V100R019C02
Commissioning Guide-PVM CLI
Issue 01
Date 2011-07-30
Copyright © Huawei Technologies Co., Ltd. 2011. All rights reserved.
No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.
Trademarks and Permissions
and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of their respective holders. Notice
The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the products, services and features described in this document may not be within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information, and recommendations in this document are provided "AS IS" without warranties, guarantees or representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.
Huawei Technologies Co., Ltd.
Address: Huawei Industrial BaseBantian, Longgang Shenzhen 518129
People's Republic of China
Website: http://www.huawei.com
About This Document
Intended Audience
This document describes how to commission and verify the basic functions of the UA5000 from the aspects of hardware, software, interconnection, and maintenance and management. This ensures that the device runs stably and reliably on the network.
This document also provides the flow and method of commissioning the UA5000. This document is intended for:
The installation and commissioning engineers
Symbol Conventions
The following symbols may be found in this document. They are defined as follows
Symbol Description
Indicates a hazard with a high level of risk which, if not avoided, will result in death or serious injury.
Indicates a hazard with a medium or low level of risk which, if not avoided, could result in minor or moderate injury. Indicates a potentially hazardous situation that, if not avoided, could cause equipment damage, data loss, and performance degradation, or unexpected results.
Indicates a tip that may help you solve a problem or save your time.
Provides additional information to emphasize or supplement important points of the main text.
Command Conventions
Convention Description
Convention Description
Italic Command arguments are in italics.
[ ] Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... } Alternative items are grouped in braces and separated by vertical bars. One is selected.
[ x | y | ... ] Optional alternative items are grouped in square brackets and separated by vertical bars. One or none is selected. { x | y | ... } * Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be selected.
GUI Conventions
Convention Description
Boldface Buttons, menus, parameters, tabs, window, and dialog titles are in boldface. For example, click OK.
> Multi-level menus are in boldface and separated by the ">" signs. For example, choose File > Create > Folder.
Update History
Updates between document versions are cumulative. Therefore, the latest document version contains all the updates made to previous versions.
Issue 01 (2011-07-30)
Compared with issue 02 (2011-03-25) of V100R019C01, V100R019C02 has the following changes:
Modified: 3.16.3 Configuring the Environment Monitoring Through the ESCM (for M200 Cabinet)
Contents
About This Document...ii
1 Commissioning Description...1
1.1 Definition...2 1.2 Commissioning Flow...22 Commissioning Preparations...4
2.1 Hardware Check...5 2.2 Software Requirements...5 2.3 Tool Requirements...6 2.4 Data Requirements...73 Stand-Alone Commissioning...9
3.1 Checking the Settings of Jumpers and DIP Switches...11
3.1.1 Checking the Settings of DIP Switches and Jumpers of Environment Monitoring Boards...11
3.1.2 Checking the DIP Settings on the Monitoring Board of the Fan...17
3.2 Powering On the Indoor Device...21
3.3 Powering On the Outdoor Device...22
3.4 Commissioning the Power System...23
3.4.1 Checking the Power Supply of DC PDU...23
3.4.2 Checking the Power Supply of AC Power Module...23
3.4.3 Configuring the Battery and Checking the Power Supply of the Battery...24
3.4.4 Checking the Power Supply of the Power Board ...25
3.4.5 Checking the Power Supply of the Heat Exchanger...26
3.5 Logging in to the System...27
3.5.1 Login in the Local Serial Port Mode...27
3.5.2 Login in the Telnet Mode (Inband Management)...32
3.5.3 Login in the Telnet Mode (Outband Management)...35
3.5.4 Login in the SSH Mode (Inband Management)...38
3.5.5 Login in the SSH Mode (Outband Management)...48
3.6 Checking the Software Version...58
3.7 Adding the Shelf...59
3.8 Configuring the Board...60
3.9 Loading the Script...60
3.11 Detecting the Power on the Optical Port...61
3.11.1 Detecting the Average Transmit Power of the Two-Fiber Bidirectional Optical Port...61
3.11.2 Detecting the Actual Input Power of the Two-Fiber Bidirectional Optical Port...65
3.11.3 Detecting the Average Transmit Optical Power of the Single-Fiber Bidirectional Optical Port...69
3.11.4 Detecting the Actual Input Power of the Single-Fiber Bidirectional Optical Port...74
3.12 Checking the Status of the Uplink Port...78
3.13 Changing the System Name...79
3.14 Configuring the System User...79
3.14.1 Modifying the System User Attributes...79
3.14.2 Modifying the System User Attributes...82
3.15 Checking the System Time...84
3.16 Configuring Environment Monitoring...85
3.16.1 Configuring the Monitoring Through the H303ESC...85
3.16.2 Configuring the Monitoring Through the H304ESC...95
3.16.3 Configuring the Environment Monitoring Through the ESCM (for M200 Cabinet)...103
3.16.4 Configuring the Monitoring Through the ESCM (for F02AF Cabinet)...108
3.16.5 Configuring the Environment Monitoring Through the EPS30-4815AF...115
3.16.6 Configuring the Environment Monitoring Through the EPS75-4815AF...124
3.16.7 Configuring the Monitoring Through the Fan Tray...137
3.17 Checking the Auto-Save Settings...140
3.18 Saving the Data...141
3.19 Backing Up the System File...141
4 Commissioning the Interconnection...145
4.1 Commissioning the U2000 Interconnection...146
4.1.1 Commissioning the U2000 in Outband Mode...146
4.1.2 Commissioning the U2000 in Inband Mode...148
4.2 Commissioning the MG Interface Interconnection...151
4.2.1 Commissioning the MG Interface Interconnection (Through H.248)...151
4.2.2 Commissioning the MG Interface Interconnection (Through MGCP)...153
4.3 Commissioning the SIP Interface Interconnection...155
4.4 Commissioning the Interconnection Between the Device and the Router...158
5 Maintenance and Management Commissioning...160
5.1 Checking the Alarm Function and the Event Function...161
5.1.1 Verifying the Alarm Function and the Event Function...161
5.1.2 Querying Alarms and Events...163
5.2 Checking the Log...164
A Additional Information...166
A.1 Configuring the Maintenance Terminal...167
A.2 Making a Script...168
A.3 Operation Guide on Battery Supplementary Charge...169
A.3.2 Precautions...170
A.3.3 Operation Process...171
A.4 Settings of the Software Package...172
A.4.1 Settings of the Default System Parameters...172
A.4.2 Settings of the Default Overseas Parameters...173
A.4.3 Settings of the Default Parameters of the EMU...177
1
Commissioning Description
About This Chapter
This topic describes the definition, prerequisites, and flow of the commissioning.
1.1 Definition
Commissioning refers to the process of verifying the running of the device, the communication of the device with the NMS and other interconnected devices, and ensuring that the device can be used as required.
1.2 Commissioning Flow
1.1 Definition
Commissioning refers to the process of verifying the running of the device, the communication of the device with the NMS and other interconnected devices, and ensuring that the device can be used as required.
1.2 Commissioning Flow
This topic provides the prerequisites and basic flow for commissioning the device. NOTE
This flow is for the commissioning procedures in newly-created offices. For the existing offices, adjust the commissioning procedures and contents according to the actual situation.
Prerequisites
The hardware installation personnel must have installed and checked the UA5000 hardware.
Flowchart
This document describes how to commission the UA5000 in the following steps. Figure 1-1 provides the commissioning flowchart.
Figure 1-1 Commissioning flowchart
End Start Commissioing preparations Stand-alone commissioning Interconnection Commissioning Maintenance and management
commissioning
1. Commissioning Preparations
This topic describes how to prepare hardware, software, tools, and data properly to ensure that the commissioning is implemented normally.
2. Stand-Alone Commissioning
This topic describes how to commission the stand-alone UA5000 after the hardware installation so that the stand-alone UA5000 can work in the normal state.
3. Interconnection Commissioning
The administrator can maintain and manage the UA5000 in inband network management or outband network management mode. This topic describes how to commission the interconnection by considering the "iManager U2000 unified network management system" (iManager U2000) as an example.
4. Maintenance and Management Commissioning
This topic describes how to verify the reliability of the device after commissioning the basic functions and services of the device to ensure the performance reliability of the UA5000.
2
Commissioning Preparations
About This Chapter
This topic describes how to prepare hardware, software, tools, and data properly to ensure that the commissioning is implemented normally.
2.1 Hardware Check
This topic describes how to check the hardware before the commissioning. Make sure that the hardware is available and check the hardware before the commissioning to facilitate the subsequent operations.
2.2 Software Requirements
This topic describes the software requirements for the commissioning. You need to prepare the commissioning software before the commissioning to facilitate the subsequent operations.
2.3 Tool Requirements
This topic describes the tools required for the commissioning. You need to prepare and check the required tools before the commissioning to facilitate the subsequent operations.
2.4 Data Requirements
This topic describes the data requirements for the commissioning. The information about hardware configuration, networking, and data plan must be available for data configuration.
2.1 Hardware Check
This topic describes how to check the hardware before the commissioning. Make sure that the hardware is available and check the hardware before the commissioning to facilitate the subsequent operations.
Checklist
Table 2-1 provides the checklist for checking the hardware before the commissioning. Table 2-1 Hardware checklist
No. Item Description
1 Power and
grounding
l Ensure that the power cable and the ground cable are properly connected.
l Ensure that the power cable, ground cable, and power distribution switch are labeled correctly, clearly and orderly. l Ensure that the connectors of external ground cables and
protection ground cables of the cabinet are properly connected, and they are not damaged.
l Ensure that the power supply of the device is in the normal state.
2 Cables and
connectors
l Ensure that the cable connectors are tight and firm. l Ensure that the cable jacket is intact.
l Ensure that the cable labels are clear and neat. l Ensure that cables are bundled reliably.
3 Upper layer
device
l Check the physical position of the interconnection port on the upper layer device.
l Ensure that the upper layer device works in the normal state and can be used for commissioning.
NOTE
The hardware installation personnel must check the device according to items "Power and grounding" and "Cables and connectors" in Table 2-1 when performing the installation check. The commissioning personnel can check these two items again to ensure that the hardware connection is reliable during the commissioning.
2.2 Software Requirements
This topic describes the software requirements for the commissioning. You need to prepare the commissioning software before the commissioning to facilitate the subsequent operations.
Checklist
Table 2-2 provides the checklist for checking the required software before the commissioning. Table 2-2 Software checklist
No. Item Description
1 Software
package
Check whether the software package for the commissioning is complete and the version is correct.
2 Software
commissioning tools
Check whether the required software commissioning tools are available. The commonly used commissioning tools are as follows:
l HyperTerminal: Used for logging in to the UA5000 through the CLI. The tool is embedded in Windows. l TFTP and FTP: Used for loading software, which can be
downloaded from http://support.huawei.com.
l Toolbox: Used for tracing signals. It is released with the version.
2.3 Tool Requirements
This topic describes the tools required for the commissioning. You need to prepare and check the required tools before the commissioning to facilitate the subsequent operations.
Checklist
Table 2-3 provides the checklist for checking the required tools before the commissioning. Table 2-3 Tool checklist
No. Item Description Remarks
1 Cables RS-232 serial port cable:
l One end is an RJ-45 connector, used for connecting to the control board of the device. l The other end is a DB-9 or
DB-25 female connector, used for connecting to the
commissioning terminal. When the maintenance terminal is a PC, use the DB-9 female connector.
Used for connecting the commissioning terminal to the UA5000 in the case of maintenance through the serial port.
Crossover cable Used for connecting the
commissioning terminal to the UA5000 in the case of maintenance in the Telnet mode.
No. Item Description Remarks
Straight through cable Used for commissioning the
services.
Tail fiber Used for detecting the optical
power and optical sensitivity, and transmitting the service upstream.
2 Maintain
ing terminal
(Generally) Portable computer with HyperTerminal application
Used for logging in to the UA5000 to commission the UA5000.
3 Auxiliar
y device and meter
Optical power meter Used for the following tests on the optical port: actual receive optical power test, receive sensitivity test, and overload optical power test. Adjustable optical attenuator Used on the optical signal receive
port for attenuating the received optical signal during the device commissioning to protect the optical port from being damaged by strong optical power.
Multimeter Used for measuring the voltage,
resistance, and current intensity during the power commissioning.
2.4 Data Requirements
This topic describes the data requirements for the commissioning. The information about hardware configuration, networking, and data plan must be available for data configuration.
Checklist
Before the commissioning, collect the information about the hardware configuration,
networking, and data plan based on the engineering documents such as the project division layout and network design. Table 2-4 provides the data requirement checklist.
Table 2-4 Checklist
No. Item Description
1 Hardware
configuration
It includes but is not limited to:
l The type of the control board and other boards, and the slot layout.
l The type of the uplink port and service port, and their physical locations.
No. Item Description
2 Networking and data
plan
It includes but is not limited to: l Network topology
l IP address allocation l VLAN plan
3
Stand-Alone Commissioning
About This Chapter
This topic describes how to commission the stand-alone UA5000 after the hardware installation so that the stand-alone UA5000 can work in the normal state.
1. 3.1 Checking the Settings of Jumpers and DIP Switches
This topic describes how to check the settings of the environment supervision circuit (ESC) board, fan EMU jumpers and dual-in-line package (DIP) switches so that the settings conform to the actual application.
2. 3.2 Powering On the Indoor Device
This topic describes how to power on the indoor device to ensure that each board is supplied with power in the normal state.
3. 3.3 Powering On the Outdoor Device
This topic describes how to power on the outdoor device to ensure that each board is supplied with power in the normal state.
4. 3.4 Commissioning the Power System
This topic describes how to commission the reliability of the power supply system so that the system can supply the power to the device in the normal state.
5. 3.5 Logging in to the System
This topic describes how to log in to theUA5000 and then commission the UA5000 through the maintenance terminal.
6. 3.6 Checking the Software Version
This topic describes how to check whether the version of the running software meets the requirements for office deployment.
7. 3.7 Adding the Shelf
This topic describes how to add a shelf (including the master shelf and the slave shelf) to ensure the normal running of the shelf.
8. 3.8 Configuring the Board
This topic describes how to check whether the inserted board is the same as the board required in the data plan and check whether the board runs in the normal state. 9. 3.9 Loading the Script
This topic describes how to load the script file to configure the basic data of the device, which is a preparation for the commissioning of the basic functions of the device.
10. 3.10 Configuring the Networking Mode of the System
When the networking modes of the UA5000 are different, perform the operation to configure the networking mode of the system to independent networking or integrated access networking.
11. 3.11 Detecting the Power on the Optical Port
This topic describes how to detect the mean launched optical power and the actual input optical power to check whether the transmit optical transceiver and the receive optical transceiver are in the normal state.
12. 3.12 Checking the Status of the Uplink Port
This topic describes how to check the status of the uplink port to ensure that the
interconnection between the UA5000 and the upper layer device is in the normal state, thus ensuring the normal communication.
13. 3.13 Changing the System Name
This topic describes how to customize the useful system name to differentiate UA5000s. This facilitates the management of the UA5000.
14. 3.14 Configuring the System User
When accessing, configuring, and managing the UA5000, you need to add the system operation users with different attributes. This topic describes how to add system operation users and modify the attributes of the system operation users.
15. 3.15 Checking the System Time
This topic describes how to check whether the system time, time zone, time stamp, and start and end Daylight Saving Time (DST) of the UA5000 are consistent with the actual conditions.
16. 3.16 Configuring Environment Monitoring
The UA5000 provides the function of monitoring various environment parameters (such as the temperature, humidity, and power voltage) so that the device runs in the stable environment. This topic describes how to commission the environment monitoring unit (EMU).
17. 3.17 Checking the Auto-Save Settings
This topic describes how to check the settings of the auto-save function to prevent data loss due to reboots.
18. 3.18 Saving the Data
This topic describes how to save the data into the flash memory to prevent data loss due to reboots.
19. 3.19 Backing Up the System File
This topic describes how to back up the system file to prevent permanent data loss due to the system failure. At the first office deployment or when the upgrade is complete, you need to back up the database file and the configuration file to restore the system in the case of the system failure.
3.1 Checking the Settings of Jumpers and DIP Switches
This topic describes how to check the settings of the environment supervision circuit (ESC) board, fan EMU jumpers and dual-in-line package (DIP) switches so that the settings conform to the actual application.
3.1.1 Checking the Settings of DIP Switches and Jumpers of
Environment Monitoring Boards
This topic describes how to check the settings of the jumpers on the ESC board and the dual-in-line package (DIP) switches. This ensures that the settings conform to the actual application.
Prerequisite
The UA5000 must be disconnected from the power supply.
Jumpers and DIP Switches of H303ESC
The H303ESC board is located on the right side of the environment monitoring unit (EMU). The H303ESC board provides six jumpers, namely the S1, S2, S3, S8, S10, and S11, and two DIP switches S6 and S7. The S5 is the shielding switch of the board alarm buzzer, which is enabled by default, as shown in Figure 3-1.
Figure 3-1 Layout of jumpers on the H303ESC board and DIP switches
H303ESC S11 D1 S5 ON OFF S6 S 1 S 2 S 10 S3 S8 1 2 3 1 2 3 4 5 6 7 8 ON OFF S7 1234
Jumpers S1, S2, S3, S8 and S10 are used to set the type of the serial port. Table 3-1 provides their meanings and settings.
Table 3-1 Meanings and settings of the H303ESC S1, S2, S3, S8, and S10
Jumper Settings Meanings Default Settings
S1 1-2 connected The serial port SIO1 is
RS-232.
Jumper Settings Meanings Default Settings
2-3 connected The serial port SIO1 is
RS-422.
S2 1-2 connected The serial port SIO2 is
RS-232.
2-3 connected
2-3 connected The serial port SIO2 is
RS-422. S3, S8,
and S10
1-2 of S3, S8, and S10 connected
The serial port SIO3 is RS-232.
1-2 of all jumpers connected 2-3 of S2 connected; 1-2 of
S8 and S10 connected
The serial port SIO3 is RS-422.
2-3 of S8 and S10 connected, S3 connected unlimited
The serial port SIO3 is RS-485.
S11 is used to check whether the running LED on the front panel is valid. Table 3-2 provides the meanings and settings of S11.
Table 3-2 Meanings and settings of the H303ESC S11
Jumper Settings Meanings Default
Settings
S11 1-2 connected The running LED on the board
is valid.
1-2 connected 2-3 connected The running LED on the board
is invalid.
DIP switch S6 is used to set the type of external analog sensors. Table 3-3 provides the meanings and settings of S6.
Table 3-3 Meanings and settings of the H303ESC S6
DIP Switch Settings Meanings Default
Settings
S6-1 to S6-6 ON The external analog sensor is of the
current type.
ON OFF The external analog sensor is of the
voltage type.
-DIP switch S7 is used to set the reporting mode and ratio. Table 3-4 provides the meanings and settings of S7.
Table 3-4 Meanings and settings of the H303ESC S7
DIP Switch Settings Meanings Default
Settings
S7-1 ON The H303ESC board is used in the
access network.
ON
OFF The H303ESC board is used in the
Local Exchange.
S7-2 ON The H303ESC board uses one serial
port for reporting.
ON
OFF The H303ESC board uses two serial
ports for reporting.
S7-3 Reserved - ON
S7-4 ON The reporting ratio of the serial port
is 19200 bit/s.
ON OFF The reporting ratio of the serial port
is 9600 bit/s.
Jumpers and DIP Switches of H304ESC
The H304ESC board provides two DIP switches, S2 and S3, and five jumpers S4-S8. The S9 is the shielding switch for the alarm buzzer of the board, which is enabled by default. Figure 3-2 shows the layout of the jumpers and DIP switches on the H304ESC board.
Figure 3-2 Layout of the jumpers and DIP switches on the H304ESC board
1 2 3 S 4 S 5 S 6 S 8 S 7 O N O F F S 2 1 2 3 4 H3 0 4 E S C D 6 S 9 O N S 3 O F F 12 34 56 78
Jumpers S4-S8 are used to set the serial port type. Table 3-5 provides the meanings and settings of S4-S8.
Table 3-5 Meanings and settings of the H304ESC S4-S8
Jumper Settings Meanings Default
Settings
S4 1-2 connected The serial port SIO1 is
RS-232.
1-2 connected
2-3 connected The serial port SIO1 is
RS-422.
S5 1-2 connected The serial port SIO2 is
RS-232.
1-2 connected
2-3 connected The serial port SIO2 is
RS-422. S6-S8 2-3 of S7 connected; 1-2 of S6
and S8 connected
The serial port SIO3 is RS-232. 2-3 of S7 connected; 1-2 of S6 and S8 connected 2-3 of S7 and S8 connected; 1-2 of S6 connected
The serial port SIO3 is RS-422.
DIP switch S2 is used to set the type of external analog sensors. Table 3-6 provides the meanings and settings of S2.
Table 3-6 Meanings and settings of the H304ESC S2 DIP
Switch Settings Meanings Default Settings
S2-1 ON The external sensor of JTA1 is of the current type.
OFF OFF The external sensor of JTA1 is of the
voltage type.
S2-2 ON The external sensor of JTA2 is of the current type.
OFF OFF The external sensor of JTA2 is of the
voltage type.
S2-3 ON The external sensor of JTA3 is of the current type.
OFF OFF The external sensor of JTA3 is of the
voltage type.
S2-4 Reserved -
-DIP switch S3 is used to set the reporting mode and ratio. Table 3-7 provides the meanings and settings of S3.
Table 3-7 Meanings and settings of the H304ESC S3
DIP Switch Settings Meanings Default
Settings
S3-1 ON The H304ESC board is used in the access
network.
ON OFF The H304ESC board is used on the Local
Exchange.
S3-2 ON The H304ESC board uses one serial port
for reporting.
OFF
OFF The H304ESC board uses two serial
ports for reporting.
S3-3 Reserved -
-S3-4 ON The reporting rate of the serial port is
19200 bit/s.
OFF OFF The reporting rate of the serial port is
9600 bit/s.
S3-5 to S3-8 Reserved -
-ESCM DIP Switch
The ESCM environment monitoring box provides a DIP switch S1. Figure 3-3 shows the layout of the DIP switch of the ESCM environment monitoring box.
Figure 3-3 Layout of DIP switch of ESCM environment monitoring box
ON
1 2 3 4 5 6 7 8 DIP switch
Terminal block for environment parameter
COM1 COM2
Power socket LED
The available dialing digits of the DIP switch S1 are 8. Table 3-8 provides the meanings and settings of S1.
Table 3-8 Meanings and settings of the DIP switch S1 DIP
Switch Settings Meanings Default Settings
S1-1 to S1-5 unsupported - S1-1: ON
S1-2: ON S1-3: OFF S1-4: OFF S1-5: ON
S1-6 ON The reporting rate of
the serial port is 19200 bit/s
OFF
OFF The reporting rate of
the serial port is 9600 bit/s.
S1-7 ON The external sensor
of JTA1 is of the current type.
ON
OFF The external sensor
of JTA1 is of the voltage type.
S1-8 ON The external sensor
of JTA2 is of the current type.
ON
OFF The external sensor
of JTA2 is of the voltage type.
Procedure
Step 1 Disconnect the cable connector if the ESC board is connected to the environment monitoring cable.
Step 2 Use the flathead screwdriver to unfasten the screws on the ESC board anticlockwise, as shown in (1) of Figure 3-4.
Figure 3-4 Removing and inserting the ESC board
Step 3 Hold the handlebar firmly on the front panel and pull out the ESC board from the PDU. Step 4 Check whether the settings of the jumpers and DIP switches on the ESC board are practical in
application. If not, proceed as follows:
l For H303ESC, refer to Table 3-1 and Table 3-2 to set the jumpers; refer to Table 3-3 and Table 3-4 to set the DIP switches.
l For H304ESC, refer to Table 3-5 to set the jumpers; refer to Table 3-6 and Table 3-7 to set the DIP switches.
l For ESCM, refer to Table 3-8 to set the DIP switches.
Step 5 Insert the ESC board into the PDU, as shown in (2) of Figure 3-4.
Step 6 Use the flathead screwdriver to fasten the screws clockwise on the ESC panel, insert the cable connector, and resume the monitoring cable connection of the ESC board.
----End
3.1.2 Checking the DIP Settings on the Monitoring Board of the Fan
This topic describes how to check the DIP settings on monitoring board of the fan. This ensures that the settings conform to the actual application.Context
There are two types of fan monitoring boards: FCBA and FCBB, which are used as follows: l The FCBA board is used in the rear access fan tray.
l The FCBB board is used in the front access fan tray.
DIP Switch Description
Figure 3-5 shows the layout of the DIP switches on the FCBA board. The DIP switches in the layout adopt the default settings.
Figure 3-5 Layout of the DIP switches on the FCBA board
1
2
3
4
5
6
7
8
ON
OFF
SW101
ON
OFF1 2 3 4
SW102
H531FCBA
Figure 3-6 shows the layout of the DIP switches on the H801FCBB board, and Figure 3-6 shows the layout of the DIP switches on the H511FCBB board. The DIP switches in the layout adopt the default settings.
Figure 3-6 Layout of the DIP switches on the H801FCBB board
H801FCBB ON 5 6 7 8 1 2 3 4 SW2
Figure 3-7 Layout of the DIP switches on the H511FCBB board H511FCBB ON OFF SW101 1 2 3 4 5 6 7 8 SW201 1234 ON OFF NOTE
The following table considers the H801FCBB board as an example to describe the meanings of the DIP switches, and the relation between the DIP switch, sub-node, fan quantity, and fan speed adjustment mode.
Table 3-9 Description of the DIP switches on the H801FCBB board
DIP Description Defaults
SW2-1 Set the mapping sub-node addresses of data configuration.
l ON corresponds to address bit 0. l OFF corresponds to address bit 1.
ON
SW2-2 OFF
SW2-3 OFF
SW2-4 ON indicates that the baud rate of the communication between the fan tray and the control board is 19200 bit/s.
OFF
OFF indicates that the baud rate of the communication between the fan tray and the control board is 9600 bit/s.
OFF
SW2-5 Set the number of fans. OFF
SW2-6 ON
SW2-7 Set the speed adjustment modes of fans. OFF
SW2-8 ON
Table 3-10 provides the relation between the DIP switches and the sub-node addresses. Table 3-10 Relation between the DIP switches and the sub-node addresses
SW2-3 SW2-2 SW2-1 Sub-Node Addresses ON ON ON 000 (0) ON ON OFF 001 (1) ON OFF ON 002 (2) ON OFF OFF 003 (3) OFF ON ON 004 (4) OFF ON OFF 005 (5) OFF OFF ON 006 (6)
OFF OFF OFF 007 (7)
Table 3-11 provides the relation between the settings of the DIP switches and the number of fans.
Table 3-11 Relation between the DIP switch settings and the fan quantity SW2-6 SW2-5 Fan Quantity ON ON 6 ON OFF 8 OFF ON 4 OFF OFF 10
Table 3-12 provides the relation between the settings of the DIP switches and the speed adjustment mode of the fans.
Table 3-12 Relation between the DIP switch settings and the speed adjustment mode
SW2-8 SW2-7 Speed Adjustment Mode Speed Adjustment
Scheme
ON ON Measure the temperature on the
air intake vent
Scheme 1
ON OFF Measure the temperature on the
air exhaust vent
Scheme 2
OFF ON Reserved Scheme 3
OFF OFF Stop the fan and measure the
temperature on the air intake vent
Scheme 4
Prerequisites
The device must be powered off.
Procedure
Step 1 Use a screwdriver to unfasten the screws anticlockwise on the front panel of the fan tray, as shown in (1) of Figure 3-8.
Figure 3-8 Removing/Inserting the fan tray
Step 2 Remove the fan tray from the service shelf, as shown in (2) of Figure 3-8.
Step 3 Check whether the DIP switch settings on the fan monitoring and control board are consistent with the actual application. If not, configure the DIP switches again according to Table 3-9. Step 4 Insert the fan tray into the corresponding slot, as shown in (3) of Figure 3-8.
Step 5 Use the screwdriver to fasten the screws clockwise on the front panel of the fan tray, as shown in (4) of Figure 3-8.
----End
3.2 Powering On the Indoor Device
This topic describes how to power on the indoor device to ensure that each board is supplied with power in the normal state.
Prerequisite
l The installation check and the power-on check must be performed on the device. l All the input power and the output control switches of the DC PDU must be turned off.
Procedure
Step 1 Turn on the input power of the DC PDU.
Step 2 Turn on the output control switches of the DC PDU. ----End
Result
The LED of the control board blinks 1s on and 1s off repeatedly.
3.3 Powering On the Outdoor Device
This topic describes how to power on the outdoor device to ensure that each board is supplied with power in the normal state.
Prerequisite
l The installation check and the power-on check must be performed on the device.
l The power switch of the lightning arrester, the input/output switches of the GEPS4860, and the power switch of the heating panel must be turned off.
Procedure
Step 1 Turn off the AC power input switch to power on the lightning arrester. Step 2 Turn off the MCB "AC POWER" to power on the GEPS4860.
Step 3 When the device temperature is lower than -25°C, turn on the miniature circuit breaker (MCB) of the heating panel to heat the device components until the device temperature is higher than -25°C. When the device temperature is higher than -25°C, skip this step.
NOTE
When the device starts at the temperature lower than -25°C, use the heating panel to heat all the components to -25°C above, and then the device can be powered on.
Step 4 Turn on the AC input MCB on the GEPS4860 (set the MCB upward). In the normal state, after a short delay, the RUN LEDs on the front panels of all the rectifier units are green after the rectifiers units are started. The RUN LED on the monitoring unit blinks slowly in green, and the ALM LED is on.
Step 5 Turn on all the load MCBs on the GEPS4860 (set the MCBs upward). In the normal state, the ALM LED on the front panel of the monitoring unit is off.
Step 6 Turn on (set the switch upward) the power switch on the GEPS4860 to supply power for the heat exchanger.
Step 7 Turn on (set the MCB upward) the MCB "BATT" on the GEPS4860 to supply power for batteries.
----End
Result
3.4 Commissioning the Power System
This topic describes how to commission the reliability of the power supply system so that the system can supply the power to the device in the normal state.
3.4.1 Checking the Power Supply of DC PDU
This topic describes how to check whether each power input which supports mutual backup can supply power to the cabinet independently through the two or four power inputs.
Prerequisite
The two or four power inputs of the DC PDU supply power to the cabinet at the same time
Procedure
l Please implement the following steps when the two independent power supplies works in the normal state for the cabinet:
1. Disconnect power input A of the DC PDU and check the power supply of the cabinet. 2. Restore the power supply of power input A to the cabinet.
3. Disconnect power input B of the DC PDU and check the power supply of the cabinet. 4. Restore the power supply of power input B to the cabinet.
l When the four power inputs supply power to the cabinet in the normal state, usually adopt the mutual backup. That is, A and B mutually backup for each other, C and D mutually backup for each other, please implement the following steps:
1. Disconnect the power supply of power input A and C of the DC PDU and check the power supply of the cabinet.
2. Restore the power supply of power input A and C to the cabinet.
3. Disconnect power input B and D of the DC PDU and check the power supply of the cabinet.
4. Restore the power supply of power input B and D to the cabinet. ----End
Result
After disconnecting the backup power supply of any power input, the power supply and the service of the device board stay unaffected.
3.4.2 Checking the Power Supply of AC Power Module
This topic describes how to check whether other rectifier units can supply power to the cabinet in the normal state when the rectifier unit of the AC power is configured redundantly and one rectifier unit is faulty.
Prerequisite
Procedure
Step 1 Remove a rectifier unit and check the power supply of the cabinet. Step 2 Insert the rectifier unit back into the cabinet.
NOTE
Repeat step 1 and step 2 to verify one by one whether other redundant rectifier units are normal.
----End
Result
After removing any rectifier unit, the power supply and the service of the device board stay unaffected.
3.4.3 Configuring the Battery and Checking the Power Supply of
the Battery
This topic describes how to configure the battery and verify whether the backup power supplied by the battery to the AC power system is in the normal state.
Prerequisite
The cabinet must adopt the AC power supply and must be configured with the battery.
Context
l Currently, the encapsulated valve regulated lead acid (VRLA) batteries used in the communication industry are all produced in full loading state, that is, the battery has been charged with electricity fully.
l Based on the battery features, automatic discharge will occur due to chemical reaction during the delivery and storage process. In this case, the battery capacity and the open circuit voltage decrease. We refer to this phenomenon as the automatic charge of the battery. In a certain period, if you use appropriate methods, the voltage and the capacity of the battery can be restored completely.
l To make up the automatic discharge during the idle period, you need to perform the supplementary charge for the battery in long idleness periodically. For this type of situation, refer to "Operation Guide on Battery Supplementary Charge" to complete the
supplementary charge of the battery first, and then perform the following commissioning procedures.
Procedure
Step 1 In global config mode, run the emu add command to add the EMU of the power system. Step 2 In global config mode, run the display emu command to query whether the status of the power
system shows normal.
CAUTION
The battery capacity parameters corresponding with different cabinets are different. You need to configure in correct way. Otherwise, you may damage the battery.
Step 4 In the corresponding power mode, run the power battery command to configure the battery parameters.
Table 3-13 lists the battery capacity of the different cabinets in the UA5000. Table 3-13 Battery capacity of different cabinets
Cabinet Type Battery Capacity
ONU-F01E200 (Outdoor) 50 AH
ONU-F01E400 (Outdoor) 75 AH
ONU-F01D200 (Outdoor) 80 AH
ONU-F01D500 (Outdoor) 150 AH/184 AH
ONU-F01D1000 (Outdoor) 184 AH
ONU-F02A (Indoor) 100 AH
Step 5 In the corresponding power mode, run the power battery-test command to configure the battery discharging parameters.
Step 6 In privilege mode, run the save command to save the related configuration. When the monitoring module and the UA5000 device communicate with each other in the normal state, the configured data take effect automatically.
Step 7 Disconnect the mains supply, and check whether the cabinet power system can switch to the battery supply mode.
Step 8 Restore the mains supply, and check whether the cabinet power system can switch to the mains supply mode.
----End
Result
l After the mains supply is disconnected, the cabinet power system switches to the battery supply mode and the power supply is in the normal state.
l After the mains supply is restored, the cabinet power system switches to the mains supply mode and the power supply is in the normal state.
3.4.4 Checking the Power Supply of the Power Board
This topic describes how to check whether the redundancy backup function of the PWX board is in the normal state.
Prerequisite
The two configured PWX boards must work in the normal state.
Precaution
l Wear the ESD wrist strap during the operation.
l When one PWX board is faulty, replace it in time. Ensure that the shelf does not work for long with only one power board.
Procedure
Step 1 Turn off the power switch on the front panel of one PWX board, and check the power supply of the narrowband service board.
Step 2 Turn on the power switch that is turned off in Step 1. ----End
Result
After the power switch of one PWX board is turned off, the narrowband service boards in the shelf work in the normal state.
NOTE
In the normal state, the two PWX boards work in the load sharing mode and supply power for the narrowband service boards in the shelf. When one PWX board becomes faulty, the other PWX board supplies power for the narrowband service boards in the shelf.
3.4.5 Checking the Power Supply of the Heat Exchanger
This topic describes how to check whether two power supplies can supply power to the heat exchanger in the normal state.
Context
l The outdoor cabinet with large capacity usually houses a heat exchanger for the cabinet temperature controlling.
l There are two power supplies for the heat exchanger when the device works in the normal state. One is DC power, provided by the power module. The other is AC power, controlled by the miniature circuit breaker (MCB) on the panel of the cabinet.
l The outdoor cabinet with small capacity is not configured with the heat exchanger.
Procedure
Step 1 Disconnect the first power supply (DC power) of the heat exchanger and check the alarm LED on the heat exchanger panel.
Step 2 Restore the first power supply (DC power) of the heat exchanger and check the alarm LED on the heat exchanger panel.
Step 3 Disconnect the second power supply (AC power) of the heat exchanger and check the alarm LED on the heat exchanger panel.
Step 4 Restore the second power supply (AC power) of the heat exchanger and check the alarm LED on the heat exchanger panel.
----End
Result
l After any input of the power supply is disconnected, the heat exchanger finishes reset self-check and the alarm LED turns on, but the heat exchanger works in the normal state. l After the power is restored, the alarm LED of the heat exchanger turns off, and the system
recovers.
3.5 Logging in to the System
This topic describes how to log in to theUA5000 and then commission the UA5000 through the maintenance terminal.
3.5.1 Login in the Local Serial Port Mode
Generally, when you need to maintain, manage, and operate the device at the local end, you can log in to the system through the serial port.
Prerequisite
l A commissioning terminal, generally a portable computer with a HyperTerminal
application and that can be connected to the UA5000 through the serial port cable must be available.
l An RS-232 serial port cable (one end with an RJ-45 connector and the other end with a DB-9 or DB-25 female connector) must be available.
Networking
Figure 3-9 shows the example network of the login to the UA5000 in the local serial port mode Figure 3-9 Example network for the login to the UA5000 in the local serial port mode
UA5000 ETH1
COM
PC Serial port
RS-232 Serial port cable
PVMB ETH0
Flowchart
Figure 3-10 shows the flowchart for logging in to the UA5000 in the local serial port mode Figure 3-10 Flowchart for logging into the UA5000 in the local serial port mode
Procedure
Step 1 Use a standard RS-232 serial port cable to connect the serial port on the PC to the COM port on the PVMB control board, as shown in Figure 3-9.
Step 2 Configure the HyperTerminal communication parameters.
NOTE
The following considers the typical mode in Windows as an example to describe how to log in to the system in the local serial port mode. Other modes are not described here.
1. Set up a connection.
Choose Start > Programs > Accessories > Communications > HyperTerminal on the PC to display the Connection Description dialog box. Enter the connection name, and then click OK, as shown in the following figure.
2. Select the serial port.
Select the serial port on the PC, for example, COM2, that is connected to the UA5000, and then click OK, as shown in the following figure.
NOTE
l The baud rate of the HyperTerminal must be the same as the baud rate of the serial port on the UA5000. By default, the baud rate of the serial port on the UA5000 is 9600 bit/s.
l If illegal characters are displayed on the HyperTerminal interface after you log in to the system, it indicates that the baud rate of the HyperTerminal is different from the baud rate of the serial port on the UA5000. In this case, you can modify the baud rate of the HyperTerminal and then log in to the system again. The system supports the following baud rates: 9600bit/s, 19200bit/s, 38400bit/s, 57600bit/s, and 115200bit/s.
4. Click OK to display the HyperTerminal interface. Step 3 Set the properties of the HyperTerminal.
1. Set the emulation type of the HyperTerminal.
Choose File > huawei Properties from the main menu on the HyperTerminal interface. On the Settings tab page in the dialog box that is displayed, select VT100 or Auto Detect as Emulation, as shown in the following figure. By default, Auto Detect is selected.
2. Set the line delay and the character delay of the ASCII code.
Click ASCII Setup. In the dialog box that is displayed, set Line delay to 200 and Character delay to 200, and then click OK, as shown in the following figure. By default, Line delay is set to 0 and Character delay to 0.
NOTE
When the text is copied to the HyperTerminal, the Character delay parameter controls the speed at which each character is sent. The Line delay parameter controls the interval between lines. If the delay is too short, certain characters are omitted. If certain characters are omitted when the text is copied to the HyperTerminal, modify the delay.
Step 4 On the interface of the HyperTerminal, press Enter to display the user name prompt character. Enter the user name and the password for registration according to the prompt (by default, the user name is root and the password is admin) until the command line prompt character is displayed. For the basic information on how to use the CLI, see CLI Operation Characteristics. If the login fails, click on the operation interface and then click . If the login still fails, go to Step 1 to check the parameter settings or the physical connection are normal. If the parameter settings and the physical connection are normal, log in again.
Step 5 To configure the IP address of the ETH1 port, do as follows:
1. In global config mode, run the interface eth command to enter the eth mode.
2. In ETH mode, run the ip address command to configure the IP address, the subnet mask and the gateway of the ETH1 port.
3. Run the display ip address command to query the IP address and the subnet mask. 4. Run the sysman mode command to configure the network management mode. Step 6 To configure the IP address of the ETH0 port, do as follows:
1. Run the mac outband add command to add the MAC address of the outband management. 2. In global config mode, run the interface outband command to enter the outband mode. 3. In outband mode, run the ip address command to configure the IP address, the subnet mask
and the gateway of the ETH0 port.
4. Run the display ip address command to query the IP address, the subnet mask and the gateway.
5. Run the sysman mode command to configure the network management mode. ----End
Result
You can maintain and manage the device after logging in to the device through the serial port.
3.5.2 Login in the Telnet Mode (Inband Management)
This topic describes how to log in to the UA5000 through the uplink port (inband management port) in telnet mode to maintain and manage the UA5000.
Prerequisite
l You must log in to the UA5000 through the local serial port and the IP address and the subnet mask must be configured for the UA5000. For detailed configuration, see 3.5.1 Login in the Local Serial Port Mode.
l The IP address of the maintenance terminal has been correctly configured. For the process of configuring the IP address for the maintenance terminal, see Configuring the
NOTE
In the following operations, the configuration of the UA5000 must be performed through the local serial port.
Networking — LAN
Figure 3-11 shows the example network for inband management through telnet in a LAN. Figure 3-11 Example network for inband management over a LAN in telnet mode
PC3 PC1 LAN PC2 UA5000 ETH1 COM 0/4/0 PVMB ETH0
Networking — WAN
Figure 3-12 shows the example network for inband management over a LAN in telnet mode. Figure 3-12 Example network for inband management over a WAN in telnet mode
UA5000 ETH1 COM 0/4/0 Router PC PVMB ETH0
Configuration Flowchart
Figure 3-13 shows the flowchart for logging in to and configuring the system through the inband management port in telnet mode.
Figure 3-13 Flowchart for logging in to and configuring the system through the inband management port in telnet mode
End Start
Configure IP address of service network port Set up configuration
environment
Run the telnet program Log in to the system
Run the telnet program
Procedure
Step 1 Set up the configuration environment.
l If you log in to the UA5000 in the LAN inband management mode through telnet, set up a network environment according to the networking shown in Figure 3-11.
l If you log in to the UA5000 in the WAN inband management mode through telnet, set up a network environment according to the networking shown in Figure 3-12.
Step 2 Configure the IP addresses of the service network port.
In ETH mode, you can run the ip address command to configure the IP address of the service network port.
huawei(config)#interface eth
huawei(config-if-eth)#ip address 10.10.20.10 255.255.255.0 10.10.20.1 vlan_tag 1 huawei(config-if-eth)#quit
Step 3 Run the telnet application.
Choose Start > Run from the main menu on the maintenance terminal. On the Open address bar of the Run interface, enter telnet X.X.X.X (X.X.X.X indicates the IP address of the ETH1 port on the UA5000), as shown in Figure 3-14 (Windows is considered as an example), and then click OK to display the remote login dialog box.
Figure 3-14 Interface of running the telnet application
Step 4 Log in to the system.
In the remote login dialog box, enter the user name and the password. By default, the user name is root and the password is admin. After you log in to the system successfully, a message is displayed indicating that the login is successful, as show in the following message.
>>User name:root >>User password:
Huawei HONET UA5000 Universal Access Unit.
Copyright(C) Huawei Technologies Co., Ltd. 1998-2010. All rights reserved. ----End
Result
After logging to the system, you can maintain and manage the UA5000. For the basic information on how to use the CLI, see CLI Operation Characteristics.
3.5.3 Login in the Telnet Mode (Outband Management)
This topic describes how to log in to the UA5000 through the maintenance network port (outband management port) in telnet mode to maintain and manage the UA5000.
Prerequisite
l You must log in to the UA5000 through the local serial port and the IP address and the subnet mask must be configured for the UA5000. For detailed configuration, see 3.5.1 Login in the Local Serial Port Mode.
l The IP address of the maintenance terminal has been correctly configured. For the process of configuring the IP address for the maintenance terminal, see Configuring the
Maintenance Terminal. NOTE
In the following operations, the configuration of the UA5000 must be performed through the local serial port.
Networking — LAN
Figure 3-15 shows the example network for configuring the Networking through the outband management port over a LAN in telnet mode.
Figure 3-15 Example network for outband management over a LAN in telnet mode PC3 PC1 LAN PC2 UA5000 ETH1 COM 0/4/0 PVMD ETH0
Networking — WAN
Figure 3-16 shows the example network for configuring the Networking through the outband management port over a WAN in telnet mode.
Figure 3-16 Example network for configuring the outband management over a WAN in telnet mode UA5000 ETH1 COM 0/4/0 Router PC PVMD ETH0 10.10.20.10/24 10.10.1.0/24
Configuration Flowchart
Figure 3-17 shows the flowchart for logging in to and configuring the system through the outband management port in telnet mode.
Figure 3-17 Flowchart for logging in to and configuring the UA5000 through the outband management port in telnet mode
Configure IP address of maintenance network port
Run the telnet program Run the telnet program
Log in to the system Start
Set up configuration environment
End
Procedure
Step 1 Set up the configuration environment.
l If you log in to the UA5000 in the LAN outband management mode through telnet, set up a network environment according to the networking shown in Figure 3-15.
l If you log in to the UA5000 in the WAN outband management mode through telnet, set up a network environment according to the networking shown in Figure 3-16.
Step 2 Configure the IP addresses of the maintenance network port.
In outband mode, you can run the ip address command to configure the IP address of the maintenance network port.
NOTE
The default IP address of the maintenance Ethernet port is 172.20.1.2, and the subnet mask is 255.255.255.0. You can configure the IP address of the maintenance Ethernet port based on the actual network plan.
huawei(config)#interface outband
huawei(interface-outband)#ip address 10.10.20.10 255.255.255.0 10.10.20.1 vlan_tag 1
huawei(interface-outband)#quit Step 3 Configure an outband route.
In the case that PVMD functions as the control board, if the IP address of the maintenance terminal and that of the maintenance network port on the UA5000 are not in the same network segment, run the outband route add command in diagnose mode to create an outband route from the UA5000 to the maintenance terminal.
NOTE
huawei(config)#diagnose
huawei(diagnose)%%outband route add 10.10.1.0 255.255.255.0 huawei(diagnose)%%config
Step 4 Run the telnet application.
Choose Start > Run from the main menu on the maintenance terminal. On the Open address bar of the Run interface, enter telnet X.X.X.X (X.X.X.X indicates the IP address of the ETH0 port on the UA5000), as shown in Figure 3-18 (Windows is considered as an example), and then click OK to display the remote login dialog box.
Figure 3-18 Interface of running the telnet application
Step 5 Log in to the system.
In the remote login dialog box, enter the user name and the password. By default, the user name is root and the password is admin. After you log in to the system successfully, a message is displayed indicating that the login is successful, as show in the following message.
>>User name:root >>User password:
Huawei HONET UA5000 Universal Access Unit.
Copyright(C) Huawei Technologies Co., Ltd. 1998-2010. All rights reserved. ----End
Result
After logging to the system, you can maintain and manage the UA5000. For the basic information on how to use the CLI, see CLI Operation Characteristics.
3.5.4 Login in the SSH Mode (Inband Management)
This topic describes how to log in to the UA5000 in secure shell (SSH) mode through the uplink port (inband management port) and then maintain and manage the UA5000. In SSH mode, the authentication, encryption, and authorization are provided to ensure the security of network communications. When you remotely log in to the UA5000 through the network whose security cannot be ensured, the secure information and the powerful authentication function can be provided in SSH mode so that the UA5000 is protected from IP address-spoofing or plain text password interception attack.
Prerequisite
l You must log in to the UA5000 through the local serial port and the IP address and the subnet mask must be configured for the UA5000. For detailed configuration, see 3.5.1 Login in the Local Serial Port Mode.
l The IP address of the maintenance terminal has been correctly configured. For the process of configuring the IP address for the maintenance terminal, see Configuring the
Maintenance Terminal. NOTE
In the following operations, the configuration of the UA5000 must be performed through the local serial port.
Networking — Inband Management over a LAN
Figure 3-19 shows the example network for configuring the inband management over a LAN in SSH mode.
Figure 3-19 Example network for configuring the inband management over a LAN in SSH mode
PC3 PC1 LAN PC2 UA5000 ETH1 COM 0/4/0 PVMB ETH0
Networking — Inband Management over a WAN
Figure 3-20 shows the example network for configuring the inband management over a WAN in SSH mode.
Figure 3-20 Example network for configuring the inband management over a WAN in SSH mode UA5000 ETH1 COM 0/4/0 Router PC PVMB ETH0
Data Plan — SSH Mode
Table 3-14 provides the data plan for configuring the inband management over a LAN or WAN in SSH mode.
Table 3-14 Data plan for configuring the inband management over a LAN or WAN in SSH mode
Item Data
UA5000 User name: huawei
User authentication mode: RSA public key authentication
Maintenance terminal IP address: 10.10.21.1/24
Client software: PuTTY
Password convertors: PuTTY.exe, PuTTYGen.exe, and sshkey.exe
Router IP address of the router connected to the
UA5000: 10.10.20.254/24 NOTE
Only the WAN requires the router.
Configuration Flowchart
Figure 3-21 shows the flowchart for logging in to and configuring the system through the inband management port in SSH mode.
Figure 3-21 Flowchart for logging in to and configuring the system in SSH mode
End
Generate the RSA public key Generate the SSH user
public key Assign the public key to
the SSH user 开始
Log in to the system in SSH mode
Create a user
Set the SSH user authentication mode rsa, all, and
password-publickey authentication mode
Password-Authentication mode
Create the local key pair in SSH mode Start Set up configuration environment 开始 Configure IP address of service network port
Procedure
Step 1 Set up the configuration environment.
l If you log in to the UA5000 through the inband management over a LAN in SSH mode, set up a network environment according to the networking shown in Figure 3-19.
l If you log in to the UA5000 through the inband management over a WAN in SSH mode, set up a network environment according to the networking shown in Figure 3-20.
Step 2 Configure the IP addresses of the service network port.
In ETH mode, you can run the ip address command to configure the IP address of the service network port.
huawei(config)#interface eth
huawei(config-if-eth)#ip address 10.10.20.10 255.255.255.0 10.10.20.1 vlan_tag 1 huawei(config-if-eth)#quit
Step 3 Create a user.
Add a user. The profile is operator, the user name and the password are huawei1, the level is operator, and the number of times for login is 4.
huawei(config)#terminal user name
User Name(length<6,15>):huawei1 User Password(length<6,15>):
Confirm Password
(length<6,15>): User profile name(<=15 chars)[root]:operator
User's Level: 1. Common User 2. Operator 3. Administrator:2 Permitted Reenter Number(0--4):4 User's Appended Info(<=30 chars): Adding user succeeds Repeat this operation? (y/n)[n]:n
Step 4 Create the local RSA key pair.
Run the rsa local-key-pair create command to create the local RSA key pair.
CAUTION
To log in to the system in SSH mode successfully, you need to configure and create the local RSA key pair first. Before performing other configurations in SSH mode, create the local key pair in SSH mode.
huawei(config)#rsa local-key-pair create The key name will be: Host
% RSA keys defined for Host already exist. Confirm to replace them? [y/n]:y
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512, It will take a few minutes.
Input the bits in the modulus[default = 512]: Generating keys...
...++++++++++++ ....++++++++++++ ...++++++++ ...++++++++
Step 5 Set the SSH user authentication mode.
Run the ssh user authentication-type rsa command to select the SSH user authentication mode. The SSH user authentication mode is classified into the following four types and the rsa authentication mode is considered as an example here.
l rsa: The RSA public key is used for authentication.
l all: The password or RSA key is used for authentication. It indicates that an SSH user can log in to the device after the user has passed the password or RSA authentication.
l password-publickey: The password and public key are used for authentication. It indicates that an SSH user can log in to the device only after the user has passed both the password and RSA authentication.
huawei(config)#ssh user huawei authentication-type rsa Step 6 Generate the RSA public key.
1. Run the key generator (considering the PuTTY as an example).
Run the key generator PUTTYGEN.EXE.Figure 3-22 shows the interface of the key generator.
Figure 3-22 Interface of the key generator
2. Generate the client key.
Select SSH-2 RSA as the key type in the Parameters area, click Generate, and move the cursor according to the prompt to generate the client key.Figure 3-23 shows the interface of the key generator.
Figure 3-23 Interface of the key generator
After generating the key, click Save public key and Save private key to save the public key and the private key.Figure 3-24 shows the interface of saving the public key and the private key.
Figure 3-24 Interface of saving the public key and the private key
3. Generate the RSA public key.
Start sshkey.exe, the password convertor on the client, click Browse, select the public key file that is saved, and then click Convert to convert the client public key to the RSA public key.Figure 3-25 shows the interface of converting the client public key to the RSA public key.
Figure 3-25 Interface of converting the client public key to the RSA public key
Step 7 Generate the public key for the SSH user.
Create the RSA public key and copy the RSA public key to the server in the config-rsa-key-code mode.
huawei(config)#rsa peer-public-key key
huawei(config-rsa-public-key)#public-key-code begin
Enter "RSA key code" view, return last view with "public-key-code end".
huawei(config-rsa-key-code)#30818602 81805A01 625279EF 5E4CD503 916C9DB5 0233CF58 huawei(config-rsa-key-code)#C901D4CA 207C77D3 4EF25B04 9897BD24 997BF61B DFB9A73C huawei(config-rsa-key-code)#F82B6F06 55ACCDB9 F7DC1474 9E6518EE B1A543FF 9147150B huawei(config-rsa-key-code)#111BD11C 683A023B A4295550 DA13F6BE 3190A2A8 3BFCB158 huawei(config-rsa-key-code)#4FBAA365 F6E796A0 B02CB6F9 8491A373 9B4A0876 4B3189B4 huawei(config-rsa-key-code)#BBA2C7BA E1974104 AD165E98 18CF0201 25
huawei(config-rsa-key-code)#public-key-code end huawei(config-rsa-public-key)#peer-public-key end Step 8 Assign the public key to the SSH user.
Run the ssh user assign rsa-key command to assign the public key to user huawei.
huawei(config)#ssh user huawei assign rsa-key key Step 9 Log in to the system.
1. Run the client software.
Start the putty.exe, the SSH client tool. Choose SSH > Auth from the navigation tree to specify the RSA private key file, as shown in Figure 3-26. Then, click Browse to display the file selecting dialog box. In the dialog box, select the private key file and click OK.
Figure 3-26 Interface of the SSH client software
2. Log in to the system.
Choose Session from the navigation tree, and then enter the IP address of the UA5000 in the Host Name (or IP address) text box, as shown in Figure 3-27. Then, click Open to log in to the system.
