Академический Документы
Профессиональный Документы
Культура Документы
1 20120930
01
2012-10-24
1 , 29
Statement
Copyright Huawei Technologies Co., Ltd. 2011. All rights reserved.
Non written permission of the Company, any unit or individual will
not be allowed to extract and copy the contents of this document,
and cant be transmitted in any form.
Trademark Notice
and other Huawei trademarks are the trademarks of Huawei Technologies Co.,
Ltd..
All other trademarks or registered trademarks mentioned in this document are
owned by their respective owners.
Note
Product upgrades or other reasons, this document will not be updated regularly.
Unless otherwise agreed, the document only as a guide, all statements, information,
and recommendations in this document do not constitute any express or implied
warranty.
Technical Support
Technical Support: http://support.huawei.com
Fax:0755-28560111
029-81770121
Address: Shenzhen Huawei base Huawei
headquarters
2012-10-24
2 , 29
Directory
1
1.2
1.3
1.4
1.5
1.6
How to open or close the information center debug/log/ alarm and other information.8
1.7
1.8
1.9
AR G3 plug-in card series router slots how to sort and number ...................................10
1.10
Whether the AR G3 boards and modules and others parts can support hot swap .......11
1.11
Whether the main control panel fixed interface can configure IP address directly .....11
1.12
1.13
1.14
1.15
1.16
1.17
1.18
1.19
1.20
2.2
3.2
2012-10-24
3 , 29
3G class .........................................................................................................................................25
6.1
Configuration correct but late users unable to obtain dhcp address ............................. 24
Why after the system upgraded the default cellular port disappear? ............................ 25
Update............................................................................................................................................28
9.1
10
Why view traffic from traffic monitoring does not match the actual bandwidth.........27
Factory devices V2R2C01 version devices console port login need password ...........28
Others ............................................................................................................................................28
10.1
How to through the AR G3 device to check the network cable whether is available..28
2012-10-24
4 , 29
1 System class
1.1
COM interface, cant login through router Console port, you can use Mini USB port to login
router.
1) PC has installed terminal emulator (such as Windows XP super terminal);
2) Get ready for MiniUSB cables.
3) The PC end has installed router deiver AR_MiniUSB_driver.zip, make the PC end can
1.2
[Huawei]user-interface vty 0 4
[Huawei -ui-vty0-4]authentication-mode aaa
2. Configure telnet login user parameter, user name, passwords, level and others.
[Huawei]aaa
//enter into AAA view
[Huawei -aaa]local-user admin123 password cipher admin123
//configure local user admin123, the password is admin123
[Quidway-aaa]local-user admin123 privilege level 3
//configure
1.3
5 , 29
1.4
file name
Please input the new name: vrpcfg_old.zip
// enter the
//select y
Rename OK!
2) Restart router, startup empty configuration, dispense with password login device.
3. Recovery service configuration operation
1) Decompress .zip configuration file is .bat file.
<Huawei>system-view
//enter system view
Enter system view, return user view with Ctrl+Z.
[Huawei]execute vrpcfg_old.bat
//load configuration file content
[Huawei]ftp server enable
Info: Succeeded in starting the FTP server
[Huawei] board add 0/1 1SA
Error: Unrecognized command found at '^' position.
2012-10-24
6 , 29
//this error report is normal, because the command board add cant
been configured statically.
[Huawei] board add 0/2 8AS
Error: Unrecognized command found at '^' position.
//this error report is normal, because the command board add cant
been configured statically.
//here leave out the detailed process
InformationThe script file has been executed completely
Success:98 item(s) Failure: 2 item(s)
3) Cleanup or update the console port password configuration
[ Huawei]user-interface con 0
[Huawei-ui-console0] authentication-mode password
[Huawei-ui-console0] set authentication password cipher XXX
//update the Console port login password XXX
[Huawei-ui-console0]authentication-mode none
//cleanup the Console port login password
4) Save the current configuration
<Huawei>save
The current configuration will be written to the device.
Are you sure to continue? (y/n)[n]:y
It will take several minutes to save configuration file, please wait......
Configuration file had been saved successfully
Note: The configuration file will take effect after being activated
1.5
7 , 29
1.6
How to open or close the information center debug/log/ alarm and other
information
Open the function to display the debug/log/ alarm information that sent by terminal
information center.
1.7
Device Type
AR1220V
Starting Version
Interfaces
V200R001C00
Each Ethernet
Ethernet0/0/4
Ethernet0/0/74 interfaces
AR1220W
V200R001C01
Power
Ethernet0/0/74 interfaces
AR1220VW
V200R001C01
2012-10-24
8 , 29
Ethernet0/0/74 interfaces
AR1220W-S
V200R001C01
AR207V-P
V200R002C00
2. Configure PoE
Huawei-Ethernet0/0/4] poe power 20
power is 20W
[Huawei-Ethernet0/0/4] poe priority
high
//configure this
weekend
1.8
-S, the S means SMBSmall Medium Business, represents face middle and small enterprises use,
functions support differences.
2012-10-24
9 , 29
WiFi
PoE
Voice
BGP
MPLS
AR1220
AR1220-S
AR1220W-S
AR2220
AR2220-S
AR200-S
1.9
Slots numbering sequence: from right to left, from up to down, the interface number
followed by increases
Use AR3260 as an examplethe back slots figure as below:
2012-10-24
10 , 29
1.10 Whether the AR G3 boards and modules and others parts can support
hot swap
The modules of AR G3 all series routers that can be replaced individually, including boards,
power supply, fans, external SD card, all support hot swap.
In AR2200 series exclude AR2220 PRS type and DC-AC type AR2220 power supply
module can support hot swap, the fan internal cant be hot swapped;
AR2240 and AR3260 power supply module can support hot swap, and support duplicate
power supply backup (Note: DC, AC power supply can not be mixed insertion used ), the fan
module supports hot swap.
Whether the main control panel fixed interface and can configure IP address directly
1. The fixed GE interface of AR 1200&2200&3200 main control panel is a Layer 3 interface,
can directly configured IP address, and can configured backup IP address. Such as:
The main control slot number is 0AR150&200AR200-SAR1200AR1200-SAR2200,
and AR2200-S
11 , 29
sub
[Huawei]vlan 11
[Huawei]interface vlanif 11
[Huawei-Vlanif10]ip address 192.168.11.1 24
[Huawei-Vlanif10]ip address 192.168.111.1 24
sub
[Huawei]intface ethernet0/0/0
[Huawei-ethernet0/0/0]undo portswitch
//change the Ethernet0/0/0 interface from L2 mode to L3 mode
[Huawei-ethernet0/0/0]ip address 192.168.12.1 24
Note:
a. For to make AR G3 one interface can connected to multi sub-network, can configure multi
IP addresses on one interface, one of them is the main IP address, and others are backup IP
addresses.
b. Before deleting the main IP address, must delete all the backup IP addresses first.
Which link types do the LAN side interfaces have
AR G3 LAN side interface default link type is Hybrid, and interface default join in VLAN 1,
so PVID is 1.
Type
Access
Applications Sense
Character
2012-10-24
12 , 29
Trunk
routers port
pass through.
2. Frame sent from the Trunk port with Tag, and
the Tag same with the port default VLAN ID, then
the switch will peel off the frame Tag. In this case,
the Trunk port to send the frame without Tag.
3. Frame sent from the Trunk port with Tag, but
different with the port default VLAN ID, the switch
to the frame without any action, directly send the
frame with Tag.
Hybrid
Version Supports:
1/2E1T1-F (F represents Fractional) bundled only once, bundled into one channel, its rate is n
64K(n=1~31), does not support PRI mode;
1/2E1T1-M (M represents Multiflex Trunk) supports 31 channels arbitrary grouping, several
time bundled, and supporst PRI mode.
2012-10-24
13 , 29
ce1
14 , 29
ce1
ce1
15 , 29
Changing the working mode will reset the board in slot 1. Continue?
[y/n]:y
INFO: Resetting board[1] succeeded.
1) Configure the E1-F to work in unframed mode
Equal to a interface which regardless time slot, and data bandwidth is 2.048Mbps, its logic
features same with synchronous serial port, supports data link layer protocols such as PPP, HDLC,
Frame Relay, support network protocols such as IP and IPX.
2012-10-24
16 , 29
[Huawei]port-group
GE0/0/0AR2240 main controls GE0/0/0 and GE0/0/1AR3260 main controls GE0/0/0 and
GE0/0/1
2.
3.
Combo port default type is electrical interface, optical interface and electrical interface
can not work at the same time, another interface is disabled automatically when activating one of
the interfaces;
4. Conversion command: Interface view, execute combo-port {copper (electrical interface) |
fiber (optical port)}.
5. View Combo port working type: View by the command lines, display interface
interface-type x/x/x
17 , 29
AR150&200 Series
Product front, 1
Function
Extend device storage space; U disk
start, dont support 3G USB Modem
now
AR1200 Series
Product front, 2
AR2200&3200 Series
Interfaces connector type is USB-A, backward compatible with USB1.0 and USB1.1, work mode is
Host
2. MiniUSB interface
Device Type
AR150&200 Series
AR1200&2200&3200 Series
Function
/
To login router, the basic
configuration of the new
device
Veneer, 1
2012-10-24
18 , 29
File Description
Whether mandatory
usb_ar.ini
Required
AR_V200R002.cc
AR package file
Optional
AR_PatchSP003.pat
Optional
ARcfg.cfg
AR configuration file
Optional
AR-License.dat
AR License file
Optional
19 , 29
2 Specifications class
2.1
Name
Remark
V200R002C01
WLAN
V200R001C00
SAC
V200R002C00
IPSec
V200R001C00
2012-10-24
20 , 29
authorization.
Efficient VPN
V200R002C00
DSVPN
V200R002C00
SSL VPN
V200R002C00
L2TP VPN
V200R002C00
MPLS L3 VPN
V200R001C00
Voice SIP AG
V200R001C00
Voice IPPBX
V200R001C00
2012-10-24
21 , 29
2.2
Type
Veneer model
Support Version
Remark
WAN
V200R001C00
2E1/T1-M
V200R002C00
V200R001C01
port card
(WSIC )
(SIC)
V200R001C00
2SA
(SIC)
V200R001C01
(SIC)
V200R001C01
1GEC
4GEW-T
WSIC
V200R002C01
4GEW-S
WSIC
V200R002C01
V200R002C01
V200R001C01
3G-HSPA+7
1CPOS-155M
(SIC)
(SIC)
support
Voice
board
card
4FOS1FXO
(SIC)
V200R001C00
2BST
(SIC)
V200R001C01
2BST
(WSIC)
V200R002C00
xDSL
V200R001C00
/xPON
4G.SHDSL
V200R001C00
2012-10-24
(SIC)
22 , 29
board
1PON
(SIC)
V200R002C00
card
VSDL
(SIC)
V200R002C01
A: WEB page file .zip initial compressed in the system version software .cc package file, you can
upload some together, system upgrade and load the software package file automatically unzip
web.zip web page file.
3.2
<Huawei> system-view
[Huawei] interface gigabitethernet 0/0/0
[Huawei-GigabitEthernet0/0/0] ip address 192.168.1.1 24
configure GE0/0/0 address as management ip
3. Created WEB account (optional): (the device default user / password: admin / admin)
(1) AR150 & 200 series devices default user admin privilege level = 15, with the highest authority,
is the super-user, it can directly use the user admin to login and configure.
(2) AR1200 & 2200 & 3200 series devices default user admin privilege level = 0, ordinary users
can only view the device, has no configuration permissions. If you need to do WEB configuration
you need to create a local WEB user, set the enterprise users (privilege level = 2) or the superuser
(privilege level = 3 to 15).
<Huawei> system-view
[Huawei]aaa
2012-10-24
23 , 29
4 DHCP class
4.1
A: Analysis the using scene to determine whether the ip address of the IP address pool has been
fully allocated, and generally set the address pool address is 256 (segment mask for 24), the
default lease term lease for one day. When the scene for the public large people flow cafs,
restaurants, and other will easy appear because the address lease is long led address occupied and
thus all be assigned, new users no longer can get address. Can modify the address pool segment
mask to expand the capacity of the address pool, or shorten the renewal term to solve the problem
that address pool ip address pool is not enough and user can not get address.
<Huawei> system-view
[Huawei] ip pool dhcp
[Huawei -ip-pool-dhcp] gateway-list 192.168.11.1
[Huawei -ip-pool-dhcp] network 192.168.11.0 mask 22
// set the
// set the
//view dhcp
Disable
0
-----------------------------------------------------------------------------------------------------------2012-10-24
24 , 29
Network section :
--------------------------------------------------------------------------------------------------------Index
IP
MAC
Lease
Status
--------------------------------------------------------------------------------------------------------1
192.168.8.1
Idle
2
192.168.8.2
Idle
&&&&& &&&&
707b-e8c7-e82e 134
Used
1021
192.168.11.254
---------------------------------------------------------------------------------------------------------
For PPPoE dual uplink mian/standby links that dialer1 is the main, another dialer2 is the backup.
Networking requires can through static routing priority setting to distinguish the main and backup
links.
<Huawei> system-view
[Huawei] ip route-static 0.0.0.0 0 dialer1 //default preference=60
[Huawei] ip route-static 0.0.0.0 0 dialer2 preference 100 // set dialer2
port as a backup link
Note: If the dual uplink simply configure into equivalent routing load sharing, can lead to the
consequences of the Internet is very slow, the two uplinks (two operators) access to back packet
delay inconsistent caused retransmission, packets out of order, etc..
6 3G class
6.1
Why after the system upgraded the default cellular port disappear?
#
interface Cellular0/0/0
//V200R001C01 version AR1220 system default USB 3G interface
link-protocol ppp
#
interface Cellular0/0/1
2012-10-24
25 , 29
7 NAT class
7.1
The configuration of that the intranet users using domain name to access
internal server
A: (1). DNS server in the public network side, intranet users visit by domain name
Using its corresponding internal server configure DNS-mapping, as well as enable DNS NAT
ALG function.
<Huawei> system-view
[Huawei] nat alg dns enable
[Huawei] nat dns-map Youremail.com 110.110.110.110 80 tcp
[Huawei]acl 3001 [Huawei-acl-adv-3000] rule permit ip source
192.168.0.0 0.0.255.255
[Huawei] interface Gigabitethernet0/0/1
[Huawei-GigabitEthernet0/0/1] ip address 173.11.11.123 30
[Huawei-GigabitEthernet0/0/1] nat server protocol tcp global
110.110.110.110 80 inside 192.168.1.110 80
[Huawei-GigabitEthernet0/0/1] nat outbound 3001
(2). DNS server in the intranet side, intranet users visit by domain name.
AR doesnt need other special configuration. Internal users can be accessed directly by the domain
name.
7.2
The configuration of that the Intranet and extranet users use IP address
to access to the internal server
<Huawei> system-view
[Huawei]acl 3001 [Huawei-acl-adv-3000] rule permit ip source
192.168.0.0 0.0.255.255
[Huawei] interface Gigabitethernet0/0/1
2012-10-24
26 , 29
<Huawei> system-view
[Huawei]acl 3001 [Huawei-acl-adv-3000] rule permit ip source
192.168.0.0 0.0.255.255 destination 110.110.110.110 0
// specify intranet visit destination address is external network ip
address packet
[Huawei]traffic classifier redirect
[Huawei -classifier-redirect]if-match acl 3001
[Huawei -classifier-redirect]q
[Huawei]traffic behavior redirect
[Huawei-behavior-redirect]redirect ip-nexthop 173.11.11.1 30
//setup traffic behavior: packet redirect next hop is WAN side
outbound gateway address
[Huawei]traffic policy redirect
[Huawei-trafficpolicy-redirect] classifier redirect behavior redirect
[Huawei] interface Ethernet0/0/1
[Huawei-Ethernet0/0/1] traffic-policy redirect inbound
//intranet port inbound bounding this traffic policy
8 NAT class
8.1
Why view traffic from traffic monitoring does not match the actual
bandwidth
A: AR G3 router sub-interface default does not enable traffic statistics function, therefore leading
to traffic statistics does not match with the actual, can manually configure open the sub-interface
traffic statistics function to achieve traffic monitoring.
<Huawei>system-view
[Huawei]interface GigabitEthernet0/0/1.1
[Huawei-GigabitEthernet0/0/0.1] statistic enable inbound //enable
2012-10-24
27 , 29
9 NAT class
9.1
A: V2R2C01 version of factory device console 0 has initial password, enter the system prompts:
Enter password:
The initial password is Admin@huawei.com, after entry should modify the password, modify then
view configuration found is ciphertext, please take good care of this security password.
[Huawei]user-interface console 0
[Huawei-ui-console0]authentication-mode password
[Huawei-ui-console0]set authentication password cipher nihaoma123
[Huawei-ui-console0]display this
#
user-interface con 0
authentication-mode password
set authentication password
cipher %$%$Y|QAF$N/B/@Uho0~q@ZO"B90GE!&O|@b.BR8eQ
Fs,|4;MH~:%$%$
//set console 0 password display as ciphertext
user-interface vty 0 4
authentication-mode none
user privilege level 3
user-interface vty 16 20
#
10 NAT class
10.1 How to through the AR G3 device to check the network cable whether is
available
AExecute this command in the interface: virtual-cable-test
[Huawei-GigabitEthernet0/0/1]virtual-cable-test
Warning: The command will stop service for a while, continue
2012-10-24
28 , 29
[Y/N]?y
Pair A length: 5 meter(s)
Pair B length: 5 meter(s)
Pair C length: 5 meter(s)
Pair D length: 5 meter(s)
Pair A state:Ok
Pair B state:Ok
Pair C state:Ok
Pair D state:Ok
//if four-wire Pair APair BPair CPair D states are OK, prove that
the cable is intact and available.
// if four-wire Pair APair BPair CPair D states only Pair A and
Pair B states are OK, mean this cable is 100M cable, 1000M port
may be have a problem.
2012-10-24
29 , 29