Zte ZXR10 ZSR User manual

ZXR10ZSRV2
IntelligentIntegratedMulti-ServiceRouter
CongurationGuide(SystemManagement)
Version:2.00.10
ZTECORPORATION
No.55,Hi-techRoadSouth,ShenZhen,P .R.China
Postcode:518057
Tel:[phone]
Fax:[phone]
URL:http://ensupport.zte.com.cn
E-mail:[email protected]

LEGALINFORMATION
Copyright©2013ZTECORPORATION.
Thecontentsofthisdocumentareprotectedbycopyrightlawsandinternationaltreaties.Anyreproductionor
distributionofthisdocumentoranyportionofthisdocument,inanyformbyanymeans,withoutthepriorwritten
consentofZTECORPORATIONisprohibited.Additionally,thecontentsofthisdocumentareprotectedby
contractualcondentialityobligations.
Allcompany,brandandproductnamesaretradeorservicemarks,orregisteredtradeorservicemarks,ofZTE
CORPORATIONoroftheirrespectiveowners.
Thisdocumentisprovided“asis”,andallexpress,implied,orstatutorywarranties,representationsorconditions
aredisclaimed,includingwithoutlimitationanyimpliedwarrantyofmerchantability,tnessforaparticularpurpose,
titleornon-infringement.ZTECORPORATIONanditslicensorsshallnotbeliablefordamagesresultingfromthe
useoforrelianceontheinformationcontainedherein.
ZTECORPORATIONoritslicensorsmayhavecurrentorpendingintellectualpropertyrightsorapplications
coveringthesubjectmatterofthisdocument.ExceptasexpresslyprovidedinanywrittenlicensebetweenZTE
CORPORATIONanditslicensee,theuserofthisdocumentshallnotacquireanylicensetothesubjectmatter
herein.
ZTECORPORATIONreservestherighttoupgradeormaketechnicalchangetothisproductwithoutfurthernotice.
UsersmayvisitZTEtechnicalsupportwebsitehttp://ensupport.zte.com.cntoinquirerelatedinformation.
TheultimaterighttointerpretthisproductresidesinZTECORPORATION.
RevisionHistory
RevisionNo.RevisionDateRevisionReason
R1.02014-05-10Firstedition
SerialNumber:SJ-20140504150128-007
PublishingDate:2014-05-10(R1.0)
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

Contents
AboutThisManual.........................................................................................I
Chapter1DeviceConnectionmanagement............................................1-1
1.1ConnectingtheZXR10ZSRV2System...............................................................1-1
1.2ConguringConsolePortConnection..................................................................1-2
1.3ConguringTelnetConnection............................................................................1-2
1.4ConguringSSHConnection...............................................................................1-6
1.5FTPConnectionConguration..........................................................................1-10
1.5.1ConguringtheZXR10ZSRV2asanFTPServer....................................1-10
1.5.2ConguringtheZXR10ZSRV2asanFTPClient.....................................1-12
1.6ConguringTFTPConnection...........................................................................1-15
1.7SFTPConnectionCongration..........................................................................1-17
1.7.1ConguringtheZXR10ZSRV2asanSFTPServer.................................1-17
1.7.2ConguringtheZXR10ZSRV2asanSFTPClient...................................1-18
Chapter2FileSystemManagement.........................................................2-1
2.1FileSystemOverview.........................................................................................2-1
2.2ConguringFileSystemManagement.................................................................2-2
2.3FileSystemManagementCongurationExamples...............................................2-3
2.3.1FileSystemCongurationExample...........................................................2-3
2.3.2CongurationExampleofBackingUpaCongurationFileonaUSB
FlashDrive.............................................................................................2-4
Chapter3MIMConguration....................................................................3-1
3.1MIMOverview....................................................................................................3-1
3.2ConguringMIM.................................................................................................3-1
Chapter4UserManagement.....................................................................4-1
4.1UserManagementOverview...............................................................................4-1
4.2ConguringUserManagement............................................................................4-2
4.3UserManagementCongurationExamples.........................................................4-7
4.3.1LocalAuthenticationandAuthorizationUserCongurationExample............4-7
4.3.2RADIUS-LOCALAuthenticationandAuthorizationUserConguration
Example.................................................................................................4-8
4.3.3TACACS+AuthenticationandAuthorizationUserConguration
Example...............................................................................................4-10
4.3.4ConguringaPasswordPromptQuestionforResettingaPassword...........4-11
I
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

4.3.5ConguringOAMSecurityManagement..................................................4-13
4.3.6ConguringaPasswordValidityPeriod....................................................4-15
4.3.7ConguringFirst-LoginPasswordModication........................................4-17
4.3.8RelationsBetweenRaisingPrivilegeLevelsandtheEnableCommand......4-18
Chapter5CommandPrivilegeLevelClassication................................5-1
5.1CommandPrivilegeLevelOverview....................................................................5-1
5.2ConguringCommandPrivilege.........................................................................5-1
5.3CommandPrivilegeLevelCongurationExample.................................................5-2
Chapter6SNMPConguration.................................................................6-1
6.1SNMPBasicConguration..................................................................................6-1
6.1.1SNMPOverview.......................................................................................6-1
6.1.2ConguringSNMP....................................................................................6-1
6.1.3SNMPCongurationExample...................................................................6-6
6.2SNMPAnti-ViolenceAttack...............................................................................6-10
6.2.1SNMPAnti–BruteForceAttackOverview.................................................6-10
6.2.2ConguringSNMPAnti–BruteForceAttack..............................................6-11
6.2.3SNMPAnti–BruteForceAttackCongurationExample.............................6-13
Chapter7AlarmManagementConguration..........................................7-1
7.1AlarmOverview..................................................................................................7-1
7.2ConguringtheAlarmFunction...........................................................................7-2
7.3AlarmFunctionCongurationExample................................................................7-7
Chapter8SYSLOGConguration............................................................8-1
8.1SysLogOverview...............................................................................................8-1
8.2ConguringSyslog.............................................................................................8-1
8.3SyslogCongurationExample............................................................................8-2
Chapter9RMONConguration................................................................9-1
9.1RMONOverview................................................................................................9-1
9.2ConguringRMON.............................................................................................9-1
9.3RMONCongurationExample............................................................................9-3
Chapter10ClockandClockSynchronization.......................................10-1
10.1NTPConguration..........................................................................................10-1
10.1.1NTPOverview......................................................................................10-1
10.1.2ConguringNTP...................................................................................10-2
10.1.3NTPCongurationExamples................................................................10-4
10.2PhysicalPOSInterfaceClockConguratio.......................................................10-6
10.2.1PhysicalPOSInterfaceClock................................................................10-6
II
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

10.2.2ConguringaPhysicalPOSInterfaceClock...........................................10-7
10.2.3PhysicalPOS-InterfaceClockCongurationInstance.............................10-7
Chapter11PerformanceStatistics.........................................................11-1
11.1PerformanceManagementOverview................................................................11-1
11.2PerformanceManagementConguration..........................................................11-1
11.3PerformanceManagementCongurationExample............................................11-3
Chapter12NetFlowConguration.........................................................12-1
12.1NetFlowOverview..........................................................................................12-1
12.2ConguringNetFlow.......................................................................................12-3
12.3NetFlowCongurationExamples.....................................................................12-9
12.3.1NetFlowV5CongurationExample.......................................................12-9
12.3.2NetFlowV8CongurationExample......................................................12-11
12.3.3NetFlowV9CongurationExample......................................................12-12
Chapter13SQAConguration................................................................13-1
13.1SQAOverview...............................................................................................13-1
13.2ConguringSQA............................................................................................13-1
13.3SQACongurationExamples..........................................................................13-4
13.3.1ICMP-TypeSQACongurationExample................................................13-4
13.3.2FTP-TypeSQACongurationExample..................................................13-5
13.3.3TCP-TypeSQACongurationExample..................................................13-6
13.3.4UDP-TypeSQACongurationExample.................................................13-8
13.3.5DNS-TypeSQACongurationExample.................................................13-9
Chapter14LLDPConguration..............................................................14-1
14.1LLDPOverview..............................................................................................14-1
14.2ConguringLLDP...........................................................................................14-3
14.3LLDPCongurationExamples.........................................................................14-5
14.3.1LLDPNeighborCongurationExample..................................................14-5
14.3.2LLDPAttributeCongurationExample...................................................14-6
Chapter15NetworkLayerDetection......................................................15-1
15.1ConguringICMPFastResponse....................................................................15-1
15.2ConguringIPSourceRouteOptionProcessing...............................................15-4
15.3ConguringICMPUnreachablePacketFunction..............................................15-6
15.4EnablinganInterfacetoSendICMPUnreachablePackets...............................15-7
15.5ConguringIPPing.........................................................................................15-9
15.6ConguringIPTrace......................................................................................15-12
15.7ConguringLSPPing....................................................................................15-15
III
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

15.8ConguringLSPTrace...................................................................................15-21
15.9ConguringMulticastPing..............................................................................15-26
15.10ConguringMulticastTrace..........................................................................15-30
15.11ConguringMACPing..................................................................................15-32
15.12ConguringMACTrace................................................................................15-34
15.13IPPerformanceMaintenance.......................................................................15-37
Figures.............................................................................................................I
Glossary.........................................................................................................V
IV
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

AboutThisManual
Purpose
Thismanualdescribesfunctionalprinciples,congurationcommandsandexamples
relatedtoZXR10ZSRV2systemmanagement.
IntendedAudience
Thismanualisintendedforthefollowingengineers:
lNetworkplanningengineers
lCommissioningengineers
lMaintainingengineers
WhatIsinThisManual
Thismanualcontainsthefollowingcontents:
ChapterSummary
1,DeviceConnection
Management
Describesseveralmodes(includingthroughaConsoleport,
TELNET,SSH,FTP,TFTPandSFTP)andcongurationcommands
toconnecttoZXR10ZSRV2.
2,FileSystemManagementDescribesoperationalcommandsforthelesystemofthedevice.
3,MIMCongurationDescribesMIMprinciples,congurationcommandsand
congurationexamples.
4,UserManagementDescribesusermanagementprinciple,congurationcommandsand
congurationexamples.
5,CommandPrivilegeLevel
Classication
Describesuserandcommandprivilegelevelclassicationprinciple,
congurationcommandsandcongurationexample.
6,SNMPCongurationDescribesSNMPprinciples,congurationcommandsand
congurationexamples.
7,AlarmManagement
Conguration
Describesalarmmanagementprinciple,congurationcommands
andcongurationexample.
8,SYSLOGCongurationDescribesSYSLOGprinciple,congurationcommandsand
congurationexample.
9,RMONCongurationDescribesRMONprinciple,congurationcommandsand
congurationexample.
10,ClockandClock
Synchronization
Describesclockandclocksynchronizationprinciples,conguration
commandsandcongurationexamples.
I
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

ChapterSummary
11,PerformanceStatisticsDescribesperformancestatisticsprinciple,congurationcommands
andcongurationexample.
12,NetFlowCongurationDescribesNetFlowprinciple,congurationcommandsand
congurationexamples.
13,SQACongurationDescribesSQAprinciple,congurationcommandsandconguration
examples.
14,LLDPCongurationDescribesLLDPprinciples,congurationcommandsand
congurationexamples.
15,NetworkLayerDetectionDescribestheprinciples,congurationcommands,andconguration
examplesofthenetworklayerdetection.
Conventions
Thismanualusesthefollowingtypographicalconventions:
TypefaceMeaning
ItalicsVariablesincommands.Itmayalsorefertootherrelatedmanualsanddocuments.
BoldMenus,menuoptions,functionnames,inputelds,optionbuttonnames,checkboxes,
drop-downlists,dialogboxnames,windownames,parameters,andcommands.
Constant
width
Textthatyoutype,programcodes,lenames,directorynames,andfunctionnames.
[]Optionalparameters.
|Separatesindividualparameterinseriesofparameters.
Warning:indicatesapotentiallyhazardoussituation.Failuretocomplycanresultin
seriousinjury,equipmentdamage,orinterruptionofmajorservices.
Caution:indicatesapotentiallyhazardoussituation.Failuretocomplycanresultin
moderateinjury,equipmentdamage,orinterruptionofminorservices.
Note:providesadditionalinformationaboutacertaintopic.
II
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

Chapter1
DeviceConnection
management
TableofContents
ConnectingtheZXR10ZSRV2System.....................................................................1-1
ConguringConsolePortConnection.........................................................................1-2
ConguringTelnetConnection....................................................................................1-2
ConguringSSHConnection......................................................................................1-6
FTPConnectionConguration.................................................................................1-10
ConguringTFTPConnection..................................................................................1-15
SFTPConnectionCongration.................................................................................1-17
1.1ConnectingtheZXR10ZSRV2System
TheZXR10ZSRV2providesmultiplecongurationmodes,seeFigure1-1.
Figure1-1ZXR10ZSRV2CongurationModes
Userscanusedifferentcongurationmodesfordifferentnetworktypes.Theconguration
modesaredescribedbelow:
lConsoleportmode:Thisistheprimarycongurationmodeusedbyusers.
lTelecommunicationNetworkProtocol(TELNET)/SecureShell(SSH)mode:Users
canusethismodetoconguretheZXR10ZSRV2atanyaccessibleplaceofa
network.
1-1
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

ZXR10ZSRV2CongurationGuide(SystemManagement)
lTrivialFileTransferProtocol(TFTP)/FileTransferProtocol(FTP)mode:Users
canusethismodetodownload/uploadroutercongurationles,andupdaterouter
congurations.
1.2ConguringConsolePortConnection
ThisproceduredescribeshowtoconnecttotheZXR10ZSRV2throughtheConsoleport.
Steps
1.CongureaHyperterminal.
ForhowtocongureaHyperterminal,refertothe"ConguringtheDeviceThrougha
ConsolePort"sectionintheZXR10M6000InitialCongurationGuide.
2.(Optional)Inthecongurationmode,runtheloginauthenticationcommandtoenable
theConsoleportconnectionauthenticationfunction.
Caution!
TheConsoleportconnectionauthenticationfunctioncanbeenabledonlyaftera
usernameandpasswordarecongured.Iftheusernameandpasswordarenot
conguredproperly,afterthefunctionisenabled,youcannotentertheZXR10>CLI
whenyouconnectthedevicenexttime.
ThefollowingexampleshowshowtoenableConsoleportauthentication.
ZXR10(config)#loginauthentication
Warning:
Pleasemakesurelocalorremoteauthenticationiscorrectlyconfigured.
Areyousuretoconfigureconsoleauthentication?[yes/no]:y
ZXR10(config)#
/*EnablestheConsoleportconnectionauthenticationfunction.*/
Forhowtocongureausernameandpasswordusedinserialportauthentication,
referto4.2ConguringUserManagement.
–EndofSteps–
1.3ConguringTelnetConnection
ThisproceduredescribeshowtoconnecttotheZXR10ZSRV2throughTelnet.
Prerequisite
Thelocalterminalcanaccesstheremoterouternetwork.
1-2
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential