Page 1
Hitachi WAN Accelerator Instruction Manual GX1000-SMC013X ・NNW-6600-S02X Reading and storing this manual: Before you use the equipment, carefully read the manual and make sure that you understand all safety precautions. After reading the manual, store it in a convenient place for easy reference.
Page 2
This is a Class A product that supports the Voluntary Control Council for Interference by Information Technology Equipment standard. In a domestic environment, this product might cause radio interference, in which case the user might be required to take appropriate measures. Editions history April 2012 (Edition 1) Copyright Copyright (c) Hitachi, Ltd. 2012. All rights reserved.
Intended readers This manual is intended for engineers who install and handle Hitachi WAN Accelerator and for system administrators who configure and operate network systems that use Hitachi WAN Accelerator. Readers are therefore required to have knowledge of electric circuits, wire connections, and network systems.
Page 4
Abbreviations Alternating Current Address Resolution Protocol Border Gateway Protocol Basic Switching Unit bit/s bits per second (can also appear as bps) Cyclic Redundancy Check Control and Switching Unit DHCP Dynamic Host Configuration Protocol Domain Name System Electronic Industries Alliance Fan Unit GSRP Gigabit Switch Redundancy Protocol Identifier...
Page 5
Conventions: The term "Device" The term Device (upper-case "D" and italic) refers to the following: Hitachi WAN Accelerator The term device (lower-case "d") might refer to this Device, another type of device from the current vendor, or a device from another vendor. The meaning depends on the context.
Preface ............................3 Safety Information ........................11 Part 1: Hardware ........................23 1. Component Overview......................24 1.1 Main device........................25 1.1.1 Hitachi WAN Accelerator.................. 25 1.1.2 Accessories..................... 27 1.2 Fan unit (FAN)......................28 1.2.1 FAN-11 ......................28 1.3 Power supply (PS)......................29 1.3.1 PS-A11......................
Page 7
4.9 Connecting an operation terminal ................. 85 4.10 Connecting interface cables..................87 4.11 Turning the power on and off ..................88 4.11.1 Hitachi WAN Accelerator ................88 4.12 Other Operations......................92 Part 2: Base software Configuration Guide ................93 5. Configuration Guide......................94 5.1 Base Software Configuration Guide................
Page 8
snmp-server host ..................... 190 14.3 SP functionality......................191 sp-port ........................191 peer-control vlan ...................... 192 peer-control ip ......................193 peer-control ipv6 ...................... 194 15. Operation Command Reference ..................195 15.1 How to read the operation command reference............196 Specifiable values for parameters................196 15.2 Checking Software Versions and Device Statuses ............
Page 9
21.1.2 Hardware fault ....................234 21.2 Function failure during operation................. 235 21.2.1 Problems related to login passwords.............. 235 21.2.2 SP firmware failure ..................235 21.3 How to obtain SP failure information ................236 21.3.1 Transferring failure information by using TFTP ..........236 21.3.2 Obtaining failure information by using FTP.............
Page 10
26.1.2 Configuration command reference for the base software........ 420 26.2 Operation commands ....................422 26.2.1 WAN acceleration functionality command............422 26.2.2 Operation Command Reference for the base software ........443 26.3 syslog......................... 445 26.3.1 WAN acceleration functionality operation information ........445 27.
Safety Information Using Hitachi WAN Accelerator properly and safely This guide provides important information for ensuring that you use Hitachi WAN Accelerator safely. Please read this guide completely before using the Device. Keep this manual handy after reading it, so that it is available for later reference.
Page 12
If anything seems wrong, turn off the power immediately. If smoke or an unusual smell is emanating from the Device, or if liquid is spilled into the Device or a foreign object falls into the Device, immediately turn off power to the Device as described below.
Page 13
Ground the Device. Each Device has at most 3.5 mA of leakage current. When the Device is connected to an AC power supply unit, always use a grounded power outlet. Failure to do so might not only result in electric shock, but it might also introduce unwanted electrical noise that could cause a Device failure.
Page 14
Number of people required to carry the Device Model Weight Number of people required Hitachi WAN Accelerator 25 kg Two or more people Note that the following label is attached to the Device. Handle power cables carefully.
Page 15
To turn off the power, turn off all power switches of the Device or turn off the breaker. The Device has multiple input power supplies. To turn off the power, turn off all power switches of the Device or turn off the breaker. Note that the following label is attached to the Device.
Page 16
Do not install the Device in a dusty or humid location. Do not install the Device in a dusty or humid location. Doing so could result in a fire or electric shock. Condensation might form on the surfaces and the inside of the Device if it is moved from a cold location to a warm location.
Page 17
Do not touch the inside of the Device with your hands. Do not put your hands inside the Device without due caution. The frame and components might cause injury.
Page 18
Handle the power cable carefully. Do not place the power cable near a heat-generating apparatus. The heat could melt the cable coating, resulting in fire or electric shock. When plugging or unplugging a power cable from the outlet, always hold the plug, not the cable itself.
Page 19
Do not attach any labels to a transceiver. A label attached to the transceiver indicates that the transceiver is a standard product from Hitachi or another manufacturer. However, such labels are attached where they do not interfere with heat dissipation from the transceiver or the mechanism that prevents the transceiver from coming loose from the cage.
Page 20
Handle optional modules carefully when carrying and packing them. Do not touch the installed components or the solder surface when carrying or packing an optional module, such as a management and switching unit, network interface unit, memory card, transceiver, or power supply unit. Also, when storing a module, use an antistatic bag.
Page 21
If the Device will not be used for a long time For safety reasons, unplug the power cable from the outlet if the Device will not be used for a long time.
Page 22
Disposing of the Device When disposing of the Device, you should either follow local ordinances or regulations or contact your local waste disposal and treatment facility.
Part 1: Hardware About this part This part provides instructions on how to handle the Hitachi WAN Accelerator hardware. Intended readers This part is intended for the technical personnel responsible for setting up and handling Hitachi WAN Accelerator. Readers are therefore required to have knowledge of electric circuits, wire connections, and network systems.
Component Overview This chapter provides an overview of Hitachi WAN Accelerator. 1.1 Main device 1.2 Fan unit (FAN) 1.3 Power supply (PS) 1.4 Control and switching unit (CSU) 1.5 Network interface unit (NIF) 1.6 SP network interface unit 1.7 Memory card (MC)
1.1 Main device The following model is available for Hitachi WAN Accelerator. Table 1-1 Model list Number of slots Model Power supply Control and Network Fan units units switching units interface units Hitachi WAN Accelerator An AC power supply unit occupies one slot per Device.
Page 26
Figure 1-2 Back view (1) Power supply unit (PS) slots (2) Fan unit (FAN) slot (2) Slot number The following figures show the slot numbers for optional modules for the Device. Figure 1-3 Front of the Device CSU1 NIF1 NIF2 Figure 1-4 Back of the Device FAN1...
Remarks Before Using Hitachi WAN Accelerator Safely Using Hitachi WAN Accelerator (1) Before Using Hitachi WAN Accelerator This document lists the items supplied with the Device when it is shipped from the factory. (2) Safely Using Hitachi WAN Accelerator This document contains cautionary notes for safe use of the Device. Be sure to read...
1.2 Fan unit (FAN) 1.2.1 FAN-11 A fan unit for Hitachi WAN Accelerator. The fan unit is included in the Device. (1) External appearance Figure 1-5 External appearance (1) Handle (2) Installation screw (3) LED (2) LED Table 1-4 LED indications...
1.3 Power supply (PS) 1.3.1 PS-A11 A power supply unit for Hitachi WAN Accelerator. This power supply unit supports 100 V AC and 200 V AC. (1) External appearance Figure 1-6 External appearance (1) Alarm LED (2) Power LED (3) Cable clamp...
Page 30
(2) LED A power supply unit indicates its status with a combination of two LEDs, as described in the following table. Table 1-5 LED indications Name Details Power Alarm (Green LED) (Red LED) The power supply output voltage is normal. A power supply output voltage error has occurred.
1.4 Control and switching unit (CSU) The following figures show the external appearance of the control and switching unit. Figure 1-7 External appearance (1) Memory (2) Installation screw (3) Handle Memory cannot be added or replaced. Do not remove, add, or replace memory. If you do so, NOTE operation is not guaranteed.
1.4.1 CSU-1B A control and switching unit for Hitachi WAN Accelerator. CSU-1B has the following hardware specifications: Memory card slots: 1 AUX ports (RS-232C): 1 CONSOLE ports (RS-232C): 1 Management ports (10BASE-T/100BASE-TX): 1 (1) Front view The front view of the CSU-1B is shown below.
Page 33
(2) System operation panel The figure below shows the external appearance of the system operation panel. As shown in the figure, the system operation panel has an LCD display and three operating buttons (back, enter, and forward). The LCD display displays information about the Device. Pressing the back, enter, or forward button allows you to switch among the menus that can be displayed on the LCD display.
Page 34
(3) LEDs and switches Table 1-6 LED indications and switches Name Type Description Details STATUS LED: Green, Indicates the operating Green: Standing by or operating. orange, or red status of the control and Orange: The unit is under self diagnosis switching unit.
Page 35
#5: The system can be switched only if you press the ACH switch on the control and switching unit of the active system. #6: This also applies to the cable being disconnected. #7: You can stop operation by entering a command. #8: This LED only shows the power mode of an active control and switching unit.
1.5 Network interface unit (NIF) The following table lists the network interface unit supported by the Device. Table 1-7 Network interface unit Size Name Interface 10/100/1000BASE-T 1000BASE-X 10GBASE-R Single-size network interface unit NK1GS-8 4 ports 8 ports 1.5.1 Single-size network interface unit The following figure shows the external appearance of a single-size network interface unit.
Page 37
(1) NK1GS-8M The NK1GS-8M is a network interface unit with the following hardware specifications: Ethernet ports (10/100/1000BASE-T): 4 Ethernet ports (1000BASE-X): 8 Since the network interface unit ports 1 to 4 are shared by 10/100/1000BASE-T and NOTE 1000BASE-X, the ports cannot be assigned to 10/100/1000BASE-T and 1000BASE-X at the same time.
Page 38
Table 1-8 LED indications Name Type Description Details STATUS LED: Green, Indicates the operating Green: Standing by or operating. orange, or status of the network Orange: A reset is in progress. interface unit. Blinking green: Startup is in progress. Red: A failure has been detected Off: Power is off.
1.6 SP network interface unit A network interface unit with a service processor can be inserted into a network interface unit slot of the Device in the same manner as a single-size network interface unit. The external appearance of a network interface unit with a service processor is shown below.
Page 40
(2) LED Table 1-9 LED indications Name Type Description Details STATUS LED: Green, Indicates the operating Green: Available for operation. orange, or red status of the SP network Orange: A reset is in progress. interface unit. Blinking green: Startup is in progress. Red: A failure has been detected.
1.7 Memory card (MC) To use a memory card, insert it into a control and switching unit. The memory card is used for the following: Backing up operating information Saving failure information when a failure occurs Updating the Device software. (1) SD1G Below is an SD memory card with a 1-GB capacity.
1.8 Transceiver 1.8.1 SFP To use an SFP transceiver, connect it to an Ethernet port on the network interface unit. The SFP transceivers supported by the Device are listed in Table 1-10 List of SFP transceivers. Table 1-10 List of SFP transceivers Module name Interface Supported network...
2.1 Preparation workflow The workflow to prepare for installation is shown in Figure 2-1 Flowchart of preparation for installation. The workflow for supplying power, communication functions and LAN cable installation should be completed prior to carrying in the components. Make sure to schedule them in good time.
The general installation requirements for the Device are described below. The installation environment must meet these conditions. Table 2-1 Device installation conditions Item Specification Hitachi WAN Accelerator Dimensions (Width x Depth x Height) 443 x 545 x 110 mm Weight (with maximum number installed)
When moving a Device, hold the handles shown in the following figure and the bottom of the Device. Figure 2-2 Location of handles for the Hitachi WAN Accelerator (front) (1) Handle When moving the Device, do not hold the handle of a fan unit or power supply unit. The handle might come off, resulting in the device falling and possibly causing injury.
2.4 Electrical power equipment 2.4.1 Power cable for the United States (1) Electrical outlet Use a power cable of the following specifications. Table 2-3 Specifications of the AC power cable Connector Plug Safety Item Cable standard (Device end) (Socket end) Prepare a plug suitable for the outlet to be used.
2.5 Notes on electrical noise Electrical noise emitted by other instruments can cause failures. Note the following points when designing an electrical power equipment plan: The branch circuit of a power supply to the Device should not be accompanied with devices or instruments that have a relay or micro switches to turn it on and off repeatedly, such as air conditioners.
2.6 Leakage current The Device is equipped with a noise filter to prevent failure due to electric noise. As a result, a maximum leakage current of 3.5 mA flows through the protective ground line (Type D grounding). Be sure to consider whether the installation of a residual current circuit breaker is required for compliance with the Fire Service Act or other legislation.
2.7 Environmental requirements (1) Dust Cooling fans are embedded in the Device. Do not install the Device in a humid or dusty place. The dust conditions of the Device are as follows: Airborne dust concentration: 0.15 mg/m or less (according to JIS Z 8813 Measuring Methods for Suspended Particulate Matter Concentration in Air - General Requirements) Generally, areas around printers or lots of people contain a lot of toner or dust.
Page 52
compressing and straightening during the laying of the cables as well as environmental stresses after installation. (8) Spraying When spraying pesticide or disinfectant in the room where the Device is installed, cover the Device beforehand to prevent direct exposure to chemicals. (9) Earthquake countermeasures Earthquakes can cause the Device to shift, fall over, or fall out of windows, possibly resulting in bodily injury or death.
2.8 Installation location The Device can be installed either on a table or a 19-inch cabinet rack. (1) Table Install the Device on a level, stable and flat table. When installing the Device on a desktop, consider the requirements described in the following table. Table 2-5 Conditions for installing the device on a table Item Conditions...
Page 54
It is not possible for the provided rack fixture alone to support the weight of a Device. Its purpose is merely to hold a Device on the rack. Accordingly, use the following fixtures: Hitachi WAN Accelerator: Guide rails or a shelf You must use the guide rails and shelves provided with the rack, and these must be able to support the weight of a Device (with the maximum number of optional modules installed).
Page 55
Table 2-8 Number of required screws Purpose Hitachi WAN Specifications Accelerator When a guide rail or For securing guide Supplied with the rack. M5 or M6 shelf is used rails and shelves screws. For securing a Device DC power cable #1: For the number of screws used to secure a guide rail or a shelf, see the documentation supplied with your rack.
2.9 Maintenance area Ensure the proper amount of space for maintenance of the Device as described below. (1) Maintenance area for a Device on a table Figure 2-4 Maintenance area for a Device on a table (2) Maintenance area for a rack-mounted Device Figure 2-5 Maintenance area for a rack-mounted Device...
2.10.1 Air flow Device The following describes the airflow of the (1) Hitachi WAN Accelerator Figure 2-6 Hitachi WAN Accelerator Exhaust Intake 2.10.2 Cooling conditions for the Device on a table Ensure at least 70 mm of space for airflow on all sides of the Device.
2.10.3 Cooling conditions for a rack-mounted device Ensure more than 70 mm of space between the Device and all structural components of the rack including the side walls, pillars, guide rails and front and rear doors. Do not block the ventilation slots. Otherwise, the internal heat is not discharged, which might cause a fire.
2.11 Device Noise The Device generates noise due to internal cooling fans. Take noise into account when planning the device installation layout. For details about the noise emitted by the Device, see 2.2 Installation conditions. The following tips are for a layout design that takes noise into account: Separate the area by using partitions or shelves to block the direct propagation of noise.
3.1 List of interface cables This section describes the interface cables used for the Device. The user should provide these cables. Table 3-1 Interface cables Port Transceiver Interface Cable Connector 10/100/1000BASE-T 10BASE-T UTP cable (Category 3 or higher) RJ-45 Port connector 100BASE-TX UTP cable (Category 5 or higher)
Page 62
For details about the terminals and interface cables to be connected to the AUX port, the NOTE CONSOLE port and the MANAGEMENT port, see 3.3 Terminals and connection cables.
3.2 Details about interface cables The optical fiber cables should be 3 m longer than the length needed to maintain the NOTE device. The extra part should be wound near the device. When optical fiber and other interface cables are used together, pay attention not to apply excessive stress on the optical fiber cables.
Page 64
Table 3-3 Pin configuration of the 10/100/1000BASE-T port RJ45 Physical specifications number 10BASE-T 100BASE-TX 1000BASE-T Receive (+) (A) Receive (+) (A) Send/Receive A (+) (A) Receive (-) (a) Receive (-) (a) Send/Receive A (-) (a) Send (+) (B) Send (+) (B) Send/Receive B (+) (B) Not used Not used...
3.2.2 Optical fiber cables (1000BASE-X) For details about the optical fiber cables to be connected to the 1000BASE-SX or 1000BASE-LX, see the following table. Table 3-4 Physical specifications of 1000BASE-SX Item Physical specifications Cable Type Multi-mode 50 µm/125 µm 62.5 µm/125 µm Core/cladding diameter Transmission band 400 MHz/km...
3.3 Terminals and connection cables 3.3.1 When connecting an operation terminal to the CONSOLE port (1) Operation terminals To connect an operation terminal to the CONSOLE port of the Device, prepare a personal computer or a workstation that meets the specifications in the following table. Table 3-6 Operation terminal (when connecting to the CONSOLE port) Item Specification...
3.3.2 When connecting an operation terminal to the MANAGEMENT port (1) Operation terminals To connect an operation terminal to the MANAGEMENT port of the Device, prepare a personal computer or a workstation that meets the specifications in the following table. Table 3-7 Operation terminal (when connecting to the MANAGEMENT port) Item Specification...
Table 3-9 Pin arrangement of the MANAGEMENT port RJ45 Physical specifications pin number 10BASE-T 100BASE-TX Send (-) Send (-) Send (-) Send (-) Receive (+) Receive (+) Not used Not used Not used Not used Receive ( Receive ( Not used Not used Not used Not used...
Installing a Device 4.1 Terminals and connection cables 4.2 Precautions before starting an installation 4.3 Table mount 4.4 Mounting on a Rack 4.5 Connecting and disconnecting the power cable 4.6 Attaching a wrist strap 4.7 Inserting and removing memory cards 4.8 Inserting and removing SFPs 4.9 Connecting an operation terminal 4.10 Connecting interface cables...
4.1 Terminals and connection cables The following tools are necessary for installing the components: Phillips screwdriver no. 2: Required when using M5 screws to replace a rack fixture or mount a Device on a rack. Phillips screwdriver no. 3: Required when using M6 screws to mount a Device on a rack. Antistatic wrist strap: Protect devices from electrostatic discharge.
4.2 Precautions before starting an installation If placing the Device on a desk, lay it on its side on a workbench capable of withstanding the weight of the device. Placing the Device in an unstable location, such as on an unsteady or tilting surface, might cause the device to fall, resulting in serious injury to yourself and others.
Page 72
Model Weight Number of people Hitachi WAN Accelerator Up to 25 kg Two or more people When moving the Device, do not hold the handle of a fan unit or power supply unit. The handle might come off, resulting in the device falling and possibly causing injury.
It is not possible for the provided rack fixture alone to support the weight of a Device. Its purpose is merely to hold a Device on the rack. Accordingly, use the following fixtures: Hitachi WAN Accelerator: Guide rails or a shelf You must use the guide rails and shelves provided with the rack, and these must be able to support the weight of a Device (with the maximum number of optional modules installed).
Page 74
Figure 4-3 Installation location of the guide rail (44.45 mm) (44.45 mm) (1) Rubber pad (2) Guide rail (3) Rack pillar Dotted lines (- - -) in the Figure indicate the boundary between units (U). NOTE When attaching a guide rail, align the top of the guide rail with the boundary (U). Rubber pads are attached to the bottom of a Device when it is shipped from the factory.
Page 75
(2) Rack (3) Guide rail The maximum weight of the Hitachi WAN Accelerator is 25 kg. The Device must be installed and carried by at least two people. Installing or carrying a Device with too few people could result in the device being dropped or falling, possibly leading to injury.
Page 76
Step 3 Mount the Device to the rack. Figure 4-5 Mounting a Device on the rack (1) Screws (M5 or M6 x 4) To mount a Device to the rack, use the M5 or M6 screws supplied with the rack. NOTE...
Connect a power cable to the power connector. Note that Figure 4-6 Attaching the power cable shows an AX6600S series product but you can connect the cable to the Hitachi WAN Accelerator in the same manner as the AX6600S. Figure 4-6 Attaching the power cable (1) Power cable Always use a grounded outlet.
Page 78
For the specifications defined by ALAXALA for power cables, see 2.4 Electrical power NOTE equipment. Step 2 Clamp the power cable by using the cable clamp. Figure 4-7 Clamping the power cable (1) Cable clamp (2) Removing an SFP Reverse the steps described in (1) Connecting the cable to disconnect the power cable. Turn off the power supply unit to be disconnected before disconnecting a power cable.
4.6 Attaching a wrist strap A Device has a terminal for an antistatic wrist strap. The terminal supports 4 mm banana plugs. Use a 4 mm banana plug for the wrist strap terminal. Figure 4-8 Location of the wrist strap terminal (1) Wrist strap terminal...
4.7 Inserting and removing memory cards To use a memory card, install it in a control and switching unit. When moving the Device, remove memory cards. Excessive stress applied on the CAUTION memory card during transfer might damage the connector part of the memory card slot.
Page 81
(2) Removing an SFP Step 1 Make sure the ACC LED is off (the memory card is not being accessed). Figure 4-10 Checking the ACC LED The ACC LED lights up whenever the memory card is being accessed. While a CAUTION memory card is being accessed, do not remove the memory card or turn off the power.
Page 82
Step 3 Remove the memory card. Figure 4-12 Removing the memory card Do not forcibly pull the locked memory card to remove it. Doing so might damage the CAUTION connector of the memory card slot.
4.8 Inserting and removing SFPs SFP transceivers with a network interface unit attached can be inserted and removed while the Device is on. 4.8.1 Inserting and removing an SFP-SX or SFP-LX (1) Inserting an SFP Keep the handle upright as shown in the figure and insert the SFP until you hear a click. Figure 4-13 Inserting the SFP into an upper port (1) SFP (2) Handle...
Page 84
Figure 4-14 Installing an SFP into a lower port (1) Handle (2) SFP (3) Ethernet port (2) Removing an SFP Move down the handle in the direction of the arrow. Hold the handle to pull out the SFP. Figure 4-15 Removing the SFP (1) Handle (2) SFP...
#4-40 screws. Note that Figure 4-16 Connecting the operation terminal shows an AX6600S series switch, but you can connect the cable to Hitachi WAN Accelerator in the same manner as the AX6604 model. Figure 4-16 Connecting the operation terminal...
Page 86
Step 1 Connect an RS-232C cable to the CONSOLE port of the Device. Figure 4-17 Connecting the RS-232C cable (1) CONSOLE port (2) RS-232C cable After the operation terminal is connected to the port, tighten the screws. Also make NOTE sure the terminal is firmly connected.
4.10 Connecting interface cables (1) UTP cable Push the connector until you hear a click. Figure 4-18 Attaching the UTP cable (1) UTP cable (2) Tab (3) Ethernet port The above figure shows an example of inserting an UTP cable into the upper Ethernet NOTE port of the network interface unit.
4.11 Turning the power on and off 4.11.1 Hitachi WAN Accelerator (1) Turning on the power Step 1 Make sure the power supply unit is installed correctly. Figure 4-20 Checking the installation location of the power supply unit (1) Slot number (2) Power supply unit If you do not want a redundant power supply, install a power supply unit in PS1.
Page 89
Step 2 Turn on all the power switches of the Device. Figure 4-21 Turning on the power (1) Power switch Set all power switches to on within five seconds of turning the first switch on. If you take NOTE longer than five seconds, the control and switching unit detects a power failure, and the failure information is displayed on the LCD display.
Page 90
(2) Turning off the power Step 1 ppupdate Make sure the software is not being updated (the command is not being executed) and the memory card is not being accessed. Figure 4-22 Checking the LEDs (1) Control and switching unit (2) STATUS LED (3) ACC LED ppupdate...
Page 91
Step 2 Turn off all power switches on the Device. Figure 4-23 Turning off the power (1) Power switch The Device has multiple input power supplies. Before turning off the power, turn off all the Device power switches.
4.12 Other Operations (1) Operation management and configuration settings For details about the operation management and configuration settings, see the corresponding parts of this manual shown below. Basic software operation management and configuration settings Part 2: Base software Configuration Guide Basic software operation management and configuration settings for network interface units with a service processor Part 4: Basic Software NIFs with an SPBasic Software NIFs with an SP...
Readers must have an understanding of the following: - The basics of network system management Notes The base software functionality for Hitachi WAN accelerator is based on AX6600S series switches from ALAXALA Networks Corporation. For the configuration of the base software functionality for Hitachi WAN accelerator, see ALAXALA Networks Corporation AX6600S Series Software Manual Configuration Guide Vol.
5.1 Base Software Configuration Guide The base software functionality for Hitachi WAN accelerator is based on AX6600S series switches from ALAXALA Networks Corporation. For the configuration guide of the base software functionality for Hitachi WAN accelerator that is available in Table 5-1, see ALAXALA Networks Corporation AX6600S Series Software Manual Configuration Guide Vol.
Page 96
Configuration guide Configuration guide Remarks volume Vol. 2 Using SNMP to manage networks Vol. 2 Log output functionality Description of IP, ARP, and ICMP Vol. 3 Vol. 3 Configuration and operation of IP, ARP, and ICMP Vol. 3 Null interface Static routing Vol.
About this chapter This section describes commands related to WAN Accelerator functions, which are part of the basic software functionality of Hitachi WAN Accelerator. Intended readers This manual is intended for system administrators who wish to configure and operate a network system that uses Hitachi WAN Accelerator.
6.1 Command description format Each command is described in the following format: Function Describes the purpose of the command. Input format Defines the input format of the command. The format is governed by the following rules: Parameters for setting values or character strings are enclosed in angle brackets <>...
6.2 Command mode list Each command is described in the format below. The following table lists the command modes. Table 6-1 Command mode list Prompt displayed for Description Command for mode transition the command mode (config) # enable Global configuration mode # configure (config-if) (config)# interface...
6.3 Specifiable values for parameters The following table describes the values that can be specified for parameters. Table 6-2 Specifiable values for parameters Parameter type Description Input example ip access-list standard inbound1 Name Alphabetic characters can be used for the first character, and alphanumeric characters, hyphens (-), underscores (_), and periods (.) can be used for the second and...
Page 102
Any character string Alphanumeric characters and special characters can be specified for parameters. Some special characters, however, cannot be used. Character codes are listed in the following table. Characters other than alphanumeric characters in the following list of character codes are special characters. Table 6-3 List of character codes Character Code Character Code Character Code Character Code Character Code Character Code Space...
Page 103. Table 6-5 Range of values Model Range of values Hitachi WAN Accelerator 1 to 2 Table 6-6 Range of values NIF type name abbreviation Range of values NK1GS-8M 1 to 8 Range of values that can be set for ...
Page 104
Example of a range specification using a hyphen and commas 1-3, 5, 10 Example of a specification displayed in multiple lines switchport trunk allowed vlan 100,200,300 ... switchport trunk allowed vlan add 400,500 ... How to specify and the range of specifiable values ...
7.1 Access lists Names and values that can be specified Protocol names (IPv4) The following table lists the names that can be specified as IPv4 protocol names. Table 7-1 Protocol names that can be specified (IPv4) Protocol name Applicable protocol number icmp igmp All IP protocols...
Page 107
chargen Character generator (19) daytime Daytime (13) discard Discard (9) domain Domain Name System (53) echo Echo (7) exec Remote process execution (512) finger Finger (79) File Transfer Protocol (21) ftp-data FTP data connections (20) gopher Gopher (70) hostname NIC Host Name Server (101) http HyperText Transfer Protocol (80) https...
Page 108
discard Discard (9) domain Domain Name System (53) echo Echo (7) isakmp Internet Security Association and Key Management Protocol (500) mobile-ip Mobile IP registration (434) nameserver Host Name Server (42) Network Time Protocol (123) radius Remote Authentication Dial In User Service (1812) radius-acct RADIUS Accounting (1813) Routing Information Protocol (520)
Page 109
xdmcp X Display Manager Control Protocol (177) tos name The following table lists the tos names that can be specified. Table 7-6 tos names that can be specified tos name tos value max-reliability max-throughput min-delay min-monetary-cost normal precedence name The following table lists the precedence names that can be specified. Table 7-7 precedence names that can be specified precedence name precedence value...
Page 110
default Ethernet type name The following table lists the Ethernet type names that can be specified. Table 7-9 Ethernet type names that can be specified Ethernet type name Ethernet value Remarks appletalk 0x809b 0x0806 0x88f3 Alaxala Protocol eapol 0x888e gsrp Filters GSRP control packets.
Page 111
general-parameter-problem Parameter problem host-isolated Host isolated host-precedence-unreachable Host unreachable for precedence host-redirect Host redirect host-tos-redirect Host redirect for TOS host-tos-unreachable Host unreachable for TOS host-unknown Host unknown host-unreachable Host unreachable information-reply Information replies Not specified information-request Information requests Not specified mask-reply Mask replies Not specified...
Page 112
Table 7-12 Message names that can be specified for ICMP (IPv6) Message name Message Type Code beyond-scope Destination beyond scope destination-unreachable Destination address is unreachable echo-reply Echo reply Not specified echo-request Echo request (ping) Not specified header Parameter header problems hop-limit Hop limit exceeded in transit mld-query...
Page 113
Number of specifications that can be set for an interface The number of specifications that can be set for an interfaces is the total number of access lists that can be set for an interface. The table below indicates the maximum number of lists that can be created.
Page 114
interface vlan 2 ip access-group AAA in layer2-forwarding ip access-group AAA in layer3-forwarding ip access-list extended AAA 10 permit tcp any any 20 deny udp any any In this example, access list is created and applied inbound on Ethernet interface 1/1, and access list is created and applied inbound on Ethernet interface 1/2.
Page 115
advance access-group Applies an Advance access list to an Ethernet interface or a VLAN interface, and enables the Advance filtering functionality. For details about the number of specifications that can be set for an interface per device, see Number of specifications that can be set per interface for each CSU type. To apply an access list with parameters for policy-based routing specified to an interface, Inbound specify...
Page 116
layer2-forwarding Specifies the forwarding type to be detected in flow detection. layer2-forwarding detects IP packets forwarded on Layer 2 in flow detection. This parameter has an effect only when it is applied to an Ethernet interface. Default value when this parameter is omitted: This parameter cannot be omitted.
Page 117
If an Advance access list is to be applied to a VLAN interface, you can set the list if no VLAN parameters are set in the flow detection condition. ipv4-uni standard If the distribution pattern of path-related table entries is ipv4-uni extended , you cannot set an IPv6 filter with IPv6 policy-based routing specified.
Page 118
advance access-list Configures an access list to serve as an Advance filter. You can use one access list ID and specify multiple filter conditions. For details about the number of access lists and filter conditions that can be created per device, see Number of access lists that can be created for each CSU type.
Page 120
advance access-list resequence Re-specifies the sequence numbers that determine the order in which the Advance filter applies filter conditions. Input format To set or change information: advance access-list resequence Input mode (config) Parameters ...
Page 121
deny (advance access-list) Specifies the conditions by which the Advance filter denies access. Input format To set or change information: ] deny mac { filter-condition action-specification ] deny mac-ip { filter-condition action-specification ] deny mac-ipv6 { filter-condition action-specification filter-condition mac {...
Page 122
] [precedence ] | dscp }] [vlan { ][{ctag-untagged | [ctag-user-priority [ctag-vlan When "packet is not fragmented" is a condition, and the upper-layer protocol is UDP mac-ip { | host ...
Page 123
| own-address} | host | own-address} | any | own | range-address } {{ own-address} | host { | own-address} | any | own | range-address
Page 124
}] [{traffic-class | dscp }] [vlan { [ctag-user-priority ] [ctag-vlan When the upper-layer protocol is ICMP mac-ipv6 { | host ...
Page 125. is specified, the source MAC address is not used as a filter condition. MAC address (nnnn.nnnn.nnnn): 0000.0000.0000 to ffff.ffff.ffff (hexadecimal) | host | any | bpdu | cdp | lacp | lldp | oadp | pvst-plus-bpdu | slow-protocol} Specifies the destination MAC address.
Page 126
None. (The parameter is not set as a detection condition.) Range of values: Specify the VLAN ID or VLAN list name. For details about VLAN IDs, see 6.3 Specifiable values for parameters. user-priority Specifies the user priority. Default value when this parameter is omitted: None.
Page 127
Specifies the upper-layer protocol condition for IPv6 packets. ipv6 Note that if all protocols are applicable, specify Default value when this parameter is omitted: This parameter cannot be omitted. Range of values: Specify 1 to 42, 45 to 49, 52 to 59, 61 to 255 (in decimal), or a protocol name. For details about the protocol names that can be specified, see Protocol names that can be specified (IPv6).
Page 128
This parameter cannot be omitted. Range of values: own-address host Specify , , host own-address range-address , , or . Specify the source IPv6 address for . For , specify the part of the IPv6 address that is to meet the conditions by specifying the number of bits from the start of the address.
Page 129
| own-address} | any | own | range-address ipv4> Specifies the destination IPv4 address. To specify all destination IPv4 addresses, specify Default value when this parameter is omitted: This parameter cannot be omitted. Range of values: host Specify ...
Page 130
conditions by specifying the number of bits from the start of the address. own-address , specify the part of that is to meet the conditions by specifying the number of bits from the start of the address. host ...
Page 131
Default value when this parameter is omitted: None. (The parameter is not set as a detection condition.) Range of values: Specify 0 to 15 (in decimal) or a tos name. For details about the tos names that can be set, see tos names that can be specified.
Page 132
Specify 0 to 63 (in decimal) or the DSCP name. For details about the DSCP names that can be specified, see DSCP names that can be specified. established Specifies detection of packets whose ACK flag or RST flag in the TCP header is 1. This parameter option is available only when the protocol is TCP.
Page 133
None. (The parameter is not set as a detection condition.) Range of values: None {syn | +syn | -syn} Specifies detection of packets whose SYN flag in the TCP header is 1 or 0. This parameter option is available only when the protocol is TCP. +syn Specify to detect packets whose SYN flag in the TCP header is 1.
Page 134
None. (The parameter is not set as a detection condition.) Range of values: None Specifies the IGMP type. This parameter option is available only when the protocol is IGMP. Default value when this parameter is omitted: None. (The parameter is not set as a detection condition.) Range of values: Specify 0 to 255 (in decimal).
Page 135
Notes ffff.ffff.ffff nnnn nnnn nnnn is entered as the source MAC address and the destination MAC address, is displayed. If a protocol name is set for the destination MAC address, or if the address of a protocol name that can be set is set, the protocol name is displayed. For details about the address of a protocol name that can be set as the destination MAC address, see Destination MAC address names that can be specified.
Page 136
permit (advance access-list) Specifies the conditions by which the Advance filter permits access. Input format To set or change information: ] permit mac { filter-condition action-specification ] permit mac-ip { filter-condition action-specification ] permit mac-ipv6 { filter-condition action-specification filter-condition mac {...
Page 137
] [precedence ] | dscp }] [vlan { ][{ctag-untagged | [ctag-user-priority [ctag-vlan When "packet is not fragmented" is a condition, and the upper-layer protocol is UDP mac-ip { | host ...
Page 138
| own-address} | host | own-address} | any | own | range-address } {{ own-address} | host { | own-address} | any | own | range-address
Page 139
}] [{traffic-class | dscp }] [vlan { [ctag-user-priority ] [ctag-vlan When the upper-layer protocol is ICMP mac-ipv6 { | host ...
Page 140
Default value when this parameter is omitted: This parameter cannot be omitted. Range of values: host Specify , , or Specify the source MAC address for . , specify a mask in MAC address format that specifies bits in the MAC address whose permitted value is arbitrary.
Page 141
Specify 0x0000 to 0xffff (hexadecimal) or the Ethernet type name. For details about the Ethernet type names that can be specified, see Ethernet type names that can be specified. vlan { Specify the VLAN ID or VLAN list name. This parameter has an effect only when it is applied to an Ethernet interface.
Page 142
Range of values: Set 0 to 255 (in decimal) or a protocol name. For details about the protocol names that can be specified, see Protocol names that can be specified (IPv4). {ipv6 | | icmp | tcp | udp} mac-ipv6 You can select this parameter when is specified as the flow detection...
Page 143
IPv4 address (nnn.nnn.nnn.nnn): 0.0.0.0 to 255.255.255.255 | host { | own-address} | any | own-address | own | range-address Specifies the source IPv6 address. To specify all source IPv6 addresses, specify Default value when this parameter is omitted: This parameter cannot be omitted.
Page 144
is specified, the filter condition is other than . range is specified, the filter condition is in the range from . Specify port numbers so that is larger than .
Page 145
Range of values: own-address Specify , , host host own-address range-address , , or . Specify the destination IPv6 address for . For , specify the part of the IPv6 address that is to meet the conditions by specifying the number of bits from the start of the address.
Page 146 Specifies four bits (bits 3 to 6) in the ToS field as the tos value. The tos value is compared with four bits (bits 3 to 6) in the ToS field of the received packet. Default value when this parameter is omitted: None.
Page 147
Default value when this parameter is omitted: None. (The parameter is not set as a detection condition.) Range of values: Specify 0 to 63 (in decimal) or the DSCP name. For details about the DSCP names that can be specified, see DSCP names that can be specified.
Page 148
None {rst | +rst | -rst} Specifies detection of packets whose RST flag in the TCP header is 1 or 0. This parameter option is available only when the protocol is TCP. +rst Specify to detect packets whose RST flag in the TCP header is 1. -rst Specify to detect packets whose RST flag in the TCP header is 0.
Page 149 Specifies the ICMP message name. This parameter option is available only when the protocol is ICMP. For details about the ICMP message names that can be specified, see Message names that can be specified for ICMP (IPv4) and Message names that can be specified for ICMP (IPv6).
Page 150
network connected to the specified destination interface or an address that has been set on the specified destination interface. policy interface vlan next-hop Specifies the output destination for policy-based routing. Default value when this parameter is omitted: None (policy-based routing is not used) Range of values: ...
Page 151
protocol name that can be set is set, the protocol name is displayed. For details about the address of a protocol name that can be set as the destination MAC address, see Destination MAC address names that can be specified. 0000.0000.0000 nnnn nnnn...
Page 152
remark Specifies supplementary information for the access list. Access lists are available for IPv4 address filtering, IPv4 packet filtering, IPv6 filtering, MAC filtering, and Advance filtering. Input format To set or change information: remark To delete information: no remark Input mode (config-ext-nacl) (config-std-nacl)
8.1 Policy-based switching default (policy-switch-list) Specifies the default operation for policy-based switching. The default operation refers to the operation for a packet that cannot be forwarded by any of the output destination interfaces. Only one default operation can be set in policy-based switching list information. Input format To set or change information: default {permit | deny}...
Page 155
policy-channel-group Sets the channel group number, which is included in destination interface information for policy-based switching. Destination interface information is selected in ascending order of the application sequence set in policy-based switching list information. A maximum of eight destination interface information items, including channel group numbers, NIF numbers, and port numbers, can be set for one policy-based switching list.
Page 156
When the change is applied The change is applied immediately after setting values are changed. Notes channel group number For the parameter, specify the number of a channel group policy-vlan that belongs to the VLAN with the VLAN ID set by the command.
Page 157
policy-interface (policy-switch-list) Sets the NIF number and port number, which are included in destination interface information for policy-based switching. Destination interface information is selected in ascending order of the application sequence set in policy-based switching list information. A maximum of eight destination interface information items, including NIF numbers, port numbers, and channel group numbers, can be set for one policy-based switching list.
Page 158
When the change is applied The change is applied immediately after setting values are changed. Notes For the NIF number and port number for the destination interface, specify the numbers of NIF and port that belong to the VLAN with the VLAN ID set by the policy-vlan command.
Page 159
policy-switch-list Sets items related to policy-based switching. config-pol-sw Entering this command switches to mode, in which policy-based switching list information for the relevant list number can be set. A maximum of 1,000 items can be set for policy-based switching list information per device. Input format To set or change information: policy-switch-list...
Page 160
policy-switch-list default-aging-interval Specifies the period of time to temporarily suspend the monitoring of forwarding availability of policy-based switching during system switching in the BCU, CSU, or MSU. During this period of time, the output destination routes for policy-based switching that were used before the system switching occurred are applied.
Page 161
policy-switch-list default-init-interval Specifies the period of time to temporarily suspend the monitoring of forwarding availability of policy-based switching when, for example, the device starts. During this period of time, frames subject to policy-based switching are discarded. Input format To set or change information: policy-switch-list default-init-interval ...
Page 162
policy-switch-list resequence Resets the sequence in which destination interfaces for policy-based switching are applied. Input format To set or change information: policy-switch-list resequence Input mode (config) Parameters Specifies the list number of the policy-based switching list information. Default value when this parameter is omitted: This parameter cannot be omitted.
Page 163
policy-vlan Specifies the VLAN ID for the destination interface for policy-based switching. Only one VLAN ID can be set for one policy-based switching list. Input format To set or change information: policy-vlan To delete information: no policy-vlan Input mode (config-pol-sw) Parameters ...
Page 164
recover (policy-switch-list) Specifies the switch-back operation for destination interface information for policy-based switching. Only one switch-back operation can be set in policy-based switching list information. Input format To set or change information: recover {on | off} To delete information: no recover Input mode (config-pol-sw) Parameters...
9.1 Policy-based routing default (policy-list) Specifies the default operation for policy-based routing. The default operation refers to operation for a packet that cannot be forwarded by any of the policy-based routing routes. Only one default operation can be set in policy-based routing list information. Input format To set or change information: default {permit | deny}...
Page 167
policy-interface (policy-list) Specifies the routing information for policy-based routing. Routes with routing information are selected in ascending order of the sequence in which they are applied in policy-based routing list information. A maximum of eight routing information items can be set for one policy-based routing list. Input format To set or change information: ] policy-interface vlan...
Page 168
network connected to the specified destination interface or an address that has been set on the specified destination interface. track-object
Page 169
policy-list Sets items related to policy-based routing. config-pol Entering this command switches to mode, in which policy-based routing list information for the relevant list number can be set. A maximum of 256 items per device can be set for policy-based routing list information. Input format To set or change information: policy-list...
Page 170
policy-list default-aging-interval Specifies the period of time to temporarily suspend the monitoring of forwarding availability of policy-based routing during system switching in the CSU. During this period of time, the forwarding destination routes for policy-based routing that were used before the system switching occurred are applied.
Page 171
policy-list default-init-interval Specifies the period of time to temporarily suspend the monitoring of forwarding availability of policy-based routing when, for example, the device starts. During this period of time, packets subject to policy-based routing are discarded. Input format To set or change information: policy-list default-init-interval ...
Page 172
policy-list resequence Resets the sequence in which routing information items for policy-based routing are applied. Input format To set or change information: policy-list resequence Input mode (config) Parameters Specifies the list number of the policy-based routing list information. Default value when this parameter is omitted: This parameter cannot be omitted.
Page 173
recover (policy-list) Specifies the switch-back operation for routing information for policy-based routing. Only one switch-back operation can be set in policy-based routing list information. Input format To set or change information: recover {on | off} To delete information: no recover Input mode (config-pol) Parameters...
About this part This part explains how to handle a network interface unit with a service processor, which is one of the basic software functionalities in Hitachi WAN Accelerator. Intended readers This part is intended for the technical personnel responsible for setting up and handling Hitachi WAN Accelerator.
10.1 Command input mode 10.1.1 List of operation commands Table 10-1 List of operation commands Command name Description session Changes the command input mode from general user mode to SP user mode or from device administrator mode to SP administrator mode. 10.1.2 Command input mode To change the configuration or check the status of the Device, you must be in the appropriate command input mode, and then enter a configuration command or operation...
Page 177
Figure 10-1 Overview of mode transitions...
10.2 Notes on CLI operation 10.2.1 Notes on inputting a sequence of commands If you enter a series of commands in the following conditions, the Device sometimes fails to accept the commands in general user mode, device administrator mode, or configuration mode: Any of the commands changes SP administrator mode or SP user mode to general user exit...
Configuration The configuration and operating conditions of the Device must be set to match the network environment. This chapter describes what you need to know when setting the configuration. 11.1 Mode transitions when entering configuration commands...
11.1 Mode transitions when entering configuration commands Edit configurations in the appropriate executable configuration mode. To edit a level-2 configuration, you must first switch from global configuration mode to a level-2 configuration mode using a mode transition command. You can then execute the required configuration commands.
SP functionality This chapter describes the SP functionalities of the Device. 12.1 SP functionality 12.2 Configuring the SP 12.3 Operation for SP functionality...
12.1 SP functionality 12.1.1 Overview of SP The SP (service processor) on a NIF is programmable and ready to process packets at high speeds. Replacement of the SP firmware allows the NIF with an SP to support various packet processing. Packets are processed in the following manner.
12.2 Configuring the SP 12.2.1 List of configuration commands The following table lists the commands used to configure the SP functionality. Table 12- - - - 1 1 1 1 List of configuration commands Table 12 Table 12 Table 12 Command name Description sp-port...
12.3 Operation for SP functionality 12.3.1 List of operation commands The following table lists the operation commands related to the SP functionality. Table 12-2 List of operation commands Command name Description session Changes the command input mode from general user mode to SP user mode or from device administrator mode to SP administrator mode.
12.3.3 Checking the status of the SP functionality show nif To check the SP functionality status, use the operation command. An example is shown below: Figure 12-3 Checking the SP functionality status (1) >show nif 1 Date 2011/04/05 12:00:00 UTC NIF1: active 2-port 10GBASE-R(SFP+) + 1-port 10GBASE-R-SP retry:0...
13.1 System operation panel 13.1.1 Displaying port information (1) Port information display Table 13-1 Contents of port information display Category Model name Meaning Port type 10GBASE-SR 10GBASE-LR 10GBASE-R-SP Port connected to the SP...
14.1 Reading the configuration command reference Specifiable values for parameters : Indicates the range of the port number. Table 14-1 Range of values NIF type name abbreviation Range of values NXSC-03...
14.3 SP functionality sp-port Sets the line connected to an SP for the NIF equipped with the SP. Entering this command switches to config-sp mode in which information about the SP can be set. Input format To set information: sp-port ...
peer-control vlan Sets the Tag-VLAN of an SP for control traffic of the SP. This command uses the information set by this command to enter SP mode. Input format To set or change information: peer-control vlan To delete information: no peer-control vlan Input mode (config-sp)
peer-control ip Sets the IPv4 address of an SP for control traffic of the SP. This command uses the information set by this command to enter SP mode. Input format To set or change information: peer-control ip To delete information: no peer-control ip Input mode...
peer-control ipv6 Sets the IPv6 address of an SP for control traffic of the SP. This command uses the command settings to enter an SP mode. Input format To set or change information: peer-control ipv6 To delete information: no peer-control ipv6 Input mode (config-sp)
15.1 How to read the operation command reference Specifiable values for parameters : Indicates the range of the port number. Table 15-1 Range of values NIF type name abbreviation Range of values NXSC-03...
15.2 Checking Software Versions and Device Statuses show version Example 1 The following examples show how information is displayed about the Device software and the boards installed when this command is executed from the active system. Figure 12-2 Example of displaying information about the Device software and the boards installed (when the command is executed from the active system) >...
show system Example 1 The following example shows the operation status of the Device when this command is executed from the active system. Figure 15-2 Example of displayed information > show system Date 2011/04/05 12:00:00 UTC System: AX6608S, OS-SE Ver. 11.5 Node : Name=System Name Contact=Contact Address Locate=Location...
Page 199
Flash : user area config area dump area area total used 35,631kB 111kB 35,742kB free 247,133kB 282,775kB 163,660kB 693,568kB total 282,764kB 282,886kB 163,660kB 729,310kB MC : enabled Manufacture ID : 00000003 22,863kB used 100,096kB free 122,959kB total Forwarding Database Management fwdm : ipv4-uni standard IPv4 Unicast resources Used/Max:...
15.3 Managing NIF show nif Example Display NIF information and summary information about ports. Figure 15-4 Execution result of specifying a NIF >show nif 1 Date 2011/04/05 12:00:00 UTC NIF1: active 2-port 10GBASE-R(SFP+) + 1-port 10GBASE-R-SP retry:0 Average:103Mbps/24Gbps Peak:150Mbps at 08:10:30 Port1: active up 10GBASE-SR 0012.e240.0a04...
Page 201
Table 15-3 Information displayed as summary information about ports Item Detailed information Meaning Closed Operation stopped Booting Currently initializing Out of Service SP service is not running. Pre-service SP service is starting up. In Service SP service is running. Closing Operation is being blocked.
15.4 Ethernet show interfaces Example The following shows an example of displaying the NIF information, detailed port information, and detailed interface statistics. Figure 15-5 Result of executing the command for displaying detailed statistics about the 10GBASE-R interface >show interfaces tengigabitethernet 1/3 detail Date 2011/04/05 12:00:00 UTC NIF1: active 2-port 10GBASE-R(SFP+) + 1-port 10GBASE-R-SP...
Page 203
Error frames Signal detect errors HI_BER Transceiver notconnect : LOS of sync Signal detect errors in operational state Transceiver notconnect in operational state LOS of sync in operational state HI_BER in operational state LF in operational state RF in operational state >...
show port Example 1 Figure 15-8 Example of listing link information for ports >show port Date 2011/04/05 12:00:00 UTC Port Counts: 3 Port Name Status Speed Duplex FCtl FrLen ChGr/Status 1/ 1 tengeth1/1 10GBASE-SR full 1518 1/ 2 tengeth1/2 10GBASE-LR full 1518 1/ 3 tengeth1/3...
Page 205
Explanation of the display items in Examples 2 and 3 Figure 15-12 Description of displayed items (transceiver information) Item Meaning Displayed information Type SFP+: SFP+ Type of transceiver...
15.5 SP functionality session Changes the command input mode from general user mode to SP user mode or from device administrator mode to SP administrator mode. Input format session / Input mode General user mode and device administrator mode Parameters /...
Page 207
Response messages Figure 15-13 List of response messages for the session command Message Description Can't execute. The command could not be executed. Re-execute the command. Can't execute this command in standby This command cannot be executed on a standby system. system.
16.1 Operation messages and logs This chapter explains how to use failed parts, operation messages, and logs to identify the location of errors that have occurred. 16.1.1 Checking the log (1) Code information for logs (a) Event location The reference log uses an ID to indicate the location or the functionality of the event that occurred.
16.2 Device Failure and Event Information This chapter describes the details of device failures and event information. All messages for device failures and event information are output to the operation terminal window. Depending on the error severity or event content, the information is classified into seven set logging event levels, ranging from .
Page 211
SP firmware initialization started. NXSC-03 25020800 9250 SP firmware initialization has started. Explanation of the message text None. [Action] None. SP status changed to "In Service". NXSC-03 25020801 9250 The SP operating status has changed to ready for service. Explanation of the message text None.
Page 212
Port restarted because of SP NXSC-03 25020822 9250 hardware failure. A port was restarted because SP hardware malfunctioned. Explanation of the message text None. Action Check subsequent fault recovery log entries or fault recovery failure log entries. If the system has recovered from the fault, operations can resume. If the recovery failed, replace the NIF. NIF restarted, but not recovered.
17.1 Private MIBs This chapter describes the implementation specifications for the private MIBs used by the Device. 17.1.1 ax6600sDevice group (system switch chassis information MIB) (1) ax6600sNifBoard group implementation specifications (NIF information) (a) Implementation specifications The following table shows the implementation specifications for the ax6600sNifBoard group (NIF information).
17.2 Supported MIB Traps This chapter describes the supported MIB traps. 17.2.1 Supported traps and timing of issuance Table 17- - - - 3 3 3 3 Supported traps and timing of issuance Table 17 Table 17 Table 17 Trap type Meaning Issued when Installed...
Page 216
Table 17-5 List of supported parameters of the Trap-PDU (for SNMPv2C/SNMPv3) Type Trap-PDU data value Variable-Binding Variable-Binding [2](SnmpTrapOID.0) Variable-Binding [3-] [1](SysUpTime.0) ax6600sSpSe sysUpTime value Object ID of ifIndex rviceStartTrap ax6600sSpServiceStartTrap (1.3.6.1.4.1.21839.1.2.12.0.83) ax6600sSpSe sysUpTime value Object ID of ifIndex rviceStopTrap ax6600sSpServiceStopTrap (1.3.6.1.4.1.21839.1.2.12.0.84)
18.1 Troubleshooting functional failures during operation This chapter describes what actions to take when a problem occurs, such as when a Device does not operate correctly or cannot communicate. 18.1.1 SP problems (1) The SP service is not ready show nif show interfaces Execute the operation command to check the operating...
Page 219
(2) The Device cannot be changed to SP mode session When you cannot change the Device to SP mode by using the operation command, take action according to the following table. Table 18-2 Action when the Device cannot be changed to SP mode Response Cause Action...
Page 220
Check if the statistics items for If the items are counted, continue with No. 6. packets sent by the SP are If the items are not counted, continue with No. 9. counted. session Use the command to change the mode. show interface
18.2 Obtaining failure information This chapter explains how to obtain failure information. 18.2.1 Collecting information about a NIF equipped with an SP, and transferring files If a failure on a NIF equipped with an SP occurs, first see 28.1 Additional Information in the show Troubleshooting Guide for details to collect the information by using the tech-support...
Part 5: SP Functionality, Basic Functions About this part This part explains how to use the SP functionality for Hitachi WAN accelerator. Intended readers This edition is intended for system administrators who configure and operate a network system that uses the Hitachi WAN accelerator.
Operational Guide This chapter describes how to operate a network system that uses an NXSC-03. In the following descriptions, the SP is referred to as NXSC-03. 19.1 Starting the device 19.2 Stopping the device 19.3 Starting the SP 19.4 Blocking the SP 19.5 Updating files...
19.2 Stopping the device For details, see 5.1 Login procedures in the Base Software Configuration Guide. reload stop If an NXSC-03 is installed, be sure to stop the device by using the command. reload stop Turning off the power without executing the command might cause an NXSC-03 failure.
19.3 Starting the SP activate To start the SP, after setting the configuration for the SP functionality, execute the command from CSU administrator mode to change to the SP service state (that is, to turn the SP on). Alternatively, if you start the device after saving the configuration settings for the SP functionality, the SP is turned on, and then the status automatically changes to the SP service state.
19.4 Blocking the SP To block the SP, in either the SP service state or the SP service block state, execute the inactivate nif command from CSU administrator mode to change the status to the SP blocked state (that is, the SP is turned off). reload Alternatively, executing the command also changes the status to the SP blocked...
19.5 Updating files This section describes how to update SP files. 19.5.1 How to update the files Prepare an FTP server, and then save the files to be updated on the server. Example of a file to update: NXSC0312.1279 Update version number Add the server to the SP configuration and the CSU configuration so that the FTP server is accessible from the update-target SP interface specified by using the CSU SP-port...
Page 229
H/W: BOOT [11.44] MISC [1.0] SPCT [0.34] The updating of the SP files is finished.
Configuration Guide This chapter explains how to save and restore the configuration to and from an external device when an NXSC-03 is being used. In the following descriptions, the SP is referred to as NXSC-03. 20.1 Configuration 20.2 Storing and restoring the configuration in an external device...
20.1 Configuration Both during installation and operation, the administrator will need to set configuration settings related to the SP and the operating conditions to match the packet processing of the SP and the network environment. Configuration settings are not predefined when the device is first installed.
20.2 Storing and restoring the configuration in an external device This section explains how to store the SP configuration on a server outside of the SP, such as an FTP server, and how to restore the stored configuration. 20.2.1 Storing export Use the command to save the startup configuration file on a server (in the...
Actions to be taken to resolve problems This chapter explains how to collect data when an error occurs in an NXSC-03. In the following descriptions, the SP is referred to as NXSC-03. 21.1 Device fault 21.2 Function failure during operation 21.3 How to obtain SP failure information 21.4 Restarting the SP...
21.1 Device fault 21.1.1 When the NXSC-03 cannot be turned on Turn off the device, and then make sure that the NXSC-03 is inserted properly. If the problem persists, contact the device administrator. 21.1.2 Hardware fault If the SP restarts due to a hardware fault, collect the following failure information. 1.
21.2 Function failure during operation 21.2.1 Problems related to login passwords During operation, if a user forgets his or her password and is unable to log in to the SP, perform the following procedure: Contact the device administrator. Contact the device administrator. Change the password.
21.3 How to obtain SP failure information This section explains how to obtain failure information for the SP. To obtain log data: Log in to the SP on which the failure occurred. 1-1. Go from CSU administrator mode to SP administrator mode. 1-2.
21.3.2 Obtaining failure information by using FTP This section explains how to transfer failure information to the remote server by using FTP (File Transfer Protocol). To transfer failure information to the remote server by using FTP: Start the FTP server on the remote server. Execute the following command to transfer failure information to the remote device: SP01# export dump-file ftp://account:[email protected]/dump-data Dump-file creating start.
21.4 Restarting the SP If the failure recovery is not successful, it might be possible to recover from the failure by restarting the SP. To restart the SP: Log in to the CSU. From the CSU, issue a request to block the SP. GX#1# inactivate nif 1 nif 1 inactivate OK? (y/n): y From the CSU, issue a request to unblock the SP.
22.1 Configuration commands 22.1.1 Basic commands display Description This command displays the configuration currently being edited. Syntax display [CTX] [xml] Parameters When all parameters are omitted: The command displays the configuration in the mode in which the command was executed. Specifies the name of the context to be displayed.
Page 241
addrunning Description This command applies the edited configuration to the operation. Syntax To apply the configuration: addrunning Parameters None Notes Note that the edited configuration will be lost if you exit SP configuration mode without applying the configuration to the operation.
Page 242
copy conf running start Description This command saves the running configuration in the startup configuration file. Input mode SP administrator mode Syntax copy [conf] running start Parameters conf Indicates the copy of the configuration. When this parameter is omitted: The command operates in the same way as when the parameter is specified. running Specifies the running configuration as the copy source.
Page 243
exit Description This command goes back one SP configuration mode. If you are editing a configuration in SP global configuration mode, the command ends that mode and returns you to SP administrator mode. Syntax To end the mode: exit Parameters None Notes Note that the edited configuration will be lost if you exit SP configuration mode without...
22.1.2 Route-related commands route Description This command specifies the IP route table in the level of configuration definition mode. Syntax To set information: route {A.B.C.D/M|default-ipv4} {A.B.C.D|INTERFACE} [reject] [DISTANCE] route {X:X::X:X/M|default-ipv6} {X:X::X:X[%INTERFACE]|INTERFACE} [reject] [DISTANCE] To delete information: delete route {A.B.C.D/M|default-ipv4} delete route {X:X::X:X/M|default-ipv6} delete route {all|ipv4|ipv6} Parameters A.B.C.D/M...
Page 245
None (this parameter cannot be omitted). Range of values: Name of the interface that you want to set. reject Rejects the routing of the specified route. Default value when this parameter is omitted: The routing is permitted. Range of values: reject DISTANCE Specifies the value of the relevant route distance.
Page 246
Default value when this parameter is omitted: None (this parameter cannot be omitted). Range of values: ipv4 ipv6 Deletes all IPv6 static routes. Default value when this parameter is omitted: None (this parameter cannot be omitted). Range of values: ipv6 Specify this to delete all static routes.
Page 247
arpentry Description This command specifies the ARP cache in the level of configuration definition mode. Syntax To set or change information: arpentry A.B.C.D INTERFACE MAC To delete information: delete arpentry {all|ENTRY INTERFACE} Parameters A.B.C.D Specifies the IPv4 address to be set. Specify the IPv4 address in dot notation. Default value when this parameter is omitted: None (this parameter cannot be omitted).
Page 248
ndpentry Description This command specifies the NDP cache in the level of configuration definition mode. Syntax To set or change information: ndpentry X:X::X:X INTERFACE MAC To delete information: delete ndpentry {all|ENTRY INTERFACE} Parameters X:X::X:X Specifies the IPv6 address to be set. Specify the IPv6 address in colon notation. Default value when this parameter is omitted: None (this parameter cannot be omitted).
Page 249
icmp limit rate Description This command specifies the transmission interval for ICMP errors in the level of configuration definition mode. This command controls the interval for each combination of the source and destination IP addresses of ICMP error packets. Syntax icmp limit rate { default | ...
Page 250
icmp limit type Description icmp limit This command specifies the types of ICMP errors to which the rate command is to be applied in the level of configuration definition mode. Transmission of ICMP error packets is not limited for ICMP errors whose type is not set by this command.
22.1.3 Log-related commands log-session Description This command registers a log session in the level of configuration definition mode. Syntax To set information: log-session local NAME SIZE UNIT log-session remote {A.B.C.D|X:X::X:X} NAME To delete information: delete log-session SESSION Parameters SESSION Specifies the session name. Default value when this parameter is omitted: None (this parameter cannot be omitted).
Page 252
remote Sets the storage destination to remote. Default value when this parameter is omitted: None (this parameter cannot be omitted). Range of values: remote A.B.C.D Specifies the IPv4 address of the storage destination (remote). Specify the IPv4 address in dot notation. Default value when this parameter is omitted: None (this parameter cannot be omitted).
Page 253
log mng Description This command sets the output destination and output error level in the level of configuration definition mode. Syntax To set or change information: log mng SESSION [SEVERITY] To delete information: delete log mng SESSION Parameters SESSION Specifies the session. Default value when this parameter is omitted: None (this parameter cannot be omitted).
22.1.4 Filter-related commands filter Description This command sets whether to enable or disable filtering in the level of configuration definition mode. Syntax filter {enable|disable} Parameters enable Enables filtering. Default value when this parameter is omitted: None (this parameter cannot be omitted). Range of values: enable disable...
Page 255
rule Description This command sets filtering rules in the level of configuration definition mode. Syntax To set filtering rules: rule [IDENT] [PROCESSING] [MATCH] do ACTION To delete filtering rules: delete rule {IDENT|all} Parameters IDENT Specifies the ID that identifies a filtering rule. Filtering rules and received packets are compared in ascending order of this number, and the filtering rule that matches first is applied.
Page 256
transmit [not] TX-INTERFACE Specifies a sending interface as the profile for the packets to be matched. This can be specified for output and forwarding chains. For TX-INTERFACE, specify the name of a sending interface. is specified, interface names other than the one specified for TX-INTERFACE become the profiles of packets to be matched.
Page 257
For ICMPTYPES, you can specify multiple names or numbers of Internet protocols that support any of the following: ah, esp, icmp, igmp, ip, ipip, ipv6, ipv6-frag, ipv6-icmp, ipv6-opts, ipv6-route, ospf, tcp, udp, and DARPA is specified, types, protocol names, and protocol numbers other than {TYPE [ the one specified for CODE...
Page 258
matched to the second and subsequent fragment packets. This parameter does not identify the source port, destination port, and ICMP type. is specified, the rule is not applied to the second and subsequent fragment packets. state [not] FILTER-STATE Specify the state as the profile for the packets to be matched. established For FILTER-STATE, you can specify multiple states from related...
Page 259
prefix LOG-STRING, specify the character to be added before log messages or you can omit this parameter. log-amount N, specify the maximum number of log entries by using a numeric value from 1 to 14294967295, or you can omit this parameter. emergency alert level...
22.1.5 Physical interface-related commands ipaddress Description This command assigns the IP addresses for Ethernets. ethernet Execute this command in the level of configuration definition mode. Syntax To set information: ipaddress {A.B.C.D/M|X:X::X:X/M} To delete information: delete ipaddress {all|A.B.C.D/M|X:X::X:X/M} Parameters A.B.C.D Specifies the internal network IPv4 address to be set. Specify the IPv4 address in dot notation.
Page 261
Range of values: 0 to 128 Deletes all interfaces. Default value when this parameter is omitted: None (this parameter cannot be omitted). Range of values: Notes In IPv4, you cannot specify 0 for the host ID. In IPv6, you cannot specify 0 for the host ID. In IPv6, you cannot specify an IPv4-compatible address 0000:0000:0000:0000:0000:XXXX:XXXX:XXXX In IPv6, you cannot specify an IPv4-mapped address...
Page 262
Description This command sets the MTU for Ethernet. ethernet Execute this command in the level of configuration definition mode. Syntax To set or change information: mtu {default|VALUE} Parameters default Applies the default interface value. Default value when this parameter is omitted: None (this parameter cannot be omitted).
Page 263
interface Description This command restarts and stops an interface. ethernet Execute this command in the level of configuration definition mode. Syntax To restart an interface: interface up To stop an interface: interface down Parameters Specifies the restarting of the interface. Default value when this parameter is omitted: None (this parameter cannot be omitted).
Page 264
arp/ndp Description This command sets whether to enable or disable the ARP and NDP of the relevant interface. ethernet Execute this command in the level of configuration definition mode. Syntax To set or change information: arp/ndp {enable|disable} Parameters enable Enables the ARP and NDP of the interface. Default value when this parameter is omitted: None (this parameter cannot be omitted).
Page 265
tcp4mss Description This command specifies the maximum segment size of TCP packet, and enables the adjustment functionality. ethernet Execute this command in the level of the configuration definition mode. Syntax To set or change information: tcp4mss {automatic|VALUE} To delete information: tcp4mss disable Parameters automatic...
22.1.6 Virtual interface-related commands bnet Description This command sets the configuration of an Ethernet bridge. bnet Move to the level of configuration mode. Syntax To set information: bnetX To delete information: delete bnetX Parameters Specifies an arbitrary-digit number to distinguish the target one from multiple Ethernet bridges.
Page 267
ipaddress Description This command assigns the IP address for an Ethernet bridge. bnet Execute this command in the level of configuration definition mode. Syntax To set information: ipaddress {A.B.C.D/M|X:X::X:X/M} To delete information: delete ipaddress {all|A.B.C.D/M|X:X::X:X/M} Parameters A.B.C.D Specifies the internal network IPv4 address to be set. Specify the IPv4 address in dot notation.
Page 268
Default value when this parameter is omitted: None (this parameter cannot be omitted). Range of values: Notes In IPv4, you cannot specify 0 for the host ID. In IPv6, you cannot specify 0 for the host ID. In IPv6, you cannot specify an IPv4-compatible address 0000:0000:0000:0000:0000:XXXX:XXXX:XXXX In IPv6, you cannot specify an IPv4-mapped address 0000:0000:0000:0000:0000:XXXX:XXXX:XXXX...
Page 269
Description This command sets the MTU for an Ethernet bridge. bnet Execute this command in the level of configuration definition mode. Syntax To set or change information: mtu {default|VALUE} Parameters default Applies the default interface value. Default value when this parameter is omitted: None (this parameter cannot be omitted).
Page 270
mac-address Description This command sets the MAC address for an Ethernet bridge. bnet Execute this command in the level of configuration definition mode. Syntax To set or change information: mac-address {automatic| X:X:X:X:X:X Parameters automatic Automatically generates the MAC address. Default value when this parameter is omitted: None (this parameter cannot be omitted).
Page 271
bind Description This command connects to an Ethernet port (physical port) or Ethernet Bridge port (logical port). bnet Execute this command in the level of configuration definition mode. Syntax To set information: bind PORT {vlan other|no-tag|TAG}|raw[ COMMENT] To delete information: delete bind PORT delete bind PORT {vlan other|no-tag|TAG}|raw delete bind all...
Page 272
Specifies a VLAN tag value. Default value when this parameter is omitted: None (this parameter cannot be omitted). Range of values: 1 to 4094 Specifies an Ethernet port as the connection target. Default value when this parameter is omitted: None (this parameter cannot be omitted). Range of values: PORT This parameter is enabled only when an Ethernet port is specified for the...
Page 273
interface Description This command restarts and stops an interface. bnet Execute this command in the level of configuration definition mode. Syntax To restart an interface: interface up To stop an interface: interface down Parameters Specifies the restarting of the interface. Default value when this parameter is omitted: None (this parameter cannot be omitted).
Page 274
arp/ndp Description This command sets whether to enable or disable the ARP and NDP of the relevant interface. bnet Execute this command in the level of configuration definition mode. Syntax To set or change information: arp/ndp {enable|disable} Parameters enable Enables the ARP and NDP of the interface. Default value when this parameter is omitted: None (this parameter cannot be omitted).
Page 275
tcp4mss Description This command specifies the maximum segment size of TCP packets, and enables the adjustment functionality. bnet Execute this command in the level of configuration definition mode. Syntax To set or change information: tcp4mss {automatic|VALUE} To delete information: tcp4mss disable Parameters automatic Automatically sets the maximum segment size based on the TCP MTU value.
22.2 Operation commands 22.2.1 Basic commands configure Description This command changes the command input mode from SP administrator mode to SP configuration mode, and starts SP configuration editing. Input mode SP administrator mode Syntax configure Parameters None Display example: SP01# configure [SP01] Notes configure...
Page 277
exit Description This command ends the current command input mode. There are the following two cases: Executing this command in SP user mode ends the SP mode. Executing this command in SP administrator mode ends the SP mode. Input mode SP user mode and SP administrator mode Syntax exit...
22.2.2 Operation management information show sp Description This command displays the operating status of an SP. Input mode SP user mode and SP administrator mode Syntax show sp Parameters None Display example: SP01> show sp Date 2011/01/12 06:20:45 ...(1) NIF: ...(2) Status: in service ...(3)
Page 279
(1) Time of command execution (2) NIF number in service out of service (3) SP status ( : during operation, : the service has stopped) (4) Whether a restart of the SP is required. If restarting the SP is not required, this item is not displayed.
Page 280
show version Description This command displays information about the firmware and hardware installed on the SP. Input mode SP user mode and SP administrator mode Syntax show version Parameters None Display example: SP01> show version Date 2011/01/12 08:08:08 ...(1) F/W: ...(2) Current: Startup Active...
Page 281
show tech-support Description This command outputs hardware and firmware status information required for technical support to a file. Input mode SP user mode and SP administrator mode Syntax show tech-support Parameters None Display example: SP01> show tech-support SP01> Notes Execution of the command takes some time because there is a large amount of information to be output.
Page 282
show interface Description This command displays Ethernet information. Input mode SP user mode and SP administrator mode Syntax show interface [INTERFACE [statistics [{detail|update INT}]]] Parameters When this parameter is omitted Displays Ethernet information for all registered interfaces. INTERFACE Displays information about the specified interface. If the specified interface is in the Link Down status, no information is displayed.
Page 283
To display detailed statistics on the interface packets: SP01> show interface bnet0 statistics detail statistics: Kernel Interface table Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg bnet0 1500 0 BMRU RX: bytes packets errors dropped overrun mcast 4145 TX: bytes packets...
Page 284
show service Description active This command displays the support status for each protocol service as inactive Input mode SP user mode and SP administrator mode Syntax show service Parameters None Display example: SP01> show service Service TELNET is active Service is active Service is active...
22.2.3 File-related commands display conf Description Displays configuration information managed by the SP. addrunning A configuration that is being edited and for which the command has not been executed is not displayed. Input mode SP user mode and SP administrator mode Syntax display conf [CONF-NAME...
Page 287
show spfile Description This command lists the files stored in the dump file storage area of the SP. Input mode SP user mode and SP administrator mode Syntax show spfile [{dumpfile|coredump|syslog}] Parameters When this parameter is omitted: The command displays a list of all files held in the SP. dumpfile Displays the dump files stored in the SP.
Page 288
erase spfile Description This command deletes the files stored in the dump file storage area of the SP. Input mode SP user mode and SP administrator mode Syntax erase spfile {dumpfile|coredump|syslog} {all|FILENAME} Parameters dumpfile Deletes the dump files stored in the SP. coredump Deletes the core dump files stored in the SP.
Page 289
update Description This command acquires a load module file. Input mode SP administrator mode Syntax update Parameters Specifies the source from which a load module file is acquired. The specification method is as follows: tftp:/// ftp://[[:]@]// Display example: SP01# update ftp://[email protected]/lm/NXSC0312.1279 [update] Using /dev/sda1 for update importing file ftp://[email protected]/lm/NXSC0312.1279 Password:...
Page 290
export dump-file Description This command collects analysis information files (dump files, core dump files, system log files, and files in which the SP device information is stored) stored in the SP, and transfers them to the specified destination. Input mode SP administrator mode Syntax export dump-file...
Page 291
export conf Description This command transfers the startup configuration file to an external device such as an FTP server outside of the SP. Input mode SP user mode and SP administrator mode Syntax export conf start Parameters Specifies information related to the transfer destination. The specification method is as follows: tftp:///...
Page 292
import conf Description This command transfers the startup configuration file from an external device such as an FTP server outside of the SP Input mode SP user mode and SP administrator mode Syntax import conf start Parameters Specifies information related to the transfer source. The specification method is as follows: tftp:///...
22.2.4 Paging settings pager Description This command sets whether to enable or disable paging. Input mode SP user mode and SP administrator mode Syntax pager [{enable|disable}] Parameters When this parameter is omitted: The command enables paging. enable Enables paging. disable Disables paging.
22.2.5 System information show system processes Description This command displays the status of processes currently being executed. Input mode SP administrator mode Syntax show system processes LEVEL Parameters When this parameter is omitted: This command displays system information. LEVEL brief Displays minimum information about the system.
Page 295
Swap: 0k total, 0k used, 0k free, 85640k cached ...(5) PID USER VIRT SHR S %CPU %MEM TIME+ COMMAND 3261 root 2824 1048 836 R 0:00.01 top ...(6) SP01# show system processes summary top - 16:38:07 up 17 min, 1 user, load average: 0.10, 0.08, 0.03 Tasks: 43 total,...
Page 296
show system virtual-memory Description This command displays the amount of free memory and used memory. Input mode SP administrator mode Syntax show system virtual-memory Parameters None Display example: SP01# show system virtual-memory slabinfo - version: 2.1 # name : tunables ...
22.2.6 Network-related commands show arp Description This command displays the ARP cache of the system. Input mode SP user mode and SP administrator mode Syntax show arp Parameters None Display example: SP01> show arp 172.32.202.2 dev bnet0 lladdr 00:12:e2:20:16:00 nud reachable (uid: 0x1000001e) ...(1) SP01>...
Page 298
show ndp Description This command displays NDP information. Input mode SP user mode and SP administrator mode Syntax show ndp Parameters None Display example: SP01> show ndp 192:168:30::1 dev bnet11 lladdr 00:00:e1:29:be:12 nud permanent ...(1) SP01> (1) IP address, device name, MAC address, and status Notes None...
Page 299
flush Description This command deletes ARP and NDP information given by the system. Input mode SP user mode and SP administrator mode Syntax flush {arp|ndp} Parameters Deletes ARP information created by the system. Deletes NDP information created by the system. Display example: SP01>...
Page 300
show system connections Description This command displays the status of network connections, route tables, interfaces. Input mode SP user mode and SP administrator mode Syntax show system connections [{ipv4|ipv6|sctp|unix}] Parameters When this parameter is omitted: The command displays all connections. ipv4 Displays only connections using IPv4 addresses.
Page 301
(1) Information about the IP address connection (2) VRF-ID, protocol, input queue, output queue, local address, external address, and state (3) Information about the UNIX connection (4) Protocol, number of effective users, route flag, socket type, state, node number, and socket path Notes None...
Page 302
show ip route Description This command displays IPv4 address routes. Input mode SP user mode and SP administrator mode Syntax [{connected|dep|kernel|static|A.B.C.D|A.B.C.D/M|supernets-only}] Parameters When this parameter is omitted: The command displays all routes. connected Displays the directly connected routes. Displays the routes acquired from DEP. kernel Displays the routes added by external modules.
Page 303
show ipv6 route Description This command displays IPv6 address routes. Input mode SP user mode and SP administrator mode Syntax show ipv6 route [connected|dep|kernel|static|X:X::X:X|X:X::X:X/M] Parameters When this parameter is omitted: The command displays all routes. connected Displays the directly connected routes. Displays the routes acquired from DEP.
Page 304
traceroute Description This command displays the route (the route of gateways that have been passed through and the response time between the gateways) over which UDP messages are sent to the destination host. Input mode SP user mode and SP administrator mode Syntax traceroute [from A.B.C.D]...
Page 305
traceroute6 Description This command displays the route (the route of gateways that have been passed through and the response time between the gateways) over which UDP messages are sent to the destination host. (For IPv6 only) Input mode SP user mode and SP administrator mode Syntax traceroute6 [from X:X::X:X]...
Page 306
ping Description This command sends ICMP ECHO_REQUEST packets to a host on the network. Input mode SP user mode and SP administrator mode Syntax ping [count INT] [maxhop INT] [from A.B.C.D] [datasize INT] A.B.C.D ping [count INT] [maxhop INT] [from X] [datasize INT] Parameters Specifies the source IP address.
Page 307
Display example: SP01> ping 192.168.100.100 PING 192.168.100.100 (192.168.100.100): 56 data bytes 64 bytes from 192.168.100.100: icmp_seq=0 ttl=64 time=1.9 ms 64 bytes from 192.168.100.100: icmp_seq=1 ttl=64 time=1.6 ms 64 bytes from 192.168.100.100: icmp_seq=2 ttl=64 time=1.6 ms 64 bytes from 192.168.100.100: icmp_seq=3 ttl=64 time=1.6 ms --- 192.168.100.100 ping statistics --- 4 packets transmitted, 4 received, 0% loss, time 2999ms rtt min/avg/max/mdev = 1.624/1.639/1.673/0.045 ms...
Page 308
ping6 Description This command sends ICMP ECHO_REQUEST packets to a host on the network. (For IPv6 only) Input mode SP user mode and SP administrator mode Syntax ping6 [count INT] [maxhop INT] [from X:X::X:X] [datasize INT] X:X::X:X Parameters Specifies the destination IPv6 address. count Sends packets for the number of times specified for INT, and then finishes the processing.
Page 309
show traffic Description This command provides a dump of network traffic. Input mode SP user mode and SP administrator mode Syntax show traffic [record FILENAME] [count INT] [verbose INT] [proto INTERFACE PROTO] [without PROTO] [pcap FILTER] [pager] [background] show traffic file [verbose INT] [proto PROTO] [without PROTO] [pcap FILENAME FILTER]...
Page 311
display traffic-file Description This command displays the list of network traffic capture files. Input mode SP user mode and SP administrator mode Syntax display traffic-file Parameters None Display example: SP01> display traffic-file tra_bnet0 SP01> Notes None...
Page 312
export traffic-file Description This command exports a traffic file. Input mode SP user mode and SP administrator mode Syntax export traffic-file FILENAME URL Parameters FILENAME Specifies the name of a file to be exported. Specifies information about the export destination. The specification method is as follows: tftp:///...
Page 313
import traffic-file Description This command imports a traffic file. Input mode SP user mode and SP administrator mode Syntax import traffic-file [FILENAME] Parameters Specifies information about the import source. FILENAME Specifies a new name of the imported file. When this parameter is omitted: The command imports the file by using the file name of the import source.
Page 314
delete traffic-file Description This command deletes a traffic file. Input mode SP user mode and SP administrator mode Syntax delete traffic-file FILENAME Parameters FILENAME Specifies the name of a file to be deleted. Display example: SP01> delete traffic-file tra_bnet0 SP01> Notes None...
22.2.7 Log information show log-session Description This command shows the log entries recorded by the SP. Input mode SP user mode and SP administrator mode Syntax show log-session {system|SESSION} [{tail COUNT|follow}] Parameters system Displays the recorded kernel log entries. SESSION Displays only log entries of the specified session.
Page 316
flush log-session Description This command erases the log entries in the memory and recorded by the SP. Input mode SP user mode and SP administrator mode Syntax flush log-session SESSION Parameters SESSION Specify the name of the session to be deleted. Display example: sp01>flush log-session session1 sp01>...
Page 317
save log-session Description This command outputs the log entries recorded by the SP to a file. Input mode SP user mode and SP administrator mode Syntax save log-session Parameters None Display example: sp01> save log-session sp01> Notes None...
Page 318
export log-session Description This command exports the locally-recorded log entries. Input mode SP user mode and SP administrator mode Syntax export log-session SESSION URL Parameters SESSION Specifies the session name. Specifies information about the export destination. The specification method is as follows: tftp:///...
22.2.8 Status-related commands clear counters Description This command clears the Ethernet statistics counters to zero. Input mode SP user mode and SP administrator mode Syntax clear counters [INTERFACE] Parameters INTERFACE Specifies the interface whose statistics counters are to be cleared. The specifiable interface is bnetXX spiXX...
Page 320
show system statistics Description This command displays statistics about protocols. Input mode SP user mode and SP administrator mode Syntax show system statistics [PROTO] [non-zero] Parameters PROTO Specifies the protocol. When this parameter is omitted Displays statistics about inet and inet6. The specifiable protocols are as follows: Inet (ipv4, icmpv4, tcpv4, udpv4, and ipsecv4), inet6 (ipv6, icmpv6, tcpv6, udpv6, and ipsecv6), ipv4, ipv6, icmpv4, icmpv6, tcpv4, tcpv6, udpv4, udpv6, ipsecv4,...
Page 321
96 resets sent Udp: •••(24) 0 packets received •••(25) 16 packets to unknown port received. •••(26) 0 packet receive errors •••(27) 16 packets sent •••(28) TcpExt: •••(29) ArpFilter: 0 •••(30) 2 TCP sockets finished time wait in fast timer •••(31) 15 delayed acks sent •••(32) 19 packets directly queued to recvmsg prequeue.
Page 323
(9) Number of ICMP messages that failed to be received (10) Number of destination unreachables that failed to be received (11) Total number of ICMP messages sent (12) Number of ICMP messages that failed to be sent (13) Number of destination unreachables that failed to be sent (14) TCP protocol statistics (15) Total number of active openings (16) Total number of passive openings...
Page 324
(48) Number of TCP partial undos (49) Number of TCP DSACK undos (50) Number of TCP loss undos (51) Number of TCP losses (52) Number of lost TCP retransmissions (53) Number of TCP Reno failures (54) Number of TCP SACK failures (55) Number of TCP loss failures (56) Number of TCP fast retransmissions (57) Number of TCP forward retransmissions...
Page 325
(86) Number of outgoing IPv6 packets that were successfully transferred to the lower-layer protocols (such as Ethernet). (87) Number of IPv6 packets to which send request was made (88) Number of IPv6 packets that were discarded before being sent (89) Number of outgoing IPv6 packets discarded because there was no route to the destination (90) Number of incoming IPv6 packets that failed to reassemble fragments due to timeout (91) Number of incoming IPv6 packets that needed fragments to be reassembled...
Page 326
(123) Number of ICMPv6 Neighbor Solicit messages sent (124) Number of ICMPv6 Neighbor Advertisement messages sent (125) Number of ICMPv6 Redirect messages sent (126) Number of ICMPv6 Multicast Listener Report messages sent (127) Number of ICMPv6 Multicast Listener Done messages sent (128) IPv6 UDP protocol statistics (129) Total number of UDP packets received over IPv6 (130) Number of UDP packets for which there was no destination port number that...
Page 327
show system users Description This command lists the users currently logged in to the SP. Input mode SP user mode and SP administrator mode Syntax show system users Parameters None Display example: SP01> show system users USER IDLE TIME HOST user ttyp0 00:00...
22.2.9 Password settings password Description This command changes a password. Input mode SP user mode and SP administrator mode Syntax password [USERLOGIN] Parameters When this parameter is omitted: The command specifies the account name of the logged-in user. USERLOGIN Specify the name of the user account whose password is to be changed. Display example: SP01# password operator passwd: no record of operator in /etc/shadow, using /etc/passwd...
22.2.10 File operation Description This command changes the directory. Input mode SP administrator mode Syntax cd [] Parameters : Specifies the destination directory. When this parameter is omitted, the directory changes to the home directory of the currently logged-in user. Display example: # cd /usr/var/log Notes...
Page 330
Continuous command execution using semicolons ( ), OR operators ( ), and AND && operators ( ) is not supported. The following table shows the directories that can be specified for . Directories that can be specified for Directory Remarks /usr/home /usr/home/advanced...
Page 331
Description This command shows the path to the present working directory. Input mode SP administrator mode Syntax Parameters None Display example: # cd /usr/var/core # pwd /usr/var/core Notes Continuous command execution using semicolons ( ), OR operators ( ), and AND &&...
Page 332
Description This command shows the files and directories that exist in the current directory. Input mode SP administrator mode Syntax ls [
Page 333
Model name Symbol Code Grave accent mark 0x60 To enter a question mark ( : 0x3F), press Ctrl+V, and then type the question mark. Continuous command execution using semicolons ( ), OR operators ( ), and AND && operators ( ) is not supported.
Page 334
Description This command shows the contents of a specified file. Input mode SP administrator mode Syntax Parameters : Specifies the name of a file to be displayed. Display example: # cat test.txt test Notes Command line completion using wildcards, regular expressions, and tab input is not supported to specify .
Page 335
Files that can be specified for Files Remarks /usr/home /usr/home/advanced Files below Note that cannot be specified. /usr/var/core Files below /usr/var/dump Files below /usr/var/log Files below /var/log Files below /mnt/usb0 Files below /mnt/usb1 Files below...
Page 336
Description This command copies the specified file. Input mode SP administrator mode Syntax cp [
Page 337
Model name Symbol Code Semicolon 0x3B Backslash ¥ 0x5C Grave accent mark 0x60 To enter a question mark ( : 0x3F), press Ctrl+V, and then type the question mark. Continuous command execution using semicolons ( ), OR operators ( ), and AND &&...
Page 338
Description This command moves or renames a specified file. Input mode SP administrator mode Syntax mv [
Page 339
Model name Symbol Code Backslash ¥ 0x5C Grave accent mark 0x60 To enter a question mark ( : 0x3F), press Ctrl+V, and then type the question mark. Continuous command execution using semicolons ( ), OR operators ( ), and AND &&...
Page 340
Description This command deletes a specified file. Input mode SP administrator mode Syntax rm [
Page 341
Model name Symbol Code Semicolon 0x3B Backslash ¥ 0x5C Grave accent mark 0x60 To enter a question mark ( : 0x3F), press Ctrl+V, and then type the question mark. Continuous command execution using semicolons ( ), OR operators ( ), and AND &&...
Page 342
mkdir Description This command creates a new directory. Input mode SP administrator mode Syntax mkdir [
Page 343
Model name Symbol Code Grave accent mark 0x60 To enter a question mark ( : 0x3F), press Ctrl+V, and then type the question mark. Continuous command execution using semicolons ( ), OR operators ( ), and AND && operators ( ) is not supported.
Page 344
rmdir Description This command deletes a specified empty directory. Input mode SP administrator mode Syntax rmdir Parameters : Specifies the name of the directory to be deleted. Display example: # ls test1 test2 # rmdir test1 # ls test2 Notes Command line completion using wildcards, regular expressions, and tab input is not supported to specify .
Page 345
&& operators ( ) is not supported. The following table shows the directories that can be specified for . Directories that can be specified for Directory Remarks /usr/home /usr/home/advanced Directories below Note that cannot be specified. /mnt/usb0 Directories below /mnt/usb1 Directories below...
22.2.11 Utilities less Description This command displays one page of the content of the specified file. Input mode SP administrator mode Syntax less [
Page 347
Model name Symbol Code Single quotation mark 0x27 Left parenthesis 0x28 Right parenthesis 0x29 Semicolon 0x3B Backslash ¥ 0x5C Grave accent mark 0x60 To enter a question mark ( : 0x3F), press Ctrl+V, and then type the question mark. Continuous command execution using semicolons ( ), OR operators ( ), and AND &&...
Page 348
grep Description This command retrieves the specified file and outputs lines containing the specified pattern. Input mode SP administrator mode Syntax grep [
Page 349
Model name Symbol Code Single quotation mark 0x27 Left parenthesis 0x28 Right parenthesis 0x29 Semicolon 0x3B Backslash ¥ 0x5C Grave accent mark 0x60 To enter a question mark ( : 0x3F), press Ctrl+V, and then type the question mark. Continuous command execution using semicolons ( ), OR operators ( ), and AND &&...
Page 350
sort Description This command sorts all lines in the specified file, and displays the results. Input mode SP administrator mode Syntax sort [
Page 351
Model name Symbol Code Right parenthesis 0x29 Semicolon 0x3B Backslash ¥ 0x5C Grave accent mark 0x60 To enter a question mark ( : 0x3F), press Ctrl+V, and then type the question mark. Continuous command execution using semicolons ( ), OR operators ( ), and AND &&...
Page 352
copy lm Description This command copies a load module file from the load module side (startup side or backup side) specified by the parameter to the other side. Input mode SP administrator mode Syntax copy lm Parameters : Specifies the load module side of the copy source. - startup : Backs up load module files Copies from the startup side to the backup side.
Page 353
Notes: show version Before executing this command, use the command to check the Current information displayed for the line (boot side) and the firmware version of the startup and backup sides. startup backup If the parameter is entered incorrectly, the SP might not be able to start up.
22.2.12 Resource Information Description This command displays the amount of disk space used in a directory. Input mode SP administrator mode Syntax du [
Page 355
Model name Symbol Code Ampersand & 0x26 Single quotation mark 0x27 Left parenthesis 0x28 Right parenthesis 0x29 Semicolon 0x3B Backslash ¥ 0x5C Grave accent mark 0x60 To enter a question mark ( : 0x3F), press Ctrl+V, and then type the question mark. Continuous command execution using semicolons ( ), OR operators ( ), and AND...
Page 356
Description This command displays the amount of disk space used and available on each file system. Input mode SP administrator mode Syntax df [
Page 357
Model name Symbol Code Single quotation mark 0x27 Left parenthesis 0x28 Right parenthesis 0x29 Semicolon 0x3B Backslash ¥ 0x5C Grave accent mark 0x60 To enter a question mark ( : 0x3F), press Ctrl+V, and then type the question mark. Continuous command execution using semicolons ( ), OR operators ( ), and AND &&...
22.2.13 Output-destination change function, command chaining function Output-destination change function This function allows you to change the output destination of commands that display their show-related output in a console, such as the command, from a console to a file. > >>...
Page 359
This example uses a simple text file to explain how to chain commands. Assume that the above text file exists. Display example: # cat test.txt | grep 0 | sort | less <- This indicates that the pager has ended. The output of the previous command is handled and processed as the input of the next command.
22.3 Syslog 22.3.1 SP operation information The following table lists and describes the log messages for SP operation information. Table 22-1 SP operation information Priority Event Additional Message text Output timing location information Description initialized. INFO 20012010 This message is output when the SP application is started.
Page 361
SP changed the state to INFO 23024011 This message is output . when the status of the SP has changed. Changed status: in service The SP status changed to . out of service [Explanation of the message text] : Device status of the SP in service out of service [Action]...
Page 362
Low temperature. Check WARNING SP 22014311 This message is output room temperature. when the temperature around the CPU of the SP has reached 0° C or less. The hardware temperature dropped to 0° C and a low temperature warning was detected. [Explanation of the message text] None.
Page 363
Recovered from a low INFO 22014312 This message is output temperature. when the temperature (WARNING around the SP CPU has recovery) reached 0° C or less, and then it has risen to 5° C or The low temperature warning was cleared because the more.
Page 365
20023223 SP initial information failed. 20023224 20023225 20023226 20023227 20023228 23064711 23064712 23064713 23064714 23064715 An attempt to set the initial information failed. [Explanation of the message text] None [Action] Collect error information according to the method for collecting error information for the corresponding SP when the error occurred, and then send it to maintenance personnel.
Page 366
Login refused for too INFO 26014513 This message is output many users logged in. when an attempt is made to log in to the SP from BCU by using telnet beyond the maximum login number (20 An attempt to log in to the SP was made, but connection was not sessions), or when an permitted because the maximum allowed number of login users attempt is made to directly...
Page 367
The startup NOTICE 20013711 This message is output configuration file is when a configuration file not found or broken. permission error occurred or the startup configuration could not be read There was no startup configuration file or it could not be read. successfully because there was no configuration file.
Page 368
Firmware to NOTICE 25014714 This command is output if dump.[ dump files could not be 25014715 output for either of the following reason when the 25014716 dump nif command is executed from the BCU or dump nif when the Dump collection failed.
23.1 Notes If you move from CSU administrator mode or user mode to SP administrator mode or user mode, or execute a command by logging in to the SP, you can use only one user to perform operations. If commands are executed at the same time from multiple users or multiple interfaces, the commands might not be executed properly.
This manual provides instructions for how to use the WAN acceleration functionality for Hitachi WAN Accelerator. Intended readers This manual is intended for system administrators who configure and operate a network system that uses Hitachi WAN Accelerator. Readers must have an understanding of the following: The basics of network system management...
Overview This chapter provides an overview of the WAN acceleration functionality. 24.1 WAN acceleration overview 24.2 WAN acceleration functionality specifications...
24.1 WAN acceleration overview Long-delays and a high packet-loss rate are characteristic of WANs. Especially in TCP communication, confirmation responses and congestion control for guaranteeing reliability are affected, which sometimes results in a failure to satisfy expected packet forwarding performance. The service processor functionality is installed on both ends of a WAN on the TCP communication path and uses its own TCP to communicate with each other.
24.2 WAN acceleration functionality specifications The following table shows the specifications of the WAN acceleration functionality Table 24-1 WAN acceleration functionality specifications Item Functionality specification Remarks Maximum total value of effective 1 Gbps/SMC bandwidth on the WAN side Maximum effective bandwidth for 100 Mbps/session each TCP session on the WAN side...
Configuration Guide This chapter provides examples of configuration settings for the base software and the SP functionality for using the WAN acceleration functionality. 25.1 Configuration Guide 25.2 Examples of configuration settings...
25.1 Configuration Guide This section describes the base software and the SP. For details about the base software, see Part 2: Base software Configuration Guide and Part 4: Basic Software NIFs with an SP. 25.1.1 Configuration guide for the base software (1) Policy-based switching group (a) Route selection for policy-based switching group (i) Monitoring results and priority for forwarding availability...
Page 377
Table 25-1 List of configuration commands Specified by configuration Default operation Operation description Permit is specified. Normal forwarding Frames to be forwarded are forwarded by using Layer 2 forwarding according to the MAC address table. deny is specified. Discard Frames to be forwarded are discarded. accelerate-bypass Normal forwarding Frames to be forwarded are forwarded by...
Page 378
as down. (ii) Specifying default operation Default operation refers to operation performed when all the routes registered on policy-based routing list information are not available for forwarding, or when no route is registered. Default operation can be specified by using the configuration command default .
WAN side respectively, and a NIF equipped with an SP is installed on NIF 2. For user traffic, VLAN 200 is used. For control traffic of a NIF equipped with an SP, VLAN 2222 is used. Tokyo New York 10.1/16 10.3/16 Hitachi WAN Hitachi WAN Server Client Accelerator Accelerator Router...
VLAN 2222 is used for control traffic of a NIF equipped with an SP. (For details about the configuration, see 25.2.7 Configuration for AX#1 devices and 25.2.8 Configuration for SP#1.) Tokyo New York 10.1/16 10.3/16 Hitachi WAN Server Client Accelerator Router Router 1GbE...
Reference Guide This chapter describes configuration commands, operation commands, and syslog for the WAN acceleration functionality. 26.1 Configuration commands 26.2 Operation commands 26.3 syslog...
26.1 Configuration commands 26.1.1 WAN acceleration functionality command The following table shows the list of configuration commands. Table 26-1 List of configuration commands Configuration command Description Level-1 Level-2 Level-3 accelerate Moves to the level in which settings for WAN acceleration processing is performed.
Page 388
Configuration command Description Level-1 Level-2 Level-3 failure-action Sets the operation in case a failure is detected in the partner WAN acceleration device. replace-smac Performs settings to update SMAC of a sending packet subject to WAN acceleration processing. share-sp Performs settings for communication between SPs subject to WAN acceleration processing.
Page 389
The following table shows when configuration commands are enabled. Table 26-2 TCP session status and cases in which configuration commands are enabled. TCP session Configuration command # status SYN-SENT SYN-RECEIVED ESTABLISHED FIN-WAIT-1 FIN-WAIT-2 CLOSE-WAIT O O Y CLOSING LAST-ACK TIME-WAIT RST-RECEIVED CLOSED Legend: N: Not enabled (values before setting is used)
Page 390
failure-action compress-port replace-smac bandwidth-grp share-sp, delete share-sp algorithm max-session accelerate-tcp-option log-threshold Table 26-3 TCP server port number and default operation TCP port number Service Operation Numbers other than WAN acceleration processing those shown below Echo Protocol Pass-through Secure Shell (SSH) Pass-through Telnet protocol Pass-through...
Page 391
Table 26-5 Default values of TCP session monitoring timer TCP session status Meaning LAN side timer side value timer (seconds) value (second open A session is in the process of being established.(TCP session status CLOSED→ESTABLISHED) rst-closing An RST packet is received while a session is being established.
Page 392
Table 26-7 Other default values Default item Default value Bandwidth assigned to a bandwidth-grp 100 Mbps The option number that indicates WAN acceleration processing, which is set to an option in a TCP packet. Table 26-8 List of error messages Command Error message Meaning...
Page 393
Command Error message Meaning accelerate- tcp-option number for Specify <6, 7, 9 - 255> for the TCP Accelerate must be tcp-option option number. equal to <6, 7, 9-255>. log- threshold rtt minimum value must , set a be less than rtt value smaller than the maximum RTT maximum value value.
Page 394
accelerate (level-1) Description Moves to the layer in which settings for WAN acceleration processing is performed. Input mode SP configuration mode Syntax accelerate Parameters None Notes None...
Page 395
accelerate (level-2) Description Enables and disables WAN acceleration processing. Input mode SP configuration mode Syntax accelerate {enable | disable} Parameters enable rule port If a new TCP session meets the condition of the command, command, tcp-option command, performs packet processing by operation set by the rule command.
Page 396
interface Description Specifies an interface for the base software, which sends and receives packets in a session subject to WAN acceleration processing, and moves to the level in which it can be specified. Input mode SP configuration mode Syntax interface ...
Page 397
rule Description Specifies conditions for the sessions subject to WAN acceleration processing and the sessions not subject to WAN acceleration processing. Input mode SP configuration mode Syntax rule [] [vlan ] from {/ | any} {/...
Page 398
{/ | any} Specifies an IPv4 address and subnet length of the WAN side as conditions. 1. Default value This parameter cannot be omitted. 2. Specifiable value range An IP address on the WAN side 0.0.0.0-255.255.255.255 Subnet length 0-32...
Page 399
Data compression is not performed. 2. Specifiable value range compress or omitted. bandwidth-grp Controls WAN bandwidth by specifying the number set by the command. 1. Default value wan-speed WAN bandwidth is controlled by the value set by the command.
Page 400
delete Description Deletes the already set rules. Input mode SP configuration mode Syntax delete rule { all | { | - } [...] } Parameters Deletes all rules. rule Specifies the list number of the command.
Page 401
port Description Changes the default value (Table 26-3) of the port number on the TCP server side subject to WAN acceleration processing. Input mode SP configuration mode Syntax port {accelerate | passthrough} {{|-}[...]} port {accelerate | passthrough} default Parameters accelerate | passthrough Specifies operation after the change.
Page 402
compress-port Description Sets rules for compress or non-compress at the L4 port number DPORT (Destination PORT) of a SYN packet on the LAN side of a session subject to WAN acceleration processing.TCP header and what comes after that are to be compressed. For the initial setting, compression or non-compression is set according to the default operation of the TCP port numbers in Table 26-3.
Page 403
Notes accelerate enable During , the setting is enabled. What has been set by executing this command takes effect in a TCP session newly connected (a SYN packet is received) after the setup. rule The following table shows compression operation by the command and this command.
Page 404
tcp-option Description Changes the default value, shown in Table 26-4, of the TCP option number subject to WAN acceleration processing. Input mode SP configuration mode Syntax tcp-option { accelerate | passthrough } {
Page 405
Notes If the functionality of the MD5 Signature Option (option number 19) and the TCP Authentication Option (option number 29) is set as the target of WAN acceleration processing, functionality of TCP options might not operate properly. If SACK (option number 5) is set as the target of WAN acceleration processing, the corresponding SP responds to it.
Page 406
timeout Description Changes the default value, in Table 26-5, of monitoring timer for a session subject to WAN acceleration processing. Input mode SP configuration mode Syntax timeout {lan | wan} {open | rst-closing | estab | close-rcvwait | close-sndwait | close-ackfin | close-closing} ...
Page 407
default Deletes the configuration and resets monitoring timer to the default value. For details of each default value, see Table 26-5. Notes None...
Page 408
wan-speed Description Sets an upper limit for bandwidth that sends a packet of a session subject to WAN acceleration processing to an interface on the WAN side. Input mode SP configuration mode Syntax wan-speed { { K | M }} wan-speed default Parameters ...
Page 409
bandwidth-grp Description Sets bandwidth used by a single or multiple SPs for each bandwidth-grp. Input mode SP configuration mode Syntax bandwidth-grp { M | default } Parameters Specifies the assigned number to aggregate multiple sessions into one group. 1.
Page 410
failure-action Description Configures operation for a case in which a failure is detected in the partner WAN acceleration device. Input mode SP configuration mode Syntax failure-action {rst | passthrough | default} Parameters {rst | passthrough | default} Specifies operation. 1. Default value This parameter cannot be omitted.
Page 411
replace-smac Description In the L2 mode, sets operation to update SMAC of a packet, which passes through an SP, to SMAC of the SP. Input mode SP configuration mode Syntax replace-smac { enable | disable } Parameters { enable | disable } Specifies operation.
Page 412
share-sp Description Performs communication settings for exchanging session information between SPs in the WAN acceleration device. Input mode SP configuration mode Syntax share-sp Parameters peer Specifies an IP address of the partner SP (An IP address set to the command of port the SP...
Page 413
delete share-sp Description Deletes communication settings for exchanging session information between SPs in the WAN acceleration device. Input mode SP configuration mode Syntax delete share-sp Parameters share-sp Specifies an IP address of an SP specified by the command.
Page 414
algorithm Description Switches the mode of congestion control for a session subject to WAN acceleration processing. Input mode SP configuration mode Syntax algorithm { slow | default } Parameters { slow | default } Specifies operation. 1. Default value This parameter cannot be omitted. 2.
Page 415
max-session Description Sets the maximum number of sessions available for WAN acceleration processing. Input mode SP configuration mode Syntax max-session { | default } Parameters | default } Specifies the maximum number of sessions available for WAN acceleration processing.
Page 416
accelerate-tcp-option Description Sets the option number for WAN acceleration processing, which is set to an option in a TCP packet. Input mode SP configuration mode Syntax accelerate-tcp-option {
Page 417
log-threshold Description When specified conditions are satisfied, sets threshold values for log output. Input mode SP configuration mode Syntax log-threshold { lan | wan } { rtt_min { | default }} log-threshold { lan | wan } { rtt_max { ...
Page 418
2. Specifiable value range 0-2000 (milliseconds) default Discards what has been set and resets to the following default values. When is specified: 10 (milliseconds) When is specified: 500 (milliseconds) { loss { < > | default }} loss rate threshold value In cases where the packet loss rate >...
Page 419
tcp4mss Description Specifies the maximum segment size of a TCP packet, and enables the adjustment functionality. The command is executed on the bnet layer of the configuration mode and on an interface subject to WAN acceleration processing. Syntax To set or change information tcp4mss VALUE To delete information tcp4mss disable...
26.1.2 Configuration command reference for the base software default (policy-switch-list) Description Specifies the default operation for policy-based switching. The default operation refers to the operation for a packet that cannot be forwarded by any of the output destination interfaces. There is only one default operation that can be set to the policy-based switching list information.
Page 421
default (policy-list) Description Specifies the default operation for policy-based routing. The default operation refers to operation for a packet that cannot be forwarded by any of the policy-based routing routes. There is only one default operation that can be set to the policy-based routing list information.
26.2 Operation commands 26.2.1 WAN acceleration functionality command The tables below show a list of operation commands. Table 26-11 List of operation commands Command name Description show accelerate statistics Displays statistics for WAN acceleration processing. (Total of all corresponding SPs) clear accelerate statistics Clears statistics for WAN acceleration processing.
Page 423
show accelerate statistics Description clear Displays a total value from the startup of an SP or from the execution of the accelerate statistics command to the execution of this command. Input mode SP user mode and SP administrator mode Syntax show accelerate statistics [ detail ] Parameters None...
Page 424
Meaning create req : Total number of sessions required to be generated created : Number of sessions established after the successful three-way handshake closed : Total number of sessions deleted : Number of sessions normally disconnected by FIN unsupport : Number of sessions forcibly disconnected by being determined as pass-through due to assignment of an unsupported option failure : Number of sessions forcibly disconnected by being determined as...
Page 425
TX frag pkts (26) : Number of fragment packets sent to the LAN side RX frag pkts (27) : Number of fragment packets received from the LAN side TX sack pkts (28) : Number of sent SACK/NACK packets on the LAN side RX sack pkts (29) : Number of received SACK/NACK packets on the LAN side...
Page 426
created 452676452342346 5634536 session over : 452676452 unsupport 5634 port 45267 failure 452676452342 timeout 5634534 force 4526764 syn data 56345 syn ack data : 4526764 (10) ESTABLISH (11) unsupport 452676 failure 5634536 452676452 timeout 5634 (12) (13) force 56345 (14) (15) CLOSE (16)
Page 427
failure : Number of times a session is determined as pass-through due to a failure in the partner device at OPEN : Number of sessions forcibly disconnected by RST at OPEN timeout : Number of sessions forcibly disconnected due to internal timeout at OPEN force : Number of sessions forcibly disconnected by a command at OPEN syn data...
Page 428
clear accelerate statistics Description Clears statistics for WAN acceleration processing. (Total of all corresponding SPs) Input mode SP administrator mode Syntax clear accelerate statistics Parameters None Notes None Example SP02# clear accelerate statistics SP02#...
Page 429
show accelerate sessions Description Displays session information and statistics for WAN acceleration processing. (Total for each session from its generation to the execution of this command) Input mode SP user mode and SP administrator mode Syntax show accelerate sessions [list | detail | detail concat] Parameters None Displays the number of TCP sessions subject to WAN acceleration processing.
Page 430
SP02# show accelerate sessions list no-group send bandwidth:600000 kbps group01 send bandwidth:200000 kbps group20 send bandwidth:40000 kbps Total send bandwidth:1000000 kbps Index:35 VLAN:- LAN:192.168.0.1[1024] group01:10.0.0.1[2048] Index:525 VLAN:20 LAN:192.168.20.1[1048] group20:10.0.20.1[2049] Meaning no-group send bandwidth : Bandwidth for which a bandwidth-grp is not registered (Send bandwidth for TCP data) If the value of bandwidth is 0, it is not displayed.
Page 432
Bandwidth (11) : Sending TCP data bandwidth available for the corresponding session on the WAN side (in kbps) (12) : MSS value for the corresponding session during a three-way handshake L-RTT (13) : INIT RTT on the LAN side W-RTT (14) : INIT RTT on the WAN side L-Loss total...
Page 433
NACK on the WAN side RX sack (39) : Number of received SACK on the LAN side and number of received NACK on the WAN side Display no group send bandwidth : A display name and a numeric value are separated by a colon (:) with no space between them.
Page 434
L-RTT (13) : Left-aligned, no padding, decimal, maximum 10 digits W-RTT (14) : Left-aligned, no padding, decimal, maximum 10 digits L-Loss total (15) : 0.00000-100.00000, left-aligned, no padding, decimal, unit: % W-Loss total (16) : 0.00000-100.00000, left-aligned, no padding, decimal, unit: % L-Loss max (17)
Page 436
clear accelerate sessions Description Discards all the session information of the corresponding SP subject to WAN acceleration processing. (Sessions already started are handled as pass-through.) Input mode SP administrator mode Syntax clear accelerate sessions Parameters None Notes Depending on the status of a TCP session, the session might continue by being saved after retransmission, or forcibly disconnected due to abnormal sequence or timeout.
Page 437
show accelerate history Description Displays the deleted session information. Input mode SP user mode and SP administrator mode Syntax show accelerate history Parameters 1-1000 Notes Displays information for the number of deleted sessions, starting from the session with the latest deletion.
Page 438
existence of data in SYN/ACK FRAGMENT : Disconnected by being determined as pass-through due to receiving a fragment packet Display Delete time : MM/DD (MM: 01-12, DD: 01-31) HH:MM:SS.DDD (HH: 00-23, MM: 00-59, SS: 00-59, DDD: 000-999) cause : Normal, RST, Time Out, Failure, Command UNSUPPORT, MISMATCH, SYN/SYNACK, FRAGMENT...
Page 439
clear accelerate history Description Deletes all deletion history of a session subject to WAN acceleration processing. (History show accelerate history information shown by the command) Input mode SP administrator mode Syntax clear accelerate history Parameters None Notes None Example SP02# clear accelerate history SP02#...
Page 440
show accelerate bandwidth-grp Description Displays configuration information for bandwidth-grp. Input mode SP user mode and SP administrator mode Syntax show accelerate bandwidth-grp [ ] Parameters None Displays information about all the bandwidth-grp numbers. Displays information about the specified bandwidth-grp number. 1.
Page 441
show accelerate share-sp Description Displays the session information for an SP of the partner device, which has been acquired by a local SP and communication between SPs. Input mode SP user mode and SP administrator mode Syntax show accelerate share-sp Parameters None Notes...
Page 442
: Connection source IP addresses when connection is requested from the IP addresses not set by the share-sp command. Up to eight of them are displayed. Those displayed once are deleted. Stop showing after (10) : Displayed when the number of addresses displayed in (9) reaching maximum number.
26.2.2 Operation Command Reference for the base software show ip cache policy Description Displays route information and status for policy-based routing list information. Input mode User mode and administrator mode Syntax show ip cache policy [] [track-object [
