quick start - spu(v100r003c00_02)[1]

8/6/2019 Quick Start - SPU(V100R003C00_02)[1]

1/46

Quidway S9300 Terabit Routing Switch

V100R003C00

Quick Start - SPU

Issue 02

Date 2010-07-15

HUAWEI TECHNOLOGIES CO., LTD.


2/46

Copyright Huawei Technologies Co., Ltd. 2010. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without prior written

consent of Huawei Technologies Co., Ltd.

Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.

All other trademarks and trade names mentioned in this document are the property of their respective holders.

Notice

The purchased products, services and features are stipulated by the contract made between Huawei and the

customer. All or part of the products, services and features described in this document may not be within the

purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information,and recommendations in this document are provided "AS IS" without warranties, guarantees or representations

of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in the

preparation of this document to ensure accuracy of the contents, but all statements, information, and

recommendations in this document do not constitute the warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.

Address: Huawei Industrial Base

Bantian, Longgang

Shenzhen 518129

People's Republic of China

Website: http://www.huawei.com

Email: [email protected]

Issue 02 (2010-07-15) Huawei Proprietary and Confidential

Copyright Huawei Technologies Co., Ltd.

i
http://www.huawei.com/


3/46

About This Document

Intended Audience

This document is intended for:

l Hardware installation engineers

l Commissioning engineers

l On-site maintenance engineers

l System maintenance engineers

Symbol Conventions

The symbols that may be found in this document are defined as follows.

Symbol Description

DANGER

Indicates a hazard with a high level of risk, which if not

avoided, will result in death or serious injury.

WARNING

Indicates a hazard with a medium or low level of risk, which

if not avoided, could result in minor or moderate injury.

CAUTION

Indicates a potentially hazardous situation, which if not

avoided, could result in equipment damage, data loss,

performance degradation, or unexpected results.

TIP Indicates a tip that may help you solve a problem or save

time.

NOTE Provides additional information to emphasize or supplement

important points of the main text.

Change History

Updates between document issues are cumulative. Therefore, the latest document issue containsall updates made in previous issues.


Quick Start - SPU About This Document



iii


4/46

Changes in Issue 02 (2010-07-15)

Based on issue 01 (2010-04-30), the document is updated as follows:

The following information is modified:

1 Overview of the SPU.

Changes in Issue 01 (2010-04-30)

Initial commercial release.

About This Document


Quick Start - SPU

iv Huawei Proprietary and Confidential


Issue 02 (2010-07-15)


5/46

Contents

About This Document...................................................................................................................iii

1 Overview of the SPU.................................................................................................................1-1

1.1 Introduction to the SPU...................................................................................................................................1-2

1.2 Functions and Typical Applications of the SPU.............................................................................................1-2

2 Hardware Structure of the SPU...............................................................................................2-1

2.1 Panel................................................................................................................................................................2-2

2.2 Description of Interfaces on the SPU..............................................................................................................2-3

2.3 Attributes of Interfaces on the SPU.................................................................................................................2-3

2.4 Technical Specifications.................................................................................................................................2-4

3 LoggingIn to the SPU...............................................................................................................3-1

3.1 Logging In to the SPU Through the Console Interface...................................................................................3-2

3.2 Logging In to the SPU Through the Console Interface of the SPU That Is Redirected from MPU...............3-5

3.3 Logging In to the SPU Through Telnet...........................................................................................................3-6

4 Service Features of the SPU......................................................................................................4-1

5 Replacing an SPU.......................................................................................................................5-1

6 Technical Specifications of the SPU.......................................................................................6-1

6.1 System Configurations of the SPU..................................................................................................................6-2

6.2 Technical Specifications of the SPU...............................................................................................................6-2


Quick Start - SPU Contents



v


6/46

Figures

Figure 1-1 Processing packets by the SPU...........................................................................................................1-2

Figure 1-2 Networking of server load balancing..................................................................................................1-3

Figure 1-3 Networking of egress link load balancing..........................................................................................1-4

Figure 1-4 Networking of IPSec..........................................................................................................................1-4

Figure 1-5 Networking of NAT............................................................................................................................1-5

Figure 1-6 Networking of the virtual firewall......................................................................................................1-6

Figure 1-7 Networking of the firewall in transparent mode.................................................................................1-7

Figure 1-8 Networking of firewalls in backup mode...........................................................................................1-8

Figure 1-9 Monitoring MPLS network traffic......................................................................................................1-9

Figure 1-10Monitoring traffic carried by a tunnel............................................................................................1-10

Figure 2-1 VAMPA panel....................................................................................................................................2-2

Figure 3-1 Logging in to the SPU through the console interface.........................................................................3-2

Figure 3-2 Setting up a new connection...............................................................................................................3-3

Figure 3-3 Configuring the connected interface...................................................................................................3-3Figure 3-4 Setting communication parameters.....................................................................................................3-4

Figure 3-5 Selecting a terminal type....................................................................................................................3-5

Figure 3-6 Networking of redirecting to the console interface of the SPU through the MPU of the S9300.......3-6

Figure 3-7 Logging in to the SPU through Telnet on the PC...............................................................................3-7

Figure 5-1 Schematic diagram of removing an SPU............................................................................................5-2

Figure 5-2 Schematic diagram of installing an SPU............................................................................................5-3


Quick Start - SPU Figures



vii


7/46

Tables

Table 2-1 Buttons and indicators on the VAMPA panel......................................................................................2-2

Table 2-2 Interfaces on the VAMPA and their functions.....................................................................................2-3

Table 2-3 Serial interface attributes......................................................................................................................2-3

Table 2-4 Ethernet interface attributes................................................................................................................. 2-3

Table 2-5 Technical specifications of the VAMPA............................................................................................. 2-4

Table 3-1 Communication parameters................................................................................................................. 3-4

Table 6-1 System configurations of the SPU....................................................................................................... 6-2

Table 6-2 Software service features and hardware technical specifications of the SPU......................................6-2


Quick Start - SPU Tables



ix


8/46

1Overview of the SPUAbout This Chapter

Functioning as the value-added service (VAS) board of the S9300, the Service Process Unit

(SPU) provides service functions such as load balancing, firewalls, Network Address Translation

(NAT), IP Security (IPSec), and NetStream, thus meeting requirements of different application

scenarios for diverse industry networks.

NOTE

The release of Russia does not provide the IPSec VPN function.

1.1 Introduction to the SPU

The SPU provides service functions such as load balancing, firewalls, NAT, IPSec, NetStreamin diverse network application scenarios. These functions are mainly used on industry networks.

1.2 Functions and Typical Applications of the SPU

The SPU canbe installed in any LPU slot of the S9300 to process the packets that are transmitted

from the MPU of the S9300. The SPU is applicable to load balancing, NAT, firewall, IPSec,

and NetSream solutions.


Quick Start - SPU 1 Overview of the SPU



1-1


9/46

1.1 Introduction to the SPUThe SPU provides service functions such as load balancing, firewalls, NAT, IPSec, NetStream

in diverse network application scenarios. These functions are mainly used on industry networks.

In modern enterprises, video conferences and video monitoring devices are widely used; shared

files such as pictures and high-definition video files are transmitted on intranets; servers and

storage devices need to back up data periodically. With the preceding requirements of

enterprises, people raise higher requirements for the reliability, security, and simplified operation

and management of industry networks.

As the VAS unit of the S9300, the SPU provides diverse VAS functions for industry networks,

such as load balancing, IPSec VPN, NAT, firewalls, and two-node cluster backup. In addition,

the SPU provides solutions to the network security of communities, interconnection between

communities, and wireless local area networks (WLANs). The SPU provides the high-efficient

load balancing solution, which accelerates the response speed of the IT system, shortens the

application delay, and balances the traffic on network devices. In this manner, the service

reliability can be improved and services can be expanded flexibly. Multiple firewalls and the

IPSec VPN facilitates integration of the VLAN switching technology of switches with security

network technologies, thus providing security services and implementing the secure and

encrypted interaction among departments of customers. NetStream provides data support for

charging and settlement, network planning, and network operation and management for most

carriers.

1.2 Functions and Typical Applications of the SPUThe SPU can be installed in any LPU slot of the S9300 to process the packets that are transmitted

from the MPU of the S9300. The SPU is applicable to load balancing, NAT, firewall, IPSec,

and NetSream solutions.

Currently, the SPU supports only one board, namely, VAMPA, which is installed in the LPU

slot of the S9300. The system transmits the packets to be processed to the SPU. Then the SPU

processes the packets related to the VASs. Figure 1-1 shows the processing procedure.

Figure 1-1 Processing packets by the SPU

Receiving

Packets

Switching Packets

Processing Packets SPU

MPU

LPUTransmitting

Packets

1 Overview of the SPU


Quick Start - SPU

1-2 Huawei Proprietary and Confidential


Issue 02 (2010-07-15)


10/46

The VAMPA provides the following functions:

l Service functions

IPSec VPN, firewall/NAT, load balancing, and NetStream

Data processing capability of 10 Gbit/s

Routing and addressing for packets

Traffic management, congestion control, and forwarding scheduling for packets

Line-speed forwarding of packets

l Debugging functions

Configuration and alarm

Board environment monitoring

Watchdog

Hierarchical reset

Commissioning

The SPU is applicable to the following solutions.

Load Balancing

l Server load balancing

Figure 1-2 Networking of server load balancing

ServerA

ServerB

ServerC

SwitchIntranet

User

Intranet

External

Network

As shown in Figure 1-2, an Intranet user accesses the internal server that is deployed in

the group of load balancing servers through the external network. The group is composed

of three servers. As the load balancing (LB) device, the Switch implements load balancing

at layers from L4 to L7. The service load varies according to servers. When one or more

servers are faulty, the system automatically switches services to normal servers so that

services are not interrupted. In this manner, network faults are reduced and the reliability

of service processing is improved.

l Egress link load balancing





1-3


11/46

Figure 1-3 Networking of egress link load balancing

ISP2

ISP1

Intranet

userSwitch

RouterA

RouterB

ExternalNetwork

As shown in Figure 1-3, an enterprise rents links of multiple carriers as egresses between

the Intranet and the external network. The bandwidth and delay vary according to carriers.

You can configure the Switch (SPU) to select the optimal link according to requirements

for external network access of different enterprise users. The Switch also supports the

reverse NAT function.

IPSec

Figure 1-4 Networking of IPSec

Internet

SwitchA SwitchB

IntranetUser A

IntranetUser B

As shown in Figure 1-4, an IPSec tunnel is set up between Switch A and Switch B. In this way,

data flows of intranet user A and intranet user B can be protected when being transmitted on

insecure networks. IPSec allows network users or administrators to control the granularity of

security services between peers. The Security Association (SA) can be established manually or

in IKE negotiation mode. The SA provides security protection for different data flows.



Quick Start - SPU



Issue 02 (2010-07-15)


12/46

NAT

Figure 1-5 Networking of NAT

PC1

WWW FTP SMTP

Internet

PC2

10.1.1.1/24

10.1.2.1/24

Intranet

As shown in Figure 1-5, IP addresses of PC1 and PC2 on the intranet can be mapped to thepublic IP addresses on the external network through NAT. In this way, users on private networks

can access external networks, thus saving public IP addresses. The NAT mapping table is used

to limit hosts on internal networks that access hosts on external networks.

By configuring the internal servers, you can map the corresponding external IP addresses and

port numbers to internal servers. In this manner, users on external networks can access internal

servers. For example, an enterprise provides World Wide Web (WWW), File Transfer Protocol

(FTP), and Simple Mail Transfer Protocol (SMTP) services externally.

Firewall

l Virtual firewall





1-5


13/46

Figure 1-6 Networking of the virtual firewall

Interior

SubnetworkInterior

Subnetwork

Interior

Subnetwork

Internet

VLAN2 VLAN3 VLAN4

FTP

Server

WWW

Server

Telnet

Server

Switch

As shown in Figure 1-6, an intranet can be divided into multiple subnets through VLANs.

The Switch (SPU) configures a virtual firewall for each subnet. The server on each subnet

can access external networks through the Switch and provide different services externally.

l Firewall in transparent mode



Quick Start - SPU



Issue 02 (2010-07-15)


14/46

Figure 1-7 Networking of the firewall in transparent mode

Zone A

PC A

Zone B

PC B

Zone C

PC C

Switch

VLAN 10

VLAN 20

VLAN 30

As shown in Figure 1-7, the Switch functions as the firewall in transparent mode. In this

case, all interfaces are L2 interfaces and the network is divided into multiple access zonesthrough different VLANs. All PCs in a zone share the same network segment. The packet

filtering, attack defense, and traffic monitoring policies are defined for different VLANs

on the Switch. For example, PC A can access Zone B and Zone C. PC B can send packets,

whereas the packets cannot pass the firewall.

l Firewalls in backup mode





1-7


15/46

Figure 1-8 Networking of firewalls in backup mode

PC 1

Switch

PC 2

Internet

SPU1

SPU2

As shown in Figure 1-8, SPU 1 and SPU 2 are installed on the Switch. VRRP is enabled

on these two SPUs to provide a virtual IP address for the switch and thus to back up services.

When SPU 1 functions as the master, data flows are transmitted to the Internet through

SPU 1. At the same time, data is synchronized from SPU 1 to SPU 2. After SPU 1 becomes

faulty, data flows are transmitted to the Internet through SPU 2.

NetStreaml Monitoring MPLS network traffic



Quick Start - SPU



Issue 02 (2010-07-15)


16/46

Figure 1-9 Monitoring MPLS network traffic

PC

PE

PEPE

P

PE

PEPE

NSC&NDA

Web Server

Mail Server

FTP Server

AS 100

AS 200

PC PC

As shown in Figure 1-9, users can collect statistics on IP traffic from MPLS to IP (IPv4

or IPv6) and from IP (IPv4 or IPv6) to MPLS by deploying NetStream on user-side

interfaces of PEs. Users can also collect statistics on MPLS packets by deploying NetStream

on network-side interfaces of PEs and P devices. According to the analysis result of the

statistics, users can understand the composition and mode of the MPLS service accurately.l Monitoring traffic carried by a tunnel





1-9


17/46

Figure 1-10 Monitoring traffic carried by a tunnel

PC

NSC&NDA

Web Server

Mail Server

FTP Server

AS 100

PC PC

Tunnel

AS 100

As shown in Figure 1-10, if a user collects statistics on the traffic transmitted through a

tunnel on physical interfaces of the switch, the user cannot differentiate the traffic carried

by the tunnel. In this case, the user needs to collect traffic statistics by using NetStream

twice, that is, before the traffic enters the tunnel and after the traffic exits the tunnel. In thisway, the user can accurately analyze the traffic composition in the tunnel.



Quick Start - SPU



Issue 02 (2010-07-15)


18/46

2Hardware Structure of the SPUAbout This Chapter

This topic describes hardware information about the VAMPA. Currently, the SPU supports only

the VAMPA.

2.1 Panel

This topic describes the appearance of the SPU, including interfaces, indicators and the colors

and blinking states of interface and board indicators.

2.2 Description of Interfaces on the SPU

This topic describes types, quantity, and functions of interfaces on the SPU.

2.3 Attributes of Interfaces on the SPU

This topic describes connector types, attributes, operation modes, and compliance standards of

the interfaces on the panel.

2.4 Technical Specifications

This topic describes technical specifications of the SPU, such as board dimensions, panel

dimensions, maximum power consumption, and weight.


Quick Start - SPU 2 Hardware Structure of the SPU



2-1


19/46

2.1 Panel

This topic describes the appearance of the SPU, including interfaces, indicators and the colors

and blinking states of interface and board indicators.

Currently, the SPU supports only the VAMPA.

The VAMPA is installed horizontally. A serial interface (identified as CON) and an FE electrical

interface (identified as ETH) are located on the panel. Figure 2-1 shows the panel.

Figure 2-1 VAMPA panel

1. ACT indicator 2. LINK indicator

The board indicator RUN/ALM and interface indicators ACT and LINK are located on the

VAMPA panel. Table 2-1 describes the colors and blinking states of the indicators.

Table 2-1 Buttons and indicators on the VAMPA panel

Indicator/Button Color Description

RUN/ALM Green If the indicator is on, it indicates that the board is

powered on but the software is not running.

If the indicator blinks slowly (0.5 Hz), it indicates

that the system runs normally.

If the indicator blinks quickly (4 Hz), it indicates that

the system is being started.

Red If the indicator is on, it indicates that the board is

faulty.

Orange If the indicator is on, it indicates that the board is

installed in the slot and is powered on.

ACT Amber If the indicator blinks, it indicates that data is being

transmitted or received.

If the indicator is off, it indicates that no data is being

transmitted or received.

LINK Green-yellow If the indicator is on, it indicates that the link is

connected.

If the indicator is off, it indicates that the link is

blocked.

2 Hardware Structure of the SPU


Quick Start - SPU



Issue 02 (2010-07-15)


20/46

2.2 Description of Interfaces on the SPU

This topic describes types, quantity, and functions of interfaces on the SPU.

Table 2-2 describes types and functions of interfaces on the VAMPA.

Table 2-2 Interfaces on the VAMPA and their functions

Interface Quantity Description

Console interface 1 Provides a serial interface. A user can log in to the local

SPU by connecting the serial interface on the host and

the console interface on the SPU through a cable to

configure the SPU locally.

Ethernet interface 1 Provides an FE electrical interface. A user can log in to

the SPU through Telnet to configure the SPU.

2.3 Attributes of Interfaces on the SPU

This topic describes connector types, attributes, operation modes, and compliance standards of

the interfaces on the panel.

Table 2-3 and Table 2-4 describe attributes of the interfaces on the panel.

Table 2-3 Serial interface attributes

Attribute Description

Connector type RJ45

Interface attribute RS232

Compliance standard EIA/TIA-232

Table 2-4 Ethernet interface attributes

Attribute Description

Connector type RJ45

Interface attribute 10BASE-T/100BASE-TX

Operation mode Full duplex

Compliance standard IEEE 802.3


Quick Start - SPU 2 Hardware Structure of the SPU



2-3


21/46

2.4 Technical Specifications

This topic describes technical specifications of the SPU, such as board dimensions, panel

dimensions, maximum power consumption, and weight.

Table 2-5 describes technical specifications of the VAMPA.

Table 2-5 Technical specifications of the VAMPA

Parameter Description

Board dimensions 426.80 mm x 394.70 mm x 35.10 mm (width

x depth x height)

Maximum power consumption 153.27 w

Board weight 2.6 kg

2 Hardware Structure of the SPU


Quick Start - SPU



Issue 02 (2010-07-15)


22/46

3 Logging In to the SPUAbout This Chapter

A user can log in to the SPU in either of the following ways: logging in to the SPU through the

console interface; logging in to the SPU through Telnet; logging in to the MPU of the S9300 for

redirection, and then logging in to the SPU through the console interface of the SPU.

3.1 Logging In to the SPU Through the Console Interface

If a user cannot log in to the MPU of the S9300, the user needs to log in to the SPU through the

console interface for the first time. This topic describes how to log in to the SPU on a PC through

the console interface.

3.2 Logging In to the SPU Through the Console Interface of the SPU That Is Redirected from

MPU

If a user has logged in to the MPU of the S9300, the user can log in to the SPU after redirection

to the console interface of the SPU.

3.3 Logging In to the SPU Through Telnet

This topic describes how to log in to the SPU through Telnet.


Quick Start - SPU 3 Logging In to the SPU



3-1


23/46

3.1 Logging In to the SPU Through the Console Interface

If a user cannot log in to the MPU of the S9300, the user needs to log in to the SPU through the

console interface for the first time. This topic describes how to log in to the SPU on a PC through

the console interface.

Networking Requirements

When logging in to the SPU through the console interface, a user needs to connect the console

interface on the SPU to the RS232 interface on the host through a serial cable, as shown in

Figure 3-1.

Figure 3-1 Logging in to the SPU through the console interface

Console Cable

RS232

interface

Console

interface

Procedure

Step 1 Connect the PC with the SPU through a serial cable according to Figure 3-1.

Step 2 Enable the HyperTerminal on the PC.

Choose Start > All Programs > Accessories > Communications > HyperTerminal to start

the HyperTerminal.

Step 3 Set up a new connection.

As shown in Figure 3-2, enter the name of the new connection in the Name text box and choose

an icon. ClickOK.

3 Logging In to the SPU


Quick Start - SPU



Issue 02 (2010-07-15)


24/46

Figure 3-2 Setting up a new connection

Step 4 Configure the connected interface.

In the Connect window shown in Figure 3-3, select an interface from the Connect drop-down

list box according to the interface on the PC or terminal. Then clickOK.

Figure 3-3 Configuring the connected interface

Step 5 Set communication parameters.

In the COM1 Properties window shown in Figure 3-4, set communication parametersaccording to Table 3-1.





3-3


25/46

NOTE

In the Windows operating systems of some versions, Bit per second may be called Baud rate and Flow

control may be called Traffic control.

Figure 3-4 Setting communication parameters

Table 3-1 Communication parameters

Parameter Value

Bit per second (baud) 9600

Data bit 8

Parity check None

Stop bit 1

Flow control (traffic control) None

Step 6 After starting the HyperTerminal, choose File > Attributes to display the COMM1Properties dialog box, as shown in Figure 3-5. Click the Settings tab, and select Auto detect

orVT100 from the Emulation drop-down list box. ClickOKto complete the settings.



Quick Start - SPU



Issue 02 (2010-07-15)


26/46

Figure 3-5 Selecting a terminal type

After the preceding settings, press Enter. If the prompt is displayed, it indicates

that you have logged in to the SPU. In this case, you can enter commands to configure or manage

the SPU.

----End

3.2 Logging In to the SPU Through the Console Interface ofthe SPU That Is Redirected from MPU

If a user has logged in to the MPU of the S9300, the user can log in to the SPU after redirection

to the console interface of the SPU.


A user can log in to the MPU of the S9300 through a serial interface or through Telnet, and then

run the corresponding command for redirection. Then the user redirects the login process to the

console interface of the SPU as prompted and logs in to the SPU through the console interface,

as shown in Figure 3-6.





3-5


27/46

Figure 3-6 Networking of redirecting to the console interface of the SPU through the MPU of

the S9300

Console

interface of

the SPU

Login Redirection

PC S9300

Procedure

Step 1 Log in to the MPU of the S9300.

Step 2 Run the following command in the user view: spu connectslotslot-num.

slot-num indicates the number of the slot where the SPU is installed on the S9300.

The following message is displayed:

******************************************************

* Slot 2 output to mainboard *

******************************************************

Press Ctrl+D to quit

Step 3 Press Enter. The system displays the following information:The console can not be used now, pleae press Ctrl+Y.

Press Ctrl+Y. The system redirects you to the serial interface of the SPU so that you can log in

to the SPU.

NOTE

To return to the MPU of the S9300, press Ctrl+D.

The serial interface of the SPU can be used as:

l Ingress for redirecting to the SPU from the MPU of the S9300

l Ingress for logging in to the SPU

You can press Ctrl+Y to switch the roles of the serial interface on the SPU. The serial interface can be

function as either the ingress for redirecting to the SPU from the MPU of the S9300 or the ingress for

logging in to the SPU .

----End

3.3 Logging In to the SPU Through Telnet

This topic describes how to log in to the SPU through Telnet.


Telnet supports local and remote login, facilitating maintenance. After setting the Telnet user

of the SPU, a user can log in to the SPU through Telnet from the Ethernet interface or service

interfaces such as XGE sub-interface or the Eth-Trunk sub-interface whose member interfacesare XGE interfaces, as shown in Figure 3-7.



Quick Start - SPU



Issue 02 (2010-07-15)


28/46

Figure 3-7 Logging in to the SPU through Telnet on the PC

STCCrossover

cable

Crossovercable or

optical fiber

HUB

L2 Switch

PC

PC

PC

SPU

SPU

SPU

STC

STC

NOTE

The SPU is a board installed on the S9300. Generally, the ETH port of the SPU is not used to connect to

the network; therefore, the service interface of the SPU is usually used for logging in to the SPU through

Telnet.

In this way, you can configure the user name and password of the Telnet user on the SPU. The

method for configuring a Telnet user on the SPU is the same as that for configuring a Telnet

user on the S9300. For details, see the Quidway S9300 Terabit Routing Switch ConfigurationGuide - Basic Configuration.

If you do not configure the Telnet user on the SPU, the user name and password are absent for

the first login through Telnet.

Procedure

Step 1 Set the IP address of the Ethernet interface of the SPU.

You can log in to the SPU by using the following methods:

l Using the console port of the SPU

l Redirecting to the SPU from the S9300

After logging in to the SPU, do as follows:

l Assign an IP address to the ETH port.

1. Run the system-view command to enter the system view.

2. Run the interfaceinterface-type interface-numbercommand to enter the interface view.

Here, Ethernet 0/0/0 is used.

3. Run the ip addressip-address { mask| mask-length } command to set the IP address

of the interface.

l Assign an IP address to the service interface.





3-7


29/46

The service interface of the SPU is the Eth-Trunk sub-interface whose member interfaces

are XGE interfaces or the XGE sub-interface. The configuration methods of the Eth-Trunk

interface and the XGE sub-interface are different. The details are as follows:

Assign an IP address to the XGE sub-interface.


2. Run the interfacexgigabitethernetinterface-number.subinterface-number

command to enter the XGE sub-interface view.

3. Run the ip addressip-address { mask| mask-length } [ sub ] command to assign an

IP address to the XGE sub-interface.

Assign an IP address to the Eth-Trunk sub-interface whose member interfaces are XGE

interfaces.


2. Run the interface eth-trunktrunk-idcommand to enter the Eth-Trunk interface

view.

3. Run the trunkportxgigabitethernet { interface-number1 [ tointerface-number2 ] } & command to add two virtual interfaces of the SPU to the Eth-

Trunk interface to complete link aggregation.

4. Run the quit command to exit the Eth-Trunk interface view.

5. Run the interface eth-trunktrunk-id.subtrunk-idcommand to enter the Eth-Trunk

sub-interface view.

6. Run the ip addressip-address { mask| mask-length } [ sub ] command to assign an

IP address to the Eth-Trunk sub-interface.

Step 2 Log in to the SPU through Telnet.

A user can log in to the SPU on the local PC or terminal through Telnet.

1. Open the Command Prompt window on the PC.

Choose Start > Programs > Accessories > Command Prompt. The Command

Prompt window is displayed.

The Command Prompt window displays the following messages:

Microsoft Windows XP [version 5.1.2600]

(c) Versions 1985-2001 Microsoft Corp.

C:\>

2. Access the Telnet client.

At the prompt C:\>, enterTelnet. The Command Prompt window displays the following

messages:

Microsoft Windows XP [Versions 5.1.2600]

(c) Version 1985-2001 Microsoft Corp.

C:\> telnet

Press Enter to access the Telnet client. The Command Prompt window displays the

following messages:

Welcome to use Microsoft Telnet Client

Escape character is CTRL+]

Microsoft Telnet>

3. Connect the Telnet server.

At the prompt Microsoft Telnet>, enter the following command to connect to the Telnetserver. The format is as follows:



Quick Start - SPU



Issue 02 (2010-07-15)


30/46

open { ip-address | host-name } [port]

ip-address: specifies the IP address of a Telnet server.

host-name: specifies the host name of a Telnet server.

port: specifies the number of the interface for the Telnet service on a Telnet server. The

default value is 23.

Exampe:

# Connect to the SPU whose IP address is 1.1.1.1. The default port number is 23.

Welcome to use Microsoft Telnet Client

Escape character is '[CTRL+]'

Microsoft Telnet> open 1.1.1.1

Trying 1.1.1.1 ...

Press CTRL+K to abort

Connected to 1.1.1.1 ...

Info: The max number of VTY users is 20, and the number

of current VTY users on line is 1.

----End





3-9


31/46

4 Service Features of the SPUThis topic describes all the features supported by the SPU according to the feature description

in each volume (basic configuration, Ethernet, IP service, IP routing, QoS, security, reliability,

device management, network management, and VPN).

Basic Configuration

Feature Description Supported bythe SPUOnly

Remarks

File

system

A file system manages

files and directories in the

storage device. In the file

system, you can create,

delete, modify, and

rename a file or a

directory, and display

contents of a file.

No The feature of the SPU is the same as that

of the S9300. For details, see

Management of Configuration Files in the


Configuration Guide - Basic

Configuration.

Login

throug

h the

Console

interfac

e

In the case that the

network is unreachable, a

user needs to log in to the

SPU through the console

interface.


of the S9300. To log in to the SPU through

the console interface, see 3.1 Logging In

to the SPU Through the Console

Interface.

Login

throug

h Telnet

In the case that the

network is reachable, a

user can log in to the SPU

on the local PC or

through Telnet.


of the S9300 in some aspects. The

difference is as follows: A user can

configure the IP address of the Ethernet

interface on the SPU by logging in to the

MPU of the S9300. To log in to the SPU

through Telnet, see 3.3 Logging In to the

SPU Through Telnet.


Quick Start - SPU 4 Service Features of the SPU



4-1


32/46


Remarks

SSH

login

The SSH supports secure

local and remote login.

The SPU supports the

route iteration by the

BGP.


of the S9300. For details, see

Configuration of the SSH Server and

Client in the Quidway S9300 Terabit

Routing Switch Configuration Guide -

Basic Configuration.

Ethernet


Remarks

MAC A MAC address table

stores the MAC

addresses of other

devices learned by the

S9300, VLAN IDs, and

outbound interfaces that

are used to send data.

Before forwarding thedata, the SPU searches

the MAC address table

based on the destination

MAC address and the

VLAN ID of the data to

find the corresponding

outgoing interface

rapidly. This reduces the

number of broadcast

packets.


of the S9300. For details, see MAC

Address Table Configuration in the


Configuration Guide - Ethernet.

ARP The Address ResolutionProtocol (ARP) provides

a mapping between an IP

address and a MAC

address.

No The feature of the SPU is the same as thatof the S9300. For details, see ARP

Configuration in the Quidway S9300

Terabit Routing Switch Configuration

Guide - Ethernet.

4 Service Features of the SPU


Quick Start - SPU



Issue 02 (2010-07-15)


33/46


Remarks

Link

aggrega

tion

Link aggregation refers

to a method of binding a

group of physical

interfaces together as a

logical interface to

increase the bandwidth.

By setting up a link

aggregation group

between two devices,

you can obtain higher

bandwidth and

reliability.


of the S9300. For details, see Link

Aggregation Configuration in the


Configuration Guide - Ethernet.

IP Services


Remarks

IP

addresssetting

This feature provides IP

addresses of interfaces.

No The SPU supports setting IP addresses on

sub-interfaces and tunnel interfaces only.For the configuration method, see the


Configuration Guide - IP Services.

IP Routing

Feature Description Supported bythe SPU

Only

Remarks

IPv4

unicast

static

routes,

RIP,

OSPF,

IS-IS,

and

BGP

This feature provides

IPv4 static and dynamic

routing protocols to

implement interworking

at Layer 3.


of the S9300. For details, see the Quidway

S9300 Terabit Routing Switch

Configuration Guide - IP Routing.





4-3


34/46


Remarks

Routing

policies

and

policy-

based

routing

A routing policy is used

to change the path that the

traffic passes through.

Different from the

routing mechanism based

on the destination

addresses of IP packets,

the policy-based routing

is a mechanism based on

the customized routing

policies.





Route

iteration

The route iteration is a

process of finding a

dependent route

according to the next hop

address. The SPU

supports route iteration

by the BGP.





QoS


Remarks

Names

of the

traffic

classific

ation,

traffic

behavior, and

traffic

policy

During traffic

classification, packets

sharing common features

are classified into a class

by matching the

information carried in

packets with the specificrule. The packets of the

same class provide QoS

services for traffic of the

same type, and thus

provide differentiated

services for different

services.




Configuration Guide - QoS.



Quick Start - SPU



Issue 02 (2010-07-15)


35/46


Remarks

Priority

mappin

g

The packets are sent to

different interface queues

according to the internal

priority, and then traffic

shaping, congestion

avoidance, and queue

scheduling are performed

for the queues.




Configuration Guide - QoS.

Security


Remarks

ACL The ACL classifies

packets based on the

rules defined by the ACL.

After these rules are

applied to interfaces, the

device can determinewhich packets to accept

and which to deny.




Configuration Guide - Security.

IPSec By establishing the SA,

data can be encrypted and

data sources can be

authenticated at the IP

layer to ensure

confidentiality, data

integrity, data source

authentication, and anti-

replay for packets duringtransmission across the

network.

Yes -





4-5


36/46


Remarks

URPF URPF obtains the source

IP address and the

inbound interface of the

packet and checks

whether the inbound

interface corresponding

to the source IP address in

the forwarding table

matches the actual

inbound interface of the

packet. If they do not

match, URPF considersthe source IP address as a

pseudo address and

discards the packet. In

this way, URPF can

efficiently protect the

network against vicious

attacks initiated by

modifying the source

address.




Configuration Guide - Security.

NAT The NAT maps a few

public IP addresses tomore private IP

addresses. This can

temporarily solve the

problems resulted from

IP address shortage.

Yes -

Firewall The firewalls are

deployed to prevent

against most attacks from

external networks by

using packet filtering,

whitelists, blacklists, and

attack defense. In this

way, the security risks

confronted during

transmission across

networks can be avoided.

Yes -



Quick Start - SPU



Issue 02 (2010-07-15)


37/46

Reliability


Remarks

BFD The Bidirectional

Forwarding Detection

(BFD) is a detection

mechanism used

uniformly on an entire

network. It is used to

rapidly detect and

monitor the connectivity

of links or IP routes on a

network. A

communication failurebetween adjacent

systems must be detected

quickly and the standby

tunnel must be created

faster for communication

recovery.




Configuration Guide - Reliability.

VRRP By separating physical

devices from logical

devices, the Virtual

Router Redundancy

Protocol (VRRP)implements route

selection among multiple

egress gateways. In this

manner, services are not

affected when a gateway

is faulty, and the

configuration of the

routing protocol does not

need to be changed.




Configuration Guide - Reliability.

Load

balancing

The load balancing

function allocates trafficto multiple network

devices or links through

the specific load

balancing algorithm. In

this manner, the overall

network performance is

improved.

Yes -





4-7


38/46


Remarks

Two-

node

cluster

backup

An active device and a

standby device run

simultaneously to back

up the link data of the

other party. When a

device is faulty, data

flows can be switched to

another device smoothly.

This prevents service

interruption.

Yes -

Device Management


Remarks

Interfac

e

mirrorin

g

A packet passing through

a mirroring interface is

copied and then sent to a

specified observinginterface for analysis and

monitoring.




Configuration Guide - DeviceManagement.

Board

and

interfac

e

manage

ment

Manage registration,

initialization, and

initiation of boards.

Manage interface

attributes.

Yes -



Quick Start - SPU



Issue 02 (2010-07-15)


39/46

Network Management


Remarks

NetStre

am

NetStream is a

technology of collecting

and releasing statistics

about network traffic. It

classifies the statistics

about traffic flows and

resource usage on the

network. NetStream also

manages the network and

conducts charging based

on types of services andQoS.

No Another NetStream with other

specifications supported by the S9300 is

also supported by the SPU. For details, see

the Quidway S9300 Terabit Routing

Switch Configuration Guide - Network

Management.

Ping and

Tracert

The ping command is

used to check network

connectivity and whether

a host is reachable.

Tracert is used to check

IP addresses and the

number of gateways

between the source and

the destination. Tracert is

helpful in testing network

reachability and locating

the fault on the network.




Configuration Guide - Network

Management.

SNMP SNMP defines how

management information

is transmitted between

the network management

station and the agent

through the MIB.

No

The feature of the SPU is the same as that



Configuration Guide - Network

Management.





4-9


40/46

VPN


Remarks

GRE GRE uses the tunnel

technololgy to

encapsulate packets of

some network protocols

such as IP and IPX. In

this manner, the

encapsulated packets can

be transmitted on

networks supporting

other protocols such as

IP.




Configuration Guide - VPN.



Quick Start - SPU



Issue 02 (2010-07-15)


41/46

5 Replacing an SPUThis topic describes precautions and procedure for replacing an SPU.

Precautions

Before replacing an SPU, pay attention to the following points:

Before replacing an SPU, prepare an SPU with the same specifications of the SPU to be replaced.

Tools

l ESD-preventive wrist straps or gloves

l ESD-preventive bag

Procedure

Step 1 Check the position of the SPU to be replaced.

Before removing the SPU that you need to replace, check the position of the the cabinet, chassis,

and slot where the SPU is installed.

l An S9312 has 12 LPU slots, which are numbered from 1 to 12.



Find out the SPU to be replaced in the chassis and attach a label to identify the SPU.

Step 2 Check whether there is any bent pin in the connector of the new SPU.

Step 3 Remove the cable from the SPU.

Step 4 Remove the SPU to be replaced from the chassis.

1. Wear ESD-preventive wrist straps and connect the grounding terminal to the ESD jack on

the chassis.

2. Hold the left and right ejector levers of the board with your hands. Press the springs of the

ejector levers to loosen the ejector levers. Turn the ejector levers of the SPU outwards.

When the ejector levers and the panel form a 45-degree angle, the SPU is removed fromthe backplane, as shown in (2) ofFigure 5-1.


Quick Start - SPU 5 Replacing an SPU



5-1


42/46

CAUTION

l During the operation, remove the SPU slowly and smoothly to prevent it from colliding

with other boards and causing failures of the running boards.l When swapping an SPU, do not touch the parts on the SPU to prevent it from being

damaged.

3. Hold the two ejector levers and pull out the SPU smoothly from the chassis along the guide

rail of the slot, as shown in (2) ofFigure 5-1.

4. Place the removed board in the ESD-preventative bag.

Figure 5-1 Schematic diagram of removing an SPU

Step 5 Install the new SPU into the chassis.

1. Take out the new SPU from the ESD-preventive bag.

CAUTION

l During the operation, install the SPU slowly and smoothly to prevent it from colliding

with other boards and causing failures of the running boards.

l When swapping an SPU, do not touch the parts on the SPU to prevent it from being

damaged.

2. Hold the two ejector levers and insert the SPU smoothly into the chassis along the guide

rail of the slot, as shown in (1) ofFigure 5-2. Push the SPU until the bayonets of the ejector

levers touch the edges of the chassis.

3. Secure the bayonets of the ejector levers on the edges of the chassis, and then push the

ejector levers inwards until you hear a click, as shown in (2) ofFigure 5-2.

5 Replacing an SPU


Quick Start - SPU



Issue 02 (2010-07-15)


43/46

Figure 5-2 Schematic diagram of installing an SPU

Step 6 Connect the cables to the corresponding interfaces in the original sequence.

Step 7 Check the running status of the new SPU.

In normal situations, after the new SPU is installed into the chassis, the SPU automatically

communicates with the MPU. In this case, check the running status of the new SPU as follows:

l If the RUN/ALM indicator on the panel of the SPU is green and blinks at the frequency of

0.5 Hz, it indicates that the SPU is running normally.

l You can check the alarms. In normal situations, the system does not generate any alarm

related to the new SPU.

l Run the display device command on the client after logging in to the SPU to view the running

status of the new SPU. If the output is displayed as follows, it indicates that the SPUs in the

corresponding slots are running normally.

display device

Step 8 Check service operations.

----End

Postrequisite

After finishing the replacement, put all the tools away. If an SPU that is replaced is confirmed

to be faulty, maintainers should fill in theFaulty Card for Repair, and mail the card and the

faulty SPU together to Huawei local office for timely maintenance.


Quick Start - SPU 5 Replacing an SPU



5-3


44/46

6 Technical Specifications of the SPUAbout This Chapter

This topic describes system parameters and technical specifications of the SPU.

6.1 System Configurations of the SPU

This topic describes the processor, DRAM, flash, CF card, and forwarding capability of the

SPU.

6.2 Technical Specifications of the SPU

This topic describes the software service features (Ethernet services, QoS, ACL, L3VPN, IP

unicast, and reliability services) and hardware (integrated system reliability) technical

specifications of the SPU.


Quick Start - SPU 6 Technical Specifications of the SPU



6-1


45/46

6.1 System Configurations of the SPU

This topic describes the processor, DRAM, flash, CF card, and forwarding capability of the

SPU.

Table 6-1 describes system configurations of the SPU.

Table 6-1 System configurations of the SPU

Description Example Remarks

Processor Two multi-kernal CPUs.

Each CPU is configured with

16 kernals. The dominant

frequency is 600 MHz.

Two CPUs

DDR2 DRAM 16 GB (8 bit, 2 x 4 GB). Each

CPU is connected to a

memory of 8 GB.

-

Flash 64 MB -

CF card 512 MB A CF card serves as a mass

storage device to save data

files and logs.

Forwarding capability 10 Gbit/s -

6.2 Technical Specifications of the SPU

This topic describes the software service features (Ethernet services, QoS, ACL, L3VPN, IP

unicast, and reliability services) and hardware (integrated system reliability) technical

specifications of the SPU.

Table 6-2 describes the software service features and hardware technical specifications of the

SPU.

Table 6-2 Software service features and hardware technical specifications of the SPU

Attribute Service Feature Technical Specification

Ethernet service

performance

Number of MAC addresses 128,000

Number of trunk groups and

maximum number of interfaces

supported by each trunk group

Two trunk groups, each of which

supports a maximum of two

interfaces

Rate of learning MAC addresses 3000 addresses/second

Number of ARPs 16,000

QoS performance CAR 8 kbit/s

6 Technical Specifications of the SPU


Quick Start - SPU



Issue 02 (2010-07-15)


46/46

Attribute Service Feature Technical Specification

ACL ACLv4 Global: 32 thousand

VPN VRF 1000

VPN route 230,000

IP unicast Routing entries 230 thousand

IPv4 FIB 144 thousand

Reliability

service

BFD Number of static sessions of the

BFD: 32

Minimum fault discovery interval:

less than 100 ms

VRRP l VRRP groups: 255

l VRRP management groups: 16

l Virtual IP addresses in each

VRRP group: 16

l Minimum switchover interval:

3s if the BFD is not used; 100 ms

if BFD for VRRP is used.


Quick Start - SPU 6 Technical Specifications of the SPU

quick start - spu(v100r003c00_02)[1]

Documents