ip10 cli procedures 8 09

FibeAir IP-10

CLI (Command Line Interface)

Procedures

Part ID: BM-???-0 Doc ID: DOC-000????? Rev a.00

August 2009

Notice This document contains information that is proprietary to Ceragon Networks Ltd.

No part of this publication may be reproduced, modified, or distributed without prior written authorization of Ceragon Networks Ltd.

This document is provided as is, without warranty of any kind.

Registered TradeMarks Ceragon Networks is a registered trademark of Ceragon Networks Ltd.

FibeAir is a registered trademark of Ceragon Networks Ltd.

CeraView is a registered trademark of Ceragon Networks Ltd.

Other names mentioned in this publication are owned by their respective holders.

TradeMarks CeraMapTM, PolyViewTM, EncryptAirTM, ConfigAirTM, CeraMonTM, EtherAirTM, and MicroWave FiberTM, are trademarks of Ceragon Networks Ltd.

Other names mentioned in this publication are owned by their respective holders.

Statement of Conditions The information contained in this document is subject to change without notice.

Ceragon Networks Ltd. shall not be liable for errors contained herein or for incidental or consequential damage in connection with the furnishing, performance, or use of this document or equipment supplied with it.

Information to User Any changes or modifications of equipment not expressly approved by the manufacturer could void the users authority to operate the equipment and the warranty for such equipment.

Copyright 2009 by Ceragon Networks Ltd. All rights reserved.

Corporate Headquarters: Ceragon Networks Ltd. 24 Raoul Wallenberg St. Tel Aviv 69719, Israel Tel: 972-3-645-5733 Fax: 972-3-645-5499 Email: [email protected] www.ceragon.com

European Headquarters: Ceragon Networks (UK) Ltd. 4 Oak Tree Park, Burnt Meadow Road North Moons Moat, Redditch, Worcestershire B98 9NZ, UK Tel: 44-(0)-1527-591900 Fax: 44-(0)-1527-591903 Email: [email protected]

North American Headquarters: Ceragon Networks Inc. 10 Forest Avenue, Paramus, NJ 07652, USA Tel: 1-201-845-6955 Toll Free: 1-877-FIBEAIR Fax: 1-201-845-5665 Email: [email protected]

APAC Headquarters: Ceragon Networks APAC (S'pore) Pte Ltd 100 Beach Road #27-01/03 Shaw Towers Singapore 189702 Tel.: 65 65724170 Fax: 65 65724199

Contents

General .......................................................................................................... 1

Basic Commands.......................................................................................... 1

Application Configuration............................................................................ 2

Setting IP Addresses .......................................................................................... 2

Adding Users....................................................................................................... 2

Ethernet Switch ................................................................................................... 2

Management Ports .............................................................................................. 3

VLAN Configuration............................................................................................ 5

QoS Configuration .............................................................................................. 5

Auxiliary Channels .............................................................................................. 8

Metro Switch and Port Type Configuration ...................................................... 9

Radio Script Configuration............................................................................... 10

NTP ..................................................................................................................... 11

SNMP.................................................................................................................. 12

FibeAir IP-10 CLI Procedures Guide 1

General This guide provides instructions for specific FibeAir IP-10 CLI based operations.

CLI (Command Line Interface) is used to perform IP-10 configuration and obtain system statistical and performance information.

Using the CLI, you can perform configuration operations for single IP-10 units, as well as configure several IP-10 units in a single batch command.

Basic Commands The following basic commands are available when you first log in, if you belong to the Operator user group:

ls List entities

get Get parameter

set Set parameter

help Help

cd Change directory

exit Exit CLI

logout Logout from CLI

cli-ver CLI version

cls Clear screen

shell Enter secondary shell

write Write the current switch configuration to the configuration file

show-tree Show entity tree

find Search for a string in the parameter's entity name and information fields

lsp List entity parameters and commands

In addition, you can use the up and down arrow keys, or the q key, when the word END appears at the end of the screen.

Note: To perform the operations in this guide, you should log in as follows:

User: admin or operator Password: admin


Application Configuration

Setting IP Addresses

To define a new IP address, do the following:

1. Log in as follows:

User: admin or operator Password: admin

2. At the command prompt, type: cd management\networking\ip-address\, and press Enter.

3. Type: get ip-address, and press Enter. This will give you the current IP address.

4. Type: set ip-address (the new IP address), and press Enter.

Adding Users

To define a new user, do the following:

1. Log in.

2. At the command prompt, type: cd management\mng-services\users\, and press Enter.

3. Type: add-user , and press Enter.

4. Type the password for the new user.

Ethernet Switch

The Ethernet Switch menu includes the Switch Configuration, STP Protocol, STP Configuration, and QoS & Rate Limiting items.

The Ethernet switching methods include:

Single Pipe - Ethernet switching is disabled, whereby only a single Ethernet interface is used for traffic and the unit operates as a point-to-point microwave Ethernet radio.

Managed Switch - For Layer 2 802.1Q switching.

Metro switch - Ethernet Q-in-Q provider switch is enabled.

To set the Ethernet switching method, do the following:


1. Log in.

2. At the command prompt, type: cd interfaces\ethernet\bridge\, and press Enter.

3. Type: set ethernet-application (Single pipe, Managed switch, or Metro switch), and press Enter.

4. The system will reset (automatically).

Management Ports

Setting the number of management ports

1. At the command prompt, type: cd /management/networking\, and press Enter.

2. Type: set number-of-ports (0-3), and press Enter.

Setting the management type (inband, outband, VLAN)

1. At the command prompt, type: cd /management/networking\, and press Enter.

2. Type set type < Inband or outband >, and press Enter.

If you choose inband, you should configure management VLAN id as follows:

a) At the command prompt, type: cd /management/networking\, and press Enter.

b) Type set VLAN (1-4090), and press Enter.

Port Configuration

Flow Control (Single Pipe only)

To enable or disable flow control, do the following

1. At the command prompt, type cd interfaces/ethernet/bridge/eth-port [port no.]/, and press Enter.

2. Type set flow-control , and press Enter.

Managed Switch Ethernet Ports

To enable or disable port admin, do the following:


2. Type set admin , and press Enter.


To set port speed rate do the following:


2. Type set ethernet-rate (10, 100 or 1000 Mbps), and press Enter.

To set auto negotiation on/off, do the following:


2. Type set auto-negotiation , and press Enter.

To set the port type, do the following:


2. Type set type , and press Enter.

To set the default VLAN ID, do the following:


2. Type set VLAN (1-4090), and press Enter.

To enable or disable port learning, do the following:


2. Type set learning , and press Enter.

To add, remove, accept VLANS, do the following:

1. The port type must be trunk.


3. Type set-allowed-VLANS , and press Enter.

4. Type set-allowed-VLANS , and press Enter.


VLAN Configuration

To add, remove, enable, or disable VLANs, do the following:

1. At the command prompt, type cd interfaces/ethernet/bridge/, and press Enter.

2. Type VLAN , and press Enter.

To add or change the VLAN name, do the following:

1. At the command prompt, type cd interfaces/ethernet/bridge/, and press Enter.

2. Type VLAN name , and press Enter.

QoS Configuration

Ingress Classifier

To set classify initial, do the following:


2. Type set qos-classify-initial < ip-tos, ip-tos-over-vlan-pbits, port, vlan-pbits, vlan-pbits-over-ip-tos>, and press Enter.

To set classify vid override, do the following:


2. Type set qos-classify-vid-override , and press Enter.

To set classify mac da override, do the following:


2. Type set qos-classify-mac-da-override , and press Enter.

To set classify default, do the following:


2. Type set qos-classify-default, and press Enter.


Egress Scheduler

To set Egress scheduler, do the following:


2. Type: set qos-scheduling-scheme < all-queues-hrr, all-queues-strict, fourth-and-third-queues-strict, fourth-queue-strict >, and press Enter.

Egress Shaper

To set egress shaper, do the following:

1. At the command prompt, type: cd interfaces/ethernet/bridge/eth-port [port no.]/, and press Enter.

2. Type: set qos-egress-shaper on/off, and press Enter.

3. Type: set qos-egress-shaper-rate , and press Enter.

Policer

To add/remove Policer, do the following:

1. At the command prompt, type: cd interfaces/ethernet/bridge/, and press Enter.

2. Type: qos-policer , and press Enter.

To add a class to the Policer, do the following:


2. Type: qos-policer-class , and press Enter.

3. Type: qos-show-policers to verify the data, and press Enter.

QoS Tables

To set VLAN Pbits Priority Remap Table, do the following:

1. At the command prompt, type: cd interfaces/ethernet/bridge/eth-port [port no.]/, and press Enter.

2. Type: qos-set-vlan-pbits-prio-remap , and press Enter.


To set VLAN ID to Queue Table, do the following:


2. Type: qos-vlan-to-queue set/remove , and press Enter.

To set VLAN Pbits to Queue Table, do the following:


2. Type: qos-set-vlan-tag-pbit-val , and press Enter.

To set IP Pbits to Queue Table, do the following:


2. Type: qos-set-ip-pbit-val , and press Enter.

To set IP priority options, do the following:


2. Type: set qos-ip-tos-tc-pbits-option , and press Enter.

To set static MAC table, do the following:


2. Type: qos-static-mac-priority set/remove , and press Enter.

To set Queue Weights table, do the following:


2. Type: qos-set-scheduler-q-weight , and press Enter.


Auxiliary Channels

Wayside Channel

At the command prompt, type: cd interfaces/wayside/, and press Enter.

To set port admin, do the following:

1. Type: set admin , and press Enter.

To set port rate:

1. Type: set ethernet-rate , and press Enter.

To set auto negotiation on/off:

1. Type: set auto-negotiation , and press Enter.

To set port duplex :

1. Type: set duplex , and press Enter.

User Channel

1. At the command prompt, type: cd interfaces/auxiliary/user-channel/, and press Enter

To set port admin:

1. Type: set admin , and press Enter.

To set port type:

1. Type: set type asynchronous-, and press Enter.

Automatic State Propagation, 1+0 Configuration Only

At the command prompt, type: cd interfaces/ethernet/, and press Enter.

To set Automatic state Propagation (also called GBE-mute-override):

1. Type: set-gbe-mute-override , and press Enter.


Ethernet Shutdown (Rx) Profile Threshold (when ACM is enabled)

At the command prompt, type: cd radio/mrmc/, and press Enter

To set Ethernet shutdown (Rx) profile threshold:

1. Type: set eth-shutdown-threshold-profile < profile-0 to 7 >, and press Enter.

Metro Switch and Port Type Configuration

To set Metro Switch:

1. At the prompt (IP-10:/>), type cd interfaces/ethernet/bridge/, and press Enter.

2. At the new prompt, type set ethernet-application metro-switch, and press Enter.

3. Confirm by typing yes, and press Enter.

The system will restart automatically.

To set the port type (CN/PN):

1. At the prompt (IP-10:/>), type cd interfaces/ethernet/bridge/eth-port[port no.], and press Enter.

2. At the new prompt, type set type customer-network (or provider-network), and press Enter.

To set Default VLAN on CN ports:


2. At the new prompt, type set vlan , and press Enter.

To set Allowed VLANs on PN ports:


2. At the new prompt, type set-allowed-vlans , and press Enter.


Radio Script Configuration To set the radio script:

1. At the prompt (IP-10:/>), type cd radio/mrmc/, then press Enter.

2. At the new prompt, type change-script-cmd < Script's name> < Operational mode> disable-adaptive-power, then press Enter.

Parameter values for the radio script include:

Script Name

10Mbps-6.5MHz-4QAM-Grade-1

155Mbps-26MHz-128QAM-Grade-1






ACM_181Mbps-26MHz-256QAM-Grade-1

ACM_367Mbps-52MHz-256QAM-Grade-1

ACM_42Mbps-6.5MHz-256QAM-Grade-1

ACM_87Mbps-12.5MHz-256QAM-Grade-1

Operational Mode

acm-adaptive-mode

acm-fixed-mode

regular-mode (for non ACM scripts)

Maximum Profile (fixed for fixed mode in ACM scripts and profile-0 for regular scripts)

profile-0

profile-1

profile-2

profile-3

profile-4

profile-5

profile-6

profile-7


NTP

To set NTP service enable/disable:

1. At the command prompt, type: cd /management/mng-services/time-service/ntp, and press Enter.

2. Type set server 192.168.1.100, and press Enter.


To set NTP offset from GMT:

1. At the command prompt, type: cd management/mng-services/time-service/, and press Enter.

2. Type set gmt-offset-hours 2, and press Enter.

3. Type set gmt-offset-minutes 0, and press Enter.

To set Daylight Saving Time:

1. At the command prompt, type: cd /management/mng-services/time-service, and press Enter.

2. Type set dst-start-month Apr, and press Enter.

3. Type set dst-start-day 1, and press Enter.

4. Type set dst-end-month Nov, and press Enter.

5. Type set dst-end-day 1, and press Enter.

To set Date and Time, whereby the time and date format are day-month-year,hours:mins:secs:

1. At the command prompt, type : cd /management/mng-services/time-service, and press Enter.

2. Type set time-and-date 10-3-2009,15:00:00, and press Enter.


SNMP

To set SNMP enable/disable:

1. At the command prompt, type: cd /management/mng-protocols/snmp, and press Enter.


To set the SNMP version:


2. Type set version v3 (or v1 for SNMP version 1), and press Enter.

SNMP Parameters for SNMP Version 3

To set the security mode to authentication, and the authentication algorithm to sha:


2. Type change-user-settings user_name_example authentication sha, and press Enter.

3. Enter the SNMPv3 Password: user_password_example, and press Enter.

To set the security mode to authentication-privacy, and the Authentication algorithm to md5:


2. Type change-user-settings user_name_example authentication-privacy md5, and press Enter.

3. Enter the SNMPv3 Password: user_password_example, and press Enter.

To set the security mode to no-security, and the authentication algorithm to no authentication:


2. Type change-user-settings no-se-user no-security no-auth, and press Enter.

To set the telnet protocol to enable/disable:

1. At the command prompt, type: cd /management/mng-protocols, and press Enter.

2. Type set telnet-admin , and press Enter.


To set web GUI to enable/disable:


2. Type set web-admin , and press Enter.

The following steps are used to define the web protocol that will work with HTTPS

It is important to note the order!

Step 1: Create the NE certificate based on the NE's public key. The public key receives the public key file through upload.

1. At the command prompt, type: cd /platform/idc-board, and press Enter.

2. Type upload-archive public-key, and press Enter.

You can find your public_key file (such as 192.168.1.18_pub_key) in your host path directory.

Step 2: Download the NE certificate.

Note: Before you download the certificate, copy your NE certificate to your ftp host path directory.


2. Type set security-file-format , and press Enter.

3. Type set security-file-type , and press Enter.

4. Type set security-file-name (your certificate file name), and press Enter.

5. Type download-archive security-file, and press Enter.

Step 3: (Optional) Download the NE CA's certificate.


2. Type set security-file-format , and press Enter.

3. Type set security-file-type , and press Enter.

4. Type set security-file-name (your CA-certificate file name), and press Enter.

5. Type download-archive security-file, and press Enter.

Step 4: (Optional) Set the web-ca-certificate-admin parameter to enable.



2. Type set web-ca-certificate-admin /, and press Enter.

Step 5: Set the web-protocol parameter to https.


2. Type set web-protocol /, and press Enter.

Note: Enter the URL in the WEB GUI, such as https://192.168.1.1 to use the https protocol.

CFM

Domain

Under service-oam level

Creation: IP-10:/interfaces/ethernet/bridge/service-oam> domain add

Deletion: IP-10:/interfaces/ethernet/bridge/service-oam> domain remove

Domain & Association


Creation: IP-10:/interfaces/ethernet/bridge/service-oam> domain add

Deletion: IP-10:/interfaces/ethernet/bridge/service-oam> domain remove

Association

Under service-oam level:

Creation IP-10:/interfaces/ethernet/bridge/service-oam> association add

Deletion IP-10:/interfaces/ethernet/bridge/service-oam> association remove


CCM


On IP-10:/interfaces/ethernet/bridge/service-oam> ccm-admin enable

Off IP-10:/interfaces/ethernet/bridge/service-oam> ccm-admin disable

Local MEP

Under interfaces level

Creation

1. IP-10:/interfaces/ethernet/bridge/eth-port [x]> mep set < MEP ID [1-8191]> < Domain level [1-7]> < Direction [up\down]>

2. IP-10:/interfaces/ethernet/bridge/eth-port [x]> mep set < MEP ID [1-8191]> < Domain level [1-7]> < Direction [up\down]>

Deletion

IP-10:/interfaces/ethernet/bridge/eth-port [x]> mep remove < MEP ID [1-8191]> < Domain level [1-7]> < Direction [up\down]>

Remote MEP


Creation

1. IP-10:/interfaces/ethernet/bridge/service-oam> remote-mep set

2. IP-10:/interfaces/ethernet/bridge/service-oam> remote-mep set

Deletion

IP-10:/interfaces/ethernet/bridge/service-oam> remote-mep remove


MIP

Under interfaces level

Creation IP-10:/interfaces/ethernet/bridge/eth-port[x]> mip add

Deletion IP-10:/interfaces/ethernet/bridge/eth-port[x]> mip remove

Loopback (Ping)


1. IP-10:/interfaces/ethernet/bridge/service-oam> ping mac-address md-name

2. IP-10:/interfaces/ethernet/bridge/service-oam> ping mac-address md-name

3. IP-10:/interfaces/ethernet/bridge/service-oam> ping mac-address md-level

4. IP-10:/interfaces/ethernet/bridge/service-oam> ping mac-address md-level

5. IP-10:/interfaces/ethernet/bridge/service-oam> ping mep-id md-name

6. IP-10:/interfaces/ethernet/bridge/service-oam> ping mep-id md-name

7. IP-10:/interfaces/ethernet/bridge/service-oam> ping mep-id md-level

8. IP-10:/interfaces/ethernet/bridge/service-oam> ping mep-id md-level


Link Trace


1. IP-10:/interfaces/ethernet/bridge/service-oam> linktrace mac-address md-name

2. IP-10:/interfaces/ethernet/bridge/service-oam> linktrace mac-address md-name

3. IP-10:/interfaces/ethernet/bridge/service-oam> linktrace mac-address md-level

4. IP-10:/interfaces/ethernet/bridge/service-oam> linktrace mac-address md-level

5. IP-10:/interfaces/ethernet/bridge/service-oam> linktrace mep-id md-name

6. IP-10:/interfaces/ethernet/bridge/service-oam> linktrace mep-id md-name

7. IP-10:/interfaces/ethernet/bridge/service-oam> linktrace mep-id md-level

8. IP-10:/interfaces/ethernet/bridge/service-oam> linktrace mep-id md-level

Auto Link Trace

Under service-oam level:

Creation

1. IP-10:/interfaces/ethernet/bridge/service-oam> auto-linktrace add md-name

2. IP-10:/interfaces/ethernet/bridge/service-oam> auto-linktrace add md-name

3. IP-10:/interfaces/ethernet/bridge/service-oam> auto-linktrace add md-level

4. IP-10:/interfaces/ethernet/bridge/service-oam> auto-linktrace add md-level

Deletion

1. IP-10:/interfaces/ethernet/bridge/service-oam> auto-linktrace remove md-name

2. IP-10:/interfaces/ethernet/bridge/service-oam> auto-linktrace remove md-level


CCM Interval


Modification IP-10:/interfaces/ethernet/bridge/service-oam> ccm-interval Interval time; 1-sec 10-sec 1-min 10-min

Auto Link Trace Interval


Modification IP-10:/interfaces/ethernet/bridge/service-oam> set auto-linktrace-interval [seconds] Range; 60-3600

Remote MEP learning time


Modification IP-10:/interfaces/ethernet/bridge/service-oam> set remote-meps-learning-time [seconds] Range; 60-3600

ip10 cli procedures 8 09

Documents

trademarks of ceragon

ceragon networks uk

fibeair fax

apac headquarters

uk tel

european headquarters

corporate headquarters

tel aviv