- Table of Contents
-
- 01-Fundamentals Configuration Guide
- 00-Preface
- 01-CLI configuration
- 02-RBAC configuration
- 03-Login management configuration
- 04-FTP and TFTP configuration
- 05-File system management configuration
- 06-Configuration file management configuration
- 07-Software upgrade configuration
- 08-ISSU configuration
- 09-Emergency shell configuration
- 10-Automatic configuration
- 11-Preprovisioning feature configuration
- 12-Device management configuration
- 13-Tcl configuration
- 14-Python configuration
- 15-License management
- Related Documents
-
Title | Size | Download |
---|---|---|
12-Device management configuration | 236.99 KB |
Device management tasks at a glance
Restrictions and guidelines for configuring the system time
System time configuration tasks at a glance
Setting the system time at the CLI
Obtaining the UTC time through a time protocol
Setting the daylight saving time
Enabling displaying the copyright statement
Disabling password recovery capability
Setting the system operating mode
Setting the hardware resource operating mode
Setting the port status detection timer
Setting memory alarm thresholds
Configuring resource monitoring
Setting the temperature alarm thresholds
Configuring parity error logging for entries on forwarding chips
Specifying the preferred airflow direction
Verifying and diagnosing transceiver modules
Diagnosing transceiver modules
Hardware compatibility with device locating
Restrictions and guidelines for device reboot
Rebooting the device immediately at the CLI
Restoring the factory-default configuration
Display and maintenance commands for device management configuration
Managing the device
This chapter describes how to configure basic device parameters and manage the device.
Device management tasks at a glance
All device management tasks are optional. You can perform any of the tasks in any order.
· Configuring basic parameters
¡ Enabling displaying the copyright statement
· Configuring security parameters
¡ Disabling password recovery capability
· Adjusting device capacities
¡ Setting the system operating mode
¡ Setting the hardware resource operating mode
¡ Setting the port status detection timer
· Monitoring the device
¡ Setting memory alarm thresholds
¡ Configuring resource monitoring
¡ Setting the temperature alarm thresholds
¡ Configuring parity error logging for entries on forwarding chips
· Managing resources
¡ Specifying the preferred airflow direction
¡ Verifying and diagnosing transceiver modules
· Maintaining the device
· Restoring the factory-default configuration
Configuring the device name
About the device name
A device name (also called hostname) identifies a device in a network and is used in CLI view prompts. For example, if the device name is Sysname, the user view prompt is <Sysname>.
Restrictions and guidelines
On an underlay network, the device uses the device name that you have configured for it. If you do not configure a device name for the device but automated underlay network deployment is enabled, the device uses the device name assigned by the VCF fabric feature. For more information about VCF fabric, see VCF fabric configuration in Network Management and Monitoring Configuration Guide.
Procedure
1. Enter system view.
system-view
sysname sysname
By default, the device name is H3C.
Configuring the system time
About the system time
Correct system time is essential to network management and communication. Configure the system time correctly before you run the device on the network.
The device can use one of the following methods to obtain the system time:
· Uses the locally set system time, and then uses the clock signals generated by its built-in crystal oscillator to maintain the system time.
· Periodically obtains the UTC time from an NTP or PTP source, and uses the UTC time, time zone, and daylight saving time to calculate the system time. For more information about NTP and PTP, see Network Management and Monitoring Configuration Guide.
The system time calculated by using the UTC time from a time source is more precise.
Restrictions and guidelines for configuring the system time
After you configure the clock protocol none command, the clock datetime command determines the system time, whether or not the time zone or daylight saving time has been configured.
If you configure or change the time zone or daylight saving time after the device obtains the system time, the device recalculates the system time. To view the system time, use the display clock command.
System time configuration tasks at a glance
To configure the system time, perform the following tasks:
1. Configuring the system time
Choose one of the following tasks:
¡ Setting the system time at the CLI
¡ Obtaining the UTC time through a time protocol
2. (Optional.) Setting the time zone
Make sure each network device uses the time zone of the place where the device resides.
3. (Optional.) Setting the daylight saving time
Make sure each network device uses the daylight saving time parameters of the place where the device resides.
Setting the system time at the CLI
1. Enter system view.
system-view
2. Configure the device to use the local system time.
clock protocol none
By default, the device uses the NTP time source.
If you execute the clock protocol command multiple times, the most recent configuration takes effect.
3. Return to user view.
quit
4. Set the local system time.
clock datetime time date
By default, the system time is UTC time 00:00:00 01/01/2011.
Obtaining the UTC time through a time protocol
1. Enter system view.
system-view
2. Specify the system time source.
clock protocol { ntp | ptp }
By default, the device uses the NTP time source.
The ptp keyword is not supported on S6860, S6861, and S6820 switch series.
If you execute this command multiple times, the most recent configuration takes effect.
3. Configure time protocol parameters.
For more information about NTP and PTP configuration, see Network Management and Monitoring Configuration Guide.
Setting the time zone
1. Enter system view.
system-view
2. Set the time zone.
clock timezone zone-name { add | minus } zone-offset
By default, the system uses the UTC time zone.
Setting the daylight saving time
1. Enter system view.
system-view
2. Set the daylight saving time.
clock summer-time name start-time start-date end-time end-date add-time
By default, the daylight saving time is not set.
Enabling displaying the copyright statement
About copyright statement displaying
This feature enables the device to display the copyright statement in the following situations:
· When a Telnet or SSH user logs in.
· When a console user quits user view. This is because the device automatically tries to restart the user session.
If you disable displaying the copyright statement, the device does not display the copyright statement in any situations.
Procedure
1. Enter system view.
system-view
2. Enable displaying the copyright statement.
copyright-info enable
By default, displaying the copyright statement is enabled.
Configuring banners
About banners
Banners are messages that the system displays when a user logs in.
The system supports the following banners:
· Legal banner—Appears after the copyright statement. To continue login, the user must enter Y or press Enter. To quit the process, the user must enter N. Y and N are case insensitive.
· Message of the Day (MOTD) banner—Appears after the legal banner and before the login banner.
· Login banner—Appears only when password or scheme authentication is configured.
· Shell banner—Appears when a user accesses user view.
The system displays the banners in the following order: legal banner, MOTD banner, login banner, and shell banner.
Banner input methods
You can configure a banner by using one of the following methods:
· Input the entire command line in a single line.
The banner cannot contain carriage returns. The entire command line, including the command keywords, the banner, and the delimiters, can have a maximum of 511 characters. The delimiters for the banner can be any printable character but must be the same. You cannot press Enter before you input the end delimiter.
For example, you can configure the shell banner "Have a nice day." as follows:
<System> system-view
[System] header shell %Have a nice day.%
· Input the command line in multiple lines.
The banner can contain carriage returns. A carriage return is counted as two characters.
To input a banner configuration command line in multiple lines, use one of the following methods:
¡ Press Enter after the final command keyword, type the banner, and end the final line with the delimiter character %. The banner plus the delimiter can have a maximum of 1999 characters.
For example, you can configure the banner "Have a nice day." as follows:
<System> system-view
[System] header shell
Please input banner content, and quit with the character '%'.
Have a nice day.%
¡ After you type the final command keyword, type any printable character as the start delimiter for the banner and press Enter. Then, type the banner and end the final line with the same delimiter. The banner plus the end delimiter can have a maximum of 1999 characters.
For example, you can configure the banner "Have a nice day." as follows:
<System> system-view
[System] header shell A
Please input banner content, and quit with the character 'A'.
Have a nice day.A
¡ After you type the final command keyword, type the start delimiter and part of the banner. Make sure the final character of the final string is different from the start delimiter. Then, press Enter, type the rest of the banner, and end the final line with the same delimiter. The banner plus the start and end delimiters can have a maximum of 2002 characters.
For example, you can configure the banner "Have a nice day." as follows:
<System> system-view
[System] header shell AHave a nice day.
Please input banner content, and quit with the character 'A'.
A
Procedure
1. Enter system view.
system-view
2. Configure the legal banner.
header legal text
3. Configure the MOTD banner.
header motd text
4. Configure the login banner.
header login text
5. Configure the shell banner.
header shell text
Disabling password recovery capability
About password recovery capability
Password recovery capability controls console user access to the device configuration and SDRAM from BootWare menus. For more information about BootWare menus, see the release notes.
If password recovery capability is enabled, a console user can access the device configuration without authentication to configure a new password.
If password recovery capability is disabled, console users must restore the factory-default configuration before they can configure new passwords. Restoring the factory-default configuration deletes the next-startup configuration files.
To enhance system security, disable password recovery capability.
Restrictions and guidelines
To access the device configuration without authentication, you must connect to the master device and access the BootWare menu while the master device is starting up.
Procedure
1. Enter system view.
system-view
2. Disable password recovery capability.
undo password-recovery enable
By default, password recovery capability is enabled.
Disabling USB interfaces
About disabling USB interfaces
You can use USB interfaces to upload or download files. By default, all USB interfaces are enabled. You can disable USB interfaces as needed.
Prerequisites
Before using this command, use the umount command to unmount all USB partitions. For more information about this command, see Fundamentals Command Reference.
Procedure
1. Enter system view.
system-view
2. Disable USB interfaces.
usb disable
By default, all USB interfaces are enabled.
Setting the system operating mode
About system operating modes
Supported features and feature specifications vary by system operating mode.
The S6800 and S6860 switch series can operate in one of the following modes:
· standard—Standard mode, which is the default mode. This mode does not support FC or FCoE.
· advance—Advanced mode. This mode supports FC and FCoE and reserves resources for FC and FCoE. The resources available for ACLs are less than in standard mode. This mode does not support IRF 3.1. Support for other features is the same as in standard mode.
· expert—Expert mode. This mode supports FCoE over S-Channel but does not support QinQ, VLAN mapping, MAC VLAN, voice VLAN, VXLAN, MPLS, VPLS, SPB, TRILL, or IRF 3.1. Support for other features is the same as in advance mode.
The S6820 switch series can operate in one of the following modes:
· standard—Standard mode, which is the default mode. This mode does not support FC or FCoE.
· advance—Advanced mode. This mode supports FC and FCoE and reserves resources for FC and FCoE. The resources available for ACLs are less than in standard mode. This mode does not support IRF 3.1. Support for other features is the same as in standard mode.
The S6861 switch series can operate in one of the following modes:
· StandardBridge—Standard mode, which is the default mode. This mode does not support FCoE.
· AdvancedBridge—Advanced mode. This mode supports FCoE and reserves resources for FCoE. The resources available for ACLs are less than in standard mode. This mode does not support IRF 3.1. Support for other features is the same as in standard mode.
For more information about FC, FCoE, and FCoE over S-Channel, see FC and FCoE Configuration Guide.
Restrictions and guidelines
Change to the system operating mode takes effect after a device reboot.
Procedure
1. Enter system view.
system-view
2. Set the system operating mode.
S6800 and S6860 switch series:
system-working-mode { advance | expert | standard }
S6820 switch series:
system-working-mode { advance | standard }
S6861 switch series:
system-working-mode { AdvancedBridge | StandardBridge }
By default, the device operates in standard mode.
Setting the hardware resource operating mode
About hardware resource operating modes
The device supports multiple hardware resource operating modes. The capacities of the MAC address table, ARP and ND tables, and IPv4 and IPv6 routing tables vary by hardware resource operating mode.
The routing table capacities also vary by the hardware-resource routing-mode ipv6-128 command and the uRPF feature.
· When the hardware-resource routing-mode ipv6-128 command is configured, the device supports IPv6 routes with prefixes longer than 64 bits. For information about this command, see Layer 3—IP Routing Command Reference.
· When uRPF is configured, routing table capacities decrease by half. For information about uRPF, see Security Configuration Guide.
Table 1 and Table 2 list the table capacities in hardware resource operating modes when uRPF is not configured. IPv6-64 represents an IPv6 address with a prefix less than or equal to 64 bits. IPv6-128 represents an IPv6 address with a prefix greater than 64 bits. The ARP table and ND table share the same hardware resource. The IPv4 and IPv6 routing tables share the same hardware resource. In some hardware resource operating modes, IPv6-128 requires the independent hardware resource, which is indicated by a plus sign (+).
Table 1 lists the table capacities in hardware resource operating modes when the hardware-resource routing-mode ipv6-128 command is not configured.
Table 1 Capacities when IPv6 routes with prefixes longer than 64 bits are not supported
Hardware |
MAC address table capacity |
ARP/ND table capacity |
||
S6800 switch series |
||||
S6860 switch series |
0 |
272K |
4K ARP or 2K ND |
16K (IPv4) or 8K (IPv6-64) |
1 |
208K |
68K ARP or 34K ND |
16K (IPv4) or 8K (IPv6-64) |
|
2 |
80K |
196K ARP or 98K ND |
16K (IPv4) or 8K (IPv6-64) |
|
3 |
16K |
260K ARP or 130K ND |
16K (IPv4) or 8K (IPv6-64) |
|
4 |
80K |
68K ARP or 34K ND |
128K (IPv4) or 128K (IPv6-64) |
|
5 |
16K |
4K ARP or 2K ND |
256K (IPv4) or 256K (IPv6-64) |
|
S6861 switch series |
0 |
208K |
68K ARP or 34K ND |
16K (IPv4) or 8K (IPv6-64) |
1 |
80K |
128K ARP or 64K ND |
128K (IPv4) or 128K (IPv6-64) |
|
S6820 switch series |
0 |
72K |
72K ARP or 36K ND |
16K (IPv4) or 8K (IPv6-64) |
1 |
136K |
8K ARP or 4K ND |
||
2 |
8K |
8K ARP or 4K ND |
||
4 |
8K |
136K ARP or 68K ND |
||
3 |
8K |
8K ARP or 4K ND |
131K (IPv4) or 86K (IPv6-64) |
Table 2 lists the routing table capacities supported by the device when the hardware-resource routing-mode ipv6-128 command is configured.
Table 2 Capacities when IPv6 routes with prefixes longer than 64 bits are supported
Hardware |
Mode |
MAC address table capacity |
ARP/ND table capacity |
IPv4/IPv6 routing table capacity |
4 |
32K |
16K ARP or 8K ND |
128K (IPv4) or 32K (IPv6-64), 20K (IPv6-128) |
|
S6860 switch series |
0 |
272K |
4K ARP or 2K ND |
8K (IPv4) + 2K (IPv6-128), or 4K (IPv6-64) + 2K (IPv6-128) |
1 |
208K |
68K ARP or 34K ND |
8K (IPv4) + 2K (IPv6-128), or 4K (IPv6-64) + 2K (IPv6-128) |
|
2 |
80K |
196K ARP or 98K ND |
8K (IPv4) + 2K (IPv6-128), or 4K (IPv6-64) + 2K (IPv6-128) |
|
3 |
16K |
260K ARP or 130K ND |
8K (IPv4) + 2K (IPv6-128), or 4K (IPv6-64) + 2K (IPv6-128) |
|
4 |
80K |
68K ARP or 34K ND |
128K (IPv4), 16K (IPv6-64), or 16K (IPv6-128) |
|
5 |
16K |
4K ARP or 2K ND |
256K (IPv4), 32K (IPv6-64), or 20K (IPv6-128) |
|
S6861 switch series |
0 |
208K |
68K ARP or 34K ND |
16K (IPv4) + 2K (IPv6-128), or 4K (IPv6-64) + 2K (IPv6-128) |
1 |
80K |
128K ARP or 64K ND |
128K (IPv4), 16K (IPv6-64), or, 16K (IPv6-128) |
|
S6820 switch series |
0 |
72K |
72K ARP or 36K ND |
16K (IPv4), 4K (IPv6-64), or 4K (IPv6-128) |
1 |
136K |
8K ARP or 4K ND |
||
2 |
8K |
8K ARP or 4K ND |
||
4 |
4K |
136K ARP or 68K ND |
||
3 |
8K |
8K ARP or 4K ND |
131K (IPv4), 32K (IPv6-64), or 32K (IPv6-128) |
Restrictions and guidelines
A hardware resource operating mode change takes effect after you save the running configuration and reboot the device. Before rebooting the device, make sure you know the possible impact on the network.
Procedure
1. Enter system view.
system-view
2. Set the hardware resource operating mode.
hardware-resource switch-mode { 0 | 1 | 2 | 3 | 4 | 5 }
By default, the hardware resource operating mode is 0.
The S6800 and S6820 switch series do not support mode 5.
The S6861 switch series does not support modes 2, 3, 4, and 5.
Setting the port status detection timer
About the port status detection timer
The device starts a port status detection timer when a port is shut down by a protocol. Once the timer expires, the device brings up the port so the port status reflects the port's physical status.
Procedure
1. Enter system view.
system-view
2. Set the port status detection timer.
shutdown-interval time
The default setting is 30 seconds.
Monitoring CPU usage
About CPU usage monitoring
To monitor CPU usage, the device performs the following operations:
· Samples CPU usage at 1-minute intervals, and compares the samples with CPU usage thresholds to identify the CPU usage status and send alarms or notifications accordingly.
· Samples and saves CPU usage at a configurable interval if CPU usage tracking is enabled. You can use the display cpu-usage history command to display the historical CPU usage statistics in a coordinate system.
The device supports the following CPU usage thresholds:
· Minor threshold—If the CPU usage increases to or above the minor threshold but is less than the severe threshold, the CPU usage enters minor alarm state. The device sends minor alarms periodically until the CPU usage increases above the severe threshold or the minor alarm is removed.
· Severe threshold—If the CPU usage increases above the severe threshold, the CPU usage enters severe alarm state. The device sends severe alarms periodically until the severe alarm is removed.
· Recovery threshold—If the CPU usage decreases below the recovery threshold, the CPU usage enters recovered state. The device sends a recovery notification.
CPU usage alarms and notifications can be sent to NETCONF, SNMP, and the information center to be encapsulated as NETCONF events, SNMP traps and informs, and log messages. For more information, see NETCONF, SNMP, and information center in Network Management and Monitoring Configuration Guide.
Figure 1 CPU alarms and alarm-removed notifications
Procedure
1. Enter system view.
system-view
2. Set the CPU usage alarm thresholds.
monitor cpu-usage threshold severe-threshold { minor-threshold minor-threshold recovery-threshold recovery-threshold [ slot slot-number [ cpu cpu-number ] ] }
On the S6800, S6860, and S6861 switch series, the defaults are as follows:
¡ Severe CPU usage alarm threshold—99%.
¡ Minor CPU usage alarm threshold—80%.
¡ CPU usage recovery threshold—75%.
On the S6820 switch series, the defaults are as follows:
¡ Severe CPU usage alarm threshold—99%.
¡ Minor CPU usage alarm threshold—90%.
¡ CPU usage recovery threshold—60%.
3. Set CPU usage alarm resending intervals.
monitor resend cpu-usage { minor-interval minor-interval | severe-interval severe-interval } * [ slot slot-number [ cpu cpu-number ] ]
By default, the minor alarm resending interval is 300 seconds and the severe alarm resending interval is 60 seconds.
4. Set the sampling interval for CPU usage tracking.
monitor cpu-usage interval interval [ slot slot-number [ cpu cpu-number ] ]
By default, the sampling interval for CPU usage tracking is 1 minute.
5. Enable CPU usage tracking.
monitor cpu-usage enable [ slot slot-number [ cpu cpu-number ] ]
By default, CPU usage tracking is enabled.
Setting memory alarm thresholds
About memory alarm thresholds
To ensure correct operation and improve memory efficiency, the system monitors the amount of free memory space in real time. If the amount of free memory space reaches the minor, severe, or critical alarm threshold, the system issues an alarm to affected service modules and processes.
The early warning feature warns you of an approaching insufficient-memory condition.
As shown in Table 3, the system supports the following free-memory thresholds:
· Sufficient-memory threshold.
· Early-warning threshold.
· Normal state threshold.
· Minor alarm threshold.
· Severe alarm threshold.
· Critical alarm threshold.
Table 3 Memory alarm notifications and memory alarm-removed notifications
Notification |
Triggering condition |
Remarks |
Early-warning notification |
The amount of free memory space decreases below the early-warning threshold. |
After generating and sending an early-warning notification, the system does not generate and send any additional early-warning notifications until the early warning is removed. |
Minor alarm notification |
The amount of free memory space decreases below the minor alarm threshold. |
After generating and sending a minor alarm notification, the system does not generate and send any additional minor alarm notifications until the minor alarm is removed. |
Severe alarm notification |
The amount of free memory space decreases below the severe alarm threshold. |
After generating and sending a severe alarm notification, the system does not generate and send any additional severe alarm notifications until the severe alarm is removed. |
Critical alarm notification |
The amount of free memory space decreases below the critical alarm threshold. |
After generating and sending a critical alarm notification, the system does not generate and send any additional critical alarm notifications until the critical alarm is removed. |
Critical alarm-removed notification |
The amount of free memory space increases above the severe alarm threshold. |
N/A |
Severe alarm-removed notification |
The amount of free memory space increases above the minor alarm threshold. |
N/A |
Minor alarm-removed notification |
The amount of free memory space increases above the normal state threshold. |
N/A |
Early-warning-removed notification |
The amount of free memory space increases above the sufficient-memory threshold. |
N/A |
Figure 2 Memory alarm notifications and alarm-removed notifications
Restrictions and guidelines
If a memory alarm occurs, delete unused configuration items or disable some features to increase the free memory space. Because the memory space is insufficient, some configuration items might not be able to be deleted.
Procedure
1. Enter system view.
system-view
2. Set the memory usage threshold.
memory-threshold [ slot slot-number [ cpu cpu-number ] ] usage memory-threshold
By default, the memory usage threshold is 100%.
3. Set the free-memory thresholds.
memory-threshold [ slot slot-number [ cpu cpu-number ] ] [ ratio ] minor minor-value severe severe-value critical critical-value normal normal-value [ early-warning early-warning-value secure secure-value ]
The following compatibility matrix shows the default settings for this command:
Hardware |
Default |
S6800-54QT (LS-6800-54QT) S6800-54QT (LS-6800-54QT-H1) S6800-54QF (LS-6800-54QF) S6800-54QF (LS-6800-54QF-H1) |
If the device starts up with the factory defaults, the defaults are as follows: · Minor alarm threshold—122 MB. · Severe alarm threshold—61 MB. · Critical alarm threshold—41 MB. · Normal state threshold—143 MB. · Early-warning threshold—164 MB. · Sufficient-memory threshold—184 MB. If the device starts up with the initial configuration, the defaults are as follows: · Minor alarm threshold—256 MB. · Severe alarm threshold—128 MB. · Critical alarm threshold—64 MB. · Normal state threshold—304 MB. · Early-warning threshold—320 MB. · Sufficient-memory threshold—368 MB. |
S6800 switch series except the models listed in the previous cell |
· Minor alarm threshold—256 MB. · Severe alarm threshold—128 MB. · Critical alarm threshold—64 MB. · Normal state threshold—304 MB. · Early-warning threshold—320 MB. · Sufficient-memory threshold—368 MB. |
S6820 switch series |
· Minor alarm threshold—96 MB. · Severe alarm threshold—64 MB. · Critical alarm threshold—48 MB. · Normal state threshold—128 MB. · Early-warning threshold—256 MB. · Sufficient-memory threshold—304 MB. |
S6860 and S6861 switch series |
· Minor alarm threshold—256 MB. · Severe alarm threshold—128 MB. · Critical alarm threshold—64 MB. · Normal state threshold—304 MB. · Early-warning threshold—320 MB. · Sufficient-memory threshold—368 MB. |
4. Set memory depletion alarm resending intervals.
monitor resend memory-threshold { critical-interval critical-interval | early-warning-interval early-warning-interval | minor-interval minor-interval | severe-interval severe-interval } * [ slot slot-number [ cpu cpu-number ] ]
The following are the default settings:
¡ Early warning resending interval—1 hour.
¡ Minor alarm resending interval—12 hours.
¡ Severe alarm resending interval—3 hours.
¡ Critical alarm resending interval—1 hour.
Configuring resource monitoring
About resource monitoring
The resource monitoring feature enables the device to monitor the available amounts of types of resources, for example, the space for ARP entries. The device samples the available amounts periodically and compares the samples with resource depletion thresholds to identify the resource depletion status.
The device supports a minor resource depletion threshold and a severe resource depletion threshold for each supported resource type.
· If the available amount is equal to or less than the minor resource depletion threshold but greater than the severe resource depletion threshold, the resource type is in minor alarm state.
· If the available amount is equal to or less than the severe resource depletion threshold, the resource type is in severe alarm state.
· If the available amount increases above the minor resource depletion threshold, the resource type is in recovered state.
When a resource type enters severe alarm state, the device issues a severe alarm. If the resource type stays in severe alarm state, the device resends severe alarms periodically.
When a resource type enters minor alarm state, the device issues a minor alarm. If the resource type stays in minor alarm state or changes from severe alarm state to minor alarm state, the device identifies whether resending of minor resource depletion alarms is enabled. If the feature is disabled, the device does not issue additional minor alarms. If the feature is enabled, the device resends minor alarms periodically.
Resource depletion alarms can be sent to NETCONF, SNMP, and the information center to be encapsulated as NETCONF events, SNMP traps and informs, and log messages. For more information, see NETCONF, SNMP, and information center in Network Management and Monitoring Configuration Guide.
Figure 3 Resource depletion alarms and alarm-removed notifications
Procedure
1. Enter system view.
system-view
2. Set resource depletion thresholds.
resource-monitor resource resource-name slot slot-number cpu cpu-number by-percent minor-threshold minor-threshold severe-threshold severe-threshold
The default settings vary by resource type. Use the display resource-monitor command to display the resource depletion thresholds.
3. Specify destinations for resource depletion alarms.
resource-monitor output { netconf-event | snmp-notification | syslog } *
By default, resource depletion alarms are sent to NETCONF, SNMP, and the information center.
4. Enable resending of minor resource depletion alarms.
resource-monitor minor resend enable
By default, resending of minor resource depletion alarms is enabled.
Setting the temperature alarm thresholds
About temperature alarm thresholds
The device monitors its temperature based on the following thresholds:
· Low-temperature threshold.
· High-temperature warning threshold.
· High-temperature alarming threshold.
When the device temperature drops below the low-temperature threshold or reaches the high-temperature warning or alarming threshold, the device performs the following operations:
· Sends log messages and traps.
· Sets LEDs on the device panel.
Procedure
1. Enter system view.
system-view
2. Configure the temperature alarm thresholds.
temperature-limit slot slot-number hotspot sensor-number lowlimit warninglimit [ alarmlimit ]
The defaults vary by temperature sensor model. To view the defaults, execute the undo temperature-limit and display environment commands in turn.
The high-temperature alarming threshold must be higher than the high-temperature warning threshold, and the high-temperature warning threshold must be higher than the low-temperature threshold.
Configuring parity error logging for entries on forwarding chips
About parity error logging for entries on forwarding chips
The device automatically detects parity errors in entries on forwarding chips. The parity error logging feature collects parity errors periodically, and generates a log message if the number of parity errors exceeds the logging threshold.
Procedure
1. Enter system view.
system-view
2. Set the parity error statistics period for entries on forwarding chips.
parity-error monitor period value
The default parity error statistics period is 60 seconds for entries on forwarding chips.
3. Set the parity error logging threshold for entries on forwarding chips.
parity-error monitor threshold value
The default parity error logging threshold is 5000 for entries on forwarding chips.
4. Enable parity error logging for entries on forwarding chips.
parity-error monitor log enable
By default, parity error logging is disabled for entries on forwarding chips.
Specifying the preferred airflow direction
About the preferred airflow direction
Two fan tray models are available for the device. One model has air flow from the port side to the power supply side. The other model has air flow from the power supply side to the port side.
A fan tray can operate effectively only when it uses the same air flow direction as the ventilation system in the equipment room. The preferred airflow direction must also be the same.
If a fan tray is not operating correctly or its airflow direction is different from the preferred airflow direction, the system sends traps and logs. You must replace the fan tray.
Procedure
1. Enter system view.
system-view
2. Specify the preferred airflow direction.
fan prefer-direction slot slot-number { port-to-power | power-to-port }
By default, the preferred airflow direction is from the power supply side to the port side.
Verifying and diagnosing transceiver modules
Verifying transceiver modules
About transceiver module verification
You can use one of the following methods to verify the genuineness of a transceiver module:
· Display the key parameters of a transceiver module, including its transceiver type, connector type, central wavelength of the transmit laser, transfer distance, and vendor name.
· Display its electronic label. The electronic label is a profile of the transceiver module and contains the permanent configuration, including the serial number, manufacturing date, and vendor name. The data was written to the transceiver module or the device's storage component during debugging or testing of the transceiver module or device.
The device regularly checks transceiver modules for their vendor names. If a transceiver module does not have a vendor name or the vendor name is not H3C, the device repeatedly outputs traps and log messages. For information about logging rules, see Network Management and Monitoring Configuration Guide.
Procedure
To verify transceiver modules, execute the following commands in any view:
· Display the key parameters of transceiver modules.
display transceiver interface [ interface-type interface-number ]
· Display the electrical label information of transceiver modules.
display transceiver manuinfo interface [ interface-type interface-number ]
Diagnosing transceiver modules
About transceiver module diagnosis
The device provides the alarm and digital diagnosis functions for transceiver modules. When a transceiver module fails or is not operating correctly, you can perform the following tasks:
· Check the alarms that exist on the transceiver module to identify the fault source.
· Examine the key parameters monitored by the digital diagnosis function, including the temperature, voltage, laser bias current, TX power, and RX power.
Procedure
To diagnose transceiver modules, execute the following commands in any view:
· Display transceiver alarms.
display transceiver alarm interface [ interface-type interface-number ]
· Display the current values of the digital diagnosis parameters on transceiver modules.
display transceiver diagnosis interface [ interface-type interface-number ]
Scheduling a task
About task scheduling
You can schedule the device to automatically execute a command or a set of commands without administrative interference.
You can configure a periodic schedule or a non-periodic schedule. A non-periodic schedule is not saved to the configuration file and is lost when the device reboots. A periodic schedule is saved to the startup configuration file and is automatically executed periodically.
Restrictions and guidelines
· The default system time is always restored at reboot. To make sure a task schedule can be executed as expected, reconfigure the system time or configure NTP after you reboot the device. For more information about NTP, see Network Management and Monitoring Configuration Guide.
· To assign a command (command A) to a job, you must first assign the job the command or commands for entering the view of command A.
· Make sure all commands in a schedule are compliant to the command syntax. The system does not check the syntax when you assign a command to a job.
· A schedule cannot contain any one of these commands: telnet, ftp, ssh2, and monitor process.
· A schedule does not support user interaction. If a command requires a yes or no answer, the system always assumes that a Y or Yes is entered. If a command requires a character string input, the system assumes that either the default character string (if any) or a null string is entered.
· A schedule is executed in the background, and no output (except for logs, traps, and debug information) is displayed for the schedule.
Procedure
1. Enter system view.
system-view
2. Create a job.
scheduler job job-name
3. Assign a command to the job.
command id command
By default, no command is assigned to a job.
You can assign multiple commands to a job. A command with a smaller ID is executed first.
4. Exit to system view.
quit
5. Create a schedule.
scheduler schedule schedule-name
6. Assign a job to the schedule.
job job-name
By default, no job is assigned to a schedule.
You can assign multiple jobs to a schedule. The jobs will be executed concurrently.
7. Assign user roles to the schedule.
user-role role-name
By default, a schedule has the user role of the schedule creator.
You can assign a maximum of 64 user roles to a schedule. A command in a schedule can be executed if it is permitted by one or more user roles of the schedule.
8. Specify the execution time for the schedule.
Choose one option as needed:
¡ Execute the schedule at specific points of time.
time at time date
time once at time [ month-date month-day | week-day week-day&<1-7> ]
¡ Execute the schedule after a period of time.
time once delay time
¡ Execute the schedule at the specified time on every specified day in a month or week.
time repeating at time [ month-date [ month-day | last ] | week-day week-day&<1-7> ]
¡ Execute the schedule periodically from the specified time on.
time repeating [ at time [date ] ] interval interval
By default, no execution time is specified for a schedule.
The time commands overwrite each other. The most recently configured command takes effect.
9. (Optional.) Set the schedule log file size limit.
scheduler logfile size value
By default, the schedule log file size limit is 16 KB.
The schedule log file stores log messages for execution results of commands in jobs. After the limit is reached, the system deletes the oldest log messages to store the new log messages. If the remaining space of the log file is not enough for a single log message, the system truncates the message and does not store the extra part.
Example: Scheduling a task
Network configuration
As shown in Figure 4, two interfaces of the device are connected to users.
To save energy, configure the device to perform the following operations:
· Enable the interfaces at 8:00 a.m. every Monday through Friday.
· Disable the interfaces at 18:00 every Monday through Friday.
Procedure
# Enter system view.
<Sysname> system-view
# Configure a job for disabling interface Ten-GigabitEthernet 1/0/1.
[Sysname] scheduler job shutdown-Ten-GigabitEthernet1/0/1
[Sysname-job-shutdown-Ten-GigabitEthernet1/0/1] command 1 system-view
[Sysname-job-shutdown-Ten-GigabitEthernet1/0/1] command 2 interface ten-gigabitethernet 1/0/1
[Sysname-job-shutdown-Ten-GigabitEthernet1/0/1] command 3 shutdown
[Sysname-job-shutdown-Ten-GigabitEthernet1/0/1] quit
# Configure a job for enabling interface Ten-GigabitEthernet 1/0/1.
[Sysname] scheduler job start-Ten-GigabitEthernet1/0/1
[Sysname-job-start-Ten-GigabitEthernet1/0/1] command 1 system-view
[Sysname-job-start-Ten-GigabitEthernet1/0/1] command 2 interface ten-gigabitethernet 1/0/1
[Sysname-job-start-Ten-GigabitEthernet1/0/1] command 3 undo shutdown
[Sysname-job-start-Ten-GigabitEthernet1/0/1] quit
# Configure a job for disabling interface Ten-GigabitEthernet 1/0/2.
[Sysname] scheduler job shutdown-Ten-GigabitEthernet1/0/2
[Sysname-job-shutdown-Ten-GigabitEthernet1/0/2] command 1 system-view
[Sysname-job-shutdown-Ten-GigabitEthernet1/0/2] command 2 interface ten-gigabitethernet 1/0/2
[Sysname-job-shutdown-Ten-GigabitEthernet1/0/2] command 3 shutdown
[Sysname-job-shutdown-Ten-GigabitEthernet1/0/2] quit
# Configure a job for enabling interface Ten-GigabitEthernet 1/0/2.
[Sysname] scheduler job start-Ten-GigabitEthernet1/0/2
[Sysname-job-start-Ten-GigabitEthernet1/0/2] command 1 system-view
[Sysname-job-start-Ten-GigabitEthernet1/0/2] command 2 interface ten-gigabitethernet 1/0/2
[Sysname-job-start-Ten-GigabitEthernet1/0/2] command 3 undo shutdown
[Sysname-job-start-Ten-GigabitEthernet1/0/2] quit
# Configure a periodic schedule for enabling the interfaces at 8:00 a.m. every Monday through Friday.
[Sysname] scheduler schedule START-pc1/pc2
[Sysname-schedule-START-pc1/pc2] job start-Ten-GigabitEthernet1/0/1
[Sysname-schedule-START-pc1/pc2] job start-Ten-GigabitEthernet1/0/2
[Sysname-schedule-START-pc1/pc2] time repeating at 8:00 week-day mon tue wed thu fri
[Sysname-schedule-START-pc1/pc2] quit
# Configure a periodic schedule for disabling the interfaces at 18:00 every Monday through Friday.
[Sysname] scheduler schedule STOP-pc1/pc2
[Sysname-schedule-STOP-pc1/pc2] job shutdown-Ten-GigabitEthernet1/0/1
[Sysname-schedule-STOP-pc1/pc2] job shutdown-Ten-GigabitEthernet1/0/2
[Sysname-schedule-STOP-pc1/pc2] time repeating at 18:00 week-day mon tue wed thu fri
[Sysname-schedule-STOP-pc1/pc2] quit
Verifying the configuration
# Display the configuration information of all jobs.
[Sysname] display scheduler job
Job name: shutdown-Ten-GigabitEthernet1/0/1
system-view
interface ten-gigabitethernet 1/0/1
shutdown
Job name: shutdown-Ten-GigabitEthernet1/0/2
system-view
interface ten-gigabitethernet 1/0/2
shutdown
Job name: start-Ten-GigabitEthernet1/0/1
system-view
interface ten-gigabitethernet 1/0/1
undo shutdown
Job name: start-Ten-GigabitEthernet1/0/2
system-view
interface ten-gigabitethernet 1/0/2
undo shutdown
# Display the schedule information.
[Sysname] display scheduler schedule
Schedule name : START-pc1/pc2
Schedule type : Run on every Mon Tue Wed Thu Fri at 08:00:00
Start time : Wed Sep 28 08:00:00 2011
Last execution time : Wed Sep 28 08:00:00 2011
Last completion time : Wed Sep 28 08:00:03 2011
Execution counts : 1
-----------------------------------------------------------------------
Job name Last execution status
start-Ten-GigabitEthernet1/0/1 Successful
start-Ten-GigabitEthernet1/0/2 Successful
Schedule name : STOP-pc1/pc2
Schedule type : Run on every Mon Tue Wed Thu Fri at 18:00:00
Start time : Wed Sep 28 18:00:00 2011
Last execution time : Wed Sep 28 18:00:00 2011
Last completion time : Wed Sep 28 18:00:01 2011
Execution counts : 1
-----------------------------------------------------------------------
Job name Last execution status
shutdown-Ten-GigabitEthernet1/0/1 Successful
shutdown-Ten-GigabitEthernet1/0/2 Successful
# Display schedule log information.
[Sysname] display scheduler logfile
Job name : start-Ten-GigabitEthernet1/0/1
Schedule name : START-pc1/pc2
Execution time : Wed Sep 28 08:00:00 2011
Completion time : Wed Sep 28 08:00:02 2011
--------------------------------- Job output -----------------------------------
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname]interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1]undo shutdown
Job name : start-Ten-GigabitEthernet1/0/2
Schedule name : START-pc1/pc2
Execution time : Wed Sep 28 08:00:00 2011
Completion time : Wed Sep 28 08:00:02 2011
--------------------------------- Job output -----------------------------------
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname]interface ten-gigabitethernet 1/0/2
[Sysname-Ten-GigabitEthernet1/0/2]undo shutdown
Job name : shutdown-Ten-GigabitEthernet1/0/1
Schedule name : STOP-pc1/pc2
Execution time : Wed Sep 28 18:00:00 2011
Completion time : Wed Sep 28 18:00:01 2011
--------------------------------- Job output -----------------------------------
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname]interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1]shutdown
Job name : shutdown-Ten-GigabitEthernet1/0/2
Schedule name : STOP-pc1/pc2
Execution time : Wed Sep 28 18:00:00 2011
Completion time : Wed Sep 28 18:00:01 2011
--------------------------------- Job output -----------------------------------
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname]interface ten-gigabitethernet 1/0/2
[Sysname-Ten-GigabitEthernet1/0/2]shutdown
Locating devices
About device locating
The device provides LEDs for device locating. The locator blink blink-time command flashes the LEDs quickly for a specified period of time unless you execute the locator blink stop command.
Hardware compatibility with device locating
The S6800, S6820, and S6861 switch series do not support device locating.
Starting LED flashing
To start LED flashing, execute one of the following commands in user view:
locator [ slot slot-number ] blink blink-time
Stopping LED flashing
To stop LED flashing, execute one of the following commands in user view:
locator [ slot slot-number ] blink stop
Rebooting the device
About device reboot
The following device reboot methods are available:
· Schedule a reboot at the CLI, so the device automatically reboots at the specified time or after the specified period of time.
· Immediately reboot the device at the CLI.
This method allows you to reboot the device remotely.
During the reboot process, the device performs the following operations:
a. Resets all of its chips.
b. Uses the BootWare to verify the startup software package, decompress the package, and load the images.
c. Initializes the system.
· Power off and then power on the device. This method might cause data loss, and is the least-preferred method.
Using the CLI, you can reboot the device from a remote host.
Restrictions and guidelines for device reboot
A device reboot might result in a service outage.
For data security, the device does not reboot while it is performing file operations.
Rebooting the device immediately at the CLI
Prerequisites
Perform the following steps in any view:
1. Verify that the next-startup configuration file is correctly specified.
display startup
For more information about the display startup command, see Fundamentals Command Reference.
2. Verify that the startup image files are correctly specified.
display boot-loader
If one main startup image file is damaged or does not exist, you must specify another main startup image file before rebooting the device.
For more information about the display boot-loader command, see Fundamentals Command Reference.
3. Save the running configuration to the next-startup configuration file.
save
To avoid configuration loss, save the running configuration before a reboot.
For more information about the save command, see Fundamentals Command Reference.
Procedure
To reboot the device immediately at the CLI, execute one of the following commands in user view:
reboot [ slot slot-number [ subslot subslot-number ] ] [ force ]
Scheduling a device reboot
Restrictions and guidelines
The automatic reboot configuration takes effect on all member devices. It will be canceled if a master/subordinate switchover occurs.
The device supports only one device reboot schedule. If you execute the scheduler reboot command multiple times, the most recent configuration takes effect.
Procedure
To schedule a reboot, execute one of the following commands in user view:
· scheduler reboot at time [ date ]
· scheduler reboot delay time
By default, no device reboot time is specified.
Restoring the factory-default configuration
About restoring the factory-default configuration
If you want to use the device in a different scenario or you cannot troubleshoot the device by using other methods, use this task to restore the factory-default configuration.
This task does not delete .bin files and license files.
Restrictions and guidelines
This feature is disruptive.
Procedure
1. Execute the following command in user view to restore the factory-default configuration for the device:
restore factory-default
2. Reboot the device.
reboot
When the command prompts you to choose whether to save the running configuration, enter N. If you choose to save the running configuration, the device loads the saved configuration at startup.
Display and maintenance commands for device management configuration
Execute display commands in any view. Execute the reset scheduler logfile command in user view. Execute the reset version-update-record command in system view.
Task |
Command |
Display device alarm information. |
display alarm [ slot slot-number ] |
Display the system time, date, time zone, and daylight saving time. |
display clock |
Display the copyright statement. |
display copyright |
Display CPU usage statistics. The core keyword is mutually exclusive with the control-plane and data-plane keywords. |
display cpu-usage [ summary ] [ slot slot-number [ cpu cpu-number [ core { core-number | all } ] ] ] |
Display CPU usage monitoring settings. |
display cpu-usage configuration [ slot slot-number [ cpu cpu-number ] ] |
Display the historical CPU usage statistics in a coordinate system. |
display cpu-usage history [ job job-id ] [ slot slot-number [ cpu cpu-number ] ] |
Display hardware information. |
display device [ flash | usb ] [ slot slot-number [ subslot subslot-number ] | verbose ] |
Display electronic label information for the device. |
display device manuinfo [ slot slot-number [ subslot subslot-number ] ] |
Display electronic label information for a fan tray. |
display device manuinfo slot slot-number fan fan-id |
Display electronic label information for a power supply. |
display device manuinfo slot slot-number power power-id |
Display or save operating information for features and hardware modules. |
display diagnostic-information [ hardware | infrastructure | l2 | l3 | service ] [ key-info ] [ filename ] |
Display device temperature information. |
display environment [ slot slot-number ] |
Display the operating states of fan trays. |
display fan [ slot slot-number [ fan-id ] ] |
Display hardware resource operating mode information for the MAC address table, ARP and ND tables, and routing tables. |
display hardware-resource switch-mode |
Display memory usage statistics. |
display memory [ summary ] [ slot slot-number [ cpu cpu-number ] ] |
Display memory alarm thresholds and statistics. |
display memory-threshold [ slot slot-number [ cpu cpu-number ] ] |
Display power supply information. |
display power [ slot slot-number [ power-id | verbose ] ] |
Display resource monitoring information. |
display resource-monitor [ resource resource-name ] [ slot slot-number [ cpu cpu-number ] ] |
Display job configuration information. |
display scheduler job [ job-name ] |
Display job execution log information. |
display scheduler logfile |
Display the automatic reboot schedule. |
display scheduler reboot |
Display schedule information. |
display scheduler schedule [ schedule-name ] |
Display system stability and status information. |
display system stable state |
Display system working mode information. |
display system-working-mode |
Display system version information. |
display version |
Display startup software image upgrade records. |
display version-update-record |
Clear job execution log information. |
reset scheduler logfile |
Clear startup software image upgrade records. |
reset version-update-record |