Contents

Cloud connection commands· 1

cloud-management backup-server domain· 2

cloud-management keepalive· 3

cloud-management ping· 3

cloud-management server domain· 4

cloud-management server password· 5

cloud-management server port 6

cloud-management unbinding-code· 6

display cloud-management state· 7

 

Cloud connection commands

The following compatibility matrix shows the support of hardware platforms for cloud connections:

 

F1000 series	Model	Cloud connection compatibility
F1000-X-G5 series	F1000-A-G5, F1000-C-G5, F1000-C-G5-LI, F1000-E-G5, F1000-H-G5, F1000-S-G5	No
F1000-X-G3 series	F1000-A-G3, F1000-C-G3, F1000-E-G3, F1000-S-G3	No
F1000-X-G2 series	F1000-A-G2, F1000-C-G2, F1000-E-G2, F1000-S-G2	No
F1000-9X0-AI series	F1000-9390-AI, F1000-9385-AI, F1000-9380-AI, F1000-9370-AI, F1000-9360-AI, F1000-9350-AI, F1000-9330-AI, F1000-9320-AI, F1000-990-AI, F1000-980-AI, F1000-970-AI, F1000-960-AI, F1000-950-AI, F1000-930-AI, F1000-920-AI , F1000-910-AI, F1000-905-AI	No
F1000-C83X0 series	F1000-C8395, F1000-C8390, F1000-C8385, F1000-C8380, F1000-C8370, F1000-C8360, F1000-C8350, F1000-C8330	Yes
F1000-C81X0 series	F1000-C8180, F1000-C8170, F1000-C8160, F1000-C8150, F1000-C8130, F1000-C8120, F1000-C8110	Yes
F1000-7X0-HI series	F1000-770-HI, F1000-750-HI, F1000-740-HI, F1000-730-HI, F1000-720-HI, F1000-710-HI	No
F1000-C-X series	F1000-C-EI, F1000-C-HI, F1000-C-XI, F1000-E-XI	No
F1000-V series	F1000-E-VG, F1000-S-VG	No
SecBlade IV	LSPM6FWD8, LSQM2FWDSC8	No

‌

F100 series	Model	Cloud connection compatibility
F100-X-G5 series	F100-A-G5, F100-C-G5, F100-E-G5, F100-M-G5, F100-S-G5	No
F100-X-G3 series	F100-A-G3, F100-C-G3, F100-E-G3, F100-M-G3, F100-S-G3	No
F100-X-G2 series	F100-A-G2, F100-C-G2, F100-E-G2, F100-M-G2, F100-S-G2	No
F100-WiNet series	F100-A80-WiNet, F100-C80-WiNet, F100-C60-WiNet, F100-C50-WiNet, F100-S80-WiNet, F100-A81-WiNet, F100-A91-WiNet	No
F100-C-A series	F100-C-A6, F100-C-A5, F100-C-A3, F100-C-A6-WL, F100-C-A5-W, F100-C-A3-W	No
F100-X-XI series	F100-A-EI, F100-A-HI, F100-A-SI, F100-C-EI, F100-C-HI, F100-C-XI, F100-E-EI, F100-S-HI, F100-S-XI	No

‌

cloud-management backup-server domain

Use cloud-management backup-server domain to specify a backup cloud server by its domain name.

Use undo cloud-management backup-server domain to remove one or all backup cloud servers.

Syntax

cloud-management backup-server domain domain-name [ vpn-instance vpn-instance-name ] [ source-ip ipv4-address ]

undo cloud-management backup-server domain [ domain-name ]

Default

No backup cloud server is specified.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

domain-name: Specifies a backup cloud server by its domain name, a case-sensitive string of 1 to 253 characters. If you do not specify this parameter in the undo cloud-management backup-server domain command, all backup cloud servers will be deleted.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the backup cloud server is on the public network.

source-ip ipv4-address: Specifies the source IPv4 address for the device that connects to the backup cloud server. It must be the same as the IPv4 address configured on the device. If you do not specify this option, the device uses the primary IPv4 address of the egress interface to connect to the backup cloud server.

Usage guidelines

Before configuring this command, make sure a DNS server is configured to translate domain names.

If you execute this command multiple times to configure a backup cloud server with the same domain name, the most recent configuration takes effect.

You can specify one primary server by using the cloud-management server domain command and a maximum of eight backup servers by repeating the cloud-management backup-server domain command.

When establishing a cloud connection, the device connects to one of the primary and backup servers according to the sequence in which they are specified. The first specified server has the highest priority. When the connected server fails, the device switches to another server and does not switch back to the original server even if the original server recovers.

To view the connected server, execute the display cloud-management state command.

Examples

# Specify the server with domain name 123.com as a backup cloud server.

<Sysname> system-view

[Sysname] cloud-management backup-server domain 123.com

Related commands

display cloud-management state

cloud-management keepalive

Use cloud-management keepalive to set the keepalive interval for the local device to send keepalive packets to the cloud server.

Use undo cloud-management keepalive to restore the default.

Syntax

cloud-management keepalive interval

undo cloud-management keepalive

Default

The keepalive interval is 180 seconds.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

interval: Specifies the keepalive interval in the range of 10 to 600 seconds.

Usage guidelines

If the device does not receive a response from the cloud server within three keepalive intervals, the device sends a registration request to re-establish the cloud connection.

Examples

# Set the keepalive interval to 360 seconds.

<Sysname> system-view

[Sysname] cloud-management keepalive 360

cloud-management ping

Use cloud-management ping to set the interval at which the local device sends ping packets to the cloud server.

Use undo cloud-management ping to restore the default.

Syntax

cloud-management ping interval

undo cloud-management ping

Default

The local device sends ping packets to the cloud server at intervals of 60 seconds.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

interval: Specifies the interval at which the local device sends ping packets to the cloud server, in the range of 10 to 600 seconds.

Usage guidelines

After the connection to the cloud server is established, the local device sends ping packets to the server periodically to prevent NAT entry aging. Reduce the interval value if the network condition is poor or the NAT entry aging time is short.

The cloud server does not respond to ping packets.

Examples

# Configure the local device to send ping packets to the cloud server at intervals of 120 seconds.

<Sysname> system-view

[Sysname] cloud-management ping 120

cloud-management server domain

Use cloud-management server domain to specify the primary cloud server by its domain name.

Use undo cloud-management server domain to restore the default.

Syntax

cloud-management server domain domain-name [ vpn-instance vpn-instance-name ] [ source-ip ipv4-address ]

undo cloud-management server domain

Default

The cloud server uses domain name ops.seccloud.h3c.com.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

domain-name: Specifies the primary cloud server by its domain name, a case-sensitive string of 1 to 253 characters.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, the primary cloud server is on the public network.

source-ip ipv4-address: Specifies the source IPv4 address for the device that connects to the primary cloud server. It must be the same as the IPv4 address configured on the device. If you do not specify this option, the device uses the primary IPv4 address of the egress interface to connect to the primary cloud server.

Usage guidelines

Before configuring this command, make sure a DNS server is configured to translate domain names.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Specify the server with domain name lvzhouv3.h3c.com as the primary cloud server.

<Sysname> system-view

[Sysname] cloud-management server domain lvzhouv3.h3c.com

Related commands

display cloud-management state

cloud-management server password

Use cloud-management server password to set the password for establishing cloud connections to the ADWAN server.

Use cloud-management server password to restore the default.

Syntax

cloud-management server password { cipher | simple } string

undo cloud-management server password

Default

No password is set for establishing cloud connections to the ADWAN server.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

cipher: Specifies the password in encrypted form.

simple: Specifies the password in plaintext form. For security purposes, the password specified in plaintext form will be stored in encrypted form.

string: Specifies the password. The plaintext form is a case-sensitive string of 1 to 63 characters. The encrypted form is a case-sensitive string of 1 to 117 characters.

Usage guidelines

After you change the password, the device terminates the cloud connections that have been established (if any) and uses the new password to establish cloud connections.

Examples

# Set the password for establishing cloud connections to the ADWAN server to 12345678 in plaintext format.

<Sysname> system-view

[Sysname] cloud-management server password simple 12345678

cloud-management server port

Use cloud-management server port to specify the TCP port number used to establish cloud connections.

Use undo cloud-management server port to restore the default.

Syntax

cloud-management server port port-number

undo cloud-management server port

Default

TCP port number 19443 is used to establish cloud connections.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

port-number: Specifies a TCP port number in the range of 1 to 65535.

Usage guidelines

After you change the port number, the device terminates the cloud connections that have been established (if any) and uses the new port number to establish cloud connections.

Examples

# Specify the TCP port number used to establish cloud connections as 80.

<Sysname> system-view

[Sysname] cloud-management server port 80

cloud-management unbinding-code

Use cloud-management unbinding-code to send the verification code for device unbinding to the cloud server.

Syntax

cloud-management unbinding-code code

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

code: Specifies the verification code obtained from the cloud server. The verification code is a case-sensitive string of 16 characters.

Usage guidelines

A device can be registered on the cloud server by only one user.

To register a device that has been registered by another user, you need to take the following steps:

1.     Obtain a verification code for device unbinding from the cloud server.

2.     Execute this command on the device to send the verification code to the cloud server.

3.     Register the device on the cloud server.

Examples

# Send the verification code for device unbinding to the cloud server.

[Sysname] cloud-management unbinding-code A6B9C3C2D5A8Z1S7

Related commands

cloud-management server domain

display cloud-management state

Use display cloud-management state to display cloud connection state information.

Syntax

display cloud-management state

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Examples

# Display cloud connection state information.

<Sysname> display cloud-management state

Cloud connection state                      : Established

Device state                                : Request_success

Cloud server address                        : 10.1.1.1

Cloud server domain name                    : ops.seccloud.h3c.com

Cloud connection mode                       : Https

Cloud server port                           : 19443

Connected at                                : Wed Jan 27 14:18:40 2018

Duration                                    : 00d 00h 02m 01s

Process state                               : Message received

Failure reason                              : N/A

Last down reason                            : socket connection error (Details:N/A)

Last down at                                : Wed Jan 27 13:18:40 2018

Last report failure reason                  : N/A

Last report failure at                      : N/A

Dropped packets after reaching buffer limit : 0

Total dropped packets                       : 1

Last report incomplete reason               : N/A

Last report incomplete at                   : N/A

Buffer full count                           : 0

Table 1 Command output

Field	Description
Cloud connection state	Cloud connection state: Unconnected, Request, and Established.
Device state	Local device state: ·     Idle—In idle state. ·     Connecting—Connecting to the cloud server. ·     Request_CAS_url—Sent a central authentication service (CAS) URL request. ·     Request_CAS_url_success—Requesting CAS URL succeeded. ·     Request_CAS_TGT—Sent a ticket granting ticket (TGT) request. ·     Request_CAS_TGT_success—Requesting TGT succeeded. ·     Request_CAS_ST—Sent a service ticket (ST) request. ·     Request_CAS_ST_success—Requesting ST succeeded. ·     Request_cloud_auth—Sent an authentication request. ·     Request_cloud_auth_success—Authentication succeeded. ·     Register—Sent a registration request. ·     Register_success—Registration succeeded. ·     Request—Sent a handshake request. ·     Request_success—Handshake succeeded.
Cloud server address	IP address of the cloud server.
Cloud server domain name	Domain name of the cloud server.
Cloud server port	TCP port number used to establish cloud connections.
Connected at	Time when the cloud connection was established.
Duration	Duration since the establishment of the cloud connection.
Process state	Cloud connection processing state: ·     DNS not parsed. ·     DNS parsed. ·     Message not sent. ·     Message sent. ·     Message not received. ·     Message received.
Failure reason	Cloud connection failure reason: ·     DNS parse failed. ·     Socket connection failed. ·     SSL creation failed. ·     Sending CAS url request failed. ·     Sending CAS TGT failed. ·     Sending CAS ST failed. ·     Sending cloud auth failed. ·     Sending register failed. ·     Processing CAS url response failed. ·     Processing CAS TGT response failed. ·     Processing CAS ST response failed. ·     Processing cloud auth response failed. ·     Processing register response failed. ·     Sending handshake request failed. ·     Processing handshake failed. ·     Sending websocket request failed. ·     Processing websocket packet failed.
Last down reason	Reason for the most recent cloud connection interruption: ·     Device or process rebooted. ·     Socket connection error. ·     Configuration changed. ·     Received websocket close packet from cloud. ·     Keepalive expired. ·     Packet processing failed. ·     Main connection went down. ·     Cloud reset connection. ·     Memory reached threshold.
Last down at	Time when the cloud connection went down most recently.
Last report failure reason	Reason for the most recent cloud connection packet sending failure: ·     Tunnel is being deleted. ·     Tunnel socket is invalid. ·     Failed to convert string to json. ·     Failed to convert json to string. ·     Failed to create message node. ·     Tunnel is not ready. ·     Failed to create packet buffer. ·     SSL sending failure. If the reason is SSL sending failure, one of the following detailed reason will be displayed: ·     ssl error none. ·     ssl error ssl. ·     ssl error read. ·     ssl error write. ·     ssl error x509 lookup. ·     ssl error syscall. ·     ssl error zero return. ·     ssl error connect. ·     ssl error accept.
Last report failure at	Time when the most recent cloud connection packet sending failure occurred.
Dropped packets after reaching buffer limit	Number of packets that are dropped because the CMTNL buffer limit is reached.
Total dropped packets	Total number of dropped packets.
Last report incomplete reason	Reason for the most recent unfinished packet sending: ·     Interrupted system call. ·     Socket buffer is full.
Last report incomplete at	Time when the most recent unfinished packet sending occurred.
Buffer full count	Number of times that the buffer becomes full.

‌