and
destination addresses of the new IP header are the IP addresses of both ends of the
tunnel.
Generally, the tunnel mode is used between two security gateways (routers). A packet
encrypted in a security gateway can only be decrypted in another security gateway. So
an IP packet needs to be encrypted in tunnel mode, that is, a new IP header is added;
the IP packet encapsulated in tunnel mode is sent to another security gateway before it
is decrypted.
The transport mode is suitable for communication between two hosts, or for
communication between a host and a security gateway (like the network management
communication between the gateway workstation and a router). In transport mode, two
devices responsible for encrypting and decrypting packets must be the original sender
and receiver of the packet. Most of the data traffic between two security gateways is not
of the security gateway’s own. So the transport mode is not often used between
security gateways.
The proposal used by the ipsec policies set at both ends of the security tunnel must be
set as having the same packet encapsulation mode.
Related command: ah authentication-algorithm, ipsec proposal, esp
encryption-algorithm, esp authentication-algorithm, proposal, transform.
Example
# Set the IP packet encapsulation mode to transport in the proposal named prop2.
[H3C-ipsec-proposal- prop2] encapsulation-mode transport
6.1.9 esp authentication-algorithm
Syntax
esp authentication-algorithm { md5 | sha1 }

undo esp authentication-algorithm
View
IPSec proposal view
Parameter
md5: Use MD5 algorithm with the length of the key 128 bits.
sha1: Use SHA1 algorithm with the length of the key 160 bits.
6-13
Description
Use the esp authentication-algorithm command to set the authentication algorithm

used by ESP.
Use the undo esp authentication-algorithm command to set ESP not to authenticate
packets.
By default, MD5 algorithm is used.
MD5 is faster than SHA1, while SHA1 is securer than MD5.
ESP permits a packet to be encrypted or authenticated or both.
The encryption and authentication algorithm used by ESP cannot be set to vacant at
the same time.
The undo esp authentication-algorithm command is not used to restore the
authentication algorithm to the default; instead it is used to set the authentication
algorithm to vacant, i.e. not authentication. When the encryption algorithm is not vacant,
the undo esp authentication-algorithm command is valid.
The proposal used by the ipsec policies set at both ends of the security tunnel must be
set as having the same authentication algorithm.
Related command: ipsec proposal, esp encryption-algorithm, proposal,
transform.
Example
# Set a proposal that adopts ESP, and uses SHA1.

[H3C-ipsec-proposal- prop1] transform esp
[H3C-ipsec-proposal- prop1] esp authentication-algorithm sha1
6.1.10 esp encryption-algorithm
Syntax
esp encryption-algorithm { 3des | des | aes [ 128 | 192 | 256 ] }

undo esp encryption-algorithm
View
IPSec proposal view
Parameter
des: Data Encryption Standard (DES), a universal encryption algorithm with the length
of the key being 56 bits.
3des: 3DES (Triple DES), another universal encryption algorithm with the length of the
key being 168 bits.
6-14
aes [ 128 | 192 | 256 ]: Advanced encryption standard (AES), an encryption algorithm
conforming to IETF standards. 128, 192, and 256 are available key lengths. The default
is 128 bits.
Description
Use the esp encryption-algorithm command to set the encryption algorithm adopted
by ESP.
Use the undo esp encryption-algorithm command to set the ESP not to encrypt
packets.
By default, DES algorithm is used.
3DES can meet the requirement of high confidentiality and security, but it is
comparatively slow. And DES can satisfy the normal security requirements.
ESP permits a packet to be encrypted or authenticated or both.
The encryption and authentication methods used by ESP cannot be set to a vacant
value at the same time. The undo esp encryption-algorithm command can take
effect only if the authentication algorithm is not null.
Related command: ipsec proposal, esp authentication-algorithm, proposal,
transform.
Example
# Configure ESP with the 3DES encryption algorithm in the proposal named prop1.
[H3C-ipsec-proposal-prop1] transform esp
[H3C-ipsec-proposal-prop1] esp encryption-algorithm 3des
6.1.11 ipsec policy(in Interface View)
Syntax
ipsec policy policy-name

undo ipsec policy [ policy-name ]
View
Interface view
Parameter
policy-name: Specifies the name of an ipsec policy group applied at the interface. The
ipsec policy group with name policy-name should be configured in system view.
6-15
Description
Use the ipsec policy(interface view) command to apply an ipsec policy group with the
name policy-name at the interface,.
Use the undo ipsec policy (interface view) command to remove one or all ipsec policy
group from the interface so as to disable the IPSec function of the interface.
At an interface, only one ipsec policy group can be applied. An ipsec policy group can
be applied at multiple interfaces.
When a packet is sent from an interface, it searches for each ipsec policy in the ipsec
policy group by number in an ascending order. If the packet matches an access control
list used by an ipsec policy, then this ipsec policy is used to process the packet;
otherwise it continues to search for the next ipsec policy. If the packet does not match
any of the access control lists used by all the ipsec policies, it will be directly transmitted
(that is, IPSec will not protect the packet).
To prevent transmitting any unencrypted packet from the interface, it is necessary to
use the firewall together with IPSec; the firewall is for dropping all the packets that do
not need to be encrypted.
Related command: ipsec policy(system view).
Example
# Apply an ipsec policy whose name is policy1 to interface Serial 4/1/2.

[H3C-Serial4/1/2] ipsec policy policy1
6.1.12 ipsec policy (in System View)
Syntax
ipsec policy policy-name seq-number [ manual | isakmp [ template template-name ] ]

undo ipsec policy policy-name [ seq-number ]
View
System view
Parameter
policy-name: Name of the ipsec policy. The naming rule is: the length of the name is 1
to 15 characters, the name is case insensitive and the characters can be English
characters or numbers, cannot include “-”.
seq-number: Sequence number of the ipsec policy, ranging 1 to 10000, with lower
value indicating higher sequence priority.
manual: Sets up SA manually.
6-16
isakmp: Sets up SA through IKE negotiation.

template: Dynamically sets up SA by using policy template. The policy-name
discussed here will reference template-name which is a created policy template thus
named.
template-name: Name of the template.
Description
Use the ipsec policy command to establish or modify an ipsec policy, and enter IPSec
policy view.
Use the undo ipsec policy policy-name command to delete an IPSec policy group
whose name is policy-name.
Use the undo ipsec policy policy-name seq-number command to delete an IPSec
policy whose name is policy-name and sequence number is seq-number.
By default, no ipsec policy exists.
To establish an ipsec policy, it is necessary to specify the negotiation mode (manual or
isakmp). To modify the ipsec policy, it is not necessary to specify a negotiation mode.
Once the ipsec policy is established, its negotiation mode cannot be modified. For
example: if an ipsec policy is established in manual mode, it cannot be changed to
isakmp mode--this ipsec policy must be deleted and then recreated, if appropriate, with
the negotiation mode being isakmp.
Ipsec policies with the same name constitute an ipsec policy group. The name and
sequence number are used together to define a unique ipsec policy. In an ipsec policy
group, at most 100 ipsec policies can be set. In an ipsec policy, the smaller the
sequence number of an ipsec policy is, the higher is its preference. Apply an ipsec
policy group at an interface means applying all ipsec policies in the group
simultaneously, so that different data streams can be protected by adopting different
SAs.
Use the ipsec policy policy-name seq-number isakmp template template-name
command to establish an ipsec policy according the template through IKE negotiation.
Before using this command, the template should have been created. During the
negotiation and policy matching, the parameters defined in the template should be
compliant, the other parameters are decided by the initiator. The proposal must be
defined in policy template, other parameters are optional.
6-17
Caution:
z IKE will not use a policy with a template argument to initiate a negotiation. Rather, it
uses such a policy to response the negotiation initiated by its peer.
z The number of an IPSec policy configured by referencing an IPSec policy template
must be greater than that of an IPSec policy not configured in that way. Otherwise,
the responding party can find a match and the negotiation fails.
Related command: ipsec policy (interface view), security acl, tunnel local, tunnel
remote, sa duration, proposal, display ipsec policy, ipsec policy-template,
ike-peer.
Example
# Set an ipsec policy whose name is newpolicy1, sequence number is 100, and
negotiation mode is isakmp.
[H3C] ipsec policy newpolicy1 100 isakmp
[H3C-ipsec-policy-isakmp-newpolicy1-100]
6.1.13 ipsec policy-template
Syntax
ipsec policy-template template-name seq-number

undo ipsec policy-template template-name [ seq-number ]
View
System view
Parameter
template-name: Name of the IPSec policy template, an alphanumeric string of 1 to 15

characters, case insensitive, excluding minus signs (-).
seq-number: Number of the IPSec policy template, in the range 1 to 10000. In one
IPSec policy template group, the smaller the serial number of an IPSec policy template,
the higher its preference.
Description
Use the ipsec policy-template command to establish or modify an IPSec policy

template, and enter IPSec policy template view.
Use the undo ipsec policy-template template-name command to delete the IPSec
policy template group named template-name.
6-18
Use the undo ipsec policy-template template-name seq-number command to delete

the IPSec policy template with the name of template-name and the serial number of
seq-number.
By default, no IPSec policy template exists.
A policy template that has been created with the name of template-name can be
referenced by the ipsec policy policy-name seq-number isakmp template
template-name command to create an IPSec policy.
The IPSec policy template and the security policy of IPSec IPSAMP negotiation share
the same kinds of arguments, including the referenced IPSec proposal, the protected
traffic, PFS feature, lifetime, and the address of the remote tunnel end. However, you
should note that the proposal argument is compulsory to be configured whereas other
arguments are optional. If an IPSec policy template is used for the policy match
operation undertaken in an IKE negotiation, the configured arguments must be
matched, and the settings of the initiator will be used if the corresponding arguments
have not been configured.
Related command: ipsec policy, security acl, tunnel local, tunnel remote,
proposal, display ipsec policy, ike-peer.
Example
# Establish an IPSec policy template with the name of template1 and the serial number
of 100.
[H3C] ipsec policy-template template1 100
[H3C-ipsec-policy-template- template1-100]
6.1.14 ipsec proposal
Syntax
ipsec proposal proposal-name

undo ipsec proposal proposal-name
View
System view
Parameter
proposal-name: Name of the specified proposal. The naming rule is: the length of the
name is 1 to 15 characters, case insensitive.
Description
Use the ipsec proposal proposal-name command to establish or modify a proposal

named proposal-name, and enter IPSec proposal view.
6-19
Use the undo ipsec proposal proposal-name command to delete the proposal named
proposal-name.
By default, no proposal exists.
This proposal is a combination of the security protocol, encryption and authentication
algorithm and packet encapsulation format for implementing IPSec protection.
An ipsec policy determines the protocol, algorithm and encapsulation mode to be
adopted by the use of the proposal. Before the ipsec policy uses a proposal, this
proposal must have already been set up.
After a new IPSec proposal is established by using the ipsec proposal command, the
ESP protocol, DES encryption algorithm and MD5 authentication algorithm are adopted
by default.
Related command: ah authentication-algorithm, esp encryption-algorithm, esp
authentication-algorithm, encapsulation-mode, proposal, display ipsec proposal
and transform.
Example
# Establish a proposal named newprop1.

[H3C] ipsec proposal newprop1
6.1.15 ipsec sa global-duration
Syntax
ipsec sa global-duration { time-based seconds | traffic-based kilobytes }

undo ipsec sa global-duration { time-based | traffic-based }
View
System view
Parameter
time-based seconds: Time-based global SA duration in second, ranging 30 to 604800

seconds. It is 3600 seconds (1 hour) by default.
traffic-based kilobytes: Traffic-based global SA duration in kilobyte, ranging 256 to
4194303 kilobytes. It is 1843200 kilobytes by default and when the traffic reaches this
value, the duration expires.
Description
Use the ipsec sa global-duration command to set a global SA duration.

Use the undo ipsec sa global-duration command to restore to the default setting of
the global SA duration.
6-20
When IKE negotiates to establish a SA, if the adopted IPSec policy is not configured
with its own duration, the system will use the global SA duration specified by this
command to negotiate with the peer. If the IPSec policy is configured with its own
duration, the system will use the duration of the IPSec policy to negotiate with the peer.
When IKE negotiates to set up an SA for IPSec, the smaller one of the lifetime set
locally and that proposed by the remote is selected.
There are two types of SA duration: time-based (in seconds) and traffic-based (in
kilobytes) lifetimes. The traffic-based SA duration, that is, the valid time of the SA is
accounted according to the total traffic that can be processed by this SA, and the SA is
invalid when the set value is exceeded. No matter which one of the two types expires
first, the SA will get invalid. Before the SA is about to get invalid, IKE will set up a new
SA for IPSec negotiation. So, a new SA is ready before the existing one gets invalid.
Modifying the global SA duration will not affect a map that has individually set up its own
SA duration, or an SA already set up. But the modified global SA duration will be used to
set up a new SA in the future IKE negotiation.
The SA duration does not function for an SA manually set up, that is, the SA manually
set up will never be invalidated.
Related command: sa duration and display ipsec sa duration.
Example
# Set the global SA duration to 2 hours.

[H3C] ipsec sa global-duration time-based 7200
# Set the global SA duration to 10M bytes transmitted.

[H3C] ipsec sa global-duration traffic-based 10000
6.1.16 pfs
Syntax
pfs { dh-group1 | dh-group2 | dh-group5 | dh-group14 }

undo pfs
View
IPSec policy view, IPSec policy template view
Parameter
dh-group1: Specifies that the 768-bit Diffie-Hellman group is used.

6-21
Description
Use the pfs command to set the Perfect Forward Secrecy (PFS) feature for the IPSec
policy to initiate the negotiation.
Use the undo pfs command to set not to use the PFS feature during the negotiation.
By default, no PFS feature is used.
The command is used to add a PFS exchange process when IPSec uses the ipsec
policy to initiate a negotiation. This additional key exchange is performed during the
phase 2 negotiation so as to enhance the communication safety. The DH group
specified by the local and remote ends must be consistent, otherwise the negotiation
will fail.
Can this command be used only when the security alliance is established through IKE
style.
Related command: ipsec policy-template, ipsec policy(system view), ipsec
policy(interface view), tunnel local, tunnel remote, sa duration and proposal.
Example
# Set that PFS must be used when negotiating through ipsec policy shanghai 200.
[H3C] ipsec policy shanghai 200 isakmp
[H3C-ipsec-policy-isakmp-shanghai-200] pfs group1
6.1.17 proposal
Syntax
proposal proposal-name1 [ proposal-name2...proposal-name6 ]

undo proposal [ proposal-name ]
View
Parameter
proposal-name1,…, proposal-name6: Name of the proposals adopted.
Description
Use the proposal command to set the proposal used by the IPSec policy.
Use the undo proposal command to cancel the proposal used by the IPSec policy.
By default, no proposal is used.
Before using this command, the corresponding IPSec proposal must has been
configured.
6-22
If set up in manual mode, an SA can only use one proposal. And if a proposal is already
set, it needs to be deleted by using the undo proposal command before a new one
can be set.
If set up in isakmp mode, an SA can use six proposals at most. IKE negotiation will
search for the completely matching proposal at both ends of the security tunnel.
If it is the IPSec template, each template can use six proposals at most, and the IKE
negotiation will search for the completely matching proposal.
Related command: ipsec proposal, ipsec policy(system view), ipsec
policy(interface view), security acl, tunnel local and tunnel remote.
Example
# Set a proposal with name prop1, adopting ESP and the default algorithm, and set an
IPSec policy as using a proposal name prop1.
[H3C-ipsec-proposal-prop1] transform esp
[H3C-ipsec-proposal-prop1] quit
[H3C] ipsec policy policy1 100 manual
[H3C-ipsec-policy-manual-policy1-100] proposal prop1
6.1.18 reset ipsec sa
Syntax
reset ipsec sa [ remote ip-address | policy policy-name [ seq-number ] | parameters

dest-addr protocol spi ]
View
User view
Parameter
remote ip-address: Specifies remote address, in dotted decimal format.

policy: Specifies the IPSec policy.
policy-name: Specifies the name of the IPSec policy. The naming rule is as follows:
length is 1 to 15 characters, case sensitive, and the character can be English character
or number.
seq-number: Optional parameter specifying the serial number of the ipsec policy. If no
seq-number is specified, the IPSec policy refers to all the policies in the IPSec policy
group named policy-name.
parameters: Defines a Security Association (SA) by the destination address, security
protocol and SPI.
6-23
dest-address: Specifies the destination address in the dotted decimal IP address

format.
protocol: Specifies the security protocol by inputting the key word ah or esp, case
insensitive. ah indicates the Authentication Header protocol and esp indicates
Encapsulating Security Payload.
spi: Specifies the security parameter index (SPI), ranging 256 to 4294967295.
Description
Use the reset ipsec sa command to delete an SA already set up (manually or through
IKE negotiation). If no parameter (remote, policy, parameters) is specified, all the SA
will be deleted.
An SA is uniquely identified by a triplet of IP address, security protocol and SPI. A SA
can be set up either manually or through Internet Key Exchange (IKE) negotiation.
If an SA set up manually is deleted, the system will automatically set up a new SA
according to the parameter manually set up.
If a packet re-triggers IKE negotiation after an SA set up through IKE negotiation is
deleted, IKE will reestablish an SA through negotiation.
The keyword parameters will take effect only after the spi of the outbound SA is
defined. Because SAs appear in pairs, the inbound SA will also be deleted after the
outbound SA is deleted.
Related command: display ipsec sa.
Example
# Delete all the SAs.

<H3C> reset ipsec sa
# Delete an SA whose remote IP address is 10.1.1.2.

<H3C> reset ipsec sa remote 10.1.1.2
# Delete all the SAs in policy1.

<H3C> reset ipsec sa policy policy1
# Delete the SA of the ipsec policy with the name policy1 and the serial number 10.
<H3C> reset ipsec sa policy policy1 10
# Delete an SA whose remote IP address is 10.1.1.2, security protocol is AH, and SPI is
10000
<H3C> reset ipsec sa parameters 10.1.1.2 ah 10000
6-24
6.1.19 reset ipsec statistics
Syntax
reset ipsec statistics
View
User view
Parameter
None
Description
Use the reset ipsec statistics command to clear IPSec message statistics, and set all
the statistics to zero.
Related command: display ipsec statistics.
Example
# Clear IPSec message statistics.

<H3C> reset ipsec statistics
6.1.20 sa authentication-hex
Syntax
sa authentication-hex { inbound | outbound } { ah | esp } hex-key

undo sa authentication-hex { inbound | outbound } { ah | esp }
View
Manually-established IPSec policy view
Parameter
inbound: Configures the authentication-hex parameter for the inbound SA. IPSec
uses the inbound SA for processing the packet in the inbound direction (received).
outbound: Configures the authentication-hex parameter for the outbound SA. IPSec
uses the outbound SA for processing the packet in the outbound direction (sent).
ah: Sets the authentication-hex parameter for the SA using AH. If the IPSec proposal
used by the ipsec policy adopts AH, the ah key word is used here to set the AH relevant
parameter of the SA.
esp: Sets the authentication-hex parameter for the SA using ESP. If the IPSec
proposal used by the ipsec policy adopts ESP, the esp key word is used here to set the
ESP relevant parameter of the SA.
6-25
hex-key: Specifies a key for the SA input in the hex format. If MD5 is used, then input a
16-byte key; if SHA1 is used, input a 20-byte key.
Description
Use the sa authentication-hex command to set the SA authentication key manually

for the ipsec policy of manual mode.
Use the undo sa authentication-hex command to delete the SA authentication key
already set.
This command is only used for the ipsec policy in manual mode.
For the ipsec policy in isakmp mode, it is unnecessary to set the SA parameter
manually. IKE will automatically negotiate the SA parameter and establish a SA.
When configuring the SA of manual mode, the SA parameters of inbound and
outbound directions must be set separately.
The SA parameters set at both ends of the security tunnel must be fully matching. The
SPI and key for the SA input at the local end must be the same as those output at the
remote. The SA SPI and key output at the local end must be the same as those input at
the remote.
There are two ways of inputting a key: hex and character string. To input a character
string for a key, you must use the sa string-key command. If two keys, input in different
ways, are available, the one specified the last takes effect. At both ends of a security
tunnel, the key should be input in the same way. If the key is input in character string at
one end, and it is input in hex at the other end, then a security tunnel cannot be set up
correctly.
Related command: ipsec policy (system view), ipsec policy (interface view),
security acl , tunnel local, tunnel remote, sa duration and proposal.
Example
# Set SPI of the inbound SA to 10000, key to 0x112233445566778899aabbccddeeff00;

set the SPI of the outbound SA to 20000, and its key to
0xaabbccddeeff001100aabbccddeeff00 in the ipsec policy using AH and MD5.
[H3C] ipsec proposal prop_ah
[H3C-ipsec-proposal-prop_ah] transform ah
[H3C-ipsec-proposal-prop_ah] ah authentication-algorithm md5
[H3C-ipsec-proposal-prop_ah] quit
[H3C] ipsec policy tianjin 100 manual
[H3C-ipsec-policy-manual-tianjin-100] proposal prop_ah
[H3C-ipsec-policy-manual-tianjin-100] sa spi inbound ah 10000
[H3C-ipsec-policy-manual-tianjin-100] sa authentication-hex inbound ah
112233445566778899aabbccddeeff00
[H3C-ipsec-policy-manual-tianjin-100] sa spi outbound ah 20000
6-26
[H3C-ipsec-policy-manual-tianjin-100] sa authentication-hex outbound ah

aabbccddeeff001100aabbccddeeff00
6.1.21 sa duration
Syntax
sa duration { traffic-based kilobytes | time-based seconds }

undo sa duration { traffic-based | time-based }
View
Parameter
time-based seconds: Time-based SA duration in second, ranging 30 to 604800

seconds. It is 3600 seconds (1 hour) by default.
traffic-based kilobytes: Traffic-based SA duration in kilobyte, ranging 256 to 4194303
kilobytes. It is 1843200 kilobytes by default.
Description
Use the sa duration command to set a SA duration of the ipsec policy.

Use the undo sa duration command to cancel the SA duration, i.e., restore the use of
the global SA duration.
When IKE negotiates to establish a SA, if the adopted IPSec policy is not configured
with its own duration, the system will use the global SA duration to negotiate with the
peer. If the IPSec policy is configured with its own duration, the system will use the
duration of the IPSec policy to negotiate with the peer. When IKE negotiates to set up
an SA for IPSec, the shorter one of the lifetime set locally and that proposed by the
remote is selected.
There are two types of SA duration: time-based (in seconds) and traffic-based (in
kilobytes) lifetimes. The traffic-based SA duration, that is, the valid time of the SA is
accounted according to the total traffic that can be processed by this SA, and the SA is
invalid when the set value is exceeded. No matter which one of the two types expires
first, the SA will get invalid. Before the SA is about to get invalid, IKE will set up a new
SA for IPSec negotiation. So, a new SA is ready before the existing one gets invalid.
The SA duration does not function for an SA manually set up, that is, the SA manually
set up will never be invalidated.
Related command: ipsec sa global-duration, ipsec policy(system view), ipsec
policy(interface view), security acl, tunnel local, tunnel remote and proposal.
6-27
Example
# Set the Sa duration for the ipsec policy shenzhen 100 to 2 hours, that is, 7200
seconds.
[H3C] ipsec policy shenzhen 100 isakmp
[H3C-ipsec-policy-isakmp-shenzhen-100] sa duration time-based 7200
# Set the Sa duration for the ipsec policy shenzhen 100 to 20M bytes, that is, the SA is
overtime when the traffic exceeds 20000 kilobytes.
[H3C] ipsec policy shenzhen 100 isakmp
[H3C-ipsec-policy-isakmp-shenzhen-100] sa duration traffic-based 20000
6.1.22 sa encryption-hex
Syntax
sa encryption-hex { inbound | outbound } esp hex-key

undo sa encryption-hex { inbound | outbound } esp
View
Parameter
inbound: Sets the encryption-hex parameter for the inbound SA. IPSec uses the
inbound SA for processing the packet in the inbound direction (received).
outbound: Sets the encryption-hex parameter for outbound SA. IPSec uses the
outbound SA for processing the packet in the outbound direction (sent).
esp: Sets the encryption-hex parameter for the SA using ESP. If the IPSec proposal
used by the ipsec policy adopts ESP, the esp key word is used here to set the ESP
relevant parameter of the SA.
hex-key: Specifies a key for the SA input in the hex format. When applied in ESP, if DES
is used, then input an 8-byte key; if 3DES is used, then input a 24-byte key.
Description
Use the sa encryption-hex command to set the SA encryption key manually for the
ipsec policy of manual mode.
Use the undo sa encryption-hex command to delete the SA parameter already set.
This command is only used for the ipsec policy in manual mode. It is used to set the SA
parameter manually and establish a SA manually.
manually, and this command is invalid. IKE will automatically negotiate the SA
parameter and establish a SA.
6-28

the remote.
Related command: ipsec policy(system view), ipsec policy(interface view), security
acl , tunnel local, tunnel remote, sa duration and proposal.
Example
# Set the SPI of the inbound SA to 1001, and the key to 0x1234567890abcdef; set the
SPI of the outbound SA to 2001, and its key to 0xabcdefabcdef1234 in the ipsec policy
using ESP and DES.
[H3C] ipsec proposal prop_esp
[H3C-ipsec-proposal-prop_esp] transform esp
[H3C-ipsec-proposal-prop_esp] ah encryption-algorithm des
[H3C-ipsec-proposal-prop_esp] quit
[H3C-ipsec-policy-manual-tianjin-100] proposal prop_esp
[H3C-ipsec-policy-manual-tianjin-100] sa spi inbound esp 1001
[H3C-ipsec-policy-manual-tianjin-100] sa encryption-hex inbound esp
1234567890abcdef
[H3C-ipsec-policy-manual-tianjin-100] sa spi outbound esp 2001
[H3C-ipsec-policy-manual-tianjin-100] sa encryption-hex outbound esp
abcdefabcdef1234
6.1.23 sa spi
Syntax
sa spi { inbound | outbound } { ah | esp } spi-number

undo sa spi { inbound | outbound } { ah | esp }
View
Parameter
inbound: Sets the spi parameter for the inbound SA. IPSec uses the inbound SA for
processing the packet in the inbound direction (received).
outbound: Sets the spi parameter for outbound SA. IPSec uses the outbound SA for
processing the packet in the outbound direction (sent).
6-29
ah: Sets the spi parameter for the SA using AH. If the IPSec proposal set used by the
ipsec policy adopts AH, the ah key word is used here to set the spi relevant parameter
of the SA.
esp: Sets the spi parameter for the SA using ESP. If the IPSec proposal set used by the
ipsec policy adopts ESP, the esp key word is used here to set the spi relevant
parameter of the SA.
spi-number: Security Parameter Index (SPI) in the triplet identification of the SA,
ranging 256 to 4294967295. The triplet identification of the SA, which appears as SPI,
destination address, and protocol number, must be unique.
Description
Use the sa spi command to set the SA SPI manually for the ipsec policy of manual
mode.
Use the undo sa spi command to delete the SA SPI already set.
the remote.
acl , tunnel local, tunnel remote, sa duration and proposal.
Example
# Set the SPI of the inbound SA to 10000, set the SPI of the outbound SA to 20000, in
the ipsec policy using AH and MD5.
6-30
6.1.24 sa string-key
Syntax
sa string-key { inbound | outbound } { ah | esp } string-key

undo sa string-key { inbound | outbound } { ah | esp }
View
Parameter
inbound: Sets the string-key parameter for the inbound SA. IPSec uses the inbound
SA for processing the packet in the inbound direction (received).
outbound: Sets the string-key parameter for the outbound SA. IPSec uses the
outbound SA for processing the packet in the outbound direction (sent).
ah: Sets the string-key parameter for the SA using AH. If the IPSec proposal set used
by the ipsec policy adopts AH, the ah key word is used here to set the string-key
relevant parameter of the SA.
esp: Sets the string-key parameter for the SA using ESP. If the IPSec proposal set
used by the ipsec policy adopts ESP, the esp key word is used here to set the
string-key relevant parameter of the SA.
string-key: Specifies the key for an SA input in the character string format, with a length
ranging 1 to 256 characters. For different algorithms, you can input character strings of
any length in the specified range, and the system will generate keys meeting the
algorithm requirements automatically according to the input character strings. As for
ESP, the system will automatically generate the key for the authentication algorithm
and that for the encryption algorithm at the same time.
Description
Use the sa string-key command to set the SA parameter manually for the ipsec policy
of manual mode.
Use the undo sa string-key command to delete the SA parameter already set.
outbound directions must be set separately
6-31
the remote.
There are two methods for inputting the key: hex and character string. To input a
hexadecimal key, use the sa authentication-hex command. For the character string
key and hex string key, the last set one will be adopted. At both ends of a security tunnel,
the key should be input by the same method. If the key is input in character string at one
end, and it is input in hex at the other end, then a security tunnel cannot be set up
correctly.
acl , tunnel local, tunnel remote, sa duration, proposal.
Example
# Set the SPI of the inbound SA to 10000, and the key string to abcdef; sets the SPI of
the outbound SA to 20000, and its key string to efcdab in the ipsec policy using AH and
MD5.
[H3C-ipsec-policy-manual-tianjin-100] sa string-key abcdef
[H3C-ipsec-policy-manual-tianjin-100] sa string-key efcdab
6.1.25 security acl
Syntax
security acl acl-number [ aggregation | per-session ]

undo security acl
View
Parameter
acl-number: Specifies the number of the access control list used by the ipsec policy,
ranging 3000 to 3999.
aggregation: Specifies the data stream protection mode of the IPSec policy to be the
aggregation mode.
6-32
per-session: Specifies the data stream protection mode of the IPSec policy to be the
per-session mode, which is supported only by the isakmp mode.
Description
Use the security acl command to set an access control list to be used by the ipsec
policy and specify the data stream protection mode.
Use the undo security acl command to remove the access control list used by the
ipsec policy.
Presently, IPSec protects the data streams that match the specified ACL in three
modes: standard, aggregation and per-session.
z The standard mode: Establishes a tunnel according to each specified ACL rule to
protect the packets that match the ACL.
z The aggregation mode: Establishes a tunnel to protect all data streams that
match the ACL.
z The per-session mode: Finds the ACL that a packet matches, and establishes a
tunnel to protect the packets that share the same source and destination
addresses with this packet. In per-session mode, multiple tunnels are to be
established to protect the specified ACL rule, because packets with different
source and destination addresses probably match one ACL rule.
By default, no ACL has been specified for IPSec policies. If neither the aggregation
mode nor per-session mode is specified when this command is executed, the default
data protection mode, i.e. the standard mode, is used to establish a tunnel for each
data stream defined in the ACL.
The data flow that will be protected by the IPSec policy is confined by the ACL in this
command. According to the rules in the ACL, IPSec determines which packets need
security protection and which do not. The packet permitted by the access control list will
be protected, and a packet denied by the access control list will not be protected. The
denied packets are sent out directly without IPSec protection.
Related command: ipsec policy (system view), ipsec policy (interface view), tunnel
local, tunnel remote, sa duration, proposal.
Example
# Set the ipsec policy as using access control list 3001, using the aggregation mode for
data stream protection.
10.1.1.2 0.0.0.255
[H3C] ipsec policy beijing 100 manual
[H3C-ipsec-policy-manual-beijing-100] security acl 3001 aggregation
6-33
6.1.26 transform
Syntax
transform { ah | ah-esp | esp }

undo transform
View
IPSec proposal view
Parameter
ah: Uses AH protocol specified in RFC2402.

ah-esp: Uses ESP specified in RFC2406 to protect the packets and then uses AH
protocol specified in RFC2402 to authenticate packets.
esp: Uses ESP specified in RFC2406.
Description
Use the transform command to set a security protocol used by a proposal.

Use the undo transform command to restore the default security protocol.
By default, esp, that is, the ESP specified in RFC2406 is used.
If ESP is adopted, the default encryption algorithm is DES and the authentication
algorithm is MD5.
If AH is adopted, the default authentication algorithm is MD5.
If the parameter ah-esp is specified, the default authentication algorithm for AH is MD5
and the default encryption algorithm for ESP is DES without authentication.
AH protocol provides data authentication, data integrity check and anti-replay function.
ESP protocol provides data authentication, data integrity check, anti-replay function
and data encryption.
While establishing a SA manually, the proposals used by the ipsec policy set at both
ends of the security tunnel must be set as using the same security protocol.
The following figure illustrates the data encapsulation formats of different security
protocols in the transport mode and the tunnel mode.
6-34
Transfer
Security mode transport tunnel
protocol
ah IP AH data IP AH IP data
esp IP ESP data ESP-T IP ESP IP data ESP-T
ah-esp IP AH ESP data ESP-T IP AH ESP IP data ESP-T
Figure 6-1 Data encapsulation formats of security protocols
“data” in the figure is the original IP datagram.

Related command: ah authentication-algorithm, ipsec proposal, esp
encryption-algorithm, esp authentication-algorithm, encapsulation-mode and
proposal.
Example
# Set a proposal using AH.

[H3C-ipsec-proposal-prop1] transform ah
6.1.27 tunnel local
Syntax
tunnel local ip-address

undo tunnel local
View
Parameter
ip-address: Local address in dotted decimal format.
Description
Use the tunnel local command to set the local address of an ipsec policy.
Use the undo tunnel local command to delete the local address set in the ipsec policy.
By default, the local address of an ipsec policy is not configured.
It is not necessary to set a local address for an ipsec policy in isakmp mode, so this
command is invalid in this situation. IKE can automatically obtain the local address from
the interface where this ipsec policy is applied.
As for the ipsec policy in manual mode, it is necessary to set the local address before
the SA can be established. A security tunnel is set up between the local and remote end,
6-35
so the local address and remote address must be correctly configured before a security
tunnel can be set up.
acl , tunnel remote, sa duration and proposal.
Example
# Set the local address for the ipsec policy, which is applied at serial 4/1/2 whose IP
address is 10.0.0.1.
[H3C] ipsec policy guangzhou 100 manual
[H3C-ipsec-policy-manual-guangzhou-100] tunnel local 10.0.0.1
[H3C-ipsec-policy-manual-guangzhou-100] quit
[H3C-Serial4/1/2] ipsec policy guangzhou
6.1.28 tunnel remote
Syntax
tunnel remote ip-address

undo tunnel remote [ ip-address ]
View
Parameter
ip-address: Remote address in dotted decimal format.
Description
Use the tunnel remote command to set the remote address of an ipsec policy.
Use the undo tunnel remote command to delete the remote address in the ipsec
policy.
By default, the remote address of an ipsec policy is not configured.
For the ipsec policy in manual mode, only one remote address can be set. If a remote
address is already set, this existing address must be deleted before a new one can be
set.
The security tunnel is established between the local and remote ends. The remote
address must be set correctly on both ends of the security tunnel.
Related command: ipsec policy (system view), ipsec policy (interface view),
security acl, tunnel local, sa duration, proposal.
6-36
Example
# Set the remote address of the ipsec policy to 10.1.1.2.

[H3C] ipsec policy shanghai 10 manual
[H3C-ipsec-policy-shanghai-10] tunnel remote 10.1.1.2
6.2 Encryption Card Configuration Commands

6.2.1 debugging encrypt-card
Syntax
debugging encrypt-card { all | command | error | misc | packet | sa } [ slot-id ]

undo debugging encrypt-card { all | command | error | misc | packet | sa }
debugging encrypt-card host { all | command | error | misc | packet | sa }
undo debugging encrypt-card host { all | command | error | misc | packet | sa }
View
User view
Parameter
all: Enables all debugging on the encryption card.

command: Enables command debugging on the encryption card.
error: Enables error debugging on the encryption card.
misc: Enables other debugging on the encryption card.
packet: Enables packet debugging on the encryption card.
sa: Enables security association (SA) debugging on the encryption card.
host: Enables host debugging on the encryption card.
slot-id: Slot ID for the encryption card, whose range depends on the number of slots on
the router. It is in 3-dimensional format, for example, x/y/z, where x stands for slot ID, y
and z are fixed to 0 for the encryption card.
Description
Use the debugging encrypt-card command to enable debugging on the specified or

all encryption cards.
Use the undo debugging encrypt-card command to disable debugging on the
encryption card.
Example
# Enable command debugging on the encryption card at slot 5/0/0.

[H3C] debugging encrypt-card command 5/0/0
6-37
6.2.2 display encrypt-card fast-switch
Syntax
display encrypt-card fast-switch
View
Any view
Parameter
None
Description
Use the display encrypt-card fast-switch command to view the entries in the fast
forwarding cache for the encryption cards.
Example
# Display the entries in the fast forwarding cache for the encryption cards.
[H3C] display encrypt-card fast-switch
encrypt-card Fast-Forwarding cache:
Index SourIP SourPort DestIP DestPort Prot TdbID Type
18 1.1.1.2 8 1.1.1.1 0 1 0x00000024 encrypt
130 1.1.1.1 0 1.1.1.2 0 50 0x00000023 decrypt
Table 6-8 Description on the fields of the display encrypt-card fast-switch command
Field Description
Index Index of the fast forwarding entry
SourIP Source IP address
SourPort Source port

DestIP Destination IP address
DestPort Destination port
Prot Protocol number

TdbID TDB ID for encrypting this flow
Two options are available: encrypt (in the outgoing direction)
Type
and decrypt (in the incoming direction)
6-38
6.2.3 display encrypt-card sa
Syntax
display encrypt-card sa [ slot-id ]
View
Any view
Parameter
slot-id: Slot ID for the encryption card, whose range depends on the slot number on the
router. It is in 3-dimensional format, for example, x/y/z, where x stands for slot ID on the
router, y and z are fixed to 0 for the encryption card.
Description
Use the display encrypt-card sa command to view SA information.

The command is only available on encryption cards.
These kinds of information shall be displayed: SA proposal name, local address,
remote address, remaining SA remaining key duration, schedule performance index
(SPI), slot ID, and other similar information.
Example
# Display all SA information on the encryption card at slot 5/0/0.

[H3C] display encrypt-card sa 5/0/0
AH SAs
proposal: ESP-AUTH-SHA1HMAC96
local address: 20.0.0.2
remote address: 20.0.0.1
sa remaining key duration (bytes/sec): 1887435992/2401
spi: 1081108020 (0x40706634)
Uses Encrypt5/0
ESP SAs
proposal: ESP-ENCRYPT-3DES
spi: 891512401 (0x35236651)
Uses Encrypt5/0/0
ESP SAs
6-39
proposal: ESP-ENCRYPT-3DES
spi: 3024247997 (0xb4425cbd)
Uses Encrypt5/0/0
AH SAs
spi: 2937733563 (0xaf1a41bb)
Uses Encrypt5/0/0
6.2.4 display encrypt-card statistics
Syntax
display encrypt-card statistics [ slot-id ]
View
Any view
Parameter
the router. It is in 3-dimensional format, for example, x/y/z, where x stands for slot ID on
the router, y and z are fixed to 0 for the encryption card.
Description
Use the display encrypt-card statistics command to view statistics on the specified
or all encryption cards.
The statistics includes the processing information of ESP/AH packets on the encryption
card. More details are displayed in the following example.
If the slot ID you type in is greater than the available slot number on the router, the error
information “Invalid encrypt-card slot-id” will be prompted.
Related command: reset encrypt-card statistic.
Example
# Display the statistics on the encryption card at slot 5/0/0.

[H3C] display encrypt-card statistics 5/0/0
6-40
Encrypt5/0/0 security packets statistics :

input/output security packets: 8/4
input/output security bytes: 1472/604
dropped security packet detail:
no enough memory: 0
can't find SA: 0
queue is full: 0
authentication is failed: 0
wrong length: 0
replay packet: 0
too long packet: 0
wrong SA: 0
invalid proposal: 0
invalid protocol: 0
buffer error: 0
wrap error: 0
crypto error: 0
pad error: 0
6.2.5 display encrypt-card syslog
Syntax
display encrypt-card syslog [ slot-id ]
View
Any view
Parameter
the router. If no slot is specified, information on all encryption cards is displayed. Slot
numbers are represented by x/y/z, where x is the slot number, and y and z are zero for
encryption cards.
Description
Use the display encrypt-card syslog command to view the current system log on the
encryption cards.
If the slot ID you type in is greater than the available slot number on the router, the error
information “Invalid encrypt-card slot-id” shall be prompted.
Related command: encrypt-card set syslog.
Example
# Display the system log on the encryption card at slot 5/0/0.
6-41
[H3C] display encrypt-card syslog 5/0/0
Date: 2004-03-27, Time: 11:45 Encrypt5/0/0 : receive time config cmd.

Date: 2004-03-27, Time: 11:50 Encrypt5/0/0 : receive add tdb cmd.
Date: 2004-03-27, Time: 11:50 Encrypt5/0/0 : receive link tdb cmd.
Date: 2004-03-27, Time: 11:50 Encrypt5/0/0 : receive link tdb cmd.
6.2.6 display interface encrypt
Syntax
display interface encrypt [ slot-id ]
View
Any view
Parameter
Description
Use the display interface encrypt command to view information about interfaces on
the specified or all encryption cards.
With this command, you can view the status of the encryption card, total count number
of packets transmitted or received on it, maximum count number of packets dropped
per second, information during the last five seconds.
Related command: interface encrypt.
Example
# Display the port information on the encryption card at slot 5/0/0.

[H3C] display interface Encrypt 5/0/0
Description : Encrypt5/0/0 Interface
Protocol Status: READY
Driver Status : READY
Total Statistics
Packets sent to card : 10
Packets received from card : 9
Bytes sent to card : 1216
Bytes received from card : 584
6-42
Dropped packets : 0
Statistics during last 5 seconds
Packets sent to card : 0
Packets received from card : 0
Bytes sent to card : 0
Bytes received from card : 0
Dropped packets : 0
6.2.7 encrypt-card backuped
Syntax
encrypt-card backuped
undo encrypt-card backuped
View
System view
Parameter
None
Description
Use the encrypt-card backuped command to enable backup function for the
encryption card.
Use the undo encrypt-card backuped command to disable backup function for the
encryption card.
By default, backup function for the encryption card is disabled.
For the IPSec SA implemented by the encryption card, if the card is normal, IPSec is
processed by the card. If the card fails, backup function is enabled on the card and the
selected encryption/authentication algorithms for the SA are supported by the IPSec
module on Comware platform, IPSec shall be implemented by the IPSec module on
Comware platform. In the event that the selected algorithms are not supported by the
IPSec module, the system drops packets.
Example
# Enable backup function for the encryption card.

[H3C] encrypt-card backuped
6.2.8 encrypt-card fast-switch
Syntax
encrypt-card fast-switch
6-43
undo encrypt-card fast-switch
View
System view
Parameter
None
Description
Use the encrypt-card fast-switch command to enable the fast forwarding function of
the encryption card.
Use the undo encrypt-card fast-switch command to disable the fast forwarding
function of the encryption card.
By default, the fast forwarding function of the encryption card is disabled.
For the packets that have the same [SourIP, SourPort, DestIP, DestPort, Prot] quintuple,
the router creates a fast forwarding entry when it receives the first packet. Then, the
subsequent packets, rather than processed packet by packet, are sent directly to the
encryption card, where they are sent to the destination after being encrypted or
decrypted. This is how the fast forwarding function of the encryption card expedites
packet processing.
Example
# Enable the fast forwarding function of the encryption card.

[H3C] encrypt-card fast-switch
6.2.9 interface encrypt
Syntax
interface encrypt [ slot-id ]
View
System view
Parameter
Description
Use the interface encrypt command to enter encryption card interface view.
6-44
In encryption card interface view, you only can the shutdown and undo shutdown
commands, respectively to shut down the encryption card or turn the card up.
Example
# Enter the interface mode of the encryption card at slot 5/0/0.

[H3C] interface encrypt 5/0/0
[H3C-Encrypt5/0/0]
6.2.10 ipsec card-proposal
Syntax
ipsec card-proposal proposal-name

undo ipsec card-proposal proposal-name
View
System view
Parameter
proposal-name: Name of the SA proposal of the encryption card, a string up to 32

characters. It is case-sensitive.
Description
Use the ipsec card-proposal command to create an SA proposal for the encryption
card and enter the corresponding view.
Use the undo ipsec card-proposal command to delete an SA proposal of the
encryption card.
This command is used in encryption card SA proposal view (the corresponding
encryption/decryption/authentication are implemented on the encryption card),
whereas the host software is also compatible with SA proposal view of the host itself
(the ipsec proposal command), in which the encryption/decryption/authentication are
implemented by the host. In encryption card SA proposal view, you can also specify the
slot ID of the encryption card for the SA proposal, with the use encrypt card command,
while other configurations are identical with the ipsec proposal command.
After completing SA proposal configuration, you need to return to system view using the
quit command, so that you can initiate other configuration.
Example
# Create the SA proposal “card” using the encryption card at slot 5/0/0, configure
security and encryption algorithm.
[H3C] ipsec card-proposal card
[H3C-ipsec-card-proposal] use encrypt-card 5/0/0
6-45
[H3C-ipsec-card-proposal-card] transform ah-esp

[H3C-ipsec-card-proposal-card] ah authentication-algorithm sha1
[H3C-ipsec-card-proposal-card] esp authentication-algorithm sha1
[H3C-ipsec-card-proposal-card] esp encryption-algorithm 3des
[H3C-ipsec-card-proposal-card] quit
[H3C]
6.2.11 reset counters interface encrypt
Syntax
reset counters interface encrypt [ slot-id ]
View
User view
Parameter
Description
Use the reset counters interface encrypt command to clear the statistics on the
encryption card.
The statistics record all the information starting from normal operation of the encryption
card, while system debugging requires statistics of a specific time period for fault
analysis. Then you may need to reset the existing statistics and get the statistics of a
required time period.
Related command: ipsec card-proposal and display encrypt-card sa.
Example
# Clear the statistics on the encryption card on the slot 5/0/0.

<H3C> reset counters encrypt-card 5/0/0
6.2.12 reset encrypt-card sa
Syntax
reset encrypt-card sa [ slot-id ]
View
User view
6-46
Parameter
Description
Use the reset encrypt-card sa command to clear the SAs on the encryption card.
You may need to clear the SA database information stored on the encryption card, to
output only the required information during debugging.
Related command: ipsec card-proposal and display encrypt-card sa.
Example
# Clear the SAs on the encryption card on the slot 5/0/0.

<H3C> reset encrypt-card sa 5/0/0
6.2.13 reset encrypt-card statistics
Syntax
reset encrypt-card statistics [ slot-id ]
View
User view
Parameter
Description
Use the reset encrypt-card statistics command to clear the statistics during
processing of the encryption card.
The statistics record all the protocol processing information from the last rebooting,
including counts of incoming/outgoing ESP/AH packets, dropped packets, failed
authentications, erroneous SAs, invalid SA proposals, invalid protocols.
Related command: display encrypt-card statistic.
Example
# Clear the processing statistics on the encryption card on the slot 5/0/0.
<H3C> reset encrypt-card statistic 5/0/0
6-47
6.2.14 reset encrypt-card syslog
Syntax
reset encrypt-card syslog [ slot-id ]
View
User view
Parameter
Description
Use the reset encrypt-card syslog command to clear all the logging information on
the encryption card.
The encryption card records all logging history information. And all the information
(including those obsolete items) shall be reported for every query, which imposes
somewhat difficulties to log monitoring and locating. Then you may need to clear the log
buffer of the encryption card.
Related command: display encrypt-card syslog.
Example
# Clear all the logging information on the encryption card on the slot 5/0/0.
<H3C> reset encrypt-card syslog 5/0/0
6.2.15 snmp-agent trap enable encrypt-card
Syntax
snmp-agent trap enable encrypt-card

undo snmp-agent trap enable encrypt-card
View
System view
Parameter
None
Description
Use the snmp-agent trap enable encrypt-card command to enable SNMP agent trap
function on the encryption card.
6-48
Use the undo snmp-agent trap enable encrypt-card command to disable SNMP
agent trap function on the card.
By default, the function is enabled.
When combined with appropriate NM configuration, the trap function allows you to view
information about card reboot, state transition and packet loss processing on the
Console of the NM station or router.
Example
# Enable the trap function on the encryption card.

[H3C] snmp-agent trap enable encrypt-card
6.2.16 use encrypt-card
Syntax
use encrypt-card [ slot-id ]

undo use encrypt-card [ slot-id ]
View
Card SA proposal view
Parameter
Description
Use the use encrypt-card command to specify the SA proposal uses the encryption
card at a designated slot.
Use the undo use encrypt-card command to remove the configuration.
One SA proposal can only be processed by a single encryption card, but one single
encryption card can process different SA proposals.
Related command: ipsec card-proposal.
Example
# Configure the slot holding the encryption card used by the encryption card SA
proposal named card.
[H3C] ipsec card-proposal card
[H3C-ipsec-card-proposal] use encrypt-card 5/0/0
6-49
6.3 IPSec DPD Configuration Commands

6.3.1 debugging ike dpd
Syntax
debugging ike dpd

undo debugging ike dpd
View
User view
Parameter
None
Description
Use the debugging ike dpd command to enable IKE DPD debugging.
Use the undo debugging ike dpd command to disable IKE DPD debugging.
The following table describes the fields of the debugging ike dpd command.
Table 6-9 Description on the fields of the debugging ike dpd command
Field Description
Peername Name of the IKE peer
Two options are available:
Response, indicating that the IKE peer is the receiver of
type a DPD query
Request: indicating that the IKE peer is the sender of a
DPD query
Types of actions:
recv dpd request, meaning a DPD query is received.
send dpd response, meaning a DPD response is sent.
action
send dpd request, meaning a DPD query is sent.
recv dpd response, meaning a DPD response is
received.
seqno Sequence number of a DPD query
Example
# Enable IKE DPD debugging.

<H3C> debugging ike dpd
peer1 RESPONSE(recv dpd request): received a message (seqno:1249119552)
peer1 RESPONSE(send dpd response): send a message (seqno:1249119552)
6-50
peer1 REQUEST(send dpd request): send a message (seqno:1249119550)

peer1 REQUEST(recv dpd response): received a message (seqno:1249119550)
6.3.2 display ike dpd
Syntax
display ike dpd [ dpd-name ]
View
Any view
Parameter
dpd-name: DPD structure name.
Description
Use the display ike dpd command to display the configuration of the specified or all
DPD structures about reference count, interval-time, and time_out.
Example
# Display information about all the configured DPD structures.

[H3C] display ike dpd
---------------------------
IKE dpd: aaa
references: 0
interval-time: 10
time_out: 5
---------------------------
---------------------------
IKE dpd: xhy
references: 1
interval-time: 10
time_out: 5
Table 6-10 Description on the fields of the display ike dpd command
Field Description
IKE dpd IKE DPD structure name
references DPD structure reference count
interval-time Interval for triggering DPD queries
time_out Timeout time for a DPD query
6-51
6.3.3 dpd
Syntax
dpd dpd-name
undo dpd
View
IKE peer view
Parameter
dpd-name: DPD structure name.
Description
Use the dpd command to reference a DPD structure.

Use the undo dpd command to remove the referenced DPD structure.
The DPD structure referenced by an IKE peer must be one that has existed.
Each time a DPD structure is referenced, its reference counter increments by one; each
time this structure is removed, its reference counter decrements by one.
Related command: ike dpd.
Example
# Configure IKE peer 1 to reference DPD structure aaa.

[H3C-ike-peer-peer1] dpd aaa
# Remove the DPD structure referenced by IKE peer 1.

[H3C-ike-peer-peer1] undo dpd
6.3.4 ike dpd
Syntax
ike dpd dpd-name

undo ike dpd dpd-name
View
System view
Parameter
dpd-name: Name of dead peer detection (DPD) structure.
Description
Use the ike dpd command to create a DPD structure and enter its view.
6-52
Use the undo ike dpd command to delete the specified DPD structure.
If a DPD structure has been referenced by an IKE peer, it cannot be deleted.
Related command: dpd.
Example
# Create a DPD structure named aaa.

[H3C] ike dpd aaa
# Delete the DPD structure named aaa.

[H3C] undo ike dpd aaa
6.3.5 interval-time
Syntax
interval-time seconds
undo interval-time
View
DPD structure view
Parameter
seconds: Interval for triggering DPD queries, in the range 1 to 300 seconds. It defaults
to 10 seconds.
Description
Use the interval-time command to configure the interval for triggering DPD query.
Use the undo interval-time command to restore the default.
Example
# Set interval-time to 20 seconds.

[H3C-ike-dpd-aaa] interval-time 20
# Reset interval-time to 10 seconds.

[H3C-ike-dpd-aaa]undo interval-time
6.3.6 time-out
Syntax
time-out seconds
undo time-out
6-53
View
DPD structure view
Parameter
seconds: Time waiting for a DPD acknowledgement, in the range 1 to 60 seconds. It

Description
Use the time-out command to configure the time waiting for a DPD acknowledgement.
Use the undo time-out command to restore the default.
Example
# Set time-out to two seconds.

[H3C-ike-dpd-aaa] time-out 2
# Reset time-out to five seconds.

[H3C-ike-dpd-aaa] undo time-out
6-54
Comware V3 Chapter 7 IKE Configuration Commands
Chapter 7 IKE Configuration Commands
7.1 IKE Configuration Commands

7.1.1 authentication-algorithm
Syntax
authentication-algorithm { md5 | sha }

undo authentication-algorithm
View
IKE proposal view
Parameter
md5: Selects the authentication algorithm: HMAC-MD5.

sha: Selects the authentication algorithm: HMAC-SHA1.
Description
Use the authentication-algorithm command to select the authentication algorithm for

an IKE proposal.
Use the undo authentication-algorithm command to restore the authentication
algorithm for an IKE proposal to the default.
By default, HMAC-SHA1 authentication algorithm is used.
Related command: ike proposal, display ike proposal.
Example
# Set HMAC-MD5 as the authentication algorithm for IKE proposal 10.

[H3C] ike proposal 10
[H3C-ike-proposal-10] authentication-algorithm md5
7.1.2 authentication-method
Syntax
authentication-method { pre-share | rsa-signature }

undo authentication-method
View
IKE proposal view
7-1
Parameter
pre-share: Specifies the pre-shared key authentication as the Internet Key Exchange
(IKE) proposal authentication method.
rsa-signature: specifies to authenticate through PKI digital signature.
Description
Use the authentication-method command to select the authentication method used

by an IKE proposal.
Use the undo authentication-method command to restore the authentication method
used by an IKE proposal to the default.
By default, the authentication method used by an IKE proposal is pre-shared key
authentication.
You can specify an authentication method for an IKE policy. So far, two methods are
available: pre-shared key and PKI (rsa-signature).
Authentication key must be configured to adopt the pre-shared key authentication
method.
Related command: ike pre-shared-key, ike proposal, display ike proposal, pki
domain, and pki entity.
Note:
For more information on configuring PKI, refer to “PKI Configuration” in this manual.
Example
# Specify pre-shared key authentication as the authentication method for IKE proposal
10.
[H3C-ike-proposal-10] authentication-method pre-share
7.1.3 debugging ike
Syntax
debugging ike { all | error | exchange | message | misc | transport}

undo debugging ike { all | error | exchange | message | misc | transport}
View
User view
7-2
Parameter
all: All IKE debugging functions.

error: IKE error debugging information.
exchange: IKE exchange mode debugging information.
message: IKE message debugging information.
misc: All the other IKE debugging information.
transport: IKE transport debugging information.
Description
Use the debugging ike command to enable IKE debugging.

Use the undo debugging ike command to disable IKE debugging.
By default, IKE debugging is disabled.
Example
# Enable IKE error debugging.

<H3C> debugging ike error
7.1.4 dh
Syntax
dh { group1 | group2 | group5 | group14 }

undo dh
View
IKE proposal view
Parameter
group1: Selects group1, that is, the 768-bit Diffie-Hellman group, for key negotiation at
phase 1 of IKE.
group2: Selects group2, that is, the 1024-bit Diffie-Hellman group, for key negotiation
at phase 1 of IKE.
group5: Selects group5, that is, the 1536-bit Diffie-Hellman group, for key negotiation
at phase 1 of IKE.
group14: Selects group14, that is, the 2048-bit Diffie-Hellman group, for key
negotiation at phase 1 of IKE.
Description
Use the dh command to select the Diffie-Hellman group for an IKE proposal.
7-3
Use the undo dh command to restore the Diffie-Hellman group for an IKE proposal to
the default.
By default, group1, that is, 768-bit Diffie-Hellman group is used.
Related command: ike proposal, display ike proposal.
Example
# Specify 768-bit Diffie-Hellman for IKE proposal 10.

[H3C-ike-proposal-10] dh group1
7.1.5 display ike peer
Syntax
display ike peer [ peer-name ]
View
Any view
Parameter
peer-name: Name of an IKE peer.
Description
Use the display ike peer command to view the configuration about the specified or all
IKE peers.
Example
# Display the configuration about all IKE peers.

[H3C-ike-peer-good] display ike peer
---------------------------
IKE Peer: good
exchange mode: main on phase 1
pre-shared-key:
peer id type: ip
peer ip address: 0.0.0.0 ~ 255.255.255.255
peer name:
nat traversal: disable
---------------------------
7-4
7.1.6 display ike proposal
Syntax
display ike proposal
View
Any view
Parameter
None
Description
Use the display ike proposal command to view the parameters configured for each
IKE proposal.
This command shows IKE proposals in the sequence of the priority.
Related command: authentication-method, ike proposal, encryption-algorithm,
authentication-algorithm, dh, sa duration.
Example
# Display the IKE proposal information after two IKE proposals are configured.
[H3C] display ike proposal
priority authentication authentication encryption Diffie-Hellman duration
method algorithm algorithm group (seconds)
--------------------------------------------------------------------
10 PRE_SHARED SHA DES_CBC MODP_1024 5000
11 PRE_SHARED MD5 DES_CBC MODP_768 50000
default PRE_SHARED SHA DES_CBC MODP_768 86400
Table 7-1 Description on the fields of the display ike proposal command
Field Description
Priority of the IKE proposal, an integer in the range 1 to
Priority
100, with a higher number indicating a lower priority
authentication algorithm Authentication algorithm in the IKE proposal
authentication method Authentication mode in the IKE proposal
encryption algorithm Encryption algorithm in the IKE proposal
Diffie-Hellman group Diffie-Hellman group identifier
duration ISAKMP SA lifetime in the IKE proposal
7-5
7.1.7 display ike sa
Syntax
display ike sa [ verbose ]
View
Any view
Parameter
verbose: Specifies to display detailed information.
Description
Use the display ike sa command to view the current security tunnels established by
IKE.
Related command: ike proposal.
Example
# View detailed information about the security tunnels established by IKE.

[H3C] display ike sa verbose
---------------------------------------------
connection id: 2
transmitting entity: initiator
---------------------------------------------
local ip: 1.1.1.11
local id type: IPV4_ADDR
local id: 1.1.1.11
remote ip: 1.1.1.10

remote id type: IPV4_ADDR
remote id: 1.1.1.10
authentication-method: PRE-SHARED-KEY
authentication-algorithm: HASH-SHA1
encryption-algorithm: DES-CBC
life duration(sec): 86400

remaining key duration(sec): 86391
exchange-mode: MAIN
diffie-hellman group: GROUP1
nat traversal: NO
7-6
Table 7-2 Description on the fields of the display ike sa verbose command
Field Description
connection id Security tunnel ID
transmitting entity IKE negotiation initiator or responder
local ip IP address of the local SA peer
local id type ID type of the local SA peer
local id ID of the local SA peer
remote IP address of the remote SA peer
remote id type ID type of the remote SA peer
remote id ID of the remote SA peer
authentication-method Authentication method used by the IKE proposal
authentication-algorithm Authentication algorithm used by the IKE proposal
encryption-algorithm Encryption algorithm used by the IKE proposal
life duration(sec) Lifetime of the SA

remaining key duration(sec) Remaining lifetime of the SA
IKE negotiation mode, master mode or aggressive
exchange-mode
mode
diffie-hellman group Diffie-Hellman group used by the IKE proposal
nat traversal Supports NAT traversal
# View the security tunnels established by IKE.

[H3C] display ike sa
connection-id peer flag phase doi
----------------------------------------------------------
3 1.1.1.10 RD|ST 2 IPSEC
2 1.1.1.10 RD|ST 1 IPSEC
flag meaning
RD--READY ST--STAYALIVE RL--REPLACED FD--FADING TO--TIMEOUT
# View the security tunnels established by IKE.

[H3C] display ike sa
total phase-1 SAs: 2
connection-id peer flag phase doi
1 202.38.0.2 RD|ST 1 IPSEC
2 202.38.0.2 RD|ST 2 IPSEC
flag meaning:
RD--READY ST--STAYALIVE RL--REPLACED FD—FADING TO-TIMEOUT
7-7
The descriptions of the items displayed are listed in the following table.
Table 7-3 Description on the fields of the display ike sa command
Field Description
total phase-1 SAs Total number of SAs in the first phase of IKE negotiation
connection-id Security tunnel ID
peer Remote IP address of this SA
Display the status of this SA
RD (READY) means this SA has been established
successfully
ST (STAYALIVE) means that SA duration is negotiated, and
this SA will be refreshed in fixed interval.
RL (REPLACED) means that this SA has been replaced by
flag a new one, and will be automatically deleted after a period
of time.
FD (FADING) means this SA has been soft timeout, but is
still in use, and will be deleted at the time of hard timeout.
TO (TIMEOUT) means this SA have not received any
keepalive packet after previous keepalive timeout
occurred. If this SA receives no keepalive packet till next
keepalive timeout occurs, this SA will be deleted.
Phase of the SA:
Phase 1: a phase of establishing security tunnel to
phase communicate, ISAKMP SA will be established in the phase;
Phase 2: a phase of negotiating security service, IPSec SA
will be established in the phase.
doi Domain of Interpretation
7.1.8 encryption-algorithm
Syntax
encryption-algorithm { des-cbc | 3des-cbc | aes-cbc [ 128 |192 |256 ] }

undo encryption-algorithm
View
IKE proposal view
Parameter
des-cbc: Selects the 56-bit DES-CBC encryption algorithm for an IKE proposal. DES
algorithm adopts 56-bit keys for encryption.
7-8
3des-cbc: Sets the encryption algorithm to the 3DES algorithm in CBC mode. The
3DES algorithm uses 168-bit keys for encryption.
aes-cbc [ 128 | 192 | 256 ]: Sets the encryption algorithm to AES in CBC mode. 128 bits,
192 bits, and 256 bits are available key lengths. The default is 128 bits.
Description
Use the encryption-algorithm command to specify the encryption algorithm for an IKE
proposal.
Use the undo encryption-algorithm command to restore to the default.
By default, 56-bit DES-CBC encryption algorithm is used.
Related command: ike proposal and display ike proposal.
Example
# Specify the 56-bit DES-CBC encryption algorithm for IKE proposal 10.
[H3C-ike-proposal-10] encryption-algorithm des-cbc
7.1.9 exchange-mode
Syntax
exchange-mode { aggressive | main }

undo exchange-mode
View
IKE-peer view
Parameter
aggressive: Aggressive mode

main: Main mode.
Description
Use the exchange-mode command to select an IKE negotiation mode.

Use the undo exchange-mode command to restore the default negotiation mode. By
default, main mode is adopted.
In main mode, you can only use IP address to perform IKE negotiation and to create an
SA. It is applicable to the situation in which both ends of a tunnel have fixed IP
addresses.
In IKE aggressive mode, you can use both IP addresses and name to perform IKE
negotiation and to create an SA. If the user at one end of a security tunnel obtains IP
address automatically (for example, a dial-up user), IKE negotiation mode must be set
7-9
to aggressive. In this case, you can create an SA as long as the username and
password are correct.
Related command: id-type.
Example
# Adopt the main mode for IKE negotiation.

[H3C] ike peer new_peer
[H3C-ike-peer-new_peer] exchange-mode main
7.1.10 id-type
Syntax
id-type { ip | name }
undo id-type
View
IKE-peer view
Parameter
ip: Selects IP address as the ID used in IKE negotiation.

name: Selects name as the ID used in IKE negotiation.
Description
Use the id-type command to select the type of ID used in IKE negotiation.
Use the undo id-type command to restore the default setting. By default, IP address is
the ID used in IKE negotiation.
In main mode, you can only use IP address to perform IKE negotiation and to create an
SA.
In aggressive mode, you can use both IP address and name to perform Ike negotiation
and to create an SA.
Related command: ike local-name.
Example
# Set name as the ID used in IKE negotiation.

[H3C-ike-peer-new_peer] id-type name
7-10
7.1.11 ike next-payload check disabled
Syntax
ike next-payload check disabled

undo ike next-payload check disabled
View
System view
Parameter
None
Description
Use the ike next-payload check disabled command to disable the router to check the
next-payload field in the last payload of the IKE negotiation packet during IPSec
negotiation for compatibility with other vendors.
Use the undo ike next-payload check disabled command to restore the default,
checking the next payload field.
An IKE negotiation packet comprises multiple payloads; the next-payload field is in the
generic header of the last payload. According to the protocol, this field should be set to
0. It however may vary by vendor. For compatibility sake, you can use the ike
next-payload check disabled command to ignore this field during IPSec negotiation.
Example
# Disable the router to check the next-payload field in the last payload of the IKE
negotiation packet during IPSec negotiation.
[H3C] ike next-payload check disabled
7.1.12 ike local-name
Syntax
ike local-name name

undo ike local-name
View
System view
Parameter
name: Name of the local GW in IKE negotiation, which contains 1 to 32 characters.
7-11
Description
Use the ike local-name command to set the name of the local GW.
Use the undo ike local-name command to restore the default name of the local GW.
By default, router name is used as the name of the local GW.
If the initiator uses the GW name to perform IKE negotiation (id-type name is used),
you must configure the ike local-name command on the local device.
Related command: remote-name.
Example
# Identify the local GW by the configured name “beijing_VPN”

[H3C] ike local-name beijing_VPN
7.1.13 ike peer (in System View)
Syntax
ike peer peer-name

undo ike peer peer-name
View
System view
Parameter
peer-name: IKE peer name, which can be a string of up to 15 characters.
Description
Use the ike peer command to configure an IKE peer and access IKE-peer view.
Use the undo ike peer command to delete an IKE peer.
Example
# Configure an IKE peer “new_peer” and access its view.

[H3C-ike-peer-new_peer]
7.1.14 ike peer (In IPSec policy view or IPSec policy template view)
Syntax
ike peer peer-name

undo ike peer peer-name
7-12
View
Parameter
peer-name: IKE peer name, which is a string of up to 15 characters.
Description
Use the ike peer command to quote an IKE peer in an IPSec policy or IPSec policy
template.
Use the undo ike peer command to remove the quoted IKE peer from the IPSec policy
or IPSec policy template.
Related command: ipsec policy.
Example
# Quote an IKE peer in the IPSec policy.

[H3C-ipsec-policy-isakmp-policy-10] ike peer new_peer
7.1.15 ike proposal
Syntax
ike proposal proposal-number

undo ike proposal proposal-number
View
System view
Parameter
proposal-number: IKE proposal number, ranging from 1 to 100. This value also stands
for the priority. A smaller value stands for a higher priority. When perform an IKE
negotiation, the system matches IKE proposals by the proposal number, the one with
the smallest proposal number first.
Description
Use the ike proposal command to define an IKE proposal.

Use the undo ike proposal command to delete an IKE proposal.
The system provides a default IKE proposal with the lowest priority.
Executing this command in system view will enter the IKE proposal view, where you
can set parameters such as authentication method, encryption algorithm,
authentication algorithm, DH group ID, and sa duration for this IKE proposal using the
7-13
authentication-method, encryption-algorithm, dh, authentication-algorithm, and

sa duration command.
The Default IKE proposal has the following default parameters:
Encryption algorithm: DES-CBC
Authentication algorithm: HMAC-SHA1
Authentication method: Pre-Shared Key
DH group ID: MODP_768
SA duration: 86400 seconds
These parameters will be used to establish a security tunnel once these parameters are
confirmed by the both sides of the negotiation.
Both sides of the negotiation can be configured more than one IKE proposal. During the
negotiation, the IKE proposals in both sides are selected to match one by one, by turns
of their priority levels. The parameters that must be same during the match are
encryption algorithm, authentication algorithm, authentication method, and DH group.
The sa duration is decided by the initiator of the negotiation, needing no agreement.
Related command: authentication-algorithm, encryption-algorithm, dh,
authentication-algorithm, sa duration, display ike policy.
Example
# Define IKE proposal 10.

[H3C-ike-proposal-10] authentication-algorithm md5
[H3C-ike-proposal-10] authentication-method pre-share
[H3C-ike-proposal-10] sa duration 5000
7.1.16 ike sa keepalive-timer interval
Syntax
ike sa keepalive-timer interval seconds

undo ike sa keepalive-timer interval
View
System view
Parameter
seconds: Specifies the interval for sending Keepalive packet to the remote end through
ISAKMP SA. It can be set to a value in the range 20 to 28800.
7-14
Description
Use the ike sa keepalive-timer interval command to configure the interval for sending
Keepalive packet to the remote end through ISAKMP SA.
Use the undo ike sa keepalive-timer interval command to disable the function.
This command is used to configure the interval for sending Keepalive packet to the
remote end through ISAKMP SA. IKE maintains the link state of the ISAKMP SA by
using the Keepalive packet. In general, if a timeout is configured at the remote end by
using the ike sa keepalive-timer timeout command, an interval for sending Keepalive
packet must be configured at the local end. When the remote end in the configured
timeout time does not receive the Keepalive packet, the ISAKMP SA with the TIMEOUT
flag and the IPSec SA corresponding to it will be deleted, and otherwise the ISAKMP
SA without the TIMEOUT flag will be marked as TIMEOUT. Thus the configured timeout
should be longer than the interval for sending the Keepalive packet during
configuration.
Related command: ike sa keepalive-timer timeout.
Example
# Configure the interval as 20 seconds for the local end to send Keepalive packet to the
remote end.
[H3C] ike sa keepalive-timer interval 20
7.1.17 ike sa keepalive-timer timeout
Syntax
ike sa keepalive-timer timeout seconds

undo ike sa keepalive-timer timeout
View
System view
Parameter
seconds: Specifies the timeout for ISAKMP SA to wait for the Keepalive packet. It can
be set to a value in the range 20 to 28800.
Description
Use the ike sa keepalive-timer timeout command to configure a timeout for ISAKMP
SA to wait for the Keepalive packet.
Use the undo ike sa keepalive-timer timeout command to disable the function.
7-15
This command is used to configure the timeout for the remote end to send the
Keepalive packet. IKE maintains the link state of the ISAKMP SA by using the
Keepalive packet. When the remote end in the configured timeout does not receive the
Keepalive packet, the ISAKMP SA with the TIMEOUT flag and the IPSec SA
corresponding to it will be deleted, and otherwise the ISAKMP SA without the
TIMEOUT flag will be marked as TIMEOUT. Thus the configured timeout should be
longer than the interval for sending the Keepalive packet during configuration.
Generally, packets will not be lost for more than three consecutive times in the network,
so the timeout can be configured as three times of the interval set for the remote end to
send Keepalive packets.
Related command: ike sa keepalive-timer interval.
Example
# Configure the timeout as 20 seconds for the local end to wait for the remote end to
send the Keepalive packet.
[H3C] ike sa keepalive-timer timeout 20
7.1.18 ike sa nat-keepalive-timer interval
Syntax
ike sa nat-keepalive-timer interval seconds

undo ike sa nat-keepalive-timer interval
View
System view
Parameter
seconds: Specifies the NAT keepalive interval for IKE peers, in the range 5 to 300
seconds.
Description
Use the ike sa nat-keepalive-timer interval command to configure the NAT keepalive
interval for IKE peers.
Use the undo ike sa nat-keepalive-timer interval command to disable NAT keepalive
for IKE peers.
The NAT keepalive interval must be less than the translation timeout of NAT.
This function is enabled automatically when IPSec implements NAT traversal, and the
default interval is 20 seconds.
By default, NAT keepalive of IKE is disabled.
7-16
Example
# Set the NAT keepalive interval to 30 seconds for IKE peers.

[H3C] ike sa nat-keepalive-timer interval 30
7.1.19 local
Syntax
local { multi-subnet | single-subnet }

undo local
View
IKE-peer view
Parameter
multi-subnet: Sets the subnet type to multiple.

single-subnet: Sets the subnet type to single.
Description
Use the local command to configure the subnet type in IKE negotiation.
Use the undo local command to restore the default subnet type. You can use this
command to enable interoperability between the router and a Netscreen device.
The default is single-subnet.
Example
# Set the subnet type in IKE negotiation to multiple.

[H3C-ike-peer-xhy] local multi-subnet
7.1.20 local-address
Syntax
local-address ip-address
undo local-address
View
IKE-peer view
Parameter
ip-address: IP address of the local GW in IKE negotiation.
7-17
Description
Use the local-address command to configure the IP address of the local GW in IKE
negotiation.
Use the undo local-address command to delete the IP address of the local GW.
Normally, you do not need to configure the local-address command, unless you want
to specify a special address for the local GW.
Example
# Set the IP address of the local GW to 1.1.1.1.

[H3C-ike-peer-xhy] local-address 1.1.1.1
7.1.21 nat traversal
Syntax
nat traversal
undo nat traversal
View
IKE-peer view
Parameter
None
Description
Use the nat traversal command to configure the NAT traversal function of IKE/IPSec.
Use the undo nat traversal command to disable the NAT traversal function of
IKE/IPSec.
This command fits for the application that the NAT GW functionality is included in the
VPN tunnel constructed by IKE/IPSec.
To save IP address space, ISPs often deploy NAT gateways on public networks so that
private IP addresses can be allocated to users. The likelihood thus exists that at one
end of an IPSec/IKE tunnel is a public address and at the other end is a private one. To
set up the tunnel in this case, you must configure NAT traversal at both private network
side and public network side.
Example
# Configure the NAT traversal function under the IKE peer new_peer..
[H3C-ike-peer-new_peer] nat traversal
7-18
7.1.22 pre-shared-key
Syntax
pre-shared-key key
undo pre-shared-key
View
IKE-peer view
Parameter
key: Specifies a pre-shared key, which is a string of 1 to 128 characters.
Description
Use the pre-shared-key command to configure a pre-shared key to be used in IKE

negotiation.
Use the undo pre-shared-key command to remove the pre-shared key used in IKE
negotiation.
Example
# Set the pre-shared key used in IKE negotiation to “abcde”.

[H3C-ike-peer-new_peer] pre-shared-key abcde
7.1.23 peer
Syntax
peer { multi-subnet | single-subnet }

undo peer
View
IKE-peer view
Parameter
multi-subnet: Sets the subnet type to multiple.

single-subnet: Sets the subnet type to single.
Description
Use the peer command to configure the subnet type in IKE negotiation.
Use the undo peer command to restore the default subnet type. You can use this
command to enable interoperability between the router and a Netscreen device.
7-19
The default is single-subnet.
Example
# Set the subnet type in IKE negotiation to multiple.

[H3C-ike-peer-xhy] peer multi-subnet
7.1.24 remote-address
Syntax
remote-address ip-address1 [ ip-address2 ]

undo remote-address
View
IKE-peer view
Parameter
ip-address: IP address, which can be the address of a network segment. When both the
ip-address1 and ip-address2 arguments are specified, they are the low address and
high address of a remote-address range. If an address range is specified, the router
could function as a receiver to receive negations initiated by the peers within the
address range.
Description
Use the remote-address command to configure IP address of the remote GW.

Use the undo remote-address command to delete IP address of the remote GW.
During an IKE negotiation, the initiator sends its IP address as its identity to the peer if
the id-type ip command is configured. The peer then uses the address or address
range configured with the remote-address command to authenticate the initiator. To
guarantee a successful authentication, you must make sure that the IP address
configured with the local-address command on the initiator is the same address or
within the address range configured with the remote-address command.
Example
# Set IP address of the remote GW to 10.0.0.1.

[H3C-ike-peer-new_peer] remote-address 10.0.0.1
7.1.25 remote-name
Syntax
remote-name name
7-20
undo remote-name
View
IKE-peer view
Parameter
name: Specifies a name for the peer in IKE negotiation. It is a string of 1 to 32

characters.
Description
Use the remote-name command to specify a name for the remote GW.
Use the undo remote-name command to remove the remote GW.
If the initiator uses its GW name in IKE negotiation (that is, id-type name is used), it
sends the name to the peer as its identity, whereas the peer uses the username
configured using the remote-name name command to authenticate the initiator. To
pass authentication, this remote name must be the same one configured using the ike
local-name command on the gateway at the initiator end.
Example
# Set the name of the remote GW to citya.

[H3C-ike-peer-new_peer] remote-name citya
7.1.26 reset ike sa
Syntax
reset ike sa [ connection-id ]
View
User view
Parameter
connection-id: Specifies the SA to be deleted. If this parameter is not specified, all the
SAs at phase 1 will be deleted.
Description
Use the reset ike sa command to delete the security tunnel set up by IKE.
If connection-id is not specified, all the SAs at phase 1 will be deleted. If ISAKMP SA at
phase 1 exists when deleting the local security tunnel, a Delete Message notification
will be sent to the remote under the protection of this security tunnel to notify the remote
to delete the corresponding SA.
7-21
IKE uses ISAKMP of two phases: phase 1 or ISAKMP SA to establish SA, phase 2 or
IPSec SA to negotiate and establish IPSec SA, using the former established SA.
Related command: display ike sa.
Example
# Delete the security tunnel to 202.38.0.2.

<H3C> display ike sa
conn-id remote flag phase doi
1 202.38.0.2 RD|ST 1 IPSEC
2 202.38.0.2 RD|ST 2 IPSEC
flag meaning:
RD--READY ST--STAYALIVE RT--REPLACED FD--FADING
<H3C> reset ike sa 2
<H3C> display ike sa
conn-id remote flag phase doi
2 202.38.0.2 RD|ST 2 IPSEC
flag meaning:
RD--READY ST--STAYALIVE RT--REPLACED FD—FADING TO—TIMEOUT
Caution:
If the SA of phase 1 is deleted first, the remote end cannot be informed of clearing the
SA database when deleting the SA of phase 2.
7.1.27 sa duration
Syntax
sa duration seconds
undo sa duration
View
IKE proposal view
Parameter
seconds: Specifies the ISAKMP Sa duration. When the sa duration expires, ISAKMP
SA will update automatically. It can be set to a value in the range 60 to 604800 seconds.
7-22
Description
Use the sa duration command to specify the ISAKMP Sa duration for an IKE proposal.
Use the undo sa duration command to restore it to the default.
By default, the value of ISAKMP Sa duration is 86400 seconds (one day).
Before the sa duration for a SA expires, a new SA will be negotiated for replacing the
existing SA, and the old SA will be automatically cleared when the Sa duration expires.
Related command: ike proposal and display ike proposal.
Example
# Specify the ISAKMP Sa duration for IKE proposal 10 as 600 seconds (10 minutes).
[H3C-ike-proposal-10] sa duration 600
7-23
Comware V3 Chapter 8 PKI Configuration Commands
Chapter 8 PKI Configuration Commands
8.1 PKI Domain Configuration Commands

8.1.1 ca identifier
Syntax
ca identifier name
undo ca identifier
View
PKI domain view
Parameter
name: CA identifier this device trusts, within the range of 1 to 63 characters
Description
Use the ca identifier command to specify the CA this device trusts and have the
"name" CA bound with this device.
Use the undo ca identifier command to delete the CA this device trusts.
By default, no trusted CA is specified.
Before the CA is deleted, the request, retrieval, revocation and polling of this certificate
are all carried out through it.
Example
# Specify the name of the CA this device trusts

[H3C-pki-domain-1] ca identifier new-ca
8.1.2 certificate request entity
Syntax
certificate request entity entity-name

undo certificate request entity
View
PKI domain view
8-1
Parameter
entity-name: Name of the entity for certificate request, a string consisting 1 to 15

characters. It must be identical to the entity name specified by using the pki entity
command.
Description
Use the certificate request entity command to specify the name of the entity for
certificate request.
Use the undo certificate request entity command to delete the entity for certificate
request.
By default, no entity is specified for certificate request.
Related command: pki entity.
Example
# Specify to use the entity named entity1 for certificate request.

[H3C-pki-domain-1] certificate request entity entity1
8.1.3 certificate request from
Syntax
certificate request from { ca | ra }

undo certificate request from
View
PKI domain view
Parameter
ca: indicates that the entity registers by CA for certificate request.

ra: indicates that the entity registers by RA for certificate request.
Description
Use the certificate request from command to choose between CA and RA to register
for certificate request.
Use the undo certificate request from command to undo the selected registration
agent.
RA offers an extension to the CA certificate issue management. It takes charge of the
input and verification of the applicant information as well as the certificate issuing. But it
supports no signature function. Within some minor PKI systems, there is no RA and its
functions are implemented through CA.
8-2
By default, no registration agent is specified. PKI security policy recommends RA as

registration agent.
Example
# Specify that the entity registers by CA for certificate request

[H3C-pki-domain-1] certificate request from ca
8.1.4 certificate request mode
Syntax
certificate request mode { manual | auto [ key-length key-length | password

{ simple | cipher } password ]* }
undo certificate request mode
View
PKI domain view
Parameter
manual: refers to the manual certificate request mode;

auto: refers to the auto certificate request mode.
key-length: Length of the RSA key, in the range 512 to 2048 bits.
simple: Specifies to display the password in clear text.
cipher: Specifies to display the password in ciphertext.
password: Password used for revoking a certificate, a string consisting of 1 to 31
characters.
Description
Use the certificate request mode command to decide between the manual or the auto
request mode.
Use the undo certificate request mode command to restore the default request
mode.
Auto mode enables the auto delivery of certificate request when there is no certificate
or when the current certificate is about to expire, while manual mode requires manual
operation in the request process.
By default, certificate request is carried out manually.
Related command: pki request-certificate.
Example
# Set the request mode to Auto
8-3
[H3C-pki-domain-1] certificate request mode auto
8.1.5 certificate request polling
Syntax
certificate request polling { interval minutes | count count }

undo certificate request polling { interval | count }
View
PKI domain view
Parameter
minutes: renders the interval between two polls. Specified in minutes, it ranges from 5
to 60 minutes, and by default, it is 20 minutes;
count: indicates the retry times. It ranges from 1 to 100, and by default, is 50.
Description
Use the certificate request polling command to specify the interval between two polls
and the retry times.
Use the undo certificate request polling command to restore the default parameters.
When the request is delivered, if CA requires manual authentication, it takes a long time
before the certificate issuing. The client therefore needs to periodically poll the request
for the timely acquisition of the certificate after being authorized.
Related command: display pki certificate.
Example
# Specify the interval between two polls and the retry times
[H3C-pki-domain-1] certificate request polling interval 15
[H3C-pki-domain-1] certificate request polling count 40
8.1.6 certificate request url
Syntax
certificate request url string

undo certificate request url
View
PKI domain view
8-4
Parameter
string: refers to the server URL of the registration authority. Ranging from 1 to 127
characters, it composes server location and CA CGI command interface script location
in the format of http: //server_location /ca_script_location. Among them,
server_location is generally expressed as IP address.
Description
Use the certificate request url command to specify the server URL for certificate
request through SCEP protocol. SCEP is a protocol specialized in the communication
with authentication authorities.
Use the undo certificate request url command to delete the concerned location
setting.
By default, no server URL is specified.
Example
# Specify the server location for certificate request

[H3C-pki-domain-1] certificate request url http: //169.254.0.100/
certsrv/mscep/mscep.dll
8.1.7 crl check disable
Syntax
crl check disable

undo crl check disable
View
PKI domain view
Parameter
None
Description
Use the crl check disable command to disable CRL checking.

Use the undo crl check disable command to enable CRL checking.
By default, CRL checking is enabled.
Example
# Disable CRL checking.

[H3C-pki-domain-1] crl check disable
8-5
8.1.8 crl update-period
Syntax
crl update-period hours

undo crl update-period
View
PKI domain view
Parameter
hours: Update period in hours.
Description
Use the crl update-period command to specify the update period of CRL, which is the
interval between local downloads of CRLs from CRL access server.
Use the undo crl update-period command to restore the default CRL update period.
By default, it updates according to CRL validity period.
Example
# Set the CRL update period to 20 hours.

[H3C-pki-domain-1] crl update-period 20
8.1.9 crl url
Syntax
crl url url-string

undo crl url
View
PKI domain view
Parameter
url-string: refers to the distribution point location of CRL. Ranging from 1 to 127
characters, it is in the formats of ldap: //server_location, scep://server_location, or
http://server_location. Among them, server_location is generally expressed as IP
address, which if is to be replaced by server name, DNS needs to be configured for the
match between IP addresses and server names.
Description
Use the crl url command to specify the distribution point URL for CRL.
8-6
Use the undo crl url command to undo the specification.

By default, no CRL distribution point URL is specified.
Example
# Specify the URL location of CRL database

[H3C-pki-domain-1] crl url ldap: //169.254.0 30
8.1.10 ldap-server
Syntax
ldap-server ip ip-address [ port port-num ] [ version version-number ]

undo ldap-server ip
View
PKI domain view
Parameter
ip-address: IP address of LDAP server;

port-num: port number of LDAP server, ranging from 1 to 65535. By default, it is 389.
version-number: LDAP version number, alternatively 2 or 3. By default, it is 2.
Description
Use the ldap-server ip command to configure the LDAP server IP address and the
port.
Use the undo ldap-server ip command to cancel the related configuration.
By default, no LDAP server IP address or port is configured.
Example
# Specify the LDAP server address

[H3C-pki-domain-1] ldap-server ip 169.254.0 30
8.1.11 pki domain
Syntax
pki domain name

undo pki domain name
View
System view
8-7
Parameter
name: PKI domain name specified for the quotation of other commands, indicating the
PKI domain to which this device belongs. It can contain 1 to 15 characters.
Description
Use the pki domain command to enter PKI domain view, and configure the parameters
of LDAP server and for certificate request and authentication.
Use the undo pki domain command to delete the specified PKI domain.
By default, no PKI domain name is specified.
Example
# Enter PKI domain view

[H3C] pki domain 1
[H3C-pki-domain-1]
8.1.12 root-certificate fingerprint
Syntax
root-certificate fingerprint { md5 | sha1 } string

undo root-certificate fingerprint
View
PKI domain view
Parameter
md5: Specifies to use an MD5 fingerprint.

sha1: Specifies to use an SHA1 fingerprint.
string: Fingerprint to be used. For an MD5 fingerprint, it must consist of 32 characters
and be entered in hexadecimal format. For an SHA1 fingerprint, it must consist of 40
characters and be entered in hexadecimal format.
Description
Use the root-certificate fingerprint command to configure the fingerprint for

authenticating the CA root certificate.
Use the undo root-certificate fingerprint command to delete the fingerprint for
authenticating the CA root certificate.
By default, no fingerprint is configured for authenticating the CA root certificate.
Example
# Configure an MD5 fingerprint for authenticating the CA root certificate.
8-8
[H3C-pki-domain-1] root-certificate fingerprint md5

12EF53FA355CD23E12EF53FA355CD23E
# Configure an SHA1 fingerprint for authenticating the CA root certificate.

[H3C-pki-domain-1] root-certificate fingerprint sha1
D1526110AAD7527FB093ED7FC037B0B3CDDDAD93
8.2 PKI Entity Configuration Commands

8.2.1 fqdn
Syntax
fqdn name-str
undo fqdn
View
PKI entity view
Parameter
name-str: FQDN of an entity, within the range of 1 to 127 characters
Description
Use the fqdn command to specify the FQDN of an entity.

Use the undo fqdn command to delete the entity FQDN.
By default, no entity FQDN is specified.
FQDN (Fully Qualified Domain Name) is the unique identifier an entity has in the
network, like email address. It can be resolved into IP address, usually in the form of
user.domain.
Example
# Configure the FQDN of an entity

[H3C-pki-entity-1] fqdn pki.huawei-3com.com
8.2.2 common-name
Syntax
common-name name-str
undo common-name
View
PKI entity view
8-9
Parameter
name-str: common name of an entity, within the range of 1 to 31 character
Description
Use the common-name command to specify the common name of an entity, take User
name for example.
Use the undo common-name command to delete the common name of this entity.
By default, no common name is specified for any entity.
Example
# Configure the common name of an entity

[H3C-pki-entity-1] common-name pki test
8.2.3 country
Syntax
country country-code-str
undo country
View
PKI entity view
Parameter
country-code-str: country code of 2 bytes
Description
Use the country command to specify the code of the country to which the entity
belongs. It is a standard 2-byte code, e.g., CN for China.
Use the undo country command to delete the country code of this entity.
By default, no country code is specified for any entity.
Example
# Set the country code of an entity

[H3C-pki-entity-1] country CN
8.2.4 ip
Syntax
ip ip-address
undo ip
8-10
View
PKI entity view
Parameter
ip-address: IP address of an entity in the form of dotted decimal like A.B.C.D
Description
Use the ip command to specify the IP address of an entity.

Use the undo ip command to delete the specified IP address.
By default, no entity IP address is specified.
Example
# Configure the IP address of an entity

[H3C-pki-entity-1] ip 161.12.2.3
8.2.5 locality
Syntax
locality locality-str
undo locality
View
PKI entity view
Parameter
locality-str: name of the geographical locality of an entity, in the range of 1~31

characters
Description
Use the locality command to name the geographical locality of an entity, by a city for
example.
Use the undo locality command to cancel the mentioned naming operation.
By default, no geographical locality is specified for any entity.
Example
# Configure the name of the city where the entity lies

[H3C-pki-entity-1] locality beijing
8-11
8.2.6 organization
Syntax
organization org-str
undo organization
View
PKI entity view
Parameter
org-str: organization name in the range of 1~31 characters
Description
Use the organization command to specify the name of the organization to which the
entity belongs.
Use the undo organization command to delete that name.
By default, no organization name is specified for any entity.
Example
# Configure the name of the organization to which an entity belongs

[H3C-pki-entity-1] organization huawei–3com
8.2.7 organizational-unit
Syntax
organizational-unit org-unit-str
undo organizational-unit
View
PKI entity view
Parameter
org-unit-str: organization unit name in the range of 1~31 characters
Description
Use the organizational-unit command to specify the name of the organization unit to
which this entity belongs.
Use the undo organizational-unit command to delete the specified organization unit
name.
By default, no organization unit name is specified for any entity.
8-12
Example
# Configure the name of the organization unit to which an entity belongs

[H3C-pki-entity-1] organizational-unit soft plat
8.2.8 state
Syntax
state state-str
undo state
View
PKI entity view
Parameter
state-str: state name within the range of 1 to 31 characters.
Description
Use the state command to clarify the name of the state where an entity lies. Use the
undo state command to cancel the previous operation.
By default, the state of an entity is not specified.
Example
# Specify the state where an entity lies

[H3C-pki-entity-1] state beijing
8.2.9 pki entity
Syntax
pki entity name-str

undo pki entity name-str
View
Any view
Parameter
name-str: device-related unique character string of identification. Specified when being

quoted, it shall be within the range of 1~15 characters.
Description
Use the pki entity command to name a PKI entity and enter PKI entity view.
8-13
Use the undo pki entity command to delete the name and cancel all configurations
under the name space.
A variety of attributes can be configured in PKI entity view. name-str plays only for the
convenience in being quoted by other commands. No field of certificate is concerned.
By default, entity name is not specified.
Example
# Enter PKI entity view

[H3C] pki entity en
[H3C-pki-entity-en]
8.3 PKI Certificate Operation Commands

8.3.1 pki delete-certificate
Syntax
pki delete-certificate { local | ca } domain domain-name
View
System view
Parameter
local: indicates the deletion of all local certificates that are locally stored;
ca: indicates the deletion of all CA certificates that are locally stored.
domain-name: PKI domain where the certificate to be deleted locates.
Description
Use the pki delete-certificate command to delete the locally stored certificates.
Example
# Delete the local certificate in the PKI domain named cer.

[H3C] pki delete-certificate local domain cer
8.3.2 pki import-certificate
Syntax
pki import-certificate { local | ca } domain domain-name { der | p12 | pem }

[ filename filename ]
View
System view
8-14
Parameter
local: Indicates the local certificate.

ca: Indicates the CA certificate.
domain-name: PKI domain where the certificate locates.
der: Specifies the certificate file format as DER.
p12: Specifies the certificate file format as P12.
pem: Specifies the certificate file format as PEM.
filename: Name of the certificate file, a string consisting of 1 to 127 characters.
Description
Use the pki import-certificate command to import an existing CA certificate or local

certificate.
Related command: pki domain.
Example
# Import the CA certificate in the PKI domain named cer. The certificate file format is
PEM.
[H3C] pki import-certificate ca domain cer pem
8.3.3 pki request-certificate
Syntax
pki request-certificate domain domain-name [ password ] [ pkcs10 [ filename

filename ] ]
View
System view
Parameter
domain-name: Contains CA or RA related information. It is configured by using the pki

domain command.
password: Optionally involved in certificate revocation. It is a string consisting of 1 to 31
characters.
pkcs10: Displays the BASE64-encoded PKCS#10 certificate request. You can use the
information to request a certificate by phone, disk, or email.
filename: Name of the file for saving the PKCS#10 certificate request.
8-15
Description
Use the pki request-certificate command to deliver certificate request through SCEP
to CA for the generated RSA key pair. If SCEP fails to go through normal
communication, you can print the local certificate request in base64 format using the
optional parameter PKCS#10, copy it, and send one to CA in an outband mode.
This operation is not saved within the configuration.
Example
# Specify to manually apply for a certificate and display the PKCS#10 certificate
request information.
[H3C] pki request-certificate domain 1 pkcs10
8.3.4 pki retrieval-certificate
Syntax
pki retrieval-certificate { local | ca } domain domain-name
View
System view
Parameter
local: indicates the download of a local certificate;

ca: indicates the download of a CA certificate;
domain-name: contains CA or RA related information. It is configured by using the pki
domain command.
Description
Use the pki retrieval-certificate command to download a certificate from the

certificate issuing server.
Example
# Retrieve a certificate.
[H3C] pki retrieval-certificate ca domain 1
8.3.5 pki retrieval-crl
Syntax
pki retrieval-crl domain domain-name
8-16
View
System view
Parameter
domain-name: contains CA or RA related information. It is configured by using the pki

domain command.
Description
Use the pki retrieval-crl command to obtain the latest CRL from CRL server for the
verification of the validity of a current certificate.
Example
# Retrieve a CRL
[H3C] pki retrieval-crl domain 1
8.3.6 pki validate-certificate
Syntax
pki validate-certificate { local | ca } domain domain-name
View
System view
Parameter
local: indicates the validation of a local certificate;

ca: indicates the validation of a CA certificate;
domain-name: specifies the domain of the certificate about to be verified. It is
configured by using the pki domain command.
Description
Use the pki validate-certificate command to verify the validity of a certificate. The
focus is to check the CA signature on the certificate, and to make sure that the
certificate is still within the validity period and beyond revocation. All certificates with
authentic signatures of CA can pass the validation, since it is believed that CA never
issues fake certificates.
Example
# Verify the validity of a certificate
8-17
[H3C] pki validate-certificate domain 1
8.4 PKI Displaying and Debugging Commands

8.4.1 debugging pki
Syntax
debugging pki { all | request | retrieval | verify | error }

undo debugging pki { all | request | retrieval | verify | error }
View
Any view
Parameter
all: debugging in all the processes;

request: debugging in certificate request;
retrieval: debugging in certificate retrieval;
verify: debugging in certification validation;
error: debugging in error cases
Description
Use the debugging pki command to enable PKI debugging functions.

Use the undo debugging pki command to disable PKI debugging functions.
Unexpected problems do occur during the device operation. Debugging commands
enable the optional output and print of debugging information, facilitating the network
monitor and fault diagnosis for the network operators and developers.
By default, all PKI debugging functions are disabled.
Example
# Enable the debugging function related to errors in PKI certificate operation

[H3C] debugging pki error
[H3C] pki delete-certificate ca domain 1
[H3C] pki request-certificate domain 1
Certificate enroll failed!
Cannot get the CA/RA certificate when creating the x509 Request
# Enable the debugging function for PKI certificate retrieval

[H3C] debugging pki retrieval
[H3C] pki retrieval certificate local domain 1
Retrievaling CA/RA certificates. Please wait a while......
We receive 3 certificates.
8-18
The trusted CA's finger print is:

MD5 fingerprint: 74C9 B71D 406B DDB3 F74A 96BC E05B 40E9
SHA1 fingerprint: 770E 2937 4E32 ACD4 4ACC 7CF1 0FF0 6FB8 6C34 E24A
Is the finger print correct?(Y/N): y
Saving the CA/RA certificate to flash.....................Done!
# Enable the debugging function for PKI certificate request

[H3C] debugging pki request
[H3C] pki request certificate 1
Create PKCS#10 request: token seen: CN=pki test
Create PKCS#10 request: CN=pki test added
Create PKCS#10 request: subject dn set to '/CN=pki test'
Certificate Request:
…..
dir_name: certsrv/mscep/mscep.dll
host_name: 169.254.0.100
SCEP transaction id: 58D41D0C5A7B1E21C5F4A008B580B1A1
PKCS#7 envelope: creating inner PKCS#7
PKCS#7 envelope: data payload size: 297 bytes
data payload:
….
PKCS#7 envelope: successfully encrypted payload
PKCS#7 envelope: size 667 bytes
PKCS#7 envelope: creating outer PKCS#7
PKCS#7 envelope: signature added successfully
PKCS#7 envelope: adding signed attributes
PKCS#7 envelope: adding string attribute transId
PKCS#7 envelope: adding string attribute messageType
PKCS#7 envelope: adding octet attribute senderNonce
PKCS#7 envelope: PKCS#7 data written successfully
PKCS#7 envelope: applying base64 encoding
PKCS#7 envelope: base64 encoded payload size: 2145 bytes
SCEP send message: IP = 0xa9fe0064
SCEP send message: Server returned status code
Valid response from server
PKCS#7 develope: reading outer PKCS#7
PKCS#7 develope: PKCS#7 payload size: 1872 bytes
PKCS#7 develope: PKCS#7 contains 1276 bytes of enveloped data
PKCS#7 develope: verifying signature
PKCS#7 develope: signature ok
8-19
PKCS#7 develope: finding signed attributes

PKCS#7 develope: finding attribute transId
PKCS#7 develope: allocating 32 bytes for attribute
PKCS#7 develope: reply transaction id: 58D41D0C5A7B1E21C5F4A008B580B1A1
PKCS#7 develope: finding attribute messageType

PKCS#7 develope: reply message type is good
PKCS#7 develope: finding attribute senderNonce
PKCS#7 develope: senderNonce in reply: :
a6341944 28d9b544 a4755d9a ba320d35

PKCS#7 develope: finding attribute recipientNonce
PKCS#7 develope: recipientNonce in reply: :
b98da9c3 20b638c5 634f4924 65f804d9

PKCS#7 develope: finding attribute pkiStatus
PKCS#7 develope: pkistatus SUCCESS
PKCS#7 develope: reading inner PKCS#7
PKCS#7 develope: decrypting inner PKCS#7
PKCS#7 develope: PKCS#7 payload size: 1003 bytes
PKI Get the Signed Certificates:
subject: / CN=pki test
issuer: /emailAddress=myca@huawei-3com.com
/C=CN/ST=Beijing/L=Beijing/O=hw3c/OU=bjs/
CN=myca
Key usage: general purpose
# Enable the debugging function for PKI certificate validation

[H3C] debugging pki validation
[H3C] pki validate-certificate local domain 1
Verify certificate......
Serial Number:
101E266A 00000000 006B
Issuer:
emailAddress=myca@huawei-3com.com
C=CN
ST=Beijing
8-20
L=Beijing
O=hw3c
OU=bjs
CN=myca
Subject:
C=CN
ST=bei jing
O=hua wei - 3com
CN=pki test
Verify result: ok
Table 8-1 Description of PKI debugging information fields
Field Description
Encapsulation of entity request in PKCS#10
Create PKCS#10 request
format
Data encapsulation in PKCS#7 encryption
PKCS#7 envelope
format
inner PKCS#7 PKCS#7 encryption of datagram
outer PKCS#7 Signing of PKCS#7 datagram

PKCS#7 develope De-encapsulation of PKCS#7 encrypted packet
host_name Host name of registration server
dir_name CGI script directory of registration server

data payload Data payload
token seen DN information of an entity
pkistatus PKI certificate operation status

SUCCESS Succeeded
FAILURE Failed
PENDING Waiting for procession

fingerprint Usually the signature of CA
base64 encoded A data encoding mode
x509 Request Request for certificates in standard X509 format
Encryption, signature, and other common
Key usage
usages
Issuer Certificate issuer
Subject The entity that delivers certificate request
8-21
Field Description
The entity sends a certificate operation packet to
SCEP send message
CA through SCEP
Signed Certificates Certificates signed by CA
8.4.2 display pki certificate
Syntax
display pki certificate { { local | ca } domain domain-name | request-status }
View
Any view
Parameter
local: indicates the display of all local certificates;

ca: indicates the display of all CA certificates;
request-status: refers to the status of the certificate request after being delivered;
domain-name: represents the domain of the certificate about to be verified. It is
Description
Use the display pki certificate command to display and browse through the
certificate.
Related command: pki retrieval-certificate, pki domain, and certificate request
polling.
Example
# Display the local certificates

[H3C] display pki certificate local domain 1
Data:
Version: 3 (0x2)
Serial Number:
10B7D4E3 00010000 0086
Signature Algorithm: md5WithRSAEncryption
Issuer:
emailAddress=myca@huawei-3com.com
C=CN
ST=Beijing
L=Beijing
8-22
O=hw3c
OU=bjs
CN=new-ca
Validity
Not Before: Jan 13 08: 57: 21 2004 GMT
Not After : Jan 20 09: 07: 21 2005 GMT
Subject:
C=CN
ST=beijing
L=beijing
CN=pki test
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (512 bit)
Modulus (512 bit):
00D41D1F …
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Alternative Name:
DNS: hyf.huawei-3com.com
… …
Signature Algorithm: md5WithRSAEncryption
A3A5A447 4D08387D …
8.4.3 display pki crl
Syntax
display pki crl domain domain-name
View
Any view
Parameter
domain-name: represents the domain of the certificate about to be verified. It is

Description
Use the display pki crl command to display and browse through the locally saved
CRL.
Related command: pki retrieval-crl, and pki domain.
8-23
Example
# Display a CRL
[H3C] display pki crl domain 1
Certificate Revocation List (CRL):
Version 2 (0x1)
Signature Algorithm: sha1WithRSAEncryption
Issuer:
C=CN
O=h3c
OU=soft
CN=A Test Root
Last Update: Jan 5 08: 44: 19 2004 GMT
Next Update: Jan 5 21: 42: 13 2004 GMT
CRL extensions:
X509v3 CRL Number: 2
X509v3 Authority Key Identifier:
keyid:0F71448E E075CAB8 ADDB3A12 0B747387 45D612EC
Revoked Certificates:
Serial Number: 05a234448E…
Revocation Date: Sep 6 12:33:22 2004 GMT
CRL entry extensions:……
Serial Number: 05a278445E…
Revocation Date: Sep 7 12:33:22 2004 GMT
CRL entry extensions:…
8-24
VPN
Command Manual – VPN
Table of Contents
Chapter 1 L2TP Configuration Commands................................................................................. 1-1

1.1 L2TP Configuration Commands ........................................................................................ 1-1
1.1.1 allow l2tp ................................................................................................................. 1-1
1.1.2 debugging l2tp......................................................................................................... 1-2
1.1.3 display l2tp session ................................................................................................. 1-3
1.1.4 display l2tp tunnel ................................................................................................... 1-4
1.1.5 display l2tp user ...................................................................................................... 1-5
1.1.6 interface virtual-template......................................................................................... 1-5
1.1.7 l2tp-auto-client enable............................................................................................. 1-6
1.1.8 l2tp enable............................................................................................................... 1-7
1.1.9 l2tpmoreexam enable.............................................................................................. 1-7
1.1.10 l2tp-group .............................................................................................................. 1-8
1.1.11 mandatory-chap .................................................................................................... 1-9
1.1.12 mandatory-lcp........................................................................................................ 1-9
1.1.13 reset l2tp session ................................................................................................ 1-10
1.1.14 reset l2tp tunnel................................................................................................... 1-11
1.1.15 reset l2tp user...................................................................................................... 1-11
1.1.16 session idle-time ................................................................................................. 1-12
1.1.17 start l2tp............................................................................................................... 1-12
1.1.18 start l2tp tunnel.................................................................................................... 1-14
1.1.19 tunnel authentication ........................................................................................... 1-14
1.1.20 tunnel avp-hidden................................................................................................ 1-15
1.1.21 tunnel flow-control ............................................................................................... 1-16
1.1.22 tunnel keepstanding ............................................................................................ 1-16
1.1.23 tunnel name......................................................................................................... 1-17
1.1.24 tunnel password .................................................................................................. 1-18
1.1.25 tunnel timer hello................................................................................................. 1-18
Chapter 2 GRE Configuration Commands.................................................................................. 2-1

2.1 GRE Configuration Commands ......................................................................................... 2-1
2.1.1 debugging tunnel..................................................................................................... 2-1
2.1.2 destination ............................................................................................................... 2-1
2.1.3 display interface tunnel ........................................................................................... 2-2
2.1.4 gre checksum .......................................................................................................... 2-4
2.1.5 gre key..................................................................................................................... 2-5
2.1.6 interface tunnel........................................................................................................ 2-5
2.1.7 mtu (Tunnel interface) ............................................................................................. 2-6
2.1.8 keepalive ................................................................................................................. 2-7
i
2.1.9 source...................................................................................................................... 2-8

2.1.10 tunnel-protocol gre ................................................................................................ 2-9
Chapter 3 DVPN Configuration Commands ............................................................................... 3-1

3.1 DVPN Configuration Commands ....................................................................................... 3-1
3.1.1 algorithm-suite......................................................................................................... 3-1
3.1.2 authentication-client method ................................................................................... 3-2
3.1.3 authentication-server method.................................................................................. 3-2
3.1.4 data algorithm-suite................................................................................................. 3-3
3.1.5 data ipsec-sa duration............................................................................................. 3-4
3.1.6 debugging dvpn....................................................................................................... 3-4
3.1.7 display dvpn ipsec-sa .............................................................................................. 3-5
3.1.8 display dvpn map .................................................................................................... 3-6
3.1.9 display dvpn session ............................................................................................... 3-7
3.1.10 display dvpn info ................................................................................................... 3-8
3.1.11 display dvpn online-user ....................................................................................... 3-9
3.1.12 dvpn class ........................................................................................................... 3-10
3.1.13 dvpn client register-dumb.................................................................................... 3-11
3.1.14 dvpn client register-interval ................................................................................. 3-11
3.1.15 dvpn client register-retry...................................................................................... 3-12
3.1.16 dvpn dvpn-id........................................................................................................ 3-12
3.1.17 dvpn interface-type.............................................................................................. 3-13
3.1.18 dvpn policy .......................................................................................................... 3-14
3.1.19 dvpn policy .......................................................................................................... 3-14
3.1.20 dvpn register-type ............................................................................................... 3-15
3.1.21 dvpn security ....................................................................................................... 3-16
3.1.22 dvpn server.......................................................................................................... 3-17
3.1.23 dvpn server authentication-client method ........................................................... 3-18
3.1.24 dvpn server map age-time .................................................................................. 3-18
3.1.25 dvpn server pre-shared-key ................................................................................ 3-19
3.1.26 dvpn service ........................................................................................................ 3-20
3.1.27 local-user............................................................................................................. 3-20
3.1.28 public-ip ............................................................................................................... 3-21
3.1.29 pre-shared-key .................................................................................................... 3-21
3.1.30 private-ip.............................................................................................................. 3-22
3.1.31 reset dvpn all ....................................................................................................... 3-23
3.1.32 reset dvpn map.................................................................................................... 3-23
3.1.33 reset dvpn session .............................................................................................. 3-24
3.1.34 reset dvpn statistics............................................................................................. 3-24
3.1.35 session algorithm-suite ....................................................................................... 3-25
3.1.36 session idle-timeout ............................................................................................ 3-26
3.1.37 session keepalive-interval ................................................................................... 3-26
3.1.38 session setup-interval ......................................................................................... 3-27
ii
3.1.39 tunnel-protocol dvpn............................................................................................ 3-27
iii
Comware V3 Chapter 1 L2TP Configuration Commands
Chapter 1 L2TP Configuration Commands
1.1 L2TP Configuration Commands

1.1.1 allow l2tp
Syntax
allow l2tp virtual-template virtual-template-number remote remote-name [ domain

domain-name ]
undo allow
View
L2TP group view
Parameter
virtual-template-number: Specifies the virtual-template used when creating new virtual

access interface, an integer ranging from 0 to 1023.
remote-name: Specifies the name of the peer end of the tunnel that initiates the
connection request, a case sensitive character string with length ranging from 1 to 30.
domain-name: Specifies the name of enterprise with length ranging from 1 to 30.
Description
Use the allow l2tp command to specify the name of the peer end of the tunnel on
receiving call and the Virtual-Template it uses.
Use the undo allow command to remove the name of the peer end of the tunnel and
the adopted virtual template.
By default, call receiving is disabled.
This command is used on LNS side.
For multi-instance applications of L2TP, the domain-name parameter must be
configured.
When L2TP group number1 (the default L2TP group number) is used, the name of the
peer end of the tunnel remote-name can be unspecified. When configured in the view
of L2TP group 1, the format of the command is as follows:
allow l2tp virtual-template virtual-template-number [ remote remote-name ] [ domain
domain-name ]
If a peer end name is specified in L2TP group 1 configuration, L2TP group 1 will not
serve as the default L2TP group. For example, given the environment of Windows 2000
1-1
beta 2, the local name of VPN connection is NONE, so the peer end name that the
router receives is NONE. In order to allow the router to receive tunnel connection
requests sent by this kind of unknown peer ends, or for the test purpose, a default L2TP
group can be configured.
The allow l2tp command is used on LNS side. If the peer end name of the tunnel is
configured, it must be the name of the local end configured on LAC side.
Related command: l2tp-group.
Example
# Receive L2TP tunnel connection requests sent by the peer end AS8010 (LAC side),
and creates a virtual-access interface on virtual-template 1.
[H3C-l2tp2] allow l2tp virtual-template 1 remote AS8010
# Use L2TP group 1 as the default L2TP group, receiving L2TP tunnel connection
requests sent by any peer end, and creates a virtual-access interface according to
virtual-template 1.
[H3C] l2tp-group 1
[H3C-l2tp1] allow l2tp virtual-template 1
1.1.2 debugging l2tp
Syntax
debugging l2tp { all | control | dump | error | event | hidden | payload |

time-stamp }
undo debugging l2tp { all | control | error | event | hidden | payload | time-stamp }
View
System view
Parameter
all: Enables all L2TP debugging.

control: Enables control packet debugging.
dump: Enables PPP packet debugging.
hidden: Enables hidden AVP debugging.
payload: Enables L2TP payload debugging.
time-stamp: Enables time-stamp debugging.
1-2
Description
Use the debugging l2tp command to enable L2TP debugging.

Use the undo debugging l2tp command to disable L2TP debugging.
Example
# Enable all L2TP debugging.

<H3C> debugging l2tp all
1.1.3 display l2tp session
Syntax
display l2tp session
View
Any view
Parameter
None
Description
Use the display l2tp session command to view the current L2TP sessions.
The output information of the command facilitates the user to learn information of the
current L2TP sessions.
Related command: display l2tp tunnel.
Example
# Display current L2TP sessions.

<H3C> display l2tp session
LocalSID RemoteSID LocalTID Idle-Time-Left
1 1 2 600
Table 1-1 Description on the fields of the display L2tp session command
Field Description
Total session Number of sessions
LocalSID The number uniquely identifies the local session.
RemoteSID The number uniquely identifies the peer session.
LocalTID The local ID number of the tunnel

Idle-Time-Left The residual time before the session is disconnected
1-3
1.1.4 display l2tp tunnel
Syntax
display l2tp tunnel
View
Any view
Parameter
None
Description
Use the display l2tp tunnel command to view information of the current L2TP tunnels.
The output information of the command facilitates the user to learn information of the
current L2TP tunnels.
Related command: display l2tp session.
Example
# Display information of the current L2TP tunnels.

<H3C> display l2tp tunnel
LocalTID RemoteTID RemoteAddress Port Sessions RemoteName keepstand
2 22849 11.1.1.1 1701 1 lns YES
Total tunnel = 1
Table 1-2 Description on the fields of the display L2tp tunnel command
Field Description
Total tunnels Number of tunnels
LocalTID The number uniquely identifies the local tunnel

RemoteTID The number uniquely identifies the peer tunnel
Remote Name Name of the peer end
RemoteAddress IP address of the peer end

Port Port number of the peer end
Sessions Number of sessions on the tunnel
Remote Name Name of the peer
KeepStand State of the tunnel-hold function
1-4
1.1.5 display l2tp user
Syntax
display l2tp user
View
Any view
Parameter
None
Description
Use the display l2tp user command to view information about the current L2TP users.
Related command: display l2tp tunnel, display l2tp session.
Example
# Display information about the current L2TP users.

<H3C> display l2tp user
User Name LocalSID RemoteSID LocalTID
w@h3c 1 1 2
Total user = 1
Table 1-3 Description on the fields of the display L2tp user command
Field Description
User Name User
LocalSID Local identifier of the session
RemoteSID Remote identifier of the session
LocalTID Local identifier of the tunnel

Total user Total number of users
1.1.6 interface virtual-template
Syntax
interface virtual-template virtual-template-number

undo interface virtual-template virtual-template-number
1-5
View
System view
Parameter
virtual-template-number: Number of a virtual template, an integer in the range 0 to

1023.
Description
Use the interface virtual-template command to create a virtual template.

Use the undo interface virtual-template command to delete the virtual template.
By default, no virtual template is created.
Virtual templates are mainly used to configure parameters of the virtual interfaces
dynamically created by the router in operation, such as MP interfaces (bundled logical
interfaces) and L2TP logical interfaces.
Related command: allow l2tp.
Example
# Create virtual template 1 and enter its view.

1.1.7 l2tp-auto-client enable
Syntax
l2tp-auto-client enable
undo l2tp-auto-client enable
View
Parameter
None
Description
Use the l2tp-auto-client enable command to enable the LAC client to set up L2TP
tunnel.
Use the undo l2tp-auto-client enable command to disable the LAC client to set up
L2TP tunnel.
Example
# Enter virtual template interface view.
1-6
# Enable the LAC client to set up L2TP tunnel.

[H3C-Virtual-Template1] l2tp-auto-client enable
1.1.8 l2tp enable
Syntax
l2tp enable
undo l2tp enable
View
System view
Parameter
None
Description
Use the l2tp enable command to enable the L2TP function.

Use the undo l2tp enable command to disable the L2TP function.
By default, the L2TP function is disabled.
This command and its undo form are used to enable and disable the L2TP function.
Only when this function is enabled, can the L2TP service be implemented.
Related command: l2tp-group.
Example
# Enable the L2TP function on the router.

[H3C] l2tp enable
1.1.9 l2tpmoreexam enable
Syntax
l2tpmoreexam enable
undo l2tpmoreexam enable
View
System view
Parameter
None
1-7
Description
This command serves the LNS side of L2TP.

Use the l2tpmoreexam enable command to enable the multi-instance function of
L2TP.
Use the undo l2tpmoreexam enable command to disable the function.
By default, L2TP multi-instance function is disabled.
Only after the multi-instance function is enabled, can the service be deployed.
Related command: l2tp enable.
Example
# Enable the multi-instance function at the LNS side.

[H3C] l2tpmoreexam enable
1.1.10 l2tp-group
Syntax
l2tp-group group-number
undo l2tp-group group-number
View
System view
Parameter
group-number: Number of L2TP group, an integer ranging from 1 to 1000.
Description
Use the l2tp-group command to create an L2TP group.

Use the undo l2tp-group command to delete the L2TP group.
By default, no L2TP group is created.
Deleting an L2TP group using the undo l2tp-group command will also delete its all
configuration information. (L2TP group 1 can be the default L2TP group).
Related command: allow l2tp and start l2tp.
Example
# Create L2TP group 2 and enter L2TP group 2 view.

[H3C] l2tp-group 2
[H3C-l2tp2]
1-8
1.1.11 mandatory-chap
Syntax
mandatory-chap
undo mandatory-chap
View
L2TP group view
Parameter
None
Description
Use the mandatory-chap command to force LNS to perform CHAP authentication

again with the client.
Use the undo mandatory-chap command to disable CHAP re-authentication.
By default, CHAP re-authentication is not performed.
After LAC performs agent authentication on clients, LNS can perform authentication on
them again for enhancing security. If the mandatory-chap command is used, each
VPN client whose tunnel connection is initialized by access server will undergo
authentication both on access server side and on LNS side. Some PPP clients may not
support the second authentication. In this case, local CHAP authentication will fail.
Related command: mandatory-lcp.
Example
# Perform mandatory CHAP authentication.

[H3C-l2tp1] mandatory-chap
1.1.12 mandatory-lcp
Syntax
mandatory-lcp
undo mandatory-lcp
View
L2TP group view
Parameter
None
1-9
Description
Use the mandatory-lcp command to allow LNS and client to renegotiate Link Control
Protocol (LCP) between them.
Use the undo mandatory-lcp command to disable LCP renegotiation.
By default, LCP is not renegotiated.
Concerning NAS-Initialized VPN client, PPP negotiation will be first performed with
Network Access Server (NAS) at the beginning of a PPP session. If the negotiation is
successful, the access server will initiate the tunnel connection and transmit the
information collected during the negotiation to LNS. LNS will judge whether the user is
legal based on the information. The mandatory-lcp command can be used to force
LNS and client to renegotiate LCP. In this case, NAS agent authentication information is
ignored. If PPP clients do not support LCP renegotiation, LCP renegotiation will fail.
Related command: mandatory-chap.
Example
# Enable LCP renegotiation.

[H3C-l2tp1] mandatory-lcp
1.1.13 reset l2tp session
Syntax
reset l2tp session session-id
View
User view
Parameter
session-id: Local identifier of a session connection.
Description
Use the reset l2tp session command to disconnect a session. When the user calls in,
the session can be set up again.
Related command: reset l2tp tunnel.
Example
# Disconnect an L2TP session.

<H3C> reset l2tp session 1
1-10
1.1.14 reset l2tp tunnel
Syntax
reset l2tp tunnel { remote-name | tunnel-id }
View
User view
Parameter
remote-name: Name of the peer end of the tunnel, a character string with the length
tunnel-id: Local ID of the tunnel.
Description
Use the reset l2tp tunnel command to clear the specified tunnel connection and all
sessions on the tunnel.
The tunnel connection compulsorily disconnected by the reset l2tp tunnel command
can be reestablished again when the remote user calls in again. You may specify tunnel
connections to be disconnected by specifying remote name. If no such tunnel
connections exist, the current tunnel connections will not be affected. If there are
several tunnel connections (with the same name but different IP addresses), all of them
will be cleared. When tunnel-id is specified, only the corresponding tunnel connection
will be disconnected.
Related command: display l2tp tunnel.
Example
# Clear the tunnel connection with the peer name of AS8010.

<H3C> reset l2tp tunnel AS8010
1.1.15 reset l2tp user
Syntax
reset l2tp user user-name
View
User view
Parameter
user-name: L2TP user name.
1-11
Description
Use the reset l2tp user command to disconnect the L2TP connection of the specified
user. When the user calls in, the connection can be set up.
Related command: reset l2tp tunnel, reset l2tp session.
Example
# Disconnect the current L2TP user.

<H3C> reset l2tp user H3C@h3c
1.1.16 session idle-time
Syntax
session idle-time time

undo session idle-time
View
L2TP group view
Parameter
time: Timeout period in the range 0 to 10000 seconds. It defaults to 0, meaning the
session never expires.
Description
Use the session idle-time command to set the L2TP session idle-timeout timer. Upon
expiration of this timer, the L2TP session is disconnected.
Use the undo session idle-time command to disable the idle-timeout timer.
By default, the 2TP session never expires.
Example
# Enter L2TP group view.

[H3C] l2tp-group 1
# Set the L2TP session idle-timeout timer to 600 seconds.

[H3C] session idle-time 600
1.1.17 start l2tp
Syntax
start l2tp { ip ip-addr [ ip ip-addr ] [ ip ip-addr ] ... } { domain domain-name |

fullusername user-name }
1-12
undo start
View
L2TP group view
Parameter
ip ip-addr: IP address of the peer end of the tunnel (LNS). Five IP addresses can be set
at most to provide LNS backup for each other.
domain-name: Domain name triggering connection requests, a case sensitive
character string with the length ranging from 1 to 30.
user-name: Full username triggering connection requests, a case sensitive character
string with the length ranging from 1 to 32.
Description
Use the start l2tp command to specify conditions triggering the local end to place calls
when it works as L2TP LAC.
Use the undo start l2tp command to delete the specified triggering conditions.
This command is used on LAC side to specify IP address of LNS; it can support several
connection request triggering conditions, specifically,
z Initiating tunnel connection request according to the user’s domain name. For
example, if domain name of user’s company is huawei-3com.com, the user with
this domain name can be specified as a VPN user.
z Deciding whether a user is a VPN user according to its dialed number. For
example, if the number 8810188 is specified to be the special service number, the
access user who dials this number is a VPN user.
z Specifying a user to be a VPN user by directly specifying full username.
For a VPN user, the local end (LAC) will send L2TP tunnel connection request to a
certain LNS according to the configured LNS priority or order. If receiving response
from the LNS within the specified period, LAC will take it as the peer end of the tunnel.
If not, LAC will send tunnel connection request to the next LNS.
Conflicts may exist between these VPN user judgment ways. For example, LNS
address specified according to full username is 1.1.1.1, while that according to domain
name is 1.1.1.2. To avoid situations like this, a user searching order is necessary to be
specified. The system always starts a search by looking for the specified L2TP group by
full username; if finding no match, it continues the search by domain name.
Example
# Specify the users using the domain name of “Huawei-3com.com” to be VPN users,
with IP address of the L2TP access server of the headquarters being 202.38.168.1.
[H3C-l2tp1] start l2tp ip 202.38.168.1 domain Huawei-3com.com
1-13
1.1.18 start l2tp tunnel
Syntax
start l2tp tunnel
View
L2TP group view
Parameter
None
Description
Use the start l2tp tunnel command to enable the L2TP LAC to start L2TP tunnel
connection.
This command is used only on LAC side.
Related command: tunnel keepstanding.
Example
# Enable the LAC to start L2TP tunnel connection. It requests the LNS at 1.1.1.1 first
and then the LNS at 2.2.2.2 if no response is received.
[H3C-l2tp1] start l2tp ip 1.1.1.1 ip 2.2.2.2 fullusername vpdnuser
[H3C-l2tp1] start l2tp tunnel
Caution:
You must use this command in conjunction with the tunnel keepstanding command.
Otherwise, the tunnel will be torn down immediately after it is set up.
1.1.19 tunnel authentication
Syntax
tunnel authentication
undo tunnel authentication
View
L2TP group view
1-14
Parameter
None
Description
Use the l2tp tunnel authentication command to enable L2TP tunnel authentication.
Use the undo l2tp tunnel authentication command to disable L2TP tunnel
authentication.
By default, L2TP tunnel authentication is performed.
L2TP tunnel authentication is permitted by default. Normally, authentication needs to
be performed on both ends of the tunnel for security’s sake. In case of network
connectivity test or receiving connection sent by nameless peer end, tunnel
authentication is not required.
Example
# Set not to authenticate the peer end of the tunnel.

[H3C-l2tp1] undo tunnel authentication
1.1.20 tunnel avp-hidden
Syntax
tunnel avp-hidden
undo tunnel avp-hidden
View
L2TP group view
Parameter
None
Description
Use the tunnel avp-hidden command to configure Attribute Value Pair (AVP) data to
be transmitted in hidden format.
Use the undo tunnel avp-hidden command to restore the default transmission way of
AVP data.
By default, the tunnel transmits AVP data in plain text.
Some parameters of L2TP protocol are transmitted by AVP data. If high data security is
desired, this command can be used to configure AVP data to be transmitted in hidden
format.
1-15
Example
# Set AVP data to be transmitted in hidden format.

[H3C-l2tp1] tunnel avp-hidden
1.1.21 tunnel flow-control
Syntax
tunnel flow-control
undo tunnel flow-control
View
L2TP group view
Parameter
None
Description
Use the tunnel flow-control command to enable L2TP tunnel flow-control.

Use the undo tunnel flow-control command to disable the flow-control function.
By default, the L2TP tunnel flow-control function is not performed.
Example
# Enable the flow-control function.

[H3C-l2tp1] tunnel flow-control
1.1.22 tunnel keepstanding
Syntax
tunnel keepstanding
undo tunnel keepstanding
View
L2TP group view
Parameter
None
Description
Use the tunnel keepstanding command to enable the tunnel-hold function of L2TP,
preventing the tunnel from being disconnected when no session is present.
1-16
Use the undo tunnel keepstanding command to disable the tunnel-hold function of
L2TP.
Caution:
To have this command take effect on a tunnel, you must configure it at both ends of the
tunnel.
Example
# Enter L2TP group view.

[H3C] l2tp-group 1
# Enable the tunnel-hold function of L2TP.

[H3C-l2tp1] tunnel keepstanding
1.1.23 tunnel name
Syntax
tunnel name name

undo tunnel name
View
L2TP group view
Parameter
name: Local name of the tunnel, a character string with the length ranging from 1 to 30.
Description
Use the tunnel name command to specify local name of a tunnel.

Use the undo tunnel name command to restore the local name to the default.
By default, local name is router name.
When creating an L2TP group, the system initiates local name into router name.
Related command: sysname.
Example
# Set local name of the tunnel to itsme.

[H3C-l2tp1] tunnel name itsme
1-17
1.1.24 tunnel password
Syntax
tunnel password { simple | cipher } password

undo tunnel password
View
L2TP group view
Parameter
simple: Password in plain text.

cipher: Password in ciphertext.
password: Password used for tunnel authentication, a character string with the length
Description
Use the tunnel password command to specify a password for tunnel authentication.
Use the undo l2tp tunnel password command to remove the tunnel authentication
password.
By default, tunnel authentication password is null.
Example
# Set tunnel authentication password to yougotit displayed in cipher text.

[H3C-l2tp1] tunnel password cipher yougotit
1.1.25 tunnel timer hello
Syntax
tunnel timer hello hello-interval

undo tunnel timer hello
View
L2TP group view
Parameter
hello-interval: Forwarding interval of Hello packet when LAC or LNS has no packet to
receive, an integer in seconds, ranging from 60 to 1000.
Description
Use the tunnel timer hello command to set a Hello packet forwarding interval.
1-18
Use the undo tunnel timer hello command to restore Hello packet forwarding interval
in the tunnel to the default.
By default, Hello packet is forwarded every 60 seconds.
Different Hello packet time intervals can be configured on LNS and LAC sides.
Example
# Set Hello packet forwarding interval to 99 seconds.

[H3C-l2tp1] tunnel timer hello 99
1-19
Comware V3 Chapter 2 GRE Configuration Commands
Chapter 2 GRE Configuration Commands
2.1 GRE Configuration Commands

2.1.1 debugging tunnel
Syntax
debugging tunnel
undo debugging tunnel
View
User view
Parameter
None
Description
Use the debugging tunnel command to enable tunnel debugging.

Use the undo debugging tunnel command to disable tunnel debugging.
Example
None
2.1.2 destination
Syntax
destination ip-addr
undo destination
view
Tunnel interface view
Parameter
ip-addr: IP address of the physical interface used by the peer end of the tunnel.
Description
Use the destination command to specify the destination IP address to be filled in the
added IP header at the time of tunnel interface encapsulation.
Use the undo destination command to delete the defined destination address.
2-1
By default, destination address of tunnel is not specified in the system.

The specified tunnel destination address is IP address of the real physical interface
receiving GRE packets, which should be the same as the specified source address at
the opposite tunnel interface, and the route to the opposite physical interface should be
ensured reachable.
The same source address and destination address cannot be configured on two or
more tunnel interfaces using the same encapsulation protocol.
Related command: interface tunnel and source.
Example
# Set up tunnel connection between the interface serial 0/0/0 of the router Router1 (with
IP address of 193.101.1.1) and the interface serial 1/0/0 of the router Router2 (with IP
address of 192.100.1.1).
[H3C1-Tunnel0] source 193.101.1.1
[H3C1-Tunnel0] destination 192.100.1.1
[H3C2-Tunnel1] destination 193.101.1.1
2.1.3 display interface tunnel
Syntax
display interface tunnel [number ]
view
Any view
Parameter
number: Tunnel interface ID.
Description
Use the display interface tunnel command to view the working status of tunnel
interface.
Executing the display interface tunnel command displays such information about the
tunnel interface as source address, destination address (the real physical interface
address receiving/sending GRE packet), encapsulation mode, identification keyword
and end-to-end check, etc.
Related command: source, destination, gre key, gre checksum, and
tunnel-protocol.
Example
# Display the current tunnel interface.
2-2
<H3C> display interface tunnel 2

Tunnel2/0/4 is up, line protocol is up
Description : H3C, H3C Series, Tunnel2 Interface
Internet Protocol processing is disable
Encapsulation is TUNNEL, loopback not set
Tunnel source 1.1.254.88 (Ethernet2/0/0), destination 1.1.254.11
Tunnel protocol/transport GRE/IP, key disabled
Checksumming of packets disabled
5 minutes input rate 0 bytes/sec, 0 packets/sec
5 minutes output rate 0 bytes/sec, 0 packets/sec
0 packets input, 0 bytes
0 input error
0 packets output, 0 bytes
0 output error
Table 2-1 Description on the fields of the display interface tunnel 2 command
Field Description
Tunnel2 is up The physical layer of the tunnel interface is up.
line protocol is up The link layer of the tunnel interface is up.

The description information of the tunnel interface,
Description
being H3Cin this example.
H3C Series The router is H3C series
Tunnel2 Interface Tunnel interface number
The size of MTU in the tunnel, being 1500 bytes in

Maximum Transmit Unit
this example
Encapsulation The tunnel formed by encapsulated GRE protocol
Enable/Disable loopback test. Because the tunnel
Loopback interface does not support loopback test, disabled
loopback is the case in this example.
Tunnel source Source address of the tunnel, being 1.1.254.88 here.
The interface of tunnel source address is Ethernet
Ethernet2/0/0
2/0/0.
Destination address of the tunnel, being 1.1.254.11
destination
here.
Encapsulation protocol and transport protocol of the
Tunnel protocol/transport
tunnel, being GRE and IP here.
Identification keyword of the tunnel interface, which is
key
not specified here.
2-3
Field Description
Checksumming of packets End-to-end check of the tunnel, being disabled here.
5 minutes input rate Input rate in seconds within the last 5 minutes
Input packet number in seconds within the last 5
packets/sec
minutes
packets input Total input packet number
bytes Total input byte number
input error Number of error packets among all input packets.
output error Number of error packets among all output packets.
2.1.4 gre checksum
Syntax
gre checksum
undo gre checksum
view
Parameter
None
Description
Use the gre checksum command to configure the two ends of a tunnel to perform
end-to-end check, verifying the correctness of packets and discard those that do not
pass the verification.
Use the undo gre checksum command to cancel the check.
By default, end-to-end check of the two ends of tunnel is disabled.
You may enable or disable checksum at each end of a tunnel as needed. If checksum is
enabled at the local end but not at the opposite end, the local end will perform
checksum on the transmitted packets but not on the received packets. If checksum is
disabled at the local end but enabled at the opposite end, the local end will perform do
the opposite.
Related command: interface tunnel.
2-4
Example
# Set up a tunnel between the interface serial 3/0/1 of the router Router1 and the
interface serial 2/1/1 of the router Router2 and enable checksum on both ends of the
tunnel.
[H3C1-Tunnel3] gre checksum
[H3C2-Tunnel2] gre checksum
2.1.5 gre key
Syntax
gre key key-number

undo gre key
view
Parameter
key-number: Identification keyword of the two ends of the tunnel, an integer ranging
from 0 to 4294967295.
Description
Use the gre key command to set identification keyword of the tunnel interface, and by
this feeble security mechanism avoid incorrectly identifying or receiving packets from
undesired places.
Use the undo gre key command to delete this configuration.
By default, the system does not assign identification keyword to the tunnel in use.
Regarding the setting of key-number, you are required either to specify the same
key-number at both ends of the tunnel or to specify it at neither of the two ends.
Example
# Set up a tunnel between the router Router1 and the router Router2 and set the
identification keyword of the tunnel.
[H3C1-Tunnel3] gre key 123
[H3C2-Tunnel2] gre key 123
2.1.6 interface tunnel
Syntax
interface tunnel number
2-5
undo interface tunnel number
view
System view
Parameter
number: Tunnel interface number, in the range 0 to 1023.
Description
Use the interface tunnel command to create a tunnel interface and enter the view of
this tunnel interface.
Use the undo interface tunnel command to delete the specified tunnel interface.
By default, there is no tunnel interface in the system.
The interface tunnel command is used to enter interface view of the specified tunnel. If
the tunnel interface does not exist, the system will create it before entering tunnel
interface view.
Tunnel interface numbers have only local significance. The two ends of a tunnel can
use the same or different interface numbers.
Related command: source, destination, gre key, gre checksum, tunnel-protocol.
Example
# Create interface Tunnel 3.

[H3C] interface tunnel 3
2.1.7 mtu (Tunnel interface)
Syntax
mtu size
undo mtu
view
Parameter
size: Specifies maximum transmission unit on Tunnel interface, in the range 100 to
64000 in bytes. It defaults to 15000 bytes.
Description
Use the mtu command to set the maximum transmission unit (MTU) for Tunnel
interface.
2-6
Use the undo mtu command to restore to the default value.

By default, the MTU value for Tunnel interface is 15000.
Example
# Set the MTU value for Tunnel interface to 64000.

[H3C-Tunnel0] mtu 64000
2.1.8 keepalive
Syntax
keepalive [ seconds ] [ times ]

undo keepalive
View
Parameter
seconds: Internal for sending keepalive messages in seconds. It is in the range 1 to

32,767 and defaults to 10.
times: The maximum number of keepalive message sending attempts. It is in the range
1 to 255 and defaults to 3.
Description
Use the keepalive command to enable the keepalive function of GRE and configure
the interval for sending keepalive messages and the maximum number of sending
attempts as well.
Use the undo keepalive command to disable the keepalive function.
By default, the keepalive function of GRE is disabled.
After you configure the keepalive command, the router sends GRE keepalive
messages regularly. If no response is received for a keepalive message that it has sent
upon the expiration of a specified period, the router resends the keepalive message. If
no response is received yet after the number of resending attempts exceeds the
specified limit, the protocol of the local tunnel interface goes down.
Example
# Configure the router to send GRE keepalive messages at intervals of 20 seconds and
for up to five times.
[H3C-Tunnel0/0/5] keepalive 20 5
2-7
2.1.9 source
Syntax
source { ip-addr | interface-type interface-num }

undo source
view
Parameter
ip-addr: Specifies IP address of the real interface sending GRE packets in the address
format of A.B.C.D.
interface-type interface-num: Specifies the real interface sending packets by specifying
its interface name and number. These interfaces include: Ethernet, Serial, ATM, Tunnel,
Loopback, etc.
Description
Use the tunnel source command to specify the source IP address or source interface
to be filled in the added IP header at the time of tunnel interface encapsulation.
Use the undo tunnel source command to delete the defined source address or source
interface.
By default, source address or source interface of tunnel is not specified in the system.
The specified source address of the tunnel is the real interface address sending GRE
packets, which should keep accordance with the specified destination address at the
opposite tunnel interface.
The same source address and destination address cannot be configured on two or
more tunnel interfaces using the same encapsulation protocol.
Related command: interface tunnel, destination.
Example
# Configure the interface tunnel5 on the router Router1, on which the real output
interface of the encapsulated packet is serial 0/0/0 (with the IP address of the interface
being 192.100.1.1.
Alternatively, you may specify the actual physical interface:

[H3C1-Tunnel5] source serial 0/0/0
2-8
2.1.10 tunnel-protocol gre
Syntax
tunnel-protocol gre
undo tunnel-protocol
view
Parameter
gre: Encapsulation protocol of the tunnel.
Description
Use the tunnel mode command to set encapsulation mode of the tunnel interface to
GRE.
By default, the encapsulation protocol of tunnel interface is GRE. Under the GRE mode,
users can execute and view the GRE related commands, whereas other relevant
commands are available under other modes.
Example
# Create a tunnel between routers Router1 and Router2, with encapsulation protocol
being GRE and transport protocol being IP.
[H3C1-Tunnel3] tunnel-protocol gre
[H3C2-Tunnel2] tunnel-protocol gre
2-9
Comware V3 Chapter 3 DVPN Configuration Commands
Chapter 3 DVPN Configuration Commands
3.1 DVPN Configuration Commands

3.1.1 algorithm-suite
Syntax
algorithm-suite suite-number
undo algorithm-suite
View
dvpn-class view
Parameter
suite-number: Algorithm suite number ranging from 1 to 12 and defaulting to 1, whose

meanings are as follows:
1 DES_MD5_DHGROUP1
2 DES_MD5_DHGROUP2
3 DES_SHA1_DHGROUP1
4 DES_SHA1_DHGROUP2
5 3DES_MD5_DHGROUP1
6 3DES_MD5_DHGROUP2
7 3DES_SHA1_DHGROUP1
9 AES128_MD5_DHGROUP1
11 AES128_SHA1_DHGROUP1
Description
Use the algorithm-suite command to specify the algorithm suite used when a client
registers.
Use the undo algorithm-suite command to revert to the default algorithm suite.
The default algorithm suite number is 1, which stands for DES (for encryption), MD5
(for authentication), and DHGROUP1 (for key negotiation).
3-1
Example
# Specify AES for encryption, SHA1 for authentication, and DHGROUP1 for key
negotiation.
[H3C-dvpn-class-abc] algorithm-suite 11
3.1.2 authentication-client method
Syntax
authentication-client method { chap | none | pap }
View
dvpn-policy view
Parameter
pap: Specifies the DVPN server to authenticate clients using PAP (password
authentication protocol).
none: Specifies the DVPN server not to authenticate clients.
chap: Specifies the DVPN server to authenticate clients using CHAP (challenge
Description
Use the authentication-client method command to specify how the DVPN server that
applies the DVPN policy authenticates clients. None, CHAP, and PAP are currently
available.
PAP is used to authenticate clients by default.
Example
# Configure a DVPN policy to authenticate clients using CHAP.

[H3C-dvpn-policy-abc] authentication-client method chap
3.1.3 authentication-server method
Syntax
authentication-server method { none | pre-share }
View
dvpn-class view
Parameter
none: Specifies the client not to authenticate the DVPN server.
3-2
pre-share: Specifies the client to authenticate the DVPN server using a pre-shared
key.
Description
Use the authentication-server method command to specify a client whether or not to

authenticates the DVPN server it accesses.
A client does not authenticate the DVPN server it accesses by default.
Example
# Specify the client to authenticate the DVPN server using a pre-shared key.
[H3C-dvpn-class-abc] authentication-server method pre-share
3.1.4 data algorithm-suite
Syntax
data algorithm-suite suite-number

undo data algorithm-suite
View
dvpn-policy view
Parameter
suite-number: Algorithm suite number ranging from 1 to 12 and defaulting to 1, whose

meanings are as follows:
0 Without protection
1 DES_MD5_DHGROUP1
2 DES_MD5_DHGROUP2
3 DES_SHA1_DHGROUP1
4 DES_SHA1_DHGROUP2
5 3DES_MD5_DHGROUP1
6 3DES_MD5_DHGROUP2
3-3
Description
Use the data algorithm-suite command to specify the algorithm suite used by IPSec
SA (security association) to forward data.
Use the undo data algorithm-suite command to revert to the default algorithm suite.
The default algorithm suite number used by IPSec SA is 1, which stands for DES (for
encryption), MD5 (for authentication), and DHGROUP1 (for key negotiation).
Example
# Specify not to encrypt packets, that is, set the algorithm suite number to 0.
[H3C-dvpn-policy-abc] data algorithm-suite 0
3.1.5 data ipsec-sa duration
Syntax
data ipsec-sa duration time-base time-interval

undo data ipsec-sa duration time-base
View
dvpn-policy view
Parameter
time-interval: Lifetime of the IPSec SA used to encrypt DVPN data. This argument
ranges from 180 seconds to 86,400 seconds and defaults to 3,600 seconds.
Description
Use the data ipsec-sa duration time-base command to set the lifetime of the IPSec
SA used to encrypt DVPN data.
Use the undo data ipsec-sa duration time-base command to restore the default
lifetime of the IPSec SA.
The default lifetime of the IPSec SA is 3,600 seconds.
Example
# Set the lifetime of the IPSec SA to 86,400 seconds.

[H3C-dvpn-policy-abc] data ipsec-sa duration time-base 86400
3.1.6 debugging dvpn
Syntax
debugging dvpn { all | error | event { all | misc | register | session } | hexadecimal |
packet { all | control | data | ipsec } }
3-4
undo debugging dvpn { all | error | event { all | register | session | misc } |
hexadecimal | packet { all | control | data | ipsec } }
View
User view
Parameter
all: Enables all types of DVPN debugging.

error: Enables debugging for DVPN errors.
event: Enables debugging for DVPN events, such as register events, session events,
and misc events.
hexadecimal: Enables debugging for hexadecimal packets.
packet: Enables debugging for DVPN packets, such as control packets, data, and
IPSec packets.
Description
Use the debugging dvpn command to enable DVPN debugging.

Use the undo debugging dvpn command to disable DVPN debugging.
DVPN debugging is disabled by default.
Example
# Enable debugging for DVPN register events.

[H3C] debugging dvpn event register
3.1.7 display dvpn ipsec-sa
Syntax
display dvpn ipsec-sa { all | dvpn-id dvpn-id [ private-ip private-ip ] }
View
Any view
Parameter
all: Specifies all the information about IPSec SA.

dvpn-id: ID of the DVPN domain ranging from 1 to 65,535.
private-ip: Specifies the private IP address.
Description
Use the display dvpn ipsec-sa command to display the specified IPSec SA
information.
3-5
Example
# Display the IPSec SA information about DVPN 1.

<H3C> display dvpn ipsec-sa dvpn-id 1
---------------------------
Session dvpn-id : 1
Session local : 10.0.0.3
Session remote : 10.0.0.2
sa mode : DVPN
---------------------------
[Inbound ESP SAs]

spi : 1549550209 (0x5c5c4281)
authentication-algorithm : ESP-AUTH-MD5
encryption-algorithm : ESP-ENCRYPT-3DES
life duration(bytes/sec): 0/180

remaining life duration(bytes/sec): 0/102
[Outbound ESP SAs]

spi : 2421434273 (0x905427a1)
authentication-algorithm : ESP-AUTH-MD5
encryption-algorithm : ESP-ENCRYPT-3DES
life duration(bytes/sec): 0/180

remaining life duration(bytes/sec): 0/102
3.1.8 display dvpn map
Syntax
display dvpn map { all | dvpn-id dvpn-id | public-ip public-ip }
View
Any view
Parameter
all: Displays all the established map information.

dvpn-id dvpn-id: ID of the DVPN domain ranging from 1 to 65,535.
public-ip public-IP: Specifies the public IP address.
3-6
Description
Use the display dvpn map command to display information about maps in a DVPN
domain, such as private IP address, public IP address, port number, DVPN connection
state, DVPN connection type, and control ID.
Example
# Display all the map information.

[H3C] display dvpn map all
vpn-id private-ip public-ip port state type control-id
--------------------------------------------------------------------
1 10.0.0.2 211.1.1.2 9876 SUCCESS C->S 70433124
2 11.0.0.2 211.1.1.2 9876 SUCCESS C->S 70432548
3.1.9 display dvpn session
Syntax
display dvpn session { all | dvpn-id dvpn-id [ private-ip private-ip ] }
View
Any view
Parameter
all: Displays all the established session information.

dvpn-id dvpn-id: ID of the DVPN domain ranging from 1 to 65,535.
private-ip private-IP: Specifies the private IP address (the IP address of the tunnel
interface).
Description
Use the display dvpn session command to display information about sessions the
device owns.
Example
# Display all the session information about DVPN 2.

<H3C> display dvpn session dvpn-id 2
vpn-id private-ip public-ip port state type
-------------------------------------------------------------
2 11.0.0.2 211.1.1.2 9876 SUCCESS C->S
2 11.0.0.4 211.1.1.100 12289 SUCCESS C->C
3-7
3.1.10 display dvpn info
Syntax
display dvpn info { dvpn-id dvpn-id | global }
View
Any view
Parameter

global: Displays the global configuration and operating information about DVPN.
Description
Use the display dvpn info command to display the configuration and operating
information about a specified DVPN. Use the display dvpn info global command to
display the global configuration and operating information about the current DVPN.
Example
# Display all the information about DVPN 1.

[H3C] display dvpn info vpn-id 1
---------------------------------------------------
DVPN Domain 1 Information
---------------------------------------------------
type : client
register type : Undistributed | Forward
session number : 1
server : server0
server state : active
server public IP : 211.1.1.2
algorithm suite : DES_MD5_DHGROUP1
session encryption flag : Need encryption

data encryption flag : Need encryption
authentication server method : none
session algorithm suite : AES128_SHA1_DHGROUP1

session setup time : 10
session idle time : 300
session keepalive time : 10
data algorithm suite : 3DES_MD5_DHGROUP2
data ipsecsa duration time : 180
3-8
data ipsecsa duration byte : 0
input packets : 17160

input dropped packets : 0
output packets : 87
output direct send packets : 42
output error dropped packets : 3
output send ipsec packets : 42
output send ipsec fail packets : 0
# Display the global configuration and operating information about DVPN.

[H3C] display dvpn info global
DVPN Service Global information:
Total dvpn number : 2
Total Server Dvpn number : 1
Total Client Dvpn number : 1
Total Dvpn Class number : 1
Total Dvpn Policy number : 1
Global Authenticate Client Type : NONE
Global map agetime : 30
Global register interval : 10
Global register retry : 3
Global register dumb : 300
Total Map number : 0
Total Session number : 0
Total redirect number : 0
Total UDP input packets : 0
Total input drop packets : 0
Total output packets : 0
Total write to ipsec err : 0
Total output error : 0
3.1.11 display dvpn online-user
Syntax
display dvpn online-user
View
Any view
Parameter
None
3-9
Description
Use the display dvpn online-user command to display the information about online
DVPN users. When the DVPN server authenticates clients, you can use this command
to check the users that pass AAA (authentication, authorization, and accounting)
authentication and are accessing the DVPN domains.
Example
# Display the information about online DVPN users.

<H3C> dis dvpn online-user
username : dvpnuser@dvpn
authen-type : CHAP
DVPN total online-user count : 1
3.1.12 dvpn class
Syntax
dvpn class dvpn-class-name

undo dvpn class
View
System view
Parameter
dvpn-class-name: Name of the DVPN class to be created, a string with a maximum of

31 characters in length.
Description
Use the dvpn class command to create and enter a dvpn-class view.
Use the undo dvpn class command to remove a dvpn-class view.
Parameters such as the IP address of the DVPN server and the user name and
password for register are configured in DVPN class views. You cannot remove a DVPN
class applied to a tunnel interface.
No dvpn-class is configured by default.
Example
# Create a DVPN class named abc.

[H3C] dvpn class abc
3-10
3.1.13 dvpn client register-dumb
Syntax
dvpn client register-dumb time

undo dvpn client register-dumb
View
System view
Parameter
time: Time when a client turns to dumb state after it fails to register with the DVPN
server continuously. This argument ranges from 60 seconds to 3,600 seconds and
Description
Use the dvpn client register-dumb command to set the time when a client turns to
dumb state after it fails to register with a DVPN server for specified retries.
Use the undo dvpn client register-dumb command to revert to the default dumb
interval.
Example
# Set the dumb interval to 600 seconds.

[H3C] dvpn client register-dumb 600
3.1.14 dvpn client register-interval
Syntax
dvpn client register-interval time-interval

undo dvpn client register-interval
View
System view
Parameter
time-interval: Register interval of a client. This argument ranges from 3 seconds to 60

seconds and defaults to 10 seconds.
Description
Use the dvpn client register-interval command to set the register interval of a client.
Use the undo dvpn client register-interval command to revert to the default register
interval of the client.
3-11
A client attempts to register with a DVPN server once within each register interval until
it succeeds. If it fails for specified retries, the client turns to dumb state.
The default register interval is 10 seconds.
Example
# Set the register interval to 20 seconds.

[H3C] dvpn client register-interval 20
3.1.15 dvpn client register-retry
Syntax
dvpn client register-retry times

undo dvpn client register-retry
View
System view
Parameter
times: Maximum attempts for the client to register with a DVPN server continuously.
This argument ranges from 1 to 6 and defaults to 3.
Description
Use the dvpn client register-retry command to set the maximum attempts for a client
to register with a DVPN server continuously.
Use the undo dvpn client register-retry command to revert to the default attempts for
a client to register with a DVPN server continuously.
Example
# Set the maximum attempts for a client to register with a DVPN server continuously to
6.
[H3C] dvpn client register-retry 6
3.1.16 dvpn dvpn-id
Syntax
dvpn dvpn-id dvpn-id

undo dvpn dvpn-id
View
3-12
Parameter
Description
Use the dvpn dvpn-id command to specify the DVPN domain the tunnel interface
belongs to. This command is valid when the tunnel interface is encapsulated as DVPN.
Use the undo dvpn dvpn-id command to remove the DVPN domain ID assigned to the
tunnel interface.
No DVPN domain ID is assigned to a tunnel interface by default.
Related command: tunnel-protocol udp dvpn.
Example
# Set the ID of the DVPN domain the tunnel interface belongs to the to 100.
[H3C] int tunnel 0
[H3C-Tunnel0] dvpn-protocol udp dvpn
[H3C-Tunnel0] dvpn dvpn-id 100
3.1.17 dvpn interface-type
Syntax
dvpn interface-type { client | server }
View
Parameter
client: Specifies the tunnel interface to be of client type.

server: Specifies the tunnel interface to be of server type.
Description
Use the dvpn interface-type command to specify the type of a tunnel interface. A
tunnel interface is of client type by default.
Example
# Specify the tunnel interface to be of server type.

[H3C-Tunnel0] dvpn interface-type server
3-13
3.1.18 dvpn policy
Syntax
dvpn policy dvpn-policy-name

undo dvpn policy dvpn-policy-name
View
System view
Parameter
dvpn-policy-name: Name of the DVPN policy to be created, a string with a maximum of

31 characters in length.
Description
Use the dvpn policy command to create and enter a DVPN policy view.
Use the undo dvpn policy command to remove a DVPN policy view.
DVPN policies such as the way to authenticate clients, the encryption algorithm suite
used by sessions, the algorithm suite used to forward packets, and time settings are
configured in DVPN policy view. To remove a DVPN policy that is applied to a tunnel
interface, you must disable the application first.
No DVPN policy is configured by default.
Example
# Create a DVPN policy named abc.

[H3C] dvpn policy abc
3.1.19 dvpn policy
Syntax
dvpn policy dvpn-policy-name

undo dvpn policy dvpn-policy-name
View
Parameter
policy-class-name: Name of the DVPN policy to be applied to the tunnel interface. A

DVPN policy is a data structure that contains information such as algorithms used by
sessions, and time settings of timers. You can use the dvpn policy command in
system view to create DVPN policies.
3-14
Description
Use the dvpn policy command to apply a specified DVPN policy to a tunnel interface
that is of server type.
Use the undo dvpn policy command to disable a DVPN policy applied to a tunnel
interface.
Only one DVPN policy can be applied to each tunnel interface. Therefore, to apply a
new DVPN policy, you must disable the existing one first. You can apply a DVPN policy
to multiple tunnel interfaces.
You can apply the DVPN policy to only the tunnel interface that is of server type.
No DVPN policy is applied to the tunnel interface by default.
Related command: dvpn interface-type.
Example
# Apply the DVPN policy named abc to the tunnel interface.

[H3C-Tunnel0] dvpn interface-type server
[H3C-Tunnel0] dvpn policy abc
3.1.20 dvpn register-type
Syntax
dvpn register-type { forward | undistributed }*

undo dvpn register-type { forward | undistributed }*
View
Parameter
forward: Specifies the DVPN server to forward all packets from the client, but not to
send packets redirecting the next hop to the client.
undistributed: Specifies the DVPN server not to distribute information about the client
to other clients.
Description
Use the dvpn register-type command to configure the type of the additional
information when a client registers with a DVPN server.
Use the undo dvpn register-type command to revert to the default type.
The DVPN server determines whether or not to send redirecting packets according to
the type of the additional information.
3-15
If the additional information is of forward type, the client cannot establish sessions with
other clients in the DVPN domain. If the additional information is of undistributed type,
the DVPN server does not notify any client in the DVPN domain of the redirecting
packets about the client. (But the DVPN server can still notify the client of redirecting
packets about other clients. So the client may establish sessions with other clients.)
You can execute the dvpn register-type command only on the tunnel interface that is
of client type.
Related command: dvpn interface-type.
The two flags are not set by default.
Example
# Set the DVPN server not to distribute the information about the client to other clients.
[H3C-tunnel0] dvpn register-type undistributed
3.1.21 dvpn security
Syntax
dvpn security acl acl-number

undo dvpn security acl
View
Parameter
acl-number: ACL number in the range 3,000 to 3,999. This ACL is used by the interface
to decide which data streams need to be encrypted.
Description
Use the dvpn security acl command to specify the ACL for the interface to decide
which data streams need to be encrypted using IPSec.
Use the undo dvpn security acl command to remove the ACL.
You can reference an ACL to specify which packets need IPSec encryption before they
are forwarded in a DVPN domain. Those denied by the ACL are not to be encrypted by
IPSec.
3-16
Note:
The dvpn security acl command needs to be used together with the acl and rule
commands. If you provide the deny keyword for the rule command and specify the
corresponding ACL in the dvpn security acl command, all packets that match the ACL
are not to be encrypted by IPSec.
Example
# On tunnel interface 0 encrypt data streams except for those denied by ACL 3100.
[H3C-acl-adv-3100] rule deny ip
[H3C] interface tunnel 0
[H3C-Tunnel0] dvpn security acl 3100
3.1.22 dvpn server
Syntax
dvpn server dvpn-class-name

undo dvpn server dvpn-class-name
View
Parameter
dvpn-class-name: Name of the DVPN class to be applied to the tunnel interface. A

DVPN class is a data structure that contains information such as the public IP address
at the DVPN server side, private (tunnel) IP address, user name and password. You
can create a DVPN class by executing the dvpn class command in system view.
Description
Use the dvpn server command to configure the DVPN class to be applied to a tunnel
interface.
Use the undo dvpn server command to remove the DVPN class applied to a tunnel
interface.
At present, a tunnel interface can support only one DVPN server, and a DVPN class
can only be applied to one tunnel interface.
A tunnel interface is not configured with a DVPN class by default.
3-17
Example
# Apply the DVPN class named abc to the tunnel interface.

[H3C-Tunnel0] dvpn server abc
3.1.23 dvpn server authentication-client method
Syntax
dvpn server authentication-client method { chap | none | pap }
View
System view
Parameter
none: Specifies the DVPN server not to authenticate clients.

pap: Specifies the DVPN server to authenticate clients by using PAP (password
chap: Specifies the DVPN server to authenticate clients by using CHAP (challenge
Description
Use the dvpn server authentication-client method command to specify the default
way a DVPN server authenticates clients. If the DVPN domain to be accessed is not
specified when a client registers with a DVPN server, the DVPN server authenticates
the client in the default way. None, CHAP, and PAP are available for authentication at
present.
A DVPN server determines the way to authenticate clients according to the policy
applied to the DVPN domain. If the corresponding policy does not exist, the DVPN
server adopts the authentication in global configuration to authenticate clients.
A DVPN server authenticates clients by using the default PAP.
Example
# Specify CHAP as the default way to authenticate clients.

[H3C] dvpn server authentication-client method chap
3.1.24 dvpn server map age-time
Syntax
dvpn server map age-time time

undo dvpn server map age-time
3-18
View
System view
Parameter
time: Map age time of a DVPN server. This argument ranges from 10 seconds to 180
seconds and defaults to 30 seconds.
Description
Use the dvpn server map age-time command to set the map age time of a DVPN
server.
Use the undo dvpn server map age-time command to revert to the default map age
time.
If a client does not register with the DVPN server successfully during the map age time,
the map established is removed.
The default map age time is 30 seconds.
Example
# Set the map age time to 60 seconds.

[H3C] dvpn server map age-time 60
3.1.25 dvpn server pre-shared-key
Syntax
dvpn server pre-shared-key key

undo dvpn server pre-shared-key
View
System view
Parameter
key: Pre-shared key of the DVPN server, a string with a maximum of 127 characters in
length.
Description
Use the dvpn server pre-shared-key command to set a pre-shared key for a DVPN
server.
Use the undo dvpn server pre-shared-key command to remove the pre-shared key
of a DVPN server.
A DVPN server is not configured with a pre-shared key by default.
3-19
Example
# Set the pre-shared key of the DVPN server to 123.

[H3C] dvpn server pre-shared-key 123
3.1.26 dvpn service
Syntax
dvpn service { enable | disable }
View
System view
Parameter
enable: Enables DVPN.

disable: Disables DVPN.
Description
Use the dvpn service enable command to enable DVPN on a device.

Use the dvpn service disable command to disable DVPN on a device.
DVPN is disabled by default.
Example
# Enable DVPN.
[H3C] dvpn service enable
3.1.27 local-user
Syntax
local-user username password { simple | cipher } password

undo local-user username
View
dvpn-class view
Parameter
username: User name of the client, a string ranging from 1 byte to 80 bytes in length.
password: Password of the client.
simple: Displays the password in plain text.
cipher: Displays the password in cipher text.
3-20
Description
Use the local-user command to configure the user name and password of a client.
Use the undo local-user command to remove the existing user name and password.
Example
# Configure the user name and password of a client to user and test respectively.
[H3C-Serial0/0/0] local-user user password simple test
3.1.28 public-ip
Syntax
public-ip ip-address
undo public-ip ip-address
View
dvpn-class view
Parameter
ip-address: Public IP address of a specified DVPN server.
Description
Use the public-ip command to specify a public IP address of a specified DVPN server.
Use the undo public-ip command to remove the public IP address of a specified
DVPN server.
No public IP address of the specified DVPN server is configured by default.
Example
# Set the public IP address of a specified DVPN server to 61.18.3.66.

[H3C-dvpn-class-abc] public-ip 61.18.3.66
3.1.29 pre-shared-key
Syntax
pre-shared-key key
undo pre-shared-key
View
dvpn-class view
3-21
Parameter
key: Pre-shared key of a DVPN server, a string with a maximum of 127 bytes in length.
Description
Use the pre-shared-key command to set the pre-shared key used when a client needs
to authenticate a DVPN server.
Use the undo pre-shared-key command to remove the pre-shared key of the DVPN
server configured on the client side.
Example
# Set the pre-shared key of the DVPN server on a client side to 123.
[H3C-dvpn-class-abc] pre-shared-key 123
3.1.30 private-ip
Syntax
private-ip ip-address
undo private-ip
View
dvpn-class view
Parameter
ip-address: Private IP address of a specified DVPN server (the IP address of the tunnel
interface).
Description
Use the private-ip command to specify a private IP address of a specified DVPN

server.
Use the undo private-ip command to remove the private IP address of a specified
DVPN server.
No private IP address of the DVPN server is specified by default.
Example
# Set the private IP address of a DVPN server to 192.168.0.1 (That is, assign the
private IP address to the tunnel interface).
[H3C-Dvpn-class-abc] private-ip 192.168.0.1
3-22
3.1.31 reset dvpn all
Syntax
reset dvpn all dvpn-id
View
User view
Parameter
dvpn-id: ID of a DVPN domain.
Description
Use the reset dvpn all command to clear all operating information about a specified
DVPN domain and to initiate the DVPN domain.
Example
# Reset DVPN 2.
<H3C> reset dvpn all 2
3.1.32 reset dvpn map
Syntax
reset dvpn map ip-address port [ control-id ]
View
User view
Parameter
ip-address: Public IP address.

port: Port number ranging from 1 to 65,535.
control-id: ID of the map ranging from 1 to 4,294,967,295.
Description
Use the reset dvpn map command to clear a specified map. This command also
clears the sessions related to the map (if the sessions exist). If the map is what the
client uses to register, this command clears all the sessions of the DVPN client who
registers by using the specified map.
Example
# Clear the map with an IP address of 10.0.0.2, a port number of 9876, and a control-id
of 123456.
3-23
<H3C> reset dvpn map 10.0.0.2 9876 123456
3.1.33 reset dvpn session
Syntax
reset dvpn session dvpn-id private-ip
View
User view
Parameter
dvpn-id: ID of a DVPN domain ranging from 1 to 65,535.

private-ip: Private IP address.
Description
Use the reset dvpn session command to clear a specified session. If the session is
the one established when the client registers, this command clears all sessions of the
DVPN client.
Example
# Clear the session with a private IP address of 10.0.0.2 in DVPN 2.

<H3C> reset dvpn session 2 10.0.0.2
3.1.34 reset dvpn statistics
Syntax
reset dvpn statistics
View
User view
Parameter
None
Description
Use the reset dvpn statistics command to clear all the statistics information of a
DVPN module.
Example
# Clear the DVPN statistics information.

<H3C> reset dvpn statistics
3-24
3.1.35 session algorithm-suite
Syntax
session algorithm-suite suite-number

undo session algorithm-suite
View
dvpn-policy view
Parameter
suite-number: Algorithm suite number ranging from 0 to 12 and defaulting to 1. This

argument stands for the algorithm suite used to encrypt session control packets, whose
available values are described as follows:
0 Without protection
1 DES_MD5_DHGROUP1
2 DES_MD5_DHGROUP2
3 DES_SHA1_DHGROUP1
4 DES_SHA1_DHGROUP2
5 3DES_MD5_DHGROUP1
6 3DES_MD5_DHGROUP2
Description
Use the session algorithm-suite command to specify the algorithm suite a session
uses.
Use the undo session algorithm-suite command to revert to the default algorithm
suite.
Algorithm suite 1 is used by default, which stands for DES (for encryption), MD5 (for
authentication), and DHGROUP1 (for key negotiation).
Example
# Set not to encrypt control packets, that is, set the suit number to 0.
[H3C-dvpn-policy-abc] session algorithm-suite 0
3-25
3.1.36 session idle-timeout
Syntax
session idle-timeout time-interval

undo session idle-timeout
View
dvpn-policy view
Parameter
time-interval: Idle timeout time ranging from 60 seconds to 86,400 seconds and
defaulting to 300 seconds.
Description
Use the session idle-timeout command to set the idle timeout time for sessions.
Use the undo session idle-timeout command to revert to the default idle timeout time.
If no packets pass through a session during a specific period, the session is removed
automatically. The specific period is known as idle timeout time.
Example
# Set the idle timeout time to 30 seconds.

[H3C-dvpn-policy-abc] session idle-timeout 30
3.1.37 session keepalive-interval
Syntax
session keepalive-interval time-interval

undo session keepalive-interval
View
dvpn-policy view
Parameter
time-interval: Keepalive interval ranging from 5 seconds to 300 seconds and defaulting
to 10 seconds.
Description
Use the session keepalive-interval command to set the keepalive interval of

sessions.
3-26
Use the undo session keepalive-interval command to revert to the default keepalive
interval.
Keepalive packets are used to check the connection state of sessions. After a session
is established, the active side sends keepalive packets regularly if no packet passes
through the session, and the passive side responds with keepalive-ack packets.
Example
# Set the keepalive interval to 30 seconds.

[H3C-dvpn-policy-abc] session keepalive-interval 30
3.1.38 session setup-interval
Syntax
session setup-interval time-interval

undo session setup-interval
View
dvpn-policy view
Parameter
time-interval: Interval for sending requests to establish a session. This argument

ranges from 5 seconds to 60 seconds and defaults to 10 seconds.
Description
Use the session setup-interval command to set the interval for sending requests to
establish a session (Setup request). Setup request packets are sent regularly until the
session is established.
Use the undo session setup-interval command to revert to the default setup interval.
A client takes count of the Setup request packets it sends. If it does not receive the
response packets from the peer when the setup interval expires after it sends s Setup
request packet, it sends another Setup request packet.
Example
# Set the interval for sending requests to 30 seconds.

[H3C-dvpn-policy-abc] session setup-interval 30
3.1.39 tunnel-protocol dvpn
Syntax
tunnel-protocol udp dvpn
3-27
View
Parameter
udp dvpn: Specifies the tunnel interface to be encapsulated with UDP DVPN.
Description
Use the tunnel-protocol udp dvpn command to encapsulate a tunnel interface with
UDP DVPN. In this case, the tunnel interface is of Multipoint attribute and NBMA
(non-broadcast multiple access) type.
A tunnel interface is encapsulated with GRE by default.
Example
# Set to encapsulate a tunnel interface with UDP DVPN.

[H3C-Tunnel0] tunnel-protocol udp dvpn
3-28
QoS
Command Manual – QoS
Table of Contents
Chapter 1 Traffic Policing and Shaping Configuration Commands......................................... 1-1

1.1 Traffic Policing (TP) Configuration Commands ................................................................. 1-1
1.1.1 display qos car interface ......................................................................................... 1-1
1.1.2 display qos carl........................................................................................................ 1-2
1.1.3 qos car..................................................................................................................... 1-2
1.1.4 qos carl.................................................................................................................... 1-4
1.2 Traffic Shaping Configuration Commands......................................................................... 1-5
1.2.1 display qos gts interface.......................................................................................... 1-5
1.2.2 qos gts..................................................................................................................... 1-5
1.3 Line Rate Configuration Commands.................................................................................. 1-6
1.3.1 display qos lr interface ............................................................................................ 1-6
1.3.2 qos lr........................................................................................................................ 1-7
Chapter 2 DAR Configuration Commands.................................................................................. 2-1

2.1 DAR Configuration Commands ......................................................................................... 2-1
2.1.1 dar max-session-count............................................................................................ 2-1
2.1.2 dar protocol ............................................................................................................. 2-2
2.1.3 dar protocol-rename................................................................................................ 2-3
2.1.4 dar protocol-statistic ................................................................................................ 2-3
2.1.5 debugging dar ......................................................................................................... 2-4
2.1.6 display dar information ............................................................................................ 2-5
2.1.7 display dar protocol ................................................................................................. 2-5
2.1.8 display dar protocol-rename.................................................................................... 2-7
2.1.9 display dar protocol-statistic.................................................................................... 2-8
2.1.10 if-match protocol.................................................................................................... 2-9
2.1.11 if-match protocol http........................................................................................... 2-10
2.1.12 if-match protocol rtp ............................................................................................ 2-11
2.1.13 reset dar protocol-statistic ................................................................................... 2-12
2.1.14 reset dar session ................................................................................................. 2-13
Chapter 3 Congestion Management Configuration Commands .............................................. 3-1

3.1 FIFO Queuing Configuration Commands .......................................................................... 3-1
3.1.1 qos fifo queue-length............................................................................................... 3-1
3.2 PQ Configuration Commands............................................................................................ 3-1
3.2.1 display qos pq interface .......................................................................................... 3-1
3.2.2 display qos pql......................................................................................................... 3-2
3.2.3 qos pq...................................................................................................................... 3-3
3.2.4 qos pql default-queue.............................................................................................. 3-4
3.2.5 qos pql inbound-interface........................................................................................ 3-5
i
3.2.6 qos pql protocol ....................................................................................................... 3-6

3.2.7 qos pql queue.......................................................................................................... 3-7
3.3 CQ Configuration Commands............................................................................................ 3-8
3.3.1 display qos cq interface........................................................................................... 3-8
3.3.2 display qos cql......................................................................................................... 3-9
3.3.3 qos cq...................................................................................................................... 3-9
3.3.4 qos cql default-queue............................................................................................ 3-10
3.3.5 qos cql inbound-interface ...................................................................................... 3-11
3.3.6 qos cql protocol ..................................................................................................... 3-12
3.3.7 qos cql queue ........................................................................................................ 3-13
3.3.8 qos cql queue serving ........................................................................................... 3-14
3.4 WFQ Configuration Commands....................................................................................... 3-15
3.4.1 display qos wfq interface....................................................................................... 3-15
3.4.2 qos wfq .................................................................................................................. 3-16
3.5 CBQ Configuration Commands ....................................................................................... 3-17
3.5.1 car ......................................................................................................................... 3-17
3.5.2 classifier behavior ................................................................................................. 3-18
3.5.3 display qos cbq interface....................................................................................... 3-19
3.5.4 display qos policy .................................................................................................. 3-20
3.5.5 display qos policy interface ................................................................................... 3-21
3.5.6 display traffic behavior .......................................................................................... 3-24
3.5.7 display traffic classifier .......................................................................................... 3-25
3.5.8 flow-interval qos .................................................................................................... 3-25
3.5.9 gts.......................................................................................................................... 3-27
3.5.10 if-match................................................................................................................ 3-28
3.5.11 if-match { destination-mac | source-mac }........................................................... 3-29
3.5.12 if-match acl .......................................................................................................... 3-30
3.5.13 if-match any......................................................................................................... 3-31
3.5.14 if-match atmclp .................................................................................................... 3-31
3.5.15 if-match classifier ................................................................................................ 3-32
3.5.16 if-match dot1p-cos............................................................................................... 3-33
3.5.17 if-match dscp ....................................................................................................... 3-34
3.5.18 if-match fr-de ....................................................................................................... 3-35
3.5.19 if-match inbound-interface................................................................................... 3-35
3.5.20 if-match ip-precedence........................................................................................ 3-36
3.5.21 if-match outbound-interface ................................................................................ 3-37
3.5.22 if-match protocol.................................................................................................. 3-38
3.5.23 if-match rtp .......................................................................................................... 3-38
3.5.24 lr .......................................................................................................................... 3-39
3.5.25 lr percent ............................................................................................................. 3-40
3.5.26 qos apply policy................................................................................................... 3-41
3.5.27 qos max-bandwidth ............................................................................................. 3-42
ii
3.5.28 qos policy ............................................................................................................ 3-43

3.5.29 queue af .............................................................................................................. 3-43
3.5.30 queue ef .............................................................................................................. 3-44
3.5.31 queue wfq............................................................................................................ 3-46
3.5.32 queue-length ....................................................................................................... 3-46
3.5.33 remark atmclp...................................................................................................... 3-47
3.5.34 remark dot1p ....................................................................................................... 3-48
3.5.35 remark dscp......................................................................................................... 3-48
3.5.36 remark fr-de......................................................................................................... 3-50
3.5.37 remark ip-precedence ......................................................................................... 3-50
3.5.38 traffic behavior..................................................................................................... 3-51
3.5.39 traffic classifier..................................................................................................... 3-52
3.5.40 traffic-policy ......................................................................................................... 3-52
3.5.41 wred..................................................................................................................... 3-53
3.5.42 wred dscp ............................................................................................................ 3-54
3.5.43 wred ip-precedence............................................................................................. 3-56
3.5.44 wred weighting-constant ..................................................................................... 3-57
3.6 RTP Priority Queue Configuration Commands................................................................ 3-57
3.6.1 display qos rtpq interface ...................................................................................... 3-57
3.6.2 qos reserved-bandwidth........................................................................................ 3-58
3.6.3 qos rtpq ................................................................................................................. 3-59
3.7 QoS Token Commands ................................................................................................... 3-60
3.7.1 qmtoken................................................................................................................. 3-60
Chapter 4 WRED Configuration Commands .............................................................................. 4-1

4.1 WRED Configuration Commands ...................................................................................... 4-1
4.1.1 display qos wred interface....................................................................................... 4-1
4.1.2 qos wred.................................................................................................................. 4-2
4.1.3 qos wred dscp ......................................................................................................... 4-2
4.1.4 qos wred ip-precedence.......................................................................................... 4-3
4.1.5 qos wred weighting-constant................................................................................... 4-4
Chapter 5 Protocol Priority Configuration Commands ............................................................. 5-1

5.1 Protocol Priority Configuration Commands ....................................................................... 5-1
5.1.1 display protocol-priority ........................................................................................... 5-1
5.1.2 protocol-priority........................................................................................................ 5-1
Chapter 6 Frame Relay QoS Commands .................................................................................... 6-1

6.1 Frame Relay QoS Commands........................................................................................... 6-1
6.1.1 apply policy outbound ............................................................................................. 6-1
6.1.2 cbs........................................................................................................................... 6-2
6.1.3 cir............................................................................................................................. 6-2
6.1.4 cir allow ................................................................................................................... 6-3
6.1.5 congestion-threshold............................................................................................... 6-4
iii
6.1.6 cq............................................................................................................................. 6-5

6.1.7 display fr class-map ................................................................................................ 6-6
6.1.8 display fr del ............................................................................................................ 6-7
6.1.9 display fr fragment-info............................................................................................ 6-8
6.1.10 display fr switch-table.......................................................................................... 6-10
6.1.11 display qos policy interface ................................................................................. 6-10
6.1.12 ebs....................................................................................................................... 6-12
6.1.13 fifo queue-length ................................................................................................. 6-12
6.1.14 fr class ................................................................................................................. 6-13
6.1.15 fr congestion-threshold........................................................................................ 6-14
6.1.16 fr de del ............................................................................................................... 6-15
6.1.17 fr del inbound-interface ....................................................................................... 6-16
6.1.18 fr del protocol ip................................................................................................... 6-17
6.1.19 fr pvc-pq .............................................................................................................. 6-18
6.1.20 fr traffic-policing ................................................................................................... 6-19
6.1.21 fr traffic-shaping................................................................................................... 6-19
6.1.22 fragment .............................................................................................................. 6-20
6.1.23 fr-class................................................................................................................. 6-21
6.1.24 pq ........................................................................................................................ 6-22
6.1.25 pvc-pq.................................................................................................................. 6-22
6.1.26 rtpq ...................................................................................................................... 6-23
6.1.27 traffic-shaping adaptation.................................................................................... 6-24
6.1.28 wfq....................................................................................................................... 6-25
Chapter 7 MPLS QoS Configuration Commands ....................................................................... 7-1

7.1 MPLS QoS Configuration Commands ............................................................................... 7-1
7.1.1 if-match mpls-exp .................................................................................................... 7-1
7.1.2 qos cql protocol mpls exp........................................................................................ 7-1
7.1.3 qos pql protocol mpls exp ....................................................................................... 7-2
7.1.4 remark mpls-exp...................................................................................................... 7-3
iv
Command Manual – QoS Chapter 1 Traffic Policing and Shaping Configuration
Comware V3 Commands
Chapter 1 Traffic Policing and Shaping

1.1 Traffic Policing (TP) Configuration Commands

1.1.1 display qos car interface
Syntax
display qos car interface [ interface-type interface-number ]
View
Any view
Parameter

Description
Use the display qos car interface command to view parameter configuration and
running statistics of CAR at each or all interfaces.
If no interface is specified, CAR configuration and running statistics of all interfaces will
be displayed.
Example
# Display the CAR parameter configuration information and running statistic

information on each interface.
[H3C] display qos car interface
Direction: Inbound
Rule(s): If-match CARL 1
CIR 8000(Bps), CBS 15000(Bit), EBS 0(Bit)
Conform Action: remark ip-precedence 3 and pass
Exceed Action: remark ip-precedence 4 and continue
Conformed: 0/0 (Packets/Bytes)
Exceeded: 0/0 (Packets/Bytes)
Direction: Outbound
Rule(s): If-match ACL 2001
1-1
Comware V3 Commands
CIR 8000(Bps), CBS 15000(Bit), EBS 0(Bit)

Conform Action: pass
Exceed Action: discard
Conformed: 0/0(Packets/Bytes)
Exceeded: 0/0(Packets/Bytes)
1.1.2 display qos carl
Syntax
display qos carl [ carl-index ]
View
Any view
Parameter
carl-index: Committed Access Rate List (CARL) number, in the range of 1 to 199.
Description
Use the display qos carl command to view a certain rule or all the rules of CARL.
If carl-index is not specified, all rules of CARL will be displayed.
Example
# Display the first rule of CAR list.

[H3C] display qos carl
Current CARL Configuration:
List Params
------------------------------------------------------
1 Precedence 1 2
2 MAC Address 0050-ba27-bed3
1.1.3 qos car
Syntax
qos car { inbound | outbound } { any | acl acl-number | carl carl-index } cir
committed-information-rate cbs committed-burst-size ebs excess-burst-size green
action red action
undo qos car { inbound | outbound } { any | acl acl-number | carl carl-index } cir
committed-information-rate cbs committed-burst-size ebs excess-burst-size
View
Interface view
1-2
Comware V3 Commands
Parameter
inbound: Limits rate for the packets received by the interface.

outbound: Limits rate for the packets sent by the interface.
any: Limits rates for all packets that match any rules.
acl acl-number: Limits the rate of packets matching the ACL, with acl-number ranging
2000 to 3999.
carl carl-index: Limits the rate of packets matching the CARL, with carl-index ranging 1
to 199.
cir committed-information-rate: Committed Information Rate(CIR), in the range of 8000
to 155,000,000 bps. It should not exceed CBS x 20.
cbs committed-burst-size: Committed Burst Size (CBS), in the range of 15000 to
155000000 bits.
ebs excess-committed-burst-size: Excess Burst Size (EBS), in the range of 0 to
155000000 bits.
green: Action taken on the packets when the traffic rate conform to CIR.
red: Action taken on the packets when the traffic rate does not conform to CIR..
action: Action taken on a packet, which can be:
z continue: Has it to be dealt with by the next CAR policy.
z discard: Dicards the packet.
z pass: Sends the packet.
z remark-prec-continue new-precedence: Remarks the packet with a new IP
priority and hands it over to the next CAR policy. It ranges from 0 to 7.
z remark-prec-pass new-precedence: Remarks the packet with a new IP priority
and forwards the packet. It ranges from 0 to 7.
z remark-mpls-exp-continue new-mpls-exp: Remarks the received packet with a
new MPLS EXP value in the range 0 to 7 and hands it over to the next CAR policy.
z remark-mpls-exp-pass new-mpls-exp: Remarks the received packet with a new
MPLS EXP value in the range 0 to 7 and forwards it to the destination.
Description
Use the qos car command to implement TP policy on an interface.

Use the undo qos car command to remove a certain TP policy at the interface.
This command only applies to IP packets.
You can configure several CAR policies by using the command for several times. And
the executing order of the policies depends on the configuration order.
1-3
Comware V3 Commands
Example
# Configure traffic policing for outbound packets that conform to CARL rule 1 at the
interface Ethernet6/0/0. The normal traffic is 38400 bps. The burst size, twice of the
normal traffic, is allowed at the first time; then packets are normally transmitted when
the rate is less than or equal to 38400 bps. When the rate is larger than 38400 bps,
packets will be transmitted after their precedence is changed to 0.
[H3C-Ethernet6/0/0] qos car outbound any carl 1 cir 38400 cbs 76800 ebs 0 green
pass red remark-prec-pass 0
1.1.4 qos carl
Syntax
qos carl carl-index { precedence precedence-value | mac mac-address }

undo qos carl carl-index
View
System view
Parameter
carl: Committed access rate list.

carl-index: CAR list number, in the range 1 to 199.
precedence-value: Precedence, in the range 0 to 7.
mac-address: Hexadecimal MAC address. In the car inbound direction, it is a source
MAC address; in the car outbound direction, it is a destination MAC address.
Description
Use the qos carl command to establish or modify a CARL.

Use the undo qos carl command to delete a CARL.
You can establish a CARL based on IP precedence, dscp or MAC address.
For different carl-index, the repeat execution of this command will create multiple
CARLs, and for the same carl-index, such undertaking will modify the parameters of the
CARL.
You can define eight precedence values at most. If the same precedence is specified
for several times, the system by default regards that only one precedence value has
been specified. The precedence values are related to one another in the way of “OR”.
Example
# Configure CARL 1 with packet precedence 1 and 7.

[H3C] qos carl 1 precedence 1 7
1-4
Comware V3 Commands
1.2 Traffic Shaping Configuration Commands

1.2.1 display qos gts interface
Syntax
display qos gts interface [ interface-type interface-number ]
View
Any view
Parameter

Description
Use the display qos gts interface command to view GTS configuration and
accounting information of certain interface or all interfaces.
If no interface is specified, the GTS configuration and running statistics of all interfaces
will be displayed.
Example
# Display GTS configuration and accounting information of all interfaces.

[H3C] display qos gts interface
Rule(s): If-match Any
CIR 64000 (bps), CBS 32000 (bit), EBS 0 (bit)
Queue Length: 50 (Packet)
Queue Size : 13 (Packet)
Passed : 723/979860 (Packets/Bytes)
Discarded: 0/0 (Packets/Bytes)
Delayed : 723/979860 (Packets/Bytes)
1.2.2 qos gts
Syntax
qos gts { any | acl acl-number } cir committed-information-rate [ cbs

committed-burst-size [ ebs excess-burst-size [ queue-length queue-length ] ] ]
undo qos gts { any | acl acl-number }
View
Interface view
1-5
Comware V3 Commands
Parameter
any: Performs TS on all the IP packets.

acl acl-number: Performs traffic shaping of packets matching the ACL, with acl-number
being the ACL number in the range of 2000 to 3999.
cir committed-information-rate: CIR, in the range 8000 to 155,000,000 bps.
cbs committed-burst-size: CBS, in the range 15,000 to 155,000,000 bits. When the CIR
value is less than 30,000, the default CBS value is 15,000; when the CIR value is
greater than 30,000, the default CBS value is half of the CIR value.
ebs excess-burst-size: EBS, in the range 0 to 155000000 bits. It defaults to 0, that is,
only one token bucket is used for policing.
queue-length queue-length: The maximum length of the buffer, in the range of 1 to
1024. By default, queue-length is 50.
Description
Use the qos gts command to set shaping parameters for all or a specified type of traffic
and perform traffic shaping.
Use the undo qos gts command to remove the shaping configuration for all or a
specified type of traffic.
qos gts acl is used to set shaping parameters for the packets that conforms to certain
ACL. Different ACLs can be used to set shaping parameters for different packets.
qos gts any is used to set shaping parameters for all packets.
qos gts acl cannot be used together with the qos gts any.
Repeated using qos gts will replace configuration set earlier.
Example
# Configure traffic shaping for the packets that conform to ACL rule 2001 at the
Ethernet6/0/0 interface. The normal traffic is 38400 bps. The burst size, twice of the
normal traffic, is allowed at the first time. Then packets are normally transmitted when
the traffic is less than or equal to 38400 bps. When the rate is larger than 38400 bps,
packets will be added to the buffer queue, which is 100 long.
[H3C-Ethernet6/0/0] qos gts acl 2001 cir 38400 cbs 76800 ebs 0 queue-length
100
1.3 Line Rate Configuration Commands

1.3.1 display qos lr interface
Syntax
display qos lr interface [ interface-type interface-number ]
1-6
Comware V3 Commands
View
Any view
Parameter

Description
Use the display qos lr interface command to view LR configuration and statistics of
an interface.
If no interface is specified, the LR configuration and running statistics of all interfaces
will be displayed.
Example
# Display LR configuration and statistics information of all interfaces.

[H3C] display qos lr interface
Delayed: 0/0 (Packets/Bytes)
Active Shaping: NO
1.3.2 qos lr
Syntax
qos lr cir committed-information-rate [ cbs committed-burst-size [ ebs

excess-burst-size ] ]
undo qos lr
View
Interface (including the MFR interface) view
Parameter
cir committed-information-rate: CIR, in the range of 8000 to 155,000,000 bps.

cbs committed-burst-size: CBS, in the range of 15,000 to 155,000,000 bits. When the
CIR value is less than 30,000, the default CBS value is 15,000; when the CIR value is
ebs excess-burst-size: EBS, in the range of 0 to 155000000bits. By default,
excess-burst-size is 0. There is only one token bucket is used to police.
1-7
Comware V3 Commands
Description
Use the qos lr command to limit the transmitting rate of the interface.
Use the undo qos lr command to remove the limit.
You can use this command on a tunnel interface to limit its interface rate and implement
congestion management along with other queue scheduling algorithms.
Before configuring queuing on the tunnel interface, you must configure the qos lr
command. Before deleting the qos lr command on the interface, however, you must
delete the queuing configuration.
You can use the qos lr command on a virtual-template interface. If the virtual-template
is bound with the MP protocol, LR configuration can be distributed to the virtual-access
interface created by the virtual-template and takes effect in this way. If the
virtual-template is bound with other protocols such as PPPoE, PPPoA, and PPPoEoA,
the LR configuration is not distributed and does not take effect.
You can also use the qos lr command on a dialer interface. If the protocol on a dialer
interface is PPP and it is also bound to the MP protocol, the LR configuration can be
distributed to the virtual-access interface created by the dialer interface and the LR
configuration takes effect. If the dialer interface is bound to other protocols such as
PPPoE, PPPoA, and PPPoEoA, the LR configuration is not distributed and does not
take effect.
Example
# Limit packet-forwarding rate of interface Ethernet6/0/0.

[H3C-Ethernet6/0/0] qos lr cir 38400 cbs 76800 ebs 0
1-8
Comware V3 Chapter 2 DAR Configuration Commands
Chapter 2 DAR Configuration Commands
2.1 DAR Configuration Commands

2.1.1 dar max-session-count
Syntax
dar max-session-count count

undo dar max-session-count
View
System view
Parameter
count: The maximum number of connections recognizable by DAR. The value range
varies with devices. Refer to your specific device model.
Description
Use the dar max-session-count command to configure the maximum number of

connections recognizable by DAR.
Use the undo dar max-session-count command to restore the default value.
When a large amount of data traffic passes the device, a large amount of system
resources will be consumed if DAR recognizes them one by one, which affects the
normal operation of other modules.
To avoid this, you can limit the maximum number of connections that can be recognized
by DAR in order to save system resources. When the number of connections exceeds
the upper threshold, DAR stops recognizing the connections exceeding the upper limit
and directly marks them as unidentifiable packets.
Example
# Set the maximum number of connections recognizable by DAR to 1000.

<H3C> system-view
[H3C] dar max-session-count 1000
2-1
2.1.2 dar protocol
Syntax
dar protocol protocol-name { tcp | udp } port { port-value | range port-min port-max }
*
undo dar protocol protocol-name { tcp | udp } port
View
System view
Parameter
protocol-name: Name of application protocol, with an effective range the same as that
of protocol-name in the if-match protocol command, including user-defined01,
user-defined02, …, and user-defined10. No port number is specified for a
user-defined protocol at the initial state. It will take effect only after a port number is
specified. At the same time, you can use the dar protocol-rename command to
rename a user-defined protocol.
tcp: Based on TCP.
udp: Based on UDP.
port-value: Port number of the protocol, in the range 1 to 65535, which cannot be the
same with the configured port number of any other protocol in the DAR. Up to 16 port
numbers can be set for each protocol, which are separated with spaces.
range port-min port-max: Sets the range of port number, port-min for the minimum port
number, and port-max for the maximum port number . The difference value between
the maximum number and minimum number shall be smaller than or equal to 1000, i.e.
port-max – port-min ≤ 1000. The port number range must not include the port numbers
of any other application protocol in DAR.
Description
Use the dar protocol command to configure the port number of DAR application
protocol.
Use the undo dar protocol command to restore the port number to the default value.
You can use this command to set the port number and port range of a DAR application
protocol at the same time.
By default, all protocols, except the ten user-defined protocols, have their default port
numbers.
Example
# Set the port numbers of RTP to 36000, 36001, and 40000 through 41000.
<H3C> system-view
2-2
[H3C] dar protocol rtp udp port 36000 36001 range 40000 41000
2.1.3 dar protocol-rename
Syntax
dar protocol-rename old-name user-defined-name

undo dar protocol-rename user-defined-name
View
System view
Parameter
old-name: Initial name of the user-defined protocol, which can be any of

“user-defined01”, “user-defined02”, …, “user-defined10”.
user-defined-name: New name of the user-defined protocol, in the length of 1 to 14
characters. The new name cannot be the same with any existing name, and cannot be
“all”, “total”, “tcp”, “udp”, “ip” or “user-defined01”, “user-defined02”, …,
“user-defined10”.
Description
Use the dar protocol-rename command to rename a user-defined protocol.

Use the undo dar protocol-rename command to restore the default name of a
user-defined protocol.
By default, the initial names of the tem user-defined protocols are “user-defined01”,
“user-defined02”, …, “user-defined10”.
Example
# Rename the protocol “user-defined01” to “hello”.

<H3C> system-view
[H3C] dar protocol-rename user-defined01 hello
# Restore the default name of the protocol “hello”.

<H3C> system-view
[H3C] undo dar protocol-rename hello
2.1.4 dar protocol-statistic
Syntax
dar protocol-statistic [ flow-interval time ]

undo dar protocol-statistic
2-3
View
Interface view supporting IP
Parameter
flow-interval time: Sets the interval of history mean rate and maximum rate statistics,
in the range 1 to 30 in minutes. The system default is 5 minutes.
Description
Use the dar protocol-statistic command to enable DAR packet statistics function.
Use the undo dar protocol-statistic command to disable the function.
With DAR packet statistics function, you can timely monitor the number of packets, data
traffic, historical mean rate and maximum rate of data traffic on each interface, thus to
implement corresponding policies for the data traffic.
Example
# Enable DAR packet statistics function on the interface Ethernet0/0/0, and set the
interval to 7 minutes.
<H3C> system-view
[H3C-Ethernet0/0/0] dar protocol-statistic flow-interval 7
2.1.5 debugging dar
Syntax
debugging dar { packet | event | error | all }

undo debugging dar { packet | event | error | all }
View
User view
Parameter
packet: DAR packet debugging.

event: DAR event debugging.
error: DAR error debugging.
all: DAR all debugging.
Description
Use the debugging dar command to enable DAR debugging.
2-4
Use the undo debugging dar command to disable DAR debugging.

By default, DAR debugging is disabled.
Example
# Enable DAR packet debugging.

<H3C> debugging dar packet
2.1.6 display dar information
Syntax
display dar information
View
Any view
Parameter
None
Description
Use the display dar information command to view information about the DAR
module.
Example
# Display information about the DAR module.

<H3C> display dar information
Max session count : 8192
Watched session count : 1000
2.1.7 display dar protocol
Syntax
display dar protocol { all | protocol-name }
View
Any view
Parameter
all: Displays information about all protocols.

protocol-name: Name of the application protocol, in the same range with the
protocol-name in the if-match protocol command.
2-5
Description
Use the display dar protocol command to view DAR protocol related information.
Example
# Display information about all protocols.

<H3C> display dar protocol all
Protocol TCP/UDP Port
-------------- -------- -----------
bgp tcp 179
udp 179
citrix tcp 1494
udp 1604
cuseeme tcp 7648 7649
udp 7648 7649 24032
dhcp udp 67 68
dns tcp 53
udp 53
exchange tcp 135
finger tcp 79
ftp tcp 21
gopher tcp 70
udp 70
http tcp 80
imap tcp 143 220
udp 143 220
irc tcp 194
udp 194
kerberos tcp 88 749
udp 88 749
l2tp udp 1701
ldap tcp 389
udp 389
mgcp tcp 2427 2428 2727
udp 2427 2727
napster tcp 6699 8875 8888 7777 6700 6666 6677 6688 4444 5555
netbios tcp 137 138 139
udp 137 138 139
netshow tcp 1755
nfs tcp 2049
udp 2049
nntp tcp 119
udp 119
2-6
notes tcp 1352

udp 1352
novadigm tcp 3460 3461 3462 3463 3464 3465
udp 3460 3461 3462 3463 3464 3465
ntp tcp 123
udp 123
pcanywhere tcp 65301 5631
udp 22 5632
pop3 tcp 110
udp 110
pptp tcp 1723
printer tcp 515
udp 515
rcmd tcp 512 513 514
rip udp 520
rsvp udp 1698 1699
rtsp tcp 554
sip tcp 5060
udp 5060
skinny tcp 2000 2001 2002
smtp tcp 25
snmp tcp 161 162
udp 161 162
socks tcp 1080
sqlnet tcp 1521
sqlserver tcp 1433
ssh tcp 22
streamwork udp 1558
sunrpc tcp 111
udp 111
syslog udp 514
telnet tcp 23
vdolive tcp 7000
winmx tcp 6699
xwindows tcp 6000 6001 6002 6003
2.1.8 display dar protocol-rename
Syntax
display dar protocol-rename
2-7
View
Any view
Parameter
None
Description
Use the display dar protocol-rename command to view the rename information of
user-define protocols.
Example
# Display the rename information of user-define protocols, among which

user-defined01 has been renamed as merry and other protocols have not been
renamed yet.
<H3C> display dar protocol-rename
Old Name User Defined Name
--------------- ---------------
user-defined01 merry
user-defined02
user-defined03
user-defined04
user-defined05
user-defined06
user-defined07
user-defined08
user-defined09
user-defined10
2.1.9 display dar protocol-statistic
Syntax
display dar protocol-statistic [ protocol protocol-name | top top-number | all ]

[ interface type number ] [ direction { in | out } ]
View
Any view
Parameter
protocol protocol-name: Name of the application protocol, in the same range with the
protocol-name defined in the if-match protocol command.
top top-number: Displays the newest protocols in top-number, in the range 1 to 16.
2-8
all: Displays all protocol packets.

interface type number: Specifies a particular interface.
direction: Specifies the direction of the traffic to be displayed. By default, it is
bi-directional.
in: Displays the traffic on the inbound direction.
out: Displays the traffic on the outbound direction.
Description
Use the display dar protocol-statistic command to view DAR packet statistics
information.
Example
# Display statistics information about all protocol packets.

<H3C> display dar protocol-statistic all
Interface: Ethernet0/0
Port In/Out Packet Count Byte Count Bit Rate Max Bit Rate
in 5 min in 5 min
(bps) (bps)
-------- ------ ------------- --------------- ------------ -----------
ftp IN 33 1034 23 44
OUT 10 650 0 0
http IN 24 948 11 20
bgp IN 1 72 10 12
Total IN 58 2054 44 76
OUT 10 650 0 0
Interface: Ethernet2/0
Port In/Out Packet Count Byte Count Bit Rate Max Bit Rate
in 5 min in 5 min
(bps) (bps)
-------- ------ ------------- --------------- ------------ -----------
bgp OUT 23 1480 110 112
Total OUT 23 1480 110 112
2.1.10 if-match protocol
Syntax
if-match [ not ] protocol protocol-name

undo if-match [ not ] protocol protocol-name
View
Class view
2-9
Parameter
protocol-name: Name of the matching protocol, which can be: bgp, bittorrent, citrix,
cuseeme, dhcp, dns, edonkey, egp, eigrp, exchange, fasttrack, finger, ftp, gnutella,
gopher, gre, h323, http, icmp, igmp, imap, ip, ipinip, ipsec, irc, kerberos, l2tp, ldap,
mgcp, napster, netbios, netshow, nfs, nntp, notes, novadign, ntp, pcanywhere, pop3,
pptp, printer, rcmd, rip, rsvp, rtcp, secure-ftp, secure-http, secure-imap, secure-irc,
secure-ldap, secure-nntp, secure-pop3, secure-telnet, sip, skinny, smtp, snmp, socks,
sqlnet, sqlserver, ssh, streamwork, sunrpc, syslog, telnet, tftp, vdolive, winmx,
xwindows, unknown-tcp, unknown-udp, unknown-others, user-defined01,
user-defined02, ……, user-defined10 (assume that the protocols have not been
renamed), in which “unknown-tcp” refers to unidentifiable TCP packets, “unknown-udp”
refers to unidentifiable UDP packets, and “unknown-others” refers to other
unidentifiable IP packets. “User-defined01”, “user-defined02”, …, “user-defined10” are
user-defined protocol packets, whose port numbers are invalid before the dar protocol
command is executed.
Description
Use the if-match protocol command to define a protocol matching rule.

Use the undo if-match protocol command to delete the configured rule.
By default, no matching rule is configured.
Example
# Define a class named “smtp-class” and configure a matching rule to match the SMTP
protocol.
<H3C> system-view
[H3C] traffic classifier smtp-class
[H3C-classifier-smtp-class] if-match protocol smtp
2.1.11 if-match protocol http
Syntax
if-match [ not ] protocol http [ url url-string | host hostname-string | mime

mime-type ]
undo if-match [ not ] protocol http [ url url-string | host hostname-string | mime
mime-type ]
View
Class view
Parameter
url: Matches the URL in HTTP packets.
2-10
url-string: URL in HTTP packets, a string of 32 characters, supporting wildcards “*” and
“?”.
host: Matches the host name in HTTP packets.
hostname-string: Host name in HTTP packets, a string of 32 characters, supporting
wildcards “*” and “?”.
mime: Matches the MIME type in HTTP packets.
mime-type: MIME type in HTTP packets, a string of 32 characters, supporting wildcards
“*” and “?”.
Description
Use the if-match protocol http command to configure an HTTP matching rule.
Use the undo if-match protocol http command to delete the configured rule.
By default, no matching rule is configured.
Example
# Define a class named “http-class”, and configure a matching rule to match HTTP
packets with the host name of “*.abc.com”.
<H3C> system-view
[H3C] traffic classifier http-class
[H3C-classifier-http-class] if-match protocol http host *.abc.com
2.1.12 if-match protocol rtp
Syntax
if-match [ not ] protocol rtp [ payload-type { audio | video | payload-string } * ]

undo if-match [ not ] protocol rtp [ payload-type { audio | video | payload-string }* ]
View
Class view
Parameter
payload-type: Matches payload type.

audio: Matches audio RTP payload type.
video: Matches video RTP payload type.
payload-string: Payload type in RTP packets, in the range 0 to 127. Multiple values (up
to 16 values) can be configured at the same time, and each two are separated with a
space.
2-11
Description
Use the if-match protocol rtp command to configure an RTP matching rule.
Use the undo if-match protocol rtp command to delete the configured rule.
If no payload type is specified, all RTP packets will be matched.
By default, no RTP matching rule is configured.
Example
# Define a class named “rtp-class1”, and configure a matching rule to match RTP
packets with the payload type of “video”.
<H3C> system-view
[H3C] traffic classifier rtp-class1
[H3C-classifier-rtp-class1] if-match protocol rtp payload-type video
# Define a class named “rtp-class2”, and configure a matching rule to match RTP
packets with the payload type of 0, 1, 4, 5, 6, 10, or 64.
<H3C> system-view
[H3C] traffic classifier rtp-class2
[H3C-classifier-rtp-class2] if-match protocol rtp payload-type 0 1 4 5 6 10
64
2.1.13 reset dar protocol-statistic
Syntax
reset dar protocol-statistic { { protocol protocol-name | interface type number }* |

all }
View
User view
Parameter
protocol protocol-name: Clears statistics information about the specified protocol, with
the protocol-nam argument in the same range with protocol-name in the if-match
protocol command.
interface type number: Clears statistics information about the specified interface.
all: Clears all statistics information.
Description
Use the reset dar protocol-statistic command to clear DAR protocol statistics
information, i.e. to reset the statistics counters to 0.
2-12
Example
# Clear FTP protocol statistics information on Ethernet 0/0/1.

<H3C> reset dar protocol-statistic protocol ftp interface Ethernet 0/0/1
# Clear all statistics information.

<H3C> reset dar protocol-statistic all
2.1.14 reset dar session
Syntax
reset dar session
View
User view
Parameter
None
Description
Use the reset dar session command to clear the cached information of all session
connections.
Example
# Clear the cached information of all session connections.

<H3C> reset dar session
2-13
Command Manual – QoS Chapter 3 Congestion Management Configuration
Comware V3 Commands
Chapter 3 Congestion Management Configuration

Commands
3.1 FIFO Queuing Configuration Commands

3.1.1 qos fifo queue-length
Syntax
qos fifo queue-length queue-length

undo qos fifo queue-length
View
Interface view
Parameter
queue-length: Length limit of a queue, in the range of 1 to 1024.
Description
Use the qos fifo queue-length command to set the length limit of FIFO queue.
Use the undo qos fifo queue-length command to restore the default value of the
queue length.
By default, queue-length is 75.
Example
# Set the length of FIFO queue to 100.

[H3C-Ethernet3/0/0] qos fifo queue-length 100
3.2 PQ Configuration Commands

3.2.1 display qos pq interface
Syntax
display qos pq interface [ interface-type interface-number ]
View
Any view
3-1
Comware V3 Commands
Parameter

Description
Use the display qos pq interface command to view the configuration and statistics of
priority queues (PQ) at interfaces.
If no interfaces are specified when this command is used, the configuration and
statistics of the priority queues at all interfaces will be displayed.
Related command: qos pq.
Example
# Display the PQ configuration and statistics at interface Ethernet 6/0/0.

[H3C] display qos pq interface ethernet 6/0/0
Priority queuing: PQL 1 (Outbound queue:Size/Length/Discards)
Top: 0/20/0 Middle: 0/40/0 Normal: 0/60/0 Bottom: 0/80/0
3.2.2 display qos pql
Syntax
display qos pql [ pql-index ]
View
Any view
Parameter
pql-index: Priority queue list number.
Description
Use the display qos pql command to view contents of priority queue lists (PQL).
Default items are not displayed.
Related command: qos pq and qos pq pql.
Example
# Display PQLs.
[H3C] display qos pql
Current PQL Configuration:
List Queue Params
------------------------------------------------------
3-2
Comware V3 Commands
1 Top Protocol ip less-than 1000

2 Normal Length 60
2 Bottom Length 40
3 Middle Inbound-interface Ethernet5/0/0
3.2.3 qos pq
Syntax
qos pq pql pql-index

undo qos pq
View
Interface view
Parameter
pql-index: PQL index, ranging 1 to 16.
Description
Use the qos pq command to apply a group of priority list to an interface.

Use the undo qos pq command to restore the congestion management policy at the
interface to FIFO.
By default, the congestion management policy at the interfaces is FIFO.
An interface can only use one group of priority lists.
This command can configure multiple classification rules for each group in the priority
list. During traffic classification, the system matches packets along the rule list. If
matching a certain rule, a packet will be classified into the priority queue specified by
this rule; or it will be put into the default priority queue.
Caution:
Except for interfaces encapsulated with X.25 or LAPB, all physical interfaces can use
PQ.
You can apply queuing configuration to a dialer interface. The configuration, however
cannot update to its physical interfaces immediately if they have connections with their
respective connected devices. Instead, the configuration updates to the physical
interfaces the next time they set up connections.
3-3
Comware V3 Commands
Related command: qos pql, display qos pq interface, display qos pql, and display
interface.
Example
# Apply the priority list 12 to the Ethernet 0/0/0.

[H3C-Ethernet0/0/0] qos pq pql 12
3.2.4 qos pql default-queue
Syntax
qos pql pql-index default-queue { top | middle | normal | bottom }

undo qos pql pql-index default-queue
View
System view
Parameter

top, middle, normal and bottom: Corresponding to the four levels of priority queue, in
descending order. The queue defaults to normal.
Description
Use the qos pql default-queue command to designate the packets without
corresponding rules to a default queue.
Use the undo qos pql default-queue command to cancel the configuration and
restore the default value.
During traffic classification, if a packet does not match any rule, it will be put into the
default priority queue.
For the same pql-index, repeated use of this command will set new default queue.
Related command: display qos pql.
Example
# Set the default queue of the packets matching no rules in PQL 12 to be the bottom
queue.
[H3C] qos pql 12 default-queue bottom
3-4
Comware V3 Commands
3.2.5 qos pql inbound-interface
Syntax
qos pql pql-index inbound-interface interface-type interface-number queue { top |

middle | normal | bottom }
undo qos pql pql-index inbound-interface interface-type interface-number
View
System view
Parameter

Interface-number: Interface number.
top, middle, normal and bottom: Corresponding to the four levels of priority queues,
in descending order.
Description
Use the qos pql inbound-interface command to establish classification rules based
on interfaces.
Use the undo qos pql inbound-interface command to delete the corresponding
classification rule.
When creating an interface-based classification rule, make sure that the configured
packet inbound interface is not a Layer 2 Ethernet interface.
By default, no classification rule is configured.
This command can match packets according to which interface the packet comes from.
For the same pql-index, this command can be repeatedly used, establishing
classification rules for packets that come from different interfaces.
Related command: qos pql default-queue, qos pql protocol, qos pql queue, and
qos pq.
Example
# Create rule 12, making packets from interface Serial 0/0/0 to be put into the middle
queue.
[H3C] qos pql 12 inbound-interface Serial 0/0/0 middle
3-5
Comware V3 Commands
3.2.6 qos pql protocol
Syntax
qos pql pql-index protocol protocol-name queue-key key-value queue { top | middle
| normal | bottom }
undo qos pql pql-index protocol protocol-name [ queue-key key-value ]
View
System view
Parameter

top, middle, normal, bottom: Priority queues, in descending order.
protocol-name: Protocol type, which can only be IP by far.
When the protocol-name is IP, the values of queue-key and key-value are displayed in
the following table:
Table 3-1 Description on values of queue-key and key-value
queue-key key-value Description

All IP packets that match the specified ACL
fragments Null
are enqueued.
ACL group
acl number, 2000 to All IP fragments are enqueued.
3999
Link layer frames greater than the specified
less-than Length, 0 to 65535
value are enqueued.
Any link layer frame greater than the specified
greater-than Length, 0 to 65535
value is enqueued.
Any IP packet whose source or destination
Port number, 0 to
tcp TCP port number is the specified port number
65535
will be classified.
Any IP packet whose source or destination
Port number, 0 to
udp UDP port number is the specified port number
65535
will be classified.
–– –– All IP packets
When queue-key is tcp or udp, key-value can be port name or the associated port
number. You can enter “?” to get the port numbers associated with port names..
3-6
Comware V3 Commands
Description
Use the qos pql protocol command to establish classification rules based on the
protocol type.
Use the undo qos pql protocol command to delete the corresponding classification
rule.
The system matches a packet to a rule according to the set order. When the packet
matches a certain rule, the search process is completed.
For the same pql-index, this command can be repeatedly used, establishing multiple
classification rules for IP packets.
Related command: display qos pql.
Example
# Specify PQ rule 1 to make IP packets matching ACL 3100 be put into the top queue.
[H3C] qos pql 1 protocol ip acl 3100 queue top
3.2.7 qos pql queue
Syntax
qos pql pql-index queue { top | middle | normal | bottom } queue-length

queue-length
undo qos pql pql-index queue { top | middle | normal | bottom } queue-length
View
System view
Parameter

queue-length: Four length values of priority queues, ranging 1 to 1024. By default, the
length values of the queues are as following:
The default length value of the top queue is 20.
The default length value of the middle queue is 40.
The default length value of the normal queue is 60.
The default length value of the bottom queue is 80.
Description
Use the qos pql queue command to specify the maximum number of packets that can
wait in each of the priority queues, or the length of a PQ.
Use the undo qos pql queue command to restore to the default value of each PQ
length.
3-7
Comware V3 Commands
If a queue is full, any newly incoming packet will be dropped.

Related command: qos pql default-queue, qos pql inbound-interface, qos pql
protocol, qos pq.
Note:
You are recommended to set the top queue length to 80 for AR 18 series routers.
Example
# Specify the maximum number of packets waiting in the top priority queue 10 to 10.
[H3C] qos pql 10 queue top queue-length 10
3.3 CQ Configuration Commands

3.3.1 display qos cq interface
Syntax
display qos cq interface [ interface-type interface-number ]
View
Any view
Parameter

Description
Use the display qos cq interface command to view configuration and statistics of
customized queues (CQ) at interfaces.
If no interface is specified, CQ configuration and statistics of all interfaces will be
displayed.
Related command: qos cq.
Example
# Display CQ configuration and statistics at the interface Ethernet 6/0/0.

[H3C] display qos cq interface Ethernet 6/0/0
Custom queuing: CQL 1 (Outbound queue:Size/Length/Discards)
0: 0/ 20/0 1: 0/ 20/0 2: 0/ 20/0
3-8
Comware V3 Commands
3: 0/ 20/0 4: 0/ 20/0 5: 0/ 20/0

6: 0/ 20/0 7: 0/ 20/0 8: 0/ 20/0
9: 0/ 20/0 10: 0/ 20/0 11: 0/ 20/0
12: 0/ 20/0 13: 0/ 20/0 14: 0/ 20/0
15: 0/ 20/0 16: 0/ 20/0
3.3.2 display qos cql
Syntax
display qos cql
View
Any view
Parameter
None
Description
Use the display qos cql command to view contents of customized queue lists (CPL).
Default values will not be displayed.
Related command: qos cq cql and qos cq.
Example
# Display information about a CQL.

[H3C] display qos cql
Current CQL Configuration:
List Queue Params
2 3 Protocol ip fragments
3 0 Length 100
3 1 Inbound-interface Ethernet0
3.3.3 qos cq
Syntax
qos cq cql cql-index

undo qos cq
View
Interface view
3-9
Comware V3 Commands
Parameter
cql-index: CQL index, ranging 1 to 16.
Description
Use the qos cq cql command to apply the customized queue to an interface.
Use the undo qos cq command to restore the congestion management policy at the
interface to FIFO.
By default, the congestion management policy at the interfaces is FIFO.
One interface can only use one group of customized queues.
This command can configure multiple classification rules for each group in the CQL.
During traffic classification, the system matches packets along the rule link. If matching
a certain rule, a packet will be classified into the corresponding priority queue specified
by this rule. If not matching any rule, it will go to the default priority queue.
Caution:
CQ.
You can apply CQ to a dialer interface successfully only when default queuing is
configured on its physical interfaces. The configuration, however cannot update to its
physical interfaces immediately if they have connections with their respective
connected devices. Instead, the configuration updates to the physical interfaces the
next time they set up connections.
Related command: qos cql default-queue, qos cql inbound-interface, qos cql
protocol, qos cql queue serving, qos cql queue queue-length.
Example
# Apply the CQ 5 on the Ethernet 6/0/0.

[H3C-Ethernet6/0/0] qos cq cql 5
3.3.4 qos cql default-queue
Syntax
qos cql cql-index default-queue queue-number

undo qos cql cql-index default-queue
3-10
Comware V3 Commands
View
System view
Parameter

queue-number: Queue number, ranging 0 to 16. By default, customized queue number
is 1.
Description
Use the qos cql default-queue command to assign a default queue for those packets
that do not match any rule in the CQL.
Use the undo qos cql default-queue command to restore to the default queue.
During traffic classification, if a packet does not match any rule, it will go to the default
queue.
Related command: qos cql inbound-interface, qos cql protocol, qos cql queue
serving, and qos cql queue queue-length.
Example
# Assign default queue 2 to CQL 5.

[H3C] qos cql 5 default-queue 2
3.3.5 qos cql inbound-interface
Syntax
qos cql cql-index inbound-interface interface-type interface-number queue

queue-number
undo qos cql cql-index inbound-interface interface-type interface-number
View
System view
Parameter
cql-index: CQL index, in the range 1 to 16.

queue-number: Queue number in the range 0 to 16.
3-11
Comware V3 Commands
Description
Use the qos cql inbound-interface command to establish classification rules based
on interfaces.
Use the undo qos cql inbound-interface command to delete corresponding
classification rules.
By default, no classification rules are configured.
This command matches a packet to a rule according to the interface that the packet
comes from. For the same group-number, this command can be repeatedly used,
establishing different classification rules for packets from different interfaces.
Related command: qos cql protocol, qos cql queue serving, qos cql queue
queue-length.
Example
# Specify a rule to put packets from tunnel 1 in queue 3.

[H3C] qos cql 5 inbound-interface tunnel 1 queue 3
3.3.6 qos cql protocol
Syntax
qos cql cql-index protocol protocol-name queue-key key-value queue queue-number

undo qos cql cql-index protocol protocol-name [ queue-key key-value ]
View
System view
Parameter

protocol-name: Protocol name, which can only be IP by far.
queue-number: Queue number, ranging 0 to 16.
When protocol-name is IP, the values of queue-key and key-value are displayed in the
following table:
Table 3-2 Descriptions of values of queue-key and key-value

fragments Null All IP fragments are enqueued.
ACL group
All IP packets that match the specified ACL are
Acl number, 2000
enqueued.
to 3999
3-12
Comware V3 Commands

Length, 0 to Link layer data units smaller than the specified
less-than
65535 value are enqueued.
Length, 0 to Link layer data units greater than the specified
greater-than
65535 value are enqueued.
IP packets with the source or destination TCP port
Port number,
tcp number being the specified port number are
0 to 65535
enqueued.
IP packets with the source or destination UDP
Port number,
udp port number being the specified port number are
0 to 65535
enqueued.
–– –– All IP Packets
When queue-key is tcp or udp, key-value can be port name or the associated port
number. You can enter “?” to get the port numbers associated with port names.
Description
Use the qos cql protocol command to establish classification rules based on the
protocol type.
Use the undo qos cql protocol command to delete corresponding classification rules.
The system matches a packet to a rule according to the order that rules are configured.
When the packet matches a certain rule, the search process is completed.
For the same cql-index, this command can be repeatedly used, establishing multiple
classification rules for IP packets.
Related command: qos cql inbound-interface, qos cql protocol, qos cql queue
serving, qos cql queue queue-length.
Example
# Specify CQ rule 5 to make any IP packet that matches the ACL 3100 be put into
queue 3.
[H3C] qos cql 5 protocol ip acl 3100 queue 3
3.3.7 qos cql queue
Syntax
qos cql cql-index queue queue-number queue-length queue-length

undo qos cql cql-index queue queue-number queue-length
View
System view
3-13
Comware V3 Commands
Parameter

queue-length: The maximum length of the queue, ranging 0 to 1024 packets. The
default is 20.
Description
Use the qos cql queue command to configure the length of a queue, namely, the
number of packets a queue can hold.
Use the undo qos cql queue command to restore the default.
If a queue is full, any newly incoming packet will be dropped.
Related command: qos cql inbound-interface, qos cql protocol, and qos cql queue
serving.
Example
# Specify the maximum packets in the queue 4 in CQL 5 to 40.

[H3C] qos cql 5 queue 4 queue-length 40
3.3.8 qos cql queue serving
Syntax
qos cql cql-index queue queue-number serving byte-count

undo qos cql cql-index queue queue-number serving
View
System view
Parameter

byte-count: Number of bytes in packets that the given queue sends in each poll,
ranging 1 to 16,777,215 bytes. The default setting is 1500 bytes.
Description
Use the qos cql queue serving command to set the byte-count of the packets sent
from a given queue in each poll.
Use the undo qos cql queue serving command to restore the byte-count of sent
packets to the default value.
By default, byte-count is 1500.
3-14
Comware V3 Commands
Related command: qos cql inbound-interface, qos cql protocol, and qos cql queue
queue-length.
Example
# Specify byte-count of queue 2 in the CQL 5 to 1400.

[H3C] qos cql 5 queue 2 serving 1400
3.4 WFQ Configuration Commands

3.4.1 display qos wfq interface
Syntax
display qos wfq interface [ interface-type interface-number ]
View
Any view
Parameter

Description
Use the display qos wfq interface command to view WFQ (weighted fair queuing)
configuration and statistics of an interface.
If no interface is specified, the WFQ configuration and statistics of all interfaces will be
displayed.
Related command: qos wfq.
Example
# Display the WFQ configuration and statistics of Ethernet 6/0/0 interface.

[H3C] display qos wfq interface ethernet 6/0/0
Output queue : (Weighted Fair queuing : Size/Length/Discards) 0/100/0
Hashed by DSCP
Hashed queues : 0/0/128 (Active/Max active/Total)
3-15
Comware V3 Commands
3.4.2 qos wfq
Syntax
qos wfq [ precedence | dscp ] [ queue-length max-queue-length [ queue-number

total-queue-number ] ]
undo qos wfq
View
Interface view
Parameter
precedence: Assigns bandwidth to queues by IP precedence. This is the default

setting.
dscp: Assigns bandwidth to queues by DSCP.
max-queue-length: Maximum queue length, or maximum number of packets in each
queue. It ranges from 1 to 1024 and defaults to 64. Packets out of the range will be
discarded.
total-queue-number: Sum of queues. When IP precedence applies, available numbers
are 16, 32, 64, 128, 256, 512, 1024, 2048 and 4096. The default is 256. When DSCP
applies, available numbers are 64, 128, 256, 1024, 2048, and 4096. The default setting
is 256 for AR 28/46 and 64 for AR 18.
Description
Use the qos wfq command to apply WFQ to and configure WFQ parameters on the
interface or modify WFQ parameters on the interface.
Use the undo qos wfq command to restore the default congestion management
mechanism FIFO.
If the qos wfq command is configured without any parameters being specified, traffic is
classified based on IP quintuple and precedence.
3-16
Comware V3 Commands
Caution:
CQ.
You can apply WFQ to a dialer interface successfully only when default queuing is
configured on its physical interfaces. The configuration, however cannot update to its
physical interfaces immediately if they have connections with their respective
connected devices. Instead, the configuration updates to the physical interfaces the
next time they set up connections.
Related command: display interface and display qos wfq interface.
Example
# Apply WFQ at the Ethernet/0/0 interface, set the queue length to 100 and set the total
queue number to 512.
[H3C-Ethernet6/0/0] qos wfq queue-length 100 queue-number 512
3.5 CBQ Configuration Commands

3.5.1 car
Syntax
car cir committed-information-rate [ cbs committed-burst-size ebs excess-burst-size ]

[ green action [ red action] ]
undo car
View
Traffic behavior view
Parameter
cir committed-information-rate: Committed information rate of traffic. It should not

exceed CBS x 20. Note that in policy embedding, the CIR specified in a child policy
could be less than 8 kbps.
cbs committed-burst-size: Committed burst size, number of bits that can be sent in
each interval, in the range of 15000 to 155000000 bits.
ebs excess-burst-size: Excessive burst size, in the range of 0 to 155000000 bits. It
defaults to 0.
green: Action conducted to packets when traffic of packets conforms to the CIR. By
default, the action of green is pass.
3-17
Comware V3 Commands
red: Action conducted to packets when traffic of packets does not conform to the CIR.
By default, the action of red is discard.
action: Action conducted on a packet, which is divided into the following types:
z discard: Drops the packet
z remark-dscp-pass new-dscp: Sets new-dscp and transmits the packet.
z remark-prec-pass new-precedence: Sets new-precedence of IP and transmit the
packet.
z remark-mpls-exp-pass new-exp: Sets the new MPLS EXP and transmit the
packet.
z pass: Transmits the packet.
Description
Use the car command to configure traffic monitoring for a behavior.

Use the undo car command to delete the configuration of traffic monitoring.
The policy can be used in the input or outbound direction of the interface.
Application of policy including of TP policy on an interface will cause the previous qos
car command ineffective.
If this command is frequently configured on classes of the same policy, the last
configuration will overwrite the previous ones.
Related command: qos policy, traffic behavior, classifier behavior.
Example
# Use traffic monitor for a behavior. The normal traffic of packets is 38400 bps. Burst
traffic twice of the normal traffic can pass initially and later the traffic is transmitted
normally when the rate does not exceed 38400bps. When the rate exceeds 38400 bps,
the precedence of the packet turns to 0 and the packet is transmitted.
[H3C] traffic behavior database
[H3C-behavior-database] car cir 38400 cbs 76800 ebs 0 green pass red
remark-precedence-pass 0
3.5.2 classifier behavior
Syntax
classifier tcl-name behavior behavior-name

undo classifier tcl-name
View
Policy view
3-18
Comware V3 Commands
Parameter
tcl-name: Must be the name of the defined class, the system-defined or user-defined
class.
behavior–name: Must be the name of the defined behavior, the system-defined or
user-defined behavior.
Description
Use the classifier behavior command to specify the behavior for the class in the
policy.
Use the undo classifier command to remove the application of the class in the policy.
Each class in the policy can only be associated with one behavior.
The undo command is not used for the default class.
Related command: qos policy.
Example
# Specify the behavior test for the class database in the policy h3c.
[H3C] qos policy h3c
[H3C-qospolicy-h3c] classifier database behavior test
3.5.3 display qos cbq interface
Syntax
display qos cbq interface [ interface-type interface-number [ pvc { pvc-name [ vpi/vci ]

| vpi/vci } ] ]
View
Any view
Parameter

pvc: Used for ATM interface only, i.e., policy configuration of specified PVC on
specified ATM interface can be displayed.
pvc-name: PVC name.
vpi/vci: VPI/VCI value pair. For detailed description, refer to the Parameter Description
about pvc command.
3-19
Comware V3 Commands
Description
Use the display qos cbq interface command to view CBQ configuration information
and operating status, the specified PVC on specified ATM interface or on all interfaces.
Example
[H3C] display qos cbq interface

Class Based Queuing: (Outbound queue: Total Size/Discards)
CBQ: 0/0
Queue Size: 0/0/0 (EF/AF/BE)
BE Queues: 0/0/256 (Active/Max active/Total)
AF Queues: 1 (Allocated)
Bandwidth(Kbps): 74992/75000 (Available/Max reserve)
3.5.4 display qos policy
Syntax
display qos policy { system-defined | user-defined } [ policy-name [ classifier

tcl-name ] ]
View
Any view
Parameter
system-defined: Policy pre-defined by the system.

user-defined: Policy pre-defined by the user.
policy-name: Policy name. If it is not specified, the configuration information of all the
policies pre-defined by the system or by the user will be displayed.
tcl-name: Class name in the policy.
Description
Use the display qos policy command to display the configuration information of the
specified class or all the classes and associated behaviors in the specified policy or all
policies.
Example
# Display information about user-defined policy.

[H3C] display qos policy user-defined
User Defined QoS Policy Information:
Policy: test
Classifier: default-class
3-20
Comware V3 Commands
Behavior: be
-none-
Classifier: H3C
Behavior: H3C
Marking:
Remark IP Precedence 3
Committed Access Rate:
Expedited Forwarding:
Bandwidth 50 (Kbps) CBS 1500 (Bytes)
Classifier: database
Behavior: database
Assured Forwarding:
Bandwidth 30 (Kbps)
Discard Method: Tail
Queue Length : 64 (Packets)
General Traffic Shape:
Queue length 50 (Packets)
Marking:
Remark MPLS EXP 3
3.5.5 display qos policy interface
Syntax
display qos policy interface [ interface-type interface-number ] [ inbound |

outbound ] [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] ]
View
Any view
Parameter

pvc: Used for ATM interface only, i.e., policy configuration of specified PVC on
specified ATM interface can be displayed.
pvc-name: PVC name.
3-21
Comware V3 Commands
vpi/vci: VPI/VCI value pair. For details, refer to the parameter description about the pvc
command.
Description
Use the display qos policy interface command to view the configuration and
operating state about the policy on the specified interface, on the specified PVC on a
particular ATM interface or on all interfaces and PVCs.
The displayed CBQ traffic statistics (5 Min Rate) on the physical interface, MFR
interface, FR PVC interface, and ATM PVC interface are statistics of Layer 2 packet
rate; whereas the statistics on the virtual interfaces such as the virtual-template
interface, Mp-group interface, dialer interface, Virtual-Ethernet interface, and the tunnel
interface are statistics of Layer 3 packet rate. The subinterfaces, ATM interface and
Virtual-access interface do not support traffic statistics.
The statistics about the MPLS EXP remarked packets include those temporarily
remarked. Whether the MPLS EXP field of a packet is remarked depends on whether it
is to be output as an MPLS packet.
The traffic statistics interval can be adjusted. Related command: flow-interval qos.
Example
# Display qos policy on Ethernet 1/0/0.

[H3C] display qos policy interface Ethernet 1/0/0
Direction: Outbound
Policy: test
Matched : 0/0 (Packets/Bytes)
1 Min Rate: 0 bps
Rule(s) : if-match any
Behavior: be
Default Queue:
Flow Based Weighted Fair Queuing
Max number of hashed queues: 256
Enqueued : 0/0 (Packets/Bytes)
Classifier: H3C
1 Min Rate: 0 bps
Operator: AND
3-22
Comware V3 Commands
Rule(s) : if-match ip-precedence 5

Behavior: H3C
Marking:
Remarked: 0 (Packets)
Conformed: 0/0 (Packets/Bytes)
Exceeded : 0/0 (Packets/Bytes)
Bandwidth 50 (Kbps), CBS 1500 (Bytes)
1 Min Rate: 0 bps
Operator: AND
Rule(s) : if-match acl 3131
if-match inbound interface Ethernet10/2/0
Behavior: database
Queue Length: 50 (Packets)
Queue size : 0 (Packets)
Delayed : 0/0 (Packets/Bytes)
Marking:
Remark MPLS EXP 3
Remarked: 0 (Packets)
Assured Forwarding:
Bandwidth 30 (Kbps)
3-23
Comware V3 Commands
3.5.6 display traffic behavior
Command
display traffic behavior { system-defined | user-defined } [ behavior-name ]
View
Any view
Parameter
system-defined: Behavior pre-defined by the system.

user-defined: Behavior pre-defined by the user.
behavior-name: Behavior name. If it is not specified, the information of the behaviors
pre-defined by the system or by the user will be displayed.
Description
Use the display traffic behavior command to display the information of the traffic
behavior configured on the router.
Example
# Display information about user-defined traffic behavior.

[H3C] display traffic behavior user-defined
User Defined Behavior Information:
Behavior: test
Assured Forwarding:
Bandwidth 30 (Kbps)
Queue Length : 64 (Packets)
Queue length 50 (Packets)
Marking:
Remark MPLS EXP 3
Behavior: H3C
Marking:
Bandwidth 50 (Kbps) CBS 1500 (Bytes)
3-24
Comware V3 Commands
3.5.7 display traffic classifier
Syntax
display traffic classifier { system-defined | user-defined } [ tcl-name ]
View
Any view
Parameter
system-defined: Class pre-defined by the system.

user-defined: Class pre-defined by the user.
tcl-name: Class name. If it is not specified, the information of all classes pre-defined by
the system or by the user.
Description
Use the display traffic classifier command to view the configuration information about
class of the router.
Example
# Display configuration information about class of the router.

[H3C] display traffic classifier user-defined
User Defined Classifier Information:
Classifier: H3C
Operator: AND
Rule(s) : if-match ip-precedence 5
Operator: AND
Rule(s) : if-match acl 3131
if-match inbound-interface Ethernet1/0/0
3.5.8 flow-interval qos
Syntax
flow-interval qos flow-interval [ update-interval seconds ]

undo flow-interval qos
View
System view
3-25
Comware V3 Commands
Parameter
flow-interval: QoS policy traffic statistical interval, in the range 1 to 30 minutes. The
default is 5 minutes.
update-interval seconds: Optional, QoS policy rate updating interval in seconds. It
takes the value of 10, 15, 20, 30, or 60 and defaults to 10. The smaller the interval, the
faster the updating rate.
Description
Use the flow-interval qos command to configure QoS policy traffic statistical interval
and QoS policy rate updating interval.
Use the undo flow-interval qos command to restore the default.
QoS traffic statistical information is displayed along with QoS policy configuration
displayed by the display qos policy command.
Related command: display qos policy.
Example
# Set the QoS policy traffic statistical interval to 10 minutes, and rate updating interval
to 15 seconds.
[H3C] flow-interval qos 10 update-interval 15
[H3C] display qos policy interface e0/0/0 outbound
Direction: Outbound
Policy: test
10 Min Rate: 0 bps
Behavior: be
-none-
Classifier: test
10 Min Rate: 0 bps
Operator: AND
Behavior: test
-none-
3-26
Comware V3 Commands
3.5.9 gts
Syntax
gts cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size

[ queue-length queue-length ] ] ]
undo gts
View
Parameter
cir committed-information-rate: CIR, in the range of 8000 to 155,000,000 bps. Note that
in policy embedding, the CIR specified in a child policy could be less than 8 kbps.
cbs committed-burst-size: CBS, in the range of 15,000 to 155,000,000 bits. When the
CIR value is less than 30,000, the default CBS value is 15,000; when the CIR value is
ebs excess-burst-size: EBS, in the range of 0 to 155,000,000 bits.
queue-length queue-length: The maximum length of a queue, in the range 1 to 1024.
By default, committed-burst-size is half of committed-information-rate,
excess-burst-size is 0, and queue-length is 50.
Description
Use the gts command to configure traffic shaping for a behavior.

Use the undo gts command to delete traffic shaping for a behavior.
A policy in which shape is used on an interface can only be applied in the outbound
direction of the interface.
Application of class-based GTS policy including shape policy on an interface will cause
the previously configured qos gts command ineffective.
If this command is frequently configured on the same traffic behavior, the last
Related command: qos policy, traffic behavior, and classifier behavior.
Example
# Configure GTS for a behavior. The normal traffic is 38400 bps. Burst traffic twice of
the normal traffic can pass initially and later the traffic is transmitted normally when the
rate is less than or equal to 38400 bps. When the rate exceeds 38400 bps, the traffic
will enter the queue buffer and the buffer queue length is 100.
[H3C-behavior-database] gts cir 38400 cbs 76800 ebs 0 queue-length 100
3-27
Comware V3 Commands
3.5.10 if-match
Syntax
if-match [ not ] match-criteria

undo if-match [ not ] match-criteria
View
Class view
Parameter
not: Not match the class.

match-criteria: Class match rules. The value can include acl, any, classifier,
destination-mac, inbound-interface, ip-precedence, dscp, fr-de, atm-clp,
dot1p-cos, protocol, source-mac, mpls-exp, and rtp.
Note:
When packets of a certain class do not meet the packet type restrictions of a rule, the
rule is senseless and regarded as ineffective, and the system will neglect it when
performing process by class. Restrictions of rules on packet types are as follows:
z destination-mac, source-mac, and dot1p-cos are effective only for Ethernet packets.
z mpls-exp is effective in the inbound direction only for MPLS packets.
z mpls-exp (in the outbound direction), ip-precedence, dscp, rtp, and acl are effective
for IP and MPLS packets.
z fr-de, atm-clp, protocol, inbound-interface, any, and classifier are effective for all
packets.
Description
Use the if-match command to define the match rule of a class.

Use the undo if-match command to delete the match rule of a class.
Related command: traffic classifier.
Example
# Define if-match destination-mac rule and if-match inbound-interface rule on ATM

PVC.
[H3C]display qos policy interface Atm 1/0/0 pvc 0/99
Atm1/0/0, pvc 0/99
3-28
Comware V3 Commands
Direction: Outbound
Policy: test
Classifier: test
1 Min Rate: 0 bps
Operator: AND
Rule(s) : if-match destination-mac ffff-ffff-ffff
if-match inbound-interface e0/0/0
Behavior: test
-none-
In fact, if-match destination-mac is ineffective on ATM PVC. Therefore, the rule on the
ATM PVC is like this:
Classifier: test
1 Min Rate: 0 bps
Operator: AND
Rule(s) : if-match inbound-interface e0/0/0
Behavior: test
-none-
3.5.11 if-match { destination-mac | source-mac }
Syntax
if-match [not ] { destination-mac | source-mac } mac-address

undo if-match [ not ] { destination-mac | source-mac } mac-address
View
Class view
Parameter

mac-address: MAC address.
Description
Use the if-match { destination-mac | source-mac } command to define match rule of

destination or source MAC address.
Use the undo if-match { destination-mac | source-mac } command to delete the
match rule of destination or source MAC address.
3-29
Comware V3 Commands
The match rules of the destination MAC address are only meaningful for the policies of
the outbound direction and the interface of Ethernet type.
The match rules of the source MAC address are only meaningful for the policies of the
input direction and the interface of Ethernet type.
Example
# Define that the match rule of class2 is to match the packets with the destination MAC
address 0050-ba27-bed3.
[H3C] traffic classifier class1
[H3C-classifier-class1] if-match destination-mac 0050-ba27-bed3
# Define the match rule of class2 as matching the packets with source MAC address
0050-ba27-bed2.
[H3C-classifier-class2] if-match source-mac 0050-ba27-bed2
3.5.12 if-match acl
Syntax
if-match [ not ] acl access-list-number

undo if-match [ not ] acl access-list-number
View
Class view
Parameter
access-list-number: ACL number.

not: Not matching the class.
Description
Use the if-match acl command to define ACL match rule.

Use the undo if-match acl command to delete ACL match rule.
Example
# Define a class to match ACL3101.

[H3C-classifier-class1] if-match acl 3101
3-30
Comware V3 Commands
3.5.13 if-match any
Syntax
if-match [ not ] any

undo if-match [ not ] any
View
Class view
Parameter
Description
Use the if-match any command to define the rule matching all packets.
Use the undo if-match any command to delete the rule matching all packets.
Example
# Define the rule matching all packets.

[H3C-classifier-class1] if-match any
3.5.14 if-match atmclp
Syntax
if-match [ not ] atmclp

undo if-match [ not ] atmclp
View
Class view
Parameter
Description
Use the if-match atmclp command to create a cell loss priority (CLP) bit match rule
defining that ATM cells with CLP bit set to 1 are matched.
Use the if-match not atmclp command to create a CLP bit match rule defining that
ATM cells with CLP bit set to 0 are matched.
Use the undo if-match atmclp command to delete the CLP bit match rule.
3-31
Comware V3 Commands
CLP is the last bit in the fourth byte of ATM cell headers. As it can only take on 1 or 0,
setting CLP bit match rule is simple. When congestion occurs, ATM cells with CLP bit
set to 1 are more likely to be dropped than those with CLP bit set to 0.
Example
# Define a rule, setting that all ATM cells with CLP bit set to 1 are matched.
[H3C] traffic class class1
[H3C-classifier-class1] if-match atmclp
[H3C-classifier-class1] display traffic classifier user-defined class1
Classifier: class1
Operator: AND
Rule(s) : if-match atmclp
# Define a rule, setting that all ATM cells with CLP bit set to 0 are matched.
[H3C] traffic class class2
[H3C-classifier-class2] if-match not atmclp
[H3C-classifier-class2] display traffic classifier user-defined class2
Classifier: class2
Operator: AND
Rule(s) : if-match not atmclp
3.5.15 if-match classifier
Syntax
if-match [ not ] classifier tcl-name

undo if-match [ not ] classifier tcl-name
View
Class view
Parameter
tcl-name: Class name.
Description
Use the if-match classifier command to define class-map match rule.

Use the undo if-match classifier command to delete the class-map match rule.
When defining both logical AND and logical OR match rules for a class, you may use
this command.
3-32
Comware V3 Commands
For example: classA needs to match: rule1 & rule2 | rule3

traffic classifier classB operator and
if-match rule1
if-match rule2
traffic classifier classA operator or
if-match rule3
if-match classifier classB
Example
# Define match rule of class2 and class1 must be used. Therefore, class1 is configured
first. The match rule of class1 is ACL 101 and the IP precedence is 5.
[H3C-classifier-class1] if-match ip-precedence 5
# Define the packet whose class is class2, match rule is class1 and destination MAC
address is 0050-BA27-BED3.
[H3C-classifier-class2] if-match classifier class1
[H3C-classifier-class2] if-match destination-mac 0050-BA27-BED3
3.5.16 if-match dot1p-cos
Syntax
if-match [ not ] dot1p-cos cos-value

if-match [ not ] dot1p-cos cos-value
View
Class view
Parameter
cos-value: COS value in VLAN packets, in the range 0 to 7.
Description
Use the if-match dot1p-cos command to define a COS field match rule for VLAN
packets.
Use the undo if-match atmclp command to delete the specified COS field match rule
for VLAN packets.
For a class, you can configure multiple COS field match rules. The COS values
specified by them are automatically arranged in ascending order.
3-33
Comware V3 Commands
You can specify up to eight COS values in one if-match dot1p-cos command. In case
the same value is specified multiple times, only one of them is valid. If the COS value of
a VLAN packet matches one of the specified COS values, the system regards that a
match is found.
Example
# Define a rule, setting that the VLAN packets with COS field of 1, 3, or 6 are matched.
[H3C-classifier-class1] if-match dot1p-cos 1 3 6
3.5.17 if-match dscp
Syntax
if-match [ not ] dscp dscp-value

undo if-match [ not ] dscp dscp-value
View
Class view
Parameter
dscp-value: DSCP value, in the range of 0 to 63.
Description
Use the if-match dscp command to define an IP DSCP match rule.

Use the undo if-match dscp command to delete an IP DSCP match rule.
For a class, you can configure multiple IP DSCP match rules. The DSCP values
specified by them are automatically arranged in ascending order. Only when the
specified DSCP values are identical with those in the rule (sequence may be different)
can the command be deleted.
You may configure up to eight DSCP values in one command. If multiple DSCPs of the
same value are specified, the system regards them as one. Relation between different
DSCP values is “OR”.
Example
# Define the match rule of class1 as matching the packets with the DSCP value as 1, 6
or 9.
[H3C-classifier-class1] if-match dscp 1 6 9
3-34
Comware V3 Commands
3.5.18 if-match fr-de
Syntax
if-match [not] fr-de

undo if-match [not] fr-de
View
Class view
Parameter
None
Description
Use the if-match fr-de command to define an FR DE matching rule.

Use the undo if-match fr-de command to delete the FR DE matching rule.
The if-match fr-de command matches packets with the FR DE bit set to 1, while the
if-match not fr-de command matches packets with the FR DE bit left as 0.
Example
# Define a matching rule for class1, specifying to match FR packets with the DE bit set
to 1.
[H3C-classifier-class1] if-match fr-de
# Define a matching rule for class2, specifying to match FR packets with the DE bit left
as 0.
[H3C-classifier-class1] if-match not fr-de
3.5.19 if-match inbound-interface
Syntax
if-match [ not ] inbound-interface interface-type interface-number

undo if-match [ not ] inbound-interface interface-type interface-number
View
Class view
Parameter

3-35
Comware V3 Commands
Description
Use the if-match inbound-interface command to define ingress interface match rule
of a class.
Use the undo if-match inbound-interface command to delete ingress interface match
rule of a class.
Before specifying an interface, make sure that it has been created. If the specified
interface is a dynamic one, removing the interface can delete the rule.
Supported interface type: ATM, Ethernet, Serial, Tunnel, and VT.
Example
# Define that the class matches the packets entering from Ethernet6/0/0.
[H3C-classifier-class1] if-match inbound-interface Ethernet6/0/0
3.5.20 if-match ip-precedence
Syntax
if-match [ not ] ip-precedence ip-precedence-value

undo if-match [ not ] ip-precedence
View
Class view
Parameter
ip-precedence-value: Precedence value, in the range of 0 to 7. Multiple values can be

specified and the maximum number is 8. If multiple precedence of the same value are
specified, only one of them is taken. Relation between different DSCP values is “OR”.
Description
Use the if-match ip-precedence command to define IP precedence match rule.

Use the undo if-match ip-precedence command to delete IP precedence match rule.
When the command is configured, the ip-precedence-value will be sorted automatically
in ascending order.
Multiple precedence values can be specified and the maximum number is 8. If multiple
precedence values of the same are specified, the system regards them as one.
Relation between different precedence values is “OR”.
3-36
Comware V3 Commands
Example
# Define the match rule of class1 as matching the packets with the precedence value as
1 or 6.
[H3C-classifier-class1] if-match ip-precedence 1 6
3.5.21 if-match outbound-interface
Syntax
if-match [ not ] outbound-subinterface interface-type

interface-number.subinterface-number
undo if-match [ not ] outbound-subinterface interface-type
interface-number.subinterface-number
View
Class view
Parameter
interface-type: Interface type, which must support subinterfaces. It can be GE, FE, FR,
or MFR only at present.
interface-number.subinterface-number: Subinterface number.
Description
Use the if-match outbound-subinterface command to define an outbound

subinterface matching rule for the class.
Use the undo if-match inbound-subinterface command to delete an outbound
subinterface matching rule from the class.
The subinterface specified in this command must be one that already existed. After this
subinterface is deleted, the rule is deleted.
A policy containing a rule defined using this command must be applied to the main
interface where the specified subinterface is located. If the policy is applied to a
subinterface or to FR PVC, the rule cannot take effect.
Example
# Define an outbound subinterface matching rule for class1.

[H3C-classifier-class1] if-match outbound-subinterface
GigabitEthernet6/0/0.1
3-37
Comware V3 Commands
3.5.22 if-match protocol
Syntax
if-match [ not ] protocol protocol-name

undo if-match [ not ] protocol protocol-name
View
protocol-name Protocol name. IP is used.
Parameter
Class view
Description
Use the if-match protocol command to define protocol match rule.

Use the undo if-match protocol command to delete protocol match rule.
Example
# Define the packet whose class match protocol is IP.

[H3C-classifier-class1] if-match protocol ip
3.5.23 if-match rtp
Syntax
if-match [ not ] rtp start-port starting-port-number end-port end-port-number

undo if-match [ not ] rtp start-port starting-port-number end-port end-port-number
View
Class view
Parameter
starting-port-number: Starting RTP port number, in the range of 2000 to 65535.

end-port-number: Ending RTP port numbers, in the range of 2000 to 65535.
Description
Use the if-match rtp command to define port match rule of RTP.
Use the undo if-match rtp command to delete the port match rule of RTP.
This command can match RTP packets in the range of specified RTP port number, i.e.,
to match packets of even UDP port numbers between <starting-port-number> and <
3-38
Comware V3 Commands
end-port-number >. If this command is frequently used under a class, the last
Example
# Define the match rule of class1 as matching the packets whose RTP port number is
the even UDP port number between 16384 and 32767.
[H3C-classifier-class1] if-match rtp start-port 16384 end-port 32767
3.5.24 lr
Syntax
lr cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size] ]

undo lr
View
Parameter
committed-information-rate: CIR in the range 8000 to 155,000,000 bps.

committed-burst-size: CBS in the range 15,000 to 155,000,000 bits. When the CIR
value is less than 30,000, the default CBS value is 15,000; when the CIR value is
excess-burst-size: EBS in the range 0 to 155,000,000 bits. It defaults to 0, meaning
Description
Use the lr command to configure LR.

Use the undo lr command to disable LR.
By default, LR is disabled.
LR is different from GTS in the sense that the former is functioning at the link layer
whereas the latter is functioning at the IP layer.
With LR enabled, 100% of the LR bandwidth can be kept as the reserved bandwidth for
CBQ. You are recommended to configure the total value of AF bandwidth plus EF
bandwidth to be less than LR bandwidth (or percentage total of AF and EF less than
100%) and reserve a certain amount of bandwidth for the BE queue.
Related command: display traffic policy interface.
3-39
Comware V3 Commands
Example
# For the specified behavior, set CIR to 38400 bps and CBS to 76800 bits. This allows
bursty traffic twice the CIR to pass at the first time. After that, traffic smaller than 38400
bps is sent and traffic larger than 38400 bps is put in queues.
[H3C-behavior-database] lr cir 38400 cbs 76800
3.5.25 lr percent
Syntax
lr percent cir committed-information-rate [ cbs committed-burst-size [ ebs

excess-burst-size ] ]
undo lr
View
Parameter
committed-information-rate: CIR in percentages, in the range 1 to 100.

committed-burst-size: CBS in the range 50 to 2000 milliseconds. The default CBS is
500 milliseconds.
excess-burst-size: EBS in the range 0 to 2000 milliseconds. It defaults to 0, meaning
Description
Use the lr percent command to configure LR.

Use the undo lr percent command to disable LR.
By default, LR is disabled.
The CIR, CBS, and EBS in the lr percent command are computed based on interface
or ATM PVC bandwidth. Note that the interface bandwidth discussed here is computed
based on the bandwidth in the qos max-bandwidth command without multiplying the
maximum reserved-bandwidth percentage. If the computed CIR is smaller than 8 kbps,
it is regarded 8 kbps; if the computed CBS is smaller than 15000 bits, it is regarded
15000 bits.
LR is different from GTS in the sense that the former is functioning at the link layer
whereas the latter is functioning at the IP layer.
With LR enabled, 100% of the LR can be kept as the reserved bandwidth for CBQ. You
are recommended to configure the percentage total of AF and EF bandwidth to be less
than 100% and reserve a certain amount of bandwidth for the BE queue.
3-40
Comware V3 Commands
Related command: display traffic policy interface.
Example
# For the specified behavior, set CIR to 50% of interface bandwidth and CBS to 200
milliseconds. This allows bursty traffic equivalent to 200 milliseconds x 50% of interface
bandwidth to pass at the first time. After that, traffic smaller than or equal to 50% of
interface bandwidth is sent and larger traffic is put in queues.
[H3C-behavior-database] lr percent cir 50 cbs 200
3.5.26 qos apply policy
Syntax
qos apply policy policy-name { inbound | outbound [ dynamic ] }

undo qos apply policy { inbound | outbound }
View
Interface view
Parameter
inbound: Inbound direction.

outbound: Outbound direction.
dynamic: Dynamically applies the policy, but only when MP is enabled.
Description
Use the qos apply policy command to apply a service policy to the interface.
Use the undo qos apply policy command to delete the associated policy from the
interface.
To successfully apply the policy to the interface, you must make sure that the sum of
bandwidth specified for the AF and EF classes in the policy is smaller than the available
bandwidth of the interface. You can modify the available bandwidth of the current
interface. If the sum of their bandwidth still exceeds that modified value, the policy will
be deleted.
For a policy to be applied in the inbound direction, it cannot contain classes associated
with traffic behaviors specified using queue af, queue ef, queue wfq, or gts.
dynamic applies only to the dial-up or virtual template interfaces configured with MP.
Before applying a QoS policy to such a dial-up or VT interface, use the qos
max-bandwidth command to configure adequate bandwidth for running the policy.
3-41
Comware V3 Commands
However, the policy you applied to the interface is not used immediately. Instead, it is
used dynamically depending on the actual bandwidth condition as follows:
z When the bandwidth of the bundle reaches the policy requirement (bandwidth > ef
+ af), the policy is enabled on the interface; but before that, the default FIFO
queuing applies.
z If bandwidth > ef + af, the policy is enabled to accommodate changes when a
channel comes up, goes down, or joins the bundle.
z When some channels in use are disconnected resulting in inefficient bandwidth
use, FIFO queuing applies.
Example
# Apply the policy h3c in the outbound direction of interface Ethernet6/0/0.

[H3C-Ethernet6/0/0] qos apply policy H3C outbound
3.5.27 qos max-bandwidth
Syntax
qos max-bandwidth bandwidth

undo qos max-bandwidth
View
Interface view
Parameter
bandwidth: Available bandwidth of the interface. It is in kbps (1 to 1000000). By default,

this value is the actual interface baud rate or speed for a physical interface, the total
bandwidth of the channel set for a logical serial interface that is formed by bundling in
T1/E1 or MFR, or 64 kbps for a logical interface like virtual template or VE.
Description
Use the qos max-bandwidth command to configure the maximum interface bandwidth
used when CBQ enqueues packets.
Use the undo qos max-bandwidth command to cancel the bandwidth configuration.
The maximum available bandwidth of an interface is preferred to be smaller than the
real available bandwidth of the physical interfaces or the logical links. For a serial
interface, the value defaults to 64 kbps. To modify it, you can change the interface rate
using the baudrate command to 2.048 Mbps for example, and then set a new value,
115.2 kbps for example.
Example
# Set the bandwidth of virtual-template 1 to 128 kbps.
3-42
Comware V3 Commands
[H3C-Virtual-Template1] qos max-bandwidth 128
3.5.28 qos policy
Syntax
qos policy policy-name

undo qos policy policy-name
View
System view
Parameter
Description
Use the qos policy command to define a policy and enter policy view.
Use the undo qos policy command to delete a policy.
The policy cannot be deleted if it is applied on an interface. It is necessary to remove
application of the policy on the current interface before deleting it via the undo qos
policy command.
policy-name should not be the policy defined by the system. The “default” is the policy
defined by the system.
Related command: classifier behavior and qos apply policy.
Example
# Define a policy named as H3C.

[H3C] qos policy H3C
[H3C-qospolicy-H3C]
3.5.29 queue af
Syntax
queue af bandwidth { bandwidth | pct percentage }

undo queue af
View
Parameter
bandwidth: Bandwidth in Kbps, in the range of 8 to 1000000.
3-43
Comware V3 Commands
pct percentage: Percentage of the available bandwidth configured, in the range of 1 to

100.
Description
Use the queue af command to configure the class to perform the assured-forwarding
and the minimum bandwidth used.
Use the undo queue af command to cancel the configuration.
When associating the class with the queue af behavior in the policy, the following must
be satisfied.
z The sum of the bandwidth specified for the classes in the same policy to assured
forwarding (queue af) and expedited forwarding (queue ef) must be less than or
equal to the available bandwidth of the interface where the policy is applied.
z The sum of percentages of the bandwidth specified for the classes in the same
policy to assured forwarding (queue af) and expedited forwarding (queue ef) must
be less than or equal to 100.
z The bandwidth configuration for the classes in the same policy to assured
forwarding (queue af) and expedited forwarding (queue ef) must adopt the value of
the same type. For example, they all adopt the absolute value form or the
percentage form.
Note:
When the AF queue is configured with a large bandwidth on the outbound interface, the
disproportion ratio of AF queue bandwidth to default queue length may occur.
Therefore, you are recommended to use the queue-length command to increase the
queue length.
Example
# Configure traffic behavior named database and configure the minimum bandwidth of
the traffic behavior to 200 kbps.
[H3C-behavior-database] queue af bandwidth 200
3.5.30 queue ef
Syntax
queue ef bandwidth { bandwidth [ cbs committed-burst-size ] | pct percentage

[ cbs_ratio ratio ] }
3-44
Comware V3 Commands
undo queue ef
View
Parameter
bandwidth: Bandwidth in Kbps, in the range of 8 to 1000000.

percentage: Percentage of available bandwidth, in the range of 1 to 100.
committed-burst-size: Specifies the committed burst size in bytes, in the range of 32 to
2000000, By default, burst is bandwidth*25.
ratio: Committed burst percentage, in the range 25 to 500.
Description
Use the queue ef command to configure expedited-forwarding packets to the absolute

priority queue and configure the maximum bandwidth.
Use the undo queue ef command to cancel the configuration.
The command can not be used together with queue af, queue-length, and wred in
traffic behavior view.
In the policy the default class default-class cannot be associated with the traffic
behavior queue ef belongs to.
z The sum of the bandwidth specified for the classes in the same policy to assured
forwarding (queue af) and expedited forwarding (queue ef) must be less than or
equal to the available bandwidth of the interface where the policy is applied.
z The sum of percentages of the bandwidth specified for the classes in the same
policy to assured forwarding (queue af) and expedited forwarding (queue ef) must
be less than or equal to 100.
z The bandwidth configuration for the classes in the same policy to assured
forwarding (queue af) and expedited forwarding (queue ef) must adopt the value of
the same type. For example, they all adopt the absolute value form or the
percentage form.
Example
# Configure packets to enter priority queue. The maximum bandwidth is 200 kbps and
burst is 5000 bytes by default.
[H3C-behavior-database] queue ef bandwidth 200 cbs 5000
3-45
Comware V3 Commands
3.5.31 queue wfq
Syntax
queue wfq [ queue-number total-queue-number ]

undo queue wfq
View
Parameter
total-queue-number: Number of fair queue, which can be 16, 32, 64, 128, 256, 512,
1024, 2048 and 4096 and the default value is 64.
Description
Use the queue wfq command to configure the default-class to use WFQ.
Use the undo queue wfq command to .delete the configuration.
The traffic behavior configured with the command can only be associated with the
default class. It can also be used together with the command like queue-length or
wred.
Example
# Configure WFQ for default-class and the queue number is 16.

[H3C] traffic behavior test
[H3C-behavior-test] queue wfq 16
[H3C-qospolicy-h3c] classifier default-class behavior test
3.5.32 queue-length
Syntax
queue-length queue-length
undo queue-length
View
Parameter
queue-length: The maximum threshold value of the queue, in the range of 1 to 512. The
default drop mode is tail drop and the queue length is 64.
3-46
Comware V3 Commands
Description
Use the queue-length command to configure maximum queue length.

Use the undo queue-length command to delete configuration.
This command can be used only after the queue af or queue wfq command has been
configured.
The queue-length, which has been configured, will be deleted when the undo queue
af or undo queue wfq command is executed.
The queue-length, which has been configured, will be deleted when the random drop
mode is configured via the wred command, and vise versa.
By default, tail drop is configured.
Example
# Configure tail drop and set the maximum queue length to 16.
[H3C-behavior-database] queue-length 16
3.5.33 remark atmclp
Syntax
remark atmclp atmclp-value

undo remark atmclp
View
Parameter
atmclp-value: Value of the cell loss priority (CLP) bit in ATM packets, 0 or 1.
Description
Use the remark atmclp command to have the system remark the CLP bit of ATM
packets in the class.
Use the undo remark atmclp command to disable remarking the CLP bit of ATM
packets.
By default, the CLP bit of ATM packets is not remarked.
The policy that includes CLP remark can apply only on the outbound direction of
interfaces or ATM PVCs. When congestion occurs, the router drops packets with a high
CLP bit value, if CLP remark is supported.
3-47
Comware V3 Commands
Example
# Remark the CLP bit of ATM packets to 1.

[H3C-behavior-database] remark atmclp 1
3.5.34 remark dot1p
Syntax
remark dot1p cos-value

undo remark dot1p
View
Parameter
cos-value: 802.1p priority value of VLAN packets, ranging from 0 to 7.
Description
Use the remark dot1p command to configure the 802.1p priority value in the VLAN
packets of a class.
Use the undo remark dot1p command to remove the 802.1p priority value from the
VLAN packets.
By default, VLAN packets have no 802.1p priority value.
802.1p priority value is the CoS domain value in VLAN packets. The level 2 switching
devices, such as Ethernet switch, set up forwarding policy according to this priority
value.
Example
# Set the 802.1p priority value in the VLAN packets of a class to 6.

[H3C-behavior-database] remark dot1p 6
3.5.35 remark dscp
Syntax
remark dscp dscp-value

undo remark dscp
View
3-48
Comware V3 Commands
Parameter
dscp-value: Preset DSCP value, in the range of 0 to 63, which can be any of these
keywords: ef, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1,
cs2, cs3, cs4, cs5, cs7, or default.
Table 3-3 DSCP keywords and values
Keyword DSCP value (binary) DSCP value (decimal)

ef 101110 46
af11 001010 10
af12 001100 12
af13 001110 14
af21 010010 18
af22 010100 20
af23 010110 22
af31 011010 26
af32 011100 28
af33 011110 30
af41 100010 34
af42 100100 36
af43 100110 38
cs1 001000 8
cs2 010000 16
cs3 011000 24
cs4 100000 32
cs5 101000 40
cs6 110000 48
cs7 111000 56
default 000000 0
Description
Use the remark dscp command to set a remarked DSCP value for IP packets
belonging to the class.
Use the undo remark dscp command to disable DSCP remark.
By default, DSCP remark is disabled.
3-49
Comware V3 Commands
Example
# Remark the DSCP of the IP packets belonging to the class to 6.

[H3C-behavior-database] remark dscp 6
3.5.36 remark fr-de
Command
remark fr-de fr-de-value

undo remark fr-de
View
Parameter
fr-de-value: Value of the DE flag bit in the frame relay packet, 0 or 1.
Description
Use the remark fr-de command to set the remarked DE bit of frame relay packets.
Use the undo remark fr-de command to remove the setting.
By default, DE bit remark is disabled.
Example
# Remark the DE bit in frame relay packets to 1.

[H3C-behavior-database] remark fr-de 1
3.5.37 remark ip-precedence
Syntax
remark ip-precedence ip-precedence-value

undo remark ip-precedence
View
3-50
Comware V3 Commands
Parameter
ip-precedence-value: Preset precedence value, in the range of 0 to 7.
Description
Use the remark ip-precedence command to configure IP precedence remark.

Use the undo remark ip-precedence command to disable IP precedence remark.
By default, IP precedence remark is disabled.
Example
# Remark the IP precedence of the matched IP packets to 6.

[H3C-behavior-database] remark ip-precedence 6
3.5.38 traffic behavior
Command
traffic behavior behavior–name

undo traffic behavior behavior–name
View
System view
Parameter
behavior-name: Behavior name.
Description
Use the traffic behavior command you can define a traffic behavior and enter the
behavior view.
Use the undo traffic behavior command to delete a traffic behavior.
behavior-name shall not be the traffic behavior pre-defined by the system. The traffic
behaviors defined by the system include ef, af, and be.
Related command: qos policy, qos apply policy, and classifier behavior.
Example
# Define a traffic behavior named behavior1.

[H3C] traffic behavior behavior1
[H3C-behavior-behavior1]
3-51
Comware V3 Commands
3.5.39 traffic classifier
Syntax
traffic classifier tcl-name [ operator { and | or } ]

undo traffic classifier tcl-name
View
System View
Parameter
and: Specifies the relation between the rules in the class as logic AND. That is, the
packet that matches all the rules belongs to this class.
or: Specifies the relation between the rules in the class as logic OR. That is, the packet
that matches any one of the rules belongs to this class.
tcl-name: Class name.
Description
Use the traffic classifier command to define a class and enter the class view.
Use the undo traffic classifier command to delete a class.
By default, the relation is operator and.
tcl-name shall not be the classes pre-defined by the system. The classes defined by the
system include: default-class, ef, af1, af2, af3, af4, ip-prec0, ip-prec1, ip-prec2,
ip-prec3, ip-prec4, ip-prec5, ip-prec6, ip-prec7, mpls-exp0, mpls-exp1, mpls-exp2,
mpls-exp3, mpls-exp4, mpls-exp5, mpls-exp6, and mpls-exp7.
Related command: qos policy, qos apply policy, and classifier behavior.
Example
# Define a class named as class 1.

[H3C-classifier-class1]
3.5.40 traffic-policy
Syntax
traffic-policy policy-name
undo traffic-policy
View
3-52
Comware V3 Commands
Parameter
policy-name: Specifies a policy by its name.
Description
Use the traffic-policy command to associate a sub-policy to the behavior.

Use the undo traffic-policy command to remove the association.
After defining a class using the traffic classifier command, you can have it perform the
associated behavior defined in its policy and in addition, use a sub-policy to
sub-classify the class, having it perform the behavior defined in the sub-policy. You can
thus implement policy embedding.
Related command: traffic behavior, traffic classifier.
Example
# Embed the sub-policy Child in the policy for the traffic behavior database
[H3C-behavior-database] traffic-policy Child
3.5.41 wred
Syntax
wred [ dscp | ip-precedence ]

undo wred
View
Parameter
dscp: Uses DSCP value for calculating drop probability for a packet.
ip-precedence: Uses IP precedence value for calculating drop probability for a packet.
Description
Use the wred command to configure drop mode as weighted random early detection
(WRED).
Use the undo wred command to delete the configuration.
By default, ip-precedence is configured.
This command can be used only after the queue af command has been configured.
The wred command and queue-length command can not be used simultaneously.
Other configurations under the random drop will be deleted when this command is
3-53
Comware V3 Commands
deleted. When a policy is applied on an interface, the previous WRED configuration on

interface level will become ineffective.
When configuration is performed in default-class view, ip-precedence is configured by
default.
The behavior associated with default-class can only use wred ip-precedence.
Example
# Configure WRED for a traffic behavior named database and drop probability is
calculated by IP precedence.
[H3C-behavior-database] wred
3.5.42 wred dscp
Syntax
wred dscp dscp-value low-limit low-limit high-limit high-limit [ discard-probability

discard-prob ]
undo wred dscp dscp-value
View
Parameter
dscp-value: DSCP value, in the range of 0 to 63, which can be any of the following
cs2, cs3, cs4, cs5, cs6, cs7, or default.
Table 3-4 DSCP keywords and values
Keyword DSCP value(binary) DSCP value(decimal)

ef 000000 0
af11 001010 10
af12 001100 12
af13 001110 14
af21 010010 18
af22 010100 20
af23 010110 22
af31 011010 26
3-54
Comware V3 Commands
Keyword DSCP value(binary) DSCP value(decimal)

af32 011100 28
af33 011110 30
af41 100010 34
af42 100100 36
af43 100110 38
cs1 001000 8
cs2 010000 16
cs3 011000 24
cs4 100000 32
cs5 101000 40
cs6 110000 48
cs7 111000 56
default 000000 0
low-limit: Lower threshold value, in the range of 1 to 1024. It is 10 by default.

high-limit: Upper threshold value, in the range of 1 to 1024. It is 30 by default.
discard-prob: Denominator of drop probability, in the range of 1 to 255. It is 10 by
default.
Description
Use the wred dscp command to set DSCP lower-limit, upper-limit and drop probability
denominator of WRED.
Use the undo wred dscp command to delete the configuration.
This command can be used only after the wred command has been used to enable
WRED drop mode based on DSCP.
The configuration of wred dscp will be deleted if the configuration of qos wred is
deleted.
The configuration of drop parameter will be deleted if the configuration of queue af is
deleted.
Example
# Set the queue lower-limit to 20, upper-limit to 40 and discard probability to 15 for the
packet whose DSCP is 3.
3-55
Comware V3 Commands
[H3C-behavior-database] wred dscp

[H3C-behavior-database] wred dscp 3 low-limit 20 high-limit 40
discard-probability 15
3.5.43 wred ip-precedence
Syntax
wred ip-precedence precedence low-limit low-limit high-limit high-limit

[ discard-probability discard-prob ]
undo wred ip-precedence precedence
View
Parameter
precedence: Precedence of IP packet, in the range of 0 to 7.

low-limit: Lower threshold value, in the range of 1 to 1024. It is 10 by default.
high-limit: Upper threshold value, in the range of 1 to 1024. It is 30 by default.
discard-prob: Denominator of drop probability, in the range of 1 to 255. It is 10 by
default.
Description
Use the wred ip-precedence command to set precedence lower-limit, upper-limit and
drop probability denominator of WRED.
This command can be used only after the wred command has been used to enable
WRED drop mode based on IP precedence.
The configuration of wred ip-precedence will be deleted when wred configuration is
deleted.
The configuration of drop parameters will be deleted if queue af is deleted.
Example
# Set lower-limit to 20, upper-limit to 40 and discard probability to 40 for the packet with
the precedence 3.
[H3C-behavior-database] wred
[H3C-behavior-database] wred ip-precedence 3 low-limit 20 high-limit 40
3-56
Comware V3 Commands
3.5.44 wred weighting-constant
Syntax
wred weighting-constant exponent

undo wred weighting-constant
View
Parameter
exponent: Exponential, in the range of 1 to 16. It is 9 by default.
Description
Use the wred weighting-constant command to set exponential for the calculation of
average queue length by WRED.
This command can be used only after the queue af command has been configured and
the wred command has been used to enable WRED drop mode.
The configuration of wred weighting-constant will be deleted if random-detect is
deleted.
Example
# Configure exponential for calculating average queue length to 6.

[H3C-behavior-database] wred ip-precedence
[H3C-behavior-database] wred weighting-constant 6
3.6 RTP Priority Queue Configuration Commands

3.6.1 display qos rtpq interface
Syntax
display qos rtpq interface [ interface-type interface-number ]
View
Any view
Parameter

3-57
Comware V3 Commands
Description
Use the display qos rtpq interface command to view information of the current IP
RTP Priority queue, including the current RTP queue depth and number of RTP packets
dropped, and display the RTP priority queue configuration and statistics on an interface
or on all interfaces.
Example
# Display information of the current IP RTP Priority queue.

[H3C] display qos rtpq interface Ethernet 10/2/0
RTP Queuing: (Output queue: Size/Max/Outputs/Discards)
RTPQ: 0/0/0/0
3.6.2 qos reserved-bandwidth
Syntax
qos reserved-bandwidth pct percentage

undo qos reserved-bandwidth
View
Interface view
Parameter
percentage: Percentage of the reserved bandwidth to the available bandwidth. It is in

the range of 1 to 100 and the default value is 80.
Description
Use the qos reserved-bandwidth command to set the maximum reserved bandwidth
percentage.
Use the undo qos reserved-bandwidth command to restore the default value.
Usually the bandwidth configured for the QoS queue is less than 75 percent of the total
bandwidth, considering that part of the bandwidth should be used for controlling
protocol packets, layer 2 frame headers and so on.
Caution should be taken in using this command to the maximum preserved bandwidth.
Related command: qos rtpq.
Example
# Set the maximum reserved bandwidth allocated for RTP priority queue to 80% of the
available bandwidth.
[H3C-Serial1/0/0] qos reserved-bandwidth pct 80
3-58
Comware V3 Commands
3.6.3 qos rtpq
Syntax
qos rtpq start-port first-rtp-port-number end-port last-rtp-port-number bandwidth

bandwidth [ cbs committed-burst-size ]
undo qos rtpq
View
Interface view
Parameter
first-rtp-port-number: Specifies the first UDP port number to initiate RTP messages.
last-rtp-port-number: Specifies the last UDP port number to initiate RTP messages.
bandwidth: Bandwidth for RTP priority queue, which is part of the maximum reserved
bandwidth in Kbps.
committed-burst-size: Committed burst size, in the range 1500 to 2000000 bytes.
Description
Use the qos rtpq command to enable RTP queue feature on an interface so as to
reserve a real-time service for the RTP packets sent to some UDP destination port
ranges.
Use the undo qos rtpq command to disable the RTP queuing feature of the interface.
By default, RTP queuing feature is disabled.
This command is applied to the delay-sensitive applications, real-time voice
transmission for example. Configured with the qos rtpq command, the system will
serve the voice services first among all other services.
The parameter "bandwidth" should be set greater than the service-required bandwidth
so as to prevent conflict caused by the burst traffic. However, the bandwidth should be
no greater than 75% of the total bandwidth. If you need to configure the bandwidth to be
greater than 75% of the total bandwidth, please first change the maximum reserved
bandwidth via qos reserved-bandwidth command.
In bandwidth allocation, the bandwidth for data load, IP header, UDP header and RTP
header is allocated, except that for the Layer2 frame header. Therefore, it is obligatory
to reserve 25% of the total bandwidth.
3-59
Comware V3 Commands
Caution:
RTPQ.
You can apply an RTPQ to a dialer interface successfully only when its physical
interfaces use default queuing and have adequate bandwidth.
Related command: qos reserved-bandwidth.
Example
# Enable IP RTP Priority on Serial 1/0/0. The starting port number is 16384. The
starting port number is 16383. The RTP packets in the range of 16384 to 32767 of the
destination port use 64Kbps bandwidth. If network convergence happens, the packets
will enter IP RTP Priority queue.
[H3C-Serial1/0/0] qos rtpq start-port 16384 end-port 32767 bandwidth 64
3.7 QoS Token Commands

3.7.1 qmtoken
Syntax
qmtoken token-number
undo qmtoken
View
Interface view
Parameter
token-number: The number of transmitted tokens, in the range 1 to 50.
Description
Use the qmtoken command to configure the number of transmitted tokens.

Use the undo qmtoken command to disable the token function of QoS.
By default, the token function of QoS is disabled.
During an FTP transfer, flow control provided by the upper layer protocol can invalidate
the configuration of QoS queuing. To resolve this problem, the token function of QoS
was introduced into Comware. This function provides a flow control mechanism at the
underlying-layer queuing level. It can control the number of packets sent to the
underlying interface queues based on the number of tokens.
3-60
Comware V3 Commands
If FTP applies, you are recommended to set the number of tokens sent by an interface
to 1.
Note:
After you configure this command on an interface, you must perform shutdown and
undo shutdown on the interface to have the function take effect.
So far, this command is supported only by Ethernet, serial, and BRI interfaces.
Example
# Set the number of transmitted tokens to 1.

[H3C-Ethernet1/0/0]qmtoken 1
3-61
Comware V3 Chapter 4 WRED Configuration Commands
Chapter 4 WRED Configuration Commands
4.1 WRED Configuration Commands

4.1.1 display qos wred interface
Syntax
display qos wred interface [ interface-type interface-number ]
View
Any view
Parameter

Description
Use the display qos wred interface command to view WRED (weighed random early
detection) configuration and statistics of an interface.
If no interface is specified, WRED configuration and statistics of all interfaces will be
displayed.
Example
# Display WRED configuration and statistics about the specified interface.

[H3C] display qos wred interface ethernet 6/0/0
Current WRED configuration:
Exponent: 10 (1/1024)
Precedence Random Tail Low High Discard
discard discard limit limit probability
-------------------------------------------------------------------------
0 0 0 10 30 10
1 0 0 100 1000 1
2 0 0 10 30 10
3 0 0 10 30 10
4 0 0 10 30 10
5 0 0 10 30 10
6 0 0 10 30 10
7 0 0 10 30 10
4-1
4.1.2 qos wred
Syntax
qos wred
undo qos wred
View
Interface view
Parameter
None
Description
Use the qos wred command to apply WRED at an interface.

Use the undo qos wred command to restore the default dropping method.
By default, the dropping method of a queue is tail drop.
As WRED in interface view cannot be used independently or with the queuing methods
but WFQ, apply WFQ to the interface before enabling WRED on it.
Related command: qos wfq, qos wred, display qos wred interface.
Example
# Apply WRED at Ethernet0/0/0 interface. (Provided that WFQ has already been
applied at the interface).
[H3C-Ethernet0/0/0] qos wred
4.1.3 qos wred dscp
Syntax
qos wred dscp dscp-value low-limit low-limit high-limit high-limit

discard-probability discard-prob
undo qos wred dscp dscp-value
View
Interface view
Parameter
dscp-value: DSCP value. It can be in the range 0 to 63 or be one of the following

cs2, cs3, cs4, cs5, cs6, cs7, and default.
low-limit: Lower limit. It ranges from 1 to 1024 and defaults to 10.
4-2
high-limit: Upper limit. It ranges from 1 to 1024 and defaults to 30.

discard-prob: Drop probability denominator. It ranges from 1 to 255, and defaults to 10.
Description
Use the qos wred dscp command to set the lower limit, upper limit, and drop
probability denominator of a WRED DSCP.
Use the undo qos wred dscp command to restore the default settings.
Before configuring the WRED parameters, you must use the qos wred command to
apply the WRED to an interface. The thresholds limit the average queue length.
Related command: qos wred, display qos wred interface.
Example
# For DSCP 3, set the lower and upper average length limits of the queue to 20 and 40
respectively, and the drop probability denominator to 15.
[H3C-Ethernet0/0/0] qos wred dscp 3 low-limit 20 high-limit 40
4.1.4 qos wred ip-precedence
Syntax
qos wred ip-precedence ip-precedence low-limit low-limit high-limit high-limit

discard-probability discard-prob
undo qos wred ip-precedence ip-precedence
View
Interface view
Parameter
ip-precedence: Precedence of IP packets, in the range of 0 to 7;

low-limit low-limit: The minimum threshold, in the range of 1 to 1024; by default, it is
10.
high-limit high-limit: The maximum threshold, in the range of 1 to 1024; by default, it is
30.
discard-probability discard-prob: Drop probability denominator, ranging 1 to 255; by
default, it is 10.
Description
Use the qos wred ip-precedence command to configure the minimum threshold,
maximum threshold and drop probability denominator for each precedence level in
WRED.
4-3
Use the undo qos wred ip-precedence command to restore the default value.
WRED parameters can be set only after the command qos wred has been used to
apply WRED at the interface. The thresholds are for the average quantity of packets in
queue.
Example
# Display how to set minimum threshold of the packet of precedence 3 at an interface to

20, maximum threshold to 40 and discard probability to 15.
[H3C-Ethernet0/0/0] qos wred ip-precedence 3 low-limit 20 high-limit 40
4.1.5 qos wred weighting-constant
Syntax
qos wred weighting-constant exponent

undo qos wred weighting-constant
View
Interface view
Parameter
exponent: Exponential used to calculate the average queue length, in the range 1 to 16.
It defaults to 9.
Description
Use the qos wred weighting-constant command to set exponential used to calculate
the average length of WRED queues.
Use the undo qos wred weighting-constant command to restore the default value.
Before you can configure WRED parameters on an interface, you must apply WRED
with the qos wred command on it.
Example
# Set the exponential used to calculate average queue length to 6 at Ethernet0/0/0

interface, provided that WRED has already been applied on this interface.
[H3C-Ethernet0/0/0] qos wred weighting-constant 6
4-4
Comware V3 Chapter 5 Protocol Priority Configuration Commands
Chapter 5 Protocol Priority Configuration

Commands
5.1 Protocol Priority Configuration Commands

5.1.1 display protocol-priority
Syntax
display protocol-priority
View
Any view
Parameter
None
Description
Use the display protocol-priority command to view protocol priorities.
Example
# Display the IP precedence of ICMP packets.

[H3C] protocol-priority protocol-type icmp ip-precedence 4
[H3C] display protocol-priority
Protocol: icmp
IP-Precedence: flash-override(4)
5.1.2 protocol-priority
Syntax
protocol-priority protocol-type protocol-type { ip-precedence ip-precedence | dscp

dscp-value }
undo protocol-priority protocol-type protocol-type
View
System view
5-1
Comware V3 Chapter 5 Protocol Priority Configuration Commands
Parameter
protocol-type protocol-type: Protocol type. Currently, only OSPF, TELNET, SNMP,

ICMP, BGP, and LDP are available.
ip-precedence ip-precedence: IP precedence, in the range 0 to 7.
dscp dscp-value: DSCP priority, in the range 0 to 63.
Description
Use the protocol-priority command to set a priority for a protocol globally.

Use the undo protocol-priority command to restore the default priority of a protocol.
Example
# Set the IP precedence of OSPF packets to 3.

[H3C] protocol-priority protocol-type OSPF ip-precedence 3
5-2
Comware V3 Chapter 6 Frame Relay QoS Commands
Chapter 6 Frame Relay QoS Commands
6.1 Frame Relay QoS Commands

6.1.1 apply policy outbound
Syntax
apply policy policy-name outbound

undo apply policy outbound
View
Frame relay class view
Parameter
policy-name: Name of the applied policy. It is a string with 1 to 31 characters.
Description
Use the apply policy outbound command to set the frame relay virtual circuit queuing
to CBQ (Class-Based Queuing).
Use the undo apply policy outbound command to restore the frame relay virtual
circuit queuing to FIFO.
By default, FIFO queuing is adopted.
Example
# Define a classifier named class 1.

[H3C-classifier-class1]
# Define a traffic behavior named behavior 1.

[H3C] traffic behavior behavior1
[H3C-behavior-behavior1] queue af bandwidth 56
# Define a policy named policy 1 and associate class 1 with behavior1.

[H3C] qos policy policy1
[H3C-qospolicy-policy1] classifier class1 behavior behavior1
# Apply a defined policy to the frame relay class named test 1 and set the queuing of
test 1 to CBQ.
[H3C] fr class test1
[H3C-fr-class-test1] apply policy policy1 outbound
6-1
6.1.2 cbs
Syntax
cbs [ inbound | outbound ] committed-burst-size

undo cbs [ inbound | outbound ]
View
Parameter
inbound: Sets the committed burst size of the inbound packet, valid only when FRTP
(frame relay traffic policing) is enabled on the interface.
outbound: Sets the committed burst size of the outbound packet, valid only when
FRTS (frame relay traffic shaping) is enabled on the interface.
committed-burst-size: Committed burst size, in bits, ranging from 300 to 16000000. It
defaults to 56000 bits.
Description
Use the cbs command to set the committed burst size of frame relay virtual circuit.
Use the undo cbs command to restore the default value.
If the packet direction is not specified in configuration, the parameter will be set in both
inbound and outbound directions.
The committed burst size is the packet traffic that is committed to send on a frame relay
network within an interval of Tc. When there is no congestion on the network, the frame
relay network ensures this part of traffic could be sent successfully.
Related command: ebs, cir allow, and cir.
Example
# Set the committed burst size of the frame relay class named test1 as 64000 bits.
[H3C-fr-class-test1] cbs 64000
6.1.3 cir
Syntax
cir committed-information-rate
undo cir
View
6-2
Parameter
committed-information-rate: The minimum committed information rate (CIR), in bps,

ranging from 1000 to 45000000. It defaults to 56000 bps.
Description
Use the cir command to set the CIR of frame relay virtual circuit.
Use the undo cir command to restore the default value.
The CIR is the minimum sending rate that can be provided by virtual circuit. It ensures
the user could still send data at this rate upon network congestion.
Upon network congestion, DCE will send a packet with a BECN flag bit of 1 to DTE.
After DTE receives this packet, it gradually reduces the sending rate of virtual circuit
from the allowed CIR (CIR ALLOW) to CIR. If DTE does not receive the packet with the
BECN flag bit of 1 any more within a certain period of time, it will restore the sending
rate of virtual circuit as CIR ALLOW.
Note:
The CIR must not exceed the CIR ALLOW.
Related command: cbs, ebs, and cir allow.
Example
# Set the CIR of the frame relay class named test1 as 32000 bps.
[H3C-fr-class-test1] cir 32000
6.1.4 cir allow
Syntax
cir allow [ inbound | outbound ] committed-information-rate

undo cir allow [ inbound | outbound ]
View
Parameter
inbound: Sets the CIR ALLOW of an inbound packet, valid only when FRTP is enabled
on the interface.
6-3
outbound: Sets the CIR ALLOW of an outbound packet, valid only when FRTS is
enabled on the interface.
committed-information-rate: CIR ALLOW, in bps, ranging from 1 to 45000000. It
defaults to 56000 bps.
Description
Use the cir allow command to set the CIR ALLOW of frame relay virtual circuit.
Use the undo cir allow command to restore the default value.
CIR ALLOW is the sending rate that can be normally provided by a frame relay network.
When there is no congestion on the network, it ensures the user could send data at this
rate.
If packet direction is not specified upon configuration, the parameter will be set in both
inbound and outbound directions.
Related command: cbs, ebs, and cir.
Example
# Set the CIR ALLOW of the frame relay class that is named test1 as 64000bps.
[H3C-fr-class-test1] cir allow 64000
6.1.5 congestion-threshold
Syntax
congestion-threshold { de | ecn } queue-percentage

undo congestion-threshold { de | ecn }
View
Parameter
de: Discards the frame relay packet whose DE flag bit is 1 upon congestion.
ecn: Processes the flag bits, BECN and FECN, of frame relay packet upon congestion.
queue-percentage: Network congestion threshold, the utility ratio of virtual circuit
queue, namely the percentage of the current queue length of virtual circuit to the total
queue length, ranging from 1 to 100.
Description
Use the congestion-threshold command to enable congestion management function

of frame relay virtual circuit.
Use the undo congestion-threshold command to disable this function.
6-4
When the percentage of current queue length to the total queue length of virtual circuit
exceeds the set congestion threshold, it will be regarded that congestion occurs on the
virtual circuit and congestion management will be performed on packets on virtual
circuit.
By default, congestion management function of frame relay virtual circuit is not
enabled.
Related command: fr congestion-threshold.
Example
# Set to discard the frame relay packet whose DE flag bit is 1 concerning the frame
relay class named test1, when the current queue length of virtual circuit exceeds 80%
of the total length.
[H3C-fr-class-test1] congestion-threshold de 80
6.1.6 cq
Syntax
cq cql cql-index
undo cq
View
Parameter
cql cql-index: Group number of custom queuing list, ranging from 1 to 16.
Description
Use the cq command to set the queuing type of Frame Relay PVC to Custom Queuing.
Use the undo cq command to restore the queuing type of Frame Relay PVC to FIFO.
By default, the PVC queuing type is FIFO.
If this command is repeatedly used on the same Frame Relay class, the last
configuration will overwrite the previous one.
Related command: wfq, pq, fr pvc-pq
Example
#Apply group 10 of the Custom Queuing list to the Frame Relay class named test1.
[H3C-fr-class-test1] cq cql 10
6-5
6.1.7 display fr class-map
Syntax
display fr class-map { fr-class class-name | interface interface-type

interface-number }
View
Any view
Parameter
class-name: 30 characters long.

interface-type: Specifies an interface together with interface number.
interface-number: Specifies an interface together with interface-type.
Description
Use the display fr class-map command to view information on frame relay class to
interface map, including DLCIs of interfaces, subinterfaces on the interfaces and their
DLCIs.
When configuring the command, you can specify an frame relay class name or main
interface, but not a subinterface.
Example
# Display information on the map of frame relay class to the interface serial 6/0/0.
[H3C]display fr class-map interface serial 6/0/0
Serial6/0/0
fr-class ts
fr dlci 100 Serial6/0/0
fr-class ts
Serial6/0/0.1
fr-class ts
fr dlci 200 Serial6/0/0.1
fr-class ts
# Display information on the map of frame relay class ts to interfaces.

[H3C]display fr class-map fr-class ts
Serial6/0/0
fr-class ts
fr dlci 100 Serial6/0/0
fr-class ts
Serial6/0/0.1
fr-class ts
fr dlci 200 Serial6/0/0.1
6-6
fr-class ts
Serial6/0/1
fr-class ts
6.1.8 display fr del
Syntax
display fr del [ list-number ]
View
Any view
Parameter
list-number: DE rule list number, in the range 1 to 10.
Description
Use the display fr del command to view the contents in the specified or all DE rule
lists.
After a DE rule list is applied on a frame relay VC, the VC sets the DE bit to 1 if the
received packets match the list. These packets are always discarded first when
congestion occurs.
You may add up to 100 rules to a DE rule list using the fr del inbound-interface and fr
del protocol commands. You may create up to 10 DE rule lists.
Related command: fr del inbound-interface, fr del protocol.
Example
# Display the contents in DE rule list 1.

[H3C] display fr del 1
Current DEL Configuration:
List Params
inbound-interface Serial0/0/0
protocol ip tcp bgp
protocol ip acl 2001
protocol ip fragment 0
protocol ip greater-than 2000
4 protocol ip less-than 5000
8 protocol ip tcp echo
9 protocol ip udp biff
6-7
Table 6-1 Description on the fields of the display fr del command
Field Description
inbound-interface Specifies that the DE rule list is interface-based.
Specifies that the DE rule list is protocol-based. At
Protocol
present, only IP is available.
6.1.9 display fr fragment-info
Syntax
display fr fragment-info [ interface interface-type interface-number ] [ dlci-number ]
View
Any view
Parameter

interface-number: Interface number, in 3-dimension form: slot number/card
number/interface number.
dlci-number: DLCI number, ranging from 16 to 1007. The detailed information will be
displayed when specifying the parameter.
Description
Use the display fr fragment-info command to view the frame relay fragment
information.
Related command: fragment.
Example
# Display frame relay fragment information of all the interfaces.

<H3C> display fr fragment-info
interface serial 0/1/1:10:
dlci type size in/out/ drop
100 FRF12(End to End) 80 0/0/0
Table 6-2 Description on the fields of the display fr fragment-info command
Field Description
interface Interface
dlci DLCI number
6-8
Field Description
Fragment type. Three options are available: FRF.12, FRF.11
type
Annex C and Motorola fragment.
size Fragment size
Number of received fragment packets/number of sent fragment
in/out/drop
packets/number of discarded fragment packets
# Display frame relay fragment information of a certain interfaces.

<H3C> display fr fragment-info serial0/1/1:10 100
Type : FRF12(End to End)
Size : 80
Data-level: 200 Voice-level: 0
Pre-fragment:
out pkts : 0 out bytes :0
Fragmented:
in pkts : 0 out pkts : 0
in bytes: 0 out bytes: 0
Assembled :
in pkts : 0 in bytes :0
Dropped :
in pkts : 0 out pkts :0
in bytes: 0 out bytes: 0
Out-of-sequence pkts: 0
Table 6-3 Description on the fields of the display fr fragment-info command
Field Description
Fragment type. Three options are available: FRF.12,
type
FRF.11 Annex C and Motorola fragment.
size Fragment size
Data-level Fragment size before voice is enabled

Number of fragments received and sent counted in packet
Fragmented
and byte
Pre-fragment Number of packets and bytes to send before fragmented
Number of fragments received and sent counted in packet
Fragmented
and byte.
Assembled Number of assembled fragments
Dropped Number of dropped fragments
Out-of-sequence pkts Number of out-of-order fragments
6-9
6.1.10 display fr switch-table
Syntax
display fr switch-table { all | name switch-name }
View
Any view
Parameter
all: All the VC information

switch-name: VC information of a certain name.
Description
Use the display mfr command to view configuration and status information of the
frame relay route to confirm the correctness of the configuration.
Related command: fr switch.
Example
# Display configuration and state information of all frame relay bundles and frame relay
# Display all the characters of the frame relay route.
[H3C] display fr switch-table all
Switch-Name Interface DLCI Interface DLCI State
test MFR4/0/100 100 MFR4/0/101 101 UP
The fields are described in the following table:
Table 6-4 Description on the fields of the display fr switch-table all command
Field Description
Switch-Name the name of PVC used for switching
The first denotes local interface and the
Interface
second denotes remote interface
DLCI local and remote VC identifier
State Linkage status
6.1.11 display qos policy interface
Syntax
display qos policy interface [ interface-type interface-number [ dlci dlci-number

[ outbound ] | inbound | outbound ] ]
6-10
View
Any view
Parameter

dlci dlci-number: Information about the specified DLCI applying CBQ.
inbound: Information about inbound interface applying CBQ.
outbound: Information about outbound interface applying CBQ.
Description
Use the display qos policy interface command to view information about CBQ
application on the interface.
Example
# Display the information about CBQ application of the virtual circuit with DLCI of 10 on
Serial1/0/0.
<H3C> display qos policy interface serial 1/0/0 dlci 100
MFR4/0/0, DLCI 25
Direction: Outbound
Policy: xujin
Class: default-class
Behavior:
Default Queue:
Flow Based Weighted Fair Queuing
Max number of hashed queues: 256
Class: xujin
Operator: Logic AND
Rule(s): if-match acl 2001
Behavior:
Assured Forwarding:
Bandwidth 10 (Kbps)
6-11

6.1.12 ebs
Syntax
ebs [ inbound | outbound ] excess-burst-size

undo ebs [ inbound | outbound ]
View
Parameter
inbound: Sets the EBS in inbound direction, valid only when FRTP is enabled on the
interface.
outbound: Sets EBS in outbound direction, valid only when FRTS is enabled on the
interface.
excess-burst-size: EBS in bits, ranging from 0 to 16000000. It defaults to 0 bits.
Description
Use the ebs command to set EBS of frame relay virtual circuit.
Use the undo ebs command to restore the default value.
EBS is the maximum of the part that packet traffic exceeds the committed burst size
(CBS) within an interval of Tc. When congestion occurs on the network, this part of
excess traffic will be first discarded.
When this command is used, the set EBS value will be valid in both inbound and
outbound directions if the parameters inbound and outbound are not specified.
Related command: cbs, cir allow, cir.
Example
# Set the EBS of the frame relay class named test1 to 32000 bits.
[H3C-fr-class-test1] ebs 32000
6.1.13 fifo queue-length
Syntax
fifo queue-length queue-length

undo fifo queue-length
6-12
View
Parameter
queue-length: FIFO queue length, namely, the maximum number of packets that can
be held by the queue, ranging from 1 to 1024. By default, it is 40.
Description
Use the fifo queue-length command to set the FIFO queue length of frame relay
virtual circuit.
Use the undo fifo queue-length command to restore the default value.
When the router serves as DCE for switching, the FIFO queue length of DLCI can be
set if FRTS has been applied to DLCI.
Related command: fr class.
Example
# Set the FIFO queue of the frame relay class named test1 to hold 80 packets at most.
[H3C-fr-class-test1] fifo queue-length 80
[H3C] fr del 1 protocol ip
6.1.14 fr class
Syntax
fr class class-name
undo fr class class-name
View
System view
Parameter
class-name: Class name, with 30 characters at most.
Description
Use the fr class command to create a frame relay class and enter frame relay class
view.
Use the undo fr class command to delete a specified frame relay class.
By default, no frame relay class is created.
6-13
Only after associating a frame relay class with an interface or virtual circuit and
enabling the frame relay QoS function on the corresponding interface, can the set
frame relay class parameter take effect.
When a frame relay class is deleted, the association between all interfaces or DLCIs
and the frame relay class will be released.
Related command: fr-class.
Example
# Create a frame relay class named test1.

[H3C-fr-class-test1]
6.1.15 fr congestion-threshold
Syntax
fr congestion-threshold { de | ecn } queue-percentage

undo fr congestion-threshold { de | ecn }
View
Parameter
de: Discards the frame relay packet whose DE flag bit is 1 when congestion occurs.
ecn: Processes the BECN and FECN flag bits of frame relay packets when congestion
occurs.
queue-percentage: Network congestion threshold, the occupation ratio of the interface
queue, equal to the percentage of current queue length to the total queue length of the
interface, ranging from 1 to 100. By default, it is 100.
Description
Use the fr congestion-threshold command to enable congestion management

function of a frame relay interface.
Use the undo fr congestion-threshold command to disable this function.
By default, the congestion management function of a frame relay interface is disabled.
This command is similar to the congestion-threshold command. The difference is that
this command is applied to frame relay interfaces, while the congestion-threshold
command is applied to frame relay virtual circuit.
6-14
Note:
The command can only be used for frame relay DCE interfaces or NNI interfaces.
Related command: congestion-threshold.
Example
# Set to process the flag bit of a frame relay packet when the interface queue length
exceeds 80% of the total length.
[H3C-Serial4/1/2] fr congestion-threshold de 80
6.1.16 fr de del
Syntax
fr de del list-number dlci dlci-number

undo fr de del list-number dlci dlci-number
View
Frame relay interface (main interface or subinterface) view, MFR interface view
Parameter
list-number: DE rule list number, ranging from 1 to 10.

dlci-number: Frame relay virtual circuit number, ranging from 16 to 1007.
Description
Use the fr de del command to apply a DE rule list to the specified frame relay virtual
circuit.
Use the undo fr de del command to delete a DE rule list from virtual circuit.
By default, no DE rule list is applied to frame relay virtual circuit.
In the view of a frame relay main interface (or subinterface), this command can only
apply a DE rule list to the frame relay VCs on the main interface or (or subinterface).
After a DE rule list is applied to frame relay virtual circuit, those packets that match the
rule list will have their DE flag set to 1.
Related command: fr del inbound-interface and fr del protocol.
Example
# In the view of interface Serial 4/1/2, apply DE rule list 3 to DLCI 100 on the current
interface.
[H3C-Serial4/1/2] fr de del 3 dlci 100
6-15
# In the view of subinterface Serial 4/1/2.1 apply DE rule list 3 to DLCI 200 on
subinterface Serial 4/1/2.2.
[H3C-Serial4/1/2.1] fr de del 3 dlci 200
6.1.17 fr del inbound-interface
Syntax
fr del list-number inbound-interface interface-type interface-number

undo fr del list-number inbound-interface interface-type interface-number
View
System view
Parameter
list-number: Number of DE rule list, ranging from 1 to 10.

interface-number: Interface number, in 3-dimension form (slot number/card
number/interface number).
Description
Use the fr del inbound-interface command to configure an interface-based DE rule

list. For the packet received from the specified interface, if it is forwarded from the
router as a frame relay packet, its DE flag bit is set to 1 before being forwarded.
Use the undo fr del inbound-interface command to delete the specified DE rule from
a DE rule list.
By default, no DE rule list is created.
New rules can be added to a DE rule list by using this command repeatedly. At most,
100 rules can be configured in a DE rule list. To delete a DE rule list, you should first
delete all DE rules in it.
Related command: fr de del and fr del protocol.
Example
# Add a rule to DE rule list 1. For the packet received from the interface Serial 4/1/2, if it
is needed to be forwarded by encapsulating frame relay protocol, flag the DE flag bit of
the packet as 1 before forwarding.
[H3C] fr del 1 inbound-interface serial 4/1/2
6-16
6.1.18 fr del protocol ip
Syntax
fr del list-number protocol ip [ fragments | acl acl-number | less-than bytes |

greater-than bytes | tcp ports | udp ports ]
undo fr del list-number protocol ip [ fragments | acl acl-number | less-than bytes |
greater-than bytes | tcp ports | udp ports ]
View
System view
Parameter
list-number: DE rule list number, ranging from 1 to 10.

protocol ip: IP.
fragments: All fragmented IP packets.
acl acl-number: IP packets meeting ACL matching requirement. acl-number ranges
from 2000 to 3999.
less-than bytes: IP packets whose length is less than bytes. bytes ranges from 0 to
65535.
greater-than bytes: IP packets whose length is greater than bytes. bytes ranges from 0
to 65535.
tcp ports: IP packets whose source or destination TCP port number are ports.
udp ports: IP packets whose source or destination UDP port number are ports.
If optional parameters are not used, it represents all IP packets.
Description
Use the fr del protocol ip command to configure an IP-based DE rule list. The DE flag
bit of the frame relay packet encapsulated with an IP packet matching the specified rule
will be flagged as 1.
Use the undo fr del protocol ip command to delete the specified DE rule from a DE
rule list.
By default, no DE rule list is created.
New rules can be added to a DE rule list by using this command repeatedly. At most,
100 rules can be configured in a DE rule list. The undo form of this command can once
delete one DE rule only. To delete a DE rule list, you must delete all DE rules in it.
Related command: fr de del and fr del inbound-interface.
6-17
Example
# Add a rule to DE rule list 1. For all frame relay packets encapsulated with IP packets,
flag their DE flag bits as 1.
[H3C] fr del 1 protocol ip
6.1.19 fr pvc-pq
Syntax
fr pvc-pq [ top-limit middle-limit normal-limit bottom-limit ]

undo fr pvc-pq
View
Parameter
top-limit: Length of top priority queue, ranging from 1 to 1024. By default, it is 20.
middle-limit: Length of middle priority queue, ranging from 1 to 1024. By default, it is 40.
normal-limit: Length of normal priority queue, ranging from 1 to 1024. By default, it is
60.
bottom-limit: Length of bottom priority queue, ranging from 1 to 1024. By default, it is
80.
Description
Use the fr pvc-pq command to set the queue type of a frame relay interface as PVC
PQ (PVC Priority Queuing) and set queue length, i.e. the maximum number of packets
that can be held by a queue, for each queue.
Use the undo fr pvc-pq command to restore the queue type of the interface into FIFO.
By default, the queuing type of a frame relay interface is FIFO.
After FRTS is enabled on an interface, the queuing type of the interface can only be
FIFO or PVC PQ.
PVC PQ is a new queuing mechanism of FRTS. Similar to PQ, it also has four queue
types: top, middle, normal and bottom, in descending order. Configure the queue of
PVC PQ that DLCI enters in frame relay class. When congestion occurs on an interface,
different DLCIs enter different PVC PQs. When sending data, according to queue
priority, data in higher priority queues will be sent before lower priority queues.
Related command: pvc-pq.
Example
# Set the queuing type of the interface Serial 2/0/0 as PVC PQ.
6-18
[H3C-Serial2/0/0] fr pvc-pq
6.1.20 fr traffic-policing
Syntax
fr traffic-policing
undo fr traffic-policing
View
Parameter
None
Description
Use the fr traffic-policing command to enable FRTP function.

Use the undo fr traffic-policing command to disable FRTP function.
FRTP function is applied to the inbound interface of frame relay packets on a router.
Furthermore, it is only used at the DCE end of a frame relay network.
When configuring traffic policing for an inbound interface, you must first set the DCE as
a frame relay switching by using the fr switching command.
Example
# Enable the traffic policing function on the interface Serial 2/0/0.

[H3C-Serial2/0/0] fr traffic-policing
6.1.21 fr traffic-shaping
Syntax
fr traffic-shaping
undo fr traffic-shaping
View
Parameter
None
6-19
Description
Use the fr traffic-shaping command to enable FRTS function.

Use the undo fr traffic-shaping command to disable FRTS function.
By default, FRTS function is disabled.
The FRTS function is applied to the outbound interface of a router, generally used at the
DTE end of a frame relay network.
Related command: fr class, fr-class, and fr dlci.
Example
# Enable FRTS on the serial interface Serial 2/0/0.

[H3C-Serial2/0/0] fr traffic-shaping
6.1.22 fragment
Syntax
fragment [ fragment-size ] [ data-level | voice-level ]

undo fragment [ fragment-size ]
View
Parameter
fragment-size: Size of a fragment, in byte, ranging from 16 to 1600. By default, the

fragment size is of 45 bytes.
data-level: Fragment size with voice disabled.
voice-level: Fragment size with voice enabled.
Description
Use the fragment command to enable the FRF.12-compliant fragmentation function on

frame relay virtual circuit.
Use the undo fragment command to disable this function.
By default, the fragmentation function on frame relay virtual circuit is disabled.
Example
# Configure fragment size as 128 in the frame relay class named test1.
[H3C-fr-class-test1] fragment 128
6-20
6.1.23 fr-class
Syntax
fr-class class-name
undo fr-class class-name
View
Frame relay DLCI view
Parameter
class-name: Name of a frame relay class, in the form of character string, with a length
Description
Use the fr-class command to associate a frame relay class with the current frame relay
virtual circuit or frame relay interface.
Use the undo fr-class command to remove the association between a frame relay
class and the frame relay virtual circuit or frame relay interface.
By default, there is no association between a frame relay class and the frame relay
virtual circuit or frame relay interface.
If the specified frame relay class does not exist, the command will first create a frame
relay class before associating the frame relay class with the current virtual circuit or
interface. If the specified frame relay class does exist, the command will associate the
frame relay class with the current virtual circuit or interface without creating a new
frame relay class.
The undo command only removes the association between a specified frame relay
class and a virtual circuit or an interface rather than deletes the real frame relay class.
To delete a frame relay class, use the undo fr class command in system view.
After a frame relay class is associated with an interface, all virtual circuits on the
interface will inherit the frame relay QoS parameter of this frame relay class.
Related command: fr class and fr dlci.
Example
# Associate the frame relay class named test1 with the frame relay virtual circuit whose
DLCI is 200.
[H3C-Serial4/0/1] fr dlci 200
[H3C-fr-dlci-Serial4/0/1-200] fr-class test1
6-21
6.1.24 pq
Syntax
pq pql pql-index
undo pq
View
Parameter
pql pql-index: Group number of Priority Queuing, ranging from 1 to 16.
Description
Use the pq command to set the queue type of frame relay virtual circuit as Priority
Queuing.
Use the undo pq command to restore the queue type of virtual circuit to FIFO.
By default, the queuing type of frame relay virtual circuit is FIFO.
Related command: cq, pvc-pq.
Example
# Apply the group10 of Priority Queuing to the frame relay class named test1.
[H3C-fr-class-test1] pq pql 10
6.1.25 pvc-pq
Syntax
pvc-pq { top | middle | normal | bottom }

undo pvc-pq
View
Parameter
top: Sets the top PVC PQ , namely, top priority queue, to accept the packets from the
VC.
middle: Sets the middle PVC PQ , namely, middle priority queue, to accept the
packets.
normal: Sets the normal PVC PQ , namely, normal priority queue, to accept the
packets.
6-22
bottom: Sets the bottom PVC PQ , namely, normal priority queue, to accept the
packets.
Description
Use the pvc-pq command to set the type of the PVC PQ that packets sent by frame
relay virtual circuit enter.
Use the undo pvc-pq command to restore the default PVC PQ type.
By default, the packets sent by frame relay virtual circuit enter into the normal PVC PQ.
PVC PQ falls into four groups: top, middle, normal and bottom. PVC PQ is relative to
DLCI. After the queue of an interface is set as PVC PQ, packets on each virtual circuit
can enter only one type of PVC PQ.
Related command: fr pvc-pq.
Example
# Set packets sent by virtual circuit which is associated with the frame relay class
named test1 to enter top PVC PQ.
[H3C-fr-class-one] pvc-pq top
6.1.26 rtpq
Syntax
rtpq start-port min-dest-port end-port max-dest-port bandwidth bandwidth

undo rtpq
Parameter
min-dest-port: Lower limit of a destination UDP port, ranging from 2000 to 65535.
max-dest-port: Upper limit of a destination UDP port, ranging from 2000 to 65535.
bandwidth bandwidth: Bandwidth of a RTP queue, in kbps, ranging from 0 to 2000.
View
Description
Use the rtpq command to configure to apply Realtime Transport Protocol (RTP) Priority
Queuing.
Use the undo rtpq command to remove the application.
The application of a frame relay class configured with RTPQ to a PVC results in the
creation of a strict priority queue on the PVC. Packets in the port range specified by
RTPQ of the destination UDP port will enter RTPQ. When congestion occurs in the
virtual circuit, the packets in the queue will be absolutely sent with preference without
6-23
exceeding the configured bandwidth. When congestion does not occur in the virtual
circuit, the RTP packets in the specified port range can occupy the available bandwidth
on the virtual circuit. Generally, the UDP port range used by VoIP can be configured as
from 16384 to 32767.
Example
# Configure RTP priority queue on the frame relay class named test1 with a bandwidth
of 20kbps.
[H3C-fr-class-test1] rtpq start-port 16383 end-port 16384 bandwidth 20
6.1.27 traffic-shaping adaptation
Syntax
traffic-shaping adaptation { becn percentage | interface-congestion number }

undo traffic-shaping adaptation { becn | interface-congestion }
View
Parameter
becn: Adjusts the packets with the BECN flag.

percentage: Adjustment percentage, ranging from 1 to 30 percent. The default value is
25 percent.
interface-congestion: Traffic shaping according to the number of the packets in the
outbound queue.
number: Number of packets in the queue, ranging from 1 to 40.
Description
Use the traffic-shaping adaptation command to enable the adaptive traffic shaping
function of frame relay.
Use the undo traffic-shaping adaptation command to disable this function.
By default, traffic-shaping adaptation is enabled, and the ratio of each adaptation is set
to 25.
Related commands are fr traffic-shaping, cir allow, and cir.
Example
# Enable the frame relay traffic shaping function, by adjusting the packets with the
BECN flag.
6-24
[H3C-fr-class-test1] traffic-shaping adaptation becn 20
6.1.28 wfq
Syntax
wfq [ congestive-discard-threshold [ dynamic-queues ] ]

undo wfq
View
Parameter
congestive-discard-threshold: The maximum number of packets allowed in the queue.

Packets exceeding this limitation will be discarded. The permitted value ranges from 1
to 1024, with a default of 64.
dynamic-queues: Total number of queues, the value can be one of 16, 32, 64, 128, 256,
512, 1024, 2048 and 4096, with the default of 256.
Description
Use the wfq command to set the queue type of the VC to be WFQ.
Use the undo wfq command to restore the queue type to FIFO.
Related command: cq, pq, and fr pvc-pq.
Example
# Apply WFQ to the frame relay class test1.

[H3C-fr-class-test1] wfq 128 512
6-25
Comware V3 Chapter 7 MPLS QoS Configuration Commands
Chapter 7 MPLS QoS Configuration Commands
7.1 MPLS QoS Configuration Commands

7.1.1 if-match mpls-exp
Syntax
if-match [ not ] mpls-exp { mpls-experimental-value }

undo if-match [ not ] mpls-exp
View
Class view
Parameter
mpls-experimental-value: EXP value, in the range of 0 to 7.
Description
Use the if-match mpls-exp command to configure the matching rule for EXP domain
of MPLS.
Use the undo if-match mpls-exp command to delete the matching rule.
Multiple exp-values can be specified in the command and the maximum number is 8. If
multiple exp-values of the same value are specified, the system only takes one.
Relation between different values is “OR”. If this command is frequently configured
under one class, the last configuration will overwrite the previous ones. After this
command is configured, the exp-value will be sorted automatically in ascending order.
Example
# Define the class to match the packet whose exp is 3 or 4.

[H3C-classifier-database] if-match mpls-exp 3 4
7.1.2 qos cql protocol mpls exp
Syntax
qos cql cql-index protocol mpls exp mpls-experimental-number queue

queue-number
undo qos cql cql-index protocol mpls exp mpls-experimental-number
7-1
View
System view
Parameter
cql-index: Group number of precedence list, in the range of 1 to 16.

mpls-experimental-number: EXP domain of MPLS packet, in the range of 0 to 7.
queue-number: Queue number, in the range of 0 to 16.
Description
Use the qos cql protocol mpls exp command to configure classification rule based on
the MPLS protocol.
Use the undo qos cql protocol mpls exp command to delete the corresponding
classification rule.
The system matches packets in the sequence that rules are configured. When the
packet is found to match a rule, the entire searching process comes to an end.
For the same group-number, this command can be used repeatedly to establish
multiple types of classification rules for IP packets.
Related command: qos cq.
Example
# Configure classification rule based on the MPLS protocol and sets EXP value of
MPLS to 1.
[H3C] qos cql 10 protocol mpls exp 1
7.1.3 qos pql protocol mpls exp
Syntax
qos pql pql-index protocol mpls exp mpls-experimental-value queue { top | middle |
normal | bottom }
undo qos pql pql-index protocol mpls exp mpls-experimental-value
View
System view
Parameter
pql-index: Group number of priority list, in the range of 1 to 16.

mpls-experimental-value: EXP domain of MPLS packet, in the range of 0 to 7.
queue top | middle | normal | bottom: Top/middle/normal/bottom priority queue.
7-2
Description
Use the qos pql protocol mpls exp command to establish the classification rule
based on MPLS protocol.
Use the undo qos pql protocol mpls exp command to delete corresponding
classification rules.
The system matches packets in the sequence that rules are configured. When the
packet is found to match a rule, the entire searching process comes to an end.
For the same group-number, this command can be used repeatedly to establish
several types of classification rules for IP packets.
Related command: qos pql protocol.
Example
# Establish the classification rule based on MPLS protocol and sets the EXP value of
MPLS to 5.
[H3C] qos pql 10 protocol mpls exp top 5
7.1.4 remark mpls-exp
Syntax
remark mpls-exp mpls-experimental-value

undo remark mpls-exp
View
Parameter
mpls-experimental-value: Preset EXP value of MPLS, in the range of 0 to 7.
Description
Use the remark mpls-exp command to configure MPLS EXP value to identify matched
packets.
Use the undo remark mpls-exp command to delete the configuration.
Related command: traffic classifier, qos policy, classifier behavior.
Example
# Set EXP value of MPLS to 0.

[H3C-behavior-database] remark mpls-exp 0
7-3
Reliability
Command Manual – Reliability
Table of Contents
Chapter 1 Backup Center Configuration Commands ................................................................ 1-1

1.1 Backup Center Configuration Commands ......................................................................... 1-1
1.1.1 debugging standby event ........................................................................................ 1-1
1.1.2 display standby flow ................................................................................................ 1-1
1.1.3 display standby state............................................................................................... 1-3
1.1.4 standby bandwidth .................................................................................................. 1-4
1.1.5 standby interface ..................................................................................................... 1-5
1.1.6 standby threshold.................................................................................................... 1-6
1.1.7 standby timer delay ................................................................................................. 1-6
1.1.8 standby timer flow-check......................................................................................... 1-7
Chapter 2 VRRP Configuration Commands ............................................................................... 2-1

2.1 VRRP Configuration Commands ....................................................................................... 2-1
2.1.1 debugging vrrp ........................................................................................................ 2-1
2.1.2 display vrrp .............................................................................................................. 2-1
2.1.3 vrrp authentication-mode ........................................................................................ 2-2
2.1.4 vrrp ping-enable ...................................................................................................... 2-3
2.1.5 vrrp un-check ttl....................................................................................................... 2-4
2.1.6 vrrp vrid preempt-mode........................................................................................... 2-5
2.1.7 vrrp vrid priority........................................................................................................ 2-5
2.1.8 vrrp vrid timer advertise........................................................................................... 2-6
2.1.9 vrrp vrid track........................................................................................................... 2-7
2.1.10 vrrp vrid virtual-ip................................................................................................... 2-8
i
Comware V3 Chapter 1 Backup Center Configuration Commands
Chapter 1 Backup Center Configuration

Commands
1.1 Backup Center Configuration Commands

1.1.1 debugging standby event
Syntax
debugging standby event

undo debugging standby event
View
User view
Parameter
Description
Use the debugging standby event command to enable debugging of the backup
center.
Use the undo debugging standby event command to disable debugging of the
backup center.
Example
# Enable debugging of the backup center.

<H3C> debugging standby event
1.1.2 display standby flow
Syntax
display standby flow
View
Any view
Description
Use the display standby flow command to view statistics about the traffic on the main
interfaces participating in backup load sharing.
1-1
Example
# Set Serial 1/0/0, Serial 0/0/0 and Logic-channel0 to back up interface Serial 3/0/0 and
configure backup load sharing on Serial 3/0/0.
[H3C-Serial3/0/0] standby interface serial1/0/0 10
[H3C-Serial3/0/0] standby interface logic-channel0
[H3C-Serial3/0/0] standby threshold 80 50
[H3C-Serial3/0/0] standby timer flow-check 100
[H3C-Serial3/0/0] standby bandwidth 9
# Display statistics about the traffic on the main interfaces participating in backup load
sharing.
[H3C-Serial3/0/0] display standby flow
Interfacename :Serial3/0/0
Flow-interval(s) : 100
LastInOctets : 868168
LastOutOctets : 1818667
InFlow(Octets) : 50070
OutFlow(Octets) : 100088
BandWidth(b/s) :9000
UsedBandWidth(b/s) : 8000
The following table describes the fields of the command.
Table 1-1 Description on the fields of the display standby flow command
Field Description
Flow-interval(s) Intervals for checking traffic on the main interface.
The sum of the octets received on the main interface until
LastInOctets
the last check.
The sum of the octets sent on the main interface until the
LastOutOctets
last check.
The sum of the octets received on the main interface
InFlow(Octets)
during the last interval.
The sum of the octets sent on the main interface during
OutFlow(Octets)
the last interval.
BandWidth(b/s) Bandwidth of the main interface.
UsedBandWidth(b/s) Actual bandwidth of the interface during the last interval.
1-2
1.1.3 display standby state
Syntax
display standby state
View
Any view
Description
Use the display standby state command to view information about the main and
standby interfaces.
The following table describes the information that the command provides and the
possible values.
Table 1-2 Information about the main and standby interfaces
Item Main interface Standby interface

Interface state UP, DOWN UP, DOWN, STANDBY
UP, UPDELAY, DOWN,
MUP, MUPDELAY, MDOWN,
Standby state DOWNDELAY,
MDOWNDELAY, MDESERT
STANDBY, DESERT
M---MAIN: the interface is a main interface.
S---Standby: the interface is a standby interface.
V---MOVED: the interface or its main interface is removed, or all
standby interfaces of the interface are removed.
U---USED: the interface is in use as a main or standby interface.
Standby flag
D---LOAD: the interface participates in backup load sharing as a
main interface.
P---PULLED: the interface card where this interface is located is
not in place.
G---LOGICCHANNEL: the interface is a logical channel interface.
Priority of the standby

Pri —
interface
Load state WAKE, TO-HYPNOTIZE, TO-WAKE, STABLE
Example
# Set Serial 1/0/0, Serial 0/0/0 and Logic-channel 0 to back up Serial 3/0/0, and
configure backup load sharing on Serial 3/0/0.
[H3C-Serial3/0/0] standby interface logic-channel0
1-3
# Display information about the main and standby interfaces.

[H3C-Serial3/0/0] display standby state
Interface Interfacestate Standbystate Standbyflag Pri Loadstate
Serial2/1 DOWN MDOWN MU
Serial2/3 DOWN DOWN BU 0
Virtual-Ethernet1 DOWN MDOWN MU

Serial2/0 DOWN DOWN BU 0
Standby-flag meaning:
M---MAIN S---Standby V---MOVED U---USED
D---LOAD P---PULLED G---LOGICCHANNEL
1.1.4 standby bandwidth
Syntax
standby bandwidth number

undo standby bandwidth
View
Interface view
Parameter
number: Interface bandwidth in the range 0 to 4000000 kilobits. It defaults to 0.
Description
Use the standby bandwidth command to configure the actual bandwidth that the main
interface uses in backup load sharing.
Use the undo standby bandwidth command to restore the default, that is, 0, to
disable backup load sharing.
When the main interface participates in backup load sharing, the backup center uses
the backup bandwidth that you configured preferentially on the main interface. If it is not
configured, the backup center automatically obtains the information that the system
provides on the physical bandwidth of the main interface. In case the information is not
available, the backup center would require you to assign backup bandwidth to the main
interface.
Before you can use this command, you must use the standby interface command to
specify physical interfaces or logical channels to back up the interface.
1-4
Example
# Configure interface Serial 0/0/0 to use interface Serial 1/0/0 for back up, and assign it
bandwidth for backup load sharing.
1.1.5 standby interface
Syntax
standby interface type number [ priority ]

undo standby interface type number
View
Interface view
Parameter
type: Interface type.

priority: Priority of the standby interface, in the range 0 to 255. It defaults to 0. The
greater the value is, the higher the priority is.
Description
Use the standby interface command to specify a physical interface to back up the
interface.
Use the undo standby interface command to remove the specified standby interface.
By default, no standby interface is specified.
You can configure multiple standby interfaces for a main interface. The order in which
they are used depends on the assigned priority. The standby interface with higher
priority is used first.
Example
# Specify interface Serial 1/0/0 to back up interface Serial 0/0/0, and assign it the
priority of 50.
1-5
1.1.6 standby threshold
Syntax
standby threshold enable-threshold disable-threshold

undo standby threshold
View
Interface view
Parameter
enable-threshold: Percentage of the available bandwidth that the traffic load must
exceed to bring up a standby interface or logical channel. It is in the range 2 to 99.
disable-threshold: Percentage of the available bandwidth that the traffic load must be
less than to close a standby interface or logical channel. It is in the range 1 to 98.
Description
Use the standby threshold command to configure backup load sharing on an

interface or logical channel.
Use the undo standby threshold command to disable backup load sharing on the
interface or logical channel.
By default, backup load sharing is disabled.
This command applies to the main interface in the backup center. When the traffic on all
the active interfaces reaches the enable-threshold, the backup center enables the
standby interface with the highest priority. When the total traffic on all active interfaces
decreases below the disable-threshold, the backup center disables the standby
interface with the lowest priority.
The enable-threshold argument must not be less than the disable-threshold argument.
Executing the undo standby threshold command shuts down all standby interfaces
that have been enabled, if there is any. After that, only the main interface works.
Related command: standby interface.
Example
# Configure backup load sharing on interface Serial 0/0/0.

1.1.7 standby timer delay
Syntax
standby timer delay enable-delay disable-delay
1-6
undo standby timer delay
View
Interface view
Parameter
enable-delay: Failover delay, or the delay for the interface to switch its state from main
to standby. It is in the range 0 to 65535 seconds.
disable-delay: Fallback delay, or the delay for the interface to switch from backup to
main. It is in the range 0 to 65535 seconds. It defaults to 0.
Description
Use the standby timer delay command to set failover and fallback delays on the
interface, avoiding frequent switchover caused by instability of interface state.
Use the undo standby timer delay command to restore the default or 0, meaning
switching without delay.
Note:
When you switch the state of an interface from main to standby even if you set the
failover or fallback delay to zero, the main or standby interface will not go up
immediately. Instead, the interface needs to wait for 5 to 90 seconds to go up
depending on different types.
Example
# Configure interface Serial 0/0/0 to use interface Serial 1/0/0 for backup, and to
experience 10 seconds of delay before failover or fallback.
[H3C-Serial0/0/0] standby interface serial1/0/0
[H3C-Serial0/0/0] standby timer delay 10 10
1.1.8 standby timer flow-check
Syntax
standby timer flow-check interval-time

undo standby timer flow-check
1-7
View
Interface view
Parameter
interval-time: Flow checking interval, in the range 30 to 600 seconds. It defaults to 30

seconds.
Description
Use the standby timer flow-check command to configure the interval for checking the
traffic size on the main interface.
Use the undo standby timer flow-check command to restore the default or 30
seconds.
When the main interface participates in backup load sharing, the backup center
automatically checks the traffic size on the main interface at intervals configured using
this command.
Example
# Set Serial 1/0/0 to the standby interface of Serial 0/0/0, and configure the backup
bandwidth of the main interface on Serial 0/0/0.
[H3C-Serial0/0/0] standby timer flow-check 60
1-8
Comware V3 Chapter 2 VRRP Configuration Commands
Chapter 2 VRRP Configuration Commands
2.1 VRRP Configuration Commands

2.1.1 debugging vrrp
Syntax
debugging vrrp { packet | state }

undo debugging vrrp { packet | state }
View
User view
Parameter
packet: Enables VRRP packet debugging.

state: Enables VRRP state debugging.
Description
Use the debugging vrrp command to enable VRRP debugging.

Use the undo debugging vrrp command to disable VRRP debugging.
By default, VRRP debugging is disabled.
Example
# Enable VRRP packet debugging.

<H3C> debugging vrrp packet
2.1.2 display vrrp
Syntax
display vrrp [ interface interface-name [ virtual-router-ID ] ]
View
Any view
Parameter
interface-name: Specifies an interface by its name. The type of the interface must be
Ethernet.
virtual-router-ID: Standby group number.
2-1
Description
Use the display vrrp command to view current configuration and state information
about VRRP.
If the interface name and standby group number are not specified, the state information
about all the standby groups on the router is displayed. If the interface name is
specified, the state information about all the standby groups on the interface is
displayed. If both arguments are specified, the status information about the specified
standby group is displayed.
Example
# Display information about all standby groups on the router.

<H3C> display vrrp
Virtual Ip Ping : Disable
Ethernet1/0/0 | Virtual Router 1
state : Initialize
Virtual IP : 22.2.2.2
Virtual MAC : 0000-5e00-0101
Config Priority : 100
Run Priority : 100
Preempt : YES Delay Time : 0
Timer : 1
Auth Type : NONE
GigabitEthernet0/1/0 | Virtual Router 1

state : Initialize
Virtual IP : 1.1.11.1
Virtual MAC : 0000-5e00-0102
Config Priority : 100
Run Priority : 100
Preempt : YES Delay Time : 0
Timer : 1
Auth Type : NONE
2.1.3 vrrp authentication-mode
Syntax
vrrp authentication-mode { md5 key | simple key }

undo vrrp authentication-mode
View
Ethernet interface view, bridge template view
2-2
Parameter
simple: Simple text authentication.

md5: Authentication header (AH) authentication using the MD5 algorithm.
key: Authentication key. When simple authentication applies, the authentication key is
in clear text with a length of 1 to 8 characters. When md5 authentication applies, the
authentication key is in MD5 ciphertext and the length of the key depends on its input
format. If the key is input in clear text, its length is 1 to 8 characters, such as 1234567;
if the key is input in ciphertext, its length must be 24 characters, such as
_(TT8F]Y\5SQ=^Q`MAF4<1!!.
Description
Use the vrrp authentication-mode command to configure authentication mode and

authentication key for the VRRP standby groups on the interface.
Use the undo vrrp authentication-mode command to disable authentication in the
VRRP standby groups on the interface.
By default, authentication is disabled.
With this command, all standby groups on the interface share the same authentication
type and authentication key.
Note that the members of the same standby group must use the same authentication
mode and authentication key.
The authentication key is case sensitive.
Example
# Set the authentication mode and authentication key of all VRRP standby groups on
interface Ethernet 0/2/0.
[H3C-Ethernet0/2/0] vrrp authentication-mode simple h3c
2.1.4 vrrp ping-enable
Syntax
vrrp ping-enable
undo vrrp ping-enable
View
System view, bridge template view
Parameter
None
2-3
Description
Use the vrrp ping-enable command to enable users to ping the virtual IP addresses of
standby groups.
Use the undo vrrp ping-enable command to disable users to ping the virtual IP
addresses of standby groups.
By default, users cannot ping the virtual IP addresses of standby groups.
Example
# Enable users to ping the virtual IP addresses of standby groups.

[H3C] vrrp ping-enable
2.1.5 vrrp un-check ttl
Syntax
vrrp un-check ttl

undo vrrp un-check ttl
View
Parameter
None
Description
Use the vrrp un-check ttl command to disable the VRRP standby group to check the
TTL field in VRRP packets.
Use the undo vrrp un-check ttl command to enable the VRRP standby group to check
the TTL field in VRRP packets. Any packet with TTL value other than 255 will be
dropped.
By default, TTL check on VRRP packets is enabled.
Example
# Disable the VRRP standby group to check the TTL field in VRRP packets.
[H3C-Ethernet0/0/0] vrrp un-check ttl
# Enable the VRRP standby group to check the TTL field in VRRP packets.
[H3C-Ethernet0/0/0] undo vrrp un-check ttl
2-4
2.1.6 vrrp vrid preempt-mode
Syntax
vrrp vrid virtual-router-ID preempt-mode [ timer delay delay-value ]

undo vrrp vrid virtual-router-ID preempt-mode
View
Parameter
virtual-router-ID: Virtual router ID or VRRP standby group number, in the range 1 to

255.
delay-value: Delay in the range 0 to 255 seconds. It defaults to 0 seconds.
Description
Use the vrrp vrid preempt-mode command to enable preemption on the router and
configure its preemption delay in the specified standby group.
Use the undo vrrp vrid preempt-mode command to disable preemption on the router
in the specified standby group.
The default mode is preemption without delay.
To allow a backup router in a standby group to preempt the current master when it has
a higher priority, you must enable preemption on it. If immediate preemption is not
desired, you can set a preemption delay. The delay automatically changes to 0 seconds
when preemption is disabled.
Example
# Enable preemption on the router in standby group 1.

[H3C-Ethernet0/2/0] vrrp vrid 1 preempt-mode
# Set the preemption delay to five seconds.

[H3C-Ethernet0/2/0] vrrp vrid 1 preempt-mode timer delay 5
# Disable preemption on the router in standby group 1.

[H3C-Ethernet0/2/0] undo vrrp vrid 1 preempt-mode
2.1.7 vrrp vrid priority
Syntax
vrrp vrid virtual-router-ID priority priority-value

undo vrrp vrid virtual-router-ID priority
2-5
View
Parameter
virtual-router-ID: VRRP standby group number, in the range 1 to 255.

priority-value: Priority value of the router in the specified standby group, in the range 1
to 254. It defaults to 100.
Description
Use the vrrp vrid priority command to configure the priority of the router in the
specified standby group.
Use the undo vrrp vrid priority command to restore the default.
In VRRP, the role that a router plays in a standby group depends on its priority. A higher
priority means that the router is more likely to become the master. Note that priority 0 is
reserved for special use and 255 for the IP address owner.
Example
# Set the priority of the router in standby group 1 to 150.

[H3C-Ethernet0/2/0] vrrp vrid 1 priority 150
2.1.8 vrrp vrid timer advertise
Syntax
vrrp vrid virtual-router-ID timer advertise adver-interval

undo vrrp vrid virtual-router-ID timer advertise
View
Parameter

adver-interval: Interval at which the master in the specified standby group sends VRRP
packets. It is in the range 1 to 255 seconds and defauts to 1 second.
Description
Use the vrrp vrid timer advertise command to configure the Adver_Timer of the
specified standby group.
Use the undo vrrp vrid timer advertise command to restore the default.
The Adver_Timer controls the interval at which the master sends VRRP packets.
2-6
Example
# Set the master in standby group 1 to send VRRP packets at intervals of five seconds.
[H3C-Ethernet0/2/0] vrrp vrid 1 timer advertise 5
2.1.9 vrrp vrid track
Syntax
vrrp vrid virtual-router-ID track interface-name [ reduced priority-reduced ]

undo vrrp vrid virtual-router-ID track [ interface-name ]
View
Parameter

interface-name: Interface to be tracked.
priority-reduced: Value by which the priority is reduced. It is in the range 1 to 255 and
defaults to 10.
Description
Use the vrrp vrid track command to configure the interface to be tracked.
Use the undo vrrp vrid track command to disable tracking the specified interface.
The interface tracking function expands the backup functionality of VRRP. It provides
backup not only when routers fail but also when network interfaces go down.
After the monitored interface specified in this command goes down, the priority of the
router owning this interface automatically decreased by the value specified by
value-reduced, allowing a higher priority router in the standby group to take over as the
master. When the router is the IP address owner, however, you cannot configure
interface tracking on it.
Note:
VRRP monitored VT and Dialer interfaces only support MP, PPPoE, and PPPoA,
rather than the normal dial up such as the ISDN dialer interface.
Example
# Track interface Serial 0/0/0.

[H3C-Ethernet0/2/0] vrrp vrid 1 track serial0/0/0 reduced 50
2-7
# Disable the router to track interface Serial 0/0/0.

[H3C-Ethernet0/2/0] undo vrrp vrid 1 track serial0/0/0
2.1.10 vrrp vrid virtual-ip
Syntax
vrrp vrid virtual-router-ID virtual-ip virtual-address

undo vrrp vrid virtual-router-ID virtual-ip [ virtual-address ]
View
Parameter

virtual-address: Virtual IP address.
Description
Use the vrrp vrid virtual-ip command to create a standby group the first time that you
add a virtual IP address or add a virtual IP address to it after that. Each standby group
can accommodate up to 16 virtual IP addresses.
Use the undo vrrp vrid virtual-ip virtual-router-ID command to remove a standby
group.
Use the undo vrrp vrid virtual-router-ID virtual-ip virtual-address command to delete
a virtual IP address from the specified standby group.
The system removes a standby group after you delete all the virtual IP addresses in it.
If there is non-Ethernet interface in a bridge set, then VRRP is not allowed to be
configured on the bridge template corresponding to that bridge set.
By default, no standby group exists.
Example
# Create a standby group.

[H3C-Ethernet0/2/0] vrrp vrid 1 virtual-ip 10.10.10.10
# Add a virtual IP address to the existing standby group.

[H3C-Ethernet0/2/0] vrrp vrid 1 virtual-ip 10.10.10.11
# Delete a virtual IP address.

[H3C-Ethernet0/2/0] undo vrrp vrid 1 virtual-ip 10.10.10.10
2-8
Dial-up
Command Manual – Dial-up
Table of Contents
Chapter 1 DCC Configuration Commands.................................................................................. 1-1

1.1 DCC Configuration Commands ......................................................................................... 1-1
1.1.1 debugging dialer...................................................................................................... 1-1
1.1.2 dialer bundle............................................................................................................ 1-1
1.1.3 dialer bundle-member ............................................................................................. 1-2
1.1.4 dialer callback-center .............................................................................................. 1-3
1.1.5 dialer call-in ............................................................................................................. 1-4
1.1.6 dialer circular-group ................................................................................................ 1-5
1.1.7 dialer disconnect ..................................................................................................... 1-6
1.1.8 dialer enable-circular ............................................................................................... 1-6
1.1.9 dialer isdn-leased .................................................................................................... 1-7
1.1.10 dialer number ........................................................................................................ 1-8
1.1.11 dialer priority.......................................................................................................... 1-9
1.1.12 dialer queue-length ............................................................................................. 1-10
1.1.13 dialer route .......................................................................................................... 1-10
1.1.14 dialer threshold.................................................................................................... 1-12
1.1.15 dialer timer autodial............................................................................................. 1-13
1.1.16 dialer timer compete............................................................................................ 1-14
1.1.17 dialer timer enable............................................................................................... 1-14
1.1.18 dialer timer idle .................................................................................................... 1-15
1.1.19 dialer timer wait-carrier........................................................................................ 1-16
1.1.20 dialer timer warmup............................................................................................. 1-16
1.1.21 dialer user............................................................................................................ 1-17
1.1.22 dialer-group ......................................................................................................... 1-18
1.1.23 dialer-rule ............................................................................................................ 1-19
1.1.24 display dialer ....................................................................................................... 1-20
1.1.25 interface dialer..................................................................................................... 1-21
1.1.26 flow-interval ......................................................................................................... 1-22
1.1.27 ppp callback ........................................................................................................ 1-23
1.1.28 ppp callback ntstring ........................................................................................... 1-23
Chapter 2 Dynamic Routing Standby Configuration Commands ............................................ 2-1

2.1 Dynamic Routing Standby Configuration Commands ....................................................... 2-1
2.1.1 standby timer routing-disable .................................................................................. 2-1
2.1.2 standby routing-group ............................................................................................. 2-2
2.1.3 standby routing-rule ................................................................................................ 2-2
Chapter 3 Modem Configuration Commands ............................................................................. 3-1

3.1 Modem Configuration Commands ..................................................................................... 3-1
i
3.1.1 debugging modem .................................................................................................. 3-1

3.1.2 modem .................................................................................................................... 3-1
3.1.3 modem auto-answer ............................................................................................... 3-2
3.1.4 script trigger dial ...................................................................................................... 3-3
3.1.5 script-string.............................................................................................................. 3-4
3.1.6 sendat...................................................................................................................... 3-6
3.1.7 service modem-callback.......................................................................................... 3-7
3.1.8 start-script................................................................................................................ 3-8
ii
Comware V3 Chapter 1 DCC Configuration Commands
Chapter 1 DCC Configuration Commands
1.1 DCC Configuration Commands

1.1.1 debugging dialer
Syntax
debugging dialer { all | event | packet }
View
System view
Parameter
event: Enables DCC event debugging.

packet: Enables DCC packet debugging.
Description
Use the debugging dialer command to enable DCC debugging.
Example
None
1.1.2 dialer bundle
Syntax
dialer bundle number

undo dialer bundle
View
Parameter
number: Number of dialer bundle, ranging from 1 to 255.
Description
Use the dialer bundle command to configure a dialer bundle used by a dialer interface.
Use the undo dialer bundle command to disassociate the dialer bundle from the dialer
interface.
By default, the Resource-Shared DCC is not enabled, neither is dialer bundle specified.
1-1
This command can be applied only on a dialer interface for configuring the dialer
bundle that the interface will use. Furthermore, a dialer interface can only use a dialer
bundle. This command can be used to specify a dialer bundle used by a dialer interface,
no matter what link-protocol, PPP or Frame Relay, runs on the interface.
Related command: dialer bundle-member.
Example
# Configure the interface Dialer1 to use dialer bundle3, in which the interface Serial0 is
included.
[H3C-Dialer1] dialer bundle 3
[H3C-Serial0/0/0] dialer bundle-member 3
1.1.3 dialer bundle-member
Syntax
dialer bundle-member number [ priority priority | max-link max-num | min-link

min-num]
undo dialer bundle-member number
View
Physical interface view
Parameter
number: Dialer bundle number ranging from 1 to 255.

priority: Priority of the physical interface in the dialer bundle, ranges from 1 to 255. The
physical interface with higher priority will be used first. This is an optional parameter. By
default, priority is 1.
max-num: The maximum number of channels that can be used.
min-num: The minimum number of channels that can be used.
Description
Use the dialer bundle-member command to configure a physical interface included in

a dialer bundle in the Resource-Shared DCC application.
Use the undo dialer bundle-member command to remove the physical interface from
the dialer bundle.
By default, the physical interface is not assigned to any dialer bundle.
This command can only be applied to a physical interface, which can be assigned to
multiple dialer bundles.
1-2
Note:
To enable the B channel of ISDN interface (BRI or PRI) to configure its link layer
protocol dynamically in terms of the Dialer interface it belongs to, link layer protocol that
the interface uses should be specified as PPP.
Related command: dialer bundle.
Example
# Make Bri1/0/0 a member of dialer bundle1 and dialer bundle2, and assigns it a priority
of 50.
[H3C] interface bri 1/0/0
[H3C-Bri1/0/0] dialer bundle-member 1 priority 50
[H3C-Bri1/0/0] dialer bundle-member 2 priority 50
1.1.4 dialer callback-center
Syntax
dialer callback-center [ user ] [ dial-number ]

undo dialer callback-center
View
Physical or dialer interface view
Parameter
user: Calls back according to the parameter user hostname configured in the dialer
route command.
dial-number: Calls back according to the parameter telephone-number configured in
the local-user callback-number command.
Description
Use the dialer callback-center command to enable the callback server function.
Use the undo dialer callback-center command to disable the callback server function
of a router.
By default, PPP callback server is not configured.
This command must be configured at the server end when PPP is used to implement
callback.
The parameter user indicates that DCC will call back according to the parameter
configured in the dialer route command. The parameter dial-number indicates that
1-3
DCC will call back the remote end according to the callback-number configured in the
local-user command.
When both user and dial-number are applied concurrently, the router will first attempt
to place a return call according to the first parameter. If the callback attempt fails, it will
try the second parameter for callback.
Related command: ppp callback, ppp authentication-mode.
Example
# Configure a remote username and set the router to call the user back.
[H3C] local-user H3Cb password simple H3Cb
[H3C-Serial0/0/0] dialer route ip 1.1.1.2 user H3Cb 8810052
[H3C-Serial0/0/0] dialer callback-center user
1.1.5 dialer call-in
Syntax
dialer call-in remote-number [ callback ]

undo dialer call-in remote-number [ callback ]
View
Parameter
remote-number: Used for matching the remote incoming call number. The character “*”
represents any character.
callback: When calling back the server end, the incoming number will match with the
dialer call-in command containing this keyword and originate a callback.
Description
Use the dialer call-in command to enable ISDN callback according to ISDN caller ID.
Use the undo dialer call-in command to cancel the configuration.
By default, ISDN callback according to ISDN caller ID is not configured.
This command must be configured at the server end when ISDN caller ID is applied for
callback. In Resource-Shared DCC, because both PPP and frame relay protocols can
be encapsulated on dialer interfaces, ISDN interface can encapsulate link layer
protocol dynamically according to corresponding dialer interface.
The caller first searches corresponding dialer interface by matching the caller number
with the dialer number command. The dialer call-in command is used to preprocess
the ISDN call-in number, determining whether the user with this number can be
1-4
permitted to access. If the PBX switch does not provide the caller number, refuse the
call directly.
Related command: dialer callback-center.
Example
# Configure the router to call back the calling number 8810152.

[H3C-Bri0/0/0] dialer route ip 100.1.1.2 8810152
[H3C-Bri0/0/0] dialer call-in 8810152 callback
1.1.6 dialer circular-group
Syntax
dialer circular-group number

undo dialer circular-group
View
Parameter
number: Number of the dialer circular group, and a physical interface belongs to this
specified group, ranges from 0 to 1023. This number is defined through the interface
dialer command.
Description
Use the dialer circular-group command to add the physical interface to a dialer
circular group specified here.
Use the undo dialer circular-group command to cancel the configuration.
By default, the physical interface is not a member of any dialer circular group.
One physical interface can only be added to one dialer circular group, which may
contain multiple physical interfaces. When a call is originated on a dialer interface, the
highest priority physical interfaces in the circular group on the dialer interface will place
the call.
Related command: interface dialer.
Example
# Assign Serial1/0/0 and Serial2/0/0 to dialer circular group1.

[H3C-Serial1/0/0] dialer circular-group 1
1-5
1.1.7 dialer disconnect
Syntax
dialer disconnect interface [ interface-type interface-number ]
View
Any view
Parameter
interface-type: Specifies an interface together with interface-number.

interface-number: Specifies an interface together with interface-type.
Description
Use the dialer disconnect command to clear the dial-up link or the session link on the
specified interface at the PPPoE/PPPoA client.
The type of the specified interface can be dialer, D channel (on a PRI or BRI interface
for example), or B channel (on an RI, BRI, AUX, Serial, or AM interface for example).
Related command: debugging dialer.
Example
# Clear the dial-up link or the session link on the specified interface at the PPPoE client.
[H3C] dialer disconnect interface dialer0
# Clear the specified D channel.

[H3C] dialer disconnect interface Serial1/0/0:15
# Clear the specified B channel.

[H3C] dialer disconnect interface Serial1/0/0:2
1.1.8 dialer enable-circular
Syntax
dialer enable-circular
undo dialer enable-circular
View
Parameter
None
1-6
Description
Use the dialer enable-circular command to enable Circular DCC.

Use the undo dialer enable-circular command to disable Circular DCC.
By default, Circular DCC is enabled on the ISDN interfaces and disabled on other
interfaces.
The user must use this command to enable it before using Circular DCC.
Related command: dialer circular-group.
Example
# Enable Circular DCC on Serial 0/0/0.

[H3C-Serial0/0/0] dialer enable-circular
1.1.9 dialer isdn-leased
Syntax
dialer isdn-leased number

undo dialer isdn-leased number
View
Parameter
number: Number of the ISDN B channel for leased line connection. It is in the range 0 to
1 if the channel is on a BRI interface, and in the range 0 to 30 on a PRI interface, and 0
to 23 on a CT1/PRI interface.
Description
Use the dialer isdn-leased command to configure an ISDN B channel (can be either
the channel on a BRI or PRI interface) to be the leased line.
Use the undo dialer isdn-leased command to cancel the setting.
By default, no ISDN B channel is configured to be leased line.
The user can configure any ISDN B channel to be the leased line without affecting the
settings of other B channels.
1-7
Note:
On an ISDN BRI interface, you may configure ISDN BRI 128k leased line in addition.
For more information, refer to the dialer isdn-leased command in the chapter “ISDN
Configuration Commands” in the part “Link Layer Protocol” of this manual.
Related command: dialer isdn-leased (in the “Link Layer Protocol” part of this
manual).
Example
# Configure the first B channel on the interface Bri0/0/0 to be the leased line.
[H3C-Bri0/0/0] dialer isdn-leased 1
1.1.10 dialer number
Syntax
dialer number dial-number

undo dialer number
View
Parameter
dial-number: Dial number for calling a remote end.
Description
Use the dialer number command to configure a dial number for placing a call to a
single remote end.
Use the undo dialer number command to cancel the configured dial number.
By default, no dial number is set for calling the remote end.
This command is used when the dialer interface of Circular DCC serves as caller end
and the dialer originates calls to only one destination address or the default address.
This command is only valid after at least one of the following requirements is satisfied:
z The dialer route command is not configured on the interface.
z The next hop address that sends packets cannot be found in the corresponding
dialer route command.
When dialer interfaces of Resource-Shared DCC run link protocol of PPP, the remote
user names, which are obtained via PPP authentication and configured with dialer
user respectively, will decide which dialer interface will receive the incoming call. In this
case, dialer user must be configured, and dialer number can be configured optionally.
1-8
When dialer interfaces run link protocol of Frame Relay, the calling numbers, which are
received from the incoming call and configured with dialer number respectively, will
decide which dialer interface will receive the incoming call. In this case, dialer number
must be configured, and dialer user can be configured optionally.
Note:
z If dialer-group command is not configured, DCC will not dial even if dialer number
command is configured.
z When using Resource-Shared DCC, the same dialer number can be configured on
different dialer interfaces at the calling side; but it is not the case at the called side;
otherwise, the call will fail. When using Circular DCC, the same dialer number can
be configured on different dialer interfaces at the calling side, and it is the same to
the called side.
Related command: dialer route.
Example
# Set the dialer number for dialer1 calling the remote end to “11111”.
[H3C] interface dialer 1
[H3C-Dialer1] dialer number 11111
1.1.11 dialer priority
Syntax
dialer priority priority

undo dialer priority
View
Parameter
priority: Indicates the priority level for a physical interface which belongs to a dialer
circular group, ranging from 1 to 127. By default, the priority is 1.
Description
Use the dialer priority command to configure a priority for a physical interface in a
dialer circular group in the Circular DCC configuration.
Use the undo dialer priority command to restore the default priority.
1-9
This command sets the order in which the available physical interfaces in a dialer
circular group are used. The physical interfaces with higher priority will be used first.
Related command: dialer circular-group.
Example
# Set the priority of Serial 3/0/0 in dialer circular group0 to 5.

[H3C-Serial3/0/0] dialer priority 5
1.1.12 dialer queue-length
Syntax
dialer queue-length packets

undo dialer queue-length
View
Parameter
packets: Indicates the packet numbers buffered on this interface, ranging from 1 to 100.
By default, the value of max-threshold is 0.
Description
Use the dialer queue-length command to configure the number of packets which
comply with the "permit" statement that can be buffered before a link is set up.
Use the undo dialer queue-length command to restore the default number of the
packets that can be buffered.
In the link establishing process, the packets which comply with the "permit" statement
are held in the buffer queue to wait for transmission as soon as the link is set up. The
setting of packets decides the queue length.
Example
# Configure that 10 packets are buffered on Serial1/0/0.

[H3C-Serial1/0/0] dialer queue-length 10
1.1.13 dialer route
Syntax
dialer route protocol next-hop-address [ mask network-mask-length] [ user hostname ]

[ broadcast ] [ dial-number ] [ autodial ] [ logical-channel logic-channel-number ]
[ interface interface-type interface-number ]
1-10
undo dialer route protocol next-hop-address [ mask network-mask-length ]
View
Parameter
protocol: Network protocol. At present, it can be IP only.

next-hop-address: Host or network address of the dialed destination.
mask network-mask-length: Optional, mask length of the network address of the dialed
destination, in the range 0 to 32. If no mask length is specified, the default, 32, applies,
where the next-hop-address argument is handled as a host address. If you want to set
the next-hop-address argument to a network address, you must specify its mask
length.
user hostname: Remote user name, which is optionally specified for authentication
implemented when receiving calls. Hostname is a string of 1 to 80 characters.
broadcast: An optional parameter indicating that the broadcast packets can be
transmitted on this link.
dial-number: Dial number of the remote end.
autodial: If this parameter is defined in a dialer route, the router will automatically
attempt to dial according to the dialer route at a certain interval. The interval is set in the
dialer autodial-interval command, which is 300 seconds by default.
logical-channel logic-channel-number: Number of the specified logic channel of the
standby center.
interface interface-type interface-number: Specifies to dial from the specified physical
interface. When multiple physical interfaces are assigned to a dialer interface and their
dial-up links are connected to different ISDN switches, you need to associate dial-up
numbers with physical interfaces. This configuration is intended for dialer interfaces
only and is not available with RS-DCC.
Description
Use the dialer route command to allow a DCC interface to call the specified
destination address (host or network address) or to receive calls from multiple remote
ends.
Use the undo dialer route command to remove a dialer route.
By default, no dialer route is defined.
To originate a call, the parameter dial-number must be configured. If the user keyword
is used, PPP authentication must be configured.
The user can configure multiple dialer routes for a dial port or a destination address.
1-11
Note:
If the dialer-group command is not configured, DCC will not dial.
Related command: dialer enable-circular, dialer autodial-interval.
Example
# Dial 888066 to set up link for the packets destined to network segment
192.168.1.0/24.
[H3C] dialer route ip 192.168.1.0 mask 24 888066
# Dial 888066 to set up link for the packets destined to host address 192.168.1.1 (not
recommended).
[H3C] dialer route ip 192.168.1.1 888066
1.1.14 dialer threshold
Syntax
dialer threshold traffic-percentage [ in | in-out | out ]

undo dialer threshold
View
Parameter
traffic-percentage: Percentage of the actual traffic on the link over the bandwidth,
in: Only the inbound traffic is calculated.
in-out: Calculates the larger one of the inbound traffic and the outbound traffic in the
actual traffic calculation.
out: Only the outbound traffic is calculated.
Description
Use the dialer threshold command to configure the traffic threshold of a link on the
DCC interface so that another link can be enabled to call the same destination address
when the ratio of traffic on all connected links on the DCC interface to the available
bandwidth exceeds the preset percentage.
Use the undo dialer threshold command to restore the default value.
By default, MP flow control is not enabled.
1-12
If the ratio of the traffic on a link of a DCC interface to the bandwidth exceeds the
defined threshold, the second link is brought up to form an MP bundle with the first one.
When the ratio of traffic on the two links to the bandwidth exceeds the specified
threshold, the third link is brought up, so on and so forth.
On the contrary, when the ratio of the traffic on N (N is an integer greater than or equal
to 2) links to the bandwidth of N-1 links is less than the specified threshold, a link is
dropped. When only one link is left in the MP bundle, whether and when to disconnect it
depends on the timer configured using the dialer timer idle command. So far, this
command is not available with physical interfaces. It is only applicable to dialer
interfaces and must be used together with the ppp mp command.
With traffic-percentage set to 0, the router does not look at the ratio of traffic to
bandwidth when making calls to bring up links. Rather, all the available links come up
automatically. As for links that already exist, they are not torn down because of timeout.
Simply put, the dialer threshold 0 command voids the dialer timer idle command.
Related command: ppp mp and flow-interval.
Example
# Set the traffic threshold on Dialer1 to 80%.

[H3C-Dialer1] dialer threshold 80
1.1.15 dialer timer autodial
Syntax
dialer timer autodial seconds

undo dialer timer autodial
View
Parameter
seconds: Interval before the next call attempt, ranging from 1 to 604800 in units of
second. The default interval is 300 seconds.
Description
Use the dialer timer autodial command to configure the automatic dialing interval of
DCC.
Use the undo dialer timer autodial command to resume the default interval.
This command should be used together with the auto-dial keyword in the dialer route
command. DCC will automatically attempt to dial at intervals of seconds until the
connection is established. The automatic dialing function is independent of the trigger
1-13
with data packets and the established connection will not be automatically cut for
timeout. That is, the configuration of the dialer timer idle command does not affect it.
Related command: dialer route.
Example
# Set the DCC automatic calling interval on Serial0/0/0 to 60 seconds.

[H3C-Serial0/0/0] dialer timer autodial 60
1.1.16 dialer timer compete
Syntax
dialer timer compete seconds

undo dialer timer compete
View
Parameter
Seconds: Idle interval when contention occurs, ranges from 0 to 65535 seconds. By
default, the idle interval is 20 seconds.
Description
Use the dialer timer compete command to configure an idle interval for an interface
after call contention occurs on the interface.
Use the undo dialer timer compete command to restore the default interval.
Contention occurs if no free channel is available when DCC tries to originate a call.
Normally, after a link is set up, timer idle timing will take effect. However, if a call to a
different destination address is to be originated on this interface under the contention
circumstances, DCC replaces the timer idle timing with the timer compete timing.
Example
# Set timer idle and timer compete respectively to 50 seconds and 10 seconds on
Serial 0/0/0.
[H3C-Serial0/0/0] dialer timer idle 50
[H3C-Serial0/0/0] dialer timer compete 10
1.1.17 dialer timer enable
Syntax
dialer timer enable seconds
1-14
undo dialer timer enable
View
Parameter
seconds: Interval for originating the next call, ranges from 5 to 65535 seconds. By
default, the interval is 5 seconds.
Description
Use the dialer timer enable command to configure an interval for the next call attempt
on an interface after the link is disconnected.
Use the undo dialer timer enable command to restore the default interval.
Example
# Set the interval for DCC to make the next call attempt to 15 seconds.
[H3C-Serial0/0/0] dialer timer enable 15
1.1.18 dialer timer idle
Syntax
dialer timer idle seconds

undo dialer timer idle
View
Parameter
seconds: Time that a link is allowed to be idle, ranges from 0 to 65535 seconds. By
default, seconds is 120 seconds.
Description
Use the dialer timer idle command to configure the interval that a link is allowed to be
idle (in other words, the interval when there is no packets which comply with the
“permit” statements transmitted) after a call has been set up on the interface.
Use the undo dialer timer idle command to restore the default duration.
After a link is set up, the timer idle timer will take effect. If no interesting packets are
transmitted on the link within the specified time, DCC will automatically disconnect the
link. If timer idle is set to 0, the link will never be disconnected, regardless of whether
there are no packets, which comply with the “permit” statements, to be transmitted over
the link or not.
1-15
Example
# Set the timer idle on the interface Serial 0/0/0 to 50 seconds.

[H3C-Serial0/0/0] dialer timer idle 50
1.1.19 dialer timer wait-carrier
Syntax
dialer timer wait-carrier seconds

undo dialer timer wait-carrier
View
Parameter
seconds: Waiting time in seconds, ranges from 0 to 65535. By default, the time waiting
for a call connection is 60 seconds.
Description
Use the dialer timer wait-carrier command to configure the timeout time of
wait-carrier timer.
Use the undo dialer timer wait-carrier command to restore the default time of the
timer.
Wait-carrier timer begins to time after the DCC call is initiated. If the call connection fails
to be set up within the timeout time of this timer, the call will be terminated.
If the connection for a call is not established yet within the specified time, DCC will
terminate the call.
Example
# Set the maximum duration of the time that Serial 0/0/0 waits for call to establish to be
100 seconds.
[H3C-Serial0/0/0] dialer timer wait-carrier 100
1.1.20 dialer timer warmup
Syntax
dialer timer warmup seconds

undo dialer timer warmup
View
System view
1-16
Parameter
seconds: Length of the warmup timer. It defaults to 30 seconds.
Description
Use the dialer timer warmup command to set the length of the warmup timer on the
router configured with the dial-up backup function. It is the time that the router must wait
for bringing the dial-up backup function into effect after a reboot.
Use the dialer timer warmup command to restore the default.
When the router reboots, it tries to dial the backup link only if the main link fails to come
up upon timeout of the warm-up timer. After the main link comes up, the router switches
traffic to it automatically.
Example
# Set the warmup timer to 20 seconds.

[H3C] dialer timer warmup 20
1.1.21 dialer user
Syntax
dialer user username

undo dialer user
View
Parameter
username: Remote user name for PPP authentication, which is a string of 1 to 80

characters.
Description
Use the dialer user command to configure remote user name for authenticating
requests when calls are received.
Use the undo dialer user command to cancel the remote user name.
By default, no remote user name is set.
This command is only valid on dialer interfaces of Resource-Shared DCC.
Up to 255 Dialer users can be set on one Dialer interface. When one Dialer interface is
configured with multiple users, multiple physical interfaces can access this Dialer
interface.
1-17
When a Dialer interface encapsulates PPP, the remote user that have passed PPP
authentication decides the Dialer interface that receives calls. In this case, you the
option to configure dialer number command.
Related command: ppp pap local-user, ppp chap user.
Example
# Set the remote username to “RouterB”.

[H3C-Dialer3] dialer user RouterB
1.1.22 dialer-group
Syntax
dialer-group group-number
undo dialer-group
View
Parameter
group-number: sequence number of dialer access number, ranges from 1 to 255. This
group is set through the dialer-rule command.
Description
Use the dialer-group command to configure access control on the packets transmitted
on a DCC interface and to place the interface in an access control group.
Use the undo dialer-group command to cancel the interface from united with the
access control group.
By default, this command is not configured.
This command is used for associating a physical interface with an access control group.
Through the dialer-rule command, the user can associate an access control group
with the acl command. A DCC interface can only be the member of an access control
group. If it is configured to be a member of another access control group, this
configuration will replace the previous one.
Note:
In the default configuration of the interface, dialer-group is not configured. The user
must configure this command. Otherwise, DCC will be unable to transmit packets.
1-18
Related command: dialer-rule.
Example
# Add Serial1/0/0 interface to dialer-group 1.

[H3C] dialer-rule 1 acl 3101
[H3C-Serial1/0/0] dialer-group 1
1.1.23 dialer-rule
Syntax
dialer-rule dialer-number { protocol-name { permit | deny } | acl acl-number }

undo dialer-rule dialer-number { acl | protocol-name }
View
System view
Parameter
dialer-number: Number of the dialer access group, corresponding to the parameter

group-number in the dialer-group group number command in DCC interface view. The
argument ranges from 1 to 255.
protocol-name: Network protocol such as IP, IPX, bridge.
permit: Permits the packets of the specified protocol.
deny: Denies the packets of the specified protocol.
acl acl-number: Number of the access control list to which the access control group
corresponds.
Description
Use the dialer-rule command to configure the conditions of the data packet that can
trigger a DCC call.
Use the undo dialer-rule command to cancel the setting.
By default, no conditions of packet-triggering DCC calls are set for dial interfaces.
This command is used to set the DCC call packet-triggering control to which an access
control group corresponds. And a dial interface can be placed in an access control
group through the dialer-group command. Thereby, the DCC call’s packet-triggering
on the DCC interface can be controlled.
If an access control group cannot find the corresponding dialer-rule, DCC will regard
the packets as packets which do not comply with the “permit” conditions in ACL rule and
just drop them. No DCC call will be originated.
1-19
Related command: dialer-group.
Example
# Set a dialer-rule.
0.0.0.0 255.255.255.255
[H3C] dialer-rule 1 acl 3101
[H3C-Serial1/0/0] dialer-group 1
1.1.24 display dialer
Syntax
display dialer [ interface interface-type interface-number ]
View
Any view
Parameter

Description
Use the display dialer command to view information on DCC interfaces.

By default, information on all DCC interfaces is displayed.
Related command: dialer timer idle, dialer timer compete, dialer timer
wait-for-carrier, dialer timer enable.
Example
# Display information on dialer interfaces.

[H3C] display dialer
Dialer0 - dialer type = Dialer
Dialer Route:
NextHop_address Dialer_Numbers
Dialer number 003
Dialer Timers(Secs):
Auto-dial:300 Compete:20 Enable:5
Idle:120 Wait-for-Carrier:60
Total Channels:30 Free Channels:29
1-20
Table 1-1 Description on the fields of the display dialer command
Field Description
Remote address associated with a dialer route on the
NextHop address
interface
Dialer Number Dial string corresponding to the dialer route
Dialer Timers(Secs) Setting of the dialer timer
Auto-dial Time set by the dialer timer autodial command
Compete Time set by the dialer timer compete command
Enable Time set by the dialer timer enable command
Idle Time set by the dialer timer idle command
Wait for carrier Time set by the dialer timer wait-carrier command
Total Channels Total number of channels
Free Channels Number of free channels
1.1.25 interface dialer
Syntax
interface dialer number

undo interface dialer number
View
System view
Parameter
number: Interface number; its value range varies with router model.
Description
Use the interface dialer command to create a dialer circular group for the Circular
DCC, or configure a dialer interface for the Resource-Shared DCC.
Use the undo interface dialer command to cancel the existing setting.
By default, no dialer interface is defined.
In Resource-Shared DCC, any dialer interface can use the services provided by
multiple physical interfaces, and individual physical interfaces can provide services for
multiple dialer interfaces at the same time. Therefore, authentication must be
configured on these physical interfaces, so as to use the user name of a dial-in party to
locate the corresponding dialer interface for the call. In this mode, physical interfaces
1-21
and dialer interfaces are dynamically bound. Furthermore, a dialer interface can only
call a destination address, which will be specified in the dialer number command.
The physical interfaces in Circular DCC and Resource-Shared DCC do not use
individual network addresses. Instead, they use the addresses of the corresponding
dialer interfaces.
Example
# Define a dialer interface dialer 1.

[H3C] interface dialer 1
1.1.26 flow-interval
Syntax
flow-interval interval
undo flow-interval
View
System view
Parameter
interval: Traffic statistic interval. It is in the range 1 to 1500 seconds and defaults to 20
seconds.
Description
Use the flow-interval command to configure traffic statistic interval.

Use the undo flow-interval command to restore the default traffic statistic interval.
This command takes effect only on DCC packet-triggered dial-up.
The command specifies intervals at which the system provides statistics about traffic on
the links in an MP bundle. It is applied to the situation where whether links are brought
up depends on traffic size. Changing the interval setting can affect the interface traffic
statistic interval that you can see when executing the display interfaces command.
Related command: dialer threshold, display interface.
Example
# Set the traffic statistic interval to 3 seconds.

[H3C] flow-interval 3
1-22
1.1.27 ppp callback
Syntax
ppp callback { client | server }

undo ppp callback { client | server }
View
Parameter
client: As the client end, sends callback requests.

server: As the server end, accepts callback requests.
Description
Use the ppp callback command to enable an interface to send or accept PPP callback
requests.
Use the undo ppp callback command to disable the interface to send or accept PPP
callback requests.
By default, sending or receiving callback request is disabled.
The callback function can be used to save the communication cost for the calling party
in the case that the calling party pays the charge for calls.
Related command: ppp callback ntstring.
Example
# Enable accepting callback request on Serial0/0/0 interface.

[H3C-Serial0/0/0] ppp callback server
1.1.28 ppp callback ntstring
Syntax
ppp callback ntstring dial-number

undo ppp callback ntstring
View
Parameter
dial-number: Dial number for a Windows NT server to call back the router.
1-23
Description
Use the ppp callback ntstring command to configure the dial number required for a
Windows NT server to call back the router.
Use the undo ppp callback ntstring command to cancel the configured callback dial
number.
By default, no callback dial number is set for the Windows NT server.
When a router functions as the callback server to call a Windows NT server, this
command should be configured if the server needs the router to send the callback
number.
Related command: ppp callback.
Example
# Set the dial number for a Windows NT server to call back the router to “2489”.
[H3C-Dialer1] ppp callback NTString 2489
1-24
Command Manual – Dial-up Chapter 2 Dynamic Routing Standby Configuration
Comware V3 Commands
Chapter 2 Dynamic Routing Standby

2.1 Dynamic Routing Standby Configuration Commands

2.1.1 standby timer routing-disable
Syntax
standby timer routing-disable seconds

undo standby timer routing-disable
View
Dial interface view
Parameter
seconds: Delay for the dynamic routing standby module to disconnect the secondary
link. It is in the range 1 to 65535 and defaults to 0.
Description
Use the standby timer routing-disable command to specify a delay for the secondary
link to be disconnected after the primary link goes up to avoid route oscillation.
Use the undo standby timer routing-disable command to restore the default delay,
that is, 0.
By default, the secondary link is disconnected immediately.
Note:
A dial interface refers to a physical dial interface such as PRI and BRI, or a logical dial
interface, that is, dialer interface.
Example
# On the interface BRI 0/0/0 disconnect the secondary link five seconds after the
primary link resumes.
[H3C-Bri0/0/0] standby timer routing-disable 5
2-1
Comware V3 Commands
# On the interface BRI 0/0/0 disconnect the secondary link immediately after the
primary link resumes.
[H3C-Bri0/0/0] undo standby timer routing-disable
2.1.2 standby routing-group
Syntax
standby routing-group group-number

undo standby routing-group group-number
View
Dial interface view
Parameter
group-number: Number of the dynamic routing standby group, ranging from 1 to 255.
Description
Use the standby routing-group command to apply a dynamic routing standby group
on the secondary interface.
Use the undo standby routing-group command to remove the dynamic routing
standby group from the dialer interface.
Before applying a dynamic routing standby group on the interface, make sure you have
successfully configured the legacy DCC.
Example
# Apply dynamic routing standby group 1 on the interface BRI 0/0/0.

[H3C-Bri0/0/0] standby routing-group 1
# Remove dynamic routing standby group 1 from the interface BRI 0/0/0.
[H3C-Bri0/0/0] undo standby routing-group 1
2.1.3 standby routing-rule
Syntax
standby routing-rule group-number ip ip-address ip-mask

undo standby routing-rule group-number [ ip ip-address ip-mask ]
View
System view
2-2
Comware V3 Commands
Parameter
group-number: Number of the dynamic routing standby group, ranging from 1 to 255.
ip-address: Address of the network segment to be monitored, or the destination
address of the call placed after standby dialup is enabled.
ip-mask: IP address mask.
Description
Use the standby routing-rule command to create a dynamic routing standby group
and assign a monitored network segment to it.
Use the undo standby routing-rule command to delete a monitored network segment
from the specified dynamic routing standby group or to delete the dynamic routing
standby group.
If the network address or subnet mask is not configured properly on a monitored
network segment, the system will display the following output:”% Invalid IP address or
subnet mask!”
Note:
Each dynamic routing standby group may contain up to 255 monitored network
segments. The primary link of a dynamic routing standby group is regarded
disconnected only when the routes of all the monitored network segments in the group
are removed.
Example
# Configure dynamic routing standby group 1 to monitor routing to network segments

20.0.0.0 and 30.0.0.0.
[H3C] standby routing-rule 1 ip 20.0.0.1 255.0.0.0
[H3C] standby routing-rule 1 ip 30.0.0.1 255.0.0.0
# Delete dynamic routing standby group 1. The segments 20.0.0.0 and 30.0.0.0 will not
be monitored as the result.
[H3C] undo standby routing-rule 1
# Remove monitored segment 30.0.0.0 from dynamic routing standby group 1.

[H3C] undo standby routing-rule 1 ip 30.0.0.1 255.0.0.0
2-3
Comware V3 Chapter 3 Modem Configuration Commands
Chapter 3 Modem Configuration Commands
3.1 Modem Configuration Commands

3.1.1 debugging modem
Syntax
debugging modem
View
User view
Parameter
None
Description
Use the debugging modem command to enable Modem debugging.

According to the information output after executing this command, the user can make
sure whether the correct Modem script has been specified for a particular event.
Example
None
3.1.2 modem
Syntax
modem [ both | call-in | call-out ]

undo modem [ both | call-in | call-out ]
View
User-interface view
Parameter
both: Permits both modem call-in and modem call-out.

out: Permits only modem call-in.
call-out: Permits only modem call-out.
Description
Use the modem command to enable modem call-in and call-out on the interface.
3-1
Use the undo modem and undo modem both command to disable modem call-in and
call-out.
Use the undo modem [ call-in | call-out ] command to disable modem call-in or
call-out.
By default, both modem call-in and call-out are disabled on the interface.
This command can be used to set the authority of Modem dial-in and dial-out on an
interface.
Example
# Enable receiving incoming Modem calls on interface u-tty1..

[H3C-ui-tty1] modem call-in
3.1.3 modem auto-answer
Syntax
modem auto-answer
undo modem auto-answer
View
User interface view
Parameter
None
Description
Use the modem auto-answer command to have the external modem connected to the
asynchronous interface automatically answer or hook off.
Use the undo modem auto-answer command to disable the connected external
modem to answer automatically. In this case, the modem answers only when receiving
an AT instruction sent by software.
By default, the connected external modem is set to non-auto answer mode.
Use this command depending on the answer state of the connected external modem.
When the modem is in auto-answer mode (AA LED of the modem lights), configure the
modem auto-answer command to prevent the router from sending an answer
instruction after the modem answers automatically. If the modem is in non-auto answer
mode, configure the undo modem auto-answer command.
3-2
Note:
If the configuration of this command is not consistent with the current answer state of
the connected modem, anomalies may occur.
Related command: modem.
Example
# Set the answer mode of the modem connected to the asynchronous serial interface
UI-TTY1 to auto.
[H3C-ui-tty1] modem auto-answer
3.1.4 script trigger dial
Syntax
script trigger dial script-name

undo script trigger dial
View
User interface view
Parameter
script-name: Name of Modem script.
Description
Use the script trigger dial command to configure the Modem script that is used for
DCC dialing.
Use the undo script trigger dial command to cancel the feature.
By default, the system does not specify the script.
If this command is configured, the specified script will be executed for DCC dialing.
Related command: script-string, script trigger login, script trigger connect, script
trigger logout.
Example
# Specify the script “example” to be used for DCC dialing.

[H3C-ui-tty1] script trigger dial example
3-3
3.1.5 script-string
Syntax
script-string script-name script-content

undo script-string script-name
View
System view
Parameter

script-content: Script content.
Description
Use the script-string command to configure a Modem script.

Use the undo script-string command to cancel the Modem script.
The modems of some vendors may not be fast enough to handle characters sent from
the router in a predefined baud rate. Therefore, you should use the script-string
command to add a delay sign in the modem script.
By default, the system does not have a Modem script.
H3C series routers provide the Modem script, which is mainly used for:
z Providing flexibility in controlling the Modems of different models. For example,
using different initialization strings can make the Modem of different
manufacturers or models to interoperate with the H3C series routers better.
z Implementing the interactive login to remote systems. Interactive negotiation of
the scripts can enable the systems to enter different link states. For example, after
the asynchronous serial interfaces on the two routers set up a connection via the
Modems, the routers can negotiate the protocol to be encapsulated with the
physical link and its operating parameters.
The Modem script format in common use is as follow:
send-string1 receive-string1 send-string2 receive-string2 ......
Among the above format:
z send-string indicates a sending string.
z receive-string indicates a receiving string.
z Normally, send-string and receive-string appear in pairs, and the script must begin
with a sending string. For example, send-string1 receive-string1 …… represents
the execution flow: Send send-string1 to the Modem and expect to receive
receive-string1. If the string matching receive-string1 is received before timeout,
3-4
the execution of the subsequent script, which will be otherwise terminated, will
continue.
z If the last string is a sending string, it indicates that the execution of the script will
be terminated after the string is sent without waiting for any receiving string.
z If the beginning of the script needs no sending string, but need to wait for receiving
string directly, the first string can be set as “”, the meaning of which will be
explained later.
z Except for ending with \c, the sending string will be automatically added with a
return to its end whenever it is sent.
z A receiving string is matched via the location-independent matching method. That
is, a match is considered successful as long as the received contents contain the
expected string.
z Concerning the match of receiving string, there can be multiple expected receiving
strings. The match operation on a receiving string will be considered successful if
the receiving string is matched with any expected receiving strings which are
separated by hyphens (“-“).
z The default timeout time waiting for a receiving string is 5 seconds. TIMEOUT
seconds can be inserted into the script to adjust the timeout time waiting for the
receiving string, which is valid till a new TIMEOUT is set in the same script. For its
meanings, refer to the following table.
Table 3-1 Script keywords
Keyword Description
The string following ABORT will be compared with the
string sent from a Modem or a remote DTE device for a
ABORT receive-string full match. Multiple ABORT entries can be configured for a
script, and all of them take effect in the whole script
execution period.
The digit following TIMEOUT is used to set the timeout
interval that the device waits for receiving strings. If no
TIMEOUT seconds expected strings are received within the interval, the
execution of the script will be failed. Once being set, the
setting will be valid till a new TIMEOUT is set.
z All the strings and keywords in a script are case-sensitive.

z Both strings and keywords are separated by spaces. If a space is contained in a
string, it should be put in the double quotation marks (" "). A pair of empty
quotation marks (that is, "") has two possible meanings. Being a leading "" in a
script, it means that no string needs to be sent and the system will directly wait for
the receiving string. If "" is put at any other locations, the string content will be
regarded to be "".
z ABORT receive-string can be inserted anywhere in a script to change the script
execution flow. Its presence in the script indicates that the script execution will be
3-5
terminated if a received string is fully matched to the receive-string set by ABORT

receive-string. Multiple ABORT entries can be defined in a script, and they will
take effect concurrently. Once a received string matches any of them, the script
execution will be terminated. Regardless of where the ABORT receive-string is
placed, it will take effect in the whole script execution process.
z Escape characters can be inserted in a script for the purpose of better controlling
the script and increasing its flexibility. In addition, all the escape characters are the
delimiters in the string at the same time. Refer to the following table for details.
Table 3-2 Script escape characters
Escape character Description

It means that only the specified string can be sent and the
character "Enter" will not be sent. The character of "\c" must
\c
be at the end of the sending strings. Otherwise, it is invalid at
other location.
\d Represents pausing 2 seconds.
\n Represents the character "newline".
\r Represents the character "Enter".
\s Represents the character "Space".
\t Represents the character "Tab".
\\ Represents the character "\".
\T Represents telephone number.
Related command: sendat, start-chat, script trigger login, script trigger connect,
script trigger logout, script trigger dial, script trigger init.
Example
# Define a Modem script.

[H3C]script-string example "" AT OK ATS0=1 OK
3.1.6 sendat
Syntax
sendat at-string
View
Interface (asynchronous serial interface, AUX port, or AM interface) view
3-6
Parameter
at-string: AT command string. The string “+++”, “A/”, or any string that starts with AT is
allowed.
Description
Use the sendat command to manually send AT command to the modem.

The sendat command does not check the validity of the AT command, rather it takes
the string entered by the user as the AT command and sends it to the modem, changing
all lower case letters into upper case letters. If the debugging function is enabled for the
corresponding AT command on the related interface, you can see the object code
returned by the modem, and also the echoed AT command if the modem has been
configured with a command echo.
Note:
You can use the AT command on a modem only when it is in the AT command mode, if
the modem is in data mode, the AT command sent by the sendat at-string command is
invalid.
Related command: script-string.
Example
# Send AT tone dialing command and dial 169.

[H3C-Async1] sendat ATDT169
3.1.7 service modem-callback
Syntax
service modem-callback
undo service modem-callback
View
System view
Parameter
None
Description
Use the service modem-callback command to enable the callback function of

modems.
3-7
Use the undo service modem-callback command to disable the callback function of
modems.
When a modem line is active, that is, when the modem detects the carrier or data is
being received, you may enable callback. As the service modem-callback command
uses modem scripts to implement callback before entering PPP, it enables callback
before accounting is started. This can thus help you save cost.
Example
# Enable the callback function.

[H3C] service modem-callback
3.1.8 start-script
Syntax
start-script script-name number
View
User view
Parameter

number: Interface number of the script.
Description
Use the start-script command to configure executing the specified Modem script on an
interface.
This command provides the user with means of instantly executing the Modem script. If
another script is being executed on the corresponding interface, this command will not
be executed and an error will be reported.
Related command: script-string.
Example
# Execute the specified Modem script “example” on the interface 1.

<H3C> start-script example 1
3-8
Voice
Command Manual – Voice
Table of Contents
Chapter 1 VoIP Configuration Commands ................................................................................. 1-1

1.1 VoIP Configuration Commands ......................................................................................... 1-1
1.1.1 address.................................................................................................................... 1-1
1.1.2 area ......................................................................................................................... 1-2
1.1.3 area-id (in Voice Entity View) .................................................................................. 1-3
1.1.4 busytone-t-th ........................................................................................................... 1-3
1.1.5 caller-permit............................................................................................................. 1-4
1.1.6 cid display................................................................................................................ 1-6
1.1.7 cid enable ................................................................................................................ 1-7
1.1.8 cid send ................................................................................................................... 1-7
1.1.9 cid type .................................................................................................................... 1-8
1.1.10 cng-on ................................................................................................................... 1-9
1.1.11 compression ........................................................................................................ 1-10
1.1.12 cptone.................................................................................................................. 1-16
1.1.13 debugging voice cm ............................................................................................ 1-19
1.1.14 debugging voice data-flow .................................................................................. 1-20
1.1.15 debugging voice dpl ............................................................................................ 1-20
1.1.16 debugging voice h225 ......................................................................................... 1-21
1.1.17 debugging voice h245 ......................................................................................... 1-21
1.1.18 debugging voice ipp ............................................................................................ 1-22
1.1.19 debugging voice rcv ............................................................................................ 1-23
1.1.20 debugging voice vas ........................................................................................... 1-23
1.1.21 debugging voice vmib ......................................................................................... 1-24
1.1.22 debugging voice vpp ........................................................................................... 1-25
1.1.23 default entity compression .................................................................................. 1-26
1.1.24 default entity normal-connect slow-h245 ............................................................ 1-27
1.1.25 default entity payload-size................................................................................... 1-27
1.1.26 default entity service data ................................................................................... 1-28
1.1.27 default entity vad-on............................................................................................ 1-29
1.1.28 delay.................................................................................................................... 1-30
1.1.29 delay-reversal...................................................................................................... 1-30
1.1.30 description (in Voice Entity View)........................................................................ 1-31
1.1.31 description (in Voice Subscriber Line View)........................................................ 1-32
1.1.32 dial-prefix............................................................................................................. 1-32
1.1.33 dial-program ........................................................................................................ 1-34
1.1.34 display voice call-history-record .......................................................................... 1-34
1.1.35 display voice call-info .......................................................................................... 1-36
1.1.36 display voice default............................................................................................ 1-37
i
1.1.37 display voice entity .............................................................................................. 1-39

1.1.38 display voice ipp .................................................................................................. 1-40
1.1.39 display voice number-substitute.......................................................................... 1-42
1.1.40 display voice rcv ccb ........................................................................................... 1-43
1.1.41 display voice rcv statistic..................................................................................... 1-46
1.1.42 display voice sip register-state ............................................................................ 1-48
1.1.43 display voice subscriber-line ............................................................................... 1-49
1.1.44 display voice voip data-statistic........................................................................... 1-51
1.1.45 display voice vpp ................................................................................................. 1-54
1.1.46 dot-match ............................................................................................................ 1-56
1.1.47 dtmf sensitivity-level ............................................................................................ 1-57
1.1.48 dscp media .......................................................................................................... 1-58
1.1.49 dtmf sensitivity-level ............................................................................................ 1-58
1.1.50 dtmf threshold...................................................................................................... 1-59
1.1.51 echo-canceller ..................................................................................................... 1-63
1.1.52 em-phy-parm ....................................................................................................... 1-65
1.1.53 em-signal............................................................................................................. 1-66
1.1.54 entity.................................................................................................................... 1-67
1.1.55 fast-connect......................................................................................................... 1-68
1.1.56 first-rule ............................................................................................................... 1-69
1.1.57 first-rule ............................................................................................................... 1-69
1.1.58 hookoff-time......................................................................................................... 1-70
1.1.59 impedance........................................................................................................... 1-71
1.1.60 line....................................................................................................................... 1-72
1.1.61 match-template.................................................................................................... 1-73
1.1.62 max-call (in Voice Dial Program View)................................................................ 1-75
1.1.63 max-call (in Voice Entity View)............................................................................ 1-76
1.1.64 normal-connect slow-h245 .................................................................................. 1-77
1.1.65 number-match ..................................................................................................... 1-78
1.1.66 number-substitute ............................................................................................... 1-79
1.1.67 open-trunk ........................................................................................................... 1-79
1.1.68 outband ............................................................................................................... 1-80
1.1.69 overlap voip h323................................................................................................ 1-82
1.1.70 payload-size ........................................................................................................ 1-82
1.1.71 plc-mode.............................................................................................................. 1-84
1.1.72 priority.................................................................................................................. 1-85
1.1.73 private-line........................................................................................................... 1-85
1.1.74 receive gain ......................................................................................................... 1-86
1.1.75 reset voice call-history-record line....................................................................... 1-87
1.1.76 reset voice ipp ..................................................................................................... 1-88
1.1.77 reset voice rcv ..................................................................................................... 1-88
1.1.78 reset voice vpp .................................................................................................... 1-89
ii
1.1.79 reset voice voip data-statistic .............................................................................. 1-89

1.1.80 ring-generate ....................................................................................................... 1-90
1.1.81 rule ...................................................................................................................... 1-90
1.1.82 select-rule rule-order ........................................................................................... 1-94
1.1.83 select-rule search-stop........................................................................................ 1-95
1.1.84 select-rule type-first............................................................................................. 1-96
1.1.85 select-stop ........................................................................................................... 1-97
1.1.86 send-busytone..................................................................................................... 1-98
1.1.87 send-number (in Voice Entity View) .................................................................... 1-98
1.1.88 send-number (in Voice Subscriber Line View).................................................... 1-99
1.1.89 send-ring ........................................................................................................... 1-100
1.1.90 service data ....................................................................................................... 1-100
1.1.91 shutdown (in Voice Entity View)........................................................................ 1-101
1.1.92 shutdown (in Voice Subscriber Line View)........................................................ 1-101
1.1.93 silence-th-span .................................................................................................. 1-102
1.1.94 special-service................................................................................................... 1-103
1.1.95 subscriber-line ................................................................................................... 1-104
1.1.96 substitute ........................................................................................................... 1-104
1.1.97 substitute incoming-call..................................................................................... 1-105
1.1.98 substitute outgoing-call ..................................................................................... 1-107
1.1.99 terminator .......................................................................................................... 1-108
1.1.100 timer dial-interval............................................................................................. 1-108
1.1.101 timer first-dial................................................................................................... 1-109
1.1.102 timer ring-back................................................................................................. 1-110
1.1.103 timer wait-digit ................................................................................................. 1-110
1.1.104 trace interval.................................................................................................... 1-111
1.1.105 transmit gain.................................................................................................... 1-112
1.1.106 tunnel-on ......................................................................................................... 1-113
1.1.107 type.................................................................................................................. 1-113
1.1.108 vad-on ............................................................................................................. 1-114
1.1.109 vi-card busy-tone-detect.................................................................................. 1-115
1.1.110 vi-card cptone-custom..................................................................................... 1-116
1.1.111 vi-card reboot .................................................................................................. 1-117
1.1.112 voice-setup ...................................................................................................... 1-118
1.1.113 voip calledtunnel ............................................................................................. 1-119
1.1.114 voip call-start ................................................................................................... 1-119
1.1.115 voip h323-descriptor........................................................................................ 1-120
1.1.116 voip timer......................................................................................................... 1-121
1.1.117 vqa data-statistic ............................................................................................. 1-121
1.1.118 vqa dscp .......................................................................................................... 1-122
1.1.119 vqa dsp-monitor .............................................................................................. 1-124
1.1.120 vqa jitter-buffer ................................................................................................ 1-125
iii
1.1.121 vqa performance ............................................................................................. 1-125
Chapter 2 BSV Configuration Commands .................................................................................. 2-1

2.1.1 permanent-active..................................................................................................... 2-1
2.1.2 power-source........................................................................................................... 2-1
Chapter 3 VoFR Configuration Commands ................................................................................ 3-1

3.1 VoFR Configuration Commands........................................................................................ 3-1
3.1.1 address.................................................................................................................... 3-1
3.1.2 call-mode................................................................................................................. 3-2
3.1.3 cid select-mode ....................................................................................................... 3-3
3.1.4 debugging voice vofr ............................................................................................... 3-3
3.1.5 display fr vofr-info .................................................................................................... 3-4
3.1.6 display voice vofr call .............................................................................................. 3-5
3.1.7 display voice vofr statistic........................................................................................ 3-8
3.1.8 motorola base-svc................................................................................................... 3-9
3.1.9 motorola encapsulation ......................................................................................... 3-10
3.1.10 motorola max-voice............................................................................................. 3-10
3.1.11 motorola remote-id .............................................................................................. 3-11
3.1.12 outband vofr ........................................................................................................ 3-12
3.1.13 priority.................................................................................................................. 3-12
3.1.14 seq-number ......................................................................................................... 3-13
3.1.15 timestamp............................................................................................................ 3-14
3.1.16 trunk-id ................................................................................................................ 3-14
3.1.17 vad-on ................................................................................................................. 3-15
3.1.18 vofr ...................................................................................................................... 3-16
3.1.19 vofr frf11-timer ..................................................................................................... 3-17
3.1.20 vofr jitter-buffer .................................................................................................... 3-18
3.1.21 voice bandwidth .................................................................................................. 3-18
Chapter 4 E1/T1 Voice Configuration Commands ..................................................................... 4-1

4.1 E1/T1 Voice Configuration Commands ............................................................................. 4-1
4.1.1 ani............................................................................................................................ 4-1
4.1.2 ani-offset.................................................................................................................. 4-2
4.1.3 answer..................................................................................................................... 4-2
4.1.4 cas........................................................................................................................... 4-3
4.1.5 clear-forward-ack..................................................................................................... 4-4
4.1.6 debugging voice r2.................................................................................................. 4-5
4.1.7 debugging voice rcv r2 ............................................................................................ 4-6
4.1.8 debugging voice vpp r2 ........................................................................................... 4-6
4.1.9 default...................................................................................................................... 4-7
4.1.10 delay...................................................................................................................... 4-9
4.1.11 display voice em call-statistic .............................................................................. 4-11
4.1.12 display voice em ccb ........................................................................................... 4-13
iv
4.1.13 display voice r2 call-statistics .............................................................................. 4-14

4.1.14 display voice rcv statistic r2................................................................................. 4-16
4.1.15 display voice subscriber-line ............................................................................... 4-18
4.1.16 display voice voip ................................................................................................ 4-20
4.1.17 dl-bits................................................................................................................... 4-21
4.1.18 dtmf ..................................................................................................................... 4-22
4.1.19 effect-time............................................................................................................ 4-23
4.1.20 final-callednum .................................................................................................... 4-24
4.1.21 force-metering ..................................................................................................... 4-24
4.1.22 group-b ................................................................................................................ 4-25
4.1.23 line....................................................................................................................... 4-26
4.1.24 loopback .............................................................................................................. 4-27
4.1.25 mfc (R2 CAS) ...................................................................................................... 4-27
4.1.26 mode ................................................................................................................... 4-28
4.1.27 open-trunk ........................................................................................................... 4-30
4.1.28 pcm...................................................................................................................... 4-31
4.1.29 pri-set .................................................................................................................. 4-31
4.1.30 re-answer ............................................................................................................ 4-33
4.1.31 register-number ................................................................................................... 4-34
4.1.32 register-value....................................................................................................... 4-35
4.1.33 renew................................................................................................................... 4-38
4.1.34 reset voice em ..................................................................................................... 4-39
4.1.35 reset voice r2....................................................................................................... 4-39
4.1.36 reverse ................................................................................................................ 4-40
4.1.37 seizure-ack .......................................................................................................... 4-41
4.1.38 select-mode......................................................................................................... 4-41
4.1.39 sendring............................................................................................................... 4-43
4.1.40 signal-value ......................................................................................................... 4-43
4.1.41 special-character ................................................................................................. 4-44
4.1.42 subscriber-line ..................................................................................................... 4-45
4.1.43 timer (Digital E&M) .............................................................................................. 4-46
4.1.44 timer dtmf (R2) .................................................................................................... 4-47
4.1.45 timer register-pulse (R2) ..................................................................................... 4-48
4.1.46 timer register-complete (R2) ............................................................................... 4-49
4.1.47 timer ring (R2) ..................................................................................................... 4-49
4.1.48 timer dl (R2)......................................................................................................... 4-50
4.1.49 timeslot-set .......................................................................................................... 4-51
4.1.50 trunk-direction...................................................................................................... 4-53
4.1.51 ts.......................................................................................................................... 4-54
Chapter 5 Fax Configuration Commands ................................................................................... 5-1

5.1 Fax Configuration Commands ........................................................................................... 5-1
5.1.1 cngced-detection ..................................................................................................... 5-1
v
5.1.2 debugging voice fax ................................................................................................ 5-2

5.1.3 default entity fax ...................................................................................................... 5-3
5.1.4 default entity modem compatible-param................................................................. 5-5
5.1.5 default entity modem protocol ................................................................................. 5-6
5.1.6 display voice fax ...................................................................................................... 5-7
5.1.7 fax baudrate ............................................................................................................ 5-9
5.1.8 fax ecm.................................................................................................................. 5-10
5.1.9 fax level ................................................................................................................. 5-11
5.1.10 fax nsf-on............................................................................................................. 5-12
5.1.11 fax protocol.......................................................................................................... 5-13
5.1.12 fax support-mode ................................................................................................ 5-15
5.1.13 fax train-mode ..................................................................................................... 5-15
5.1.14 modem compatible-param .................................................................................. 5-16
5.1.15 modem protocol................................................................................................... 5-17
5.1.16 reset voice fax statistics ...................................................................................... 5-18
5.1.17 reset voice fax trans-statistics ............................................................................. 5-18
5.1.18 voip h323-conf tcs-t38......................................................................................... 5-19
Chapter 6 Voice RADIUS Configuration Commands ................................................................. 6-1

6.1 Voice RADIUS Configuration Commands ......................................................................... 6-1
6.1.1 aaa-client................................................................................................................. 6-1
6.1.2 authentication .......................................................................................................... 6-1
6.1.3 authentication-did .................................................................................................... 6-2
6.1.4 callednumber receive-method................................................................................. 6-3
6.1.5 card-digit.................................................................................................................. 6-4
6.1.6 cdr ........................................................................................................................... 6-4
6.1.7 debugging voice vcc................................................................................................ 6-6
6.1.8 display aaa unsent-h323-call-record ....................................................................... 6-7
6.1.9 display voice aaa-client configuration ..................................................................... 6-8
6.1.10 display voice call-history-record ............................................................................ 6-9
6.1.11 display voice vcc ................................................................................................. 6-13
6.1.12 gw-access-number.............................................................................................. 6-16
6.1.13 password-digit ..................................................................................................... 6-17
6.1.14 process-config ..................................................................................................... 6-18
6.1.15 redialtimes ........................................................................................................... 6-19
6.1.16 reset voice vcc..................................................................................................... 6-20
6.1.17 selectlanguage .................................................................................................... 6-21
Chapter 7 GK Client Configuration Commands ......................................................................... 7-1

7.1 GK Client Configuration commands .................................................................................. 7-1
7.1.1 area-id (in Voice GK Client View)............................................................................ 7-1
7.1.2 debugging voice ras ................................................................................................ 7-2
7.1.3 display voice gateway ............................................................................................. 7-2
7.1.4 gk-client ................................................................................................................... 7-3
vi
7.1.5 gk-2nd-id ................................................................................................................. 7-4

7.1.6 gk-id......................................................................................................................... 7-5
7.1.7 gk-security call......................................................................................................... 7-5
7.1.8 gk-security register-pwd .......................................................................................... 7-6
7.1.9 gw-address.............................................................................................................. 7-7
7.1.10 gw-id...................................................................................................................... 7-8
7.1.11 ras-on .................................................................................................................... 7-8
Chapter 8 SIP Client Commands ................................................................................................. 8-1

8.1 SIP Client Commands ....................................................................................................... 8-1
8.1.1 address sip .............................................................................................................. 8-1
8.1.2 debugging voice sip ................................................................................................ 8-2
8.1.3 display voice sip call-statistics................................................................................. 8-2
8.1.4 early-media-183 ...................................................................................................... 8-6
8.1.5 early-media disable ................................................................................................. 8-7
8.1.6 mode (SIP Client) .................................................................................................... 8-7
8.1.7 register-enable ........................................................................................................ 8-8
8.1.8 reset voice sip ......................................................................................................... 8-9
8.1.9 sip............................................................................................................................ 8-9
8.1.10 sip-call ................................................................................................................. 8-10
8.1.11 sip-comp.............................................................................................................. 8-10
8.1.12 sip-comp agent.................................................................................................... 8-11
8.1.13 sip-domain........................................................................................................... 8-12
8.1.14 sip-id.................................................................................................................... 8-12
8.1.15 sip-server............................................................................................................. 8-13
8.1.16 source-ip.............................................................................................................. 8-14
8.1.17 wildcard-register enable ...................................................................................... 8-15
vii
Comware V3 Chapter 1 VoIP Configuration Commands
Chapter 1 VoIP Configuration Commands
1.1 VoIP Configuration Commands

1.1.1 address
Syntax
address { ip ip-address | ras }

undo address { ip | ras }
View
Voice entity view
Parameter
ip ip-address: Indicate a VoIP dial entity session destination, i.e. the called IP address.
ras: Router uses RAS recommendation to interact information with GK Server to map
the called phone number to the IP address of peer voice gateway. It is used only in the
networking configuration that uses GK (gatekeeper) to provide voice IP services.
Description
Use the address command to configure the voice routing policy to the peer voice
gateway.
Use the undo address command to cancel the voice routing policy that has been
configured.
By default, no routing policy is configured.
This command is used to configure the network address for the VolP voice entity. The
system supports the following two VolP routing policies at present.
z Static routing policy: Find the IP address of destination voice gateway in static
mode according to address ip ip-address command.
z Dynamic routing policy: The router and GK Server interact with RAS information
after the address ras command is configured. GK will dynamically send back the
peer voice gateway address that matches the called number to the router.
Related command: address sip, match-template.
Example
# Configure the destination IP address corresponding to the called 12345 as 10.1.1.2.

[H3C-voice-dial-entity1] match-template 12345
[H3C-voice-dial-entity1] address ip 10.1.1.2
1-1
1.1.2 area
Syntax
area { north-america | custom | europe }

undo area
View
Voice subscriber-line view
Parameter
north-america: Busy tone type of the switch connected to this subscriber-line is of

North America standard.
custom: Busy tone type of the switch connected to this subscriber-line is defined by the
users.
europe: Busy tone type of the switch connected to this subscriber-line is of Europe
standard.
Description
Use the area command to configure the type of busy tone detection for FXO voice
subscriber-line.
Use the undo area command to restore the default value.
By default, europe busy tone type standard is set.
This command is used only for 2-wire loop trunk subscriber-line FXO, and it can only
perform configuration to the first voice subscriber-line on the voice card. If successful,
the configuration will be effective for all the voice subscriber-lines of the voice card.
When this subscriber-line is connected to a common user line of a program-controlled
switch, if the user on the switch side hooks on first, only by detecting the busy tone can
the router know the user on-hooking operation. Since different switches execute
different prompt tone schemes, there exist different frequency spectrum characteristics.
This command is used to set the frequency spectrum characteristic used by the router
to detect the existence of the busy tone.
Example
# Use north-america standard to detect the existence of the busy tone on voice
subscriber-line 0/0/1.
[H3C-voice-line0/0/1] area north-america
1-2
1.1.3 area-id (in Voice Entity View)
Syntax
area-id string
undo area-id
View
Voice entity view
Parameter
string: Area ID, an integer in the range of 0 to 9. The “#” can be used.
Description
Use the area-id command to configure the area ID of voice GW.

Use the undo area-id command to cancel the specified area ID.
By default, no area ID of voice GW is configured.
The voice area ID is set in VoIP voice entity view and will be automatically added to the
beginning of called numbers when establishing calls.
Related command: match-template, entity.
Example
# Configure the VoIP voice entity 101 with the area ID 6#.
[H3C-voice-dial-entity101] area-id 6#
1.1.4 busytone-t-th
Syntax
busytone-t-th time-threshold
undo busytone-t-th
View
FXO voice subscriber-line view
Parameter
time-threshold: Threshold of busy tone detection. It ranges from 2 to 12, with a bigger
value meaning longer detection time. The threshold defaults to 2, that is, the device
hangs up upon two contiguous detections of busy tone.
Description
Use the busytone-t-th command to configure the threshold of busy tone detection.
1-3
Use the undo busytone-t-th command to restore the default.

The actual busy tone data does not always match the configured parameter. If the
difference is large, detection inaccuracy may occur, resulting in on-hook failure or
improper on-hook. You can however, tune the threshold of busy tone detection to
achieve detection accuracy. For example, you can eliminate improper on-hooks caused
by busy tone data inaccuracy by increasing the time for busy tone detection.
Note that before you configure a threshold of busy tone detection, you must test it fully
making sure that on-hook operation can be done properly.
Example
# Set the threshold of busy tone detection to 3.

[H3C-voice-line0] busytone-t-th 3
1.1.5 caller-permit
Syntax
caller-permit calling-string
undo caller-permit { calling-string | all }
View
Voice entity view
Parameter
all: All callers.

calling-string: Calling numbers that are permitted to call in, in the format of { [ + ] string
[ $ ]| $ }. The largest length of the string is 31. The symbols are described in the
following:
z +: Appears at the beginning of a calling number to indicate that the number is
E.164-compliant.
z $: As the last character to indicate the end of the number. That means the entire
calling number must match all the characters before “$” in the string. If there is only
“$” in the string, the calling number can be empty.
z string: A string composed of any characters of “0123456789ABCD#*.!+%[]()-”.
The meanings of the characters are described in the following table:
Table 1-1 Meanings of the characters in string
Character Meaning
0-9 Numbers from 0 to 9. Each means a digit.
ABCD Each character means a digit.

# and * Each means a valid digit.
1-4
Character Meaning
A wildcard. It can match any digit of a valid number. For
. example, 555. . . . matches any string that begins with 555 and
with four additional characters.
The character or characters right in front of it does not appear
! or appears once. For example, 56!1234 can match 51234 and
561234.
The character or characters right in front of it appears once or
+ several times. But its appearance at the beginning of the whole
number means the number is E.164-compliant.
Hyphen. It connects two values (the smaller one before it and
- the bigger one after it) to indicate a range. For example, “1-9”
means numbers from 1 to 9 (inclusive).
The character or characters right in front of it does not appear,
%
or appears once or several times.
Selects one character from the group. For example, [1-36A]
[]
can match only one character among 1, 2, 3, 6, and A.
A group of characters. For example, (123A) means a string

“123A”. It is usually used with “!”, “%”, and “+”. For example,
() “408(12)+” can match 40812 or 408121212. But it cannot
match 408. That is, “12” can appear continuously and it must
at least appear once.
Note:
z The character or characters in front of "!”, “%”, and “+” are not to be matched
accurately. They are handled similar to the wildcard “.”. Moreover, these symbols
cannot be used alone. There must be a valid digit or digits in front of them.
z If you want to use “[ ]” and “( )” at the same time, you must use them in the format
“( [ ] )”. Other formats, such as “[ [ ] ]” and “[ ( ) ]” are illegal.
z “-“ can only be used inside “[ ]”, and it only connects the same type of characters,
such as “0-9”. The formats like “0-A” are illegal.
Description
Use the caller-permit command to configure the calling numbers that are permitted to
call in.
Use the undo caller-permit command to delete the calling numbers that are permitted
to call in.
By default, no calling number is configured. That means there is no limitation on calling
numbers.
1-5
You can configure 32 calling numbers for a voice entity at most. If you only use “$”,
empty calling numbers are permitted to call in.
Related command: match-template.
Example
# Configure voice entity 2 to permit 660268 or empty calling numbers to call in.
[H3C-voice-dial-entity2] caller-permit 660268$
[H3C-voice-dial-entity2] caller-permit $
# Configure voice entity 2 to permit the calling numbers beginning with 20 to call in.
[H3C-voice-dial-entity2] caller-permit 20
1.1.6 cid display
Syntax
cid display
undo cid display
View
Parameter
None
Description
Use the cid display command to enable caller identification display.

Use the undo cid display command to disable caller identification display.
By default, caller identification display is enabled.
This command is applicable to FXS subscriber-lines.
When functioning as the called, the FXS module can send caller identification
information to its called phone between the first and second rings. When disabled to
send caller identification information, the FXS interface sends the character “P”
received from the IP side instead. Thus, the called phone is unable to display caller
identification information.
Example
# Enable caller identification display on voice subscriber-line 1/0/0.

[H3C-voice-line1/0/0] cid display
1-6
1.1.7 cid enable
Syntax
cid enable
undo cid enable
View
Parameter
None
Description
Use the cid enable command to enable CID on the FXO interface.
Use the undo cid enable command to disable CID on the FXO interface.
By default, CID is enabled on the FXO interface.
This command applies to FXO voice subscriber-lines only.
With CID enabled, the FXO interface can receive the modulated caller identification
data from an analog line between the first ring and second rings and then send the data
demodulated with FSK to the IP side.
With CID disabled, the local FXO interface does the following when the calling party
sends a calling number:
z If a number is configured in the match template for the POTS entity associated
with the local FXO interface, the interface substitutes this number for the calling
number and sends it to the called side.
z If wildcard dots (.) are used in the number configured in the match template for the
POTS entity associated with the local FXO interface, the interface substitutes
zeros for the calling number’s digits in the place of dots, for example, 1000 for 1…
and then sends the substitution number to the called side.
Example
# Enable CID on FXO voice subscriber-line 1/0/0.

[H3C-voice-line1/0/0] cid enable
1.1.8 cid send
Syntax
cid send
undo cid send
1-7
View
Parameter
None
Description
Use the cid send command to enable the FXO or FXS module to send calling numbers
to the IP side.
Use the undo cid send command to disable the FXO or FXS module to send calling
numbers to the IP side.
By default, calling numbers are sent to the IP side.
This command applies to FXS and FXO subscriber-lines only.
After you configure the undo cid send command, the FXO interface does not send any
number to the called side, regardless of whether the calling party has sent a calling
number and regardless of whether a number is configured in the match template for the
voice entity associated with the FXO interface.
Example
# Enable the FXO voice subscriber-line 3/0/0 to send calling numbers to the IP side.
[H3C-voice-line3/0/0] cid send
# Disable the FXS voice subscriber-line 1/0/0 to send calling numbers to the IP side.
[H3C-voice-line1/0/0] undo cid send
1.1.9 cid type
Syntax
cid type { complex | simple }
View
Parameter
complex: Caller identification information is transmitted in multiple-data message

format (MDMF).
simple: Caller identification information is transmitted in single-data message format
(SDMF).
1-8
Description
Use the cid type command to configure the format of transmitted information about the
calling party.
Two formats are available: multiple data message format (MDMF) and single data
message format (SDMF). When the remote end supports one format only, you must
use the same setting at the local end.
This command applies to both FXO and FXS subscriber-lines.
Example
# Set the format of the transmitted caller identification information to SDMF on voice
subscriber line 1/0/0.
[H3C-voice-line1/0/0] cid type simple
1.1.10 cng-on
Syntax
cng-on
undo cng-on
View
Parameter
None
Description
Use the cng-on command to enable comfort noise function.

Use the undo cng-on command to disable the comfort noise function,.
By default, comfort noise setting is enabled.
This command is applicable to FXO, FXS, E&M subscriber-lines and digital E1 voice
subscriber-line. When the silence detecting function on a corresponding voice entity is
enabled, some background noise can be generated by using the command to fill the
toneless intervals during a conversation. If no comfort noise is generated, the toneless
intervals during a conversation will cause the interlocutors uncomfortable.
Related command: subscriber-line and vad-on.
Example
# Disable comfort noise function on subscriber line 1/0/0.

[H3C-voice-line1/0/0] undo cng-on
1-9
1.1.11 compression
Syntax
compression { 1st-level | 2nd-level | 3rd-level | 4th-level } { g711alaw | g711ulaw |

g723r53 | g723r63 | g729a | g729r8 | g729ab | g729br8 | g726r16 | g726r24 |
g726r32 | g726r40 }
undo compression { 1st-level | 2nd-level | 3rd-level | 4th-level }
View
Voice entity view
Parameter
1st-level: Indicates the first selected voice compression method.

2nd-level: Indicates the second selected voice compression method.
3rd-level: Indicates the third selected voice compression method.
4th-level: Indicates the fourth selected voice compression method.
g711alaw: Specifies G.711 A-law coding (defining the pulse code modulation
technology), requiring the bandwidth of 64 kbps, usually adopted by Europe.
g711ulaw: Specifies G.711μ-law coding, requiring the bandwidth of 64 kbps, usually
adopted in the North America and Japan.
g723r53: Specifies G.723.1 Annex A coding, requiring the bandwidth of 5.3 kbps.
g723r63: Specifies G.723.1 Annex A coding, requiring the bandwidth of 6.3 kbps.
g729a: Specifies G.729 Annex A coding (a simplified version of G.729 coding), requiring
the bandwidth of 8 kbps.
g729r8: Specifies G.729 (the voice coding technology using conjugate
algebraic-code-excited linear-prediction) coding, requiring the bandwidth of 8 kbps.
g729ab: Adds G.729 Annex B coding on the basis of G.729a.
g729br8: Specifies G.729 Annex B coding, requiring the bandwidth of 8 kbps. This
coding supports voice activity detection (VAD), discontinuous transmission (DTX), and
comfort noise (CNG).
g726r16: Specifies G.726 Annex A coding. It uses the adaptive differential pulse code
modulation (ADPCM) technology, requiring the bandwidth of 16 kbps.
g726r24: Specifies G.726 Annex A coding. It uses ADPCM, requiring the bandwidth of
24 kbps.
32 kbps.
40 kbps.
1-10
Description
Use the compression command to configure the voice coding method according to
priority level.
Use the undo compression command to restore the default value.
By default, g729r8 coding mode is set.
g711alaw and g711ulaw coding provide high-quality voice transmission, while
requiring greater bandwidth.
g726r16, g726r24, g726r32, and g726r40 are widely adopted now for voice coding.
They use the ADPCM technology and provide multiple bandwidth options.
g723r53 and g723r63 coding provide silence suppression technology and comfort
noise, the relatively higher speed output is based on multi-pulse multi-quantitative level
technology and provides relatively higher voice quality to certain extent, and the
relatively lower speed output is based on the Algebraic-Code-Excited Linear-Prediction
technology and provides greater flexibility for application.
The voice quality provided by the g729r8 and g729a coding is similar to the ADPCM of
32 kbps, having the quality of a toll, and also featuring low bandwidth, lesser event
delay and medium processing complexity, hence it has a wide field of application.
clear-channel is clear channel transmission, which is a kind of data transmission
technology via VOIP. The data received from BRI or PRI is sent to IP network after
encapsulation without being dealt with.
The following table describes the relation between codec algorithms and bandwidth.
Usually, 8000 Hz is adopted to collect voice samples. The bandwidth without
compression is 64 kbps, and it is compressed using the ITU-T G series codec
algorithms. The table also shows the compression ratio.
Table 1-2 Relation between algorithms and bandwidth
Codec algorithm Bandwidth Voice quality

G.711 (A-law and µ-law) 64 kbps (without compression) Best
G.726 16, 24, 32, 40 kbps Good
G.729 8 kbps Good
G.723 r63 6.3 kbps Fair
G.723 r53 5.3 kbps Fair
Actual network bandwidth is related to packet assembly interval and network structure.
The longer the packet assembly interval is, the closer the network bandwidth is to the
media stream bandwidth. More headers consume more bandwidth. Longer packet
assembly interval results in longer fixed coding latency.
1-11
The following tables show the relevant packet assembly parameters without IPHC
compression, including packet assembly interval, bytes coded in a time unit, and
network bandwidth, etc. Thus, you can choose a suitable codec algorithm according to
idle and busy status of the line and network situations more conveniently.
Table 1-3 G.711 algorithm (A-law and µ-law)
Packet Bytes Packet Network Packet Network

Coding
assembly coded in a length bandwidt length bandwidt
latency
interval time unit IP h IP IP+PPP h IP+PPP
100.8
10 ms 80 120 96 kbps 126 10 ms
kbps
20 ms 160 200 80 kbps 206 82.4 kbps 20 ms
30 ms 240 280 74.7 kbps 286 76.3 kbps 30 ms
G.711 algorithm (A-law and µ-law): media stream bandwidth 64kbps, minimum
packet assembly interval 10 ms.
Table 1-4 G.729 algorithm

Coding
latency
10 ms 10 50 40 kbps 56 44.8 kbps 10 ms
20 ms 20 60 24 kbps 66 26.4 kbps 20 ms
30 ms 30 70 18.7 kbps 76 20.3 kbps 30 ms

G.729 algorithm: media stream bandwidth 8 kbps, minimum packet assembly
interval 10 ms.
Table 1-5 G.723 r63 algorithm

Coding
latency
30 ms 24 64 16.8 kbps 70 18.4 kbps 30 ms
60 ms 48 88 11.6 kbps 94 12.3 kbps 60 ms
90 ms 72 112 9.8 kbps 118 10.3 kbps 90 ms
G.723 r63 algorithm: media stream bandwidth 6.3 kbps, minimum packet assembly
interval 30 ms.
1-12

Coding
latency
30 ms 20 60 15.9 kbps 66 17.5 kbps 30 ms
60 ms 40 80 10.6 kbps 86 11.4 kbps 60 ms
90 ms 60 100 8.8 kbps 106 9.3 kbps 90 ms
G.723 r53 algorithm: media stream bandwidth 5.3 kbps, minimum packet assembly
interval 30 ms.

Coding
latency
10 ms 20 60 48 kbps 66 52.8 kbps 10 ms
20 ms 40 80 32 kbps 86 34.4 kbps 20 ms
30 ms 60 100 26.7 kbps 106 28.3 kbps 30 ms

40 ms 80 120 24 kbps 126 25.2 kbps 40 ms
50 ms 100 140 22.4 kbps 146 23.4 kbps 50 ms
60 ms 120 160 21.3 kbps 166 11.4 kbps 60 ms

70 ms 140 180 20.6 kbps 186 21.3 kbps 70 ms
80 ms 160 200 20 kbps 206 20.6 kbps 80 ms
90 ms 180 220 8.8 kbps 226 9.3 kbps 90 ms

100 ms 200 240 19.2 kbps 246 19.7 kbps 100 ms
110 ms 220 260 18.9 kbps 266 19.3 kbps 110 ms
G.726 r16 algorithm: media stream bandwidth 16 kbps, minimum packet assembly
interval 10 ms.

Coding
latency
10 ms 30 70 56 kbps 76 60.8 kbps 10 ms
20 ms 60 100 40 kbps 106 42.4 kbps 20 ms
30 ms 90 130 34.7 kbps 136 17.5 kbps 30 ms
40 ms 120 160 32 kbps 166 33.2 kbps 40 ms
1-13

Coding
latency
50 ms 150 190 30.4 kbps 196 31.2 kbps 50 ms
60 ms 180 220 29.3 kbps 226 11.4 kbps 60 ms
70 ms 210 250 28.6 kbps 256 30.1 kbps 70 ms
interval 10 ms.

Coding
latency
10 ms 40 80 64 kbps 86 68.8 kbps 10 ms
20 ms 80 120 48 kbps 126 50.4 kbps 20 ms
30 ms 120 160 42.7 kbps 166 44.3 kbps 30 ms
40 ms 160 200 40 kbps 206 41.2 kbps 40 ms
50 ms 200 240 38.4 kbps 246 39.4 kbps 50 ms

interval 10 ms.

Coding
latency
10 ms 50 90 72 kbps 96 76.8 kbps 10 ms
20 ms 100 140 56 kbps 146 58.4 kbps 20 ms
30 ms 150 190 50.7 kbps 196 52.3 kbps 30 ms
40 ms 200 240 48 kbps 246 49.2 kbps 40 ms

interval 10 ms.
1-14
Note:
z Packet assembly interval is the duration to encapsulate information into a voice
packet.
z Bytes coded in a time unit = packet assembly interval X media stream bandwidth.
z Packet length (IP) = IP header + RTP header + UDP header + voice information
length = 20+12+8+data
z Packet length (IP+PPP) = PPP header + IP header + RTP header + UDP header +
voice information length = 6+20+12+8+data
z Network bandwidth = Bandwidth of the media stream X packet length / bytes coded
in a time unit
Since IPHC compression is affected significantly by network stability, it cannot achieve

high efficiency unless line is of high quality, network is very stable, and packet loss does
not occur or seldom occurs. When the network is unstable, IPHC efficiency drops
drastically. With best IPHC performance, IP (RTP) header can be compressed to 2
bytes. If PPP header is compressed at the same time, a great deal of media stream
bandwidth can be saved. The following table shows the best IPHC compression
efficiency of codec algorithms with packet assembly interval of 30ms.
Table 1-11 Compression efficiency of IPHC+PPP header
After IPHC+PPP
Before compression
Bytes compression
Coding
coded in a Packet Network Packet Network
modes
time unit length bandwidth length bandwidth
IP+PPP IP+PPP IP+PPP IP+PPP
G.729 30 76 20.3 kbps 34 9.1 kbps
G.723r63 24 70 18.4 kbps 28 7.4 kbps
G.723r53 20 66 17.5 kbps 24 6.4 kbps

G.726r16 60 106 28.3 kbps 64 17.1 kbps
G.726r24 90 136 17.5 kbps 94 25.1 kbps
G.726r32 120 166 44.3 kbps 124 33.1 kbps

G.726r40 150 196 52.3 kbps 154 41.1 kbps
Only when there is an intersection (a compression mode recognized by both parties) in

the voice compression modes owned by the two communication parties can the two
parties establish normal communication with each other. If there is no consistency in
the compression modes set for the equipment at the two ends connected to each other,
or there is no common compression method, the calling will fail.
1-15
Example
# Configure to select g723r53 compression method first, then to select the g729r8
compression method.
[H3C-voice-dial-entity1] compression 1st-level g723r53
[H3C-voice-dial-entity1] compression 2nd-level g729r8
1.1.12 cptone
Syntax
cptone { locale | cs } [ { type | all } amplitude value ]

undo cptone [ { locale | cs } { type | all } amplitude ]
View
Parameter
Locale: Country mode, sets the prompt tone played on the current voice subscriber-line
to the specified country or area mode. Now, it supports up to 62 countries or areas.
cs: Custom, sets the prompt tone played on the current voice subscriber-line to the
customer-defined mode.
Type: Tone type, Now, it supports the following: dial-tone, special-dial-tone, busy-tone,
congestion tone, ringback-tone, waiting-tone.
all: All types of tone.
amplitude value: Sets the tone amplitude, in the range 200 to 2000. Sets the tone
amplitude for each tone type: busy-tone and congestion-tone default to 1000, the
others default to 600.
Table 1-12 Country mode of prompt tone
Type of prompt tone Description

AR Argentina
AU Australia
AT Austria
BE Belgium
BR Brazil
BG Bulgaria
CA Canada
CL Chile
CN China
1-16

HR Croatia
CU Cuba
CS Custom
CY Cyprus
CZ Czech Republic
DK Denmark
EG Egypt
FI Finland
FR France
DE Germany
GH Ghana
GR Greece
HK Hong Kong China
HU Hungary
IS Iceland
IN India
ID Indonesia
IR Iran
IE Ireland
IEU Ireland UK style
IL Israel
IT Italy
JP Japan
JO Jordan
KE Kenya
KR Korea Republic
LB Lebanon
LU Luxembourg
MY Malaysia
MX Mexico
NP Nepal
NL Netherlands
1-17

NZ New Zealand
NG Nigeria
NO Norway
PK Pakistan
PA Panama
PH Philippines
PL Poland
PT Portugal
RU Russian Federation
SA Saudi Arabia
SG Singapore
SK Slovakia
SI Slovenia
ZA South Africa
ES Spain
SE Sweden
CH Switzerland
TH Thailand
TR Turkey
GB United Kingdom
US United States
UY Uruguay
ZW Zimbabwe
Description
Use the cptone command to set the prompt tone played on the current voice
subscriber-line to the specified country mode or customer-defined mode.
Use the undo cptone command to restore the default, that is, CN.
1-18
Note:
The command will be valid for all the voice ports on the veneer of the current voice
subscriber-lines.
Example
# Set the country mode of prompt tone to US.

[H3C-voice-line1/0/0] cptone us.
1.1.13 debugging voice cm
Syntax
debugging voice cm { all | error | message | event | fsm | timer }

undo debugging voice cm { all | error | message | event | fsm | timer }
View
User view
Parameter
all: Enables debugging on all CM debugging.

error: Enables debugging on CM errors.
message: Enables debugging for the detailed information received and transmitted by
CM.
event: Enables debugging on the “event” information received and transmitted by CM.
fsm: Enables debugging for “state” transition information in CM state machine.
timer: Enables information debugging for the timer on the state machine in CM.
Description
Use the debugging voice cm command to enable debugging for CM.

Use the undo debugging voice cm command to disable the debugging.
By default, CM module debugging is disabled.
Example
# Enable all debugging on CM.

[H3C] debugging voice cm all
1-19
1.1.14 debugging voice data-flow
Syntax
debugging voice data-flow { all | verbose | error | fax | fax-error | jitter | jitter-error
| receive | send | vpp }
View
User view
Parameter
all: Enable debugging on all voice data processes.

verbose: Enable debugging on detailed information of voice packets.
error: Enable debugging on voice data errors.
fax: Enable debugging for fax data stream.
fax-error: Enable debugging on fax data errors.
jitter: Enable jitter buffer debugging.
jitter-error: Enable debugging for jitter buffer processing errors.
receive: Enable debugging output at the receiving side of the data stream.
send: Enable debugging at the sending side of the data stream.
vpp: Enable debugging on the data stream of VPP software module.
Description
Use the debugging voice data-flow command to enable debugging for voice data
processes.
Use the undo debugging voice data-flow command to disable the debugging.
Example
# Enable debugging on all voice data processes.

<H3C> debugging voice data-flow all
1.1.15 debugging voice dpl
Syntax
debugging voice dpl { all | error | general }
View
User view
1-20
Parameter
all: Enable all debugging of voice dial program.

error: Enable error debugging of voice dial program.
general: Enable general debugging of voice dial program.
Description
Use the debugging voice dpl command to enable the debugging of voice dial
program.
Use the undo debugging voice dpl command to disable the debugging.
Example
# Enable all debugging of voice dial program.

<H3C> debugging voice dpl all
1.1.16 debugging voice h225
Syntax
debugging voice h225 { asn1 | event }
View
User view
Parameter
asn1: Information related to negotiation messages is output.

event: Information related to negotiation events is output.
Description
Use the debugging voice h225 command to enable debugging for the H.225.0
negotiation messages or events.
Use the undo debugging voice h225 command to disable the debugging.
Example
# Enable H.225 negotiation events debugging.

<H3C> debugging voice h225 event
1.1.17 debugging voice h245
Syntax
debugging voice h245 | event
1-21
View
User view
Parameter
event: Information related to negotiation events is output.
Description
Use the debugging voice h245 command to enable debugging for the H.245
negotiation messages or events.
Use the undo debugging voice h245 command to disable the debugging.
Example
# Enable H.245 negotiation events debugging.

<H3C> debugging voice h245 event
1.1.18 debugging voice ipp
Syntax
debugging voice ipp { all | error | rtp-rtcp | socket | vcc | vpp | x691 }
View
User view
Parameter
all: Enable all debugging for IPP module.

error: Enable error debugging for IPP module.
rtp-rtcp: Enable RTP/RTCP information debugging.
socket: Enable Socket information debugging.
vcc: Enable VCC message receiving and sending debugging.
vpp: Enable VCC message receiving and sending debugging.
x691: Enable X.691 message debugging.
Description
Use the debugging voice ipp command to enable H.323 recommendation suite
module debugging.
Use the undo debugging voice ipp command to disable this debugging.
Example
# Enable all debugging on IPP module.
1-22
<H3C> debugging voice ipp all
1.1.19 debugging voice rcv
Syntax
debugging voice rcv { all | cc | error | r2 | timer | vas | vcc | vpp }
View
User view
Parameter
all: Enables all the debugging of the RCV module.

cc: Enables the debugging between the RCV module and the underlying CC module.
error: Enables the debugging of RCV-caused connection failures.
r2: Displays information between the RCV module and the R2 module.
timer: Enables the debugging for the timer operation of the RCV module.
vas: Enables the debugging between the RCV module and the underlying VAS
module.
vcc: Enables the debugging between RCV and the underlying VCC module.
vpp: Enables the debugging between the RCV module and the underlying VPP
module.
Description
Use the debugging voice rcv command to enable the debugging of the RCV module.
Use the undo debugging voice rcv command to disable the debugging.
Example
# Enable all the debugging of the RCV module.

<H3C> debugging voice rcv all
1.1.20 debugging voice vas
Syntax
debugging voice vas { all | buffer | cid | command | dsp | em | error | fax | line | rcv
| receive | send }
View
User view
1-23
Parameter
all: Enable all the debugging of the VAS module.

buffer: Enable the debugging of the buffer area for the VAS module to transmit
commands to the DSP module.
cid: Enable VAS CID debugging
command: Enable the debugging between the VAS module and the command buffer
area.
dsp: Enable the debugging between the VAS module and the underlying DSP module.
em: Enable the debugging of the EM subscriber-line operation of the VAS module.
error: Enable the debugging of the connection failure caused by the VAS module.
fax: Enable VAS fax debugging.
line: Enable the debugging for the VAS module to log on to a specified line.
rcv: Enable the debugging between VAS and RCV.
receive: Enable the debugging for the VAS module to receive data.
send: Enable the debugging for the VAS module to transmit data.
Description
Use the debugging voice vas command to enable the VAS module debugging.
Use the undo debugging voice vas command to disable the debugging.
Example
# Enable all the debugging of the VAS module.

<H3C> debugging voice vas all
1.1.21 debugging voice vmib
Syntax
debugging voice vmib { aaaclient | all | analogif | callactive | callhistory |

dialcontrol | digitalif | error | general | gkclient | h323statistic | voiceif }
undo debugging voice vmib { aaaclient | all | analogif | callactive | callhistory |
dialcontrol | digitalif | error | general | gkclient | h323statistic | voiceif }
View
User view
Parameter
aaaclient: Enable the debugging of the AAA client.

all: Enable all the debugging of the voice MIB.
1-24
analogif: Enable the debugging of the analog voice interfaces.

callactive: Enable the debugging of the current call.
callhistory: Enable the debugging of the history calls.
dialcontrol: Enable the dialing debugging.
error: Enable debugging for voice MIB errors.
general: Enable the general voice MIB debugging.
gkclient: Enable the GK client debugging.
h323statistic: Enable debugging for 323 statistics.
voiceif: Enable the voice interface debugging.
Description
Use the debugging voice vmib command to enable the voice MIB module debugging.
Use the undo debugging voice vmib command to disable the debugging.
Example
# Enable all voice MIB debugging.

<H3C> debugging voice vmib all
1.1.22 debugging voice vpp
Syntax
debugging voice vpp { all | codecm | error | ipp | r2 | rcv | timer | vas | vcc }
View
User view
Parameter
all: Enable all the debugging of the VPP module.

codecm: Enable the debugging between the VPP module and the underlying
CODECM module.
error: Enable the debugging of the connection failure of the VPP module.
ipp: Enable the debugging between the VPP module and the upper layer IPP module.
r2: Enable the debugging of information between VPP and R2
rcv: Enable the debugging between the VPP module and the RCV module
timer: Enable the debugging for the timer operation of the VPP module.
vas: Enable the debugging between the VPP module and the VAS module.
vcc: Enable the debugging of information between VPP and VCC
1-25
Description
Use the debugging voice vpp command to enable the debugging of the VPP module.
Use the undo debugging voice vpp command. you can disable the debugging switch.
Example
# Enable all the debugging of the VPP module.

<H3C> debugging voice vpp all
1.1.23 default entity compression
Syntax
default entity compression { 1st-level | 2nd-level | 3rd-level | 4th-level } { g711alaw

| g711ulaw | g723r53 | g723r63 | g729a | g729r8 | g729ab | g729br8 | g726r16 |
g726r24 | g726r32 | g726r40 }
undo default entity compression { 1st-level | 2nd-level | 3rd-level | 4th-level }
View
Voice dial program view
Parameter
Refer to the compression command.
Description
Use the default entity compression command to globally configure the mode of
coding and decoding as the default value.
Use the undo default entity compression command to restore the fixed value (i.e.
g729r8 code mode) in the system as the default value.
By default, the mode of coding and decoding is g729r8 coding mode.
The default entity compression command can be used to globally configure the
default value of the voice coding and decoding. In this case, all the voice entities and
newly created voice entities on this router, which have not been configured with this
function will inherit this configuration.
Related command: compression.
Example
# Adopt the g723r53 coding and decoding mode as the first selection globally.
[H3C-voice-dial] default entity compression 1st-level g723r53
1-26
1.1.24 default entity normal-connect slow-h245
Syntax
default entity normal-connect slow-h245

undo default entity normal-connect slow-h245
View
Parameter
None
Description
Use the default entity normal-connect slow-h245 command to globally disable the
calling end from actively initiating an H245 connection request to the called end before
the called end is hooked off.
Use the undo default entity normal-connect slow-h245 command to restore the
default value (that is, to allow the calling end to actively initiate an H245 connection
request to the called end before the called end is hooked off.).
By default, the calling end is allowed to actively initiate an H245 connection request to
the called end before the called end is hooked off.
Use the default entity normal-connect slow-h245 command to default to globally
disable the calling end from actively initiating the H245 connection request to the called
end before the called end is hooked off. In this case, all newly created voice entities and
voice entities which have not been configured with this function will inherit this
configuration.
Related command: normal-connect slow-h245.
Example
# Configure to globally disable the calling end from actively initiating an H245
connection request to the called end before the called end is hooked off.
[H3C-voice-dial] default entity normal-connect slow-h245
1.1.25 default entity payload-size
Syntax
default entity payload-size { g711 | g723 | g726r16 | g726r24 | g726r32 | g726r40 |

g729 }
undo default entity payload-size { g711 | g723 | g726r16 | g726r24 | g726r32 |
g726r40 | g729 }
1-27
View
Parameter
g711: Specifies the time length of voice packets with g711 coding. It can be 10
milliseconds, 20 milliseconds (the default), or 30 milliseconds.
g723: Specifies the time length of voice packets with g723 coding, in the range 30 to
180 milliseconds. It defaults to 30 milliseconds.
g726r16: Specifies the time length of voice packets with g726r16 coding. It ranges from
10 to 110 milliseconds and defaults to 30 milliseconds.
g729: Specifies the time length of voice packets with g729 coding, in the range10 to
180 milliseconds. It defaults to 20 milliseconds.
Description
Use the default entity payload-size command to configure the default time length of
voice packets with different coding formats.
Use the undo default entity payload-size command to restore the default.
Example
# Set the time length of voice packets with G.711 coding to 30 milliseconds.
[H3C-voice-dial] default entity payload-size g711 30
1.1.26 default entity service data
Syntax
default entity service data

undo default entity service data
View
Parameter
None
1-28
Description
Use the default entity service data command to globally configure enabling data call
service.
Use the undo default entity vad-on command to disable the global data call service.
By default, the global data call service is disabled.
Example
# Enable the data call service globally.

[H3C-voice-dial] default entity service data
1.1.27 default entity vad-on
Syntax
default entity vad-on

undo default entity vad-on
View
Parameter
None
Description
Use the default entity vad-on command to globally configure enabling silence
detection as the default value.
Use the undo default entity vad-on command to restore the fixed value (i.e. disabling
the silence detection) to be the default value.
By default, the silence detection is disabled.
The default entity vad-on command is used to globally configure enabling silence
detection as the default value. In this case, all the voice entities and newly created
voice entities on this router, which have not been configured with this function, will
inherit this configuration.
Related command: vad-on.
Example
# Enable the silence detection globally.

[H3C-voice-dial] default entity vad-on
1-29
1.1.28 delay
Syntax
delay { dtmf | dtmf-interval } milliseconds

delay start-dial seconds
undo delay { dtmf | dtmf-interval start-dial }
View
Parameter
dtmf milliseconds: Lasting duration of a DTMF signal on the FXO interface, which is in
the range of 50 to 500ms and defaults to 120ms.
dtmf-interval milliseconds: Interval between two DTMF signals on the FXO interface,
which is in the range of 50 to 500ms and defaults to 120ms.
start-dial seconds: Delay for dialing on the FXO interface. It ranges from 0 to 10
seconds and defaults to 1 second.
Description
Use the delay command to configure the relevant time parameters on an FXO or
analog E&M subscriber-line.
Use the undo delay command to restore the default values of these time parameters.
All the commands listed above are used for configuring the device of a calling party and
hence are only useful for the calling party.
Related command: timer.
Example
# Set the hold time for delay on line 1/0/0 to 5s.

[H3C-voice-line1/0/0] delay start dial 5
1.1.29 delay-reversal
Syntax
delay-reversal seconds
undo delay-reversal
View
Voice subscriber line view
1-30
Parameter
seconds: Length of the timer of polarity-reverse transmission delay, in the range 10 to

30 seconds.
Description
Use the delay-reversal command to configure the timer’s interval of polarity-reverse

transmission delay on FXS interfaces.
Use the undo delay-reversal command to remove the function of polarity-reverse
transmission delay.
This command applies to FXS interfaces.
By default, FXS interfaces immediately send polarity-reverse signal once receiving the
hookoff signal from the remote end without any delay.
Example
# Set the delay interval of voice subscriber line 1 to 15 seconds.

[H3C-voice-line1] delay-reversal 15
1.1.30 description (in Voice Entity View)
Syntax
description string
undo description
View
Voice entity view
Parameter
string: Voice entity description string, with length ranging from 1 to 64 characters.
Description
Use the description command to configure a voice entity description string.

Use the undo description command to delete the voice entity description string.
You can make a description of the voice entity by using the description command. This
operation will not affect the performance of voice entity interfaces at all. You can view its
information when executing the display command.
Example
# Identify voice entity 10 with local-entity 10.

[H3C-voice-dial-entity10] description local-entity10
1-31
1.1.31 description (in Voice Subscriber Line View)
Syntax
description string
undo description
View
Parameter
string: Subscriber-line description character string, and its value range is 1 to 64

characters.
Description
Use the description command to configure a subscriber-line description character

string.
Use the undo description command to cancel the subscriber-line description of
character string.
This command is applicable to FXO, FXS, E1V1 interfaces.
With the description command, make a description of the voice subscriber-line
connection. This operation will not have any influence on the running of voice entities,
only when the display command is being executed will the configuration information be
seen.
Example
# Identify subscriber line 1/0/0 as connected to lab_1.

[H3C-voice-line1/0/0] description lab_1
1.1.32 dial-prefix
Syntax
dial-prefix string
undo dial-prefix
View
Voice entity view
1-32
Parameter
string: Prefix code, a number of fixed length. The string is composed of any characters
from “0123456789 #*”, with the largest length of 31 characters. The meanings of the
characters are shown in the following table.
Character Means

, Pause of 500ms. It can be placed on any position of the number.
# and * Valid digits.
Description
Use the dial-prefix command to configure the prefix of the telephone number dialed by
the voice entity.
Use the undo dial-prefix command to cancel the prefix of the telephone number dialed
by the voice entity.
This command only applies to the configuration of POTS voice entity. And the
dial-prefix command only applies to FXO, BSV and analog E&M interface. Whether to
send a second stage dialing tone is determined by the configuration of the PBX
connected to the router.
When a router with which a voice function is configured receives a voice call, it makes a
comparison between the number configured in the match-template of its own POTS
voice entity and the number received, and selects one POTS voice entity to continue
the call processing.
If send-number is set to its default value (truncate), the router will remove from the
called number the string that matches the match-template beginning from the left. If
the dial-prefix command is configured, the prefix will be added in front of the rest of the
called number. The router will initiate a call according to the new number string. For
example, supposing that the called number is 0102222, the called number template of
the voice entity that is configured by match-template is 010…., and the dial prefix is 0,
then “010” that accurately matches the template will be removed, and the rest part
“2222” will be added a prefix “0”. The router initiates a call to the new number 02222.
If the number with the added prefix contains more than 31 digits, only the first 31
characters will be sent.
Related command: match-template and send-number.
The router will remove the string of the called number that matches the match-template
starting from the left. If a dial-prefix is configured, the prefix will be added before the
1-33
remaining number string, and the router will make a call according to the new string
generated.
Suppose the called number is 0102222, the 010 on the left will be deleted because of
matching with the match-template. The remaining 2222 will be added with a prefix “0”
and will be dialed out again, that is, the number called by the router is 02222.
This command is used only for the POTS voice entity configuration. It is valid only for
FXO and E&M subscriber-lines.
Example
# Use 0 as a prefix.
[H3C-voice-dial-entity3] dial-prefix 0
1.1.33 dial-program
Syntax
dial-program
View
Voice view
Parameter
None
Description
Use the dial-program command to enter the voice dial program view.
Use the quit command to return to the voice view.
Example
# Enter the dial program view.

[H3C-voice] dial-program
1.1.34 display voice call-history-record
Syntax
display voice call-history-record { callednumber number | callingnumber number |

cardnumber number | last number | line number | remote-ip-addr ip-address }
[ brief ]
View
Any view.
1-34
Parameter
callednumber number: Displays the call history of the specified called number.
callingnumber number: Displays the call history of the specified calling number.
cardnumber number: Displays the call history of the specified card number.
last number: Specifies the number of the last call history entries to be displayed.
remote-ip-addr ip-address: Displays the call history of the remote IP address.
brief: Displays information briefly.
Description
Use the display voice call-history-record command to view call history.
Note:
The specified called number cannot be greater than the actual voice subscriber-line
number; otherwise, the input is invalid.
Example
# Display information about the calls on the specified voice subscriber-line.

[H3C] display voice call-history-record line 0
Subscriber-line 0 type FXS POTS , Line state is opened
start outgoing call 72 times, 48 success
receive incoming call 9 times, 6 success
the latest 10 called number is:
%1% called number 900
1-35
Table 1-14 Description on the fields of display voice call-history-record
Field Description
Subscriber-line Index number of the subscriber-line
type Interface type of the subscriber-line
Line state Line status of the subscriber-line
Total number of outgoing calls and number of
start outgoing call
successful outgoing calls on the subscriber-line
Total number of incoming calls and number of
receive incoming call
successful incoming calls on the subscriber-line
The most recent ten called numbers out the
the latest 10 called number
subscriber-line
1.1.35 display voice call-info
Syntax
display voice call-info { brief | verbose | mark tag }
View
Any view
Parameter
brief: Display the call information table in brief.

verbose: Display the call information table in detail.
mark tag: Display the call information table by tag (in the range 0 to 127).
Description
Use the display voice call-info command to view the call information table, including:
channel number of the call, reference counter of all voice modules, module ID in use,
list of the voice entities that can be selected by the current call, and the voice entity
used by the current call.
Example
# Display the call information table of a certain time in brief:

[H3C] display voice call-info brief
The information table for current calls in brief
#
# CALL ( 0): Channel <--> 0
Module ID <--> RCV VAS VPP
End
1-36
# Display the call information table of a certain time in detail:

[H3C] display voice call-info verbose
The information table for current calls in detail
#
**************** CALL 0 ***************
Channel number : 0
Reference counter : 4
Module check ID :
RCV VCC IPP VPP
Current used voice entity: 180
Voice entities are offered:
196 132 124
284 188 180
100
#
**************** CALL 1 ***************
Channel number : 1
Reference counter : 5
Module check ID :
RCV VAS VCC IPP VPP
Current used voice entity : 196
Voice entities are offered :
196 132 124
284
#
End
1.1.36 display voice default
Syntax
display voice default all
View
Any view
Parameter
None
Description
Use the display voice default command to view the current default values and the
system-fixed default values for voice and fax. For example, truncated called number is
used according to the default settings and system-fixed default settings.
1-37
For example, the carrier transmission energy level of GW defaults to 10 (the

system-fixed default value is 15).
Example
# Display the current default values and the system-default default values.
[H3C] display voice default all
default entity fax ecm off(system: off)
default entity fax protocol t38(system: t38)
default entity fax protocol t38 hb-redundancy 0(system: 0)
default entity fax protocol t38 lb-redundancy 0(system: 0)
default entity fax level 15(system: 15)
default entity fax local-train threshold 10(system: 10)
default entity fax baudrate voice(system: voice)
default entity fax nsf-on off(system: off)
default entity fax support-mode rtp(system: rtp)
default entity fax train-mode ppp(system: ppp)
default entity compression 1st-level g729r8(system: g729r8)
default entity compression 2nd-level g711alaw(system: g711alaw)
default entity compression 3rd-level g711ulaw(system: g711ulaw)
default entity compression 4th-level g723r53(system: g723r53)
default entity vad-on off(system: off)
default entity payload-size g711 20(system: 20)
default entity payload-size g726r16 30(system: 30)
Table 1-15 Description on the fields of the display voice default command
Field Description
fax ecm ECM mode is used for Fax
fax protocol Fax protocol for intercommunication
Number of high-speed redundant packets,
fax redundancy hb-redundancy
available for Fax protocol H.323-T.38 or T.38
Number of low-speed redundant packets,
fax redundancy lb-redundancy
available for Fax protocol H.323-T.38 or T.38
fax level Gateway carrier transmitting energy level
fax local-train threshold Fax local training threshold percentage
fax baudrate Highest Fax rate
1-38
Field Description
fax nsf-on Fax capacity negotiation mode
fax support-mode Fax transmission format
fax train-mode Fax training mode
compression 1st-level Voice coding mode of the first priority
compression 2nd-level Voice coding mode of the second priority
compression 3rd-level Voice coding mode of the third priority
compression 4rd-level Voice coding mode of the fourth priority
cancel-truncate Truncation of called number canceled
vad-on Voice entity VAD
fast connect Fast connection of the calling VoIP voice entity
payload-size g711 Voice entity packet assembly interval (G.711)
1.1.37 display voice entity
Syntax
display voice entity { all | pots | voip |vofr| mark entity-tag }
View
Any view
Parameter
all: All voice entities.

pots: All POTS voice entities.
voip: All VoIP voice entities.
vofr: All VoFR voice entities.
mark: Displays a voice entity.
entity-tag: Tag of the voice entity that is to be displayed, ranging from 1 to 2147483647.
Description
Use the display voice entity command to view the configuration information of voice
entities of different types.
Usually, you can view the information of all the interfaces that are active in the router
and the global configuration by executing the display current-configuration
1-39
command. But it will display a great deal of information. So if you just want to view the
configuration information of voice entities, you can use the display voice entity
command.
Example
# Display the configuration information of POTS voice entities.

[H3C] display voice entity pots
Current configuration of entities
!
entity 66 pots
match-template 6600..
shutdown
compression 1st-level g711alaw
dial-prefix 6600
line 6
!
entity 67 pots
match-template 6600..
shutdown
compression 1st-level g711alaw
dial-prefix 6600
line 7
!
End
1.1.38 display voice ipp
Syntax
display voice ipp ccb [channel channel-number]

display voice ipp statistic { all | h225 | h245 | ras | socket | timer | vcc | vpp }
View
Any view
Parameter
ccb: Displays information about the call control block in the IPP module.
channel: Displays information of a voice channel in the IPP module.
statistic: Displays statistics about the IPP module.
all: Displays all statistics about the IPP module.
h225: Displays statistics about H.225 messages.
h245: Displays statistics about H.245 messages.
1-40
ras: Displays statistics about ras messages.

socket: Displays statistics about socket messages.
timer: Displays timeout statistics.
vcc: Displays statistics about messages between the IPP module and the VCC
module.
vpp: Displays statistics about messages between the IPP module and the VPP
module.
Description
Use the display voice ipp command to view statistics about the IPP module.
Example
# Display statistics about H.225 messages of the IPP module.

[VG] display voice ipp statistic h225
statistics about H225 :
{
Send_Setup : 0
Send_CallProceeding : 0
Send_Alerting : 0
Send_Connect : 0
Send_ReleaseComplete : 0
Send_FacilityIndUserInput : 0
Send_FacilityTCSRequest : 0
Send_FacilityTCSAck : 0
Send_FacilityTCSReject : 0
Send_FacilityOLCRequest : 0
Send_FacilityOLCAck : 0
Send_FacilityOLCReject : 0
Send_FacilityMSDRequest : 0
Send_FacilityMSDAck : 0
Send_FacilityMSDReject : 0
Send_FacilityCLCRequest : 0
Send_FacilityCLCAck : 0
Send_FacilityStartH245 : 0
Send_Error : 0
Recv_Setup : 0
Recv_CallProceeding : 0
Recv_Alerting : 0
Recv_Connect : 0
Recv_ReleaseComplete : 0
Recv_Progress : 0
1-41
Recv_FacilityTCSRequest : 0
Recv_FacilityTCSAck : 0
Recv_FacilityTCSReject : 0
Recv_FacilityOLCRequest : 0
Recv_FacilityOLCAck : 0
Recv_FacilityOLCReject : 0
Recv_FacilityMSDRequest : 0
Recv_FacilityMSDAck : 0
Recv_FacilityMSDReject : 0
Recv_FacilityCLCRequest : 0
Recv_FacilityCLCAck : 0
Recv_Unknow : 0
}
1.1.39 display voice number-substitute
Syntax
display voice number-substitute [ list-tag ]
View
Any view
Parameter
list-tag: Serial number of the number-substitute list, ranging from 1 to 2147483647.
Description
Use the display voice number-substitute command to view the configuration

information of number-substitute lists. It can display the information of a certain list and
all the lists.
Related command: number-substitute.
Example
# Display all the configured number-substitute lists.

[H3C] display voice number-substitute
Current configuration of number substitute
!
************ NUMBER-SUBSTITUTE ************
List-tag : 1
First-rule : INDEX_INVALID
Dot-match : end-only
rule 0
Input-format : ^011408
1-42
Output-format : 1408
!
End
1.1.40 display voice rcv ccb
Syntax
display voice rcv ccb
View
Any view
Parameter
None
Description
Use the display voice rcv ccb command to view the information related to the call
control block in the RCV module.
This command is used to display the information related to the incoming and outgoing
call control block, the connection status of modules, the caller status, the caller
numbers and the called numbers, etc.
Example
# Display the information related to the call control block in the RCV module.
[H3C] display voice rcv ccb
RCV : CCB [ 1 ]
{
CallID : 0x0043
CallState : TALK
VCCID : 0x004f
VCCpState : IPPS_CONNECTED
CCID : 0xffff
CCState : CCS_CONNECTED
VasID : 0xffff
CallType : OUTGOING
CallAttribute : 0x00000000
CallSignaling : 0x00000002
EncodeType : 0x0000001f
E1Slot : 0xffffffff
E1Port : 0xffffffff
TimeSlot : 0xffffffff
ChannelID : 0x00000003
1-43
VpuState : VS_CONNECTED
VccTimer : 0x00000000
CcTimer : 0x00000000
VpuTimer : 0x00000000
CcChanMsg : 0x00000000
E1ChanMsg : 0x00000000
CallerNumber : 111
CalledNumber : 660010
prev : 0x00000000
next : 0x01409500
}
RCV : CCB [ 2 ] {
CallID : 0x0042
CallState : TALK
IppID : 0x004e
IppState : IPPS_CONNECTED
CcID : 0xffff
CcState : CCS_CONNECTED
VasID : 0x0039
CallType : INCOMING
CallAttribute : 0x00000000
CallSignaling : 0x00000004
EncodeType : 0x00000009
E1Slot : 0xffffffff
E1Port : 0xffffffff
TimeSlot : 0xffffffff
ChannelID : 0x00000000
VpuState : VS_CONNECTED
IppTimer : 0x00000000
CcTimer : 0x00000000
VpuTimer : 0x00000000
CcChanMsg : 0x00000000
E1ChanMsg : 0x00000000
CallerNumber : 111
CalledNumber : 660010
prev : 0x01409000
next : 0x00000000
}
1-44
Table 1-16 Description on call control block in RCV module
Field Description
CCB [ ] Index of call control block
CallID Flag or Identifier of the calling
Index of the VCC software module control block for the
VCCID
calling
Status of the VCC software module control block for the
VCCState
calling
Index of the CC software module control block for the
CCID
calling
Status of the CC software module control block for the
CCState
calling
Index of the VAS software module control block for the
VASID
calling
CallType Type of the calling
CallAttribute Attribute of the calling
CallSignaling Signaling of the calling
EncodeType Voice compression method of the calling

E1Slot Number of slot where E1V1 board is located for the calling
E1Port Number of CE1/PRI interface for the calling
TimeSlot Timeslot on the E1 of the calling

ChannelID Identifier of the logic channel of the calling
VPUState Status of the VPU of the calling
VCCTimer Timer of the VCC module in calling period
CCTimer Timer of the CC module in calling period
VPUTimer Timer of the VPU module in calling period
CcChanMsg Pointer of CC channel message in calling period

E1ChanMsg Pointer of E1VI channel message in calling period
CallerNumber Calling number of the calling
CalledNumber Called number of the calling
prev Previous RCV call control block
next Next RCV call control block
1-45
1.1.41 display voice rcv statistic
Syntax
display voice rcv statistic { all | call | cc | error | proc | r2 | timer | vas | vcc | vpp }
View
Any view
Parameter
all: Display all the statistics information of the RCV module.

call: Display the calling statistics information in the RCV module.
cc: Display all the statistic information between the RCV module and the underlying CC
module.
error: Display all the statistic information on the failure of connection caused by the
RCV module.
proc: Display the statistic information on the number of times of the execution of
various functions in the RCV module.
r2: Display the statistics information between the RCV module and the R2 module.
timer: Display all the statistic information on the timer operation in the RCV module.
vas: Display all the statistic information between the RCV module and the underlying
VAS module.
vcc: Display the calling statistics information in the VCC module.
vpp: Display all the statistic information between the RCV module and the underlying
VPP module.
Description
Use the display voice rcv statistic command to view the statistics information of
calling between the RCV module and the CC module, VAS module, and so on.
Example
# Display the statistics information of calling between the RCV module and other
modules.
[H3C] display voice rcv statistic call
Statistic about RCV calls :
{
RCV_CC_ACTIVE_CALL : 0
RCV_CC_ACTIVE_CALL_SUCCEEDED : 0
RCV_CC_ACTIVE_CALL_FAILED : 0
RCV_CC_PASSIVE_CALL : 0
RCV_CC_PASSIVE_CALL_SUCCEEDED : 0
1-46
RCV_CC_PASSIVE_CALL_FAILED : 0
RCV_R2_ACTIVE_CALL : 5
RCV_R2_ACTIVE_CALL_SUCCEEDED : 2
RCV_R2_ACTIVE_CALL_FAILED : 3
RCV_R2_PASSIVE_CALL : 4
RCV_R2_PASSIVE_CALL_SUCCEEDED : 1
RCV_R2_PASSIVE_CALL_FAILED : 3
RCV_VAS_ACTIVE_CALL : 39
RCV_VAS_ACTIVE_CALL_SUCCEEDED : 11
RCV_VAS_ACTIVE_CALL_FAILED : 28
RCV_VAS_PASSIVE_CALL : 18
RCV_VAS_PASSIVE_CALL_SUCCEEDED : 15
RCV_VAS_PASSIVE_CALL_FAILED : 3
}
Table 1-17 Description on call statistics about RCV module and other module
Field Description
Number of active call between self and
RCV_CC_ACTIVE_CALL
CC module
RCV_CC_ACTIVE_CALL_SUCCEEDE Successful number of active call
D between self and CC module
Failing number of active call between
RCV_CC_ACTIVE_CALL_FAILED
self and CC module
Number of passive call between self and
RCV_CC_PASSIVE_CALL
CC module
RCV_CC_PASSIVE_CALL_SUCCEED Successful number of passive call
ED between self and CC module
Failing number of passive call between
RCV_CC_PASSIVE_CALL_FAILED
self and CC module
RCV_R2_ACTIVE_CALL
R2 module
RCV_R2_ACTIVE_CALL_SUCCEEDE Successful number of active call
D between self and R2 module
RCV_R2_ACTIVE_CALL_FAILED
self and R2 module
RCV_R2_PASSIVE_CALL
R2 module
RCV_R2_PASSIVE_CALL_SUCCEED Successful number of passive call
ED between self and R2 module
RCV_R2_PASSIVE_CALL_FAILED
self and R2 module
1-47
Field Description
RCV_VAS_ACTIVE_CALL
VAS module
RCV_VAS_ACTIVE_CALL_SUCCEED Successful number of active call
ED between self and VAS module
RCV_VAS_ACTIVE_CALL_FAILED
self and VAS module
RCV_VAS_PASSIVE_CALL
VAS module
RCV_VAS_PASSIVE_CALL_SUCCEE Successful number of passive call
DED between self and VAS module
RCV_VAS_PASSIVE_CALL_FAILED
self and VAS module
1.1.42 display voice sip register-state
Syntax
display voice sip register-state
View
Any view
Parameter
None
Description
Use the display voice sip register-state command to view the registration state about
the SIP user agents (UAs).
Example
# Display the registration state about the SIP UAs.

<H3C> display voice sip register-state
[ SIP-REG Information ]
+-------------------------------------------------+
[RegFlag] -> SIP_REGISTER_FAILURE

[IPAddr] -> 192.168.80.50
[Port] -> 5060
1-48
Current SIP Server IPAddr = [192.168.80.50], Port = [5060]
1.1.43 display voice subscriber-line
Syntax
display voice subscriber-line line-number
View
Any view
Parameter
line-number: Subscriber line number.
Description
Use the display voice subscriber-line command to view the configuration information
about the type, status, codec mode, input gain and output attenuation of the subscriber
line.
Related command: subscriber-line.
Example
# Display the configuration information about the subscriber line.

[H3C] display voice subscriber-line 0
Current information --- line: 0
Type = LINE FXO
Status = OPEN -- CH_IDLE
Coding =
Decoding =
CallerNum =
CalledNum =
Call-ID = 0
Call-Refer = 0
CNG = ON
EchoCancel = ON - 32 (ms)
Reset = 0
Position = Slot 2 Port 0
CID-Display = ENABLE
CID-Receive = ENABLE
Gain(R&T) = 0 (db) - 0 (db)
T_FirstDial = 10 (s)
T_DialInter = 10 (s)
T_RingBack = 60 (s)
T_WaitDigit = 5 (s)
1-49
T_Predial = 1 (s)
T_DTMF = 120 (ms)
T_Interdigit= 120 (ms)
Table 1-18 Description on voice subscriber-line configuration
Field Description
line Index of voice subscriber-line
type Type of voice subscriber-line
state Status of voice subscriber-line
Status information Calling status of voice subscriber-line
Voice compression method of voice
Use as coding protocol
subscriber-line
Voice decompression method of voice
use as decoding protocol
subscriber-line
Current ANI Calling number of current call
Current DNIS Called number of current call
Current direction Direction of current call
Current call-ID Identifier of current call

Current call-reference Call reference of current call
Comfort noise configuration on the voice
Comfort-noise
subscriber-line
Reset times of the board where voice
reset times
subscriber-line is located
echo cancel delay Time of echo cancel on the voice subscriber-line
FXO Slot Slot number of the voice subscriber-line

FXO Port Port number of the voice subscriber-line
cid receive function Receive calling numbers about CID function
cid display function Display calling number about CID function

Current line State Status of voice subscriber-line( UP or DOWN)
Receive Gain value Input gain of the voice subscriber-line
Transmit Gain value Output gain of the voice subscriber-line

Echo Cancellation Echo cancel function of the voice subscriber-line
Timeout of dialing the first number on local
First-dial timer
subscriber-line
Dial-interval Timer Interval timeout of dialing on local subscriber-line
Timeout of sending ringing back signal on
Ringing Time Out
subscriber-line
1-50
Field Description
Timeout of wait digit dialed by user for
Wait-digit Time Out
subscriber-line
Pre-dial delay time Delay time of pre-dial on subscriber-line
Duration time of DTMF number on
DTMF digit duration
subscriber-line
Interdigit duration Interval time of DTMF number on subscriber-line
1.1.44 display voice voip data-statistic
Syntax
display voice voip data-statistic { brief | channel channel-number ] | verbose }
View
Any view
Parameter
channel channel-number: Display statistics information of voice data on specified

channel, channel-number is the logical channel number of voice, which accumulates
from 0. The channel for 2VI and 4VI modularized card is numbered first and then E1V1
modularized card.
verbose: Display detailed information of logical channel of voice.
Description
Use the display voice voip data-statistic command to view statistics information of
voice data.
This command is used to display the following information: time for successfully
searching the voice table, total number of received data packets, time for searching the
table in fast and common modes and voice and fax of receive and transmit channels etc.
Used with the verbose keyword, this command displays detailed information of receive
and send channels (including detailed input/output statistics and jitter Buffer of
information packets).
Related command: vqa data-statistic and reset voice voip data-statistic.
Example
# Display the statistics information of voice data.

[H3C] display voice voip data-statistic brief
=== VoIP datagram summary ===
--------------------------------------------------------------------
1-51
[NET] SearchVoiceTableSuccess : 0
[NET] ReceiveDatagramTotal : 0
[NET] FastSearchTableTimes : 0
[NET] NormalSearchTableTimes : 0
------------------------ Receive channel: 000 ----------------------
[NET] ReceiveDatagramTotal : 0
[COM] DiscardDatagramTotal : 0
[NET] ReceiveRtpDatagram : 0
[NET] ReceiveRtcpDatagram : 0
[COM] AddReceiveTable : 3
[COM] ClearReceiveTable : 0
[COM] FreeReceiveBuffer : 0
[COM] TrsmitDone : 462
VOICE DATA INFORMATION:
[NET] ReceiveDataTotal : 0
[NET] NormalProcessData : 0
FAX DATA INFORMATION:
[NET] ReceiveDataTotal : 0
[NET] NormalProcessData : 0
------------------------ Send channel: 000 ----------------------
COMMON INFORMATION:
[VPP] LinkReceiveDataTotal : 484
[VPP] LinkReceiveEmptyData : 0
[COM] AddTableTimes : 0
[COM] ClearTableTimes : 0
VOICE DATA INFORMATION:
[FSD] FSSend_ReceiveDataTotal : 483
[COM] DiscardDataTotal : 0
[NET] NormalSendDataTotal : 0
[NET] SendToIPDataTotal : 0
[LOC] SendToLocalDataTotal : 484
FAX DATA INFORMATION:
[FSD] FSSend_RcvFaxDataTotal : 0
[FDF] DiscardDataTotal : 0
[NET] SendToIPDataTotal : 0
[LOC] SendToLocalDataTotal : 0
Table 1-19 Description on statistics information of voice data
Field Description
SearchVoiceTableSuccess Successful times of searching voice table
ReceiveDatagramTotal(summary) Number of total packets received
1-52
Field Description
FastSearchTableTimes Times of fast searching voice table
NormalSearchTableTimes Times of normal searching voice table
ReceiveDatagramTotal(channel) Number of total packets received in channel
DiscardDatagramTotal Number of total packets dropped in channel
Number of total RTP packets received in
ReceiveRtpDatagram
channel
Number of total RTCP packets received in
ReceiveRtcpDatagram
channel
AddReceiveTable Times of adding receiving table
ClearReceiveTable Times of resetting receiving table
FreeReceiveBuffer Times of clearing buffer on board
TrsmitDone Times of freeing transmit buffer
ReceiveDataTotal(voice) Number of total data received in channel
Number of total data processed normally in
NormalProcessData(voice)
channel
ReceiveDataTotal(fax) Number of total fax data received in channel
Number of total fax data processed normally in
NormalProcessData(fax)
channel
LinkReceiveDataTotal Number of total local data received in channel
Number of total null local data received in
LinkReceiveEmptyData
channel
AddTableTimes Times of adding sending table
ClearTableTimes Times of resetting sending table
FSSend_ReceiveDataTotal(voice) Number of total data fast received or sent

DiscardDataTotal(voice) Number of total data dropped
NormalSendDataTotal Number of total data sent normally
SendToIPDataTotal(voice) Number of total data sent to IP side
SendToLocalDataTotal(voice) Number of total data sent to local side
FSSend_ReceiveDataTotal(fax) Number of total fax data fast received or sent
DiscardDataTotal(fax) Number of total fax data dropped
SendToIPDataTotal(fax) Number of total fax data sent to IP side
SendToLocalDataTotal(fax) Number of total fax data sent to local side
1-53
1.1.45 display voice vpp
Syntax
display voice vpp [ channel channel-number ]
View
Any view
Parameter
channel-number: Voice channel number.
Description
Use the display voice vpp command to view all the statistic information in the VPP
module.
This command is used to display the number of times of correct and incorrect
connection, the number of times of correct and incorrect disconnection, the number of
times of correct and incorrect code data receiving, the number of times of correct and
incorrect code data transmission, the number of times of correct and incorrect IPP data
receiving, the number of times of correct and incorrect IPP data transmission, the total
number of bytes of code data received, and the total number of bytes of IPP data
received in various voice channels.
Example
# Display all statistics about channel 0 in the VPP module.

[H3C] display voice vpp channel 0
Channel = 0 Status = CH_IDLE
ConnectRightTimes = 0 ConnectWrongTimes = 0
DisConnectRightTimes = 0 DisConnectWrongTimes = 0
RecvCodecmDataRightTimes = 0 RecvCodecmDataWrongTimes = 0
SendCodecmDataRightTimes = 0
RecvIppDataRightTimes = 0 RecvIppDataWrongTimes = 0
SendIppDataRightTimes = 0 SendIppDataWrongTimes = 0
RecvCodecmDataBytes = 0 RecvIppDataBytes = 0
TimeJitterLess10msTimes = 0 TimeJitterLess20msTimes = 0
TimeJitterLess110msTimes = 0
RecvIppDataSeqHopeTimes = 0 RecvIppDataDisorderTimes = 0
1-54
RecvIppDataRecvSeqLessTimes = 0 RecvIppDataSeqMoreTimes = 0
ulSendNoBDTimes = 0 ulRecvExpirePacketTimes = 0
ulRecvDuplicatePacketTimes = 0 ulJitterBufferOverFlowTimes1 = 0
ulJitterBufferOverFlowTimes2= 0 ulEmptyPacketTimes = 0
ulSendDSPVOIPPacket = 0 ulSendDSPFOIPPacket = 0
ulCorputTimes = 0
Table 1-20 Description of statistics in VPP module
Field Description
ConnectRightTimes Times of connecting correctly
ConnectWrongTimes Times of connecting wrongly

DisConnectRightTimes Times of disconnecting correctly
DisConnectWrongTimes Times of disconnecting wrongly
Times of receiving
RecvCodecmDataRightTimes
compression/decompression data correctly
Times of receiving
RecvCodecmDataWrongTimes
compression/decompression data wrongly
Times of sending
SendCodecmDataRightTimes
compression/decompression data correctly
RecvIppDataRightTimes Times of receiving IPP data correctly
RecvIppDataWrongTimes Times of receiving IPP data wrongly
SendIppDataRightTimes Times of sending IPP data correctly
SendIppDataWrongTimes Times of sending IPP data wrongly

Number of bytes of receiving
RecvCodecmDataBytes
compression/decompression data
Number of data bytes received from the IPP
RecvIppDataBytes
module
TimeJitterLess(10-110)msTimes Statistics of Jitter time of receiving IPP data
Times of receiving IPP data whose sequence
RecvIppDataSeqHopeTimes
is accordant with expectation
Times of receiving IPP data which is out of
RecvIppDataDisorderTimes
order
RecvIppDataRecvSeqLessTimes
is less than expectation
RecvIppDataSeqMoreTimes
is larger than expectation
ulSendNoBDTimes Times of sending data without buffer
ulRecvExpirePacketTimes Times of receiving expired packets
1-55
Field Description
ulRecvDuplicatePacketTimes Times of receiving duplicate packets
ulJitterBufferOverFlowTimes1 Times 1 of JitterBuffer overflows
ulJitterBufferOverFlowTimes2 Times 2 of JitterBuffer overflows
ulEmptyPacketTimes Times of empty packets
ulSendDSPVOIPPacket Number of voice packets sending to DSP
ulSendDSPFOIPPacket Number of fax packets sending to DSP
ulCorputTimes Times of collision in JitterBuffer
1.1.46 dot-match
Syntax
dot-match { end-only | left-right | right-left }

undo dot-match
View
Voice number-substitute view
Parameter
end-only: Reserve the digits that correspond to all the dots “.” at the end of the number
input format.
left-right: Reserve from left to right the digits that correspond to the dots in the number
input format.
right-left: Reserve from right to left the digits that correspond to the dots in the number
input format.
Description
Use the dot-match command to configure dot match rules of the number-substitute
rules.
Use the undo dot-match command to restore the default value. The configuration of
this command only applies to the rules of the number-substitute list in the current view.
By default, the dot match rule is set to end-only.
According to the configuration of the dot-match command, the dots can be reserved by
quantity and position of the dots configured in output format of the number-substitute
rules. There are three dot match modes in the number-substitute rules.
z Reserve the digits that correspond to all the dots at the end of the number input
format. It is the default mode.
1-56
z Reserve from left to right the digits that correspond to the dots in the number input
format.
z Reserve from right to left the digits that correspond to the dots in the number input
format.
The dots “.” here are virtual match digits. Virtual match digits are the digits that match
the variable part (such as + % ! []) in an expression. For example, when 1255 is
matched with 1[234]55, the virtual match digit is 2; when it is matched with 125+, the
virtual match digits are 5; when it is matched with 1..5, the virtual match digits are 25.
Note:
For details about dot match rules in number-substitute rules, refer to the rule
command.
Example
# Set the dot match rule of the number-substitute list 20 to right-left.

[H3C-voice-dial] number-substitute 20
[H3C-voice-dial-substitute20] dot-match right-left
1.1.47 dtmf sensitivity-level
Syntax
dtmf sensitivity-level { high | low }

undo dtmf sensitivity-level
View
Parameter
high: Sets the DTMF code detection sensitivity level as high. In this mode, the reliability
is lower, and some codes may be mistaken for DTMF codes.
low: Sets the DTMF code detection sensitivity level as low. In this mode, the reliability is
higher, but DTMF code may be missed.
Description
Use the dtmf sensitivity-level command to set the detection sensitivity level of DTMF
codes.
Use the undo dtmf sensitivity-level command to restore the default detection
sensitivity level.
1-57
By default, the detection sensitivity level of DTMF codes is high.
Example
# Set the DTMF code detection sensitivity level of voice subscriber-line line 1/0/0 as
low.
[H3C-voice-line1/0/0] dtmf sensitivity-level low
1.1.48 dscp media
Syntax
dscp media dscp-value

undo dscp media
View
Voice entity view
Parameter
dscp-value: DSCP value in the range 0 to 63 or the keyword ef, af11, af12, af13, af21,
af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef, or
zero.
Description
Use the dscp media command to set the DSCP value in the ToS field in the IP packets
that carry the RTP stream of the voice entity.
Use the undo dscp media command to restore the default DSCP.
The function of this command is the same as that of the vqa dscp command.
Example
# Set the DSCP value in the ToS field in the IP packets that carry the RTP stream of
VoIP voice entity 2 to af41.
[H3C-voice-dial] entity 2 voip
[H3C-voice-dial-entity2] dscp media af41
1.1.49 dtmf sensitivity-level
Syntax
dtmf sensitivity-level { high | low }

undo dtmf sensitivity-level
View
FXS/FXO voice subscriber line view
1-58
Parameter
high: Sets the DTMF code detection sensitivity level as high. In this mode, the reliability
is lower, and some codes may be mistaken for DTMF codes.
low: Sets the DTMF code detection sensitivity level as low. In this mode, the reliability is
higher, but DTMF code may be missed.
Description
Use the dtmf sensitivity-level command to set the detection sensitivity level of DTMF
codes.
Use the undo dtmf sensitivity-level command to restore the default detection
sensitivity level.
By default, the detection sensitivity level of DTMF codes is high.
This command is only valid for FXS/FXO interface.
Example
# Set the DTMF code detection sensitivity level of voice subscriber line 1/0 as low.
<H3C> system-view
[H3C] voice-setup
[H3C-voice] subscirber-line1/0
[H3C-voice-line1/0] dtmf sensitivity-level low
1.1.50 dtmf threshold
Syntax
dtmf threshold { analogue index value1 | digital value2 }

undo dtmf threshold { analogue | digital } index
View
Parameter
analogue: Sets an analog voice subscriber-line.

digital: Sets a digital voice subscriber-line.
index: Index number corresponding to the threshold, an integer in the range 0 to 12.
value1: Specifies the threshold corresponding to the specified index.
value2: Takes 0 or 1 to set DTMF digit detection to insensitivity or sensitivity. On an E1
voice subscriber-line, DTMF digit detection defaults to 1.
The following table provides the description on the index numbers.
1-59
Table 1-21 Description on the index numbers
Index numbers Indicates

The lower threshold of ROWMAX plus COLMAX. The input
signal which is otherwise regarded too weak is recognized as
a DTMF digit when ROWMAX + COLMAX) > 0.
0
The threshold is an integer in the range 0 to 5000 and
defaults to 1400. A higher threshold means increased
detection reliability but decreased sensitivity.
The upper threshold of the maximum value of ROWMAX or
COLMAX, whichever is larger. This threshold is used for
detecting the inter-digit delay. A detected digit is regarded
1 ended only when max (ROWMAX, COLMAX) < 1.
The threshold is an integer in the range 0 to 5000 and
defaults to 458. A smaller value means increased detection
reliability but decreased sensitivity.
The lower threshold of COLMAX / ROWMAX, where
ROWMAX < COLMAX. A DTMF digit is regarded ideal when
COLMAX ≈ ROWMAX, because the difference between the
two values is small then. An input signal is recognized as a
2 DTMF digit only when (COLMAX / ROWMAX) > 2.
The threshold is an integer in the range -18 to -3 dB and
defaults to -9 dB. A higher value means increased detection
The lower threshold of ROWMAX / COLMAX when COLMAX
>= ROWMAX. The function of this parameter is similar to that
of index 2, except that they are in reverse. The ratio must be
greater than this threshold for the input signal to be
3 recognized as a DTMF digit.
defaults to -9 dB. A lower value means increased detection
The upper threshold of the ratio of the second largest energy
level from the row frequency group to ROWMAX. The ratio
must be lower than this threshold for the input signal to be
defaults to -9 dB. A smaller value means increased detection
The upper threshold of the ratio of the second largest energy
level from the column frequency group to COLMAX. The ratio
must be lower than this threshold for the input signal to be
1-60
Index numbers Indicates

The upper threshold of ROW2nd / ROWMAX. An input signal
is recognized as a DTMF digit only when ROW2nd /
ROWMAX < 6.
6
The upper threshold of COL2nd / COLMAX. The ratio must
be lower than this threshold for the input signal to be
recognized as a DTMF digit.
7
defaults to -12 dB. A smaller value means increased
The upper threshold of the ratio of the maximum value of the
larger energy level among two extra specified frequency
points to max (ROWMAX, COLMAX). The ratio must be
greater than this threshold for the input signal to be
defaults to -12 dB. A smaller value means increased
The lower threshold of the DTMF signal duration. The
duration of DTMF key tone must be larger than this threshold
for the input signal to be recognized as a DTMF digit.
9
The threshold is in the range 30 to 150 milliseconds and
defaults to 30 milliseconds. A greater value means increased
The frequency of the first extra frequency point specified for
detection. It is an integer in the range 300 to 3400 Hz and
10 defaults to 300 Hz.
In addition, it must be a value beyond the row and column
frequency groups.
The frequency of the second extra frequency point specified
for detection. It is an integer in the range 300 to 3400 Hz and
11 defaults to 3200 Hz.
In addition, it must be a value beyond the row and column
frequency groups.
The lower threshold of the amplitude of the input signal. The
average amplitude must be greater than this threshold for the
input signal to be recognized as a DTMF digit.
This threshold is an integer in the range 0 to 700 and defaults
12 to 375. A greater value means increased detection reliability
but decreased sensitivity.
This parameter is a time domain threshold, which is specified
to prevent the noise with small amplitude from being
detected.
1-61
Description
Use the dtmf threshold command to configure the sensitivity of DTMF digit detection.
Use the undo dtmf threshold command to restore the default.
The dtmf threshold command issues the thresholds for DTMF dial tone detection to
the underlying layer DSP for the purpose of tuning detection sensitivity and reliability of
the device subtly. Inside the DSP, a set of generic default values have been configured.
They are 1400, 458, -9, -9, -9, -9, -3, -12, -12, 30, 300, 3200, 375, with their index being
0 through 12. Professionals can use this command to adjust the device when DTMF
digit detection fails. In normal cases, the defaults are adequate.
When the value2 argument is set to 0 or DTMF digit detection to insensitivity, the
neglect probability is decreasing and the detection error probability is increasing as the
DTMF digit collection tolerance becomes larger.
DTMF digit detection is implemented by calculating the spectrum of the input voice
signal. Its spectrum shape is restricted to the configured thresholds. A DTMF dial tone
is regarded valid only when all the constraints are met. To understand this, you must be
aware of DTMF dial tone, as shown in the following figure:
Figure 1-1 Spectrum of keys
The tone of each telephone digit is composed of two single-frequency tones. For
example, the tone of the digit 1 is compounded by two sine wave signal tones of 697 Hz
and 1209 Hz. A valid key tone must last at least 45 milliseconds and have an inter-digit
delay of 23 milliseconds. Refer to ITU-T Q.24 recommendation for full information.
1-62
Figure 1-2 Spectrum of key 1
Figure 1-2 illustrates the spectrum of key 1. Compared with other frequency points, the
energy levels at frequency points of 697 Hz and 1209 Hz are relatively greater. The
underlying layer DSP regards the frequencies of 1209 Hz, 1336 Hz, 1477 Hz, and 1633
Hz as column frequency group and the frequencies of 697 Hz, 770 Hz, 852 Hz, and
941Hz as row frequency group. Each DTMF key tone is composed of one column
frequency and one row frequency. The DSP module determines whether the input
voice signal is a valid DTMF digit by its energy at the above eight frequencies and their
double frequencies. The maximum energy in the row frequency group is ROWMAX, its
double energy is ROW2nd; the maximum energy in the column frequency group is
COLMAX and its double energy is COL2nd.
Example
# Set DTMF threshold 9 in voice subscriber-line view.

[H3C-voice-line0/0/0] dtmf threshold analogue 9 30
# Restore the default of DTMF threshold 9 in voice subscriber-line view.

[H3C-voice-line0/0/0] undo dtmf threshold analog 9
1.1.51 echo-canceller
Syntax
echo-canceller { enable | tail-length milliseconds | parameter { convergence-rate

value | max-amplitude value | mix-proportion-ratio value | talk-threshold value } }
undo echo-canceller { enable | tail-length | parameter }
View
1-63
Parameter
enable: Enables echo-cancellation function. By default, the function is enabled.

tail-length milliseconds: Adjusts echo-cancellation duration, that is, the time that
elapse when a subscriber hears the voice echoed back. It ranges from 0 to 64 ms and
defaults to 32 ms.
parameter: sets echo-cancellation parameters.
convergence-rate value: Sets the ascending rate of comfort noise amplitude. It ranges
from 0 to 511 and defaults to 255. The greater the value, the quicker the convergence.
If a subscriber hears echoes after speaking, or the background noise of the peer is loud,
you can increase this value. Note that if this value is too great, the noise may be not
smooth enough.
max-amplitude value: Sets maximum amplitude of comfort noise. It ranges from 0 to
10 and defaults to 0. The higher the value, the greater the maximum noise amplitude. A
value of 0 indicates that the system performs only nonlinear process and does not add
comfort noise. When the environmental noise is louder, you can increase this value.
Note that if this value is too great, the noise may be not smooth enough.
mix-proportion-ratio value: Sets comfort noise mixture proportion control factor. It
ranges from 1 to 3,000 and defaults to 100. The greater the value, the higher the
proportion of noise in the hybrid of noise and voice. If echoes occur when only one
subscriber is speaking, you can increase this value. Note that if this value is too great,
the voice may be desultory.
talk-threshold value: Sets the threshold of simultaneous talks. It ranges from 1 to 2
and defaults to 1. If echoes occur when the two parties speak simultaneously, you may
increase this value. Note that if this value is too great, the filter factor convergence rate
may become slow.
Description
Use the echo-canceller command to configure echo-cancellation parameters.

Use the undo echo-canceller command to remove the configuration.
During a call, the voice of a subscriber may be echoed back to the handset. This is
because analog voice signals are leaked into the reception path of the subscriber. You
can use the echo-cancellation function provided by the voice gateway to solve this
problem to a certain extent.
If a too large time value is set, the converge time of the echo canceling on the network
will become longer, so when the connection has just been established, the user may
hear the echo; and if the time value is set as too small, the user may also hear part of
the echo, because the relatively longer echo has not been completely cancelled.
There are no echo and echo-cancel on the IP side.
1-64
Signal leakage occurs only on the analog circuit part of the voice call path. Digital
networks do not suffer from this problem.
Note:
z The echo-canceller enable command must be used in pair with the
echo-canceller tail-length command.
z This command applies to FXO and FXS interfaces.
z After configuring the undo echo-canceller enable command, if you disable the
echo cancellation function, the echo-canceller parameter and the echo-canceller
tail-length commands cannot be executed; if you execute the echo-canceller
enable command and enable the echo cancellation function, the echo-canceller
parameter and echo-canceller tail-length commands can be executed. If these
two commands are applied on a data interface, when the echo cancellation function
is enabled, the echo-canceller parameter command can be executed, but the
echo-canceller tail-length command cannot be executed.
Example
# Set the echo-cancel sampling time as 24 ms on subscriber line 1/0/0.

[H3C-voice-line1/0/0] echo-canceller enable
[H3C-voice-line1/0/0] echo-canceller tail-length 24
1.1.52 em-phy-parm
Syntax
em-phy-parm { 2-wire | 4-wire }

undo em-phy-parm { 2-wire | 4-wire }
View
Parameter
2-wire: Choose the 2-wire analog E&M wire scheme.

4-wire: Choose the 4-wire analog E&M wire scheme.
Description
Use the em-phy-parm command to configure a wire scheme for the analog E&M
subscriber-line.
1-65
Use the undo em-phy-parm command to cancel an existing wire selection scheme.
By default, the 4-wire analog E&M wire scheme is selected.
This command is only applicable to analog E&M subscriber-line.
When analog E&M is used in PBX communication, its voice uses two or four wires, plus
two or four signaling wires. So, a 4-wire analog E&M actually has at least six wires.
2-wire mode provides full-duplex voice transmission, in which voice is transmitted
between two wires in both directions. 4-wire mode resembles the simplex mode. Every
two wires are responsible for voice transmission in one direction.
This command is used for the wire match between the voice router and remote end
equipment connected with it. It has influence on voice transmission only and has
nothing to do with signaling.
Example
# Choose the 4-wire scheme for the analog E&M subscriber-line.

[H3C-voice-line1/0/0] em-phy-parm 4-wire
1.1.53 em-signal
Syntax
em-signal { delay | immediate | wink }

undo em-signal { delay | immediate | wink }
View
Parameter
wink: Wink start mode. The caller end hooks off to seize the line through line E, and it
has to wait for a wink signal from the remote end before sending out the called number.
immediate: Immediate start mode. The caller end hooks off to seize the line through
line E and sends the called number. The prerequisite for using the immediate start
mode is: The equipment at the remote end should listen to the dial signal immediately
after identifying the off-hook signal.
delay: When using the delay start mode, the calling end occupies the trunk line, and the
called end, such as PBX, will also enter the hook-off state to respond the caller till it is
ready for receiving the called number.
Description
Use the em-signal command to configure a voice subscriber-line start mode.

Use the undo em-signal command to cancel the set voice subscriber-line start mode.
By default, analog E&M subscriber-lines select the immediate start mode.
1-66
This command is only applicable to analog E&M subscriber-line.

The start mode used for an analog E&M subscriber-line should be in consistency with
the PBX connected with it.
When using the immediate start mode, the numbers will not be correctly sent or
received due to the signaling type in some PBX, please modify start mode as the wink
or delay.
Related command: delay.
Example
# Configure the immediate mode for the analog E&M subscriber-line.

[H3C-voice-line1/0/0] em-signal immediate
1.1.54 entity
Syntax
entity entity-number { voip | pots | vofr }

undo entity { entity-number | all | voip | pots | vofr }
View
Parameter
entity-number: Identify a voice entity, The value range is from 1 to 2147483647.

all: All dial program entities.
voip: Key character, indicating that this subscriber-line is a network subscriber-line.
pots: Key character, indicating that this subscriber-line is an often used telephone
subscriber-line.
Description
Use the entity command to configure a voice entity and enter its view (at the same time
specify the working mode related to voice).
Use the undo entity command to cancel an existing voice entity.
In a global view, use the entity command to enter a Voice entity view, and use quit to
return to the dial program view.
Related command: line.
1-67
Note:
The entity-number assigned to a VoIP or POTS entity must be unique among all VoIP
and POTS entities.
Example
# Create and enter the Voice entity view to configure a POTS voice entity whose
identification is 10.
[H3C-voice-dial] entity 10 pots
1.1.55 fast-connect
Syntax
fast-connect
undo fast-connect
View
VoIP voice entity view
Parameter
None
Description
Use the fast-connect command to enable fast connect.

Use the undo fast-connect command to disable fast connect.
By default, fast connect is disabled.
As there is no ability negotiation for fast connect, the ability confirmation of the two
parties is determined by the called gateway. When the router acts as a calling gateway,
one can set whether or not to apply fast connect mode for each originated call. If the
calling gateway adopts fast connect mode, the called gateway will adopt it, too.
Otherwise, neither one will do so.
Fast connect procedure will be used when both the calling and called parties support
fast connect. Provided that neither the calling nor the called gateway supports fast
connect mode, the system will automatically switch to normal connect procedure to
resume the call.
It is OK to only configure fast-connect command for VoIP voice entity on the calling
gateway. Just after successfully enabling the fast connect can the tunnel function be
configured.
1-68
Related command: outband, tunnel-on, voip call-start.
Example
# Enable fast connect for VoIP voice entity 10.

[H3C-voice-dial-entity10] fast-connect
1.1.56 first-rule
Syntax
first-rule rule-number
undo first-rule
View
Parameter
rule-number: Serial numbers of the number-substitute rules, ranging from 0 to 127.
Description
Use the first-rule command to configure the number-substitute rule that is first used in
the current number-substitute list.
Use the undo first-rule command to restore the default number-substitute rule.
By default, the configured rule with the smallest serial number is used first.
In a voice call, the system first uses the rule that is defined by the first-rule command
when it begins to use the number-substitute rules. If this rule fails, it will try all other
rules in order, till it finds the one that works or till it confirms all the rules do not work.
Example
# Set rule 4 as the first-used rule in number-substitute list 20.

[H3C-voice-dial-substitute20] rule 4 663 3
[H3C-voice-dial-substitute20] first-rule 4
1.1.57 first-rule
Syntax
first-rule rule-number
undo first-rule
1-69
View
Parameter
rule-number: Serial numbers of the number-substitute rules, ranging from 0 to 127.
Description
Use the first-rule command to configure the number-substitute rule that is first used in
the current number-substitute list.
Use the undo first-rule command to restore the default number-substitute rule.
By default, the configured rule with the smallest serial number is used first.
In a voice call, the system first uses the rule that is defined by the first-rule command
when it begins to use the number-substitute rules. If this rule fails, it will try all other
rules in order, till it finds the one that works or till it confirms all the rules do not work.
Example
# Set rule 4 as the first-used rule in number-substitute list 20.

[H3C-voice-dial-substitute20] rule 4 663 3
[H3C-voice-dial-substitute20] first-rule 4
1.1.58 hookoff-time
Syntax
hookoff-time time
undo hookoff-time
View
Parameter
time: Length of the hangup timer, in the range 60 to 36000 seconds. By default, no
hangup timer is set.
Description
Use the hookoff-time command to configure the hangup timer. When this timer times
out, the interface hangs up.
Use the undo hookoff-time command to cancel the setting of the hangup timer.
In some countries, PBXs do not play busy tone; if they play, the busy tone only lasts a
short period of time. When noise is present on a transmission link, the silence-th-span
1-70
command may be inadequate for solving the problem that the FXO interface does not
hang up. In this case, you may use the hookoff-time command to address the
problem.
Once configured the hookoff-time command takes effect on all interfaces on the card.
Example
# Set the hangup timer to 500 seconds.

[H3C-voice-line3/0/0] hookoff-time 500
1.1.59 impedance
Syntax
impedance { country-name | R550 | R600 | R650 | R700 | R750 | R800 | R850 | R900 |
R950 }
undo impedance
View
Parameter
country-name: Specifies a country so that its impedance standard is used. It can be

Australia, Austria, Belgium-Long, Belgium-Short, Brazil, China, Czech-Republic,
Denmark, ETSI-Harmanized, Finland, France, German-Swiss, Greece, Hungary, India,
Italy, Japan, Korea, Mexico, Netherlands, Norway, Portugal, Slovakia, Spain, Sweden,
U.K., US-Loaded-Line, US-Non-Loaded, or US-Special-Service.
R550: 550-ohm real impedance.
Description
Use the impedance command to configure the current electric impedance on a voice
subscriber-line.
1-71
Use the undo impedance command to restore the default electric impedance on the
voice subscriber-line.
You can specify an impedance value by specifying the country where the value applies.
You may just input the leading letters that uniquely identify the country however.
The default electric impedance on the voice line is China.
Example
# Configure the current electric impedance to r600 on voice subscriber-line 1/0/0.

[H3C-voice-line1/0/0] impedance r600
1.1.60 line
Syntax
line line-number
undo line
View
POTS voice entity view
Parameter
line-number: Number of a subscriber line.
Description
Use the line command to associate the voice entity with a specified voice
subscriber-line.
Use the undo line command to cancel this association.
This command can be used in POTS Voice entity view only. It can take effect only on
FXS, FXO, analog E&M, and digital E&M interfaces.
solt 3 solt 2
solt 0 slot 1
line0/0/0 line0/0/1 line0/0/2 line0/0/3 line1/0/0 line1/0/1
Figure 1-3 Number the voice subscriber-lines on voice cards
1-72
The above figure displays the rear view of a router installed with four voice cards. The
first card provides two subscriber lines, while other three provides four subscriber lines
each. The voice subscriber-line numbers are set according to the card sequence from
the left to the right, and add 1 in order starting from 0.
Example
# Associate voice entity 10 and voice subscriber-line 0/0/0.

[H3C-voice-dial-entity10] line 0/0/0
1.1.61 match-template
Syntax
match-template match-string
undo match-template
View
Voice entity view
Parameter
match-string: Match template. Its format is [ + ] { string [ T ] [ $ ] | T }, with the largest

length of 31 characters. The characters are described in the following.
E.164-compliant.
z $: Is the last character, indicating the end of the number. That means the entire
called number must match all the characters before “$” in the string. If this
character appears by itself, it means you can match an empty called number.
(Currently, this function can be applied only on H323 call of ISDN PRI or BRI.)
z T: Timer. It means the system is waiting the subscriber for dialing any number till:
the number length threshold is exceeded; the subscriber inputs the terminator; or
the timer expires. It seems to subscribers that T matches any number in any
length.
z string: A string composed of any characters of “0123456789ABCD#*.!+%[]()-”.
The meanings of the characters are described in the following table:
Character Meaning
ABCD Each character means a digit.

1-73
Character Meaning
A wildcard. It can match any digit of a valid number. For example,
. 555. . . . matches any string that begins with 555 and with four
additional characters.
The character or characters right in front of it does not appear or
!
appears once. For example, 56!1234 can match 51234 and 561234.
The character or characters right in front of it appears once or
+ several times. But its appearance at the beginning of the whole
number means the number is E.164-compliant.
Hyphen. It connects two values (the smaller one before it and the
- bigger one after it) to indicate a range. For example, “1-9” means
numbers from 1 to 9 (inclusive).
The character or characters right in front of it does not appear, or
%
appears several times.
Select one character from the group. For example, [1-36A] can
[]
match only one character among 1, 2, 3, 6, and A.
A group of characters. For example, (123A) means a string “123A”. It
is usually used with “!”, “%”, and “+”. For example, “408(12)+” can
()
match 40812 or 408121212. But it cannot match 408. That is, “12”
can appear continuously and it must at least appear once.
Note:
z The character or characters in front of "!”, “%”, and “+” are not to be matched
accurately. They are handled similar to the wildcard “.”. Moreover, these symbols
cannot be used alone. There must be a valid digit or digits in front of them.
z If you want to use “[ ]” and “( )” at the same time, you must use them in the format
“( [ ] )”. Other formats, such as “[ [ ] ]” and “[ ( ) ]” are illegal.
z “-“ can only be used in “[ ]”, and it only connects the same type of characters, such
as “0-9”. The formats like “0-A” are illegal.
Description
Use the match-template command to configure the match template for a voice entity.
Use the undo match-template command to delete this configuration.
1-74
The match template defined by the match-template command can be used to match
the number reaching the corresponding voice entity. The voice entity will complete the
call if the match is successful. The match template can be defined flexibly. It can not
only be a string of a unique number like 01016781234, but also an expression that can
match a group of numbers, such as “010[1-5]678…”. They are used to match the actual
numbers in the received call packets to complete the calls.
Note:
z COMWARE software does not check the validity of E.164 numbers.
z In E1 voice, “T”, “#”, and “*” are not supported currently.
Example
# Set 5557922 as the telephone number of voice entity 10.

[H3C-voice-dial-entity10] match-template +5557922
# Set 66.... as the match template of voice entity 20.

[H3C-voice-dial-entity20] match-template 66....
# Set the match template for the numbers beginning with 661, 662, 663, and 669, and
containing four other digits.
[H3C-voice-dial-entity1] match-template 66[1-39]....
# Set the match template for the numbers beginning with 66 and 6602 and containing
four other digits.
[H3C-voice-dial-entity1] match-template 66(02)!....
# Set the match template for the numbers beginning with 66 and within the length of 31
digits.
[H3C-voice-dial-entity1] match-template 66T
# Set the match template for the numbers beginning with any number and within the
length of 31 digits.
[H3C-voice-dial-entity1] match-template T
# Set a match template that can match an empty called number.

[H3C-voice-dial-entity1] match-template $
1.1.62 max-call (in Voice Dial Program View)
Syntax
max-call set-number max-number

undo max-call { all | set-number }
1-75
View
Parameter
set-number: Specify a max-call set. Its value ranges from 1 to 2147483647. You can
configure 128 sets at most.
max-number: Specify the maximum number of call connections for a max-call set. It
All: All max-call sets.
Description
Use the max-call command to configure max-call sets (128 sets at most).
Use the undo max-call command to delete the specified set or all the max-call sets.
This command is used to limit the number of call connections for a voice entity or a
group of voice entities. It needs to be used with the max-call command in voice entity
view: It defines the serial number of a max-call set and the maximum call connections;
while the max-call command in voice entity view binds that voice entity to the max-call
set with the serial number.
Related command: max-call (voice entity).
Example
# Set the maximum number of call connections of max-call set 1 to 5.

[H3C-voice-dial] max-call 1 5
1.1.63 max-call (in Voice Entity View)
Syntax
max-call set-number
undo max-call
View
Voice entity view
Parameter
set-number: Specifies a max-call set. Its value ranges from 1 to 2147483647.
Description
Use the max-call command to bind a voice entity to the max-call set specified by
set-number.
1-76
Use the undo max-call command to delete the binding. Each voice entity can only be
bound to one max-call set, but you can change the binding.
By default, no max-call set is bound. That means there is no limitation on the number of
call connections.
This command is used with the max-call command in voice dial program view: the
max-call command in voice dial program view sets the serial number of max-call set
and the maximum number of call connections; this command binds the voice entity to
the max-call set with the serial number.
Related command: max-call (voice dial program).
Example
# Bind voice entity 10 to max-call set 1.

[H3C-voice-dial-entity10] max-call 1
1.1.64 normal-connect slow-h245
Syntax
normal-connect slow-h245
undo normal-connect slow-h245
View
Parameter
None
Description
Use the normal-connect slow-h245 command to configure disabling the calling end
from actively initiating an H245 connection request to the called end before the called
end is hooked off in voice entity view.
Use the undo default entity normal-connect slow-h245 command to restore the
default value (that is, to allow the calling end to actively initiate an H245 connection
request to the called end before the called end is hooked off).
By default, the calling end is allowed to actively initiate an H245 connection request to
the called end before the called end is hooked off.
Use the normal-connect slow-h245 command to disable the calling end from actively
initiating an H245 connection request to the called end before the called end is hooked
off in voice entity view.
Related command: fast-connect, default entity normal-connect slow-h245.
1-77
Example
# Configure for VoIP voice entity 103 to disable the calling end from actively initiating
the H245 connection request to the called end before the called end is hooked off.
[H3C-voice-dial-entity103]normal-connect slow-h245
1.1.65 number-match
Syntax
number-match { longest | shortest }

undo number-match
View
Parameter
longest: Indicates to perform the match according to the longest number.

shortest: Indicates to perform the match according to the shortest number.
Description
Use the number-match command to configure a global number match-policy.

Use the undo number-match command to restore the default.
By default, match according to the shortest number.
Command number-match is used to decide if the match is performed according to the
longest or the shortest number for the number match. For instance, match-template
0106688 and match-template 01066880011 are respectively configured in two voice
entities. when the user dials 01066880011, if the router is configured with the shortest
number match-policy, then the router originates a connection to 0106688 at the remote
end, and the four numbers 0011 will not be processed; if the router is configured with
the longest number match-policy, and the user only dials 0106688, the router will wait
for the user to dial. After timeout, the number match-policy configured with the system
is neglected, and the shortest number match-policy will be automatically followed to
make a call; if the user dials 0106688# (here the "#” represents the dial terminator
configured by the system), the router will likewise neglect the number match-policy
configured by the system and use the shortest number match-policy, thus providing a
greater flexibility for the configuration of user dial scheme.
Example
# Configure that the number match is performed according to the longest number.
[H3C-voice-dial] number-match longest
1-78
1.1.66 number-substitute
Syntax
number-substitute list-number
undo number-substitute { list-number | all }
View
Parameter
list-number: Serial number of number-substitute list. Its value ranges from 1 to

2147483647.
all: All number-substitute lists.
Description
Use the number-substitute command to create a number-substitute list and enter

voice dial program view.
Use the undo number-substitute command to delete the specified number-substitute
list or all the number-substitute lists.
By default, no number-substitute list is created.
Related command: rule and substitute.
Example
# Enter voice dial program view and create a number-substitute list.

[H3C-voice-dial-substitute1]
1.1.67 open-trunk
Syntax
open-trunk { caller [ monitor interval ] | called }

undo open-trunk [caller monitor ]
View
Analog E&M voice subscriber line view
Parameter
caller: Enables E&M non-signaling mode but not the monitoring function when voice
gateway works as the calling end.
1-79
monitor interval: Enables E&M non-signaling mode and the monitoring function at the
same time when voice gateway works as the calling end. The monitoring time is
specified by interval.
called: Enables E&M non-signaling mode when voice gateway works as the called
end.
Description
Use the open-trunk command to enable E&M non-signaling mode.

Use the undo open-trunk command to delete E&M non-signaling mode.
By default, E&M non-signaling mode is disabled.
 Note:
When you use the open-trunk caller monitor interval command to enable E&M
non-signaling mode and the monitoring function at the same time, execute the undo
open-trunk monitor command to delete the monitoring function (Note that the
execution of this command only disables the monitoring function but does not delete
E&M non-signaling mode.); If you use the undo open-trunk command, not only E&M
non-signaling mode will be deleted, but also the monitoring function will be disabled.
Example
# Configure to enable E&M non-signaling mode and the monitoring function at the
same time. The monitoring time is 120 seconds.
[H3C-voice-line3/0/0] open-trunk caller monitor 120
1.1.68 outband
Syntax
outband { h225 | h245 | sip | vofr }

undo outband
View
Voice entity view
Parameter
h225: Enables DTMF H.225 out-of-band transmission.

h245: Enables DTMF H.245 out-of-band transmission.
sip: Enables DTMF SIP out-of-band transmission.
1-80
vofr: Enables DTMF vofr out-of-band transmission.
Description
Use the outband command to configure transmission of DTMF code in the outband
mode.
Use the undo outband command to restore transmission of DTMF code to inband
mode.
By default, the inband transmission mode is adopted.
Once transmitting DTMF code in outband mode has been configured for
NON-STANDARD router, in order to confirm whether or not the peer gateway can
accept such transmission mode of DTMF, the ability negotiation must be fulfilled after
the connection is established. Currently, H3C series routers only reactively accept
transparent transmission ability negotiation of DTMF code. In no case will it actively
initiate the negotiation process mentioned above.
In order to transparently transmit DTMF code, it is demanded, during actual application,
to configure this command for VoIP voice entity on the calling gateway and also for
POTS voice entity for the called gateway.
Related command: fast-connect and tunnel-on.
Note:
z In VoIP voice entity view, only sip, h225 and h245 DTMF out-of-band transmission
modes can be displayed. When the VoIP voice entity adopts ip or ras routing
method, the h225 and h245 modes can be displayed, and when the sip routing
method is adopted, only the sip mode can be displayed.
z In POTS voice entity view, all of the four DTMF transmission modes h225, h245, sip
and vorf can be displayed.
z In VoIP voice entity view, normal connect mode is adopted, DTMF codes can be
directly transmitted through H.245 or H.225 protocol in outband mode, while fast
connect mode adopted, the DTMF codes can only be transmitted in outband mode
through H.225 protocol.
Example
# Configure DTMF code outband transmission in the fast connect mode for VoIP voice
entity 10.
[H3C-voice-dial-entity10] outband h245
1-81
1.1.69 overlap voip h323
Syntax
overlap voip h323

undo overlap voip h323
View
Parameter
None
Description
Use the overlap voip h323 command to configure the calling party to support h323
overlap mode for sending numbers.
Use the undo overlap voip h323 command to restore the default configuration.
By default, h323 overlap mode is not supported by the calling party.
Example
# Configure the calling party to support h323 overlap mode for sending numbers.
[H3C-voice-dial]overlap voip h323
1.1.70 payload-size
Syntax
payload-size { g711 | g723 | g726r16 | g726r24 | g726r32 | g726r40 | g729 }

time-length
undo payload-size { g711 | g723 | g726r16 | g726r24 | g726r32 | g726r40 | g729 }
View
Voice entity view
Parameter
g711: Specifies the time length of voice packets with g711 coding (g711alaw or
g711ulaw). It ranges from 10 to 30 milliseconds and defaults to 20 milliseconds.
g723: Specifies the time length of voice packets with g723 coding (g723r53 or
g723r63). It ranges from 30 to 180 milliseconds and defaults to 30 milliseconds.
1-82
g729: Specifies the time length of voice packets with g729 coding (g729r8 or g729a). It
ranges from 20 to 180 milliseconds and defaults to 30 milliseconds.
time-length: Duration for DSP to assemble a packet in the corresponding codec mode.
Description
Use the payload-size command to notify the underlying layer how much time DSP
spends assembling a voice packet, or the time length of each voice packet.
Use the undo payload-size command to restore the default.
This time length may differ by card type. Because voice entities, which are upper layer
relevant, are hardware independent, the upper-layer can only verify whether the
specified value is in the valid range for the applied codec mode. Whether this value is
valid within the range is decided by DSP based on hardware type. If valid, the value
delivered by the upper layer is used; if otherwise, the default value for the codec mode
is used.
If you find that the configured duration does not take effect, first check that the assigned
value is valid for the card type and codec mode.
Table 1-23 Valid ranges corresponding to cards
Codec mode G711 G723 G729 Description

10 to 30 30 to 180 20 to 180
Valid range 8FXS
(must be an (must be an (must be an
for C55xx integral integral integral VG2032
(milliseconds) multiple of multiple of multiple of VG2016
10) 30) 10)
30 to 180 20 to 180
Valid range 4VI/2VI/17VI
(must be an (must be an
for C54xx 20 integral integral VG1040
(milliseconds) multiple of multiple of VG1041
30) 10)
Default
20 30 20 ––
(milliseconds)
In voice dial program view, you can use the default entity command to configure global
attributes for voice entities, namely the default time that DSP spends assembling a
packet in each codec mode.
1-83
Related command: default entity, entity compression.
Example
# Set the time that DSP spends assembling a voice packet in g711 mode to 30
milliseconds for voice entity 8801.
[route-voice-dial-entity8801] payload-size g711 30
# Restore the default time that DSP spends assembling a voice packet in g711 codec
mode for voice entity 8801.
[route-voice-dial-entity8801] undo payload-size g711
# Set the default time that DSP spends assembling a voice packet in g729 mode to 180
milliseconds.
[route-voice-dial] default entity payload-size g729 180
# Restore the initial default time that DSP spends assembling a packet in g729 codec
mode in voice dial program view.
[route-voice-dial] undo default entity payload-size g729
1.1.71 plc-mode
Syntax
plc-mode { general | specific }

undo plc-mode
View
Parameter
general: Uses the universal frame erasure algorithm.

specific: Uses the specific algorithm provided by the voice gateway.
Description
Use the plc-mode command to configure packet loss compensation mode.

Use the undo plc-mode command to restore the default packet loss compensation
mode.
By default, the specific algorithm is used.
This command takes effect only on FXO and FXS interfaces.
Example
# Configure the voice gateway to use the universal packet loss compensation
algorithm.
1-84
[H3C-voice-line1/0/0] plc-mode general
1.1.72 priority
Syntax
priority priority-order
undo priority
View
Voice entity view
Parameter
priority-order: Priority of a voice entity. Its value ranges from 0 to 10. The smaller the
number is, the higher the priority is. That means 0 is the highest priority and 10 is the
lowest priority.
Description
Use the priority command to configure the priority levels for voice entities.
Use the undo priority command to restore the default priority level.
By default, the priority level is set to 0.
If you have configured priority levels for voice entities and have configured priority in
voice entity select rule (see select-rule), the system will first select the voice entity of
the highest priority when it initiates a call. If the voice entity of the highest priority fails, it
will try those of lower priority levels to initiate the call.
Example
# Set the priority level of voice entity 10 to 5.

[H3C-voice-dial-entity10] priority 5
1.1.73 private-line
Syntax
private-line string
undo private-line
View
Parameter
string: E.164 telephone number of the destination end, and it may include these
characters: 0 to 9, *, and #.
1-85
Description
Use the private-line command to configure private auto-ring mode for the subscriber
line and the E.164 telephone number of the destination end.
Use the undo private-line command to cancel the specified connection mode.
By default, no private auto-ring mode is configured.
This command is applicable to FXO, FXS, analog E&M subscriber-lines and digital E1
The private-line command is used to specify a connection mode for subscriber-line.
The parameter string will serve as the called number of all the calls incoming to this
subscriber line, i.e., after off-hook, the user need not perform any operation and the
system will dial out the string as the called number automatically.
If the private-line command is not configured, when the subscriber-line enters an
off-hook status, the standard session application program will generate a dial tone until
enough numbers are collected and the call process is completed.
Example
# Set an automatic dialing to 5559262 after off-hook on the subscriber line 1/0/0.
[H3C-voice-line1/0/0] private-line 5559262
1.1.74 receive gain
Syntax
receive gain value

undo receive gain
View
Parameter
value: Voice input gain ranging from -14.0 to 14.0 in dB with one digit after the decimal
point. By default, the value is 0 dB.
Description
Use the receive gain command to configure the gain value at the voice subscriber-line
input end.
Use the undo receive gain command to restore the default value.
1-86
When the voice signal on the line attenuates to a relatively great extent, this command
can be used to appropriately enhance the voice input gain.
Caution:
Adjusting the gain may cause voice calls unable to be established. Therefore, when
required, adjust the gain only under the direction of technical support staff.
Related command: transmit gain and subscriber-line.
Example
# Configure the voice input gain as 3.5dB on subscriber line 1/0/0.

[H3C-voice-line1/0/0] receive gain 3.5
1.1.75 reset voice call-history-record line
Syntax
reset voice call-history-record line
View
User view
Parameter
None
Description
Use the reset voice call-history-record line command to clear the call history of all
voice subscriber lines, or information displayed by the display voice
call-history-record line command.
Example
# Clear the call history of all voice-subscriber lines.

<H3C> reset voice call-history-record line
Really reset all of the call-history information? [y]y
All of the call-history information have been removed!
1-87
1.1.76 reset voice ipp
Syntax
reset voice ipp
View
User view
Parameter
None
Description
Use the reset voice ipp command to reset IPP statistics.

Related command: display voice vpp.
Example
# Clear IPP statistics.

<H3C> reset voice ipp
1.1.77 reset voice rcv
Syntax
reset voice rcv
View
User view
Parameter
None
Description
Use the reset voice rcv command to reset RCV statistics.

Related command: display voice rcv statistic.
Example
# Clear RCV statistics.

<H3C> reset voice rcv
1-88
1.1.78 reset voice vpp
Syntax
reset voice vpp
View
User view
Parameter
None
Description
Use the reset voice vpp command to reset VPP statistics.

Related command: display voice vpp.
Example
# Clear VPP statistics.

<H3C> reset voice vpp channel 1
1.1.79 reset voice voip data-statistic
Syntax
reset voice voip data-statistic
View
User view
Parameter
None
Description
Use the reset voice voip data-statistic command to reset statistics information of
voice data.
After voice data statistics is enabled via the vqa data-statistic command, all statistics
items (time for successfully searching the voice table, total number of received data
packets, time for searching the table in fast and common modes and voice and fax of
receive and transmit channels) perform data accumulation until all counters are cleared
via the reset voice voip data-statistic command. After that, new statistics begins.
Related command: vqa data-statistic and display voice voip data-statistic.
1-89
Example
# Clear statistics information of voice data.

<H3C> reset voice voip data-statistic
1.1.80 ring-generate
Syntax
ring-generate
undo ring-generate
View
Parameter
None
Description
Use the ring-generate command to configure the gateway at the called side to give a
ringback tone when in quick start mode.
Use the ring-generate command to remove the configuration and then the ringback
tone generated by the switch will be transmitted transparently.
By default, the gateway at the called side gives a ringback tone when in quick start
mode.
Note:
FXS subscriber-lines do not support this function.
Example
# Configure the gateway at the called side to give a ringback tone when in quick start
mode.
[H3C-voice-line2/0/0] undo ring-generate
1.1.81 rule
Syntax
rule rule-tag input-number output-number [ number-type input-number-type

output-number-type ] [ numbering-plan input-numbering-plan output-numbering-plan ]
1-90
undo rule { rule-tag | all }
View
Parameter
all: Deletes all number substitution rules.

rule-tag: Number of a rule. Its value ranges from 0 to 127.
input-number: Input string for number substitute. Format of the number is [ ^ ] [ + ] string
[ $ ], with the maximum length of 31 digits. The characters are described in the
following:
z ^: Indicates a number must be matched from the first character. When the system
matches a subscriber number with the match string, it must begin from the first
character of the subscriber number.
E.164 compliant.
z $: Indicates that the last character of the number must be matched, that is, the last
character of the number must match the last character of the match string.
z string: String composed of any characters of “0123456789#*.!%”. The characters
are described in the following table:
Character Meaning
A wildcard. It can match any digit of a valid number. For example,
. 555. . . . matches any string that begins with 555 and with four
additional characters.
!
appears once. For example, 56!1234 can match 51234 and 561234.
The character or characters right in front of it appears once or several
+
times.
%
appears several times.
output-number: Output string for number substitute. It is composed of any characters of

“0123456789#*.”, with the largest length of 31 digits. The meanings of the characters
are shown in the table above.
number-type: Number type.
numbering-plan: Numbering plan.
1-91
input-number-type: Input type number, the value of which are abbreviated, any,
international, national, network, reserved, subscriber, and unknown.
z abbreviated: Abbreviated number type.
z any: It is not a specific number type, meaning any input number type can match.
z international: International number type.
z national: National number type.
z network: Network-specific number type.
z reserved: Reserved for extension.
z subscriber: Subscriber number type.
z unknown: Unknown number type.
output-number-type: Output number type, refer to the argument input-number-type for
its value, excluding any.
z abbreviated: Abbreviated number type.
z international: International number type.
z national: National number type.
z network: Network-specific number type.
z subscriber: Subscriber number type.
z unknown: Unknown number type.
input-numbering-plan: Input numbering plan, the value of which are any, isdn, national,
private, reserved, telex, and unknown.
z any: It is not a specific numbering plan, meaning any input numbering plan can
match.
z data: Data numbering plan.
z isdn: ISDN telephone numbering plan.
z national: National standard numbering plan.
z private: Private numbering plan.
z telex: Subscriber telex numbering plan.
z unknown: Unknown numbering plan.
output-numbering-plan: Output numbering plan, refer to the argument
input-numbering-plan for its value, excluding any.
z data: Data numbering plan.
z isdn: ISDN telephone numbering plan.
z national: National standard numbering plan.
z private: Private numbering plan.
z telex: Subscriber telex numbering plan.
z unknown: Unknown numbering plan.
Pay attention to the following points:
1-92
The character or characters in front of "!”, “%”, and “+” are not to be matched accurately.
They are handled similar to the wildcard “.”. Moreover, these symbols cannot be used
alone. There must be a valid digit or digits in front of them.
Dots in input-number and output-number are handled in three ways:
z Treat dots in output-number as invalid. When you use the dot-match command to
configure the dot match rule as end-only (that is, only dots at the end of the input
format are handled), the dots in output-number are discarded immediately, and the
digits corresponding to all the dots at the end of input-number are added to the end
of output-number.
z Discards extra dots in output-number. When you use the dot-match command to
configure the dot match rule as right-left (from right to left) or left-right (from left
to right), and the dot digits in output-number are more than those in input-number,
all digits corresponding to the dots in input-number are selected to replace the dots
in output-number one by one from left to right. The dots not replaced in
output-number are discarded. That is, the dots to the right are discarded.
z Discards (the digits corresponding to) the extra dots in input-number. When you
use the dot-match command to configure the dot match rule as right-left (from
right to left) or left-right (from left to right), and the number of dot digits in
input-number are greater than or equal to that in output-number, two cases exist:
Case 1: For right-left matching, extract from right to left the digits corresponding to the
dots in input-number and use them to replace the dots in output-number one by one.
The digits corresponding to dots that are not extracted in input-number are discarded.
Case 2: For left-right matching, extract from left to right the digits corresponding to the
dots in input-number and use them to replace the dots in output-number one by one.
The digits corresponding to dots that are not extracted in input-number are discarded.
Description
Use the rule command to configure the number-substitute rules.

Use the undo rule command to delete the specified or all number-substitute rules.
By default, no number-substitute rules are configured.
When you have successfully created a number-substitute list, you need to use the
command to configure the number-substitute rules in it.
Related command: substitute, number-substitute, first-rule, and dot-match.
Example
# Configure the number-substitute rules for number-substitute list 1

[H3C-voice-dial-substitute1] rule 1 ^91 1
1-93
1.1.82 select-rule rule-order
Syntax
select-rule rule-order 1 [ 2 [ 3 ] [ 4 ]]
undo select-rule rule-order
View
Parameter
The following lists the meanings of the serial numbers.

1: Defines the voice entity select rule as exact match.
2: Defines the voice entity select rule as priority.
3: Defines the voice entity select rule as random select.
4: Defines the voice entity select rule as longest unused, meaning the longer the voice
entity is unused, the higher its priority is.
Table 1-25 Meanings of the serial numbers
Serial Number Meaning

1 Exact match
2 Priority
3 Random select
4 Longest unused
Description
Use the select-rule rule-order command to configure the select rule of voice entities.
Use the undo select-rule rule-order command to restore the default value.
By default, the order of voice entity select rules is 1->2->3. That means exact match
first, voice entity priority second, and random select last.
Use the select-rule rule-order command to configure three rules of different priorities
at most. But you cannot configure the same rules. Order of priorities is the order of
select rules. If there are rules of multiple priorities, the system first select voice entities
according to the rule of first priority. If that rule cannot distinguish the priorities of the
voice entities, the rule of second priority will be used. The rule of third priority will be
used for the voice entities that cannot be distinguished by the first and second rules,
and so on. If all the rules cannot distinguish voice entity priorities, Identifiers of voice
entities are used for selection, and the voice entity with the smallest identifier will be
preferred.
1-94
The select rules are described in the following:

1) Exact match. From left to right, the more digits it matches, the better the precision
is. The system stops using the rule once it meets a digit that cannot be matched
uniquely.
2) Priority. Voice entities are divided into 11 classes, with values ranging from 0 to 10.
The smaller the value is, the higher the priority is. That means 0 is the highest
priority.
3) Random select. The system selects a voice entity from a group of qualified voice
entities randomly.
4) Longest unused. The longer the voice entity is unused, the higher its priority is.
There will be no collision between voice entities when random select is applied.
Therefore, random select can only be used as the last rule or the only rule.
Related command: select-rule search-stop and select-rule type-first.
Example
# Set the select rule of voice entities to exact match-> priority-> longest unused.
[H3C-voice-dial] select-rule rule-order 1 2 4
1.1.83 select-rule search-stop
Syntax
select-rule search-stop max-number

undo select-rule search-stop
View
Parameter
max-number: Maximum number of voice entities found, in the range 1 to 128.
Description
Use the select-rule search-stop command to configure the maximum number of voice
entities found.
Use the undo select-rule search-stop command to restore the maximum number of
voice entities found to 128.
By default, no maximum number of the search for voice entities is configured. That is,
the maximum number of the search for voice entities is the default value 128.
There might be multiple voice entities that meet the call requirements during call
connection. If a voice entity fails, the system can search for other qualified ones and
continue the call. The select-rule search-stop command is used to define the
1-95
maximum number of qualified voice entities to be found before the search stops. If
there are multiple qualified voice entities, only the one of the highest priority is used to
initiate a call.
Related command: select-rule rule-order and select-rule type-first.
Example
# Configure to search 5 voice entities at most.

[H3C-voice-dial] select-rule search-stop 5
1.1.84 select-rule type-first
Syntax
select-rule type-first 1st-type 2nd-type 3rd-type

undo select-rule type-first
View
Parameter
1st-type: Serial number of the type of the first priority, ranging from 1 to 3. The
meanings of the serial numbers are shown in the following table.
2nd-type: Serial number of the type of the second priority, ranging from 1 to 3. It cannot
be the same number as 1st-type.
3rd-type: Serial number of the type of the third priority, ranging from 1 to 3. It cannot be
the same number as 1st-type or 2nd-type.
Table 1-26 Meaning of the serial numbers
Serial Number Meaning

1 VoIP voice entity
2 POTS voice entity
3 VoFR voice entity
Description
Use the select-rule type-first command to configure the type-first select rules for voice
entities.
Use the undo select-rule type-first command to delete the type-first select rules.
By default, voice entities are not selected according to their types.
1-96
The command is used to configure the select order for voice entities according to their
types. If multiple voice entities (of different types) are qualified for a call connection, the
system will select a suitable voice entity according to the type-first rules configured by
the select-rule type-first command. The order of inputting the parameters determines
voice entity type priorities. The system selects the first type first and then the third type
last.
Related command: select-rule rule-order, select-rule search-stop.
Example
# Configure to select voice entities according to the type-first rules: VoIP-> POTS ->
VoFR.
[H3C-voice-dial] select-rule type-first 2 1 3
1.1.85 select-stop
Syntax
select-stop
undo select-stop
View
Voice entity view
Parameter
None
Description
Use the select-stop command to disable the search for voice entities.
Use the undo select-stop command to re-enable the search for voice entities.
By default, the search for voice entities is enabled.
There might be multiple qualified voice entities for a call connection. If a voice entity
fails, the system can search for another one that meets the requirements and continue
the call. In that case, you can use this command to configure the system to stop the
search when it has found the specified voice entity.
Related command: select-rule rule-order, select-rule type-first.
Example
# Configure the system to stop the search once voice entity 10 is found.
[H3C-voice-dial-entity10] select-stop
1-97
1.1.86 send-busytone
Syntax
send-busytone { enable | time seconds }

undo send-busytone { enable | time }
View
Parameter
enable: Enables busy-tone sending on the FXO interface.

time seconds: Duration of busy tone, in the range 2 to 15 seconds. It defaults to 3
seconds. This parameter is not available when busy-tone sending is disabled.
Description
Use the send-busytone command to enable busy tone sending on the FXO interface.
Use the undo send-busytone command to disable busy tone sending on the FXO
interface.
This command is valid only on FXO interfaces.
By default, busy tone sending is disabled.
Example
# Enable FXO interface 1/0/0 to send busy tone that lasts 5 seconds.
[H3C-voice] subscriber-line 3/1
FXO interface encountered
[H3C-voice-line3/1] send-busytone enable
[H3C-voice-line3/1] send-busytone time 5
1.1.87 send-number (in Voice Entity View)
Syntax
send-number { digit-number | all | truncate }

undo send-number
View
Parameter
digit-number: Number of least significant digits that are sent, ranging from 0 to 31. It is
not larger than the total number of digits of the called number.
1-98
all: All digits of the called number.

truncate: Sends the truncated called number.
Description
Use the send-number command to configure the number sending mode.

Use the undo send-number command to restore the default mode.
By default, the truncate mode is used.
This command only applies to POTS voice entities. As for the numbers sent to PSTN,
this command is used to control how to send the called numbers. You can not only
configure to send some digits (defined by digit-number from right to left) or all digits of
the called number, but also the truncated called numbers, i.e., the numbers that match
the wildcard “.” at the end.
Related command: dot-match and match-template.
Example
# Configure voice entity 10 to send the 6 least significant digits of the called number.
[H3C-voice-dial-entity10] send-number 6
1.1.88 send-number (in Voice Subscriber Line View)
Syntax
send-number
undo send-number
View
FXS voice subscriber-line view
Parameter
None
Description
Use the send-number command to configure the FXS voice subscriber-line to allow
the FXS to send called numbers.
Use the undo send-number command to disable the FXS to send called numbers.
By default, the FXS is disabled to send called numbers.
Normally, the FXS interface is connected to a standard telephone, so the FXS does not
need to send called numbers. But sometimes, the FXS interface is connected to the
FXO interface. In this case, when the FXO receives a ring from the FXS, it imitates an
off-hook and sends dial tone for the second stage of dial. With the send-number feature
1-99
enabled, the FXS voice subscriber-line can send called numbers to the connected FXO
interface directly to free the calling party from the second stage of dial.
Example
# Enable the FXS to send called numbers on FXS voice subscriber-line 0/0/0.
[H3C-voice-line0/0/0] send-number
1.1.89 send-ring
Syntax
send-ring
undo send-ring
View
Parameter
None
Description
Use the send-ring command to enable the local end to play ringback tone.
Use the undo send-ring command to disable the local end to play ringback tone.
This configuration takes effect only in fast-connect mode.
By default, the local end does not play ringback tone.
Example
# Enable the local end to play ringback tone.

[H3C-voice-dial-entity8801] send-ring
1.1.90 service data
Syntax
service data
undo service data
View
Voice entity view
1-100
Parameter
None
Description
Use the service data command to enable data call service.

Use the undo service data command to disable data call service.
By default, data call service is disabled.
Example
# Configure the voice entity to support data dial service.

[H3C-voice-dial-entity100] service data
1.1.91 shutdown (in Voice Entity View)
Syntax
shutdown
undo shutdown
View
Voice entity view
Parameter
None
Description
Use the shutdown command in voice entity view to configure to change the
management status of specified voice entity from UP to DOWN.
Use the undo shutdown command in voice entity view to restore the voice entity
management status from DOWN to UP.
By default, the voice entity management status is UP.
Running command shutdown will cause the voice entity unable to make calls.
Example
# Change the status of voice entity 4 to DOWN.

[H3C-voice-dial-entity4] shutdown
1.1.92 shutdown (in Voice Subscriber Line View)
Syntax
shutdown
1-101
undo shutdown
View
Parameter
None
Description
Use the shutdown command in voice subscriber-line view to configure the voice
subscriber-line from UP to DOWN.
Use the undo shutdown command in voice subscriber-line to restore the voice
subscriber-line from DOWN to UP.
By default, the voice subscriber-line status is UP.
The function of the POTS voice subscriber-line specified by the command shutdown is
disabled, whereas using command undo shutdown will enable all the voice
subscriber-lines on the voice card.
Example
# Shut down voice subscriber-line 0/0/0.

[H3C-voice-line0/0/0] shutdown
1.1.93 silence-th-span
Syntax
silence-th-span threshold time-length

undo silence-th-span
View
FXO subscriber-line view
Parameter
threshold: Silence detection threshold. If the voice signal from the switch is smaller than
this value, the system regards it as silence. This threshold ranges from 0 to 200 and
defaults to 20. Normally, the signal amplitude on the links without traffic is in the range 2
to 5.
time-length: Duration of silence detection. Upon expiration of this duration, the system
goes on-hook automatically. It ranges from 2 to 7200 (default) seconds.
1-102
Description
Use the silence-th-span command to set the silence detection parameters that have
the system take automatic on-hook action.
Use the undo silence-th-span command to restore the default.
Silence detection-based disconnection applies to prevent an FXO interface from
hanging when the busy tone parameters provided by the connected PBX are special. In
normal cases, you need not to use this function to tune the busy tone detection
parameters and any misconfiguration may result in incorrect disconnection.
When configuring this command, you are recommended to test multiple parameter sets
for the one that allows quick resource release on the FXO interface after the user hangs
up while eliminating the likelihood of incorrect on-hook.
Example
# Set the silence detection threshold to 20 and the duration to 10 seconds.

[H3C-voice-line0/0/0] silence-th-span 20 10
1.1.94 special-service
Syntax
special-service enable
undo special-service enable
View
Parameter
enable: Enables the special-service numbers. All special-service numbers are

enabled.
Description
Use the special-service command to enable or disable the special-service numbers.

By default, the special-service numbers are disabled.
The special-service numbers include: do-not-disturb, call forwarding on busy, call
forwarding unconditionally, call forwarding on no reply, alarm service, and call
forwarding during conversation (not supported at present). If you use the command to
disable the special-service numbers, all the numbers are disabled, and vice versa.
Related command: special-service, transfer-number.
Example
# Enable the special-service numbers.
1-103
[H3C-voice-dial] special-service enable
1.1.95 subscriber-line
Syntax
subscriber-line line-number
View
Any voice view except for voice entity view
Parameter
line-number: Subscriber line number.
Description
Use the subscriber-line command to enter FXS, FXO, analog E&M, or digital E1/T1
voice subscriber-line view.
In the view, use subscriber-line command to enter the voice subscriber-line view.
When line-number is the FXS voice subscriber-line, the system will enter the FXS voice
subscriber-line view. When the line-number is the analog E&M voice subscriber-line,
the system will enter analog E&M voice subscriber-line view, etc.
Related command: entity.
Example
# Enter the view of the voice subscriber line 0/0/0 in AR46 series router voice view.
[H3C-voice] subscriber-line 0/0/0
FXO interface encountered
[H3C-voice-line0/0/0]
1.1.96 substitute
Syntax
substitute { called | calling } list-number

undo substitute { called | calling }
View
Voice subscriber line view, voice entity view
Parameter
called: Applies the number-substitute rules to the called number.

calling: Applies the number-substitute rules to the calling number.
1-104
list-number: Serial number of the number-substitute list. Its value ranges from 1 to
2147483647.
Description
Use the substitute command to bind the calling/called number-substitute list to the
voice subscriber-line or voice entity.
Use the undo substitute command to delete the calling/called number-substitute list
that is bound to the voice subscriber-line or voice entity.
By default, no number-substitute list is bound to voice subscriber-line or voice entity.
That means the system does not substitute number.
Firstly, you should use the number-substitute list-number command to configure the
number-substitute lists in voice dial program view, and use the rule command to
configure the rules in the list. Secondly, you should use the substitute command to
apply the number-substitute list to the voice subscriber line or voice entity.
Note:
According to network requirements, you can complete number –substitute in the
following two ways.
z Before voice entities are matched, you can use the substitute command in the
voice subscriber-line view to substitute the calling/called numbers corresponding to
the specified subscriber-line.
z After voice entities are matched and before a call is initiated, you can use the
substitute command in voice entity view to substitute the specified calling/called
numbers.
Related command: number-substitute and rule.
Example
# Apply called number-substitute list 6 to voice subscriber-line 0/0/0.

[H3C-voice-line0/0/0] substitute called 6
1.1.97 substitute incoming-call
Syntax
substitute incoming-call { called | calling } list-number

undo substitute incoming-call { called | calling } { all | list-number }
View
1-105
Parameter

2147483647.
all: All number-substitute rule lists.
Description
Use the substitute incoming-call command to bind the calling/called numbers of the
incoming calls from the network side to the number-substitute list.
Use the undo substitute incoming-call command to cancel the binding.
By default, no number-substitute list is bound. That means the system does not
substitute any number.
First, you can use the number-substitute list-number command in voice dial program
view to create a number-substitute list, and then use the rule command to configure the
rules in the list. Second, you can use the substitute incoming-call command to apply
the number-substitute list to the strategy of incoming calls from the network.
You should follow these rules in using the command:
1) 32 number-substitute lists can be bound at most.
2) The system searches all the rules in the number-substitute lists in order, and it
stops the search once one rule works.
Note:
According to network requirements, before voice entities are matched, you can use the
substitute incoming-call command in the voice dial program view to substitute all the
calling/called numbers of the incoming calls from the network side.
Related command: number-substitute, rule, and substitute outgoing-call.
Example
# Apply number-substitute list 5 to the called numbers of the incoming calls from the
network side.
[H3C-voice-dial] substitute incoming-call called 5
1-106
1.1.98 substitute outgoing-call
Syntax
substitute outgoing-call { called | calling } list-number

undo substitute outgoing-call { called | calling } { all | list-number }
View
Parameter

2147483647.
all: Deletes all number-substitute rule lists.
Description
Use the substitute outgoing-call command to bind the calling/called numbers of the
outgoing calls from the network side to the number-substitute list.
Use the undo substitute outgoing-call command to cancel the binding.
By default, no number-substitute list is bound. That means the system does not
substitute any number.
First, you can use the number-substitute list-number command in voice dial program
view to create a number-substitute list, and then use the rule command to configure the
rules in the list. Second, you can use the substitute outgoing-call command to apply
the number-substitute list to the policy of outgoing calls from the network.
You should follow these rules to use the command:
1) 32 number-substitute lists can be bound at most.
2) The system searches all the rules in the number-substitute lists in order, and it
stops the search once one rule works.
Note:
According to network requirements, before voice entities are matched, you can use the
substitute outgoing-call command in the voice dial program view to substitute all the
calling/called numbers of the outgoing calls from the network side.
Related command: number-substitute, rule, and substitute incoming-call.
1-107
Example
# Apply number-substitute lists 5, 6, and 8 to the called numbers of the outgoing calls
from the network side.
[H3C-voice-dial] substitute outgoing-call called 5
1.1.99 terminator
Syntax
terminator character
undo terminator
View
Parameter
character: Telephone number terminator. The valid characters are digits 0 through 9,
pound sign (#), and asterisk (*).
Description
Use the terminator command to configure a special character string as the terminator
of a telephone number whose length is variable.
Use the undo terminator command to cancel the existing setting.
By default, no terminator is configured.
In areas where telephone numbers with variable are used, a character can be specified
as a terminator in order to avoid that the system cannot dial until the dial is timeout.
Related command: match-template and timer.
Example
# Configure using “#” as a terminator.

[H3C-voice-dial] terminator #
1.1.100 timer dial-interval
Syntax
timer dial-interval seconds

undo timer dial-interval
1-108
View
Parameter
seconds: The maximum interval between two digits, which is in the range of 1 to 300
seconds, by default seconds is 10s.
Description
Use the timer dial-interval command to configure the timer that the system waits for a
subscriber to dial the next digit.
Use the undo timer dial-interval command to restore the default time settings.
This command is applied to FXO, FXS subscriber-lines.
This timer will restart whenever the subscriber dials a digit and will work in this way until
all the digits of the number are dialed. If the timer times out before the dialing is
completed, the subscriber will be prompted to hook up and the call is terminated.
Setting the argument seconds of a timer to 0 will disable this timer.
Example
# Set the maximum duration waiting for the next digit on voice line 0/0/0 to 5 seconds.
[H3C-voice-line0/0/0] timer dial-interval 5
1.1.101 timer first-dial
Syntax
timer first-dial seconds

undo timer first-dial
View
Parameter
seconds: The maximum time waiting for the first dial, which is in the range of 1 to 300
seconds, by default seconds is 10s.
Description
Use the timer first-dial command to configure the timer that the system waiting for a
subscriber to dial the first digit.
Use the undo timer first-dial command to restore the default time settings.
This command is applied to FXO, FXS subscriber-lines.
1-109
Upon the expiration of the timer, the subscriber will be prompted to hook up and the call
is terminated.
Example
# Set the maximum duration waiting for the first dial on voice line 0/0/0 to 10 seconds.
[H3C-voice-line0/0/0] timer first-dial 10
1.1.102 timer ring-back
Syntax
timer ring-back seconds

undo timer ring-back
View
Parameter
seconds: Maximum duration of ringback tone, in the range 5 to 120 seconds. It defaults
to 60 seconds. This argument applies on interfaces that are analog E&M, digital E&M,
FXS, or FXO.
Description
Use the timer ring-back command to configure the maximum duration for the system
to send the ringback tone.
Use the undo timer ring-back command to restore the default.
This command applies only on interfaces that are analog E&M, digital E&M, FXS, or
FXO.
Example
# Set the maximum time duration for the system to send ringback tone to eight
seconds.
[H3C-voice-line0/0/0] timer ring-back 8
1.1.103 timer wait-digit
Syntax
timer wait-digit { infinity | seconds }

undo timer wait-digit
1-110
View
Parameter
infinity: Infinite time.

seconds: The maximum duration waiting for a digit, in the range 3 to 600 seconds. It
defaults to 5 seconds. This argument only applies to analog and digital E&M interfaces.
Description
Use the timer wait-digit command to configure the maximum time duration that the
system waits for a digit.
Use the undo timer wait-digit command to restore the default time settings.
This command is applied to analog E&M and digital E&M subscriber-lines.
Example
# Set the maximum duration waiting for the first dial on voice line 0/0/0 to 10 seconds.
[H3C-voice-line0/0/0] timer first-dial 10
1.1.104 trace interval
Syntax
trace interval packets

undo trace interval
View
Voice view
Parameter
packets: Number of voice packets, which is in the range of 1 to 10000 and defaults to
200.
Description
Use the trace interval command to configure the interval for information recording in
the debugging process, that is, the number of voice packets upon the pass of which a
record will be made.
Use the undo trace interval command to restore the default.
Example
# Record debugging information for every 300 voice packets.
1-111
[H3C-voice] trace interval 300
1.1.105 transmit gain
Syntax
transmit gain value

undo transmit gain
View
Parameter
value: Voice output gain ranging -14.0 to 14.0 in dB with one digit after the decimal point.
By default, the value is 0 dB.
Description
Use the transmit gain command to configure the voice subscriber-line output end gain
value.
Use the undo transmit gain command to restore the default value.
When a relatively small voice signal power is needed on the output line, this command
can be used to properly increase the voice output gain value to adapt to the output line
signal requirement.
Related command: receive gain and subscriber-line.
Caution:
Adjusting the gain may cause voice calls unable to be established. Therefore, when
required, adjust the gain only under the direction of technical support staff.
Example
# Configure the voice output gain value as -6.7dB on subscriber line 0/0/0
[H3C-voice-line0/0/0] transmit gain -6.7
1-112
1.1.106 tunnel-on
Syntax
tunnel-on
undo tunnel-on
View
Parameter
None
Description
Use the tunnel-on command to enable tunnel function.

Use the undo tunnel-on command to disable tunnel function.
By default, the tunnel function is disabled.
Tunnel function can assist in negotiating process of such nonstandard H.245 message
as transmitting DTMF code transparently.
Only after successfully enabling the fast connect mode, can one fulfill the configuration
of tunnel function. As the calling gateway, it can be decided whether or not to enable the
tunnel function for each call on the router. Being the called gateway, it shall be decided
whether or not to enable the tunnel function based on the status of the calling gateway.
That is, if the function is enabled on calling gateway, it will also be enabled on the called
gateway. Otherwise, tunnel function is disabled on both sides. In order to transmit
DTMF code transparently via the fast connect mode, the tunnel function must be
enabled. Otherwise DTMF code cannot be transmitted.
During actual configuration, it is only necessary to fulfill this command for the VoIP
voice entity at the calling gateway.
Related command: fast-connect and outband.
Example
# Enable the tunnel function for VoIP voice entity 10.

[H3C-voice-dial-entity10] tunnel-on
1.1.107 type
Syntax
type { 1 | 2 | 3 | 5 }
undo type
1-113
View
Parameter
1, 2, 3 and 5: Correspond respectively to the four signal types of analog E&M

subscriber-lines, i.e. type 1, 2, 3 and 5.
Description
Use the type command to configure the analog E&M subscriber-line signal type.
Use the undo type command to cancel the existing setting.
By default, the analog E&M subscriber-line signal type is type 5.
This command is only applicable to the analog E&M subscriber-line.
Of the analog E&M signaling types, a PBX transmits signals on the M line (M means
Mouth, indicating it is transmitted from a PBX), and receives signals from E line (E
means Ear, indicating it is received by the PBX). So, as to a router that has voice
function, the router receives the M signal of the PBX, and transmits E signal to the PBX.
The analog E&M subscriber-line has four data transmission (signal) lines, and two or all
the four lines are used according to different types:
E (“Ear” or “receive”): the signal line from the router side to the PBX side.
M (“Mouth” or “transmit”): the signal line from the PBX side to the router side.
SG (Signal Ground): used for some types of analog E&M only.
SB (Signal Battery): used for some types of analog E&M only.
Example
# Configure subscriber line 0/0/0 analog E&M subscriber-line type as type 3.

[H3C-voice-line0/0/0] type 3
1.1.108 vad-on
Syntax
vad-on
undo vad-on
View
Voice entity view
Parameter
None
1-114
Description
Use the vad-on command to enable silence detection function.

Use the undo vad-on command to disable silence detection function.
By default, the silence detection function is disabled.
VAD is an abbreviation of Voice Activity Detection, generally termed as silence
detection. Its basic idea is to detect and delete any silence on the basis of the difference
of energy between the voice signals of people’s conversation and their silence signals,
so that no signals are produced; and only when an abrupt activity tone is detected will a
voice signal be generated and transmitted. It is displayed by research that no less than
50% transmission bandwidth can be attained by the use of VAD technology.
Example
# Enable the VAD function of POTS voice entity 10.

[H3C-voice-dial-entity10] vad-on
1.1.109 vi-card busy-tone-detect
Syntax
vi-card busy-tone-detect auto index line-number [ free | time ]
View
Voice view
Parameter
Index: Identifies busy tone detection feature types, in the range 0 to 3.

line-number: Subscriber line number, the range of which is determined upon the router
type and the card inserted on. It can only be an even number.
free: Releases data and stop busy tone detection.
time: Specifies the time for busy tone detection.
Description
Use the vi-card busy-tone-detect command to configure busy tone detection method
on FXO subscriber-line.
This command is only valid for FXO subscriber-lines, and can only be configured on the
first subscriber-line of each two-subscriber-line voice board or four-subscriber-line
voice board. Otherwise, the busy tone detection is not valid.
The system supports four types of busy tone detection features, which are identified by
the index parameter.
1-115
The command vi-card busy-tone-detect is applicable in most cases, which can

facilitate the busy tone detection.
Related command: vi-card custom-toneparam.
Example
# Enable busy tone detection feature 0 on the subscriber line 2.

[H3C-voice] vi-card busy-tone-detect auto 2
1.1.110 vi-card cptone-custom
Syntax
vi-card cptone-custom type arg0 arg1 arg2 arg3 arg4 arg5 arg6
undo vi-card cptone-custom { type | all }
View
Voice view
Parameter
Type: Prompt tone type, currently supporting the following types: dial-tone,
special-dial-tone, busy-tone, congestion tone, ringback-tone, and waiting-tone.
arg0: Combination mode, in the range of 0 to 2. 0 indicates the overlapping of the two
frequencies; 1 indicates the modulation of the two frequencies; 2 indicates the
alternation of the two frequencies.
arg1/arg2: Frequencies of the two single-frequency tones in Hz. The range of the two
frequencies is related to the combination mode (arg0). If the mode is overlapping or
alternation, the range of the two frequencies is 300 to 3400; if the mode is multiplication,
the range of the two frequencies is 0 to 3400 and the absolute value of the two
frequencies’ sum and difference must be in the range of 300-3400.
arg3: The on duration of the first on-off ratio in ms, in the range of 30 to 8191. If the
prompt tone is played continually, the value is set to 8192.
arg4: The off duration of the first on-off ratio in ms, in the range of 30 to 8191.
arg5: The on duration of the second on-off ratio in ms, in the range of 30 to 8191.
arg6: The off duration of the second on-off ratio in ms, in the range of 30 to 8191.
all: All types of prompt tones.
Table 1-27 Type of prompt tone

dial-tone Dial tone
special-dial-tone Special dial tone
1-116

congestion-tone Congestion tone
busy-tone Busy tone
ringback-tone Ringback-tone
waiting-tone Waiting tone
Description
Use the vi-card cptone-custom command to set the prompt tone parameters of the
system.
Use the undo vi-card cptone-custom command to delete the prompt tone
parameters.
Note:
After the configuration of the prompt tone parameters, these parameters cannot take
effect immediately. You must use the cptone cs command in subscriber line view to
validate your configuration.
Example
# Set the busy tone parameters, 425 Hz in single frequency, and the on or off duration is
350 ms.
[Router-voice] vi-card cptone-custom busy-tone 0 425 425 350 350 350 350
1.1.111 vi-card reboot
Syntax
vi-card reboot slot-number
View
Voice view
Parameter
slot-number: Slot number where the voice card is located.
Description
Use the vi-card reboot command to reboot a voice card.
1-117
To reset a voice card will interrupt all the service on the voice card, and re-initialize the
card status. Generally, if the voice card works abnormally (e.g. the configuration is
correct but normal connection is not possible), this operation can be used. You can
view the card indicator status when resetting the voice card to judge whether to perform
the reset operation.
First use command display version to display the distributed slots of the voice cards in
the router.
Related command: display version.
Example
# Reset the voice card of slot 3.

[H3C-voice] vi-card reboot 3
1.1.112 voice-setup
Syntax
voice-setup
undo voice-setup
View
System view
Parameter
None
Description
Use the voice-setup command to enter voice view and enable voice services.
Use the undo voice-setup command to disable all voice services.
By default, all voice services are disabled.
Example
# Enter voice view and enable voice services.

[H3C] voice-setup
Starting voice service, please waiting......
[H3C]
Succeed in starting voice service!
# Disable all voice services.

[H3C] undo voice-setup
Warning: Voice service will be stopped! Continue? [Y/N]y
Stopping voice service, please waiting......
1-118
[H3C]
Succeed in stopping voice service!
1.1.113 voip calledtunnel
Syntax
voip calledtunnel enable

undo voip calledtunnel enable
View
Voice view
Parameter
enable: Enables the tunnel function on the called gateway.
Description
Use the voip calledtunnel enable command to enable the tunnel function on the
called gateway.
Use the undo voip calledtunnel enable command to disable the tunnel function on
the called gateway.
By default, the tunnel function on the called gateway is enabled.
When the router is a called gateway, it decides whether to use the tunnel function
depending on the configuration of the voip calledtunnel command. To interoperate
with devices that do not support tunneling using H.323 recommendation, you need to
disable with the undo form of this command the tunnel function on the called gateway.
Related command: tunnel-on.
Example
# Disable the tunnel function on the called gateway.

[H3C-voice] undo voip calledtunnel enable
1.1.114 voip call-start
Syntax
voip call-start { fast | normal }

undo voip call-start
View
Voice view
1-119
Parameter
fast: The called GW initializes calls in a fast way.

normal: The called GW initializes calls in a non-fast way.
Description
Use the voip call-start command to configure a call initialization mode for the called
GW.
Use the undo voip call-start command to restore the default.
By default, the fast mode is used.
As the process of faculty negotiation is omitted in fast connect procedures, the faculties
of the two parties are determined by the GW. If a router acts as a calling GW, you can
enable or disable fast connect for each channel of initiated calls. If it acts as a called
GW, it will use or not use the fast connect mode to initialize calls depending on the
parameters of the voip call-start command, in the case that the calling GW uses the
fast connect mode.
For related configurations, see fast-connect command.
Example
# Configure the called gateway to initialize calls in normal mode.

[H3C-voice] voip call-start normal
1.1.115 voip h323-descriptor
Syntax
voip h323-descriptor descriptor

undo voip h323-descriptor
View
Voice view
Parameter
descriptor: The description character string of H.323, in the length of 1 to 64. By default,
the descriptor is "Comware Gateway".
Description
Use the voip h323-descriptor command to configure the description character string
of the voice gateway H.323.
It is recommended to configure with default value, also you can configure according to
the actual requirements. If both ends are the device based on Comware, and the
1-120
attribute is configured at both ends (i.e., the default value is not adopted), the character
strings of both ends must be the same.
Example
# Configure the descriptor of H.323 as “mystring”.

[H3C-voice] voip h323-descriptor mystring
1.1.116 voip timer
Syntax
voip timer { send-setup-wait | voip-to-pots } seconds

undo voip timer { send-setup-wait | voip-to-pots }
View
Voice view
Parameter
send-setup-wait: The maximum waiting time length before the second call after the
configuration of hooking dialup is implemented.
voip-to-pots: Delays waiting for switching from VoIP entity to backup POTS entity after
failure in configuring VoIP dialup.
seconds: Time length. When the voip timer send-setup-wait command is executed, it
ranges from 1 to 10 in second, and defaults to 3 seconds; when the voip timer
voip-to-pots command is executed, it ranges from 3 to 30 in second and defaults to 5
seconds.
Description
Use the voip timer command to set the VoIP-to-POTS timer, or the delay waiting for
switching from VoIP entity to backup POTS entity after a VoIP call is failed.
Use the undo voip timer command to restore the default.
Example
# Configure the system to wait five seconds before the second call after configuring
hooking dialup.
[H3C] voip timer send-setup-wait 5
1.1.117 vqa data-statistic
Syntax
vqa data-statistic enable
1-121
undo vqa data-statistic enable
View
Voice view
Parameter
enable: Enables counting of voice data.
Description
Use the vqa data-statistic command to enable counting of voice data.

Use the undo vqa data-statistic enable command to disable counting of voice data.
By default, counting of voice data is disabled.
In order to quickly locate trouble in VoIP call and perform debugging, use the vqa
data-statistic enable command to enable statistics of voice data. Information to be
performed statistics includes time for successfully searching the voice table, total
number of received data packets, time for searching the table in fast and common
modes and voice and fax of receive and transmit channels.
Statistics of voice data mainly serves debugging. Therefore, the user is recommended
to disable this function when the service is normal so as to ensure higher performance
of voice data processing.
Related command: reset voice voip data-statistic, display voice voip
data-statistic.
Example
# Enable counting of voice data.

[H3C-voice] vqa data-statistic enable
1.1.118 vqa dscp
Syntax
vqa dscp { media | signal } dscp-value

undo vqa dscp { media | signal }
View
Voice view
Parameter
media: Global DSCP value in the ToS field of the IP packets that carry RTP streams.
signal: Global DSCP value in the ToS field of the IP packets that carry voice signaling.
1-122
dscp-value: DSCP value in the range 0 to 63 or the keyword ef, af11, af12, af13, af21,
af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, or
zero.
Table 1-28 DSCP values
Keyword DSCP value in binary DSCP value in decimal

ef 101110 46
af11 001010 10
af12 001100 12
af13 001110 14
af21 010010 18
af22 010100 20
af23 010110 22
af31 011010 26
af32 011100 28
af33 011110 30
af41 100010 34
af42 100100 36
af43 100110 38
cs1 001000 8
cs2 010000 16
cs3 011000 24
cs4 100000 32
cs5 101000 40
cs6 110000 48
cs7 111000 56
zero 000000 0
Description
Use the vqa dscp command to set the global DSCP value in the ToS field in the IP
packets that carry the RTP stream or voice signaling.
Use the undo dscp media command to restore the default DSCP, that is, zero
(00000).
1-123
Note:
The function of this command is the same as the command used for setting DSCP in
the “QoS” part of this manual. If two DSCP values are configured, the one configured in
the “QoS” part takes priority. This command is valid for both SIP and H.323.
Example
# Set the DSCP value in the ToS field in the IP packets that carry voice signaling to
af41.
[H3C] voice-setup
[H3C-voice] vqa dscp signal af41
1.1.119 vqa dsp-monitor
Syntax
vqa dsp-monitor buffer-time time

undo vqa dsp-monitor buffer-time
View
Voice view
Parameter
buffer-time time: Duration of DSP buffer data monitoring, in the range of 180 to 480
ms.
Description
Use the vqa dsp-monitor command to set duration for DSP buffer data monitoring.
Use the undo vqa dsp-monitor buffer-time command to remove the setting.
By default, DSP data is not monitored.
If the DSP buffering duration exceeds the preset threshold, DSP will discard voice data
to keep the voice delay with a rational range.
A time value greater than 240 is recommended for too small duration value will result in
poor voice quality in the case of severe jitter.
Related command: ip-precedence.
Example
# Set the duration for DSP buffer data monitoring to 270 milliseconds.
[H3C-voice] vqa dsp-monitor buffer 270
1-124
1.1.120 vqa jitter-buffer
Syntax
vqa jitter-buffer depth

undo vqa jitter-buffer
View
Voice view
Parameter
depth: Identifies the jitter buffer depth in the range of 0 to 10. Setting jitter buffer depth
to 0 indicates not to enable the jitter buffer function. The larger the value, the larger the
depth, that is, the more complexly the jitter buffer processes the voice packets. By
default, the jitter buffer depth is 3.
Description
Use the vqa jitter-buffer command to configure jitter buffer depth.

Use the vqa jitter-buffer command to restore the default jitter buffer depth.
For networks of different performances, the depth for jitter buffer to provide the best
performance is different. Therefore the jitter buffer depth must be selected based on a
long-term observing and attempts, and in depth analysis of the actual network
situations. So that the reasonable value fitting to the network requirements can be
selected. If the depth value is too small, the jitter buffer function cannot provide the best
loss compensation, disorder adjustment, jitter removing and re-discarding processing.
If the depth value is too large, the delay will become influential to the receiving voice
gateway.
Example
# Configure the depth of jitter buffer as 5.

[H3C-voice] vqa jitter-buffer 5
1.1.121 vqa performance
Syntax
vqa performance { send | receive } [ fast | normal ]

undo vqa performance { send | receive }
View
Voice view
1-125
Parameter
send: Configures voice data sending process.

receive: Configures voice data receiving process.
fast: Configures the sending or receiving process of voice data to fast forwarding
process.
normal: Configures the sending or receiving process of voice data to normal
forwarding process.
Description
Use the vqa performance command to configure the sending or receiving process of
voice data to fast or normal forwarding process.
Use the undo vqa performance command to restore the sending and receiving
process of voice data to normal forwarding process.
By default, the sending and receiving process of voice data is normal.
Example
# Configure the current sending process of voice data to fast forwarding process.
[H3C-voice] vqa performance send fast
The configuration works immediately!
1-126
Comware V3 Chapter 2 BSV Configuration Commands
Chapter 2 BSV Configuration Commands
2.1.1 permanent-active
Syntax
permanent-active
undo permanent-active
View
BSV interface view (in NT mode)
Parameter
None
Description
Use the permanent-active command to configure BSV interfaces to permanent active.

Use the undo permanent-active command to cancel the setting.
By default, BSV interfaces are not permanent active (undo permanent-active).
Example
# Enable the BSV interfaces.

[H3C-Bsv2/1/0] permanent-active
2.1.2 power-source
Syntax
power-source
undo power-source
View
BSV interface view (in NT mode)
Parameter
None
Description
Use the power-source command to enable remote power supply.

Use the undo power-source command to cancel the setting.
2-1
Comware V3 Chapter 2 BSV Configuration Commands
By default, remote power supply is disabled.
Note:
In network side mode, BSV V2 circuit board can provide remote power supply of 4w at
maximum.
Example
# Configure to enable remote power supply on BSV interfaces.

[H3C-bsv2/1/0] power-source
Note:
Other ISDN commands available with BSV interfaces include:
isdn bch-local-manage, isdn bch-select-way, isdn caller-number, isdn calling,
isdn check-called-number, isdn ignore connect-ack, isdn ignore hlc, isdn ignore
llc, isdn ignore sending-complete, isdn l3-timer, isdn link-mode, isdn
number-property, isdn overlap-sending, isdn protocol-mode, isdn protocol-type,
isdn statistics, and isdn two-tei. For detailed information, refer to Chapter 3 “ISDN
Configuration Commands” of Link Layer Protocol Command Manual.
2-2
Comware V3 Chapter 3 VoFR Configuration Commands
Chapter 3 VoFR Configuration Commands
3.1 VoFR Configuration Commands

3.1.1 address
Syntax
address { vofr-dynamic serial interface-number dlci-number | x121 x121-address }

undo address { vofr-dynamic | x121 }
View
Voice entity view
Parameter
vofr-dynamic serial interface-number: Session target interface of a VoFR voice entity.

dlci-number: Session target DLCI of a VoFR voice entity, in the range 16 to 1007.
x121 x121-address: X.121 address of destination host. By default, the X.121 address is
null.
Description
Use the address command to configure a route to the peer voice gateway or assign an
X.121 address for a destination host.
Use the undo address command to cancel the setting.
By default, no route to the peer voice gateway is configured.
The X.121 address configured in this command must be the same X.121 address used
by the destination host.
Configuring the address of VoFR voice entity in switch mode includes configuring
output interface and outgoing DLCI number. Configuring the session target of VoFR
voice entity in FRF.11 trunk mode includes configuring output interface, outgoing DLCI
number, FRF.11 subchannel number and creating voice channel without delay. Voice
channel is deleted when deleting the address.
Related command: match-template, call-mode, vofr.
Example
# Set the X.121 address of the destination host to 10001.

[H3C-voice-dial-entity4] address x121 10001
3-1
# Assign 100 to the DLCI for the session target Serial 1/0/0 corresponding to the called
number 12345.
[H3C-voice-dial-entity4] match-template 12345
[H3C-voice-dial-entity4] address vofr-dynamic serial1/0/0 100
3.1.2 call-mode
Syntax
call-mode { static | dynamic }

undo call-mode [ static | dynamic ]
View
Voice entity view
Parameter
static: FRF.11 trunk mode is adopted.

dynamic: Dynamic calling is adopted.
Description
Use the call-mode command to configure a call-mode for calls between local router
and peer router.
Use the undo call-mode command to restore the default value.
By default, the dynamic mode is adopted.
If dynamic is configured in this command, which call signaling should be adopted will
be specified by the vofr command on the DLCI.
Note:
If frf11-trunk is configured in this command, the trunk-id command must be configured
for the VoFR voice entity of the called party.
Related command: trunk-id, address.
Example
# Configure static mode for the VoFR voice entity 10.

[H3C-voice-dial-entity10] call-mode static
3-2
3.1.3 cid select-mode
Syntax
cid select-mode { max-poll | min-poll }

undo cid select-mode
View
DLCI view
Parameter
max-poll: Cyclically selects routes in descending order.

min-poll: Cyclically selects routes in ascending order.
Description
Use the cid select-mode command to configure the route selection mode used by the
calling party to set up VoFR calls.
Use the undo cid select-mode command to restore the default.
By default, max-poll mode applies.
When multiple channels of voice are multiplexed onto the same DLCI, using the same
voice CID at both ends can cause call collision. To prevent this from happening and to
avoid call loss, you may configure different route selection modes on the two ends.
Related command: vofr.
Example
# Adopt min-poll route selection mode on DLCI 100.

[H3C-Serial1/0/0] fr dlci 100
[H3C-fr-dlci-Serial1/0/0-100] vofr h3c-switch
[H3C-fr-dlci-Serial1/0/0-100] cid select-mode min-poll
3.1.4 debugging voice vofr
Syntax
debugging voice vofr { all | error | fax | intf | motorola | nonstandard | timer | vcc |
vofr | vpp }
View
User view
Parameter
all: Enables all VoFR module debugging.
3-3
error: Enables debugging of VoFR module errors resulting in connection failures.

fax: Enables debugging of information between the VoFR and Fax modules.
intf: Enables debugging of information between the VoFR and FR modules.
motorola: Enables debugging of motorola signaling packets in the VoFR module.
nonstandard: Enables debugging of nonstandard signaling packets in the VoFR
module.
timer: Enables debugging of the operations involving timer in the VoFR module.
vcc: Enables debugging of information between VoFR and VCC modules.
vofr: Enables debugging of information between the VoFR module peers.
vpp: Enables debugging of information between the VoFR module and the lower layer
VPP module.
Description
Use the debugging voice vofr command to enable VoFR module debugging.
Example
# Enables debugging of VoFR module errors resulting in connection failures.

<H3C> debugging voice vofr vpp error
3.1.5 display fr vofr-info
Syntax
display fr vofr-info [ serial interface-number [ dlci-number ] ]
View
Any view
Parameter
serial interface-number: Interface needs to be displayed.

dlci-number: Number of the DLCI that needs to be displayed, in the range 16 to 1007.
Description
Use the display fr vofr-info command to view the VoFR information.

This command is used to display the use of FRF.11 sub-channels on a VoFR DLCI. It
supports three displaying types:
z Neither interface nor DLCI is specified
z Specifies interface, but not DLCI
z Specifies both interface and DLCI
3-4
Example
# Specify the interface and DLCI on which the Frame Relay VoFR information will be
displayed.
[H3C] display fr vofr-info
INTERFACE(DLCI) VOFR-MODE CID CID-TYPE
Serial1/0/0(200) VOFR-H3C 4 DATA
Serial1/0/0(200) VOFR-H3C 5 FRAG-DATA
Table 3-1 Description on the fields of the display fr vofr-info command
Field Description
INTERFACE Interface unit
DLCI PVC identifier

VOFR-MODE Type of VoFR
CID Calling ID
CID_TYPE Type of calling ID
3.1.6 display voice vofr call
Syntax
display voice vofr call [ channel ]
View
Any view
Parameter
channel: VPU channel number.
Description
Use the display voice vofr call command to view information of the current call.
This command is used to display the information of incoming and outgoing call control
blocks, the connection state of the modules, call state, calling number, called number,
etc.
Example
# Display the information of the current call.

[H3C] display voice vofr call
CCB VCC CRV: 0
VOFR CRV: 0
3-5
Call Protocol: frf11 trunk

Status: idle
Call Mode: idle
Call Attrib: normal
Release Type:
Fr Release Type:
Timer: 0
FREX CCXID: 16181204
VPU Channel:
Dialpeer Line Number: 103
Voice Bandwidth: 0
Packet Size: 30
Encode Type: G729R8
Decode Type: G729R8
DTMF-Relay: disable
Voice Vad Mode: no
Use Sequence: no
Use TimeStamp: no
Caller Number:
Called Number: 102
Voice Packet Time: 0
Run Mode: idle
Fax Is Running: no
Max Fax Transmit rate: voice
Fax Start Mode: passive
Fax trainning result: 0
Fax Send NSF: no
Switch Timer: 0
ID of Fax Start Tone: 0
Threshold of TCF error: 10
Fax Tx carrier power in db: 15
Packet number in Fax data buffer: 0
Fax Release Reason:
Fax Bandwidth: 0
Table 3-2 Description of VoFR call statistics information
Field Description
CCB VCC CRV Call reference value of VCC module
VOFR CRV Call reference value of VoFR module
Call Protocol Protocol type of VoFR presently
Status Status of present call
3-6
Field Description
Mode of the call, such as calling, called and
Call Mode
idle
Call Attrib Attribute of the call, such as normal or busy
Release Type Cause of releasing the VoFR call
Fr Release Type Cause of releasing the FR connection
Timer Flag of timer of the call
FREX CCXID Call decryption identifier at interface of FREX
VPU Channel Channel of VPU module
Dialpeer Port Number Number of voice entity of the call
Voice Bandwidth Voice bandwidth of the call
Packet Size Packets length of the call
Encode Type Compression type of the call
Decode Type Decompression type of the call

Out-of-band or in-band call transmission is
DTMF-Relay
enabled or disabled.
Voice Vad Mode Voice Activity Detection is used or not
Use Sequence Sequence is used or not for the call
Use TimeStamp Timestamp is used or not for the call

Caller Number Calling number of the call
Called Number Called number of the call
Voice Packet Time Time of voice packets
Call mode of gateway currently, such as
Run Mode
voice and realtime fax.
Fax Is Running Fax communication is running or not
Max Fax Transmit rate Max transmit rate of fax communication
Fax Start Mode Start mode of fax, such as active or passive
Fax training result Train result of fax communication
Fax Send NSF Negotiation mode of fax faculty
Switch Timer Flag of switching timer
ID of Fax Start Tone Identifier of saving fax start tone
Threshold of TCF error Local-train threshold of fax at local
Fax Tx carrier power in db Energy level of gateway carrier transmitting
Packet number in Fax data buffer Number of fax packets in buffer
3-7
Field Description
Fax Release Reason Cause of releasing fax connection
Fax Bandwidth Bandwidth of fax
3.1.7 display voice vofr statistic
Syntax
display voice vofr statistic { all | call | error | timer | vcc | vofr | vpp }
View
Any view
Parameter
all: Displays all the statistics of VoFR module.

call: Displays the call statistics in VoFR module.
error: Displays the statistics of VoFR module errors resulting in connection failures.
timer: Displays statistics of operations involving timer in the VoFR module.
vcc: Displays the statistics of the interactive messages between VoFR and VCC
modules.
vofr: Displays the statistics of information between the VoFR module peers.
vpp: Displays the statistics about the information between VoFR module and the lower
layer VPP module.
Description
Use the display voice vofr statistic command to view the call statistics between the
VoFR module and VCC, VPP and other modules.
Example
# Display the call statistics between the VoFR module and other modules.
[H3C] display voice vofr statistic call
Statistic about VOFR call :
{
Call number as Caller: 0
Succeed call number as Caller: 0
Fail call number as Caller: 0
Call number as Called: 0
Succeed call number as Called: 0
Fail call number as Called: 0
3-8
Send voice packets number: 0

Receive voice packets number: 0
Lost voice packets received number: 0
}
Table 3-3 Description of call statistics between the VoFR module and other modules
Field Description
Call number as Caller Times of calling out
Succeed call number as Caller Times of calling out correctly
Fail call number as Caller Times of calling out wrongly
Call number as Called Times of calling in
Succeed as number from Called Times of calling in correctly
Fail call number as Caller Times of calling in wrongly
Send voice packets number Number of packets sent
Receive voice packets number Number of packets received

Lost voice packets received number Number of packets dropped
3.1.8 motorola base-svc
Syntax
motorola base-svc start-svc

undo motorola base-svc
View
DLCI view
Parameter
start-svc: Start SVC for voice routing, in the range 1 to 4080. By default, the start SVC
for voice routing is 17.
Description
Use the motorola base-svc command to configure the start SVC for voice routing on a
DLCI.
Use the undo motorola base-svc command to restore the default.
The user is allowed to configure this command when the VoFR call control protocol on
the DLCI is Motorola-compatible.
Related command: vofr, motorola max-voice.
3-9
Example
# Specify the start SVC for voice routing on DLCI 100 to 100.
[H3C-fr-dlci-Serial1/0/0-100] motorola base-svc 100
3.1.9 motorola encapsulation
Syntax
motorola encapsulation { codex | rfc1294 }

undo motorola max-voice
View
DLCI view
Parameter
codex: Motorola codex encapsulation.

rfc1294: RFC 1294 multi-protocol encapsulation.
Description
Use the motorola encapsulation command to specify an encapsulation for Motorola

LCON on the DLCI.
Use the undo motorola encapsulation command to restore the default.
By default, codex encapsulation mode is used.
This command is available only when the VoFR call control protocol is set to
motorola-compatible on the DLCI.
Related command: vofr, motorola max-voice.
Example
# Adopt RFC 1294 multi-protocol encapsulation for Motorola LCON on the DLCI 200.
[H3C-fr-dlci-Serial1/0/0-200] motorola encapsulation rfc1294
3.1.10 motorola max-voice
Syntax
motorola max-voice max-number

undo motorola max-voice
View
DLCI view
3-10
Parameter
max-number: The maximum number of voice channels, in the range 0 to 15. By default,
the maximum number of voice channels is 0.
Description
Use the motorola max-voice command to configure the maximum number of voice
channels created on a DLCI concurrently.
Use the undo motorola max-voice command to restore the default.
The user can configure this command only when the VoFR call control protocol used on
the DLCI is motorola-compatible. If it is set to 0, no voice will be sent.
Related command: vofr.
Example
# Specify that a maximum of 10 voice channels can be concurrently set up on DLCI

100.
[H3C-fr-dlci-Serial1/0/0-100] motorola max-voice 10
3.1.11 motorola remote-id
Syntax
motorola remote-id index

undo motorola remote-id
View
DLCI view
Parameter
index: Remote connection ID, in the range 1 to 255. It defaults to 1.
Description
Use the motorola remote-id command to configure a remote connection ID.

Use the undo motorola remote-id command to restore the default.
Example
# Set the remote connection ID to 20.

[H3C-fr-dlci-Serial1/0/0-200] motorola remote-id 20
3-11
3.1.12 outband vofr
Syntax
outband vofr
undo outband
View
Voice entity view
Parameter
None
Description
Use the outband vofr command to configure out-of-band transmission of DTMF

codes.
Use the undo outband command to restore transmission of DTMF codes to in-band
mode.
By default, in-band transmission is adopted.
In practice, to implement the transparent transmission of DTMF codes, the
transmission mode of DTMF codes should be configured in the VoFR voice entity on
the calling gateway as well as the POTS voice entity on the called gateway.
Example
# Configure VoFR voice entity 10 to transmit DTMF codes out of band.

[H3C-voice-dial-entity10] outband vofr
3.1.13 priority
Syntax
priority priority-number
undo priority
View
Voice entity view
Parameter
priority-number: Voice entity priority in the range 0 to 10, with 0 being the highest
priority and 10 being the lowest. The default is 0.
3-12
Description
Use the priority command to assign a priority to the voice entity.

Use the undo priority command to restore the default.
When the calling party places a call, it will dial by the voice entity reference in the case
that multiple voice entities are found for the called number. The voice entity with the
highest preference will be used first.
Example
# Set the priority of VoFR voice entity 2001 to 5.

[H3C-voice-dial-entity2001] priority 5
3.1.14 seq-number
Syntax
seq-number
undo seq-number
View
Voice entity view
Parameter
None
Description
Use the seq-number command to enable voice packets transmitted on the local
gateway to carry sequence numbers.
Use the undo seq-number command to disable voice packets to carry sequence
numbers.
By default, no sequence numbers are carried in voice packets.
The gateway at receiving end can know whether the voice packets have been dropped,
repeated or disordered according to the numbers, so that voice compensation can be
made. However, use of numbers requires more bandwidth. You must carefully consider
the trade-off between packet numbering and bandwidth.
3-13
Note:
The configuration of this command will not affect CODEC numbering. If needed, DSP
will number CODEC, regardless of whether this command has been configured.
Example
# Configure that the voice packets should be numbered in the VoFR voice entity 10.
[H3C-voice-dial-entity10] seq-number
3.1.15 timestamp
Syntax
timestamp
undo timestamp
View
VoFR voice entity view
Parameter
None
Description
Use the timestamp command to enable the local end to send voice packets with
timestamps.
Use the undo timestamp command to disable voice packets to carry timestamps.
By default, voice packets do not carry timestamps.
Example
# Enable voice packets to carry timestamps in VoFR voice entity 10.

[H3C-voice-dial-entity10] timestamp
3.1.16 trunk-id
Syntax
trunk-id string
undo trunk-id
View
Voice entity view
3-14
Parameter
string: The number that the local end dials to call the PSTN side in FRF.11 trunk mode.
It is a digit string of 1 to 31 at length.
Description
Use the trunk-id command to configure the number that the local end dials to call the
PSTN side in FRF.11 trunk mode.
Use the undo trunk-id command to restore the local called number to null.
By default, no number is configured, that is means the parameter string is null.
This command can be used only for the VoFR voice entities in FRF.11 trunk mode.
FRF.11 does not provide end-to-end signaling management leased line. To create a
leased line, the trunk-id command must be configured.
Related command: match-template, call-mode.
Example
# Set the outgoing number to PSTN in VoFR voice entity 2001 to 2001.
[H3C-voice-dial-entity1] trunk-id 2001
3.1.17 vad-on
Syntax
vad-on
undo vad-on
View
Voice entity view
Parameter
None
Description
Use the vad-on command to enable voice activity detection (VAD).

Use the undo vad-on command to disable VAD.
By default, the silence detection function is disabled.
VAD is also known as silence detection. Its basic idea is to detect and delete any
silence on the basis of the difference of energy between the voice signals of people’s
conversation and their silence signals, so that no signals are produced; and only when
abrupt activity tone is detected will a voice signal be generated and transmitted. The
3-15
research showed that at least 50 percent of transmission bandwidth can be attained by

the use of VAD technology.
Example
# Enable VAD for VoFR voice entity 2.

[H3C-voice-dial-entity2] vad-on
3.1.18 vofr
Syntax
vofr { h3c-switch [ dte | dce ] | motorola-compatible [ dte | dce ] |

nonstandard-compatible signal-channel ccid-no data-channel dcid-no
[ keepalive ] }
undo vofr
View
DLCI view
Parameter
signal-channel ccid-no data-channel dcid-no: Indicates that VoFR works in

nonstandard-compatible mode and specifies FRF.11 sub-channels for signaling and
data. The subchannel is in the range 4 to 255.
keepalive: Indicates whether the keepalive message will be regularly sent. In
Non-standard-compatible mode, the keepalive message is regularly sent to monitor the
control subchannel status. If the keepalive argument is configured, one end will
assume that congestion has occurred to the network if no keepalive message is
received for a certain period. The active call control subchannel will be deactivated, and
thus voice call can no longer be set up. If the argument is not configured, the status of
the control subchannel is synchronous to the PVC status.
h3c-switch: Adopts H3C private mode.
motorola-compatible: Adopts Motorola-compatible mode for compatibility with VoFR
of Motorola routers.
nonstandard-compatible: Adopts nonstandard-compatible mode for compatibility with
VoFR of Cisco routers.
dte: Annex G control block works as DTE.
dce: Annex G control block works as DCE.
Description
Use the vofr command to enable VoFR operation mode for a DLCI.
3-16
Use the undo vofr command to disable VoFR operation mode for the DLCI.
By default, VoFR is not supported.
If call-mode static has been configured to use FRF.11 trunk mode, configuring
Motorola-compatible mode in this command will cause session failure.
In Motorola-compatible mode, a DLCI cannot carry both dynamic calling and FRF.11
trunk.
In H3C-switch or Motorola-compatible mode, use the T1.167 Annex G protocol. When
making configuration, set different ANNEX G control block types at both ends to
different modes, that is, one end to DTE and the other end to DCE.
Related command: call-mode.
Example
# Specify voice calling on DLCI 100 to nonstandard-compatible, call control signaling

subchannel “ccid” to 4, data subchannel dcid to 5 and keepalive messages to be sent
timely.
[H3C-fr-dlci-Serial1/0/0-100] vofr Nonstandard-compatible signal-channel 5
data 4 keepalive
# Specify voice call mode on dlci 200 to H3C-switch (DTE).

[H3C-fr-dlci-Serial1/0/0-100] vofr h3c-switch
# Specify voice call mode on dlci 300 to Motorola-compatible (DCE).

[H3C-fr-dlci-Serial1/0/0-100] vofr motorola-compatible dce
3.1.19 vofr frf11-timer
Syntax
vofr frf11-timer time
View
Voice view
Parameter
time: Interval of Trunk Wait timer, in the range 10 to 600 seconds. The default interval is
30 seconds.
Description
Use the vofr frf11-timer command to configure the interval of Trunk Wait timer in
FRF.11 trunk mode.
All the local sessions in FRF.11 trunk mode use the same timer.
Related command: call-mode
3-17
Example
# Set the period of the Trunk Wait timer in FRF.11 trunk mode to 40 seconds.
[H3C-voice] vofr frf11-timer 40
3.1.20 vofr jitter-buffer
Syntax
vofr jitter-buffer length
View
Voice view
Parameter
length: Jitter buffer length in the range 0 to 8. If it is set to 0, jitter buffer will not be used.
The default jitter buffer length is 0.
Description
Use the vofr jitter-buffer command to configure a jitter buffer length.

If delay jitter is serious in voice transmission, setting jitter buffer can smooth such jitter.
However, this undertaking will prolong voice delay. Therefore, the user should carefully
consider the trade-off between delay and delay jitter when setting jitter buffer length.
Example
# Set the length of jitter buffer to 5.

[H3C-voice] vofr jitter-buffer 5
3.1.21 voice bandwidth
Syntax
voice bandwidth reserved-bps [ reserved ]

undo voice bandwidth
View
Parameter
reserved-bps: Maximum bandwidth for voice calls, in the range 8000 kbps to
45,000,000 kbps.
reserved: Reserves bandwidth for a call until it is terminated.
3-18
Description
Use the voice bandwidth command to configure maximum bandwidth for voice calls.
Use the undo voice bandwidth command to restore the default.
By default, no reserved bandwidth is configured for voice calls.
Example
# Set maximum bandwidth to 200,000 kbps and enable bandwidth reservation for voice
calls.
[H3C-fr-class-1] voice bandwidth 200000 reserved
3-19
Comware V3 Chapter 4 E1/T1 Voice Configuration Commands
Chapter 4 E1/T1 Voice Configuration Commands
4.1 E1/T1 Voice Configuration Commands

4.1.1 ani
Syntax
ani { all | ka }
undo ani
View
R2 CAS view
Parameter
all: Requires the remote end to send the category of the calling party and calling
number.
ka: Requires the remote end to send the category of the calling party only.
Description
Use the ani command to enable or disable the terminating point to send the calling
party information (service category and calling number) to the originating point during
call connecting process.
Use the undo ani command to cancel the above configuration.
By default, the terminating point does not send the calling party information to the
originating point.
Note:
z Configure the local end with this command to support automatic number
identification.
z This command applies to E1 voice only.
z Normally the all keyword is configured. To prevent call failures, use the ka keyword
only when required by the connected switch.
Related command: cas and ani-offset.
4-1
Example
# Configure that the local exchange requests the opposite exchange to send the
category of the calling party and calling number during the connecting process.
[H3C-cas1/0/0:0] ani all
4.1.2 ani-offset
Syntax
ani-offset number
undo ani-offset
View
R2 CAS view
Parameter
number: The number quantity collected, with a value range being the integer from 1
to10. By default, the value of number is 1.
Description
Use the ani-offset command to configure the number of digits of the called number to
be collected prior to requesting the calling party information.
Use the undo ani-offset command to restore the default value.
This command applies to E1 voice only.
This command is used for setting the number of digits of the called number to be
collected prior to requesting the caller number or caller identifier. When the quantity of
the collected numbers is less than this value, the system will wait to the next number till
timeout, and in the waiting it will not request the caller number information from the
remote end. When the quantity of the collected numbers is equal to or exceeds this
value, it is able to request the caller number or caller identifier from the remote end.
Related command: cas, timer, reverse, renew.
Example
# Set to start requesting the caller number or caller identifier after receiving the 3-digit
numbers.
[H3C-cas1/0/0:0] ani-offset 3
4.1.3 answer
Syntax
answer { enable | disable }
4-2
View
R2 CAS view
Parameter
enable: The originating points requires that the terminating point must send answer
signal. Only after the originating point receives the signal, can the peers enter the
communicating state.
disable: The originating point does not require the terminating point to send answer
signal. In case the terminating point does not send answer signal, the originating point
automatically report the answer message to the upper layer when the timer times out to
have the peers enter the communicating state.
Description
Use the answer command to configure whether the terminating point is required to
send answer signal.
By default, the terminating point is required to send answer signal.
In some countries, answer signals are not sent in the R2 line signaling coding scheme.
In this case, you can use the answer command to adjust this signaling coding scheme.
If the originating point does not require answer signals, the terminating point confirms
call connection after the specified time.
Related command: re-answer, timer dl re-answer.
Example
# Disable the terminating point to send answer signals.

[H3C-cas1/0/0:0] answer disable
4.1.4 cas
Syntax
cas ts-set-number
View
Parameter
ts-set-number: The serial number of the Timeslot set predefined, with a value range
being the integer from 0 to 30.
4-3
Description
Use the cas command to enter the R2 CAS view and digital E&M signaling view.
The command cas is used to enter the custom R2 CAS view. Under this mode various
parameters of the R2 signaling in the E1 interface can be configured as required. To
validate the custom R2 parameters, it is required to keep the parameter of
ts-set-number in the command cas consistent with the parameter set-number in the
command timeslots-set.
Related command: timeslots-set, ani-offset, effect-time, reverse, select-mode,
timer, trunk-direction and renew.
Example
# Enter the R2 CAS view of No.5 Timeslot set.

[H3C-E1 1/0/0] timeslot-set 5 timeslot-list 1-31 signal r2
[H3C-E1 1/0/0] cas 5
4.1.5 clear-forward-ack
Syntax
clear-forward-ack { enable | disable }
View
R2 CAS view
Parameter
enable: Enables the terminating point to acknowledge the clear-forward signal by

sending a clear-back signal.
disable: Disables the terminating point to acknowledge the clear-forward signal by
sending a clear-back signal.
Description
Use the clear-forward-ack command to enable or disable the terminating point to

respond by sending a clear-back signal when the originating point (calling party)
disconnects a call.
By default, the terminating point does not send a clear-back signal to acknowledge the
clear-forward signal.
In some countries, if the terminating point controls the relay circuit reset in the R2
signaling exchange process, when the calling party disconnects a call and the
originating point sends a clear-forward signal to the terminating point, the terminating
4-4
point sends a clear-back signal as an acknowledgement, and then sends a release

guard signal to indicate that the line of the terminating point is thoroughly released.
Related command: mode china default-standard.
Example
# Enable the terminating point to send a clear-back signal to acknowledge the

clear-forward signal.
[H3C-cas1/0/0:0] clear-forward-ack enable
4.1.6 debugging voice r2
Syntax
debugging voice r2 { all | ccb controller slot-number timeslots-list | dl | dtmf | error |

mfc | msg | rcv | warning }
View
User view
Parameter
all: Enables all the debugging in R2 software module.

ccb controller: Enables all the CCB debugging in R2 signaling.
dl: Enables the line signaling debugging in R2 signaling.
dtmf: Enables the Dual-Tone Multifrequency (DTMF) debugging in R2 signaling.
error: Enables the error debugging in R2 software module.
msg: Enables the message interface debugging in R2 signaling.
mfc: Enables the interregister signaling debugging in R2 signaling.
rcv: Enables the RCV software module debugging in R2 software module.
warning: Enables warning debugging in R2 software module.
slot-number: E1 port number.
timeslots: Time slot number, ranging from 1 to 31.
Description
Use the debugging voice r2 command to enable the corresponding debugging in R2

signaling module.
Use the debugging voice r2 ccb command to view the information of the
corresponding control block by specifying the E1 port number and time slot number.
4-5
Example
# Enable all the line signaling debugging in R2 signaling on E1 voice port.

<H3C> debugging voice r2 dl
4.1.7 debugging voice rcv r2
Syntax
debugging voice rcv r2
View
User view
Parameter
r2: Enables the debugging between the RCV module and the R2 module of bottom
layer.
Description
Use the debugging voice rcv r2 command to enable the debugging between the RCV
module and the R2 module of bottom layer.
Example
None
4.1.8 debugging voice vpp r2
Syntax
debugging voice vpp r2
View
User view
Parameter
r2: Enables the debugging between the VPP module and the R2 module of bottom
layer.
Description
Use the debugging voice vpp r2 command to enable the debugging between the VPP
module and the R2 module of bottom layer.
4-6
Example
None
4.1.9 default
Syntax
default
View
R2 CAS view
Parameter
None
Description
Use the default command to restore the default of all the R2 configurations and reset
the R2 call statistics to 0.
The following table gives the configuration items affected by this command.
Table 4-1 Configuration items affected by the default command
Configuration item Default

The originating exchange sends the seizure
ENABLE
acknowledgement signal.
The originating exchange sends the answer signal. ENABLE
The originating exchange answers at the time of
DISABLE
clear-back.
The originating exchange answers with the clear-back
DISABLE
signal at the time of clear-forward.
Answer signal timeout interval 60 seconds
Clear-forward signal timeout interval 10 seconds
Seizure signal timeout interval 1 second

Re-answer timeout interval 1 second
Delay before sending the release-guard signal upon a
10 second
timeout
Seizure acknowledgement signal timeout interval 40 seconds
The ABCD bit pattern that represents an idle receive line 1001
The ABCD bit pattern that represents an idle transmit
1001
line
4-7
Configuration item Default

The ABCD bit pattern that represents a seized receive
0001
line
The ABCD bit pattern that represents a seized transmit
0001
line
The ABCD bit pattern that represents the seizure
1101
acknowledged state of the transmit line.
The ABCD bit pattern that represents the seizure
1101
acknowledged state of the receive line.
The ABCD bit pattern that represents the answered
0101
state of the receive line.
The ABCD bit pattern that represents the answered
0101
state of the transmit line.
The ABCD bit pattern that represents the clear-forward
1001
The ABCD bit pattern that represents the clear-forward
1001
The ABCD bit pattern that represents the clear-back
1101
The ABCD bit pattern that represents the clear-back
1101
The ABCD bit pattern that represents the release-guard
1001
The ABCD bit pattern that represents the release-guard
1001
The ABCD bit pattern that represents a blocked receive
1101
line.
The ABCD bit pattern that represents a blocked transmit
1101
line.
Country mode ITU-T default
Example
# Restore the default of all the configurations on CAS 1/0/0:5.

[H3C-cas 1/0/0:5] default
4-8
4.1.10 delay
Syntax
delay { call-interval | hold | rising | send-dtmf | dtmf | dtmf-interval | wink-rising |

wink-hold | send-wink | start-dial } milliseconds
undo delay { call-interval | hold | rising | send-dtmf | dtmf | dtmf-interval |
wink-rising | wink-hold | send-wink | start-dial }
View
Digital E&M voice subscriber-line view
Parameter
call-interval milliseconds: The call interval for digital E&M voice subscriber-line, in the
range of 200 to 2000ms. By default, the value is 200ms.
hold milliseconds: The maximum duration the caller will wait for the callee to hang up
so as to send the DTMF number in analog E&M subscriber-line delay-start mode. It
ranges from 100 to 5000ms, and is defaulted to 400ms.
rising milliseconds: The maximum duration the caller will wait from the sending of
off-hook signal to the callee's status detected in analog E&M subscriber-line delay-start
mode. It ranges from 20 to 2000ms, and is defaulted to 300ms.
send-dtmf milliseconds: The delay before the caller sends signal in analog E&M
subscriber-line immediate-start mode. It ranges from 50 to 5000ms, and is defaulted to
100ms.
dtmf milliseconds: The lasting duration of the DTMF signals in the range of 50 to
500ms. By default, the value is 120ms.
dtmf-interval milliseconds: The interval between two DTMF signals in the range of 50
to 500ms. By default, the value is 120ms.
wink-rising milliseconds: The maximum duration the caller will wait for the wink signals
after sending the seizure signals in analog E&M subscriber-line wink-start mode. It
ranges from 100 to 5000ms, and is defaulted to 500ms.
wink-hold milliseconds: The maximum lasting duration of the wink signals are received
by the caller in analog E&M subscriber-line wink-start mode. It ranges from 100 to
3000ms, and is defaulted to 500ms.
send-wink milliseconds: Specifies how long the called party will delay sending wink
signal after receiving the seizure signal on E&M interface. It ranges from 100 to 5000ms
and defaults to 500ms.
start-dial milliseconds: The delay for dialing. It is in the range of 1 to 10 seconds and
defaults to 1 second.
4-9
Description
Use the delay command to configure the related time parameters at the digital E&M
subscriber-line (E1 controller).
Use the undo delay command to restore these parameters to the default value.
On the digital E&M subscriber-line, the waiting duration of originating the next call set
by the delay call-interval milliseconds command is applicable to the immediate, wink
and delay start.
When the digital E&M subscriber-line uses the delay start mode, the calling party will
use the delay hold milliseconds command to set the longest time waiting for the delay
signals .
When the digital E&M subscriber-line uses the delay start mode, use the delay rising
milliseconds command to set the time waiting for the delay signals of called party after
the calling party sends out the off-hook signals, and then detect the device state of the
called party.
When the digital E&M subscriber-line uses the immediate start mode, use the delay
send-dtmf milliseconds command to set the delay time before the calling party sends
the called number.
The delay dtmf milliseconds command is used to set the duration that the DTMF
signals are being sent, and the delay dtmf-interval milliseconds command is used to
set the interval for sending the DTMF signals.
When the digital E&M subscriber-line uses the wink start mode, the delay wink-rising
milliseconds command is used to set the longest time it takes for the calling party to
wait for the wink signals after it sends the seizure signals.
When the digital E&M subscriber-line uses the wink start mode, the delay wink-hold
milliseconds command is used to set the longest duration that the wink signals sent by
the called party.
When the digital E&M subscriber-line uses the wink start mode, the delay send-wink
milliseconds command is used to set the longest time that the called party delays
before sending the wink signals.
Related command: timeslots-set, timer.
Example
# Set the longest delay-waiting duration to 3000 milliseconds on voice subscriber line
1/0/1:3.
[H3C-voice-line1/0/1:3] delay hold 3000
4-10
4.1.11 display voice em call-statistic
Syntax
display voice em call-statistic
View
Any view
Parameter
None
Description
Use the display voice em call-statistic command to view the call statistics of the
digital E&M subscriber-line.
This command is used to display the statistics of the E&M signaling being placed in the
state of idle, seizure ready, seizure confirmation, transmitting numbers, receiving
numbers, conversation and clear ready.
Example
# Display the call statistics of the E&M subscriber-line.

[H3C] display voice em call-statistic
On state of EM_IDLE :
On state of EMCALLER_WAIT_OCCUPY :
On state of EMCALLER_WAIT_SEND_NUMBER :
On state of EMCALLER_SENDING_NUMBER :
On state of EMCALLER_RINGING :
On state of EMCALLER_TALKING :
On state of EMCALLER_CALLER_ONHOOK :
On state of EMCALLED_WAIT_SEND_OCCUPY :
On state of EMCALLED_WAIT_RECEIVE_NUMBER :
On state of EMCALLED_RECEIVING_NUMBER :
On state of EMCALLED_RINGING :
On state of EMCALLED_TALKING :
On state of EMCALLED_CALLED_ONHOOK :
On state of EMCALLED_BUSYTONE :
On state of STATE_UNKNOWN :
4-11
Table 4-2 E&M call statistics field description
Field Description
Number of messages processed in idle
EM_IDLE
status by E&M module
Number of messages processed in waiting
EMCALLER_WAIT_OCCUPY
for seizure status by E&M module
Number of messages processed in the
EMCALLER_WAIT_SEND_NUMBER caller end waiting for sending phone
number status by E&M module
EMCALLER_SENDING_NUMBER caller end sending phone number status by
E&M module
EMCALLER_RINGING
caller end ringback status by E&M module
EMCALLER_TALKING
caller end talking status by E&M module
EMCALLER_CALLER_ONHOOK caller end hooking on status by E&M
module
EMCALLED_WAIT_SEND_OCCUPY called end waiting for seizure status by
E&M module
EMCALLED_WAIT_RECEIVE_NUM
called end waiting for receiving phone
BER
number status by E&M module
EMCALLED_RECEIVING_NUMBER called end receiving phone number status
by E&M module
EMCALLED_RINGING called end ringing back status by E&M
module
EMCALLED_TALKING
called end talking status by E&M module
EMCALLED_CALLED_ONHOOK called end hooking on status by E&M
module
EMCALLED_BUSYTONE
called end busy status by E&M module
Number of messages processed in
STATE_UNKNOWN
unknown status by E&M module
4-12
4.1.12 display voice em ccb
Syntax
display voice em ccb
View
Any view
Parameter
None
Description
Use the display voice em ccb command to view the information of call control block of
the E&M subscriber-line.
This command is used to display the call status, call-ID, start type, signal type, channel
number, etc.
Example
# Display the information of E&M signaling call control block.

[H3C] display voice em ccb
EMCCB of channel[ 5]:
status : EMCALLER_TALKING
em call ID : 1624
start type : EM_START_IMMEDIATE
signal type : EM_SIGNAL_DIGITAL
channel : 5
rcv call ID : 1639
sig-wait timer : 0
sig-conf timer : 0
msg-wait timer : 0
MCCB of channel[ 37]:
status : EMCALLED_TALKING
m call ID : 1625
start type : EM_START_IMMEDIATE
signal type : EM_SIGNAL_DIGITAL
channel : 37
rcv call ID : 1640
sig-wait timer : 0
sig-conf timer : 0
msg-wait timer : 0
4-13
Table 4-3 E&M call control block field description
Field Description
status Status of the call
em call ID Identifier of E&M module in calling status
start type Start mode of E&M connection
signal type Signal type of E&M connection
channel Channel number of E&M connection
rcv call ID Identifier of RCV module in calling status
sig-wait timer Timer of waiting for signal
sig-conf timer Timer of confirming signal
msg-wait timer Timer of waiting for message
4.1.13 display voice r2 call-statistics
Syntax
display voice r2 call-statistics
View
Any view
Parameter
None
Description
Use the display voice r2 call-statistics command to view the R2 call statistics.
Related command: reset voice r2 call-statistics.
Example
# Display the information of R2 signaling call statistics.

[H3C] display voice r2 call-statistics
[ E1-Group(0:0) Call Statistics ]
+-------------------------------------------------+
[Call sumcount] -> 4
[call success] -> 4
[Call failure] -> 0
4-14
[Call-in count] -> 1

[Call-in success] -> 1
[Call-in failure] -> 0
[Call-in answer] -> 0
[Call-in nullnum] -> 0
[Call-out count] -> 3

[Call-out success] -> 3
[Call-out failure] -> 0
[Call-out answer] -> 3
[Call-out busy] -> 0
[Call-out nullnum] -> 0
[Call-out congestion] -> 0
Table 4-4 R2 signaling call statistics field description
Field Description
Total number of calls: total number of calls in E1 time
Call sumcount
slot group (sum of incoming and outgoing calls)
Number of successful calls: total number of successful
signaling connection, that is, R2 signaling connection is
call success
successfully completed, and the opposite exchange is
available for another call connection.
Number of failed calls: total number of failed signaling
exchange during call connecting process, such as peer
Call failure
subscriber line busy, null called number, and line failure,
etc.)
Call-in count Total number of incoming calls
Call-in success Total number of successful incoming calls
Call-in failure Total number of failed incoming calls

Number of sent answers: number of answer signals that
the local exchange sends to the originating point when
Call-in answer
the call is connected successfully and the called party
picks up the phone.
Routing failure times: number of failed incoming calls
Call-in nullnum due to no corresponding route available for the called
number to create connection.
Call-out count Total number of outgoing calls
Call-out success Total number of successful outgoing calls
Call-out failure Total number of failed outgoing calls
Number of received answers: number of answer signals
Call-out answer received from the terminating point when the call is
connected successfully.
4-15
Field Description
Subscriber line busy times: number of subscriber line
Call-out busy busy signals received from the terminating point during
call connecting process.
Count of null calling numbers: number of null number
Call-out nullnum signals received from the terminating point during call
connecting process.
Number of received congestion: number of congestion
Call-out congestion signals received from the terminating point during call
connecting process.
4.1.14 display voice rcv statistic r2
Syntax
display voice rcv statistic r2
View
Any view
Parameter
None
Description
Use the display voice rcv statistic r2 command to view the information of call
statistics related to the R2 signaling in the RCV module.
This command is used to display the interactive messages between the RCV module
and the R2 signaling module, including the number of sending the messages of the
connection request to acknowledge success and fail, the number of sending the
messages of activation acknowledgement of success and failure, the number of
sending the messages of on-hook and off-hook, the number of receiving the messages
of connection request, the number of receiving activation messages, and the number of
receiving such messages as release, ringing, and unknown.
Example
# Display the information of R2 signaling call statistics in RCV module .

[H3C] display voice rcv statistic r2
Statistic between RCV and R2 :
{
Send_R2_ConnectReqAck_SUCCESS : 0
Send_R2_ConnectReqAck_FAIL : 0
4-16
Send_R2_ActiveAck_SUCCESS : 0
Send_R2_ActiveAck_FAIL : 0
Send_R2_Onhook : 0
Send_R2_Offhook : 0
Send_R2_IPAlerting : 0
Recv_R2_ConnectReq : 0
Recv_R2_Active_TD_IN : 0
Recv_R2_Active_TD_OUT : 0
Recv_R2_Active_ELSE : 0
Recv_R2_Release : 0
Recv_R2_Alert_AP_ALERTING : 0
Recv_R2_Alert_ELSE : 0
Recv_R2_Unknow : 0
}
Table 4-5 Field description of R2 signal call statistics in RCV module
Field Description
Send_R2_ConnectReqAck_SUC Number of sending connection request
CESS success-acknowledge message to R2 module
Number of sending connection request
Send_R2_ConnectReqAck_FAIL
failure-acknowledge message to R2 module
Number of sending activation
Send_R2_ActiveAck_SUCCESS
success-acknowledge message to R2 module
Number of sending activation
Send_R2_ActiveAck_FAIL
failure-acknowledge message to R2 module
Number of sending onhook message to R2
Send_R2_Onhook
module
Number of sending offhook message to R2
Send_R2_Offhook
module
Number of sending IP side alerting message
Send_R2_IPAlerting
to R2 module
Number of receiving R2 connection request
Recv_R2_ConnectReq
message
Number of receiving R2 called end hooking off
Recv_R2_Active_TD_IN
message
Number of receiving R2 caller end hooking off
Recv_R2_Active_TD_OUT
message
Number of receiving R2 other hooking off
Recv_R2_Active_ELSE
message
Number of receiving R2 release request
Recv_R2_Release
message
Recv_R2_Alert_AP_ALERTING Number of receiving R2 alerting message
4-17
Field Description
Number of receiving R2 other alerting
Recv_R2_Alert_ELSE
message
Recv_R2_Unknow Number of receiving R2 unknown message
4.1.15 display voice subscriber-line
Syntax
display voice subscriber-line e1-number : { ts-set-number | 15 }

display voice subscriber-line t1-number : 23
View
Any view
Parameter
e1-number, t1-number: Indicates the number of subscriber line generated in creating

the Timeslot set or the ISDN PRI set.
ts-set-number: Indicates the number of the Timeslot set created successfully.
15: Indicates the subscriber line is generated in creating the ISDN PRI set on E1
subscriber line.
23: Indicates the subscriber line is generated in creating the ISDN PRI set on T1
subscriber line.
Description
Use the display voice subscriber-line command to view the subscriber line
configuration.
This command applies to E1 and T1 voice.
The command display voice subscriber-line e1-number:ts-set-number is mainly
used to display the Timeslot set corresponding to the E1 subscriber line, whether to
adopt the private-line auto-ring connection and connection number, the subscriber line
description, whether to start the echo cancellation function and echo cancellation
sampling time length, and whether to start the comfort noise function.
The command display voice subscriber-line e1-number:15 is mainly used to display
the configuration information of the subscriber line corresponding to the ISDN PRI set,
the command display voice subscriber-line t1-number:23 is mainly used to display
the configuration information of the subscriber line corresponding to the ISDN PRI set,
such as whether to adopt the private-line auto-ring connection, subscriber line
description, whether to start the echo cancellation function and set echo cancellation
sampling time length, input gain and output attenuation, whether to adopt the nonlinear
4-18
processing in echo cancellation, the time of waiting for the initial number and the dial-up
time interval between numbers, etc.
Example
# Display the configuration about voice subscriber-line 1/0/0:0.

[H3C] display voice subscriber-line 1/0/0:0
The voice line was ds0
this subscriber line was not set connection
The subscriber line's descrition:
echo cancellation enable
echo cancellation coverage 16
comfort noise enable
PCM companding type :A-law
[H3C] display voice subscriber-line 1:15
The voice line was pri
this subscriber line was not set connection
The subscriber line's descrition:
echo cancellation enable
echo cancellation coverage 16
music threshold is -38
receive gain 0
transmit gain 0
first-dial timer 10
dial-interval Timer 10
PCM companding type :A-law
Table 4-6 Field description on voice subscriber-line configuration
Field Description
The voice line The signaling type of the subscriber line
this subscriber line The connection method of the subscriber line
The subscriber line's description The description of the subscriber line
The echo cancellation configuration of the
echo cancellation
subscriber line
The echo cancellation coverage of the
echo cancellation coverage
subscriber line
comfort noise The comfort noise of the subscriber line
The voice line was The signaling type of the subscriber line
this subscriber line The connection method of the subscriber line
receive gain The receive gain of the subscriber line
transmit gain The transmit gain of the subscriber line
4-19
Field Description
The timeout value after the subscriber dials
first-dial timer
the first digit
The timeout value between dialing the first
dial-interval Timer
digit and dialing the second digit
4.1.16 display voice voip
Syntax
display voice voip { down-queue e1t1vi-no | phy-statistic e1t1vi-no | up-queue

e1t1vi-no | }
View
Any view
Parameter
e1t1vi-no: Indicates the card number of the E1/T1 voice card.
Description

The command display voice voip downqueue e1t1vi-bno displays the contents of the
down interrupt queue between the E1/T1 voice card and the router main card.
The command display voice voip up-queue e1t1vi-no displays the contents of the up
interrupt queue between the E1/T1 voice card and the router main card.
The command display voice voip phy-statistic e1t1vi-bno displays the statistics of
the physical layer.
Example
# Display the contents of the down interrupt queue between the E1/T1 voice card and
the router main card.
[H3C] display voice voip down-queue 5
V = 0,I = 0,P = 0,C = 0,E = E1/T1VI_NULL_EVENT, B = 0
……
E1VI board 0 down interrupt queue is empty :
4-20
Table 4-7 Field description of the down interrupt queue between the E1/T1 voice card
and the router main card.
Field Description
V Value flag of interrupt
I Sequence number of interrupt down-queue
P Port number of E1VI board
C Channel number of E1VI board
E Type of event
B Flag of queue ending
E1VI board 0 down interrupt
Interrupt down-queue of E1VI board is empty
queue is empty
4.1.17 dl-bits
Syntax
dl-bits { answer | blocking | clear-back | clear-forward | idle | seize | seizure-ack |

release-guard } { receive | transmit } ABCD
undo dl-bits { answer | blocking | clear-back | clear-forward | idle | seize |
seizure-ack | release-guard } { receive | transmit }
View
R2 CAS view
Parameter
answer: Answer signal of R2 line signaling.

blocking: Blocking signal of R2 line signaling.
clear-back: Clear-back signal of R2 line signaling.
clear-forward: Clear-forward signal of R2 line signaling.
idle: Idle signal of R2 line signaling.
seize: Seizure signal of R2 line signaling.
seizure-ack: Seizure acknowledgement signal of R2 line signaling.
release-guard: Release guard signal of R2 line signaling.
receive: Signal of receiving R2 line signaling
transmit: Signal of sending R2 line signaling
ABCD: Value of signal bits of receiving/sending R2 line signaling, ranging from 0000 to
1111.
4-21
Table 4-8 Default values of R2 line signaling
Signal Default rx-bits ABCD Default tx-bits ABCD

Answer 0101 0101
Blocking 1101 1101
Clear-back 1101 1101
Clear-forward 1001 1001
Idle 1001 1001
Seize 0001 0001
Seizure-ack 1101 1101
Release-guard 1001 1001
Description
Use the dl-bits command to configure the bit value of all the signals of R2 line
signaling.
Use the undo dl-bits command to restore the values to defaults.
You can use the dl-bits command to configure the ABCD bits value of R2 signaling for
different coding schemes in different countries.
Related command: seizure-ack {enable/disable} and answer {enable/disable}.
Example
# Configure ABCD bits value of the idle signal of receiving R2 signaling to 1101, and
that of the idle signal of transmitting R2 signaling to 1011.
[H3C-cas1/0/4:0] dl-bits idle receive 1101
[H3C-cas0:0] dl-bits idle transmit 1011
4.1.18 dtmf
Syntax
dtmf { enable | disable }
View
R2 CAS view
Parameter
enable: Enables R2 signaling to be received and sent in DTMF mode.

disable: Disables R2 signaling to be received and sent in DTMF mode.
4-22
Description
Use the dtmf command to configure the way of sending and receiving R2 signaling.
By default, MFC mode, not DTMF mode, is used to collect call number information.
The dtmf command is used to configure whether to use MFC or DTMF for sending and
receiving R2 signaling. DTMF mode is used when you configure dtmf enable. MFC
mode is used when you configure dtmf disable.
Related command: timer dtmf.
Example
# Configure DTMF mode to receive and send R2 signaling.

[H3C-cas1/0/0:0] dtmf enable
4.1.19 effect-time
Syntax
effect-time time
undo effect-time
View
R2 CAS view
Parameter
time: The lower threshold of the debounce time of line signaling, in the range 10 to 40
milliseconds. It defaults to 10 milliseconds.
Description
Use the effect-time command to configure the debounce time of line signaling.
Use the undo effect-time command to restore the default.
The change of the line is regarded valid only when the duration of line signaling
exceeds this threshold.
Related command: timeslots-set, pri-set.
Example
# Set the debounce time of line signaling to 20 milliseconds for timeslot set 3 on the E1
subscriber-line 1/0/0.
[H3C-cas1/0/0:3] effect-time 20
4-23
4.1.20 final-callednum
Syntax
final-callednum { enable | disable }
View
R2 CAS view
Parameter
enable: Enables the called number terminate signal to be sent back.

disable: Disables the called number terminate signal to be sent back.
Description
Use the final-callednum command to enable or disable the terminate signal to be sent
to the terminating point after the called number is sent.
By default, the called number terminate signal is disabled.
In some countries, the R2 interregister signaling can be used to send the called number
terminate signal after the called number is sent out, indicating that the called number
transmission is completed. In this case, you can use this command to adjust the
signaling exchange approach. When the terminating point receives the terminate signal,
it stops requesting for the called number.
Related command: register-value digital-end.
Example
# Enable the called number terminate signal.

[H3C-cas1/0/0:0] final-callednum enable
4.1.21 force-metering
Syntax
force-metering { enable | disable }
View
R2 CAS view
Parameter
enable: Enables the metering signal of R2 signaling.

disable: Disables the metering signal of R2 signaling.
4-24
Description
Use the force-metering command to enable or disable the metering signal of R2

signaling.
By default, the metering signal of R2 signaling is disabled.
If the opposite exchange supports the metering signal, H3C router, as the terminating
point, sends a forced-release signal instead of a clear-back signal when it terminates a
call, so as to indicate that the called party has release the line and the call is terminated.
And so metering signal collision can be avoided.
Example
# Enable the metering signal of R2 signaling.

[H3C-cas1/0/0:0] force-metering enable
4.1.22 group-b
Syntax
group-b { enable | disable }
View
R2 CAS view
Parameter
enable: Enables signal exchange at Group-B stage of R2 signaling.

disable: Disables signal exchange at Group-B stage of R2 signaling, that is, backward
Group-A signal A6 is used to complete register exchange directly.
Description
Use the group-b command to enable or disable Group-B stage signal to complete
register exchange.
By default, Group-B stage signal is used to complete register exchange, that is, the
command is in enable state.
In some countries, R2 register exchange does not support Group-B stage signal
exchange, or cannot correctly interpret Group-B signal value. Then you can use the
group-b command to enable or disable Group-B signal exchange.
Related command: register-value req-switch-groupb.
4-25
Example
# Enable Group-B signal to complete register exchange.

[H3C-cas1/0/0:0] group-b enable
4.1.23 line
Syntax
line slot -number : { ts-set-number | 15 }

line slot -number : 23
undo line
View
Parameter
slot –number: Indicates the serial number of E1/T1 subscriber-line to which this
subscriber line belongs.
ts-set-number: Indicates the serial number of Timeslot set established successfully.
15: Indicates adopting the E1 voice ISDN PRI interface mode.
23: Indicates adopting the T1 voice ISDN PRI interface mode.
Description
Use the line command to configure the corresponding relationship between the POTS
voice entity and the logic subscriber line.
Use the undo line command to cancel the corresponding relationship between the
POTS peer and the logical subscriber line.
This command can be used in POTS voice entity view only and takes effect on E1/T1
voice subscriber-line only.
After configuring the destination mode of voice entity by using the command
match-template, it is required to use the command line to configure the corresponding
relationship between the POTS voice entity and logic line, that is, to specify that via
which line the routing should be performed toward this destination.
Use the command line e1-number:ts-set-number to select the subscriber line
corresponding to Timeslot set in this E1 subscriber-line as the routing output. Use the
command line e1-number:15 corresponding to the ISDN PRI set in this E1
subscriber-line as the routing output. Use the command line t1-number:23
corresponding to the ISDN PRI set in this T1 subscriber-line as the routing end.
Related command: timeslots-set, entity, pri-set.
4-26
Example
# Configure the corresponding relationship between POTS voice entity 3 and No.1
Timeslot set in E1 subscriber-line.
[H3C-voice-dial-entity3] line 1/0/1:1
4.1.24 loopback
Syntax

undo loopback
View
Parameter
local: Places the local physical layer in a local loopback.

remote: Places the local physical layer in a remote loopback.
payload: Places the local physical layer in a payload loopback.
Description
Use the loopback command to set the loopback mode on the interface.
Use the undo loopback command to restore the default.
Example
# Place the local physical layer of interface E1 1/0 in a local loopback.

4.1.25 mfc (R2 CAS)
Syntax
mfc { block | open | query } timeslots timeslots-list
View
R2 CAS view
Parameter
block: Indicates blocking the MFC channel of the specified timeslot.

open: Indicates opening the MFC channel of the specified timeslot.
query: Indicates querying the MFC channel of the specified timeslot.
4-27
timeslots-list: Specifies a timeslot range. The expression includes the single digit, two
digits separated by “,”, a pair of digits separated by “-”, or the combination form (e.g.,
1-14, 15, 17-31). The value range of digits is the integer from 1 to 31.
Description
Use the mfc command to maintain of MFC channel of the specified timeslot.
To block the MFC channel means that this channel will no longer load the R2
interregister signaling information, that is, this channel is set manually as unavailable.
To open the MFC channel is the processes inverse to the blocking operation, which can
re-set the channel as available and enable it to load R2 interregister signaling.
To query the MFC channel will display the busy/idle, opened/blocked status of channel
in a real time way.
Related command: cas, ts.
Example
# Block the timeslots 1-15 in No.5 Timeslot set, and query the channel status of the
timeslots 1-31.
[H3C-cas1/0/0:5] mfc block timeslots 1-15
[H3C-cas1/0/0:5] mfc query timeslots 1-31
4.1.26 mode
Syntax
mode zone-name [ default-standard ]

undo mode
View
R2 CAS view
Parameter
zone-name: Name of the country or region. By default, it is set to the mode of ITU-T. It
can be:
z argentina: Uses Argentinean R2 signaling standard.
z australia: Uses Australian R2 signaling standard.
z china: Uses Chinese R2 signaling standard.
z bengal: Uses Bengalee R2 signaling standard.
z brazil: Uses Brazilian R2 signaling standard.
z custom: Uses the R2 signaling mode defined by customer.
z hongkong: Uses Hongkong R2 signaling standard.
4-28
z india: Uses Indian R2 signaling standard.

z indonesia: Uses Indonesian R2 signaling standard.
z itu-t: Uses ITU-T R2 signaling standard.
z korea: Uses Korean R2 signaling standard.
z malaysia: Uses Malaysian R2 signaling standard.
z mexico: Uses Mexican R2 signaling standard.
z newzealand: Uses New Zealand R2 signaling standard.
z singapore: Uses Singaporean R2 signaling standard.
z thailand: Uses Thai R2 signaling standard.
default-standard: Initializes the related parameters of R2 signaling according to the
mode in the current country, that is, initializes the values of the sense and
force-metering commands.
Description
Use the mode command to configure the R2 signaling mode in a country or region.
Use the undo mode command to restore the default, as you would with the mode itu-t
default-standard command.
The default R2 signaling mode is ITU-T mode.
The implementation and parameters of R2 signaling vary in different countries.
Therefore, the mode needs to be adjusted to enable H3C router to exchange R2
signaling with the switching devices of different countries or regions. According to the
configuration, the system automatically selects the appropriate subscriber-line state,
service type, metering signal, and the signal values of C and D bits, etc. At present, it
supports the modes in Brazil, Mexico, Argentina, India, New Zealand, Thailand, Bengal,
South Korea, Hongkong, Indonesia, as well as the countries and regions that comply
with ITU-T standards.
If the default-standard parameter is configured, then the system will initialize the
subscriber line status, service type, metering signal and C signaling bit and D signaling
bit and other parameters according to the national standards of the countries or
regions.
In the custom mode, you can configure the specific signaling exchange process and
signal values of R2 signaling, so as to adjust the R2 signaling in your country in a more
flexible way.
You can execute this command only when the register-enable off command is
configured.
Related command: register-value, force-metering, effect-time.
Example
# Adopt the default standard of Hongkong R2 signaling mode.
4-29
[H3C-cas1/0/0:0] mode hongkong default-standard
4.1.27 open-trunk
Syntax
open-trunk { caller [ monitor interval ] | called }

undo open-trunk [caller monitor ]
View
E&M voice subscriber line view
Parameter
caller: Indicates the voice gateway can enable E&M non-signaling mode but cannot
enable monitoring function when it works as the calling end.
monitor interval: Indicates the voice gateway can enable both E&M non-signaling
mode and the monitoring function when it works as the calling end. The monitoring time
is decided by the argument interval.
called: Indicates the voice gateway can enable E&M non-signaling mode when it works
as the called end.
Description
Use the open-trunk command to enable E&M non-signaling mode.

Use the undo open-trunk command to delete E&M non-signaling mode.
By default, E&M non-signaling mode is disabled.
Note:
After using the open-trunk caller monitor interval command to enable E&M
non-signaling mode and enable the monitoring function, you should use the undo
open-trunk monitor command to delete this monitoring function (Note that the
execution of this command will just disable monitoring function but not E&M
non-signaling mode.); while executing the undo open-trunk command will not only
disable E&M non-signaling mode but also the monitoring function.
Example
# Configure to enable E&M non-signaling mode and enable the monitoring function at
the same time. The monitoring time is 120 seconds.
[H3C-voice-line3/0/0] open-trunk caller monitor 120
4-30
4.1.28 pcm
Syntax
pcm { a-law | µ-law }

undo pcm
View
Parameter
a-law: Companding A-law, used in most part of the world other than North America and
Japan, such as China, Europe, Africa, and South America.
µ-law: Companding µ-law, used in North America and Japan.
Description
Use the pcm command to configure a companding law used for quantizing signals.
Use the undo pcm command to restore the default.
By default, A-law applies.
Companding laws are usually adopted to quantize signals unevenly for the purpose of
reducing noise and improving signal to noise ratio. Underpinning this approach is the
statistics about voice signals, which indicate that lower power signals are more likely
present than high power signals.
According to CCITT, when two countries use different companding schemes
communicate, the side using µ-law is responsible for converting signals to A-law.
Example
# Adopt µ-law companding for signal quantization.

[H3C-voice-line3/0/0:0] pcm u-law
4.1.29 pri-set
Syntax

undo pri-set
View
CE1/PRI interface view, CT1/PRI interface view
4-31
Parameter
range: Number of bundled timeslots. It ranges from 1 to 31 in CE1/PRI interface view

and from 1 to 24 in CT1/PRI interface view. When specifying the timeslots to be
bundled, you can specify one timeslot by specifying its number, a timeslot range by
specifying a range in the form number1-number2, or several discrete timeslots in the
form number1 number2-number3.
Description
Use the pri-set command to bundle timeslots on the CT1/PRI or CE1/PRI interface into
a pri-set.
Use the undo pri-set command to remove the timeslot bundle.
By default, no timeslots are bundled into pri-sets.
When creating a pri-set on a CE1/PRI interface, note the following:
z Timeslot 16 is D channel for transmitting signaling; it cannot form a bundle that
includes itself only. The attempt to bundle only timeslot 16 will fail.
z In a pri-set formed by timeslot bundling on a CE1/PRI interface, timeslot 0 is used
for frame synchronization control (FSC), timeslot 16 as a D channel for signaling
transmission, and other timeslots as B channels for data transmission. You may
bundle the timeslots except for timeslot 0 into a pri-set (as the D channel, timeslot
16 is automatically bundled). The logic features of this pri-set will be the same like
those of an ISDN PRI interface. If no timeslot is specified, all timeslots except for
timeslot 0 are bundled into an interface similar to an ISDN PRI interface in the form
of 30B+D.
z The system automatically creates a serial interface after timeslot bundling on the
interface. This serial interface has the same logic features of ISDN PRI interface.
The serial interface is numbered in the form of serial number:15, where number is
maximum serial interface number plus 1.
z Only one timeslot bundling mode is supported on one CE1/PRI interface at a time.
In other words, you cannot use this command and the channel-set command
together.
When creating a pri-set on a CT1/PRI interface, note the following:
z Timeslot 24 is D channel for transmitting signaling; it cannot form a bundle that
includes itself only. The attempts to bundle only timeslot 24 will fail.
z In a pri-set formed by timeslot bundling on a CT1/PRI interface, timeslot 24 is used
as D channel for signaling transmission, and other timeslots as B channels for data
transmission. You may randomly bundle these timeslots into a pri-set (as the D
channel, timeslot 24 is automatically bundled). The logic features of this pri-set will
be the same like those of an ISDN PRI interface. If no timeslot is specified, all the
timeslots are bundled into an interface similar to an ISDN PRI interface in the form
of 23B+D.
4-32
z The system automatically creates a serial interface after timeslot bundling on the
interface. This serial interface has the same logic features of ISDN PRI interface.
The serial interface is numbered in the form of serial number:23, where number is
maximum serial interface number plus 1.
z Only one timeslot bundling mode is supported on a CT1/PRI interface at a time. In
other words, you cannot use this command and the channel-set command
together.
Example
# On the CE1/PRI interface bundle timeslots 1, 2, and 8 through 12 into a pri-set.

[H3C-E1 3/0/0] pri-set timeslot-list 1,2,8-12
4.1.30 re-answer
Syntax
re-answer { enable | disable }
View
R2 CAS view
Parameter
enable: Enables the originating point to support re-answer signal process.

disable: Disables the originating point to support re-answer signal process.
Description
Use the re-answer command to enable or disable the originating point to support
re-answer signal process.
By default, the originating point does not support re-answer signal process.
In some countries, re-answer process is needed in R2 signaling. When the terminating
point sends a clear-back signal, the originating point does not release the line right
away, but maintains the call state instead. If it receives the re-answer signal from the
terminating point in the specified time, it continues the call; otherwise, it disconnects the
call after timeout.
Related command: answer, timer dl re-answer.
Example
# Enable the originating point to process re-answer signals.

[H3C-cas1/0/0:0] re-answer enable
4-33
4.1.31 register-number
Syntax
register-number
undo register-number
View
Voice entity view
Parameter
None
Description
Use the register-number command to enable the gateway (the VoIP-enabled router)
to register the number of the voice entity with the H.323 gatekeeper or SIP server.
Use the undo register-number command to disable the gateway to register the
number of the voice entity when registering with the H.323 gatekeeper or SIP server.
By default, the number of the voice entity is registered.
You need to use the undo register-number command to disable the gateway to
register the numbers of some voice entities with a gatekeeper or SIP server in the
situations where:
z POTS entities with the same number exist on multiple gateways on the same
network. But for their gatekeeper or SIP server, the number of a POTS entity must
be unique. Therefore, those POTS entities cannot register with the gatekeeper or
SIP server at the same time.
z The user needs to register the numbers of some ports with the gatekeeper or SIP
server but not the numbers of others for special purposes.
This command is only applicable to the configurations of POTS voice entities.
Caution:
After configuring this command, use the ras-on command in GK-client view or the
register-enable command in SIP view to register the number with the gatekeeper or
SIP server to make the configuration effective.
4-34
Example
# Disable the gateway to register the number of voice entity 1.

[H3C-voice-dial-entity1] undo register-number
4.1.32 register-value
Syntax
register-value { billingcategory | callcreate-in-groupa | callingcategory |

congestion | demand-refused | digit-end | nullnum | req-billingcategory | req-
callednum-and-switchgroupa | req-callingcategory | req-
currentcallednum-in-groupc | req-currentdigit | req- firstcallednum-in-groupc |
req-firstcallingnum | req-firstdigit | req-nextcallednum | req-nextcallingnum |
req-lastfirstdigit | req-lastseconddigit | req-lastthirddigit | req- nextcallednum |
req-nextcallingnum | req-switch-groupb | subscriber-abnormal |subscriber-busy
| subscriber-charge |subscriber-idle } value
undo { billingcategory | callcreate-in-groupa | callingcategory | congestion |
demand-refused | digit-end | nullnum | req-billingcategory | req-
callednum-and-switchgroupa | req-callingcategory | req-
currentcallednum-in-groupc | req-currentdigit | req- firstcallednum-in-groupc |
req-firstcallingnum | req-firstdigit | req-nextcallednum | req-nextcallingnum |
req-lastfirstdigit | req-lastseconddigit | req-lastthirddigit | req- nextcallednum |
req- nextcallingnum | req- specialsignal | req-switch-groupb |
subscriber-abnormal |subscriber-busy | subscriber-charge |subscriber-idle }
View
R2 CAS view
Parameter
billingcategory value: Specifies the billing category value, in the range 1 to 16. It
defaults to 1.
callcreate-in-groupa value: Specifies the directly created calling signal value, in the
range 1 to 16. It defaults to 6.
callingcategory value: Specifies calling category value, in the range 1 to 16. It defaults
to 1.
congestion value: Specifies congestion value, in the range 1 to 16. It defaults to 4.
demand-refused value: Specifies demand-refused value, in the range 1 to 16. It
defaults to 12.
digit-end value: Specifies digit-end value, in the range 1 to 16. It defaults to 15.
nullnum value: Specifies null number value, which ranges from 1 to 16. It defaults to 5.
4-35
req-billingcategory value: Specifies request billing category value, in the range 1 to 16.
It defaults to 3.
req- callednum-and-switchgroupa value: Specifies request next called number and
switch Group-A value, in the range 1 to 16. It defaults to 1.
req-callingcategory value: Specifies request calling category value, in the range 1 to
16. It defaults to 3.
req- currentcallednum-in-groupc value: Specifies request current called number
value in Group C, in the range 1 to 16. It defaults to 16.
req-currentdigit value: Specifies request current digit value, in the range 1 to 16. It
defaults to 16.
req- firstcallednum-in-groupc value: Specifies request first called number value in
Group C, in the range 1 to 16. It defaults to 16.
req-firstcallingnum value: Specifies request first calling number value, in the range 1
req-firstdigit value: Specifies request first digit value, in the range 1 to 16. It defaults to
16.
req-nextcallednum value: Specifies request next called number value, in the range 1
req-nextcallingnum value: Specifies request next calling number value, in the range 1
req-lastfirstdigit value: Specifies request last first digit value, in the range 1 to 16. It
defaults to 2.
req-lastseconddigit value: Specifies request last second digit value, in the range 1 to
req-lastthirddigit value: Specifies request last third digit value, in the range 1 to 16. It
defaults to 8.
req- nextcallednum value: Specifies request next called number value, in the range 1
req- nextcallingnum value: Specifies request next calling number value, in the range 1
req-switch-groupb value: Specifies request switch Group-B value, in the range 1 to 16.
It defaults to 3.
subscriber-abnormal value: Specifies subscriber line abnormal value, in the range 1
subscriber-busy value: Specifies subscriber line busy value, in the range 1 to 16. It
defaults to 3.
subscriber-charge value: Specifies subscriber line idle and charge value, in the range
1 to 16. It defaults to 1.
4-36
subscriber-idle value: Specifies subscriber line idle value, in the range 1 to 16. It
defaults to 6.
Description
Use the register-value command to configure the value of all register signals of R2
signaling.
Use the undo register-value command to restore the default value. Signal value 16
means the corresponding signal function does not exist. For example, if the request last
first digit function does not exist in some countries, the value of req-lastfirstdigit is 16.
By configuring the register-value command, you can send the specified request signal
and require the opposite exchange to send back the corresponding answer signal. For
example, using the register-value callingcategory command, you can enable the
terminating point to send the specified signal to require the originating point to send
back the calling category.
The register-value billingcategory command is used to configure KA signal of R2
signaling. That is, the originating point sends a calling category signal to the originating
toll office or originating international exchange, which provides two kinds of information:
billing category of this connection (paid at the specified time or at once, or toll free) and
subscriber level (with or without priority).
The register-value callingcategory command is used to configure KD signal of R2
signaling, i.e., calling category. It functions to identify whether break-in and forced-
release can be implemented by or on the calling party.
The register-value subscriber-idle command is used to configure KB signal of R2
signaling. It indicates subscriber status (such as idle), and acknowledges and controls
connection. You should make sure that KB values of the both ends are the same.
Otherwise, call connection might not be established even if the called party is idle. If
H3C routers are used at both ends, you should make sure that KB values of the both
ends are the same. If PBX is used at one end, and a router is used at the other end, you
should adjust the KB value of the router to keep it consistent with that of the PBX.
Note:
In some countries, the register signal encoding scheme does not necessarily support
all the register signals described above. For example, there is no billingcategory but
callingcategory in ITU-T recommendation. Therefore, it is recommended that you use
the default values and do not configure unless there are special requirements.
Related command: group-b {enable/disable}.
4-37
Example
# Request the originating point to send calling category by configuring a backward

signal (signal value 7).
[H3C-cas1/0/0:0] register-value req-callingcategory 7
4.1.33 renew
Syntax
renew ABCD
undo renew
View
R2 CAS view
Parameter
ABCD: Indicates the default of each signal bit in transmission, with the value being 0 or
Description
Use the renew command to configure the signal values of C bit and D bit.
Use the undo renew command to restore the default value.
In the R2 signaling A-bit and B-bit are used to transmit the valid information, and the
actual transmission signal has nothing to do with the setting value. C-bit and D-bit do
not transmit the valid information, and generally the set signal value is adopted as the
transmission signals. Therefore, for the R2 signaling, this command only makes sense
to C-bit and D-bit.
Using this command, you can adjust the values of C and D bits according to the line
signaling encoding standards in different countries. For example, in China, the values
of C and D bits of R2 signaling are fixed to 1 and 1 respectively. However, in most other
countries, the values of C and D bits are 0 and 1 respectively.
Related command: cas, reverse.
4-38
Note:
This command takes effect only after the mode zone-name {custom| standard}
command is configured , and is invalid after the command mode custom is configured,
namely the values of C and D will not be changed. With mode custom configured, all
signal values of R2 signaling are set manually. With mode zone-name custom
configured, some signals values are set as required, while most signal values comply
with the standard of the zone-name country.
Example
# Configure the signal values of both the C-bit and D-bit of R2 line signaling as 1.
[H3C-cas1/0/0:5] renew 0011
4.1.34 reset voice em
Syntax
reset voice em
View
User view
Parameter
None
Description
Use the reset voice em command to reset the call statistics on the digital E&M
interface.
This command applies to E1 voice lines only.
Related command: display voice em call-statistics.
Example
# Reset the call statistics on the E&M interface.

<H3C> reset voice em
4.1.35 reset voice r2
Syntax
reset voice r2
4-39
View
User view
Parameter
None
Description
Use the reset voice r2 command to reset the call statistics of R2 signaling.
Related command: display voice r2 call-statistics.
Example
# Reset the call statistics of R2 signaling.

<H3C> reset voice r2
4.1.36 reverse
Syntax
reverse ABCD
undo reverse
View
R2 CAS view
Parameter
ABCD: Indicates whether to perform the inversion of each signal bit, with the value of
each bit being 0 or 1. The default ABCD is 0000, that is, the function of inversion is
disabled.
Description
Use the reverse command to configure the inversion mode of line signals.
Use the undo reverse command to restore the default value.
This command can be used to perform the inversion change to A, B, C, and D bits prior
to sending and after receiving the line signal, that is, 0 is changed to 1, and 1 to 0. If the
value of one bit is 1, it indicates this bit is needed to invert.
Related command: cas, renew.
Example
# reverse the B-bit and D-bit of the R2 line signaling.
4-40
[H3C-cas1/0/0:0] reverse 0101
4.1.37 seizure-ack
Syntax
seizure-ack { enable | disable }
View
R2 CAS view
Parameter
enable: Enables the terminating point to send seizure acknowledgement signal.

disable: Disables the terminating point to send seizure acknowledgement signal.
Description
Use the seizure-ack command to enable or disable the terminating point to send
seizure acknowledgement signal.
By default, the terminating point sends seizure acknowledgement signal.
Normally, the terminating point sends seizure acknowledgement signal when it
receives a seizure signal from the originating point. However, in some countries R2
signaling encoding scheme allows the terminating point not to send seizure
acknowledgement signal. In this case, you can use the seizure-ack command to adjust
the signaling encoding scheme. If the originating point does not require
acknowledgement signal, the terminating point has no need to send back the signal
when it receives a seizure signal.
Related command: timer dl seizure.
Example
# Disable the terminating point to send seizure acknowledgement signal.

[H3C-cas1/0/0:0] seizure-ack disable
4.1.38 select-mode
Syntax
select-mode [ max | maxpoll | min | minpoll ]

undo select-mode
View
R2 CAS view
4-41
Parameter
max: Indicates the maximum selection.

maxpoll: Indicates the maximum polling selection.
min: Indicates the minimum selection.
minpoll: Indicates the minimum polling selection.
Description
Use the select-mode command to configure the E1 trunk selection mode.

Use the undo select-mode command to restore the default.
By default, the trunk selection mode is min.
The proper selection policy can not only enables each timeslot in E1 trunk to have the
balanced opportunity to be used but also helps to enhance the speed of selecting idle
timeslot, so as to improve the telephone connection speed.
The parameter max indicates the maximum selection, selecting the timeslot of the
maximum serial number from the currently available timeslots.
The parameter maxpoll indicates the maximum polling selection. When used for the
first time, select the timeslot of the maximum serial number from the currently available
timeslots, and next time select in descending order the available timeslot whose serial
number is less than it. For example, No.31 and No.29 timeslots are unavailable in 32
timeslots, so select firstly No.30 timeslot, and select No.28 timeslot secondly.
The parameter min indicates the minimum selection, selecting the timeslot of the
minimum serial number from the currently available timeslots.
The parameter minpoll indicates the minimum polling selection. When used for the first
time, select the timeslot of the minimum serial number from the currently available
timeslots , and next time select in descending order the available timeslot whose serial
number is bigger than it. For example, No.1 and No.3 timeslots are unavailable in 32
timeslots, so select firstly No.2 timeslot, and select No.4 timeslot secondly.
Using the command select-mode without any parameter can restore the default trunk
timeslot selection mode.
Related command: cas and trunk-direction.
Example
# Configure the trunk selection mode as max for the No.5 Timeslot set in No.0 E1
subscriber-line.
[H3C-cas1/0/0:5] select-mode max
4-42
4.1.39 sendring
Syntax
sendring { ringback | ringbusy } { enable | disable }
View
R2 CAS view
Parameter
ringback { enable | disable }: Enables/disables the sending of ring-back signal.

ringbusy { enable | disable }: Enables/disables the sending of ring-busy signal.
Description
Use the sendring command to enable or disable the terminating point to send
ring-back tone or busy tone signal to the calling party.
By default, the ring-back tone and busy tone signals are sent.
In some regions a PBX, as the originating point, might not send ring-back tone to the
calling party during call connecting process. To avoid call connection failure due to the
calling party not able to hear the corresponding tone, you can manually configure the
sendring command. If H3C router works as the terminating point, it sends the
corresponding tone to the originating point according to call connection situations.
Related command: timer ringring.
Example
# When time slot 5 on the E1 port 0 works as the terminating point, enable it to send
ring-back tone to the originating point.
[H3C-cas1/0/0:5] sendring ring-back enable
4.1.40 signal-value
Syntax
signal-value { received idle | received seize | transmit-bits idle | transmit seize }

ABCD
undo signal-value { received idle | received seize | transmit-bits idle | transmit
seize }
View
4-43
Parameter
received idle: The digital E&M subscriber-line receives idle signaling.

received seize: The digital E&M subscriber-line receives the seizure signaling.
transmit idle: That the digital E&M subscriber-line transmits the idle signaling.
transmit seize: The digital E&M subscriber-line transmits the seizure signaling.
ABCD: The default value of each signaling bit in a transmission. It is valued to be either
0 or 1. By default, the ABCD bits value of the received and transmitted idle signaling
and seizure signaling on the digital E&M subscriber-line are 1101.
Description
Use the signal-value command to configure the digital E&M subscriber-line to receive
and transmit the ABCD bits of idle signaling and seizure signaling.
Use the undo signal-value command to restore the bits of the corresponding signaling
to the default value.
When the router and its peer device, such as a PBX, communicate using the digital
E&M signaling, it should be ensured that they interpret the ABCD bits of the received
and transmitted idle signaling and seizure signaling in the same way. That is, the
signaling of the same type should have the same bit value at both ends.
Example
# Set the ABCD bits of seizure signaling transmitted by the digital E&M subscriber-line
are 1011.
[H3C-voice-line1/0/0:0] signal-value transmit seize 1011
4.1.41 special-character
Syntax
special-character character number
View
R2 CAS view
Parameter
character: A special character, which can be #, *, A, B, C, or D.

number: Code of the register signal, ranging from 11 to 15.
4-44
Description
Use the special-character command to configure the supported special characters

during register signal exchange.
By default, no special character is configured.
In some countries, besides numerical information, register forward Group I signal of R2
signaling also supports the information containing special characters, such as # and *.
To encode these special characters, you need to use the special-character command.
Note:
z Do not use the special-character command to configure one special character to
different signal codes.
z Up to six special characters can be configured with register signal codes.
z Different special characters must use different signaling values; otherwise, calling
may be affected.
Example
# Configure register signal code of # to 11.

[H3C-cas1/0/0:0] special-character # 11
4.1.42 subscriber-line
Syntax
subscriber-line slot-number: { ts-set-number | 15 }

subscriber-line slot-number: 23
View
Voice view
Parameter
slot-number: Indicates the subscriber line number generated in creating Timeslot set or
ISDN PRI set, determined by the slot number of the E1V1 module.
ts-set-number: Indicates the number of Timeslot set created successfully.
15: Indicates the subscriber line is generated in creating the ISDN PRI set on E1
subscriber line.
23: Indicates the subscriber line is generated in creating the ISDN PRI set on T1
subscriber line.
4-45
Description
Use the subscriber-line command to enter the voice subscriber-line view.

After creating the Timeslot set successfully, the system will generate the subscriber line
corresponding to this Timeslot set according to current E1 subscriber-line number and
Timeslot set number, and the subscriber line number is “E1 subscriber-line number:
Timeslot set number”.
After configuring the ISDN PRI set successfully, the system will generate the subscriber
line corresponding to this PRI set according to the number of E1 subscriber-line where
the current PRI subscriber-line is located, and the subscriber line number is “E1
subscriber-line number: 15”.
After configuring the ISDN PRI set successfully on T1 subscriber-line, the system will
generate the subscriber line corresponding to this PRI set according to the number of
T1 subscriber-line where the current PRI subscriber-line is located, and the subscriber
line number is “T1 subscriber-line number: 23”.
Related command: timeslots-set, pri-set.
Example
# Enter the view of subscriber line 1/0/0:5.

[H3C-voice] subscriber-line 1/0/0:5
R2 interface encountered
[H3C-voice-line1/0/0:5]
4.1.43 timer (Digital E&M)
Syntax
timer { dial-interval | ring-back } seconds

timer wait-digit { seconds | infinity }
undo timer { dial-interval | ring-back | wait-digit }
View
Parameter
dial-interval seconds: Sets the max waiting time between two digit numbers, it is any
integer in the 0 to 300 seconds. By default, the dial-interval seconds is 4 seconds.
ring-back seconds: Sets the timeout time for the calling party to wait for the ringback
response from the called party. It is any integer in the range 5 to 60000 seconds. By
default, the ring-back seconds is 60 seconds.
4-46
wait-digits second: Sets the timeout time for the called party to wait for the called
number. It is any integer in the range 3 to 600 seconds. By default, the wait-digits
seconds is 5 seconds.
infinity: Indicates that there is no time limit, that is, timeout will not occur.
Description
Use the timer command to configure the timeout values of the signals in the digital
E&M signaling.
Use undo timer command to restore them to defaults.
The timer ring-back seconds command can be used at the digital E&M subscriber-line
to set the timeout time for a calling party to wait for the ringback response from the
called party.
The timer wait-digit seconds command can be used at the digital E&M subscriber-line
to set the timeout time for a called party to wait for the called number.
Example
# Set the ringback response timer to 30 seconds on a voice subscriber-line.

[H3C-voice-line1/0/0:3] timer ring-back 30
4.1.44 timer dtmf (R2)
Syntax
timer dtmf time

undo timer dtmf
View
R2 CAS view
Parameter
time: Interval at which R2 signaling sends DTMF signals, in the range 50 to 10000
milliseconds. It defaults to 50 milliseconds.
Description
Use the timer dtmf command to configure the time interval for sending DTMF signals.
Use the undo timer dtmf command to restore the default value.
Normally, the originating point sends a DTMF signal upon receiving the line seizure
acknowledgement signal. Using this command, you can configure the device at the
4-47
originating point to send a DTMF signal after the specified time interval, so as to make
it appropriate to the number receiving process of the peer PBX,
Related command: dtmf { enable | disable }.
Example
# Configure the R2 signaling to send a DTMF signal 800 milliseconds after the
reception of the seizure acknowledgement signal.
[H3C-cas1/0/0:0] timer dtmf 800
4.1.45 timer register-pulse (R2)
Syntax
timer register-pulse persistence time

undo timer register-pulse
View
R2 CAS view
Parameter
persistence time: Duration time of the register pulse signal of R2 signaling, ranging
from 100 to 1,000 milliseconds. By default, it is set to 150±30 milliseconds.
Description
Use the timer pulse command to configure the persistence time of the register pulse
signal of R2 signaling (A3, A4 and A6, etc.).
Use the undo timer pulse command to restore the default value.
When the terminating point sends a backward register pulse signal, such as A3, the
signal must persist for a specified time range. When the originating point receives the
pulsed A3 signal, it has to send a forward Group II signal. When the originating point
recognizes the pulse signal A4, A6, or A15, it stops sending any forward signal, and
terminates the register signal exchange.
Related command: timer register-complete.
Example
# Set the persistence time of the register pulse signal of R2 signaling to 300ms.
[H3C-cas1/0/0:0] timer register-pulsepersistence 300
4-48
4.1.46 timer register-complete (R2)
Syntax
timer register-complete group-b time

undo timer register-complete group-b
View
R2 CAS view
Parameter
group-b time: Timeout value in which the originating point waits for Group-B signal of
R2 signaling. The terminating point should send Group-B signal in the specified time
when switching to Group-B exchange. It ranges from 100 to 90,000ms. By default, it is
set to 30,000ms.
Description
Use the timer register-complete command to configure the timeout value for register
signals of R2 signaling.
Use the undo timer register-complete command to restore the default value.
Related command: timer dl.
Example
# Configure the maximum Group-B signal exchange time to 10,000 ms during

connecting process.
[H3C-cas1/0/0:0] timer register-complete group-b 10000
4.1.47 timer ring (R2)
Syntax
timer ring { ringback | ringbusy } time

undo timer ring { ringback | ringbusy }
View
R2 CAS view
Parameter
ringback time: Time interval before ring-back tone is sent, ranging from 1,000 to
90,000ms. By default, it is set to 60,000ms.
4-49
ringbusy time: Time interval before busy tone is sent, ranging from 1,000 to 90,000ms.
By default, it is set to 30,000ms.
Description
Use the timer ring command to configure the maximum time range before the signal
tone of R2 signaling is sent.
Use the undo timer ring command to restore it to the default value.
By manually configuring the sending command, you can enable the device at the
originating point to send ring-back and busy tones to the calling party. The timer ring
command helps you identify these signals.
Related command: sendring.
Example
# Configure the timeout interval for R2 signaling ring-back tone to 10,000ms.

[H3C-cas1/0/0:0] timer ring ringback 10000
4.1.48 timer dl (R2)
Syntax
timer dl { answer | clear-back | clear-forward | seizure | re-answer | release-guard }

time
undo timer dl { answer | clear-back | clear-forward | seizure | re-answer |
release-guard }
View
R2 CAS view
Parameter
answer time: Timeout interval during which R2 waits for an answer signal. The
terminating point should send back an answer signal in the specified time after a
seizure acknowledgement signal is sent. It ranges from 10 to 120000 milliseconds and
defaults to 60000 milliseconds.
clear-back time: Timeout interval of R2 clear-back signal. After it sends a clear-back
signal, the terminating point should recognize the forward signal sent by the originating
point in the specified time. It ranges from 100 to 60000 milliseconds. By default, it is set
to 10000 milliseconds.
clear-forward time: Timeout interval of R2 clear-forward signal. After the originating
point sends a clear-forward signal, the terminating point should send back a
corresponding line signal in the specified time, such as clear-back signal or release
4-50
guard signal. It ranges from 100 to 60000 milliseconds. By default, it is set to 10000
milliseconds.
seizure time : Timeout value of R2 seizure signal. After the originating point sends a
seizure signal, the terminating point should send back a seizure acknowledgement
signal in the specified time. It ranges from 100 to 5000 milliseconds. By default, it is set
to 1000 milliseconds.
re-answer time: Timeout interval of R2 re-answer signal. When the originating point
recognizes the clear-back signal, if the terminating point does not send a re-answer
signal in the specified time, the originating point releases the line. It ranges from 100 to
60000 milliseconds. By default, it is set to 1000 milliseconds.
release-guard time: Timeout interval of R2 release guard signal. When the originating
point sends a clear-forward signal, the terminating point should send a release guard
signal in the specified time after it sends back a clear-back signal. It ranges from 100 to
60000 milliseconds. By default, it is set to 10000 milliseconds.
Description
Use the timer dl command to configure the timeout value of line signals of R2
signaling.
Use the undo timer dl command to restore the default value.
Related command: timer complete.
Example
# Configure the timeout interval of R2 signaling seizure signal to 300ms.

[H3C-cas1/0/0:0] timer dl seize 300
4.1.49 timeslot-set
Syntax
timeslot-set ts-set-number timeslot-list timeslots-list signal { e&m-delay |

e&m-immediate | e&m-wink | r2 }
undo timeslot-set ts-set-number
View
Parameter
ts-set-number: Specifies the identification number of a certain Timeslot set, with the
value ranging from 0 to 30.
4-51
timeslots-list: Specifies a timeslot range. The expression includes the single digit, two
digits separated by “,”, a pair of digits separated by “-”, or the combination form (e.g.,
1-14, 15, 17-31). The value range of digits is the integer from 1 to 31.
signal: Specifies the binding signaling mode of this Timeslot set, which is generally
used to configure the signaling mode adopted by the central office. It includes the
following types of signaling:
z e&m-delay: Adopts the delay-start mode in the digital E&M signaling.
z e&m-immediate: Adopts the immediate-start mode in the digital E&M signaling.
z e&m-wink: Adopts the wink-start mode in the digital E&M signaling.
z r2: Specifies that the signaling mode adopt ITU-T Q.421 digital line signaling R2,
which is the most common configuration signaling.
Description
Use the timeslot-set command to configure the timeslot set to perform R2 signaling
and digital E&M signaling configurations.
Use the undo timeslot-set command to cancel the specified timeslot set.
By default, no TS set is configured, and if the digital E&M signaling is used, then adopts
e&m-immediate mode.
The Timeslot set is actually the logical subscriber line abstracted from the physical E1
interface, mainly used for configuring R2 signaling, digital E&M signaling and other
voice functions. In one E1 interface only one Timeslot set can be defined. In defining
the timeslot range of Timeslot set, the timeslot range can be distributed is 1-15 and
17-31, and the No.16 timeslot is reserved as the transmission channel of the
out-of-band signaling.
When using the digital E&M signaling delay-start mode (e&m-delay), If the calling side
off-hooks to occupy the trunk line, the connected peer (e.g., PBX) will also enter the
off-hook state to answer the calling party and will remain in that state until it is ready for
receiving the address message. In this case, the PBX enters the hook-up state (this
interval is the delay-dial period). The calling party sends the address message, and
PBX connects this call to the called party, and thus the two parties can begin their
communications.
When the digital E&M signaling e&m-immediate mode is adopted, the calling party
off-hooks to wait for the confirmation of time, and then it sends the dialing address
message to the connected peer such as a PBX. During the process, it does not detect
whether the PBX is ready to receive.
When the digital E&M signaling e&m-wink mode is adopted, the calling party first
off-hooks to occupy the trunk line while the connected peer (e.g., a PBX) remains in the
hook-up state until it receive the connecting signal from the calling party. In this case,
the wink signal sent by the PBX indicates that it has been ready. Upon receiving the
4-52
wink signal, the calling party begins to send the address message and the PBX will
connect the call to the called party and thus the two parties can begin their
communications.
Only after establishing TS set successfully can the command subscriber-line be used
to enter the subscriber line and configure the voice-related attributes.
Related command: subscriber-line, cas.
Example
# Create a timeslot set numbered 5, including 1 to 31 timeslots and using R2 signaling.

4.1.50 trunk-direction
Syntax
trunk-direction timeslots timeslots-list { in | out | dual }

undo trunk-direction timeslots timeslots-list
View
R2 CAS view
Parameter
timeslots-list: Specifies the range of trunk timeslot. The expression includes the single
digit, two digits separated by “,”, a pair of digits separated by “-”, or the combination
form (e.g., 1-14, 15, 17-31). The value range of digits is the integer from 1 to 31.
in: Indicates the trunk is the incoming trunk.
out: Indicates the trunk is the outgoing trunk.
dual: Indicates the trunk is the bidirectional trunk.
Description
Use the trunk-direction command to configure the E1 trunk direction.

Use the undo trunk-direction command to restore the default value.
By default, configure the bidirectional trunk.
When configuring the E1 trunk direction as incoming trunk, this trunk will not load any
outgoing call. When configuring the E1 trunk direction as outgoing trunk, this trunk can
only be used for the outgoing call and not for incoming call. When configuring it as
bidirectional trunk, it can load the outgoing call and incoming call respectively
according to the initiative of originating call.
4-53
To keep the E1 communication appropriate, if the E1 trunk adopts the mode of

incoming trunk or outgoing trunk, then one end of it must be ensured as incoming and
other as outgoing, or the connection will fail. If both ends of E1 trunk adopt the
bidirection mode, it is required to use the command of select-mode to adjust the trunk
selection policy to avoid the simultaneous hold of timeslot by the two sides of
communication.
In configuration avoid that one end is bidirectional trunk while the other end is outgoing
trunk, or the call from the end configured as the bidirectional trunk will always fail.
Related command: cas, select-mode.
Example
# Configure the trunk direction as bidirectional trunk for timeslot set 5 on E1 port 1/0/0.
[H3C-cas1/0/0:5] trunk-direction timeslots 1-31 dual
4.1.51 ts
Syntax
ts { block | open | query | reset } timeslots timeslots-list
View
R2 CAS view
Parameter
block: Indicates blocking the trunk circuit of the specified timeslot.

open: Indicates opening the trunk circuit of the specified timeslot.
query: Indicates querying the trunk circuit of the specified timeslot.
reset: Indicates resetting the trunk circuit of the specified timeslot.
timeslots timeslots-list: Specifies a timeslot range. The expression includes the single
digit, two digits separated by “,”, a pair of digits separated by “-”, or the combination
form (e.g., 1-14, 15, 17-31). The value range of digits is the integer from 1 to 31.
Description
Use the ts command to maintain the trunk circuit of the specified timeslot.
To block the trunk circuit means that the circuit no longer loads the service information,
that is, this circuit is set manually as unavailable.
To open the trunk circuit is the inverse process of the blocking operation, which can
reset the trunk circuit as available and enable it to load service information.
4-54
To query the trunk circuit will display the busy/idle, opened/blocked status of the circuit
in a real time way.
To reset the trunk circuit refers to re-initializing the state of trunk circuit. Generally, if the
circuit state cannot be restored to normal in blocking or opening the circuit manually, it
is required to perform the resetting. If the circuit cannot be reset automatically and
correctly because of other reasons,, it is generally required to reset manually the circuit,
too.
Related command: cas, mfc.
Example
# Reset the circuit of timeslots 1-15 in No.5 Timeslot set and query the status of the
circuit of timeslots 1-31.
[H3C-cas1/0/0:5] ts reset timeslots 1-15
[H3C-cas1/0/0:5] ts query timeslots 1-31
4-55
Comware V3 Chapter 5 Fax Configuration Commands
Chapter 5 Fax Configuration Commands
5.1 Fax Configuration Commands

5.1.1 cngced-detection
Syntax
cngced-detection threshold times

undo cngced-detection
View
Parameter
threshold: Calling tone/Called terminal identification (CNG/CED) detection threshold

with fax. It is an integer in the range 0 to 30 and its default is 0.
times: Threshold of CNG/CED detections with fax. It is an integer in the range 0 to 100
and the default is 10.
Description
Use the cngced-detection command to set the threshold parameters for CNG/CED
signal detection.
Use the undo cngced-detection command to restore the default.
CNG is generated when the fax machine at the calling end starts, while CED is
generated when the fax machine at the called end starts.
A voice gateway determines fax state by detecting CNG/CED. The likelihood of
detection failure or error exists however depending on the environment where the
device is deployed. As a solution, you can use this command to tune the CNG/CED
detection sensitivity and reliability.
As the threshold value is increasing, detection reliability increases; if you assign a value
that is too large, however, detection may fail as well. The same applies to the setting of
the times argument.
The times argument specifies the lower limit of the CNG/CED duration. For instance,
the default of times is 10; this means the CNG/CED signal must last at least 300
milliseconds to be regarded valid. As the times value is incrementing by one, the
minimum CNG/CED signal duration increases by 30 milliseconds.
5-1
Example
# Set the threshold argument to 5 and the times argument to 20 in voice subscriber-line
view for CNG/CED signal detection.
[H3C-voice-line0] cngced-detection 5 20
5.1.2 debugging voice fax
Syntax
debugging voice fax { all | api | cc | channel [ channel-no ] |

nonstandard-compatible | motorola-compatible |controller | error-all | frf11 |ipp |
transform | vofr | t38 | comware-relay }
View
User view
Parameter
all: Enables all fax debugging.

api: Enables API function debugging of fax.
cc: Enables main task debugging of fax.
channel [ channelno ]: Enables debugging of the specified channel.
nonstandard-compatible: Enables debugging of the nonstandard-compatible fax
protocol.
motorola-compatible: Enables debugging of the motorola-compatible fax protocol.
controller: Enables fax controller debugging.
error-all: Enables fax error debugging at all levels.
frf11: Enables frf11 debugging.
ipp: Enables debugging of the messages between the fax and IPP modules.
transform: Enables FAX and GS transform debugging.
vofr: Enables debugging between FAX and VOFR.
comware-relay: Enables Standard-FaxRelay debugging of fax.
t38: Enables Fax T38 debugging.
Description
Use the debugging voice fax command to enable fax debugging.

The debugging voice fax channel channel-number command is independent of the
debugging voice fax all command. The debugging voice fax channel
channel-number command enables debugging for only the specified channel; it does
not enable debugging for the specific items. To view the debugging information of a
5-2
specific item, you must enable debugging for it with the corresponding command. The
debugging voice fax all command enables debugging for all items except for channel.
The undo debugging voice fax all command are not completely independent of the
undo debugging voice fax channel command. The undo debugging voice fax all
command also disables debugging for channel, while the undo debugging voice fax
channel command disables debugging only for channel.
Example
# Enables main task debugging of fax.

<H3C> debugging voice fax cc
5.1.3 default entity fax
Syntax
default entity fax baudrate { 2400 | 4800 | 9600 | 14400 | disable | voice }
default entity fax ecm
default entity fax level level
default entity fax local-train threshold value
default entity fax nsf-on
default entity fax protocol { standard-t38 | t38 | nonstandard } [ hb-redundancy
number | lb-redundancy number ]
default entity fax protocol { none | pcm { g711alaw | g711ulaw } { private |
standard } }
default entity fax support-mode { rtp | sip-udp | vt }
default entity fax train-mode { local | ppp }
undo default entity fax { baudrate | ecm | level | local-train threshold | nsf-on |
protocol | support-mode | train-mode }
View
Parameter
baudrate: Specifies the maximum transmission speed of the fax. It defaults to voice.
z 2400: Sets the maximum transmission speed to 2400 bps.
z disable: Disables the fax forwarding faculty.
z voice: Sets the fax speed to the allowed maximum voice speed.
5-3
ecm: Enables fax error correction mode. It is disabled by default.

level level: The level of the fax transmission signal. It defaults to 15.
local-train: Specifies the threshold of fax local training.
z threshold value: Specifies the threshold of fax local training. It defaults to 10.
nsf-on: Enables NSF message transmission. It is disabled by default.
protocol: Specifies the transport protocol of the fax. By default, the T.38 fax protocol
applies. Both hb-redundancy number and lb-redundancy number default to 0.
z standard-t38: Adopts the standard T38 (UDP) fax protocol, which supports
H.323-T38 and SIP-T38 protocols.
z nonstandard: Adopts the nonstandard protocol compatible with private fax
protocols.
z pcm: Enables PCM mode.
z g711alaw: Adopts G.711 a-law.
z g711ulaw: Adopts G.711 μ-law.
z t38: Adopts the T.38 fax protocol.
z hb-redundancy number: Number of redundant high-speed T.38 packets.
z lb-redundancy number: Number of redundant low-speed T.38 packets.
none: Disables the fax function.
pcm: Enables PCM fax mode.
z g711alaw: Adopts G.711 a-law.
z g711ulaw: Adopts G.711 μ-law.
private: Private PCM fax negotiation mode owned by our company.
standard: Standard PCM fax negotiation mode in the industry.
By default, the global voice entity fax protocol is the private T.38 owned by our
company.
support-mode: Fax transport format. It defaults to real time protocol (RTP).
z rtp: Adopts RTP fax mode.
z sip-udp: Uses the fax packets without RTP header.
z vt: Adopts VT fax mode.
train-mode: Specifies the fax training mode. It defaults to end to end mode or PPP.
local: Adopts local training.
ppp: Adopts end to end training.
Description
Use the default entity fax command to set the default fax parameter settings globally.
Use the undo default entity fax command to restore the system-default default
settings.
5-4
Note:
When G.711 voice encoding/decoding recommendation is configured for the two
parties, the fax baudrate disable command functions the same as the default entity
fax protocol pcm command.
Example
# Set the maximum global fax speed to 9600 bps.

[H3C-voice-dial] default entity fax baudrate 9600
# Configure the fax energy level to 20 globally.

[H3C-voice-dial] default entity fax level 20
# Globally configure the fax protocol for the voice entity to PCM coding/decoding.
<H3C> system-view
[H3C] voice-setup
[H3C-voice-dial] default entity fax protocol pcm g711alaw standard
# Disable the fax function for global voice entity.

<<H3C> system-view
[H3C] voice-setup
[H3C-voice-dial] default entity fax protocol none
5.1.4 default entity modem compatible-param
Syntax
default entity modem compatible-param integer

undo default entity modem compatible-param
View
Parameter
integer: Compatible parameter value. It defaults to 100.
Description
Use the default entity modem compatible-param command in the case that you fail
to use standard Modem PCM to interoperate with devices from other vendors.
5-5
Use the undo default entity modem compatible-param command to restore the
voice entity Modem compatible parameter globally to the default.
By default, the Modem compatible parameter for global voice entity is 100.
Example
# Configure the Modem compatible parameter for the global voice entity to 98.
<H3C> system-view
[H3C] voice-setup
[H3C-voice-dial] default entity modem compatible-param 98
5.1.5 default entity modem protocol
Syntax
default entity modem protocol { none | pcm { g711alaw | g711ulaw } { private |

standard } }
undo default entity modem protocol
View
Parameter
none: Disables modem.

z g711alaw: Adopts PCM G.711 a-law.
z g711ulaw: Adopts PCM G.711 μ-law.
private: Private PCM Modem negotiation mode owned by our company.
standard: Standard PCM Modem negotiation mode in the industry.
Description
Use the default entity modem protocol none command to globally disable Modem
function of voice entity.
Use the default entity modem protocol pcm command to globally configure PCM
Modem protocol type of voice entity, including coding/decoding and Modem negotiation
mode.
Use the undo default entity modem protocol command to restore the Modem
protocol to default value.
By default, Modem protocol for global voice entity is none, that is, the Modem function
is disabled.
5-6
Example
# Globally configure the Modem protocol for voice entity to PCM coding/decoding.
<H3C> system-view
[H3C] voice-setup
[H3C-voice-dial] default entity modem protocol pcm g711alaw standard
# Disable the Modem function of global voice entity.

<H3C> system-view
[H3C] voice-setup
[H3C-voice-dial] default entity modem protocol none
5.1.6 display voice fax
Syntax
display voice fax { statistics | trans-statistics }
View
Any view
Parameter
statistics: Displays the fax statistics of the fax module.

trans-statistics: Displays the statistics in the fax transformation module.
Description
Use the display voice fax command to view the fax statistics in the fax module and the
statistics in the fax transformation module as well.
Example
# Display the statistics about the fax module.

[H3C] display voice fax statistic
# Display the statistics about the fax transformation module.

[H3C] display voice fax trans-statistics
Statistic of FOFR to FOIP
{
Create_FaxTransformNode_Times: 0
Send_Data_Packets: 0
Recieve_Data_Packets: 0
Recieve_InvalidData_Packets: 0
V21Data_WithOutRedundance_Packets: 0
5-7
V21Data_WithRedundance_Packets: 0
T4Data_WithOutRedundance_Packets: 0
T4Data_WithRedundance_Packets: 0
Fax_ECM_Times: 0
Fax_NoECM_Times: 0
}
Statistic of FOIP to FOFR
{
Create_FaxTransformNode_Times: 0
Send_Data_Packets: 0
Recieve_Data_Packets: 0
Recieve_InvalidData_Packets: 0
V21Data_WithOutRedundance_Packets: 0
V21Data_WithRedundance_Packets: 0
T4Data_WithOutRedundance_Packets: 0
T4Data_WithRedundance_Packets: 0
}
Table 5-1 Description on the transformation statistics
Field Description
Times of transform node created from
Create_FaxTransformNode_Times
IP fax side to FR fax side
Number of packets sent from IP fax
Send_Data_Packets
side to FR fax side
Number of packets received at IP fax
Recieve_Data_Packets
side from FR fax side
Number of invalid packets received at
Recieve_InvalidData_Packets
IP fax side from FR fax side
V21Data_WithOutRedundance_Packets side to FR fax side without redundancy
V.21 data
V21Data_WithRedundance_Packets side to FR fax side with redundancy
V.21 data
T4Data_WithOutRedundance_Packets side to FR fax side without redundancy
T.4 data
T4Data_WithRedundance_Packets side to FR fax side with redundancy T.4
data
Times of fax communication using ECM
Fax_ECM_Times
at IP fax side
5-8
Field Description
Times of fax communication using
Fax_NoECM_Times
non-ECM at IP fax side
Times of transform node created from
Create_FaxTransformNode_Times
FR fax side to IP fax side
Number of packets sent from FR fax
Send_Data_Packets
side to IP fax side
Number of packets received at FR fax
Recieve_Data_Packets
side from IP fax side
Number of invalid packets received at
Recieve_InvalidData_Packets
FR fax side from IP fax side
V21Data_WithOutRedundance_Packets side to IP fax side without redundancy
V.21 data
V21Data_WithRedundance_Packets side to IP fax side with redundancy V.21
data
T4Data_WithOutRedundance_Packets side to IP fax side without redundancy
T.4 data
T4Data_WithRedundance_Packets side to IP fax side with redundancy T.4
data
5.1.7 fax baudrate
Syntax
fax baudrate { 14400 | 2400 | 4800 | 9600 | disable | voice }
View
Voice entity view
Parameter
14400: Negotiates first according to V.17 fax protocol, the highest fax baudrate is
14400bit/s.
2400: The first fax baudrate is 2400bps.
4800: Negotiates first according to V.27 fax protocol, the highest fax baudrate is
4800bps.
9600: Negotiates first according to V.29 fax protocol which has the priority, the highest
fax baudrate is 9600bps.
disable: Disables fax function.
5-9
voice: Decides the highest rate enabled by fax first according to the different voice
encoding/decoding protocols. By default, the parameter of voice is adopted to decide
the max fax baudrate.
Description
Use the fax baudrate command to configure the highest fax baudrate enabled by the
gateway.
If the rate is set to be others rather than “disable” and “voice”, rate negotiation is
performed first according to the fax protocol which is correspondent to the rate. Here
the rate is the highest rate enabled but not specified one.
When the rate is set as voice, decide the highest rate enabled by fax first according to
the difference of voice encoding/decoding protocols.
z If G.711 voice encoding/decoding protocol is used, the fax baudrate is 14400bit/s
and the corresponding fax protocol is V.17.
z If G.723.1 Annex A voice encoding/decoding protocol is used, the fax baudrate is
4800bit/s and the corresponding fax protocol is V.27.
z If G.726 voice encoding/decoding protocol is used, the fax baudrate is 14400 bit/s,
z If G.729 voice encoding/decoding protocol is used, the fax baudrate is 9600bit/s
If the rate is set as “disable”, fax function is disabled.
Note:
When G.711 voice encoding/decoding protocol is configured for the two parties, the fax
baudrate disable command functions the same as the default entity fax protocol
pcm command.
Example
# Set the gateway to use V.29 fax protocol to perform rate negotiation.
[H3C-voice-dial-entity1] fax baudrate 9600
5.1.8 fax ecm
Syntax
fax ecm
undo fax ecm
5-10
View
Voice entity view
Parameter
None
Description
Use the fax ecm command to configure the forced adoption of ECM mode at the
gateway, that is, to make the facsimiles at both ends support ECM mode.
Use the undo fax ecm command to cancel the ECM mode at the gateway.
By default, the ECM mode is not used on the gateway.
This command is used to perform the forced limitation at the gateway. If the facsimile
terminals at both ends support ECM mode, but the non-ECM mode has been
configured at the gateway, then the non-ECM mode is selected. If one or two of the
facsimile terminals at both ends do not support the ECM mode, the non-ECM mode is
selected. Only when the facsimile terminals at both ends support the ECM mode, and
the gateway doesn’t perform the forced limitation to enable the non-ECM mode, is the
ECM mode selected.
You must enable ECM mode for the POTS and VoIP entities corresponding to the fax
sender and receiver in ECM mode.
Example
# Configure forced adoption of ECM mode at the gateway.

[H3C-voice-dial-entity1] fax ecm
5.1.9 fax level
Syntax
fax level level

undo fax level
View
Voice entity view
Parameter
level: Gateway carrier transmitting energy level, namely the transmit energy level
attenuation value, ranging from 3 to 60 dBm. By default, it is 15, meaning a carrier
transmit energy level of 15 dBm. The greater the level value, the higher the energy. The
smaller the level value, the greater the attenuation.
5-11
Description
Use the fax level command to configure the gateway carrier transmitting energy level.
Use the undo fax level command to restore it to the default value.
Usually the default of the gateway carrier transmitting energy level is acceptable. If fax
still can’t be sent when other configurations are correct to try to adjust the gateway
carrier transmitting energy level. The smaller the level is, the greater the energy is.
Example
# Configure the gateway carrier transmitting energy level as 20.

[H3C-voice-dial-entity1] fax level 20
5.1.10 fax nsf-on
Syntax
fax nsf-on
undo fax nsf-on
View
Voice entity view
Parameter
None
Description
Use the fax nsf-on common to configure the fax faculty transmission mode as Not
Standard mode.
Use the undo nsf-on command to restore the default fax faculty transmission mode.
By default, the fax faculty transmission mode is undo nsf-on.
This command is only applied to IP Fax.
In some occasions like communicating with encrypted fax, the Not Standard Faculty, or
NSF for short, is rather important for fax communication. It is necessary to configure the
fax nsf-on command, so that the fax terminals on both sides will first exchange NSF
message at the beginning of transmission, and then complete the follow-up fax
negotiation according to NSF and communicate with each other. NSF messages are
T.30 compliant and carry private information.
To allow NSF field to be carried during fax faculty signal transmission, the following
conditions must be met:
z Fax terminals must support NSF transmission mode.
5-12
z The fax faculty signal transmission mode must be set to Not Standard in the POTS
and VoIP entities for the participating fax terminals.
Example
# Configure to perform fax transmission with NSF.

[H3C-voice-dial-entity1] fax nsf-on
5.1.11 fax protocol
Syntax
fax protocol { t38 | standard-t38 | nonstandard } [ lb-redundancy number |

hb-redundancy number ]
fax protocol { none | pcm { g711alaw | g711ulaw } { private | standard } }
undo fax protocol
View
Voice entity view
Parameter
t38: Uses T.38 fax protocol. With this protocol, fax setup speed is high.
standard-t38: Uses the standard T38 negotiation mode specified by H323 or SIP to fax
lb-redundancy number: Configures the number of low-speed redundant packets.
number ranges from 0 to 5, and default value is 0.
hb-redundancy number: Configures the number of high-speed redundant packets.
number ranges from 0 to 2, and default value is 0.
nonstandard: Uses the fax protocol compatible with the mainstream devices of the
industry.
none: Disables the fax function.
pcm: Uses PCM coding/decoding.
z g711alaw: Enables PCM G.711A-law voice coding/decoding.
z g711ulaw: Enables PCM G.711 μ-law voice coding/decoding.
Description
Use the fax protocol command to configure the protocol for intercommunication with
other devices or enable the fax Passthrough mode, and configure the number of
redundant packets sent via the T.38 fax protocol.
5-13
Use the undo fax protocol command to restore the default number of redundant
packets and disable the fax Passthrough.
The argument standard-t38 indicates the standard T38 negotiation mode specified by
H323 or SIP adopted.
By default, fax Passthrough mode is disabled and fax protocol for single voice entity is
that for global voice entity.
Low-speed data refers to the V.21 command data, and high-speed data refers to the
TCF and graphic data.
To intercommunicate with the mainstream fax terminals of the industry, the mainstream
fax protocol must be used. Likewise, to intercommunicate with other fax terminals
supporting the T.38 protocol, the T.38 protocol must be adopted. As the mainstream
devices do not support local training mode for fax, the end-to-end training mode must
be adopted in order to implement intercommunication with the mainstream devices of
the industry.
Increasing the number of redundant packets will improve reliability of network
transmission and reduce packet loss ratio. A great amount of redundant packets,
however, can increase bandwidth consumption to a great extent and thereby, in the
case of low bandwidth, affect the fax quality seriously. Therefore, the number of
redundant packets should be selected properly according to the network bandwidth.
The fax Passthrough is easily influenced by such factors as loss of packet, jitter and
delay, so the clock on both sides of the communication must be kept synchronous. At
present, only G.711Alaw and G.711μlaw compression methods are supported, and the
voice activity detection (VAD) function should be disabled for fax Passthrough.
Example
# Configure the number of high-speed redundant packets sent through the T.38 fax
recommendation as 2.
[H3C-voice-dial-entity1] fax protocol t38 hb-redundancy 2
# Configure fax protocol for voice entity 100 to PCM coding/decoding.

<H3C> system-view
[H3C] voice-setup
[H3C-voice-dial] entity 100
[H3C-voice-dial-entity100] fax protocol pcm g711alaw standard
# Disable fax function of voice entity.

<H3Cr> system-view
[H3C] voice-setup
5-14

[H3C-voice-dial-entity100] fax protocol none
5.1.12 fax support-mode
Syntax
fax support-mode { rtp | vt | sip-udp }

undo fax support-mode
View
Voice entity view
Parameter
rtp: RTP mode.

vt: VT mode, the mode when interworking with the VocalTec gateway.
sip-udp: Specifies SIP UDP mode.
Description
Use the fax support-mode command to configure the fax interworking mode with
other equipments.
Use the undo fax support-mode command to restore the fax interworking mode with
other equipment to its default.
By default, the RTP mode is adopted.
Under common conditions, use the rtp mode. When interworking with the VocalTec
gateway, the vt mode is adopted.
Example
# Configure the mode when interworking with VocalTec device to vt.

[H3C-voice-dial-entity1] fax support-mode vt
5.1.13 fax train-mode
Syntax
fax train-mode { local | ppp }

undo fax train-mode
View
Voice entity view
5-15
Parameter
local: Uses the local training mode.

ppp: Uses the end-to-end training mode.
Description
Use the fax train-mode command to configure the training mode used by the gateway.
Use the undo fax train-mode command to restore the training mode used by the
gateway to the default.
By default, the ppp mode is adopted.
The local training mode means that the gateway participates in the rate training
between the facsimile terminals at both ends. In this mode, first carry on the training
between the facsimile terminals and between the gateways respectively, then the
receiving gateway will transmit the training result of the receiving end to the gateway at
the transmitting end. The transmitting gateway will decide the final packet transmission
rate according to the training results of both ends.
The end-to-end training mode means that the gateway does not participates in the rate
training between the facsimile terminals at both ends. In this mode, the rate training is
carried on between the facsimile terminals at both ends, and it is transparent to the
gateway.
Example
# Set the mode used by the gateway as the local training mode.
[H3C-voice-dial-entity4] fax train-mode local
5.1.14 modem compatible-param
Syntax
modem compatible-param integer

undo modem compatible-param
View
Voice entity view
parameter
integer: Compatible parameter value. It defaults to 100.
Description
Use the modem compatible-param command in the case that you fail to use standard
Modem PCM to interoperate with devices from other vendors.
5-16
Use the undo default entity modem compatible-param command to restore the
voice entity Modem compatible parameter globally to the default.
By default, the Modem compatible parameter for global voice entity is 100.
Example
# Configure the Modem compatible parameter of voice entity 100 to 98.

<H3C> system-view
[H3C] voice-setup
[H3C-voice-dial-entity100] modem compatible-param 98
5.1.15 modem protocol
Syntax
modem protocol { none | pcm { g711alaw | g711ulaw } { private | standard } }

undo modem protocol
View
Voice entity view
parameter
none: Disables modem.

z g711alaw: Adopts PCM G.711 a-law.
z g711ulaw: Adopts PCM G.711 μ-law.
Description
Use the modem protocol none protocol to disable Modem function for single voice
entity.
Use the modem protocol pcm command to configure PCM Modem protocol type for
single voice entity, including coding/decoding and Modem negotiation mode.
Use the undo modem protocol command to restore the Modem protocol for single
voice entity to the default value.
By default, Modem protocol for single voice entity is that for global voice entity.
Example
# Configure the Modem protocol of voice entity 100 to PCM coding/decoding.
5-17
<H3C> system-view
[H3C] voice-setup
[H3C-voice-dial-entity100] modem protocol pcm g711alaw standard
# Disable the Modem function of voice entity.

<H3C> system-view
<H3C> system-view
[H3C] voice-setup
[H3C-voice-dial-entity100] modem protocol none
5.1.16 reset voice fax statistics
Syntax
reset voice fax statistics
View
User view
Parameter
None
Description
Use the reset voice fax statistics command to reset fax statistics.
Example
# Clear fax statistics.

<H3C> reset voice fax statistics
5.1.17 reset voice fax trans-statistics
Syntax
reset voice fax trans-statistics
View
User view
Parameter
None
5-18
Description
Use the reset voice fax trans-statistics command to reset the statistics for the FAX
transform module.
Example
# Clear the statistics for the fax transform module.

<H3C> reset voice fax trans-statistics
5.1.18 voip h323-conf tcs-t38
Syntax
voip h323-conf tcs-t38

undo voip h323-conf tcs-t38
View
Voice view
Parameter
None
Description
Use the voip h323-conf tcs-t38 command to enable the voice gateway to include the
T.38 capability description in its capability set when it is in H.323 slow-start mode.
Use the undo voip h323-conf tcs-t38 command to disable the voice gateway to
include the T.38 capability description in its capability set when it is in H.323 slow-start
mode.
By default, T.38 description is included.
As NetMeeting does not support T.38 capability description parsing, you must disable
the voice gateway in H.323 slow-start mode to include the T.38 capability description in
its capability set in order to work with NetMeeting.
Note:
As this command is globally effective, the configuration of its undo form can disable all
the voice entities to carry the T.38 capability description in their capability sets. If
interoperability with NetMeeting is required only by a voice entity, you can disable fax
using the fax baudrate disable command or set the fax mode to a non-T.38 mode,
pcm, or nonstandard for example.
5-19
Example
# Disable the voice gateway to carry T.38 capacity description in its capacity set when it
is in H.323 slow-start mode.
[H3C-voice] undo voip h323-conf tcs-t38
5-20
Comware V3 Chapter 6 Voice RADIUS Configuration Commands
Chapter 6 Voice RADIUS Configuration

Commands
6.1 Voice RADIUS Configuration Commands

6.1.1 aaa-client
Syntax
aaa-client
View
Voice view
Parameter
None
Description
Use the aaa-client command to enter Voice AAA view.

Use the quit command to exit this view.
Related command: accounting, authentication-did, clienttype, local-user.
Example
# Enter Voice AAA view.

[H3C] voice-setup
[H3C-voice] aaa-client
[H3C-voice-aaa]
Syntax
authentication
undo authentication
View
Voice access-number view
Parameter
None
6-1
Description
Use the authentication command to enable user authentication and authorization for
the access service number.
Use the undo authentication command to disable user authentication and
authorization for the access service number.
By default, user authentication and authorization is disabled for all access service
numbers.
If user authentication and authorization is enabled for an access service number, the
user who uses this access service number can be authorized and dial the IP phone only
after it has been authenticated.
If user authentication and authorization is disabled, the user who uses this access
service number can directly dial the IP phone without being authenticated.
Related command: gw-access-number, accounting optional, authentication-did.
Example
# Enable user authentication and authorization for the two-stage dial access service
number 2005.
[H3C-voice-dial-anum2005] authentication
6.1.3 authentication-did
Syntax
authentication-did
undo authentication-did
View
Voice AAA view
Parameter
None
Description
Use the authentication-did command to enable authentication for all one-stage dial
(direct dial) users.
Use the undo authentication-did command to disable authentication for one-stage
dial users.
By default, authentication is disabled for one-stage dial users.
This command is available to one-stage dial (that is, dialing the called number directly)
users but not to two-stage dial (that is, dialing the access service number) users.
6-2
After this command is configured, the calling number in a call from a one-stage dial user
is extracted and sent to the RADIUS Server for authentication. Only after passing
authentication can the user obtain services. If the authentication fails, the user is
disconnected and cannot make the IP phone call.
If authentication is disabled for one-stage dial users, one-stage dial users can directly
dial IP phones without being authenticated.
For related commands, see accounting.
Example
# Enable authentication for one-stage dial users.

[H3C-voice-aaa] authentication-did
6.1.4 callednumber receive-method
Syntax
callednumber receive-method { immediate | terminator }

undo callednumber receive-method
View
Parameter
immediate: Places a call immediately after all digits of the called number are collected.
terminator: Places a call only after a pound sign (#), the terminator, is received.
Description
Use the callednumber receive-method command to enable the device to place a call
immediately after all digits of the called number are collected or after a pound sign (#),
the terminator, is received.
Use the undo callednumber receive-method command to restore the default.
By default, the terminator keyword applies.
Normally, in a two-stage dial procedure, the user needs to input a pound sign (#) to
indicate the end of a called number. To free the user from the trouble of inputting the
terminator, you may configure the callednumber receive-method immediate
command allowing the router to place a call immediately after all digits of the called
number are collected.
Example
# Set the called number receive-method to immediate for access number 17990.
[H3C-voice-dial-anum17990] callednumber receive-method immediate
6-3
6.1.5 card-digit
Syntax
card-digit card-digit
View
Parameter
card-digit: The card digits, in the range from 1 to 31. By default, the user card number is
in 12 digits.
Description
Use the card-digit command to configure the number of digits in a card number for an
access service number.
This command is used to configure digits of the card number of the two-stage dialing
card number process (use the card number/password for ID authentication) user. Once
the digits are specified, all users using this access service number must enter the card
number in specified digits.
If the dialing process of the access service number to be configured is not specified as
the card number process through the process-config command, this command will
not take effect. Only after the dialing process is set as the card number process, can
this command function properly in the Voice access-number view.
Related command: gw-access-number, process-config, password-digit.
Example
# Set the user card number in 10 digits for the access service number 18901.
[H3C-voice-dial-anum18901] card-digit 10
6.1.6 cdr
Syntax
cdr { buffer [ size-number ] | duration [ timer-number ] | threshold { threshold |

default } }
undo cdr
View
Voice AAA view
Parameter
buffer: Saves the call records by setting the upper limit of the number of records.
6-4
size-number: Number of the saved call detail records, in the range from 0 to 500, with
the value 0 indicating that no call detail record is saved. In max-size mode, the default
value of size-number is 50.
duration: Saves the call records by setting the maximum retaining time of records
(start from the moment when a conversation ends).
timer-number: Retaining time of call detail records, in minutes, with the value range
from 0 to 2147483647, and the value 0 indicating that no call detail record is saved. In
max-size mode, the default value of timer-number is 15.
threshold threshold: Threshold for call history output, in the range 0 to 100. It defaults
to 80.
default: Default threshold for call history output.
Description
Use the cdr command to configure the saving rule for call detail record.
Use the undo cdr command to restore the default saving rule.
This command is used to set the saving rule for call detail records. The system will save
certain amount of call detail record information according to the rule set by the user.
Related command: display aaa unsent-h323-call-record, display voice
call-history-record.
Note:
In Comware (Versatile Routing Platform), at most 500 call detail records can be saved.
That is, even if it is specified that call detail records should be saved according to the
maximum retaining time, no more than 500 records can be saved in the system. If a
large amount of traffic occurs in a certain period of time and more than 500 call detail
records to be stored are generated which satisfy the time requirement, the excessive
records that end earlier will be deleted, though they comply with the saving rule.
Example
# Specify that at most 400 call detail records can be saved.

[H3C-voice-aaa] cdr buffer 400
# Specify that the detail records of the conversation ending within 10 minutes should be
saved.
[H3C-voice-aaa]cdr duration 10
6-5
6.1.7 debugging voice vcc
Syntax
debugging voice vcc { all | cm | error | ipp | proc | rcv | timer | vpp | line
line-number }
undo debugging voice vcc { all | cm | error | ipp | proc | radius | rcv | timer | vpp |
line line-number }
View
User view
Parameter
all: Enables all debugging of the VCC module.

cm: Enables the debugging of the messages between the CM module and the VCC
module.
error: Enables the error debugging of the VCC module.
ipp: Enables the debugging of the messages between the IPP module and the VCC
module.
proc: Enables the debugging of the messages between the system process and the
VCC module.
radius: Enables the debugging of the messages between the RADIUS Client and the
VCC module.
rcv: Enables the debugging of the messages between the RCV module and the VCC
module.
timer: Enables the debugging information of the messages between the timer module
and the VCC module.
vpp: Enables the debugging information of the messages between the VPP module
and the VCC module.
line: Enables the debugging of the specified subscriber line on the router.
line-number: Subscriber line number, the value range of it is decided by the type and
quantity of the voice cards actually put into operation.
Description
Use the debugging voice vcc command to enable the debugging at various levels of
the VCC module.
This command is used to enable the debugging of the VCC module, and to specify the
levels and types of the debugging.
6-6
Note:
When specifying the levels and types of the debugging, pay attention to the following
points:
z No character other than figures can appear in the specified line number, If any
character other than figures appears in the entered line-number, this enter is invalid.
z The specified line number cannot be greater than the number of the actual
subscriber lines. If the specified line-number is greater than the number of the actual
subscriber lines, this enter is invalid.
Related command: reset voice vcc, display voice vcc.
Example
# Debug the messages sent to the VPP module from the VCC module.
<H3C> debugging voice vcc vpp
6.1.8 display aaa unsent-h323-call-record
Syntax
display aaa unsent-h323-call-record
View
Any view
Parameter
None
Description
Use the display aaa unsent-h323-call-record command to view the detail record
information about the calls failed to be sent.
If the mode for RADIUS Client (i.e. the router system) to process the accounting
request/responding packets is set as start-ack, for a call, once RADIUS Server does
not return the response to an accounting request message within the specified time,
VoIP of this call cannot be established. Then the system will save the failed call and
initiate an accounting request again to RADIUS Server later to set up connection. This
command is used to display the history records of the calls that are not established at
the VoIP side because RADIUS Server has not returned the response to the accounting
start message. The output information of this command can help the user confirm
which calls have failed, so as to analyze, locate and eliminate the faults.
6-7
Example
# Display the history records of the calls that are not established at the VoIP side.
[H3C] display aaa unsent-h323-call-record
Index = 1
Acct_session_Id = 10
CallOrigin = Answer
CallType = Telephony
Callernumber = 1000
Callednumber = 1001
CallDuration = 00:00:03
TransmitPackets = 1000
TransmitBytes = 32000
ReceivePackets = 1100
ReceiveBytes = 35200
Table 6-1 Description of detailed record about the calls failed to be sent
Field Description
Index Index of a call failure history record
RADIUS session ID, negotiated by RADIUS Server and
Acct_session_Id
Client
Call direction, indicating whether the local end is the caller
CallOrigin
or called
CallType Call type, classified into Telephony and Fax
Callernumber Caller number
Callednumber Called number
CallDuration Call duration
TransmitPackets Number of packets sent from the local end
TransmitBytes Number of bytes sent from the local end
ReceivePackets Number of packets received at the local end
ReceiveBytes Number of bytes received at the local end
6.1.9 display voice aaa-client configuration
Syntax
display voice aaa-client configuration
View
Any view
6-8
Parameter
None
Description
Use the display voice aaa-client configuration command to view information about
voice AAA.
Example
# Display information about voice AAA.

[H3C] display voice aaa-client configuration
AAA configuration :
accounting\authentication\authorization:
accounting = off
authentication-did = off
accounting-method = start-stop
dial-control-mib-info:
buffer = 50
duration = 15
6.1.10 display voice call-history-record
Syntax
display voice call-history-record { callednumber called-number | callingnumber

calling-number | cardnumber card-number | remote-ip-addr a.b.c.d | last last-number
| line line-number } [ brief ]
View
Any view
Parameter
callednumber: Displays the call history records according to the called number
filtering.
called-number: The called E.164 number, being a character string within 31 characters.
callingnumber: Displays the call history records according to the calling number
filtering.
calling-number: The calling E.164 number, being a character string within 31
characters.
cardnumber: Displays the call history records according to the prepaid card number.
card-number: The prepaid card number, being a character string within 31 characters.
6-9
remote-ip-addr: Displays the call history records according to the IP address of the
called user.
a.b.c.d: The IP address of the called user, in the dotted decimal format.
last: Displays the call history records according to the specified number of the latest
conversation records.
last-number: The number of the latest conversation records, in the value range from 0
to 500.
line: Displays the call history records according to the voice subscriber-line receiving
calls on the router.
line-number: The number of the voice subscriber-line receiving calls on the router, and
its value range is decided according to the type and quantity of voice cards actually put
into operation on the router.
brief: Uses a brief format to display call history records.
Description
Use the display voice call-history-record command to view the information about call
history records.
If such parameters as callednumber, callingnumber, cardnumber, remote-ip-addr,
last, line are not entered, all the saved call history records should be output by default.
If it is specified that call history records are displayed according to the number of the
latest conversation records (in “last” mode), the default number of records are 10.
The display format of call history records can be customized by setting the display and
filtering rule. The possible information display formats are as follows:
1) If the parameter brief is specified, the records will be displayed in a brief format.
2) If the parameter brief is not specified, the records will be displayed in a detailed
format.
If it is required to search according to the specified last-number, the records will be
displayed according to the number of records actually retrieved. If no record is found or
the record found is null, the prompting information as follows will appear:
Not found any record.
6-10
Note:
When setting the display and filtering rule, pay attention to the following points:
z No unacceptable character is allowed to appear in the calling number or called
number. If any character other than figures and “*”, “#”, “T”, “.” appears in the
entered called-number or calling-number, the enter is invalid.
z No character other than figures is allowed to appear in the specified number of the
latest conversation records times and voice subscriber-line number. If any character
except figures appears in the entered last-number/line-number, the enter is invalid.
z The digits of the specified called number and calling number cannot be over 31. If
the entered called-number or calling-number has over 31 characters, the enter is
invalid.
z The specified number of the latest conversation records cannot be over 500. If the
specified last-number is greater than 500, the enter is invalid.
z The specified voice subscriber-line number cannot be greater than the number of
available subscriber lines. If the specified line-number is greater than the number of
available subscriber lines, the enter is invalid.
The RADIUS Server may respond for the following reasons:

z Normal release
z Card number not exist
z Invalid password
z This accounts is using
z No enough balance
z The accounts is expired
z Credit limit
z User reject
z Service invalid
z Called limit
Example
# Display the call history records according to the number of 10 of the latest
conversation records.
[H3C] display voice call-history-record last 10
!
CallRecord[30]:
CallerNum = 4000
CalledNum = 2000
EncodeType = 711u
PeerAddress = 127.0.0.1
DisconnectCause = 0
6-11
DisconnectText = Normal release

TalkingTimes = 00h 00m 00s
VoiceTimes = 00h 00m 00s
FaxTimes = 00h 00m 00s
ImgPages = 0
CallDirection = 2
SetupTime(voip) = Mar 11, 2006 02:20:27
ConnectTime(voip) = None
DisconectTime(voip) = Mar 11, 2006 02:20:29
Transmit (voip) = 0 (package) : 45456 (byte)
Received(voip) = 0 (package) : 45456 (byte)
SetupTime(pstn) = None
ConnectTime(pstn) = None
DisconectTime(pstn) = None
Transmit (pstn) = 0 (package) : 45456 (byte)
Received(pstn) = 0 (package) : 45456 (byte)
Table 6-2 Description on the fields of the display voice call-history-record command
Field Description
CallRecord[30] Number of call record
CallerNum Caller’s number

CalledNum Called number
EncodeType Encoding type
PeerAddress Peer address

DisconnectCause Code of disconnect cause
DisconnectText Text of disconnect cause
TalkingTimes Talking duration

VoiceTimes Voice talking duration
FaxTimes Fax talking duration
ImgPages Facsimile pages

CallDirection Calling direction
SetupTime(voip) Call setup time on network side
ConnectTime(voip) Call connecting time on network side
DisconectTime(voip) Call disconnecting time on network side
Number of packets transported on network side
Transmit (voip)
(packet/byte)
6-12
Field Description
Number of packets received on network side
Received(voip)
(packet/byte)
SetupTime(pstn) Call setup time on PSTN side
ConnectTime(pstn) Call connecting time on PSTN side
DisconectTime(pstn) Call disconnecting time on PSTN side
Number of packets transported on PSTN side
Transmit (pstn)
(packet/byte)
Number of packets received on PSTN side
Received(pstn)
(packet/byte)
6.1.11 display voice vcc
Syntax
display voice vcc { channel [ line-number ] } | { statistic { all | error | ipp | proc | rcv
| timer | vpp } }
View
Any view
Parameter
channel: Displays the status information of the call channel on the specified subscriber
line.
line-number: Subscriber line number, the value range of it is decided by the type and
quantity of the voice cards actually put into operation.
statistic: Displays the statistics of the VCC module.
all: Displays all the statistics of the VCC module.
error: Displays the error statistics of the VCC module.
ipp: Displays the statistics of the interaction messages between the VCC module and
the IPP module.
proc: Displays the statistics of the interaction messages between the VCC module and
the system process.
rcv: Displays the statistics of the interaction messages between the VCC module and
the RCV module.
timer: Displays the statistics of the interaction messages between the VCC module
and the timer.
vpp: Displays the statistics of the interaction messages between the VCC module and
the VPP module.
6-13
Description
Use the display voice vcc command to view the information about the call channel
status and call statistics.
If it is required to display the status information of the call channel on the subscriber line,
but the parameter line-number is not entered, the status information of all voice
subscriber-lines will be displayed by default.
Related command: reset voice vcc, debugging voice vcc.
Note:
When setting the filtering rule, pay attention to the following points:
The specified voice subscriber-line number cannot be greater than the number of the
actual subscriber lines. If the specified line-number is greater than the number of the
actually available subscriber lines, this enter is invalid.
Example
# Display the call status information of the 2VI board voice subscriber-line 1.
[H3C] display voice vcc channel 1
!
GENERIC:
Index = 12
CallerNum = 100
CalledNum = 200
EncodeType = 729
PeerAddress = 127.0.0.1
DisconnectCause = 0
DisconnectText = Normal release
CallDuration = 00h 00m 17s
VoiceCallDuration = 00h 00m 17s
FaxCallDuration = 00h 00m 00s
ImgPages = 0
CallOrigin = 1
!
VoIP:
SetupTime(voip) = Mar 29, 2006 15:37:21
ConnectTime(voip) = Mar 29, 2006 15:37:24
DisconectTime(voip) = Mar 29, 2006 15:37:41
TransmitPackets(voip) = 531
TransmitBytes(voip) = 17126
6-14
ReceivePackets(voip) = 550
ReceiveBytes(voip) = 23100
!
PSTN:
SetupTime(pstn) = Mar 29, 2006 15:37:06
ConnectTime(pstn) = Mar 29, 2006 15:37:06
DisconectTime(pstn) = Mar 29, 2006 15:37:41
TransmitPackets(pstn) = 550
TransmitBytes(pstn) = 16500
ReceivePackets(pstn) = 913
ReceiveBytes(pstn) = 18130
Table 6-3 Description on call channel status
Field Description
Index Index of current call in channel
CallerNum Caller number of current call in channel
CalledNum Called number of current call in channel
Compression/Decompression type of current call in
EncodeType
channel
PeerAddress IP address of Peer GW of current call in channel
Cause code of disconnection of current call in
DisconnectCause
channel
Cause explanation of disconnection of current call in
DisconnectText
channel
CallDuration Call duration of current call in channel
Total voice duration of current call in channel at PSTN
VoiceTxDuration
side
Total fax duration of current call in channel at PSTN
FaxTxDuration
side
ImgPages Total pages of sending/receiving fax
Direction of current call in channel, it means local end
CallOrigin is caller end or called end corresponding with 1 or 2
respectively
SetupTime(voip/pstn) Time of current call is setup(VoIP/PSTN)
Connect start time of current call in
ConnectTime(voip/pstn)
channel(VoIP/PSTN)
Disconnect start time of current call in
DisconnectTime(voip/pstn)
channel(VoIP/PSTN)
Number of packets sent at local end of current call in
TransmitPackets
channel
6-15
Field Description
Number of bytes sent at local end of current call in
TransmitBytes
channel
Number of packets received at local end of current
ReceivePackets
call in channel
Number of bytes received at local end of current call
ReceiveBytes
in channel
6.1.12 gw-access-number
Syntax
gw-access-number access-number
undo gw-access-number [ access-number ]
View
Parameter
access-number: The specified access service number (such as 169, 17900, etc.). The
value is a character string within 31 characters, and the acceptable symbols include the
figures from 0 to 9, the wildcard “.” and the character “T”, and other English characters.
The “.” wildcard indicates a character. The character “T" is control character, it
indicating that the dial string is a string whose length is variable. At most 100 access
service numbers can be configured.
Description
Use the gw-access-number command to configure the access service number or

enter the view of the access service number.
Use the undo gw-access-number command to cancel a single access service
number or all access service numbers that have been set.
If no access service number is specified in the undo gw-access-number command,
all existing access service numbers are deleted. If an access service number is
specified, only this number is deleted.
When you attempt to delete all access service numbers that have been set, the system
gives the following operation warning:
Delete all of the access number? (n/y)
Select “y” to confirm the delete or “n” to cancel the delete.
6-16
Note:
When setting an access service number, pay attention to the following points:
z No unacceptable character is allowed to appear in the access service numbers, if
any of these characters (such as English characters, etc.) appears in the entered
access-number, this enter is invalid.
z The digits of an access service number cannot be more than 31, if those of the
entered access-number are over 31, this enter is invalid.
z At most 100 access service numbers are allowed to be set in the system, if 100
pieces of access-number have been set, no more access service number can be
added. To continue with adding settings, please delete some records.
Related command: process-config, card-digit, password-digit, redialtimes.
Example
# Add the access service number 18901 and enter the voice access-number view.
[H3C-voice-dial] gw-access-number 18901
[H3C-voice-dial-anum18901]
# Delete all the access service numbers that have been set in the system.
[H3C-voice-dial] undo gw-access-number
6.1.13 password-digit
Syntax
password-digit password-digit
View
Parameter
password-digit: The password digit, in the range from 1 to 16.By default, the user
password is in 6 digits.
Description
Use the password-digit command to configure the user password digits of a certain
access service number in the card number process.
This command is used to configure the password digit of two-stage dialing card number
process (use the card number/password to authenticate a user’s ID) users.
If the dialing process of the access service number to be configured is not specified as
the card number process through the process-config command, this command
6-17
cannot take effect. Only after the dialing process is set as the card number process, can
the access service number be retrieved, and can this command function properly.
Related command: gw-access-number, process-config, card-digit.
Example
# Set the password in 4 digits for the access service number 18901.
[H3C-voice-dial-anum18901] password-digit 4
6.1.14 process-config
Syntax
process-config { callernumber | cardnumber | voice-caller }
View
Parameter
callernumber: Caller number process. After a user dials the access service number,
the system continues to send dialing tones to the user, so that he can enter the called
number. Under this process, the user’s ID is authenticated by identifying the caller
number.
cardnumber: Card number process. After a user dials the access service number, the
system continues to send prompting tones to the user, so that he can enter the prepaid
card number and password. Under this process, the user’s ID is authenticated by
identifying the prepaid card number/password.
voice-caller: Voice caller number process. Configured with it, the system plays voice
messages to users after they dial the access number, asking them to select language
and input the called numbers. In this process, users are authenticated using calling
number identification (CNI).
When the user changes the current dial process (that is, between the calling number
dial process and the card number dial process), the system restores the involved
parameters (for example, card number/PIN, and redial times in the card number
process) to the defaults automatically.
Description
Use the process-config command to configure the dialing process of a certain access
service number.
By default, all access service numbers use the card number process.
Each access service number has a specific dialing process. For a certain access
service number, all the users to whom it belongs must implement call establishment in
the same process.
6-18
With Comware, three dial processes are available: calling number process, card
number process, and voice caller number process.
z Caller number process: It is actually the caller number authentication process,
which is the authentication, authorization and accounting process carried out
according to the caller number of the user. The caller number process does not
require further parameter setting in the process.
z Voice caller number process: uses calling numbers for authentication. After a user
dials the access number, the voice gateway plays voice messages to prompt the
user to select prompt language and dial the called number. This is different from
the caller number process where the voice gateway displays only dial tone (long
tone) after a user dials the access number.
z Card number process: As its name implies, the user should dial its own card
number and password to complete the authentication process after dialing an
access service number, and he cannot dial the called number to set up a call until
it is authenticated. The parameters in a card number process can be set through
the such commands as card-digit, password-digit and redialtimes.
Related command: gw-access-number, card-digit, password-digit, redialtimes.
Example
# Specify the user access process of the access service number 18901 as the card
number process.
[H3C-voice-dial-anum18901] process-config cardnumber
6.1.15 redialtimes
Syntax
redialtimes redialtimes-number
View
Parameter
redialtimes-number: The number of times of dialing in each dialing phase in a card

number process, in the value range from 1 to 10. By default, the number can be dialed
three times in each dialing phase.
Description
Use the redialtimes command to configure the number of times of dialing in each
dialing phase for a certain access service number.
When the card number procedure or the caller number procedure with IVR is adopted,
the user, after getting through to the access number, needs to follow voice prompts to
6-19
operate. To avoid mistake in a dial segment from causing the failure of the entire dial
process, you may specify the maximum number of dial attempts that a user can make
to provide the correct number in each dial segment.
For the caller number procedure without IVR, skip this configuration.
Related command: gw-access-number, process-config, card-digit,
password-digit.
Note:
z For the caller number procedure, the number of dial attempts allowed in each
segment also makes sense. The setting can limit the number of attempts that the
user can make to dial the called number after getting through to the access number.
z For the card number procedure and the caller number procedure with IVR, the
setting is effective for each dial segment. For example, for the card number
procedure, the numbers of attempts that the user can make to input card number,
password, and called number are the same.
z The redialtimes-number argument specifies the number of dial attempts rather than
redials. For example, to allow a user to redial three times in each dial segment, set
the redialtimes-number argument to 4.
Example
# Configure the number of redialing times of the card number/password of the access
service number 18901 to be 4 (the number can be dialed for 5 times).
[H3C-voice-dial-anum18901] redialtimes 5
6.1.16 reset voice vcc
Syntax
reset voice vcc { all | call-record | statistics }
View
User view
Parameter
all: Clears all information.

call-record: Clears the call record information.
statistics: Clears the statistics.
6-20
Description
Use the reset voice vcc command to reset the information related to VCC.
All or part of the information related to VCC module which is stored in the system can
be cleared according to the information categories.
Related command: display voice vcc, debugging voice vcc.
Example
# Clear the generated call record information.

<H3C> reset voice vcc call-record
6.1.17 selectlanguage
Syntax
selectlanguage { disable | enable }
View
Parameter
disable: Disables language selection.

enable: Enables language selection.
Description
Use the selectlanguage command to enable or disable the voice gateway to play the
prompt language selection message in the voice caller number process. This
command only applies to the voice caller number process.
With language selection enabled, the voice gateway plays a message asking the user
to select a prompt language and then to input the called number. If language selection
is disabled, the called number input prompt is played in Chinese after authentication.
By default, language selection is disabled.
Example
# Disable prompt language selection.

[H3C-voice-dial-anum163] selectlanguage disable
# Enable prompt language selection.

[H3C-voice-dial-anum163] selectlanguage enable
6-21
Comware V3 Chapter 7 GK Client Configuration Commands
Chapter 7 GK Client Configuration Commands
7.1 GK Client Configuration commands

7.1.1 area-id (in Voice GK Client View)
Syntax
area-id string
undo area-id [string ]
View
Voice GK client view
Parameter
string: Indicates the area ID. The value range is the integer between 0 and 9, which can
be separated by “,” or "#".
Description
Use the area-id command to configure the H.323 gateway area ID.
Use the undo-area-id command to cancel all area IDs.
Use the undo-area-id string command to cancel the specified area ID.
By default, no H.323 gateway area ID is configured.
The area-id is mainly used to facilitate the identifying of gateway type by the GK Server.
The gateway and the GK Server reach an agreement on the gateway type in advance,
for example, consider that the area-id 1# represents the voice gateway and that the
area-id 2# represents the video gateway, etc. When the gateway communicates
normally with the GK Server, the GK will judge the gateway type according to the
area-id information sent by the gateway.
To set the H.323 area ID in the Voice GK client voice is mainly to facilitate the GK
Server to identify the types of GK client. An agreement on the related types is reached
beforehand between the GK client and the GK Server, e.g. area ID 1# represents a
voice GK client, prefix 2# represents a video GK client, etc. When a normal
communication is going on between the GK client and the GK Server, the GK judges
the client type according to the area ID information received. Up to 30 area-ides can be
configured in voice GK client view.
Related command: match-template, entity.
7-1
Example
# Configure the GK client with a area ID 6#.

[H3C-voice-gk] area-id 6#
7.1.2 debugging voice ras
Syntax
debugging voice ras event
View
User view
Parameter
event: Output interacted RAS message record.
Description
Use the debugging voice ras command to enable the debugging information output
switch of RAS messages interacted between GK Client and GK Server.
Example
# Enable the debugging information output switch of RAS messages interacted

between GK Client and GK Server.
<H3C> debugging voice ras event
7.1.3 display voice gateway
Syntax
display voice gateway
View
Any view
Parameter
None
Description
Use the display voice gateway command to view the gateway registration state
information to GK Server.
This command is used to display the gateway registration information to GK Server and
gateway alias name list etc.
7-2
Example
# Display the gateway registration state information to GK Server.

[H3C] display voice gateway
GW_Statue = Registed
GK_ID = 8040gk.Comware.com
Current GW information :
H323-ID 3681gw
E164 34601000
Current GK Information:
H323-ID 3681gw
Table 7-1 Description of gateway registration state information to GK Server
Field Description
GW_Statue State of the current GW terminal
GK_ID ID of the currently registered GK

Current GW information : H323-ID H323 ID of the current GW
Current GW information : E164 E164 number of the current GW
Current GK Information: H323-ID Local H323ID fed back by GK

Current GK Information: E164 Local E164 number fed back by GK
NONE None
7.1.4 gk-client
Syntax
gk-client
View
Voice view
Parameter
None
Description
Use the gk-client command to enter Voice GK client view, and configure the GK
parameters for voice.
Use the quit command to exit this view.
Related command: area-id, gk-2nd-id, gk-id, gw-address, gw-id, ras-on.
7-3
Example
# Enter gk-client view.

[H3C-voice] gk-client
[H3C-voice-gk]
7.1.5 gk-2nd-id
Syntax
gk-2nd-id gk-name gk-addr gk-ipaddress [ ras-port ]

undo gk-2nd-id
View
Parameter
Refer to the parameters of the gk-id command.
Description
Use the gk-2nd-id command to configure the name and IP address of the backup GK
Server corresponding to the gateway.
Use the undo gk-2nd-id command to cancel the name and IP address of the backup
GK Server corresponding to the gateway.
When the communication between the GK Client and the master GK Server is
abnormal (e.g. timeout) or the master GK Server fails, the H3C router can also send
registration requests to the backup GK Server.
Use the gk-2nd-id command to configure the IP address, name and port of the backup
GK Server.
Note:
The gk-id command must be used first to configure the name and address of the
master GK Server, before those of the backup GK Server can be configured.
Related command: gk-id.
Example
# Configure the backup GK Server as follows: The IP address is 1.1.1.2, the name is
"gk-backup", and use the default port.
[H3C-voice-gk] gk-id gk-center gk-addr 1.1.1.1
7-4
[H3C-voice-gk] gk-2nd-id gk-backup gk-addr 1.1.1.2
7.1.6 gk-id
Syntax
gk-id gk-name gk-addr gk-ipaddress [ ras-port ]

undo gk-id
View
Parameter
gk-name: GK Server name, a string of 1 to 128 case sensitive characters.

gk-ipaddress: IP address of the GK Server.
ras-port: RAS communication port of GK Server, with the value range being the integer
between 1 and 65535. By default ras-port is 1719.
Description
Use the gk-id command to configure the GK Server name and IP address
corresponding to the gateway.
Use the undo gk-id command to cancel the GK Server name and IP address
corresponding to the gateway.
Use the command gk-id to configure such information as the IP address, name, and
port of GK Server to facilitate the research for the right GK Server equipment by the GK
Client according to this information, so as to implement the register task of gateway in
the GK Server.
Related command: area-id, gw-id, gk-2nd-id, gw-address, ras-on.
Example
# Configure the IP address of the GK Server as 1.1.1.1, name as gk-center, port as the
default.
[H3C-voice-gk] gk-id gk-center gk-addr 1.1.1.1
7.1.7 gk-security call
Syntax
gk-security call enable

undo gk-security call enable
7-5
View
Parameter
None
Description
Use the gk-security call enable command to enable security calls on the GK Client
(router).
Use the undo gk-security call enable command to disable security calls on the GK
Client (router).
By default, enable security calls.
To let the router acting as a GK client pass calling tokens of a GK Server, you need to
configure GK security calls. After a call is originated, the calling gateway obtains the
calling token from the calling GK server and transparently transports it to the called
gateway that will then pass the token to the called GK server.
In some voice network environments, the called GK Servers cannot process calling
tokens; in this case you must disable the GK Client security calls.
Example
# Disable the security calls on the GK Client (router).

[H3C-voice-gk] undo gk-security call enable
7.1.8 gk-security register-pwd
Syntax
gk-security register-pwd { cipher | simple } password

undo gk-security register-pwd
View
Parameter
cipher: Uses encrypted password when echo is adopted.

simple: Do not use encrypted password when echo is adopted.
password: Password that has been set, 1 to 16 printable characters, except space.
Description
Use the gk security register-pwd command to set the GK register password.
7-6
Use the gk-security register-pwd command to remove the GK register password.

By default, the GK Client (router) has no password.
After the GK Client (router) is configured with the register password, the password is
carried during the whole register process.
Example
# Configure a GK register password to comware in cipher-text mode.

[H3C-voice-gk] gk-security register-pwd cipher comware
7.1.9 gw-address
Syntax
gw-address ip-address
undo gw-address
View
Parameter
ip-address: The source address of gateway.
Description
Use the gw-address command to configure the source IP address used by the voice
gateway.
Use the undo gw-address command to cancel the source IP address used by the
voice gateway.
By default, the source IP address used by the voice gateway is not configured.
Caution:
This command takes effect immediately after it is configured, disregarding whether the
GK client has been enabled (using the ras-on command) or not.
Related command: area-id, gk-2nd-id, gk-id, gw-address, ras-on.
Example
# Configure the source IP address used by the voice gateway as 1.1.1.1.

[H3C-voice-gk] gw-address 1.1.1.1
7-7
7.1.10 gw-id
Syntax
gw-id namestring
undo gw-id
View
Parameter
namestring: Gateway alias (gateway ID), a string of 1 to 128 case sensitive characters.
Description
Use the gw-id command to configure the gateway alias.

Use the undo gw-id command to cancel the alias of the specified gateway.
By default, the gateway alias is empty, i.e., the interface alias is not configured.
Use the command gw-id to configure the gateway alias, which is used for the gateway
to register and identify the voice gateway. Each gateway has only one alias, and the
new alias will cover the old one.
Related command: area-id, gk-2nd-id, gk-id, gw-address, ras-on.
Example
# Configure the gateway alias as beijing-gw.

[H3C-voice-gk] gw-id beijing-gw
7.1.11 ras-on
Syntax
ras-on
undo ras-on
View
Parameter
None
Description
Use the ras-on command to enable the GK Client function.

Use the undo ras-on command to disable the GK Client function.
7-8
By default, the GK Client function is disabled.

Only after activating the GK Client function can the normal communication be
maintained between the router voice gateway and the GK server, or it is unable to
establish the connection between them.
Example
# Activate the GK Client function.

[H3C-voice-gk] ras-on
7-9
Comware V3 Chapter 8 SIP Client Commands
Chapter 8 SIP Client Commands
8.1 SIP Client Commands

8.1.1 address sip
Syntax
address sip { proxy | { ip ip-address port port-number } }

undo address sip proxy | ip
View
Voice entity view
Parameter
proxy: Adopts SIP proxy server to complete SIP interaction.

ip-address: IPv4 address to which SIP packets of a call is destined.
port port-number: Port number in the range 1 to 65535.
Description
Use the address sip command to set routing policy for reaching the remote voice
gateway (VG) to SIP.
Use the undo address command to restore the default.
By default, no routing policy is configured for reaching the remote VG.
If address sip ip ip-address port port-number is configured, SIP packets in a call are
routed directly to the address specified in the command.
If address sip proxy is configured, the SIP interaction process involves a SIP proxy
server.
Configure the command appropriate to the call routing policy applies to the network.
Related command: address.
Note:
After configuring this command, the area-id command and the fast-connect command,
if configured, do not take effect any more.
8-1
Example
# Configure the current voice entity to complete SIP interaction through a SIP proxy
server.
[H3C-voice-dial-entity1] address sip proxy
8.1.2 debugging voice sip
Syntax
debugging voice sip { all | calls | error | message { all | call | register } | register |
warning }
undo debugging voice sip { all | calls | error | message | register | warning }
View
User view
Parameter
all: Enables all SIP debugging.

calls: Enables SIP call debugging.
error: Enables SIP error debugging.
message: Enables debugging for the detailed information received and transmitted by
SIP.
register: Enables SIP register debugging.
warning: Enables SIP warning debugging.
Description
Use the debugging voice sip command to enable SIP debugging.

Use the undo debugging voice sip command to disable SIP debugging.
Example
# Enable all SM SIP debugging.

<H3C> debugging voice sip all
8.1.3 display voice sip call-statistics
Syntax
display voice sip call-statistics
View
Any view
8-2
Parameter
None
Description
Use the display voice sip call-statistics command to view all statistic information
about the SIP client.
Example
# Display all statistic information about the SIP client.

[H3C] display voice sip call-statistics
SIPRegisters : 0
SIPInvites : 0
SIPAcks : 0
SIPPracks : 0
SIPByes : 0
SIPCancels : 0
SIPInfos : 0
SIPOKRegisters : 0
SIPOKInvites : 0
SIPOKAcks : 0
SIPOKPracks : 0
SIPOKByes : 0
SIPOKCancels : 0
SIPResp3MultipleChoice : 0
SIPResp3MovedPermanently : 0
SIPResp3MovedTemporarily : 0
SIPResp3UseProxy : 0
SIPResp3Other : 0
SIPResp4BadRequest : 0
SIPResp4Unauthorized : 0
SIPResp4Forbidden : 0
SIPResp4NotFound : 0
SIPResp4MethodNotAllowed : 0
SIPResp4NotAcceptable : 0
SIPResp4ProxyAuthRequired : 0
SIPResp4ReqTimeout : 0
SIPResp4ReqEntityTooLarge : 0
SIPResp4ReqURITooLarge : 0
SIPResp4UnsupportedMediaType : 0
SIPResp4UnsupportedURIScheme : 0
SIPResp4BadExtension : 0
SIPResp4ExtensionRequired : 0
8-3
SIPResp4AddrIncomplete : 0
SIPResp4BusyHere : 0
SIPResp4RequestTerminated : 0
SIPResp4Other : 0
SIPResp5InternalError : 0
SIPResp5NotImplemented : 0
SIPResp5BadGateway : 0
SIPResp5ServiceUnavailable : 0
SIPResp5GatewayTimeout : 0
SIPResp5BadSipVersion : 0
SIPResp5MessageTooLarge : 0
SIPResp5Other : 0
SIPResp6xx : 0
See the following table for field description.
Table 8-1 Description of the fields of the display voice sip call-statistics command
Field Description
REGISTER requests sent and received by the SIP
SIPRegisters
gateway
INVITE requests sent and received by the SIP
SIPInvites
gateway
SIPAcks ACKs sent and received by the SIP gateway
PACK requests sent and received by the SIP
SIPPracks
gateway
BYE requests sent and received by the SIP
SIPByes
gateway
CANCEL requests sent and received by the SIP
SIPCancels
gateway
INFO requests sent and received by the SIP
SIPInfos
gateway
Successful REGISTER requests sent and received
SIPOKRegisters
by the SIP gateway
Successful INVITE requests sent and received by
SIPOKInvites
the SIP gateway
Successful ACK requests sent and received by the
SIPOKAcks
SIP gateway
Successful PACK requests sent and received by
SIPOKPracks
the SIP gateway
Successful BYE requests sent and received by the
SIPOKByes
SIP gateway
8-4
Field Description
Successful CANCEL requests sent and received
SIPOKCancels
by the SIP gateway
300 (Multiple Choices) responses received by the
SIPResp3MultipleChoice
SIP gateway
301 (Moved Permanently) responses received by
SIPResp3MovedPermanently
the SIP gateway
302 (Moved Temporarily) responses received by
SIPResp3MovedTemporarily
the SIP gateway
305 (Use Proxy) responses received by the SIP
SIPResp3UseProxy
gateway
SIPResp3Other Other 3xx responses received by the SIP gateway
400 (Bad Request) responses received by the SIP
SIPResp4BadRequest
gateway
401 (Unauthorized) responses received by the SIP
SIPResp4Unauthorized
gateway
403 (Forbidden) responses received by the SIP
SIPResp4Forbidden
gateway
404 (Not Found) responses received by the SIP
SIPResp4NotFound
gateway
405 (Method Not Allowed) responses received by
SIPResp4MethodNotAllowed
the SIP gateway
406 (Not Acceptable) responses received by the
SIPResp4NotAcceptable
SIP gateway
SIPResp4ProxyAuthRequire 407 (Proxy Authentication Required) responses
d received by the SIP gateway
408 (Request Timeout) responses received by the
SIPResp4ReqTimeout
SIP gateway
413 (Request Entity Too Large) responses
SIPResp4ReqEntityTooLarge
received by the SIP gateway
414 (Request-URI Too Long) responses received
SIPResp4ReqURITooLarge
by the SIP gateway
SIPResp4UnsupportedMedia 415 (Unsupported Media Type) responses
Type received by the SIP gateway
SIPResp4UnsupportedURISc 416 (Unsupported URI Scheme) responses
heme received by the SIP gateway
420 (Bad Extension) responses received by the
SIPResp4BadExtension
SIP gateway
421 (Extension Required) responses received by
SIPResp4ExtensionRequired
the SIP gateway
8-5
Field Description
484 (Address Incomplete) responses received by
SIPResp4AddrIncomplete
the SIP gateway
486 (Busy Here) responses received by the SIP
SIPResp4BusyHere
gateway
SIPResp4RequestTerminate 487 (Request Terminated) responses received by
d the SIP gateway
500 (Server Internal Error) responses received by
SIPResp5InternalError
the SIP gateway
501 (Not Implemented) responses received by the
SIPResp5NotImplemented
SIP gateway
502 (Bad Gateway) responses received by the SIP
SIPResp5BadGateway
gateway
503 (Service Unavailable) responses received by
SIPResp5ServiceUnavailable
the SIP gateway
504 (Server Time-Out) responses received by the
SIPResp5GatewayTimeout
SIP gateway
505 (Version Not Supported) responses received
SIPResp5BadSipVersion
by the SIP gateway
513 (Message Too Large) responses received by
SIPResp5MessageTooLarge
the SIP gateway
SIPResp6xx 6xx responses received by the SIP gateway
8.1.4 early-media-183
Syntax
early-media-183
undo early-media-183
View
SIP client view
Parameter
None
Description
Use the early-media-183 command to enable 183 to perform early media negotiation.
8-6
Use the undo early-media-183 command to disable 183 to perform early media
negotiation.
By default, 183 early media negotiation is disabled.
Example
# Configure to enable 183 early media negotiation.

[H3C] early-media-183
8.1.5 early-media disable
Syntax
early-media disable
undo early-media disable
View
SIP client view
Parameter
None
Description
Use the early-media disable command to disable early media negotiation.

Use the undo early-media disable command to enable early media negotiation.
By default, early media negotiation is enabled.
Example
# Configure to disable early media negotiation.

[H3C] early-media disable
8.1.6 mode (SIP Client)
Syntax
mode {gateway { all | single } | phone number number }

undo mode
View
SIP Client view
Parameter
gateway: Sets the registration mode of the gateway to gateway.
8-7
all: All telephone numbers are carried in one register message.

single: One telephone number is carried in one register message.
phone: Sets the registration mode of the gateway to phone.
number number: The number to be registered in phone mode.
Description
Use the mode command to set the registration mode of the gateway.
Use the undo mode command to restore the default registration mode, or the gateway
mode.
In gateway mode, the router can register multiple numbers while in phone mode it can
register only the one specified by the number argument.
Example
# Set the gateway registration mode to phone and the number to be registered to 1688.
[H3C-voice-sip] mode phone number 1688
8.1.7 register-enable
Syntax
register-enable { on | off }
undo register-enable
View
SIP client view
Parameter
on: Enables the SIP registration function.

off: Disables the SIP registration function.
Description
Use the register-enable command to enable or disable the SIP registration function.
By default, the SIP registration function is not enabled.
You can disable the SIP registration function by executing either undo register-enable
or register-enable off.
Example
# Enable the SIP registration function.

[H3C-voice-sip] register-enable on
8-8
8.1.8 reset voice sip
Syntax
reset voice sip
Parameter
None
View
User view
Description
Use the reset voice sip command to reset all the statistic information about the SIP
client.
Example
# Reset all the statistic information about the SIP client.

<H3C> reset voice sip
8.1.9 sip
Syntax
sip
View
Voice view
Parameter
None
Description
Use the sip command to access SIP client view.

Before you can configure a SIP client, you should first access the appropriate SIP client
view.
Example
# Access SIP client view.

[H3C-voice] sip
[H3C-voice-sip]
8-9
8.1.10 sip-call
Syntax
sip-call { forwarding | waiting | transfer }

undo sip-call { forwarding | waiting | transfer }
View
SIP Client view
Parameter
forwarding: Enables call forwarding.

waiting: Enables call waiting.
transfer: Enables call transfer.
Description
Use the sip-call command to enable globally supplementary service.

Use the undo sip-call command to disable globally supplementary service.
By default, all supplementary service is enabled.
Example
# Enable SIP call forwarding.

[H3C-voice-sip] sip-call forwarding
8.1.11 sip-comp
Syntax
sip-comp { callee | from | server }

undo sip-comp { callee | from | server }
View
SIP client view
Parameter
callee: Extracts the called number from the To field.

from: Configures the device to use the IP address in the To field as the IP address in
the From field when sending a SIP request. By default, the From field indicates the
calling address and the To field indicates the called address.
server: Allows the Server field to be included in requests. According to RFC 3261, the
Server field is an optional field in responses.
8-10
Description
Use the sip-comp command to configure a SIP compatibility option.

Use the undo sip-comp command to restore the default setting of a SIP compatibility
option.
Note:
The sip-comp from command can be used in the case that voice gateway has passed
sip proxy call authentication and the IP addresses of From and To field are the same.
Do not configure this command in other cases.
Example
# Configure the device to use the IP address in the To field as the IP address in the
From field when sending a SIP request.
[H3C-voice-sip] sip-comp from
8.1.12 sip-comp agent
Syntax
sip-comp agent [agent-info ]

undo sip-comp agent
View
SIP Client view
Parameter
agent: Includes the user-agent field in SIP request.

agent-info: Character string, in the range of 1 to 31, indicating the user-agent field
information, which defaults to H3C-Router.
Description
Use the sip-comp agent command to configure including user-agent field in SIP
request.
Use the undo sip-comp command to configure not including user-agent field in SIP
request.
By default, user-agent field is not included in SIP request.
8-11
Example
# Configure the user-agent field to be included in SIP request, and the value is h3c.
[H3C-voice-sip] sip-comp agent h3c
# Configure the user-agent field to be included in SIP request, and uses the default
value.
[H3C-voice-sip] sip-comp agent
# Configure the user-agent field not to be included in SIP request.

[H3C-voice-sip] undo sip-comp agent
8.1.13 sip-domain
Syntax
sip-domain domain-name
undo sip-domain
View
SIP client view
Parameter
domain-name: Domain name of the SIP server, in the range 1 to 31 characters.
Description
Use the sip-domain command to configure the domain name of a SIP server.
Use the undo sip-domain command to delete the domain name of the SIP server.
By default, a SIP server is identified by its IP address instead of domain name.
Example
# Configure a SIP server’s domain name hello.com.

[H3C-voice-sip] sip-domain hello.com
8.1.14 sip-id
Syntax
sip-id id password { simple | cipher } password

undo sip-id
View
SIP client view
8-12
Parameter
id: SIP ID of router, which is a case sensitive character string in the range 0 to 9, a to z,
A to Z, !, %, *, -, _, +, ‘, ., and @. @ cannot be used as the last character. ID ranges from
1 to 31 and defaults to Comware-GATEWAY.
simple: Displays the configuration of SIP-ID password in plain text.
cipher: Displays the configuration of SIP-ID password in ciphertext.
password: SIP authentication password of the gateway, which defaults to
Comware-SIP.
Description
Use the sip-id command to set ID of the local gateway and configure its SIP
authentication password.
Use the undo sip-id command to restore the default.
By default, SIP ID of gateway is Comware-GATEWAY and authentication password is
Comware-SIP.
During the SIP message interaction, the local device may be required by the remote
SIP device to provide SIP ID and password for authentication. You can use this
command however only when the register-enable off command is configured.
Example
# Set SIP ID of the router to h3c, password to 1234, and display mode to ciphertext.
[H3C-voice-sip] sip-id h3c password cipher 1234
8.1.15 sip-server
Syntax
sip-server { master | slaver } ip-address port [ port-number | default ] [ inbound | all ]

undo sip-server
View
SIP client view
Parameter
master: Master proxy server.

slaver: Slave proxy server.
ip-address: IPv4 address.
port port-number: Port number, which is in the range 1 to 65535 and defaults to 5060.
inbound: Accepts only SIP call requests from the specified server.
8-13
all: Accepts all the SIP call requests.
Description
Use the sip-server command to configure address information of SIP proxy server and
define call requests that can be accepted.
Use the undo sip-server command to restore the default.
By default, all the SIP call requests are accepted.
You can use this command to configure master and slave SIP proxy servers. During an
interaction, requests are sent to the slave proxy server if the master is not available.
If the inbound keyword applies, only SIP call requests from the specified proxy server
are acceptable; if the all keyword applies, all the SIP call requests are acceptable.
You can use this command however only when the register-enable off command is
configured.
The address configured here should be consistent with that assigned to the specified
SIP proxy server at the time of networking.
Example
# Set the address of master SIP proxy server to 169.54.5.10 and port number to 1120.
[H3C-voice-sip] sip-server master 169.54.5.10 port 1120 all
8.1.16 source-ip
Syntax
source-ip ip-address
undo source-ip
View
SIP client view
Parameter
ip-address: IPv4 address.
Description
Use the source-ip command to bind a source IP address to the gateway when it
functions as a User Agent (UA).
By default, no SIP source IP address is configured.
Note that this source address should be the IP address of an existing interface on the
gateway.
8-14
You can use this command however only when the register-enable off command is
configured.
Example
# Set the local source address to 1.1.1.1.

[H3C-voice-sip] source-ip 1.1.1.1
8.1.17 wildcard-register enable
Syntax
wildcard-register enable
undo wildcard-register
View
SIP client view
Parameter
None
Description
Use the wildcard-register enable command to enable fuzzy (wildcard) telephone

number registration.
Use the undo wildcard-register command to disable fuzzy (wildcard) telephone
number registration.
By default, fuzzy telephone number registration is disabled.
Sometimes, the match template configured for a POTS entity may use a number
containing the wildcards of dot (.) and T instead of using a standard E.164 number.
When the router sends a Register message, it retains dots and substitutes dots (.) for
Ts.
Note:
You may use the function of fuzzy telephone number registration only when it is
supported on both SIP client and SIP server.
Example
# Enable fuzzy telephone number registration.

[H3C-voice-sip] wildcard-register enable
8-15
Non-IP Architecture
Command Manual – Non-IP Architecture
Table of Contents
Chapter 1 OSI Layer 2 Configuration Commands...................................................................... 1-1

1.1 OSI Layer 2 Configuration Commands.............................................................................. 1-1
1.1.1 debugging hdlc clns ................................................................................................ 1-1
1.1.2 display atm map-info ............................................................................................... 1-1
1.1.3 display fr map-info ................................................................................................... 1-3
1.1.4 display x25 map ...................................................................................................... 1-3
1.1.5 display x25 vc.......................................................................................................... 1-5
1.1.6 fr map clns............................................................................................................... 1-7
1.1.7 map clns .................................................................................................................. 1-8
1.1.8 x25 default-protocol................................................................................................. 1-8
1.1.9 x25 map clns ........................................................................................................... 1-9
1.1.10 x25 pvc ................................................................................................................ 1-11
Chapter 2 OSI Layer 3 Configuration Commands...................................................................... 2-1

2.1 OSI Layer 3 Configuration Commands.............................................................................. 2-1
2.1.1 clns enable .............................................................................................................. 2-1
2.1.2 clns erpacket enable ............................................................................................... 2-1
2.1.3 clns erpacket interval .............................................................................................. 2-2
2.1.4 clns es-peer............................................................................................................. 2-3
2.1.5 clns net .................................................................................................................... 2-3
2.1.6 clns rdpacket enable ............................................................................................... 2-4
2.1.7 clns rdpacket interval .............................................................................................. 2-5
2.1.8 clns route-static ....................................................................................................... 2-5
2.1.9 clns timer rdpacket holding ..................................................................................... 2-6
2.1.10 debugging clns echo ............................................................................................. 2-7
2.1.11 debugging clns clnp .............................................................................................. 2-8
2.1.12 debugging clns rd.................................................................................................. 2-8
2.1.13 debugging clns routing .......................................................................................... 2-9
2.1.14 debugging isis es-adjacency ................................................................................. 2-9
2.1.15 debugging isis is-adjacency ................................................................................ 2-10
2.1.16 debugging esis .................................................................................................... 2-10
2.1.17 display clns.......................................................................................................... 2-11
2.1.18 display isis routing clns ....................................................................................... 2-12
2.1.19 display clns interface........................................................................................... 2-13
2.1.20 display clns routing-table..................................................................................... 2-14
2.1.21 display clns statistics........................................................................................... 2-18
2.1.22 display esis.......................................................................................................... 2-20
2.1.23 display esis interface........................................................................................... 2-21
i
2.1.24 display esis peer ................................................................................................. 2-22

2.1.25 display esis statistics........................................................................................... 2-22
2.1.26 esis ...................................................................................................................... 2-23
2.1.27 esis enable .......................................................................................................... 2-24
2.1.28 isis enable clns .................................................................................................... 2-25
2.1.29 ping clns .............................................................................................................. 2-26
2.1.30 preference clns.................................................................................................... 2-26
2.1.31 reset clns statistics .............................................................................................. 2-27
2.1.32 reset esis statistics .............................................................................................. 2-28
2.1.33 timer configuration............................................................................................... 2-28
2.1.34 timer holding........................................................................................................ 2-29
2.1.35 tracert clns........................................................................................................... 2-30
Chapter 3 IPX Configuration Commands.................................................................................... 3-1

3.1 IPX Configuration Commands ........................................................................................... 3-1
3.1.1 debugging ipx packet .............................................................................................. 3-1
3.1.2 debugging ipx ping .................................................................................................. 3-2
3.1.3 debugging ipx rip ..................................................................................................... 3-3
3.1.4 debugging ipx rtpro-flash......................................................................................... 3-4
3.1.5 debugging ipx rtpro-interface .................................................................................. 3-5
3.1.6 debugging ipx rtpro-routing ..................................................................................... 3-6
3.1.7 debugging ipx sap packet ....................................................................................... 3-7
3.1.8 display ipx interface................................................................................................. 3-9
3.1.9 display ipx routing-table ........................................................................................ 3-11
3.1.10 display ipx routing-table statistics........................................................................ 3-14
3.1.11 display ipx service-table ...................................................................................... 3-14
3.1.12 display ipx statistics............................................................................................. 3-16
3.1.13 ipx enable ............................................................................................................ 3-18
3.1.14 ipx encapsulation ................................................................................................ 3-19
3.1.15 ipx netbios-propagation....................................................................................... 3-20
3.1.16 ipx network .......................................................................................................... 3-21
3.1.17 ipx rip import-route .............................................................................................. 3-21
3.1.18 ipx rip mtu............................................................................................................ 3-22
3.1.19 ipx rip multiplier ................................................................................................... 3-23
3.1.20 ipx rip timer update.............................................................................................. 3-23
3.1.21 ipx route-static ..................................................................................................... 3-24
3.1.22 ipx route load-balance-path................................................................................. 3-26
3.1.23 ipx route max-reserve-path ................................................................................. 3-26
3.1.24 ipx sap disable..................................................................................................... 3-27
3.1.25 ipx sap gns-disable-reply .................................................................................... 3-28
3.1.26 ipx sap gns-load-balance .................................................................................... 3-28
3.1.27 ipx sap max-reserve-servers............................................................................... 3-29
3.1.28 ipx sap mtu .......................................................................................................... 3-30
ii
3.1.29 ipx sap multiplier ................................................................................................. 3-30

3.1.30 ipx sap timer update............................................................................................ 3-31
3.1.31 ipx service ........................................................................................................... 3-32
3.1.32 ipx split-horizon ................................................................................................... 3-33
3.1.33 ipx tick ................................................................................................................. 3-33
3.1.34 ipx update-change-only....................................................................................... 3-34
3.1.35 ping ipx ................................................................................................................ 3-35
3.1.36 reset ipx statistics ................................................................................................ 3-36
3.1.37 reset ipx routing-table statistics........................................................................... 3-36
Chapter 4 DLSw Configuration Commands ............................................................................... 4-1

4.1 DLSw1.0 Configuration Commands .................................................................................. 4-1
4.1.1 bridge-set (in synchronous serial interface view).................................................... 4-1
4.1.2 bridge-set (in Ethernet Interface view) .................................................................... 4-2
4.1.3 code nrzi.................................................................................................................. 4-2
4.1.4 debugging dlsw ....................................................................................................... 4-3
4.1.5 debugging dlsw packet............................................................................................ 4-4
4.1.6 debugging llc2 ......................................................................................................... 4-5
4.1.7 debugging llc2 packet ............................................................................................. 4-6
4.1.8 debugging sdlc ........................................................................................................ 4-7
4.1.9 display dlsw bridge-entry......................................................................................... 4-7
4.1.10 display dlsw circuits............................................................................................... 4-8
4.1.11 display dlsw information ........................................................................................ 4-9
4.1.12 display dlsw remote............................................................................................. 4-10
4.1.13 display dlsw reachable-cache ............................................................................. 4-11
4.1.14 display llc2........................................................................................................... 4-12
4.1.15 dlsw bridge-set .................................................................................................... 4-13
4.1.16 dlsw enable ......................................................................................................... 4-13
4.1.17 dlsw local............................................................................................................. 4-14
4.1.18 dlsw reachable .................................................................................................... 4-15
4.1.19 dlsw reachable-cache ......................................................................................... 4-16
4.1.20 dlsw remote ......................................................................................................... 4-17
4.1.21 dlsw timer ............................................................................................................ 4-18
4.1.22 idle-mark.............................................................................................................. 4-19
4.1.23 link-protocol sdlc.................................................................................................. 4-20
4.1.24 llc2 max-ack ........................................................................................................ 4-21
4.1.25 llc2 max-send-queue........................................................................................... 4-21
4.1.26 llc2 max-transmission.......................................................................................... 4-22
4.1.27 llc2 modulo .......................................................................................................... 4-22
4.1.28 llc2 receive-window ............................................................................................. 4-23
4.1.29 llc2 timer ack ....................................................................................................... 4-24
4.1.30 llc2 timer ack-delay ............................................................................................. 4-24
4.1.31 llc2 timer busy ..................................................................................................... 4-25
iii
4.1.32 llc2 timer poll ....................................................................................................... 4-26

4.1.33 llc2 timer reject .................................................................................................... 4-26
4.1.34 reset dlsw bridge-entry........................................................................................ 4-27
4.1.35 reset dlsw circuits ................................................................................................ 4-27
4.1.36 reset dlsw reachable-cache ................................................................................ 4-28
4.1.37 sdlc controller ...................................................................................................... 4-28
4.1.38 sdlc mac-map local ............................................................................................. 4-29
4.1.39 sdlc mac-map remote.......................................................................................... 4-30
4.1.40 sdlc max-pdu ....................................................................................................... 4-31
4.1.41 sdlc max-send-queue.......................................................................................... 4-31
4.1.42 sdlc max-transmission......................................................................................... 4-32
4.1.43 sdlc modulo ......................................................................................................... 4-32
4.1.44 sdlc sap-map local .............................................................................................. 4-33
4.1.45 sdlc sap-map remote........................................................................................... 4-34
4.1.46 sdlc simultaneous................................................................................................ 4-34
4.1.47 sdlc status ........................................................................................................... 4-35
4.1.48 sdlc timer ack ...................................................................................................... 4-36
4.1.49 sdlc timer lifetime ................................................................................................ 4-37
4.1.50 sdlc timer poll ...................................................................................................... 4-37
4.1.51 sdlc window ......................................................................................................... 4-38
4.1.52 sdlc xid ................................................................................................................ 4-39
4.2 DLSw2.0 Configuration Commands ................................................................................ 4-39
4.2.1 debugging dlsw filter ............................................................................................. 4-40
4.2.2 debugging dlsw udp .............................................................................................. 4-40
4.2.3 display dlsw information ........................................................................................ 4-42
4.2.4 display dlsw remote............................................................................................... 4-44
4.2.5 dlsw filter acl.......................................................................................................... 4-45
4.2.6 dlsw multicast ........................................................................................................ 4-45
4.2.7 dlsw max-transmission.......................................................................................... 4-46
4.2.8 dlsw remote ........................................................................................................... 4-47
4.2.9 reset dlsw tcp ........................................................................................................ 4-48
4.3 DLSw Redundancy Configuration Commands ................................................................ 4-49
4.3.1 debugging dlsw ethernet-backup .......................................................................... 4-49
4.3.2 debugging dlsw reachable-cache.......................................................................... 4-51
4.3.3 display dlsw ethernet-backup circuit ..................................................................... 4-52
4.3.4 display dlsw ethernet-backup map........................................................................ 4-54
4.3.5 display dlsw ethernet-backup neighbour............................................................... 4-54
4.3.6 display dlsw reachable-cache ............................................................................... 4-55
4.3.7 dlsw ethernet-backup enable ................................................................................ 4-56
4.3.8 dlsw ethernet-backup map .................................................................................... 4-57
4.3.9 dlsw ethernet-backup timer ................................................................................... 4-59
4.3.10 dlsw reverse ........................................................................................................ 4-59
iv
4.3.11 reset dlsw ethernet-backup circuit....................................................................... 4-60

4.3.12 reset dlsw ethernet-backup map ......................................................................... 4-61
v
Comware V3 Chapter 1 OSI Layer 2 Configuration Commands
Chapter 1 OSI Layer 2 Configuration Commands
1.1 OSI Layer 2 Configuration Commands

1.1.1 debugging hdlc clns
Syntax
debugging hdlc clns { in | in-out | out } [ interface interface-type interface-number ]

undo debugging hdlc clns { in | in-out | out } [ interface interface-type interface-number ]
View
User view
Parameter
in: Specifies to enable debugging for input packets.

in-out: Specifies to enable debugging for input and output packets.
out: Specifies to enable debugging for output packets.
Description
Use the debugging hdlc clns command to enable debugging for HDLC OSI packets.
Use the undo debugging hdlc clns command to disable debugging for HDLC OSI
packets.
CLNP packets, ES-IS packets, and IS-IS packets are all HDLC OSI packets.
Debugging for HDLC OSI packets is disabled by default.
Example
# Enable debugging for input and output HDLC OSI packets.

<H3C> debugging hdlc clns in-out
1.1.2 display atm map-info
Syntax
display atm map-info [ interface { interface-name | interface-type interface-num }

[ pvc { pvc-name | vpi/vci } ] ]
1-1
View
Any view
Parameter
interface-name: Name of the ATM interface. Provide this argument in this form:
interface-name = interface-type interface-num
interface-num: Interface number.
pvc-name: Name of the permanent virtual circuit (PVC). This argument can be up to 16
characters in length and is not case-sensitive. For an ATM interface, the name of a PVC
must be unique and cannot be a valid VPI/VCI pair. For example, The VPI/VCI pair 1/20
cannot be the name of a PVC. (VPI: virtual path identifier, VCI: virtual channel identifier)
vpi/vci: VPI/VCI pair. VPI ranges from 0 to 255. The available range of VCI depends on
interface type and is listed in Table 1-1. Do not specify a VCI value within a range of 0 to
31, which is reserved for special use.
Table 1-1 VCI range of an ATM interface
Interface type VCI range

ADSL 0 to 255
GSHDSL 0 to 255
ATMOC3 0 to 1023
ATM25 0 to 511
ATME3 0 to 1023
ATMT3 0 to 1023
IMA-E1/T1 0 to 511
Description
Use the display atm map-info command to display upper layer protocol map
information about a specified ATM interface.
If you do not specify an interface, then upper layer protocol map information about all
ATM interfaces is displayed.
Example
# Display upper layer protocol map information about all ATM interfaces of the device.
<H3C> display atm map-info
Atm1/0/0.1, PVC 1/33, CLNS, State UP
1-2
1.1.3 display fr map-info
Syntax
display fr map-info [ interface interface-type interface-num ]
View
Any view
Parameter
interface-type interface-num: Specifies the interface to be displayed. You can specify

an interface or a sub-interface. If you do not specify an interface, information about all
interfaces is displayed.
Description
Use the display fr map-info command to display frame relay (FR) address map
information.
You can use this command to check to see if static address maps are correctly
configured and dynamic address maps operate properly.
Example
# Display FR address map information.

<H3C> display fr map-info
Map Statistics for interface Serial1/0/2 (DTE)

DLCI = 100, CLNS, Serial1/0/2
encapsulation = ietf, vlink = 14
Table 1-2 Description on the fields of the display fr map-info command
Field Description
Map Statistics for interface Serial1/0/2 A message that prompts you whose
(DTE) information is displayed
DLCI = 100, CLNS, Serial1/0/2 —
create time = 2006/1/21 14:48:44 The time the map is created

encapsulation = ietf The encapsulation format is IETF.
1.1.4 display x25 map
Syntax
display x25 map
1-3
View
Any view
Parameter
None
Description
Use the display x25 map command to display X.25 address map information.
X.25 address map can be configured by using the x25 map command or the x25 pvc
command. The display x25 map command can be used to show all X.25 address
mappings.
Example
# Display X.25 address map information.

[H3C] display x25 map
Interface:Serial3/0/0(protocol status is up):
ip address:202.38.162.2 X.121 address: 22
map-type: SVC_MAP VC-number: 0
Facility:
ACCEPT_REVERSE;
BROADCAST;
Interface:Serial1/0/0.1(protocol status is up):

Clns enabled X.121 address: 30
map-type: PVC_MAP VC-number: 0
Facility:
Table 1-3 describes the above output information.
Table 1-3 Description on the fields of the display x25 map command
Field Description
Interface:Serial3/0/0(protocol status is up): The mapped interface and its state
ip address:202.38.162.2 X.121 address: The IP address and corresponding
22 X.121 address of the interface
map-type: SVC_MAP The map type is SVC_MAP
VC-number: 0 Number of the virtual circuits
1-4
Field Description
Facility:
ACCEPT_REVERSE;
—
BROADCAST;
Clns enabled CLNS is enabled
1.1.5 display x25 vc
Syntax
display x25 vc [ lci ]
View
Any view
Parameter
lci: Logical channel identifier ranging from 1 to 4095. If you do not provide this
argument, all X.25 virtual circuits are displayed.
Description
Use the display x25 vc command to display information about X.25 virtual circuits.
Switched virtual circuits (SVC) are established on demand by X.25 network signaling.
Whereas permanent virtual circuits (PVC) are established by manually configuring and
remain regardless of data transmission. When operating in X.25 switching mode, a
router can also establish virtual circuits as needed to switch data. You can use this
command to check virtual circuits of all these types. But the displayed fields may differ.
Example
# Display X.25 virtual circuits.

[H3C] display x25 vc
SVC 1
State: P4
Map: clns to 130
Input/Output:
1-5
RR 0/0 RNR 0/0 REJ 0/0

Bytes 420/420
SVC 10
State: P4
SVC <--> Serial2/0/0 SVC 60
Input/Output:
RR 0/0 RNR 0/0 REJ 0/0
Bytes 420/420
Interface: Serial2/0/0-1.1.1.1
PVC 1
State: P/Inactive
XOT PVC <--> Serial2/0/0 PVC 1 connected
Input/Output:
RR 0/0 RNR 0/0 REJ 0/0
Bytes 0/0
Interface: Serial2/0
PVC 1
State: D3
PVC <--> XOT Serial2/0/0-1.1.1.1 PVC 1 connected
Input/Output:
RR 0/0 RNR 0/0 REJ 0/0
Bytes 0/0
1-6
SVC 59
State: P4
PAD: UI-130 From remote 130 connected to local 220
Input/Output:
RR 6/2 RNR 0/0 REJ 0/0
Bytes 53/363
1.1.6 fr map clns
Syntax
fr map clns dlci [ nonstandard | ietf ] [ compression frf9 ]

undo fr map clns dlci
View
Interface view
Parameter
dlci: Local virtual circuit number ranging from 16 to 1007.

nonstandard: Specifies to encapsulate the mapping in a non-standard format.
ietf: Specifies to encapsulate the mapping in IETF format.
frf9: Specifies to adopt payload compression. Not available for point-to-point
interfaces.
Description
Use the fr map clns command to add an FR mapping for OSI packets.
Use the undo fr map clns command to remove an FR mapping established for OSI
packets.
Address mapping can be achieved through manually configuring or reverse address
resolution protocol (RARP). Static address mapping can be achieved through manually
configuring, which is applicable when there are few peer ESs or the default routes exist.
Whereas dynamic address mapping can be achieved through RARP, which is
applicable when the peer router supports RARP and the network is relatively complex.
As OSI packets cannot be forwarded through Layer 3 address mapping, you can only
map by protocol for OSI packets. There can only be one mapping for OSI packets. So
you must remove the existing map before you create a new one.
1-7
No FR mapping is established for OSI packets by default.
Example
# With a virtual circuit (DLCI = 40) existing on Serial1/0/0 interface, configure a static
address mapping.
[H3C-Serial1/0/0] fr map clns 40
1.1.7 map clns
Syntax
map clns
undo map clns
View
ATM PVC view
Parameter
None
Description
Use the map clns command to create a CLNSOA mapping for a PVC.
Use the undo map clns command to remove existing CLNSOA mapping.
You can configure only one CLNS mapping for a virtual circuit on a point-to-multipoint
interface. So you must remove the existing one before you create another map on the
same interface.
No CLNSOA mapping is established by default.
Example
# Create a static mapping on PVC 1/32.

[H3C-atm-pvc-Atm1/0/0-1/32] map clns
1.1.8 x25 default-protocol
Syntax
x25 default-protocol [ protocol-type ]

undo x25 default-protocol
View
Interface view
1-8
Parameter
protocol-type: Protocol type, which can be IP or CLNS.
Description
Use the x25 default-protocol command to set the upper layer protocol for an X.25
interface that X.25 protocol carries by default.
Use the undo x25 default-protocol command to revert to the default upper layer
protocol.
The default upper layer protocol carried by X.25 protocol is IP.
During course of establishing a X.25 SVC, the called party checks the CUD (call user
data) fields in X.25 call request packets and reject the call request if the CUD fields
cannot be recognized. You can specify a default upper layer protocol that X.25 carries,
through which an call request packet with unrecognized CUD field is treated as the
PDU (protocol data unit) of the default upper layer protocol.
Example
# Set the default upper layer protocol that the X.25 interface Serial0/0/0 carries to OSI
protocol.
[H3C-Serial0/0/0] x25 default-protocol clns
1.1.9 x25 map clns
Syntax
x25 map clns x121-address x.121-address [ option ]

undo x25 map clns
View
Interface view
Parameter
clns: Specifies to use CLNS protocol.

protocol-address: Protocol address of the peer ES.
x.121-address: X.121 address of the peer ES.
option: Attributes or user facilities specific to the address mapping.
Description
Use the x25 map clns command to configure a CLNS address mapping for an X.121
address.
Use the undo x25 map command to remove an existing mapping.
1-9
No CLNS address mapping is configured by default.

Since X.25 protocol can multiplex multiple logical virtual circuits on a physical interface,
you need to manually specify the mapping between network addresses and X.121
addresses.
You can configure only one X.25 CLNS mapping on a point-to-multipoint X.25 interface.
You need to remove the existing X.25 CLNS mapping first if you want to configure
another mapping on the same interface.
You cannot modify any parameters (including protocol address, X.121 address and all
options) of a configured address mapping. As an alternative, you can delete the
address mapping using the undo x25 map command, and then establish a new one.
Protocol addresses of address mappings configured for the same X.25 interface
cannot be the same.
The options of the option argument are described as follows.
broadcast: Specifies to send internet protocol broadcast packets and IP-based
multicast packets to the destination. This option provides solid support for routing
protocols such as Routing Information Protocol (RIP).
closed-user-group group-number: Specifies the number of the closed user group
corresponding to the address mapping.
idle-timer minutes: Specifies the maximum idle time of the virtual circuit associated
with the address mapping. Value of 0 stands for an infinite idle time.
no-callin: Rejects any call for the address mapping.
no-callout: Disables calls launched using the address mapping.
packet-size input-packet output-packet: Specifies the maximum acceptable packet
size in bytes for input and output packets. The two parameters range from 16 to 4096
(include) and must be the integer power of 2. This option is used when negotiating with
the peer.
reverse-charge-accept: Specifies to accept calls that contain reverse charge requests.
Calls of this type are only accepted if you specify this option.
reverse-charge-request: Specifies to carry reverse charge requests when launching
calls using this address mapping.
roa-list name: Specifies an ROA list name configured using the x25 roa command in
send-delay milliseconds: Specifies to carry maximum transmission delay requests
when launching calls using this address mapping.
threshold in out: Specifies the acceptable throughput. The value of in/out can be 75,
150, 300, 600, 1200, 2400, 4800, 9600, 19200, and 48000. This option is used when
negotiating with the peer.
1-10
vc-per-map count: Specifies the maximum number of virtual circuits permitted to

associate with the address mapping.
window-size input-window-size output-window-size: Specifies the acceptable input
and output window size. The two values range from 1 (include) to the modulus of the
X.25 interface that accommodates the address mapping (exclude). This option is used
when negotiating with the peer.
Example
# Configure CLNS address mapping on X.25 interface Serial0/0/0.

[H3C-Serial0/0/0] x25 map clns x121-address 2
# Configure IP and CLNS address mapping on X.25 interface Serial0/0/0.

[H3C-Serial0/0/0] x25 map ip 1.1.1.1 clns x121-address 2
1.1.10 x25 pvc
Syntax
x25 pvc pvc-number { ip protocol-address [ compressedtcp ] | clns }*x121-address

x.121-address [ option ]
undo x25 pvc pvc-number
View
Interface view
Parameter
pvc-number: PVC number ranging from 1 to 4094 (include). This argument must be
within PVC channel range.
protocol-address: Protocol address of the peer of the PVC.
compressedtcp: Specifies to enable compressed TCP.
x.121-address: X.121 address of the peer of the PVC.
option: Attributes of the PVC.
Description
Use the x25 pvc command to configure an X.25 PVC route.

Use the undo x25 pvc command to remove an X.25 PVC route.
X.25 PVCs are not created by default. The flow control parameters of a PVC with its
corresponding attributes not configured are the same as those of the X.25 interface that
1-11
accommodates it. (Refer to the x25 packet-size and x25 window-size command for
ways to set the flow control parameters of an X.25 interface.)
You can configure only one X.25 CLNS PVC for a point-to-multipoint X.25 interface. So
you must remove the existing one first if you want to configure another X.25 CLNS PVC
for the same interface.
Upon the establishment of a PVC, the corresponding address mapping is automatically
created. So to create the corresponding address mapping first is unnecessary (and
actually impossible).
Before create a PVC, be sure to enable the PVC channel range. The PVC channel
range refers to channels with channel numbers ranging from 1 (include) to the lower
limit (exclude) of the nearest channel range of enabled channels. If the lower limit itself
is 1, the PVC channel range is disabled. Table 1-4 lists typical PVC channel ranges.
Table 1-4 Typical PVC channel ranges
Incoming-only Two-way channel Out-going

PVC channel
channel range range channel range
[0, 0] [1, 1024] [0, 0] Disabled
[0, 0] [10, 24] [0, 0] [1, 9]
[1, 10] [15, 30] [0, 0] Disabled

[5, 10] [15, 25] [30, 32] [1, 4]
[0, 0] [0, 0] [20, 45] [1, 19]
[0, 0] [0, 0] [0, 0] [1, 4094]
The options of the option argument are described as follows.

broadcast: Specifies to forward broadcast packets to the peer of the PVC
packet-size input-packet output-packet: Set the maximum input and output packet size
in bytes of the PVC. These two values range from 16 to 4096 (include) and must be the
integer power of 2.
window-size input-window-size output-window-size: Set the input and output windows
size of the PVC. These two values range from 1 (include) to the modulus of the X.25
interface (exclude) accommodating the PVC.
Example
# Configure X.25 as the link layer protocol of Serial0/0/0 interface and enable PVC
channel range to create a PVC.
[H3C-Serial0/0/0] link-protcol x25
[H3C-Serial0/0/0] x25 vc-range bi-channel 8 1024
1-12
[H3C-Serial0/0/0] x25 pvc 2 clns x121-address 20112451 broadcast packet-size

512 512
1-13
Chapter 2 OSI Layer 3 Configuration Commands
2.1 OSI Layer 3 Configuration Commands

2.1.1 clns enable
Syntax
clns enable
undo clns enable
View
System view
Parameter
None
Description
Use the clns enable command to enable CLNS.

Use the undo clns enable command to disable CLNS.
CLNS is disabled by default. When you enable CLNS globally, each interface of the
router is capable of receiving/sending CLNS packets.
Example
# Enable CLNS forwarding.

<H3C> system-view
[H3C] clns enable
CLNS is enabled
2.1.2 clns erpacket enable
Syntax
clns erpacket enable

undo clns erpacket enable
View
System view
2-1
Parameter
None
Description
Use the clns erpacket enable command to enable generation of error report packets.
Use the undo clns erpacket enable command to disable generation of error report
packets.
Generation of error report packets is enabled by default.
Example
# Enable generation of error report packets.

<H3C> system-view
[H3C] clns erpacket enable
2.1.3 clns erpacket interval
Syntax
clns erpacket interval [ integer ]

undo clns erpacket interval
View
System view
Parameter
integer: Integer that specifies the minimum interval in milliseconds to generate two
successive error report packets. This argument ranges from 0 to 4294967295.
Description
Use the clns erpacket interval command to set the minimum interval to generate two
successive error report packets.
Use the undo clns erpacket interval command to revert to the default minimum
interval to generate two successive error report packets.
The default minimum interval to generate two successive error report packets is 10
milliseconds.
Example
# Set the minimum interval to generate two successive error report packets to 200
milliseconds.
<H3C> system-view
2-2

[H3C] clns erpacket interval 200
2.1.4 clns es-peer
Syntax
clns es-peer NSAP interface-type interface-number [ SNPA ]

undo clns es-peer { NSAP [ interface-type interface-number ] | all }
View
System view
Parameter
NSAP: Address of the static neighboring ES in the format of ##.####. ... .##. The
address is 8 to 20 bytes in length.
interface-type interface-number: Type and number of the interface to which the ES is
connected. The interface-type argument can be ATM, Ethernet, NULL, Serial, Tunnel,
MFR, MP-group, Virtual-Template, and Loopback.
SNPA: Layer 2 address of the ES in the format of ####.####.####. Only available for
Ethernet interfaces. A Layer 2 address can be 8 to 20 bytes in length.
all: Specifies to remove all configured static neighboring ESs. This keyword is only for
the undo command.
Description
Use the clns es-peer command to configure a static neighboring ES.

Use the undo clns es-peer command to remove a specified neighboring ES.
Example
# Configure a static neighboring ES.

<H3C> system-view
[H3C] clns es-peer 49.0001.0000.6500.00 Ethernet0/0/0 00e0.fc00.1a01
2.1.5 clns net
Syntax
clns net address

undo clns net address
2-3
View
System view
Parameter
address: Network entity title of the IS in hexadecimal form. This argument can be 8 to
20 bytes in length and must be ended with 00.
Description
Use the clns net command to assign an NET address to the IS.
Use the undo clns net command to remove the NET address of the IS.
Example
# Assign an NET address of 47.0001.1921.6800.1024.00 to an IS.

<H3C> system-view
[H3C] clns net 47.0001.1921.6800.1024.00
Only up to three NETs are permitted.
2.1.6 clns rdpacket enable
Syntax
clns rdpacket enable

undo clns rdpacket enable
View
System view
Parameter
None
Description
Use the clns rdpacket enable command to enable the router to send RD packets.
Use the undo clns rdpacket enable command to disable the router to send RD
packets.
A router sends RD packets by default.
Note that:
z A router sends RD packets regardless of whether or not the router has ES-IS
protocol employed.
z A router sends RD packets when the outbound and inbound interfaces of its
NPDU are the same.
2-4
Example
# Enable a router to send RD packets.

<H3C> system-view
[H3C] clns rdpacket enable
The request redirection is already enabled
2.1.7 clns rdpacket interval
Syntax
clns rdpacket interval milliseconds

undo clns rdpacket interval
View
System view
Parameter
milliseconds: Minimum interval in milliseconds to generate RD packets. This argument

Description
Use the clns rdpacket interval command to set the minimum interval to generate RD
packets.
Use the undo clns rdpacket interval command to revert to the default minimum
interval to generate RD packets.
Example
# Set the minimum interval to generate RD packets to 200 milliseconds.

<H3C> system-view
[H3C] clns rdpacket interval 200
2.1.8 clns route-static
Syntax
clns route-static { default-nsap-prefix | NSAP prefix } interface-type

interface-number SNPA [ reject | blackhole ]
undo clns route-static { NSAP prefix [ interface-type interface-number ] | all |
default-nsap-prefix } [ interface-type interface-number]
2-5
View
System view
Parameter
NSAP prefix: Prefix of the destination address of an OSI static route. Provide this
argument in the format of ##.####. ... .##.
interface-type interface-number: Type and number of the outbound interface leads to
the next hop of the route. The interface-type argument can be ATM, Ethernet, NULL,
Serial, Tunnel, MFR, MP-group, Virtual-Template, and Loopback.
SNPA: Layer 2 address of the next hop in the format of ####.####.####. Only available
for Ethernet interfaces.
default-nsap-prefix: Specifies to use the default destination address prefix. This
keyword is used to configure default routes.
reject: Specifies the route to be an unreachable route.
blackhole: Specifies the route to be a blackhole route.
all: Specifies to remove all static routes. This keyword is only for the undo command.
Description
Use the clns route-static command to configure a static OSI route.

Use the undo clns route-static command to remove a static OSI route.
If you execute this command with the interface-type interface-number argument not
provided, all static routes with their destination address prefixes identical to the
specified destination address prefix are removed.
Example
# Configure a static OSI route.

<H3C> system-view
[H3C] clns route-static 49.0001 vlan-interface1 00e0.fc00.1a01 reject
2.1.9 clns timer rdpacket holding
Syntax
clns timer rdpacket holding [ seconds ]

undo clns timer rdpacket holding
View
System view
2-6
Parameter
seconds: Holding time in seconds of the information a RD packet carries. This

argument ranges from 1 to 65535 and defaults to 180.
Description
Use the clns timer rdpacket holding command to set the holding time of the
information a RD packet carries.
Use the undo clns timer rdpacket holding command to revert to the default holding
time.
Example
# Set the holding time of the information the transmitted RD packets carry to 60
seconds.
<H3C> system-view
[H3C]clns timer rdpacket holding 60
2.1.10 debugging clns echo
Syntax
debugging clns echo

undo debugging clns echo
View
User view
Parameter
None
Description
Use the debugging clns echo command to enable debugging for Echo packets.
Use the undo debugging clns echo command to disable debugging for Echo packets.
The information displayed includes source and destination addresses, invalid ERQ
packet source addresses, packet type error information and so on.
Debugging for Echo packets is disabled by default.
Example
# Enable debugging for Echo packets.

<H3C> debugging clns echo
2-7
2.1.11 debugging clns clnp
Syntax
debugging clns clnp

undo debugging clns clnp
View
User view
Parameter
None
Description
Use the debugging clns clnp command to enable debugging for CLNS packets to
display the contents of all received/transmitted CLNP packets.
Use the undo debugging clns clnp command to disable debugging for CLNS
packets.
Example
# Enable debugging for CLNS packets.

<H3C> debugging clns clnp
2.1.12 debugging clns rd
Syntax
debugging clns rd
undo debugging clns rd
View
User view
Parameter
None
Description
Use the debugging clns rd command to enable debugging for RD packets.

Use the undo debugging clns rd command to disable debugging for RD packets.
Example
# Enable debugging for RD packets.
2-8
<H3C> debugging clns rd
2.1.13 debugging clns routing
Syntax
debugging clns routing

undo debugging clns routing
View
User view
Parameter
None
Description
Use the debugging clns routing command to enable debugging for Layer 3 routing
tables.
Use the undo debugging clns routing command to disable debugging for Layer 3
routing tables.
Example
# Enable debugging for Layer 3 routing tables.

<H3C> debugging clns routing
2.1.14 debugging isis es-adjacency
Syntax
debugging isis es-adjacency

undo debugging isis es-adjacency
View
User view
Parameter
None
Description
Use the debugging isis es-adjacency command to enable debugging for IS-IS
protocol-related events occur on neighboring ESs.
Use the undo debugging isis es-adjacency command to disable debugging for IS-IS
protocol-related events occur on neighboring ESs.
2-9
You can display information about IS-IS protocol-related events occur on neighboring
ESs by enable this type of debugging, such as state (up/down) changes.
Debugging for IS-IS protocol-related events occur on neighboring ESs is disabled by
default.
Example
# Enable debugging for IS-IS protocol-related events occur on neighboring ESs.

<H3C> debugging isis es-adjacency
2.1.15 debugging isis is-adjacency
Syntax
debugging isis is-adjacency

undo debugging isis is-adjacency
View
User view
Parameter
None
Description
Use the debugging isis is-adjacency command to enable debugging for IS-IS
protocol-related events occur on neighboring ISs.
Use the undo debugging isis is-adjacency command to disable debugging for IS-IS
protocol-related events occur on neighboring ISs.
You can display information about IS-IS protocol-related events occur on neighboring
ISs by enable this type of debugging, such as state (up/down) changes of the
neighboring ISs, information about receiving/transmitting IIH packets.
Debugging for IS-IS protocol-related events occur on neighboring ISs is disabled by
default.
Example
# Enable debugging for IS-IS protocol-related events occur on neighboring ISs.

<H3C> debugging isis is-adjacency
2.1.16 debugging esis
Syntax
debugging esis { event | packet }
2-10
undo debugging esis { event | packet }
View
User view
Parameter
None
Description
Use the debugging esis event command to enable debugging for ES-IS
protocol-related events. You can display event information using this command, such
as changes of neighbor states, entries in Level 0 routing table, and interface states.
Use the undo debugging esis event command to disable debugging for ES-IS
protocol-related events.
Use the debugging esis packet command to enable debugging for ES-IS packets.
You display information about received/transmitted ES-IS packets, such as packet size,
packet type, packet HT, and Layer 2 and Layer 3 address.
Use the undo debugging esis packet command to disable debugging for ES-IS
packets.
Example
# Enable debugging for ES-IS protocol-related events.

<H3C> debugging esis event
2.1.17 display clns
Syntax
display clns
View
Any view
Parameter
None
Description
Use the display clns command to display current CLNS information.
Example
# Display current CLNS information.

<H3C> display clns
2-11
NET: 47.0000.0000.0000.0000.00
Current CLNP status: Enable
Current error report status: Disable
Current minimum error report interval (milliseconds):100
Current CLNP redirect status: Enable
Current CLNP redirect holding time: 180s
Current minimum CLNP redirection packet interval (milliseconds):100
Table 2-1 Description on the fields of the display clns command
Field Description
NET Net address
Current CLNP status: Current CLNP state

Current error report status: Current error report state
Current minimum error report interval Current minimum interval to generate
(milliseconds): error report packets
Current CLNP redirect status: Current CLNP RD status
Current holding time of the information
Current CLNP redirect holding time:
RD packets carry
Current minimum CLNP redirection Current minimum interval to generate
packet interval (milliseconds): two successive RD packets
2.1.18 display isis routing clns
Syntax
display isis routing clns
View
Any view
Parameter
None
Description
Use the display isis routing clns command to display CLNS routing information
generated by IS-IS protocol.
Example
# Display CLNS routing information generated by IS-IS protocol.

<H3C> display isis routing clns
2-12
ISIS clns Level - 1 Routing Table :
System Id Nexthop SNPA Interface Cost

1111.1111.1111 0000.0000.0001 000e.84ba.fd90 Fa0/0 10
2222.2222.2222 0000.0000.0002 000e.84ba.fd92 Fa0/0 10
#3333.3333.3333 -------------- -------------- ----- 0
# indicates the nearest L2 IS
ISIS clns Level - 2 Routing Table :
NSAP Prefix Nexthop SNPA Interface Cost

49.0001 0000.0000.0001 000e.84ba.fd90 Fa0/0 10
49.0002 0000.0000.0002 000e.84ba.fd92 Fa0/0 10
The information above is the contents of Level 1 and Level 2 routing table generated by
IS-IS protocol. Table 2-2 describes the fields in it.
Table 2-2 Description on fields of the display isis route clns command
Field Description
System Id System ID
Nexthop The address of the next hop
SNPA SNPA address

Interface The interface that leads to the next hop
Cost The cost of the route
NSAP prefix NSAP prefix
2.1.19 display clns interface
Syntax
display clns interface [ interface-type interface-number ]
View
Any view
Parameter

2-13
Description
Use the display clns interface command to display CLNS related information about a
If you do not specify the interface-type interface-number argument, this command
displays CLNS related information about all interfaces.
Example
<H3C> display clns interface Ethernet 0/0/0

Ethernet0/0/0 is up
CLNP protocol status is up
0 packets received, 0 packets sent

0 bytes received, 0 bytes sent
CLNP redirect packet:
0 packets sent
0 bytes sent
Table 2-3 Description on fields of the display clns interface command
Field Description
Ethernet0/0/0 is up The state of Ethernet0/0/0 interface
CLNP protocol state CLNP protocol state of the interface

CLNP Packets The number of CLNS packets the
packets received, packets sent interface receives and sends and the
bytes received, bytes sent corresponding byte number
Statistics information about CLNP RD

CLNP redirect packet
packets processed by the interface
The number of RD packets the interface
packets sent, bytes sent receives and sends and the
corresponding byte number
2.1.20 display clns routing-table
Syntax
display clns routing-table [ [ level-0 | level-1 | level-2 ] [ NSAP | verbose] ] |

[ l2-cache ]
View
Any view
2-14
Parameter
NSAP: Destination NSAP address, routes to which are to be displayed.

level-0: Specifies to display entries in the directly connecting (Level 0) routing table.
level-1: Specifies to display entries in the intra-area (Level 1) routing table.
level-2: Specifies to display entries in the inter-area (Level 2) routing table.
l2-cache: Specifies to display all cached entries in Level 2 routing cache.
verbose: Specifies to display detailed routing information, including those of active
routes and inactive routes.
Description
Use the display clns routing-table command to display all active CLNS routes,
including those in Level 0, Level 1, and Level 2 routing tables.
Example
<H3C>display clns routing-table verbose

CLNS Level-0 Routing Table
Total Number of Routes In Level-0 Routing Table: 3

# = NSAP Addr + = Active Route * = Next hop in use
+#47.0001.0001.0000.0000.065b.00
Protocol:ES-IS Cost:0 Pre:10
*NextHop:N/A SNPA:00e0.fc12.4448 Interface:Ethernet1/0/0
+#47.0001.0001.0000.0000.650b.00
Protocol:ES-IS Cost:0 Pre:10
*NextHop:N/A SNPA:00e0.fc12.4448 Interface:Ethernet1/0/0
+#47.0001.0001.0000.0000.065a.00
Protocol:DIRECT Cost:0 Pre:0
*NextHop:N/A SNPA:N/A Interface:InLoopBack0

# = System ID + = Active Route * = Next hop in use
@ = CLNS Level-1 Routing Area Address
@47.0001.0002
@47.0001.0001
2-15
@47.0001.0003
+#0000.0000.280c
Protocol:IS-IS Cost:20 Pre:15
*NextHop:0000.0000.028b SNPA:00e0.fc3a.5ee3
Interface:Ethernet1/0/1
+#0000.0000.028c
+#0000.0000.280b
+#0000.0000.028b
+#0000.0000.065b
*NextHop:0000.0000.065b SNPA:00e0.fc12.4448
+#0000.0000.046a
*NextHop:0000.0000.046b SNPA:00e0.fc35.1d94
+#0000.0000.046b
+#0000.0000.065a
*NextHop:N/A SNPA:N/A Interface:InLoopBack0
2-16

# = NSAP Prefix + = Active Route * = Next hop in use
B = Blackhole Route R = Reject Route
+#47.0002.0001
+#CLNS Default Route

Table 2-4 Description on the fields of the display clns routing-table command
Field Description
Directly connecting (Level 0) routing
L0 Routing-table
table
L1 Routing-table Intra-area (Level 1) routing table
L2 Routing-table Inter-area (Level 2) routing table

Total Number of Routes In Level-0 Total number of routes in the Level 0
Routing Table routing table
NSAP The destination NSAP address
NSAP Prefix The destination NSAP address prefix
System ID The destination System ID

Protocol The protocol that discovers the route
Cost The cost of the route
Pre The preference value of the route

Nexthop The System ID of the next hop
SNPA The Layer 2 address of the next hop
Interface The outbound interface
Blackhole Route Indicates the route is a blackhole route
Indicates the route is a unreachable
Reject Route
route
2-17
Field Description
CLNS Level-1 Routing Area Address The address of the reachable area
2.1.21 display clns statistics
Syntax
display clns statistics
View
Any view
Parameter
None
Description
Use the display clns statistic command to display statistics information about CLNS
flow.
Example
# Display statistics information about CLNS flow.

<H3C> display clns statistics
CLNP Protocol (packets):
Total sent: 20
Total received: 20
To local: 0
Local out: 0
Error report packet generated: 0
Forwarded: 20
Out discarded: 0
In discarded: 0
Fragmented: 0
Fragments generated: 0
Format errors: 0
Header syntax errors: 0
Checksum errors: 0
Lifetime timeout errors: 0
Unsupported option errors: 0
Can't fragment: 0
Duplicated option: 0
2-18
Unknown data type: 0

Unknown protocol version: 0
Incomplete packet errors: 0
Reassemble errors: 0
Reassembled: 0
Reassemble generated: 0
Reassemble timeout: 0
Reassemble interfere: 0
No route: 0
RD sent:20
Table 2-5 Description on the fields of the display clns statistics command
Field Description
Total sent Total number of the CLNP packets sent
Total received Total number of the CLNP packets received
Number of the CLNP packets destined for the
To local
local IS
Local out Number of the CLNP packet sent by the IS
Number of the error report packets generated
Error report packet generated
by the IS
Forwarded Number of the packets forwarded by the IS
Number of the packets discarded when being
Out discarded
sent
Number of the packets discarded upon
In discarded
received
Number of the packets generated after
Fragments generated
fragmentation
Format errors Number of the packets with format errors
Number of the packets with header syntax
Header syntax errors
errors
Checksum errors Number of the packets with checksum errors
Lifetime timeout errors Number of the packets with lifetime timing out
Number of the packets with unsupported
Unsupported option errors
options
Number of the packets that cannot be
Can't fragment
fragmented
Duplicated option Number of the packets with duplicated options
Number of the packets that are of unknown
Unknown data type
data type
2-19
Field Description
Number of the packets with unreachable
Destination address unreachable
destinations
Number of the packets that are of unknown
Unknown protocol version
protocol version
Incomplete packet errors Number of incomplete packets
Number of the packets with reassembling
Reassemble errors
errors
Reassembled Number of the packets that are reassembled
Number of the packets generated by
Reassemble generated
reassembling
Number of the packets that time out when being
Reassemble timeout
reassembled
Number of the packets that conflict when being
Reassemble interfere
reassembled
No route Number of the packets that fail to be routed
RD sent Number of the RD packets sent
2.1.22 display esis
Syntax
display esis
View
Any view
Parameter
None
Description
Use the display esis command to display current ES-IS protocol state, such as the
configuration timer (CT) to send ISH packets, the holding time (HT) of the information
ISH packets carry.
Example
# Display current ES-IS protocol state.

<H3C>display esis
Current ESIS status: Enable
Current ESIS configuration timer: 60s
2-20
Current ESIS holding timer: 180s
2.1.23 display esis interface
Syntax
display esis interface [ interface-type interface-number ]
View
Any view
Parameter

Description
Use the display esis interface command to display ES-IS related information about a
If you do not specify the interface-type interface-number argument, this command
display ES-IS related information about all interfaces.
Example
# Display ES-IS related information about an interface.

<H3C> display esis interface Ethernet0/0/0
Ethernet0/0/0 is up
ES-IS protocol status is up
0 packets received, 0 packets sent
Table 2-6 Description on the fields of the display esis interface command
Field Description
Ethernet0/0/0 is up The current state of the interface
ES-IS protocol state The ES-IS protocol state of the interface

ES-IS Packets The number of ES-IS packets the
packets received, packets sent interface receives and sends and the
bytes received, bytes sent corresponding byte number
2-21
2.1.24 display esis peer
Syntax
display esis peer
View
Any view
Parameter
None
Description
Use the display esis peer command to display information about the neighbors
dynamically discovered by ES-IS protocol (including dynamic ES and IS neighbors).
Example
# Display information about the neighbors dynamically discovered by ES-IS protocol.

<H3C> display esis peer
47.0000.0000.0000.0000
Interface:Fa0/0 SNPA:000e-84ba-fd90 HoldTime:250s Type:ES
47.0000.0000.0000.0000
49.0000.0647.0001.1100
47.0000.0647.0001.1100
Interface:Fa0/0 SNPA:000e-84ba-fd94 HoldTime:220s Type:IS
47.0000.0647.0001.1101
Interface:Fa0/0 SNPA:000e-84ba-fd94 HoldTime:220s Type:IS
2.1.25 display esis statistics
Syntax
display esis statistics
View
Any view
2-22
Parameter
None
Description
Use the display esis statistic command to display statistics information about ES-IS
flow.
Example
# Display statistics information about ES-IS flow.

<H3C> display esis statistics
ESIS Protocol (packets):
Total sent:10
Total received:20
Total discarded: 0
ESH sent:0
ESH received:10
ISH sent:10
ISH received:0
Table 2-7 Description on the fields of the display esis statistics command
Field Description
Total sent Total number of the packets sent
Total received Total number of the packets received
Total discarded Total number of the packets discarded
ESH sent Total number of ESH packets sent

ESH received Total number of ESH packets received
ISH sent Total number of ISH packets sent
ISH received Total number of ISH packets received
2.1.26 esis
Syntax
esis
undo esis
View
System view
2-23
Parameter
None
Description
Use the esis command to employ ES-IS protocol globally and enter ES-IS view.
Use the undo esis command to disable ES-IS protocol.
ES-IS protocol is not employed by default.
Example
# Employ ES-IS protocol globally.

<H3C> system-view
[H3C] esis
[H3C-esis]
2.1.27 esis enable
Syntax
esis enable
undo esis enable
View
Interface view
Parameter
None
Description
Use the esis enable command to employ ES-IS protocol on the interface.
Use the undo esis enable command to disable ES-IS protocol on the interface.
ES-IS protocol is not employed on an interface by default.
Example
# Employ ES-IS protocol on Ethernet0/0/0 interface.

<H3C> system-view
[H3C-Ethernet0/0/0] esis enable
2-24
2.1.28 isis enable clns
Syntax
isis enable clns [ tag ]

undo isis enable clns [ tag ]
View
Interface view
Parameter
tag: Name of the IS-IS routing process specified by the configuration of the isis
command in system view. If not specified, it is empty.
Description
Use the isis enable clns command to enable CLNS-based IS-IS routing process for a
Use the undo isis enable clns command to delete the enabled IS-IS process on a
By default, IS-IS process is not enabled on the interface.
To make IS-IS protocol operate normally, you must use the isis command to enable
IS-IS process, use the network-entity command to set a net entity name (NET) for the
router, and use the isis enable command to enable the interfaces which need to run
IS-IS process in turn, Only after these configurations are finished can IS-IS protocol be
started.
Related command: isis and network-entity.
 Note:
Currently, IS-IS process can be enabled on up to 255 interfaces on one router
(including logical interfaces such as subinterfaces).
Example
# Create an IS-IS routing process named 123 and enable this process on interface
Serial1/0/0.
[H3C] isis 123
[H3C-isis] quit
2-25
[H3C-serial1/0/0] isis enable clns 123
2.1.29 ping clns
Syntax
ping clns NSAP
View
Any view
Parameter
NSAP: Layer 3 address of the destination in the format of ##.####. ... .##.
Description
Use the ping clns command to test the reachability to a specified destination.
This command sends a CLNP ECHO REQUEST (ERQ) packet to the destination and
waits for its corresponding ECHO RESPONSE (ERP) packet. A ping operation is
successful if the source receives an ERP packet in three seconds after it sends an ERQ
packet to the destination. Otherwise, it is unsuccessful.
Example
# A successful ping operation.

<H3C> ping clns 49.0001.0000.0000.026a.00
The system is alive.
# An unsuccessful ping operation.

<H3C> ping clns 47.0001.0001.0001.000a.0025.11
Can not reach the system.
# Perform a ping operation on an IS with CLNS not enabled.

<H3C> ping clns 49.0001.0000.0000.026a.00
CLNS has not been enabled, please enable CLNS first.
# Perform a ping operation on an IS with NET address not configured.

<H3C> ping clns 49.0001.0000.0000.026a.00
No local Network Entity Title (NET) to use.
2.1.30 preference clns
Syntax
preference clns value

undo preference clns
2-26
View
IS-IS view
Parameter
value: Preference value ranging from 1 to 255 and defaulting to 15.
Description
Use the preference clns command to set the preference of the CLNS routes
discovered by IS-IS protocol.
Use the undo preference clns command to revert the preference of the CLNS routes
discovered by IS-IS protocol to the default.
As a router can have multiple dynamic routing protocols employed, multiple routes lead
to the same destination may coexist on the router. You can assign a preference value to
each of these protocols to enable the router to select the route with the highest
preference when selecting from multiple routes discovered by protocols with different
preference values.
The default preference value of CLNS routes discovered by IS-IS protocol is 15.
Example
# Set the preference value of CLNS routes discovered by IS-IS protocol to 35.
[H3C-isis] preference clns 35
2.1.31 reset clns statistics
Syntax
reset clns statistics
View
User view
Parameter
None
Description
Use the reset clns statistics command to reset statistics information about CLNS flow.
This command clears interface statistics and global statistics. Note that changes of
interface state (UP/DOWN) do not affect the statistics. And the statistics information
about an interface gets lost when you remove the interface.
2-27
Example
# Reset statistics information about CLNS flow.

<H3C> reset clns statistics
2.1.32 reset esis statistics
Syntax
reset esis statistics
View
User view
Parameter
None
Description
Use the reset esis statistics command to reset statistics information about ES-IS flow.
This command clears interface statistics and global statistics. Note that changes of
interface state (UP/DOWN) do not affect the statistics. And the statistics information
about an interface gets lost when you disable ES-IS protocol on the interface or remove
the interface.
Example
# Reset statistics information about ES-IS flow.

<H3C> reset esis statistics
2.1.33 timer configuration
Syntax
timer configuration [ seconds ]

undo timer configuration
View
ES-IS view
Parameter
seconds: Interval in seconds to send ISH packets. This argument ranges from 1 to
65535 and defaults to 60.
Description
Use the timer configuration command to set the interval to send ISH packets.
2-28
Use the undo timer configuration command to revert to the default interval to send
ISH packets.
Note that:
z Make sure the interval to send ISH packets (CT) is less than or equal to one third
of the holding time (HT) of the information ISH packets carry. Otherwise, you are
prompted with configuration error messages.
z HT value must be at least three times of that of CT. So, with CT larger than 60, if
you try to revert to the default HT (180) by executing the undo timer holding
command, you are prompted with an error message and the operation stops. You
can execute the undo timer holding command to revert to the default HT
successfully only when CT is less than or equal to 60.
Related command: timer holding.
Example
# Set the interval to send ISH packets to 20 seconds.

<H3C> system-view
[H3C] esis
[H3C-esis] timer configuration 20
2.1.34 timer holding
Syntax
timer holding [ seconds ]

undo timer holding
View
ES-IS view
Parameter
seconds: Holding time of the information ISH packets sent carry. The Holding Time field
of an ISH packet holds the holding time of its information. This argument ranges from 1
to 65535 and defaults to 180.
Description
Use the timer holding command to set the holding time of the information ISH packets
sent carry.
Use the undo timer holding command to revert to the default holding time.
Note that:
2-29
z Make sure the holding time (HT) of the information ISH packets carry is at least
three times to the interval to send ISH packets (CT). Otherwise, you are prompted
with configuration error messages.
z HT value must be at least three times of that of CT. So, with CT larger than 60, if
you try to revert to the default HT (180) by executing the undo timer holding
command, you are prompted with an error message and the operation stops. You
can execute the undo timer holding command to revert to the default HT
successfully only when CT is less than or equal to 60.
Example
# Set the interval to send ISH packets to 20 seconds, and the holding time of the
information ISH packets sent carry to 60 seconds.
<H3C> system-view
[H3C] esis
[H3C-esis] timer configuration 20
[H3C-esis] timer holding 60
2.1.35 tracert clns
Syntax
tracert clns [ -m max-TTL | -n n-request | -t timeout | -v ] * NSAP
View
Any view
Parameter
-m max-TTL: Sets the maximum time to live (TTL) value available for echo request
(ERQ) packets. The max-TTL argument ranges from 1 to 255 and defaults to 30.
-n n-request: Sets the maximum number of ERQ packets that can be sent for a specific
TTL. The n-request argument ranges from 0 to 65535 and defaults to 3.
-t timeout: Sets the interval in seconds to wait for response packets. The timeout
argument ranges from 0 to 65535 and defaults to 5.
-v: Specifies to display descriptions of errors the error numbers in returned error report
packets correspond to.
NSAP: Destination Layer 3 address in the format of ##.####. ... .##. A Layer 3
addresses can be 8 to 20 bytes in length.
Description
Use the tracert clns command to track the nodes along the route that leads to a
specified destination.
2-30
This command can be used to test the reachability of a specified network and
troubleshoot network problems.
Upon executed, the command first sends an ERQ packet with a TTL of 1 to the
destination. It sends another ERQ packet with a TTL of 2 when being replied with a TTL
timeout packet. The command continues sending ERQ packets to the destination, each
with its TTL 1 larger than that of its predecessor, until a TTL timeout packet sent from
the destination is received. You can obtain the nodes of the route that leads to the
destination by checking the source addresses of these TTL timeout packets.
If you use the clns erpacket interval command to set a longer interval for error report
packet, the executing of the tracert clns command may result in packet loss. Therefore,
you are recommended to check error report packet interval on all routers and set the
interval to 0 before using the tracert clns command. And then after executing the
tracert clns command restore the interval to the original one.
When executing the tracert clns command, make sure that:
z The IS is assigned a NET address. (Refer to the clns net command.)
z CLNS is enabled globally. (Refer to the clns enable command.)
z Generation of ER packets is enabled globally. (Refer to the clns erpacket enable
command.)
Table 2-8 Description on the fields of the tracert clns command
Field Description
* No response packet received when times out
Error report packet received before times out (Error types are
!
described as follows)
N Unknown error type
P Packet format conflict with protocol

C Checksum error
G Packet discarded due to network congestion
H Cannot parse packet header

S Packet cannot be fragmented
I Incomplete packet
D Duplicated options
T Unsupported packet type
A Destination unreachable
O Unsupported or not specified option

V Wrong protocol version
Q QoS error
2-31
Field Description
R Error in reassembling
Example
# Execute the tracert clns command with CLNS not enabled.

[H3C] tracert clns 49.0001.0000.0000.026a.00
CLNS has not been enabled, please enable CLNS first
# Execute the tracert clns command with local NET address not configured.
[H3C] tracert clns 49.0001.0000.0000.026a.00
No local Network Entity Title (NET) to use
# Execute the tracert clns command normally.

[H3C] tracert clns –v 47.0001.0001.0001.000a.0025.11
No local Network Entity Title (NET) to use
traceroute 47.0001.0001.0001.000a.0025.11,30 hops max, 39 byte packet
press CTRL_C to break
1 47.0001.0002.0001.000c.0033.00 19ms
47.0001.0002.0001.000c.0034.00 20ms
47.0001.0002.0001.000c.0033.00 19ms
2 *
*
*
3 47.0001.0002.0001.000c.0035.00 20ms !A
47.0001.0002.0001.000c.0036.00 10ms
47.0001.0002.0001.000c.0035.00 10ms !A
4 47.0001.0001.0001.000a.0025.11 39ms
47.0001.0001.0001.000a.0025.11 39ms
47.0001.0001.0001.000a.0025.11 19ms
2-32
Comware V3 Chapter 3 IPX Configuration Commands
Chapter 3 IPX Configuration Commands
3.1 IPX Configuration Commands

3.1.1 debugging ipx packet
Syntax
debugging ipx packet interface-type interface-num

undo debugging ipx packet interface-type interface-num
View
User view
Parameter

Description
Use the debugging ipx packet command to enable IPX packet debugging switch to
view the contents of IPX packet received and transmitted.
Use the undo debugging ipx packet command to disable the debugging switch. By
default, IPX packet debugging switch is disabled.
Example
# Enable IPX packet debugging switch.

<H3C> debugging ipx packet
*0.8942310-IPX-8-IPXPKT:
Sending, interface = Serial3/0/0,
pktlen = 40, hops = 0, pkttype = 0x1,
dstnet = 0xb, dstnode = ffff-ffff-ffff, dstsocket = 0x453,
srcnet = 0xb, srcnode = 00e0-fc01-5517, srcsocket = 0x453
prompt: Sending the packet.
*0.8942610-IPX-8-IPXPKT:
Delivering, interface = Serial3/0/0,
pktlen = 480, hops = 0, pkttype = 0x4,
dstnet = 0xb, dstnode = ffff-ffff-ffff, dstsocket = 0x452,
srcnet = 0xb, srcnode = 00e0-fc01-54f6, srcsocket = 0x452
prompt: IPX packet is delivering up!
3-1
Table 3-1 Description of display information of the debugging ipx packet command
Field Description
Length of packet in decimal format (not including MAC
pktlen =
address header).
hops = How many routers the packet has passed through.
pkttype = Packet type in hexadecimal format.
dstnet = Destination network number of the packet.
dstnode = Destination node address of the packet.
dstsocket = Destination socket of the packet.
srcnet = Source network number of the packet.
srcnode = Source node address of the packet.
srcsocket = Source socket of the packet.
Prompt of how router processes the packet and reasons of
prompt:
discarding packet.
3.1.2 debugging ipx ping
Syntax
debugging ipx ping

undo debugging ipx ping
View
User view
Parameter
None
Description
Use the debugging ipx ping command to enable IPX Ping packet debugging switch to
view the contents of Ping packet received and transmitted.
Use the undo debugging ipx ping command to disable the debugging switch.
By default, IPX Ping packet debugging switch is disabled.
Example
# Enable IPX Ping packet debugging switch.

<H3C> debugging ipx ping
*0.15396012-IPX-8-IPXPING:
3-2
Ping receiving: Request, Src = a.00e0-fc04-8859, Dst = a.00e0-fc01-54f6

*0.15396130-IPX-8-IPXPING:
Ping sending: Response, Src = a.00e0-fc01-54f6, Dst = a.00e0-fc04-8859
Table 3-2 Description of display information of the debugging ipx ping command
Field Description
Src = Source address of Ping packet.
Dst = Destination address of Ping packet.
3.1.3 debugging ipx rip
Syntax
debugging ipx rip { packet [ verbose ] | event }

undo debugging ipx rip { packet [ verbose ] | event }
View
User view
Parameter
packet: Debugging information of packet received and transmitted.

verbose: Displays detailed information about packet received and transmitted.
event: Event debugging information, such as Up/Down of an interface and related
timer events.
Description
Use the debugging ipx rip command to enable RIP debugging switch to view
information on RIP packet received and transmitted, routing changes and timer expiry.
Use the undo debugging ipx rip command to disable RIP debugging switch.
By default, IPX RIP debugging switch is disabled.
Example
# Enable IPX RIP packet debugging switch.

<H3C> debugging ipx rip packet
Send RIP Response to Ethernet0/0, length 96
src:a.00e0-fc01-5517(453), dst:a.ffff-ffff-ffff(453)
Number of Entries in Pkt: 8
# Enable IPX RIP packet verbose debugging switch.

<H3C> debugging ipx rip packet verbose
3-3
Send RIP Response to Ethernet0/0, length 96

src:a.00e0-fc01-5517(453), dst:a.ffff-ffff-ffff(453)
Number of Entries in Pkt: 8
Network 0x1, hops 2, delay 2
Network 0xa, hops 1, delay 2
# Enable IPX RIP event debugging switch.

<H3C> debugging ipx rip event
*0.274181351-IPXRIP-8-IPXRIP_Event:
The number 1 equal route nexthop: 00e0-fc04-8859
*0.274181450-IPXRIP-8-IPXRIP_Event:
The network 8 totally have 1 equal route
3.1.4 debugging ipx rtpro-flash
Syntax
debugging ipx rtpro-flash

undo debugging ipx rtpro-flash
View
User view
Parameter
None
Description
Use the debugging ipx rtpro-flash command to turn on the debugging switch of route
refreshing in the IPXRM module.
Use the command to turn off the debugging switch of route refreshing in the IPXRM
module.
This kind of debugging information is generated when routes are refreshed for the sake
of route change.
Example
# Switch on route refreshing debugging for IPXRM module.

<H3C>debugging ipx rtpro-flash
3-4
<H3C>
# Remove an IPX static route.

[H3C]undo ipx route-static b2 Serial 1
*0.18537610 H3C RMX/8/DBG:
IPXRM set a Rth on the flash list, ulRthDest = 0xb2 .
[H3C]
*0.18537820 H3C RMX/8/DBG:
IPXRM finish a flash, reset a Rth on the flash list, ulRthDest = 0xb2 .
[H3C]
3.1.5 debugging ipx rtpro-interface
Syntax
debugging ipx rtpro-interface

undo debugging ipx rtpro-interface
View
User view
Parameter
None
Description
Use the debugging ipx rtpro-interface command to turn on the debugging switch of
interface change in the IPXRM module.
Use the undo debugging ipx rtpro-interface command to turn off the debugging
switch of interface change in the IPXRM module.
Such debugging information is generated whenever IPXRM module receives interface
change messages. These messages are generated when interface status changes
between up and down, or interface is added or removed.
Example
# Enable IPX RIP packet debugging switch

<H3C> debugging ipx rip packet
# Switch on interface change debugging for IPXRM module.

<H3C>debugging ipx rtpro-interface
<H3C>
# Trigger interface change by using shut/undo shut command.

[H3C-Serial1] shut
[H3C-Serial1]
3-5
%Oct 24 14:11:27 2005 H3C PHY/2/PHY: Serial1: change status to down

%Oct 24 14:11:27 2005 H3C IFNET/5/UPDOWN:Line protocol on the interface Seri
al1 turns into DOWN state
%Oct 24 14:11:27 2005 H3C IFNET/5/UPDOWN:Protocol IPX on the interface Seria

l1 turns into DOWN state
*0.19023320 H3C RMX/8/DBG:

IPXRM recieve interface change msg, msg type IPX_IF_DOWN .
if_index is 0x286 .
Interface name is Serial1 .
[H3C-Serial1]
[H3C-Serial1]undo shut
[H3C-Serial1]
%Oct 24 14:11:34 2004 H3C PHY/2/PHY: Serial1: change status to up
%Oct 24 14:11:34 2004 H3C IFNET/5/UPDOWN:Line protocol on the interface Seri
al1 turns into UP state
%Oct 24 14:11:34 2004 H3C IFNET/5/UPDOWN:Protocol IPX on the interface Seria

l1 turns into UP state
*0.19032220 H3C RMX/8/DBG:

IPXRM recieve interface change msg, msg type IPX_IF_UP .
if_index is 0x286 .
Interface name is Serial1 .
[H3C-Serial1]
3.1.6 debugging ipx rtpro-routing
Syntax
debugging ipx rtpro-routing

undo debugging ipx rtpro-routing
View
User view
Parameter
None
Description
Use the debugging ipx rtpro-routing command to turn on the debugging switch of
route change in the IPXRM module.
3-6
Use the command to turn off the debugging switch of route change in the IPXRM
module.
This kind of debugging information is generated when route changes as addition,
deletion or attribute adjustment occur.
Example
# Switch on route change debugging for IPXRM module.

<H3C>debugging ipx rtpro-routing
<H3C>
# Add a static route

[H3C]ipx route-static d10 Serial 1
*0.19579120 H3C RMX/8/DBG:
IPXRM ADD route !
Dest: d10 Nexthop: 0.0000-0000-0000
Interface: a.00e0-fcfb-3a00(Serial1)
Protocol: Static Preference: 60
Ticks: 6 Hops: 1
*0.19579230 H3C RMX/8/DBG:
IPXRM route change to ACTIVE !
Dest: d10 Nexthop: 0.0000-0000-0000
Interface: a.00e0-fcfb-3a00(Serial1)
Ticks: 6 Hops: 1
3.1.7 debugging ipx sap packet
Syntax
debugging ipx sap [ packet [ verbose ] | event ]

undo debugging ipx sap [ packet [ verbose ] | event ]
View
User view
Parameter
packet: Debugging information of packet received and transmitted.

verbose: Displays detailed information about packet received and transmitted.
event: Event debugging information, such as Up/Down of an interface and related
timer events.
3-7
Description
Use the debugging ipx sap command to enable IPX SAP debugging switch to view
information on SAP packet received and transmitted, routing changes and timer expiry.
Use the undo debugging ipx sap command to disable IPX SAP debugging switch.
Enabling IPX SAP debugging switch, you can confirm whether SAP packet is received.
Normally, a router or server sends out an SAP update packet every minute. By default,
each SAP packet includes up to seven service information items at most. If a lot service
information needs advertising on the network, the router sends out multiple packets per
update. For example, if a router has 20 service information items in SIT, it sends three
SAP packets per update. The first SAP includes the first seven items, the second SAP
includes the next seven items, and the last update includes the last six items.
Note:
The debugging ipx sap command generates significant amount of output, use it with
caution on networks that have many interfaces and a great deal of service information.
Disable debugging switch immediately after debugging to reduce effect to normal
services as possible.
Example
# Enable SAP packet verbose debugging switch.

<H3C> debugging ipx sap packet verbose
*0.20909856-IPXSAP-8-IPX SAP: MSG: Receive Response Packet From Eth0,Length
480
Src: 000a.0000-0104-8f02 (0452) Dest: 000a.ffff-ffff-ffff (0452)
Number of entries in pkt: 7
Server type 2000 "PS1" 0008.000a-000a-000a (0452) hop 3
Server type 2345 "kkkkk" 000d.0005-0005-0005 (0452) hop 6
Server type 9000 "kiran-temp" 000d.0006-0006-0006 (0452) hop 16
Server type 6000 "kiran3" 000d.0003-0003-0003 (0452) hop 6
Server type 1000 "FS2" 000d.000a-000a-000a (0452) hop 2
# Enable SAP packet debugging switch.

<H3C> debugging ipx sap packet
*0.20909856-IPXSAP-8-IPX SAP : MSG:Recieve Response Packet From Eth0,Length
480
Src: 000a.0000-0104-8f01 (0452) Dest: 000a.ffff-ffff-ffff (0452)
Number of entries in pkt: 4
3-8
# Enable SAP event debugging switch.

<H3C> debugging ipx sap Event
*0.20776625-IPXSAP-8-IPX SAP: MSG:
IPXSAP: Route UP Event Received: N
3.1.8 display ipx interface
Syntax
display ipx interface [ interface-type interface-num ]
View
Any view
Parameter

Description
Use the display ipx interface command to view IPX interface configuration
information and interface parameters in communication devices.
Example
# Display IPX configuration and statistics of the interface Ethernet1/0/0.

<H3C> display ipx interface ethernet 1/0/0
Ethernet1/0/0 is up
IPX address is 2.00E0-FC01-0000 [up]
SAP is enabled
Split horizon is enabled
Update change only is disabled
Forwarding of IPX type 20 propagation packet is enabled
Delay of this IPX interface, in ticks is 1
SAP GNS response is enabled
RIP packet maximum size is 432 bytes
SAP packet maximum size is 480 bytes
IPX encapsulation is Netware 802.3
0 received, 0 sent
0 RIP received, 0 RIP sent, 0 RIP discarded
0 RIP specific requests received, 0 RIP specific responses sent
0 RIP general requests received, 0 RIP general responses sent
0 SAP received, 0 SAP sent, 0 SAP discarded
0 SAP requests received, 0 SAP responses sent
3-9
Table 3-3 Description of display information of the display ipx interface command
Field Description
In terms of physical layer and link layer status, the
Ethernet1/0/0 is ... current interface is UP, DOWN or administratively
DOWN.
IPX network ID and node value of the current
IPX address is ... interface. Refer to the commands ipx network and
ipx enable for details of network ID and node value.
[up] IPX protocol status of the current interface.
SAP is … Whether SAP is enabled on the current interface.
Whether split horizon is enabled on the current
Split horizon is …
interface. The related command is ipx split-horizon.
Whether trigger update is enabled on the current
Update change only is … interface. The related command is ipx
update-change-only.
Whether IPX type 20 propagation packet is permitted
Forwarding of IPX type 20
to be forwarded on the current interface. The related
propagation packet is ...
command is ipx netbios-propagation.
Delay of this IPX interface, Delay value of the current interface. The value is
in ticks is ... configured by the ipx tick command.
Whether SAP GNS reply is enabled on the current
SAP GNS response is ... interface. The related command is ipx sap
gns-disable-reply.
RIP packet maximum size Maximum size of RIP updating packet on the current
is ... bytes interface. The related command is ipx rip mtu.
SAP packet maximum size Maximum size of SAP updating packet on the current
is ... bytes interface. The related command is ipx sap mtu.
Total number of packets received on the current
received
interface.
sent Total number of packets sent on the current interface.
Total number of bytes received on the current
bytes received
interface.
bytes sent Total number of bytes sent on the current interface.
Total number of IPX RIP packets received on the
RIP received
current interface.
Total number of IPX RIP packets sent on the current
RIP sent
interface.
Total number of IPX RIP packets discarded on the
RIP discarded
current interface.
RIP specific requests Total number of IPX RIP specific requests received
received on the current interface.
3-10
Field Description
RIP specific responses Total number of IPX RIP specific responses sent on
sent the current interface.
RIP general requests Total number of IPX RIP general requests received
received on the current interface.
RIP general responses Total number of IPX RIP general responses sent on
sent the current interface.
Total number of SAP packets received on the current
SAP received
interface.
Total number of SAP packets sent on the current
SAP sent
interface.
Total number of SAP packets discarded on the
SAP discarded
current interface.
Total number of SAP requests received on the
SAP requests received
current interface.
Total number of SAP responses sent on the current
SAP responses sent
interface.
3.1.9 display ipx routing-table
Syntax
display ipx routing-table [ network ] [ verbose ]

display ipx routing-table protocol { default | direct | rip | static } [ inactive |
verbose ]
View
Any view
Parameter
network: Destination network ID of IPX static route. It is an 8-bit hexadecimal number,

ranging from 1 to 0xFFFFFFFE. Display IPX routing information to specified destination
network ID.
verbose: Displays detailed route information, including active and inactive routes.
default: Displays all the default routing information.
direct: Displays all the directly connected routing information.
rip: Displays all IPX RIP routing information.
static: Displays all IPX static routing information.
inactive: Only displays inactive routing information.
3-11
Description
Use the display ipx routing-table command to view active IPX routing information.
Use the display ipx routing-table verbose command to view detailed IPX routing
information, including active and inactive routes.
Use the display ipx routing-table network command to view active IPX routing
information to specified destination network ID.
Use the display ipx routing-table network verbose command to view detailed IPX
routing information to specified destination network ID, including active and inactive
routes.
Use the display ipx routing-table protocol { rip | static | default | direct } command
to view IPX routing information for specified destination type, including active and
inactive routes.
Use the display ipx routing-table protocol { rip | static | default | direct } verbose
command to view detailed IPX routing information for specified destination type,
including active and inactive routes.
Example
# Display active IPX routing information.

[H3C] display ipx routing-table
Routing tables:
Summary count: 4
Dest_Ntwk_ID Proto Pre Ticks Hops Nexthop Interface
0x11 Direct 0 6 0 0.0000-0000-0000 Serial0/0/0
0x22 RIP 100 7 1 11.0000-0165-6401 Serial0/0/0
0x33 Direct 0 1 0 0.0000-0000-0000 Ethernet0/0/0
0x100 Static 60 6 1 0.0000-0000-0000 Serial0/0/0
The following table explains the contents in the above displayed information:
Table 3-4 Description on the fields of the display ipx routing-table command
Field Description
Dest_Ntwk_ID Destination network ID of the route
Proto Protocol type of the route
Pre Preference of the route

Ticks Ticks value of the route
Hops Hops value of the route
Nexthop The next hop of the route
Interface Outgoing interface of the route
3-12
# Display detailed IPX routing information, including active and inactive routes.
<H3C> display ipx routing-table verbose
Routing tables:
Destinations: 103 Routes: 103
Destination Network ID: 0x11
Protocol: Direct Preference: 0
Ticks: 6 Hops: 0
Nexthop: 0.0000-0000-0000 Time: 0
Interface: 11.0000-0165-6400(Serial0)
State: <Active>
Protocol: RIP Preference: 100
Ticks: 7 Hops: 1
Nexthop: 11.0000-0165-6401 Time: 15
State: <Active>
Protocol: Direct Preference: 0
Ticks: 1 Hops: 0
Nexthop: 0.0000-0000-0000 Time: 0
Interface: 33.0000-0165-6400(Ethernet0)
State: <Active>
Ticks: 6 Hops: 1
Nexthop: 0.0000-0000-0000 Time: 0
State: <Active>
Table 3-5 Description on the fields of the display ipx routing-table verbose
command
Field Description
Aging time value of the route. Without aging, the value of interface
Time
route and static route is 0.
State can be <Active>, <Inactive> or <Delete>. <Active> indicates
State active route, <Inactive> indicates inactive route and <Delete>
indicates the route is being deleted.
3-13
3.1.10 display ipx routing-table statistics
Syntax
display ipx routing-table statistics
View
Any view
Parameter
None
Description
Use the display ipx routing-table statistics command to view IPX routing statistics.
Example
# Display IPX routing statistics.

<H3C> display ipx routing-table statistics
Routing tables:
Proto/State route active added deleted freed
Direct 2 2 2 0 0
Static 1 1 2 1 1
RIP 1 1 1 0 0
Default 0 0 0 0 0
Total 4 4 5 1 1
3.1.11 display ipx service-table
Syntax
display ipx service-table [ [ type service-type | name name | network network | order
{ network | type } ] | [ inactive ] ] [ verbose ]
View
Any view
Parameter
type: Displays information for specified service type ID.

service-type: The type of service.
name: Displays information for specified server name.
name: Name of the server.
network: Displays service information of the server on specified network segment.
3-14
network: The network ID of the network segment.

order: Displays service information after classified by the type.
network: Classified by the network ID.
type: Classified by the service type.
inactive: Displays inactive service information.
verbose: Displays details about service information.
Description
Use the display ipx service-table command to view contents of IPX service
information table. The output information of the command helps users with IPX SAP
troubleshooting.
Example
# Display contents of IPX service information table.

[H3C] display ipx service-table
Abbreviation: S - Static, Pref - Preference(Decimal), NetId - Network number,
NodeId - Node address, hop - Hops(Decimal), Recv-If - Interface from which the
service is received
Number of Static Entries: 4

Number of Dynamic Entries: 0
Name Type NetId
S 2 0002 0011
S ser 0002 0002
S 2 0002 0002
S ser1 00ff 0002
# Display contents of service information table of type 5.

[H3C] display ipx service-table type 5
Abbreviation: S - Static, Pref - Preference(Decimal), NetId - Network number,
NodeId - Node address, hop - Hops(Decimal), Recv-If - Interface from which
the service is received
Name Type NetId NodeId Sock Pref Hops Recv-If
Prn1 0005 000d 000a-000a-000a 0452 500 02 Eth1/0/0
Prn2 0005 0008 000a-000a-000a 0452 500 03 Eth1/0/0
Prn3 0005 000d 0005-0005-0005 0452 500 06 Eth1/0/0
Prn4 0005 000d 0006-006-0006 0452 500 06 Eth1/0/0
3-15
3.1.12 display ipx statistics
Syntax
display ipx statistics
View
Any view
Parameter
None
Description
Use the display ipx statistics command to view statistics and type of IPX packet
transmitted and received.
Example
# Display IPX statistics.

<H3C> display ipx statistics
Received: 0 total, 0 packets pitched
0 packets size errors, 0 format errors
0 bad hops(>16), 0 discarded(hops=16)
0 other errors, 0 local destination
0 can not be dealed
Sent: 0 forwarded, 0 generated
0 no route, 0 discarded
RIP: 0 sent, 0 received
0 responses sent, 0 responses received
0 requests received, 0 requests dealed
0 requests sent, 0 periodic updates
SAP: 0 general requests received
0 specific requests received
0 GNS requests received
0 general responses sent
0 specific responses sent
0 GNS responses sent
0 periodic updates, 0 errors
PING: 10 requests sent, 0 requests received
0 responses sent, 0 responses received
0 responses in time, 0 responses time out
3-16
Table 3-6 Description on the fields of the display ipx statistics command
Field Description
Received Statistics for received messages
0 total Total number of received messages
Total number of messages whose headers are
0 packets pitched
re-pitched
Total number of discarded messages due to packet
0 packets size errors
size errors
Total number of discarded messages due to
0 format errors
encapsulation format errors
Total number of messages whose hop field values
0 bad hops
exceed 16
Total number of messages whose hop field values
0 discarded(hop=16)
are 16
Total number of discarded messages due to other
0 other errors
errors
Total number of messages which have local
0 local destination
destinations
0 can not be dealt Total number of messages that can not be dealt with
Sent: Statistics for sent messages
0 forwarded Number of messages which need to be forwarded
0 generated Number of messages which are sent by router itself

0 no route Number of messages which do not find routes
0 discarded Number of messages discarded during sending
RIP: Statistics for RIP messages
0 sent Number of RIP messages sent by router
0 received Number of RIP messages received
0 responses sent Number of RIP response messages sent by router

0 responses received Number of RIP response messages received
0 requests received Number of RIP request messages received
0 requests dealt Number of RIP request messages dealt
0 requests sent Number of RIP request messages sent by router
Number of RIP periodic update messages sent by
0 periodic updates
router
SAP: Statistics for SAP messages
0 general requests received Number of received SAP general request messages
3-17
Field Description
0 specific requests received Number of received SAP specific request messages
0 GNS requests received Number of received SAP GNS request messages
0 general responses sent Number of sent SAP general response messages
0 specific responses sent Number of sent SAP specific response messages
0 GNS responses sent Number of sent SAP GNS response messages
Number of SAP periodic update messages sent by
0 periodic updates
router
0 errors Number of error SAP messages
PING Statistics about pings
10 requests sent The sent ICMP requests
0 requests received The received ICMP requests
0 responses sent The sent ICMP responses
0 responses received The received ICMP responses

0 responses in time The received ICMP responses received in time
0 responses time out The expired ICMP responses
3.1.13 ipx enable
Syntax
ipx enable [ node node ]

undo ipx enable
View
System view
Parameter
node: node value of the router. It is a 48-bit value represented by a triplet of four-digit
hexadecimal numbers separated by “-“. It is neither a broadcasting address nor a
multicast address. If the parameter is not configured, the router will assign MAC
address of the first Ethernet interface as its node value.
3-18
Note:
If there is no Ethernet interface in the router, the system will assign a random node
value based on the system clock.
Description
Use the ipx enable command to activate IPX.

Use the undo ipx enable command to deactivate IPX and remove all IPX
configurations simultaneously.
Activating IPX again after executing the undo ipx enable command, you cannot
restore any IPX configuration.
The node argument specifies the node value of the router. If no node value is specified,
the router uses the MAC address of its first Ethernet interface.
The following describes the node value assignment conventions:
z If no node value is assigned to the router when IPX is activated, the router uses
the MAC address of its first Ethernet interface as the node value of its serial
interface.
z If a node value is assigned to the router when IPX is activated, the router uses this
value as the node value of its serial interface.
z For an Ethernet interface, its node value is its MAC address regardless of whether
the router is assigned a node value.
Example
# Enable IPX.
[H3C] ipx enable
# Disable IPX.
[H3C] undo ipx enable
3.1.14 ipx encapsulation
Syntax
ipx encapsulation [ dot2 | dot3 | ethernet-2 | snap ]

undo ipx encapsulation
View
Ethernet Interface view
3-19
Parameter
dot2: Encapsulation format is Ethernet_802.2.

dot3: Encapsulation format is Ethernet_802.3.
ethernet-2: Encapsulation format is Ethernet_II.
snap: Encapsulation format is Ethernet_SNAP.
Description
Use the ipx encapsulation command to set IPX frame encapsulation format on
Ethernet interface.
Use the undo ipx encapsulation command to restore the default IPX frame
encapsulation format.
By default, IPX frame encapsulation format on Ethernet interface is dot3
(Ethernet_802.3).
In WAN interfaces, IPX frame only supports PPP encapsulation.
Example
# Configure IPX frame encapsulation format on the interface Ethernet0/1/0 as

Ethernet_II.
[H3C-Ethernet 0/1/0] ipx encapsulation ethernet-2
# Restore the default IPX frame encapsulation format on the interface Ethernet0/1/0.
[H3C-Ethernet 0/1/0] undo ipx encapsulation
3.1.15 ipx netbios-propagation
Syntax
ipx netbios-propagation
undo ipx netbios-propagation
View
Interface view
Parameter
None
Description
Use the ipx netbios-propagation command to configure the router to forward type 20
broadcast packets on the current interface.
Use the undo ipx netbios-propagation command to disable the forwarding of type 20
packets.
3-20
By default, type 20 broadcast packets will be discarded by the router rather than
forwarded.
IPX type 20 packet is a packet for NetBIOS (Network Basic Input/Output System)
defined by Novell NetWare.
Example
# Enable the receipt and forwarding of type 20 broadcast packets.

[H3C-Ethernet 0/1/0] ipx netbios-propagation
# Disable the receipt and forwarding of type 20 broadcast packets.

[H3C-Ethernet 0/1/0] undo ipx netbios-propagation
3.1.16 ipx network
Syntax
ipx network network

undo ipx network
View
Interface view
Parameter
network: Network ID of IPX interface in hex. It ranges from 0x1 to FFFFFFFD.
Description
Use the ipx network command to configure a network ID for an interface.

Use the undo ipx network command to delete IPX network ID of an interface.
By default, IPX is disabled on all interfaces after it is activated. There is no IPX network
ID on the interface.
Example
# Configure the interface Ethernet0/1/0 as IPX interface and assign it with a network ID.
[H3C-Ethernet 0/1/0] ipx network 675
# Cancel the configuration of the interface Ethernet0/1/0 as IPX interface.

[H3C-Ethernet 0/1/0] undo ipx network
3.1.17 ipx rip import-route
Syntax
ipx rip import-route static
3-21
undo ipx rip import-route static
View
System view
Parameter
static: Imported static route.
Description
Use the ipx rip import-route static command to import static routes into RIP. RIP adds
them in their route updates.
Use the undo ipx rip import-route static command to disable the importation of static
routes.
Example
# Import a static route to RIP.

[H3C] ipx rip import-route static
3.1.18 ipx rip mtu
Syntax
ipx rip mtu bytes

undo ipx rip mtu
View
Interface view
Parameter
bytes: Maximum RIP updating packet size in byte, ranging from 432 to 1500. By default,
it is 432.
Description
Use the ipx rip mtu command to configure RIP updating packet size.
Use the undo ipx rip mtu command to restore the default configuration.
By default, the maximum size of RIP updating packets is 432 bytes. In RIP updating
packets, the size of each routing information item is 8 bytes and the size of IPX header
and RIP header is 32 bytes. So an updating packet can carry up to 50 routing
information items at most.
3-22
Example
# Configure the maximum size of RIP updating packets on the interface Ethernet1/0/0
to 500 bytes.
[H3C-Ethernet1/0/0] ipx rip mtu 500
3.1.19 ipx rip multiplier
Syntax
ipx rip multiplier multiplier

undo ipx rip multiplier
View
System view
Parameter
multiplier: It is used to calculate the aging period of RIP routing information table items,
ranging from 1 to 1000. By default, the value is 3. The actual aging time is the value of
multiplier multiplied by the RIP updating interval.
Description
Use the ipx rip multiplier command to configure the aging period of RIP routing
information table items.
Use the undo ipx rip multiplier command to restore the default configuration.
By default, RIP aging period is 3 times of updating interval.
Routers may contain a timer for each item in their routing information table, which
keeps track of elapsed time since the route was received. Every time the updating
packet containing the routing information is received, the timer is reset to zero. If RIP
route is not updated in a period of time, the system will regard the route is no longer
valid and delete it from the routing table.
Related command: ipx rip timer update.
Example
# Configure RIP aging period of routing information table items is 5 times of updating
interval.
[H3C] ipx rip multiplier 5
3.1.20 ipx rip timer update
Syntax
ipx rip timer update seconds
3-23
undo ipx rip timer update
View
System view
Parameter
seconds: RIP updating interval in second, ranging from 10 to 60000.
Description
Use the ipx rip timer update command to configure RIP updating interval.
Use the undo ipx rip timer update command to restore the default value of RIP
updating interval.
By default, the RIP updating interval is 60 seconds.
On a network, routers need constantly exchange routing information with each other to
keep routing information consistent with actual network topology. In RIP, directly
connected routers periodically send updating packets to each other.
The changes of RIP updating interval will affect aging period.
Related command: ipx rip multiplier.
Example
# Configure RIP updating interval to 30 seconds.

[H3C] ipx rip timer update 30
3.1.21 ipx route-static
Syntax
ipx route-static network { network.node | interface-type interface-num } [ preference

value ] [ tick ticks hop hops ]
undo ipx route-static { network [ network.node | interface-type interface-num ] | all }
View
System view
Parameter
network: Destination network ID of IPX static route. It is an 8-bit hexadecimal number,

ranging from 1 to 0xFFFFFFFE. The same network ID must be used at the two ends of
a link.
network.node: The next hop address of IPX static route. network is the network ID of
the next hop. node is a triplet of four-bit hexadecimal numbers separated by “-“, each
ranging from 1 to 0xFFFF.
3-24
interface-type: Outgoing interface type, only supporting the interface with PPP
encapsulation. It can be Serial or POS interface.
interface-num: Outgoing interface number.
preference: Route preference. The preference of directly connected routes is fixed to 0
and cannot be changed. By default, the preference of active IPX static route is 60 and
can be configured. The preference of dynamic IPX routes is fixed to 100 and cannot be
changed.
value: Route preference value, in the range 1 to 255. The less the value, the higher the
preference.
ticks: It indicates the necessary time to destination network (1 tick = 1/18 second). By
default, it is the tick value of outgoing interface. Interfaces of different types have
different default tick values. The tick value of Ethernet interface is 1 and that of Serial
interface is 6. When the tick value of an interface is modified, the tick value of the
corresponding static route will also be changed.
hops: Number of routers which are passed by to destination network. By default, the
value is 1.
all: All IPX static routes.
Description
Use the ipx route-static command to configure IPX static route.

Use the undo ipx route-static command to delete static route.
The system regards the IPX static route with destination network ID being -2
(0xFFFFFFFE) as the default route.
Example
# Configure an IPX static route with destination network ID being 0x5a, the next hop
being 1000.0-0c91-f61f, ticks 10 and hops 2.
[H3C] ipx enable
[H3C] ipx route-static 5a 1000.0-0c91-f61f tick 10 hop 2
# Configure the default IPX route with the next hop being 3.4a-60-7, ticks 10, hops 2
and preference 20.
[H3C] ipx enable
[H3C] ipx route-static FFFFFFFE 3.4a-60-7 preference 20 tick 10 hop 2
# Configure an IPX static route with destination network ID being 3a, outgoing interface
being Serial1/0/0, ticks 10, hops 2 and preference 30.
[H3C] ipx enable
[H3C] ipx route-static 3a serial 0/0/0 preference 30 tick 10 hop 2
3-25
3.1.22 ipx route load-balance-path
Syntax
ipx route load-balance-path paths

undo ipx route load-balance-path
View
System view
Parameter
paths: The maximum equivalent route number to the same destination address,
Description
Use the ipx route load-balance-path command to configure the equivalent route
number to the same destination address.
Use the undo ipx route load-balance-path command to restore the default
configuration.
The equivalent route number to the same destination address is the maximum number
of active equivalent routes in the current system. If the newly configured value is less
than the current active route number, the system will change the excessive active
routes to inactive status.
Example
# Configure the equivalent route number to the same destination address to 30.
[H3C] ipx route load-balance-path 30
3.1.23 ipx route max-reserve-path
Syntax
ipx route max-reserve-path paths

undo ipx route max-reserve-path
View
System view
Parameter
paths: The maximum dynamic route number to the same destination address, ranging
from 1 to 255. By default, the value is 4.
3-26
Description
Use the ipx route max-reserve-path command to configure the maximum dynamic
route number to the same destination address.
Use the undo ipx route max-reserve-path command to restore the default
configuration.
When the dynamic route number to the same destination address exceeds the
maximum value configured, the newly found dynamic routes will not be added into the
routing table, discarded directly. If the newly configured value is less than the original
one, the excessive routes in the current routing table will not be deleted until they get
aging themselves or are deleted manually.
Example
# Configure the maximum dynamic route number to the same destination address to
200.
[H3C] ipx route max-reserve-path 200
3.1.24 ipx sap disable
Syntax
ipx sap disable

undo ipx sap disable
View
Interface view
Parameter
None
Description
Use the ipx sap disable command to disable SAP on the current interface.
Use the undo ipx sap disable command to enable SAP on the current interface.
By default, the interface SAP is enabled as soon as IPX is enabled.
Example
# Disable SAP on the interface Ethernet0/0/0.

[H3C-Ethernet0/0/0] ipx sap disable
# Re-enable SAP on the interface Ethernet0/0/0.

[H3C-Ethernet0/0] undo ipx sap disable
3-27
3.1.25 ipx sap gns-disable-reply
Syntax
ipx sap gns-disable-reply

undo ipx sap gns-disable-reply
View
Interface view
Parameter
None
Description
Use the ipx sap gns-disable-reply command to disable IPX GNS reply on the current
interface.
Use the undo ipx sap gns-disable-reply command to enable IPX GNS reply on the
current interface.
By default, GNS reply is enabled on an interface.
Example
# Disable GNS reply on the interface Ethernet0/0/0.

[H3C-Ethernet0/0/0] ipx sap gns-disable-reply
# Re-enable GNS reply on the interface Ethernet0/0/0.

[H3C-Ethernet0/0/0] undo ipx sap gns-disable-reply
3.1.26 ipx sap gns-load-balance
Syntax
ipx sap gns-load-balance

undo ipx sap gns-load-balance
View
System view
Parameter
None
Description
Use the ipx sap gns-load-balance command to configure the router to respond GNS
request in Round-robin method, that is, all servers respond GNS request in turn.
3-28
Use the undo ipx sap gns-load-balance command to configure the nearest server to
respond GNS request.
By default, for GNS request, a router will inform all servers it knows to respond in
Round-robin method to avoid overload of one server.
Related command: ipx sap gns-disable-reply.
Example
# Configure the nearest server to respond GNS request.

[H3C] undo ipx sap gns-load-balance
# Configure all servers to respond GNS request in Round-robin method.

[H3C] ipx sap gns-load-balance
3.1.27 ipx sap max-reserve-servers
Syntax
ipx sap max-reserve-servers length

undo ipx sap max-reserve-servers
View
System view
Parameter
length: The length of the dynamic service information reserve queue, ranges from1 to
2048. By default, the value is 2048.
Description
Use the ipx sap max-reserve-servers command to configure the length of the service
information reserve queue.
Use the undo ipx sap max-reserve-servers command to restore the default
configuration.
If the newly configured service information queue length is less than the present one,
the items in SIT will not be deleted. If the service information item number for the same
service type exceeds the maximum value configured, the new service information will
not be added.
Example
# Set the maximum length of service information reserve queue to 1024.

[H3C] ipx sap max-reserve-servers 1024
3-29
3.1.28 ipx sap mtu
Syntax
ipx sap mtu bytes

undo ipx sap mtu
View
Interface view
Parameter
bytes: The maximum SAP packet size in byte, ranging from 480 to 1500. By default, the
value is 480.
Description
Use the ipx sap mtu command to configure the maximum size of SAP updating
packet.
Use the undo ipx sap mtu command to restore the default configuration.
By default, the maximum size of SAP updating packet is 480 bytes. The size of IPX
header and SAP header is 32 bytes, so a 480-byte SAP updating packet contains 7
service information items (64 bytes each).
Example
# Set the maximum size of SAP updating packet on the interface Ethernet1/0/0 to 674
bytes (carrying 10 service information items at most).
[H3C-Ethernet0/0/0] ipx sap mtu 674
3.1.29 ipx sap multiplier
Syntax
ipx sap multiplier multiplier

undo ipx sap multiplier
View
System view
Parameter
multiplier: It is used to calculate the aging period of SAP service information table items,
ranging from 1 to 1000. By default, the value is 3. When the updating interval is 60
seconds, the aging period is 60*3 = 180 seconds.
3-30
Description
Use the ipx sap multiplier command to configure the aging period of SAP service
information table items.
Use the undo ipx sap multiplier command to restore the default value of SAP aging
period.
By default, the aging period of SAP service information table items is 3 times of SAP
updating interval.
Related command: ipx sap timer update.
Example
# Set the aging period of SAP service information table items is 5 times of updating
interval.
[H3C] ipx sap multiplier 5
3.1.30 ipx sap timer update
Syntax
ipx sap timer update seconds

undo ipx sap timer update
View
System view
Parameter
seconds: SAP updating interval, ranging from 10 to 60000 seconds. By default, the
value is 60 seconds.
Description
Use the ipx sap timer update command to configure SAP updating interval.
Use the undo ipx sap timer update command to restore the default value of SAP
updating interval.
When an interface adopts trigger update method, the command configuration does not
take effect.
Related command: ipx sap multiplier, ipx update-change-only.
Example
# Configure SAP updating interval to 300 seconds.

[H3C] ipx sap timer update 300
3-31
3.1.31 ipx service
Syntax
ipx service service-type name network.node socket hop hopcount preference

preference
undo ipx service { { service-type [ name [ network.node ] ] [ preference preference ] }
| all }
View
System view
Parameter
service-type: Service type is a 4-byte hexadecimal number. 0 indicates all service

types.
name: The server name which provides the service, in character string with the
maximum length being 48 bytes.
network.node: Network ID and node value of a server. Network ID is represented by an
8-bit hexadecimal number, ranging from 0x1 to 0xFFFFFFFD. The 0s in front can be
omitted when inputting. Node value is used to identify a node in the network, with the
length of 48 bits, represented by a triplet of 4-digit hexadecimal numbers separated by
“-“.
socket: It is represented by a 4-bit hexadecimal number, ranging from 0x1 to 0xFFFF.
hop-count: The number of hops to the server in decimal, ranging from 1 to 15. Note that
hop count more than or equal to 16 implies the service is unreachable.
preference: The preference of service information, ranging from 1 to 255. The less the
value, the higher the preference. By default, the preference of the static service
information table items is 60 and the preference of the dynamic one is 500.
Description
Use the ipx service command to add a static service information item to SIT.
Use the undo ipx service command to delete a static service information item from
SIT.
The NetWare server uses SAP to advertise service information and stores the service
information to SIT which is dynamically updated by SAP. Adding a service information
item to SIT, users can access the service.
Example
# Add a static service information item with service type 4, service name “FileServer”,
server network ID 130, node value 0000-0a0b-abcd, server hops 1 and server
preference 60.
3-32
[H3C] ipx service 4 FileServer 130.0000-0a0b-abcd 451 hop 1 preference 60

[H3C] ipx service 4 FileServer 130.0000-0a0b-abcd 451 hop 1
[H3C] ipx service 114 MyServer 199.0000-0a0b-abcd 451 hop 10
Service information with server type 114 will not be advertised if there is no active route
to the network 199.
3.1.32 ipx split-horizon
Syntax
ipx split-horizon
undo ipx split-horizon
View
Interface view
Parameter
None
Description
Use the ipx split-horizon command to enable split horizon on the current interface.
Use the undo ipx split-horizon command to disable split horizon on the current
interface.
By default, split horizon is enabled on the interface.
Split horizon is a way to avoid routing loops, that is, routing information received from
an interface is not permitted to be sent from the interface. The function does not take
effect to point-to-point connection links.
Example
# Enable split horizon on the interface Ethernet1/1/0.

[H3C-Ethernet1/1/0] ipx split-horizon
# Disable split horizon on the interface Ehernet1/1/0.

[H3C-Ethernet1/1/0] undo ipx split-horizon
3.1.33 ipx tick
Syntax
ipx tick ticks

undo ipx tick
3-33
View
Interface view
Parameter
ticks: Delay time in tick, ranging from 0 to 30000. One tick is 1/18 second
(approximately 55 ms). By default, the delay of Ethernet interface is 1 tick, that of the
asynchronous serial port is 30 ticks and that of WAN port is 6 ticks.
Description
Use the ipx tick command to configure the delay of interface sending IPX packets.
Use the undo ipx tick command to restore the default value of interface delay.
As the IPX RIP delay field, the delay value configured by the ipx tick command is a
basis for the optimal routing selection.
Example
# Configure the delay is 5 ticks on the interface Ethernet1/0/0.

[H3C-Ethernet1/0/0] ipx tick 5
3.1.34 ipx update-change-only
Syntax
ipx update-change-only
undo ipx update-change-only
View
Interface view
Parameter
None
Description
Use the ipx update-change-only command to enable trigger update on the current
interface.
Use the undo ipx update-change-only command to disable trigger update on the
current interface.
By default, trigger update is disabled on the interface.
IPX RIP and SAP periodically advertise updating broadcast packets. Users can
configure trigger update to avoid broadcast flood.
3-34
Example
# Enable trigger update on the interface Ethernet1/1/0.

[H3C-Ethernet 1/1/0] ipx update-change-only
# Disable trigger update on the interface Ethernet1/1/0.

[H3C-Ethernet 1/1/0] undo ipx update-change-only
3.1.35 ping ipx
Syntax
ping ipx network.node [ -c count ] [ -t timeout ] [ -s size ]
View
Any view
Parameter
network.node: Ping destination address. The parameter network can be an eight-bit

hexadecimal number ranging from 0x1 to 0xFFFFFFFD. The 0s in front can be omitted
when inputting. The parameter node is a 48-bit value represented by a triplet of
four-digit hexadecimal numbers separated by “-“.
Note:
The 0s in front of node value cannot be omitted.
count: Number of Ping packets that are sent. By default, the value is 5.
timeout: The time waiting for Ping response. By default, the value is 2 seconds.
size: Ping packet size. By default, the value is 100 bytes.
Description
Use the ping ipx command to check host reachability and network connectivity in IPX
network.
Example
# Ping system whose destination address is 675.0000-a0b0-fefe with default

parameters.
<H3C> ping ipx 675.0000-a0b0-fefe
3-35
3.1.36 reset ipx statistics
Syntax
reset ipx statistics
View
User view
Parameter
None
Description
Use the reset ipx statistics command to clear IPX statistics by the system.
Example
# Clear IPX statistics.

<H3C> reset ipx statistics
3.1.37 reset ipx routing-table statistics
Syntax
reset ipx routing-table statistics protocol [ all | default | direct | rip | static ]
View
User view
Parameter
all: Clears statistical information of all types IPX route.

default: Clears the statistical information of the default IPX route type.
direct: Clears the statistical information of the IPX route directly connected.
rip: Clears the statistical information of the IPX RIP route.
static: Clears the statistical information of the static IPX route.
Description
The reset ipx routing-table statistics command is used to clear the statistical
information of a specified type of IPX route. Such information can be shown upon the
terminal using the display ipx routing-table statistics command.
Example
# Add 5 IPX static routes to the router, then delete them, and then add anther 9 IPX
static routes. The IPX route statistical information would be as follows:
3-36
[H3C] display ipx routing-table statistics

Routing tables:
Direct 1 1 1 0 0
Static 9 9 14 5 5
RIP 0 0 0 0 0
Default 0 0 0 0 0
Total 10 10 15 5 5
[H3C]
# Clear the IPX static route.

<H3C> reset ipx routing-table statistics protocol static
This will erase the specific routing counters information.
Are you sure?[Y/N]y
<H3C>
# The displayed statistical information shows that all three items (add, delete, freed) of
static route have changed to 0, and the below Total item has also changed accordingly.
<H3C> display ipx routing-table statistics
Routing tables:
Direct 1 1 1 0 0
Static 9 9 0 0 0
RIP 0 0 0 0 0
Default 0 0 0 0 0
Total 10 10 1 0 0
<H3C>
3-37
Comware V3 Chapter 4 DLSw Configuration Commands
Chapter 4 DLSw Configuration Commands
4.1 DLSw1.0 Configuration Commands

4.1.1 bridge-set (in synchronous serial interface view)
Syntax
bridge-set bridge-set-number
undo bridge-set bridge-set-number
View
Parameter
bridge-set-number: The bridge group number the synchronous serial port is to be

added into, ranging from 1 to 63.
Description
Use the bridge-set (in Synchronous serial interface system view) command to add
the synchronous serial interface encapsulated into SDLC into the bridge group.
Use the undo bridge-set (in synchronous serial interface view) command to delete
the interface from the DLSw bridge group.
By default, no synchronous serial port is added into the bridge group.
In order for the SDLC encapsulated synchronous serial port to join the DLSw
forwarding, the SDLC interface is needed to added into a bridge group by using this
command. What is different is that the bridge group on the Ethernet interface joins the
local forwarding, while the bridge group configured on the SDLC only joins the DLSw
forwarding, that is, all the data on it will be forwarded onto the TCP tunnel. If it is
configured in the Ethernet Interface view, the Ethernet interface of the same group
number on the router can forward packets transparently. But packets cannot be
transferred transparently between the serial ports. Each serial port only exchanges
packet with the remote end.
Example
# Add the Serial1/0/0 into the DLSw bridge group numbered 20.
[H3C] dlsw bridge-group 20
[H3C-Serial1/0/0] bridge-set 20
4-1
4.1.2 bridge-set (in Ethernet Interface view)
Syntax
bridge-set bridge-set-number
undo bridge-set bridge-set-number
View
Parameter
bridge-set-number: The bridge group number that the Ethernet interface is added into,
Description
Use the bridge-set (in the Ethernet Interface view) command to add the Ethernet
interface into the bridge.
Use the undo bridge-set (in the Ethernet Interface view) command to delete the
interface from the DLSw bridge group.
By default, no Ethernet interface is added into the bridge group.
After an Ethernet interface is added into the bridge group, the LLC2 packets on the
Ethernet interface can be sent to the remote peer through the related TCP tunnel.
Example
# Add the Ethernet1/0/0 interface into the DLSw bridge group numbered 20.
[H3C] dlsw bridge-group 20
[H3C-Ethernet1/0/0] bridge-set 20
4.1.3 code nrzi
Syntax
code nrzi
undo code
View
Synchronous serial interface system view
Parameter
None
4-2
Description
Use the code nrzi command to configure the NRZI encoding of the synchronous serial
port.
Use the undo code nrzi command to remove the NRZI encoding of the synchronous
serial port.
By default, the NRZ encoding is configured on the synchronous serial port.
There are two coding schemes, NRZI and NRZ, available on the synchronous serial
port. The NRZ coding scheme is generally used in our router. The serial port coding
scheme of some SNA devices is the NRZI coding scheme. Therefore the coding
scheme of the router needs to be changed according to the encoding of the connected
device.
Example
# Configure the NRZI encoding on the Serial1/0/0.

[H3C-Serial1/0/0] code nrzi
4.1.4 debugging dlsw
Syntax
debugging dlsw { circuit [ correlator ] | tcp [ ip-address ] | reachable-cache }

undo debugging dlsw { circuit [ correlator ] | tcp [ ip-address ] | reachable-cache }
View
User view
Parameter
circuit: Enables the DLSw circuit debugging.

correlator: Distinguishes different IDs of the circuits.
tcp: Enables TCP packet debugging for DLSw.
ip-address: IP address.
reachable-cache: Enables DLSw reachability debugging.
Description
Use the debugging dlsw command to enable DLSw debugging.

Use the undo debugging dlsw command to disable DLSw debugging.
Example
# Enable DLSw circuit debugging.

<H3C> debugging dlsw circuit
4-3
4.1.5 debugging dlsw packet
Syntax
debugging dlsw packet [ receive [ip-address] | send [ip-address] ]

undo debugging dlsw packet [ receive [ip-address] | send [ip-address] ]
View
User view
Parameter
receive: Enables debugging for inbound SSP packets.

send: Enables debugging for outbound SSP packets.
ip-address: Enables debugging for the SSP packets with the specified IP address.
Description
Use the debugging dlsw packet command to enable SSP packet debugging for
DLSw.
Use the undo debugging dlsw packet command to disable SSP packet debugging for
DLSw.
By default, SSP packet debugging for DLSw is disabled.
Table 4-1 Description on the fields of the debugging dlsw packet command
Field Description
The DLSw sends switch-to-switch protocol (SSP)
DLSW_PACKET 4.4.4.2
packets over the TCP connection to the remote peer
( TCP Output)
4.4.4.2.
DLSW_PACKET 4.4.4.2 The DLSw receives SSP packets over the TCP
( TCP Input) connection from the remote peer 4.4.4.2.
DLSW_PACKET 4.4.4.2 The DLSw sends SSP packets through UDP to the
( UDP Output) remote peer 4.4.4.2.
DLSW_PACKET 4.4.4.2 The DLSw receives SSP packets through UDP from
( UDP Input) the remote peer 4.4.4.2.
Packet contents. The first eight characters in each line

04ac1bd9 31 48 00 00 07 define the initial memory address, and the rest
00 03 5d 82 d9 63 84 00 characters are packet contents.
00 03 00
Each line provides 16 packet content items.
Example
# Enable SSP packet debugging for DLSw.

<H3C> debugging dlsw packet
4-4
*0.678357 3C5012A DLSW/8/CIR:

DLSW_PACKET 4.4.4.2 ( TCP Output)
*0.678358 3C5012A DLSW/8/CIR:
04ac1bd9 31 48 00 00 07 00 03 5d 82 d9 63 84 00 00 03 00
04ac1be9 42 01 00 00 88 00 00 03 00 20 35 7b e0 65 00 00
04ac1bf9 17 22 34 35 04 04 01 00 00 00 00 00 00 00 03 82
04ac1c09 00 b7 00 04 00 00 00 00 82 d9 63 84 07 00 03 5d
04ac1c19 82 79 93 3c 00 00 00 00
*0.678372 3C5012A DLSW/8/CIR:

DLSW_PACKET 4.4.4.2 ( TCP Input)
*0.678373 3C5012A DLSW/8/CIR:
04ae1ba3 31 48 00 00 00 b7 00 04 00 00 03 82 04 04 04 80
04ae1bb3 42 01 00 00 08 00 00 04 00 20 35 7b e0 65 00 00
04ae1bc3 17 22 34 35 04 04 02 00 00 00 00 00 00 00 03 82
04ae1bd3 00 b7 00 04 00 00 00 00 82 d9 63 84 3f 00 03 5e
04ae1be3 82 79 93 3c 40 40 00 00
4.1.6 debugging llc2
Syntax
debugging llc2 circuit [ correlator ]

undo debugging llc2 circuit [ correlator ]
View
User view
Parameter
correlator: Distinguishes different IDs of the circuits.
Description
Use the debugging llc2 command to enable the LLC2 debugging.

Use the undo debugging llc2 command to disable the LLC2 debugging.
Example
# Enable LLC2 debugging.

<H3C> debugging llc2 circuit
4-5
4.1.7 debugging llc2 packet
Syntax
debugging llc2 packet

undo debugging llc2 packet
View
User view
Parameter
None
Description
Use the debugging llc2 packet command to enable U frame debugging for LLC2.
Use the undo debugging llc2 packet command to disable U frame debugging for the
LLC2.
By default, U frame debugging is disabled for the LLC2.
Table 4-2 Description on the fields of the debugging dlsw packet command
Field Description
LLC2_PACKET Ethernet1/0/0 The LLC2 sends U frames to the Ethernet1/0/0
(Output) U frame interface.
LLC2_PACKET Ethernet1/0/0 LLC2 module receives U frames from the
(Input) U frame Ethernet1/0/0 interface.
Packet contents. The first eight characters in each

04adc17a 00 00 e8 44 2c ac 00 line define the initial memory address, and the
04 ac de 07 a6 00 03 04 04 rest characters are packet contents.
Each line contains 16 packet content items.
Example
# Enable U frame debugging for the LLC2.

<H3C> debugging llc2 packet
*0.379685 3C5012A LLC2/8/debug:
LLC2_PACKET Ethernet1/0 (Output) U frame
*0.379685 3C5012A LLC2/8/debug:
04adc17a 00 00 e8 44 2c ac 00 04 ac de 07 a6 00 03 04 04
04adc18a bf
*0.379691 3C5012A LLC2/8/debug:

LLC2_PACKET Ethernet1/0 (Input) U frame
4-6
*0.379692 3C5012A LLC2/8/debug:

04ac55f0 00 04 ac de 07 a6 00 00 e8 44 2c ac 00 4d 04 05
04ac5600 bf 32 4a 05 60 00 02 00 00 00 bb d1 00 00 00 00
04ac5610 80 00 01 0b 71 00 04 09 00 00 00 00 07 00 0e 0b
04ac5620 f4 c1 d7 d7 d5 4b e2 d5 c1 f0 f2 10 1e 00 1d 11
04ac5630 0c 08 04 f0 f5 f0 f1 f0 f1 09 06 e6 c1 d5 e6 c1
04ac5640 d9 c5 09 08 e4 e2 c5 d9 f0 40 40
4.1.8 debugging sdlc
Syntax
debugging sdlc [ all | event | packet ]

undo debugging sdlc { all | event | packet }
View
User view
Parameter
all: Enables all SDLC debugging.

event: Enables the SDLC event debugging.
packet: Enables the SDLC packet debugging.
Description
Use the debugging sdlc command to enable the SDLC debugging.

Use the undo debugging sdlc command to disable the SDLC debugging.
Example
# Enable SDLC event debugging.

<H3C> debugging sdlc event
4.1.9 display dlsw bridge-entry
Syntax
display dlsw bridge-entry interface-type interface-number
View
Any view
Parameter
4-7
Description
Use the display dlsw bridge-entry command to view the bridge-set information.
Example
# Display the bridge group information.

<H3C> display dlsw bridge-entry
Mac_entry Port group hashIndex
0000.e81c.b6bf Ethernet0/0/0 1 79
4.1.10 display dlsw circuits
Syntax
display dlsw circuits [ circuit-id ] [ verbose ]
View
Any view
Parameter
circuit-id: Displays the virtual circuit number of the specified DLSw.

verbose: Displays the detail information of the virtual circuits.
Description
Use the display dlsw circuits command to view the DLSw virtual circuits.
The output information of the command helps the user understand the information
regarding DLSw virtual circuits.
Example
# Display the general information of the virtual circuits.

<H3C> display dlsw circuits
circuit-Id port local-MAC remote-MAC state lifetime
00a2000a 04 0000.1738.6dfd 0000.1722.3435 CONNECTED
10:02:23
Table 4-3 Description on the fields of the display dlsw circuits command
Field Description
circuit-Id Distinguishes circuits.
Local MAC address, with the “lsap” being the last SAP
local-MAC
used by the local peer.
Remote MAC address, with the “rsap” being the last SAP
remote-MAC
used by the remote peer.
4-8
Field Description
State Link state
lifetime Duration of the connection
4.1.11 display dlsw information
Syntax
display dlsw information [ local ] [ ip-address ]
View
Any view
Parameter
local: Displays the local exchange capability information.

ip-address: Displays the exchange capability information of specified IP address.
Description
Use the display dlsw information command to view the DLSw exchange capability
information. The output information of the command facilitates the user to understand
the status of the DLSw virtual circuit and perform fault diagnosis.
Example
# Display the general information of exchange capability.

<H3C> display dlsw information
DLSw: Capabilities for peer 14.0.0.1
Vendor ID (OUI): 00000c
Version number: 01
Release number: 00
Init Pacing Window: 40
Num of TCP sessions: 01
Mac address exclusive: no
NetBIOS Name exclusive: no
Mac address List: none
NetBIOS Name List: none
Configured IP address: 14.0.0.1
Version string:
Comware Software, Version 3.40, Release RT-0106(L002)
Copyright (c) 2004-2006 Hangzhou Huawei-3Com Tech. Co., Ltd. All rights
reserved.
4-9
Table 4-4 Description on the fields of the display dlsw information command
Field Description
Version number RFC 1795
Release number Release version of RFC 1795
Init Pacing Window Size of the initiated window
Num of TCP sessions Number of TCP sessions
Mac address exclusive Reachable MAC address registered in the router
NetBIOS Name exclusive Reachable NetBIOS address registered in the router
Mac address List Reachable MAC address list
NetBIOS Name List Reachable NetBIOS address
Configured IP address Local IP address
Version string Version of Huawei-3Com router operation system
# Display the local exchange capability information.

<H3C> display dlsw information local
Vendor ID (OUI): '00e0fc' (H3C)
Version number: 1
Release number: 0
Mac address exclusive: no
NetBIOS Name exclusive: no
Mac address List: none
NetBIOS Name List: none
Configured IP address: 12.0.0.1
Version string:
Comware Software, Version 3.40, Release RT-0106(L002)
Copyright (c) 2004-2006 Hangzhou Huawei-3Com Tech. Co., Ltd. All rights
reserved.
4.1.12 display dlsw remote
Syntax
display dlsw remote [ ip-address ]
View
Any view
4-10
Parameter
ip-address: Displays the information of the remote peer with specified IP address.
Description
Use the display dlsw remote command to view the information of the remote peers.
The output information helps the user to understand the connection state between the
DLSw and the remote peers.
Example
# Display information about all remote DLSw1.0 peers.

<H3C> display dlsw remote
IP address frame-in frame-out frame-dop state life-time
* 3.1.1.1 0 0 0 DISCONNECT 00:00:00
Table 4-5 Description on the fields of the display dlsw remote command
Field Description
Indicates that the peer can set up connection. If no asterisk sign is
*
placed before TCP, the peer is an inactive standby peer.
IP address IP address of the peer.
frame-in Packets received by the peer.

frame-out Packets sent by the peer.
frame-drop Packets dropped by the peer.
State State of the peer.

life-time Duration of the connection.
4.1.13 display dlsw reachable-cache
Syntax
display dlsw reachable-cache
View
Any view
Parameter
None
4-11
Description
Use the display dlsw reachable-cache command to view the reachable-cache of

DLSw.
Example
# Display the reachable-cache of DLSw.

[H3C] display dlsw reachable-cache
LOCAL MAC addresses in cache
--------------------------------------------------------------------
MAC address Status Interface Remain time
REMOTE MAC addresses in cache

--------------------------------------------------------------------
MAC address Status Peer Remain time
0102.2103.5641 FOUND 2.2.2.2 15
4.1.14 display llc2
Syntax
display llc2 [ circuit correlator ]
View
Any view
Parameter
correlator: ID used to distinguish different circuits.
Description
Use the display llc2 command to view statistical information of LLC2.
Example
# Display the statistical information of LLC2

<H3C> display llc2 circuit 46465025
llc2 circuit index 46465025
Local MAC 0.20.35.7b.e0.65
Remote MAC 0. 0.84.25.1e.e9
Local Sap 4
Remote Sap 4
Role secondary
State : NORMAL
4-12
4.1.15 dlsw bridge-set
Syntax
dlsw bridge-set bridge-set-number

undo dlsw bridge-set bridge-set-number
View
System view
Parameter
bridge-set-number: ID of bridge group, ranging from 1 to 63, local valid.
Description
Use the dlsw bridge-set command to configure the bridge group to connect DLSw.
Use the undo dlsw bridge-set command to delete the bridge.
In order to forward packets of specified bridge group to the remote end through the TCP
connection, a local bridge group needs to be connected with DLSw by using this
command, that is, packets of the local bridge group can be sent to the remote end
through the TCP tunnel. This command can be used many times to connect many
bridge groups with DLSw, and make them all capable of joining the forwarding through
the TCP tunnel.
Example
# Configure the bridge group connected with DLSw, with the ID of the bridge group
being 20.
[H3C] dlsw bridge-set 20
4.1.16 dlsw enable
Syntax
dlsw enable
undo dlsw enable
View
System view
Parameter
None
Description
Use the dlsw enable command to enable DLSw performance.
4-13
Use the undo dlsw enable command to suspend DLSw performance.

By default, DLSw performance is enabled.
After this command is performed, the system will release all dynamic resources, but
retain the original configuration.
Example
# Suspend DLSw performance.

[H3C] undo dlsw enable
# Enable DLSw performance.

[H3C] dlsw enable
4.1.17 dlsw local
Syntax
dlsw local ip-address [ init-window init-window-size ] [ keepalive keepalive-interval ]

[ max-frame max-frame-size ] [ max-window max-window-size ] [ permit-dynamic ]
[ vendor-id vendor-id ]
undo dlsw local ip-address [ init-window ] [ keepalive ] [ max-frame ]
[ max-window ] [ permit-dynamic ] [ vendor-id vendor-id ]
View
System view
Parameter
ip-address: IP address of the created local peer.

init-window-size: Size of the initialized local response window, in the range 1 to 2000
frames. It defaults to 40 frames.
keepalive-interval: Time interval for sending the “keepalive”, in the range 0 to 1200
seconds. It defaults to 30 seconds.
max-frame-size: Maximum length of the packet, which can be 516, 1470, 1500, 2052,
4472, 8144, 11407, 11454, or 17800 bytes. It defaults to 1500 bytes.
max-window-size: Size of the maximum local response window, ranging from 1 to 2000
frames. It defaults to 50 frames.
permit-dynamic: Permits unpreconfigured remote router to initiate connections and
dynamically create peers. The remote peer is unnecessarily be configured on the local
end using this parameter, and the local peer waits for the connection initiated by the
remote peer.
vendor-id: DLSw vendor identifier, in the range 00.00.00~ff.ff.ff. It defaults to 00.e0.fc.
4-14
Description
Use the dlsw local command to create the DLSw local peer.
Use the undo dlsw local command to delete the local peer or restore the default.
Creating a TCP tunnel is the first step for establishing the DLSw connection. In order to
create the TCP tunnel, the DLSw local peer is to be first configured to specify the local
IP address that creates the TCP connection before receiving the TCP connection
request initiated by the remote router. A router can only have one local peer.
Example
# Create the DLSw local peer, with the IP address being 1.1.1.1, the size of the local
response window being 50, time interval for sending the “keepalive” being 40 seconds,
both the maximum length of the packet max-frame-size and the size of the maximum
local response window being the default value.
[H3C] dlsw local 1.1.1.1 init-window 50 keepalive 40
4.1.18 dlsw reachable
Syntax
dlsw reachable { mac-address mac-address [ mask mask ] | mac-exclusivity | saps

saps-values [ saps-values … ] }
undo dlsw reachable { mac-address mac-address | mac-exclusivity | saps
saps-values [ saps-values … ] }
View
System view
Parameter
mac-address mac-address: Locally reachable MAC address on the router.

mask mask: MAC address mask, functioning similar to a subnet mask.
mac-exclusivity: Allows the router to access the configured MAC address only.
saps saps-values: Locally reachable SAP address on the router, in the range 0 to FF.
Description
Use the dlsw reachable command to configure locally reachable MAC and SAP
addresses.
Use the undo dlsw enable command to cancel the configuration.
After you configure the dlsw reachable command, the router sends a packet to all the
connected routers, notifying of the locally reachable MAC or SAP address. Based on
4-15
the information, these routers can decide whether to send packets to this router without
exploring.
Note that you must change the configuration in time to accommodate to changes on the
local network.
Example
# Allow the router to access the MAC addresses beginning with 1212.
[H3C] dlsw reachable mac-address 1212-1212-1212 mask ffff-0000-0000
# Allow the router to access SAP addresses 12 and 14.

[H3C] dlsw reachable saps 12 14
# Restrict the router to access only the configured MAC addresses.

[H3C] dlsw reachable mac-exclusivity
4.1.19 dlsw reachable-cache
Syntax
dlsw reachable-cache mac-address remote ip-address

undo dlsw reachable-cache mac-address remote ip-address
View
System view
Parameter
mac-address: MAC address of the SNA device connected to the peer router.
ip-address: IP address of the peer router.
Description
Use the dlsw reachable-cache command to add the reachability information of the
specified SNA device to the reachable-cache. You can specify this SNA device by
specifying its MAC address and IP address of the router to which it is connected.
Use the undo dlsw reachable-cache command to remove the configured reachability
information.
This configuration allows the router to send packets without exploring. If the remote
network is prone to changes however, this configuration is unreliable.
Example
# Add a reachability entry to the reachable-cache, where the remote IP address is

10.12.13.10 and the MAC address of the connected SNA device is 0102-2103-5641.
[H3C] dlsw reachable-cache 0102-2103-5641 remote 10.12.13.10
4-16
4.1.20 dlsw remote
Syntax
dlsw remote ip-address [acl acl-number | backup backup-address | priority priority |

keepalive keepalive-interval | max-frame max-frame-size | max-queue
max-queue-length | linger minutes ] *
undo dlsw remote ip-address
View
System view
Parameter
ip-address: Specifies the IP address of the remote peer.

acl acl-number: Number of ACL, ranging from 4000 to 4999.
backup backup-address: the backup IP address of the remote peer.
priority priority: Transmission priority, ranging from 1 to 5. The default transmission
priority is 3.
keepalive keepalive-interval: Time interval for sending the “keepalive” packet, ranging
from 0 to 1200 seconds. The default keepalive interval is 30 seconds.
max-frame max-frame-size: Maximum length of packets, which can be 516, 1470,
1500, 2052, 4472, 8144, 11,407, 11,454, or 17,800 bytes. The default maximum length
of packets is 1500 bytes.
max-queue max-queue-length: Size of the TCP sending/receiving queue, ranging from
50 to 2000. The default maximum queue length is 200.
linger minutes: Linger time of the backup connection after the primary peer being
disconnected, ranging from 0 to 1440 minutes. The default linger time is 5 minutes.
Description
Use the dlsw remote command to create the DLSw remote peer.
Use the undo dlsw remote command to delete the remote peer.
After the local peer is configured, the remote peer needs to be configured to create the
TCP tunnel. The router will keep attempting to create the TCP connection with the
remote router. A router can be configured with several remote peers so as to create the
TCP tunnel with several remote routers.
When creating a remote backup peer, note the following:
1) In order to create a remote backup peer at the backup-address argument, the
ip-address argument should be the IP address of the backup peer, and the
backup-peer backup-address should be the IP address of the remote primary
peer with the TCP connection already being created. In other words, before
4-17
creating the remote backup peer connection, the user should ensure that the local
end has created the TCP connection with a remote primary peer. If the peer end
backup peer is created the same time the remote peer being first created, the
system will prompt the following information:
Primary peer ip address does not exist
This prompt indicates that the user should first create a remote primary peer before
creating the backup peer.
2) If the backup link still exists after the TCP connection of the primary link is
interrupted, the TCP link can be retained (use the display dlsw remote command
and a TCP connection can be found still exist) till the backup link linger minutes is
also timeout.
Example
# Create the DLSw remote peer, with the IP address being 2.2.2.2, the transmission
cost being 2, the time interval for sending the “keepalive” being 40 seconds, the
maximum length lf-size of the packet being the default value, and the size of the TCP
sending/receiving queue being 300.
[H3C] dlsw remote 2.2.2.2 priority 2 keepalive 40 max-queue 300
4.1.21 dlsw timer
Syntax
dlsw timer { connected | explorer-wait | local-pending | remote-pending | cache |

explorer } seconds
undo dlsw timer { connected | explorer-wait | local-pending | remote-pending |
cache | explorer }
View
System view
Parameter
connected seconds: The holding time of a connection, ranging from 1 second to 65535
explorer-wait seconds: The waiting time of local explorer frames, ranging from 1
second to 65535 seconds. The default value is 30 seconds.
local-pending seconds: The local pending time, ranging from 1 second to 65535
remote-pending seconds: The remote pending time, ranging from 1 second to 65535
4-18
cache seconds: Address saving time in SNA cache, ranging from 1 second to 65535
explorer seconds: The waiting time of remote explorer frames, ranging from 1 second
to 65535 seconds. The default value is 30 seconds.
Description
Use the dlsw timer command to configure the DLSw timer parameters.
Use the undo dlsw timer command to restore the default value of the DLSw timer
parameters.
By configuring the DLSw timer, the various kinds of timers used for the DLSw to create
the virtual circuit can be revised. But the user is suggested not to revise the DLSw timer
parameters randomly.
Example
# Configure the DLSw timer parameters, with the connected timeout being 200
seconds, the waiting timeout of the local explorer frame being 15 seconds, the local
waiting timeout being 15 seconds, the remote peer waiting timeout being 25 seconds,
the SNA cache address timeout being the default value and the waiting timeout of the
remote explorer frame being the default value.
[H3C] dlsw timer connected 20
[H3C] dlsw timer explorer-wait 15
[H3C] dlsw timer local-pending 15
[H3C] dlsw timer remote-pending 25
4.1.22 idle-mark
Syntax
idle-mark
undo idle-mark
View
Parameter
None
Description
Use the idle-mark command to configure the idle coding scheme of the synchronous
serial port.
Use the undo idle-mark command to restore the default idle coding scheme of the
synchronous serial port.
4-19
By default, the synchronous serial port adopts the “7E” coding scheme.
H3C series routers encapsulate “7E” in the packets to identify the free time of the SDLC
serial interface, but some SDLC devices adopt full “1” high level instead. In order to be
better compatible to this kind devices, the idle coding scheme of the router needs to be
changed.
Sometimes when connecting with the AS/400, this command needs to be configured to
change the idle coding scheme and accelerate the AS/400 polling speed.
Example
# Configure the idle coding scheme of the synchronous serial port on the Serial1/0/0 as
idle-mark.
[H3C-Serial1/0/0] idle-mark
4.1.23 link-protocol sdlc
Syntax
link-protocol sdlc
View
Parameter
None
Description
Use the link-protocol sdlc command to change the link layer encapsulation protocol
of the synchronous serial interface into SDLC.
By default, the encapsulated link layer protocol of the synchronous serial interface is
PPP.
The SDLC is a kind of link layer protocol relative to the SNA, with working principal
similar to that of the HDLC. In order for the DLSw to work normally, the link layer
encapsulation protocol of the synchronous serial interface should be changed into
SDLC.
Note all the IP related commands on the interface should be removed before
encapsulating the SDLC, as the SDLC link protocol cannot be used to carry the IP
protocol, for example, to delete the IP address on the interface, etc.
Example
# Configure the encapsulation protocol on the Serial1/0/0 as SDLC.

[H3C-Serial1/0/0] link-protocol sdlc
4-20
4.1.24 llc2 max-ack
Syntax
llc2 max-ack length

undo llc2 max-ack
View
Parameter
length: Length of the LLC2 advanced response window, ranging from 1 to 127.
Description
Use the llc2 max-ack command to configure the length of the advance response
window before the LLC2 sending the acknowledgement frame.
Use the undo llc2 max-ack command to restore the default length of the advance
response window before the LLC2 sending the acknowledgement frame.
By default, the length of the LLC2 advance response window is 3.
The LLC2 advance response window refers to the maximum receivable information
frames before sending the acknowledgement frame, that is, to send the response
packet in advance on receiving the packet n.
Example
# Configure the length of the advanced response window before the LLC2 sends the
acknowledgement frame as 5.
[H3C-Ethernet1/0/0] llc2 max-ack 5
4.1.25 llc2 max-send-queue
Syntax
llc2 max-send-queue length

undo llc2 max-send-queue
View
Parameter
length: The queue length sending the LLC2 packet, ranging from 20 to 200.
4-21
Description
Use the llc2 max-send-queue command to configure the queue length sending the
LLC2 packet.
Use the undo llc2 max-send-queue command to restore the default queue length
sending the LLC2 packet.
By default, the queue length sending the LLC2 packet is 50.
Example
# Configure the queue length sending the LLC2 packet as 30.

[H3C-Ethernet1/0/0] llc2 max-send-queue 30
4.1.26 llc2 max-transmission
Syntax
llc2 max-transmission retries

undo llc2 max-transmission
View
Parameter
retries: LLC2 retransmission times, ranging form 1 to 255.
Description
Use the llc2 max-transmission command to configure the retransmission times of the
LLC2.
Use the undo llc2 max-transmission command to restore the default retransmission
times of the LLC2.
By default, the number of the transmission retries of the LLC2 is 3.
The LLC2 retransmission times refers to the times of resending information frames
before the acknowledgement frame is received from the peer end.
Example
# Set the number of transmission retries of the LLC2 to 10.

[H3C-Ethernet1/0/0] llc2 max-transmission 10
4.1.27 llc2 modulo
Syntax
llc2 modulo n
4-22
undo llc2 modulo
View
Parameter
n: The modulus of the LLC2, with the available values of 8 or 128.
Description
Use the llc2 modulo command to configure the modulus of the LLC2.
Use the undo llc2 modulo command to restore the default modulus of the LLC2.
By default, the modulus of the LLC2 is 128.
LLC2, like X25, adopts modulus mode to number information packets, and the modulus
of LLC2 is 8 or 128. Ethernet generally uses modulus 128.
Example
# Restore the default modulus of the LLC2.

[H3C-Ethernet1/0/0] undo llc2 modulo
4.1.28 llc2 receive-window
Syntax
llc2 receive-window length

undo llc2 receive-window
View
Parameter
length: Length of the local response window, ranging from 1 to 127.
Description
Use the llc2 receive-window command to configure the maximum packets that can be
sent before the LLC2 receives the acknowledgement frame.
Use the undo llc2 receive-window command to restore the default value of the
maximum packets that can be sent before the acknowledgement frame is received.
By default, the length of the LLC2 local response window is 7.
The LLC2 local response window refers to the maximum packets that can be sent
continuously before the acknowledgement frame is received.
4-23
Example
# Configure the maximum packets that can be sent before the LLC2 receives the
acknowledgement frame as 10.
[H3C-Ethernet1/0/0] llc2 receive-window 10
4.1.29 llc2 timer ack
Syntax
llc2 timer ack mseconds

undo llc2 timer ack
View
Parameter
mseconds: LLC2 local response time, ranging from 1 to 60000ms.
Description
Use the llc2 timer ack command to configure the LLC2 local response time.
Use the undo llc2 timer ack command to restore the default value of the LLC2 local
response time.
By default, the LLC2 local response time is 200ms.
The LLC2 local response time refers to the maximum waiting time for the response
from the peer end after an LLC2 data packet is sent.
Example
# Configure the LLC2 local response time as 10ms.

[H3C-Ethernet1/0/0] llc2 timer ack 10
4.1.30 llc2 timer ack-delay
Syntax
llc2 timer ack-delay mseconds

undo llc2 timer ack-delay
View
4-24
Parameter
mseconds: Local acknowledgement delay time on receiving the information frames,

ranging from 1 to 60000ms.
Description
Use the llc2 timer ack-delay command to configure the local acknowledgement delay
time when the LLC2 receives information frames.
Use the undo llc2 timer ack-delay command to restore the default value of the local
acknowledgement delay time when the LLC2 receives information frame.
By default, the LLC2 local acknowledgement delay time is 100ms.
The LLC2 local acknowledgement delay time refers to the maximum waiting time for
delayed acknowledgement on receiving an LLC2 data packet.
Example
# Configure the local acknowledgement delay time for received information frames as
200 milliseconds.
[H3C-Ethernet1/0/0] llc2 timer ack-delay 200
4.1.31 llc2 timer busy
Syntax
llc2 timer busy mseconds

undo llc2 timer busy
View
Parameter
mseconds: The LLC2 BUSY time, ranging from 1 to 60000ms.
Description
Use the llc2 timer busy command to configure the LLC2 BUSY time.
Use the undo llc2 timer busy command to restore the default value of the LLC2 BUSY
time.
By default, the LLC2 BUSY time is 300ms.
The LLC2 BUSY time refers to the waiting time before repolling a busy station.
Example
# Configure the LLC2 BUSY time as 200ms.
4-25
[H3C-Ethernet1/0/0] llc2 timer busy 200
4.1.32 llc2 timer poll
Syntax
llc2 timer poll mseconds

undo llc2 timer poll
View
Parameter
mseconds: LLC2 P/F waiting time, ranging from 1 to 60000ms.
Description
Use the llc2 timer poll command to configure the P/F waiting time of the LLC2.
Use the undo llc2 timer poll command to restore the default value of the LLC2 P/F
waiting time.
By default, the LLC2 P/F waiting time is 5000ms.
The LLC2 P/F waiting time refers to the time of waiting for the acknowledgement frame
after the frame P is sent.
Example
# Configure the LLC2 P/F waiting time as 2000ms.

[H3C-Ethernet1/0/0] llc2 timer poll 2000
4.1.33 llc2 timer reject
Syntax
llc2 timer reject mseconds

undo llc2 timer reject
View
Parameter
mseconds: The LLC2 REJ time, ranging from 1 to 60000ms.
Description
Use the llc2 timer reject command to configure the REJ time of the LLC2.
4-26
Use the undo llc2 timer reject command to restore the default value of the LLC2 REJ
time.
By default, the LLC2 REJ time is 500ms.
The LLC2 REJ time refers to the waiting time for the acknowledgement frame to come
after a deny frame is sent.
Example
# Configure the LLC2 REJ time as 2000ms.

[H3C-Ethernet1/0/0] llc2 timer reject 2000
4.1.34 reset dlsw bridge-entry
Syntax
reset dlsw bridge-entry
View
User view
Parameter
None
Description
Use the reset dlsw bridge-entry command to clear the entry cache information in the
DLSw bridge group.
Example
# Clear the entry cache information in the DLSw bridge group.

<H3C> reset dlsw bridge-entry
4.1.35 reset dlsw circuits
Syntax
reset dlsw circuits [ circuit-id ]
View
User view
Parameter
circuit-id: The virtual circuit ID of DLSw, in the range 0 to FFFFFFFF.
4-27
Description
Use the reset dlsw circuits command to clear the DLSw virtual circuit information.
Use this command with caution; it can disconnect circuits.
Example
# Clear the virtual circuit information with the virtual circuit number of 100.
<H3C> reset dlsw circuits 100
4.1.36 reset dlsw reachable-cache
Syntax
reset dlsw reachable-cache
View
User view
Parameter
None
Description
Use the reset dlsw reachable-cache command to clear information from the
reachable-cache of the DLSw.
Example
# Clear information from the reachable-cache of the DLSw.

<H3C> reset dlsw reachable-cache
4.1.37 sdlc controller
Syntax
sdlc controller sdlc-address

undo sdlc controller sdlc-address
View
Parameter
sdlc-address: The secondary station address of the SDLC.
4-28
Description
Use the sdlc controller command to configure the secondary station address of the
SDLC.
Use the undo sdlc controller command to delete the secondary station address of the
SDLC.
By default, the secondary station address of the SDLC is not configured.
The SDLC protocol permits several virtual circuits running on a single SDLC physical
link, with one end connected with the primary station and the other end connected with
the secondary station. In order to distinguish each virtual circuit, their SDLC addresses
need to be designated. Because the SDLC is in unbalanced mode, a primary device
can connects with several secondary devices through the medium of shared machine
or SDLC switch, while the secondary devices cannot be connected with each other.
And there can exist one and only primary device if any. In this sense, the SDLC devices
in the same group can be guaranteed to communicate with each other normally only if
the addresses of the secondary devices are specified. This command specifies the
SDLC address, which is unique on a physical interface, for the virtual circuit. The
configured SDLC address on synchronous serial interface is virtually the address of the
SDLC secondary station.
The SDLC address ranges from 0x01 to 0xFE. The SDLC address of a router is only
valid on one physical interface, that is, the SDLC addresses configured on different
interfaces can be same.
Example
# Configure the secondary station address of the SDLC on the Serial1/0/0 as 0x05.
[H3C-Serial1/0/0] sdlc controller 05
4.1.38 sdlc mac-map local
Syntax
sdlc mac-map local mac-address

undo sdlc mac-map local
View
Parameter
mac-address: The virtual MAC address of the SDLC.
4-29
Description
Use the sdlc mac-map local command to configure the virtual MAC address of the
SDLC.
Use the undo sdlc mac-map local command to delete the virtual MAC address of the
SDLC.
By default, the SDLC has no virtual MAC address.
Example
# Configure the virtual MAC address of the SDLC.

[H3C-Serial1/0/0] sdlc mac-map local 0000-e81c-b6bf
4.1.39 sdlc mac-map remote
Syntax
sdlc mac-map remote mac-addr sdlc-addr

undo sdlc mac-map remote mac-addr sdlc-addr
View
Parameter
mac-addr: The MAC address of the SDLC peer.

sdlc-addr: The SDLC address of the SDLC peer.
Description
Use the sdlc mac-map remote command to configure the SDLC peer.
Use the undo sdlc mac-map remote command to delete the SDLC peer.
By default, the synchronous serial interface has no peer.
This command is used to specify the MAC address of a peer end for an SDLC virtual
circuit so as to provide the destination MAC address on the transformation from the
SDLC to the LLC2. When configuring the DLSw, an SDLC address should be
configured a related partner (peer). The MAC address of the partner (peer) should be
the MAC address of the remote SNA device (physical addresses of such devices as the
Ethernet and the Token-Ring), or the MAC address of the peer end compounded by the
SDLC.
Example
# Configure the SDLC peer.

[H3C-Serial1/0/0] sdlc mac-map remote 00E0-FC00-0010 0x05
4-30
4.1.40 sdlc max-pdu
Syntax
sdlc max-pdu n
undo sdlc max-pdu
View
Parameter
n: The maximum receivable frame length of the SDLC, ranging from 1 to 17600 bytes.
Description
Use the sdlc max-pdu command to configure the maximum receivable frame length of
the SDLC.
Use the undo sdlc max-pdu command to restore the default value of the SDLC
maximum receivable frame length.
By default, the maximum receivable frame length of the SDLC is of 265 bytes.
The SDLC maximum frame length refers to the bytes of the largest packet that can be
received and sent, excluding the parity bit and the start/stop bit.
The maximum receivable frame length of some PU2.0 devices is of 265 bytes, and that
of IBM AS/400 is generally of 521 bytes. Usually we need to configure it the same value
as the connected SDLC device.
Example
# Configure the maximum receivable frame length of the SDLC as 512.

[H3C-Serial1/0/0] sdlc max-pdu 521
4.1.41 sdlc max-send-queue
Syntax
sdlc max-send-queue length

undo sdlc max-send-queue
View
Parameter
length: The queue length sending the SDLC packet, ranging from 20 to 255.
4-31
Description
Use the sdlc max-send-queue command to configure the queue length sending the
SDLC packet.
Use the undo sdlc max-send-queue command to restore the default value of the
queue length sending the SDLC packet.
By default, the queue length sending the SDLC packet is 50.
Example
# Configure the queue length sending the SDLC packet on the Serial1/0/0 as 30.
[H3C-Serial1/0/0] sdlc max-send-queue 30
4.1.42 sdlc max-transmission
Syntax
sdlc max-transmission retries

undo sdlc max-transmission
View
Parameter
retries: The SDLC timeout retransmission times, ranging from 1 to 255 times.
Description
Use the sdlc max-transmission command to configure the SDLC timeout

retransmission times.
Use the undo sdlc max-transmission command to restore the default value of the
SDLC timeout retransmission times.
By default, the SDLC timeout retransmission times are 20.
The SDLC timeout retransmission times (N2) refers to the retransmission times before
receiving the acknowledgement packet from the peer end.
Example
# Configure the SDLC timeout retransmission times as 30.

[H3C-Serial1/0/0] sdlc max-transmission 30
4.1.43 sdlc modulo
Syntax
sdlc modulo n
4-32
undo sdlc modulo
View
Parameter
n: SDLC modulus, with available value of 8 or 128.
Description
Use the sdlc modulo command to configure the modulus of the SDLC.
Use the undo sdlc modulo command to restore the default modulus of the SDLC.
By default, the SDLC modulus is 8.
SDLC, like X25, adopts modulus mode to number information packets, and the
modulus of SDLC is 8 or 128. Generally modulus 8 is selected.
Example
# Restore the default modulus of the SDLC.

[H3C-Serial1/0/0] undo sdlc modulo
4.1.44 sdlc sap-map local
Syntax
sdlc sap-map local lsap sdlc-addr

undo sdlc sap-map local lsap sdlc-addr
View
Parameter
lsap: The virtual SAP address set by the device connected with the local interface.
sdlc-addr: The SDLC address.
Description
Use the sdlc sap-map local command to configure the SAP address on transforming
the SDLC into the LLC2.
Use the undo sdlc sap-map local command to restore the default value of the LLC2
SAP address.
By default, lsap is 04.
When the SDLC packet is translated into the LLC2 packet, the SAP address is needed
besides the MAC address.
4-33
Generally speaking, the SAP address of the SNA protocol is 0x04 or 0x08 or 0x0C.
For related configuration, please see the sdlc sap-map remote command.
Example
# Configure the SAP address on translating the SDLC into the LLC2.
[H3C-Serial1/0/0] sdlc sap-map local 08 05
4.1.45 sdlc sap-map remote
Syntax
sdlc sap-map remote dsap sdlc-addr

undo sdlc sap-map remote dsap sdlc-addr
View
Parameter
dsap: The SAP address of the DLSw peer device. By default, dsap is 04.
sdlc-addr: The SDLC address.
Description
Use the sdlc sap-map remote command to configure the remote DLSw device SAP
address when SDLC is translated into LLC2.
Use the undo sdlc sap-map remote command to restore the default value.
When the SDLC packet is translated into the LLC2 packet, the SAP address is needed
besides the MAC address.
Generally speaking, the SAP address of the SNA protocol is 0x04 or 0x08 or 0x0C.
For related configuration, please see sdlc sap-map local.
Example
# Configure the remote DLSw device SAP address when SDLC is translated into LLC2.
[H3C-Serial1/0/0] sdlc sap-map remote 0C 05
4.1.46 sdlc simultaneous
Syntax
sdlc simultaneous
undo sdlc simultaneous
4-34
View
Parameter
None
Description
Use the sdlc simultaneous command to configure the SDLC data to use the
bidirectional transmission mode.
Use the undo sdlc simultaneous command to stop the SDLC data to use the
bidirectional transmission mode.
By default, the SDLC data are transmitted in bidirectional mode.
This command configures the synchronous serial interface to work in bidirectional data
simultaneous transmission mode. That is, the SDLC primary station can send data to
the secondary station and receive data at the same time.
Example
# Configure the SDLC data to use the bidirectional transmission mode.

[H3C-Serial1/0/0] sdlc simultaneous
4.1.47 sdlc status
Syntax
sdlc status { primary | secondary }

undo sdlc status
View
Parameter
primary: The primary station of the end, controlling the whole connection process.
secondary: The secondary station of the end, controlled by the primary station.
Description
Use the sdlc role command to configure the SDLC role the device acts.
Use the undo sdlc role command to restore the default SDLC role.
By default, the device has no role.
The SDLC is a kind of link layer protocol in unbalanced mode. That is, the statuses of
the devices on the two connected ends are unequal: one is primary and the other is
4-35
secondary. The primary side, being the primary station, whose role is primary, plays
the dominant role and controls the whole connection process. While the other side,
being the secondary station, whose role is secondary, receives control passively.
Therefore, the user needs to configure the role for the interface encapsulated with
SDLC protocol. On the SDLC role configuration, the roles should be decided by the
status of the SDLC device connected with the local router. If the SDLC device
connected with the local interface is primary, the local interface is to be set secondary,
and vice versa.
In general, the central IBM mainframe is primary, whereas terminal devices, including
UNIX hosts and ATM, are secondary.
Example
# Configure the SDLC device connected with the Serial1/0/0 as primary, and the local
interface as secondary.
[H3C-Serial1/0/0] sdlc role secondary
4.1.48 sdlc timer ack
Syntax
sdlc timer ack mseconds

undo sdlc timer ack
View
Parameter
mseconds: The SDLC primary station response waiting time, ranging from 1 to
60000ms.
Description
Use the sdlc timer ack command to configure the SDLC primary station response
waiting time (mseconds).
Use the undo sdlc timer ack command to restore the default value of the SDLC
primary station response waiting time.
By default, the configured SDLC primary station response waiting time is 3000ms.
The primary station response waiting time (mseconds) refers to the waiting time for the
response from the secondary station after the primary station sends information
frames.
4-36
Example
# Configure the SDLC primary station response waiting time (mseconds) as 2000ms.
[H3C-Serial1/0/0] sdlc timer ack 2000
4.1.49 sdlc timer lifetime
Syntax
sdlc timer lifetime mseconds

undo sdlc timer lifetime
View
Parameter
mseconds: The SDLC secondary station response waiting time, ranging from 1 to
60000ms.
Description
Use the sdlc timer lifetime command to configure the SDLC secondary station
response waiting time (mseconds).
Use the undo sdlc timer lifetime command to restore the default value of the SDLC
secondary station response waiting time.
By default, the SDLC secondary station response waiting time (mseconds) is 500ms.
The secondary station response waiting time (mseconds) refers to the waiting time for
the response from the primary station after the secondary station sends information
frames.
Example
# Configure the SDLC secondary station response waiting time (mseconds) as

1000ms.
[H3C-Serial1/0/0] sdlc timer lifetime 1000
4.1.50 sdlc timer poll
Syntax
sdlc timer poll mseconds

undo sdlc timer poll
View
4-37
Parameter
mseconds: SDLC poll pause timer, ranging from 1 to 10000ms.
Description
Use the sdlc timer poll command to configure the SDLC poll pause timer.
Use the undo sdlc timer poll command to restore the default value of the SDLC poll
pause timer.
By default, the SDLC poll pause timer is 1000ms.
The SDLC poll pause timer refers to the waiting interval between the two SDLC nodes
polled by the SDLC primary station.
Example
# Configure the SDLC poll pause timer as 200ms.

[H3C-Serial1/0/0] sdlc timer poll 200
4.1.51 sdlc window
Syntax
sdlc window length

undo sdlc window
View
Parameter
length: Length of the SDLC local response window, ranging from 1 to 7.
Description
Use the sdlc window command to configure the length of the SDLC local response
window.
Use the undo sdlc window command to restore the default length of the SDLC local
response window.
By default, the default length of the SDLC local response window is 7.
The SDLC local response window refers to the maximum packets number that can be
sent continuously without waiting for the response from the peer end.
Example
# Configure the length of the SDLC local response window on the Serial1/0/0 as 5.
[H3C-Serial1/0/0] sdlc window 5
4-38
4.1.52 sdlc xid
Syntax
sdlc xid sdlc-address xid-number

undo sdlc xid sdlc-address
View
Parameter
sdlc-address: The SDLC address of the XID, which should be configured beforehand.
xid-number: An integer with a length of 4 bytes, ranging from 1 to 0xFFFFFFFF. The
first 12 bits are network numbers, and the last 20 bytes are node numbers.
Description
Use the sdlc xid command to configure the XID of the SDLC.
Use the undo sdlc xid command to delete the XID of the SDLC.
By default, the synchronous serial interface has no XID of the SDLC.
The XID is the ID of a device in the SNA world. Generally speaking, there are two kinds
of devices: PU2.0 and PU2.1. The XID has been automatically configured on the PU2.1
devices and they can announce their IDs by exchanging the XID. The PU2.0 devices
did not exchange the ID, so they can not get ID automatically. Therefore, this command
needs not to be configured on PU2.1 typed devices, whereas it is needed to specify an
XID for PU2.0 typed devices.
Example
# Configure the XID of the SDLC, in which the xid-number is 0x2000.

[H3C-Serial1/0/0] sdlc xid 05 2000
4.2 DLSw2.0 Configuration Commands
Note:
This section does not cover all commands supported by DLSw2.0 but those
DLSw2.0-specific commands.
4-39
4.2.1 debugging dlsw filter
Syntax
debugging dlsw filter

undo debugging dlsw filter
View
User view
Parameter
None
Description
Use the debugging dlsw filter command to enable debugging for DLSw filtering.
Use the undo debugging dlsw filter command to disable debugging for DLSw
filtering.
After you enable debugging for DLSw filtering, the system will display information about
all packets that are filtered out.
Example
# Enable debugging for DLSw filtering.

<H3C> debugging dlsw filter
DLSw filter : The packet was discarded by ACL 4000 because of rule 2
Packet Len = 110, the head of the packet as follows:
FF FF FF FF FF FF 00 0F 3D 80 42 F8 08 00 45 00
Table 4-6 Description on the fields of the debugging dlsw filter command
Field Description
ACL 4000 Number of the ACL used for filtering
rule 2 Number of the ACL rule by which the packet is denied
Not found Discarded because no match is found in the ACL
Packet Len = 110 Length of the discarded packet
FF FF….. Header of the discarded packet
4.2.2 debugging dlsw udp
Syntax
debugging dlsw udp
4-40
undo debugging dlsw udp
View
User view
Parameter
None
Description
Use the debugging dlsw udp command to enable UDP packet debugging for DLSw.
Use the undo debugging dlsw udp command to disable UDP packet debugging for
DLSw.
Example
# Enable UDP packet debugging for DLSw2.0.

<H3C> debugging dlsw udp
Table 4-7 Description on the fields of the debugging dlsw udp command
Field Description
DLSw_UDP: Failed to create udp socket Failed to create a UDP socket.
DLSw_UDP: Failed to bind udp socket Failed to bind the UDP socket.
DLSw_UDP: Failed to specify udp Failed to set attributes for the UDP
socket options socket.
DLSW_UDP: Failed to specify Failed to set the ADD_MEMBERSHIP
‘ADD_MEMBERSHIP' socket option attribute for the UDP socket.
DLSW_UDP: Failed to specify Failed to set the IP_MULTICAST_TTL
‘IP_MULTICAST_TTL' socket option attribute for the UDP socket.
DLSW_UDP: Failed to specify Failed to set the ADD_MEMBERSHIP
‘IP_MULTICAST_IF' socket option attribute for the UDP socket.
Failed to set the input/output attribute for
DLSw_UDP: Failed to specify ioctl for
the 2067 port on the local peer
port 2067 of local peer 192.168.10.1
192.168.10.1.
DLSW_UDP: Failed to create Error occurred when creating a
CANUREACH_ex packet CANUREACH_ex packet.
DLSW_UDP: Remote The sending queue of the remote peer
peer(192.168.10.20)'s sending queue is 192.168.10.20 is full, and no packet can
full be sent.
DLSW_UDP: Local The sending queue of the local peer
peer(192.168.10.1)'s sending queue is 192.168.10.1 is full, and no packet can
full be sent.
DLSW_UDP: Send UDP to remote peer Unicasted a UDP packet to the remote
192.168.10.20 peer (192.168.10.20).
4-41
Field Description
DLSW_UDP: Remote peer's status is The remote peer is in a wrong
wrong connection state.
DLSW_UDP: The sending packet is The packet that needs sending is
wrong illegitimate.
DLSW_UDP: Send a multicast packet to A multicast packet was sent to a
224.0.10.10 multicast address.
DLSW_UDP: No found UDP socket No UDP socket was found.
DLSW_UDP: Failed to allocate memory Memory allocation failed.
DLSW_UDP: Failed to send UDP Failed to send a UDP packet to the
packets to 192.168.10.20 remote peer 192.168.10.20. The part
DLSW_UDP: The length has sent is 70 that was sent is 70 bytes.
A UDP unicast packet was sent to the

DLSW_UDP: Succeed in sending UDP
remote peer 192.168.10.20
to 192.168.10.20
successfully.
The packet was received on a socket
DLSW_UDP: Socket port is not 2067
port other than 2067.
DLSW_UDP: Receive a wrong packet An illegitimate packet was received.
DLSW_UDP: The packet has not been
An incomplete packet was received.
received completely
DLSW_UDP: Failed to create a mbuf for The request for MBUF for the EX packet
EX packet failed.
DLSW_UDP: Failed to send multicast to Error occurred when DLSw sent a
224.0.10.10 multicast packet to 224.0.10.10; only 70
DLSW_UDP: The length has send is 70 bytes were sent.
DLSW_UDP: Succeed in sending A multicast packet was sent to

multicast to 224.0.10.10 224.0.10.10 successfully.
4.2.3 display dlsw information
Syntax
display dlsw information [ local ] [ ip-address ]
View
Any view
Parameter
local: Displays the local capability exchange information.

ip-address: Displays the local capability exchange information about a specified IP
address.
4-42
Description
Use the display dlsw information command to display DLSw capability exchange
information. The output of this command can help you understand the status of DLSw
virtual circuits.
Example
# Display general capability exchange information.

<H3C> display dlsw information
Vendor ID (OUI): 00000c
Version number: 02
Release number: 00
Multicast address: None
Version string:
Copyright (c) 2004-2006 Hangzhou Huawei-3Com Tech Co., Ltd.
Table 4-8 Description on the fields of the debugging dlsw udp command
Field Description
Version number Version of RFC 1795
Release number Release of RFC 1795
Init Pacing Window Init window size

Num of TCP sessions Number of TCP sessions
Multicast address Multicast address
Version string Version of the operating system on the router
# Display the local capability exchange information.

<H3C> display dlsw information local
Vendor ID (OUI): '00e0fc' (H3C)
Version number: 2
Release number: 0
Multicast address: None
Version string:
Copyright (c) 2004-2006 Hangzhou Huawei-3Com Tech Co., Ltd.
4-43
4.2.4 display dlsw remote
Syntax
display dlsw remote [ ip-address ]
View
Any view
Parameter
ip-address: IP address of a remote peer.
Description
Use the display dlsw remote command to display information about the specified or
all remote peers.
The output of the command may help you get aware of the connection state between
DLSw and its remote peers.
Example
# Display information about all current remote peers of DLSw2.0.

<H3C> display dlsw remote
IP Address frame-in frame-out frame-drop ver type state lifetime
*128.10.45.10 0 0 0 V1 C CONNECT 00: 00: 00
128.10.46.78 2 2 0 V1 C DISCONNECT 00: 00: 00
*130.20.45.12 2 2 0 V2 D CONNECT 00: 02: 00
130.35.46.77 0 0 0 V2 C DISCONNECT 00: 00: 00
*145.11.23.58 2 1 1 V2 C CONNECTING 00: 00: 00
Table 4-9 Description on the fields of the display dlsw remote command
Field Description
The asterisk leading the IP address of a peer indicates that the peer is
* available for TCP connection setup.
A peer without the asterisk sign is a backup peer in inactive state.
IP address IP address of the peer
frame-in Number of the packets received by the peer.
frame-out Number of the packets sent by the peer.

frame-drop Number of the packets dropped by the peer
ver DLSw version: V1 or V2.
Type of the remote peer, which can be:
type D, meaning the peer is learned dynamically.
C, meaning the peer is configured manually.
4-44
Field Description
Connection state, which can be one of the following:
CONNECT, meaning a TCP connection is present
state
DISCONNECT, meaning no TCP connection is present
CONNECTING, meaning a TCP connection is being set up.
life-time Connection time
4.2.5 dlsw filter acl
Syntax
dlsw filter acl acl-number

undo dlsw filter acl acl-number
View
System view
Parameter
acl acl-num: Specifies the ACL for filtering packets from the peers. The ACL number
must be in the range from 4000 to 4999.
Description
Use the dlsw filter acl command to specify to filter packets from any peer.
Use the undo dlsw filter acl command to disable filtering of packets from peers.
Example
# Specify to use ACL 4000 to filter packets from all peers, including those learned
dynamically. That is, permit only packets with a MAC address of 3-2-3 to pass through.
[H3C-acl-ethernetframe-4000] rule 3 permit source-mac 0003-0002-0003
ffff-ffff-ffff
[H3C-acl-ethernetframe-4000] quit
[H3C] dlsw filter acl 4000
4.2.6 dlsw multicast
Syntax
dlsw multicast [ multicast-IP-address ]

undo dlsw multicast
4-45
View
System view
Parameter
multicast-IP-address: Multicast IP address. It defaults to 224.0.10.0.
Description
Use the dlsw multicast command to enable the multicast function of DLSw2.0.
Use the undo dlsw multicast command to disable the multicast function of DLSw2.0.
By default, the multicast function of DLSw2.0 is disabled.
Related command: dlsw enable, igmp enable, pim dm, pim sm.
Example
# Add multicast IP address 224.0.10.10 for DLSw2.0.

[H3C] dlsw multicast 224.0.10.10
4.2.7 dlsw max-transmission
Syntax
dlsw max-transmission retries

undo dlsw max-transmission
View
System view
Parameter
retries: Sets the maximum number of the attempts to send an explorer frame. It defaults
to 5.
Description
Use the dlsw max-transmission command to set the maximum number of the
attempts to send an explorer frame.
Use the undo dlsw max-transmission command to restore the default.
Each time the origin DLSw2.0 router sends an explorer frame in a UDP multicast or
unicast packet, an explorer timer starts. If no response is received before the explorer
timer times out, the router retransmits the explorer frame and restarts the explorer timer.
If no response packet is received after the maximum number of explorer frame sending
attempts are made, the router stops sending attempt.
You can use this command only after enabling DLSw2.0.
4-46
Related command: dlsw enable.
Example
# Set the maximum number of explorer frame sending attempts to 10.

[H3C] dlsw max-transmission 10
4.2.8 dlsw remote
Syntax
dlsw remote ip-address [ version version-number | acl acl-num ] *

undo dlsw remote ip-address
View
System view
Parameter
ip-address: Specifies the IP address of a remote peer.

version version-number: Sets the DLSw version of the remote peer to 1 or 2. The
default DLSw version is 1.
acl acl-num: Specifies the ACL for filtering packets from the peers. The ACL number
must be in the range 4000 to 4999.
Description
Use the dlsw remote command to create a remote DLSw peer and specifies its version
and filtering rule.
Use the undo dlsw remote command to remove a remote DLSw peer.
You can find the description on the other keywords of the commands in the description
on the dlsw remote command in DLSw1.0.
Example
# Create a DLSw remote peer 192.168.100.10 and sets its DLSw version to 2.0.
[H3C] dlsw remote 192.168.100.10 version 2
# Specify to filter packets from peer 1.1.1.1 using ACL 4000. That is, for packets from
1.1.1.1, permit only packets with a MAC address of 3-2-3 to pass through.
[H3C-acl-ethernetframe-4000] rule 3 permit source-mac 0003-0002-0003
ffff-ffff-ffff
[H3C-acl-ethernetframe-4000] quit
[H3C] dlsw remote 1.1.1.1 acl 4000
4-47
4.2.9 reset dlsw tcp
Syntax
reset dlsw tcp [ ip-address ]
View
User view
Parameter
ip-address: IP address of the remote peer.
Description
Use the reset dlsw tcp command to reestablish or delete all connection to all the
remote peers.
Use the reset dlsw tcp ip-address command to reestablish a TCP connection or delete
the connection to the specified remote peer.
If a remote peer is learned dynamically by DLSw, this command deletes the remote
peer. If the specified remote peer is configured statically, this command reestablishes
the TCP connection to the remote peer.
Example
# Specify to reestablish the TCP connections to the remote peers.

<H3C> debugging dlsw tcp
<H3C> reset dlsw tcp
DLSw_TCP 4.4.4.2:The remote peer is learned dynamically ,it will be deleted
DLSW_TCP 4.4.4.3 : rebulid tcp with the peer
<H3C> reset dlsw tcp 255.255.255.255
Error: Invaild IP address
<H3C> reset dlsw tcp 1.1.1.2
Error: No specified peer is found
Table 4-10 Description on the fields of the reset dlsw tcp command
Field Description
The remote peer 4.4.4.2 is leaned
DLSw_TCP 4.4.4.2:The remote peer is
dynamically and therefore is deleted by
learned dynamically ,it will be deleted
DLSw.
DLSW_TCP 4.4.4.3 : rebulid tcp with the The TCP connection to remote peer
peer 4.4.4.3 is reestablished.
Error: Invaild IP address You have entered an invalid IP address.
Error: No specified peer is found The specified peer does not exist.
4-48
4.3 DLSw Redundancy Configuration Commands

4.3.1 debugging dlsw ethernet-backup
Syntax
debugging dlsw ethernet-backup

undo debugging dlsw ethernet-backup
View
User view
Parameter
None
Description
Use the debugging dlsw ethernet-backup command to enable debugging for DLSw
Ethernet redundancy.
Use the undo debugging dlsw ethernet-backup command to disable debugging for
DLSw Ethernet redundancy.
Example
# Enable debugging for DLSw Ethernet redundancy.

<H3C> debugging dlsw ethernet-backup
DLSw_EB : Sending MP frame from 0007.3f54.909c to 9999.9999.9999
DLSW_EB: neighbour 0007.3ff0.2c12 is created!
DLSw_EB : Sending SABME frame from 0007.3f54.909c to 0007.3ff0.2c12
DLSw_EB : receive MP frame from Ethernet3/0/1
DLSw_EB : DISC -> SABMESENT
DLSw_EB : Sending MC frame from 0007.3f54.909c to 0007.3ff0.2c12
DLSw_EB : A LLC2 circuit is created!
DLSw_EB : INIT -> MASTER-PENDING
DLSw_EB : receive UA frame from Ethernet3/0/1
DLSw_EB : SABMESENT -> CONNECT
DLSw_EB : Sending DN frame from 0007.3f54.909c to 0007.3ff0.2c12
DLSw_EB : receive MA frame from Ethernet3/0/1
DLSw_EB : MASTER-PENDING -> MASTER
DLSW_EB: Receive IWANTIT 0020.357b.e065 0000.1738.6dfd 04 04, create a temp
CKT
DLSW_EB: Start hold timer interval = 5.
DLSw_EB : receive IWANTIT frame from Ethernet3/0/1
4-49
DLSW_EB: Hold timeout on circuit 0020.357b.e065 0000.1738.6dfd 04 04

DLSw_EB : Sending UGOTIT frame from 0007.3f54.909c to 0007.3ff0.2c12
Table 4-11 Description on the fields of debugging dlsw ethernet-backup
Field Description
The Ethernet interface with the MAC
Sending MP frame from 0007.3f54.909c address of 0007.3f54.909c on the router
to 9999.9999.9999 is sending an MP frame to multicast
address 9999.9999.9999.
A device configured with the same
multicast address is detected on the
neighbour 0007.3ff0.2c12 is created! LAN. The MAC address of the device is
0007.3ff0.2c12. The router records the
device as its neighbor.
The router is sending a SABME frame to
Sending SABME frame from
0007.3ff0.2c12 for establishing an LLC
0007.3f54.909c to 0007.3ff0.2c12
circuit.
The status of the DLSw Ethernet
DISC -> SABMESENT redundancy circuit changes from DISC
to SABMESENT.
An LLC circuit is created between the
A LLC2 circuit is created!
two routers.
receive UA frame from Ethernet 3/0/1 Ethernet 3/0/1 receives a UA response.
The status of the DLSw Ethernet
SABMESENT -> CONNECT redundancy circuit changes from
SABMESENT to CONNECT.
receive MP frame from Ethernet 3/0/1 Ethernet 3/0/1 receives an MP frame.
Sending MC frame from 0007.3f54.909c An MC frame is being sent back to
to 0007.3ff0.2c12 0007.3ff0.2c12.
The master/slave status of the DLSw
INIT -> MASTER-PENDING router changes from INIT to
MASTER-PENDING.
Sending DN frame from 0007.3f54.909c A DN frame is being sent to
to 0007.3ff0.2c12 0007.3ff0.2c12.
receive MA frame from Ethernet 3/0/1 Ethernet 3/0/1 receives an MA frame.
The master/salve status of the DLSw
MASTER-PENDING -> MASTER router changes to MASTER. That is, the
router is elected as the master router.
receive IWANTIT frame from Ethernet Ethernet 3/0/1 receives an IWANIIT
3/0/1 frame.
4-50
Field Description
The master router receives from a slave
Receive IWANTIT 0020.357b.e065
router an IWANTIT frame, requesting to
0000.1738.6dfd 04 04, create a temp
establish a DLSw circuit between
CKT
0000.1788.6d6f and 0020.357b.e065.
Start hold timer interval = 5 The master router starts the hold timer.
Hold timeout on circuit 0020.357b.e065
The wait time expires.
0000.1738.6dfd 04 04
The router is sending a UGOTIT frame

Sending UGOTIT frame from to the slave router originating the
0007.3f54.909c to 0007.3ff0.2c12 IWANIT frame to allow the slave router
to establish the circuit.
4.3.2 debugging dlsw reachable-cache
Syntax
debugging dlsw reachable-cache

undo debugging dlsw reachable-cache
View
User view
Parameter
None
Description
Use the debugging dlsw reachable-cache command to enable DLSw reachability

debugging.
Use the undo debugging dlsw reachable-cache command to disable DLSw
reachability debugging.
Example
# Enable DLSw reachability debugging.

<H3C> debugging dlsw reachable-cache
DLSW_RCH:Rcv 0000.1738.6dfd from:1.1.1.1 NEW_ENTRY
DLSW_RCH: RCH_NOT_FOUND ->RCH_WAITING
DLSW_RCH:REQ_DMAC: 0020.357b.e065 from:1.1.1.1 status: FOUND
DLSW_RCH:NO SPECIFIC TARGET TO SEND ICANREACH_ex.DROP
DLSW_RCH:0000.1738.6dfd RCH_WAITING -> RCH_FOUND
DLSW_RCH:Rcv 0000.1738.6dfd from:1.1.1.1
DLSW_RCH:FOUND
4-51
DLSW_RCH:REQ_DMAC: 0020.357b.e065 from:1.1.1.1 status: FOUND

DLSW_RCH:SEND ICANREACH_ex to 1.1.1.1
Table 4-12 Description on the fields of debugging dlsw reachable-cache
Field Description
The router receives a frame with the source MAC address
Rcv 0000.1738.6dfd of 0000.1738.6d6f from a peer with the IP address of
from:1.1.1.1 1.1.1.1, which indicates that the MAC address can be
NEW_ENTRY reached through 1.1.1.1. This MAC address is recorded in
the remote reachability information table.
RCH_NOT_FOUND The remote reachability information status changes from
->RCH_WAITING RCH_NOT_FOUND to RCH_WAITING.
REQ_DMAC:
0020.357b.e065 The MAC address of 0020.357b.e065 is found in the local
from:1.1.1.1 status: reachability information table.
FOUND
NO SPECIFIC
Since the status of the remote reachability information for
TARGET TO SEND
0000.1738.6d6f changes to waiting, the router does not
ICANREACH_ex.DR
send any ICANREACH-ex frames to the remote peer.
OP
0000.1738.6dfd
The remote reachability information status changes from
RCH_WAITING ->
RCH_WAITING to RCH_FOUND.
RCH_FOUND
The router receives a frame with the source MAC address

Rcv 0000.1738.6dfd of 0000.1738.6d6f from the peer with the IP address of
from:1.1.1.1 FOUND 1.1.1.1, and saves the reachability information. The
reachability status changes to FOUND.
SEND Since the status of the remote reachability information for
ICANREACH_ex to 0000.1738.6d6f is FOUND, the router sends an
1.1.1.1 ICANREACH-ex frame to the remote peer.
4.3.3 display dlsw ethernet-backup circuit
Syntax
display dlsw ethernet-backup circuit
View
Any view
Parameter
None
4-52
Description
Use the display dlsw ethernet-backup circuit command to display information about
circuit backup after you enable DLSw Ethernet redundancy.
On the elected master router, the command displays information about all the created
circuits, including those requested by slave routers and those created by the master
router. On a slave router, only information about the circuits created by the slave router
is displayed.
Example
# Display information about circuit backup.

<H3C> display dlsw ethernet-backup circuit
Self: 0010-c56c-8707
Local Mac Remote Mac Lsap Rsap
0020-357b-e065 0000-1738-6dfd 04 04
Neighbour: 0020-e065-c287
Local Mac Remote Mac Lsap Rsap
00e0-a1b2-2d82 0000-1738-6dfd 04 04
Table 4-13 Description on the fields of display dlsw ethernet-backup circuit
Field Description
MAC address of the local Ethernet interface with Ethernet
Self
redundancy enabled
MAC address of the Ethernet interface with Ethernet redundancy
Neighbour
enabled on the neighbor
Local Mac MAC address of the source SNA host or terminal
Remote Mac MAC address of the destination SNA host or terminal
Lsap Local SAP address
Rsap Remote SAP address
Note: A service access point (SAP) is a sign for differentiating a circuit. For example, an
LLC2 frame with a destination SAP of 0x94 indicates that the master router and the
slave router are communicating with each other. A frame with any other SAP address
such as 0x04 or 0x08 indicates that the IBM host is communicating with an SNA
terminal and the router should transparently forward the frame to the remote router.
4-53
4.3.4 display dlsw ethernet-backup map
Syntax
display dlsw ethernet-backup map
View
Any view
Parameter
None
Description
Use the display dlsw ethernet-backup map command to display information about
address translation after you configure the Ethernet switch support feature.
Example
# Display information about address translation.

<H3C> display dlsw ethernet-backup map
Local_mac Remote_mac Type Status
8888-8888-8888 0000-1738-6dfd Configure Enable
Table 4-14 Description on the fields of display dlsw ethernet-backup map
Field Description
Local_mac Local virtual MAC address
Remote_mac MAC address of the remote SNA device
Type Address translation type, which can be Configure or Learned.
Status Address translation status, which can be Enable or Disabled.
4.3.5 display dlsw ethernet-backup neighbour
Syntax
display dlsw ethernet-backup neighbour
View
Any view
Parameter
None
4-54
Description
Use the display dlsw ethernet-backup neighbour command to display all neighbors
of the current router.
Example
# Display all neighbors of the current router.

<H3C> display dlsw ethernet-backup neighbour
Role Mac-Address Status LLC2-Circuit
Self 00e0.fc2a.0939 Master ----
Neighbor 00e0.fc0f.3448 Slave CONNECT
Table 4-15 Description on the fields of display dlsw ethernet-backup neighbour
Field Description
Self indicates the current router, while Neighbor indicates a
Role
neighbor of the current router.
Mac-Address MAC address of the Ethernet interface on the router
Master/slave status of the router, which can be master, slave,
Status
master-pending, slave-pending, or init.
Status of the LLC circuit between the master router and the
LLC2-Circuit slave router, which can be connect, disconnect, or
SABMESENT.
4.3.6 display dlsw reachable-cache
Syntax
display dlsw reachable-cache [ local | remote ]
View
Any view
Parameter
local: Displays local reachability information.

remote: Displays remote reachability information.
Description
Use the display dlsw reachable-cache command to display the reachability

information of circuits on a router with DLSw Ethernet redundancy enabled. If you
select neither of the local and remote arguments, all reachability information is
displayed.
4-55
Example
# Display reachability information of the circuits.

<H3C> display dlsw reachable-cache
DLSW local MAC addresses in cache
MAC address Status Interface Remaintime
0020-357b-e065 FOUND Ethernet1/0/1 5
DLSW remote MAC addresses in cache
MAC address Status peer Remaintime
00e0-a1b2-2d82 FOUND 10.110.1.1 12
Table 4-16 Description on the fields of display dlsw reachable-cache
Field Description
DLSW local MAC
DLSW local reachability information
addresses in cache
DLSW remote MAC
DLSW remote reachability information
addresses in cache
MAC address Destination MAC address
Current status of the reachability entry, which can be:

FOUND
EXPLORING
Status
WAITING
VERIFY
NOT_FOUND
Interface The outbound interface

peer IP address of the remote DLSw device
Lifetime of the reachability information, which is 15
minutes by default and cannot be configured. The lifetime
Remaintime of a dynamically learned reachability entry is descending,
while that of a manually configured reachability entry
remains the same all the time.
4.3.7 dlsw ethernet-backup enable
Syntax
dlsw ethernet-backup enable multicast-mac-address [ priority value ]

undo dlsw ethernet-backup enable
View
4-56
Parameter
multicast-mac-address: Multicast address used by the DLSw Ethernet redundancy

software for master router election. It takes the format of xxxx-xxxx-xxxx in Ethernet
order.
priority value: Priority for master router election. It is in the range 1 to 254 and defaults
to 100. The smaller the priority value, the higher the priority.
Description
Use the dlsw ethernet-backup enable command to enable DLSw Ethernet

redundancy.
Use the undo dlsw ethernet-backup enable command to disable DLSw Ethernet
redundancy.
Once you configure the dlsw ethernet-backup enable command on an Ethernet
interface, the interface starts to send frames to the multicast destination address
specified in the command.
Note:
For routers with the same priority, the one with the smallest MAC address is elected as
the master router.
Example
# Enable DLSw Ethernet redundancy.

[H3C-Ethernet1/0/0] dlsw ethernet-backup enable 9999-9999-9999 priority 10
4.3.8 dlsw ethernet-backup map
Syntax
dlsw ethernet-backup map local-mac local-mac-address remote-mac

remote-mac-address [ neighbour neighbour-mac-address ]
undo dlsw ethernet-backup map local-mac local-mac-address remote-mac
remote-mac-address
View
4-57
Parameter
local-mac-address: Local virtual MAC address takes the format of xxxx-xxxx-xxxx in

token ring order.
remote-mac-address: MAC address of the SNA device on the remote WAN. It takes the
format of xxxx-xxxx-xxxx in token ring order.
neighbour-mac-address: MAC address of another router for backup (the address of the
interface connected to the Ethernet). It takes the format of xxxx-xxxx-xxxx in token ring
order.
Description
Use the dlsw ethernet-backup map command to enable the Ethernet switch support
feature for DLSw Ethernet redundancy, that is, to map the MAC address of a remote
SNA device to a local virtual MAC address.
Use the undo dlsw ethernet-backup map command to remove the map entries
between the MAC address of the specified remote SNA device and the local virtual
MAC address.
After you configure the dlsw ethernet-backup map command, the router handles
frames in this way:
z When receiving a frame from the WAN, the router translates the source MAC
address of the frame (that is, the MAC address of the remote SNA device) into its
local virtual MAC address before forwarding the frame to the Ethernet.
z When receiving a frame from the Ethernet, the router translates the destination
MAC address into the MAC address of the remote SNA device before forwarding
the frame to the WAN.
After you enable the Ethernet switch support feature and specify the MAC address of a
neighbor on a DLSw router, the router sends its MAC address map to the neighbor for
backup. In case the DLSw router fails, the neighbor takes over the address translation
responsibility by using the backup map.
DLSw Ethernet redundancy supports up to 200 map entries.
Example
# Enable the Ethernet switch support feature for DLSw Ethernet redundancy.
[H3C-Ethernet1/0/0] dlsw ethernet-backup map local-mac 8888-8888-8888
remote-mac 0000-1738-6dfd
4-58
4.3.9 dlsw ethernet-backup timer
Syntax
dlsw ethernet-backup timer value

undo dlsw ethernet-backup timer
View
Parameter
value: Time for which the master router waits before sending a positive or negative
response to the slave router upon receipt of a circuit establishing request. It is in the
range 100 to 5,000 ms and defaults to 500 ms.
Description
Use the dlsw ethernet-backup timer command to configure the time for which the
master DLSw router waits before sending a positive or negative response to the slave
DLSw router upon receipt of a circuit establishing request.
Use the undo dlsw ethernet-backup timer command to restore the default wait time.
With DLSw Ethernet redundancy, when a slave router wants to set up a circuit, it sends
an IWANTIT frame to the master router to request one. Upon receipt of the IWANTIT
frame, the master router needs to wait for a while before responding with a UGOTIT or
CKT_TKN frame to acknowledge or deny the setup request. The dlsw
ethernet-backup timer command is used to set the wait time.
Example
# Configure the master router in DLSw Ethernet redundancy to wait 1,500 ms before
responding to an IWANTIT frame.
[H3C-Ethernet1/0/0] dlsw ethernet-backup timer 1500
4.3.10 dlsw reverse
Syntax
dlsw reverse mac-address
View
System view
4-59
Parameter
mac-address: MAC address to be translated.
Description
Use the dlsw reverse command to convert a MAC address from Ethernet order to
token ring order or vice versa.
This command serves as a MAC address translation tool, helping you avoid mistakes
introduced by manual translation.
Example
# Translate MAC address 0012-3578-4521 into an address in the other format.

[H3C] dlsw reverse 0012-3578-4521
Deversed MAC address: 0048-ac1e-a284
# Translate MAC address 0012-3578-4521 back into an address in the original format.
[H3C] dlsw reverse 0048-ac1e-a284
Deversed MAC address: 0012-3578-4521
4.3.11 reset dlsw ethernet-backup circuit
Syntax
reset dlsw ethernet-backup circuit
View
User view
Parameter
None
Description
Use the reset dlsw ethernet-backup circuit command to clear information about all
circuits that the router and its neighbors have established with the remote peers since
DLSw Ethernet redundancy is enabled.
This command does not tear down the circuits; it only clears information about the
circuits. When new circuits are set up, the router will learn and record information about
them.
Example
# Clear the records about all circuits that the router and its neighbors have established
since DLSw Ethernet redundancy is enabled.
<H3C> reset dlsw ethernet-backup circuit
4-60
4.3.12 reset dlsw ethernet-backup map
Syntax
reset dlsw ethernet-backup map
View
User view
Parameter
None
Description
Use the reset dlsw ethernet-backup map command to clear the MAC address map of
the Ethernet switch support feature.
Example
# Clear the MAC address map of the Ethernet switch support feature.
<H3C> reset dlsw ethernet-backup map
4-61
Command Index
Command Manual – Command Index
Comware V3 Appendix A Command Index
Appendix A Command Index
The command index includes all the commands in the Comware V3 Command Manual, which are
arranged alphabetically.
ABCDEFGHIJKLMNOPQRSTUVWXYZ
A
aaa-client Voice 6-1
abr-summary Routing Protocol 3-1
access-limit Security 1-1
accounting Security 1-1
accounting commands System Management 5-1
accounting domain Network Protocol 9-4
accounting optional Security 1-2
accounting-on Security 1-21
acl System Management 5-2
acl Security 3-1
acl-reflect timeout Security 3-2
activate Interface 5-26
activate Interface 5-39
activation-key System Management 5-2
address Voice 1-1
address Voice 3-1
address sip Voice 8-1
adsl standard Interface 5-40
adsl tx_attenuation Interface 5-42
adv-factor System Management 3-1
aggregate Routing Protocol 5-1
aggregate Multicast Protocol 5-1
aging-time Security 4-7
A-1
ah authentication-algorithm Security 6-1

alarm (CT3 Interface) Interface 4-79
alarm-threshold Interface 4-29
algorithm-suite VPN 3-1
allow l2tp VPN 1-1
ani Voice 4-1
ani-offset Voice 4-2
annexg Link Layer Protocol 6-1
answer Voice 4-2
apply access-vpn vpn-instance MPLS 2-1
apply as-path Routing Protocol 6-1
apply community Routing Protocol 6-1
apply cost Routing Protocol 6-2
apply cost-type Routing Protocol 6-3
apply default output-interface Network Protocol 12-1
apply ip-address Routing Protocol 6-4
apply ip-address default next-hop Network Protocol 12-2
apply ip-address next-hop (for Multicast Policy Routing) Network Protocol 13-1
apply ip-address next-hop (for Unicast Policy Routing) Network Protocol 12-2
apply ip-dscp Network Protocol 12-3
apply ip-precedence Network Protocol 12-4
apply isis Routing Protocol 6-4
apply local-preference Routing Protocol 6-5
apply mpls-label MPLS 2-1
apply origin Routing Protocol 6-6
apply output-interface (for Multicast Policy Routing) Network Protocol 13-2
apply output-interface (for Unicast Policy Routing) Network Protocol 12-4
apply policy outbound QoS 6-1
apply tag Routing Protocol 6-6
area Routing Protocol 3-2
area Voice 1-2
area-authentication-mode Routing Protocol 4-1
area-id (in Voice Entity View) Voice 1-3
area-id (in Voice GK Client View) Voice 7-1
A-2
arp check enable Network Protocol 2-2

arp security Network Protocol 2-9
arp security time-out Network Protocol 2-10
arp send-gratuitous-arp Network Protocol 2-7
arp static Network Protocol 2-1
arp timer aging Network Protocol 2-2
arp-proxy enable Network Protocol 2-6
asbr-summary Routing Protocol 3-2
ascii System Management 4-25
aspf-policy Security 4-8
async mode Interface 4-1
async mode padpos System Management 11-1
async mode pos System Management 11-1
async mode posapp System Management 11-3
atm class Link Layer Protocol 7-1
atm-class Link Layer Protocol 7-1
atm-ctt Link Layer Protocol 7-2
atm-link check Link Layer Protocol 7-3
authentication Security 1-3
authentication Voice 6-1
authentication super hwtacacs-scheme Getting Started 1-1
authentication-algorithm Security 7-1
authentication-client method VPN 3-2
authentication-did Voice 6-2
authentication-method Security 7-1
authentication-mode System Management 5-3
authentication-mode Routing Protocol 3-3
authentication-server method VPN 3-2
authorization Security 1-4
authorization Security 1-52
auto-config System Management 1-1
auto-config enable System Management 1-3
A-3
auto-execute command System Management 5-5
B
balance Routing Protocol 5-2
band-based-sharing Routing Protocol 1-18
baudrate Interface 4-2
bert Interface 4-66
bert (CT1/PRI Interface) Interface 4-30
bert (CT3 Interface) Interface 4-80
bgp Routing Protocol 5-3
bims boot request System Management 8-1
bims device-id System Management 8-1
bims enable System Management 8-2
bims interval System Management 8-2
bims ip address System Management 8-3
bims request System Management 8-4
bims sharekey System Management 8-4
bims source ip-address System Management 8-5
bims specify-time System Management 8-5
bims-server Network Protocol 9-6
binary System Management 4-25
boot bootrom System Management 1-45
bootfile backup System Management 4-4
bootfile dir System Management 4-1
bootfile main System Management 4-2
bridge aging-time Link Layer Protocol 9-1
bridge bridge-set enable Link Layer Protocol 9-13
bridge bridging Link Layer Protocol 9-1
bridge enable Link Layer Protocol 9-2
bridge learning Link Layer Protocol 9-3
bridge mac-address Link Layer Protocol 9-4
bridge routing Link Layer Protocol 9-5
bridge routing-enable Link Layer Protocol 9-6
bridge stp ieee Link Layer Protocol 9-7
A-4
bridge stp max-age Link Layer Protocol 9-7

bridge stp priority Link Layer Protocol 9-8
bridge stp timer forward-delay Link Layer Protocol 9-9
bridge stp timer hello Link Layer Protocol 9-10
bridge vlanid-transparent-transmit enable Link Layer Protocol 9-5
bridge-set Link Layer Protocol 9-10
bridge-set (in Ethernet Interface view) Non-IP Architecture 4-2
bridge-set (in synchronous serial interface view) Non-IP Architecture 4-1
bridge-set stp enable Link Layer Protocol 9-11
bridge-set stp port pathcost Link Layer Protocol 9-12
bridge-set stp port priority Link Layer Protocol 9-12
broadcast-limit link Interface 6-7
broadcast-suppression Interface 3-1
bsr-policy Multicast Protocol 3-1
bump Link Layer Protocol 7-3
busytone-t-th Voice 1-3
bye System Management 4-26
bye System Management 10-37
C
ca identifier Security 8-1
cable Interface 4-15
cable Interface 5-4
cable Interface 5-18
cable (CT1/PRI Interface) Interface 4-31
cable (CT3 Interface) Interface 4-81
cache-sa-enable Multicast Protocol 4-1
callednumber receive-method Voice 6-3
caller-permit Voice 1-4
call-mode Voice 3-2
car QoS 3-17
card-digit Voice 6-4
cas Voice 4-3
cbs QoS 6-2
A-5
c-bsr Multicast Protocol 3-2

ccc interface out-interface MPLS 3-2
ccc interface transmit-lsp receive-lsp MPLS 3-1
cd System Management 4-5
cdr Voice 6-4
cdup System Management 4-27
cdup System Management 10-38
ce MPLS 3-9
cell-packing Link Layer Protocol 7-4
certificate request entity Security 8-1
certificate request from Security 8-2
certificate request mode Security 8-3
certificate request polling Security 8-4
certificate request url Security 8-4
channel Link Layer Protocol 8-1
channel-set (CE1/PRI Interface) Interface 4-15
channel-set (CT1/PRI Interface) Interface 4-32
channel-set timeslot (for ISDN BRI Leased Line) Link Layer Protocol 3-15
checkzero Routing Protocol 2-1
cid display Voice 1-6
cid enable Voice 1-7
cid select-mode Voice 3-3
cid send Voice 1-7
cid type Voice 1-8
cir QoS 6-2
cir allow QoS 6-3
classifier behavior QoS 3-18
clear-forward-ack Voice 4-4
clns enable Non-IP Architecture 2-1
clns erpacket enable Non-IP Architecture 2-1
clns erpacket interval Non-IP Architecture 2-2
clns es-peer Non-IP Architecture 2-3
A-6
clns net Non-IP Architecture 2-3

clns rdpacket enable Non-IP Architecture 2-4
clns rdpacket interval Non-IP Architecture 2-5
clns route-static Non-IP Architecture 2-5
clns timer rdpacket holding Non-IP Architecture 2-6
clock Interface 4-108
clock Interface 5-5
clock Link Layer Protocol 7-5
clock (CE1/PRI Interface) Interface 4-16
clock (CE3 Interface) Interface 4-68
clock (CT1/PRI Interface) Interface 4-33
clock (CT3 Interface) Interface 4-82
clock (Serial Interface) Interface 4-3
clock datetime Getting Started 1-1
clock summer-time Getting Started 1-2
clock timezone Getting Started 1-4
close System Management 4-27
cngced-detection Voice 5-1
cng-on Voice 1-9
code (CEI/PRI Interface) Interface 4-17
code (CT1/PRI Interface) Interface 4-34
code nrzi Interface 4-4
code nrzi Non-IP Architecture 4-2
command-alias enable Getting Started 1-24
command-alias mapping Getting Started 1-25
command-privilege Getting Started 1-4
common-name Security 8-9
compare-different-as-med Routing Protocol 5-4
compression Voice 1-10
confederation id Routing Protocol 5-4
A-7
confederation nonstandard Routing Protocol 5-5

confederation peer-as Routing Protocol 5-6
congestion-threshold QoS 6-4
connection MPLS 3-10
connection-limit default Network Protocol 11-1
connection-limit default amount Network Protocol 11-1
connection-limit enable Network Protocol 11-2
connection-limit policy Network Protocol 11-3
controller cpos Interface 4-108
controller e1 Interface 4-18
controller e3 Interface 4-68
controller t1 Interface 4-34
controller t3 Interface 4-83
copy System Management 4-6
cost-style Routing Protocol 4-2
count System Management 3-1
country Security 8-10
country-code Interface 4-5
cptone Voice 1-16
cpu-usage cycle Getting Started 1-5
cq QoS 6-5
crc Interface 4-18
crc Interface 4-35
crc Interface 4-69
crc Interface 4-83
crc Interface 4-129
crl check disable Security 8-5
crl update-period Security 8-6
crl url Security 8-6
c-rp Multicast Protocol 3-3
crp-policy Multicast Protocol 3-4
D
dampening Routing Protocol 5-7
A-8
dar max-session-count QoS 2-1

dar protocol QoS 2-2
dar protocol-rename QoS 2-3
dar protocol-statistic QoS 2-3
data algorithm-suite VPN 3-3
data ipsec-sa duration VPN 3-4
databits System Management 5-6
data-coding (CT1/PRI Interface) Interface 4-35
datafill System Management 3-2
data-flow-format Security 1-23
data-flow-format Security 1-54
datasize System Management 3-3
datetime local Link Layer Protocol 3-1
ddns domainname Network Protocol 4-2
ddns password Network Protocol 4-2
ddns refresh Network Protocol 4-4
ddns source-interface Network Protocol 4-3
ddns username Network Protocol 4-1
ddns-server Network Protocol 4-1
debugging System Management 1-4
debugging System Management 4-28
debugging arp packet Network Protocol 2-3
debugging aspf Security 4-8
debugging atm all Link Layer Protocol 7-6
debugging atm error Link Layer Protocol 7-7
debugging atm event Link Layer Protocol 7-8
debugging atm packet Link Layer Protocol 7-9
debugging bgp Routing Protocol 5-8
debugging bgp mp-update Multicast Protocol 5-2
debugging bims all System Management 8-6
debugging bridge Link Layer Protocol 9-14
debugging clns clnp Non-IP Architecture 2-8
debugging clns echo Non-IP Architecture 2-7
debugging clns rd Non-IP Architecture 2-8
A-9
debugging clns routing Non-IP Architecture 2-9

debugging connection-limit Network Protocol 11-3
debugging dar QoS 2-4
debugging detect-group System Management 2-1
debugging dhcp client Network Protocol 9-56
debugging dhcp relay Network Protocol 9-48
debugging dhcp server Network Protocol 9-6
debugging dialer Dial-up 1-1
debugging dlsw Non-IP Architecture 4-3
debugging dlsw ethernet-backup Non-IP Architecture 4-49
debugging dlsw filter Non-IP Architecture 4-40
debugging dlsw packet Non-IP Architecture 4-4
debugging dlsw reachable-cache Non-IP Architecture 4-51
debugging dlsw udp Non-IP Architecture 4-40
debugging dns Network Protocol 3-2
debugging dvpn VPN 3-4
debugging encrypt-card Security 6-37
debugging esis Non-IP Architecture 2-10
debugging firewall Security 4-1
debugging fr Link Layer Protocol 6-2
debugging fr compress Link Layer Protocol 6-4
debugging fr compression Link Layer Protocol 6-5
debugging fr pvc-group Link Layer Protocol 6-5
debugging hdlc clns Non-IP Architecture 1-1
debugging hwping System Management 3-4
debugging hwtacacs Security 1-55
debugging igmp Multicast Protocol 2-1
debugging ike Security 7-2
debugging ike dpd Security 6-50
debugging ip Network Protocol 10-1
debugging ip count Network Protocol 6-1
debugging ip multicast-policy Network Protocol 13-2
debugging ip urpf Network Protocol 5-1
debugging ipsec Security 6-2
A-10
debugging ipx packet Non-IP Architecture 3-1

debugging ipx ping Non-IP Architecture 3-2
debugging ipx rip Non-IP Architecture 3-3
debugging ipx rtpro-flash Non-IP Architecture 3-4
debugging ipx rtpro-interface Non-IP Architecture 3-5
debugging ipx rtpro-routing Non-IP Architecture 3-6
debugging ipx sap packet Non-IP Architecture 3-7
debugging isdn Link Layer Protocol 3-1
debugging isis Routing Protocol 4-3
debugging isis es-adjacency Non-IP Architecture 2-9
debugging isis is-adjacency Non-IP Architecture 2-10
debugging l2tp VPN 1-2
debugging lapb Link Layer Protocol 8-1
debugging llc2 Non-IP Architecture 4-5
debugging llc2 packet Non-IP Architecture 4-6
debugging local-server Security 1-24
debugging mobile-ip advertise Network Protocol 16-1
debugging mobile-ip mobile-router Network Protocol 16-31
debugging mobile-ip node Network Protocol 16-1
debugging modem Dial-up 3-1
debugging mpls l2vpn MPLS 3-3
debugging mpls ldp MPLS 1-14
debugging mpls lspm MPLS 1-1
debugging msdp Multicast Protocol 4-1
debugging multicast forwarding Multicast Protocol 1-1
debugging multicast kernel-routing Multicast Protocol 1-1
debugging multicast status-forwarding Multicast Protocol 1-2
debugging nat Network Protocol 11-4
debugging ntp-service System Management 6-1
debugging ospf Routing Protocol 3-4
debugging pad Link Layer Protocol 8-2
debugging physical Interface 1-1
debugging pim common Multicast Protocol 3-5
debugging pim dm Multicast Protocol 3-6
A-11
debugging pim sm Multicast Protocol 3-7

debugging pki Security 8-18
debugging portal Security 2-1
debugging pos System Management 11-3
debugging pos-app System Management 11-4
debugging pos-interface System Management 11-5
debugging ppp { all | cbcp | ccp | scp } Link Layer Protocol 1-1
debugging ppp { chap | pap } Link Layer Protocol 1-2
debugging ppp { core | ip | ipcp | lcp | lqc | mp } Link Layer Protocol 1-2
debugging ppp compression iphc rtp Link Layer Protocol 1-24
debugging ppp compression iphc tcp Link Layer Protocol 1-25
debugging pppoe-client Link Layer Protocol 2-6
debugging pppofr Link Layer Protocol 6-6
debugging qllc Network Protocol 14-1
debugging radius Security 1-24
debugging rip Routing Protocol 2-2
debugging rlogin System Management 10-51
debugging rsh System Management 10-50
debugging sdlc Non-IP Architecture 4-7
debugging slip Link Layer Protocol 4-1
debugging snmp-agent System Management 7-1
debugging ssh client System Management 10-30
debugging ssh server System Management 10-11
debugging standby event Reliability 1-1
debugging stp Link Layer Protocol 9-14
debugging tcp event Network Protocol 10-2
debugging tcp md5 Network Protocol 10-3
debugging tcp packet Network Protocol 10-4
debugging telnet System Management 10-1
debugging tftp-server System Management 4-47
debugging tunnel VPN 2-1
debugging udp packet Network Protocol 10-5
debugging udp-helper Network Protocol 7-1
debugging voice cm Voice 1-19
A-12
debugging voice data-flow Voice 1-20

debugging voice dpl Voice 1-20
debugging voice fax Voice 5-2
debugging voice h225 Voice 1-21
debugging voice h245 Voice 1-21
debugging voice ipp Voice 1-22
debugging voice r2 Voice 4-5
debugging voice ras Voice 7-2
debugging voice rcv Voice 1-23
debugging voice rcv r2 Voice 4-6
debugging voice sip Voice 8-2
debugging voice vas Voice 1-23
debugging voice vcc Voice 6-6
debugging voice vmib Voice 1-24
debugging voice vofr Voice 3-3
debugging voice vpp Voice 1-25
debugging voice vpp r2 Voice 4-6
debugging vrrp Reliability 2-1
debugging vty System Management 5-6
debugging web java-blocking Security 5-2
debugging web url-filter host Security 5-1
debugging web url-filter parameter Security 5-1
debugging x25 Link Layer Protocol 8-3
debugging x25 x2t Link Layer Protocol 8-4
debugging x25 xot Link Layer Protocol 8-3
default Voice 4-7
default cost Routing Protocol 2-2
default cost Routing Protocol 3-5
default entity compression Voice 1-26
default entity fax Voice 5-3
default entity modem compatible-param Voice 5-5
default entity modem protocol Voice 5-6
default entity normal-connect slow-h245 Voice 1-27
default entity payload-size Voice 1-27
A-13
default entity service data Voice 1-28

default entity vad-on Voice 1-29
default interval Routing Protocol 3-6
default limit Routing Protocol 3-7
default local-preference Routing Protocol 5-9
default med Routing Protocol 5-10
default tag Routing Protocol 3-7
default type Routing Protocol 3-8
default-cost Routing Protocol 3-9
default-route imported Routing Protocol 5-9
default-route-advertise Routing Protocol 3-10
default-route-advertise Routing Protocol 4-4
delay Voice 1-30
delay Voice 4-9
delay-reversal Voice 1-30
delete System Management 4-7
delete rpf-route-static all Multicast Protocol 6-1
delete static-routes all Routing Protocol 1-15
description System Management 3-4
description Interface 1-2
description Interface 3-1
description MPLS 2-2
description (in Voice Entity View) Voice 1-31
description (in Voice Subscriber Line View) Voice 1-32
destination VPN 2-1
destination-ip System Management 3-5
destination-port System Management 3-5
detect Interface 4-6
detect Security 4-9
detect-ais (CE1/PRI Interface) Interface 4-19
detect-group System Management 2-1
detect-list System Management 2-2
A-14
dh Security 7-3
dhcp enable Network Protocol 9-1
dhcp relay information Network Protocol 9-49
dhcp relay information strategy Network Protocol 9-50
dhcp relay release Network Protocol 9-50
dhcp select (in Interface View) Network Protocol 9-1
dhcp select (in System View) Network Protocol 9-3
dhcp server accounting domain (in Interface View) Network Protocol 9-9
dhcp server accounting domain interface (in System View) Network Protocol 9-8
dhcp server bims-server (Interface View) Network Protocol 9-10
dhcp server bims-server interface (System View) Network Protocol 9-11
dhcp server detect Network Protocol 9-4
dhcp server dns-list Network Protocol 9-12
dhcp server dns-list interface (in System View) Network Protocol 9-13
dhcp server domain-name (in Interface View) Network Protocol 9-13
dhcp server domain-name interface (in System View) Network Protocol 9-14
dhcp server expired (in Interface View) Network Protocol 9-15
dhcp server expired interface (in System View) Network Protocol 9-16
dhcp server forbidden-ip Network Protocol 9-17
dhcp server ip-pool Network Protocol 9-18
dhcp server nbns-list (in Interface View) Network Protocol 9-19
dhcp server nbns-list interface (in System View) Network Protocol 9-19
dhcp server netbios-type (in Interface View) Network Protocol 9-22
dhcp server netbios-type interface (in System View) Network Protocol 9-21
dhcp server option (in Interface View) Network Protocol 9-24
dhcp server option interface (in System View) Network Protocol 9-23
dhcp server ping Network Protocol 9-24
dhcp server relay information enable Network Protocol 9-25
dhcp server static-bind Network Protocol 9-26
dhcp server synchronize arp (in Interface View) Network Protocol 2-11
dhcp server synchronize arp interface (in System View) Network Protocol 2-11
dhcp server voice-config (in Interface View) Network Protocol 9-27
dhcp server voice-config interface (in System View) Network Protocol 9-28
dialer bundle Dial-up 1-1
A-15
dialer bundle-member Dial-up 1-2

dialer callback-center Dial-up 1-3
dialer call-in Dial-up 1-4
dialer circular-group Dial-up 1-5
dialer disconnect Dial-up 1-6
dialer enable-circular Dial-up 1-6
dialer isdn-leased Dial-up 1-7
dialer isdn-leased (ISDN BRI Leased Line Configuration) Link Layer Protocol 3-2
dialer number Dial-up 1-8
dialer priority Dial-up 1-9
dialer queue-length Dial-up 1-10
dialer route Dial-up 1-10
dialer threshold Dial-up 1-12
dialer timer autodial Dial-up 1-13
dialer timer compete Dial-up 1-14
dialer timer enable Dial-up 1-14
dialer timer idle Dial-up 1-15
dialer timer wait-carrier Dial-up 1-16
dialer timer warmup Dial-up 1-16
dialer user Dial-up 1-17
dialer-group Dial-up 1-18
dialer-rule Dial-up 1-19
dial-prefix Voice 1-32
dial-program Voice 1-34
differential-delay Interface 5-6
dir System Management 4-8
direct listen-port System Management 10-1
disconnect System Management 4-29
display aaa unsent-h323-call-record Voice 6-7
display acl Security 3-2
display alarm urgent System Management 1-38
display arp Network Protocol 2-3
A-16
display arp timer aging (only for the AR46 Series) Network Protocol 2-4
display aspf all Security 4-11
display aspf interface Security 4-12
display aspf policy Security 4-13
display aspf session Security 4-13
display atm class Link Layer Protocol 7-10
display atm interface Link Layer Protocol 7-11
display atm map-info Link Layer Protocol 7-12
display atm map-info Non-IP Architecture 1-1
display atm pvc-group Link Layer Protocol 7-13
display atm pvc-info Link Layer Protocol 7-15
display auto-config System Management 1-3
display bgp group Routing Protocol 5-11
display bgp l2vpn MPLS 3-11
display bgp multicast group Multicast Protocol 5-2
display bgp multicast network Multicast Protocol 5-3
display bgp multicast peer Multicast Protocol 5-3
display bgp multicast routing Multicast Protocol 5-4
display bgp multicast routing as-path-acl Multicast Protocol 5-4
display bgp multicast routing cidr Multicast Protocol 5-5
display bgp multicast routing community Multicast Protocol 5-5
display bgp multicast routing community-list Multicast Protocol 5-6
display bgp multicast routing different-origin-as Multicast Protocol 5-6
display bgp multicast routing peer Multicast Protocol 5-7
display bgp multicast routing regular-expression Multicast Protocol 5-7
display bgp multicast routing statistic Multicast Protocol 5-8
display bgp network Routing Protocol 5-12
display bgp paths Routing Protocol 5-13
display bgp peer Routing Protocol 5-14
display bgp routing Routing Protocol 5-16
display bgp routing as-path-acl Routing Protocol 5-18
display bgp routing cidr Routing Protocol 5-20
display bgp routing community Routing Protocol 5-21
display bgp routing community-list Routing Protocol 5-21
A-17
display bgp routing dampened Routing Protocol 5-22

display bgp routing different-origin-as Routing Protocol 5-24
display bgp routing flap-info Routing Protocol 5-24
display bgp routing label MPLS 2-2
display bgp routing peer { advertised | received } Routing Protocol 5-26
display bgp routing peer dampened Routing Protocol 5-27
display bgp routing peer regular-expression Routing Protocol 5-28
display bgp routing regular-expression Routing Protocol 5-29
display bgp routing statistic Routing Protocol 5-30
display bgp vpnv4 MPLS 2-3
display bootp client Network Protocol 8-1
display bridge address-table Link Layer Protocol 9-17
display bridge information Link Layer Protocol 9-18
display bridge spanning-tree Link Layer Protocol 9-20
display bridge traffic Link Layer Protocol 9-22
display brief interface Interface 1-2
display ccc MPLS 3-3
display channel System Management 1-15
display clipboard Getting Started 1-6
display clns Non-IP Architecture 2-11
display clns interface Non-IP Architecture 2-13
display clns routing-table Non-IP Architecture 2-14
display clns statistics Non-IP Architecture 2-18
display clock Getting Started 1-7
display command-alias Getting Started 1-26
display connection Security 1-5
display connection-limit policy Network Protocol 11-4
display connection-limit statistics Network Protocol 11-5
display controller cpos Interface 4-109
display controller cpos e1 Interface 4-111
display controller cpos t1 Interface 4-113
display controller e1 Interface 4-19
display controller e3 Interface 4-69
display controller t1 Interface 4-36
A-18
display controller t3 Interface 4-101

display cpu-usage Getting Started 1-7
display cpu-usage history Getting Started 1-8
display current-configuration System Management 4-53
display dar information QoS 2-5
display dar protocol QoS 2-5
display dar protocol-rename QoS 2-7
display dar protocol-statistic QoS 2-8
display debugging System Management 1-5
display debugging ospf Routing Protocol 3-11
display detect-group System Management 2-3
display device System Management 1-40
display dhcp client Network Protocol 9-57
display dhcp relay address Network Protocol 9-51
display dhcp relay statistics Network Protocol 9-52
display dhcp server conflict Network Protocol 9-29
display dhcp server expired Network Protocol 9-30
display dhcp server free-ip Network Protocol 9-31
display dhcp server ip-in-use Network Protocol 9-32
display dhcp server statistics Network Protocol 9-33
display dhcp server tree Network Protocol 9-35
display dhcprelay-security Network Protocol 9-53
display diagnostic-information System Management 1-5
display dialer Dial-up 1-20
display dlsw bridge-entry Non-IP Architecture 4-7
display dlsw circuits Non-IP Architecture 4-8
display dlsw ethernet-backup circuit Non-IP Architecture 4-52
display dlsw ethernet-backup map Non-IP Architecture 4-54
display dlsw ethernet-backup neighbour Non-IP Architecture 4-54
display dlsw information Non-IP Architecture 4-9
display dlsw information Non-IP Architecture 4-42
display dlsw reachable-cache Non-IP Architecture 4-11
display dlsw reachable-cache Non-IP Architecture 4-55
display dlsw remote Non-IP Architecture 4-10
A-19
display dlsw remote Non-IP Architecture 4-44

display dns domain Network Protocol 3-5
display dns dynamic-host Network Protocol 3-6
display dns server Network Protocol 3-5
display domain Security 1-6
display dsl configuration Interface 5-32
display dsl configuration Interface 5-42
display dsl status Interface 5-33
display dsl status Interface 5-44
display dsl version Interface 5-37
display dsl version Interface 5-45
display dvpn info VPN 3-8
display dvpn ipsec-sa VPN 3-5
display dvpn map VPN 3-6
display dvpn online-user VPN 3-9
display dvpn session VPN 3-7
display encrypt-card fast-switch Security 6-38
display encrypt-card sa Security 6-39
display encrypt-card statistics Security 6-40
display encrypt-card syslog Security 6-41
display environment System Management 1-39
display esis Non-IP Architecture 2-20
display esis interface Non-IP Architecture 2-21
display esis peer Non-IP Architecture 2-22
display esis statistics Non-IP Architecture 2-22
display fcm System Management 11-5
display fe1 serial Interface 4-48
display fib Network Protocol 10-6
display fib acl Network Protocol 10-7
display fib begin Network Protocol 10-8
display fib ip-prefix Network Protocol 10-9
display fib longer Network Protocol 10-10
display fib statistics Network Protocol 10-11
display firewall ethernet-frame-filter Link Layer Protocol 9-24
A-20
display firewall-statistics Security 4-2

display fr class-map QoS 6-6
display fr compress Link Layer Protocol 6-7
display fr del QoS 6-7
display fr dlci-switch Link Layer Protocol 6-8
display fr fragment-info QoS 6-8
display fr inarp-info Link Layer Protocol 6-8
display fr interface Link Layer Protocol 6-9
display fr lmi-info Link Layer Protocol 6-10
display fr map-info Link Layer Protocol 6-11
display fr map-info Non-IP Architecture 1-3
display fr map-info pppofr Link Layer Protocol 6-12
display fr pvc-group Link Layer Protocol 6-13
display fr pvc-info Link Layer Protocol 6-15
display fr statistics Link Layer Protocol 6-16
display fr switch-table QoS 6-10
display fr vofr-info Voice 3-4
display ft1 serial Interface 4-54
display ftp source-ip System Management 4-30
display ftp-server System Management 4-19
display ftp-server source-ip System Management 4-20
display ftp-user System Management 4-19
display history-command Getting Started 1-10
display hwping System Management 3-6
display hwping statistics System Management 3-8
display hwtacacs Security 1-56
display icmp statistics Network Protocol 10-11
display igmp group Multicast Protocol 2-1
display igmp interface Multicast Protocol 2-2
display igmp local Multicast Protocol 2-4
display ike dpd Security 6-51
display ike peer Security 7-4
display ike proposal Security 7-5
display ike sa Security 7-6
A-21
display info-center System Management 1-17

display interface Interface 1-3
display interface Interface 3-2
display interface Link Layer Protocol 8-5
display interface { ethernet | gigabitethernet } Interface 2-1
display interface atm Interface 5-1
display interface bri Interface 4-105
display interface bri Link Layer Protocol 3-3
display interface encrypt Security 6-42
display interface ima-group Interface 5-6
display interface loopback Interface 6-13
display interface mfr Link Layer Protocol 6-17
display interface mp-group Interface 6-10
display interface null Interface 6-14
display interface pos Interface 4-130
display interface tunnel VPN 2-2
display interface virtual-ethernet Interface 6-12
display interface virtual-template Interface 6-8
display ip count Network Protocol 6-4
display ip count rule Network Protocol 6-5
display ip fast-forwarding cache Network Protocol 10-13
display ip host Network Protocol 3-1
display ip interface Network Protocol 10-13
display ip interface brief Network Protocol 10-14
display ip ip-prefix Routing Protocol 6-7
display ip multicast-fast-forwarding cache Network Protocol 10-31
display ip multicast-policy Network Protocol 13-3
display ip policy Network Protocol 12-5
display ip policy setup Network Protocol 12-6
display ip policy statistic Network Protocol 12-7
display ip routing-table Routing Protocol 1-1
display ip routing-table acl Routing Protocol 1-2
display ip routing-table ip_address Routing Protocol 1-3
display ip routing-table ip_address1 ip_address2 Routing Protocol 1-6
A-22
display ip routing-table ip-prefix Routing Protocol 1-6

display ip routing-table protocol Routing Protocol 1-8
display ip routing-table radix Routing Protocol 1-9
display ip routing-table statistics Routing Protocol 1-10
display ip routing-table verbose Routing Protocol 1-11
display ip routing-table vpn-instance Routing Protocol 1-12
display ip routing-table vpn-instance MPLS 2-5
display ip socket Network Protocol 10-15
display ip statistics Network Protocol 10-17
display ip vpn-instance MPLS 2-6
display ipsec policy Security 6-2
display ipsec policy-template Security 6-5
display ipsec proposal Security 6-6
display ipsec sa Security 6-8
display ipsec statistics Security 6-11
display ipx interface Non-IP Architecture 3-9
display ipx routing-table Non-IP Architecture 3-11
display ipx routing-table statistics Non-IP Architecture 3-14
display ipx service-table Non-IP Architecture 3-14
display ipx statistics Non-IP Architecture 3-16
display isdn active-channel Link Layer Protocol 3-4
display isdn call-info Link Layer Protocol 3-5
display isdn call-record Link Layer Protocol 3-8
display isdn parameters Link Layer Protocol 3-9
display isdn spid Link Layer Protocol 3-10
display isis brief Routing Protocol 4-5
display isis interface Routing Protocol 4-6
display isis lsdb Routing Protocol 4-7
display isis mesh-group Routing Protocol 4-7
display isis peer Routing Protocol 4-8
display isis routing Routing Protocol 4-8
display isis routing clns Non-IP Architecture 2-12
display isis spf-log Routing Protocol 4-10
display l2tp session VPN 1-3
A-23
display l2tp tunnel VPN 1-4

display l2tp user VPN 1-5
display llc2 Non-IP Architecture 4-12
display loadsharing ip address Routing Protocol 1-18
display local-server statistics Security 1-25
display local-user Security 1-8
display log startup Getting Started 1-11
display logbuffer System Management 1-19
display logbuffer summary System Management 1-20
display mac-address Interface 3-14
display memory Getting Started 1-11
display memory Routing Protocol 7-1
display mfr Link Layer Protocol 6-19
display mirror Interface 3-15
display mobile-ip binding Network Protocol 16-13
display mobile-ip globals Network Protocol 16-4
display mobile-ip interface Network Protocol 16-2
display mobile-ip irdp Network Protocol 16-52
display mobile-ip mobile-router Network Protocol 16-32
display mobile-ip node Network Protocol 16-26
display mobile-ip secure Network Protocol 16-48
display mobile-ip statistics Network Protocol 16-6
display mobile-ip violation Network Protocol 16-49
display mobile-ip visitor Network Protocol 16-19
display mpls interface MPLS 1-2
display mpls l2vc MPLS 3-8
display mpls l2vpn forwarding-info MPLS 3-12
display mpls l3vpn-lsp MPLS 2-6
display mpls ldp MPLS 1-15
display mpls ldp buffer-info MPLS 1-15
display mpls ldp interface MPLS 1-16
display mpls ldp lsp MPLS 1-17
display mpls ldp peer MPLS 1-17
display mpls ldp remote MPLS 1-18
A-24
display mpls ldp session MPLS 1-18

display mpls lsp MPLS 1-2
display mpls static-l2vc MPLS 3-6
display mpls static-lsp MPLS 1-3
display mpls statistics MPLS 1-3
display msdp brief Multicast Protocol 4-2
display msdp peer-status Multicast Protocol 4-3
display msdp sa-cache Multicast Protocol 4-4
display msdp sa-count Multicast Protocol 4-5
display multicast forwarding-table Multicast Protocol 1-3
display multicast routing-table Multicast Protocol 1-3
display multicast routing-table static Multicast Protocol 1-5
display multicast routing-table static Multicast Protocol 6-1
display multicast routing-table static config Multicast Protocol 6-2
display multicast rpf-info Multicast Protocol 1-6
display nat Network Protocol 11-6
display nat connection-limit Network Protocol 11-8
display ntp-service sessions System Management 6-2
display ntp-service status System Management 6-3
display ntp-service trace System Management 6-4
display ospf abr-asbr Routing Protocol 3-12
display ospf asbr-summary Routing Protocol 3-12
display ospf brief Routing Protocol 3-14
display ospf cumulative Routing Protocol 3-16
display ospf error Routing Protocol 3-17
display ospf interface Routing Protocol 3-20
display ospf lsdb Routing Protocol 3-21
display ospf memory Routing Protocol 3-24
display ospf nexthop Routing Protocol 3-25
display ospf peer Routing Protocol 3-26
display ospf request-queue Routing Protocol 3-28
display ospf retrans-queue Routing Protocol 3-29
display ospf routing Routing Protocol 3-30
display ospf sham-link MPLS 2-7
A-25
display ospf vlink Routing Protocol 3-31

display pim bsr-info Multicast Protocol 3-7
display pim interface Multicast Protocol 3-8
display pim neighbor Multicast Protocol 3-9
display pim routing-table Multicast Protocol 3-9
display pim rp-info Multicast Protocol 3-11
display pki certificate Security 8-22
display pki crl Security 8-23
display port Interface 3-4
display portal Security 2-4
display portal update-resource Security 2-14
display port-mapping Security 4-15
display pos-app System Management 11-6
display pos-interface System Management 11-7
display ppp compression iphc rtp Link Layer Protocol 1-25
display ppp compression iphc tcp Link Layer Protocol 1-26
display ppp compression stac-lzs Link Layer Protocol 1-26
display ppp mp Link Layer Protocol 1-3
display pppoe-server session Link Layer Protocol 2-1
display pppoe-server session Link Layer Protocol 2-7
display protocol-priority QoS 5-1
display qos car interface QoS 1-1
display qos carl QoS 1-2
display qos cbq interface QoS 3-19
display qos cq interface QoS 3-8
display qos cql QoS 3-9
display qos gts interface QoS 1-5
display qos lr interface QoS 1-6
display qos policy QoS 3-20
display qos policy interface QoS 3-21
display qos policy interface QoS 6-10
display qos pq interface QoS 3-1
display qos pql QoS 3-2
display qos rtpq interface QoS 3-57
A-26
display qos wfq interface QoS 3-15

display qos wred interface QoS 4-1
display radius Security 1-26
display radius statistics Security 1-27
display rip Routing Protocol 2-3
display rip interface Routing Protocol 2-4
display rip routing Routing Protocol 2-5
display rip vpn-instance Routing Protocol 2-6
display rmon alarm System Management 9-1
display rmon event System Management 9-2
display rmon eventlog System Management 9-3
display rmon history System Management 9-4
display rmon prialarm System Management 9-5
display rmon statistics System Management 9-7
display route-policy Routing Protocol 6-8
display rsa local-key-pair public System Management 10-12
display rsa peer-public-key System Management 10-14
display saved-configuration System Management 4-56
display schedule reboot System Management 1-41
display sftp source-ip System Management 10-39
display snmp-agent System Management 7-1
display snmp-agent community System Management 7-2
display snmp-agent group System Management 7-3
display snmp-agent mib-view System Management 7-4
display snmp-agent statistics System Management 7-5
display snmp-agent sys-info System Management 7-7
display snmp-agent trap-list System Management 7-8
display snmp-agent usm-user System Management 7-9
display sot Network Protocol 15-1
display ssh server System Management 10-14
display ssh server-info System Management 10-30
display ssh user-information System Management 10-16
display ssh2 source-ip System Management 10-31
display ssh-server source-ip System Management 10-15
A-27
display standby flow Reliability 1-1

display standby state Reliability 1-3
display startup System Management 4-58
display status interface Interface 1-5
display status interface ima-group Interface 5-10
display stop-accounting-buffer Security 1-31
display stop-accounting-buffer Security 1-58
display tcp statistics Network Protocol 10-18
display tcp status System Management 10-2
display tcp status Network Protocol 10-21
display telnet-server source-ip System Management 10-3
display tftp source-ip System Management 4-41
display tftp-server System Management 4-47
display this System Management 4-58
display time-range Security 3-9
display traffic behavior QoS 3-24
display traffic classifier QoS 3-25
display trapbuffer System Management 1-21
display udp statistics Network Protocol 10-21
display udp-helper server Network Protocol 7-1
display user-interface System Management 5-7
display users System Management 5-8
display version Getting Started 1-12
display virtual-access Interface 6-9
display vlan Interface 6-2
display vlan interface Interface 6-3
display vlan max-packet-process Interface 6-3
display vlan statistics vid Interface 6-4
display voice aaa-client configuration Voice 6-8
display voice call-history-record Voice 1-34
display voice call-history-record Voice 6-9
display voice call-info Voice 1-36
display voice default Voice 1-37
display voice em call-statistic Voice 4-11
A-28
display voice em ccb Voice 4-13

display voice entity Voice 1-39
display voice fax Voice 5-7
display voice gateway Voice 7-2
display voice ipp Voice 1-40
display voice number-substitute Voice 1-42
display voice r2 call-statistics Voice 4-14
display voice rcv ccb Voice 1-43
display voice rcv statistic Voice 1-46
display voice rcv statistic r2 Voice 4-16
display voice sip call-statistics Voice 8-2
display voice sip register-state Voice 1-48
display voice subscriber-line Voice 1-49
display voice subscriber-line Voice 4-18
display voice vcc Voice 6-13
display voice vofr call Voice 3-5
display voice vofr statistic Voice 3-8
display voice voip Voice 4-20
display voice voip data-statistic Voice 1-51
display voice vpp Voice 1-54
display vrrp Reliability 2-1
display web java-blocking Security 5-4
display web url-filter host Security 5-3
display web url-filter parameter Security 5-3
display x25 alias-policy Link Layer Protocol 8-8
display x25 cug Link Layer Protocol 8-9
display x25 hunt-group-info Link Layer Protocol 8-9
display x25 map Link Layer Protocol 8-10
display x25 map Non-IP Architecture 1-3
display x25 pad Link Layer Protocol 8-11
display x25 switch-table pvc Link Layer Protocol 8-12
display x25 switch-table svc Link Layer Protocol 8-12
display x25 vc Link Layer Protocol 8-14
display x25 vc Non-IP Architecture 1-5
A-29
display x25 x2t switch-table Link Layer Protocol 8-17

display x25 xot Link Layer Protocol 8-16
dl-bits Voice 4-21
dlsw bridge-set Non-IP Architecture 4-13
dlsw enable Non-IP Architecture 4-13
dlsw ethernet-backup enable Non-IP Architecture 4-56
dlsw ethernet-backup map Non-IP Architecture 4-57
dlsw ethernet-backup timer Non-IP Architecture 4-59
dlsw ethernet-frame-filter Link Layer Protocol 9-25
dlsw filter acl Non-IP Architecture 4-45
dlsw local Non-IP Architecture 4-14
dlsw max-transmission Non-IP Architecture 4-46
dlsw multicast Non-IP Architecture 4-45
dlsw reachable Non-IP Architecture 4-15
dlsw reachable-cache Non-IP Architecture 4-16
dlsw remote Non-IP Architecture 4-17
dlsw remote Non-IP Architecture 4-47
dlsw reverse Non-IP Architecture 4-59
dlsw timer Non-IP Architecture 4-18
dns domain Network Protocol 3-4
dns resolve Network Protocol 3-3
dns server Network Protocol 3-3
dns-list Network Protocol 9-38
dns-proxy enable Network Protocol 3-8
domain Security 1-9
domain-authentication-mode Routing Protocol 4-11
domain-id MPLS 2-8
domain-name Network Protocol 9-38
dot-match Voice 1-56
dpd Security 6-52
dscp media Voice 1-58
dsl link-check Interface 5-27
dsl link-check Interface 5-47
dtmf Voice 4-22
A-30
dtmf sensitivity-level Voice 1-57

dtmf sensitivity-level Voice 1-58
dtmf threshold Voice 1-59
duplex Interface 2-4
duplex Interface 3-5
dvpn class VPN 3-10
dvpn client register-dumb VPN 3-11
dvpn client register-interval VPN 3-11
dvpn client register-retry VPN 3-12
dvpn dvpn-id VPN 3-12
dvpn interface-type VPN 3-13
dvpn policy VPN 3-14
dvpn policy VPN 3-14
dvpn register-type VPN 3-15
dvpn security VPN 3-16
dvpn server VPN 3-17
dvpn server authentication-client method VPN 3-18
dvpn server map age-time VPN 3-18
dvpn server pre-shared-key VPN 3-19
dvpn service VPN 3-20
E
e1 bert Interface 4-71
e1 channel-set Interface 4-73
e1 channel-set Interface 4-115
e1 set clock Interface 4-73
e1 set clock Interface 4-116
e1 set frame-format Interface 4-74
e1 set frame-format Interface 4-116
e1 set loopback Interface 4-75
e1 set loopback Interface 4-117
e1 shutdown Interface 4-76
e1 shutdown Interface 4-118
e1 unframed Interface 4-76
A-31
e1 unframed Interface 4-119

early-media disable Voice 8-7
early-media-183 Voice 8-6
ebs QoS 6-12
echo-canceller Voice 1-63
effect-time Voice 4-23
eliminate-pulse Interface 4-7
em-phy-parm Voice 1-65
em-signal Voice 1-66
enable deactivate Link Layer Protocol 3-12
enable snmp trap updown Interface 1-7
encapsulation Link Layer Protocol 7-17
encapsulation Network Protocol 16-38
encapsulation-mode Security 6-12
encrypt-card backuped Security 6-43
encrypt-card fast-switch Security 6-43
encryption-algorithm Security 7-8
entity Voice 1-67
error-diffusion restraint config Interface 4-21
error-diffusion restraint enable Interface 4-22
escape-key System Management 5-9
esis Non-IP Architecture 2-23
esis enable Non-IP Architecture 2-24
esp authentication-algorithm Security 6-13
esp encryption-algorithm Security 6-14
exchange-mode Security 7-9
execute System Management 4-9
exit System Management 10-40
expired Network Protocol 9-39
F
fast-connect Voice 1-68
fax baudrate Voice 5-9
fax ecm Voice 5-10
A-32
fax level Voice 5-11

fax nsf-on Voice 5-12
fax protocol Voice 5-13
fax support-mode Voice 5-15
fax train-mode Voice 5-15
fdl Interface 4-40
fe1 clock Interface 4-49
fe1 code Interface 4-50
fe1 detect-ais (E1-F Interface) Interface 4-51
fe1 frame-format Interface 4-51
fe1 loopback Interface 4-52
fe1 timeslot-list Interface 4-52
fe1 unframed Interface 4-53
feac (CT3 Interface) Interface 4-84
fifo queue-length QoS 6-12
file prompt System Management 4-10
filename System Management 3-11
filter-policy export Routing Protocol 2-7
filter-policy import Routing Protocol 2-7
final-callednum Voice 4-24
firewall aspf Security 4-15
firewall default Security 4-2
firewall enable Security 4-3
firewall ethernet-frame-filter Link Layer Protocol 9-26
firewall fragments-inspect Security 4-3
firewall fragments-inspect { high | low } Security 4-4
A-33
firewall packet-filter Security 4-5

first-rule Voice 1-69
first-rule Voice 1-69
fixdisk System Management 4-11
flag Interface 4-120
flag Interface 4-130
flow-control System Management 5-10
flow-control Interface 2-5
flow-control Interface 3-5
flow-interval Interface 1-8
flow-interval Dial-up 1-22
flow-interval qos QoS 3-25
force-link Interface 2-6
force-metering Voice 4-24
format System Management 4-11
fqdn Security 8-9
fr bump Link Layer Protocol 6-22
fr class QoS 6-13
fr compression frf9 Link Layer Protocol 6-22
fr compression iphc Link Layer Protocol 6-23
fr congestion-threshold QoS 6-14
fr de del QoS 6-15
fr del inbound-interface QoS 6-16
fr del protocol ip QoS 6-17
fr dlci Link Layer Protocol 6-24
fr dlci-switch Link Layer Protocol 6-24
fr inarp Link Layer Protocol 6-25
fr interface-type Link Layer Protocol 6-26
fr ip-dscp Link Layer Protocol 6-28
fr iphc Link Layer Protocol 6-27
fr ip-precedence Link Layer Protocol 6-29
fr lmi n391dte Link Layer Protocol 6-30
fr lmi n392dce Link Layer Protocol 6-31
A-34
fr lmi n393dce Link Layer Protocol 6-33

fr lmi t392dce Link Layer Protocol 6-35
fr lmi type Link Layer Protocol 6-35
fr map bridge Link Layer Protocol 9-27
fr map clns Non-IP Architecture 1-7
fr map ip Link Layer Protocol 6-36
fr map ipx Link Layer Protocol 6-38
fr map ppp interface virtual-template Link Layer Protocol 6-39
fr match Link Layer Protocol 6-39
fr mpls-exp Link Layer Protocol 6-40
fr pvc-group Link Layer Protocol 6-41
fr pvc-pq QoS 6-18
fr pvc-protect Link Layer Protocol 6-41
fr switch Link Layer Protocol 6-43
fr switching Link Layer Protocol 6-44
fr traffic-policing QoS 6-19
fr traffic-shaping QoS 6-19
fragment QoS 6-20
framefill none Interface 4-8
frame-format Interface 4-121
frame-format (CE1/PRI Interface) Interface 4-22
frame-format (CT1/PRI Interface) Interface 4-41
frame-format (CT3 Interface) Interface 4-86
frame-length Interface 5-13
fr-class QoS 6-21
free unused porttag Getting Started 1-13
free user-interface System Management 5-11
frequency System Management 3-11
ft1 alarm-threshold Interface 4-64
A-35
ft1 bert (T1-F Interface) Interface 4-58

ft1 cable Interface 4-59
ft1 clock Interface 4-60
ft1 code Interface 4-60
ft1 data-coding Interface 4-61
ft1 fdl Interface 4-61
ft1 loopback Interface 4-62
ft1 sendloopcode Interface 4-65
ft1 timeslot-list Interface 4-63
ft3 (CT3 Interface) Interface 4-86
ftp System Management 4-30
ftp host source-interface System Management 4-31
ftp host source-ip System Management 4-32
ftp server enable System Management 4-21
ftp source-interface System Management 4-32
ftp source-ip System Management 4-33
ftp timeout System Management 4-23
ftp update System Management 4-24
ftp-operation System Management 3-12
ftp-server source-interface System Management 4-21
ftp-server source-ip System Management 4-22
G
gateway-list Network Protocol 9-40
get System Management 4-34
get System Management 10-41
gk-2nd-id Voice 7-4
gk-client Voice 7-3
gk-id Voice 7-5
gk-security call Voice 7-5
gk-security register-pwd Voice 7-6
gratuitous-arp-learning enable Network Protocol 2-8
gratuitous-arp-sending enable Network Protocol 2-8
gre checksum VPN 2-4
A-36
gre key VPN 2-5

group Routing Protocol 5-32
group-b Voice 4-25
gts QoS 3-27
gw-access-number Voice 6-16
gw-address Voice 7-7
gw-id Voice 7-8
H
header Getting Started 1-14
help System Management 10-41
history keep-time System Management 3-13
history-command max-size System Management 5-11
history-record enable System Management 3-13
history-records System Management 3-14
home-agent ip-address Network Protocol 16-38
hookoff-time Voice 1-70
host-route Routing Protocol 2-9
hotkey Getting Started 1-15
http-operation System Management 3-15
hwping System Management 3-16
hwping-agent enable System Management 3-16
hwping-agent max-requests System Management 3-17
hwping-server enable System Management 3-31
hwping-server tcpconnect System Management 3-32
hwping-server udpecho System Management 3-32
hwtacacs change-password self Security 1-59
hwtacacs nas-ip Security 1-60
hwtacacs scheme Security 1-60
I
icmp redirect send Network Protocol 10-23
icmp unreach send System Management 1-8
idlecode (in CE1/PRI Interface View) Interface 4-23
A-37
idlecode (in CT1/PRI Interface View) Interface 4-42

idle-mark Interface 4-6
idle-mark Non-IP Architecture 4-19
idle-timeout System Management 5-12
id-type Security 7-10
if-match QoS 3-28
if-match { destination-mac | source-mac } QoS 3-29
if-match acl Network Protocol 12-8
if-match acl Network Protocol 13-4
if-match acl Routing Protocol 6-10
if-match acl QoS 3-30
if-match any QoS 3-31
if-match as-path Routing Protocol 6-11
if-match atmclp QoS 3-31
if-match classifier QoS 3-32
if-match community Routing Protocol 6-12
if-match cost Routing Protocol 6-13
if-match dot1p-cos QoS 3-33
if-match dscp QoS 3-34
if-match fr-de QoS 3-35
if-match inbound-interface QoS 3-35
if-match interface Routing Protocol 6-13
if-match ip next-hop Routing Protocol 6-14
if-match ip-precedence QoS 3-36
if-match ip-prefix Routing Protocol 6-15
if-match mpls-exp QoS 7-1
if-match mpls-label MPLS 2-9
if-match outbound-interface QoS 3-37
if-match packet-length Network Protocol 12-8
if-match protocol QoS 2-9
if-match protocol QoS 3-38
if-match protocol http QoS 2-10
if-match protocol rtp QoS 2-11
if-match rtp QoS 3-38
A-38
if-match tag Routing Protocol 6-15

igmp enable Multicast Protocol 2-4
igmp group-limit Multicast Protocol 2-5
igmp group-policy Multicast Protocol 2-6
igmp host-join Multicast Protocol 2-6
igmp lastmember-queryinterval Multicast Protocol 2-7
igmp max-response-time Multicast Protocol 2-8
igmp proxy Multicast Protocol 2-9
igmp robust-count Multicast Protocol 2-9
igmp timer other-querier-present Multicast Protocol 2-10
igmp timer query Multicast Protocol 2-11
igmp version Multicast Protocol 2-12
ignore-lsp-checksum-error Routing Protocol 4-13
ike dpd Security 6-52
ike local-name Security 7-11
ike next-payload check disabled Security 7-11
ike peer (In IPSec policy view or IPSec policy template view) Security 7-12
ike peer (in System View) Security 7-12
ike proposal Security 7-13
ike sa keepalive-timer interval Security 7-14
ike sa keepalive-timer timeout Security 7-15
ike sa nat-keepalive-timer interval Security 7-16
ima ima-group Interface 5-14
ima-clock Interface 5-14
ima-test Interface 5-15
impedance Voice 1-71
import-route Routing Protocol 2-9
import-route Multicast Protocol 5-8
import-route isis Routing Protocol 4-15
import-route ospf MPLS 2-9
import-source Multicast Protocol 4-5
A-39
info-center channel System Management 1-23

info-center console channel System Management 1-23
info-center enable System Management 1-24
info-center logbuffer System Management 1-25
info-center logfile System Management 1-25
info-center loghost System Management 1-26
info-center loghost source System Management 1-27
info-center monitor channel System Management 1-28
info-center snmp channel System Management 1-28
info-center source System Management 1-29
info-center synchronous System Management 1-31
info-center timestamp System Management 1-32
info-center timestamp loghost System Management 1-33
info-center trapbuffer System Management 1-33
interface Interface 1-9
interface atm Interface 5-3
interface bridge-template Link Layer Protocol 9-27
interface dialer Dial-up 1-21
interface encrypt Security 6-44
interface ethernet Interface 6-4
interface ima Interface 5-16
interface logic-channel Interface 6-7
interface loopback Interface 6-15
interface mfr Link Layer Protocol 6-44
interface mp-group Interface 6-11
interface null Interface 6-15
interface serial [ p2p | p2mp ] Link Layer Protocol 6-45
interface tunnel VPN 2-5
interface virtual-ethernet Interface 6-12
interface virtual-template Interface 6-10
interface virtual-template VPN 1-5
interval-time Security 6-53
A-40
invert receive-clock Interface 4-9

invert transmit-clock Interface 4-9
ip Security 8-10
ip address Network Protocol 1-1
ip address bootp-alloc Network Protocol 8-2
ip address dhcp-alloc Network Protocol 9-59
ip address ppp-negotiate Network Protocol 1-2
ip address unnumbered Network Protocol 1-3
ip as-path-acl Routing Protocol 5-34
ip binding vpn-instance MPLS 2-10
ip community-list Routing Protocol 5-35
ip count enable Network Protocol 6-5
ip count exterior-threshold Network Protocol 6-6
ip count firewall-denied Network Protocol 6-7
ip count inbound-packets Network Protocol 6-7
ip count interior-threshold Network Protocol 6-8
ip count outbound-packets Network Protocol 6-9
ip count rule Network Protocol 6-9
ip count timeout Network Protocol 6-10
ip df-check enable System Management 1-8
ip fast-forwarding Network Protocol 10-23
ip forward-broadcast Network Protocol 10-29
ip host Network Protocol 3-1
ip ip-prefix Routing Protocol 6-16
ip local policy route-policy Network Protocol 12-9
ip multicast-fast-forwarding Network Protocol 10-30
ip multicast-policy route-policy Network Protocol 13-5
ip option source-routing System Management 1-9
ip policy route-policy Network Protocol 12-9
ip pool Security 1-11
ip relay address (in Interface View) Network Protocol 9-53
ip relay address cycle Network Protocol 9-54
A-41
ip relay address interface (in System View) Network Protocol 9-55

ip route-static Routing Protocol 1-15
ip route-static detect-group System Management 2-7
ip route-static vpn-instance MPLS 2-11
ip rpf-longest-match Multicast Protocol 6-3
ip rpf-route-static Multicast Protocol 6-3
ip source-address-check System Management 1-10
ip tcp vjcompress Link Layer Protocol 1-27
ip urpf Network Protocol 5-1
ip vpn-instance MPLS 2-12
ip-dscp Link Layer Protocol 7-18
ip-precedence Link Layer Protocol 7-19
ipsec card-proposal Security 6-45
ipsec policy (in System View) Security 6-16
ipsec policy(in Interface View) Security 6-15
ipsec policy-template Security 6-18
ipsec proposal Security 6-19
ipsec sa global-duration Security 6-20
ipv4-family Routing Protocol 5-60
ipv4-family MPLS 2-13
ipv4-family multicast Multicast Protocol 5-9
ipv4-family vpn-instance Routing Protocol 2-10
ipv4-family vpnv4 Routing Protocol 5-61
ipx enable Non-IP Architecture 3-18
ipx encapsulation Non-IP Architecture 3-19
ipx netbios-propagation Non-IP Architecture 3-20
ipx network Non-IP Architecture 3-21
ipx rip import-route Non-IP Architecture 3-21
ipx rip mtu Non-IP Architecture 3-22
ipx rip multiplier Non-IP Architecture 3-23
ipx rip timer update Non-IP Architecture 3-23
ipx route load-balance-path Non-IP Architecture 3-26
ipx route max-reserve-path Non-IP Architecture 3-26
ipx route-static Non-IP Architecture 3-24
A-42
ipx sap disable Non-IP Architecture 3-27

ipx sap gns-disable-reply Non-IP Architecture 3-28
ipx sap gns-load-balance Non-IP Architecture 3-28
ipx sap max-reserve-servers Non-IP Architecture 3-29
ipx sap mtu Non-IP Architecture 3-30
ipx sap multiplier Non-IP Architecture 3-30
ipx sap timer update Non-IP Architecture 3-31
ipx service Non-IP Architecture 3-32
ipx split-horizon Non-IP Architecture 3-33
ipx tick Non-IP Architecture 3-33
ipx update-change-only Non-IP Architecture 3-34
isdn bch-local-manage Link Layer Protocol 3-13
isdn bch-select-way Link Layer Protocol 3-14
isdn caller-number Link Layer Protocol 3-14
isdn calling Link Layer Protocol 3-15
isdn check-called-number Link Layer Protocol 3-17
isdn crlength Link Layer Protocol 3-17
isdn ie passthrough Interface 4-24
isdn ie passthrough Interface 4-42
isdn ie passthrough Link Layer Protocol 3-18
isdn ignore connect-ack Link Layer Protocol 3-20
isdn ignore hlc Link Layer Protocol 3-21
isdn ignore llc Link Layer Protocol 3-22
isdn ignore sending-complete Link Layer Protocol 3-23
isdn L3-timer Link Layer Protocol 3-24
isdn number-property Link Layer Protocol 3-25
isdn overlap-sending Link Layer Protocol 3-32
isdn pri-slipwnd-size Link Layer Protocol 3-33
isdn protocol-mode Link Layer Protocol 3-33
isdn protocol-type Link Layer Protocol 3-34
isdn q921-permanent Link Layer Protocol 3-35
isdn send-restart Link Layer Protocol 3-36
isdn spid auto_trigger Link Layer Protocol 3-37
isdn spid nit Link Layer Protocol 3-37
A-43
isdn spid resend Link Layer Protocol 3-40

isdn spid service Link Layer Protocol 3-39
isdn spid timer Link Layer Protocol 3-38
isdn spid1 Link Layer Protocol 3-40
isdn spid2 Link Layer Protocol 3-41
isdn statistics Link Layer Protocol 3-42
isdn two-tei Link Layer Protocol 3-44
isis Routing Protocol 4-16
isis authentication-mode Routing Protocol 4-17
isis circuit-level Routing Protocol 4-18
isis cost Routing Protocol 4-18
isis dis-priority Routing Protocol 4-19
isis enable Routing Protocol 4-20
isis enable clns Non-IP Architecture 2-25
isis mesh-group Routing Protocol 4-21
isis small-hello Routing Protocol 4-22
isis timer csnp Routing Protocol 4-22
isis timer hello Routing Protocol 4-23
isis timer holding-multiplier Routing Protocol 4-24
isis timer lsp Routing Protocol 4-25
isis timer retransmit Routing Protocol 4-26
is-level Routing Protocol 4-26
itf (CE1/PRI Interface) Interface 4-25
itf (CT1/PRI Interface) Interface 4-44
J
jitter-interval System Management 3-17
jitter-packetnum System Management 3-18
K
keepalive VPN 2-7
key Security 1-32
key Security 1-61
A-44
L
l2tp enable VPN 1-7
l2tp-auto-client enable VPN 1-6
l2tp-group VPN 1-8
l2tpmoreexam enable VPN 1-7
l2vpn-family MPLS 3-12
language-mode Getting Started 1-17
lapb max-frame Link Layer Protocol 8-17
lapb modulo Link Layer Protocol 8-18
lapb pollremote Link Layer Protocol 8-19
lapb retry Link Layer Protocol 8-20
lapb timer Link Layer Protocol 8-20
lapb window-size Link Layer Protocol 8-21
lcd System Management 4-34
ldap-server Security 8-7
level Security 1-12
limit Network Protocol 11-9
line Voice 1-72
line Voice 4-26
link-protocol Interface 4-132
link-protocol fr Link Layer Protocol 6-46
link-protocol fr mfr Link Layer Protocol 6-46
link-protocol hdlc Link Layer Protocol 5-1
link-protocol lapb Link Layer Protocol 8-22
link-protocol ppp Link Layer Protocol 1-5
link-protocol sdlc Non-IP Architecture 4-20
link-protocol slip Link Layer Protocol 4-1
link-protocol sot Network Protocol 15-2
link-protocol x25 Link Layer Protocol 8-23
llc2 max-ack Non-IP Architecture 4-21
llc2 max-send-queue Non-IP Architecture 4-21
llc2 max-transmission Non-IP Architecture 4-22
llc2 modulo Non-IP Architecture 4-22
A-45
llc2 receive-window Non-IP Architecture 4-23

llc2 timer ack Non-IP Architecture 4-24
llc2 timer ack-delay Non-IP Architecture 4-24
llc2 timer busy Non-IP Architecture 4-25
llc2 timer poll Non-IP Architecture 4-26
llc2 timer reject Non-IP Architecture 4-26
loadbandwidth Routing Protocol 1-19
local Security 7-17
local-address Security 7-17
locality Security 8-11
local-server Security 1-33
local-user Security 1-13
local-user VPN 3-20
local-user password-display-mode Security 1-13
lock Getting Started 1-18
log enable Security 4-16
log startup Getting Started 1-18
log-peer-change Routing Protocol 3-36
loopback Interface 3-7
loopback Voice 4-27
loopback (CE1/PRI Interface) Interface 4-26
loopback (CE3 Interface) Interface 4-77
loopback (CT1/PRI Interface) Interface 4-44
loopback (CT3 Interface) Interface 4-88
loopback (Ethernet/GE Interface) Interface 2-6
A-46
loopback (ISDN BRI Interface) Interface 4-107

looptest Interface 1-11
lr QoS 3-39
lr percent QoS 3-40
ls System Management 4-35
ls System Management 10-42
lsp-trigger MPLS 1-5
M
mac-address Interface 3-14
mac-address Interface 6-13
mac-address Link Layer Protocol 9-28
mac-address timer aging Interface 3-7
mandatory-chap VPN 1-9
mandatory-lcp VPN 1-9
map bridge Link Layer Protocol 7-20
map bridge-group Link Layer Protocol 7-21
map clns Non-IP Architecture 1-8
map ip Link Layer Protocol 7-22
map ppp Link Layer Protocol 7-23
map routed-bridge Link Layer Protocol 7-24
match Link Layer Protocol 7-25
match-template Voice 1-73
max-call (in Voice Dial Program View) Voice 1-75
max-call (in Voice Entity View) Voice 1-76
max-packet-process Interface 6-5
md5-compatible Routing Protocol 4-28
mdl (CT3 Interface) Interface 4-88
memory Routing Protocol 7-4
memory auto-establish disable Routing Protocol 7-2
memory auto-establish enable Routing Protocol 7-3
mfc (R2 CAS) Voice 4-27
mfr bundle-name Link Layer Protocol 6-47
mfr fragment Link Layer Protocol 6-48
A-47
mfr fragment-size Link Layer Protocol 6-48

mfr link-name Link Layer Protocol 6-49
mfr retry Link Layer Protocol 6-50
mfr timer ack Link Layer Protocol 6-51
mfr timer hello Link Layer Protocol 6-51
mfr window-size Link Layer Protocol 6-52
min-active-links Interface 5-17
mkdir System Management 4-12
mobile-ip Network Protocol 16-10
mobile-ip foreign-agent Network Protocol 16-20
mobile-ip foreign-agent service Network Protocol 16-22
mobile-ip home-agent Network Protocol 16-15
mobile-ip home-agent mobile-router Network Protocol 16-29
mobile-ip irdp Network Protocol 16-53
mobile-ip mobile-router Network Protocol 16-40
mobile-ip mobile-router ccoa Network Protocol 16-40
mobile-ip mobile-router roam Network Protocol 16-41
mobile-ip mobile-router solicit Network Protocol 16-42
mobile-ip prefix-length Network Protocol 16-23
mobile-ip registration-lifetime Network Protocol 16-24
mobile-ip secure Network Protocol 16-51
mobile-ip tunnel path-mtu-discovery Network Protocol 16-11
mobile-ip virtual-network Network Protocol 16-17
mobile-network Network Protocol 16-30
mobile-network Network Protocol 16-43
mobile-node Network Protocol 16-27
mode Voice 4-28
mode (SIP Client) Voice 8-7
modem System Management 5-13
modem Dial-up 3-1
modem adapt no-waiting-connect Interface 4-11
modem auto-answer System Management 5-13
A-48
modem auto-answer Dial-up 3-2

modem compatible-param Voice 5-16
modem protocol Voice 5-17
modem timer answer System Management 5-14
monitor-port Interface 3-16
more System Management 4-13
motorola base-svc Voice 3-9
motorola encapsulation Voice 3-10
motorola max-voice Voice 3-10
motorola remote-id Voice 3-11
move System Management 4-13
mpls MPLS 1-7
mpls l2vc MPLS 3-8
mpls l2vpn MPLS 3-13
mpls l2vpn encapsulation MPLS 3-14
mpls label advertise MPLS 1-19
mpls ldp MPLS 1-20
mpls ldp enable MPLS 1-21
mpls ldp hops-count MPLS 1-22
mpls ldp loop-detect MPLS 1-22
mpls ldp password MPLS 1-23
mpls ldp path-vectors MPLS 1-23
mpls ldp remote-peer MPLS 1-24
mpls ldp reset-session MPLS 1-25
mpls ldp timer MPLS 1-25
mpls ldp transport-ip MPLS 1-26
mpls lsr-id MPLS 1-7
mpls static-l2vc MPLS 3-7
mpls-exp Link Layer Protocol 7-26
msdp Multicast Protocol 4-6
msdp-tracert Multicast Protocol 4-7
mtracert Multicast Protocol 1-6
mtu Link Layer Protocol 7-27
mtu MPLS 3-15
A-49
mtu (ATM Interface) Interface 5-3

mtu (Ethernet/GE Interface) Interface 2-7
mtu (POS Interface) Interface 4-133
mtu (Serial Interface) Interface 4-11
mtu (Tunnel interface) VPN 2-6
mtu label-including MPLS 1-6
multicast minimum-ttl Multicast Protocol 1-8
multicast packet-boundary Multicast Protocol 1-9
multicast route-limit Multicast Protocol 1-9
multicast routing-enable Multicast Protocol 1-10
multi-path-number Routing Protocol 3-37
multiplex mode Interface 4-122
N
nas-ip Security 1-34
nas-ip Security 1-62
nat address-group Network Protocol 11-10
nat aging-time Network Protocol 11-11
nat alg Network Protocol 11-12
nat connection-limit-policy Network Protocol 11-23
nat dns-map Network Protocol 11-13
nat outbound Network Protocol 11-14
nat outbound interface Network Protocol 11-15
nat outbound static Network Protocol 11-16
nat overlapaddress Network Protocol 11-17
nat server Network Protocol 11-18
nat static Network Protocol 11-21
nat static inside Network Protocol 11-22
nat traversal Security 7-18
national-bit Interface 4-78
naturemask-arp Network Protocol 2-5
nbns-list Network Protocol 9-41
nesting Security 3-3
netbios-type Network Protocol 9-41
A-50
network Network Protocol 9-42

network Routing Protocol 2-11
network Multicast Protocol 5-10
network-entity Routing Protocol 4-29
normal-connect slow-h245 Voice 1-77
nslookup type Network Protocol 3-7
nssa Routing Protocol 3-39
ntp-service access System Management 6-5
ntp-service authentication enable System Management 6-6
ntp-service authentication-keyid System Management 6-6
ntp-service broadcast-client System Management 6-7
ntp-service broadcast-server System Management 6-8
ntp-service max-dynamic-sessions System Management 6-8
ntp-service multicast-client System Management 6-9
ntp-service multicast-server System Management 6-10
ntp-service refclock-master System Management 6-11
ntp-service reliable authentication-keyid System Management 6-11
ntp-service source-interface System Management 6-12
ntp-service unicast-peer System Management 6-13
ntp-service unicast-server System Management 6-14
number-match Voice 1-78
number-substitute Voice 1-79
O
oam ais-rdi Link Layer Protocol 7-28
oam frequency Link Layer Protocol 7-29
oamping interface Link Layer Protocol 7-30
opaque-capability Routing Protocol 3-40
open System Management 4-36
open-trunk Voice 1-79
open-trunk Voice 4-30
option System Management 2-4
A-51
option Network Protocol 9-43

organization Security 8-12
organizational-unit Security 8-12
originating-rp Multicast Protocol 4-9
ospf Routing Protocol 3-40
ospf authentication-mode Routing Protocol 3-41
ospf cost Routing Protocol 3-42
ospf dr-priority Routing Protocol 3-43
ospf mib-binding Routing Protocol 3-44
ospf mtu-enable Routing Protocol 3-44
ospf network-type Routing Protocol 3-45
ospf timer dead Routing Protocol 3-46
ospf timer hello Routing Protocol 3-47
ospf timer poll Routing Protocol 3-48
ospf timer retransmit Routing Protocol 3-49
ospf trans-delay Routing Protocol 3-49
ospf vpn-instance MPLS 2-14
outband Voice 1-80
outband vofr Voice 3-12
overlap voip h323 Voice 1-82
P
packing timer Link Layer Protocol 7-31
pad Link Layer Protocol 8-24
pad-mode pos enable System Management 11-8
parity System Management 5-15
passive System Management 4-36
password System Management 3-19
password Security 1-14
password-digit Voice 6-17
payload-size Voice 1-82
pcm Voice 4-31
peer Routing Protocol 2-12
peer Routing Protocol 3-50
A-52
peer Multicast Protocol 4-10

peer Security 7-19
peer advertise-community Routing Protocol 5-37
peer advertise-community Multicast Protocol 5-10
peer allow-as-loop Routing Protocol 5-38
peer allow-as-loop Multicast Protocol 5-11
peer as-number Routing Protocol 5-39
peer as-path-acl Routing Protocol 5-39
peer as-path-acl Multicast Protocol 5-12
peer connect-interface Routing Protocol 5-40
peer default-route-advertise Routing Protocol 5-41
peer default-route-advertise MPLS 2-16
peer description Routing Protocol 5-41
peer description Multicast Protocol 4-11
peer ebgp-max-hop Routing Protocol 5-42
peer enable Routing Protocol 5-43
peer enable MPLS 3-15
peer enbale Multicast Protocol 5-13
peer filter-policy Routing Protocol 5-44
peer filter-policy Multicast Protocol 5-13
peer group Routing Protocol 5-45
peer ip-prefix Routing Protocol 5-46
peer ip-prefix Multicast Protocol 5-14
peer label-route-capability MPLS 2-16
peer mesh-group Multicast Protocol 4-11
peer minimum-ttl Multicast Protocol 4-12
peer next-hop-invariable MPLS 2-17
peer next-hop-local Routing Protocol 5-47
peer next-hop-local Multicast Protocol 5-15
peer password Routing Protocol 5-47
peer public-as-only Routing Protocol 5-48
peer public-as-only Multicast Protocol 5-16
peer reflect-client Routing Protocol 5-49
peer reflect-client Multicast Protocol 5-16
A-53
peer request-sa-enable Multicast Protocol 4-13

peer route-policy Routing Protocol 5-50
peer route-policy Multicast Protocol 5-17
peer route-update-interval Routing Protocol 5-51
peer sa-cache-maximum Multicast Protocol 4-13
peer sa-policy Multicast Protocol 4-14
peer sa-request-policy Multicast Protocol 4-15
peer shutdown Routing Protocol 5-51
peer timer Routing Protocol 5-52
peer upe MPLS 2-18
peer-public-key end System Management 10-17
permanent-active Voice 2-1
pfs Security 6-21
phy-mru Interface 4-13
physical-mode Interface 4-12
pim Multicast Protocol 3-11
pim bsr-boundary Multicast Protocol 3-12
pim dm Multicast Protocol 3-13
pim neighbor-limit Multicast Protocol 3-13
pim neighbor-policy Multicast Protocol 3-14
pim sm Multicast Protocol 3-15
pim timer hello Multicast Protocol 3-15
ping System Management 1-10
ping clns Non-IP Architecture 2-26
ping ipx Non-IP Architecture 3-35
pki delete-certificate Security 8-14
pki domain Security 8-7
pki entity Security 8-13
pki import-certificate Security 8-14
pki request-certificate Security 8-15
pki retrieval-certificate Security 8-16
pki retrieval-crl Security 8-16
pki validate-certificate Security 8-17
plc-mode Voice 1-84
A-54
policy vpn-target MPLS 2-18

port access vlan Interface 3-8
port hybrid pvid vlan Interface 3-8
port hybrid vlan Interface 3-9
port link-type Interface 3-10
port trunk permit vlan Interface 3-10
port trunk pvid vlan Interface 3-11
portal Security 2-8
portal all-resource-id Security 2-18
portal auth-network Security 2-9
portal fast-authentication Security 2-14
portal free-ip Security 2-9
portal free-user Security 2-10
portal method Security 2-11
portal resource Security 2-19
portal server Security 2-12
portal service-type Security 2-15
portal update-resource Security 2-16
portal update-resource-id Security 2-17
portal upload-ip Security 2-16
port-mapping Security 4-17
pos-server app tcp System Management 11-9
pos-server app x25 System Management 11-10
pos-server checkschar System Management 11-11
pos-server enable System Management 11-11
pos-server fcm System Management 11-12
pos-server map System Management 11-13
pos-server padmode System Management 11-14
pos-server source-ip System Management 11-15
pos-server wait-time System Management 11-16
power-source Voice 2-1
ppp authentication-mode Link Layer Protocol 1-7
ppp callback Dial-up 1-23
ppp callback ntstring Dial-up 1-23
A-55
ppp chap password Link Layer Protocol 1-8

ppp chap user Link Layer Protocol 1-9
ppp compression iphc Link Layer Protocol 1-28
ppp compression iphc rtp-connections Link Layer Protocol 1-29
ppp compression iphc tcp-connections Link Layer Protocol 1-29
ppp compression stac-lzs Link Layer Protocol 1-30
ppp ipcp dns Link Layer Protocol 1-10
ppp ipcp dns admit-any Link Layer Protocol 1-11
ppp ipcp dns request Link Layer Protocol 1-12
ppp ipcp remote-address forced Link Layer Protocol 1-11
ppp lcp mru consistent Link Layer Protocol 1-13
ppp lqc Link Layer Protocol 1-14
ppp mp Link Layer Protocol 1-15
ppp mp binding-mode Link Layer Protocol 1-6
ppp mp lfi Link Layer Protocol 1-16
ppp mp lfi Link Layer Protocol 1-31
ppp mp lfi delay-per-frag Link Layer Protocol 1-32
ppp mp max-bind Link Layer Protocol 1-17
ppp mp min-bind Link Layer Protocol 1-18
ppp mp min-fragment Link Layer Protocol 1-19
ppp mp mp-group Link Layer Protocol 1-16
ppp mp sort-buffer-size Link Layer Protocol 1-20
ppp mp user Link Layer Protocol 1-20
ppp mp virtual-template Link Layer Protocol 1-21
ppp pap local-user Link Layer Protocol 1-22
ppp timer negotiate Link Layer Protocol 1-23
pppoe-client Link Layer Protocol 2-8
pppoe-server bind virtual-template Link Layer Protocol 2-2
pppoe-server log-information off Link Layer Protocol 2-3
pppoe-server max-sessions local-mac Link Layer Protocol 2-3
pppoe-server max-sessions remote-mac Link Layer Protocol 2-4
pppoe-server max-sessions total Link Layer Protocol 2-5
pq QoS 6-22
preference Routing Protocol 2-13
A-56

preference clns Non-IP Architecture 2-26
pre-shared-key Security 7-19
pre-shared-key VPN 3-21
primary accounting Security 1-35
primary accounting Security 1-63
primary authentication Security 1-36
primary authentication Security 1-64
primary authorization Security 1-65
priority Voice 1-85
priority Voice 3-12
pri-set Voice 4-31
pri-set (CE1/PRI Interface) Interface 4-27
pri-set (CT1/PRI Interface) Interface 4-45
private-ip VPN 3-22
private-line Voice 1-85
probe-failtimes System Management 3-20
process-config Voice 6-18
promiscuous Interface 2-8
proposal Security 6-22
protocol inbound System Management 5-15
protocol-priority QoS 5-1
public-ip VPN 3-21
public-key-code begin System Management 10-17
public-key-code end System Management 10-18
put System Management 4-37
put System Management 10-43
pvc Link Layer Protocol 7-31
pvc max-number Link Layer Protocol 7-33
pvc-group Link Layer Protocol 7-33
pvc-pq QoS 6-22
pvc-protect Link Layer Protocol 7-35
A-57
pvp create Link Layer Protocol 7-36

pvp limit Link Layer Protocol 7-37
pwd System Management 4-15
Q
qmtoken QoS 3-60
qos apply policy QoS 3-41
qos car QoS 1-2
qos carl QoS 1-4
qos cq QoS 3-9
qos cql default-queue QoS 3-10
qos cql inbound-interface QoS 3-11
qos cql protocol QoS 3-12
qos cql protocol mpls exp QoS 7-1
qos cql queue QoS 3-13
qos cql queue serving QoS 3-14
qos fifo queue-length QoS 3-1
qos gts QoS 1-5
qos lr QoS 1-7
qos max-bandwidth QoS 3-42
qos policy QoS 3-43
qos pq QoS 3-3
qos pql default-queue QoS 3-4
qos pql inbound-interface QoS 3-5
qos pql protocol QoS 3-6
qos pql protocol mpls exp QoS 7-2
qos pql queue QoS 3-7
qos reserved-bandwidth QoS 3-58
qos rtpq QoS 3-59
qos wfq QoS 3-16
qos wred QoS 4-2
qos wred dscp QoS 4-2
A-58
qos wred ip-precedence QoS 4-3

qos wred weighting-constant QoS 4-4
queue af QoS 3-43
queue ef QoS 3-44
queue wfq QoS 3-46
queue-length QoS 3-46
quit Getting Started 1-19
quit System Management 4-38
R
radius nas-ip Security 1-38
radius scheme Security 1-37
radius trap Security 1-39
ras-on Voice 7-8
re-answer Voice 4-33
re-authentication System Management 5-16
reboot System Management 1-13
receive gain Voice 1-86
redialtimes Voice 6-19
redirect bind vpn-instance System Management 10-3
redirect disconnect System Management 10-7
redirect enable System Management 10-4
redirect listen-port System Management 10-4
redirect refuse-negotiation System Management 10-7
redirect return-deal from-telnet System Management 10-5
redirect return-deal from-terminal System Management 10-6
redirect timeout System Management 10-5
reflect between-clients Routing Protocol 5-53
reflector cluster-id Routing Protocol 5-54
refresh bgp Routing Protocol 5-55
register lifetime Network Protocol 16-44
register retransmit Network Protocol 16-44
A-59
register-enable Voice 8-8

register-number Voice 4-34
register-policy Multicast Protocol 3-16
register-value Voice 4-35
remark atmclp QoS 3-47
remark dot1p QoS 3-48
remark dscp QoS 3-48
remark fr-de QoS 3-50
remark ip-precedence QoS 3-50
remark mpls-exp QoS 7-3
remote address Network Protocol 1-4
remote-address Security 7-20
remotehelp System Management 4-38
remote-ip MPLS 1-27
remote-name Security 7-20
remove System Management 10-44
remove slot System Management 1-41
rename System Management 4-15
renew Voice 4-38
reset Routing Protocol 2-13
reset acl counter Security 3-3
reset alarm urgent System Management 1-42
reset arp Network Protocol 2-5
reset atm Interface 5-4
reset bgp Routing Protocol 5-56
reset bgp flap-info Routing Protocol 5-56
reset bgp group Routing Protocol 5-57
reset bridge address-table Link Layer Protocol 9-28
reset bridge traffic Link Layer Protocol 9-29
reset clns statistics Non-IP Architecture 2-27
reset counters controller e1 Interface 4-28
reset counters controller t1 Interface 4-46
A-60
reset counters interface Interface 1-12

reset counters interface Interface 3-12
reset counters interface encrypt Security 6-46
reset dampening Routing Protocol 5-58
reset dar protocol-statistic QoS 2-12
reset dar session QoS 2-13
reset dhcp relay statistics Network Protocol 9-56
reset dhcp server conflict Network Protocol 9-44
reset dhcp server ip-in-use Network Protocol 9-44
reset dhcp server statistics Network Protocol 9-45
reset dlsw bridge-entry Non-IP Architecture 4-27
reset dlsw circuits Non-IP Architecture 4-27
reset dlsw ethernet-backup circuit Non-IP Architecture 4-60
reset dlsw ethernet-backup map Non-IP Architecture 4-61
reset dlsw reachable-cache Non-IP Architecture 4-28
reset dlsw tcp Non-IP Architecture 4-48
reset dns dynamic-host Network Protocol 3-8
reset dvpn all VPN 3-23
reset dvpn map VPN 3-23
reset dvpn session VPN 3-24
reset dvpn statistics VPN 3-24
reset encrypt-card sa Security 6-46
reset encrypt-card statistics Security 6-47
reset encrypt-card syslog Security 6-48
reset esis statistics Non-IP Architecture 2-28
reset fcm System Management 11-17
reset firewall ethernet-frame-filter Link Layer Protocol 9-30
reset firewall-statistics Security 4-7
reset fr inarp Link Layer Protocol 6-53
reset hwtacacs statistics Security 1-66
reset igmp group Multicast Protocol 2-13
reset ike sa Security 7-21
reset ip count Network Protocol 6-11
reset ip fast-forwarding cache Network Protocol 10-24
A-61
reset ip multicast-fast-forwarding cache Network Protocol 10-30

reset ip routing-table Routing Protocol 1-14
reset ip statistics Network Protocol 10-25
reset ipsec sa Security 6-23
reset ipsec statistics Security 6-25
reset ipx routing-table statistics Non-IP Architecture 3-36
reset ipx statistics Non-IP Architecture 3-36
reset isis all Routing Protocol 4-30
reset isis peer Routing Protocol 4-31
reset l2tp session VPN 1-10
reset l2tp tunnel VPN 1-11
reset l2tp user VPN 1-11
reset lapb Link Layer Protocol 8-25
reset loadsharing Routing Protocol 1-20
reset logbuffer System Management 1-34
reset mobile-ip binding Network Protocol 16-18
reset mobile-ip mobile-router Network Protocol 16-46
reset mobile-ip node-statistics Network Protocol 16-28
reset mobile-ip statistics Network Protocol 16-12
reset mobile-ip visitor Network Protocol 16-25
reset mpls statistics MPLS 1-8
reset msdp peer Multicast Protocol 4-16
reset msdp sa-cache Multicast Protocol 4-16
reset msdp statistics Multicast Protocol 4-17
reset multicast forwarding-table Multicast Protocol 1-11
reset multicast routing-table Multicast Protocol 1-12
reset nat Network Protocol 11-23
reset ospf Routing Protocol 3-52
reset pim neighbor Multicast Protocol 3-17
reset pim routing-table Multicast Protocol 3-17
reset portal Security 2-13
reset pos System Management 11-17
reset ppp compression iphc Link Layer Protocol 1-32
reset ppp compression stac-lzs Link Layer Protocol 1-33
A-62
reset pppoe-client Link Layer Protocol 2-9

reset pppoe-server Link Layer Protocol 2-5
reset radius statistics Security 1-39
reset recycle-bin System Management 4-16
reset saved-configuration System Management 4-59
reset stop-accounting-buffer Security 1-40
reset stop-accounting-buffer Security 1-66
reset stp statistics Link Layer Protocol 9-30
reset tcp statistics Network Protocol 10-25
reset trapbuffer System Management 1-35
reset udp statistics Network Protocol 10-26
reset vlan statistics vid Interface 6-6
reset voice call-history-record line Voice 1-87
reset voice em Voice 4-39
reset voice fax statistics Voice 5-18
reset voice fax trans-statistics Voice 5-18
reset voice ipp Voice 1-88
reset voice r2 Voice 4-39
reset voice rcv Voice 1-88
reset voice sip Voice 8-9
reset voice vcc Voice 6-20
reset voice voip data-statistic Voice 1-89
reset voice vpp Voice 1-89
reset web java-blocking counter Security 5-21
reset web log-buf Security 5-22
reset web url-filter host counter Security 5-20
reset web url-filter parameter counter Security 5-21
reset x25 Link Layer Protocol 8-25
reset xot Link Layer Protocol 8-24
restart Interface 1-13
retry System Management 2-5
retry Security 1-41
retry realtime-accounting Security 1-42
retry stop-accounting Security 1-43
A-63
retry stop-accounting Security 1-67

return Getting Started 1-20
reverse Voice 4-40
reverse-rts Interface 4-13
reverse-tunnel Network Protocol 16-46
ring-generate Voice 1-90
rip Routing Protocol 2-14
rip authentication-mode Routing Protocol 2-15
rip input Routing Protocol 2-16
rip metricin Routing Protocol 2-16
rip metricout Routing Protocol 2-17
rip output Routing Protocol 2-18
rip split-horizon Routing Protocol 2-19
rip triggered Routing Protocol 2-20
rip version Routing Protocol 2-20
rip work Routing Protocol 2-21
rlogin System Management 10-51
rmdir System Management 4-17
rmon alarm System Management 9-7
rmon event System Management 9-8
rmon history System Management 9-9
rmon prialarm System Management 9-10
rmon statistics System Management 9-11
root-certificate fingerprint Security 8-8
routed-bridge protocol Link Layer Protocol 7-38
route-distinguisher MPLS 2-19
route-policy Network Protocol 12-10
route-policy Network Protocol 13-6
route-policy Routing Protocol 6-18
router id Routing Protocol 3-53
route-tag MPLS 2-20
routing-table limit MPLS 2-21
A-64
rsa local-key-pair create System Management 10-18

rsa local-key-pair destroy System Management 10-20
rsa peer-public-key System Management 10-20
rsh System Management 10-48
rtpq QoS 6-23
rule Security 3-4
rule Voice 1-90
S
sa authentication-hex Security 6-25
sa duration Security 6-27
sa duration Security 7-22
sa encryption-hex Security 6-28
sa spi Security 6-29
sa string-key Security 6-31
save System Management 4-60
schedule reboot at System Management 1-42
schedule reboot delay System Management 1-43
scheme Security 1-15
scramble Interface 4-134
screen-length System Management 5-17
screen-width System Management 5-18
script trigger dial Dial-up 3-3
script-string Dial-up 3-4
sdlc controller Non-IP Architecture 4-28
sdlc mac-map local Non-IP Architecture 4-29
sdlc mac-map remote Non-IP Architecture 4-30
sdlc max-pdu Non-IP Architecture 4-31
sdlc max-send-queue Non-IP Architecture 4-31
sdlc max-transmission Non-IP Architecture 4-32
sdlc modulo Non-IP Architecture 4-32
A-65
sdlc sap-map local Non-IP Architecture 4-33

sdlc sap-map remote Non-IP Architecture 4-34
sdlc simultaneous Non-IP Architecture 4-34
sdlc status Non-IP Architecture 4-35
sdlc timer ack Non-IP Architecture 4-36
sdlc timer lifetime Non-IP Architecture 4-37
sdlc timer poll Non-IP Architecture 4-37
sdlc window Non-IP Architecture 4-38
sdlc xid Non-IP Architecture 4-39
secondary accounting Security 1-44
secondary accounting Security 1-68
secondary authentication Security 1-44
secondary authentication Security 1-69
secondary authorization Security 1-69
security acl Security 6-32
security-policy-server Security 2-19
seizure-ack Voice 4-41
selectlanguage Voice 6-21
select-mode Voice 4-41
select-rule rule-order Voice 1-94
select-rule search-stop Voice 1-95
select-rule type-first Voice 1-96
select-stop Voice 1-97
send System Management 5-18
sendat Dial-up 3-6
send-busytone Voice 1-98
sendloopcode Interface 4-47
send-number (in Voice Entity View) Voice 1-98
send-number (in Voice Subscriber Line View) Voice 1-99
sendpacket passroute System Management 3-21
sendring Voice 4-43
send-ring Voice 1-100
send-trap System Management 3-20
seq-number Voice 3-13
A-66
server-type Security 1-45

service cbr Link Layer Protocol 7-38
service data Voice 1-100
service modem-callback Dial-up 3-7
service ubr Link Layer Protocol 7-40
service vbr-nrt Link Layer Protocol 7-40
service vbr-rt Link Layer Protocol 7-41
service-type Security 1-16
service-type ftp Security 1-17
service-type ppp Security 1-18
session algorithm-suite VPN 3-25
session idle-time VPN 1-12
session idle-timeout VPN 3-26
session keepalive-interval VPN 3-26
session setup-interval VPN 3-27
set authentication password System Management 5-19
set-overload Routing Protocol 4-31
sftp System Management 10-46
sftp server enable System Management 10-36
sftp source-interface System Management 10-47
sftp source-ip System Management 10-48
sham-link MPLS 2-22
shdsl annex Interface 5-27
shdsl mode Interface 5-39
shdsl psd Interface 5-28
shdsl rate Interface 5-29
shdsl snr-margin Interface 5-30
shdsl wire Interface 5-31
shell System Management 5-20
shell priority high System Management 5-21
shutdown Interface 1-14
shutdown Link Layer Protocol 6-52
A-67
shutdown Multicast Protocol 4-17

shutdown (in Voice Entity View) Voice 1-101
shutdown (in Voice Subscriber Line View) Voice 1-101
signal-value Voice 4-43
silence-th-span Voice 1-102
silent-interface Routing Protocol 3-54
silent-interface Routing Protocol 4-32
simultaneous-bindings Network Protocol 16-47
sip Voice 8-9
sip-call Voice 8-10
sip-comp Voice 8-10
sip-comp agent Voice 8-11
sip-domain Voice 8-12
sip-id Voice 8-12
sip-server Voice 8-13
snmp-agent System Management 7-10
snmp-agent community System Management 7-10
snmp-agent group System Management 7-11
snmp-agent local-engineid System Management 7-13
snmp-agent mib-view System Management 7-13
snmp-agent packet max-size System Management 7-14
snmp-agent sys-info System Management 7-15
snmp-agent target-host System Management 7-16
snmp-agent trap enable System Management 7-17
snmp-agent trap enable encrypt-card Security 6-48
snmp-agent trap enable ldp MPLS 1-9
snmp-agent trap enable lsp MPLS 1-9
snmp-agent trap enable mobile-ip Network Protocol 16-12
snmp-agent trap enable ospf Routing Protocol 3-55
snmp-agent trap life System Management 7-18
snmp-agent trap queue-size System Management 7-19
snmp-agent trap source System Management 7-20
snmp-agent usm-user System Management 7-20
sot counter keepalive Network Protocol 15-3
A-68
sot gather Network Protocol 15-4

sot group-set Network Protocol 15-4
sot peer Network Protocol 15-5
sot sdlc broadcast Network Protocol 15-6
sot sdlc controller Network Protocol 15-6
sot sdlc-status primary Network Protocol 15-7
sot sdlc-status secondary Network Protocol 15-8
sot send address Network Protocol 15-9
sot send all tcp Network Protocol 15-10
sot timer keepalive Network Protocol 15-10
source VPN 2-8
source-interface System Management 3-22
source-ip System Management 3-22
source-ip Voice 8-14
source-policy Multicast Protocol 3-18
source-port System Management 3-23
special-character Voice 4-44
special-service Voice 1-103
speed System Management 5-21
speed Interface 2-8
speed Interface 3-13
spf-delay-interval Routing Protocol 4-33
spf-schedule-interval Routing Protocol 3-56
spf-slice-size Routing Protocol 4-34
spt-switch-threshold Multicast Protocol 3-19
ssh authentication-type default System Management 10-21
ssh client assign rsa-key System Management 10-32
ssh client first-time enable System Management 10-32
ssh server authentication-retries System Management 10-22
ssh server compatible_ssh1x enable System Management 10-23
ssh server rekey-interval System Management 10-23
ssh server timeout System Management 10-26
ssh user System Management 10-26
ssh user assign System Management 10-27
A-69
ssh user authentication-type System Management 10-28

ssh user service-type System Management 10-29
ssh2 System Management 10-33
ssh2 source-interface System Management 10-35
ssh2 source-ip System Management 10-35
ssh-server source-interface System Management 10-24
ssh-server source-ip System Management 10-25
standby bandwidth Reliability 1-4
standby detect-group System Management 2-8
standby interface Reliability 1-5
standby routing-group Dial-up 2-2
standby routing-rule Dial-up 2-2
standby threshold Reliability 1-6
standby timer delay Reliability 1-6
standby timer flow-check Reliability 1-7
standby timer routing-disable Dial-up 2-1
start l2tp VPN 1-12
start l2tp tunnel VPN 1-14
start-script Dial-up 3-8
startup saved-configuration System Management 4-61
state Security 1-18
state Security 1-46
state Security 8-13
static-bind { mac-address | client-identifier } Network Protocol 9-46
static-bind ip-address Network Protocol 9-45
static-lsp egress MPLS 1-10
static-lsp egress l2vpn MPLS 3-4
static-lsp ingress MPLS 1-11
static-lsp ingress l2vpn MPLS 3-5
static-lsp transit MPLS 1-12
static-lsp transit l2vpn MPLS 3-6
static-rp Multicast Protocol 3-20
static-rpf-peer Multicast Protocol 4-18
statistics System Management 3-23
A-70
statistics keep-time System Management 3-24

stop-accounting-buffer enable Security 1-47
stopbits System Management 5-22
stub Routing Protocol 3-57
subscriber-line Voice 1-104
subscriber-line Voice 4-45
substitute Voice 1-104
substitute incoming-call Voice 1-105
substitute outgoing-call Voice 1-107
summary Routing Protocol 2-22
super Getting Started 1-20
super authentication-mode Getting Started 1-22
super password Getting Started 1-21
synchronize arp Network Protocol 2-12
sysname Getting Started 1-23
system-view Getting Started 1-23
T
t1 alarm Interface 4-90
t1 bert Interface 4-91
t1 channel-set Interface 4-92
t1 channel-set Interface 4-123
t1 sendloopcode Interface 4-93
t1 set clock Interface 4-94
t1 set clock Interface 4-124
t1 set fdl Interface 4-97
t1 set frame-format Interface 4-95
t1 set frame-format Interface 4-125
t1 set loopback Interface 4-96
t1 set loopback Interface 4-126
t1 show Interface 4-98
t1 shutdown Interface 4-99
A-71
t1 shutdown Interface 4-127

t1 unframed Interface 4-100
t1 unframed Interface 4-128
tcp mss Network Protocol 10-26
tcp timer fin-timeout Network Protocol 10-27
tcp timer syn-timeout Network Protocol 10-27
tcp window Network Protocol 10-28
telnet System Management 10-8
telnet source-interface System Management 10-10
telnet source-ip System Management 10-11
telnet-server source-interface System Management 10-9
telnet-server source-ip System Management 10-9
terminal debugging System Management 1-35
terminal logging System Management 1-36
terminal monitor System Management 1-36
terminal trapping System Management 1-37
terminal type System Management 5-23
terminator Voice 1-108
test-enable System Management 3-27
test-failtimes System Management 3-27
test-time begin System Management 3-25
test-type System Management 3-26
tftp System Management 4-41
tftp host source-interface System Management 4-42
tftp host source-ip System Management 4-43
tftp source-interface System Management 4-44
tftp source-ip System Management 4-45
tftp vpn-instance System Management 4-46
tftp-server acl System Management 4-44
tftp-server directory System Management 4-48
tftp-server enable System Management 4-49
tftp-server max-users System Management 4-50
tftp-server retry-times System Management 4-50
tftp-server timeout System Management 4-51
A-72
tftp-server update System Management 4-51

timeout System Management 3-28
time-out Security 6-53
timer (Digital E&M) Voice 4-46
timer configuration Non-IP Architecture 2-28
timer dial-interval Voice 1-108
timer dl (R2) Voice 4-50
timer dtmf (R2) Voice 4-47
timer first-dial Voice 1-109
timer hold Link Layer Protocol 1-23
timer holding Non-IP Architecture 2-29
timer keep-alive hold Routing Protocol 5-59
timer loop System Management 2-6
timer lsp-max-age Routing Protocol 4-35
timer lsp-refresh Routing Protocol 4-36
timer quiet Security 1-47
timer quiet Security 1-70
timer realtime-accounting Security 1-48
timer realtime-accounting Security 1-71
timer register-complete (R2) Voice 4-49
timer register-pulse (R2) Voice 4-48
timer response-timeout Security 1-49
timer response-timeout Security 1-72
timer retry Multicast Protocol 4-19
timer ring (R2) Voice 4-49
timer ring-back Voice 1-110
timer spf Routing Protocol 4-37
timer wait System Management 2-6
timer wait-digit Voice 1-110
time-range Security 3-10
timers Routing Protocol 2-23
timeslot-set Voice 4-51
A-73
timestamp Voice 3-14

tos System Management 3-28
trace interval Voice 1-111
tracert System Management 1-13
tracert clns Non-IP Architecture 2-30
traffic behavior QoS 3-51
traffic classifier QoS 3-52
traffic-policy QoS 3-52
traffic-shaping adaptation QoS 6-24
traffic-share-across-interface Routing Protocol 2-24
transform Security 6-34
translate ip Link Layer Protocol 8-26
translate X25 Link Layer Protocol 8-27
transmit gain Voice 1-112
transmit-priority Link Layer Protocol 7-42
trunk-direction Voice 4-53
trunk-id Voice 3-14
ts Voice 4-54
ttl System Management 3-29
ttl expiration MPLS 1-12
ttl propagate MPLS 1-13
tunnel authentication VPN 1-14
tunnel avp-hidden VPN 1-15
tunnel flow-control VPN 1-16
tunnel keepstanding VPN 1-16
tunnel local Security 6-35
tunnel name VPN 1-17
tunnel password VPN 1-18
tunnel remote Security 6-36
tunnel timer hello VPN 1-18
tunnel-on Voice 1-113
tunnel-protocol dvpn VPN 3-27
tunnel-protocol gre VPN 2-9
type Voice 1-113
A-74
U
udp-helper enable Network Protocol 7-2
udp-helper port Network Protocol 7-2
udp-helper server Network Protocol 7-3
undelete System Management 4-18
undo schedule reboot System Management 1-45
undo synchronization Routing Protocol 5-59
upgrade System Management 1-44
upgrade System Management 4-62
upgrade flash Interface 5-47
use encrypt-card Security 6-49
user System Management 4-40
user privilege System Management 5-23
user-interface System Management 5-24
username System Management 3-30
user-name-format Security 1-50
user-name-format Security 1-73
using (CE1/PRI Interface) Interface 4-28
using (CE3 Interface) Interface 4-78
using (CT3 Interface) Interface 4-101
V
vad-on Voice 1-114
vad-on Voice 3-15
validate-source-address Routing Protocol 2-24
verbose System Management 4-40
vi-card busy-tone-detect Voice 1-115
vi-card cptone-custom Voice 1-116
vi-card reboot Voice 1-117
virtualbaudrate Interface 4-14
vlan-type dot1q Interface 6-6
vlink-peer Routing Protocol 3-57
vofr Voice 3-16
A-75
vofr frf11-timer Voice 3-17

vofr jitter-buffer Voice 3-18
voice bandwidth Voice 3-18
voice-config Network Protocol 9-47
voice-setup Voice 1-118
voip calledtunnel Voice 1-119
voip call-start Voice 1-119
voip h323-conf tcs-t38 Voice 5-19
voip h323-descriptor Voice 1-120
voip timer Voice 1-121
vpninstance System Management 3-30
vpn-instance-capability simple MPLS 2-24
vpn-target MPLS 2-25
vqa data-statistic Voice 1-121
vqa dscp Voice 1-122
vqa dsp-monitor Voice 1-124
vqa jitter-buffer Voice 1-125
vqa performance Voice 1-125
vrbd Getting Started 1-24
vrrp authentication-mode Reliability 2-2
vrrp ping-enable Reliability 2-3
vrrp un-check ttl Reliability 2-4
vrrp vrid preempt-mode Reliability 2-5
vrrp vrid priority Reliability 2-5
vrrp vrid timer advertise Reliability 2-6
vrrp vrid track Reliability 2-7
vrrp vrid track detect-group System Management 2-9
vrrp vrid virtual-ip Reliability 2-8
W
web java-blocking acl-number Security 5-15
web java-blocking enable Security 5-15
web java-blocking extension add Security 5-16
web java-blocking extension add-default Security 5-17
A-76
web java-blocking extension delete Security 5-16

web java-blocking extension delete-all Security 5-17
web java-blocking extension load-file Security 5-19
web java-blocking extension save-file Security 5-18
web log enable Security 5-19
web log timer Security 5-20
web url-filter host acl-number Security 5-5
web url-filter host add Security 5-6
web url-filter host default Security 5-7
web url-filter host delete Security 5-8
web url-filter host delete-all Security 5-7
web url-filter host enable Security 5-9
web url-filter host ip-address Security 5-9
web url-filter host load-file Security 5-10
web url-filter host save-file Security 5-10
web url-filter parameter add Security 5-11
web url-filter parameter add-default Security 5-11
web url-filter parameter delete Security 5-12
web url-filter parameter delete-all Security 5-12
web url-filter parameter enable Security 5-13
web url-filter parameter load-file Security 5-14
web url-filter parameter save-file Security 5-14
wfq QoS 6-25
wildcard-register enable Voice 8-15
wred QoS 3-53
wred dscp QoS 3-54
wred ip-precedence QoS 3-56
wred weighting-constant QoS 3-57
X
x25 alias-policy Link Layer Protocol 8-28
x25 call-facility Link Layer Protocol 8-29
x25 cug-service Link Layer Protocol 8-30
x25 default-protocol Link Layer Protocol 8-31
A-77
x25 default-protocol Non-IP Architecture 1-8

x25 hunt-group Link Layer Protocol 8-32
x25 ignore called-address Link Layer Protocol 8-33
x25 ignore calling-address Link Layer Protocol 8-34
x25 local-cug Link Layer Protocol 8-34
x25 map Link Layer Protocol 8-35
x25 map bridge Link Layer Protocol 9-31
x25 map clns Non-IP Architecture 1-9
x25 modulo Link Layer Protocol 8-37
x25 packet-size Link Layer Protocol 8-38
x25 pvc Link Layer Protocol 8-39
x25 pvc Non-IP Architecture 1-11
X25 qllc-switch Network Protocol 14-1
x25 queue-length Link Layer Protocol 8-41
x25 receive-threshold Link Layer Protocol 8-42
x25 response called-address Link Layer Protocol 8-43
x25 response calling-address Link Layer Protocol 8-44
x25 reverse-charge-accept Link Layer Protocol 8-44
x25 roa-list Link Layer Protocol 8-45
x25 switch pvc Link Layer Protocol 8-46
x25 switch svc hunt-group Link Layer Protocol 8-48
x25 switch svc interface Link Layer Protocol 8-47
x25 switch svc xot Link Layer Protocol 8-50
x25 switching Link Layer Protocol 8-51
x25 template Link Layer Protocol 6-1
x25 timer hold Link Layer Protocol 8-52
x25 timer idle Link Layer Protocol 8-53
x25 timer tx0 Link Layer Protocol 8-53
x25 vc-per-map Link Layer Protocol 8-56
x25 vc-range Link Layer Protocol 8-57
x25 window-size Link Layer Protocol 8-58
A-78
x25 x121-address Link Layer Protocol 8-59

x25 xot pvc Link Layer Protocol 8-60
x29 timer idleclear System Management 11-18
x29 timer inviteclear-time Link Layer Protocol 8-61
xmodem get System Management 4-52
Y
Z
A-79

99-Comware v3 Command Manual PDF

Uploaded by

Copyright:

Available Formats

You might also like

99-Comware v3 Command Manual PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

99-Comware v3 Command Manual PDF

Uploaded by

Copyright:

Available Formats

Comware V3

Hangzhou Huawei-3Com Technology Co., Ltd.

Manual Version: T2-08192H-20060927-C-3.01

All Rights Reserved

H3C, Aolynk, , IRF, H3Care, , Neocean, , TOP G, SecEngine,

To obtain the latest information, please access:

Comware V3 Command Manual is organized as follows:

The manual uses the following conventions:

italic Command arguments are in italic.

II. GUI conventions

Means reader be careful. Improper operation may cause

Note Means a complementary description.

Chapter 1 Basic Configuration Commands................................................................................ 1-1

Chapter 1 Basic Configuration Commands

1.1 Basic Configuration Commands

authentication super hwtacacs-scheme hwtacacs-scheme-name

ISP domain view

hwtacacs-scheme-name: Name of the HWTACACS scheme configured on the router.

Use the authentication super hwtacacs-scheme command to configure super

# Configure the super authentication scheme for system domain to sup.

1.1.2 clock datetime

clock datetime time date

date: Current date in the format of MM/DD/YYYY or YYYY/MM/DD. MM is the month of

# Set the current system time to 00:00:00 01/01/2006.

1.1.3 clock summer-time

clock summer-time zone_name { one-off | repeating } start-time start-date end-time

zone_name: Name of the daylight saving time, a character string of 1 to 32 characters.

# For daylight saving time in z2 between 06:00:00 on 2002/06/08 and 06:00:00 on

1.1.4 clock timezone

clock timezone zone_name { add | minus } time

zone_name: Time zone name, a string of 1 to 32 characters.

command-privilege level level view view command-key

level level: Command level ranging from 0 to 3.

view view: Specifies a view.

Use the command-privilege command to assign a command level to the commands in

Table 1-1 Default level of the commands

Command level Commands

Monitor (1) display, debugging

# Set the command level of the interface command to 0.

1.1.6 cpu-usage cycle

cpu-usage cycle { 5sec | 1min | 5min | 72min } [ slave | slot slot-num ]

5sec: Sets the statistic interval to five seconds.

1min: Sets the CPU usage statistic interval to one minute.

# Set the CPU usage statistic interval to five seconds.

1.1.7 display clipboard

# Display the contents of the clipboard.

1.1.8 display clock

# Display the current time and date.

1.1.9 display cpu-usage

display cpu-usage [ configuration | number [ offset ] [ verbose ] [ from-device ] ]

The function of both display cpu-usage and display cpu-usage 1 0 verbose is to

# Display detailed information on CPU usage statistics.

TaskName CPU Runtime(CPU Tick High/CPU Tick Low)

1.1.10 display cpu-usage history

display cpu-usage history [ task task-id ] [ slave | slot slot-num ]

task task-id: Specifies a task ID.

# Display the CPU usage statistic history of the entire system.

# Display the CPU usage statistic history of task 6.