H3c-technologies H3C WX6000 Series Access Controllers Manual do Utilizador

H3C WX Series Access ControllersNetwork Management and MonitoringConfiguration GuideHangzhou H3C Technologies Co., Ltd. http://www.h3c.com Docume

iii Configuring the RMON Statistics Collection Function ············································································9-3 Configuring th

7-8 To do… Use the command… Remarks Extend the standard linkUp/linkDown traps defined in RFC snmp-agent trap if-mib link extended Optional Standard

7-9 SNMPv1/SNMPv2c Configuration Example Network requirements z As shown in Figure 7-3, the NMS connects to the agent, an AC, through an Ethernet. z

7-10 z After the above configuration, an SNMP connection is established between the NMS and the agent. The NMS can get and configure the values of s

7-11 z The following log information is displayed on the terminal when the NMS performs the SET operation to the agent. %Jan 1 02:59:42:576 2006 Sys

8-1 8 MIB Style Configuration This chapter includes these sections: z Overview z Setting the MIB Style z Displaying and Maintaining MIB Overview

9-1 9 RMON Configuration This chapter includes these sections: z RMON Overview z Configuring the RMON Statistics Collection Function z Displaying

9-2 z Embedding RMON agents in network devices such as routers, switches, and hubs to provide the RMON probe function. Management devices exchange d

9-3 Alarm group The RMON alarm group monitors specified alarm variables, such as total number of received packets (etherStatsPkts) on an interface. A

9-4 Configuring the RMON Ethernet Statistics Collection Function Follow these steps to configure the RMON Ethernet statistics Collection function: To

9-5 Configuring the RMON Alarm Function Configuration Prerequisites z If you need to configure that the managed ACs send traps to the NMS when it t

iv Configuring an NQA Test Group···········································································································11-7 Config

9-6 Entry Parameters to be compared Maximum number of entries that can be created Alarm Alarm variable (alarm-variable), sampling interval (sampling

9-7 Table 9-2 Ethernet interface configuration prerequisites Hardware Ethernet interface configuration prerequisites LS8M1WCMA0 LSQM1WCMB0 LSBM1WCM

9-8 <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] rmon statistics 1 owner user1-rmon [Sysname-

9-9 [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] rmon history 1 buckets 8 interval 60 owner user1 After the above configu

9-10 fragments : 0 , jabbers : 0 collisions : 0 , utilization : 0 Sampled values of re

10-1 10 Information Center Configuration This chapter includes these sections: z Information Center Overview z Configuring Information Center z D

10-2 Figure 10-1 Information center diagram (default) (log file is supported)

10-3 Figure 10-2 Information center diagram (default) (log file is not supported) 123456789console0channel6monitorloghosttrapbufferlogbuffersnmpagent

10-4 For example, in the output rule, if you configure to output information with severity level being informational, the information with severity l

10-5 Configurations for the eight output destinations function independently and take effect only after the information center is enabled. Outputti

1-1 1 Applicable Models and Software Versions H3C WX series access controllers include the WX3000 series unified switches, and WX5000 and WX6000 ser

10-6 LOG TRAP DEBUG Output destination Modules allowed Enabled/disabled Severity Enabled/disabled Severity Enabled/disabled Severity Web interface

10-7 whereas that of the system information sent from the information center to the other destinations is with a precision of milliseconds. sysname S

10-8 Configuring Information Center Information Center Configuration Task List Complete the following tasks to configure information center: Task Re

10-9 Follow these steps in user view to enable the display of system information on the console: To do… Use the command… Remarks Enable the monitor

10-10 Follow these steps to enable the display of system information on a monitor terminal: To do… Use the command… Remarks Enable the monitoring o

10-11 Outputting System Information to the Trap Buffer The trap buffer receives only the trap information, and discards the log and debugging infor

10-12 To do… Use the command… Remarks Name the channel with a specified channel number info-center channel channel-number name channel-name Optiona

10-13 To do… Use the command… Remarks Configure the output rules of the system information info-center source { module-name | default } channel { c

10-14 You can configure to output log, trap and debugging information to a channel. However, when this channel is bound with the output destination

10-15 z To ensure that the AC works normally, use the info-center logfile size-quota command to set a logfile to be no smaller than 1 MB and no lar

2-1 2 Typical Network Scenarios AC Networking As shown in the following figure, the AC is connected to Switch (Layer 2 or Layer 3) through GE1/0/1,

10-16 To do… Use the command… Remarks Enter system view system-view — Enter interface view interface interface-type interface-number — Disable the

10-17 z The source modules are ARP and IP. Figure 10-3 Network diagram for outputting log information to a Unix log host Configuration procedure B

10-18 In the above configuration, local4 is the name of the logging facility used by the log host to receive logs. info is the information level. The

10-19 # Disable the output of log, trap, and debugging information of all modules on channel loghost. [Sysname] info-center source default channel lo

10-20 # syslogd -r & Make sure that the syslogd process is started with the -r option on a Linux log host. After the above configurations, the

10-21 % Current terminal monitor is on <Sysname> terminal logging % Current terminal logging is on After the above configuration takes effect,

11-1 11 NQA Configuration This chapter includes these sections: z NQA Overview z NQA Configuration Task List z Configuring the NQA Server z Enab

11-2 module of the detection result, and the track module triggers other application modules to process accordingly. The implementation of collaborat

11-3 Table 11-1 describes the monitored elements and the NQA test types in which the elements can be monitored. Table 11-1 Monitored elements and NQ

11-4 NQA DNS tests do not support the action of sending trap messages. In other words, the action to be triggered in DNS tests can only be the defau

2-2 Figure 2-2 Access controller module networking Unified Switch Networking As shown in Figure 2-3, Unified switch (functions as both an AC and a

11-5 Figure 11-2 Relationship between the NQA client and NQA server Not all test types require the NQA server. Only the TCP, UDP echo, UDP jitter,

11-6 Task Remarks Configuring ICMP Echo Tests Configuring DHCP Tests Configuring DNS Tests Configuring FTP Tests Configuring HTTP Tests Configuring

11-7 To do… Use the command… Remarks Enter system view system-view — Enable the NQA client nqa agent enable Optional Enabled by default. Creating

11-8 To do… Use the command… Remarks Configure the source interface for ICMP echo requests. The requests take the IP address of the source interfac

11-9 To do… Use the command… Remarks Enter NQA test group view nqa entry admin-name operation-tag — Configure the test type as DHCP and enter test

11-10 To do… Use the command… Remarks Configure optional parameters See Configuring Optional Parameters for an NQA Test Group Optional A DNS te

11-11 To do… Use the command… Remarks Configure a login password password password Required By default, no login password is configured. Specify a

11-12 To do… Use the command… Remarks Configure the source IP address of request packets source ip ip-address Optional By default, no source IP add

11-13 Configuration prerequisites UDP jitter tests require cooperation between the NQA server and the NQA client. Before you start UDP jitter tests,

11-14 To do… Use the command… Remarks Configure optional parameters See Configuring Optional Parameters for an NQA Test Group Optional The probe

3-1 3 Feature Matrixes In this document, Yes means a feature or command is supported, and No means not supported. Feature Matrix for the WX5000 Seri

11-15 Configuring TCP Tests TCP tests of an NQA test group are used to test the TCP connection between the NQA client and a port on the NQA server an

11-16 Configuration prerequisites UDP echo tests require cooperation between the NQA server and the NQA client. Before you start UDP echo tests, conf

11-17 Configuring Voice Tests Do not perform voice tests on known ports, ports from 1 to 1023. Otherwise, the NQA test might fail or the correspond

11-18 To do… Use the command… Remarks Configure the destination address of voice probe packets destination ip ip-address Required By default, no de

11-19 To do… Use the command… Remarks Configure optional parameters See Configuring Optional Parameters for an NQA Test Group Optional Only one p

11-20 To do… Use the command… Remarks Enter system view system-view — Enter NQA test group view nqa entry admin-name operation-tag — Enter test ty

11-21 To do… Use the command… Remarks Configure the hold time of statistics groups statistics hold-time hold-time Optional 120 minutes by default.

11-22 To do… Use the command… Remarks Enter system view system-view — Enter NQA test group view nqa entry admin-name operation-tag — Enter test ty

11-23 z Configure test parameters required for the test type. z Configure the NQA server for tests that require cooperation with the NQA server. Sc

11-24 Figure 11-3 Network diagram for ICMP echo tests NQA clientDevice BAC10.1.1.1/24 10.2.2.2/24Device C10.1.1.2/2410.3.1.2/24Device A10.2.2.1/2410.

3-2 Document Module Feature WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 File system management configuration Configuration file enc

11-25 [AC] nqa schedule admin test start-time now lifetime forever # Stop the ICMP echo tests after a period of time. [AC] undo nqa schedule admin te

11-26 <AC> system-view [AC] nqa entry admin test [AC-nqa-admin-test] type dhcp [AC-nqa-admin-test-dhcp] operation interface vlan-interface 2 #

11-27 Configuration procedure Before you make the configuration, make sure the devices can reach each other. # Create a DNS test group. <AC>

11-28 FTp Test Configuration Example Network requirements As shown in Figure 11-6, configure NQA FTP tests to test the connection with a specified FT

11-29 Min/Max/Average round trip time: 173/173/173 Square-Sum of round trip time: 29929 Last succeeded probe time: 2007-11-22 10:07

11-30 [AC-nqa-admin-test-http] url /index.htm # configure the HTTP version 1.0 to be used in HTTP tests. (Version 1.0 is the default version, and th

11-31 Configuration procedure Before you make the configuration, make sure the devices can reach each other. 1) Configure Device # Enable the NQA

11-32 RTT number: 10 Min positive SD: 4 Min positive DS: 1 Max positive SD: 21 Max positive D

11-33 Negative SD sum: 181 Negative DS sum: 209 Negative SD average: 13 Negative DS average: 14 Ne

11-34 2) Configurations on AC # Create an SNMP test group and configure SNMP packets to use 10.2.2.2 as their destination IP address. <AC> sy

3-3 Document Module Feature WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 Configuring loopback detection on an Ethernet interface Yes

11-35 Configuration procedure Before you make the configuration, make sure the devices can reach each other. 1) Configure Device # Enable the NQA

11-36 [AC] display nqa history admin test NQA entry (admin admin, tag test) history record(s): Index Response Status Time 1

11-37 # Display the results of the last UDP echo test. [AC] display nqa result admin test NQA entry (admin admin, tag test) test results: Desti

11-38 2) Configure AC # Create a voice test group. <AC> system-view [AC] nqa entry admin test [AC-nqa-admin-test] type voice # Configure voice

11-39 Sum of SD delay: 343 Sum of DS delay: 985 Square sum of SD delay: 117649 Square sum of DS delay: 970225

11-40 The display nqa history command cannot show you the results of voice tests. To know the result of a voice test, use the display nqa result com

11-41 [AC1-nqa-admin-test-icmp-echo] quit # Configure the test start time and test duration for the test group. [AC1] nqa schedule admin test start-t

11-42 10.2.1.0/24 Direct 0 0 10.2.1.2 Vlan3 10.2.1.2/32 Direct 0 0 127.0.0.1 InLoop0 127.0.0

12-1 12 Index A AC Networking 2-1 Access Controller Module Networking 2-1 C Command Matrix for the WX3000 Series 4-24 Command Matrix for the WX5000

12-2 Ping 5-1 R RMON Overview 9-1 S Scheduling an NQA Test Group 11-22 Setting the MIB Style 8-1 SNMP Configuration 7-3 SNMP Logging Configuration E

3-4 Document Module Feature WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 IP routing basics configuration IPv6 features Yes Yes Ye

3-5 Document Module Feature WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 Establishing a connection between an SSH client and an IPv6

Copyright © 2008-2010, Hangzhou H3C Technologies Co., Ltd. and its licensors All Rights Reserved No part of this manual may be reproduced or transmi

3-6 Document Module Feature WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 Other protocol packets supported 11MAC/802.1X/ARP/DHCP/HWTA

3-7 Feature Matrix for the WX6000 Series The switch interface module on the WX6103, and the LSQM1WCMB0, LSBM1WCM2A0, and LSRM1WCM2A1 access control

3-8 Volume Module Feature WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 Guide configuration Maximum number of SSIDs supported 512 512 512 512 Combo

3-9 Volume Module Feature WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 IP routing basics configuration IPv6-related displaying and maintaining com

3-10 Volume Module Feature WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 Establishing a connection between an SSH client and an IPv6 SSH server Yes

3-11 Volume Module Feature WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 ACSEI client configuration Yes Yes Yes Yes Access Controller Module Basic

3-12 Volume Module Feature WX3024 WX3010 WX3008 Storage media supported Flash Flash Flash Device management configuration License 24 APs at m

3-13 Volume Module Feature WX3024 WX3010 WX3008 IPv6 application configuration IPv6 application configuration No No No IP routing basics confi

3-14 Volume Module Feature WX3024 WX3010 WX3008 Specifying a source IPv6 address or interface for an SFTP client No No No Establishing a connect

4-1 4 Command Matrixes In this document, Yes means a feature or command is supported, and No means not supported. Command Matrix for the WX5000 Seri

Preface The H3C WX series documentation set describes the software features for the H3C WX Series Access Controllers and guides you through the softwa

4-2 Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 free user-interface AUX and VTY user interfaces are supported

4-3 Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 user-interface AUX and VTY user interfaces are supported. Whe

4-4 Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 license append No on the WX5002-128 Yes Yes Yes Yes Yes tem

4-5 Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 hot-backup hellointerval No hellointerval ranges from 100 to

4-6 Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 jumboframe enable value ranges from 1600 to 9216 bytes and de

4-7 Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 Layer 2 forwarding commands All commands in the Layer 2 comma

4-8 Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 All commands in IPv6 basics commands manual Yes Yes Yes Yes Y

4-9 Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 IPv6 static routing commands All commands in IPv6 static rout

4-10 Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 port multicast-vlan ipv6 Layer 2 aggregate interface view su

4-11 Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 if-match Yes classifier tcl-name not supported inbound-inter

Convention Description [ x | y | ... ] * Asterisk marked square brackets enclose optional syntax choices separated by vertical bars, from which you m

4-12 Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 qos lr Yes [ ebs excess-burst-size ] not supported Yes No [

4-13 Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 portal max-user max-number max-number ranges from 1 to 2048.

4-14 Volume Module Command WX5002 WX5002V2 LS8M1WCMA0 WX5004 LSWM1WCM10 LSWM1WCM20 display logfile summary No Yes No Yes Yes No info-center log

4-15 Command Matrix for the WX6000 Series Table 4-2 Command matrix for the WX6000 series Volume Module Command WX6103 LSQM1WCMB0 LSBM1WCM2A0 LS

4-16 Volume Module Command WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 mount Yes Yes Yes Yes open ipv6 Yes Yes Yes Yes tftp ipv6 Yes Yes No Yes

4-17 Volume Module Command WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 hot-backup hellointerval hellointerval ranges from 30 to 2000 milliseconds

4-18 Volume Module Command WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 loopback Yes Yes Yes Yes loopback-detection control enable Yes Yes Yes Yes

4-19 Volume Module Command WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 ip redirects enable No No No No ip ttl-expires enable No No No No IP perfo

4-20 Volume Module Command WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 reset ipv6 routing-table statistics Yes Yes No Yes IPv6 static routing co

4-21 Volume Module Command WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 car green action not supported remark-lp-pass new-local-precedence not sup

Convention Description Represents omnidirectional signals. Represents directional signals. About the H3C WX Series Documentation Set The H3C WX

4-22 Volume Module Command WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 802.1X commands dot1x max-user user-number ranges from 1 to 20480. user-nu

4-23 Volume Module Command WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 display anti-attack { 11mac | admin | all | arp | data | dhcp | dot1x | hw

4-24 Volume Module Command WX6103 LSQM1WCMB0 LSBM1WCM2A0 LSRM1WCM2A1 ACSEI server configuration commands Yes No No No ACSEI client configurat

4-25 Volume Module Command WX3024 WX3010 WX3008 configuration encrypt Yes Yes Yes ftp ipv6 No No No mount No No No open ipv6 No No No tftp ipv6

4-26 Volume Module Command WX3024 WX3010 WX3008 hot-backup hellointerval No No No wlan ap-group group-id ranges from 1 to 64. group-id ranges

4-27 Volume Module Command WX3024 WX3010 WX3008 loopback-detection interval-time No No No shutdown No on GE1/0/1 of the access controller engine

4-28 Volume Module Command WX3024 WX3010 WX3008 DNS commands All commands for IPv6 DNS configuration No No No ip redirects enable No No No ip tt

4-29 Volume Module Command WX3024 WX3010 WX3008 igmp-snooping group-limit Layer 2 aggregate interface view not supported Layer 2 aggregate inter

4-30 Volume Module Command WX3024 WX3010 WX3008 display qos map-table Yes Yes Yes display qos lr interface No No No if-match classifier tcl-name

4-31 Volume Module Command WX3024 WX3010 WX3008 MAC authentication commands mac-authentication max-user user-number user-number ranges from 1 to

Obtaining Documentation You can access the most up-to-date H3C product documentation on the World Wide Web at http://www.h3c.com. Click the links on t

4-32 Volume Module Command WX3024 WX3010 WX3008 ping ipv6 No No No System maintenance and debugging commands tracert ipv6 No No No display logfi

5-1 5 System Maintenance and Debugging This chapter includes these sections: z Ping z Tracert z System Debugging z Ping and Tracert Configuratio

5-2 z For a low-speed network, you are recommended to set a larger value for the timeout timer (indicated by the -t parameter in the command) when

5-3 Record Route: 1.1.2.1 1.1.2.2 1.1.1.2 1.1.1.1 Reply from 1.1.2.2: bytes=56 Sequence=2 ttl=254 time=

5-4 Tracert Introduction By using the tracert command, you can trace the Layer 3 devices involved in delivering an IP packet from source to destinati

5-5 To do… Use the command… Remarks Enable sending of ICMP destination unreachable packets ip unreachables enable Required Disabled by default. tra

5-6 Figure 5-3 The relationship between the protocol and screen debugging switch Debugging informationProtocol debuggingswitchswitchScreen outputOFFO

5-7 You must configure the debugging, terminal debugging and terminal monitor commands first to display the detailed debugging information on the te

5-8 The above output shows that no available route exists between AC and Device B; an available router exists between AC and Device A; an error occur

6-1 6 NTP Configuration This chapter includes these sections: z NTP Overview z NTP Configuration Task List z Configuring the Operation Modes of N

z Read Compatibility Matrixes before using an H3C WX series access controller. z Support of the H3C WX series access controllers for features and c

6-2 Advantages of NTP z NTP uses a stratum to describe the clock precision, and is able to synchronize time among all devices within the network. z

6-3 z When Device A receives the NTP message, the local time of Device A is 10:00:03 am (T4). Up to now, Device A has sufficient information to calc

6-4 z Mode: a 3-bit code indicating the work mode of NTP. This field can be set to these values: 0 – reserved; 1 – symmetric active; 2 – symmetric p

6-5 When working in the client/server mode, a client sends a clock synchronization message to servers, with the Mode field in the message set to 3 (c

6-6 mode) to calculate the network delay between client and the server. Then, the client enters the broadcast client mode and continues listening to

6-7 Task Remarks Configuring NTP Authentication Optional Configuring the Operation Modes of NTP ACs can implement clock synchronization in one of

6-8 z In the ntp-service unicast-server command, ip-address must be a unicast address, rather than a broadcast address, a multicast address or the

6-9 Configuring NTP Broadcast Mode The broadcast server periodically sends NTP broadcast messages to the broadcast address 255.255.255.255. After rec

6-10 To do… Use the command… Remarks Configure the AC to work in the NTP multicast client mode ntp-service multicast-client [ ip-address ] Required

6-11 z Typically, the stratum level of the NTP server which is synchronized from an authoritative clock (such as an atomic clock) is set to 1. This

i Table of Contents 1 Applicable Models and Software Versions·························································································

6-12 Disabling an Interface from Receiving NTP Messages When NTP is enabled, NTP messages can be received from all the interfaces by default, and you

6-13 Configuration Procedure Follow these steps to configure the NTP service access-control right to the local AC: To do… Use the command… Remarks

6-14 Configuration Procedure Configuring NTP authentication for a client Follow these steps to configure NTP authentication for a client: To do… Us

6-15 To do… Use the command… Remarks Broadcast server mode: ntp-service broadcast-server authentication-keyid keyid Associate the specified key wi

6-16 <AC> display ntp-service status Clock status: unsynchronized Clock stratum: 16 Reference clock ID: none Nominal frequency: 64.0000 Hz

6-17 Figure 6-8 Network diagram for NTP symmetric peers mode configuration SwitchAC 1 AC 2Vlan-int3.0.1.31/24Vlan-int3.0.1.32/24Vlan-int3.0.1.33/24

6-18 # View the NTP session information of AC 1, which shows that an association has been set up between AC 1 and AC 2. [AC1] display ntp-service ses

6-19 [AC3-Vlan-interface2] ntp-service broadcast-client 3) Configuration on AC 1: # Configure AC 1 to work in the broadcast client mode and receive

6-20 Figure 6-10 Network diagram for NTP multicast mode configuration Vlan-int31.0.1.11/24Vlan-int31.0.1.10/24Vlan-int23.0.1.31/24Vlan-int23.0.1.32/2

6-21 # View the NTP session information of AC 3, which shows that an association has been set up between AC 3 and AC 2. [AC3-Vlan-interface2] displa

ii Configuring Optional Parameters of NTP ·····························································································6-11 Specifying

6-22 # View the NTP session information of AC 1, which shows that an association has been set up between AC 1 and AC 2. [AC1-Vlan-interface3] displa

6-23 # View the NTP status of AC after clock synchronization. [AC] display ntp-service status Clock status: synchronized Clock stratum: 3 Referen

6-24 Configuration procedure 1) Configuration on AC 2: # Specify the local clock as the reference source, with the stratum level of 3. <AC2>

7-1 7 SNMP Configuration This chapter includes these sections: z SNMP Overview z SNMP Configuration z Configuring SNMP Logging z Configuring SNM

7-2 z Trap operation: The agent sends traps to the NMS through this operation. z Inform operation: The NMS sends traps to other NMSs through this o

7-3 Figure 7-2 MIB tree A261521121B SNMP Configuration Because SNMPv3 differ from SNMPv1 and SNMPv2c in many aspects, their configuration procedures

7-4 To do… Use the command… Remarks Add an SNMPv3 user to an SNMP agent group snmp-agent usm-user v3 user-name group-name [ [ cipher ] authenticati

7-5 To do… Use the command… Remarks Configure directlyCreate an SNMP community snmp-agent community { read | write } community-name [ acl acl-numbe

7-6 Enabling SNMP Logging Follow these steps to enable SNMP logging: To do… Use the command… Remarks Enter system view system-view — Enable SNMP lo

7-7 Follow these steps to enable the trap function: To do… Use the command… Remarks Enter system view system-view — Enable the trap function global