Tuesday, November 13, 2018

Does Huawei GPON ONT HS8145V Support WLAN 802.11ac?

Huawei GPON ONT HS8145V is Huawei high-end GPON ONT, support 802.11ac dual band 2.4G/5G WIFI, with 4*GE+1*POTS+1*USB interface, Huawei Logo, English version. 

Also it supports IPv4 and IPv6.



What are the security features of Huawei S5720-36C-PWR-EI-AC?


What are the security features of Huawei S5720-36C-PWR-EI-AC?
  • Hierarchical user management and password protection
  • DoS attack defense, ARP attack defense, and ICMP attack defense
  • Binding of the IP address, MAC address, interface number, and VLAN ID of a user
  • Port isolation, port security, and sticky MAC
  • MAC Forced Forwarding (MFF)
  • Blackhole MAC address entries
  • Limit on the number of learned MAC addresses
  • IEEE 802.1x authentication and the limit on the number of users on an interface
  • AAA authentication, RADIUS authentication, HWTACACS+ authentication, and NAC SSH v2.0
  • Hypertext Transfer Protocol Secure (HTTPS)
  • CPU defense; Blacklist and whitelist; MACSec ready

What is the Working Principle and Signal Flow of Huawei STM-4 service board SLD4A?

SLD4A consists of the O/E converting module, CDR module, SDH overhead processing module, logic and control module, and power module. 
SLD4A can apply to Huawei MSTP equipment OSN1500B, OSN2500, OSN3500 and OSN7500.

Figure 1 shows the functional block diagram of the SLD4A.
Figure 1 Functional block diagram of the SLD4A
The functional modules of the STM-4 units are described as follows:

O/E Converting Module

  • Converts the received optical signals into electrical signals, in the receive direction.
  • Converts the electrical signals into SDH optical signals, and then sends the SDH optical signals to fibers for transmission, in the transmit direction.
  • The SPI detects the R_LOS alarm and provides the laser shut down function.

CDR Module

This module restores the clock signal.

SDH Overhead Processing Module

this module includes the RST, MST, MSA, and HPT sub-modules. This module provides the inloop and outloop functions.
  • RST sub-module
    • In the receive direction, the RST sub-module terminates the regenerator section overhead (RSOH). That is, the RST sub-module detects the frame alignment bytes (A1 and A2), descrambles all the bytes except the first line of the RSOH, restores and checks the regenerator section trace byte (J0), and checks the B1 byte.
    • In the transmit direction, the RST sub-module generates the RSOH. That is, the RST sub-module writes bytes such as A1, A2, and J0, calculates and writes the B1 byte, and scrambles all the bytes except the first line of the RSOH.
  • MST sub-module
    • In the receive direction, the MST sub-module terminates the multiplex section overhead (MSOH). That is, the MST sub-module generates the multiplex section-alarm indication signal (MS_AIS) alarm and detects the multiplex section-remote defect indication (MS_RDI) alarm after detecting the K2 byte, and detects the multiplex section-remote error indication (MS_REI) alarm and generates the B2-excessive errors (B2_EXC) alarm after checking the B2 byte.
    • In the transmit direction, the MST sub-module generates the MSOH. That is, the MST sub-module writes bytes such as E2, D4-D12, K1, K2, S1, and M1, and calculates and writes the B2 byte.
  • MSA sub-module
    • In the receive direction, the MSA sub-module de-interleaves the administration unit group (AUG), divides an AUG into N AU-4s, detects the administration unit-loss of pointer (AU_LOP) alarm and the administration unit-alarm indication signal (AU_AIS) alarm, and performs pointer justifications.
    • In the transmit direction, the MSA sub-module assembles the AUG and generates the AU-4. N AU-4s are multiplexed into an AUG through byte interleaving.
  • HPT sub-module
    • In the receive direction, the HPT sub-module terminates the path overhead (POH). That is, the HPT sub-module detects the higher order path-remote error indication (HP_REI) alarm after checking the B3 byte, generates the higher order path-trace identifier mismatch (HP_TIM) alarm and the higher order path-signal label mismatch (HP_SLM) alarm and detects the higher order path-remote defect indication (HP_RDI) alarm after detecting the J1 and C2 bytes, and generates the higher order path-unequipped (HP_UNEQ) alarm after detecting the C2 byte.
    • In the transmit direction, the HPT sub-module generates the POH. That is, the HPT sub-module writes bytes such as J1 and C2, and calculates and writes the B3 byte.

Logic and Control Module

  • Manages and configures the other modules of the board.
  • Performs inter-board communication through the internal Ethernet interface.
  • Traces the clock signal from the active and standby cross-connect units.
  • Controls the laser.
  • Passes the orderwire and ECC bytes through an ADM that consists of two paired slots when the GSCC is not in position.
  • Selects the clock signal and frame header signal from the active and standby cross-connect units.
  • Controls the indicators on the board.

Power Module

It converts the –48 V/–60 V power supply into the DC voltages that the modules of the board require.

What Is the Bandwidth Limitation on Huawei Switch Subcards?

The subcards in the front slot and rear slot use the same chip that provides 4x10 Gbit/s
bandwidth. Therefore, S5700-EI Switch or S5700-SI stacks set up through stack cards have the
following limitations:
A stack card can be used with a 2 x 10G subcard. The two stack interfaces on the stack card
occupy 20 Gbit/s bandwidth, and the 2 x 10G subcard occupies 20 Gbit/s. A stack subcard
cannot be used with a 4 x GE subcard. The GE interfaces on the 4 x GE subcard are actually
10GE interfaces with their rates limited, so the actual bandwidth of the subcard is 4x10
Gbit/s. This subcard occupies all the 4x10 Gbit/s bandwidth of the chip, and thus there is no
available bandwidth for the stack card.

What is the Hardware Configuration of Huawei DSLAM MA5616?

In Huawei MA5616 chassis, slot 0 houses the control board, slots 1-4 service boards, and slot 5 power board.
MA5616s support H831MABA and H831MABB backplanes. If an MA5616 is required to support vectoring, configure an H831MABB backplane for it..
Figure 1 shows the layout of the MA5616 chassis.
Figure 1 Layout of the MA5616 chassis, service boards can be ADSL2+ or VDSL2 board, like ADLE VDLE board.
Board configuration and slot restriction in the MA5616 chassis


Thursday, November 8, 2018

Troubleshooting Case For CRC Issue Between Switch And DWDM

Problem Description:
A bank Customer report that there are CRC frame in Huawei Switch S7700 (connect to DWDM 1800), but the CRC do not increase all the time, Customer replaced trail fiber and Optical module, but the problem couldn’t be solved.
CRC error received in Switch (D side):
CRC ERROR transmitted in 1800 (D side):
Topology:

Troubleshooting process:
1.      The optical module and fiber trail in D site has been replaced but problem is not solved, so faulty should not be on site D (including Switch and 1800).
2.      Check DWDM performance, the error after FEC in the direction from M to D is 0, the DWDM channel quality is very good. Problem is not found till now.
3.      Discuss with R&D expert, DWDM can check CRC but it will transmits the CRC error frames instead of dropping them, so the CRC error frames may come from site M.
4.      All the CRC counter is set to 0, after one day time, the result will be clear that where are the CRC frames produced.
5.      After one day, 11 CRC frames received in Switch(D site)
Check DWDM side:
D side transmitted 10949 bytes bad packets to Switch:
In M side, DWDM received 10949 bad bytes from Switch:
So the counter as bellow picture. It is easy to confirm the problem between DWDM and Switch in M site produce the CRC frame.

Solution:
Replace the optical module and fiber between DWDM and Switch in M site.

What do we learn from the case?
In Huawei OTN equipment, bit transparently transmitted mode can check CRC too, but even if CRC frame is found, OTN will continue to transmit instead of drop it. So in this mode, we can use the CRC counter function to help to do troubleshooting where produce CRC frames.

GPON, XG-PON, XGS-PON, What is the difference?

Specification Differences Between 10G GPON and GPON

The following table lists specification differences between the two technologies.

Huawei MA5683T 5680T and MA5800 series OLT all support GPON and XGPON. Huawei GPON boards and XGPON boards are in bulk supplied in Thunder-link.com. If you have needs, you can contact Daisy@thunder-link.com for more details.

Tuesday, November 6, 2018

What kind of modules that TN13LSXB can support on its client-side and WDM-side?

Huawei 10G turnable transponder TN13LSXB client side and WDM side module are pluggable, and it can applied to Huawei OSN6800 and OSN8800.

Client-side modules supported:

10 Gbit/s Multirate-10 km-XFP
10 Gbit/s Multirate-40 km-XFP
10 Gbit/s Multirate-80 km-XFP
10 Gbit/s Single Rate -0.3 km-XFP
800 ps/nm-C Band (Odd & Even Wavelengths)-Fixed Wavelength-NRZ-PIN-XFP


WDM-side modules supported:
800 ps/nm-C Band (Odd & Even Wavelengths)-Fixed Wavelength-NRZ-PIN-XFP
800 ps/nm-C Band-Tunable Wavelength-NRZ-PIN-XFP

Why testing a traffic-policy applied on Huawei S5720 fails?

Device: S5720S-28X-LI-24S-AC

Issue Description
Customer claims that traffic-policy configured on Huawei S5720 switch does not take effect.
When customer pings a public IP address (e.g 8.8.8.8) using as a source local interface of S5720(e.g. 10.10.10.1), he receives a reply even if acl 3002 is configured to deny it.

acl number 3002
rule 10 permit ip destination 10.10.10.0  0.0.0.255 logging
rule 20 permit ip destination 10.20.10.0 0.0.0.255 logging
rule 30 deny ip logging
#
traffic classifier c1 operator and
if-match acl 3002
#
traffic behavior b1
permit
#
traffic policy p1
classifier c1 behavior b1
#
vlan 50
traffic-policy p1 inbound
transparent.gif Handling Process
When the peer device replies an ICMP reply packet, the destination IP will be 10.10.10.1.
10.10.10.1 will match ACL 3002(rule 30), but the traffic policy will not take effect because the packet destination IP is interface address of the switch.
There is a default ACL which is used to “catch” ICMP packets (whose destination IP is the IP address of the switch) to CPU.
The priority of the default ACL is higher than the configured traffic-policy. So the packets will not be dropped by traffic policy.
Note that the default ACL mentioned above only takes effect for ICMP packets whose final destination is the switch. For pass-by packets, the configured traffic-policy will take effect.
transparent.gif Solution
When we want to test a traffic-policy, we need to use a device connected behind the switch configured with the traffic-policy.

Questions and Answers about Huawei Switch

How Do I Configure Interfaces in a Batch?
To perform the same configurations on multiple interfaces, add these interfaces to a port
group to batch configure them. This can reduce the configuration workload.

Why Is Port Isolation Configured?
To save VLAN resources, enable port isolation to isolate interfaces in a VLAN. That is, you
can add interfaces to a port isolation group to implement Layer 2 or Layer 3 isolation between
these interfaces. Port isolation provides secure and flexible networking schemes for
customers.

How Can I Identify a Combo Port on a Switch like S6720S-26Q-EI-24S-AC?
You can use the following methods to identify a combo port on a switch:
1. Identify a combo port based on the interface identifier on the switch panel. If two ports
have the same ID but connects to different transmission media, the two ports are
multiplexed as a combo port.
2. Run the display interface command to display the combo port.
<HUAWEI> display interface gigabitethernet 0/0/1
...
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is
0025-9e80-2494
Port Mode: COMBO AUTO
Speed : 100, Loopback:
NONE
You can run the combo-port command to set the working mode of a combo port.
– COMBO AUTO: The combo port automatically selects the working mode.
– FORCE FIBER: The combo port is configured to work as an optical port.
– FORCE COPPER: The combo port is configured to work as an electrical port.

Thursday, November 1, 2018

Does Huawei MA5800 support the Multicast?

Yes, Huawei MA5800 series OLT supports Layer 3 multicast networking, also supports IPv4 PIM SSM.
  • Protocol Independent Multicast-Source-Specific Multicast (PIM-SSM) enables a user host to rapidly join a multicast group if the user knows a multicast source address. PIM-SSM sets up a shortest path tree (SPT) from a multicast source to a multicast group, while PIM-SM uses rendezvous points (RPs) to set rendezvous point trees (RPTs). Therefore, PIM-SSM implements a more rapid join function than PIM-SM.
  • Different from the any-source multicast (ASM) model, the SSM model does not need to maintain an RP, construct an RPT, or register a multicast source.
  • The SSM model is based on PIM-SM and IGMPv3. The procedure for setting up a multicast forwarding tree on a PIM-SSM network is similar to the procedure for setting up an SPT on a PIM-SM network. The receiver's DR, which knows the multicast source address, sends Join messages directly to the source so that multicast data streams can be sent to the receiver's designated router (DR).

What is the using rules of Huawei DWDM Tributary Board TTX

The available functional versions of the TTX board are TN54 and TN55.

Mappings Between the Board and Equipment


If there is a substitution relationship between two boards and one of the boards is used to replace the other board, the device initial version supported by the replaced board takes effect. For example, when you use 10x10G Tributary TN55TTX to replace TN54TTX, TN55TTX can be supported by V100R007C02.

  • For an enhanced OptiX OSN 8800 T64 subrack, the TTX board must work with TNK2USXH+TNK2UXCT boards.
  • For an enhanced OptiX OSN 8800 T32 subrack, the TTX board must work with the TN52UXCH or TN52UXCM board.
  • For an OptiX OSN 8800 T16 subrack, the TTX board must work with the TN16UXCM board.

Huawei DSLAM MA5616 Product Description

Huawei SmartAX MA5616 Multi-service access module is a leading remote multi-dwelling unit product, which provides various types of ports on the passive optical network (PON) and 10G GON and meet multiple service requirements. It applies in fiber to the building and fiber to the curb scenarios. It can also function as a mini-digital subscriber line access multiplexer or or multiservice access node.



Product Highlights

Support POTS Board, ADSL2+ board and VDSL2 board.



Can a Box Switch Record Logs and Alarms After a Loop Detection-enabled Interface Detects a Loop?

A fixed switch can record alarms but not logs after a loop detection-enabled interface detects
a loop. The configurations are as follows:

In V100R005 and V100R006, you can run the snmp-agent trap enable feature-name
ldttrap command to enable the alarm function for loop detection. If snmp-agent trap
enable has been configured globally, the alarm function has been enabled.

Loop detection and loopback detection have been available since V200R001. You can
run the snmp-agent trap enable feature-name ldttrap command to enable the alarm
function for loop detection and run the snmp-agent trap enable feature-name lbdt
command to enable the alarm function for loopback detection.

You can run the display trapbuffer command to view alarms.

More related:

Huawei 40G QSFP+ Switch

Huawei PoE Switch

What are the features of Huawei GPON ONT HS8145V?

Huawei GPON ONT HS8145V is Huawei high-end GPON ONT, support 802.11ac dual band 2.4G/5G WIFI, with 4*GE+1*POTS+1*USB interface, English version. 

  • Huawei GPON ONT HS8145V Optical Network Terminal
  • GPON ONT, 4*GE+1*POTS+1*USB, with 2.4G/5G WiFi
  • Support 802.11ac 
  • Support IPv4&IPv6
  • Connector type SC/UPC
  • Can be configured by OLT or Web or NMS
  • Routing function supported

Thursday, October 25, 2018

Traffic Policy Failed in Huawei S6720 Switch

Issue Description
Customer feedback that the traffic policy apply fail in Huawei S6720 200R009C00SPC500, and want to know the reason.
transparent.gif Alarm Information
=========================================================================
  ===============display traffic-policy applied-record===============
=========================================================================
#
-------------------------------------------------
  Policy Name:   af1
  Policy Index:  0
     Classifier:match-any     Behavior:af1
-------------------------------------------------
 *interface XGigabitEthernet0/0/2.1709
    traffic-policy af1 inbound 
      slot 0    :  fail
 *interface XGigabitEthernet0/0/2.3173
    traffic-policy af1 inbound 
      slot 0    :  fail
 *interface XGigabitEthernet0/0/2.3870
    traffic-policy af1 inbound 
      slot 0    :  fail
 *system
    traffic-policy af1 global inbound slot 0
      slot 0    :  success
-------------------------------------------------
  Policy total applied times: 4.
#
transparent.gif Handling Process
Step 1 check the traffic policy configuration as follow:

traffic behavior af1
 remark 8021p 1
#
traffic classifier match-any operator or
 if-match any
#
traffic policy af1 match-order config
 classifier match-any behavior af1
#

Step 2 check the port configuration as follow:

interface XGigabitEthernet0/0/2.1709
 mtu 1600
 qinq mapping vid 1710 map-vlan vid 1709
 traffic-policy af1 inbound
 mpls l2vc 10.3.1.4 152 tunnel-policy T1
#
interface XGigabitEthernet0/0/2.3173
 mtu 1600
 qinq mapping vid 1711 map-vlan vid 3173
 traffic-policy af1 inbound
 mpls l2vc 10.3.1.4 156 tunnel-policy T2
#
interface XGigabitEthernet0/0/2.3870
 mtu 1600
 qinq mapping vid 1712 map-vlan vid 3870
 traffic-policy af1 inbound
 mpls l2vc 10.3.1.4 158 tunnel-policy T3
#

Root Cause
The traffic behavior Remark 8021p and qinq mapping vid 1710 map-vlan vid 1709 conflict,It cause the fail.
transparent.gifSolution
The traffic behavior Remark 8021p and qinq mapping vid 1710 map-vlan vid 1709 both opreation for vlan, so it will conflict and cause the fail.
So we suggest customer change the traffic behavior for example remark dscp or others behavior

transparent.gifSuggestions
The conflict operation may cause the traffic policy fail. Before configuration suggest check our production document there have the detail limit description.

S5720-56C-HI-AC AP switch to Low frequency channel after set the calibrate 5G channel to high frequency channel

S5720-56C-HI-AC AP switch to Low frequency channel after set the calibrate 5G channel to high frequency channel
Some of the APs are still showing 5GHz on channel 36 (20MHz) after set the calibrate 5G channel to high frequency channel.
#
regulatory-domain-profile name default
  dca-channel 5g channel-set 100,104,108,112,116,120,124,128,149,153,157,161
  dca-channel 5g bandwidth 40mhz
#
e80a8bf292824645a9e691f555745bd9
1. Checking the regulatory-domain-profile, all of the channel is high frequency channle. And calibrate enable on the device. 
#
regulatory-domain-profile name default
  dca-channel 5g channel-set 100,104,108,112,116,120,124,128,149,153,157,161
  dca-channel 5g bandwidth 40mhz
#
2. Checking the channel switch of the AP, it shows that the switch reason is dfs, it means that the AP detect radar and after that the channel switch. It is normal that the AP switch channel when it detect radar signal. Current software version of the switch is S5720 V200R010C00SPC600 and it doesn't support radar channel choose and channel switch back, so after channel change to low channel, before next calibration, the AP will keep on low channel. 
25dfc8c790fc42e48d87d54f2d6c7c14
3. Recommend upgrade software of the switch to V200R011C10SPC600 and install patch V200R011SPH005. After upgrade,enable calibration bandwidth function, it is enable by default. With this way, after the AP detect radar signal, it will switch to other random channel, if the channel is low channel, the AC will enable calibrate bandwidth and change to high frequency channel. 
<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] regulatory-domain-profile name huawei
[HUAWEI-wlan-regulate-domain-huawei] dca-channel 5g bandwidth 40mh
Recommend upgrade software of the switch to V200R011C10SPC600 and install patch V200R011SPH005. After upgrade,enable calibration bandwidth function, it is enable by default. With this way, after the AP detect radar signal, it will switch to other random channel, if the channel is low channel, the AC will enable calibrate bandwidth and change to high frequency channel. 
<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] regulatory-domain-profile name huawei
[HUAWEI-wlan-regulate-domain-huawei] dca-channel 5g bandwidth 40mhz

The principles of DLAG feature of Huawei DWDM Equipment

When the main board like Huawei TN52SCC on Huawei OSN8800 or OSN6800  detects a failed port, the cross-connect board switches the services carried by the failed port from the main board to the slave board to protect the services.
Figure 1 shows the processing flow of a DLAG.
Figure 1 Processing flow of a DLAG 
In the transmit direction, the processing flow of the DLAG is described as follows:
  • The cross-connect board of NE1 transmits the services to the main board and slave board of the DLAG. Then, the main board and slave board of the DLAG transmit the services to the equipment at the opposite end.
  • When a link down failure, a board offline event, or a hardware failure occurs on the main board, the equipment at the opposite end receives the signals sent by the slave board.
In the receive direction, the processing flow of the DLAG is described as follows:
  • The main board and slave board of NE1 transmit the main services and slave services sent from the opposite end respectively to the cross-connect board of NE1. The cross-connect board of NE1 selects services between the main services and slave services.
  • When the main board works normally, the cross-connect board selects the services sent by the main board.
  • When the main board detects a link down failure, a board offline event, or a hardware failure, the cross-connect board selects the services sent by the slave board to protect the services.

How to troubleshoot the fault through the CLI when the service board of Huawei MA5600T/MA5603T/MA5608T is in failed state?

Location Method

When the service board of Huawei MA5600T/MA5603T/MA5608T is in the failed state, locate the fault according to the following procedure:
  1. Check whether the type of the actual used service board is the same as that configured on the system.
  2. Check whether the service board is firmly inserted.
  3. Check whether the power supply of the cabinet is normal.
  4. Replace the original service board with a new service board and then check whether the new service board can start normally.
icon-notice.gif NOTICE:
To facilitate fault report, save the results of the following steps.
When you remove and insert a service board, antistatic measures must be taken.

Procedure

  1. Run the display board frameid/slotid command to query the name of the faulty board, check the type of the actual board inserted in the subrack, and check whether their types are the same.
    • If their types are the same, go to 4.
    • If their types are different, proceed to 2.
  2. If it is confirmed that system configurations are correct, insert a board of the correct type into the slot and then proceed to the next step. If it is confirmed that system configurations are incorrect, run the board delete command to delete the original configurations, after the system displays a message indicating that the board is auto discovered, run the board confirm command to confirm the board and then proceed to the next step.
  3. Wait five minutes and then check whether the fault is rectified.
    • If the fault is rectified, go to 11.
    • If the fault persists, proceed to 4.
  4. Check whether the service board is firmly inserted.
    • If the service board is firmly inserted, go to 6.
    • If the service board is not firmly inserted, remove and insert the service board, and ensure that the service board is firmly inserted. Then, proceed to 5.
  5. Check whether the fault is rectified.
    • If the fault is rectified, go to 11.
    • If the fault persists, proceed to 6.
  6. Check whether the power supply of the cabinet is normal.
    • If the power supply of the cabinet is normal, go to 8.
    • If the power supply of the cabinet is abnormal, check the device supplying power and enable this device to supply power in the normal state. Then, proceed to 7.
  7. Check whether the fault is rectified.
    • If the fault is rectified, go to 11.
    • If the fault persists, proceed to 8.
  8. Replace the original service board, and then check whether the new service board can start normally.
    • If the new service board can start normally, it indicates that service board is faulty. In this case, replace the original service board with a new one. Then, go to 11.
    • If the new service board cannot start normally, proceed to 9.
  9. In the diagnosis mode, run the display reset-record command.
  10. The fault is rectified.